This is just an academic question, I do not intend to write my own crypto software.
Every time someone asks the question “How do I write my own Crypto?” the answer is don't.
I'm currently studying computer science, and there is no course offered by the university which seems to be helpful. Th...
And assuming you can find someone people trust and is knowledgeable enough to properly review code, who's gonna pay that person to spend his valuable time reviewing random packages?
@TerryChia as @RоryMcCune has pointed out, this would be an interesting model for a startup - sell this reviewed repo as a service. I think there are some in this space.
@LucasKauffman Less swearing and fewer "your mom" jokes in the DMZ. And as for actual moderation, I don't think I'll do much differently. I like how sec.SE moderation works now. I'll just be another set of hands, in a different time zone.
@Xander if you were a mod, would you protect that question?
@Xander some strength you and @terry have which you also can include in your profiles is the fact you are working in different timezones than the current moderators
@RоryMcCune Interesting. Not necessarily directly applicable in practice, though, because they need the client to send more than 500 millions HTTP requests (all in the same SSL tunnel, but still) to the real server, so the server has to follow that infernal cadence.
My friend gave me a hashed/ encrypted ciphertext.. And i want to determine which hash algorithm is used..
3_HA{_[Kg742ea6zy.CT30:b:SX@:T]vf{2A
I would be even more obliged if anyone could decipher this for me...
@Simon I figured why not, see how the quality, comfort, and durability works out. The cheaper earbuds never stay in my ears, and I almost always end up having the wires fall out.
So I am slightly more than a dilettante when it comes to security but hardly an expert. I have been reading up on the recent Adobe Flash issues and I wanted to ask a couple of questions:
My Mom uses Mozilla on her computer and they have all but completely disavowed Flash. Flash is still used o...
@Simon they're originally meant to be used at concerts, a friend of mine who's a real audiophile bought the 325 from shure and said he was amazed (he spends close to a grand on headphones)
@LucasKauffman Yeah I wasn't willing to spend $300 on earphones. But those 325's have dual drivers. Which would be badass. I know the 535's have 3 drivers per ear.
OMG I called it! security.stackexchange.com/questions/94013/… "I want the decrypted text from the given ciphertext actually... And since d other questions did not have that, that is why i posted it here... Please... I need the deciphered text"
So I am slightly more than a dilettante when it comes to security but hardly an expert. I have been reading up on the recent Adobe Flash issues and I wanted to ask a couple of questions:
My Mom uses Mozilla on her computer and they have all but completely disavowed Flash. Flash is still used o...
@CodesInChaos Open-source something that's had over 50 vulnerabilities per year for the past six years? I'm not sure if I'd want to crack that particular book open for the world.
"nuke from orbit" as in "reformat the drive and reinstall everything". This question is more of a tech support question than it is an InfoSec question. You aren't asking about hacking/viruses, you are trying to recover from one. I don't believe there is a malware recovery site on Stackexchange, but there are multiple other forums dedicated to this topic, including on AV vendor's sites. — schroeder2 hours ago
@ThomasPornin re: the comment you just posted... Does IIS send that subsequent HelloRequest before the initial negotiation has completed? If so your comment suggests that a server might fool the browser into negotiating with an evil certificate but saying it was happy with a non-evil certificate it never followed through with.
in principle I think the policy is to let even crap nominations run their course - remember when EvanCarrol ran on that other site? - but when it is so overwhelming it really belittles the serious nominations.
making a mockery of the whole process could really cause longterm damage, by accidentally electing a joke mod.
for that matter, being a regular in the DMZ - and being familiar with our subcutlure and sickhumor - is far from a requirement, expectation, or even necessarily a good thing at all.
@gowenfawr IIS sends the HelloRequest after the completion of the previous handshake. IIS actually waits for the HTTP request, which is "application data" from the point of view of SSL.
The second handshake occurs within the security context of the first one, i.e. it is encrypted (from the outside, you know the records are of type "handshake" but the contents are opaque).
Right - making the best of having no kids for a week... I'm off to the gym for the fourth time this week so far. (Okay, that's maybe not the best use, but it's a reasonable second)
@ThomasPornin According to a meta thread that was posted earlier, apparently someone already tried that approach on ServerFault and found themselves duly stripped of their position and powers.