• 0 Posts
  • 34 Comments
Joined 1 year ago
cake
Cake day: August 25th, 2023

help-circle
  • AFAIK if you spend at least 2 years studying here you automatically qualify for a 3 year work permit. I think rolling that into permanent residency is a lot easier than just applying for a work visa or PR out of the gate

    International student tuition is way more expensive here in Canada than it is for citizens, but I’m not sure how it stacks up against normal US tuition.

    Grain of salt, everything I’ve said is based on anecdotes from people I know who went through it




  • The word ‘decipher’ is doing a lot of heavy lifting. I’m wondering if they socially engineered or just found it written somewhere in the house?

    You can plausibly brute force up to 4, maybe 5 words of a seed phrase. It takes longer than a normal password because every seed phrase is technically valid, so the only way to know if your brute force is successful is to generate thousands of addresses at each of the different derivation paths you may expect funds to exist at.

    The same seed phrase is used for Bitcoin, Ethereum, Monero, etc, but each currency uses the seed phrase to generate addresses in a slightly different standard. Additionally, each wallet uses a slightly different variation of that. Within each wallet is a notion of accounts, and within each account you could have dozens of addresses. You need to generate each of those addresses, and scan each cryptocurrencies blockchain to see if those addresses have ever been used.

    Realistically one of three things happened: his seed phrase was written down and they found it, it was password protected or on a drive with weak AES encryption and they cracked THAT instead, or finally, he used a hardware wallet and they exploited a firmware vulnerability to lift the PIN and transfer out funds and/or read the seed from the device




  • I haven’t used dual shock so I can’t speak to that, but as far as Xbox 1/S controllers, there is no 1st party support - literally all the drivers are from some non-MS affiliated GitHub page. 360 controllers required the xpad driver as well - that isn’t 1st party support. Yes they work out of the box with steam if you are using a wired connection, but that’s because it’s going through steaminput (not 1st party either), and making the controls of the submarine dependent on being launched through steam is even more absurd. Gen 2 series 1/S controllers didn’t work via Bluetooth for a long time after they (silently) launched on most LTS Linux OSs due to the kernel missing requisite BLE functionality












  • We are talking about RSA though, so there is a fixed character length and it isn’t meant to be remembered because your private key is stored on disk.

    Yes the word method is better than a random character password when length is unbounded, but creating secure and memorable passwords is a bit of an oxymoron in today’s date and age - if you are relying on remembering your passwords that likely means you are reusing at least some of them, which is arguably one of the worst things you can do.


  • bjorney@lemmy.catolinuxmemes@lemmy.world-----BEGIN PRIVATE KEY-----
    link
    fedilink
    arrow-up
    46
    arrow-down
    18
    ·
    edit-2
    4 months ago

    Words are the least secure way to generate a password of a given length because you are limiting your character set to 26, and character N gives you information about the character at position N+1

    The most secure way to generate a password is to uniformly pick bytes from the entire character set using a suitable form of entropy

    Edit: for the dozens of people still feeling the need to reply to me: RSA keys are fixed length, and you don’t need to memorize them. Using a dictionary of words to create your own RSA key is intentionally kneecapping the security of the key.