CyberRage

8 ms·

1.
by CyberRage 3y ago
some information can be viable for longer than that, there are some extreme cases where 2~3 minutes would not suffice
2.
by CyberRage 3y ago
what is your point exactly? really bizarre response, if you don't have something good to say, don't.
3.
by CyberRage 3y ago
IMO good algorithms can only get you so far, even if you use modern high resistance hashing if your user uses 'password1234' it will be cracked, as computation power grows we need to use stronger and stronger passwords, this is a
4.
by CyberRage 3y ago
pointless because these modern algorithms support "Adaptable work factor" what it means is that you can control computational work to your likings you can set the option to compute a billion rounds for each password.
5.
by CyberRage 3y ago
I specifically didn't mention WebAuth... U2F(Yubikeys utilize it) and TOTP are both great options. even push to login is quite common these days. You have great options.
6.
by CyberRage 3y ago
Passwords are simple to implement and easy for users to adopt For a long time security wasn't a top priority for many companies if we are frank about this. Today we have standardized implementations and guidelines, we have many additio
7.
by CyberRage 3y ago
Seems like a rant to me. Passwords are used because they are convenient and intuitive. Once you use a 'password manager' you basically have a glorified key generator/storer We already have so many alternatives from GPG keys t
8.
by CyberRage 3y ago
It is not because: 1. TOTP is time based, after 30 seconds it means absolutely nothing, you cannot recreate the 'secret key' from that number 2. with TOTP everything is well-known. TOTP will usually generate a 6 digit 'secret
9.
by CyberRage 3y ago
There is one incorrect statemement that really bothered me TOTP and passwords are not the 'similar' because TOTP is a secret generated from the 'key' and is only valid for a short time period this make usage of that secr
10.
by CyberRage 3y ago
I see a ton of linux malware as part of my job but it's a different kind to windows malware(which I also reverse/research) in Linux the focus is on server/enterprise so things like webshells, miners, data scraping are very co
11.
by CyberRage 3y ago
Vast majority of malware doesn't use any exploits, let alone something like a zero-day Most of malware, logically, abuse common features within the operating system
12.
by CyberRage 3y ago
same is true for windows... zero day exploits are hard and get patched rather quickly in all major operating systems It is always the abuse of legitimate features which are the problem
13.
by CyberRage 3y ago
'this is not true in numerics' - shows no evidence... GPUs are gaining traction in FP workloads, it can be seen clearly with CPU/GPU data-center market share Moore's law is pretty much over, we can't simply print mo
14.
by CyberRage 3y ago
Honestly HPC moved to GPUs for most of the heavy FP compute for CPUs INT perf is king, even in HPC/enterprise
15.
by CyberRage 3y ago
heavily depends on the workload Some workloads can be accelerated via AVX-512 as shown here by Anandtech: https://www.anandtech.com/show/17601/intel-core-i9-13900k-an... See how AMD CPUs with AVX-512 enabled some
16.
by CyberRage 3y ago
quite a bit actually making two displays work properly with correct aspect ratio and refresh rate buggy UI components that needed restart from terminal Many features aren't fully accessible from the UI AFAIK I actually tend to interact
17.
by CyberRage 3y ago
Honestly, I can't see how GNU-Linux is going to ever replace something like Windows. The core issue is that Linux wasn't designed around regular consumers but rather around pros/techies This is why Android or even ChromeOS we
18.
by CyberRage 4y ago
"from an unprotected template" do you even read? stop trying to find some random internet page to justify yourself, have you ever seen a biometric implementation? I have.
19.
by CyberRage 4y ago
Really? can you back this up? I can. I work in the cyber industry for a decade now. I've seen the data, I've seen attempt to bypass both. Biometrics are by far better for the vast vast majority of people. Do you even listen to wha
20.
by CyberRage 4y ago
Well it depends on how you define replicate, I'm not aware of a technology that can perfectly recreate someone's face\fingerprint. a photo\mask isn't perfect and actually in some instances they fail to work vs sensors because
21.
by CyberRage 4y ago
I don't get the point... If someone steals your fingerprint, he stole your fingerprint. As I explained you can't get the fingerprint from the device\key, it is simply not there. This isn't the problem of the implementation\te
22.
by CyberRage 4y ago
That's governments for you(btw not only CA but other places as well) I would definitely be more worried about that than my biometrics on my phone.
23.
by CyberRage 4y ago
Let me follow up and say. why do people go nuts over biometrics? Password based biometrics is the last place I would look at for biometric compromise. We leave biometric traces everywhere, all the time. do you cover your face and wear glove
24.
by CyberRage 4y ago
But they are... Firstly, with how it works. even if you use the same finger to generate hundreds of keys, they should all be different because we are using noise\randomness within the algorithm itself. different sensors will generate differ
25.
by CyberRage 4y ago
I mean you don't have to give it away if you think Google is storing databases of fingerprints for the lizard masters to track you down. FIDO simply wants to make authentication stronger, you can use hardware keys that have a key burnt
26.
by CyberRage 4y ago
Oh gosh... your raw bio-metrics are never stored anywhere... The signal from the sensor is used as a "seed" to generate key using robust cryptography Different sensors will output different "data" based on the sensor typ
27.
by CyberRage 4y ago
how FIDO has anything to do with google in particular? log in with google is not FIDO authentication...
28.
by CyberRage 4y ago
From a theoretical point of view or practical? Username is simply an ID. Password is how we truly verify who the user is. Bio-metrics are just convenient because they are unique and hard\impossible to replicate.
29.
by CyberRage 4y ago
MITRE has published their latest Attack evaluation with all leading security vendors tested against two simulated APT groups. The evaluation tested both detection and prevention capabilities
30.
Mitre ATT&CK 2022 Evaluation(attackevals.mitre-engenuity.org)
2 points by CyberRage 4y ago|1 comments

More ›