back
user profile
LinuxBender
57,650karma·19,241submissions·June 16, 2015
about
I am not for everyone. To ignore me in uBlock Origin, add to "My filters":
news.ycombinator.com##tr.athing.comtr:has(a.hnuser):has-text(/\bLinuxBender\b/)
(\_/)
(='.'=)
(")_(")recent activity (19,241 total)
comment
Sorry.
comment
If I were an intelligence agency or signal intelligence, I might argue for this so that I can narrow my attacks to one cipher. Perhaps the mafia or cartel would benefit from this. I can't imagi…
comment
> If a password already takes longer than the age of the universe to practically brute-force Give hashcat a go. Give me the hashes from HN. I bet we can break most of them in a day.
comment
If fixating on a specific cipher is considered to be a standard, then let's deprecate it. I believe that was done in error. The standard should be around how each cipher is implemented in a sec…
comment
I've never run across one that does, but that is certainly a risk too.
comment
Use whatever option you are comfortable with. I know people that can't bother to use more than 1 password everywhere and certainly can't use more than 6 characters.
comment
We will just have to disagree. With time, all passwords can be brute forced. If you change them periodically, using a pw manager and/or a strong methodology, then it becomes more expensive to k…
comment
> First and most importantly, you have the chronology backwards No, you and I are saying the same thing. Perhaps I worded it poorly? My point is they are fixating on a specific cipher they belie…
comment
NIST have an interesting history around security. One such example would be AES. They favored Rijndael over Serpent, despite Serpent clearly winning on technical merit. Also, Rijndael is the one ci…
comment
Unless my post is related to my workplace, I am certain my employer would just tell them to play hide and go f themselves and to stop wasting their time. This seems to me an attempt to get folks spun …
comment
Static content in a ram disk and haproxy+apache replicas grown as required. No CDN. Even the most "dynamic" sites in terms on non user-specific content can be turned into a static snapshot …
comment
Ransomware is doing a good job of partitioning sensitive data from those that should not be (mis)managing it.
comment
Right now, only a little bit. In the future, very likely. Systemd will eventually be functionally overloaded with network requests much like svchost.exe is (over)used on Microsoft Windows. That is j…
comment
So just like spam, malware and other shenanigans that would have been trivial to fix the root cause, we are instead going to wrap this with yet another business model? More power to the CDN's tha…
comment
Why not benefits of local and cloud, using only local? Just put your controls in a DMZ and allow SSH. I know, sounds too hard, but you could give people a simple config file and/or script that c…
comment
I am OK with this as well. If you put up a script on github and email an org, asking for help debugging and your script drops an ssh key, then daemonize a reverse tunnel running as that user to a VM …
comment
Stoplights are often installed after {n} number of people die at an intersection to justify the cost. Is that cool? Regulations are put on companies after their freedom of choice; when abused, starts…
comment
The person bricking IoT's isn't getting money from that. If they did, I would hope they or you did, I would hope each of you would donate to charities.
comment
Simplified to 15% across the board for businesses and individuals alike?
comment
Is there a way to get this legalized so that I can ask for this in my coffee and so that my state can reap the tax benefits from it?
comment
Will Pres. Trump also consider removing AMT?
comment
I've seen a few good presentation given on TED. David Grady's talk [1] on meetings is one such example. This is just my opinion, but unless I can be assured a return on my investment, I am …
comment
Where can I get some disease-free youngling blood?
comment
I've not been able to update my NVidia drivers ever since they started doing this. I don't allow outbound connectivity from software updates, nor from Nvidia, nor to any telemetry sites. T…
comment
I agree that humans will do what humans can do and bots will do what bots can do. Laws are murky and I don't wish to donate to lawyers. I believe engineering solutions when possible is the answ…
comment
I predict there will be more of this pattern with time. It doesn't take a rocket surgeon to realize a small UI dev team can slap something shiny in front of a simple IRC cluster then add their o…
comment
Maybe I misread the entire article, but the title is very misleading. This is not some new currency (in the senses of crypto-currency); but rather, virtual money to be used by all the Microsoft servic…
comment
Some day we may reach that point. Today, I deal with businesses that require us to enable a firewall restricted vip for them so they can use SSLv3. Some can't remove RC4 from SSH. Some use ant…
comment
Turns out, others beat me to this ages ago. There are already loads of scripts for automation of VPN's, proxies, etc. Search for Streisand, AutoVPN. There are also many scripts, including Ansib…