Notices by Luna Rood (lunarood@mastodon.gamedev.place)

@foone Wait a second... How did you get your hands on the very thing I'm working on right now?

Leave my entropy alone! It's there for a reason, ok!? 😤

Ok, this is quite funny...

I stumbled upon this LD_PRELOAD "privilege escalation" article 🤨

The article starts by editing /etc/sudoers... but it's ok... it's only for lab setup...

The "lab setup":
`Defaults env_keep += LD_PRELOAD` 🤭

https://www.hackingarticles.in/linux-privilege-escalation-using-ld_preload/

Where are all the reverse engineers, compiler devs, and OS devs at!? There must be some people interested in this stuff around these parts...

(Please don't recommend hashtags. It's an intentional omission, to avoid the "hacker bros".)

You know, sometimes I think the programmer bros don't actually like programming...

They're all like "Noooo!!! [...] is not a programming language!" and "[...] sucks!" and "You're not a real programmer unless you [...]!!!".

Meanwhile I'm like...
*writing C* Awesome!
*writing Python* Love it!
*writing ASM* Heck yeah!
*writing Rust* Excellent!
*writing CSS* This rules!
*writing x86 hex* Very cool!
*writing HTML* Da bomb!
*writing GLSL* Let's go!

They're all good and bad for something. Chill out.

@ryanc @soatok @gsuberland @f4grx If Soatok were to change his mind on the set [1], I'd be utterly disappointed, considering that the poll framing fundamentally requires restricting the space to integers, as I alluded to [2].

Under the given conditions, a sudden change to reals, or another larger set, would effectively invalidate the entire prior search.

I maintain that mathematical rigour is paramount in such consequential endeavours!

[1] https://furry.engineer/@soatok/113794042080702966
[2] https://mastodon.gamedev.place/@lunarood/113789357645694281

@soatok @ryanc @gsuberland @f4grx I am very glad you are maintaining the scientific rigour of your research!

Of course, I would have preferred if you had preregistered your methodology prior to commencing data gathering, but I don't think this omission completely invalidates the validity and significance of this research 😁

(Ok, I'm done with the bit. I just had to get it out of my system 😅)

@OddDev @ryanc Because it has an extremely constrained password space.

Assuming the exact scheme in the example: "N+m=#", where all numbers are <100, and the computation is valid... The size of the password space is 100(100+1)/2 = 5050. That's absolutely negligible (even a four digit numeric pin is better).

"But someone's password scheme is not known" you say? It's all about scale. If a scheme is popular, you add it to your cracking database, and you'll be sure to crack several passwords!

@ollien @OddDev @ryanc Congrats! You just upgraded your password space to the equivalent of a six digit pin!

On the other hand, you just made remembering your password very difficult for yourself!

There's a certain poetic beauty in using a password that will be easier to crack than to remember yourself 😌

@ryanc those are awesome!

The combination of the shapes and the background texture gave me "Set of 2 Shaped Objects" vibes 😊