2,780 reputation
720
bio website apsillers.github.io
location United States
age 26
visits member for 2 years, 2 months
seen 2 days ago

"The problem, when solved, will be simple."

Conway's Game of Life

  Controls:
  Step Random Noise
  Clear Random Feature
  Click a cell to toggle it.
  View source


Nov
3
revised How to prove to friend I have solution to puzzle (without revealing it)?
added 126 characters in body
Nov
3
revised Is it fundamentally possible to validate that an unmodified version of your client connects to your server?
added 4 characters in body
Nov
3
revised How to prove to friend I have solution to puzzle (without revealing it)?
deleted 2 characters in body
Nov
3
revised How to prove to friend I have solution to puzzle (without revealing it)?
added 86 characters in body
Nov
3
revised How to prove to friend I have solution to puzzle (without revealing it)?
added 1329 characters in body
Nov
3
answered How to prove to friend I have solution to puzzle (without revealing it)?
Sep
26
comment How is a cypher algorithm verified?
Maybe a duplicate: What's the mathematical model behind the security claims of symmetric ciphers and digest algorithms? "Why can't they prove any of their algorithms secure? ...there are fundamental reasons that make it very difficult to prove that an encryption algorithm is secure... proving that an algorithm like AES or RSA or SHA256 is secure seems likely to be at least as hard as proving that P != NP"
Sep
25
comment GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?
Anything your bash shell can do, an exploit that controls your bash shell can do. Can your bash shell do anything besides manipulate your repositories? (Note, however, that your chance of attack is may be reduced, because nothing else uses your bash shell. My understanding is that, in *nix, this is a huge problem because lots of other software depends on bash and environment variables. In Windows, it's less likely that any other software is set up to invoke your vulnerable bash shell.)
Sep
23
answered Is it fundamentally possible to validate that an unmodified version of your client connects to your server?
Sep
23
comment Is it fundamentally possible to validate that an unmodified version of your client connects to your server?
Regarding your "password" approach, this is exactly how API keys work. However, that will only uniquely identify the user; it will not verify that the user is using your original software (rather than, e.g., a written-from-scratch clone).
Sep
23
comment Is it dangerous to post my MAC address publicly?
I'll certainly agree to that, and admit my statement wasn't very complete. Perhaps I should revise it to say that most situations in which an attacker can meaningfully use your MAC address are situations in which your MAC address is clearly visible when in use. Learning someone's MAC address might be valuable to an attacker if some particular combination of space/time/usage constraints would prevent them from learning it from your normal use.
Sep
23
comment What is the difference between session fixation and session recreation?
This question doesn't appear to be answerable, since there is no clear definition of the term "session recreation"; the question does not offer a definition or example, and the term is not in widely used in security. (A Google search for "session recreation" turns up this exact question as the fifth result, under four results about recreational events.) Perhaps you could give an except of the text where you've "read that both of them are conventionally the same"?
Sep
23
awarded  Nice Answer
Sep
22
revised Why do browsers enforce the same-origin security policy on iframes?
added 245 characters in body
Sep
22
revised Why do browsers enforce the same-origin security policy on iframes?
added 281 characters in body
Sep
22
revised Why do browsers enforce the same-origin security policy on iframes?
added 136 characters in body
Sep
22
answered Why do browsers enforce the same-origin security policy on iframes?
Sep
22
comment Is it dangerous to post my MAC address publicly?
+1; I suspect any scenario in which your MAC address would be useful to an attacker (e.g., a MAC-restricted WiFi network) is a scenario in which the attacker can already view your MAC address.
Sep
17
comment Closely spaced failed logins in auth.log
Your machine is accepting multiple simultaneous TCP connections (evidenced by the differing remote port numbers). However, per connection, it seems to be doing more than three attempts at less than a 3 second delay, which I can't explain.
Sep
17
awarded  Yearling