1,047 karma · joined February 6, 2011
1. They're not using hashes.
2. They are using hashes, but they don't understand what that actually does, and that there's no reason to have a limit on input length. The passwords might be more secure, but it calls into question the general competency of their security (do they salt? per user?).
This also applies to character restrictions (no ____ characters). I can understand requiring at least N instances of a class of characters, but the entire UTF-8 character set should be valid input. If I want an emoji password, there's no reason to disallow it. bcrypt will be happy to take those bytes.
So, here's a comparison of site purposes and security practices. This is largely unrelated, but it gives better insight as to what I was talking about, not just making a random assumption about Battle.net (which I theoretically have an account at, but I don't really care about it anymore, I don't play video games anymore).
Chase is a bank. They handle money. They allow up to 32 character passwords, with no "special" (whatever that means) characters whatsoever.
Twitter is a social networking site. I have a 50 character password of various character types, because that's how far 1Password will go.
Bank of America is also a bank. Twenty characters. Twenty. Characters. And none of those are allowed to be "special".
Facebook is user for the same purpose Twitter. I have a 50 character password there as well.
Why do I trust social sites more than my banks? Security is so messed up.
If you're using hashes, limiting the lengths of passwords is extra work.
Messages show up and seemingly random times on all devices. Sometimes, they don't both to show up on a device (typically the Mac). Sending still works fine, until over the weekend, when I became unable to initiate iMessage conversations on my Mac. I'm told that the other person is "offline", while I'm having a conversation with them on my iPhone.
It's really bad. I hope there have been some fixes, but since I'm running "Gold Master", maybe not.
1. I've recently been looking for a good way to let a crowded train know that I probably have bedbugs on my clothing.
2. Internet access is really good underground.
The Atlantic is a common sight on TrueReddit. I don't care if it was posted by an employee, because TrueReddit subscribers are pretty good about downvoting anything that doesn't fit. What I do care about is being able to read the great articles from The Atlantic that are upvoted on TrueReddit. However, the Reddit administrators have decided that I, and every other TrueReddit subscriber, shouldn't be allowed to anymore.
This is a fine technological decision, instead of spending years on heuristics, but it's implemented at the wrong level.
Just declare a normal function, which can correctly throw a compiler warning if you try to pass anything that does not conform to NSFastEnumeration to it.
NSArray* map(id<NSFastEnumeration> enumerable, id(^)(id object) block);
?Obviously, you'd still want to have a prefix of some sort for namespacing.
C# already implies no implicit fallthrough, so there's no need to explicitly state that you're not falling through. A better solution (for every language, really) would be a "fallthrough;" statement or "goto case x;", which C# does get right.
defaults -currentHost write -globalDomain AppleFontSmoothing -int 2
To fix it.What? Who would say that, ever?
> San Francisco-based Klout
Oh. Carry on then.
"Brogrammers" are pretty hilarious though. I mean, aside from the utility of being a "warning, we're a company of homophobes and sexists" alert, I think that it started as a joke? Then, there were people that didn't realize it was a joke and started actually using it. I think that's pretty funny.
objc_msgSend(NSClassFromString(@"UIWebView"), @selector(_enableRemoteInspector));Uh, because you're declaring six static color variables. Also, they could be collapsed into one line.
> Introspection is unavailable at runtime
Not sure what this means. Everything is introspectable in Objective-C. #import <objc/runtime.h>
The cell dequeueing comparison uses a one liner for Ruby and an if statement for Obj-C. That's not a fair comparison. "dequeue ?: allocate" would be fair.
> dequeueReusableCellWithIdentifier, ugh.
What is wrong with this?
• I am dequeueing something from the receiver.
• It is a reusable cell.
• The first (and only) argument is the identifier for the cell.
What would be a better name, without losing the descriptiveness?
> Without tab completion, you do a lot of copying and pasting from the documentation when you find a method name you like, just to ensure you don’t accidentally typo it.
This is a huge problem, not a minor thing! The whole point of those "long" message (not method, btw, but that's minor) names is that you don't have to read documentation. If you want to append a format to a string, but don't know the name, just start typing "stringby" and the names are the documentation.
> Do you have a big sign on your head that says "CONTAINS BIGOTRY. DO NOT APPROACH THIS PERSON IF BIGOTRY OFFENDS YOU."?