@benrayfield @dblohm7 @warrenmyers @theprincessxena But you do have a point about overloading the server by forcing it to perform multiple key derivation calcs. That’s where rate limiting (and captchas) come into play. And there you have safe authentication without compromising performance π — Alejo π³οΈβπ (@Alex91dotar) Aug 14, 2022 from http://twitter.com/Alex91dotar via IFTTT
Author:merikebi
Favorite tweets
@rahul1sethi @oratoba @warrenmyers @dblohm7 @theprincessxena this. otherwise, if we’re optimising for efficiency over security, why not just remove passwords? π — leighton (@lloydtao) Aug 14, 2022 from http://twitter.com/lloydtao via IFTTT
Favorite tweets
@oratoba @warrenmyers @dblohm7 @theprincessxena The password isnβt going to stored. It ABSOLUTELY should NOT be stored. The *hash of the password* (plus a random salt) will be stored β which is a fixed length of characters — Rahul Sethi (@rahul1sethi) Aug 14, 2022 from http://twitter.com/rahul1sethi via IFTTT
@dblohm7 @benrayfield @theprincessxena Cryptographic hash functions are designed to be tunable on speed :)
@dblohm7 @benrayfield @theprincessxena Cryptographic hash functions are designed to be tunable on speed π — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 14, 2022 at 08:22AM via IFTTT
25 Things Husbands Should Start Doing https://t.co/RGExpYqtS5 https://t.co/nFLuhc0ljt
25 Things Husbands Should Start Doing https://t.co/RGExpYqtS5 https://t.co/nFLuhc0ljt — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 14, 2022 at 04:06AM via IFTTT
π Aug 14, 2022 π π₯ 108 | Avg. Guesses: 6.92 π¨π₯π₯π₯π© = 5 #globle @michaeldf88
π Aug 14, 2022 π π₯ 108 | Avg. Guesses: 6.92 π¨π₯π₯π₯π© = 5 #globle @michaeldf88 — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 14, 2022 at 01:43AM via IFTTT
#waffle205 3/5 π©π©π©π©π© π©βπ©β¬π© π©π©βπ©π© π©β¬π©βπ© π©π©π©π©π© π₯ streak: 50 π₯ #wafflegoldteam https://t.co/4doM5G9lQM
#waffle205 3/5 π©π©π©π©π© π©βπ©β¬π© π©π©βπ©π© π©β¬π©βπ© π©π©π©π©π© π₯ streak: 50 π₯ #wafflegoldteam https://t.co/4doM5G9lQM — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 14, 2022 at 01:41AM via IFTTT
Favorite tweets
A fun game you can play about people who racistly police young sorority girls having fun is how far out of their league the girls in the video are. https://t.co/BM8CDPkPUp — Upstate Federalist (@upstatefederlst) Aug 14, 2022 from http://twitter.com/upstatefederlst via IFTTT
@benrayfield @dblohm7 @theprincessxena …and a hash is a KDF – https://t.co/XZZcfh14Fo :)
@benrayfield @dblohm7 @theprincessxena …and a hash is a KDF – https://t.co/XZZcfh14Fo π — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 11:51PM via IFTTT
@benrayfield @dblohm7 @theprincessxena But KDFs usually use hash functions :) “…from a secret value such as a main key, a password, or a passphrase using a pseudorandom function (which typically uses a cryptographic hash function or block cipher).” https://t.co/tx9M5sDhtP
@benrayfield @dblohm7 @theprincessxena But KDFs usually use hash functions π “…from a secret value such as a main key, a password, or a passphrase using a pseudorandom function (which typically uses a cryptographic hash function or block cipher).” https://t.co/tx9M5sDhtP — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 11:48PM …
Continue reading @benrayfield @dblohm7 @theprincessxena But KDFs usually use hash functions π “…from a secret value such as a main key, a password, or a passphrase using a pseudorandom function (which typically uses a cryptographic hash function or block cipher).” https://t.co/tx9M5sDhtP
Favorite tweets
GOP wants answers on IRS’ $700K ammo stockpile as Dems OK $80B for agency enforcement https://t.co/6HnX0pTROg https://t.co/SYlxqVQLQ9 — New York Post (@nypost) Aug 14, 2022 from http://twitter.com/nypost via IFTTT
@benrayfield @dblohm7 @theprincessxena You should only storing the salted hash anyway…;)
@benrayfield @dblohm7 @theprincessxena You should only storing the salted hash anyway…;) — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 10:51PM via IFTTT
@benrayfield @dblohm7 @theprincessxena If you can push that much in an http request…sure :)
@benrayfield @dblohm7 @theprincessxena If you can push that much in an http request…sure π — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 10:51PM via IFTTT
PCI Express 7 is coming …someday https://t.co/nGdmJ1xkK2 #pciexpress7
PCI Express 7 is coming …someday https://t.co/nGdmJ1xkK2 #pciexpress7 — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 10:12PM via IFTTT
Favorite tweets
Watching some great footage of that volcano in Icelandβ¦ and now I want a drone with a 4k camera! https://t.co/9QNKuGeHZK — Chris Hohnholz – Unashamed TheoBro (@ChrisHohnholz) Aug 14, 2022 from http://twitter.com/ChrisHohnholz via IFTTT
RT @dcexaminer: New Yorkers question Rep. @AOCβs calls to defund the police amid rising crime https://t.co/LvcwVKmZsX
RT @dcexaminer: New Yorkers question Rep. @AOCβs calls to defund the police amid rising crime https://t.co/LvcwVKmZsX — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 09:28PM via IFTTT
RT @warrenmyers: There are 13 million parts in a jetliner None can fly This is why @ScottAdamsSays repeats “have systems, not goals” It’s the *system* that flies
RT @warrenmyers: There are 13 million parts in a jetliner None can fly This is why @ScottAdamsSays repeats “have systems, not goals” It’s the *system* that flies — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 08:39PM via IFTTT
@dblohm7 @theprincessxena Feel free to run it yourself (the GitHub repo is linked on the site), but I run a free password/passphrase generator at https://t.co/rVUYNHRlws I only cap passphrase size at ~75 characters because after that many words, it gets hard to remember :)
@dblohm7 @theprincessxena Feel free to run it yourself (the GitHub repo is linked on the site), but I run a free password/passphrase generator at https://t.co/rVUYNHRlws I only cap passphrase size at ~75 characters because after that many words, it gets hard to remember π — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers …
Continue reading @dblohm7 @theprincessxena Feel free to run it yourself (the GitHub repo is linked on the site), but I run a free password/passphrase generator at https://t.co/rVUYNHRlws I only cap passphrase size at ~75 characters because after that many words, it gets hard to remember π
@dblohm7 @theprincessxena If you can’t accept an arbitrarily-long password/passphrase, you’re doing it wrong Set a minimum length? Sure But after that – there’s no reason to not allow whatever the maximum size of a RESTful PUT/GET will allow
@dblohm7 @theprincessxena If you can’t accept an arbitrarily-long password/passphrase, you’re doing it wrong Set a minimum length? Sure But after that – there’s no reason to not allow whatever the maximum size of a RESTful PUT/GET will allow — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 08:37PM via …
Continue reading @dblohm7 @theprincessxena If you can’t accept an arbitrarily-long password/passphrase, you’re doing it wrong Set a minimum length? Sure But after that – there’s no reason to not allow whatever the maximum size of a RESTful PUT/GET will allow
Someone please #ELI5 @tailscale/@WireGuardVPN vs @TwingateHQ How are they similar? Different? Why/when choose one? Are they complimentary, parallel, tangential, or orthogonal technologies? Bonus points: how they’re better/different from p2p #ssh tunnels or traditional #VPN
Someone please #ELI5 @tailscale/@WireGuardVPN vs @TwingateHQ How are they similar? Different? Why/when choose one? Are they complimentary, parallel, tangential, or orthogonal technologies? Bonus points: how they’re better/different from p2p #ssh tunnels or traditional #VPN — Warren Myers π§πΏ (@warrenmyers) Aug 14, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 08:34PM via IFTTT
Favorite tweets
my middle daughter is such a jock. she keeps running on various self-made obstacle courses and timing herself on how fast she gets through. it’s over for you nerds. — Rizoma Field School (@RizomaSchool) Aug 14, 2022 from http://twitter.com/RizomaSchool via IFTTT
Favorite tweets
Flee from anyone who distorts and twists the scriptures for their own selfish gain. And in their greed they will exploit you with false words. Their condemnation from long ago is not idle, and their destruction is not asleep. 2 Peter 2:3 https://t.co/1q9RHzi0BQ — Biblical and Reformed (@GomesHasti) Aug 14, 2022 from http://twitter.com/GomesHasti via IFTTT
Favorite tweets
Progressive activist β¦@ninaturnerβ© is scared to debate student debt cancelation with β¦@brad_polumboβ© or anyone else. https://t.co/4kK3BKBMpd — Jack Hunter (@jackhunter74) Aug 13, 2022 from http://twitter.com/jackhunter74 via IFTTT
RT @ChrisExpTheNews: To be clear, the local art for sale at the Tamarack Plaza in Beckley is more important to me than the whole collection of the Louvre.
RT @ChrisExpTheNews: To be clear, the local art for sale at the Tamarack Plaza in Beckley is more important to me than the whole collection of the Louvre. — Warren Myers π§πΏ (@warrenmyers) Aug 13, 2022 from Twitter https://twitter.com/warrenmyers August 13, 2022 at 06:27PM via IFTTT
Favorite tweets
“Itβs disturbing to see @RepLizCheney conflate First-Amendment-protected criticism of government officials with endangering the physical safety of others.” New from me π¨β€΅οΈ https://t.co/oIvLFDtA98 — Brad Polumbo πΊπΈβ½οΈπ³οΈβπ (@brad_polumbo) Aug 13, 2022 from http://twitter.com/brad_polumbo via IFTTT