1,513 reputation
512
bio website
location
age
visits member for 1 year, 8 months
seen 2 days ago

Apr
7
comment How does hashing work?
As a tiny answer to Q(3) more specifically programs like oclHashcat try millions of hashes in a predetermined list in most cases. They never actually 'decrypt' the password (remember you can only decrypt encryption - hashing != encryption), but they know if they try a password and the resulting hash matches they one they have, it must have been the original password. I.e. They don't decrypt, they do trial and error millions of times a second to see if they can get a match. This is why it's also good for a hash to be slow.
Mar
28
answered What is zero day?
Mar
27
awarded  Guru
Mar
8
answered Is update@em.facebookmail.com legitimate?
Mar
7
awarded  Analytical
Mar
6
awarded  Good Answer
Mar
6
awarded  Mortarboard
Mar
6
awarded  Nice Answer
Mar
6
comment At what point does something count as 'security through obscurity'?
I don't mean to sound defensive, but would you argue the overhead of a different port really is significant? For a simple port change the avoid the vast majority of automated exploit scanners looking for misconfigurations. I'd say -p 2222 is not a significant overhead in any real sense.
Mar
6
revised At what point does something count as 'security through obscurity'?
added 925 characters in body
Mar
6
revised At what point does something count as 'security through obscurity'?
added 398 characters in body
Mar
6
answered At what point does something count as 'security through obscurity'?
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
tomshardware.com/reviews/wireless-security-hack,2981-8.html Obviously it's a lot easier to scale up with multiple GPU's also
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
Okay. From my understanding this is still a dictionary attack. Dictionary is a fancy way of saying "predefined list of possible passwords", regardless of how they were derived.
Mar
5
revised Client-Side Hashing to decrease value of password guessing heuristics
added 838 characters in body
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
Forgive a hashing newbie, but what is "heuristics" in this context? Am I understanding you're simply saying you want to render dictionary attacks impractical?
Mar
4
answered Client-Side Hashing to decrease value of password guessing heuristics
Mar
4
answered Is it possible to Identify a VPN user by finding relations in traffic?
Mar
3
revised How dangerous is game guard?
Small grammar editting
Mar
3
suggested suggested edit on How dangerous is game guard?