The DMZ

AviD

19:00

@ManishEarth if you are implementing a security control, it is your responsibility to make sure that it doesnt harm security.

ManishEarth

@AviD ah

AviD

if you are managing user passwords to "corporate" resources, ensuring that those passwords are secure is your responsibility.

MMavipc

@ManishEarth doesn't mean they will

AviD

if you are facebook, then sure, the password is the user's responsibility. But if you are e.g. protecting university journals, then it's yours.

ManishEarth

@MMavipc It was sort of in a "well, we tried -- it's their lives that can get screwed if the passwords get stolen" tone I guess

AviD

19:01

@MMavipc @ManishEarth they won't. and I would hesitate to say they should.

this all goes back to the point of my q there, and my lengthy comments on @ThomasPornin's answer - the RFC is broken.

edge case, sure, but proxy authentication is still a big deal here.

ManishEarth

@AviD I don't think they would mind one outsider getting access to journals after doing a goodly amount of arp spoofing and other crap. Outsiders (those without ldap ids) aren't here for long, and very few have the inclination/need to do this.

What they would mind is someone(eg me) getting access to my classmate's passwords and dropping them from all courses. And this is a technical institute, a lot of folks know about arp spoofing (I guess)

(there are a lot of possibilities)

AviD

I would exclude the journals from proxy authentication, that should be done on whatever system is hosting the journals.

proxy authentication comes down only to tracking misuse.

ManishEarth

@AviD journals are hosted outside

AviD

@ThomasPornin refers to this almost offhand (and unsatisfyingly) at the end:

> Protecting traffic between browser and proxy makes sense if you consider proxy authentication. Some proxies require explicit authentication before granting access to their services; this is (was ?) common in big organizations, which wanted to reserve "unlimited Internet access" to some happy few (usually, the Boss and his favourite underlings).

> However, an attacker who can eavesdrop on the local network necessarily controls one local machine with administrator privileges (possibly, a laptop he brought himself). His nuisance powers are already quite beyond simple leeching on the Internet bandwidth.

ManishEarth

These aren't the university journals, these are all the major (and minor) scientific journals that are paywalled if you access them from elsewhere

AviD

19:06

> Also, limiting Internet access on a per user basis maps rather poorly to modern operating systems, which tend to rely on Internet access for many tasks, including software updates. Internet access is more efficiently controlled on a per usage basis.

Of course, that is not the case here... good example.

@ManishEarth hmm? as in, 3rd party site that "whitelists" the uni's proxy IP?

ManishEarth

@AviD yep

this is common on most paywalls

AviD

that is ideal situation for VPN, or consider federation solutions. I would say that proxy authentication is still not the right solution here, regardless.

ManishEarth

federation?

AviD

identity federation

ManishEarth

Can squid run as a transparent proxy over https?

AviD

19:09

classic situation for it - corpA wants to allow any corpB user access, without managing corpB users, which should be managed internally by corpB.

@ManishEarth from what I gathered, it wouldnt be quite transparent.

ManishEarth

@AviD ?

AviD

@ManishEarth a lot of fiddly bits on the client.

ManishEarth

@AviD ah

Transparent proxy is when you get presented with a login form without having to configure your comp, right?

AviD

Proxy server

In computer networks, a proxy server is a server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resource available from a different server and the proxy server evaluates the request as a way to simplify and control its complexity. Today, most proxies are web proxies, facilitating access to content on the World Wide Web. Uses A proxy server has a variety of potential purposes, including: * To kee...

ManishEarth

ah

AviD

19:13

> "A 'transparent proxy' is a proxy that does not modify the request or response beyond what is required for proxy authentication and identification".

Scott Pack

@Iszi Credit me for who now?

ManishEarth

yeah, we already have a transparent proxy, but it's only for professors

AviD

anyway, like I said, proxy authentication is screwed up.

ManishEarth

yeah

AviD

hmm, seems I already covered all the aspects you mentioned.

As for your third - and most important part - as you say, it is usually not relevant, though my question was about preventing unauthorized MitM (i.e. besides the proxy). There are a few edge cases where this is important, such as proxy authentication as you mention. Proxy authentication is still relevant in many situations, both in corporate proxy scenarios (e.g. not about bandwidth, but about acceptable use policy - e.g. no Facebook from work computers), and in reverse proxy scenario (also usually for corporate internal use...). — AviD Nov 4 '12 at 18:47

I'm smarter than I remember to give myself credit for.

ManishEarth

19:16

:P

If I'm able to craft a question out of this that isn't NARQ or NC, I'll ask one. Don't think I'd get anything more than what you told me, but no harm trying :P

Iszi

It wouldn't quite apply for this case, since you didn't *actually* re-tweet the original tweet. But I wish Twitter would allow you to follow a re-tweet trail. For example:

@RoryAlsop tweets: Metaltech ROCKS!
@ScottPack retweets @RoryAlsop's tweet.
@Iszi retweets @ScottPack's retweet

In the current system, all my followers will see is that @RoryAlsop tweeted "Metaltech ROCKS!" and that I retweeted it. I would like them to be able to see that I had originally received the tweet via your retweet.

AviD

@ManishEarth also make sure its not a dupe.

Antony Vennard

@ManishEarth Nothing wrong with documenting as a proper Q either (and earning appropriate reps)

AviD

you might want to look specifically at the journals / federation bit.

ManishEarth

@AviD sure

@AntonyVennard yep! :D

AviD

19:19

@ManishEarth and that reminds me... I should find time to write that up as a qotw post... :$

ManishEarth

@AviD NOO ME FIRST

Antony Vennard

@AviD One of these days I'll find time to do QotW again. I missed doing that recently :(

ManishEarth

Oh, you're talking about the other one?

How does QOTW work?

AviD

@ManishEarth the proxy authentication.

ManishEarth

@AviD ah

AviD

19:20

15

Q: Requests for Question of The Week blog posts

Since starting the Security Stack Exchange Blog on 15 July 2011 we have some excellent blog posts, and a large number of these are from our Question of the Week posts. Going forwards, it is probably simplest to post your favourite Questions of the week as answers on this question, and vote for yo...

ManishEarth

Ah, so it can be any question

Not one asked this week

Scott Pack

@Iszi meh, ok. I assume you're talking about the sexpot bit?

Iszi

@ScottPack Oh, and you wouldn't see the retweet I was talking about anyway, since you already received the tweet.

@ScottPack Umm.... no? I retweeted the "pulled pork on salad" thing.

Pulled pork is a completely legitimate salad topping.

Tweeted by philiph on April 25, 2013 at 6:49 PM

Scott Pack

Interesting. I don't see you on the retweet list for that either.

Iszi

@ScottPack Vinteresting

Scott Pack

19:26

@Iszi Fun fun. I'm sitting about 150 feet down the hallway from that office

foxnews.com/us/2013/04/25/…

Xander

@ScottPack Well that makes for a good time.

Iszi

@ScottPack Yikes! Did they figure out what it was, or does the GCMS not work that fast IRL? ;-)

Scott Pack

Excellent....excellent

FBI and WMD team from Wright-Patterson Air Force Base are reportedly on scene at WUSOC. Photo submitted by @hningard. http://t.co/xqvYryVVrl

Tweeted by AthensScanner on April 25, 2013 at 7:15 PM

Iszi

Now here's the real question: For a situation like this, what should you be doing - evac or quarantine?

AviD

@ScottPack was it powdered sugar from a donut?

I love donuts with powdered sugar.

Scott Pack

19:29

@AviD I dunno, apparently the WMD team just arrived about 15 minutes ago.

AviD

@ScottPack sure, they heard there was donuts.

Scott Pack

Great. Now I want donuts.

4

Iszi

@ScottPack Better get enough to go around, with all the company you're getting.

AviD

lol, so do I. difference is, you might get some.

there are no good "real" donuts here.

Scott Pack

@AviD We have places that sell "real" donuts, but they're not that great.

I could drive 45 minutes north and get some TimBits.

AviD

19:31

@Iszi I heard the WMD team gets cranky when they dont get their donuts.

Scott Pack

mm......tim..bits...

AviD

@ScottPack I mean, even dunkin donuts. there used to be a couple in Israel, they closed down long ago :-(

Scott Pack

I'm a gonna go see the vending machine.

AviD

apparently its too sweet for Israeli palate.

Scott Pack

@AviD They're ok. My personal fav is definitely Tim Hortons. Krispy Kremes are nasty, unless they're fresh off the conveyer.

Oh baby. If you ever see a Krispy Kreme with the HOT sign lit up? You pull in. You pull in even if your wife is in labor. That's good shit right there.

5

AviD

19:32

see, we get none of that, so when I do get to the US, I'm happy with anything I get.

ManishEarth

@ScottPack aren't there like 10 left in the country?

They expanded like crazy, and then they all shut down

AviD

even if I'm not near a donut shop, I'll pick up a box of donuts from the supermarket every couple of days.

@ScottPack heh, I'll keep that in mind

ManishEarth

There was one near Wellington Stn, Medford a few years ago that got closed. :(

AviD

dammit. I just realized the gpu stress test I'm running, is spinning a fuzzy yummy looking donut on the screen.

Iszi

So, nobody wants to entertain the evac/quarantine question?

ManishEarth

19:37

@Iszi Statistically speaking, Rory does.

AviD

@Iszi you'd have to ask a CDC expert.

practically speaking, I would suggest both, until the exact chemical is identified - get everybody into a different area, but not let anyone leave.

Scott Pack

What they did do was evac that space and shut down the environmentals.

Iszi

@AviD Good. Bonus points if "different area" is on a different HVAC.

Scott Pack

This building is an old building that held printing presses that produced log sheets for trains. Three floors of gigantic printing presses.

Iszi

@ScottPack Great, but the problem remains that if the substance was an infectious biological agent you could be releasing it into the wild via already exposed carriers.

AviD

19:40

@ScottPack sounds like some fictional race of superhumans in an alternate comics universe.

Eternals (comics)

The Eternals are a fictional race of superhumans in the Marvel Comics universe. They are described as an offshoot of the evolutionary process that created sentient life on Earth. The original instigators of this process, the alien Celestials, intended the Eternals to be the defenders of Earth which leads to the inevitability of war against their destructive counterparts, the Deviants. The Eternals were created by Jack Kirby and made their first appearance in The Eternals #1 (July 1976). Publication history In 1970, Jack Kirby left Marvel Comics to work at DC Comics, where he began the sag...

Scott Pack

The interior is this cobbled together nightmare of oddly shaped rooms, hallways in psuedo-random directions, all that.

AviD

perhaps the environmentals would include nyads, dryads, etc.

Scott Pack

The previous owner was also so freaking cheap that he would hire prison labor to do work and is a huge hodge podge of consumer grade natural gas furnaces and air conditioning.

@AviD Those are fey creatures, not elementals.

AviD

@ScottPack environmentals.

though you're right - so it would be HeatingMan, ACWoman, and VentilationGirl.

Antony Vennard

@Iszi Most biological agents don't infect that fast. Some aren't even contagious for example anthrax.

Scott Pack

19:43

So, by and large, each office suite has it's own self contained HVAC system. And in some cases, depending on how renovations had happened, you might have non-adjacent rooms sharing a system with an entirely separate system in between them.

AviD

@AntonyVennard Donuts are.

Antony Vennard

So provided you ensure everyone comes back before they become contagious, you're good.

Iszi

@AntonyVennard If one can be infected via inhalation of the agent, or skin contact, or contact with mucous glands, it's still loose.

AviD

@Iszi so's your mom.

Scott Pack

Boom.

Iszi

19:47

@ScottPack DAFUQ? There was a bomb too? Is everyone ok?

Scott Pack

No. Boom. As in @AviD just nailed it.

AviD

@ScottPack just like I did your mom.

BAM! I'm on a roll here.

Iszi

Oh, BURN!

AviD

Good to know my talents are appreciated.

Scott Pack

Oh. the vending machine had donuts.

They're terrible, but they're technically donuts.

AviD

19:50

Donuts are like sex. The best ones have powdered sugar.

Rory McCune

@ScottPack vending machine donuts does not sound like a good idea...

kinda like those coffee machines where the same nozzle dispenses soup

Scott Pack

That sounds terrible. I have no other words.

Rory McCune

yeah there are some truly awful hot drink vending machines in offices in the UK

Scott Pack

Sounds like it.

These came in a tube, covered in brown stuff purporting to be chocolate, and is labeled, "Mrs. Freshleys".

Rigghhhttt...

AviD

still, its donuts. and thats more than I can get.

Rory McCune

19:56

@ScottPack BTW are krispy Kreme's particularly nice? When they opened in Edinburgh there were apparently 2 hour queues to get doughnuts?!? guardian.co.uk/uk/2013/feb/15/…

AviD

24 mins ago, by Scott Pack

Oh baby. If you ever see a Krispy Kreme with the HOT sign lit up? You pull in. You pull in even if your wife is in labor. That's good shit right there.

Rory McCune

@AviD ahh missed that, that perhaps explains it

Iszi

@RoryMcCune I've never been especially fond, but it seems they're quite popular with the masses.

Scott Pack

@RoryMcCune I think they're pretty terrible at all times except perfectly fresh.

Rory McCune

perhaps explains the queues... I may go try some once the novelty has worn off :)

Scott Pack

19:58

At the locations that actually make donuts there is an extra bit on the signs. Just neon lighting that says "HOT".

When they are making the donuts that turn that sign on.

They come straight off the conveyer from the frosting waterfall and into your hand.

Still warm.

They just melt in your mouth.

Ok, this new Ingress update is pissing me off.

Iszi

@ScottPack And all over your beard. Which just ends up looking wrong.

Scott Pack

@Iszi But tastes so very right!

Iszi

Argh. I hate hearing "I understand the perceived importance...". Translation: I know why you think it's important, but it's just not that important to me.

Stack Exchange

20:15

Blog - Stack Exchange: Get to know the new Stack employees

Joe Humphries on April 25, 2013

It seems like just two months ago (OK, it was exactly two months ago) that I announced our last batch of new hires. Today I’m pleased to introduce our newest employees. There are TEN of them … so get comfy and prepare to learn all about our latest hires, who seem to have an overall fondness for food, sports, music, and the great outdoors.

Jessica Brady, Associate Sales Representative (Careers 2.0)

New York

Jessica was born and raised in warm, sunny Florida, until she packed up and moved to less warm, less sunny Chicago for non-weather-related reasons (okay, it was school). She has l …

AviD

@StackExchange so, when will SEI finally hire a security guy? I think it's about time.

2

Scott Pack

20:35

@AviD They've already got plenty of developers.

Honestly, though, Peter might not be too bad. He's allegedly managed security teams in the past.

AviD

@ScottPack Peter who?

Scott Pack

Grace

AviD

ah right.

but he managed (allegedly) network security, not software security.

Scott Pack

@AviD I'm confused.

AviD

he himself admitted he has no clue what the state of the code is.

Scott Pack

20:37

You said they should have a security guy.

AviD

haha

okaaaay.... as a software development shop, they need a software security guy.

Scott Pack

That sounds hard.

Xander

@RoryMcCune On the other hand, there are some truly amazing hot drink vending machines in Italy.

AviD

since they host their own servers, they also need a network / ops security guy.

Rory McCune

@Xander cool. Must try 'em next time I'm there :) Not to say there aren't some good ones in the UK just some of the one's there've been in office I've worked in, in the past <shudder>

Xander

20:43

@RoryMcCune Spent a week at a client's in Milan last spring, and they had a machine everyone would flock to morning and afternoon. It was lovely.

Rory McCune

@Xander we have a nespresso at home and for a consumer type machine it is pretty nice.

Xander

@RoryMcCune Nice! I've been thinking about getting something like that. I used to use a standard drip coffee machine, but I don't drink enough anymore to justify brewing a pot. I drink tea primarily these days, and if I want a cup of coffee or two, I just use the Starbucks instant. Starting to miss good coffee though.

@RoryMcCune The MS offices here have these fantastic machines that grind and brew a single cup at a time. They're for a large office rather than the home, but they're super fun.

Rory McCune

@Xander we have drip coffee too. the nespresso is probably better but not particularly cheap (here the capsules are £0.30/shot)

@Xander see big tech companies got to have good coffee!

Xander

@RoryMcCune Yeah, that's why I haven't gotten one yet. Not sure if I'd get enough use out of it to make it worth it.

@RoryMcCune No doubt!

Rory McCune

@Xander we do, but we both work from home most of the time. Only problem is the £50/month capsule bill :op

Rory Alsop

20:54

@Rorym did you not try the Krispy Kreme donuts at bsides? They are always crap but lots of useful sugar :-)

Xander

@RoryMcCune LOL. I work from home as well, so mine wouldn't be much better. :_)

Rory Alsop

Also, edinburgh weather is lovely this eve. Cool but lovely

Rory McCune

@RoryAlsop I didn't actually saw they were there but I was avoiding too much sugar on the day so I was still focused in the Afternoon :)

Rory Alsop

Also also - Still need 10k....

Rory McCune

@RoryAlsop it's a big diff. in temperature

Scott Pack

20:55

I'm not overly keen on the machines that grind and brew all together. The grinder tends to get all weird and gummed up.

Rory McCune

@RoryAlsop BTW not sure if you've read the rather large transcript but see @avid was imprudent enough to visit lemon party ;o)

@ScottPack 'tis the advantage of capsule things, that they're relatively straightforward...

Xander

@ScottPack You have to maintain 'em for sure.

AviD

@RoryMcCune OH NO THE MEMORIES THE MEMORIES IT IS SEARED INTO MY BRAIN WHAT HAVE YOU DONE TO MEEEEEE

Scott Pack

@RoryMcCune I'm real keen on the pods fo sizzle

Rory McCune

@AviD it'll be a while before you can shift it.... unless you go find 2 Girls 1 cup, I can fairly guarantee that'll shift it ;o)

AviD

20:59

heh

Scott Pack

@Xander It's still tough to clean. Inevitably the steam from teh brew process gets up into the grinder bits

Xander

@ScottPack Ah, interesting. That would be a problem.

Scott Pack

It's such a nice idea, I've just never seen a design that's adequately sealed to keep the two processes from messing eachother up.

@Xander That's what I meant by gummy. So the moisture from the brewing process combines with the bean dust

Ugh

Xander

@ScottPack Yup, I can see how that would happen.

@ScottPack @RoryMcCune These are the ones MS has. starbucksocs.com/Solutions/Single_Cup/Starbucks/Brewer

Rory McCune

@Xander machine weight 130lbs?!? guess those aren't really for home use!

Xander

21:10

@RoryMcCune Yeah, no, and they're three or four feet high. One of the other pages I found referenced that they're designed for offices of 50+. Two of them can service an entire floor of one of the buildings in Redmond.

Xander

21:34

@RoryMcCune Which Nespresso machine do you have that you like? Any particular features to look for?

TildalWave

@Xander heh fancy that indeed. You should've told them to stop by for a coffee or something at my place, how else am I supposed to get dirt on you? :))

MMavipc

is it just me or is mtn dew the shit

Xander

@TildalWave Ha! I don't know him personally, so he couldn't help you there. I've just seen him present. He was big part of the ,Net community here in Charlotte when I moved here, but shortly thereafter, he took a job as an Evangelist for MS and moved up to Washington.

TildalWave

@Xander oh we have here MS HQ for this part of the world, maybe that's where he went

Xander

@MMavipc Are you under the age of 18, by any chance?

@TildalWave Could be. twitter.com/bradygaster/status/327480861832380417

@MMavipc I just ask because I was a big fan of Mt. Dew when I was in high school. I've become less fond of it since I've found coffee, tea, beer, wine, and spirits.

TildalWave

21:43

@Xander on a conference in Bled, yup that makes sense there's a lot of int. conferences there folks love the scenery... not too far from here, about 40 minutes drive

MMavipc

@Xander I thought it was blatantly obvious

Xander

@MMavipc Then I completely support your enthusiasm. :-)

MMavipc

there is a virus named after cherry mtn dew

Scott Pack

22:02

@MMavipc I used to really like that stuff, but some time around 22-23 I couldn't really enjoy it any longer. It tends to leave a strange inorganic chemical like aftertaste and upsets my stomach. Now I tend to follow @Xander's menu.

Rory Alsop

22:18

Me too. Except I don't like the taste of coffee so I have vanilla latte (blame other @Rory) or red bull. Had a club mate at bsides but not a fan. Moved on to cider when they cracked that pen

Have tried the three new flavours of red bull. Alltoo chemical-y

Xander

@RoryAlsop Ah, cider. It's not wildly popular here in the States despite the fact it was the Founding Father's beverage of choice, but I'm a big fan of good cider.

I drink Red Bull when I watch F1 races as a symbol of support, and when I need to work well past my bedtime. That's about it. Unless I need a mixer to make vodka interesting, which it always needs, because it isn't.

Rory Alsop

Cider at eleven. That was an excellent idea. From the same stand that did the Krispy Kreme donuts and the metal screwdriver sets:-)

Oh, nearly got to meet roman Grosjean yesterday but the queue was just to long at the Lotus shop

Xander

@RoryAlsop Nice! Too bad. I barely missed the Austin race last year, but Caterham was on-site at client of mine while I was there. Unfortunately, being a consultant, I can't exactly decide to up and walk across campus to oogle an F1 team for a bit while I'm being paid to work, so I missed them. One of these days I'll actually get to a race.

Xander

23:05

Been watching Azure Conf 2013 videos today for a work project I'm doing. If they can deliver as promised, this is some very cool stuff.

MMavipc

your cider is alcoholic? down here in socal it's a delicious cinnamon apple drink

Xander

@MMavipc That's lovely too, but it lacks the complexity of a well brewed hard cider.

TildalWave

encrypted.google.com/search?q=define%3Acider

well this is interesting because I'm pretty sure that cider originally stood for an apple juice... so yeah both, fermented and non fermented I guess... it's hard to get the non fermented one here under the name of cider

MMavipc

gotta love that double meaning

TildalWave

that's what the double-entendre tag is for lol

Xander

23:16

@TildalWave @MMavipc Cider does indeed have two forms, hard cider and sweet cider.

TildalWave

any idea where the name comes from? because I have this strong feeling it's coming from the fact that it's sour or acidic... but can't really pinpoint the origin of this word, maybe a French version of a Latin base

an archaic word here is cidra btw... if that means anything to anyone

MMavipc

@TildalWave off to wikitionary you go

Rory Alsop

@MMavipc cider - very alcoholic, yes. Much more so than beers and lagers in a lot of cases. If we exclude Tactical Nuclear Penguin and other odd beers... (masterofmalt.com/beer/…)

Gilles

@TildalWave etymologically, it meant fermented drink first, then specialized to apple-derived fermented drinks

TildalWave

@MMavipc wiktionary is about as useful as knowledge of the one that wrote that article... and that's mostly highly subjective and lacking in detail IMO

Gilles

23:25

source: cnrtl.fr/definition/cidre

TildalWave

This is interesting:

Rory Alsop

@Xander well I have my signed hats from the Marussia Virgin team from the Monte Carlo Grand Prix in 2011 - they're pretty cool, but I didn't get to actually meet them ...

TildalWave

Have no idea what it really is but it's named cidra and looks like some type of a citrus

Xander

@RoryAlsop Still...<Jealous />

TildalWave

@Gilles so the name is French?

Gilles

23:27

@TildalWave hebrew → greek → latin → french → english

Rory Alsop

@Xander Might get to race some formula 3000 and formula renault guys in August

Gilles

> Du lat. chrét. sīcera « boisson fermentée » (Luc I, 15), gr. σ ι ́ κ ε ρ α « id. » (ibid.) transcr. de l'hébr. biblique šekar « boisson fermentée, liqueur forte ». La forme sīcera a dû s'altérer en b. lat. en *cisera (cf. la forme cisera, début xiiies.

Xander

@RoryAlsop What!? That's awesome!

TildalWave

@Gilles hehe well I guessed two of these and the last one is ... arguably not really needed imho

Greek might have occurred to me but I would never have guessed it comes from Hebrew

Xander

@RoryAlsop How did that come about?

TildalWave

23:32

@RoryAlsop heh nice I drove once in F3000 my half uncle (or however you call that) was a race driver, and his daughter too... pretty good she was in talks for a test driver for IIRC McClaren then

Rory Alsop

@Xander a bunch of us race at bedford autodrome every year, and despite us all being techies, it turns out we are all pretty competitive - really close to the lap record - so 16 of us go there for the day, and Jonathan Palmer rounds up 16 likely suspects from motorsport

TildalWave

how do you call your mother's cousin? distant uncle? second uncle?

Rory Alsop

This year am expecting to get video footage from every race too, so that'll be cool

@TildalWave i think we just say uncle

TildalWave

@RoryAlsop yeah you techies are just making the time go slower somehow! :P

use the force Luke!

Scott Pack

@RoryAlsop I love me some cider. Oh baby. I need to brew me up a batch.

@TildalWave First cousin once removed.

Rory Alsop

23:41

@ScottPack never made my own - sounds like a good thing to learn though

TildalWave

@ScottPack oh that's what this is, I thought everyone wants to remove their cousins or something

Scott Pack

@RoryAlsop It seems like it should be relatively simple. Apple cider + yeast + time == cider.

@TildalWave I like a couple of my cousins.

TildalWave

@ScottPack yeah I'm also fine with mine :) but that once removed meaning really alluded me, tho I didn't really investigate TBH

I learn something new every day :)

0

Q: How to determine hashes/second in password cryptanalysis

I'm working on my dissertation concerning cryptanalysis on password hashes. As part of my research, I aim to crack a number of passwords with John the Ripper and rainbowcrack-mt. I'd like to determine and analyse some statistics on the passwords I crack. One thing I'd like to know is how many ha...

passwords cryptography hash tools

dissertations are getting easier it seems

Transcript for