Boof

  • 2 Posts
  • 27 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle












  • What we need isn’t browsers. What we need is an universal way to write extensions cross-browser.

    Browsers themselves are easy to make. The problem is convincing extension devs to work with yet another codebase.

    E: Think of it this way. There’s a lot of open source browsers out there.

    Are you using any of them? Probably not.

    Would you use one if it doesn’t have for example Bitwarden, Ublock Origin, Sponsorblock, and such mandatory extensions?

    Users follow extensions and ease of use; not what’s good for them.

    E2: A good project would be a builder extension for VSC for example, which compiles to all supported browsers.

    Browser devs would then contribute to said extension via native-made plugins.

    Cooperation of two fronts.





  • Hashing on client side is both more private, and secure. All the user ever submits is a combined hash (auth/pubkey) of their username + password.

    If the server has that hash? Check the DB if it requires 2FA, and if the user sent a challenge response. If not, fail the login.

    Registering is pretty much the same. User submits hash, server checks DB against it, fail if exists.

    Edit: If data is also encrypted properly in the DB, it doesn’t even matter if the entire DB is completely public, leaked, or secured on their own servers.



  • That’s a misunderstanding of DDoS. 0 byte packets are actually worse than large packets.

    Which is why most DDoS (at least was) is extremely slow 0 byte requests until the server throttles/crashes under the number of requests.

    E: Consider this. Are you more likely to throttle a bandwidth of terabytes/petabytes with couple million 1gb requests; or break it entirely by sending >4294967295 0 byte requests that effectively never stop being requested from the server?


  • You can care about people as a proxy of doing PR over the thing you like to do.

    Not saying he’s an asshole or anything; people just need to stop having these weird as fuck personal relationships with online personalities whom they don’t even actually know.

    But yeah, Linus used to care more, but it was years ago when he started saying he’ll stop being CEO soon. Started piling up from back then to where it is now.

    Tl;dr: frustrations, inability to do the thing he wanted, high commercial pressure, family, impulsiveness (New houses, new cars, new projects while there were multiple still in progress or not even started), etc. Lost sight of what he was doing, and what he wanted.

    Maybe that’ll slowly improve with new CEO, and the projects he started finishing.