2lewd discussion

matt wrote

I don't see how passwords are a security problem if a secure hashing method is used (e.g. bcrypt or scrypt).  Why not just add Authy and IP whitelisting?

EDIT: I imagine a lot of people are like me, and they do not store their passwords in their browser.  I use randomly generated passwords, and I throw them in LastPass.  Logging in is almost automatic for me.  Checking for an email every time I login would be annoying.

I never said passwords are a security problem. This approach is nearly the same security. I don't view this change as adding security, just a different way of providing it which suits some people better.

From the feedback we have recieved here, it looks like we won't be implementing this change: we'll continue on with our password-based system on 2lewd like we currently have. Maybe we'll add this as an option later - who knows.

A little bold to use a language that's still in alpha. What made you choose Crystal?

Mew wrote

A little bold to use a language that's still in alpha. What made you choose Crystal?

the sex appeal

Mew wrote

A little bold to use a language that's still in alpha. What made you choose Crystal?

In all seriousness, Crystal (while pretty new) is a great, fast language that resembles Ruby and compiles down to native code. I mainly think it was chosen because both RX and I like the language.

It's fine if you like it, but did you take a look at Elixir? It seems to be what all the Rubyists are flocking to.

Mew wrote

It's fine if you like it, but did you take a look at Elixir? It seems to be what all the Rubyists are flocking to.

Crystal compiles into native code and has C bindings, I'd think that'd be better for performance.

I don't think performance would be a concern with either option, but if you're worried about how Elixir fares, this post has been making the rounds for a while: http://www.phoenixframework.org/v0.7.2/blog/the-road-to-2-million-websocket-connections

Well, I'm not going to try to convince you to change your choice any more than this. I have no experience with either language anyway, I just thought the choice of an alpha language was strange and Elixir seemed to be the obvious alternative.

Ok, let me reply because @Melancholy has no idea what he's talking about.

Mew wrote

A little bold to use a language that's still in alpha. What made you choose Crystal?

Crystal, to me doesn't feel like an alpha langauge. It never randomly segfaults, the compiler never randomly crashes, and in general things just work. The only think thats alpha about it is the pace of breaking changes, which isnt really a problem to small teams such as me and Senpai.

Mew wrote

It's fine if you like it, but did you take a look at Elixir? It seems to be what all the Rubyists are flocking to.

I have taken a look at Elixir, but i have never used it. Senpai is right that Crystal is faster than Elixir in raw speed, but at the difference we're talking about it really doesn't matter. Speed was not why I chose crystal over Elixir. It's simply experience. I've been a part of the crystal community for quite a while, I know the people in IRC and am just generally comfortable with crystal. Yes, I do need to learn Elixir but I would learn Elixir by doing a project less ambitious than rewriting lewd.

On top of that, crystal is much more similar to ruby than elixir, so senpai will be much more comfortable with it. I'm not really comfortable comparing elixir and crystal any mroe, because I honestly havent tried it much, but crystal has sort of CSP/green threads like erlang/otp does.