5 ms·
I was reading this and thinking 'I am pretty sure nmap already does this', and as the first reply confirms, it does: http://seclists.org/nmap-dev/2011/q1/768 h
by nikcub 16y ago
I was reading this and thinking 'I am pretty sure nmap already does this', and as the first reply confirms, it does:
http://seclists.org/nmap-dev/2011/q1/768 http://seclists.org/nmap-dev/2011/q1/768
all these leaked emails just remind me why I left the netsec industry so long ago
Just reading this email and knowing these types of people I already know how this came about:
1. random surfing on the web and finds out about LFSR
2. thinks 'this would be awesome for a port scanner'
3. sends email with 'lets do something like nmap but better and faster using this thing i just read about on reddit'
4. 'i done my bit, GO TEAM!'
5. add 'software architect' to email signature
- tptacek 16y ago"There's this thing called an LFSR; it's math-y, but very cool" in a 2009 message from someone pretty well plugged-in to the vulnerability research scene tells you a lot about where we stand with crypto vuln research.
- Natsu 16y agoI wonder what he'll write when he discovers the Mersenne twister?
- weinzierl 16y agoIn reference to what he want's you can't compare a LFSR with a Mersenne twister. His goal is not primarily to produce a good pseudo random number (->Mersenne twister) but to enumerate enumerate all IPs of net range without repetition an. When you wand to be fast you want to avoid repetition.
- deleted 16y ago[deleted]
- barrkel 16y agoI think that's slightly unfair; Greg's expertise isn't in crypto, but in Windows NT kernel internals.
- tptacek 16y agoI'm making a comment about the field, not about Greg.
- burgerbrain 16y ago"Greg's expertise isn't." ftfy
- tptacek 16y agoDo you work in the field? I don't know that you actually "fixed" that.
- Confusion 16y agoI don't know the credentials of this 'Greg' in any field, but he comes across as an inexperienced blowhard, that makes me doubt he could possibly have any expertise in any area. A modicum of expertise in some area and experience in developing software should ensure someone has more respect for something like nmap. It's a nontrivial piece of software and this email comes across as "I can build Reddit in a weekend".
- tptacek 16y agoLet's definitely debate Greg Hoglund --- someone you admittedly don't know anything about, but are apparently happy to comment about --- rather than talking about the thing this comment thread is ostensibly about.
- Confusion 16y agoI'm debating his email, which is exactly what this entire topic is about?
- tptacek 16y agoIt is frustrating that, since Hoglund appeared in the Anonymous storyline, that's all we get to talk about --- because people, like (I don't know you, so don't take too much offense) you, come out from the woodwork and hang superficial barbs like so many ornaments on an ugly, boring Christmas tree. You are commenting about this guy's personal, private email. You don't have to like or respect him. But your contribution to this thread --- "This guy sounds like a total asshole in his emails!" --- degrades the discussion. I'm calling you on it. Please, don't be such an asshole.
- FirstHopSystems 16y agoHe was probably looking at a data structure white papers/research. LFSR is good to use as a primary key for DB's./Linked lists(sequential numbers, no so great) I was working on an API along while ago using C. I think this could be a mission for Redis and Node! Anyone want to hack together a little API/framework for LFSR Generation?
- pnathan 16y agoWhat sort of LRSRs are you looking for? And what language? I put together a LFSR generator as a test demo for a bit vector I homebrewed a while ago - https://bitbucket.org/pnathan/logic-vector/src/598a6cddb080/lfsr.cpp https://bitbucket.org/pnathan/logic-vector/src/598a6cddb080/...
- FirstHopSystems 16y agoI'm going to use Javascript and Redis. I'm working on a few little projects to learn both systems a little bit better.
- barrkel 16y agoAny particular reason it needs to be an LFSR? A question I posted on SO some time back may be of interest, it solves a similar problem using an LCG (generating a shuffled range of numbers with no repeats): http://stackoverflow.com/questions/464476/generating-shuffled-range-using-a-prng-rather-than-shuffling http://stackoverflow.com/questions/464476/generating-shuffle...
- FirstHopSystems 16y agoIt's really simple to program in ASM or using ISE/Verilog. going to a low tech approach it can be done on graph paper. No reason why it's specific..Simple, 'easy to port'. I was doing a little bit of research about a theory I had but when I figured out enough I never fully completed that little project.+2 years prior.
- mkramlich 16y ago> Anyone want to hack together a little API/framework for LFSR Generation? I'm kinda interested. But I'm opposed to blowing the balls off anything.
- mh_ 16y agoRelated HBGary, Anonymous post: http://news.ycombinator.com/item?id=2311067 http://news.ycombinator.com/item?id=2311067 (What we learn about Cyber War from the incident)