The mistake here would be to believe that extra password rules increase security. They do not. They increase user annoyance; and they make users choose passwords that are harder to memorize. For some weird psychological reason, most people believe that a password with non-letter symbols is "more ...
I do like that answer, if only because it explains very well what I still have trouble explaining to those old school CISOs, stodgy security consultants, and cargo cult programmers.
in Out Cold they keep playing pranks when the guy passes out drunk. One time they left him out in the snow, with his pants down, and crotch covered in honey. He wakes up to the pleasant sensation of being licked... by a polar bear.
for example they have a ski / skiboard race down a mountain - holding a mug of beer. to win you need to get to the bottom with your glass still mostly full.
its a pretty stupid movie, if I remember - but some great beer/snow jokes.
@AviD they're bots that generate, sometimes, relevant looking content based on the original users twitter timeline. Amusingly they get people to interact with them quite often
When my coworker thinks that there is no need for a test on his PC, he makes changes, commits and then pushes. Then he tests on the production server and realizes that he made a mistake. It happens once in a week. Now I see that he made 3 commits and and pushes with deployment to the production s...
@AviD The accepted answer is a good example: just spew out the word "entropy" half a dozen times, and people will believe that you have "done maths" and thus achieved some kind of Truth.
To make hashes harder to target by specialized hardware, I intuitively imagine that mixing a set of different hash algorithms should provide additional strength. For simplicity lets assume Hash1 is a number of iterations of SHA256, Hash2 is bcrypt and Hash3 is scrypt:
myhash = Hash1(Hash2(Hash3(...
@M'vy That's because I answer the question with an answer that the OP did not want to obtain.
2
The OP and other answerers want to think of password hashing as a question of mixing and scrambling and preimage resistance, which are all completely off-topic.
@tylerl Well I figured that was where that conversation was going. The Raspi would be a poor choice for a Beowulf cluster because it does not have built-in ethernet, it has to rely on external interrupts from the SBMC chip which handles all USB and the 10/100 ethernet. You would be better off with something with integrated ethernet, and even more importantly gigabit ethernet.
@Craig ordinarily I would agree with you, there are serious usability issues with Kevin's proposal that would lead to security vulnerabilities. HOWEVER, the OP is a lead developer for a government website. Government websites derive security from their lack of usability. — emory15 hours ago
@ThomasPornin You didn't even mention that scrypt's security is quadratic in the runtime as long as you're in the CPU limited regime. Which is one of the strongest arguments against mixing hashes.
My flight is from Washington, D.C. (IAD) to London Heathrow , with British Airways.
Important Details
The Bazooka will be bought legally from a shop in Maryland
British Airways' website explains in details the policy regarding decommissioned firearms.
The Bazooka is de-activated. UK Violent C...
I'll be wearing it all the time anyway once I arrive at my hostile destination but how about wearing it during the flight? It makes sense to wear it in case someone try to hijack the plane.
@DavidFreitag Man, that guy's got to be on like every terror watch list ever now. I'm surprised he can get on a plane without the bazooka, vest, or gold bars.
I was just thinking to myself: "Why would you take a gold bar on a plane? Someone could steal it." Then I realized "You're in an aluminum can 2 miles in the air, I think someone'll notice."
Obviously we all know about the oxygen masks but let's say there was a strong exceptional reason for me to get off the airplane, are there parachutes that normal passengers have access to?
I cant recall mentioning parachutes in the mini lecture the aircrew give before taking off.
Ryanair is very cheap and I can afford to pay for another seat in exchange for a little bit more comfort. I do that sometimes on the train and there are no laws against it as far as I know. On the train I can claim that my wife just went to the toilet and show that I have the ticket for the seat ...
It's a knife with a cast gold blade. A replica of one found in Tutankhamun's tomb. Ceramonial rather than practical of course, but kind of cool none-the-less.
A dagger is a knife fighting weapon with a very sharp point designed or capable of being used as a thrusting or stabbing weapon. The design dates to human prehistory, and daggers have been used throughout human experience to the modern day in close combat confrontations. Many ancient cultures used adorned daggers in ritual and ceremonial purposes, a trend which continues to the present time in the form of art knives. The distinctive shape and historic usage of the dagger have made it iconic and symbolic.
Over the years, the term has been used to describe a wide variety of thrusting knives, including...
@CodesInChaos I think that ban was essentially meant to be "until the end of time" but they ran into an integer overflow issue so they had to back it off a bit.
Also, an art knife isn't a knife. It's just pointy art.
3
@CodesInChaos Are there any meta posts around that explain what happened? I assume all of his questions and answers that were deemed trolling have been sanitised.
@CodesInChaos some of his posts were entertaining, but he had a recurring cycle of worse and worse behaviour, more and more paranoid abusive posts, and at the end of each suspension he'd launch again, so it escalates up pretty quickly
This is not true, PHP is widely used for banking transaction. However it's rare for banking sites, because banks can afford expensive IDEs like Visual studio, so they prefer it instead. Also dedicated servers. You can bypass security on both java and c# as well PHP, you can secure both to the sam...
I got fun idea how to increase the security of the SSL (TLS) for websites. However I think there is no support for it in the browsers, so I thought I could add it eventually, but have no idea if it's supported.
Currently SSL works the way that there is always some English language country based ...
A man with dementia is on the road when he gets a call from his wife. His wife says, "Honey, are you okay? The news said there's someone driving the wrong way on the highway." The man replied, "One? There's hundreds of them!"
I have posted a few unusual questions, they have received a decent amount of votes & answers. I would like to believe they were good questions as in "haven't been asked before & fit this websites standards".
In spite of that I have been accused of trolling and received some negative attention as...
The comment about professional psycological help incidentally is genuine advice. People are poor in general at assessing risk. However, if you are so poor at it that wearing a bullet proof vest while on a flight appears to be a good idea, then receiving treatment for paranoia issues would be sensible - similar to the advice to seek professional help to someone who is afraid of flying. — CMaster5 hours ago
^ I like him.
Oh, dear God. Hypothetical Inception...
@DavidRicherby yeah the first one. I am just hypothetically asking if hypothetical questions are OK. — User15 mins ago
Holy crap. It's our fault he's certified?!
@RoryAlsop I think you'll change your mind once I need your recommendation for the CISSP interview. Thanks to you and other guys at SE infosec I have passed my Security+ with JUST participating on SE infosec. If that is trolling then it helped me get certified — User4 mins ago
And @RoryAlsop please don't endorse him for CISSP. For the sake of all that is good and righteous, please no...
I recently had a new asphalt driveway installed.
Due to the slope of the driveway they stopped about 2 1/2 feet from garage. This has created a problem with the end of driveway being 5 1/2 inches higher than the garage floor. This makes it extremely difficult to get motorcycles in and out.
...
For some reason, "Ammunition budgets" sounds like it would be a good "white card" for CAH. But I can't think of a "black card" it would be especially funny for.
@DavidFreitag "Rando Cardrissian" is one of the CAH recommended house rules. On each turn, you draw a response from the top of the deck that will be attributed to a fictional player called "Rando".
And essentially, if he wins y'all suck the big one.
I forget what the thing was, but there was a self-referential one. Nobody at the table knew what it was, so we looked it up on UD. Top-ranked definition was "covertly checking Urban Dictionary on your phone during a CAH game because you don't know what something means".
@DavidFreitag Then I suggest you move the game out of the bathroom.
Know what'd be nice? A cross-site tag search. So if I have a question about something, I can figure out what site it would be most relevant on by finding where there's other questions with similar tags.
With 85 sites, the current all-site search is barely better than plain Google.
For example, "sql" returns 60 million hits, "crime" returns 175 million hits, and "sql crime" returns 1,360,000 hits.
Searching for [sql] is treated the exact same way as sql. Tag search does not work. This means th...
I just heard that it isn't recommended to use sudo -i on GUI programs - because it's less secure.
Is there any truth here - is there an advantage to this:
sudo -i gedit /random/file.name
over
pkexec gedit /random/file.name
I used to use gksudo, but that's been phased out, so now I use sudo...
Is there a way to invite a poster into a chat? I know if we continue pointless back-and-forth attempts to have some clue what each other is talking about, it'll say "Take it to chat", so I'm trying to go to chat, and don't see any way to ping them and say "hey, go to this chat room"
I'll give it a shot, he seems to be on in real-time and I can always delete the comment afterwards. I just wanted to make sure I wasn't missing an easier obvious way to do it. Thanks @DavidFreitag