The DMZ

A serious place where infosec is discussed PS we don't do hard...
Apr 19, 2016 00:42
takedown requester: hey, take X,Y,Z down.
takedown requestee: X never existed, Y hasn't existed in years, and Z has nothing to do with you.
takedown requester: I SAID TAKE IT DOWN.
Apr 13, 2016 08:30
we lost a lot of good cats back then
Apr 13, 2016 08:27
I learned mine serving in the KatzenWaffen-MM
Apr 11, 2016 10:01
it was weird for me
Apr 11, 2016 10:01
i've done an if/else
Apr 11, 2016 10:00
going to have to start using the Go IDE at codinggame more
Apr 11, 2016 09:59
nomnomnom
Apr 11, 2016 09:59
oh look at all those crypto projects
Apr 11, 2016 09:58
*keybase
Apr 11, 2016 09:58
oh dang, keybae too
Apr 11, 2016 09:57
s/sys/os/
Apr 11, 2016 09:56
@RоryMcCune like built-in sys libraries?
Apr 11, 2016 09:54
i like cross-platform
Apr 11, 2016 09:54
well huh
Apr 11, 2016 09:43
just as long as I don't have to work with vb.net
Apr 11, 2016 09:42
so many languages I have no idea if they will become relevant to me (ocaml, go, swift, rust, groovy, lua, clojure)
Apr 11, 2016 09:41
like, wasn't google into it?
Apr 11, 2016 09:41
is Go getting picked up out in the field?
Apr 11, 2016 09:37
reallllly want to get to the step 6 bleichenbacher
Apr 11, 2016 09:37
I've gone up to most of step two a while ago, but haven't had time lately either.
Apr 11, 2016 09:35
@SergioAndrésFigueroaSantos cryptopals.com/sets/1
Apr 11, 2016 09:34
*XOR
Apr 11, 2016 09:34
sinlge byte XOR and repeating key OR
Apr 11, 2016 09:34
XOR is just as bruteforceable as caesar, sergio
Apr 11, 2016 09:33
heh, always must qualify ;]
Apr 11, 2016 09:32
telling someone it's impossibru just seems misinformed. /endrant
Apr 11, 2016 09:31
file headers, footers, sigs, exif, strings, etc. there will be a pattern in the cleartext, and a well made oracle can find it if it's there. i made a crappy oracle as an undergrad. imagine what the guys in the big leagues have
Apr 11, 2016 09:29
i don't see the practical case of someone encrypting random binary data. if we are talking practical crypto, there will be patterns in the plaintext that can be analyzed
Apr 11, 2016 09:27
OP says he is talking about caesar and XOR
Apr 11, 2016 09:26
I guess he doesn't actually specify what the file is
Apr 11, 2016 09:23
too bad bruce schneier doesn't curate D=
Apr 11, 2016 09:23
need more crypto buffs with smarterer words and such
Apr 11, 2016 09:23
bleh
Apr 11, 2016 09:22
I don't get how a n00b like me can do some crypto challenges and bruteforce classic crypto, but dude saying it's impossibru is going down as the definitive word in that thread
Apr 11, 2016 09:20
hacking with python guide got me into the english detection
Apr 11, 2016 09:20
i do that here rory =D (shameless plug) github.com/theRoda/uniciph
Apr 11, 2016 09:18
i don't think OP has even considered e(k1,e(k2,plaintext)), I was working on the assumption of e(k1,palintext).
Apr 11, 2016 09:14
that is wrong
Apr 11, 2016 09:14
"You really can't, if you're just encrypting / decrypting text."
Apr 11, 2016 09:13
I'm not even in it for the upvotes anymore.. I'm just trying to battle crypto misinformation
Apr 11, 2016 09:11
didn't mean to link to my answer
Apr 11, 2016 09:11
o
Apr 11, 2016 09:11
le sigh
Apr 11, 2016 09:11
10
A: How to know if a file is decrypted or not

cremefraicheYou absolutely can tell with varying degrees of certainty if a file, or even string, was successfully decrypted. Most of the challenges at cryptopals depend on it. I have begun to make a tool for ciphertext bruteforce and analysis that automates this very task. You can find it here if you want to...

Apr 11, 2016 09:10
literally tells OP that what he is trying to do is impossible when it most certainly is possible, because even a neophyte like me can do it
Apr 11, 2016 09:09
when will the madness end!?
Apr 11, 2016 09:08
40 upvotes and going on a wrong answer from two days ago
Apr 11, 2016 09:08
sometimes this site, man