Client side verification is just security by obscurity, which gains you very little.
If someone is capable of MITM attacking a user and fetching a password mid-transit to the server over HTTPS, they are surely capable of popping open devtools and reverse engineering your cryptographic code to either a) uncover the original password, or b) just using the encrypted credentials directly to authenticate with your server without ever having known the password in the first place
You are acting like someone checked off a "log passwords" box, as if that's a thing that even exists
Someone configured a logger to write HTTP bodies and headers, not realizing they needed to build a custom handler to iterate through every body and header anonymizing any fields that may plausibly contain sensitive information. It's something that literally every dev has done at some point before they knew better.
Nothing more beautiful than seeing transparent yellow-orange overlaid on top of transparent orange-yellow
It's not uncommon to see certain sites to only work on chromium because the dev used the filesystem APIs that don't exist on FF
It's not necessary but there is no reason not to.
Pros:
Cons:
venv/bin/python3 instead of just python3 in the run line of your dockerfilelol. Did this in my old building - the dryer was on an improperly rated circuit and the breaker would trip half the time, eating my money and leaving wet clothes.
It was one of the old, "insert coin, push metal chute in" types. Turns out you could bend a coat hanger and fish it through a hole in the back to engage the lever that the push-mechanism was supposed to engage. Showed everyone in the building.
The landlord came by the building a month later and asked why there was no money in the machines, I told him "we all started going to the laundromat down the street because it was cheaper"
Newer windows versions lets you set up scheduled defrags, yeah, but also if you aren't using your HDD for your OS there is little to no opportunity for it to become fragmented in the first place
Yes it happens in the background, but also, people's use case for HDDs nowadays doesn't even really necessitate defragmentation in the first place.
If you aren't using your disk for your OS where frequent temp writes etc are occurring, there is minimal opportunity for it to become fragmented, and if you aren't gaming, you aren't going to notice any performance hit associated with a minimally fragmented HDD
It's not that it happens in the background, it's that you don't defrag SSDs
It's unavoidable - once the cheese gets hot enough the steam will either force the liquid cheese out of existing holes, or it will make its own holes.
Make sure they are fresh out of the freezer when you put them in, as this lets the outside crisp up more before the inside becomes lava. Once you get close to the prescribed cooking time, you need to just sit in front of the oven door and watch them, and as soon as 2-3 break open, take the whole tray out
No it doesn't, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account
What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways
How would you verify it then?
If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in