Becoming physically immune to brute-force attacks (2021)
1–10 of 72 posts
Re: Becoming physically immune to brute-force attacks (2021)
#2I thought this would be about deadlifting.
Re: Becoming physically immune to brute-force attacks (2021)
#3Speaking of physically immune schemes, I remember some protocol which relied on a gigantic amount of data present behind a link that was, on purpose, very low bandwidth (physically low bandwidth: not by software as in rate limitation. That was the whole point: the link was physically low bandwidth).
So the data was impossible to exfiltrate remotely: it simply wasn't physically possible to do remotely (it would be way too slow).
I forgot the name and what the data was used to protect/derive: maybe some authentication scheme?
Anyone knows what I could be talking about? I'm pretty sure I saw that posted here on HN in the past.
Re: Becoming physically immune to brute-force attacks (2021)
#4Now do the wrench attack.
Re: Becoming physically immune to brute-force attacks (2021)
#5I thought this would be about deadlifting.
Real question: why?
Re: Becoming physically immune to brute-force attacks (2021)
#6I suspect this can be bypassed with knowledge about the size of the target system.
Intuitively, there are a finite number of passwords that can be stored on earth, so a large enough system should be able to enumerate them? Whilst also existing in the observable universe.
Re: Becoming physically immune to brute-force attacks (2021)
#7I thought this would be about deadlifting.
I know you're making a pun, but I will say one big benefit of deadlifting is a lot of things that would cause back-pain no longer do so. You don't have to lift a whole lot either, just enough to start building back muscles, and all of a sudden I can do things that would normally produce endless lower back pain.
Re: Becoming physically immune to brute-force attacks (2021)
#8Loving reading this but.. 'TLDR - at the bottom' is wicked
Re: Becoming physically immune to brute-force attacks (2021)
#9I suspect this can be bypassed with knowledge about the size of the target system. Intuitively, there are a finite number of passwords that can be stored on earth, so a large enough system should be able to enumerate them? Whilst also existing in the observable universe.
There are a lot of bits available on the earth.
Re: Becoming physically immune to brute-force attacks (2021)
#10I suspect this can be bypassed with knowledge about the size of the target system. Intuitively, there are a finite number of passwords that can be stored on earth, so a large enough system should be able to enumerate them? Whilst also existing in the observable universe.
By "target system" you mean "system from which the password originated", right? But unless you think true randomness is impossible, and also that all possible sources of pseudo-random input on Earth come from terrestrial sources and not, say, incoming cosmic radiation, then knowing the size of the "Earth" system is no constraint at all. A heuristic for focusing your search, maybe, if you think the password is likely to be something easily memorable for a human, but that's nothing to do with the size of the system, just commonly-transmitted information there.
The phrase "stored on Earth" is a red herring. You don't need to store all possible passwords for those passwords to be possible to generate here. And really, a consequence of the article is that if enumerating even a couple hundred bits is prohibitive, then enumerating all possible information that could be generated by and stored in an earth-size system, as you seem to be suggesting, is no better.