I read several books and papers on that topic and they all stated that I need to go deeper when (1) there's a trust boundary, (2) when I need to add more elements to explain the security impact
@theXs well, kinda. sorta. not really... its what SDLTM calls a "process boundary". (I think its in yellow). you do have a flow there crossing a boundary, but that can be locked down with ACLs and such. pull it back into your own trust.
@theXs not really seperate processes... just take them into account when you describe them.
besides, its really implementation anyway. so it should be ignored.
logging might be interesting, if there is a real mechanism or service for this.
@theXs no no no. That's Common TM Mistake #0 - It is never complete, dont even try.
@theXs ah. that might also be a mistake... I dont think its easy to learn this from a book. I always recommend doing the first few times with someone experienced.
I just came across this thread by accident. By chance I've had exactly this problem recently. Instead of buying an expensive high quality shredder like the above suggests I tried disposing of everything in a big bucket of water.
To speed up the process, i used a blender to make it into a soup-...
I suggest that tag-wikis and guidelines for writing great tag wikis should be included in the FAQ for all the users to see.I am aware that the link to this blog post is provided on the edit-tag-wiki page.
I feel that creating/editing tag-wikis are one of the most ignored features especially on s...
I think the important part of the tagwiki is to explain how it is used here. Stating the dictionary explanation, especially for a wellknown term, doesnt really add much.
sometimes if its a niche term, that most people are not familiar with, it is enough to just describe it, and have the security implications obvious. e.g. spdy.
When I help someone solve a programming problem, they often express their gratitude for the solution (yay!). Generally, this takes the form of one of the following:
"Think you!"
Sometimes, people offer to hire me for further work. (Generally, stay away from these folks; they've been hiding thei...
@Adnan hmm, I dont think you need to get all combinatorical, assuming we're looking for "at least" 128 (out of 160) i think it would be more like 0.5^160 / 0.5^128
no scratch that, you need to solve for 1-P.
in other words, what is the probability of there being more than 32 bits == 0?
@Adnan Not quite, we're just reducing the problem to something we can understand... heads/tails at a small level makes it easier to work out how we solve the problem. 1=heads, 0=tails. Same logic :)
160 1s/0s is just too big to think about.
But do it with a string of four, and you can draw pictures.
@Adnan Ah. I don't think that's the bit that's wrong. I think the bit that D.W. is referring to is the calculation of 0.5^128 = P(128 1s). The probability of any given outcome is 1/(2^160). You'd need to work out how many ways you can choose 128 from 160... so 160C128 * 1/(2^160) in this case.
I don't think that adds up to 0.5^128
Of course, it would have been much more helpful if he'd just said that.
@Adnan Yeah, but, add up the cases for 128, 129, 130... and so on and it will be bigger. Not much, as 128 is the biggest of them, but it will be bigger than that.
Morning all. Am sat watching all my tyres being replaced. Incidentally @rorym am 200yds from that odd portal in Bathgate. Have sent relocation message as it is wrong.
@RoryAlsop nice. The first of my submissions got accepted today, so will need to see when they start showing up. planning a run round the livi centre ones today if I get a chance..
ya know somewhat amazing how laptop speed/virtualization have moved on in the last 5 years. I'm currently running (reasonably well) 6 VMs on a laptop. 3 x windows server 2003, 1 x windows and 2 x linux
@Adnan Haha! If its any consolation, I'm a maths student (part time, anyhow) and I have to think about it quite slowly... muttering to myself and scribbling on paper. Technically I should know this stuff right off, but never mind ;)
@Adnan Haha well, try telling telephone operators what my surname is. "Well okay Mr Bernerd, thank you for your time" "Oh, it's Mr Fennard!"
@Adnan People my age yeah it's a tad difficult. People 30+, no problemo! I go to a few clubs/groups (one being a french speaking group) and I'm usually the youngest there by about 5 years.
I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram:
----------
| Root CA | // Self-Signed Certificate
----------
| ...
@Adnan best one I've seen was that conversation between @AviD and @theXs here in DMZ, but it would be difficult to extract a single question out of it... still, nice to see someone doing a first TM with so much thought put into it
Proposed Q&A site for medical marijuana patients, researchers, medical professionals and enthusiasts who are interested in growing their own cannabis flowers.
@Adnan Why would that be a problem? Besides a few lines a day of random chatter, it's actually quite productive being here, think of all that you've learned from @ScottPack :)
Putting jokes aside, I think we've all learned a lot from each others. It's like an orgy of knowledge, each one us has his turn to learn from someone else. In the end, everybody is happy, except @Terry and @Lucas
@RoryAlsop well that one that they said would turn up in time has already. Also recharged the livi centre ones and claimed a new one.. BTW is MrsMayhem your missus?
@AviD ok not in the industry people snigger for the name, people in the industry snigger for the concept that Pen. testing makes sense in it's traditional sense :)
@Adnan well I had just typed an example out, that is what it gave me from 'permalink' maybe that bit doesnt work. But you can still mess with the tool.
I just came across this thread by accident. By chance I've had exactly this problem recently. Instead of buying an expensive high quality shredder like the above suggests I tried disposing of everything in a big bucket of water.
To speed up the process, i used a blender to make it into a soup-...
I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram:
----------
| Root CA | // Self-Signed Certificate
----------
| ...
