equivrel

7 ms·

1. 1.▲
   by equivrel 9y ago

   That's exactly the trick: the attacker doesn't send you their private key, they decrypt (using their private key) the other private key that the ransomware generated on your machine, which is what was used to encrypt the per-file
2. 2.▲
   by equivrel 9y ago

   This doesn't appear to be how WannaCry works: as ridiculous as it sounds, it looks like WannaCry actually generates a private key on the infected machine. If you look in search_primes.cpp (from line 251) in the linked repo, you'll
3. 3.▲
   by equivrel 9y ago

   The objects in boxes scenario you have described is useful to think about when coming to grips with QM and entanglement. However, one needs to be careful, because there is an additional subtlety: QM can have measurement scenarios that are n
4. 4.▲
   Googled created tool to track Syrian defections to help bring down Assad regime(independent.co.uk)

   1 points by equivrel 10y ago|0 comments
5. 5.▲
   by equivrel 11y ago

   Have a look at pass [1], it's a minimalist tool in bash that is so simple you can easily make adjustments to it yourself. The codebase is very small so it is easy to audit. The principle is that your password are encrypted with your pu
6. 6.▲
   by equivrel 11y ago

   Thanks!
7. 7.▲
   by equivrel 11y ago

   I'd love one! I've been really excited about this project for over a year but still in the invite queue :(.
8. 8.▲
   by equivrel 12y ago

   I don't see the harm in leaving the option in, given that for some applications a longer passphrase is critical (not everything can use iterated hash schemes: for instance if you want to deniably encrypt a hard drive partition to look
9. 9.▲
   by equivrel 12y ago

   Online bruteforcing is not feasible except for extremely weak passwords or sites with security vulnerabilities. What is feasible is bruteforcing stolen password hashes (think Adobe leak) or say a hard drive encrypted with a memorable passwo
10. 10.▲
    by equivrel 12y ago

    Don't forget that passphrases are also have security uses other than authentication: symmetric encryption of private keys, disk/file encryption, etc. where their use is pretty much unavoidable. Obviously a very long randomly-gener
11. 11.▲
    by equivrel 12y ago

    I would suggest increasing the maximum length from 5. Many applications that don't use iterated hashing schemes like PBKDF2 recommend much longer passphrases for security against brute-force [1]. [1] Off the top of my head: cryptsetup
12. 12.▲
    by equivrel 13y ago

    You probably mean homomorphic encryption[1]. [1] - https://en.wikipedia.org/wiki/Homomorphic_encryption