Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
6
Impact
~3k people reached

Jun
23
comment How can I solve “Your connection to 192.*.*.* is encrypted with obsolete cryptography”
Probably your certificate was signed using SHA1 instead of SHA2.
Apr
14
comment How to set default password algorithm to sha512 on Linux?
Note that plain SHA512 and SSHA512 are very bad password hashes. Personally I recommend using bcrypt instead, but if you want something based on SHA512, use SHA512Crypt.
Jan
29
comment Any disk encryption that locks itself for some time after a number of failed attempts?
If you trust it, the TPM chip built into many computers, might fulfill a similar role as the smartcard you mention.
Nov
6
comment How do I print pi (3.14159)?
@MichaelKjörling When you say O(1) don't you actually mean O(n)? The download time in linear in the number of digits you need, hence O(n).
Sep
24
awarded  Autobiographer
Sep
10
awarded  Supporter
Sep
5
awarded  Editor
Sep
5
revised How to configure Ruby to use the correct gemset or Ruby version on a per-project basis?
Fix typo in title and other cleanup
Sep
5
suggested approved edit on How to configure Ruby to use the correct gemset or Ruby version on a per-project basis?
Aug
6
comment How to rename file to .. (dot dot)?
@PTwr The windows story is trickier than that. Some special things happen at the file system level / NT API level, some in the Win32 subsystem and some and the shell level. For example the GUID magic from your second link is at the shell level, so you won't see them in a typical command line application. I'm not sure if . and .. actually exist in NTFS and the NT API or if they're only added by the Win32 API. I know that there are several discrepancies between the lower level NT API and Win32, for example Win32 hides several files from the drive root.
Jul
3
awarded  Commentator
Jul
3
comment Why doesn't GCM HTTPS work with nginx?
Do you know it's GCM that causes the problem? Choice of curves for ECDHE or hash algorithm for the RSA signature are potential failure points.
Jun
7
comment Is there a command line method by which I can check whether a downloaded file is complete or broken?
@Creek What I meant is that wget might think the download was complete, even if it broke. Proxies information about broken TCP connections vs. closed TCP connections which is problematic with HTTP since it uses closed TCP as end mark by default. That's why I added a check if the file size from the header matches the downloaded file size when I ran a mass download. Not sure if wget does such consistency checks or what the http spec says on this issue.
Jun
7
comment Is there a command line method by which I can check whether a downloaded file is complete or broken?
I expect this to not work when used with SOCKS proxies like tor.
Mar
24
comment How to reverse a string made of digit in bash?
I'm interested in how well rev understands text (and thus charsets and unicode), or if it simply operates on bytes. Consider an input which contains characters outside ASCII. For example with UTF-8, one code-point often maps to two bytes. If you reverse the bytes, that will produce a broken output. Same for legacy multi-byte charsets like they're common in Asia. Similarly if you have a letter followed by a combining diacritic, simply reversing the code-points means that it will combine with the wrong base letter.
Mar
24
comment How to reverse a string made of digit in bash?
Which definition of character does it use? Byte, code-unit, code-point, or does it even a full combining character sequence?
Mar
16
comment RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?
32 bytes read from a well seeded CSPRNG gives 256 bits of security (which is a damn lot). An RSA-2048 bit key only offers about 112 bits of security. The only dubious property of a /dev/urandom is that (on linux) it doesn't block before it's seeded directly after booting. Once it has been seeded it will remain secure forever.
Nov
20
comment Is there way to stop random software packages from remotely transferring your files?
I'd store high-value wallets on a dedicated computer that's kept offline. Use this comp to sign transactions, and a normal computer for the reading part. A friend uses a raspberry pi to store the wallet since it's simple and cheap.
Jul
5
awarded  Citizen Patrol
Mar
23
comment Why is there a big delay after entering a wrong password?
The difference between early and late failure while comparing a password hash is measured in nanoseconds. With proper coding(constant time memory comparison) there is no difference at all. That's no justification for adding a delay.