Bart van Heukelom
Reputation
261
Top tag
Next privilege 300 Rep.
Create new tags
 Jul 13 answered Calculating the time required to brute force a random code Jul 13 comment Calculating the time required to brute force a random code I just thought about it again, and you're right, it doesn't matter. Doesn't feel right though. :p Jul 13 comment Calculating the time required to brute force a random code But, how can that not matter? As an analogy, take a beach littered with a few soda cans (distributed uniformly). If you sweep the beach from one end to the middle, you're bound to have picked up at least 1 can. But if you just grab in the sand at random locations, the chance of that is much, much lower, right? Jul 13 revised Calculating the time required to brute force a random code added 125 characters in body Jul 13 comment Calculating the time required to brute force a random code The codes are distributed uniformly, so if the keyspace is searched in order, not randomly, the probability of having found a code after having traversed half the space seems to me to be closer to 100% than 50%. That's just a guesstimate, but an educated one. Assuming `amount` is a decent number and not 1 or 2. Jul 13 asked Calculating the time required to brute force a random code Jun 11 comment Will Let's Encrypt allow a custom workflow? @raz The tool will among other things automatically make a special file available on the web server. It can't do that if it doesn't understand the web server I'm running, so I'll have to do that myself, then tell the CA I've done it. Jun 11 asked Will Let's Encrypt allow a custom workflow? Feb 23 awarded Enlightened Feb 22 awarded Nice Answer Jun 20 awarded Yearling May 21 comment Detecting skimmers and other ATM traps So, does that still depend on the magstrip to work? Meaning, could one make his own card safe by disabling/blocking the magstrip? May 20 awarded Commentator May 20 comment Detecting skimmers and other ATM traps None of the answers here mention it (and maybe it's out of scope), but aren't they battling this phenomenon by leaving out the magnetic strip from new cards, leaving them with only a smart chip that can't be copied? Apr 22 comment Can robots.txt for your face be made effective? "As an added precaution, Superman would vibrate his face slightly so that photographs would only show his features as a blur" - Maybe this is an option to consider? :P Feb 13 comment Why are vulnerabilities and lack of security possible in computers? 'von' is German, 'van' is Dutch :) Jan 13 comment Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it? "it often doesn't matter if you get the same password or if you get a different password" - But it does when the input is not fully arbitrary but must fulfill some requirement, such as a password + known salt, or a message in a certain protocol. This makes the data-destroying aspect of hashes beneficial to security. (Of course, if you try long enough you can find an input that does follow the requirements, but that takes even longer) Sep 14 awarded Supporter Jul 3 comment Internal SSL Certificates? If you configure the code to ignore any SSL warnings, you lose the authentication part of SSL. You don't if you manually install the trusted certificates. Jul 2 comment Internal SSL Certificates? @AdamTannon Almost, OpenSSL is not a CA, but the tool that you use to create certificates, whether with a CA or not. When compared with passports, CA = Government, OpenSSL = Printer