Back to the channels

#java

05:36 [twisti] NeXeN: that seems like a convoluted and confusing way to achieve ... the same thing *s do
06:30 jreicher [twisti]: one thing that isn't a waste of time is to randomise the number of asterisks that are printed with each keypress.
06:46 [twisti] it seems like a better option would then be to not display them at all. *s are displayed to help people see if they made a mistake typing - if you take that away, which is reasonable, there is no reason to display them at all anymore, as they give no more information and additionally serve to confuse the user making them think they mistyped
06:54 jreicher I think it's more important to see that a keypress happened at all. But I take your point. It's hard to balance useful feedback against compromising information. There's a natural tension.
07:03 Para Remember Lotus Notes which literally printed random amount of eqyptian hieroglyphics when passwords were being typed.
07:04 Para https://blog.codinghorror.com/the-dramatic-password-reveal/
07:16 jreicher You had me at "Remember Lotus Notes"
07:17 Para Remember, remember, the 1-2-3 of Lotus.
07:28 Harzilein hmm
13:02 dreamreal personally, I think there's no need to hide any of the characters in the passwords: when I type my password, which is obviously *******, I want to see the actual characters so I know it's right: it should be displaying hunter2 like God intended
13:33 Para I need to hide an April Fools' mode into my next app where the password mask shows hunter2 instead of ******
14:30 [twisti] how did you know my password???
14:31 dreamreal how did you know MY password!!!
14:43 dmlloyd obligatory 1 2 3 4 5
15:58 sbalmos Passw0rd123!@
16:05 dreamreal I don't know why anyone would bother typing ************* in a channel
16:05 dreamreal seems like a waste of time and bandwith
16:08 sbalmos it's better than $@@FFA@#@@#%^@
16:12 dreamreal Why'd you type ************** out
16:13 sbalmos dreamreal: because MFA4IRC told me to
16:16 sbalmos dreamreal: it's also saying you'll need 075184 as the 2FA code to use. Be quick though. It's only good for another 10 minutes.
16:17 dreamreal 075184
16:17 dreamreal Did I make it on time? hey, cool, my bank just texted me
16:17 dreamreal hmm, yes, bank manager, that really is a nigerian prince, he promised me
16:24 sbalmos dreamreal: uhm, I'm not in Nigeria, I'm in South Africa
16:24 sbalmos dreamreal: you twat, you just ruined it
16:24 sbalmos dreamreal: where'd my money go?
16:24 dreamreal Nigeria! ... it'll come back. He promised.
16:25 dreamreal All I need to do is dial this long international number: it's only 27 digits long and has π and § in it, should be easy
16:26 dreamreal I'm on attempt #12 to type it in, though
16:27 sbalmos dreamreal: can't you get anything right? it's not §, it's 🌀
16:28 dreamreal He said it was §. Maybe it was a ∞ though
16:28 dreamreal ... and how did YOU know
16:36 dreamreal I should write a weechat plugin that matches all input against my passwords and actually does replace them with asterisks. That'd be a great idea, right?
16:36 Para why not provide it as a cloud service
16:36 Para with AI
16:36 dreamreal That's a good idea too
16:37 * dreamreal gets to vibe coding
16:37 Para https://chromewebstore.google.com/detail/cloud-to-butt-plus/cnonlogcinofngnafanjhbenljkpokcm
16:38 cheeser you could do a simple entropy check and mask out those. that's how github scans for secrets and essentially what do in our sensitive data scanner. there's more to it but that's the first pass that is good enough for irc.
16:38 Para I wonder what's the entropy of standard Finnish...
16:39 dreamreal I don't need no entorpy. But I WILL write it in brainfsck...
16:40 Para Or tokenization (the actual kind, not LLM) - if the word doesn't tokenize properly, it's probably a password.
16:40 Para Or the cat trying to do the taxes again, and that is also something worth blocking.
16:41 dreamreal Maybe that's why my taxes were so high this year. I *knew* she couldn't spell, but now my cat can't do math, EITHER? Crikey, why do I even keep her around