“the internet is bad and emotions prevail there” maam do you have any idea how big the internet is? youre seeing a singular port and saying its the entire ocean

and dont get me on the cybersecurity and electronics ones

“use a strong password” whats that gonna do if the database gets pwned, sandra? or if you get pwned by a 0click 0day

“blue light is bad for you” LOL

  • tal@lemmy.today
    link
    fedilink
    English
    arrow-up
    25
    ·
    edit-2
    1 day ago

    “use a strong password” whats that gonna do if the database gets pwned, sandra?

    Strong passwords aren’t intended to simply protect against brute-forcing a password via trying to authenticate repeatedly, but also to help protect against brute-force attempts to obtain passwords from a compromised password database using a dictionary attack, the scenario you’re describing.

    Typically — if an authentication system is storing its password database competently — the password shouldn’t be stored in plain text. Instead, the password will be salted (to avoid rainbow table attacks) and then hashed via a cryptographic hash. The password database entry will look something like a tuple of (username, salt, salted hashed password). If the password is a strong one, it will be computationally-hard to obtain the plaintext password, even if someone has the salt and the salted, hashed password.

    • IAMgROOT@lemmy.wtfOP
      link
      fedilink
      arrow-up
      1
      arrow-down
      4
      ·
      1 day ago

      I know using a strong password is important, but thats the bare minimum. this is more directed to the people who think strong passwords are the grail and will LITERALLY not do anything else, and call people paranoid schizos when they try to suggest security

        • IAMgROOT@lemmy.wtfOP
          link
          fedilink
          arrow-up
          1
          arrow-down
          3
          ·
          1 day ago
          1. completely hardened browser
          2. vpn (no corpo ones please)
          3. secure services instead of corpo ones
          • towerful@programming.dev
            link
            fedilink
            arrow-up
            5
            ·
            1 day ago

            Yeh, for 99% of casual internet users… they just aren’t going to care about that.
            They don’t want their email/Facebook/back account pwnd.
            Like, at all.

            It’s like saying that 0.01% of traffic fatalities are because an airbag forces your head into the roof of the car. So you should wear a helmet when driving.

            You aren’t wrong.
            Internet is a massive part of our daily lives. We should be able to fully trust the things we use to interact with it.
            But convenience is going to win

      • chunes@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        Hey I’m like that. Honestly it’s just annoying. Your service isn’t a bank, it doesn’t need to be locked down like one.