Reputation
2,867
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
12 23
Newest
 Custodian
Impact
~172k people reached

Dec
19
awarded  Custodian
Dec
19
reviewed No Action Needed Got a spam mail with an htm attachment, is the script harmful?
Dec
19
reviewed Approve Should I be concerned that Google no longer trusts specific Symantec root CA cert that is also on my Windows system?
Oct
16
revised Diffie-Hellman large prime number weakness. Is this concept valid? If so, how can this be remediated by end-users/admins?
added eff link
Oct
16
comment How 'Logjam' attack affects openID since it uses Diffie-Hellman key exchange method?
There are plenty of opportunities for even run of the mill bad guys to MITM... Running rogue hotspots in hotels/airports/etc... makes it very easy to achieve...
Oct
16
answered Diffie-Hellman large prime number weakness. Is this concept valid? If so, how can this be remediated by end-users/admins?
Oct
15
comment Help generating wordlist using crunch
gist.github.com/brohee/c6e3f3dec32f009ba255 as I said just check for repetition and abort. The result set is still huge even removing password with 3 consecutive identical chars, and the program is very slow, it displays obvious correctness but would be pretty dramatic changes to be fast.
Oct
15
comment Help generating wordlist using crunch
My program is pretty easy to extend, filtering for two many repetitions is easy before output. This is easier (but slower) than just not repeating them in the first place... As for the number of passwords permitted by the complete rules, that should be a pretty easy enumerative combinatorics question, more suited for another stack exchange site...
Oct
15
comment Help generating wordlist using crunch
This is asking crunch to generate 14^10=289,254,654,976 words then throwing most of the output. A regex is less than ideal for that purpose, the one that works being more expensive than a purpose built program...
Oct
15
answered Help generating wordlist using crunch
Aug
12
awarded  Excavator
Aug
12
revised How can I best manage root passwords for many servers?
spelling
Aug
11
comment Do password managers leak information with swap memory?
Good operating systems encrypt their swap. Hell, even Windows can do it nowadays... To be honest, anything less than full disk encryption in 2015 is incredibly naive.
Jun
29
comment Why is there a “des-ede3-cbc” in my rsa private key?
With current known attacks, 3DES is still good with petabytes of data encrypted with the same key... I really wonder where that 512Kb figure comes from...
Jun
29
answered Why is there a “des-ede3-cbc” in my rsa private key?
May
28
reviewed Edit Things to do to ensure that data is secured on my virtual server
May
28
revised Things to do to ensure that data is secured on my virtual server
Improved question
May
25
reviewed Approve Why is writing zeros (or random data) over a hard drive used when writing all ones is more beneficial?
May
16
revised Decrypting SHA-256 with known plain text
added 28 characters in body
May
16
comment Decrypting SHA-256 with known plain text
Yes it does, however if %s is truly random and long enough they keyspace is still too large for it to be practical.