« first day (772 days earlier)      last day (4129 days later) » 

1:22 AM
@Gilles this wasn't the search ojne, this was the pedoidiot one :-)
 
@CodesInChaos It is a signature verification function (and the one about "encrypting with the private key" is the generation function). This is the usual historical confusion about signatures, which were first described like that for RSA.
 
 
7 hours later…
8:58 AM
Should this be moved over here instead?
24
Q: Is Ken Thompson's compiler hack still a threat? (yes/no/why?)

AndrewKen Thompson Hack (1984) Ken Thompson outlined a method for corrupting a compiler binary (and other compiled software, like a login script on a *nix system) in 1984. I was curious to know if modern compilation has addressed this security flaw or not. Short description: Re-write compiler code t...

 
9:46 AM
anyone else think this needs some close votes:
1
Q: What is the difference between protocols and algorithms?

aishuishouI am learning network security and I can't understand the boundary line between protocols and algorithms. Are algorithms the concrete realization of the protocols? Are protocols composed of several algorithms?

 
@RoryAlsop It's got mine.
 
Morning @Terry :-)
I t just seems like nothing to do with security, and all about terminology
 
@RoryAlsop Agreed. It's offtopic, even it if wasn't a crappy question.
 
 
3 hours later…
1:11 PM
oh boy
-1
Q: Processor microcode manipulation to change opcodes?

d33tahI had recently thought of an extreme way of implementing security by obscurity and wanted to ask you guys if it's possible. Would a person with no access to special processor documentation be able to change the CPU's microcode in order to obfuscate the machine's instruction set? Or is it some kin...

 
 
1 hour later…
2:19 PM
 
2:29 PM
@Polynomial Great answer to a shitty question.
 
@TerryChia heh, thanks
 
You will probably overtake @RoryAlsop in 2 months eh?
Anyone around here familiar with Google App Engine and its datastore?
 
heh, maybe
I missed a huge amount of stuff out of the answer, because there was too much to explain
 
@Polynomial Yeah, it's the type of topic that can fill an entire book.
 
modern CPUs are completely insane in terms of internal complexity
and even the term "microcode" is a bit of a misnomer - there might be different microcodes for individual internal units and some microcodes might map to parts of other codes
and there are delay lines that pull to ground using slightly inductive material that can delay a clock edge by a few tenths of a nanosecond, allowing some clever synchronisation tricks
so it's all about understanding the hardware as well as the logical operation of microprocessors
 
2:43 PM
@Polynomial You lost me.
 
hehe
I tend to do that to people.
 
You won't be a good teacher. :P
 
heh, I'm good at teaching people if I cover every part of it.
I just don't think this is the place to cover a wide range of electronics stuff :P
 
Indeed. There is always a point where going deeper is just too much work, so just let someone else abstract that damn thing.
 
yep
 
 
1 hour later…
4:13 PM
0
Q: How secure is this php code against SQL injection?

shaun if (isset ($_POST['login'])) { $username = $_POST['username']; $password = $_POST['password']; $password_hash = sha1($password); $query = "SELECT id,username FROM users WHERE username = '".mysqli_real_escape_string($link,$username)."'...

Why.....?
 
4:38 PM
I should learn PHP
LOVE this: Check if a connection is using ToR with a DNS query to .ip-port.exitlist.torproject.org
1
A: How does "check.torproject.org." know if you're using TOR?

0x90I have seen this post shows how to detect a Tor connection in php function IsTorExitPoint(){ if (gethostbyname(ReverseIPOctets($_SERVER['REMOTE_ADDR']).".".$_SERVER['SERVER_PORT'].".".ReverseIPOctets($_SERVER['SERVER_ADDR']).".ip-port.exitlist.torproject.org")=="127.0.0.2") { return ...

 
 
2 hours later…
7:00 PM
@Polynomial No worry, I have expanded my own answer to cover the parts you missed.
 
7:59 PM
@TerryChia I agree completely. Sometimes going as deep as possible just isn't what people want, or need. Sometimes you just go in a little bit to satisfy everybody's needs.
 
8:32 PM
@makerofthings7 That's an old trick. I use it on a couple of my sites to trigger CAPTCHAs and force login for some stuff that's normally public.
 
 
1 hour later…
9:51 PM
@ScottPack hehe, your blatancy is saving me the TWSS...
 
@AviD You're welcome.
 
so I got the proposal for how much its going to cost me to fix the flood damage.
or rather, the preventative maintenance so it doesnt happen again. so this doesnt even cover fixing the plaster, paint, etc.
suffice to say - its a shi*tload.
over 5K $.
anybody wanna make a donation?
 
ugh, sorry mate.
Although, honestly, that's the low end of what I would expect to pay for a new roof.
 
heh. its not even a new roof, its just a full coat of sealant round the house, walls, roof, etc.
I guess its true what they say - you buy a house, you spend the rest of your time|money taking care of it.
 
mmm
I thought you had a leaky roof too.
 
10:06 PM
is that a euphamism I am not aware of?
 
Not specifically.
 

« first day (772 days earlier)      last day (4129 days later) »