-
“Skype vulnerability allowing hijacking of any account if you know just the email address” – password reset vulnerability reported in the wild
Skype vulnerability allowing hijacking of any account if you know just the email address.. Here’s the original link where I’ve read about this (in Russian) – http://habrahabr.ru/post/158545/ with multiple people in the comments confirming it works and also reporting their accounts were stolen. Here’s how it works: Sign up for a new Skype account. Use…
-
bcrypt’s [password] length limit is 72, not 55 #security
Quoth Solar: @alecmuffett bcrypt’s length limit is 72, not 55. The latter is an error originating from Blowfish’s 448-bit recommended maximum key size. — Solar Designer (@solardiz) November 14, 2012 I found the “55” number in some white paper but I was shocked at how hard it was to get any info on max plaintext…
-
The solution to password guessability is this…
Extracts from three other posts: Password Cracking in a Nutshell The solution to guessability – even via brute force – is to get users to choose unguessable passwords; for that [see extract below]. And those passwords that they choose must most certainly be defended with the best algorithms possible on the server side to help…
-
MI6: Truth in Advertising.
Full page advert for the Secret Service in Stylist Magazine this evening: I wonder where they insert the diodes?
-
Facebook Launches ‘Couples’ Pages So Users Can Chart Their Relationship # 1000 INTERNETZ FOR THE 1ST DIVORCE
HT Paul Bernal You’re in love and you want the world to know, now Facebook has created an ‘us’ page that lets you chronicle your relationship. The page combines every post, picture, and event that you have shared with your partner. It also includes your shared ‘likes’ and mutual friends. If you’re listed as “in…
-
“the fairly strong password she used … was crackable by brute force alone” # wait what?
According to various accounts, Petraeus engaged in an affair with Broadwell after he left the military to become CIA chief between September 2011 and the summer of 2012, apparently breaking off the relationship around the time he discovered that Broadwell had been harassing Kelley by email. Kelley had reported the anonymous threatening email to the…
-
Hot Chocolate with Pine Nuts and Pepper
Works. Surprisingly. Melt plain chocolate in a saucepan with milk and the above. Sugar to taste.
-
Arrested for poppy burning? Beware the tyranny of decency | Ally Fogg | Comment is free | guardian.co.uk
At 9pm last night, with a knock on the door of a 19-year-old man, Kent police hammered another nail into the coffin of free expression in the UK.Earlier in the day the unnamed man from Aylesham had allegedly posted a photo of a poppy being burned, with a crudely worded and crudely spelled caption. He…
-
today has been mired in unicode…
…you would think someone would have a simple copy-pasteable table of UTF-8 hex strings versus their (potential) HTML 4.0 entity encoding, but no. everyone and their dog has a queryable lookup script. bastards.
-
Up @ 0530? Make a basic pancake batter and…
…set aside to improve; have a small snack, go back to bed. Then make pancakes when you get up. Recipe. No excuses.
-
Thought For Today
All we need is a picture of Chris (Lord) Patten & Jimmy Savile together earlier in their careers, and the BBC will eat itself.
-
Perspectives: I’ve always said that Anti-Malware is a weird industry and that …
…and that the best way to make platforms proof against malware is to engineer them so that malware has an impossible task. Anti-Malware staffers hate that perspective; they would prefer that we consider computer viruses to be as inevitable as human ones – or, rather, they would prefer that nobody remind the public that computers,…