Giver of skulls

Verified icon

  • 0 Posts
  • 537 Comments
Joined 102 years ago
cake
Cake day: June 6th, 1923

help-circle
  • The specification of the algorithm specifies up to 56 bytes, including a null terminator. If you’re using UCS-2 (2+ bytes per character, like Windows, Java, Javascript, and more languages and platforms do), that’s 27 characters (can’t use the last half byte character pair). Add some margins for extended characters (emoji and such) and you’ll end up just above or below 24. With UTF-8 you can end up doing much better (exclusively Latin-1) or much worse (exclusively non-Latin character sets). Verifying that on the frontend is a massive pain (string length in JS is unreliable) and dynamically switching codecs is a recipe for bugs and security leaks.

    The 72 byte limit is the result of the internal workings of most bcrypt algorithms, but if you ever switch implementations you need to make sure that implementation doesn’t change the internal workings if you rely on details like that. If the stars align you can use 71 characters (72 if you use Pascal strings), but that’s far from a given.





  • PHP is still massive. I wouldn’t highlight the language, but there’s nothing wrong with using modern PHP for web applications. Most of the world’s websites are probably still based on WordPress, although websites have gotten better at hiding it these days. It’s fast, easy to use, massively popular, and some of the PHP frameworks beat out “modern” languages in terms of features and productivity by a long shot. I know software developers like to joke about older tech like PHP and Java, but it’s what the world still very much runs on, and especially with PHP people seem to have drunk a bit too much of the Kool-Aid.

    Based on bos current CV (https://shawnfromportland.com/Shawn_K_Resume_2025-8.pdf) I think he should be perfectly employable as-is. Experience with various frontend and backend systems in a wide variety of business segments.

    I can’t see what his CV used to look like (went 404 after HN tore him to shreds it seems) but it seems he’s made four new iterations based on the URL alone. I’m guessing he tried to pivot into the “vibe coding” “AI developer” ecosystem as of late in hopes of catching a trend, because based on his experience I don’t think he needs to hide his actual competence behind AI like that.


  • I can’t say I care too much about this feature, but looking into it I can’t seem to find any documentation about it at all. Where are you getting this confirmation that you can’t disable it?

    I’d just stop using Steam Chat if it’s not working for you, there are dozens of game chat services specifically built for chatting in games. Then again, I’d probably stop playing with people that make me self–conscious of typing indicators as well.

    Also lol @ anything Valve designs being “modern”. Steam Chat looks, feels, and behaves like MSN Messenger did twenty years ago. Don’t let the gradients fool you.