16s

35 ms·

331.
by 16s 14y ago
The source code is very nice too. For people who want to see an example of simple, high quality C source code, I highly recommend reading Tarsnap. It's small too, so it's very easy to get all the way through it.
332.
by 16s 14y ago
My power just came back on today. Amazing levels of damage from the storm here in Virginia. Some homes are expected to be without power for another week or more. To add to that, every day the temps are in the mid 90s with 50% humidity. It's
333.
by 16s 14y ago
Many of these presentations come across as proselytizing. It's an immediate turn-off to some developers and most all managers. The proselytizer claims to know or be able to understand things that others on the team cannot. It's condescendin
334.
by 16s 14y ago
Several hospitals in this area are running on generators right now b/c of these storms. They are flying in additional generators too. It was pretty bad. Six deaths in VA so far directly attributed to the storms.
335.
by 16s 14y ago
Must be the same storm that took several of my trees down (east coast Virginia USA) last night. It was a violent storm. 90 MPH winds. Made 80 foot tall oaks bend like straws and they were almost touching the ground. I spent the morning runn
336.
by 16s 14y ago
Sorry to hear that. There are a lot of insecure nerds who work in technology and they enjoy making others feel as insecure as they themselves do. The best advice I can give you is to ignore their ridicule (unless you can learn from it), and
337.
by 16s 14y ago
The point is segmenting things by six. No need to think of the 'things' in terms of bits or bytes (of which I'm very familiar). In my example, it is popular English word patterns. In the article, it's bits in memory. Both of which are 'thin
338.
by 16s 14y ago
Amen brother. Too many young people these days who have contributed nothing to the building of these major sites think they are entitled to access to them (however they like) and they then cry and moan about it when they do not get what the
339.
by 16s 14y ago
I think there may be something to this. I write pattern/word generation software for use in password cracking and some of the most common English consonant vowel patterns are six characters long. For example, the CV pattern cvccvc matches t
340.
by 16s 14y ago
That's a really cool story. He saw something needed to be done, so he did it. That's the kind of person I want to work with.
341.
by 16s 14y ago
"Built on C" seems like the wrong phrase to me. "Extension of C" is a better fit.
342.
by 16s 14y ago
gcc itself is switching to C++ by default in 4.8. Source: http://gcc.gnu.org/ml/gcc/2012-04/msg00054.html
343.
by 16s 14y ago
There's no real way to 'verify' this. They would have to provide the source code in its entirety and several card-carrying, certified cryptanalysts/cryptographers would have to vet it and then publicly approve of it. That will never happen.
344.
by 16s 14y ago
Sometimes business/marketing managers and IT security managers disagree. Looks as though the business guys trumped the security guys on this one. That happens a lot in the real world.
345.
by 16s 14y ago
Vendors lie. That is the sole truth of IT purchasing. When testing network gear, some of our network engineers would say, "Vendors lie, but packets don't".
346.
by 16s 14y ago
When I used to write Windows software, Authenticode signing solved this sort of issue. Does that no longer work?
347.
by 16s 14y ago
33% (or slightly more) of homeowners have no mortgage at all. Edit - Some sources: http://www.ritholtz.com/blog/2012/04/debunking-the-housing-r... http://www.irishexaminer.com/ireland/kfsneyqlidgb/rss2/
348.
by 16s 14y ago
You've never done DR have you? It's a business process with a cost and there are RTO's (recovery time objectives) and RPO's (recovery point objectives). Systems can and will go down. So long as the recovery meets the defined objectives, the
349.
by 16s 14y ago
pylint can help with misspelled variables and type errors. I started using it recently and love it. I still love my C++ compiler though and would not trade it for anything else.
350.
by 16s 14y ago
The point about insiders is often overlooked but just as plausible as an outright hack. A rogue sys-admin or coder who is trusted and has access to file-systems and DBs can leak or sell data and might even get away with it without ever bein
351.
by 16s 14y ago
I call this 'primary authentication' which means you're in an environment where you can't execute code (staring at your xfce4 desktop log on prompt for example). Password managers and generators are only useful after you've logged on. For
352.
by 16s 14y ago
When I think of bcrypt, I think of OpenBSD Blowfish hashes. I hate cracking those damn things. ;)
353.
by 16s 14y ago
Linkedin allowed 6 character passwords. If a user selected six random uppercase ASCII, lowercase ASCII and numbers, this would be the bit-strength: print math.log(62) / math.log(2) * 6 35.72 bits That's easy to crack. Also, keep in mind tha
354.
by 16s 14y ago
That because somewhere in the bank, they still have mainframes in use and old Unisys guys are on call to support them ;)
355.
by 16s 14y ago
How to calculate real-world password bit-strength: http://16s.us/word_machine/bits/
356.
by 16s 14y ago
Microsoft Active Directory servers store passwords as plain MD4 hashes and have done so for more than a decade and will likely continue to do so for another decade. http://16s.us/ms_ad_hashes/
357.
Calculating the Bit-Strength of Real Passwords (16s.us)
4 points by 16s 14y ago|0 comments
358.
by 16s 14y ago
Exchange email systems have web interfaces. They typically authenticate with AD.
359.
by 16s 14y ago
Microsoft Active Directory servers store passwords as plain MD4 hashes. http://16s.us/ms_ad_hashes/ These servers are used by governments and large organizations all over the world.
360.
Microsoft Active Directory Password Hashes are Plain MD4(16s.us)
2 points by 16s 14y ago|0 comments

More ›