@Adnan See, the thing is that is already mentioned in the other answer. I was going to have it in my own answer but the other guy answered about a minute before me so I changed my answer to be more of a "how to configure it properly" thing. No point mentioning the exact same thing in two answers.
@RoryMcCune I suppose you went for the premium option?
I honestly wanted to first answer "How the f* would I know? Never used it myself, I just happen to know what a web server is and how to connect to it with a client." :))
@TerryChia on a not completely unrelated note - what the hell could a person expect to get out of a vulnerability scanner, if that person can't even connect to a web server he just started?
You want to make sure that after you die, someone gets a vital piece of information from you (like the password from your bank account). But:
You don't want anyone to be able to get that information as long as you are alive.
You only want a particular person to be able to get that information.
...
Here's an appeal to all of you: please vote more often (up or down, you decide)! If you don't see yourself in this list, or really low down, yes it's you that I'm asking! Why am I asking? Because I've noticed lately that votes on Q&A (and comments) don't really reflect their value to the site and we're being beat by popularity votes instead of quality votes. Yes, that is my opinion, and no, this is not about votes for me. Thanks!
@Terry I hope there's no sensitivity here, but trust me, I wouldn't say that if you didn't have a special place (you, and the other people around here). Simply because I feel that when I criticize you (or the other regulars) I won't be misunderstood. Like I said, frankly, I'm a little disappointed that that was your reaction. I wouldn't have said that to you if I didn't like your question more than the other guy's.
Your answer explicitly mentions the concept of whitelisting (disable directory listing for everything and then override). I really liked that.
This kind of reactions makes it difficult for me to criticize the regulars' answers. Happened once with another member and after that I no longer comment on his answers. I really hate to see this happen again with more people.
A little more than a year ago, I was in a situation where I feared for my life. I gave this some thought and here's what I did.
I made a video recording containing everything I wanted people to know after I die, then I've stored the video (in addition to some files) in a TrueCrypt volume then I ...
@Adnan +1 there but I really don't like the question as it's overly broad, and the fact that OP didn't care to edit it to be more specific. This is now answerable with gazillion of ways to setup a MFA, be it physical, virtual, legal or any other way... Also, would you mind, if I edit your answer for spelling and grammar?
In the context of online accounts and identities, what are some best practices to prepare for the one certainty we all face: not a one of us will get out alive.
How would you go about securing the online identity(ies) of someone as best you can after they've died, when they haven't put anything in place ahead of time for this event?
Assume we don't know how many identities or services they've used, but at the very least includes 3 email accounts with d...
Digital safety deposit boxes: do they exist? if yes, are (any|they) trustworthy?
There are many bricks and mortar financial institutions where one can rent a locked box in a locked room and be assured the contents are secure, that access is constrained and under strict and constant surveillance,...
@AviD yes, but then you could have all kinds of events: death, birth, wedding, divorce,... you see what I'm getting at? and as far as security is concerned, events are mostly relevant to changing state [of a property]... in (certain point in) time, space,... there's then all kinds of dimensions that might end up being separate tags and relate to security much the same
@TildalWave I wouldn't really say it's a dupe of #1.
It's very close to it, yes, but not a dupe.
I admit, I might be biased because I have an answer there, but looking at both questions and the answers in them, you can see that they're not really the same.
@Adnan close enough IMO and the answers then cover it 100%
@Adnan think of it this way, if it's closed, others won't be able to add answers to compete with yours (and it has enough up-votes to keep the question alive, a.k.a. not deleted) ;)
Also, last night I started watching Game of Thrones, and after the first episode, I must ask. Does it get better? Or should I just stop watching as it will continue on the same level?
@Adnan Spoiler alert! Do not star this message unless you wanna know that in the end...
That question... it's not getting closed is it? The best reason I can think of is that it's too broad and I've asked OP to make it a bit more specific, which he neglected even after the edit. Not sure that's a good enough reason to VTC tho.
@Adnan It's a mixture of NC and NaRQ, at least according to their descriptions... I voted NC because the second half of the description suits my reasons for it better (will likely solicit debate, arguments, polling, or extended discussion). OP has been asked to narrow it down, he didn't see it necessary, I deem it necessary to protest due to it
@Crypto people, please have a look at this answer. In the second part it claims that a cryptographic hash could eliminate the bias in an ill-implemented RNG.
AFAIK (and I really have a very shallow understanding in the area) if you take 10 bits with 57% likely hood of ones, then roughly 6 of these bits will likely be ones, which means a certain set of output values is more likely to appear. Hashing, only masks this.
By generating a rainbow table of all of 10-bit combinations, and comparing them to the hashed output of our badly-implemented RNG, it's possible to detect the bias in the output by observing that hashes of numbers that have slightly more ones than zeros are generated.
I'm not sure how that would scale to more and more bits, but I think there's something wrong.
@CodesInChaos Attempting to study crypto, I find this very interesting. So a PRNG that doesn't fulfil the crypto-secure requirements (P(K+1) > 0.5) , could just be hashed and it will become crypto-secure.
@Adnan I think it's the best answer so far. It's pretty close to what I expected from makerofthings after our now deleted exchange in the comments... but didn't quite deliver in the answer then. The whole key to the question is IMO in that comment "@TidalWave how are hash collisions useful in this context?". Not so much for attack, but how to prevent it. And non-biased distribution is the key here IMO... as for the uses, @CodesInChaos you answered it also in one of your answers, remember?
@Adnan One would need to look at the details. But in any case it's not better than simply hashing a key+counter
the idea is that you hope that the non crypto PRNG has 1) a sufficient periods and 2) exposes enough of its internal state to be equivalent to (key,counter)
Hash functions are used in many places, and some of them require more than collision and preimage resistance.
A few examples:
As a pseudo-random function in key derivation. Obviously the key should be as random as possible.
As a padding in RSA. The security proofs are based on the random oracl...
@CodesInChaos if there was only such a thing as urand() :))
Given:
H is a good hash function with block size L.
K is a key of length >= L (recommended by RFC 2104).
Khex and Kbase64 are ASCII encodings of K.
In the HMAC algorithm, is there a good reason to prefer K over the other encodings?
Obviously the HMAC algorithm would consider these distinct k...
Okay. Well. I have an idea. But it'd be dependant on what you have on hand...
You can insulate the pot from the heat source using pieces of metal which will dispearse the heat evenly across the base of your pan while also dissapating heat into the air, after a certain amount of metal is placed inbetween the temperature should get near to what your after
I personally have at home a metal plate that has large gaps in beween sheets to reduce the amount of heat tranferred while still transferring heat to some degree
@LucasKauffman Have you any luck getting py-bcrypt to work on Windows (not sure if you use Windows at all)? Or know any alternative bcrypt wrappers to Flask-bcrypt for Flask that doesn't rely on py-bcrypt?
@Adnan keep an eye on the temperature and let me know how it goes :) The more air gapped it is, the less thermal transfer (presumably your still using that electric stove?)
@TerryChia I didn't use py-bcrypt (don't think flask uses it either) I ended up writing my own class for password hashing based on PBKDF2 implemented in passlib
if you need to use py-bcrypt you will need to have C support
@AntonyVennard Yup, someone, somewhere thought they can use our bear's post for a spin platform. I was offended by their belief in our naivety, really.
@Adnan you know all too well I can't say it. Well maybe kjl4ppj-sd/43ghgh09sse9 ;)
well this is an interesting one in my logs: `46.118.157.164 - - [09/Jun/2013:06:27:07 +0200] "GET /?page=videogallery&id=2&type=2+++++++++++++++++++++++++Result:+%F4%EE%F0%F3%EC+%ED%E5+%ED%E0%E9%E4%E5%ED+/+%ED%E5+%F3%E4%E0%EB%EE%F1%FC+%EE%EF%F0%E5%E4%E5%EB%E8%F2%FC+IP HTTP/1.0" ref:"http://www.tildalwave.com/?page=videogallery&id=2&type=2+++++++++++++++++++++++++Result:+%F4%EE%F0%F3%EC+%ED%E5+%ED%E0%E9%E4%E5%ED+/+%ED%E5+%F3%E4%E0%EB%EE%F1%FC+%EE%EF%F0%E5%E4%E5%EB%E8%F2%FC+IP" -> url:"/tildalwave.cgi" agent:"Opera/9.80 (Windows NT 6.2; U; en) Presto/2.10.289 Version/12.02" 200 84620`
it turns out it-s windows-1251 encoded ... форум не найден / не удалось определить IP meaning forum not found / unable to determine the IP
@LucasKauffman fascinating. Not only is there such a thing as "beef labeling", not only is it customary to monitor it, but there is a law regulating the delegation thereof.
@Adnan yeah, if the filetype is not an image type, magic onebox doesnt know to show it. You can force it (usually) by using !
I'm recently finding it a little interesting that many of the questions I'm answering are about stuff on/with which I worked/played in the past few months.
:O
I'm starting, little by little, to gain experience!!
But but but but but.. I don't want to be old like @AviD or @RoryA
@RoryAlsop Since he unveiled and explained himself before they found him, and since his explanation was so thoughtful, it makes me think he's got a shot at getting public sentiment on his side, which would greatly assist him. He's certainly got a better shot at getting a sympathetic ear than Manning had.
@LucasKauffman Ehh, I see that as a minor distinction, not the main distinction. I don't know if I'm representative of the typical American, but that's my opinion.
@LucasKauffman To me they're two guys who both though the government was doing something wrong, both released classified documents to demonstrate that, but chose entirely different paths to do that, irrespective of the contents of those documents.
@LucasKauffman That's part of it. One also carefully chose the documents he would release, the other dumped everything he could find to steal. One came forward and explained who he was and why he did it, the other one hid until he was turned in and captured.
> "It just isn't fair that Windows users get all the viruses. I mean really, shouldn't Linux users be in on the fun as well? Well... thanks to the folks running the Wine project, Linux users can "catch the virus bug" too -- sort of."
@Adnan that's one funny link, but yes the list of viruses there that can run through WINE is pretty good, including what they can and can't do... do you have any more complete list for this?
@ScottPack Man, I'd have to train to be that untrained... but yes you can make a salty pie out of it also and it's pretty good... add some hash into it, and it's a decent meal
@ScottPack I get it they look similar on photos, but in reality rhubarb is 1) a lot bigger 2) tougher 3) tastes completely different 4) smells completely different 5) usually isn't so sensitive to heat 6) doesn't tear as easily ...
user20683
@ScottPack trying to broaden my horizons
user20683
also I'm a mod, it behooves me to be more familiar with possible migration targets.
@TildalWave Incidentally, this was our harvest one day. We did our best to take a little of everything but not so much that other people wouldn't get a change.
@ScottPack yup and frankly, it's really hard to tell from the photo which one it is... I can make out most of other stuff, but what's that in the bowl next to some tomatoes? Jalapenos?
@ScottPack Mmmmm - Mum used to make us Rhubarb Fool when we were little. We'd pick it in the garden and she'd do whatever is needed to make sure we weren't poisoned by it
that still looks like chard tho looking at it better, mainly because it's quite beat and heat stricken... my mom is trying out this year sprinkling with ashes water, and so far it looks pretty good (trying on short beans that didn't make it that well last year)
@RoryAlsop They ought to be with red stems and heat processed, that's all I know
By and large stay away from the leaves, they have a much higher concentration of oxalic acid.
@TildalWave Yes, and after we noticed our pie was strangely "leafy green" flavored I looked it up and realized that I'll be able to tell the difference from that point on.
@TildalWave You see, they're clearly Swiss chard. I had only ever read a description of what rhubarb looked like, and had never seen chard.
@ScottPack well to me the most difficult is telling various herbs apart at the garden, because some look incredibly similar (say marjoram and oregano before they flower) and once you smell one, the scent is so strong you have problems with smelling the other one
I grow easy herbs - like the common weeds called chives, mint, strawberries, in fact anything which will happily self propagate and reappear each year is good by me
there's tens of really similar herbs really ... I didn't know that before last year when I started researching a bit more, but now when I run out of something in the kitchen, I always find its closest substitute ... for example, you don't have oregano, use thyme... you don't have bay leaves, use juniper berries e.t.c.
@RoryAlsop oregano is pretty easy to grow in pots once you get it started... and I use coco fibers + vermiculite + guano fertilizer mixture instead of soil to prevent rot, rust,... and it's a lot cleaner even if the cat drops the pot or something else happens to it
@RoryAlsop neah it's easy I just order from ganja farming shops and mix in a huge barrel .. the rest is then really easy, the worst is to me if you have some plant pests and/or diseases, which such mixtures help reduce the chance of
@ScottPack My list of favourite writers has him on my list twice. 1st place as Iain M Banks for his sci-fi works, then 6th as Iain Banks for his other stuff
it's just those kind of shops have it always all on stock and reasonable prices if you order in bulk ... it's not so easy to get such stuff here in normal shops... ok maybe bat guano, but the rest is not so easily obtainable
1 Iain M Banks 2 Peter F Hamilton 3 Charles Stross 4 Alastair Reynolds 5 China Mieville 6 Iain Banks 7 Ken McLeod 8 Isaac Asimov 9 Neal Asher 10 Christopher Brookmyre