5,955 reputation
41139
bio website adranos.com
location
age
visits member for 2 years, 3 months
seen Feb 13 at 14:40

@TildalWave said having a sig would encourage more people to view my profile. Also beer.


Jul
2
awarded  Curious
May
2
awarded  Famous Question
Apr
26
awarded  Yearling
Nov
19
comment Is a password protected PDF file safe for bank statement attachments?
50 characters!? As a benchmark, 14 characters ~100 bits maximum entropy, which is more than enough if the PDF encryption is configured correctly.
Nov
13
awarded  Nice Answer
Nov
8
comment Are older viruses removed from virus definition files?
You know I know that :P entry point of 0x00 and 0xaa55 at bytes 510 and 511. The rest is easy :)
Nov
6
comment Are older viruses removed from virus definition files?
What if I write my 16-bit PE malware to your MBR? :P
Nov
6
comment Preventing DDoS from faked IP address
The 'syn flood' described by GZBK here works because your server has to keep a record of all unfinished TCP handshakes for a period of time. Sending a whole bunch of SYN packets fills up this record. SYN Cookies is a method of selecting special TCP sequence numbers in such a way that allows the server to not keep a record of unfinished TCP handshakes. See the wikipedia article for details.
Nov
5
comment Preventing DDoS from faked IP address
The answer in reality is that DDoS mitigation is extremely difficult, and any solution will only be of partial success. Companies exist solely to absorb huge DDoS attacks.
Nov
5
comment Preventing DDoS from faked IP address
Read this answer, particularly the things regarding Proof of Work.
Nov
4
revised Multi-key encryption algorithm
edited title
Oct
28
comment What does Mark Shuttleworth mean by “we have root”?
@MSalters My favourite thing about that is that all the short unix commands were implemented to avoid having to regularly swap out ink ribbons on the teletypes :) they're quicker to type too of course.
Oct
28
comment scrypt strength with “weak” salt
@JohnC if you want to make it more expensive, you increase the work factor. Salts are about preventing precomputation attacks, not increasing the cost of brute forcing an individual hash.
Oct
28
comment scrypt strength with “weak” salt
Doesn't scrypt bundle the salt and hash together anyway? Even if not, what is stopping you from storing a tuple?
Oct
11
comment Does google use browser fingerprinting?
Your browser fingerprint appears to be unique among the 3,475,427 tested so far. oh dear.
Oct
11
comment Is it possible to brute force all 8 character passwords in an offline attack?
For single iteration MD5, small GPU arrays (<20 cards) are now pushing into the 100Billion/second area. Large (intelligence agency) arrays will be several orders of magnitude faster.
Oct
9
comment Totally secure public key distrubition
If I want to set up a PGP link with someone I know, I will ask them to send their public key, and then I will call them and read it out over the phone to confirm it is correct. Voices are pretty hard to synthesize in real time :P
Oct
9
answered Can any asymmetric algorithms work with only a key-sized amount of randomness?
Oct
9
answered Totally secure public key distrubition
Oct
3
comment What would one need to do in order to hijack a satellite?
+1 Purely for the Mel story