16s

75 ms·

691.
Gcc on Windows [humor](imgur.com)
2 points by 16s 16y ago|0 comments
692.
by 16s 16y ago
HMAC-SHA1 has been added to BETA2.
693.
by 16s 16y ago
If they posted highly objectionable/obscene content as you, would that not harm your reputation? It's at least a possibility. Reputation is everything.
694.
HN - Insecure Password Practices
2 points by 16s 16y ago|3 comments
695.
by 16s 16y ago
The speed-critical parts (like HotSpot) are most certainly written in C++.
696.
by 16s 16y ago
Speaking of passwords, I believe hackernews account passwords are transmitted over plain-text HTTP. Even the password reset is plain-text HTTP. Perhaps that will change soon?
697.
by 16s 16y ago
Off-line attacks (when the password database has been dumped) are much faster than on-line attacks (depending on how the passwords are stored). For example, unsalted, non-iterated md5 hashed passwords can be tested at a rate of 600 million
698.
by 16s 16y ago
Find a small local IT company to use. It's been my experience that they are very responsive and do really care and many of them are very high-quality (old Unix guys). Google are just so large and so far away. They can't be everything to eve
699.
by 16s 16y ago
I actually liked the elephant commercial. I don't see how that commercial makes GoDaddy a terrible company.
700.
by 16s 16y ago
I would say tell more about employee moral and the work atmosphere. It's easy to know if the company does stuff that I might find interesting, but more difficult to know whether or not I might be happy there. If employees feel respected and
701.
by 16s 16y ago
I got advice from some guys on sci.crypto about how to potentially handle this. Some smart guys on that list. So I'll probably incorporate HMAC as an option for those who wish to use it.
702.
by 16s 16y ago
A bigger question might be, who sent it? Was it really the person you claim it is? It's easy to show the receipt of an email and where it came from (especially when you have full headers). But unless the sender bothers to GPG or S/MIME sign
703.
by 16s 16y ago
Would be interesting to actually see the contract they are talking about. I'm sure one of them has a copy. While agreeing to a 50/50 deal in an email exchange may not hold water, a written contract between the two certainly would.
704.
by 16s 16y ago
Yes, OpenBSD misc. So for HMAC. I've looked at it more and I think your point is valid (even tho it's not very likely to occur). I may add it as an option. I don't really need to use it in the traditional sense (shared secret, integrity, et
705.
by 16s 16y ago
HMAC interferes with my design goal of being simple and easily reproducing SHA1_Pass generated passwords on multiple platforms when needed. SHA1 was a design decision to meet that goal. To carry out your attack, you would have to: 1. Someho
706.
by 16s 16y ago
I'm not sure I follow your argument. The user would provide a plain SHA1 hash (or half of one) as their password (either hex or b64 encoded). How do you plan to get the sentence out of that hash? You have no idea what the underlying sente
707.
by 16s 16y ago
I appreciate all the discussion and opinions. I wanted to mention, too, that the source code is also on github for those interested: https://github.com/16s/SHA1_Pass
708.
Don't Store Passwords, Generate Them When Needed(16s.us)
70 points by 16s 16y ago|59 comments
709.
by 16s 16y ago
I moved from FLTK to wxWidgets for a native GUI look and feel. Also now support Unicode so users may enter non-English characters. I'm accepting translations if anyone is interested. Instructions on how to translate are here: http://16s.us
710.
SHA1_Pass 1.5 Beta - Sentence Based Password Generator(16s.us)
4 points by 16s 16y ago|1 comments
711.
by 16s 16y ago
OK. I did not know that. I've never tried it either.
712.
by 16s 16y ago
I think some people fork because they just want a copy of it in case it goes away. That's what I've been told at least.
713.
by 16s 16y ago
Right, but my point was if you are trying to find that one person 690 meters probably won't help much.
714.
by 16s 16y ago
In some densely populated Asian cities, 690 meters will encompass tens of thousands of people.
715.
by 16s 16y ago
When someone sues you, you'll better understand why having a corp, LLC, etc. is important.
716.
by 16s 16y ago
False positives are the bane of IT security products in general. I would say that 90% of issues reported are FPs and the end user is expected to figure that out, confirm then double confirm before reporting it as a potential issue.
717.
by 16s 16y ago
It does use GetAsyncKeyState. Did you not read the source code? It works extremely well too (with regard to accuracy). Try the pre-compiled binary. // From the source code: ks = GetAsyncKeyState( kiter->first );
718.
by 16s 16y ago
Off-topic: I wrote a very primitive passive keystroke logger a few years ago (just to demonstrate how they work). I still have the source code and folks email me about it often: https://github.com/16s/16k My example is really trivial
719.
by 16s 16y ago
Don't feel too bad about it. Many of those questions are arcane/trivia rather than practical day to day knowledge you must know. Don't get me wrong, it's important to understand concepts (like the encryption question they asked), but knowin
720.
by 16s 16y ago
It's been my experience that most programmers don't care. Apps work without input validation/output sanitation. They see this as extra work so it's not a priority to them. Unless mgt makes it a priority (and fires guys who don't do it) o

More ›