Viewing profile — afreak

Unless you have access to a mobile phone's baseband source code, you cannot really trust anything about its level of security. This was discussed on HN a while back and comes up qu…

(ignore what I said here)

Not the best link but here's something to chew on: http://www.universetoday.com/15403/how-long-would-it-take-to... >However, despite these advantages in fuel-efficiency and specifi…

Keep in mind that at best it would take maybe 1,000 years with current technology to get there with a probe or human-supporting ship. It would be highly unpopular however as it inv…

You're assuming that they have a vested interest in holding their Bitcoins for some greater good.

PBKDF2 is not for password storage.

If the server had bcrypt configured to take a second per password, multiple everything by 4. And so on. What I think is needed as a supplement to "use bcrypt / scrypt" is a "and us…

As part of a presentation I did at a local OWASP chapter, here are some numbers based on just using CPython's Hashlib processing of 14,000,000 someodd passwords: Intel Xeon E5-1620…

A weak password is a weak password no matter how good the hashing is. I think that you're referring to this bit from last year: http://www.pxdojo.net/2015/08/what-i-learned-from-cr…

No. You cannot effectively use the techniques you can use against SHA/MD5 to attack the three I mentioned. SHA and MD5 can be calculated entirely in a CPU's registers without havin…

There are several services (including one run by me). https://canar.io (mine) https://haveibeenpwned.com/ Mine lets you free-form search whereas HaveIBeenPwned is there for searchi…

Any developer today that is developing an application and isn't using something like Argon2, Bcrypt, or Scrypt should be considering a plan to move away from whatever they're curre…

> And I think that email is unbeatable, because it is federated, because it's governed by standards and because in spite of all constraints, it's quite adaptable, being the kind of…

> A few people will donate bitcoin. A few things can be bought directly with bitcoin. On average, you'd expect that the fraction of your income paid in bitcoin would be similar to …

> gratipay offers bitcoin payments, which, if they implement it right, would eliminate the middleman [...] when the financee cashes out using bitcoin And tell me, how does one cut …

> As far as unauthorized use of campus resources, I think the university would be better served by suing AT&T for failing to adequately protect its network. It is not the responsib…

It should be noted that what weev was doing is nothing new and is really just this: $ cat payload.ps |netcat -q 0 $printer_ip 9100 This is what was originally posted: https://stori…

WIND Mobile. The plan isn't offered any longer but there are similar ones available.