@PastaGorgonzola - eviltoast
  • 1 Post
  • 21 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle










  • I’m going to have to stop replying because I don’t have the time to run every individual through infosec 101.

    Sorry, but you’re missing the point here. You cannot do anything with a password without storing it in memory. That’s not even infosec 101, that’s computing 101. Every computation is toggling bits between 1 and 0 and guess where these bits are stored? That’s right: in memory.

    The backend should never have access to a variable with a plaintext password.

    You know how the backend gets that password? In a plaintext variable. Because the server needs to decrypt the TLS data before doing any computations on it (and yes I know about homomorphic encryption, but no that wouldn’t work here).

    Yes, I agree it’s terrible form to send out plain text passwords. And it would make me question their security practices as well. I agree that lots of people overreacted to your mistake, but this thread has proven that you’re not yet as knowledgeable as you claim to be.











  • Basically, yes. Appliances are delivered and installed, usually free of charge (read: the price of delivery and installation is just calculated into the price of the appliance). Same for furniture.

    Most home improvement stores either offer a (paid) delivery service or you can rent a small van/truck to get your larger purchases home.

    Trailer hitches are quite common too, allowing you to tow a simple trailer (which you can either buy or rent): trailer