> if you want to be extra paranoid before generating a GPG key, you can always roll a number of dice, and cat those numbers into /dev/random, and that will be mixed into the entropy pool. It can't hurt, and against certain attacks, it could certainly help.
If I understand the wiki correctly, you can write data to it and it'll be added to the entropy pool, but you won't be able to harm the randomness coming out of it because if it isn't sufficiently random it won't increase the estimate of bits of entropy available?
I did get to chat to Nekrogoblikon last year at Download, and they took away a copy of our latest album and some t-shirts. (Not seen pics of any of them wearing them, but still)
@TerryChia hahahahaha. How about the parenting thing - I only need 3 upvotes for my 10k over there.... mock me if you like, but feel free to upvote any useful posts by this aging father :-)
Is there a difference between terminal services encryption level and RDP encryption level? I'm reading a pentest report and they appear to be used interchangeably
You ever have one of those wrong number calls where you kinda feel like you had to work a little too hard to convince the caller they weren't talking to the person they wanted to?
@deed02392 "terminal services" and "RDP" both relate to the same thing (the protocol by which one can open a "remote desktop" on a Windows machine) but Microsoft changed the name several times.
equally as often, they're rude as if it's my fault
or simply hang up
@ThomasPornin Oh ok, thanks, I'm trying to figure out which I need to be looking at when they say our encryption levels are set to 'medium'. I only see a Low, Client compatible, High and FIPS option
There are two ways to have encryption with RDP: either using the encryption system which is integral to the protocol itself, or by wrapping it into a SSL tunnel (what Microsoft calls a Remote Desktop Gateway).
PHONE: [Ring, Ring] ME: "IT Security, this is Iszi." CALLER: "Hi, I'm looking for Dave." ME: "I think you have a wrong number." CALLER: "Oh, this isn't XYZ Automotive?" ME: "No." CALLER: "And you're not Dave?" ME: "No." CALLER: "Oh, okay"
@Iszi Yes. Until we changed phone service providers last year, my direct office number was the same (except for one digit in the area code) as that of a pen (i.e. writing utensil) manufacturer/retailer of some sort. I regularly fielded calls from people who never sounded entirely convinced that I couldn't actually sell them some pens.
I should have taken advantage and opened up a side business.
The "one digit off" match I most commonly get calls for is someone in the logistics department. Can't recall having gotten a call for this automotive company before.
@deed02392 The inherent encryption capabilities of RDP are notoriously poorly specified, and also poorly secure.
The main issue is that while the server may use a certificate, this will often be a self-signed certificate, and clients won't mind if the certificate changes.
yeah. and if we're concerned about eavesdropping of insufficiently encrypted packets then we should certainly be concerned about MITM, because the requirements are the same?
OK, so if we go down the route of using certificates we need to make sure our managed clients care about the right certificate
Interesting, because in the article it says the certificate must be in the clients trusted root store so that implies it will refuse any connection using a certificate not in there
@deed02392 Yes. And the "managed clients" include the human users, who must refrain from clicking through the warning popup (and the popup has a box "don't ever warn me again I know what I am doing" which is devastating to security).
@deed02392 Right -- they use a nifty property of randomness: If you XOR random with random, you get random. If you XOR random with predictable or even malicious, you still get random. So anything you dump into the random pool can only increase entropy.
@IQAndreas for normal stuff the free version works OK, but the safe wipe options don't ... and they for some reason didn't disable them, so you think you've actually done something, and in reality it reverts to simple overwrites
But sometimes hardware issues are somewhat recoverable. I had a friend who was using a GoPro and he rammed a tree with his face and subsequently the GoPro. I was able to recover about half the stuff he had on the SD card.
@TildalWave Interesting approach. So they're doubling-down on attracting the Israeli donors at the expense of alienating virtually all others. Risky, but the goal is low enough that it might work out. It'll be interesting to see how they do.
@tylerl not only that, it happens to be one of those things that the huge majority would join only because they are specifically supporting Israel, anyway.
it's not like there is going to be any groundbreaking space science there.
I'm reading various articles on Tesla S electric car and many of them (one example) say that the car body is very strong because of using aerospace grade bolts. What are those I wonder? I found this review on aerospace fasteners that says
The key difference is quality. Aerospace products need...
@RoryAlsop I presume you mean the project Orion with its thousands of nuclear blasts for propulsion? There was some quite funny explanation why that wouldn't work on TED Talks, I'll try and find it
@RoryAlsop You'll see in the talk how the project developed, NASA had its own ideas about it, but a lot smaller ship. Technically yes, I don't see any problem (except the obvious ones), if you use a fission reactor as the source of electricity that you then use to heat up hydrogen of your nuclear-thermal rocket, but those "nuclear explosion propelled spacecraft" were definitely crazy
tho it would be awesome to see ... from 10.000 miles away
@TildalWave early 80's I was in a country with no TV. Well, you could get TV 2 weeks delayed on VHS if you wanted, but we had more fun finding mortars, mines, armoured vehicles etc :-)
I still can't quite figure it out how in hell could I have been doing all that stuff, time must have been passing slower then or something else relativistic who knows
!['The world's greatest [whatever]' is subjective, but 'One of the world's greatest [whatever]s' is clearly objective. Anyway, that's why I got you this 'one of the world's greatest moms' mug!](http://imgs.xkcd.com/comics/one_of_the.png "'The world's greatest [whatever]' is subjective, but 'One of the world's greatest [whatever]s' is clearly objective. Anyway, that's why I got you this 'one of the world's greatest moms' mug!")
I'm reading various articles on Tesla S electric car and many of them (one example) say that the car body is very strong because of using aerospace grade bolts. What are those I wonder? I found this review on aerospace fasteners that says
The key difference is quality. Aerospace products need...
