wizardishungry

5 ms·

1.
by wizardishungry 13y ago
Here's an openbsd VM with tor and a bunch of web browsers preinstalled. There's packet filter rules so even if the vagrant user gets owned, it cannot transmit traffic on the outboard network interface. https://github.co
2.
by wizardishungry 14y ago
A little bit of googling makes it seem like auth tokens are not sent it plaintext over HTTPS but are authenticated using challenge response – http://forums.dropbox.com/topic.php?id=47952 The WWW site may differ.
3.
by wizardishungry 14y ago
Obviously that would work, but not if you're using Challenge-response authentication. In general, I don't think people bother with now that when using https.
4.
by wizardishungry 14y ago
If the number of salts used in the system is equal to the number of users, this could be expensive.
5.
by wizardishungry 16y ago
I believe that I used to change drive letters to get around this but it may have eventually remembered the last directory when you changed back.
6.
by wizardishungry 16y ago
That seems like a perfectly good solution to me. Storing a hash of each signature is say 256 bytes and supposing an upper limit of 10,000 signatures, the database file is pretty small. (Better hope they sign the signature database though)
7.
by wizardishungry 16y ago
A free, integrated photo service would not appease a lot of people. Except for people who aren't web developers (aka Real Users®)
8.
by wizardishungry 16y ago
Holy Libertarian hyperbole: He convinces the FCC to require right-wing channels to link to left-wing channels, Christian channels to link to Muslim channels, vegetarian channels to link to meat-eating channels. "The [linking] icon itself wo
9.
by wizardishungry 16y ago
ITP is a joke coming from a CS background. It's good for internet fameball self-promoter types and people from an design/art background.
10.
by wizardishungry 16y ago
http://en.wikipedia.org/wiki/Internationalized_domain_name
11.
Unicode Holiday Xmas Tree(xmas.douglasthrift.net)
5 points by wizardishungry 16y ago|0 comments
12.
by wizardishungry 16y ago
Chrome is a risk? I'd say Chrome is a hedge against risk - allowing Apple, MS, Mozilla, etc. to dictate the terms of browser innovation.
13.
by wizardishungry 16y ago
Ruby invented strftime?
14.
by wizardishungry 16y ago
Wouldn't installing some arbitrary CA's root certificate open me to someone attacking me with say… a Paypal cert signed by them?
15.
Bradley Manning being tortured?(twitter.com)
5 points by wizardishungry 16y ago|2 comments
16.
by wizardishungry 16y ago
You wouldn't need 4096 if the choice of the salt was non-random; some versions of Unix used the first 2 characters of the username. What's the space requirement for a single rainbow table?
17.
by wizardishungry 16y ago
Does anyone have any more specific information on whether they just called crypt(key,salt) or actually used a larger salt with a call to encrypt()? The crypt() function only takes a 12 bit salt which is marginally helpful against rainbow t
18.
by wizardishungry 16y ago
The hash is md5 not sha
19.
by wizardishungry 16y ago
Does anyone have any information on changing all their account passwords at once? I don't use the same password for any sites, but unimportant sites like blogs, etc. I use fairly similar passwords on.
20.
by wizardishungry 16y ago
Generally, you're only required to provide changes if you are distributing your modified program. This may have been partially addressed in GPLv3 in the form of an "application service provider" clause, but I don't recall