Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

forum.opensubtitles.org

Post reply on HN
Print view View original

191–194 of 194 posts

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#191

Post by stevewodil »

LeifCarrotson wrote: post #85
l-lousy wrote: post #71

Earlier quoted context omitted.

I think an average user password would be shorter than a sha256 hash no?

Bcrypt truncates to 72 bytes, so it's kind of irrelevant IMO. Whether your average length is 12 or 20 or 64 bytes doesn't matter much. I expect the parent's concern came from experience with PBKDF2, where the length is unbounded. It's good to consider possible denial of service attacks: if someone submits an enormous 1 MB password a PBKDF2 hasher can be knocked offline for 60s. Sha256 will quickly crunch that attack…

Exactly this, it’s a vector for DOS

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#192

Post by Markoff »

m-p-3 wrote: post #189
Markoff wrote: post #182

Earlier quoted context omitted.

why bother with any dedicated app just to remove one or two lines of "ad" (99.9% is just them offering ad service, but seems like nobody is interested really), open in notepad, Shift+End, Delete, done

I like to make sure all the numbered lines are all sequential, and I already use it for creating subtitles so why not do it the proper way.

but they will be sequential, you can just fill them with empty space

or you can completely delete whole string including timestamp, it's not like any hardware of software videoplayer cares about missing number

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#193

Post by Markoff »

johnchristopher wrote: post #146
Markoff wrote: post #136

Earlier quoted context omitted.

huh? I use to download subtitles in VLC through built in VLsub via opensubtitles and nobody ask me for any login/pwd and I download A LOT of subs, sometimes even 5-10 to try with some releases now on the website I would hit the limit very fast, but through VLsub it's essentially unlimited

There was a time the built-in VLSub wasn't built-in and I remember at some point it was abandoned and then picked up again. Nowadays it's working again as intended, no more freezes or invalid login. Still has the bug where the next video in a queue picks up the good subtitles but it downloads the subtitle for the previous video. I googled vlsub opensubtitles not working and I still find relevant threads https://forum…

next time read at least your own 2 years old link, it was caused by him using VPN, if he switched off VPN he didn't need to login anywhere, so no, even two years ago you didn't have to login in vlsub unless you use VPN for some strange reason

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#194

Post by johnchristopher »

Markoff wrote: post #193
johnchristopher wrote: post #146

Earlier quoted context omitted.

There was a time the built-in VLSub wasn't built-in and I remember at some point it was abandoned and then picked up again. Nowadays it's working again as intended, no more freezes or invalid login. Still has the bug where the next video in a queue picks up the good subtitles but it downloads the subtitle for the previous video. I googled vlsub opensubtitles not working and I still find relevant threads https://forum…

next time read at least your own 2 years old link, it was caused by him using VPN, if he switched off VPN he didn't need to login anywhere, so no, even two years ago you didn't have to login in vlsub unless you use VPN for some strange reason

> you didn't have to login in vlsub unless you use VPN for some strange reason

So, you don't have to login unless you have to login.

Got it.

Also, this:

https://github.com/exebetche/vlsub#2013-09-05-version-0910

> 2013-09-05 (version 0.9.10)

> Add possibility to set opensubtitles.org username/password in config menu to avoid download limit to unlogged users

You can add this to the list of reasons you needed username/password for vlsub at some point, when you hit their download limit. Which is something that used to happen a lot with fansubs.

Post reply on HN