16s

59 ms·

601.
by 16s 15y ago
Quite a few managers and auditors really don't understand the difference between a password hash and a password. I expect the auditor was asking for password hashes, although he was using the phrase "plaintext passwords". Who knows, but tha
602.
by 16s 15y ago
My advice would be to forget PR, forget trying to spin it. Just tell the truth, do the right thing for the victim, and figure out how to prevent it going forward. That's all they have to do.
603.
by 16s 15y ago
Why was a Secret Service Agent on campus in the first place? Because only their wire taps (or laptops) are allowed in network closets... when other people do this, it is illegal ;)
604.
by 16s 15y ago
What geeks think of as "full disclosure" is thought of as "cyber crime" or "cyber terror" by some companies and agencies. Things have changed a lot in the last five or ten years. So, be cautious and get legal advice if you do decide to disc
605.
by 16s 15y ago
No, I have a gmail account, but don't use it. I understand that it's not in Google's interest for me to "log out" (regardless of the service) and I think the location of the button reflects that.
606.
by 16s 15y ago
Disclaimer: I don't have a FaceBook account. I never had a myspace account either so I don't know much about social websites. I do make an occasional "tweet", but not often. I got a g+ invite and tried using the service for 3 weeks. I delet
607.
by 16s 15y ago
I find these old computing stories fascinating. All programming luminaries should consider putting their history into books for us normal nerds to read ;)
608.
by 16s 15y ago
If you do anything remotely important via email, you should own you own domain name, and pay for a hosted email solution. I can suggest tuffmail. They are awesome and affordable.
609.
by 16s 15y ago
Sorry, I was paraphrasing and tried to make that clear. I think I captured the spirit of the quote.
610.
by 16s 15y ago
It's been my experience that most people who put down Java or C++ or [your language here] have never seriously used the language and are insecure about learning a new language so they make fun of other languages to hide their insecurity. Ed
611.
by 16s 15y ago
I find in talking with people about passwords that most have the "it won't happen to me" syndrome or the "I'm not that important" syndrome and thus they feel it is OK to use weak passwords. The last person I spoke with about this used this
612.
by 16s 15y ago
They do far more than support. They pay a lot of kernel devs, compiler devs and they maintain a secure, well-tested stable kernel for years on end. Saying that they only do support (discarding all of their engineering work and contributuion
613.
by 16s 15y ago
Very cool! It's good to see this. Will boost and support the TrueCrypt community.
614.
by 16s 15y ago
Big C++ fan here. I came to C++ after learning Python. I simply love it and the Boost libraries only make it better. If I could only have one programming language, it would definitely be C++. I can do anything with it on any operating syst
615.
by 16s 15y ago
Is it me, or is this statement from the article wrong: "All warnings can be enabled with -w." man g++ says: "-w Inhibit all warning messages." Inhibit means to prevent (not to enable).
616.
by 16s 15y ago
They have plenty of competent computer forensics guys and equipment. But even with all of that, proper encryption with a strong passphrase is infeasible to attack. Forcing the key holder to disclose the key is the easy, inexpensive first st
617.
by 16s 15y ago
nmap is too aggressive. It's a prelude to actual hacking attempts and labeled by IDS systems as such. Don't use it for this or you may end up in legal trouble.
618.
by 16s 15y ago
I've encountered this first-hand a lot. Police are too busy with other larger crimes to work on stolen computer cases. Here's what to do to protect against this: 1. Buy or setup a good, reliable file backup service. (daily rsyncs) 2. Use fu
619.
by 16s 15y ago
I have no illegal or incriminating emails. So I'm not worried about that. What bothers me is that overly broad requests would see all sorts of my personal life unrelated to the request. What pizza I ask my wife to order, private jokes I may
620.
by 16s 15y ago
Every time I see someone cite the Facebook user count, it goes up by 100 million. Why is that? Edit: <Joke> At this rate, they'll have more users than there are people on Earth by the end of the year.</Joke>
621.
by 16s 15y ago
His claim seems reasonable. I'd bet on him ;) I liked the article a lot. I'm an "iterate and repair" guy but am trying to use careful thought, logic and planning up front more often. I think that the value of the article is that it shows th
622.
by 16s 15y ago
Several files were added to the .rsrc/BIN folder. See the second screenshot here. http://16s.us/TCHunt/discrepancy/Screenshot2.png
623.
TrueCrypt Discrepancy(16s.us)
150 points by 16s 15y ago|47 comments
624.
by 16s 15y ago
Many are forced to use insecure hashing for compatibility reasons with outside vendors. Google email for orgs/colleges has two options for hash exchange (or used too... it may be different now) MD5 and SHA1. So you could not migrate user ac
625.
by 16s 15y ago
It's good to raise awareness of this issue. When more devs began using bcrypt or scrypt, offline password cracking will be much, much more difficult. The only reason GPUs are cited as testing 600 million hashes a second is that the underlyi
626.
by 16s 15y ago
If you've ever implemented real-world code that solves a problem you'll find that there are some people (mostly who have not implemented much practical code but read a lot about it) who want to tell you how you should have done it. I thin
627.
by 16s 15y ago
For those of us who never travel outside the continental U.S. (or wherever), it would be nice if Gmail had an option we could check that read, "Disallow international (non U.S.) access to my account." This would add a small measure of prote
628.
by 16s 15y ago
You can actually calculate password bit strength/safety (assuming the chars are indeed random... and that's a big assumption). A randomly selected character from all printable ASCII characters (roughly 95 chars) has about 6.5 bits of entrop
629.
by 16s 15y ago
So how do they identify people who have no facebook account or facebook friends? That seemed to be the main focus of identifying people.
630.
by 16s 15y ago
Odd. I think it's correct... which step is incorrect?

More ›