Spyke

Replies

linux

Comment on

Why is OpenSSL able to use a key file my user shouldn't have access to?

The -k argument on my openssl accepts a passphrase, not a file. You likely encrypted with the filename as the secret, not it's contents. Perhaps you should use -kfile instead.

$ openssl aes-256-cbc -help
Usage: aes-256-cbc [options]

General options:
 -help               Display this summary
 -list               List ciphers
 -ciphers            Alias for -list
 -e                  Encrypt
 -d                  Decrypt
 -p                  Print the iv/key
 -P                  Print the iv/key and exit
 -engine val         Use engine, possibly a hardware device

Input options:
 -in infile          Input file
** -k val              Passphrase**
 -kfile infile       Read passphrase from file

Comment on

Mo Validation Mo Problems

Reply in thread

IMO as a developer this is a sane change. There's no telling when the format of the first-party api key will change. They may switch from reference tokens to JWT tokens tomorrow. The validation should be using the token and seeing if it works.

linux

Comment on

Swapping drives

Most distros use a generic kernel that contains drivers neeeded for basic operation. These kernels are larger than ones specially made for your hardware. Some specialized drivers like graphics may not be included but will run in a more simplified graphics mode that works for all cards.

mop

Comment on

The global elite

Reply in thread

It's a product of the format being parsed twice. Each line should be 80 characters with an = at the end, then a carriage return+newline(lf) to continue the line. Somewhere the cr+lf got converted to just an lf and then when reparsed it removed the lf plus the next character, making it still conain the equals but not the next letter of the message.

Here's a better technical explanation if you care: https://youtu.be/SVVnkNZWJhk

Comment on

What is NoSQL good for?

NoSQL is best used as a key-value storage, where the value can be non-tabular or mixed data. As an example, imaging you have a session cookie value identifying a user. That user might have many different groups, roles, claims, etc. If you wanted to store that data in a RDBMS you would likely need a table for every 1-to-many data point (Session -> SessionRole, Session -> SessionGroup, etc). In NoSQL this would be represented as a single key with a json object that could looks quite different from other Session json objects. If you then need to delete that session it's a single key delete, where in the RDBMS you would have to make sure that delete chained to the downstream tables.

This type of key-value lookups are often very fast and used as a caching layer for complex data calculations as well.

The big downside to this is indexing and querying the data not by the primary key. It would be hard to find all users in a specific group as you would need to scan each key-value. It looks like NoSQL has some indexing capabilities now but when I first used it it did not.