meta user
network profile
| bio | website | github.com/CodesInChaos |
|---|---|---|
| location | Munich, Germany | |
| age | ||
| visits | member for | 1 year, 3 months |
| seen | May 6 at 12:10 | |
| stats | profile views | 5 |
- Jabber/XMPP: CodeInChaos@jabber.ccc.de
- IRC: CodesInChaos on freenode
- Email: My nick on gmail
- Blog: codesinchaos.wordpress.com
- GitHub: github.com/CodesInChaos
- Google+
- Twitter @CodesInChaos
|
Mar 23 |
comment |
Why is there a big delay after entering a wrong password? The difference between early and late failure while comparing a password hash is measured in nanoseconds. With proper coding(constant time memory comparison) there is no difference at all. That's no justification for adding a delay. |
|
Feb 15 |
awarded | Teacher |
|
Jun 19 |
comment |
Which Fedora CPU architecture should I choose? i386 or i686? Isn't a Pentium 1 a i586? |
|
Jun 18 |
comment |
What methods are used to encrypt passwords in /etc/passwd and /etc/shadow? Note that the crypt hashes based on SHA-2 are not plain SHA-2, which would be bad since plain SHA-2 is weak against dictionary attacks. The SHA-2 crypt schemes use the plain hashes as building block, but add a variable work-factor(to slow down dictionary attacks) and a salt. |
|
Feb 16 |
answered | Tool for measuring entropy quality? |
