• 0 Posts
  • 794 Comments
Joined 1 year ago
cake
Cake day: June 30th, 2023

help-circle

  • Maybe it’s not about humans and never has been. Maybe by the time the gods realized how much of an issue humans were, we were already too widespread for them to destroy us without either running out of mana or ruining earth for everything.

    Maybe the cancer is a god’s plan, but it’s not working well enough.





  • I’m just tired of people trying to sell me shit. Or beg. Like I know I’m not interested 3 words in to the spiel but still feel like an asshole if I just say no and close the door or hang up the phone.

    Though I did eventually tell my phone provider to put me on their no call list for their internet marketing because I got tired of them trying to get me to switch to their less good internet package.

    Hoping (but not holding my breath) that we, as a society, squash the whole data broker thing sometime relatively soon, though.






  • Yeah no worries and agreed. I hate seeing commercial sites using worse password sanitization practices than I used for my first development website that wasn’t even really intended for anyone else to log in to and any max length suggests the password is either stored or processed in plaintext.

    IMO it should even be hashed on the client side before being sent so that it doesn’t show up as plaintext in any http requests or logs. Then salted and hashed again server side before being stored (or checked for login).


  • Correct, hence the sentence after the one you quoted :)

    If any service can recover your password and send it back to you rather than just resetting it for you to set a new one, don’t rely on that service for anything you want to keep secure. And certainly don’t reuse a password there, though you shouldn’t be reusing passwords anyways because who knows what they are and aren’t storing, even if they don’t offer password recovery.


  • Once upon a time, battle.net passwords weren’t case sensitive. I used upper and lower case letters in my password then one day realized I didn’t hit shift for one of the caps as I hit enter out of habit, but then it still let me in instead of asking for the password again.

    It was disappointing because it takes more work to remove case-sensitivity than to leave it. I can’t think of any good reason to remove it. At least the character limit had a technical reason behind it: having a set size for fields means your database can be more efficient. Better to use the size of a hash and not store the password in plaintext, so it’s not a good reason, but at least it’s a reason.



  • Some examples from mine if anyone is curious. I never use the fb sso or any of that shit, nor did I ever explicitly consent to any of these services sharing anything with fb.

    • Spotify
    • bookings .com
    • ebay (haven’t touched my account there in over a decade but they still had data to send this year)
    • windy .com
    • duolingo
    • tinder
    • my bank
    • opera
    • sonos (I can’t think of any time I’ve ever even interacted with this one)
    • samsung wallet (another one I never even set up)
    • Uber eats
    • calorie counter
    • mediacom usa and euro (?)

    Also, if you remove access via messenger app, it will show a confirm message without closing the screen. Clicking x goes back and it’s not on the list anymore. Whether they are actually leaving it disconnected or just hiding it, who knows.

    Some of these services I didn’t use the same email that I used for fb, too, or any email at all.



  • How to Win Friends and Influence People by Dale Carnegie should be required reading for everyone. It’s full of things that are so obvious in hindsight but go against our natural instincts so we blunder through attempts to persuade not realizing that we might be increasing resistance rather than decreasing it.

    Like the whole, “you might be right but you’re still an asshole” thing. Being correct just isn’t enough. In some cases you get crucified and then after some time has passed, the point you were trying to convince others of becomes the popular accepted fact. And they might even still hate you after coming around on the point you were trying to make.

    That book won’t turn you into a persuasive guru, but it will help avoid many of the pitfalls that make debates turn ugly or individuals stubborn.

    Or, on the flip side, you can use the inverse of the lessons to become a more effective troll and learn how to act like you’re arguing one thing while really trying to rile people up or convince them of the opposite. I say this not so much to suggest it but because knowing about this can make you less susceptible to it (and it’s already a part of the Russian troll farm MO).


  • The term “public relations” is literally propaganda to make propaganda look better. It was just called propaganda before WWII but then there was a propaganda campaign to increase local resistance to propaganda from the Nazis and then the Communists. And it worked, so they needed more propaganda to get the local propaganda to work again.