Almost closed as too localised, with your specific password there, but really you would be better off readingthe other questions here about password strength-we have a comprehensive set of tthem, after all. — Rory Alsop16 mins ago
@RoryAlsop - So almost closed as TL but closed as NC anyway hehe... good morning!
btw I included links to three different answers from three of our regulars here, and from three different SE sites no less in my "answer"
@RoryAlsop ;) I see the guys on SO are really crunching that review queue, IIRC last time I checked there was around 80k of VTCed questions, now it's 54k... or do I remember it wrong? :O
@RoryAlsop oh so no hope that's sorted any time soon if the new ones are coming in faster than the old ones are taken care of ... well bummer, still it's interesting other queues are mostly on 0 and is even hard to earn those darn reviewer badges :)
BTW how do you tell someone they're not really providing any new insights with their answers and they'd spend their time better on brushing up on their English, without sounding like an utter git?
Little principle is in keys.
Symmetric - is a one key(password) for every parts, for Alisa and Bob, and Eva.
Asymmetric - is a two keys, one public and one private. Private keys never been showed to anybody, Bob doesn't show his to Alisa, Alisa doesn't show her key to Bob, and than Eva, never s...
www.schneier.com: Applied Cryptography Bruce Schneier
www.amazon.com: Applied Cryptography: Protocols, Algorithms, and Source Code in C
This is like a Bible.
Stanford not such popular like Schneier, i can't say about this.
You better choose way to g...
The X509 specification allows a CA to issue a single certificate for multiple hostnames, by using the "Subject Alternative Name" extension.
From the spec:
The subject alternative name extension allows identities to be bound
to the subject of the certificate. These identities may be in...
@RoryAlsop well I wanted to send you this link for markdown editing help, but I see I get some JS errors in console that renders it less useful ... there are supposed to be listed all these link shortcuts, some are really useful
@RoryAlsop I think [main]should work for that in comments, tho that help says it's supposed to work in meta, and [meta] on main site... still worth a shot IMO
@RoryAlsop well that means JS errors I'm afraid ... dunno what's going on, someone is playing with linked scripts again, some other stuff also works a bit funny
@RoryMcCune morning @RoryM cheers that's hit the sweet spot! :)
> [meta], [main], [edit], [tag:tagname], [meta-tag:tagname], [faq], [faq#anchor], [meta-faq], [meta-faq#anchor], [about], [meta-about], [so], [su], [sf], [metaso], [a51], [se], [chat], [ask], [answer], [something.se] meta shortcuts are only available on meta sites, main site shortcuts on main sites, capitalization is respected ([Ask] = How to Ask, [ask] = how to ask, [ASK] = HOW TO ASK)
@AviD Which we all know will happen. He'll write an awesome answer making my answer look like shit. So I'll avoid the situation by not answering. I might write my comment as an answer after I come back from the barber's
@AviD I'm pretty sure this is a different situation. I don't see this ever rep-training. Not many people are interested in this topic. But yeah, I'll write the answer when I come back.
@Gilles - Thanks for moving some of the good older questions up in list by editing! Front page looks a whole lot nicer now than before with all those closed questions... it looked almost like we're all a bit moody and don't feel like answering any questions today and should put a sign out for ice-cream, be right back on it :))
@TildalWave They have a new girl training at the barber shop. I'm used to the lady that always gave me haircuts. The new girl destroyed my beautiful head.
Given your level of paranoia, you will not be satisfied with any existing hardware or software. So make your own. Start by making some silicon wafers (because if you buy them you can't trust they don't have a hidden nanochip in them, you know). Once you've done that, come back here if you have any specific question about your processor architecture design. — Gilles34 secs ago
@Gilles ouch no no no ... you see, that question should've been deleted when we were given a clear opportunity, not reverted back to where it started stinking the place up
@Adnan man if she looks even close to cute, that's a pretty cheap date there ;)
@AviD I tried that a couple of times, I get good results. The thing is, I hate cleaning afterwards. So I don't mind paying 5 euros a month for convenience.
@RoryAlsop yeah, I've used mine a couple times a week for the past yeeaaars. And, my son likes when I cut his hair too (not as short, though). so definitely worth it, financially at least.
@AviD actually, at some point we should think about doing a big review of our closed questions for possible deletion. Some just are such low value it would be better if they just died... :-)
If every tenant has a copy of the private key, then well, they all have it, which means that they can spoof each other. They can also decrypt traffic between other tenants and their clients, unless they use the "DHE" cipher suites of SSL, which removes this specific issue; this is known as Perfec...
@AviD Actually, I gave it some thoughts, and it's actually a brilliant idea.
All of the sites have their DNS records (at some point of the chain) pointing to that central HTTPS server (CH) . Client asks to connect to site1, and he's connected to CH, only CH can decrypt the clients traffic. Then it passes it to site1.
@Adnan gotta run, but in short the issue that is disturbing me is that if a request to siteB is redirected to siteA, siteA would be able to read it, and respond to it as if it is siteB.
Anybody interested in an experiment with securely wiping a hard drive and then recovering files form it? I played around with the hard drive of my old laptop and I found some interesting results.
@Adnan Ehh, interesting enough. I thought the commonly accepted wisdom is that nowadays even a single pass wipe is secure enough. Any results to the contrary is worth reading about.
@Adnan Yeah, so definitely write this up for the blog. Make sure to include your test environment (hardware models and such) process, and logs. If it's detailed enough to be repeatable that would be epic.
@RoryMcCune But you see, Eraser is one of the most used applications in that area. It's always on the top of the list of recommended applications for that purpose
well ideally you'd have a sample disk, then for each product do a wipe then analysis, then re-image the disk back to normal. that would seem a reasonable process. but as @ScottPack says if you document what you did that'd be interesting too :)
@RoryMcCune Oh - Eilin actually pretty poorly, so just decided to take her home and get a doctor appointment. She's got a very sore ear infection - sorry I totally forgot to call you. As I have to go pick up the other two I can drop it off in about 15 minutes though :-)
Try FileAudit from ISDecisions. It's the first and only solution that monitors and audits file access that is Microsoft-certified for compliance with Windows 8 and Windows 2012 server. You can install in minutes and begin tracking, auditing and reporting on changes across file servers.
FileAudi...
Well. this is annoying. This module that I pulled for stats returns the median with commas separating large numbers. That rather plays havoc with a csv.
I think we need something equivalent to fire extinguishers. Something like a stupidity extinguisher. Just a button that sprays stupid users from their computers when they're doing stupid things.
like the "Stab someone in the face over the internet" invention, but more Pavlov's Dog.
@Xander Might be worth checking with someone who has more than 10k rep on SO what that user has done. I suspect you'll find exactly the same "answer" posted three days ago.
@Xander I have got into a habit of chasing down spammers across the entire network when I find them on one site and flagging everything they've ever done as spam.
Since there is no real world precedent for such a technology, let's go with as indestructible as possible. Especially since it was supposed to be keeping Stark alive, I assume he wasn't using the Windows OS... — Thaddeus4 mins ago
Thi is the website: hxxp://host7.freehost7.com/contents/F51a424ff10912/
another website that looked exactly the same was probably taken down since I get this warning hxxp://securesignupoffers.org/g/ when I try to reach this website: coin.mydiscussion.net
Before everyone yells at me for having on...
I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.
So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get...
I only looked at the numbers the hashcat author gave, which are between 50 and 250k hashes per second on his dual GPU system depending on the chosen KDF.
@Adnan it does what my tool does and what i need, but my problem with both is that i am running them on a 3Ghz dual core with a CPU usage of under 1%, testing one Word every 1-2 secounds is not what i want. — Michael Saizyesterday
@Iszi - Honestly, I didn't but omitted that intentionally seeing the OP's attitude... didn't want to suggest there's 2 places at once where he could be taking this whole affair all wrong
when he'll get it that this is a community he'll also be able to find other of the whole myriad of options available to him, and use them according to their purpose ;)
@TildalWave Good point. Generally though, I think Meta is the better place to get those issues hashed out. It's much better for asynchronous communication with moderators than chat, unless you are familiar enough with the moderators and the chat system to know to ping them. It also gives non-chatters a better chance to be involved. Though I don't think we have too many of those in our particular Meta area anyway.
@Terry @SCott @RoryM Here's something shocking. While I was waiting for my disk to fill up with data, I decided to look at Eraser's source code. Turns out it "wipes" the disk by filling it with files itself. So it asks the file system to overwrite it, then once the disk is full it removes the added files, rather than passing over the sectors of the disk.
Since the files won't actually fill disk even if it runs out of space, there will be some places not "wiped"
That explains my results.
It's sad that such a leading software does such a poor job.
@Everybody Today I've received my new laptop and I have to free my current one so they'd give it to one of the new interns. Any tips? (I've already backed up and used DBAN on the whole disk)
@Iszi This was just an experiment. I have two hard disks, I used DBAN on one, and I'm having fun with the other.
@CodesInChaos damn, I'm googling but can't find anything like what I was searching for... was hoping to find Henning Wehn screaming in a German accent "Optimize! Optimize! Optimize!" like a Dalek :))
@CodesInChaos Agreed on that. I find it funny that they made so much effort to gather entropy from a gazillion place when generating the key, so much they almost gather the electrons' movement pattern near your PC, yet they neglect such a simple (yet important) matter like PBKDF2 iteration count
The X509 specification allows a CA to issue a single certificate for multiple hostnames, by using the "Subject Alternative Name" extension.
From the spec:
The subject alternative name extension allows identities to be bound
to the subject of the certificate. These identities may be in...
Try FileAudit from ISDecisions. It's the first and only solution that monitors and audits file access that is Microsoft-certified for compliance with Windows 8 and Windows 2012 server. You can install in minutes and begin tracking, auditing and reporting on changes across file servers.
FileAudi...
