« first day (883 days earlier)      last day (524 days later) » 
00:00 - 20:0020:00 - 23:00

8:01 PM
It hurts me to bones when people scream "Aaaaaaaaa! MD5 is BROKEN".
I remember last year I walked out of a class after a 10-minute argument with the teacher after he warned a student from using MD5 for storing passwords and using SHA instead.
 
8:31 PM
@Adnan It's easier to repeat stuff you read on the internet than thinking.
 
@AntonyVennard In this case, it's this answer. I'm 100% convinced that CRAM-MD5 is weak and suitable for a secure environment, and I think the guy's answer is alright. I just want him to see that it's not a vulnerability in MD5.
@AntonyVennard But thanks to him, I realized that I really need to work on my anger levels.
 
@Adnan technically you could say it's a vulnerability in MD5/SHAx as opposed to PBKDF2/[bs]crypt (as password hashing functions), but I don't think that's what he meant
 
@Gilles In that, I completely agree with you. But you see, it's my understanding that hashing functions of that kind are designed to be fast. So I really think the problem is with choosing MD5 for this purpose.
@Gilles I mean, with the same logic one could argue that a piece of paper is vulnerable to a "read attack" if you write your password on it. But the piece of paper is bad for writing your password on it. It is, however, good for other stuff.
 
@Adnan Yes, they are - certainly that's a desirable property if you want a cryptographically sound digest of a large file. The problem I guess is that we worked out we could take digests of small things, then we worked out this space wasn't that big and the speed of hashing worked against us.
So we needed to rethink for the small data sizes (e.g. passwords).
Technically, MD5 does have a preimage resistance problem too - link.springer.com/content/pdf/10.1007%2F978-3-642-01001-9_8.pdf although unlike its collision resistance, I don't think that has been exploited yet.
 
@Gilles Oh yeah, I disagree with the first paragraph of your question. CRAM-MD5 doesn't require the password in plaintext.
@Gilles If both the server and the client are configured to do so, you can feed it a PBKDFed string of the password. The "protocol" doesn't mention anything about the key needing to be the plaintext password.
@Gilles For example, wiki.dovecot.org/HowTo/CRAM-MD5
 
8:47 PM
@Adnan Actually I think Gilles is right. The password (whether hashed or not) is used as the key to HMAC-MD5 both for the client and the server, to produce the protocol. Gilles' point is that said value, whether hashed or not, is stored and must be done so in a retrievable form to make CRAM-MD5 work. You can then exploit this - grab the value and you'll be able to authenticate.
In this line on wikipedia:
> The decoded challenge is encrypted using HMAC-MD5 with the user's password as the secret key.
that's the problem. Even if you were to pbkdf2 / scrypt / whatever the password, you'd still need to either use that output value, or retrieve the password, to do that bit of encryption, making it no different to being in the clear.
 
@AntonyVennard Incorrect. The password doesn't need to be stored in a retrievable form. It can be stored as an MD5(password) (not that much better, but still not in plaintext). So it's implementation-specific.
 
@Adnan Ah yes, in HMAC-MD5 you do a plain md5(key) (implementation). So no, you don't need PT, you're right.
Like you say, not much better though.
My bad, I thought the implementation was different to that. Which is bad, as I did implement it about 2 months ago!
(not with md5, mind)
In my head, I thought ipad was applied to the key, but it's not, it's the message.
 
@AntonyVennard It's alright. Tomorrow I'll say something wrong and you'll correct me. I just hope I'll be as brave as you and accept that I was wrong.
 
@TildalWave i think 200 of my SecSE rep is migrated from SU. It's what made me start participating here in the first place :)
 
@ManishEarth What?! How?!
@ManishEarth I want my 3k moved from SO.
 
8:59 PM
25
A: Why can you bypass restricted WiFis by adding "?.jpg" to the URL?

ManishearthMost probably the blocker is designed to let images through, maybe because they are hotlinking some images on the page where they ask for you to login. Appending ?.jpg to the URL makes the blocker think that the URL is an image. On the other hand, anything after the ? doesn't change the actual w...

250 repz!
 
@Adnan Bah don't worry. It's tough being 100% accurate all the time, which is what makes Thomas' work here very impressive. And I'm wrong all the time. No point getting hung up about it - but I do now know how cram-md5 works, so all good :)
 
@Adnan I would like to hand out my meta reps to the rest of my accounts on the network. I spend way too much time on the meta(s). And most of the time the meta rep disappears and all I'm left with are badges:
almost all of them. meta.
 
@ManishEarth "You earned a Nice Question badge for 'punch a user button'" ?!!
Hey wait is that stackapps? Have you implemented a user puncher?
 
10
Q: Punch a user button!

Manishearth Gotten frustrated with a user? Want to vent? Feel like punching them? Don't worry, here's a script that adds a "Punch" button to every gravatar. You can punch all the worst users now: Installation Click here to install. Will work in Chrome or Firefox (the latter requires Greasemonkey). S...

yes
 
@ManishEarth Every time I go to Meta.SO I grow 1 year older and my penis gets 1 inch shorter. I really don't like it there at all.
 
9:04 PM
@Adnan I was talking about metas in general, but lol :P
 
@ManishEarth Oh WOW. That's possibly the most useful stackapp ever.
 
MSO is fun :)
 
@Adnan how could we ever be successful in disagreeing with you, when we already have such problems agreeing with you? :P
@ManishEarth oh yes didn't think of that, I always forget Sec.SE is younger than SU
 
@TildalWave I agree. Especially in security, I'm easily convinced I'm wrong and it takes me a lot to convince myself that I'm right. It's just that I'm new to the field. I guess it gets better
@ManishEarth Awh! I'm disappointed! No punching at all!
 
@Adnan closest I could get :)
Either way, it's quite relaxing to have Keen throw stuff at the user :P
 
9:12 PM
@ManishEarth hehe mooning love it
 
@TildalWave Note that the whole animation is @balpha's work, I just adapted it for a better purpose :)
 
@ManishEarth I don't care if you've stolen it from the Queen Mother, it's awesome! :)
 
:) thanks
 
bit of harmless fun,... might help me unwind when getting really frustrated sometimes with some here... can you make it work in chat too please? :))
that reads wrong... didn't mean I get frustrated with peeps in the chat, I meant in Q&A... but would be really nice to have it here too regardless... oh, and if @Adnan could get a cactus or a pineapple button please :))
 
@AntonyVennard No! only if the key is longer than 16 bytes, which is not the case for most passwords
@Adnan true, it would be more precise to say that the shared secret must be in plaintext
 
9:21 PM
@Gilles Indeed.
 
this need not be the human's password, it can be value that can be used to authenticate with this particular server but needs extra brute-forcing to be used with other servers
 
@ManishEarth which reminds me, have you asked for active elections list?
 
@TildalWave talked with TimStone directly, he said something about it being in the code, just not pushed to elections.SE (which he will try to get done this weekend)
 
@Adnan edited
 
@ManishEarth Oh coolio thanks... hehe I've got connexionz, I've got connexionz!! :)) Now let's just hope @Jin didn't forget about me... then I'll start planning a SE stuff BBQ and how to take over the world, yeah baby (winky in mouth, grinning) :)
 
9:31 PM
whoops wrong Tim
non-SE staff Tim
 
@ManishEarth oh, and I was just googling for dr. evil... well, ok then
minime then :)
 
Jesus! My rent was raised 1 euro, and instead of adding that to my next month bill, they sent me a bill for 1 euro. I'm not an expert or anything, but is it really worth the overhead?
 
^ he was just in WILTY tonight ... guess what his first car was LOL
 
10:09 PM
@ManishEarth installed - didn't see any punching, but the mooning was there :-)
 
00:00 - 20:0020:00 - 23:00

« first day (883 days earlier)      last day (524 days later) »