16s

52 ms·

361.
by 16s 14y ago
I've seen so much blame in IT/systems/coding in the last 15 years that I can't recount it all. Anytime a vendor or service provider or consultant is involved, get ready for finger pointing when things go wrong (from both sides). I think man
362.
by 16s 14y ago
Amen to that. It could be b64 encoded or whatever. Focus on the raw bytes. They are truth.
363.
by 16s 14y ago
Inertia. The fact that it works and has been tested extensively in production means more to many managers than security does. (pause for collective gasp from the nerds) Until it becomes a crime of some sort to use these simple, well-tested
364.
by 16s 14y ago
One, often over-looked reason, that website designers chose simple MD5 or SHA1 hashing (and why many still do) is for portability. Years ago this was more of an issue than it is today. They may wish to change web frameworks, programming lan
365.
by 16s 14y ago
You guys have no sense of humor.
366.
by 16s 14y ago
John the Ripper released a patch for this modified sha1 hash type today. So no need for any manual hacks. You may download the patch here: http://openwall.info/wiki/john/patches
367.
by 16s 14y ago
My password is 'password1' and it's on that list... Yikes.
368.
by 16s 14y ago
You might compare many words at once (say from a popular password list such as rockyou) like this: while read line; do echo -n $line | sha1sum | cut -c6-40 | awk '{print "00000" $0}'; done < rockyou.txt I haven't tested that, but I thin
369.
by 16s 14y ago
They are already unique and sorted. sort -u combo_not.txt | wc -l 6458020 wc -l combo_not.txt 6458020
370.
by 16s 14y ago
Use open-source tools such as SHA1-Pass. The passwords it generates can be recreated with openssl and any other standard crypto library. Edit: I wrote SHA1-Pass, so I'm biased, but I know what you mean about having trust issues with closed-
371.
by 16s 14y ago
With these sorts of simple hashes, you don't need rainbow tables when you have a few GPUs and OCLHashcat.
372.
by 16s 14y ago
There needs to be an ISO standard for passwords. Things like this are ridiculous.
373.
Solar Designer on Password Hash Storage(openwall.com)
8 points by 16s 14y ago|0 comments
374.
by 16s 14y ago
I used to do this sort of thing informally (meaning that we followed the standard and based our internal standards on it, but never sought certification) when I was an ISO. It would be interesting to see the scope that describes in detail w
375.
by 16s 14y ago
It seems Windows is moving in that direction as well.
376.
by 16s 14y ago
Thank you. Adding that line made it work in IE 9.
377.
by 16s 14y ago
That's standard JavaScript (to me at least). I don't know why it would not work with IE. I'm a systems programmer by trade. Being newish to JavaScript, perhaps I made a mistake, so let me know any ideas you have to make it work with IE, or
378.
by 16s 14y ago
Yes, I do C++. Perhaps you missed that bit. That's the native code I was referring to. I'm concerned that my native code will no longer be able to run in the future. I chose JavaScript because of the ECMA standard and because vendors seem t
379.
by 16s 14y ago
Cisco has been fighting with the Chinese over imitation network gear (branded as Cisco) for years. So rest assured that the switches are all backed-doored too. It's a big problem. Really, tribes out to forge their weapons at home.
380.
by 16s 14y ago
I placed the wrong URL in the description and I did not want to edit it. Here's the correct url: http://16s.us/sha1_pass/js
381.
Walled Gardens are Driving me to JavaScript
55 points by 16s 14y ago|71 comments
382.
by 16s 14y ago
And he's 66... pretty odd. There are plenty of women in their mid twentys if he likes younger chicks.
383.
by 16s 14y ago
Maybe they should charge users fees to protect their privacy rather than focus on charging advertisers? 10 dollars a year to not sell your data to advertisers. 20 dollars a year to not allow law enforcement to view your data without a court
384.
by 16s 14y ago
I'm coming to hold this view as well. A much as I dislike web development in general, I plan to do more work there to hedge against this. I like for my software to run anywhere I need it and a web browser seems to be the only place it'll ru
385.
by 16s 14y ago
Another thing he might consider is setting multiple rounds on the SHA512-crypt hash used by default in Ubuntu. Something like 'rounds=512000' would be sufficiently strong for now. That would cause a perceivable delay during logon. Probably
386.
by 16s 14y ago
Me neither.
387.
by 16s 14y ago
Absolutely. The concept of 'diversification' was fabricated to convince 'dumb money holders' to give up more cash. That's the sole purpose of diversification. "You really need to diversify just a bit more. With as little as 50,000 dollars m
388.
by 16s 14y ago
Linux kernel devs openly spoke of their dislike for Itanium. There are many recorded instances of this.
389.
by 16s 14y ago
I did... ten years ago. They used to be the most user-friendly Linux distro available. I actually bought some of their box sets for my less-technical friends. In my opinion, Debian-based distros have won. For any of those old enough to reca
390.
by 16s 14y ago
They typically limit the number of hours you may take per semester. The most I've seen is 6 hours (about 2 classes) per semester.

More ›