7,656 reputation
21250
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 6 months
seen 2 days ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Oct
11
revised Is an 80 bit password good enough for all practical purposes?
Worked emory and JS.'s comments into the post.
Oct
11
comment Is an 80 bit password good enough for all practical purposes?
@emory Responding to your first comment: good point. We shouldn't blindly trust a service to be perfectly secure. I still think it's okay to slack a little bit and use a weaker password on big services (as long as it's not crackable within 5 minutes with some serious power, probably nobody is going to bother when they got 90 million other passwords to try), but I think your main point is valid.
Oct
10
revised Is an 80 bit password good enough for all practical purposes?
Added more details to final paragraph as per Hagen von Eitzen's comment. Not sure if serious but just in case...
Oct
10
comment Is an 80 bit password good enough for all practical purposes?
@psusi The first point is probably valid, but I have yet to hear that Moore's law is completely dead. Citation needed, I suppose. About your second argument: when writing the post I doubted to include the phrase "for the same amount of money" but decided to leave it out because it seemed obvious to me. The point is that not everyone has the money to buy four times as much calculation power as they already have. Else why bother inventing faster CPUs when could buy more CPUs instead?
Oct
10
awarded  Nice Answer
Oct
10
comment Is an 80 bit password good enough for all practical purposes?
@Peter Dice, good one! I knew about diceware, but you're the first person I hear who actually uses it :)
Oct
10
revised Is an 80 bit password good enough for all practical purposes?
added 122 characters in body
Oct
10
revised Is an 80 bit password good enough for all practical purposes?
added 1326 characters in body
Oct
10
comment Is an 80 bit password good enough for all practical purposes?
@Lighty That's about passphrases vs. passwords and whether XKCD got it right. This question is about the practical strength of an 80-bit password.
Oct
10
answered Is an 80 bit password good enough for all practical purposes?
Oct
10
reviewed Reject Preventing User Enumeration on Registration Page
Oct
7
reviewed Approve How can I determine the encryption strength of an SSL connection
Oct
2
reviewed Reject What is the difference between antivirus and firewalls
Oct
2
reviewed Approve
Oct
1
answered Calculating password hashes in the browser?
Oct
1
comment How to tell if someone else's site is vulnerable to Shellshock without hacking them?
I suspect the downvote is because, though that site may stink of security vulns, this question (title at least) stinks of black hat ;). Reading the question more thoroughly it's probably not the case, but you might want to try to formulate it a bit less like "I see this really old website and want to exploit it" and more like "Someone claims their site to be certified secure, can I prove that it's not (e.g. shellshock?) without really hacking them?"
Sep
30
awarded  Explainer
Sep
30
reviewed Approve MySQL Authentication Hash Cracking
Sep
30
reviewed Approve Brute-force an SSH-login that has only a 4-letter password
Sep
30
reviewed Approve Does client certificate do any encryption in https connection?