The advantage of being therian is that you can hold 4 contradictory opinions at once.
"On one paw"
"On the other paw"
"On yet another paw"
"On the fourth paw".
You *may* have to roll over on your back for the 4 paw trick, but that usually just results in bellyrubs.
And when you get bellyrubs, you won the argument. No question.
Remote
Sets things on fire, yearns for the strength of steel.
Posts about:
- language
- kink
- girl touching (for fun)
- computer touching (for revenge)
I don't have a pfp because I am waiting for someone to offer me one.
My DMs are open to issues and conversations so long as you can treat me as a person.
My opinions are your opinions. By reading this bio to the end you agree to accept my opinions as invariant fact.
0 Followers
0 Following
25 Posts
Joined October 23, 2023
pronouns:
EN: it/she DE: es/ihr/sie
proverbs:
fire from embers / embers to ash
hinges:
OUT-OF-ORDER
Open post
human trafficking+
Thing to claim as your employment when you're brainwashing girls in your basement?
Thing to claim as your employment when you're brainwashing girls in your basement?
6
1
4
0
Open post
Replying to
solution
bcrypt truncates inputs after 72 bytes.
An attacker can set their own password to a 71-byte string, extract the hash, and recover the first byte of the pepper. (they don't even need the SQLi, attempting to log in with $71_byte_string . $pepper_guess is just as good an oracle)
They can then recover the entire pepper byte-by-byte by repeating this with shorter and shorter passwords.
With the pepper leaked, they can use the SQLi to leak all hashes and begin cracking all passwords.
5
1
3
0
Open post
toxic yuri anonymous
Folks, I need help. How can I be sexist towards my wife in english? The german word "weib" has no good translation.
Do I just call her "woman" in a pronunciation that makes it sound like a slur?
Please folks, this is critical.
4
1
2
0
Open post
Replying to
@green@mk.absturztau.be ...
because..
fine.. ok..
bcrypt hashes the password by using it as a key to encrypt the constant string "OrpheanBeholderScryDoubt".
The key procedure accepts a 56 byte key. Which is why the bcrypt spec only accepts up to 55 bytes (+1 null terminator)
When OpenBSD did the first implementation though, they realized you neither need terminators on full-length strings, and that the key can actually be influenced by up to 72 bytes if you change the cipher slightly.
All in all: AHHHHHHHHHH
3
1
1
0
Open post
Replying to
This is, btw, the exact construction used in the first result that pops up when you search "how to apply pepper to hash"
(https://security.stackexchange.com/questions/21263/how-to-apply-a-pepper-correctly-to-bcrypt)
Several of you had the good intuition that concatenation is *fishy*. The folks on SE did not, merely remarking that it is "a tad less elegant, mathematically speaking."
2
1
1
0
Open post
Replying to
@tudbut@social.tudbut.de @green@mk.absturztau.be YES.
I tortured 4censord with "management selected it because they 'heard it's the most secure'" precisely because bcrypt is exactly the horrible solution that is way worse than anyone expects, but is somehow still recommended by lots of folks.
1
1
0
0
Open post
lewd, survivability onion
Don't be there: Reasonable, introverted.
Don't be detected: Yeah, don't talk to me.
Don't be acquired: Wait. But I like when someone just grabs me!
Don't be hit: B-but- But I like! 🥺
Don't be penetrated: hhnnmpf~
Don't be killed: ahnhg~~
43
0
11
0
Open post
An essential accessibility feature of any game is turning the brightness/contrast up beyond a point considered "the maximum the median player will want".
The fact that Minecraft removed that option pisses me off to no end. I shouldn't have to install a mod just to go caving while the sun shines into my room. Why put a limit on the brightness setting when not doing so costs 0 money?
If you think everyone can see equally well in low light you have clearly never gone stargazing with someone else.
13
0
1
0
Open post
My old person belief is that all this newfangled hypnosis stuff that the kids use these days is way too fast and willy-nilly.
Back in my day, we had to set up an elaborate reinforcement scheme to change behaviour, and induce psychosis or take other destructive measures to effect a change in perceived reality or personality.
Kids these days don't even know what it's like sketching a 5 layer contingency plan in case 4 months of work have to be reverted.
14
0
2
0
Open post
Replying to
Angehängt an diese Email finden Sie die Anthraxformulare.
Bitte stellen Sie die vertrauliche Bearbeitung der enthaltenen Daten sicher, indem Sie den Antrag nur allein in einem abgeschlossenen Raum bearbeiten.
19
0
5
0
Open post
DB Lounge hack
Observation: You* can access*** the DB Lounge** with a Deutschland Ticket**** *****.
*: As company of someone with BahnBonus Gold status.
**: In Hamburg, and anywhere else the DTicket gives access to an ICE connection.
***: On days the ICEs in question run.
****: Your Status Daddy/Mommy has to argue with the entrance staff until they let you in.
*****: As long as you don't linger long enough for the staff to ring up HQ and have HQ tell them to kick you out. We stayed 40mins.
4
0
2
0
Open post
Men with ADHD only want one thing and it switches every 25 seconds.
4
0
3
0
Open post
Open post
Replying to
@Bubu@chaos.social @4censord@unfug.social the poll is single-choice so no, you cannot have multiple favourites. If you could, the poll would be multiple-choice.
I hope you're not accusing me of not being able to define reality through sheer force of will.
4
0
0
0
Open post
Replying to
@ezri@shitpost.trade folks like you is exactly the reason why I made it single-choice. I thought you liked unfair. <3
3
1
0
0
Open post
Replying to
@ellie@social.lol pack it up folks, we can stop trying now. This is it. The worst post. Thank you.
1
1
1
0
Open post
Replying to
@xyno@mastodon.catgirl.cloud the bestest sex, or as it's called in the biz: the plot of the first warhound story.
1
1
0
0
Open post
Open post
Open post
Replying to
@4censord@unfug.social She doesn't strike me as a fascist bootlicker, just as fascist. So no?
0
2
0
0