Maxim Ivanov ulidtko

References on modern password policies

Below links provide source, reference link and relevant quote

Standards

NIST

https://github.com/usnistgov/800-63-3/blob/nist-pages/sp800-63b/sec5_authenticators.md

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically).However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

Major organisations

How to transform an SVG into a data URI

by Jenny Knuth, based on the work of Chris Coyier and Taylor Hunt

A data URI is a nice way to include a web resource without needing to make an HTTP request. Chris Coyier explains the technique nicely in Probably Don't Base64 SVG.

While a PNG might use Base64 encoding, for SVG, there is a better way.

Taylor Hunt's experiments led to this solution for optimizing SVGs in data URIs:

"So the best way of encoding SVG in a data URI is data:image/svg+xml,[actual data]. We don’t need the ;charset=utf-8 parameter (or the invalid ;utf8 parameter…), because URLs are always ASCII."

"Interview with a Human" (2015) by Diana Thayer

Who are you?

The last human, as far as the market is concerned, though I wouldn't expect you to recognize it. I haven't worn flesh since we mined the sun.

Why not?

Flesh has a price, and I have no means to pay. I leased my consciousness to a corporation without a name. I sold the skin and organs my parents gave me to a recycling firm to pay the deposit.

Statically checked overloaded strings

This gist demonstrates a trick I came up with which is defining IsString for Q (TExp a), where a is lift-able. This allows you to write $$("...") and have the string parsed at compile-time.

On GHC 9, you are able to write $$"..." instead.

This offers a light-weight way to enforce compile-time constraints. It's basically OverloadedStrings with static checks. The inferred return type

	import System.Directory
	import System.Environment
	import System.FilePath
	import Control.Applicative ((<$>))
	import Control.Arrow (first, second)
	import Control.Monad (void)
	import Data.Either (rights)
	import Data.List (isSuffixOf)
	import Data.Set (Set, (\\), empty, fromList, insert, singleton, toList, union)
	import Text.Parsec

	module Main

	{- Divide x by y, as long as there is a proof that y is non-zero. The
	'auto' keyword on the 'p' argument means that when safe_div is called,
	Idris will search for a proof. Either y will be statically known, in
	which case this is easy, otherwise there must be a proof in the context.

	'so : Bool -> Type' is a predicate on booleans which only holds if the
	boolean is true. Essentially, we are making it a requirement in the type
	that a necessary dynamic type is done before we call the function -}

	.PHONY: using-gcc using-gcc-static using-clang

	using-gcc:
	g++-4.8 -o main-gcc -lasan -O -g -fsanitize=address -fno-omit-frame-pointer main.cpp && \
	ASAN_OPTIONS=symbolize=1 ASAN_SYMBOLIZER_PATH=$(shell which llvm-symbolizer) ./main-gcc

	using-gcc-static:
	g++-4.8 -o main-gcc-static -static-libstdc++ -static-libasan -O -g -fsanitize=address -fno-omit-frame-pointer main.cpp && \
	ASAN_OPTIONS=symbolize=1 ASAN_SYMBOLIZER_PATH=$(shell which llvm-symbolizer) ./main-gcc-static

	{-# LANGUAGE MultiParamTypeClasses, FlexibleInstances #-}
	{-# LANGUAGE OverloadedStrings #-}

	-- actual imports :)
	import Control.Category
	import Prelude hiding (id, (.))

	-- example imports
	import Control.Monad.Reader
	import Control.Monad.Writer

	#!/usr/bin/env python
	from __future__ import print_function


	import base64
	import sys


	PEM = ("""-----BEGIN RSA PRIVATE KEY-----
	MIIEogIBAAKCAQEAgK1Q6Ydi8UUheJLvnTYJE65NOZtAtjDdDSxS+6b4x9EakjIylljSzs5uLEJn

	#! /usr/bin/python

	from logging import getLogger
	from logging.config import dictConfig


	LOGGING = {
	'version': 1,
	'disable_existing_loggers': False,
	'formatters':