ryan-c

68 ms·

721.
by ryan-c 11y ago
The Henry classification system seems to be useful only as an index to reduce the number of fingerprints a human investigator needs to compare against. It looks like it is expected to frequently have collisions.
722.
by ryan-c 11y ago
I doubt that there is an algorithm that can consistently turn any good image of the same fingerprint into the same stream of bytes.
723.
by ryan-c 11y ago
Someone should make an LD_PRELOAD hack for this. I might try throwing one together this weekend if someone doesn't beat me to it.
724.
by ryan-c 11y ago
I suspect that is a parody and you have been trolled.
725.
by ryan-c 11y ago
There are things other than irresponsible spending that can result in debt collectors calling. For example, moving frequently can result in bills getting lost. I've had this happen with medical bills a few times (they sometimes don&#x2
726.
by ryan-c 11y ago
This is to prevent files on a 3rd party CDN from being loaded if they've been replaced with malicious ones.
727.
by ryan-c 11y ago
If they're going to release the signing keys, why bother with signing?
728.
by ryan-c 11y ago
Have you ever seen a phishing attack that actually asks for and uses the two factor auth code? I don't deny that this is possible, I've just never seen it.
729.
by ryan-c 11y ago
I would assume that Venmo would try to pull the funds back from the bank account in that case. I know that happens with paypal. I have my paypal account linked to a subaccount with my bank that is only used for paypal to address that.
730.
by ryan-c 11y ago
Generally these things work by creating a master key to encrypt the data. The master key is then encrypted with a key derived from the password. To change the password the master key just needs to be reencrypted.
731.
by ryan-c 11y ago
There are stories of really old hard drives being made to move around a room with abusive disk access patterns. http://www.catb.org/jargon/html/W/walking-drives.html
732.
by ryan-c 11y ago
I saw a few that were definitely not matte in there.
733.
by ryan-c 11y ago
I'm in the US and in the (admittedly few) jobs I've had in tech swearing hasn't been a problem so long as it's in conversation. Losing one's temper and swearing at someone is a different story, however I'd ar
734.
by ryan-c 11y ago
Are you this guy's former boss? Saying "pay me $X or I walk" is not "blackmail", it's an ultimatum. Not the same thing.
735.
by ryan-c 11y ago
I think SSDs call them pages. Some brief googling seems to indicate that 16KB is a common page size, so if the cluster size is also 16KB it's probably not too bad.
736.
by ryan-c 11y ago
Neat, I wasn't aware of bisqwit's hack. Looks like he supported FAT12 and FAT16 but not FAT32, whereas I only supported FAT32. His has better status information.
737.
by ryan-c 11y ago
In theory, you could make the disk performance even worse by alternating between the beginning and end of the disk, though you may need to do a little tweaking to ensure this doesn't inadvertently allow read-ahead to help.
738.
by ryan-c 11y ago
(I wrote this horrible thing) It's pretty horrendously bad on spinning rust - you get very, very close to 100% fragmentation, so the disk has to seek for each cluster. A lower bound average on seek time is probably something like 4ms,
739.
by ryan-c 11y ago
It should probably have a big fat "I wrote this to learn, it's probably not secure" banner at the top of the readme.
740.
by ryan-c 11y ago
A 51% attack will let you double spend and roll back transactions. If one wanted to steal an established name on Namecoin, they'd need to either roll back to before it's registration, roll back to before it's previous renewal
741.
by ryan-c 11y ago
I agree. There are whole classes of problems that are not at all obvious until one has spent time learning how to break bad crypto. Matasano's challenges[0] (which I think tptacek helped create) are a good start. 0. http://c
742.
by ryan-c 11y ago
It's awful crypto and it made me throw up in my mouth a little bit. They should be using RSA to encrypt a random key then encrypting the rest of the message with some sort of authenticated encryption.
743.
by ryan-c 11y ago
function encrypt(public_key, file) { var pem_pub_key = sshKeyToPEM(public_key); // convert rsa to pem var chunks = []; var buffer = new Buffer(fs.readFileSync(file, 'utf8')); /&#
744.
by ryan-c 11y ago
https://github.com/ryancdotorg/ssh-chain should just work with this.
745.
by ryan-c 11y ago
Birthdays are not uniformly distributed. http://www.panix.com/~murphy/bday.html
746.
by ryan-c 11y ago
Well it isn't my code, which does not have that bug. Apparently it is possible to update other peoples gists? WTF? I've emailed the author to fix the link. I've also fixed the gist. No idea how that got there. Mine is here:
747.
by ryan-c 11y ago
OpenSSL allows (by virtue of doing nothing to check for) composite p and/or q for RSA keys. Is there something here beyond "if you use parameters from an untrusted source you might have a bad time"?
748.
by ryan-c 11y ago
That only works in your changed version because it incorrectly uses MASTER_PUB_HEX as a private key.
749.
by ryan-c 11y ago
If anyone's particularly bored, the password, from which the master key used in my original backdoor is derived, should be fairly easy to crack. It is eight nonrandom characters.
750.
by ryan-c 11y ago
Android's built in tethering absolutely does explicitly tell T-Mobile you're using it. http://danielpocock.com/android-betrays-tethering-data

More ›