Ask Lemmy

27268 readers

2079 users here now

A Fediverse community for open-ended, thought provoking questions

Rules: (interactive)

1) Be nice and; have fun

Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them

2) All posts must end with a '?'

This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?

3) No spam

Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.

4) NSFW is okay, within reason

Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected]. NSFW comments should be restricted to posts tagged [NSFW].

5) This is not a support community.

It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.

6) No US Politics.

Please don't post about current US Politics. If you need to do this, try [email protected] or [email protected]

Reminder: The terms of service apply here too.

Partnered Communities:

Logo design credit goes to: tubbadu

founded 2 years ago

MODERATORS

[email protected]

candyman337

[email protected]

287

What are some (not illegal) ideas to make corporations feel the pain when they allow our data to be stolen? (lemmy.world)

submitted 1 day ago by [email protected] to c/[email protected]

72 comments fedilink hide all child comments

I'm getting a bit sick of large corporations a) demanding excess data as a condition of doing business with me, b) allowing it to be stolen, and c) giving zero fucks about it.

What are some things that us netizens can do to make our displeasure known.

Extra points for funny ideas.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 94 points 1 day ago (10 children)

Use EICAR test strings as your password.

If they store your password in plain text the AV will lock the user database.

If your password gets leaked and they are using bad password security, when your password is cracked the AV will isolate the file.

[–] [email protected] 41 points 1 day ago (2 children)

According to EICAR's specification the antivirus detects the test file only if it starts with the 68-byte test string and is not more than 128 bytes long. As a result, antiviruses are not expected to raise an alarm on some other document containing the test string.

This won't work, assuming the database file is more than 128 bytes long

[–] [email protected] 10 points 1 day ago

I think the important distinction would be 'file' or 'record'. Passwords aren't really a file in a database iirc and records in a database have a storage limit

load more comments (7 replies)