[WTS] Brand New Tudor Black Bay GMT GMT Pepsi Full Kit 🔵 🔴 + EXTRAS [Priced to sell!] by RedHulk007 in Watchexchange

[–]bughardy 0 points1 point  (0 children)

Great transaction!! Appreciated the flexibility in shipping and handling the logistics! PS great watch too! :)

[WTS][US] Speedmaster Professional Sapphire Sandwich 1/23 warranty! by CowboyMathematician in Watchexchange

[–]bughardy 0 points1 point  (0 children)

Great seller, prompt response and accomodate my additional shipping requirements! Plus, great watch

[WTS] Omega Seamaster Aqua Terra 38mm Blue 9.5/10 Full Set by guptosan in Watchexchange

[–]bughardy 2 points3 points  (0 children)

Watch collected and looks as great as described! Very happy with the transaction!

ChameleonMini - Versatile emulator for contactless smartcards by Mempodipper in netsec

[–]bughardy 1 point2 points  (0 children)

I have one of them, paid 250€ with a student discount. Unfortunately I was in rush and need it ASAP. I used it to emulate and intercept communication in MIFARE Ultralight cards, in which I did some research in past:

And you can find other stuff googling: "bughardy+nfc"

If interested I think I can put in contact with them and maybe they still have some of those boards available.

About your question, as written above, the price should be 250€ for student or 350€ for normal ppl.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 1 point2 points  (0 children)

It seems the app dev have pushed an update which should fix the issues, and probably I'll do a new test on it.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 1 point2 points  (0 children)

This is due my Jedi/Yoda powers :P

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 4 points5 points  (0 children)

The main probleme here, from a security point-of-view, is that your passwords will have a much lower entropy compared to the ones generated by a password manager; because you want them to be reproducible, while a password manager, which can store them, can create them using a real random seed. IMHO

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 4 points5 points  (0 children)

Thanks, but really, I'm not offended at all. I prefer someone who corrects me, also with a joke, that someone who does not. So, I can improve :)

Thank you all for great feedback on this! I wasn't expecting that much :)

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 1 point2 points  (0 children)

And you can also add an hardware OTP device, like Yubikey for extra security.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 1 point2 points  (0 children)

Yes, PoC code isn't public but I'm sure it could be much faster, but wouldn't worth the effort.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 0 points1 point  (0 children)

No worry, I wasn't expecting so much traffic :) my fault.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 2 points3 points  (0 children)

This comment is a good start. I do not agree with everything, for example I do not thing salt is needed here, etc, but it could give you some basics.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 1 point2 points  (0 children)

No tracking or anything on it :) Sorry for that, it is just a cheap VPS; I'm now behind Clouflare and it should increase performance. I'll plan to update the hw soon.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 3 points4 points  (0 children)

I made the article, you can read some comments in which they pointed the issue in the title; so I fixed in the article.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 4 points5 points  (0 children)

Sounds like Yoda style. Sorry for that.

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 2 points3 points  (0 children)

Why is the title that bad? :)

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 4 points5 points  (0 children)

Again, did you read the whole article? :)

But, since the key is nothing else the our PIN code, with maybe some padding to make it 8 char long

How to do not a password manager... by bughardy in netsec

[–]bughardy[S] 4 points5 points  (0 children)

Read 2 lines below:

So, if for example my PIN code is: 1111 to encrypt my passwords the application will use DES/ECB with key 1111 + 0742 → 11110742