• slazer2au@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    3 months ago

    The majority of technologies that power the internet were developed in the 80s and refined in the 90s. Everything since then is built as a layer of abstraction on top of those core technologies.

    • mspencer712@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      3 months ago

      Also, the development and evolution of these open technologies relies on human interest and attention, and that attention can be diminished, even starved, by free, closed offerings.

      Evil plan step 1: make a free closed alternative and make it better than everything else. Discord for chat, Facebook for forums and chat/email, etc.

      Step 2: wait a few years, or a decade or more. The world will largely forget how to use the open alternatives. Instant messengers, forums, chat services, just give them a decade to die out. Privately hosted communities, either move to Facebook, pay for commercial anti-spam support, spend massive volunteer hours, or drown in spam.

      Step 3: monetize your now-captive audience. What else are they going to use? Tools and apps from the 2000s?

      • forgotmylastusername@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        3 months ago

        We are facing a very real possibility of the end of the web browser as we know it. Google owns the chromium engine. Mozilla is on ever more precarious footing. It’s become logistically impossible to build competing products except for tech giant. Even then everybody else gave up and went with chromium.

  • cooltrainer_frank@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    3 months ago

    Former process engineer in an aluminum factory. Aluminum foil is only shiny on one side and duller on the other for process reasons, not for any “turn this part towards baking, etc” reasons.

    It’s just easier to double it on itself and machine it to double thickness than it is to hit single thickness precision, especially given how much more tensile strength it gives it.

    Also, our QA lab did all kinds of tests on it to settle arguments. The amount of heat reflected/absorbed between the two sides is trivially small. But if you like one side better you should wrap it that way, for sure!

    • darklamer@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      The amount of heat reflected/absorbed between the two sides is trivially small.

      Your particular choice of wording here makes me very curious: Do you mean that there really was a measurable difference (which was trivially small)?

      • cooltrainer_frank@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        3 months ago

        Yup, the lab could tell a difference! Shiney side (so mill roller facing, as opposed to the dull side which faces the other layer of aluminum) was marginally more reflective, but I believe (and a former coworker also remembered it as) it was less than a tenth of a percent (<0.1% for the visual folks)

        Anyone who says it affects cooking time or something is mistaken, I’d wager.

        • Colonel Panic@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          Jokes on you.

          I baked my casserole with the shiny side up and pulled it out at 59 minutes and 55 seconds, when it was supposed to go for an hour.

          So take that Dull Side!

  • hedgehogging_the_bed@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    3 months ago

    The interview is a vibe check first and foremost. If you vibe with the team we will overlook other things in your application. If you made it to interview, we already think you’re good enough so don’t stress trying to impress or apologize.

    Managers are mostly people who get tired of watching other people do things badly and decide to try to do better. You don’t need a special degree or any magic to be a good manager, you should like people though.

    Everyone is faking it to some degree.

    • elbowgrease@lemm.ee
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      people are generally ok. put them in a situation where they can climb over other people to advance and watch the rot begin.

      so, while people are generally ok, corporate people are generally not.

    • haui@lemmy.giftedmc.com
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      The „you have to like people“ part took me nearly 20 years to figure out. I hate people in general with possible remedy for people who are nice. I‘m exceptional at managing people, I just dont vibe with them. This leads to absurd situations where everyone is happy, professionally but folks just hate my guts.

      So, I now work alone and am happy with it. :)

    • Floon@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      US universities are pro football teams with a sideline in education.

    • ZombiFrancis@sh.itjust.works
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      I went to college before the internet was ever considered a valid source for any material. But using the internet made research extremely easy if I could determine the book source for reference.

      I went back to college right around that time the internet just became the default source for everything. It was staggering how little information was expected to be known. The implicit ubiquitous access to information was a staggering foundational shift.

  • rodbiren@midwest.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    A whole bunch of welds in nuclear reactors are visually inspected using cameras duct taped onto the end of incredibly long poles which also get duct taped together. This would be the inside of BWR plants near the fuel and jet pumps. There is also an “art” to moving the cameras and poles around to get the shots you need. And if you get stuck the talented people know how to get you unstuck. There are also cameras just duct taped to ropes that the camera handler “swims” to certain spots.

    Don’t get me wrong, we have cool ultrasonic inspecting robots as well, but I was absolutely blown away by what visual inspection looked like in practice.

    PS: The high dose fields make the camera look like it is being blasted with colorful confetti because of the high energy particles bombarding the camera module.

  • SirSamuel@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    3 months ago

    These aren’t secrets, but may not be well known (unless you watch LPL):

    Sentry Safes aren’t safes, they are fire boxes with a fancy lock.

    High security locks are not high security because of the lock design, but because the keys are very difficult to have duplicated.

    No one (except maybe intelligence agencies) breaks in to a house by picking a lock, especially in the US. Windows, weak door frames, and, in a pinch, making a hole in the wall are all faster ways of getting in.

    Car keys are so expensive because many manufacturers charge a subscription or per-use fee to access and program the keys to the ignition. These costs are passed on to consumers

    No one is picking your locks just to move things around or steal small, insignificant items. You are either suffering from a mental disorder or a trusted member of the household is gaslighting you (it’s not gaslighting though, you’re your grasp of reality is slipping. Don’t call me for a pick proof lock, just get help please)

    Some manufacturers (you know, in China) will put any sticker you want on the products they produce, including UL and ANSI stickers. Before buying a product that is supposedly fire-rated, such as a fire safe, check the UL website to verify the item is actually listed with them.

    “Grade 1” door hardware sold in stores like Lowe’s or Home Depot is, at best, Grade 2, and is likely Grade 3 (residential grade). These grades are really just about how durable the product is over time, and how much abuse they will endure by the public.

    And just a little practical advice. Find a qualified, honest locksmith before you need one. We’re like plumbers. If you wait until you have an emergency to find one, the quality will be questionable. There are a lot of scammers out there. If you don’t have a resource for locksmiths beyond Google, look on the ALOA website for members in your area. The good ones will know who the other good ones are, and won’t be shy about sharing that info if they are unavailable or too far away

    • I Cast Fist@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      If there’s one thing the Lockpicking Lawyer taught me, is that the vast majority of locks only work because almost nobody bothers to learn lockpicking. Some “extra safe” locks being defeated by a fucking magnet of all things always amuse me

    • SoleInvictus@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      I learned to pick locks in my youth. I absolutely have picked my way into places and things to fuck with friends and family, but I always tell them. At some point.

      One of my favorites was getting into my friend’s garden shed and turning everything upside down, then a few weeks later rearranging everything so it was a mirror image of how it was previously.

    • CanadaPlus@lemmy.sdf.org
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      3 months ago

      Spooks (including the domestic FBI-type ones) definitely pick locks. They also have things like spray-on dust to hide the fact they’ve been in a place.

      No one is picking your locks just to move things around or steal small, insignificant items. You are either suffering from a mental disorder or a trusted member of the household is gaslighting you (it’s not gaslighting though, you’re grasp of reality is slipping. Don’t call me for a pick proof lock, just get help please)

      I have someone like this. Glad to hear it’s common-ish. She’s “getting help” but the doctors can’t do much more than we can.

      • SirSamuel@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        3 months ago

        Yeah those cases are sad. I tend to just say my prices really high, and if they persist in wanting me to come out I suddenly don’t have availability because of the “big government project” I’ve been hired to do. Even if they were worth the trouble of all the follow-up “someone broke in, you have to fix my locks” calls that inevitably come, I couldn’t in good conscience take their money.

        Last time it happened a lady wanted me to install Schlage Primus deadbolts on her house because her neighbor was “breaking in and moving things to mess with me”. I gave her a quote that was 5x higher than it should have been. I kid you not, she said, “Okay, but I’ll have to wait a couple of weeks to get the money. My husband said I couldn’t change the locks anymore and that this is all in my head.” Poor lady. I saved her number so I wouldn’t forget if she called again, but I never heard from her. Hopefully she got the help she needed, but probably she got divorced and is living on the streets.

        • fmstrat@lemmy.nowsci.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          By your reasoning I could use some 24 gauge wire that came with a pair of Walmart computer speakers with a receiver paired with 3-ways each with 10" woofers. Or even better yet, between a plate amp and sub as a fire starter.

          I don’t disagree with your overall premise, but it’s too reductive, even for home theater. Throw in a “16ga in most non-sub applications” and only then does it become true.

  • sudo42@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    If you value your privacy and you have a choice between using a browser to access a service vs installing their app, use the browser.

    Online services can get much more information about you through an app vs the browser. Browsers are generally locked down more. Apps in general have access to much more information from your device.

  • Talaraine@fedia.io
    link
    fedilink
    arrow-up
    1
    ·
    3 months ago

    Most of hacking is done by mass effort with maybe a couple percent of people that aren’t doing basic things to protect themselves being affected. That couple of percent is enough to keep the hackers flush. (So please, follow basic cybersecurity steps, people.)

    The plain truth of the matter, though, is that if a hacker or group of hackers is targeting someone individually for reasons, that person is in real trouble.

    This has been a PSA for everyone chasing fame and clout.

    • kevincox@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      Tips for being secure online:

      1. Use your browser’s password manager to generate random passwords.
      2. In the rare case you need to manually enter your password into a site or app be very suspicious and very careful.
      3. Never give personal information to someone who calls or emails you. If necessary look up the contact info of who called you yourself and call them back before divulging and details. Keep in mind that Caller ID and the From address of emails can be faked.
      4. Update software regularly. Security problems are regularly fixed.

      That’s really all you need. You don’t even need 2FA, it is nice extra security but if you use random passwords and don’t enter your passwords into phishing sites it is largely unnecessary.

      • HubertManne@moist.catsweat.com
        link
        fedilink
        arrow-up
        0
        ·
        3 months ago

        Im not so sure about your number 1. Fine if otherwise they won’t use one but personally I use bitwarden online for unimportant ones and a local keypass for important ones.

        • kevincox@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          3 months ago

          The reason I say browser password manager is two main reasons:

          1. It is absolutely critical that it checks the domain to prevent phishing.
          2. People already have a browser and are often logged into some sort of sync. It is a small step to use it.

          So yes, if you want to use a different password manager go right ahead, as long as it checks the domain before filling the password.

  • bloodfart@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    3 months ago

    ~Things people don’t want to know~

    Putting a layer of tissue between your butt and the toilet seat doesnt provide enough of a barrier against microorganisms over the time it takes to shit or piss to prevent transmission.

    Keeping the air dry reduces both the length of time microorganisms can live outside your body and the length of time that vapor particles can harbor them.

    The n95 (and other) rating(s) are over time in free, circulating, open air. Derate safe exposure time sharply for use inside or in spaces with stagnant or unmoving air.

      • bloodfart@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        3 months ago

        If you’re able to hold it long enough and you’re truly worried, folding a wet paper towel over a couple of times and using the hand soap to clean the seat and then folding it over again to get a “rinse” before you sit down is a better way to go about it.

        “I’m worried about germs on the toilet seat”

        “Well, they gave you paper towels, soap and running water, why not clean the motherfucker?”

        “Nah, imma just put the thinnest material known to man in between my butt and the seat”

    • MagicShel@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      3 months ago

      That’s where you need people like me who give a fuck about nothing but customer experience and if my employer manages to make a buck, good for them. My employer is generally just a middle man who siphons money out of both our pockets. And makes me fill out a second, useless timesheet while you’re paying me to work.

      Jokes on me though because I’ve been out of work for 3 months, so take my suggestion of fuck your employer with a grain of salt.

    • Lightor@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      I mean, no? If you are at a SaaS company the software working well is the most important aspect. Loss of quality leads to loss of subscribers.

        • boonhet@lemm.ee
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          3 months ago

          And if the business needs aren’t met, said businesses will go to another SaaS company that promises them a better, brighter future.

          The user might not be the subscriber, but the user being less productive because the software is getting in their way, will irritate the subscriber.

          I know a SaaS company that put thousands upon thousands of engineering hours into making small (and sometimes large) optimizations over their overall crappy architecture so their enterprise customers (and I’m talking ~6 out of the top 10 largest companies in one industry in the US) wouldn’t leave them for a solution that doesn’t freeze up for all users in a company when one user runs a report. Each company ran in a silo of their own, but for the bigger ones… I’m not going to give exact numbers, but if you give every user a total of half an hour of unnecessary delays per day, that’s like 500 hours of wasted time per day per 1000 employees. Said employees were performing extremely overpriced services, so 500 hours of wasted time per day might be something like 100k income lost per day. Not an insignificant number even for billion dollar companies.

          I’ve since left the company for greener pastures and I hear the new management sucks, but the old one for sure knew that they were going to lose their huge ass clients over performance issues and bugs.

          • Modern_medicine_isnt@lemmy.world
            link
            fedilink
            arrow-up
            0
            ·
            3 months ago

            The key phrase was work well. You are saying they have a motive for it to work. Like not freeze up. I am saying they have no motive for it to work well. As in be user friendly or efficient or easy to use.

            • Lightor@lemmy.world
              link
              fedilink
              arrow-up
              0
              ·
              3 months ago

              Ok, well really splitting hairs on what “working well” means but ok. Why do UX designers exist? I mean if you have a bad UI that takes a user 10 min to do something that can be done in 10 seconds in another solution, you lose. Time is money. Anyone who has ever been in magament knows it’s all about cost vs output. If a call center employee can handle 2x more cases with another solution due to a better UX, they will move to that.

              You are saying efficiency doesn’t matter, which is just %100 false. A more efficient solution makes/saves more money. It saves time, which is also money and improves agility of the team. How can you say with a straight face that a business doesn’t care about efficiency of it’s workers…

              • Modern_medicine_isnt@lemmy.world
                link
                fedilink
                arrow-up
                0
                ·
                3 months ago

                Because I have worked with software for 30 years. When the employee is salaried, thier time costs nothing. I will say I have no experience with call centers. So those may be an exception. I believe the majority of computer use jobs are salary though.

                • Lightor@lemmy.world
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  3 months ago

                  Ugh, wrong again. Time is money. People have limited bandwidth and output, you want to get at much output as you can for the salary spend while realizing each person has a finite output. You keep saying things like “time costs nothing” and “quality doesn’t matter” which are just completely wrong and if true would upend the industry.

                  Also I’ve been in software for just over 20, the last 4 of those as a CTO. Since you seem to keep bringing up your credentials for some reason.

    • Jack@slrpnk.net
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      That is true for outsourcing companies, but not true for product companies usually.

      • treadful@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        I think it’s equally true for product companies. Do you know how hard it is to get a company to prioritize bug fixing over feature work? Shy of a user revolt, or a friend of the CEO reporting an issue, bugs are almost always second priority or lower.

        • hightrix@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          3 months ago

          I’d say this strongly depends on the industry.

          In an entertainment or ad sales product, I’d completely agree with you.

          In a medical or financial product, the bug will take precedence.

          • Modern_medicine_isnt@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            3 months ago

            Medical? Your funny. Healthcare software is the worst. There is a reason the stuff that matters is decades old. Cause the new stuff rarely works. And the rest… tell me again why I have to fill out the same forms year after year, and they never populate with my previous answers? Or why I have to tell them my 2 year old son isn’t menstruating or hasn’t stolen a car yet (on the same form no less). The software is so hard to use the providers have given up.

      • Modern_medicine_isnt@lemmy.world
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        3 months ago

        No idea what you are talking about. Product companies are exactly what I am referring to. Some director signs off on the purchase, probably has never even seen the software. But he has seen the sales pitch. That is what the C suite of small companies are for, mingling with the decision makers.

    • dotned@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      Depends on business model. Saas - quality is very important. Non-profit insurance/bureaucratic type - they’ll burn millions to hire plenty of QA then treat them like shit, ignore them, and push trash software all day

          • Modern_medicine_isnt@lemmy.world
            link
            fedilink
            arrow-up
            0
            ·
            3 months ago

            Uptime isn’t quality. Perf and reliability are easily faked with the right metrics. It’s trival to be considered working on PowerPoint without working well for the user

            • Lightor@lemmy.world
              link
              fedilink
              arrow-up
              0
              ·
              edit-2
              3 months ago

              Uptime indicates reliability. Reliability is a factor of quality. A quality product has a high uptime. What good is a solution that doesn’t work 20% of the time? That’s exactly how you lose clients. Why do SLAs cover topics like five 9s uptime if they don’t matter and can be faked? This makes no sense.

              You said quality doesn’t matter, only features. Ok, what happens when those features only work 10% of the time? It doesn’t matter as long as it has the feature? This is nonsense. I mean why does QA even exist then, what is the point of wasting spend on a team that only worries about quality, they are literally called Quality Assurance. Why do companies have those if quality doesn’t matter, why not just hire more eng to pump out features. Again, this makes no sense. Anyone who works in software would know the role of QA and why it’s important. You claim to work in tech, but seem to not understand the value of QA which makes me suspicious, that or you’ve just been a frontline dev and never had to worry about these aspects of management and the entire SDLC. I mean why is tracking defects a norm in software dev if quality doesn’t matter? Your whole stance just makes no sense.

              It’s trival to be considered working on PowerPoint without working well for the user

              No it’s not trival. What if “not working well” means you can’t save or type? Not working well means not working as intended, which means it does not satisfy the need that it was built to fill. You can have the feature to save, but if it only works half the time then according to you that’s fine. You might lose your work, but the feature is there, who cares about the quality of the feature… If it only saves sometimes or corrupts your file, those are just quality issues that no one cares about, they are “trivial?”

              • Modern_medicine_isnt@lemmy.world
                link
                fedilink
                arrow-up
                0
                ·
                3 months ago

                See, you just set the bar so low. Being able to save isn’t working well, it’s just working. And I have held the title of QA in the past. It is in part how I know these things. And in the last 5 years or so, companies have been laying off QAs and telling devs to do the job. Real QA is hard. If it really mattered you would have multiple QA people per dev. But the ratio is always the other way. A QA can’t test the new feature and make sure ALL the old ones still work at the rate a dev can turn out code. Even keeping up on features 1 to 1 would be really challenging. We have automation to try and keep up with the old features, but that needs to be maintained as well. QA is always a case of good enough. And just like at Boeing, managment will discourage QAs from reporting everything they find that is wrong. Because they don’t want a paper trail of them closing the ticket as won’t be fixed. I’ve been to QA conferences and listened to plenty of seasoned QAs talk about the art of knowing what to report and what not to. And how to focus effort on what management will actually ok to get fixed. It’s a whole art for a reason. I was encouraged to shift out of that profession because my skills would get much better pay, and more stable jobs, in dev ops. And my job is sufficiently obscure to most management that I can actually care about the users of what I write more. But also I get to see more metrics that show how the software fails it’s users while still selling. I have even been asked to produce metrics that would misrepresent the how well the software works for use in upper level meetings. And I have heard many others say the same. Some have said that is even a requirement to be a principle engineer in bigger companies. Which is why I won’t take those jobs. The “good enough” I am witness/part of is bad enough, I don’t want to increase it anymore.

                • Lightor@lemmy.world
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  3 months ago

                  I’m setting a new low sure, and you’re moving the goal posts. What “well” means is incredibly subjective.

                  You worked in QA, cool, and I’ve manage the entire R&D org of a nation wide company, including all of QA.

                  Your saying that since companies don’t invest in it enough it doesn’t matter at all? Why do they even invest at all then, if it truly doesn’t matter.

                  Yes a QA can test old features and keep up with new ones. WTF, have you never heard of a regression test suite? And you worked in QA? ok. Maybe acknowledging AQA is an entire field might solve that already solved problem.

                  You did a whole lot of complaining and non relevant stories but never answered any questions I’ve been asking you across multiple comments…

    • Mathazzar@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      The navy manual for troubleshooting equipment in the field includes “lift 3-6 inches and drop”

  • Skanky@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 months ago

    A lot of the “generic” or “store brand” packaged foods are literally the same exact product as the name brands, only in different boxes/bags

    • mudmaniac@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      I’m not so sure about food, but for many mass market products it is indeed true that the same manufacturer can be engaged to make the same product under different branding. The difference then comes down to the corners cut to meet the client’s pricing. Crappier boxes, thinner bags, packing material, and quality inspection. Assuming the core ingredients are not compromised in some way.

      • trolololol@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        3 months ago

        I would like that… Saving on a smaller package for chips and cereal sounds great, most of it is air anyways.

        • Breezy@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          3 months ago

          No you dont. I have worked in 2 groceries stores, the bags with less air get way more crushed and broken while stocking. Having bigger bags with a lot of air keeps the chips integrity in tact.

  • corsicanguppy@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    3 months ago

    Systemd was built by a guy who wanted to work at Microsoft with the help of someone berated more than once for an inability to work with others and generate decent kernel code. These are your gods

  • Bytemeister@lemmy.world
    link
    fedilink
    Ελληνικά
    arrow-up
    0
    arrow-down
    1
    ·
    3 months ago

    IT, more specifically user support.

    Let’s talk passwords. You should have a different password for every site and service, over 16 character long, without any words, or common misspellings, using capital, lowercase, number and special characters throughout. MyPassword1! is terrible. Q#$bnks)lPoVzz7e? is better. Good luck remembering them all, also change them all every 30 days, so here are my secrets.

    1: write your password down somewhere, and obfuscate it. If an attacker has physical access to your desk, your password probably isn’t going to help much. 2: We honestly don’t expect you to follow those passwords rules. I suggest breaking your passwords down into 3 security zones. First zone, bullshit accounts. Go ahead and share this one. Use it for everything that does not have access to your money or PII (Personally Identifiable Information). Second zone, secure accounts, use this password for your money and PII accounts, only use it on trusted sites.Third, reset accounts. Any account that can reset and unlock your other accounts should have a very strong and unique password, and 2FA.

    Big industry secret, your passwords can get scraped pretty easily today, 2FA is the barest level of actual security you can get. Set it up. I know it’s a pain, but it’s really all we’ve got right now.

    • my_hat_stinks@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      Good luck remembering them all, also change them all every 30 days, so here are my secrets.

      Password expiry hasn’t been considered best practice for a long time (must be at least a decade now?) largely because of the other points you mentioned; it leads to weak easily memorable passwords written somewhere easily accessible. Even when it was considered good 30 days would have been an unusually short time.

      Current advice is to change passwords whenever there’s a chance it’s been compromised, not on a schedule.

    • mub@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      Yeah, no. Computers don’t care if a password is complex or not. It can’t read “words”. That complexity stuff was introduced because humans think like humans, and wanted to force people to use words not easily found in a dictionary. Security is about password length, so +@#£h&1g/?!:h&£( is equally as vulnerable to a brute force attack as abcdefgh1234567 because of how modern encryption works, it I length that counts.

      It is good advice to use a formula to build memorable passwords. I like a simple sentence you can type them without thinking about, as this also won’t appear in a dictionary (avoid famous movie quotes, use something meaningful to you).

      Fact is complex passwords created a new security risk; the written down password. Also, frequent forced password changes made it worse. Most businesses only ask staff to change passwords every 3 to 6 months these days. And web sites.never asks you to change your password.

      The dirty (not so secret) secret is that, the biggest risk to security is not how complex your password is, but how easy it is to trick people into just giving away access to their accounts.

      These days MFA is what makes logon credentials safer and passkeys are slowly proving that passwords themselves are not worth it for most systems.

      tl;dr - complex passwords are a throwback and not better than long memorable ones like 1Verycrappycode!

    • ultranaut@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      Or, just use a password manager and simplify your life. Reusing any password is bad practice, even if the account doesn’t seem important. Every account really should have a randomly generated unique password. A password manager solves all of these problems.

        • jawsua@lemmy.one
          link
          fedilink
          arrow-up
          1
          ·
          3 months ago

          Unless its something like Bitwarden where you can use it even if they go offline, can take an encrypted or unencrypted backup of your local passwords/accounts, and are FOSS so you can easily self-host your own version if anything happens where you want to cut ties (thanks Vaultwarden!). They’re an awesome company and one I highly suggest supporting with a paid account

    • WhatYouNeed@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      3 months ago

      Have . and ; and / in the middle of your passwords. If a site is compromised and email + passwords are taken, these are usually stored in a csv file. If someone attempts to delimit the csv data, these characters can split you password into multiple cells.

    • w3dd1e@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      This is a method I heard once for remembering random passwords that I thought was clever.

      Create your own alphabet of words (or random characters). A is for Apple, B is for Boy, C is for Cat…etc.

      For every letter in the URL, you use the word from your alphabet. Ex:

      www.facebook.com

      F = Fog, A = Apple, C = Cat, E = Egg, B = Boy, O = Off, O = Off, K = Kite

      Next, you need a number if you didn’t use one in your alphabet.

      Facebook is 8 letters long so I might use 8. Or only letters repeated once. Or maybe you use the whole URL. Up to you, but you do it the same way for every site. You create a patter that you follow and can remember, rather than remembering every password.

      Need a symbol? Assign that to the top level domain. In my example, .com = # .edu = ? .org = * etc

      Put it all together and my example password would be “8FogAppleCatEggBoyOffOffKite#”.

      A password for google.com might be ‘6GolfOffOffGolfLogEgg#’.

      Obviously, you don’t have to do it this exact way with the alphabet, number, and symbol. The idea is that you create a set of rules that you remember and follow. If you write down “A = Apple B = Boy…” and someone finds it, it won’t be instantly obvious that it is meant for passwords.

      • dependencyinjection@discuss.tchncs.de
        link
        fedilink
        arrow-up
        1
        ·
        3 months ago

        This is terrible. If someone gets a couple of your passwords it’s pretty easy to work out the patterns and gain access to your other accounts.

        Don’t complicate it. Use a password manager. I know none of my passwords and that’s how it should be.