« first day (2640 days earlier)      last day (2028 days later) » 

12:42 AM
"Why would characters spend time answering imaginary questions to fictional hypotheticals?" ... There is a certain genre of "Hot Network Questions" titles which make me cringe
Then there's this (which isn't in that category)
34
Q: Is there such thing as a "one-person" door?

Redwolf ProgramsImagine an evil dictator. He imprisons his enemies in a labor camp, but they never do any work! He doesn't want to torture them, or force them to do that since he is using all of his soldiers to build him a beautiful castle. Instead, he decides to create an incentive: every time you do a certain ...

Basically, how do I make a coin operated turnstile that can't be cheated with no human guards and using only medieval technology...
That question raises so many other questions. How high-tech is too high-tech? Why do you care if occasionally two super skinny people cheat the system? How do you make a coin operated device with that level of technology? If you give people access to stone or wood cutting tools and have no human involvement what's stopping counterfeit coin making?
That's kind of sort of loosely crypto related. I mean that people propose that kind of stuff all the time. People seem to think biometric stuff is secure to use everywhere for some reason. (Even without guards to look for tampering or unusual behavior.)
 
 
20 hours later…
Anonymous
8:59 PM
Hey! If I have an AES IV, how would that benefit me? :p
 
Anonymous
I'm doing a CTF, I've got a POA in-front of me but the code that is running on the server has a hardcoded IV.
 
Anonymous
I'm just wondering how that helps me if at all...? I am fairly certain it does help me.
 
Anonymous
So I know that an IV should be randomly generated.
 
Anonymous
But I am not sure how I would attack the fact that it is hardcoded from a crypto perspective.
 
11:28 PM
@J.J It's probably using CBC mode, so investigate attacks on CBC mode with a fixed IV
 
Anonymous
Yes, CBC is correct. Sorry, forgot to mention that.
 
Anonymous
As I said, I have the code that is running on the remote server.
 
Anonymous
Basically, it presents you with an "example cookie" a bit like this.
 
Anonymous
> 5468697320697320616e204956343536bade59109764febea2c7750a4dae94dc9d494afe7d2f6f65‌​fb1396791585bc03001275db3d5dc7666a39a5b1159e261a7bce4dd133a77c975cbba1ddb3751bc69‌​f88ebbf9d2ca59cda28230eddb23e16
 
Anonymous
Then it asks you to send back a valid cookie, if the cookie you send back is correct it sends back the flag.
 
Anonymous
11:30 PM
It's the crypto side I am failing to understand, the Padding Oracle Attack rather.
 
There are definitely questions about the padding oracle attack on the main site here, have you investigated any of them?
(And if there weren't any, you'd be free to ask about it!)
 
Anonymous
I have, yes. I'm just a little confused and out of my depth.
 

« first day (2640 days earlier)      last day (2028 days later) »