-
Posts
3240 -
Joined
-
Last visited
-
Days Won
1
Everything posted by jakj
-
Baldur's Gate: Dark Alliance, man.
-
First, we're talking about a stolen lastlogin file, which means there is no limit to requests per time interval. Second, care to calculate the odds that Notch even knows what the words "rainbow table" and "salt" mean in this context? (Not to mention that it's not even hashed, as it turns out.) Smart people either understand it, or know how to ask the right questions to come to that understanding. Stupid people see NERDWORDS and go "okay, whatever you say".
-
Re: Next Go-Around, please configure the pack better for balance and gameplay You don't seem to be able to grasp the complexity of these "simple fixes" you're touting. They would have to find them, collect them, put them in, test them, change them when testing reveals they're only half-fixes or the problem is more complex than that, and assume they do finally get every last little thing ironed out somehow............and then a mod updates! And the mod update fucks things up again! Yay, rinse-and-repeat time. Feel free to start giving about a thousand bucks a week to the pack in order for them to quit their jobs and use that money to live on while they spend all their time tweaking the pack to your exacting standards. Or deal with it.
-
It's a lot better than the various mental and social diseases spread by too much weakly-controlled congress like over on the MCF.
-
Well yes, as computers get faster, and exploiters are more able to take advantage of stupid people and make botnets, it suddenly becomes feasible to brute-force passwords that you could never have before. It's like how you see them do it on television, where the magic password-cracker box chooses random characters until it matches. Adding special characters just increases the possibilities, making it take much longer to brute-force it. All lowercase = 26 per character Any letter = 26*2 per character Add digits = 26*2 + 10 per character Add some specials = 26*2 + 10 + X per character So, if you allow A-Z a-z 0-9 and `~!@#$%^&*()-_=+[{]}\|;:'",<.>/? you get 94 choices per character. 8-char passwords give 6 * 10^15 passwords, and then you have to add in how many 1-7 char passwords there are. By comparison, 8-char passwords without specials is only 2 * 10^14 plus the 1-7 char passwords, so less than a tenth as many.
-
For the less technical, a quick summary: Encryption means encoding the password. This is a two-way process: You put it in, and you can get it back out. If someone gets the encrypted version, they won't be able to get anything back out of it unless they break the encryption (obviously not trivial). Downside means you either need a password as the encryption key, or an encryption key stored on the computer (which can be stolen so no point). Far too much for the average Minecraft user to deal with. True secure login would require public-key encryption, where your password is stored on your computer with Mojang's public key so only their private key can open it, and transmitted the same way so it can't be intercepted halfway across the line. Hashing means converting the password to a shadowed form. This is a one-way process: You put it in, but you can't get it back out again. If someone gets the hashed version, they can use it to log in, but they can't get the password from it directly. The technique to break a hashed password is just a dictionary attack: They hash common passwords until they get a hash that matches your hash. If you use a good password that's random letters and numbers, it's basically as secure as an encrypted password. Even shorter summary: Way it should be done = public-key cryptography (requires Minecraft and Mojang's auth servers to be rewritten); Way it should be done barring that = hashing (requires a couple lines added to Minecraft and a couple lines added to auth servers...very easy).
-
Yes, I've been informed already that I was wrong and it is not indeed hashed. Which is just ridiculous and painful, since hashed passwords have been in use since Arpanet. I think this is the final true proof that Notch is a guy who had a good idea but is absolutely shit at programming and shouldn't've ever been let near a compiler. It's not even my opinion anymore: It's objective fact.
-
All of this can be done with other mods, admittedly with much more effort. Someone here will eventually come up with replacements for some of the little bits, like item-specific backpacks, and the rest will just be done with other things like RP frames.
-
Re: [MC 1.1/SSP 6.0.7] JAKJ's "Fair Trade" 0.1.0.0 (Apr. 8, 2012) Well, I'll look into it; One step at a time. I doubt it would be any more complicated than interfacing with Buildcraft itself, though, unless something more were involved than simply a pipe connection.
-
Re: Next Go-Around, please configure the pack better for balance and gameplay You go right here. Fix it, put up your fix, and someone'll use it if they have a chance (and if it works). This isn't their job: If they don't have time to fix something, do it your damned self. FYI: Being annoying on this board can lead to a ban just as fast. Since your wording indicates that you admit to being annoying, the admin's action is therefore justified. What makes you think you (or any of us) deserve to be warned about annoying behavior? This isn't preschool: It's a moderated forum. The technic team is not here to guide us into appropriate social behavior. If we're old enough to be here, we should be old enough to know how to act already.
-
Re: [MC 1.1/SSP 6.0.7] JAKJ's "Fair Trade" 0.1.0.0 (Apr. 8, 2012) Yeah, an auto-installer is definitely on the table. You know how haphazardly I work, though. ;-) Already have the patcher written and working, though, and I have a Java .zip library that looks like it'll work nicely. Reading up on Swing components now and they're delicious. LP? Logicstic pipe?
-
Re: [MC 1.1/SSP 6.0.7] JAKJ's "Fair Trade" 0.1.0.0 (Apr. 8, 2012) What, like creative-mode testing tools? Or more for adventure maps? If the latter, keep in mind that would require the people playing the map to install the mod too.
-
I did, but honestly I just can't use a 32x32 pack. My brain has come to assimilate the default 16x16 textures, and when I use an HD pack, there's such a vast difference that my brain isn't bothered by little differences and can just enjoy the prettiness of it, but a 32x32 pack is so close to the original resolution that any slight differences send me into OC overload. If someone were to just take every texture file, scale it up to double the resolution, and smooth out the jaggies a bit, I could probably use that, but not a pack that changes things but leaves them almost the same resolution as vanilla. It's just the way my mind works.
-
THE OS HOLY WARS! and why they need to be over.
jakj replied to miniboxer's topic in Off Topic Discussion
Anecdotal. Valid within that context, but still anecdotal. As a programmer, I fucked up my Windows system more times than I can count (all the way back to 98 and NT), whereas it took me until after college to figure out how to panic the Linux kernel exclusively from userspace. Windows is a massive plate of spaghetti that vomits all over itself frequently, but this emetical force is redistributed throughout the system (like laying on a bed of nails) so you don't always see it. Linux is pretty much in the same state, but is built out of lots of little pieces, so most any time something goes wrong, it goes wrong within that little piece and the rest goes on blissfully without it. My personal experience with these two OSes is that Windows lumbers on like a beast for quite a while, slowly dribbling all over itself, gently and quietly corrupting itself, and that GNU/Linux rolls on like a rockfall, occasionally losing a rock or two over the side, but overall still being the same rockfall. -
Anybody who actually finishes the main story line first in an Elder Scrolls game is doing it wrong.
-
I got a single line, but CheapShot got a whole trio of posts about him. They love him more than me. ;-)
-
Geordi: "But, Data...that was seven years ago." Data: "I know! I just got it!"
-
Well, I think that crosses the line from victim to moron, and that's natural selection of server admins right there. When you get stupidity of that level, drastic measures are called for.
-
Amusingly enough, I googled "creativity rapist" because I'm a narcissistic bastard, and sure enough, a BTW forum post is one of the top results, and naught but a handful of posts down was a link to that very comic page! Such a small world.
-
I do believe the best kind of lesson is an object lesson, but that's really not the way to go about it. I understand what you're saying, though.
-
Oh, I'm glad you posted that. I had just gone by the title of the link and not even bothered to click on it, so I was actually believing it. I did think it odd that Krapht would change his stance so radically, but it could have been plausible.
-
Congratulations: Your bug report amounts to "it's broke". So my tech-support response to you is a resounding "yup".