Slashdot Mirror

Shpx lbh, lbh ynml pbpx fhpxref. Dhvg ovgpuvat gung lbhe wbo vf uneq naq chfu gur obhaqnevrf bs grpuabybtl gb trg lbhe fuvg qbar. Sbe rknzcyr, frr gur uvfgbel bs gur Ravtzn pbqr naq gur ahpyrne obzo.

Fuck you, you lazy cock suckers. Quit bitching that your job is hard, and push the boundaries of technology to get your shit done. For example: see the history of the enigma code and the nuclear bomb.

Solved by pushing the boundaries of a technology button here.

Try something like "Kim Jong Un did 22 shits in his pants." - easily memorable, has upper case, lower case, numbers and punctuation. It has 186 bits of entropy according to this checker. Even without the spaces "KimJongUndid22shitsinhispants.", it still meets the upper/lower/number/punctuation requirements and has 152 bits of entropy.

Here's another strength testing page: http://rumkin.com/tools/passwo... It rates the passwords differently

According to a strength test, the password has only 49 bits of entropy, so it's surprising GCHQ couldn't crack it:

        < 28 bits = Very Weak; might keep out family members
        28 - 35 bits = Weak; should keep out most people, often good for desktop login passwords
        36 - 59 bits = Reasonable; fairly secure passwords for network and company passwords
        60 - 127 bits = Strong; can be good for guarding financial information
        128+ bits = Very Strong; often overkill

The checker had been posted on slashdot a while back [IIRC]:
http://rumkin.com/tools/password/passchk.php

English is a very big dictionary. AND I didn't say to use three nouns, but rather three words, I just happened to use nouns for this example. It could have been Mongoose Tokyo Nicolette.

http://rumkin.com/tools/password/passchk.php

For my original example, it shows it has 110 bits of entropy using only 26 set (non-capitalized) and 134 bits using three Capital Letters. My suggestion is that you go back and look at what entropy means regarding password strength. Granted, if you could guess three random words and run brute force against that password hash, it doesn't seem likely that you'd catch the password in any meaningful length of time. Then again, password hacking MY personal password would be much easier with the Hammer Technique http://xkcd.com/538/

Ultimately, no password is secure if you can't remember it without writing it down. And re-using the same password for all the systems you access is the worst possible choice one can make. The question then becomes, how important is the information being secured by passwords? Do you want to secure your pet's health records with 156 bit entropy random/pseudo random passwords, or will 1234abcd work just fine?

So, how many 100 bit entropy passwords can you remember without resorting to something like LastPass or writing them down?

No, it's far less than that, actually. This page says 109 bits of entropy, which sounds about right. More variation and larger character space would be better.

I think youre in direction. What you pointed out can be correct.
Lets try possibilities with this tool:
http://rumkin.com/tools/cipher/vigenere-keyed.php [rumkin.com]

There we have some known crypt algorithms to try with some possible keys and table shifts..
smith
smithy
code
Justice (J from Justice?)
J

take out A that is an "text begin mark" and the Z that is an "text end mark". So we have the phrase: eiextostgpsacgreamwfkadpmq to try with N combinations of the words above as key/shifters.

I think youre in direction. What you pointed out can be correct. Lets try possibilities with this tool: http://rumkin.com/tools/cipher/vigenere-keyed.php There we have some known crypt algorithms to try with some possible keys and table shifts.. smith smithy code Justice (J from Justice?) J take out A that is an "text begin mark" and the Z that is an "text end mark". So we have the phrase: eiextostgpsacgreamwfkadpmq to try with N combinations of the words above as key/shifters.

As stated above, there are plenty of uploaders out there that will allow you to upload your own programs. http://rumkin.com/tools/sprint/ is an uploader that will allow you to upload your own code (works with the A900...I've got one too). http://www.sprintusers.com/forum/ is the forum mentioned above that have a lot of Sprint phone user geeks...I'm sure a lot of people on there could help answer your questions. Here's a link to their page for alternate uploaders too: http://www.sprintusers.com/forum/showthread.php?t= 83030

Additionally, http://www.howardforums.com/ has a lot of good information too. Here's an actual http://sprintdevelopers.com/ Sprint-centric development site too.

Although, most of this may be useless, because I see in this post http://www.sprintusers.com/forum/showthread.php?t= 52772&page=1&pp=15 what you are talking about regarding the Verisign cert. You can run your own code, but to access the GPS stuff you are restricted. Hopefully someone in the above forums can help you out to bypass it. I'll keep an eye out, because that sounds like some pretty cool hacking to do.

As others have mentioned, PuTTY is just a single executable. If this still causes a problem (and it might; I know I can't use it at school), you also have the option of a Java based SSH client. Mindterm is the only one I know of, and it works fine provided you don't want advanced features. A quick google search will give you some options, or you can use this one.

if the phone has web service, you just use any of the freely available upload services out there to send .mid or .qcp files to your phone.

- Peter

It's very easy to turn sample files into ringtones for free. For Sprint PCS users, the Xingtone software just creates a GCD file (more info) and hosts is on a website for your phone to download. It converts the WAV file to Qualcomm PureVoice (.QCP) format (which you can do using Qualcomm's free converter for Windows and Linux). There's more info here.

That's where SquirrelMail Lite would be good. Just browse your way to your IMAP folders. http://rumkin.com/sm-lite/patch/readme.html.