It is pretty relevant as ssl slows a network down aswell as it raises exceptions in some browsers. In firefox a totally legitimate thwate certificate is shown as a certificate for an "unknown company". Without the certificate it wouldn't have even shown the message. People are more likely to not visit the site after that message than having been presented with no message at all. As even ssl-protected sites can be easily observed with Firesheep I see almost no use in using this protection at all. — Zurechtweiser6 mins ago
This guy is bound and determined to convince the world that SSL is unnecessary overkill.
Changes are coming to the Question Closing system. The existing Vote To Close reasons are being overhauled. We've already seen some of these changes in the Duplicate Question area. That link above has a full rundown of the changes, and I recommend reading it, but this question is for one speci...
I expect they will (or at least should) impose a minimum length for free-form off-topic reasons, to ensure that the user does get feedback as to why the question is off-topic. That is the whole reason for this overhaul after all.
@Gilles @Iszi I'd say the one we see regularly is the TL - "Please decrypt this / Tell me which algorithm/function this ciphertext/hash was generated with."
I'm running latest gen Chrome (27) and preparing a demo that requires using a self-signed cert to support HTTPS on a local IIS website. The cert has been created with the correct common name for the website (good little guide here) and then added to the trusted root certs on the local machine.
I...
@LucasKauffman say what? you mean prebuilt fuzzer lists that you could include in yours? we had similar questions before for password dictionaries, nobody seems to have been bothered by them:
I’m wondering where I can find good collections of dictionaries which can be used for dictionary attacks?
I've found some through Google, but I’m interested in hearing about where you get your dictionaries from.
@ManishEarth Ha! I would really like to downvote that question, but I haven't enough rep on mSO to do so. Serves them right, and their "downvotes here are different than on other SE sites and it's all for your own good" reasoning :)))
The guy is still suspended for 4 more days on Sec.SE
@LucasKauffman Why do you love these question? Do you use to collect information about what people think of the intelligence agencies? ANSWER ME, NSA AGENT!!
Agreed they do seem to have shitloads of money and it would not surprise me that they use their intelligence as advantage to gain more funds ( eg insider trading)
@LucasKauffman But, you know, I'm most concerned about the 0day thing. They don't need to brute-froce or use social engineering or whatever. They'd just type my Internet-facing machine's IP and they're in.
A distinguisher is a pretty weak attack. It doesn't allow an attacker to decrypt the data, it only allows them to figure out that is is encrypted data, not random data.
The impact of 64 bit blocks depends a lot on the chosen mode.
With single-use keys in CTR mode the problems are minor. There ...
It was a bit long, though. Allow me to summarize it: Someone will capture your authentication handshake and attempt an offline attack. Have your password strong enough, and the attack will be extremely infeasible.
Is it usually possible (I know that it's theoretically possible) to jump to kernel code without a mode switch and then run only unprivileged instructions?