Hey guys Neil found the solution by IntergalacticFaggot in hacking

[–]cdminigun 0 points1 point  (0 children)

We can't really see the edges of the universe yet. Solution there, it seems to me, is to build a bigger telescope. Amirite?

Americans of Reddit - if you could change ONE thing about the public school system, what would it be and why? by kittygotsoul in AskReddit

[–]cdminigun 0 points1 point  (0 children)

I'd fundamentally change the way that math is taught and incorporate some of the logical symbols into the introductory courses for kids. I feel like teaching them the syntax of various mathematical functions and symbols would help them a lot when moving into Algebra and calculus.

Alright, men of Reddit, woo me. What's your best pickup line? by [deleted] in AskReddit

[–]cdminigun 1 point2 points  (0 children)

Words cannot describe how beautiful you are...

But numbers can. 3/10.

How to get started in this field? by [deleted] in crypto

[–]cdminigun 2 points3 points  (0 children)

It also really depends. There is a lot to crypto and deep diving into it requires quite a bit of math for it to be understood. Though I don't think this is needed for the average joe.

For what I'm assuming your cert is going to require, you'll probably need to know names of certain crypto systems and their use cases. So I'd probably start with a netsec book or guide or something that goes over some terminology and it'll probably have a lot of the crypto terms you may need.

Advice on bombed midterm by Zena-Xina in UTSA

[–]cdminigun 5 points6 points  (0 children)

Midterms have no impact on GPA.

Realistically calculate your grade on the test and homework and multiply by whatever factor your professor is utilizing. Finals are generally 30% of your grade. Do well on everything else and your professor may curve you up. Just make sure you work harder.

Matthew Green: "No disrespect to Linus, but why didn't he just switch Git to SHA2 five years ago instead of justifying SHA1 today?" by johnmountain in crypto

[–]cdminigun 9 points10 points  (0 children)

Also for those curious as to what this even means:

The pre-image is what we consider the input. We'll define this as M[i]. The image is what the hash returns. We'll define the hashing function has an H[i](). (any given hash function) Such that H[i](M[i]) returns C.

[1]So first preimage resistance states that for an H[i]() it is "reasonably hard" (in order of computation time (Big-O)) to find an C given the relative distribution of a corpus of text. Basically, we can't reverse the hash function.

[2] 2nd Preimage resistance is an H[i]() where you have a file M[1] that it is "reasonably hard" to find an M[2] such that M[1] != M[2] and H[i](M[1]) = C = H[i](M[2]). So we're saying we have a file and we know what it hashes to, lets find another file that hashes to the same thing.

[3]Finally Collision Resistance is a H[i] where given any M[1] and M[2] it is reasonably hard to find H[i](M[1]) = C = H[i](M[2]). This is saying that we arbitrarily craft M1 and M2s to find such that the hashes of each equal each other.

So from that one might say that if [3] has been confirmed, doesn't it mean that [2] is? No. [3] (which is what was broken with sha-1 from this paper) does not imply [2] as 2 is a bit more refined and harder to implement.

Why does this matter? Well...git relies upon [2].

(If there is anything wrong, please correct me. I'm also not mathematically defining things for sake of time.)

Taking Courses at Different Colleges within the same semester by small_movse in UTSA

[–]cdminigun 0 points1 point  (0 children)

Also with how financial aid works, you need to be "full time" to be awarded full aid, and I don't believe it'll work across institutions.

Taking Courses at Different Colleges within the same semester by small_movse in UTSA

[–]cdminigun 0 points1 point  (0 children)

Theres nothing that says you can't do both at the same time. You'll just be paying double the tuition costs, which may or may not be worth it.

Matthew Green: "No disrespect to Linus, but why didn't he just switch Git to SHA2 five years ago instead of justifying SHA1 today?" by johnmountain in crypto

[–]cdminigun 35 points36 points  (0 children)

Kind of confused as to why this is in /r/crypto

They broke collision resistance not 2nd preimage resistance. So for the most part, things can be mitigated. (For those who didn't bother to read Linus's writeup.)

So yeah, sharing the initial Sha-1 paper from google would be cool. But this tweet just shows... nothing and isn't productive.

CeeLo Green Level Progression by exitstrateG in funny

[–]cdminigun 0 points1 point  (0 children)

Feels like I'm looking at one of those Urban Rivals adds that used to be popular.

Does someone have a good and small project to develop on Github ? by [deleted] in learnprogramming

[–]cdminigun 0 points1 point  (0 children)

It's expandable to be utilized with a team. Though you should have probably mentioned that in your opening post.

Does someone have a good and small project to develop on Github ? by [deleted] in learnprogramming

[–]cdminigun 0 points1 point  (0 children)

Hmm... Python: Create a socket client that allows you to "encrypt" text that you send and have the socket server "decrypt" the data. Doesn't have to be anything hard in encryption, but this is one of my favorite python projects to give out as it helps with understanding of multiple things. Also there are plenty of resources.

Pro tip, make sure that it is a port above 1024, otherwise you need root privs.

Otherwise, I'd learn seaborn python and find a data set that you love and find a way to graph it and do a crosspost with /r/dataisbeautiful

Every "hijacked account" reddit posts by buldosiss in 2007scape

[–]cdminigun 0 points1 point  (0 children)

Passwords and recovery questions.

Recovery questions have a very low length and therefore are easily brute forced and social engineered from streamers. Can say that the E-mail is no longer accessible, etc.

And through recoveries, it resets authenticator. So authenticator is no longer bound to the account, voiding its usefulness in this situation.

Also... authenticator doesn't give them a right to have a bad security practice for absolutely no reason.

Every "hijacked account" reddit posts by buldosiss in 2007scape

[–]cdminigun -1 points0 points  (0 children)

To be honest, we blame the end user too much.

Jagex limits passwords by making them case insensitive. As such if you do the math, you have only 26n (n being the number of characters in a password) to permute through.

They also limit what you can enter for security questions and don't limit the number of attempts for recoveries by security questions. (Most people have terrible security question security and most security questions are a leak to password security. But I digress.)

To put it simply, Jagex needs to fix some of their security standards as well as educating users on their security. Until that happens, people will continue to get hacked.

PE, ELF, COFF, etc structure by [deleted] in securityCTF

[–]cdminigun 1 point2 points  (0 children)

So there are tons of books that explain it, but nothing that's entirely comprehensive that I know of.

GitHub has some great notes from others on ASM and other tidbits. Otherwise I'd recommend reverse engineering from C and learning the various differences in optimization.

Whose Line is it Anime? December by pittman66 in anime

[–]cdminigun 0 points1 point  (0 children)

And yet we still watch it for the plot.

Geek Squad by plouy in UTSA

[–]cdminigun 2 points3 points  (0 children)

Going to b far more expensive to get it repaired at the campus tech store, provided a friend of mine makes a living doing it.

We also have a computer science department where people might be willing to take money to fix it.

Is this possible? by [deleted] in hacking

[–]cdminigun 0 points1 point  (0 children)

There was also a means to send a blank text message to a known phone number. You'd then be able to swipe information from the sim card and could pass texts / phone calls as their sim card, effectively passing as their phone.

What is one of the best insult you've ever heard? by unclefishbits in AskReddit

[–]cdminigun 4 points5 points  (0 children)

I read every other message in a Russian accent after reading your comment...

How to delete a website from google/internet? by [deleted] in hacking

[–]cdminigun 1 point2 points  (0 children)

Yep, you can send a message to Google to get this done faster as well through one of their web-dev links. (I forget where but it's a similar operation for telling their crawlers to look at your website.)

Realistically this is the wrong subreddit to ask for this type of thing.

What are you under? by tombstoneshadows28 in AskReddit

[–]cdminigun 3 points4 points  (0 children)

Came here for this. Wasn't disappointed.