@Iszi interesting. I've got it running on my iPad for now, works ok although the client isn't quite as pretty as the windows phone version it has all the functionality...
Ever since I logged in to the "Aww!" chat room once, I keep logging in there automatically. I tried clearing my cookies, cache, closing all my browser windows, "leaving (all)" chat rooms, and even manually logging out of all the StackExchange sites on which I have accounts. I still see this
Anybody has any idea about what's going on?
and yes, I clicked that arrow that lets you "leave that room", and after 5-10 seconds it appears again.
Oh, and @Lucas, you recommended OSCP, they say I need to have PWB first. So I'm trying to register, how long PWB lab access do you think is needed?
@LucasKauffman So when on the PwB page they say "Penetration Testing with BackTrack Online v.3.0 + 60 days PWB Lab access + Certification", by Certification they mean the OSCP exam. Right?
1. Imagine discrete logarithm, factorization and other similar mathematical problems become solved (in practice) and published. What will happen to the world's crypto? How things will be changed? What should be used instead? 2. Imagine you're a conscious mathematician that suddenly solved the above (but not yet published). What will do you to minimize the negative impact, yet let the mathematics to march on; how will you publish such a thing?
@Vi. As long as we're imagining, first thing I would do is jump on my flying unicorn and teleport myself and Bruce Schneier to Venus to have a private discussion about this.
@AntonyVennard If you have a piece of knowledge that renders the world crypto useless, how will you conscientiously deliver that knowledge to the world?
@Vi. That depends. See, symmetric crypto has no hardness basis whatsoever. It's all confusion/diffusion. There are other problems out there which are hard, e.g. en.wikipedia.org/wiki/McEliece_cryptosystem
Whether that specific system would be used or not remains to be seen.
which is funny, because I almost took a job with the Dr.Evil from SO....
@Vi. well, no, I'm just being hypothetical. And Dr.Evil. In reality I believe in *responsible" disclosure, and there really is no way to do so in your scenario.
@Vi. I suspect (my personal intuition only) that discovering the "solution" to the DLP/factorisation would not be a sudden "oh look, we broke it" but a series of approaches. Mathematicians are very cautious about calling something "proved". For example, the Riemann Hypothesis has proved valid in almost every number computers have thrown at it, but it has not been proved yet, so it remains only a hypothesis.
wait, now I'm not sure - @Vi. what did you mean "solved discrete logarithm, factorization etc" - solved as in found an easy solution (i.e. broke them), or solved as in proved them (showed that they cannot be broke)?
I assumed the first, since we were talking about negative consequences....
@AviD It's a bit complex, but basically they're not hardness theorems. There's no proof RSA is fit for purpose... it's just good as far as we know. A result that factorises things faster is (again, my intuition only) likely to have to prove a number of other results relating to primes, or at the very least deduce new structures or results that can be used to validate whether a number if prime. I'm not a research level maths person, but that's my guess as to what would be needed.
@Vi. I've no idea how it would be disseminated to not break society. At a guess, I'd expect that as soon as results indicating it may be possible to solve these problems efficiently appear, work would begin on replacing them, much as MD5 was replaced years ago. To that end, the best thing that can happen is for all results to be published ASAP.
That way, we get as much advanced warning as possible.
@Adnan thanks for the welcome I need to decide between computer forensic and information security I posted a question but somebody suggested me the DMZ
@AntonyVennard right, I know that.... but when I mention not wearing trousers, that usually gets me funny looks too. 'Course I'm wearing shorts in my office...
I need some advice and opinions
I'm about to do my master and I need to make a decision on what course I should take now I have two options either computer forensics or information security
what I want to know is:
is the difference/gap between these to big
do they have some kind of relative...
@user2309720 Well.. go ahead, explain what do you think of the two fields. Why do you want to get into them. You might have some misconceptions? that need to be corrected.
@user2309720 It's alright. Since there are guys from all over the planet here, it might be helpful if you tell us where you're based. You'll be able to get a much more customized advice.
@LucasKauffman well yes I'm thinking if I could I will do such coz I'm not really very interested in forensic as I do for info. sec. also my bachelor is net & sec. under comp. science
@LucasKauffman but which one should I study for the course and which one I self -study because you know it's a matter of what and how many prof. certificates you hold to join work on some area, right?
@user2309720 Broadly speaking the two have interrelations, and experience in one is likely to help with the other. I have had team members start in one and move to the other, and I even had a sideline with some training in forensics/EnCase etc
@RoryAlsop but which one would you suggest I take for my master as for you info. I have covered one subject in my bachelor about forensic basically we have covered the types and the ways to do investigations so I have some clues about forensic
@RoryMcCune from what I heard, in most cases the direct revenue from publishing books is miniscule, compared to the time investment. However, it can be a platform for indirect revenues - such as a platform for personal marketing, paid speaking, etc
@user2309720 It does depend entirely on what you find interesting and what you want to do. Personally I think Security gives you a wider possible set of career lines, but I am sure investigations folk would say the opposite
the thing to remember is that doing one does not preclude doing the other later
@user2309720 personally, I dont hold a lot by academic studies, at least for career paths. (might help get that first job, a little bit, but not much else). so just go for whichever you enjoy more, whichever you're more interested in.
@user2309720 As @AviD said, the academic piece is just a starting point. It can get you into all sorts of roles, but certainly when I used to hire in Big-4, the important thing to me was that someone had a degree. Didn't necessarily matter what...
Starting forensics usually has some EnCase/investigation tools experience, which you would still get shadowing a senior
@RoryAlsop and I would add, outside of the Big-4, having a degree at all is usually not a requirement, and as a benefit carries less weight than real experience (in most cases).
@RoryAlsop doubt an academic course would cover toolkits...
@AviD I also disagree (and I am UK based). The requirement in this country for development roles is either X years in a Y-based team (e.g. 3 years Java) OR have a degree for a graduate programme.
even here I would have trouble getting certain government positions, even with the 10 years + big clients. The RFP states a certain degree, so go screw yourself.
@LucasKauffman Interesting. Here, the government automatically takes a percentage of your salary and save it for you for when you retire. Private or public
You could hopefully gain some experience in forensics that is applicable, and use that as your starter
but you would need to train
a penetration tester has a different outlook than a forensic investigator
having both is useful for a forensic investigation, because it can give you an insight into what the attacker was trying to do
@Adnan Hoping you can understand the lyrics - that was the best bit :-)
@user2309720 If you are employed as a forensic specialist in an org which lets you gain experience in other areas (eg Big-4) then you can actively pursue that route
@user2309720 depends on the country, for instance EY and PwC are strong at security in this country whereas Deloitte and KPMG almost haven't got anything
@user2309720 you should start though by working out what you enjoy, what you want to do, what you want to do in 5 years and 10 years, then research the industry, then revisit your career plan, then look at which employers can help you get there
If your goals match an employers goals they can be very supportive. If they clash - you'll have a hard time
@RoryAlsop so for now it looks like whichever course I take it will not hold me up form practicing the other ?
what I really wanna understand is that for e.g I did forensic then once upon a time I want to do pentesting will taking some courses along with the study background be a good kick off
The thing to note is that most employers see a degree as academic. If it is in the right general space it will be useful. I wouldn't have thought you'd regret it, but if you dont plan on a career in forensics then it probably is unnecessary - focus more on what you plan on doing
@RoryAlsop then what about if I wish to further my study like for PhD..will I have to take it more serious in choosing the course if I want to do PhD in info. sec.
after you get that first job it's all about experience
@user2309720 further study is not that useful for most areas of infosec - good for research, but not good in most roles. Academic security != real world security
if you want to do it, great, there are some companies who will sponsor - I'm thinking examples like AV companies, malware reseach companies etc
@user2309720 it does come back to you doing the research. what do you enjoy. what do you want to do. If you have a plan for phd, it would make sense to have an aligned masters degree.
I look at those who done ABC master and XYZ PhD where ABC & XYZ are relatively close.g same faculty or related in a way or another
@RoryAlsop I guess that's the reason for an aligned master and PhD
because now I'm confused to go for academics (research center ) or go out and work just as a professional (e.g pentester, security eng, net engineer, etc...)
so that's why I try to find the difference between these two course (forensic and info .sec)
if I can take master in forensic then PhD in info. sec. then I might consider just to go with the master forensic and if I didn't continue to PhD can I go and work in info .sec. since I have the CCNA and CCNA sec.
@RoryAlsop I checked both and indeed they have some difference but info. sec. does offer forensic as one subject along with crytpo while the forensic course doesn't cover the crypto stuff
@user2309720 CCNA isnt really a useful cert in this space, and CCNA sec is very narrow, so will only really be useful if you want to work for a telecoms company, or a specific network sec company
@LucasKauffman that one I didn't figure it out yet coz I told you not sure if I will go for my PhD then will join research centers other wise will just work as a professional dude
@user2309720 I had a degree in Electronic Engineering
but a lot of experience in tinkering with systems and networks, as well as a lot of security config, architecture and analysis. No actual industry certs until after I joined EY. They sponsored me through a few
@LucasKauffman, @RoryAlsop can you hold I really love this discussion I learnt a lot form you....I need to go to perform my prayer and will be back,hope can catch ya dude
@LucasKauffman I think it's ok...the timestamp gives it a 5 second TTL, the nonce is large enough to ensure all tokens are unique, and the password ensures only the user can generate it.
@LucasKauffman so an attacker could reverse the sha256, giving them the exposed bcrypt for the user's password, but thats a damn sight better than sending the password in plaintext :)
@LucasKauffman to be last one in the bar, first one up, eat the biggest fry-up and be energetic and fun all day. That was what we always tried to do :-)
@LucasKauffman I know fraud is bad...I used it be an auditor. That was the job where I learned to fraudulently pass off club soda & lime as a g&t on our off-sites. :-)
@RoryAlsop That's true too. My recommendation is based solely on the fact that I don't particularly care for tonic without gin. The flavor of tonic just makes me miss the gin. :-)
@RoryMcCune Yeah, I'm not sure why there's so much inconsistency. It's all from the same developers. I will say, I wish the Windows Phone version had that "Base" shortcut at the bottom like the iOS one does. Also, it looks like there's a companion app (view only) for Windows 8.
Background
Two days ago, I was going through the list of SE chat rooms to find some funny/weird stuff. In the end, I wasn't disappointed. One of the rooms is called Aww!.
How did the bug happen?
I went to a lot of rooms and then after I finished I clocked "leave (all)" and I successfully logge...
Clearly that's a Rowan Creek dumped in 2008. Probably rack 15 barrel 9. The bubbles are forming approximately 5/second and are closely clustered at 1mm in diameter. n00b.
I need some advice and opinions
I'm about to do my master and I need to make a decision on what course I should take now I have two options either computer forensics or information security
what I want to know is:
is the difference/gap between these to big
do they have some kind of relative...
Background
Two days ago, I was going through the list of SE chat rooms to find some funny/weird stuff. In the end, I wasn't disappointed. One of the rooms is called Aww!.
How did the bug happen?
I went to a lot of rooms and then after I finished I clocked "leave (all)" and I successfully logge...
