• 5 Posts
  • 413 Comments
Joined 3 years ago
cake
Cake day: September 11th, 2023

help-circle



  • In the scheme I’m proposing, the password never gets sent to the server.

    The issue of password reuse is the password getting sent to the site, because the prevailing approach is to hash the password server-side. Passwords leak because they get stored in plaintext, or hashed using outdated algorithms, or get logged with request metadata–bottom line, they end up stored somewhere that an attacker can get their grubby little paws on them, or in a way they can reasonably recover them.

    Using a master password to derive a passkey client-side isn’t any different than using a master password to unlock a password manager. It just cuts out the middle step.


  • I feel like there’s some potential in password-derived passkeys, which would get around the storage and hardware lock-in issues. It’d essentially be a master password like for BitWarden, but instead of needing an app to store a bunch of generated passwords, the master password could be all you need to authenticate.

    Most of the sources of compromise for regular users would be eliminated because the password never leaves the client.









  • By modern standards, you didn’t really get ghosted. That text was him calling it off. It sucks, but I’m afraid that’s about as good as you’re probably gonna get.

    I’ve been in your shoes, wracked my brain trying to think about everything I might have done wrong and wishing they’d tell me exactly why they weren’t interested so I could try to fix it.

    I’ve also been the guy in this situation, having figured out that I’m not interested in the person and struggling to put it into words. Maybe the vibe wasn’t right, maybe we had different expectations, maybe there’s nothing wrong with them physically but yet for some reason I’m just not attracted to them. I’m ashamed to admit I have just ghosted people because it’s easier than telling them the truth. Maybe the times I got ghosted in return was some sorta karma.

    You shouldn’t blame yourself or assume anything is wrong. It sounds like this guy just had different expectations about some things, and that’s perfectly fine. You shouldn’t try to look for anything you need to change about yourself just to find a partner. Keep looking for someone who’s willing to accept you as you are.