🎓 Dr. Freemo 🇳🇱 @freemo@social.cleverlibre.org

never have I seen so many nonsense words used to describe literally nothing, that has no use, and doesnt challenge anything... atleast NFT's use their energy to do something useful, this literally is just a complete waste of energy and time. It randomly generates a gradient and puts a random UUID over it, then deletes it, thats it, how is this in any way useful.

@swashberry only thing I **dont** recommend is mastodon.art.. they are extremely aggressive with blocking instances and similarly oppressive to their own users. A very toxic environment over there.

@mur2501

technically it was dildos and what else are you suppose to throw in a pit of cocks?

@trinsec

@trinsec

sea water is just going to empower me!

@mur2501

Where does a pilot keep their sex toys?

In the cockpit!

::badum tish::

@js290

random twitter post (which dont disagree with anything I just said mind you) without you actually stating what your point is doesnt really help with anything. As i stated before, if you want to make a point, make it.

it feels like maybe you dont understand the topic and are just sharing random links because a few words sound relevant or something.. I dunno if you dont explain your point when you share links they are just noise.

@icedquinn @funny

@Ravenhelm anytime.

@Ravenhelm well keep in mind there is no security advantage with this approach, in fact if anything is marginally less secure (for aforementioned reasons).

The advantage here is simply that you can not lose your passwords, which otherwise would need to be stored in a database. Thats not a security feature though..

So it wouldnt really target security minded people at all, it would target people who 1) dont like to use an online service to store the DB for them (because they cost money or whatever) 2) want the convenience of not needing to sync up and backup the DB themselves between devices.

So in my eyes any solution cant sacrifice convenience or else it will defeat the whole purpose.

@basil

Someone needs to do a study on vibrating dutch nipples, this sounds like an interesting medical oddity.

@ranx @stux

@Ravenhelm yea I thought of that... frankly I think that would be very impractical. I can not honestly tell you how many times I changed my password on most sites, can you?

I hope everyone had a fantastic Pi day. Its always a bit sad when the holiday season is over though. I will miss the pi day carolers and all the pi day treats and lawn decorations.. cant wait till next year!

#math #maths #mathematics

@2ck Yea, afterall that is kinda the whole point of the cookies, to track you around the whole internet so sites can get an idea of where you go and customize ads.

@Ravenhelm

#3 you could resolve by having a community maintained public repository of password rules that is per-site.. this way the data is stored, but nothing personal and is shared globally, so you cant lose it.

#2 can just be not handling usernames at all, the user needs to remember those (and are usually recoverable or simply emails)..

#1 I dont have a solution for, it could be the software just doesnt support those websites or doesnt support changing your password, though that is a fairly restrictive property and reduces security.

@Ravenhelm

Re #1, if your hashing and storing a username and counter, which are needed to generate the password, it seems you just defeated the entire purpose of the project, which is that you dont need to store to generate the password.

Same issue with #3, if you nee dto store things, you are entirely defeating the purpose.

@chris congrats

@ranx

TIL that dutch people are born with blurry nipples.

@stux

@Ravenhelm security wise it is fine if implemented properly, the key would be ensuring a secure master password is used, and using a cryptographic hash to generate the password which includes the master password seeded into the generation process along with the website as a token. No real security issues there.

Where you are likely to have problems are more technical ones like the following:

1) how do you handle sites that require a new password every so many months

2) what if people forget their usename

3) what if the password rules for a website happen to be obscure and the generator does not generate compliant passwords

There is only one security issue that is kinda obvious.. with traditional security managers one needs to steal both the master password AND the database, in this case one simply needs to steal your password, or guess at it, to get access. So if you pick a guessable or leaked password you are automatically compromised.