Viewing profile — tryeng

An annoyance, yes it is. But I think it's a good feature. Not making mistakes is the most important thing to improve your touch typing speed. If this annoying behavior makes you sl…

Base jumping!

You can of course do this trick in any base. If we choose e.g. base 2^n for the n-th row of pascals triangle, we can use the following code for getting the n-th row of pascals tria…

Hi, I see that I misread the "In order to retrieve the original password a hacker has to crack multiple hashes instead of only one." as your argument, not an example of a false arg…

Then I guess we might agree. The only advantage I know of with bcrypt over multple SHA2 is that GPUs are very bad at it compared to most hashing functions, so the CPU cost (on my s…

[Replying to ajanuary] Thank you, now I actually do see your point. I would still not think of it a considerable weakness. To find such a collision would take more time than brutef…

"With a single round of hashing, there are two possible inputs A1 and A2 that can produce the final output O." No, there is an infinite number of inputs that produce the final outp…

You can increase the number of rounds of hashing as well, without rewriting your code. I can't argue with your last point, simply because I don't understand it. How exactly does th…

His advice is good, but that's still no excuse for making invalid arguments for what he is advocating. Edit: In fact, if I hadn't heard of bcrypt before and saw that article, I wou…

I'm not saying that that bcrypt isn't a better choice, it is, but some of the "flaws" he is pointing out in that article are just ridiculous. If he's going to argue for something, …

That's not a good article to make people read. I find it strange that it doesn't mention lack of salting among the most common mistakes. Also, I didn't think SHA1 broken in any way…

Compression itself in a cryptographic protocol is not the issue here. The problem starts when you let an attacker add chosen plain-text before or after the secret in the same compr…

I don't believe it is a poor justification. It is a name chosen for this particular set of numbers. In fact, every name we've put on things in mathematics is "by definition". Real …

Well, the DCPU-16 does too: http://www.reddit.com/r/dcpu16/comments/sripk/rfe_dcpu16_v13...

No, it's just lack of security. There's no obscurity involved at all. (And, if there was any doubt, we should of course not count on people being nice on the internet.)

Nope. Security through niceness and ethics. If everyone was in on it we would have a really great society.

I don't think your PCI guy is overly strict. It's pretty clear that the intentions of the requirements are what you described. What might have worked, though, is to have virtual ma…

JPEG artifacts on the logo, The arrow images left to "Cloud", "Open", "Social" and "Secure" are not antialiased. The arrow in the search box is below the center of the box, and lot…