2026-07-10 15:11 UTC
Replies (3)
-
@soatok@furry.engineer 2026-07-10 15:20
If anyone is confused about why this is funny: Imagine you have two password fields on two different forms Form A uses a password hashing function (e.g., Argon2) on your password and stores a hash. Form B is almost the same, but hashes the string "gay" followed by your password. If you swap hashes, you only need to prepend "gay" to your usual password for it to succeed. Okay, so what? Now imagine you're building a protocol that uses hash functions for different purposes and you used H(m) and H("gay" + m) in two different places, and felt confident that swapping hashes would always fail. Well. Bad news lol
-
@arrjay@tacobelllabs.net 2026-07-10 16:01
@soatok@furry.engineer practicing domain separation by having at least 10 dns domains
-
@cuchaz@gladtech.social 2026-07-10 17:42
@soatok@furry.engineer @sophieschmieg@infosec.exchange I saw your first post and I LOL'd. Then I found the follow-up posts where you explained the joke in excruciating detail so other people can learn the joke too. :blobcatheart: Instant boost!