16s

68 ms·

661.
by 16s 15y ago
Seems silly to suggest that articulate people are uneducated. If that's not an oxymoron, what is?
662.
by 16s 15y ago
"You have to memorize a passphrase" This is an inaccurate statement. You remember a sentence. Sentences are naturally and easy to recall. The fat, green stick. for example. And then a word for each site you visit. That's it. You can use
663.
by 16s 15y ago
End users don't need to memorize any passwords. They don't know them and they do not care what the passwords are (nor should they). They only need to know how to generate them when needed. Read about SHA1_Pass and try it out. I use it (and
664.
by 16s 15y ago
In my mind, that's the primary design flaw with traditional password managers. Why should end users store passwords? It introduces so many issues. Must have proper encryption. Must deal with synchronization. Must have master password. The l
665.
by 16s 15y ago
I would say use SHA1_Pass and never store, synchronize or forget a password again. I'm biased though, I wrote it and use it daily. It's entirely free, cross-platform (GPL licensed) and you can get the source code from github. Edit: Also, SH
666.
by 16s 15y ago
News reports claim that the FBI has said that they can not crack TrueCrypt. http://news.techworld.com/security/3228701/fbi-hackers-fail-... Some people argue that they want to encourage the use of certain encryption products (e.g. Clipp
667.
by 16s 15y ago
The amazing part to me is that the reports say there was no internet connectivity and no phone lines running into the compound. Did they have an internal network? Or, were these all just stand-alone computers where they kept notes?
668.
by 16s 15y ago
One big point here is that PGP only works when both sender and receiver and doing it. Try sending Bank of America a PGP encrypted email about your account. See what happens. Edit: Re-reading my response... I don't mean this in a condescen
669.
by 16s 15y ago
I've had good luck with SSD drives (Intel and Kingston) for the last two years. No failures. I use them in servers and laptops. I do rysnc them to spindle based drives hourly, so if they do fail, I've got backup. Just my experience.
670.
SHA1_Pass 1.6 Released(16s.us)
2 points by 16s 16y ago|0 comments
671.
by 16s 16y ago
MIT will receive dividends from the stock. It will never cost them anything to hold it even if it falls in value. Also, if it does fall horribly (unlikely) and is sold off, MIT would receive part of the sale proceeds (I believe). Either way
672.
by 16s 16y ago
If it's a valid notice, they have to take some action to stop infringement. It seems they should verify beforehand, but I'm sure they don't want to dedicate resources to that, so the easy thing for them to do is to lock or block access to
673.
by 16s 16y ago
Many IT security standards actually require account lock-outs. For example, PCI-DSS requires it. No one seems to understand that the goal of the attack may be to deny access. The attackers may not want to compromise the account, only to kee
674.
by 16s 16y ago
Use bcrypt or scrypt to store the passwords. Don't use plain SHA1 or MD5, etc. If you must use SHA1 or MD5 (for whatever reason), iterate and salt them. Edit: Re-reading, I may have mis-understood your question. You want to be able to dec
675.
by 16s 16y ago
He has four honorary doctorates. It is his prerogative if he wishes to use that title. From Wikipedia: "Recipients of an honorary doctorate may if they wish adopt the title of "doctor". In many countries, including the United Kingdom, Aust
676.
by 16s 16y ago
Yes, I was going to say chain. Each chain link points to (or touches) the next.
677.
by 16s 16y ago
This sounds as if they are doing users a favor: We manage the encryption keys on our users’ behalf. To be completely clear to users, they should instead write: We hold the decryption keys and can decrypt your data if compelled to do so.
678.
by 16s 16y ago
Yep... it works now. Thanks.
679.
by 16s 16y ago
It says my github username is invalid. It's the same as my HN name. Are numbers a problem?
680.
by 16s 16y ago
Whole disk encryption is built-in all you have to do is enable it during install... here's a how-to... OpenBSD frowns upon howtos, but here it is anyway: http://16s.us/OpenBSD/softraid.txt
681.
by 16s 16y ago
They have clearly stated why they do not support those technologies multiple times, but it continually comes up. OpenBSD always goes with simple, easy to understand solutions that "just work out of the box" and can be easily configured and
682.
by 16s 16y ago
Buy a CD from them. They are the reason we all have OpenSSH. Without that, Unix/Linux/BSD (as we know it today) would be much less secure. 4.9 CDs may be pre-ordered now: http://openbsd.org/orders.html You won't find a simpler, cleaner Un
683.
by 16s 16y ago
Great points. Trust and hope are not IT Security Controls. Take the matter into your own hands and GPG encrypt everything that you place into the cloud. That way, only you hold the decryption key. I'm sure this may violate their ToS and it
684.
by 16s 16y ago
That's a matter of opinion. I always do this. Now there is no question what each conditional is intended to do. So if I make a mistake, you can clearly see from the conditional comment what I meant to do.
685.
by 16s 16y ago
That seems like a reasonable question to ask on a Java list back in 1996.
686.
by 16s 16y ago
Solve a specific real-world problem you have by writing a program to do it. Start with Python or Ruby. Start on one platform (Windows, Mac, Linux). Start small and get bigger by solving bigger problems as you progress. Then, write a progra
687.
by 16s 16y ago
Just my opinion, but here are my comments to FizzBuzz. https://github.com/16s/FizzBuzz/blob/master/FizzBuzz.cpp
688.
by 16s 16y ago
Have them write FizzBuzz (or something similar) give them 15 minutes to do it (more than enough time). Leave the room so they don't feel pressured. Offer them the OS and compiler of their choice. Ask them to write it in two or three languag
689.
by 16s 16y ago
Another risk... has a re-write been brought-up before and shot down? Did everyone agree (reluctantly) to make the best of it and continue with the code base? If that happened and you bring this up again, it may not end well. Management may
690.
by 16s 16y ago
Quantify it. That's all most managers understand. Customer X wants the product in 12 weeks or they're going with a competing product. Customer X may be spending 6 or 7 figures with us over the next 5 years in upfront costs and ongoing maint

More ›