dekz

36 ms·

1. 301.▲
   by dekz 15y ago

   They are. I attempted to use the signup invite link given on a different account, it failed.
2. 302.▲
   by dekz 15y ago

   I got an invite, to my google apps domain account. Can't use it.
3. 303.▲
   by dekz 15y ago

   Hot damn some people have horrible passwords: 123456 -> 199 results. password -> 118 results. Who would use such weak passwords for an account with potential monetary value?
4. 304.▲
   by dekz 15y ago

   I don't believe Crypt_blowfish == OpenBSD's implementation, they cannot interoperate as crypt_blowfish has this inconsistency with 8bit chars. You'd have to look up with distros use it, there are a number listed in his email but that might
5. 305.▲
   by dekz 15y ago

   IIRC scrypt uses SHA256 and AES, not this blowfish implementation. So it's fine.
6. 306.▲
   by dekz 15y ago

   Spend x weeks updating passwords as the users log in, then for whoever hasn't logged in since then can be sent an email (maybe it doesn't have to exactly say "Login so I can update the passwords", just some sort of incentive to log in.
7. 307.▲
   by dekz 15y ago

   > 20:25 <Laurelai> want me to be an informant on account im everywhere and iwas in the army No honour amongst thieves eh.
8. 308.▲
   by dekz 15y ago

   LulzSec was actually front page of a newspaper (free) in Australia. I believe the article was about one of the irc server host owners being arrested. They've certainly been in the fear mongering propaganda.
9. 309.▲
   by dekz 15y ago

   The most notable change is probably the RAM disk, anyone with an SSD would be able to agree that eclipse is fast (more usable) when running on a drive with an SSD. All that compile on the fly as you're typing would be quite IO bound. I use
10. 310.▲
    by dekz 15y ago

    > for people not familiar with EVE: Jita is the main trade hub of the game. Since EVE only has one server, that makes Jita the de-facto capital of the game, and it's main system. There are other simmilar (but smaller) trade hubs (Amarr
11. 311.▲
    by dekz 15y ago

    One of the fundamental ideas of cryptology is using the right algorithm for the type of data and the length of its required security. If the cost required to break an algorithm is greater than the value of of the encrypted data, you're prob
12. 312.▲
    by dekz 15y ago

    MacBook Air with an SSD?
13. 313.▲
    by dekz 15y ago

    >3ROT13 yes.
14. 314.▲
    by dekz 15y ago

    Probably when WebCL comes around.
15. 315.▲
    by dekz 15y ago

    Bcrypt uses salts. But your link is correct, attempting to roll your own crypto is getting all these companies caught out and bad crypto use is causing their users to suffer. I for one would now not feel safe using a password for more than
16. 316.▲
    by dekz 15y ago

    Attempting to hide it somewhere else doesn't really help when your whole system is compromised. Salting+hashing isn't the answer to 'how to store passwords so no hacker can ever get them', it's the answer to 'how to store passwords so it wo
17. 317.▲
    by dekz 15y ago

    I for one certainly wouldn't be going back. [MD5] is enough to tell me they only half heartedly care about securing user data, no matter how many buzz words they throw in now.
18. 318.▲
    by dekz 15y ago

    Are you sure it's salted? $1$ just seems to indicate that phpcrypt used a MD5 digest. If I were you I would do an MD5 digest of your password and compare it to see if it was actually salted. Considering it's MD5 and your account may potenti
19. 319.▲
    by dekz 15y ago

    Aren't the salts stored within the hash $type$salt$hash
20. 320.▲
    by dekz 15y ago

    That is the md5 digest of 'password'
21. 321.▲
    by dekz 15y ago

    I recently bought from OWC to be shipped internationally. It took 32 days and arrived a DOA drive and had consistent kernel panics (even when doing an initial clone). YMMV but if you're wanting to do an SSD upgrade, get ready to take into a
22. 322.▲
    by dekz 15y ago

    I voted your application just incase this still hasn't been resolved.
23. 323.▲
    by dekz 15y ago

    I read similar, but there is no excuse for that machine to be connected to the internet.
24. 324.▲
    by dekz 15y ago

    I don't think so. More a long the lines of not disclosing all the companies who may have had their seed stored as it would provide these intruders with a list of targets to attempt to phish their pins.
25. 325.▲
    by dekz 15y ago

    It's hard to tell from the information given if ALL seeds have been compromised or just SOME which RSA may have been holding.
26. 326.▲
    by dekz 15y ago

    > It's taken this long for the RSA Lawyers to allow a public statement Fixed that for you. Customers were notified and I believe many a secureid token was replaced, at least for all mission critical businesses. That letter to the public
27. 327.▲
    by dekz 15y ago

    And lets not forget linux mirrors which iinet also provide unmetered. I'm not sure if they will be able to mirror an update to Lion though, that would require some talks with Apple.
28. 328.▲
    by dekz 15y ago

    Which would just be circumvented with another jmp.
29. 329.▲
    by dekz 15y ago

    So say some data was comprimised such as a way of mapping serial to seeds for tokens. RSA/EMC then told the customers that some of the tokens may have been breached. Wouldn't you expect a "nation's largest military contractor" to attempt to
30. 330.▲
    by dekz 15y ago

    The only downside to print statements is forgetting to remove them and having some obnoxious message committed.