meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 3 months |
| seen | yesterday | |
| stats | profile views | 25 |
|
Sep 24 |
comment |
Computational Feasibility of finding 'Good Links' of the following format @Polynomial The server could also still accept your requests, but automatically return "no image" regardless of what you passed it, making your probability of success effectively zero, with no way for you of knowing (not very useful in this situation but can be a very powerful deterrent in some situations, in particular people trying to guess passwords) |
|
Sep 11 |
comment |
How to check if someone is in my computer Real hackers don't use the network to remote-control your computer, they use a butterfly with very accurately timed wing flaps, creating small changes in atmospheric pressure, which in turn causes electromagnetic radiation to hit your computer, flipping specific bits in memory thereby allowing them to alter your system's state to their advantage. |
|
Sep 10 |
comment |
Encryption and compression of Data @lynks It is not, however, a definitive test of randomness. If the encrypted file does not compress, your cipher isn't a complete joke, but may still very well be insecure in the extreme. If the encrypted file does compress, all hope is lost and you may as well hand over the plaintext to the bad guys. |
|
Sep 2 |
comment |
Have anyone tried to extract the encryption key from a SSD? There now exist specialized modes of operation for wide block encryption specifically tuned for disk encryption - see CMC, EME. Of course, actually using them is a whole different matter. |
|
Aug 29 |
comment |
Safely disable firewire/thunderbolt, patching up DMA exposure There's something called a jumper that'd like to say hi to your BIOS/EFI password :p |
|
Aug 29 |
comment |
Can you encrypt a password using that password itself? How would you recover MySecretKey once you've encrypted it with itself as the key? :) |
|
Aug 21 |
awarded | Caucus |
|
Aug 21 |
awarded | Constituent |
|
Aug 12 |
comment |
What are the security measures taken on GPS transmissions? "Dude, I'm gonna poison this guy's GPS reception so he gets lost in the woods!" |
|
Aug 8 |
comment |
Sensitive information I don't want my work to backup Print an encrypted version, then decode it at home. Oh, wait... |
|
Aug 4 |
comment |
How does disk encryption mounting work with large disk and low RAM? @ewanm89 yeah well at this point it becomes more of a terminology issue, in a sense it does become the new block size (but I see your point). :) |
|
Aug 4 |
comment |
How does disk encryption mounting work with large disk and low RAM? @ewanm89 Threefish has a 256-bit block size variant along with 512-bit and 1024-bit ones (it is a wide block cipher since it was designed for hashing in mind, see Skein). But anyway full-disk encryption uses modes of operation which expand the cipher's block size to the size of a disk sector, so it's not really relevant. |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? @Polynomial I meant SHA256 if the application is security-sensitive, the "otherwise" was a bit ambiguous, sorry. If speed was a real concern I would go for something like Skein though, but I agree that SHA-1 would be somewhat faster than SHA256 (but then I'm pretty sure a caching system would be dominated by disk latency/throughput, making speed irrelevant overall, but this is speculation). |
|
Aug 4 |
awarded | Commentator |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? Also, the concept of checking against a "collision blacklist" is so anti-KISS that my eyes are bleeding. If an attacker can create one collision, he can most certainly create another, making your blacklist useless. |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? If your caching system doesn't need to worry against a malicious entity trying to create collisions, then you can safely use MD5 - if it's just your program against lady luck, the probability of stumbling upon a collision is basically zero. Otherwise, I recommend SHA256. |
|
Aug 1 |
comment |
How can passwords be stolen from Yahoo? @Jim Well looking over the dump again, many cracked passwords are not what I would call weak, so I could be wrong and Yahoo did keep information about the passwords. But that would be such a gaping security failure I doubt even Yahoo is capable of it. |
|
Aug 1 |
answered | How can passwords be stolen from Yahoo? |
|
Jul 12 |
comment |
How to destroy old credit card? @martinstoeckli Well, aggressively attacking the card with scissors decreases security of your fingers :) |
|
Jul 12 |
comment |
How to destroy old credit card? Why don't you just burn it? Put it in an ashtray with some flammable material, set it on fire and come back a few minutes later, there will be nothing left of the card. Plus, it's more exciting than cutting it with scissors... :p |
