• 0 Posts
  • 13 Comments
Joined 5 days ago
cake
Cake day: November 3rd, 2025

help-circle






  • Passwords are typically sent to the server and hashed there. I’m a bit hazy right now on the implications of client-side hashing, but it would likely present some security problems.

    Edit: at the least, it would allow an attacker to use a leaked password database to log in to the sites, sidestepping the whole hashing thing.

    There are protocols that send a hashed or encrypted password instead of plaintext, but they’re more complex than just hashing. Iirc they involve a challenge-and-response method.


  • Google integrates its own services in both the phone and messaging apps: namely spam reporting and blocking. I’m guessing that other major brands also have services to that end.

    Google’s ‘Messages’ also has a button to make a video call, and I dunno even what app and protocol would be used for that, as I never used video calls and don’t have any Google apps for that functionality.


  • Ironically, this is the comment in this thread that’s not paranoid enough, because to my knowledge both Google and Samsung use their own closed-source message and phone apps, along with other standard apps. (Idk about other vendors, but the same is pretty likely for major brands.)