Andy Lee Robinson

less info
121 reputation
2
bio website
location Budapest, Hungary
age
visits member for 2 years, 8 months
seen Aug 19 '11 at 3:07

CTO, IT consultant, system administrator, webhosting provider, musician


Aug
18
comment Ignoring broadcasts to 10.0.0.255 using iptables
FORWARD rule isn't duplicated because -o and -i distinguish direction. There isn't a "to or from" specifier for an interface.
Aug
18
awarded  Teacher
Aug
17
answered Ignoring broadcasts to 10.0.0.255 using iptables
Aug
13
comment How to persuade average people that security matters?
I would agree that that particular example is rare, but millions of people have already suffered. People should not need to lose a leg in a car crash to be a better driver! Surely it is better to prevent people wrecking their lives than waiting for them 'having to catch on'? New users can't easily comprehend that they are connected to a billion other people with a significant fraction of sleepless evil criminals whose sole occupation is to profit from their ignorance. There are new and gullible users joining every day that need educating. Internet security should be taught in primary schools.
Aug
13
answered How can I protect my computer from my potentially malicious colleagues?
Aug
13
comment What is your way to create good passwords that can actually be remembered?
This is a terrible scheme. Why put any artificial limits on permutations? Knowing this scheme, one GPU doing 10 billion unsalted md5 tries per sec would take a maximum of half a second to cover all permutations of [a-z][a-z][0-9][0-9][a-z][a-z][0-9][0-9]. Even salted passwords would be vulnerable. This post should be deleted in case someone actually wants to use it.
Aug
13
comment What is your way to create good passwords that can actually be remembered?
Typing "randomly" rarely creates random characters. There will usually be some identifiable structure and therefore weakness. eg, leftside chars then rightside chars, dipthongs, adjacent character groups. Instead use a program to create a random string, and then practice that to commit to haptic (muscle) memory.
Aug
13
answered What is your way to create good passwords that can actually be remembered?
Aug
12
comment XKCD #936: Short complex password, or long dictionary passphrase?
DW, thanks for the reminder, though I think even 1000 guesses/sec is optimistic and would be noticed quickly and firewalled, or at least should be. 2000^4 combinations should be more than adequate at this frequency even if password schema is known.
Aug
12
awarded  Supporter
Aug
12
answered How to persuade average people that security matters?
Aug
12
comment XKCD #936: Short complex password, or long dictionary passphrase?
Yes, any knowledge about the password greatly reduces its security. 4 words from a 2000-word dictionary is effectively a 4 digit number in base 2000. Even if the words are "133t3d", it is just as insecure.
Aug
12
comment XKCD #936: Short complex password, or long dictionary passphrase?
2000^4 permutations is trivial using GPUs, which can do 10 billion MD5 keys per second. If the attacker knows the dictionary and that the password is 4 concatenated lowercase words, then the maximum cracktime is reduced to just 1600 seconds!
Aug
12
comment XKCD #936: Short complex password, or long dictionary passphrase?
I don't hide. My ssh ports are on 22. If anyone fails to login to any account 10 times within 5 minutes, then their ip address is firewalled off with iptables and a message is sent to their ISP warning them of a compromised machine on their network.