tryeng

7 ms·

1.
by tryeng 11y ago
An annoyance, yes it is. But I think it's a good feature. Not making mistakes is the most important thing to improve your touch typing speed. If this annoying behavior makes you slow down and stop making mistakes, instead of using back
2.
by tryeng 12y ago
Base jumping!
3.
by tryeng 13y ago
You can of course do this trick in any base. If we choose e.g. base 2^n for the n-th row of pascals triangle, we can use the following code for getting the n-th row of pascals triangle: def pascal(n): base = max(2, 2**n) r
4.
by tryeng 13y ago
Hi, I see that I misread the "In order to retrieve the original password a hacker has to crack multiple hashes instead of only one." as your argument, not an example of a false argument. I stand corrected. Regarding the cost, bcrypt only in
5.
by tryeng 13y ago
Then I guess we might agree. The only advantage I know of with bcrypt over multple SHA2 is that GPUs are very bad at it compared to most hashing functions, so the CPU cost (on my server) and the GPU cost (the crackers' cost) are not too dif
6.
by tryeng 13y ago
[Replying to ajanuary] Thank you, now I actually do see your point. I would still not think of it a considerable weakness. To find such a collision would take more time than bruteforcing any likely password. There doesn't yet exist a single
7.
by tryeng 13y ago
"With a single round of hashing, there are two possible inputs A1 and A2 that can produce the final output O." No, there is an infinite number of inputs that produce the final output O. And you have to find something that produces O after e
8.
by tryeng 13y ago
You can increase the number of rounds of hashing as well, without rewriting your code. I can't argue with your last point, simply because I don't understand it. How exactly does this "turn something that has a low number of collisions into
9.
by tryeng 13y ago
His advice is good, but that's still no excuse for making invalid arguments for what he is advocating. Edit: In fact, if I hadn't heard of bcrypt before and saw that article, I would probably not trust his advice either.
10.
by tryeng 13y ago
I'm not saying that that bcrypt isn't a better choice, it is, but some of the "flaws" he is pointing out in that article are just ridiculous. If he's going to argue for something, he should be using correct arguments.
11.
by tryeng 13y ago
That's not a good article to make people read. I find it strange that it doesn't mention lack of salting among the most common mistakes. Also, I didn't think SHA1 broken in any way that makes breaking password hashes easier than e.g. the S
12.
Largest Known Prime, 48th Known Mersenne Prime Found(mersenne.org)
1 points by tryeng 14y ago|0 comments
13.
by tryeng 14y ago
Compression itself in a cryptographic protocol is not the issue here. The problem starts when you let an attacker add chosen plain-text before or after the secret in the same compressed and encrypted stream. Compression before encryption is
14.
by tryeng 14y ago
I don't believe it is a poor justification. It is a name chosen for this particular set of numbers. In fact, every name we've put on things in mathematics is "by definition". Real numbers, pi, odd numbers, perfect numbers. Someone found th
15.
by tryeng 14y ago
Well, the DCPU-16 does too: http://www.reddit.com/r/dcpu16/comments/sripk/rfe_dcpu16_v13...
16.
by tryeng 14y ago
No, it's just lack of security. There's no obscurity involved at all. (And, if there was any doubt, we should of course not count on people being nice on the internet.)
17.
by tryeng 14y ago
Nope. Security through niceness and ethics. If everyone was in on it we would have a really great society.
18.
by tryeng 16y ago
I don't think your PCI guy is overly strict. It's pretty clear that the intentions of the requirements are what you described. What might have worked, though, is to have virtual machines inside the EC2 instances in your VPC, and use this to
19.
by tryeng 16y ago
JPEG artifacts on the logo, The arrow images left to "Cloud", "Open", "Social" and "Secure" are not antialiased. The arrow in the search box is below the center of the box, and lots of other minor issues that makes it look really awful.