Wait, has the guy in the meme been Charlie Kirk the whole time??

I don’t think there’s any legal basis for having “designed in” be truthful, where as “made in” is a requirement for the marking of country of origin for imports.

Are you saying the comment is fake, or the sentiment? This was actually posted to reddit: https://archive.is/U9ntj

“A delayed game is eventually good, a rushed game is bad forever”

Publisher Nexon has now made a statement addressing the situation, saying the ads were submitted by users as part of a ‘TikTok Creative Challenge’, which TikTok describes as an “official creator monetization program that turns your creativity into cash by creating UGC-style ads for your favorite brands”.

“All submitted videos are verified through TikTok’s system to check copyright violations before they are approved as advertising content. However, we have become aware of cases where the circumstances surrounding the production of certain submitted videos appear inappropriate. Thus, we are conducting a thorough joint investigation with TikTok to determine the facts.

How could they not see this coming? Of course this will be gamed and abused. This is what happens when you fire your marketing department and outsource it to TikTok.

Not too sure, but a previous one says spaces are allowed in comments. I would assume the {} is similar?

Funny how alcohol ads were banned, but Nazi-inspired ads were allowed to happen: https://www.theguardian.com/us-news/2015/nov/25/nazi-inspired-ads-for-the-man-in-the-high-castle-pulled-from-new-york-subway

Who was the other CEO that died?

tea users don’t want men to access their data but tea admins did nothing to stop it

Yes this was the game! The CD I had contained both games. The other game was Attack of the Mutant. This was the hockey game ingrained in my memory: https://youtu.be/7vQ0qBVhjME?t=2269

Was that a point and click interactive video one? I remember one story with dead hokey players or something? I think I got that CD for free from a box of cereal and have great memories playing it while home sick from school one day.

Here’s one, InfluxDB (a time series database) advertises itself Open Source, but that’s only true for their Core platform, and many common features of a DB (high availability, read replicas, etc) are behind the Enterprise offering. Even if you are going to self host, you have to pay and agree to their terms.

I get having to pay for hosting and support, but it seems like they are intentionally neutering the core version to be able to push their paid business model, while benefiting from the testing and contributions from the community on the core model.

Not really sure what you mean by reusing UUIDs but theres nothing bad about using UUIDs in URLs for content you don’t want scrapped by bots. Sites like Google Photos are already are using UUIDs in the URL for the photos, and do not require any authentication to see the image as long as you have the URL. You can try this for yourself and copy the URL of an image and open it in a Private Browsing Window. Every so often someone realizes the actual image URL is public and think they’ve found a serious issue, but the reason why it isn’t is because of the massive key space UUID provides and that it would be infeasible to check every possible URL, even if it’s publicly available.

Even assuming 0 latency on their backend, if you wanted to check each UUIDv4 value again their database during your lifetime, you would need to check 1.686 x 10^27 UUIDv4 per second for 100 years straight. Supercomputers are measured in exaflops, which is 10^18 operations per second, so even distributing the work across many machines, you would need about 1 billion of super computers to be able to have a chance of checking every UUIDv4 value within 100 years.

Thank you for bringing sanity to this thread. At this point, I have to assume that this person is trolling? That or they’ve been vibecoding too long?

a computer powerful enough can guess all possibilities in a matter of minutes, and query them all against the db to discover all files stored within.

Again, it would be computationally infeasible on any reasonable timescale of human existence. It’s no secret what every possible UUID would be, it’s the fact there are 5316911983139663491615228241121378303 of them and trying each one would be futile. They’re actually all on https://everyuuid.com/ to see for yourself.

Just for shits, I encrypted a file with a password being a UUIDv4. Here’s the encrypted file as base64:

YLIR6fL46HfRmueb1tZWiQUFQHYnZOKO9oujOzhvWYpfTtB5RnHtAvMgUgeIsffLC1wz7D17Vp0VT5YIJMb5pA==

Here’s everything you would need to do to decrypt this file with a password:

$ echo "YLIR6fL46HfRmueb1tZWiQUFQHYnZOKO9oujOzhvWYpfTtB5RnHtAvMgUgeIsffLC1wz7D17Vp0VT5YIJMb5pA==" | base64 -d > file.enc

$ openssl enc -aes-128-cbc -d -nosalt -in file.enc
enter AES-128-CBC decryption password:
u/01189998819991197253@infosec.pub can't brute force this

The password to decrypt the file is a UUIDv4. See if you can try every UUID and figure out which one I used as the password.

I’m not familiar with NSA’s Translator, so any info would be appreciated.

I saw your other comment about DES, and it should be noted that DES was with a key length of 56 bits, and that was enforced precisely because the NSA could brute force it. It wasn’t even a secret they could brute force 56 bit encryption, and written into law. Back then, if you wanted to use more than 56 bit encryption in the United States, you had to provide a key escrow system to allow the government to decrypt the content if they needed to. Around the 2000s with the rise of e-commerce, they dropped the export restriction because it was doing more harm than good. No one wanted to use so few bits in the encryption keys, but it was illegal at the time to write software which did.

A UUID’s 122 bits of randomness are exponentially more than the 56 bits DES offered. My original point being, all crypto is inherently brute forceable on an infinite timescale, but key length and implementation decisions are chosen to so that it would be computationally infeasible to brute force.

By this logic, all crypto is bruteforcable, on a long enough timeline.

A 122 bit random number is 5316911983139663491615228241121378303 possible values. Even if it were possible to check 1 trillion records per second, it would take 168598173000000000 years to check all the UUIDs and get the info on all the users. Even if every human on earth signed up for the app (~8 billion people), and you wanted to just find any one valid UUID, the odds of a generating a UUID and that being valid in their DB is basically 0. You can do the math your self following the Birthday Paradox to determine how many times you would need to guess UUIDs before the probability that any one UUID is valid against a population of the whole world is greater than 50%.

Explanation for those who don’t know: https://www.youtube.com/watch?v=-r2xXtSsPV0

Even the link with the unlocked article code didn’t work, here’s an easier way to read the article: https://archive.is/sZYDO