Rell3oT

1,577 reputation

312

bio	website
	location
	age
visits	member for	9 months
	seen	3 hours ago
stats	profile views	44

Grad Student at JMU. Worked at a few places mainly doing researchy things. I really like Security and Powerlifting.

	1,577 reputation	bio	website		visits	member for	9 months
312 badges		location			seen	3 hours ago

summary answers questions tags badges favorites bounties reputation activity

130 Actions

suggestions reviews revisions comments badges posts accepts all

May 6	comment	What is the collision chance of a 128-bit hashing function if it is always fed with 256-bits of data? Can you be a little more specific?
Apr 29	comment	How long will it take to crack a 10-15 character winrar password? It will probably take less time if they see this now that you posted this....
Apr 26	comment	What is the actual value of disabling remote root login using ssh? Also, it prevents ANY attacker who happens to guess a password or find a key laying around from becoming root on your server.
Apr 26	comment	What is the actual value of disabling remote root login using ssh? It isn't the login process that is unsafe, it is the fact that nobody should be doing ALL of their work on a server as root.
Apr 20	answered	how secure is passwordcard.org?
Apr 19	comment	ECC in (Open)PGP Oh okay. This makes sense then. If some mathematician discovers an algorithm to make these problems easy then our current asymmetric key algorithms will be quite useless.
Apr 19	comment	ECC in (Open)PGP `we don't have proof that any of the cryptographic algorithms that we employ is really robust against attacks` What? How do we not have proof? We know discrete logarithm, integer factorization, etc. etc. are computationally difficult to solve. I don't understand how there is no proof.
Apr 19	comment	ECC in (Open)PGP ECC is the new 'thing' being pushed by NSA/NIST. It's very strong with far less overhead (Same security with a much smaller key size compared to RSA). There is no reason not to use ECC as your asymmetric key algorithm.
Apr 18	comment	Spam that comes from names in my address book, but not their email addresses If I were you, I would change all my e-mail passwords (add 2 factor auth if it is supported). Then see if it continues. If it does, you may be the target of a targeted attack, or they could have a keylogger installed on your computer, but it could also still be just random spam. Not enough information to say ANYTHING definitively..
Apr 17	comment	Should the requirement of admin privileges be extended? It is an administrator account for your computer, to administer your computer. It is not a administrator account for everything in your life. If you leave it open, that's your fault...
Apr 16	comment	What is the distinguishing point between a script kiddie and a hacker? A lot of organizations fingerprint threats by a lot of different metrics. If all of the attacks you see from one of those threats is straight out of tutorials you can find online, this is useful information to have. From a security standpoint, it doesn't change anything, but from a triage and "What do I need to do right this second" it makes a lot of difference.
Apr 16	revised	What is the distinguishing point between a script kiddie and a hacker? added 78 characters in body
Apr 15	answered	What is the distinguishing point between a script kiddie and a hacker?
Mar 25	accepted	Tools and methods for analyzing RNGs
Mar 25	comment	Tools and methods for analyzing RNGs Interesting as always. Thanks. Looks like I have some reading to do!
Mar 25	asked	Tools and methods for analyzing RNGs
Mar 10	comment	Why is it easy to detect network layer DDoS attacks? Have you ever sat at a computer that was being DoS'd? With wireshark or tcpdump open? It is almost impossible not to notice. Packets fly across your screen faster than you can read what they are. Detecting these kinds of things are no problem.
Mar 8	comment	What are the disadvantages of Tor? One huge disadvantage of Tor is bandwidth. Anyone who uses tor for a few minutes will see it is extremely slow, due to a couple reaosns.
Feb 22	comment	Preventing artificial latency or “Lag Hacking” in multiplayer games @Iszi That is very true, but you would think a group of smart people might have a brainstorming session together once in a while about how to solve problems. I think it is in the nature of types of people who end up answering the questions on SE sites who also like to ask questions.
Feb 22	comment	Preventing artificial latency or “Lag Hacking” in multiplayer games @Eric. For a number of reasons I do not believe that solution will work. You cannot expect a player not to know the seeded random number on their own computer. And if you banned them, in free to play games, they can easily make a new account.