tracker1

  # after starting (docker-compose up -d)
# run docker-compose logs wireguard to view the qr-code for wireguard clients
version: "2.2"

# network required to specify ip for services
networks:
  vpnet:
    driver: bridge
    ipam:
      config:

tracker1

import fclone from "fclone";

export enum LogLevel {
  Fatal = -1,
  Error = 0,
  Warn = 1,
  Info = 2,
  Debug = 3,
  Trace = 4,
}

tracker1

# RoughneckBBS Compose File
version: "3.3"
services:
  sbbs:
    container_name: sbbs
    image: bbsio/synchronet:nightly-20210314
    restart: always
    command: bash -c "sbbs-init && /sbbs/exec/sbbs w- s- m- f-"
    volumes:
      - $PWD/ctrl:/sbbs/ctrl

tracker1

References on modern password policies

Below links provide source, reference link and relevant quote

Standards

NIST

https://github.com/usnistgov/800-63-3/blob/nist-pages/sp800-63b/sec5_authenticators.md

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically).However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

Major organisations

tracker1

import util from 'util';
import crypto from 'crypto';

const HASH_ALGO = 'sha512';

// nist recommends 10000, 10x nist, approx 83ms on i7-8650U
const HASH_ITERATIONS = 100000;

const HASH_SALT_BYTES = 16; // Exceeds NIST Minimum 32/8 (4 bytes)
const HASH_BYTES = 64; // Match Hash Algorithm lengh / bits (512 / 8);

tracker1

function sanitizeHtml(input) {
  if (typeof input !== 'string') return input;
  if (input.indexOf('<') === -1) return input;
  
  const div = document.createElement('div');
  div.innerHTML = input;
  div.querySelectorAll('script').forEach((el) => el.remove());
  div.querySelectorAll('style').forEach((el) => el.remove());
  div.querySelectorAll('*').forEach((el) => {
    const events = el.getAttributeNames().filter((a) => a.indexOf('on') === 0);

tracker1

// save to (exec/mods)/text.dat.js - at the top of login/login/shell files, load('text.dat.js')
bbs.replace_text(/* MsgSubj */ 1, "\1n\1h\1c\xda\xc4\xc4\xc4\xc4\xc4\xc4\1n\xc4\xc4\xc4\xc4\xc4\xc4\1h\1k\xc4\xc4\xc4\xc4\xc4\xc4\xc4\1n\1c\xc4\xc4\xc4\xc4\xc4\xfa\xfa\xfa\xfa\r\n\1h\xb3 \1bSubj\1n\1b: \1h\1c%.70s");
bbs.replace_text(/* MsgAttr */ 2, "\r\n\xb3 \1bAttr\1n\1b: \1h\1c%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s");
bbs.replace_text(/* MsgTo */ 3, "\r\n\xb3 \1bTo  \1n\1b: \1h\1c%.70s");
bbs.replace_text(/* MsgToExt */ 4, " #%s");
bbs.replace_text(/* MsgToNet */ 5, " (%.40s)");
bbs.replace_text(/* MsgFrom */ 6, "\r\n\1w\xb3 \1bFrom\1n\1b: \1h\1c%.33s");
bbs.replace_text(/* MsgFromExt */ 7, " #%s");
bbs.replace_text(/* MsgFromNet */ 8, " (%.35s)");
bbs.replace_text(/* MsgDate */ 9, "\r\n\1w\xb3 \1bDate\1n\1b: \1h\1c%.24s %s (%s)\r\n\1w\xc0\xc4\xc4\xc4\xc4\xc4\xc4\1c\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\1n\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\1h\1k\xc4\xc4\xc4\xc4\xc4\xc4\xc4\xc4\1n\1c\xc4\xc4\xc4\xc4\xc4\xc4\xc4\

tracker1

module.exports = {
  parser: 'babel-eslint',
  extends: ['plugin:prettier/recommended', 'prettier/react'],
  plugins: ['prettier', 'jest'],
  parserOptions: {
    sourceType: 'module',
    ecmaVersion: 2020,
    ecmaFeatures: {
      jsx: true,
    },

tracker1

{
  "editor.rulers": [
      76,
      80
  ],
  "editor.tabSize": 2,
  "editor.renderControlCharacters": true,
  "files.encoding": "cp437",
  "files.associations": {
    "*.ssjs": "javascript"

tracker1

/*
/feature/load-component-import.js

This is used by any async loading areas of the application

import load from '../load-component-import.js';
const FooComponentAsync = load(() => import('./FooComponent'))';
*/

import React, { Suspense } from 'react';