Viewing profile — CyberRage

some information can be viable for longer than that, there are some extreme cases where 2~3 minutes would not suffice

what is your point exactly? really bizarre response, if you don't have something good to say, don't.

IMO good algorithms can only get you so far, even if you use modern high resistance hashing if your user uses 'password1234' it will be cracked, as computation power grows we need …

pointless because these modern algorithms support "Adaptable work factor" what it means is that you can control computational work to your likings you can set the option to compute…

I specifically didn't mention WebAuth... U2F(Yubikeys utilize it) and TOTP are both great options. even push to login is quite common these days. You have great options.

Passwords are simple to implement and easy for users to adopt For a long time security wasn't a top priority for many companies if we are frank about this. Today we have standardiz…

Seems like a rant to me. Passwords are used because they are convenient and intuitive. Once you use a 'password manager' you basically have a glorified key generator/storer We alre…

It is not because: 1. TOTP is time based, after 30 seconds it means absolutely nothing, you cannot recreate the 'secret key' from that number 2. with TOTP everything is well-known.…

There is one incorrect statemement that really bothered me TOTP and passwords are not the 'similar' because TOTP is a secret generated from the 'key' and is only valid for a short …

I see a ton of linux malware as part of my job but it's a different kind to windows malware(which I also reverse/research) in Linux the focus is on server/enterprise so things like…

Vast majority of malware doesn't use any exploits, let alone something like a zero-day Most of malware, logically, abuse common features within the operating system

same is true for windows... zero day exploits are hard and get patched rather quickly in all major operating systems It is always the abuse of legitimate features which are the pro…

'this is not true in numerics' - shows no evidence... GPUs are gaining traction in FP workloads, it can be seen clearly with CPU/GPU data-center market share Moore's law is pretty …

Honestly HPC moved to GPUs for most of the heavy FP compute for CPUs INT perf is king, even in HPC/enterprise

heavily depends on the workload Some workloads can be accelerated via AVX-512 as shown here by Anandtech: https://www.anandtech.com/show/17601/intel-core-i9-13900k-an... See how AM…

quite a bit actually making two displays work properly with correct aspect ratio and refresh rate buggy UI components that needed restart from terminal Many features aren't fully a…

Honestly, I can't see how GNU-Linux is going to ever replace something like Windows. The core issue is that Linux wasn't designed around regular consumers but rather around pros/te…

"from an unprotected template" do you even read? stop trying to find some random internet page to justify yourself, have you ever seen a biometric implementation? I have.

Really? can you back this up? I can. I work in the cyber industry for a decade now. I've seen the data, I've seen attempt to bypass both. Biometrics are by far better for the vast …

Well it depends on how you define replicate, I'm not aware of a technology that can perfectly recreate someone's face\fingerprint. a photo\mask isn't perfect and actually in some i…

I don't get the point... If someone steals your fingerprint, he stole your fingerprint. As I explained you can't get the fingerprint from the device\key, it is simply not there. Th…

That's governments for you(btw not only CA but other places as well) I would definitely be more worried about that than my biometrics on my phone.

Let me follow up and say. why do people go nuts over biometrics? Password based biometrics is the last place I would look at for biometric compromise. We leave biometric traces eve…

But they are... Firstly, with how it works. even if you use the same finger to generate hundreds of keys, they should all be different because we are using noise\randomness within …

I mean you don't have to give it away if you think Google is storing databases of fingerprints for the lizard masters to track you down. FIDO simply wants to make authentication st…