Viewing profile — gmazzola

Ironically, I was very careful with my choice of "virus vs. virii" when I wrote that message. I looked up the Wikipedia article for Plural of Virus ( http://en.wikipedia.org/wiki/P…

Indeed. I figured this particular piece of news would interest both types of hackers, as it contains technical details you wouldn't expect from a standard defacement. It's rather s…

Page as it appeared on June 5, 2009 12:15AM EDT: http://pastebin.com/f751e9f5b The post is a little low on details concerning the actual exploit used, but there's pretty massive ca…

Internships are generally for University students, but it's not a completely strict rule. I worked with a going-on-thirty intern, a graduate student with a wife and a kid! You'll d…

If the password hashing scheme is secure (bcrypt, as tptacek repeatedly recommends) dictionary attacks become non-trivial and slow. It's still possible to brute force the database,…

From a theoretical security perspective, it's a terrible idea to store passwords in plaintext, but again there's a difference between theory and practice as you've stated. If your …

It could have been worse, fortunately. The attacker broke into a Twitter admin's Yahoo account, and used that information to gain access to the Twitter admin CP. Very little was co…

I've worked at a very large (60,000+ employee) company, so perhaps my background clouds my judgment somewhat, but I think requirements documents are quite helpful. The Software Fun…

Sadly, this is outside my area of expertise. I will nonetheless attempt to answer your question, but please take my words with a grain of salt. Before we even begin delving into tr…

I'm sorry if this response is off-topic, but your last question piqued my curiosity so I would like to answer it. There is an authoritative source of random numbers. In 1955, The R…