Ra8

This is a good analogy! Another similar analogy would be construction codes for earthquake proof, or fire proof or whatever safety feature new building must have to be compliant. We don't go and fix everything currently built unless we have to, or can.

The risk is of course, an earthquake where it could destroy all houses built before year X.

But we do the same in all industries, path of least resistance.

What if the hash you're sending is discovered? I can use that to login to the service; it offers the same protection as a plain text password.

> Whenever I've written authentication, passwords are hashed on the client side and never transmitted in the clear.

Unless I'm misunderstanding what you're doing, this achieves nothing.

Hashing the password on the client side makes the hash the password, and MITM attacks are still possible.

+1. And there's no guarantee that OpenAi haven't stolen unpublished research from multiple professors and PhD students.

One example I'm familiar with which is different, are Schengen tourist visas. You need to leave before the visa expires. That's not the case for US tourist visas.

They certainly are not. I speak Levantine Arabic and learned MSA in school. I could understand Egyptian Arabic and Khaliji Arabic, but I have no chance understanding anything west of Egypt. There's a lot of extra words, even the simple words are different a lot of the time.

I traveled once to Egypt and the tour guide was delighted that I spoke Arabic. We started speaking in Arabic, but after a few minutes we switched back to English because we couldn't form complete sentences without any of us saying "What?".

Arabic language letters change based on their position in the word. And there's multiple fonts for it.

You could maybe put your website behind a captcha? Google's recaptcha works behind the scene, so it won't affect normal users.

I find competitive programming pretty fun. If you want to learn X, you can start solving problems with X instead of a language you know. I use codeforces and used to solve problems on Project Euler as well.

> Just to replace it with what he calls "payment verified", which basically means you have 8$ and means to send it to twitter. Which apparently is worth less than nothing. I keep seeing this everywhere, that the switch from being verified to "payment verified" made that possible. It was possible to do this attack before the change. It just made it easier but also traceable with the payment info.

test

Have you tried looking into the Ellis Island records for your Great Grandfather? https://heritage.statueofliberty.org/

I was able to find some of my ancestors who came to the US from those records. People usually came by ship and New York City was one of the main points of entries to the US.