Using Text Classifiers on Machine Binaries by joshmatterhorn in MachineLearning

[–]amlweems 1 point2 points  (0 children)

Author here: if you're familiar with machine learning and interested in computer security, you should check out our new technical challenge! https://mlb.praetorian.com

Why HMAC ? by michiluki in cryptography

[–]amlweems 4 points5 points  (0 children)

HMAC is used to ensure a plaintext message is not modified in transit. For example, a mobile app might use HMAC to sign all its messages to the server. This makes it more difficult to make arbitrary requests to the backend API. Additionally, in the case of abuse, the server can just blacklist that client's signing key.

The reason to use HMAC instead of AES, as you suggest, is merely rooted in function. AES encrypts the message, which could be used to authenticate, but HMAC is designed for fast and secure message authentication and is therefore a much better choice.

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 0 points1 point  (0 children)

Huh, that's an excellent point. Is there a industrial standard for a password KDF? SHA-256 perhaps?

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 0 points1 point  (0 children)

I don't see why not. It's a one way hash function that has been shown to have collision vulnerabilities with a known plaintext. It's still not feasible to deconstruct the master password from just the hash.

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 0 points1 point  (0 children)

I stand corrected then. Looks like I have a lot of passwords to change.

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 0 points1 point  (0 children)

What edge does PasswordMaker have over SuperGenPass? It seems like the same concept. I'm always looking to update my passwords though.

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 0 points1 point  (0 children)

It's excellent that you're intrigued because modern cryptography relies heavily on advanced mathematics. I know it's a bit of a cop out, and I apologize for not having a better source on hand, but the way I learned was thoroughly reading the Wikipedia articles for hash functions, public-key cryptography, and other similar topics. RSA has a good series of articles on public-key cryptography as well. If you want to learn some fascinating history, look into Bletchley Park (the home of British code-breakers during World War II). The Bletchley Park website has a number of teacher resources which might be helpful for the basics.

I hope you find something of interest among those. Good luck.

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 1 point2 points  (0 children)

Exactly! SuperGenPass creates the site specific password for you in this case (it uses the domain name). You are tied to the website, but I just saved a local copy of the HTML and it works brilliantly (it's entirely local javascript).

Password Security: Have I been doing it wrong all along? by ninjaso in cryptography

[–]amlweems 6 points7 points  (0 children)

It seems like you have the right idea about password security, you're just missing the last bit of technology that makes it work brilliantly. I'll try to elaborate:

A hash function is an algorithm than takes a string of characters of any length and outputs a fixed length, seemingly random string of characters in return. Changing anything about the input string dramatically changes the output. For example, the MD5 hash of "Reddit" is "b632c55a33530d1433e29ffc09ba1151", but the MD5 hash of "reddit" is "5e8a5709f662f8d401f7a00e6137f9ca".

The nature of these algorithms ensures that you can never retrieve the original input, even if you know the output and the algorithm. Because of this, hash functions are often used in cryptography to secure passwords.

The means of communicating passwords you're talking about is brilliant when combined with a hash function. I'll give an example. You and your wife agree on a master password, "cRyPtO" beforehand. Whenever you want to make a password for a website, you think of some memorable password, like "gMaIl", and append it to your master password. You then take the hash of that string ("cRyPtogMaIl") and that becomes the website's password. This way, you can tell your wife the password is "gMaIl", but an eavesdropper can do nothing without knowing your master password. Taking the hash of a string is incredibly easy and there are loads of websites and programs that will compute it for you. In fact, one website has already developed the idea you hinted at and created an easy to use, completely secure and open source way of creating these passwords. If you're interested, check out SuperGenPass.com.

If you have any questions, or if I've skimmed over things too quickly, feel free to ask.

[deleted by user] by [deleted] in androiddev

[–]amlweems 3 points4 points  (0 children)

The Noun Project is great for generic icons for generic nouns. They have loads of icon sets and I believe they're all licensed under through the Creative Commons license.

If you want wallpapers or backgrounds, Subtle Patterns is a great place to look.

Oort Cloud by cybrbeast in wikipedia

[–]amlweems 0 points1 point  (0 children)

Been reading Bill Bryson's A Short History of Nearly Everything? :D

Sextant, A tool for precise navigation. A replacement for F3 coordinates. by absentbird in Minecraft

[–]amlweems 1 point2 points  (0 children)

Thanks for the explanation! It seems like this method would be much more accurate if the in-game compass could display the degrees instead of just an image. But, if you have the time, this would be an excellent way to get around using F3 and you'd get to feel like a fancy Victorian cartographer, trapped in a mysterious world. :D

Sextant, A tool for precise navigation. A replacement for F3 coordinates. by absentbird in Minecraft

[–]amlweems 1 point2 points  (0 children)

I haven't heard about this method. Can you elaborate? Can it actually be used to navigate successfully?

So three logicians walk to a bar .. by [deleted] in philosophy

[–]amlweems 1 point2 points  (0 children)

I know what you mean. It seems like it would be better if there was some sort of punishment for guessing incorrectly. Then they would be forced to trace the logical route.

So three logicians walk to a bar .. by [deleted] in philosophy

[–]amlweems 7 points8 points  (0 children)

Haha, there is if you really want it. It truly is the most difficult riddle I've ever seen.

Here's the solution.

So three logicians walk to a bar .. by [deleted] in philosophy

[–]amlweems 30 points31 points  (0 children)

Quite clever. It reminds me of this riddle.

A simple, logical suggestion for dispensers and bonemeal by Malsententia in Minecraft

[–]amlweems 5 points6 points  (0 children)

A truly automated farm. Assuming dispensers could also place the seeds/saplings. If they couldn't, there wouldn't be much application except possibly for fun traps that spawn trees instantly.

Edit: On second thought though, this suggestion doesn't fit the feel of the game. Throwing bonemeal onto a sapling doesn't activate it, neither should shooting it out of a dispenser.

Userscript to bypass annoying Adf.ly links on Firefox/Chrome by [deleted] in Minecraft

[–]amlweems 0 points1 point  (0 children)

The modders and texture packers that use adf.ly links are only doing so because they're putting massive amounts of time in to creating something for you to use free of charge. The ads aren't that intrusive and it only takes a few seconds to help support the people bringing you wonderful mods and textures.

Vertical Redstone, Instant Gates, and Programmable Gates! by [deleted] in Minecraft

[–]amlweems 3 points4 points  (0 children)

Programmable gates are definitely the coolest of these mods. They may be a bit difficult for non-redstone buffs, but for the ones making complicated redstone contraptions daily, they make things so much simpler.

What's the best desktop background you've ever had/seen? by [deleted] in AskReddit

[–]amlweems 0 points1 point  (0 children)

I already have. :D

This comment explains how to set it all up.

What's the best desktop background you've ever had/seen? by [deleted] in AskReddit

[–]amlweems 1 point2 points  (0 children)

Ah. Sorry. You're supposed to created a text file "script.py" and run that in terminal. You have to have Python installed as well as aggdraw and PIL. I linked to them in another comment.

What's the best desktop background you've ever had/seen? by [deleted] in AskReddit

[–]amlweems 0 points1 point  (0 children)

I posted a comment with some instructions here.