• 0 Posts
  • 284 Comments
Joined 3 months ago
cake
Cake day: June 23rd, 2024

help-circle
  • Trump is a POS but that doesn’t mean that the declining quality of education is not a real problem.

    Yeah, but the declining quality is because of people like him who are making sure good education must be paid for, and this rambling again is just a way to get people worked up against a non-issue to deteriorate the education system further. There’s no “education is threatened” in that message because the base doesn’t care, either because they don’t value education or because they don’t think it should be available to poor people.









  • I worked in software certification under Common Criteria, and while I do know that it creates a lot of work, there were cases where security has been improved measurably - in the hardware department, it even happened that a developer / manufacturer had a breach that affected almost the whole company really badly (design files etc stolen by a probably state sponsored attacker), but not the CC certified part because the attackers used a vector of attack that was caught there and rectified.

    It seemingly was not fixed everywhere for whatever reason… but it’s not that CC certification is just some academic exercise that gives you nothing but a lot of work.

    Is it the right approach for every product? Probably not because of the huge overhead power certified version. But for important pillars of a security model, it makes sense in my opinion.

    Though it needs to be said that the scheme under which I certified is very thorough and strict, so YMMV.




  • Salt the hash with something unique to that specific user so identical passwords have different hashes

    Isn’t that… the very definition of a Salt? A user-specific known string? Though my understanding is that the salt gets appended to the user-provided password, hashed and then checked against the record, so I wouldn’t say that the hash is salted, but rather the password.

    Also using a pepper is good practice in addition to a salt, though the latter is more important.