scovetta

8 ms·

31.
by scovetta 6y ago
Please join us, and help us do things. Seriously, our biggest challenge is that we need more folks like you, who will roll up your sleeves and help us get something tangible done "right now". Attend a working group and tell us t
32.
by scovetta 6y ago
There are active discussions around this, especially in the Securing Critical Projects working group ( https://github.com/ossf/wg-securing-critical-projects ). These resources will always be scarce relative to the number
33.
by scovetta 6y ago
I work at Microsoft and lead one of the OpenSSF working groups ( https://github.com/ossf/wg-identifying-security-threats ). We're always looking for folks to join the conversation and contribute to any working group
34.
by scovetta 6y ago
Hi! I'm leading one of the working groups for the OpenSSF (Identifying Security Threats) and I understand your point here. I hope I speak for everyone, that we want the larger community to be directly involved, and not have this be an
35.
by scovetta 9y ago
SHA-1 and MD5 are susceptible to collisions, not pre-image attacks, so replacing either with SHA-256 wouldn't really impact this scenario. The real question is whether they used iterated hashing (and to what degree), peppering, a keyed
36.
by scovetta 12y ago
I surely hope this isn't true.
37.
by scovetta 13y ago
Another option: route traffic through an external (authenticated) proxy.
38.
by scovetta 13y ago
Oracle's "fan base"? Only a lawyer...
39.
by scovetta 13y ago
I can't wait for the parody videos to show up on this.
40.
by scovetta 13y ago
SSL is only a minor speed bump when you have control over trusted root CAs or the ability for "force" installation of your own CA.
41.
by scovetta 13y ago
If you're paying $200 for an SSL certificate, you're doing it wrong. But I don't think any of the points of the article change for cost > $0.
42.
by scovetta 13y ago
What if the attackers were brute-forcing the username given a common password? Instead of: foobarjones:123456 foobarjones:passwd foobarjones:test Do: foobarjones:123456 drsmith:123456 ilikeorangejuice:123456 ...
43.
by scovetta 14y ago
I'm officially calling bullshit on the algorithm requiring "one quintillion variables".
44.
by scovetta 14y ago
Here's my solution: x=2233445566 y=7788990011 z=9988776655 6 * 6 = 36 (last digit stays the same) 1 * 1 = 1 (last digit stays the same) 5 * 5 = 25 (last digit stays the same) so: x^N ends with 6 y^N ends with 1 z^N e
45.
by scovetta 14y ago
The book The Science of Fear is also a great resource for learning about why people do the things they do. http://www.amazon.com/gp/product/0452295467/ref=as_li_ss_tl?...
46.
by scovetta 14y ago
This is a great example of how RIM is "doing it wrong". No one really cares about things like Flash, "Best HTML 5! OMG! like. EVER!", or "Most Secure E-Mail, Like, EVER!". People care about the user experience, the ecosystem (read: apps, fo
47.
by scovetta 14y ago
That reminds me of the recursive elevator sign: http://www.thescrabbled.com/posts/66891-The-Recursive-Escala...
48.
by scovetta 14y ago
Found Android! https://maps.google.com/maps?hl=en&ll=35.898541,-81.5479...
49.
by scovetta 14y ago
I remember using rubbing alcohol on a q-tip against both sides of the connector. That seemed to work well when blowing on it and rubbing it with your shirt didn't.
50.
by scovetta 14y ago
30% sounds like a lot, but that looked like about 300-400 milliseconds, which isn't very interesting. (That said, showing that you could port a native iOS app to RIM in X days would be an interesting metric, since the size of the App Store
51.
by scovetta 14y ago
That would rock, yes. (But why aren't there 2^oo columns? In order to fill up all possible ...<snap> I think I got it... You're not trying to use every possible oo-length binary string, you're just mapping each natural number to an
52.
by scovetta 14y ago
I never liked Cantor's argument here. I'm sure I'm missing something, but the 'grid' that you set up has infinity rows but 2^infinity columns. The diagonal that you make just cuts off the top-right corner of the grid, and that missing eleme
53.
by scovetta 14y ago
Little Bobby'); DROP TABLE Students;-- Null, always getting into trouble!