cayde
I should not need to resorting TTL „unsupported hacks“ which also say company will ban me for.
Not everything has to be a hustle, not everything has to background data collection. People dont like it especially in tech oriented!!
there is difference in ,,growth hacker'' vs hacker for sake of learning and build thing you like))
You can show me what you make and I think its cool without having it be screaming billboard in my face try to suck up in all data as it can! ~ Not everything needs to be a transaction
Any kind of third party internet required app? Do I required Microsoft Authenticator or Duo - always on push access, internet required, logs my phone's IP and location? They must pay for the device and the plan. If you want me enter MDM, Outlook, ActiveSync? They must pay for the device and the plan.
https://engineering.gusto.com/how-ach-works-a-developer-pers...
(From parent) > And the payee doesn’t need to share their bank info.
And this is a US concept where having the magic numbers lets you pull any amount you want, with no ability to have a "push only" number...
If TLS break then all is untrusted anyway! If you read hash as MITM you can replay it as pass equivalent and log in with hash, do not need knowledge of the original pass. You can just inject the script to exfilatrate original pass before hashing. CSP is broken, since you can edit header to give your own script a inline nonce. I think everything is reliant on TLS in end.
I think 10yr ago before TLS was 99%+ standard on all sites many people would come up with schemes, forums would md5 pass client side and send md5, all sorts were common. But now trust is in TLS.