« first day (3318 days earlier)      last day (1562 days later) » 

MechMK1
MechMK1
9:01 AM
I'm not even out of bed yet and I'm already pissed off that .NET has no ready made function to test the primality of a number
@J.J That's why I'm learning how to cook. Sure, my creations taste mediocre at best, but every failed dish is a step forward to becoming better
 
A. Hersean
A. Hersean
Miller-Rabin is not that hard to code.
 
MrHeliose
MrHeliose
@MechMK1 Test primality have a lot of algorithm, you need one corresponding to your need, I think that's the reason they didn't do it
 
MechMK1
MechMK1
9:35 AM
@MrHeliose You could say the same about sorting algorithms, yet every language has at least one built-in
By the way, I designed a new language!
I call it JebboScript, and it works as follows:
 
A. Hersean
A. Hersean
I guess there are more needs for sorting algorithms than for testing primality of number. Especially since the code depends on how the number is coded (array of bytes or big-integer library?)
 
MechMK1
MechMK1
The SHA-256 hash of the input is taken, and if it is all zeros or all one's, it prints whether P = NP or not. Else, it executes the input as if it were JavaScript
@A.Hersean I assumed BigInteger would have IsPrime(), given that it has IsOdd(), IsZero(), etc...
 
MrHeliose
MrHeliose
@MechMK1 quick-sort performance are the best in 99% usecase, I don't think it's that straight forward for primality
 
MechMK1
MechMK1
@MrHeliose You could still implement Miller-Rabin or similar and you will get alright performance. And even then, checking primality for "small" numbers (e.g. up to 64-bit) should be fine either case
If someone needs primality checks for big numbers, their use-case is specialized enough to know they need something specialized
 
A. Hersean
A. Hersean
Usually, BigInteger libs have a isPrime function. For example in Java: java.math.BigInteger.isProbablePrime()
 
MechMK1
MechMK1
9:44 AM
Perhaps I just didn't find it in .NET
 
A. Hersean
A. Hersean
It appears it's missing in .NET. I agree it's odd.
 
MechMK1
MechMK1
Very strange...
Anyways, time to play Rimworld
I have a prisoner who's lungs I need to harvest because my grandfather has Asthma
 
 
2 hours later…
John Zhau
John Zhau
12:01 PM
How much sleep do you get as pentesters btw? What's your daily schedule like?
 
 
2 hours later…
Rory McCune
Rory McCune
1:37 PM
Pentesting should be a 9-5 (or your national equivalent job). It can be a mentally challenging activity, which is best approached when rested.
So getting a decent night's sleep is a good plan
 
Anonymous
2:27 PM
@JohnZhau About 3 hours lul
 
Anonymous
@RoryAlsop The way that they were tweeting suggested that they were proud of not having them, which is just pathetic.
 
Anonymous
P.S - I don't disagree that CVEs mean anything.
 
Anonymous
I disagree with InfoSec Twitter begging for attention because they don't have a CVE.
 
Anonymous
It's pathetic.
 
Anonymous
Ignore trolls, done.
 
Anonymous
2:32 PM
You don't need to start a fucking movement because one guy trolls someone on Twitter.
 
Anonymous
That is more childish than the troll.
 
MechMK1
MechMK1
@JohnZhau It's a regular 9-5
@RoryMcCune Lol I had to look up why your name was like this
 
Journeyman Geek
Journeyman Geek
Room Owner :D
 
Rory McCune
Rory McCune
2:48 PM
wooo room owner \o/
 
Journeyman Geek
Journeyman Geek
I used to be an RO. Then I took a diamond to the hat.
 
M'vy
M'vy
lol
 
 
3 hours later…
Rory Alsop
Rory Alsop
6:07 PM
@J.J ah, understood - I hadn't seen those ones
 
 
3 hours later…
Nzall
Nzall
9:02 PM
Do we want a canonical Q&A post about the recent Microsoft crypto API exploit?
like we have for a number of other exploits?
I don't know what the current stance is on canonical exploit posts, so that's why I ask
 
MechMK1
MechMK1
@Nzall Can you come up with a draft?
 
Nzall
Nzall
9:22 PM
@MechMK1 I'm keeping it short:
> **Note**: This is meant as the canonical FAQ about this exploit.

What is the recently patched and disclosed Windows 10 OS family exploit labeled ChainOfFools and/or Curveball? More precisely: what's the logic behind the exploit, how does it work technically to undermine Elliptic Curve cryptography and what can be done with it? And how can I defend against it beyond the usual "keep everything updated"?
I know we have other canonical Q&A posts, but I can't find any to get good examples.
 

« first day (3318 days earlier)      last day (1562 days later) »