ryan-c

14 ms·

181.
by ryan-c 3y ago
https://en.wikipedia.org/wiki/Colossal_Cave_Adventure http://point-at-infinity.org/ssss/ DEF CON CTF quals is (or was) "Jeopardy" style with five categories with five problems each. The
182.
by ryan-c 3y ago
I've run CTF games at major conferences. The point is to solve the challenges by any means necessary within the rules... and that which is not forbidden is allowed. If I, as a person running a CTF, did not want my players to do this, I
183.
by ryan-c 3y ago
With weak (fast) parameters for the KDFs on the decoy passwords, I don't see how it would be annoying?
184.
by ryan-c 3y ago
Apparently it's possible to keep the key in the debug registers: https://en.wikipedia.org/wiki/TRESOR
185.
by ryan-c 3y ago
Even under abnormal circumstances, it can be written off. You're more likely to win several lottery jackpots in a row than to be bitten by that.
186.
by ryan-c 3y ago
Adding extra random characters to the end of the passphrase requires effort from the user, key derivation only requires them to wait. Ideally, one should use a strong passphrase with strong key derivation parameters. You're free to mak
187.
by ryan-c 3y ago
Also, if you want to be a troll, add some additional passwords (LUKS2 supports multiple) with weak KDF parameters that are generated like this: head -c48 /dev/urandom | base64 It won't add much to your unlock time, b
188.
by ryan-c 3y ago
The author clearly meant "cracked" rather than "brute forced". Password/passphrase cracking is done with sophisticated (and in cases like this one, likely tailored to the target) strategies that try more likely poss
189.
by ryan-c 3y ago
I would highly recommend setting the key derivation parameters to take as long as you can tolerate. For example: --pbkdf argon2id --pbkdf-memory 4194304 --pbkdf-parallel 4 --iter-time 60000 (4GiB memory cost - it's
190.
by ryan-c 3y ago
Anyone can submit these. https://datatracker.ietf.org/doc/draft-omar-ipv10/
191.
by ryan-c 4y ago
Wow. My ad blocker killed the cookie modal, I guess, but the site freaks out detecting that the videos that are supposed to auto play are not playing, and just keeps trying to reload them. Cursed.
192.
by ryan-c 4y ago
In 2006, it would have been netstumbler or kismet, and on 2.4GHz they're all in use in proximity.
193.
by ryan-c 4y ago
I'm glad people are still finding that post useful.
194.
by ryan-c 4y ago
That site doesn't generally have sufficient recent data, it's essentially saying device fingerprint is rare compared with data from older software versions.
195.
by ryan-c 4y ago
If someone thinks biological sex is binary, that shows they're uninformed. Like gender, it is essentially a point cloud in n-dimensional space - largely bimodal, but with a few other notable clusters. In the end, though, it doesn'
196.
by ryan-c 4y ago
> a different biological sex than what their DNA and gene expression shows Sex characteristics are expressed primarily via hormones. That is why, for example, a person with an XY chromosome karyotype and complete androgen insensitivity s
197.
by ryan-c 4y ago
The author, in fact, brought it up. The fact that he works with someone who has a problematic history is relevant to contextualize.
198.
by ryan-c 4y ago
The person who I replied to accused me of flagging their comments. I was not even aware I could flag comments until I looked it up just now.
199.
by ryan-c 4y ago
This has not been my experience - you cannot have data enabled outside the US for extended periods of time, but leaving SMS/voice enabled seems fine.
200.
by ryan-c 4y ago
This is either a bad faith argument, or extremely naive. Setting aside the question of whether social consequences should be held to the standard of "beyond a reasonable doubt", lack of visible prosecution does not mean lack of cr
201.
The Mosh team is pleased to announce the long-awaited 1.4.0 release(github.com)
8 points by ryan-c 4y ago|1 comments
202.
by ryan-c 4y ago
That seems like behavior that had to be actively added though, and I am extremely curious why.
203.
by ryan-c 4y ago
The secret is to travel with such a large quantity of homemade electronics that you get classified as "harmless nerd".
204.
by ryan-c 4y ago
This exists, and has monitoring, but won't do USB-PD: https://www.mini-box.com/OpenUPS There are, however, USB-PD sources that can run from a fixed voltage DC supply. I would actually really like something like this th
205.
by ryan-c 4y ago
> I just wonder how these people have no sense of embarrassment. In at least one case I know of, by being so outrageously competent that they know it won't hurt their ability to get a job.
206.
by ryan-c 4y ago
> There's definitely something going on here that needs to be addressed. I'm glad you agree that transphobia should be addressed! > People aren't just making this connection for no reason. Indeed, this rhetoric is bei
207.
by ryan-c 4y ago
> Apple don't ban web browsers from the App Store They do, in fact, ban web browsers other than Safari. I know what you're going to say - "Chrome is available for iOS". It's just Safari with a different UI. All t
208.
by ryan-c 4y ago
> Sometimes people have to learn the hard way This isn't reasonable or ethical - and it's telling you didn't respond to my other comment replying to you. If someone experiences harm due to use of unencrypted HTTP because t
209.
by ryan-c 4y ago
All desktop browsers I've tried. I don't have anything other than Chrome handy at the moment, but it definitely still works. You just need to click on the "Not Secure" warning that's where the lock symbol would be,
210.
by ryan-c 4y ago
Rewriting all https URLs to http is fairly trivial in the vast majority of cases, and I would imagine it would be adequate for this use case. In the case of retro computing especially, specially compiled software supporting legacy versions

More ›