https://github.com/lldap/lldap logo
Join Discord
Powered by
# development
  • n
    I think I configured it to do that? Just so there are no bots going around sending PRs replacing the entire codebase with a test running some crypto mining bullshit and eating GH's goodwill or something
  • n
    Once you merge a PR, it starts automatically
  • n
    you're a contributor
  • j
    Ah right, makes sense for first yeah
  • t
    I was already confused if you were going around and approving everyone's workflows all day long
  • t
    But that does make sense indeed
  • n
    It's not like I'm crumbling under the weight of PRs
  • n
    and I just have to approve the workflows when I review stuff
  • t
    Thanks for the feedback and pointers tho, when I started working on this PR I didn't know like... uh... anything about rust
  • n
    You did very well!
  • t
    Took some time
  • t
    Seems like you can finally go to bed
  • n
    Speaking of PRs that take time, did you know that the only thing blocking https://github.com/lldap/lldap/pull/526 is front-end work because it's damn ugly right now?
  • n
    (and I guess a painful rebase by now)
  • t
    Damn, very usefull feature tho
  • t
    I hope nothing has changed HIBP implementation wise in the past 2 years
  • n
    yeah, but you need an active HIBP subscription
  • t
    I mean fair, but sad
  • t
    Are there any 'open source' alternatives?
  • t
    (Not entirely sure how their service works)
  • n
    Not that I know of, but the datasets are free, I think
  • n
    Essentially they have the hash of all the leaked passwords, you send a hash prefix and they send you all the suffixes that match in their DB, which you can then check for matches
  • t
    Was already thinking how sending hashes over was not a huge security risk, but that does make sense indeed
  • t
    Anyway, I'm hitting the pillow👋
  • n
    👋
  • n
    I now regret that I didn't say "if they don't like it, they can fork off"
  • n
    Fwiw, dependabot hadn't run for several months due to me not accepting (broken) PRs. However, I ran it today and it didn't find anything to update
  • c
    Interesting
  • c
    I have dependii in my vscode and its complaining about a bunch of stuff
  • c