ryan-c

49 ms·

571.
by ryan-c 10y ago
Interesting. The hashes seem to be sha512crypt ($6$) in two flavors: One specifying 5000 rounds and using a fixed salt of 'usesomesillystri', and the other is... odd. It's in the format of '$6$rounds=50$....', which
572.
by ryan-c 10y ago
How can that possibly be that cheap even for just the raw components? The AVR chip alone is > $1 even in large quantity. Counterfeit parts?
573.
by ryan-c 11y ago
Netflix is contractually required to discriminate against customers based on where they are by the companies who they licence content from, for many reasons, a common one being the content already having been exclusively licensed for distri
574.
by ryan-c 11y ago
Xombrero seems to be unmaintained and has severe security problems. It's HTTPS implementation is vulnerable to MitM script injection. See my post here: https://rya.nc/https-script.html
575.
by ryan-c 11y ago
This is a hoax. I looked at the torrent file, the hash for every part is 7d76d48d64d7ac5411d714a4bb83f37e3e5b8df6, which is the sha1sum of 2MiB of zero bytes. I told Transmission to verify local data, and it now thinks it has the whole file
576.
by ryan-c 11y ago
Confirmed hoax. I looked at the torrent file, the hash for every part is 7d76d48d64d7ac5411d714a4bb83f37e3e5b8df6, which is the sha1sum of 2MiB of zero bytes. I told Transmission to verify local data, and it now thinks it has the whole file
577.
by ryan-c 11y ago
This has to be fake - the US doesn't have a driver's license database, each of the individual states do and they're not unified. I'm grabbing the torrent for lulz, one seeder using uTorrent Mac 1.8.7 at 87.229.219.94 (in
578.
by ryan-c 11y ago
Timing, maybe?
579.
by ryan-c 11y ago
The cert is valid, but the server is misconfigured (not sending the cert chain).
580.
by ryan-c 11y ago
That is an order of magnitude more effort than most people are willing to put into it. Try teaching a not-computer-savvy relative to use it and exchange email with them.
581.
by ryan-c 11y ago
Git's use of SHA1 is explicitly not intended to provide any security (per Linus), so this argument really doesn't make sense. On github, right now, I can commit as you all I want, no exploits required, and that seems like a much m
582.
by ryan-c 11y ago
I would expect most of the malicious traffic coming out of Tor isn't using Tor browser. I wonder what the attack numbers look like for Tor browser vs not Tor browser. Cloudflare has client side checks already, which could be extended t
583.
by ryan-c 11y ago
Traffic flow analysis would probably work quite well on reddit. They could confirm/deny with high confidence whether certain subreddits/posts are accessed without any need to decrypt, just by how big the responses are.
584.
by ryan-c 11y ago
I have an EnGenius EAP600 as my access point which allows for up to 8 SSIDs, each of which can be mapped to a different VLAN. It also supports a feature called client isolation, which prevents clients from talking directly to each other. Th
585.
by ryan-c 11y ago
I'm interested to see how this works out in practice. I would be concerned that some people have enough constraints it is likely that none of ten random other people would be an acceptable match.
586.
by ryan-c 11y ago
I bought an ODROID-C1 about a year ago. I was very frustrated that it wasn't supported in mainline Linux kernels - only a vendor kernel that was fairly far behind, and didn't support what I had intended to use it for. I'm n
587.
by ryan-c 11y ago
My opinion on cascade ciphers is currently neutral. If done properly, they are a nice hedge against currently unknown weaknesses, but a more complicated construction means more places to make mistakes.
588.
by ryan-c 11y ago
How are the 10 samples they send out selected?
589.
by ryan-c 11y ago
The paper that proves this, is actually called "Cascade Ciphers: The Importance of Being First". http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.36....
590.
by ryan-c 11y ago
Cipher cascades have been proven to be at least as strong as the strongest cipher, but only if you use commutative encryption - multiple stream ciphers (and/or block ciphers in counter mode) xor'd together. Truecrypt did not u
591.
by ryan-c 11y ago
Having set up and run an internal CA for a > 1000 person org that needed to issue a couple certificates a week, I would refute the "easy" claim.
592.
by ryan-c 11y ago
It says they're starting the account out with $2.50. I assume they'll bill in chunks when that is depleted.
593.
by ryan-c 11y ago
Threadjacking here, but I cannot make an account with a snkmail.com or sneakemail.com account. There's some sort of TemporaryEmailServiceDetected error coming from the backend, which is not what sneakemail is. Edit: They responded to m
594.
by ryan-c 11y ago
They seem to be filtering certain email providers. I tried to sign up with sneakemail (a paid email service) and the reg system told me "Please sign up with your personal email address." - when I entered a password. :-(
595.
by ryan-c 11y ago
From BIP32: > One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it is equivalent to knowing the parent extended private key (and thus eve
596.
by ryan-c 11y ago
> The Amazon Web Services (AWS) Free Tier is designed to enable you to get hands-on experience with AWS Cloud Services. The AWS Free Tier includes services with a free tier available for 12 months following your AWS sign-up date, as well
597.
by ryan-c 11y ago
How much of github do you index? I was just raging this morning about how annoying it is that github ignores symbols when searching.
598.
by ryan-c 11y ago
It seems like this is only anonymous as far as you trust FasTrak not to keep records. Your transponder will eventually fail to read going through a toll plaza. Then what? I see a couple options: * Resolve the toll evasion by associating you
599.
by ryan-c 11y ago
Honestly, this feels like a bait and switch that is mainly trying to convince people to donate more to charity and be more altruistic rather than "help make career decisions". If you want to convince people to give more, that&#x27
600.
by ryan-c 11y ago
Seems to be the same guy who made cloudflare-watch.com which was actually using cloudflare for a while.

More ›