Let’s Encrypt DST Root CA X3 Expiration – September 2021 • Hacker News Board

Post by selfhoster11 » Tue, May 18, 2021, 3:32 PM UTC

kstrauser wrote: post #33

selfhoster11 wrote: post #27

Earlier quoted context omitted.

Given lightweight software, a 486 tower is usable indefinitely with a zero environmental footprint as long as the electricity comes from a sustainable source (such as solar).

It is as long as you don’t consider the footprint of the person using it. If it runs more slowly than a modern system such that a human has to spend more time working with it, then it’s almost certainly less resource friendly.

486s ran plenty fast in their time. With a tiny bit of modern hardware like the addition of an SSD, the only thing stopping them from being blazing-fast is modern bloated software stacks.

Post by benlivengood » Tue, May 18, 2021, 5:28 PM UTC

slownews45 wrote: post #66

benlivengood wrote: post #55

Earlier quoted context omitted.

There are two risk classes; reused passwords exposed by a breach, and targeted attacks (phishing, dictionary/brute-force attacks, etc). The first is easiest to detect by finding password dumps and by observing login attempts. Targeted attacks are best prevented by 2FA. There never was any middle ground where password rotation improved security. For any high security systems worried about insider risk or espionage the…

My own view - reused passwords come from leaks - should be a penalty of $100 per leaked password - come on, salt and hash them! This would at least put some pressure on that side. Class actions allowed. This would push more towards oauth etc. Then for targeted attacks, allow non-sms two factor with multiple keys and recovery codes. I'm non SMS two factor on google with recovery codes in a drawer. Have never changed m…

Reused passwords are also really common and so cracking new dumps of salted and hashed passwords will yield a pretty high success rate.

At this point I just assume that any password that's been leaked (hashed or not) is in plaintext in some database. Obviously 20-character random passwords aren't going to get reversed but there's no guarantee that they were always hashed and weren't leaked from the login process itself, etc.

Let’s Encrypt DST Root CA X3 Expiration – September 2021

Re: Let’s Encrypt DST Root CA X3 Expiration – September 2021

Re: Let’s Encrypt DST Root CA X3 Expiration – September 2021