So, if it is an account number just for receiving payments, and we don't let money sit on it, then there is no problem, but doing otherwise is risky, did I understand correctly?
Muslims have some restrictions when it comes to interacting with members of the opposite sex. Usually many people in USA and Europe do not know that, for example, a Muslim man cannot shake hands with a woman.
As I am a Muslim and usually meet new people in my workplace, how can I politely tell t...
> There is a Hadith from Ma'qil ibn Yasar, saying; The Prophet (Peace and blessings be upon him) said, "It is better for you to be stabbed in the head with an iron needle than to touch the hand of a woman who is not permissible to you."
You have to recognize that the Prophet had a knack for striking metaphors.
Carefully place a spaceship broadcasting the decryption key in orbit around a black hole. The pull of gravity will delay the message until the appropriate time.
Or you could just do like normal people and place the key broadcasting spaceship an appropriate number of light years away from the in...
Really, 7 upvotes?
Did one of you just upvote that? I'm gonna kick yo donut.
VtC this one, but maybe we need a CW question: List of ridiculous password limitations and possibly legitimate (though still equally ridiculous) technical reasons for their existence.
Why wont google allow me to use a password ending in a space anymore?
Backstory: I have memorized a cipher that allows me to generate a different and very strong password across many different websites and services, without using the same password twice. In the case of Google, my cipher requir...
@Simon I don't know what the worst thing is: having the credentials there, or the fact that even without the credentials there it wouldn't exactly be hard to guess them
@deed02392 not too bad, I got beer and pizza along with complicated talks on Blind ROP attacks, DAB fuzzing and injecing JavaScript into binary processes
@AviD interesting, although problably not for me, I'm not there on the first night, and might not make it there by the start of the 2nd depending on my travel...
@DavidFreitag git is just a tool, used as part of a process. so do you mean you need to learn the tool better (which is super boring, tools should get out of the way), or you need to learn dev process better (which is not really about git)...?
@DavidFreitag yeah the guy who was presenting was showing some cool ways to intercept calls from a .NET app before they got encrypted as a way to proxy non-proxy aware apps
Someone help me understand SSL better, please? Not as familiar with the spec as I'd like to be.
Particularly, say a client tries to connect and doesn't offer any protocols or cipher suites the server likes. What's the appropriate response?
Is the server supposed to send SSL messages telling the client it's being rejected and what protocols/ciphers the server likes? Or is it supposed to just send a connection drop via TCP?
(TCP connection drop - RST/ACK flags set - is what I'm seeing, but AFAIK the server's & client's SSL/TLS configurations should be compatible.)
Sorry, did I make the mistake of trying to actually talk about IT Security in here? Let me fix that...
BOOBS!
Crap, when did [double-entendre] drop off the room subjects list? Guessing @AviD is to blame. So...
If I'm reading the TLS spec right, it looks like the proper response is a Handshake Failure message - doesn't seem like an immediate TCP RST/ACK is appropriate (at least not until after the Handshake Failure is sent).
@ThomasPornin @CodesInChaos I have a question for you guys. Without any form of precomputation, is it possible given a known portion of the output string of an arbitrary hash function to shorten the search space of inputs?
That is, hash tables and rainbow tables are out.
I think not, but I want to check to see if there's no trick I don't know about.
@Gilles yep. That could be the bluescreen you get about an hour in, but changed to a red background with the message "reboot, you fools, reboot!" followed by a nice white screen as Gandalf reboots into a Mac.
@Iszi Theoretically TLS is independent of the transport medium, which could be something else than TCP (I have seen it done over a raw serial link, for instance).
The TLS spec indeed says that in case of problem you should send an appropriate alert record.
However, this has proved problematic.
In some cases, the alert message was leaking sensitive information.
In other cases, a "failed handshake" may be in fact "a client that tries raw HTTP while the server expects TLS"
insisting on sending a message to a client that does not speak the same protocol incurs a risk of deadlock.
Hence, many implementations do kill the connection instead of sending an alert message.
You know you've been hanging out in the DMZ for too long when you post “they give you more bang for your buck” in a chatroom and you're surprised that nobody remarks that that's what someone of either gender said
Carefully place a spaceship broadcasting the decryption key in orbit around a black hole. The pull of gravity will delay the message until the appropriate time.
Or you could just do like normal people and place the key broadcasting spaceship an appropriate number of light years away from the in...
Why wont google allow me to use a password ending in a space anymore?
Backstory: I have memorized a cipher that allows me to generate a different and very strong password across many different websites and services, without using the same password twice. In the case of Google, my cipher requir...
