The DMZ

12:03 AM

@pacifist Hints: He wears a kilt, eats a haggis, plays the bagpipes, and might slay you with a claymore.

@pacifist Ok, he plays the guitar, not the bagpipes, (a guitar that shoots flames, no less) but you get the point.

heh, k, thanks

little far for me to try and reach by radio, without getting lucky on rare phenomenon. I'm probably a lot closer to MH370, unless it turns out to be in Afghanistan again

Xander

@pacifist To your question - Truly random data is incompressible, so the size of a OTP cannot be decreased using compression.

pacifist

@Xander - doh... I don't know why I didn't think of that. Good point. kinda feel like trying to remove the question now

Xander

12:19 AM

@pacifist Ehh, I don't know that it's a bad question. Just one with a very simple answer. :-)

Unless somebody wants to get into the math involved to demonstrate that random data in incompressible. Then it becomes a mind-numbingly complex and boring answer. @ThomasPornin might be willing to do that.

Falcon Momot

@Xander that might not be correct - if it's stored sparsely, it could certainly be compressed.

Xander

@FalconMomot Storage mechanisms are completely irrelevant.

Falcon Momot

@Xander if the OTPs are numeric you could compress them by using binary symbols instead of ASCII ones is all. Otherwise, yes, they are noncompressible.

Xander

12:40 AM

@FalconMomot That's a bit of an odd scenario. ASCII is an encoding, which is not typically what you deal with when encrypting data using a computer. You usually work in bits and bytes.

pacifist

ok so yes, as I poposed the question it looks very unlikely. I won't edit the question to be asking it slightly differently, but can it be used to 'update' one-time pads? Say (for some silly reason) you believe you've leaked a copy of your onetime pads, can you use a chunk (say a few hundred bytes) to tell the other party that the remaining amount of pad left after that you're going to use to transmit a new pad, in an attempt to 'close' the leak if you think you're not being intercepted yet?

*proposed

so both parties end up with a 'new' pad of the reminaining length... actually no nevermind. This one never works since if your new pad being transmitted is intercepted its moot.

Xander

@pacifist Yup. This. :-)

Falcon Momot

1:09 AM

@Xander that's different. if you can compress encrypted data much at all without knowing the key, the encryption is probably full of side-channel attacks.

Stack Exchange

4:04 AM

We watched DAYTIME TV. Do you realize how soul-crushing it was? I'd rather eat an iPad than go back to watching daytime TV.

Terry Chia

@pacifist TL;DR: OTP is not practical for most purposes.

pacifist

4:39 AM

@TerryChia oh - I knew I was just reading the OTP stuff from above (about whether OTP can be used large scale) and as edge case was wondering whether you can actually keep OTP 'going' after some initial state is securely established. Punchline turned out not to be surprising

FEichinger

5:37 AM

@StackExchange He does have a point. I, too, would rather eat an iPad than watch daytime TV again.

AviD

6:50 AM

@tylerl next time you go and do that kind of trainbait, give us a heads up, so we can throw a preemptive protect on it....

but daaaamn there is some crap there.

curious how much rep you lost out on there.... ;-)

AviD

7:16 AM

@Xander oo, just subscribed to coffee.

sorry, followed.

kiBytes

Tengo más hambre que los pavos de Manolo.

"I am hungrier than Johnny's turkeys"

AviD

@TerryChia well, that actually depends. Depends on which "OTP" you're talking about....

Terry Chia

@AviD I'm obviously referring to one time pad given the previous discussion.

AviD

One-time pads are not practical (for most purposes). One time passwords are much more practical, in certain situations.

@TerryChia still, it needed to be said.

Someone needs to come up with unambiguous acronyms for these.

Rоry McCune

8:05 AM

in news that @RoryAlsop will be insanely happy about, you can now get MS Office for iPad :)

so now he can spend even more time on his beloved iPad :op

TildalWave

8:17 AM

morning

deed02392

8:31 AM

herp

es

deed02392

8:49 AM

Why is this PGP signature not apparently compliant with the RFC? paste.ubuntu.com/7167325

My calculations show that the first two octets which are supposed to be the scalar of how many bits the MPI is comprised of, equals far more than the number of bits remaining in the signature

So that hex can't be the start of the big RSA signature value

AviD

If you want to be extra safe, check that there's a big block of jumbled characters at the bottom.

that's why.

deed02392

Nah @AviD I want to understand this at a byte level

AviD

it's missing the --- BEGIN PGP .... .

deed02392

lols

Oh I just realised that's exactly 512 bytes

so that whole string must be the 4096 bits of the integer

AviD

@RoryAlsop I think we need to ban @Lucas for a while.

He's getting dangerously close to passing my rep and pushing my off the 2nd row....

deed02392

9:03 AM

lol

Ah actually maybe it's because the MPI is encrypted

so it does represent that space but I need to decrypt it first according to the fact that number = m^d mod n

Oh God damn it was there all along '10 00' = 4096

Terry Chia

@AviD Just play nuke the answers.

AviD

@TerryChia heh, thats a good idea. I'll moddelete his highest scoring answers...

its not like any of them are any good, anyway....

FEichinger

Does moddelete override the rep preservation threshold?

I mean, it probably should, but this being SE ...

Terry Chia

@FEichinger Good question. I guess @AviD should experiment.

AviD

moddelete is the same as regular delete....

@FEichinger how do you mean? this removes rep...

FEichinger

9:15 AM

@AviD Deleting posts above a certain score threshold does not remove the rep earned.

AviD

oh wait, I thought you were talking about repcap.

@FEichinger really? Did not know that. Whats the threshhold?

FEichinger

@AviD I believe it's +3, but I'd need to check.

AviD

so fine, I'll remove all his posts with less than 3 score. That's most of them, anyway ;-)

hahaha

TildalWave

9:56 AM

who dared decline my flag?

> Migrate to Information Security Meta or covert to CW? – TildalWave yesterday
declined - Meta site is only for q's about the site, or the community.

we all know that's not all that meta is there for :P

not all "questions" there are even questions

31

Q: The Memes of Information Security

There are memes common to whole Stack Exchange. But after spending some time in The DMZ it becomes evident that Information Security has it's own memes (e.g. rory). I therefore propose that this space be used to document the memes endemic to Information Security's culture. One meme per answer p...