network profile
| bio | website | |
|---|---|---|
| location | Budapest, Hungary | |
| age | ||
| visits | member for | 1 year, 9 months |
| seen | Aug 19 '11 at 3:07 | |
| stats | profile views | 3 |
CTO, IT consultant, system administrator, webhosting provider, musician
|
Aug 18 |
comment |
Ignoring broadcasts to 10.0.0.255 using iptables FORWARD rule isn't duplicated because -o and -i distinguish direction. There isn't a "to or from" specifier for an interface. |
|
Aug 18 |
awarded | Teacher |
|
Aug 17 |
answered | Ignoring broadcasts to 10.0.0.255 using iptables |
|
Aug 13 |
comment |
How to persuade average people that security matters? I would agree that that particular example is rare, but millions of people have already suffered. People should not need to lose a leg in a car crash to be a better driver! Surely it is better to prevent people wrecking their lives than waiting for them 'having to catch on'? New users can't easily comprehend that they are connected to a billion other people with a significant fraction of sleepless evil criminals whose sole occupation is to profit from their ignorance. There are new and gullible users joining every day that need educating. Internet security should be taught in primary schools. |
|
Aug 13 |
answered | How can I protect my computer from my potentially malicious colleagues? |
|
Aug 13 |
comment |
What is your way to create good passwords that can actually be remembered? This is a terrible scheme. Why put any artificial limits on permutations? Knowing this scheme, one GPU doing 10 billion unsalted md5 tries per sec would take a maximum of half a second to cover all permutations of [a-z][a-z][0-9][0-9][a-z][a-z][0-9][0-9]. Even salted passwords would be vulnerable. This post should be deleted in case someone actually wants to use it. |
|
Aug 13 |
comment |
What is your way to create good passwords that can actually be remembered? Typing "randomly" rarely creates random characters. There will usually be some identifiable structure and therefore weakness. eg, leftside chars then rightside chars, dipthongs, adjacent character groups. Instead use a program to create a random string, and then practice that to commit to haptic (muscle) memory. |
|
Aug 13 |
answered | What is your way to create good passwords that can actually be remembered? |
|
Aug 12 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? DW, thanks for the reminder, though I think even 1000 guesses/sec is optimistic and would be noticed quickly and firewalled, or at least should be. 2000^4 combinations should be more than adequate at this frequency even if password schema is known. |
|
Aug 12 |
awarded | Supporter |
|
Aug 12 |
answered | How to persuade average people that security matters? |
|
Aug 12 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? Yes, any knowledge about the password greatly reduces its security. 4 words from a 2000-word dictionary is effectively a 4 digit number in base 2000. Even if the words are "133t3d", it is just as insecure. |
|
Aug 12 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? 2000^4 permutations is trivial using GPUs, which can do 10 billion MD5 keys per second. If the attacker knows the dictionary and that the password is 4 concatenated lowercase words, then the maximum cracktime is reduced to just 1600 seconds! |
|
Aug 12 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? I don't hide. My ssh ports are on 22. If anyone fails to login to any account 10 times within 5 minutes, then their ip address is firewalled off with iptables and a message is sent to their ISP warning them of a compromised machine on their network. |
