quasque

9 ms·

91.
by quasque 12y ago
If you have modulus n and prime p, you can get the other prime q by dividing n by p. This gives you both primes, which is the input to RSA key generation (along with the public exponent which is usually 65537, but can be extracted from the
92.
Extracting OpenSSL private keys from core dumps(mcarpenter.org)
2 points by quasque 12y ago|1 comments
93.
by quasque 12y ago
I also got the Cloudflare private key with the same technique you describe, tried both incrementally increasing the payload size and choosing it at random (between 3 and 18427 bytes - anything higher than that triggered an alert). The incre
94.
by quasque 12y ago
The problem is not that they're refusing to revoke, it's that you're refusing to pay for the service.
95.
by quasque 12y ago
The author is running a business on the domains he's talking about (a crowdfunding site that takes a 3% fee [1]) so he should just regard it as an unplanned business expense and pay up if he feels it's so important for his certs t
96.
by quasque 12y ago
Also possible to verify using OpenSSL commandline: openssl s_client -connect 165.225.128.15:443 -showcerts \ -servername www.cloudflarechallenge.com (Though to fully check, you need to compare certificates with t
97.
by quasque 12y ago
It's using RSA with key length of 2048 bits [1], and one can assume that both prime factors have equal bit length [2] i.e. 1024 bits each, and so the size of all the other private components can be derived from that. I don't know
98.
by quasque 12y ago
I wonder if Cloudflare is logging all data sent to and from the challenge server, and then searching it for private key fragments. If not, they should be! As it's not guaranteed that a lucky attacker will be aware of receiving key mate
99.
by quasque 13y ago
If you're talking about unintentional contamination during manufacturing (for example http://en.wikipedia.org/wiki/Melamine#Melamine_poisoning_by_... ), Soylent would not necessarily protect against that. Though on
100.
by quasque 13y ago
I'm not asserting that there are no harmful chemicals at all in the food supply, just asking you which ones you consider the most problematic and widespread throughout our food network. (I didn't downvote anything in this thread,
101.
by quasque 13y ago
Just realised I accidentally deleted a line while I was reformatting, that should read: 0x18 TLS content type: heartbeat [*] 0x03 0x02 protocol version: TLS 1.1 [RFC 4346, section A.1] 0x00 0x03 c
102.
by quasque 13y ago
Which ones are you stating are harmful? It's not pedantic to ask if you have any good examples of the chemicals you are complaining about. Derailing the conversation with complaints of pedantry is, however, rather unhelpful.
103.
by quasque 13y ago
Yes but which ones in the food supply is your complaint with?
104.
by quasque 13y ago
> so few people eat a consistent diet of chemical-free, healthy whole foods. Just drinking Soylent to avoid the chemicals in our current food supply Everything is made from chemicals. Which ones are you referring to?
105.
by quasque 13y ago
Could you elaborate on how lazy evaluation is problematic for such a project?
106.
by quasque 13y ago
Good points, I agree my complaint about the hype was rather misguided.
107.
by quasque 13y ago
The ones intended for people who cannot eat properly due to ill health are trialled on healthy subjects as well. There are also more specialist products to suit certain medical conditions e.g. organ failure, but that's not relevant to
108.
by quasque 13y ago
You're right, I misworded. I should have said that I see no functional advantage to Soylent as it's already been done by many others already, and with more scientific evidence. I would be more trusting of their product if they had
109.
by quasque 13y ago
Does this work? http://www.justproxy.co.uk/index.php?q=aHR0cHM6Ly93d3cuZXZpZ...
110.
by quasque 13y ago
I don't really understand the hype over this product. This type of thing is already well established in the healthcare sector, see e.g. https://www.evidence.nhs.uk/formulary/bnf/current/a2-borderl... , wi
111.
by quasque 13y ago
It's requesting 0x4000 (16384) bytes. Here's what the bytes in the heartbeat packet sent by the PoC mean: 0x18 TLS content type: heartbeat [*] 0x03 0x02 protocol version: TLS 1.1 [RFC 4346, s
112.
by quasque 13y ago
I was also unhappy with their customer service from an incident a couple years back and won't be using them again. Not really sure why they get so many recommendations here.
113.
by quasque 13y ago
Thanks for the information. I modified the script to request a different number of bytes. It seems that 16384 is too much and causes the server to abort sending, but lower amounts work to successfully dump memory. EDIT: The other thing is t
114.
by quasque 13y ago
Is the vulnerability, or this script to exploit it, platform-specific? I tried this script against a Raspberry Pi running Raspbian with an unpatched OpenSSL library, but received an unexpected EOF.
115.
Bionic Kangaroo – energy-efficient jump kinematics based on a natural model(festo.com)
1 points by quasque 13y ago|0 comments
116.
Molten gold was poured down his throat until his bowels burst(ncbi.nlm.nih.gov)
2 points by quasque 13y ago|1 comments
117.
by quasque 13y ago
It may not have been. Throughout history up to the present day there has been much acquisition of wealth via slavery, war, corruption, and other such immoral acts. Wealth is not necessarily earned in as fair a manner as the word implies.
118.
by quasque 13y ago
The USA consists of less than 5% of the world population and is not a particularly representative sample. Not really sure why you're using it as a frame of reference to discuss poverty.
119.
by quasque 13y ago
I feel it's more a question of why should such a small handful of people control such a massive proportion of the world's wealth and power. Especially if it's some form of dynastic wealth. And then there is such a huge, sicke
120.
by quasque 13y ago
You raise a good counterpoint. Perhaps it's less to do with analogy and more to do with empathy. Which is again a subjective appraisal of the topic.

More ›