The connection protocol provides channels that can be used for a wide
range of purposes. Standard methods are provided for setting up
secure interactive shell sessions and for forwarding ("tunneling")
arbitrary TCP/IP ports and X11 connections.
@kerbalspacebecky Goal: Connect to RDP via port 443, and connect back to an arbitrary port (80, 8080, whatever) in the other direction without control over the local firewall.
The standard *nix way afaik is to use SSH.
Not a clue what the standard Windows way would be.
@JourneymanGeek Hmmm maaaaaybe
It's complicated by the fact that I want to connect to 3389 on the remote, but it must go through 443
So on the remote I could do 443 to 3389.
But then I can't do anything about the connection going the other way.
@JourneymanGeek He'd rather you work on moving the young goat?
Was fiddling with some printer floor samples at retail, found that Brother inkjet printers do not have any kind of mechanical keying for the ink cartridges. This is not good.
I was able to insert a cyan cartridge into the yellow slot.
Pretty sure the printer would reject it at the firmware level but being able to contaminate one ink channel with the wrong type of ink is bad design.
The Epson and HP cartridges I've worked with are in fact keyed and it is not possible to insert a cartridge into the wrong slot.
> NOTE: It may require 10 to 15 cleanings to clean the ink tubes and print head. During the cleaning process, the ink in the cartridge(s) will be consumed. Additional ink cartridges may be required to complete the cleaning process.
Wow. That's absolutely deficient design.
That is enough for me to recommend against buying a Brother inkjet printer.
I need to configure a Windows 7 Home machine to connect to a VPN Server. This requires the following configuration:
Local Policies > Security Options
Network Security: Minimum session security for NTLM SSP based (including secure RPC) clients
disable "Require 128-bit encryption"
In Win...
Somebody tell me they see an error in the following:
The MD5 hashing algorithm is used by NTLM2 authentication. MD5 stands for Message-Digest algorithm 5. It uses a 128-bit key and is a widely used hashing algorithm. LM hash is used with passwords of 14 or fewer characters.
If you use a password of 15 characters or more on newer versions of Windows, the OS will store a constant string as the LM hash, which is effectively a null password, and thereby uncrackable. The real password will be stored as an NTLM2 hash and (in this case calculated with MD5) will be used solely.
Question:
Your organization has a policy that states that user passwords must be at least 16 characters. Your computers use NTLM2 authentication for clients. Which of the following hash algorithms will be used for password authentication?
I selected LM Hash, I don't understand, how MD5 is the correct answer.
> One oddity: None of the ink cartridges are keyed; you can put them in the wrong slot. The unit performs normally anyway, but we're surprised at this oversight.
> [...] since the bays are not keyed, you might insert the wrong cartridge in the wrong bay--and print bizarrely colored images. We can't believe that Brother hasn't idiot-proofed this area, though the company says that it has had no complaints and assures us that switching colors won't damage the printer.
So besides the fact its a null password, and constant across all accounts, its not even used. Plus its since the password is larger then 15 characters MD5 password authentication will be used
@Ramhound Firstly. As of Vista, LM hashes aren't even stored. Secondly. Even on XP, LM hashes aren't stored if it's > 14 characters. Thirdly. LM hashes aren't actually used for auth unless you're running some ungodly old version of Windows (pre-2000, for sure. Maybe even 95.) They are stored for backwards-compat purposes on XP.
Actually, I need to correct myself... seems that XP continued to include LM hash-derived keys as well, for certain network auth tasks.
Now, in the context of some cert exam... it probably hasn't been updated since 2000 anyway :P
If you're interested in the weaknesses of LM, it's actually related to the newer WPS PIN weakness. And kinda related to Adobe's use of ECB encryption on passwords.
Password storage/verification protip: treat the password as a whole.
If you take a N-char password and split it in half to hash/verify the two halves separately, suddenly instead of 2^N brute force you now have 2^((N/2)+1) attack.
:28478970 You actually want to choose your iterations at deployment time, for the max that your hardware can bear in normal operation (with some headroom).
@bwDraco It does. The point is it's a well-defined scheme with robust libraries, rather than using the primitives yourself to come up with something.
One day we might discover that PBKDF2 is weak for some reason. Or some major lib has vulns. But the chance of that happening is actually generally lower than someone's home-grown attempt being broken in some way.
You should use the maximum number of rounds which is tolerable, performance-wise, in your application. The number of rounds is a slowdown factor, which you use on the basis that under normal usage conditions, such a slowdown has negligible impact for you (the user will not see it, the extra CPU c...
@bwDraco There may well be a weakness discovered in the future.
Okay, it's starting to make sense. Protection against cracking passwords relies on slowing the attacker down more than anything else. Then again, a weakness in the underlyng HMAC can cause the system to fail nonetheless.
That's one reason you can't fix the number of iterations, actually.
@bwDraco Yes, the attack we try to prevent by using a higher work factor is the fairly primitive brute force.
If someone discovers a way to break the hash, i.e. finds an attack significantly faster than brute force, a higher work factor will still help but might not be enough. And you can only go so high before performance suffers.
In the case of password hashing we're concerned with preimage resistance.
MD5 is weak because its not only fast to compute but the risk for collisions is high. If you MD5 the same text multiple times, you can predict the pattern, which is the reason MD5 hashing a string multiple times isn't a solution. Md5 is a classic pigeon hole algorithm.
> The cartridges in these printers are not physically keyed, so it is possible to install them in the wrong slots.
At least this isn't an issue with newer designs, though.
Unkeyed ink cartridges are a big pet peeve for me because it means you can contaminate the ink system with the wrong type of ink.
Even if the printer detects the condition and draws no ink from the incorrectly-installed cartridges, there will likely be ink where the ink cartridges mate to the ink tubes and/or printhead.
This means the ink system will be contaminated with the wrong type of ink.
I should not be able to run the wrong type of ink through the system!
It's clearly indicated where the cartridges are inserted, but someone with poor eyesight, colorblindness, or other disability could wind up putting a cartridge into the wrong slot and mess up the printer.
someone with enough color blindness , it really wouldnt matter that much would it :-) I have never found myself inserting cartriges in the incorrect locations
large percentages of the time, persons have to replace all color carts at once anyways, so we could go back 20 years and have the whole color group go in at once as a single item.
It is much like replacing batteries in smoke alarms, you either replace them all, or you replace them over and over again, as the next one fails.
@Psycogeek Well, you will use the colors at different rates. With time and with multiple sets of cartridges, one color will be noticeably more depleted than the others.
@bwDraco me, my desktop is all color coded right? guess what, so to are my documents :-) I tend towards having different backgrounds for different prints, so i can identify where they or who they belong to. And also to balance out (some) the depletion of the ink groups .
Single tri-color cartridges may be easier to work with but this can actually increase cost per page with certain printing patterns. A business environment that prints lots of documents with the same color logo or other color content will wind up wasting lots of ink in a tri-color cartridge.
that would doubble my budget, still being on the LG G-pro at only $350new or $250 used. Isnt it true that your LG is a backlite , and the samsung is instead led array (amoled or varients) ? It would be Very interesting to see how they compare when trying to view in full sun situations, as the S6 and S7 videos showed them at least visable outdoors this time.
I have an IBM model M keyboard and I would like to use it at work. I work in an open workspace setting.
Do you guys consider it bad etiquette to use one of these at work? Personally I wouldn't mind it if someone next to me used one.
Does anyone here use a clicky clacky keyboard at their work?...
my phone present is a miracle, does everything with zero issues, backlite (preserved meticulously) is just as bright, it has everything in it, including 50% stuff i dont use, and Mostly thanks to Highway robbery data packages, doesn't use web cept when i say it does.
Runs for 96 hours :-O then says it has 85% battery left , even though it doesnt.
the biggest problem with the phone present is the Spammers, in eventual they completly quit giving a crap that it was illegal to robocall or even sales call a cell phone. Without prior permissions.
the percentage is using Only the battery voltage to say how full. I thought that was "caused" because of the ZeroLemon extended battery, but it could be the way it works normal.
Does not bother me being battery geek, i have (actually) a better idea of where it stands.
Come to think. . I do have one issue, the Speech to text, while mostly worthless feature , without web connect. some cross update of the Google packages cause it to fail miserably. Without web connect, the phone itself saved about 1/2 typing, and like zero time when having to correcting everything, with web connect the speech is sent out to interpret and comes back much better analised.
Some day i Need to Update "all" the google packages which go together , and would update that engine without breaking it.
There is "workaround" for the failure, just shut it off! Phhht. If instead i knew all the dependencies , I could selectivly update the google mess , and get the speech 2 text back without the fails.
android SE says The "google keyboard" is seperate now (I use LG keyboard). & The "google app" which is all the search junk that i do not use, can effect the presence of the Microphone in the keyboard. There must be more to it than that.
at android SE they got so many Variations, and tons of problems :-) I do not even see this particular one.
Seems many others did not either, and it probably varies with the phones original setups and all.
Must clarify that i am referring to the keyboard MIC thing where you can use speech to type documents and notepads, and SMS, not the "search" and cortina like stuff.
@Bob well that helps, because they were just saying , that google app is not required for swype, Dragon (great stuff) is often very cpu needy too .
I wonder if it , or this google app thing which may have been what caused Error, has some google "store" dependancy somehow? I think i had to give the google store update the kibash because of evil doings :-) of some other sort.
English only, most certannly some of the Offline possibilities are language limited.
word prediction, has never done anything for me either. If i already have 80% of the word typed, it is already done at that point. Word prediction also does not take into account incorrect placement of letters , which would make the huge list of possible words it thinks your trying to type even longer .
> Your device uses a non-harmonised frequency and is intended for use in all European countries. The WLAN can be operated in the EU without restriction indoors, but cannot be operated outdoors.
@kerbalspacebecky This doesn't have the 5 min thing -_-
LOL
> To remove the battery, you must visit an authorised service centre with the provided instructions.
> For your safety, you must not attempt to remove the battery.
... gives 4 very specific disassembly/battery-removal instructions just under.
"Samsung's Milk Music service is a freemium-style music app that's exclusive to Samsung devices, and in many cases is pre-loaded on phones and tablets"
After paying full price for things, one would expect them to not have all the built in pimps, pushing thier high priced whores off :-)
back when people "accepted" this form of business model, because it would keep the prices down. NOT, it didnt keep prices down at all, and only encoruaged them to continue this practice , even if the reality is it may cost them much hours and labor to include such festivities.
so now a dedicated labor force with feathers in thier hats, is out there rounding up diseased trash to put into your system, instead of discovering the STDs that already are there.
The modern phone and all the spammers that call on it are the genital warts of progress :-)
I have a Dell 23" monitor. It got damaged and now approximately 7 centimeters from the right is completely black - all the way vertically (I guess pixels got burned or something), and I cannot use that area of the screen.
Is there any way to "resize" the amount of screen used by the operating sy...
I need to configure a Windows 7 Home machine to connect to a VPN Server. This requires the following configuration:
Local Policies > Security Options
Network Security: Minimum session security for NTLM SSP based (including secure RPC) clients
disable "Require 128-bit encryption"
In Win...
I have an IBM model M keyboard and I would like to use it at work. I work in an open workspace setting.
Do you guys consider it bad etiquette to use one of these at work? Personally I wouldn't mind it if someone next to me used one.
Does anyone here use a clicky clacky keyboard at their work?...
I have tried netem and wanem neither seem to be affecting the TCP packets.
How can I add latency to TCP packets?
