Viewing profile — mothershipper

As others have pointed out, there is a big difference between self-modifying in-memory and on-disk. The article seems to be talking about on-disk modification. We have an internal …

Should also be using a KDF or PBKDF to generate the key from a password, instead of using the text of the password as the key.

So much this. At a previous company (Go/Python/Ruby), we used gRPC almost exclusively, and the experience was pretty good. We're just now hitting a growth point where we need stron…

related: https://news.ycombinator.com/item?id=24994624

Not sure how I feel about the comparison to the shadow passwords file -- the shadow file doesn't contain the raw password, but a hashed version. If someone steals the shadow passwo…

Assuming one byte per character, you'd have to have a 17 character password before you're using multiple blocks. For any password shorter than that, this cipher is pretty much oper…

source: https://snyk.io/vuln/SNYK-JS-YARN-537806

There seems to be a typo in the blog post -- yarn needs to be updated to 1.21.1, not 1.12.1