Client side verification is just security by obscurity, which gains you very little.
If someone is capable of MITM attacking a user and fetching a password mid-transit to the server over HTTPS, they are surely capable of popping open devtools and reverse engineering your cryptographic code to either a) uncover the original password, or b) just using the encrypted credentials directly to authenticate with your server without ever having known the password in the first place
The word ‘decipher’ is doing a lot of heavy lifting. I’m wondering if they socially engineered or just found it written somewhere in the house?
You can plausibly brute force up to 4, maybe 5 words of a seed phrase. It takes longer than a normal password because every seed phrase is technically valid, so the only way to know if your brute force is successful is to generate thousands of addresses at each of the different derivation paths you may expect funds to exist at.
The same seed phrase is used for Bitcoin, Ethereum, Monero, etc, but each currency uses the seed phrase to generate addresses in a slightly different standard. Additionally, each wallet uses a slightly different variation of that. Within each wallet is a notion of accounts, and within each account you could have dozens of addresses. You need to generate each of those addresses, and scan each cryptocurrencies blockchain to see if those addresses have ever been used.
Realistically one of three things happened: his seed phrase was written down and they found it, it was password protected or on a drive with weak AES encryption and they cracked THAT instead, or finally, he used a hardware wallet and they exploited a firmware vulnerability to lift the PIN and transfer out funds and/or read the seed from the device
You are acting like someone checked off a “log passwords” box, as if that’s a thing that even exists
Someone configured a logger to write HTTP bodies and headers, not realizing they needed to build a custom handler to iterate through every body and header anonymizing any fields that may plausibly contain sensitive information. It’s something that literally every dev has done at some point before they knew better.
Does Google Cloud not count as “own hardware” for google?
That’s why the bars are so different. The “cloud” price is MSRP
This is only true for steam keys sold on other platforms afaik
Yes but if it’s first instinct is “go left” on 1-2, it’s pretty apparent the reward function could use some tuning
COVID has long lasting effects across your entire body, it impacts your immune and cardiovascular systems for years after you get it.
Risks of heart attack, stroke, etc are increased 2.5x in the year after infection, increasing exponentially with the number of times you have been infected. In fact, the risk of pretty much ANY health problem skyrockets following a COVID infection.
I haven’t used dual shock so I can’t speak to that, but as far as Xbox 1/S controllers, there is no 1st party support - literally all the drivers are from some non-MS affiliated GitHub page. 360 controllers required the xpad driver as well - that isn’t 1st party support. Yes they work out of the box with steam if you are using a wired connection, but that’s because it’s going through steaminput (not 1st party either), and making the controls of the submarine dependent on being launched through steam is even more absurd. Gen 2 series 1/S controllers didn’t work via Bluetooth for a long time after they (silently) launched on most LTS Linux OSs due to the kernel missing requisite BLE functionality
That’s only assuming the sub was running windows, where Xbox controllers work out of the box. On Linux there are no first party drivers, and Bluetooth support on the 1/S controllers simply didn’t exist at the time this happened. If it was an embedded system there would be no support whatsoever.
https://www.theverge.com/2017/9/19/16333376/us-navy-military-xbox-360-controller
US Army used to spend $38,000 per controller until they found out Xbox controllers were better
AI isn’t supposed to be creative, it’s isn’t even capable of that. It’s meant to min/max it’s evaluation criterion against a test dataset
It does this by regurgitating the training data associated with a given input as closely as possible
These people aren’t placing bets on who they want to win, they are placing bets where the house odds differ from the actual expected outcome. The people throwing big money on this are doing it based on actual data (amalgamating polls, etc), not just gut feelings.
If I think Kamala has a 45% chance of winning the election and the bookie is giving her implied odds of 40%, I should take that bet, because even though I think she will lose, I stand to make a 12.5% ROI on my bet. I can then hedge that bet on another bookmaker giving a 48% implied odds, and if enough people do this the bookmakers odds will converge on 44%
but either way I don’t think this “market” knew more than the mainstream media was telling us.
No, but it is a culmination of all the available public information (and some private information you won’t find elsewhere) in a single metric. If you read a single article you would assume there is either a 100% Biden drops out or a 0% chance - if you read every single news article in existence, aggregated all social media buzz, polls, etc, into a statistical likelihood, you would likely come out with a number that closely matches the odds.
Biden was only going to drop out once, so you can’t say how closely these odds matched the actual likelihood on this specific measure, but if you analyze hundreds of predictive markets like this, the implied odds pretty strongly correlate with the actual binomial outcomes
Tesla still sells nearly 10x the number of EVs (BEVs) to the next most popular brand (globally).
Tesla only sold 4% more EVs than BYD last quarter
You can just put an aeropress filter above the grounds before you screw the top on your mokapot (assuming you don’t have one of the super size ones)
Mine died after 9 years or so. Did that thing where the rubber breaks down and gets super sticky and oily. Never had an issue with it losing its shape - you just have to make sure you store it fully pressed in so the lip pops out the far side of the tube
10 days without food hits differently when you are hiking through mountains 16 hours a day vs sitting on your couch
Especially because a 15% tip is almost twice as good as it was 10 years ago due to rising food costs
A couple of them fall into the “technically true, but misleading territory” - I’m sure the person handing this out couldn’t identify which though - broken clock right twice a day and all
“Can you reverse effects” - no you can’t make your immune system forget how to work. Probably not what they are going for here though.
“Risk of […] or other side effects?” - yeah the vaccines generally give people a headache and short lived fever symptoms
“Have there been deaths?” - The astrazeneca vaccine had like a 0.000001% mortality risk (more likely to die driving to the pharmacy), and was pulled in many countries because that was deemed too dangerous. Person handing out the flyer has likely been parroting “mRNA vaccines cause blood clots” nonsense for years while being completely unaware that AZ was a traditional viral vector vaccine
“Are there doctors recommending NOT taking it” - yeah, there are many notable anti-vaccine doctors, what they typically have in common is they earned their doctorate in computer science, social studies, or some other field that gives them no qualifications to talk about immunology
No it doesn’t, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account
What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways
How would you verify it then?
If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in