• 1 Post
  • 398 Comments
Joined 3 years ago
cake
Cake day: July 3rd, 2023

help-circle
















  • I’ve read your post a dozen times and I’m confused.

    Are you at the $5 million cap in this scenario? You’re certainly not going to waste away with $500k/year coming in, labor free.

    Or are you closer to median income of like $80k, and thus have no funds for a big passion project?

    Either way, you can always pool resources and form an organization of some sort. We don’t really want a ton of power collected in individuals. Especially not if the only reason they have that power is because they had money.




  • Not included in this answer and I’m not fully qualified to talk about: salting.

    If you knew the hashing algorithm, you could precompute hashes of all the common passwords. Then when you get steal the hashed password data, it’s a lot faster to check if any of them are in your list. You can likely find that kind of list online to download.

    One defense against this is “salting”. The site adds some text to your password before hashing it. So if your password is extremely common, like “password1!”, with the added salt the hash on this site will be different. Like maybe it adds the user’s uuid, so what gets hashed is “password1!-abcd-123-pretend-this-is-a-uuid”. The user doesn’t need to know.

    Another benefit is that now two passwords that both are “password1!” have different hashes.

    I’m not an expert by any means so please someone correct me if anything was wrong there.