You're adorable candyjapan. I want to bounce you on my knee. When you eventually run a biz that doesn't just generate millions in revenue but is massively profitable, give me a shout and let me know if you still feel…
For the love of god give us all the TL;DR, the site is awful.
"I want to believe." ~Poster on Mulder's wall. You can interpret "get's away with" as "makes better business sense". On a slight tangent - in the infosec space those with closed source products (e.g. WAF's) laugh at…
Hey don't diss xor. If the key is at least as long as the message and is used once, it's unbreakable.
Not true re GPU bandwidth/dictionaries. see cudahashcat - we're using it on a switched PCIe bus feeding dictionaries with plenty of bandwidth. You're not limited to mask attacks, which is what you're describing.
The whole idea of salts is to prevent rainbow table attacks i.e. you can't use precomputed hashes. In this case you'd need to precompute an SHA256 of a dictionary of scrypt hashes which would have been computed from a…
mrb, this is awesome, thanks for sharing. Can you comment on storing the scrypt as an md5 hash and how that would impact security? [Asking because I'm confined to server side systems that only support md5] IMHO While…
You're adorable candyjapan. I want to bounce you on my knee. When you eventually run a biz that doesn't just generate millions in revenue but is massively profitable, give me a shout and let me know if you still feel…
For the love of god give us all the TL;DR, the site is awful.
"I want to believe." ~Poster on Mulder's wall. You can interpret "get's away with" as "makes better business sense". On a slight tangent - in the infosec space those with closed source products (e.g. WAF's) laugh at…
Hey don't diss xor. If the key is at least as long as the message and is used once, it's unbreakable.
Not true re GPU bandwidth/dictionaries. see cudahashcat - we're using it on a switched PCIe bus feeding dictionaries with plenty of bandwidth. You're not limited to mask attacks, which is what you're describing.
The whole idea of salts is to prevent rainbow table attacks i.e. you can't use precomputed hashes. In this case you'd need to precompute an SHA256 of a dictionary of scrypt hashes which would have been computed from a…
mrb, this is awesome, thanks for sharing. Can you comment on storing the scrypt as an md5 hash and how that would impact security? [Asking because I'm confined to server side systems that only support md5] IMHO While…