izakage

6 ms·

1. 1.▲
   by izakage 4y ago

   Another one with similar graphics might have been “HTML Goodies”
2. 2.▲
   by izakage 13y ago

   There's also "dirs" to view the directory stack!
3. 3.▲
   by izakage 14y ago

   If passwords were hashed+salted client-side, an attacker could use the hash+salt in exactly the same way as they would a 'raw' password. So the answer is no; the strength measurement would be done on the server when the password is being ha
4. 4.▲
   by izakage 14y ago

   Here's a link to the mentioned video: http://www.youtube.com/watch?v=ekv0kprA3AY
5. 5.▲
   by izakage 14y ago

   I was simply trying to clarify the challenge-response mechanism for the parent poster, not suggesting you use keychain dongles everywhere. Regardless, the idea that the plaintext password doesn't have to leave the device (whether the device
6. 6.▲
   by izakage 14y ago

   The server sends a challenge to the client. The client computes response = f(challenge, password), and sends the response. Then the server compares the response with its own computation of f(challenge, password). Since f is some type of ha
7. 7.▲
   by izakage 14y ago

   I am curious about GPL compatibility in this situation. According to [1], software developed by US federal government cannot be licensed under the GPL since it is automatically in the public domain. However, the github repo readme makes t