Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
6 10
~11k people reached

  • 0 posts edited
  • 0 helpful flags
  • 22 votes cast
comment Can a password be the same as its hash?
Hash algorithms produce fixed-length outputs. Therefore, hash algorithms produce a finite number of outputs. Ergo, given an infinite number of inputs of arbitrary length there will be some input that matches its own output. Ipso fatso. As a matter of implementation, this could be avoided by simply writing the hash function to return an error if the input matches the output. But the likelihood of this happening is on the scale of "number of atoms in universe" kind of things, so no one bothers.
comment What are the risks of adding third-party Root CA certificate into NTAuth Store?
This is a cross-post of…
comment Why am I sometimes spontaneously presented with an SSL certificate from my U-Verse Residential Gateway?
During normal operation, the cert path to Gmail, just as an example, is exactly what you'd expect it to be... like GeoTrust Global CA -> Google Internet Authority G2 -> But then the AT&T Uverse router glitches and my browser gets presented with a new certificate.
comment Why does Windows Ship with Expired SSL Certificates?
Don't forget to turn off Automatic Root Certificates Update via Group Policy or Local Computer Policy, or else Windows will automatically re-download these certificates and put them back in your Trusted CAs store after you've deleted them.
comment Why does Windows Ship with Expired SSL Certificates?
I'm going to do something crazy and delete the certificates from the 20th century. I don't believe I'm using any arcane stone-age kernel drivers, so I bet I'll be OK...
comment How does this implementation of full disk encryption work?
Thank you for the information. I am sure that the Sophos client does communicate with a policy server over the network from time to time, however, I can still boot up the machine even if it is completely disconnected from the network. Therefore, the key must be stored locally... somewhere. I just don't know where or how. This is why I'm confused.
comment Are RADIUS and TACACS+ Ever Allowed in FIPS 140-2 Compliant Scenarios?
@mfinni That's partly what I'm asking. :)
comment Do I really need an Anti-Virus software if I'm careful about where I browse?
"If you don't protect your machine it may end up attacking mine." I like that statement. Interesting perspective. It makes me think of the shared social responsibility of vaccination.
comment What does having an internal two-tier PKI protect against?
Because if your single enterprise CA got compromised and/or had its private key stolen, then you want to revoke it. But a CA cannot revoke itself. Or rather, how is it going to revoke itself and then publish a new CRL using its now revoked cert?