1,553 reputation
513
bio website
location
age
visits member for 1 year, 9 months
seen Nov 23 at 23:29

Apr
8
comment How does hashing work?
I'm not sure if you're saying "I thought they scrambled it randomly" as in you've learnt differently now, but just so you know it's definitely not the case! Hashing is not random, it's repeatable - but it's impossible to work backwards that's all. A SHA256 hash of the word 'cat' will always be the same 100% of the time. That's why we can use them reliably for passwords. If the hash produced a new value every time, and we could only compare against a previous hash value, we'd never know if the password was right or not! :D
Apr
7
comment How does hashing work?
As a tiny answer to Q(3) more specifically programs like oclHashcat try millions of hashes in a predetermined list in most cases. They never actually 'decrypt' the password (remember you can only decrypt encryption - hashing != encryption), but they know if they try a password and the resulting hash matches they one they have, it must have been the original password. I.e. They don't decrypt, they do trial and error millions of times a second to see if they can get a match. This is why it's also good for a hash to be slow.
Mar
28
answered What is zero day?
Mar
27
awarded  Guru
Mar
8
answered Is update@em.facebookmail.com legitimate?
Mar
7
awarded  Analytical
Mar
6
awarded  Good Answer
Mar
6
awarded  Mortarboard
Mar
6
awarded  Nice Answer
Mar
6
comment At what point does something count as 'security through obscurity'?
I don't mean to sound defensive, but would you argue the overhead of a different port really is significant? For a simple port change the avoid the vast majority of automated exploit scanners looking for misconfigurations. I'd say -p 2222 is not a significant overhead in any real sense.
Mar
6
revised At what point does something count as 'security through obscurity'?
added 925 characters in body
Mar
6
revised At what point does something count as 'security through obscurity'?
added 398 characters in body
Mar
6
answered At what point does something count as 'security through obscurity'?
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
tomshardware.com/reviews/wireless-security-hack,2981-8.html Obviously it's a lot easier to scale up with multiple GPU's also
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
Okay. From my understanding this is still a dictionary attack. Dictionary is a fancy way of saying "predefined list of possible passwords", regardless of how they were derived.
Mar
5
revised Client-Side Hashing to decrease value of password guessing heuristics
added 838 characters in body
Mar
5
comment Client-Side Hashing to decrease value of password guessing heuristics
Forgive a hashing newbie, but what is "heuristics" in this context? Am I understanding you're simply saying you want to render dictionary attacks impractical?
Mar
4
answered Client-Side Hashing to decrease value of password guessing heuristics
Mar
4
answered Is it possible to Identify a VPN user by finding relations in traffic?
Mar
3
revised How dangerous is game guard?
Small grammar editting