Recent comments in /f/programming
twovests OP wrote
Reply to comment by cute_spider_ni_srsly in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
I like this! You're making the plaintext password just to satisfy the awful requirement and then do everything else the right way.
cute_spider_ni_srsly wrote
Reply to comment by twovests in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
Here's the basic pitch:
There are two databases for passwords. One of which is turbo isolated and basically is write-only. Besides the fact that you can write the (decrypted) passwords to it, it basically does nothing. When a plaintext password must be recovered from it, it's a whole process with paperwork.
The server which actually does the password validation, account information, and day-to-day tasks which gets interaction from end users, that one does not use plaintext in any way shape or form.
cute_spider_ni_srsly wrote
Reply to comment by twovests in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
im still working on this answer but it is hard.
devtesla wrote (edited )
Reply to comment by hollyhoppet in Anyone heard anything (good or bad) about backblaze aka b2? by hollyhoppet
Ohh I was meaning that Cloudflare could handle b2's latency. Yea I know it's a different reason why we don't have thumbnails.
hollyhoppet OP wrote
Reply to comment by devtesla in Anyone heard anything (good or bad) about backblaze aka b2? by hollyhoppet
We're not on cloudflare, but the unsatisfactory performance doesn't really have to do with latency on the side of the person accessing the website. I tried an algorithm that went to all the sources for posts again to re-make thumbnails, which just takes too long because it's too connections to too many different downstream servers. This was to be a quick fix even if it's a little discourteous to the sites that hold the images we make into thumbnails as we lose thumbnails possibly a few times a day.
My choices now are either to make an image view that populates itself with the image once the thumbnail is downloaded from the site the post links to using some sort of eventing mechanism, or just do it the right way and cache the images ourselves somewhere. I assess both to take an equal amount of time so I'm going to do it the right way :P
As for latency issues if we use b2... from what I can tell they used to be just backup stuff and are now trying to compete with s3-alikes so maybe they're doing better on that front these days. I'm willing to take the risk considering the savings that could be made.
devtesla wrote (edited )
I've seen some rumblings that it has latency problems, which kinda makes sense it's more of a backup service than anything else. I think it's worth a shot for our tiny website.
Are we on Cloudflare? That would help with the latency.
no_defun_allowed wrote
Reply to comment by hollyhoppet in moar like hypertext MISTAKE language amiright? by hollyhoppet
hi i'd like to talk about s-expressions: Super EXcellent Parentheses wRiting things (aka ESSIONS)
flabberghaster wrote
JSON? What's that, JUST STOP OH NO!?
voxpoplar wrote
more like javashit
musou wrote
u right 100%
hollyhoppet OP wrote
Reply to comment by devtesla in moar like hypertext MISTAKE language amiright? by hollyhoppet
yeah we really should have just skipped to json
devtesla wrote
Reply to comment by cute_spider_ni_srsly in moar like hypertext MISTAKE language amiright? by hollyhoppet
html came first, HOWEVER: xml is a mistake
hollyhoppet OP wrote (edited )
Reply to comment by devtesla in moar like hypertext MISTAKE language amiright? by hollyhoppet
yeah deep down i'm just jealous of people who do
cute_spider_ni_srsly wrote
based off of eXtensible MISTAKE Language
devtesla wrote
I like html :/
musou wrote
relatable
mm_ wrote
love it
twovests OP wrote
Reply to comment by cute_spider_ni_srsly in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
Eee I'm so happy someone asnswered this seriously
twovests OP wrote
Reply to comment by cute_spider_ni_srsly in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
I supposed a system that can produce plaintext quickly works. (E.g. the database is protected with a master password.)
cute_spider_ni_srsly wrote
Reply to comment by cute_spider_ni_srsly in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
Regardless I would attempt to hire as a consultant an architect from Google Chrome team who has worked with this system before. Since you can get your saved passwords plaintext on any Chrome browser that you're logged into and they haven't had a major breach in that system that we know of yet, we should think about what Google does to this end.
cute_spider_ni_srsly wrote
Reply to You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
Just to be clear: I must store the passwords in plaintext. I'm not allowed to store the passwords in a system which can produce plaintext. Is that right?
no_defun_allowed wrote
Reply to You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
It's totally accidental server burning time!
musou wrote
Reply to You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
i'd honestly rather quit than build this even if it meant i couldn't pay rent.
flabberghaster wrote
Reply to comment by devtesla in You're working for a big company making a new service. Requirement: You need to store passwords in plaintext. Resources: As many as you need. What security measures do you take here? by twovests
Factor 1: u want to. Factor 2: they want to
Access granted
emma wrote
Reply to $('.vote-up').map((_, elem) => (elem.title === "Upvote" ? elem.click() : null)); by musou
feels better