Reputation
2,897
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
13 23
Newest
 Yearling
Impact
~186k people reached

Mar
29
awarded  Yearling
Feb
27
comment Why use MD4 for caching?
When SHA-1 preimage collisions will be doable, there will be lots of funny attacks on git... Hopefully we'll have moved on by then...
Feb
26
comment Why use MD4 for caching?
I wish git used SHA-256... It uses SHA-1...
Dec
19
awarded  Custodian
Dec
19
reviewed No Action Needed Got a spam mail with an htm attachment, is the script harmful?
Dec
19
reviewed Approve Should I be concerned that Google no longer trusts specific Symantec root CA cert that is also on my Windows system?
Oct
16
revised Diffie-Hellman large prime number weakness. Is this concept valid? If so, how can this be remediated by end-users/admins?
added eff link
Oct
16
comment How 'Logjam' attack affects openID since it uses Diffie-Hellman key exchange method?
There are plenty of opportunities for even run of the mill bad guys to MITM... Running rogue hotspots in hotels/airports/etc... makes it very easy to achieve...
Oct
16
answered Diffie-Hellman large prime number weakness. Is this concept valid? If so, how can this be remediated by end-users/admins?
Oct
15
comment Help generating wordlist using crunch
gist.github.com/brohee/c6e3f3dec32f009ba255 as I said just check for repetition and abort. The result set is still huge even removing password with 3 consecutive identical chars, and the program is very slow, it displays obvious correctness but would be pretty dramatic changes to be fast.
Oct
15
comment Help generating wordlist using crunch
My program is pretty easy to extend, filtering for two many repetitions is easy before output. This is easier (but slower) than just not repeating them in the first place... As for the number of passwords permitted by the complete rules, that should be a pretty easy enumerative combinatorics question, more suited for another stack exchange site...
Oct
15
comment Help generating wordlist using crunch
This is asking crunch to generate 14^10=289,254,654,976 words then throwing most of the output. A regex is less than ideal for that purpose, the one that works being more expensive than a purpose built program...
Oct
15
answered Help generating wordlist using crunch
Aug
12
awarded  Excavator
Aug
12
revised How can I best manage root passwords for many servers?
spelling
Aug
11
comment Do password managers leak information with swap memory?
Good operating systems encrypt their swap. Hell, even Windows can do it nowadays... To be honest, anything less than full disk encryption in 2015 is incredibly naive.
Jun
29
comment Why is there a “des-ede3-cbc” in my rsa private key?
With current known attacks, 3DES is still good with petabytes of data encrypted with the same key... I really wonder where that 512Kb figure comes from...
Jun
29
answered Why is there a “des-ede3-cbc” in my rsa private key?
May
28
reviewed Edit Things to do to ensure that data is secured on my virtual server
May
28
revised Things to do to ensure that data is secured on my virtual server
Improved question