Wow, @AviD. I just started looking at the SO answers. They're definitely missing the point. You expect your length variable to be, well, variable whereas your "max size" will likely be static.
At least, that's my understanding of the situation. Please keep in mind that I consider myself to be roughly 8/10 systems, 2/10 coder. Though I'm willing to adjust that to 9/1 :)
Are signature based antivirus or antimalware solutions effective? Has the battle been lost against the ever increasing amount of malware, particularly rootkits, that are in the wild?
@AviD Agreed, I think in that field he does have a lot of experience, however that is one area in a very wide space, so that does not make him an expert in all areas of security. So when individuals get ranty and resort to personal attacks I think we should just follow @Jeff's guidance and delete insults, leave valid input, and warn then ban if things get worse.
@AviD - I also slightly sanitised one of your comments that could be perceived as inflammatory just to try and keep the peace a little. You'll be able to see which bit in history.
@RoryAlsop yea quite a lot already said. may get an answer out later
On the conflict between @ThomasPornin & @Rook, it's really not useful to resort to somebody's background as an argument over the validity of their point.
@AviD I didn't get to that one before the deletions, so missed that. Anti MS rhetoric these days is daft though, considering they actually do a lot of it better than everyone else
pinged a couple of links up on twitter - for your memcpy chat, and for the disk encryption one frank bumped to the top of the active list. @Graham and I have a lot of new followers from yesterday, so we might get a bump in traffice
@GrahamLee oh, (shows how much I must have had to drink...) thought I saw you there
In chat I have a red 2 on my avatar signifying 2 messages flagged for moderator, but when I go to my mod tag there is nothing there.
Thinking a notifier has just got stuck, as I don't have the 2 in my top bar.
there have been some good answers on those sorts of q's
offtopic aside - theregister.co.uk/2011/04/21/goldfish_racing - I like the final line: The goldfish derby is no more, but the bar is now punting "$5 for 2 Fish Tacos every Tuesday!!"
Palo Alto Networks next generation firewall is used regularly to limit the use of a port to a specific application. DNS is one of the 1,200+ applications Palo Alto Networks recognizes. So if you implement a policy to limit port 53 UDP to DNS, anything else is supposed to be blocked. Clearly the o...
you can bet the performance is good, as this is basically what Apple have based their higher-level APIs on (and used to write Safari/iTunes for Windows)
@AviD to quote the movie, "it's the only way to be sure". The issue with C strings and unbounded byte arrays is not that they aren't normally used safely, but that they are really crappy data types.
(all the yelling has got me a little self-conscious...)
Scott Adams: "I have to confess that giving verbal wedgies to people who desperately deserve them, in ‎a public forum, is a lot more fun than you imagine. "
@AviD In my opinion that's a pretty good indication that you're not completely self-absorbed.
@AviD I would make a joke regarding US Politics and things not intended to be factual statements, but I feel as though I have the wrong crowd for that.
Hi i want to be able to vote on the new name of the forum but I don't really know what to do? do i just leave my vote a a message or is there something i have to do?
At first I wanted an irc interface so that I could centralize my chat rooms. After using the web interface for a while I've come to think that I like it better :)
I'm planning to implement Tiny Encryption Algorithm and exchange data between two PHP sites.
Specifically, using the code presented at PHP-einfach.de (downloadable from here).
Does anyone have any experiences / thoughts / comments on using this algorithm? (other than why are you using it)
@ThomasPornin I see the crypto site as relating to this one (the crypt parts of it), as cs-theory relates to SO.
not necessarily more or less technical, but rather focused on the innards and the whyfors, rather than the "how do I use this" or "which should I be using"
The place where I work was hit by the new Qakbot variant (3rd generation) a couple of days ago and it has been brutal. Unfortunately a lot of the documentation out there is from the 1st iteration of this virus.
We've looked at a lot of the big antivirus sites (Symantec, McAffee, etc.) but unfort...
@WZeberaFFS Yes, but I'm not quite sure coming to a Q&A site and saying "I'm not getting my question answered quickly enough here, where else can I go." is really on topic.
Does anyone else find it annoying that there's not a "reply" link available in chat transcripts, yet you can still use the :###### to reply to those messages?
@Iszi He didn't refer to this site but to the internet "Unfortunately a lot of the documentation out there". However what I'm interested in is what he replies to my comment asking what's wrong whit this site.
@nealmcb I see 8, but not "Feed". Did I miss something?
This one is bordering on subjective/argumentative, to be honest. There's been papers/articles written/posted on both sides of the issue. One side saying keeping them complex and fresh makes them harder to break, and the other side saying keeping them simple and stale makes them less likely to be exploited by user-implemented workarounds.
Is there any research on how how a password policy can increase / decrease the quality of passwords.
At first you might think that this is a obvious question but taking the user presuming that it isn't a security professional but your average facbook spammer. If you don't have any requirements o...
there's a very interesting presentation by Matt Weir talking about how all the password policy (at least one special, two numbers, etc) is actually lowering the password entropy
@AviD I think you mixed a loaded opinion in with your technical question, to the point where a bunch of folks missed your actual question. I thought it was clear enough, but see why it triggered folks.
@Iszi The right-most of the 10 (!) icons on the chat page for me is the traditional rss feed icon.
this site has been great, but a little slow, a lot of security questions still go to SO/SF. is there a way to tell the mods to move that stuff over to our little site?
@Marcin Right now, we just have the Pro-Tem mods which were chosen (I think) by SEI during the Beta site creation. We'll get voting when the site goes Gold.
SE has a A LOT of questions about crypto and protocol analysis, password storage, etc, that would definitely get this site moving if we just started moving them 'en masse'
@WZeberaFFS SE is StackExchange - Generally refers to the entire network of sites. In that respect, I think @Marcin's comment (as originally written) is still valid. SO isn't the only site that gets Security-related questions that would be move-worthy. SF and SU get them too.
@ThomasPornin Looks like some previous work on a preimage attack on the old mysql hash: springerlink.com/content/c181731216163064 I haven't spent the money on the paper yet, but an example is given in their presentation: icisc.org/presentations/7-2.pdf But the collision they cite doesn't work for me MySQL123 = 1b03947a6f1ae59b but RGp0mA23 = 1b03947a77350d71
Are signature based antivirus or antimalware solutions effective? Has the battle been lost against the ever increasing amount of malware, particularly rootkits, that are in the wild?
In chat I have a red 2 on my avatar signifying 2 messages flagged for moderator, but when I go to my mod tag there is nothing there.
Thinking a notifier has just got stuck, as I don't have the 2 in my top bar.
I'm planning to implement Tiny Encryption Algorithm and exchange data between two PHP sites.
Specifically, using the code presented at PHP-einfach.de (downloadable from here).
Does anyone have any experiences / thoughts / comments on using this algorithm? (other than why are you using it)
