• 0 Posts
  • 65 Comments
Joined 2 years ago
cake
Cake day: June 26th, 2023

help-circle











  • If the fact that a 128-bit value when sent to your server can retrieve a single piece of media or user info then I have real bad news about what you can do with a typically much shorter password.

    Is it ideal that you can retrieve streams or user info from Jellyfin if you know the ID of the entity you’re looking for? No, obviously not. But you need to authenticate to get those IDs in the first place, and there are fewer bits of entropy in most people’s passwords than there are in UUIDs.

    Being able to get streams unauthenticated by guessing the correct UUID is arguably still better security than using passwords without 2FA.









  • vithigar@lemmy.catoProgrammer Humor@lemmy.mlWhat the F#
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    5 months ago

    i is still a value type, that never changes. Which highlights another issue I have with the explanation as provided. Using the word “reference” in a confusing way. Anonymous methods capture their enclosing scope, so i simply remains in-scope for all calls to those functions, and all those functions share the same enclosing scope. It never changes from being a value type.