oooh, the redbox uses full AES encryption!

[grawity@social.treehouse.systems]

@erincandescent ...Speaking of which. What confuses me is that while many sites show only the last 4 digits of my card number, there are some places that *do the exact opposite,* showing it as "1234 5678 9012 xxxx" and doing things like "Please provide the last 4 digits of your card number to confirm your identity", and I'm like, 〈(゜_゜) how does it even make sense

[erincandescent@akko.erincandescent.net]

@grawity now anyone who is showing something other than first6 + last4 is grossly violating PCI-DSS and needs to be shot.

[sirmino@mastodon.uno]

@foone oh god I wanna make a poster out of this toot

[foone@digipres.club]

@sirmino go ahead!

[simoncozens@typo.social]

@foone Oh God yes. I was reading some code in a graphics project last night to try to find an algorithm, and I *couldn't find the algorithm* because 90% of the code was code about code.

STOP WRITING CODE ABOUT CODE. JUST WRITE CODE.

[erincandescent@akko.erincandescent.net]

@grawity …apparently “first 6, any 4” is permitted but only with justification. See this article

[foone@digipres.club]

If you got here from hackernews, you can pay me here:

Just a moment...

(ko-fi.com)

I mean, it'd be nice if anyone else gave me money, I could really use it. But it's not required, unless you found this on hackernews.

[aud@fire.asta.lgbt]

@[email protected] @[email protected] but what if one day someone sees our code and goes "oh my god! This is amazing! This should be a library!" and it becomes a big project we're in charge of and our boss is like "you've saved the company with your use of factories!" and we go yachting together and : (

(this is genuinely the only reason I can think of why projects that are for highly specific niches end up being overarchitected. hope, basically?)

[gunchleoc@mastodon.scot]

@djsundog @foone You're right, there is a German meme for that, which is a dub of a French movie

[enno@mastodon.gamedev.place]

@gunchleoc @djsundog @foone this. This is the one!

[gunchleoc@mastodon.scot]

@enno @djsundog @foone It's the German version of "Look at my surprised face."

[hyc@mastodon.social]

Speaking of encrypting data at rest, I just finished up integrating #LMDB's encryption support into #OpenLDAP slapd. https://git.openldap.org/openldap/openldap/-/merge_requests/721

Using libsodium's chacha20poly1305 cipher, writes are about 20% slower than without encryption. Reads are a bit slower still. OpenSSL's chacha20poly1305 is a bit faster than libsodium's, though I only measured these in single-threaded workloads. Not sure if OpenSSL's internal locking affects multithreaded workloads here.

[montar@infosec.exchange]

@gabe @foone What about using IRC for IPC?

[foone@digipres.club]

@montar @gabe I made a game that did that once.

You moved around a maze and threw fireballs at the other uses, but it was actually handled by connecting to an IRC server and having the game clients yelling I MOVED TO (25,46)! at each other