Slashdot Mirror


User: roman_mir

roman_mir's activity in the archive.

Stories
0
Comments
16,118
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 16,118

  1. Re:Who doesn't hash/encrypt passwords? on OAuth, OpenID Password Crack Could Affect Millions · · Score: 1

    As I replied, the AUTH_KEY is actually salt, if you care you can check my reply above to some other doubter.

  2. Re:Who doesn't hash/encrypt passwords? on OAuth, OpenID Password Crack Could Affect Millions · · Score: 1

    You 'doubt' it's a hash?

    public static String encryptString(String toHash, String key) throws TCAppException {
        if (toHash==null || toHash.length()==0) {
            throw new TCAppException("Invalid parameter toHash.");
        }
        if (key==null || key.length()==0) {
            throw new TCAppException("Invalid auth key.");
        }
        String result = null;
        try {
            String s = toHash + key;
            MessageDigest m = MessageDigest.getInstance("MD5");
            m.update(s.getBytes(),0,s.length());
            result = new BigInteger(1,m.digest()).toString(16);
            result = new String(Base64.encodeBase64(result.getBytes()));
        } catch (NoSuchAlgorithmException e) {
            throw new TCAppException(e.getMessage());
        }
    }

    it's all it does. The 'key' is not really a key, I agree, it's a misnomer.

  3. Re:Who doesn't hash/encrypt passwords? on OAuth, OpenID Password Crack Could Affect Millions · · Score: 1

    Salt, you are looking right at it.

    AppConstants.AUTH_KEY

    Somebody getting a copy of my DB and getting the hash keys? That means they have access to my production server and I have bigger issues than some silly thing like them signing in as some user.

  4. Re:Who doesn't hash/encrypt passwords? on OAuth, OpenID Password Crack Could Affect Millions · · Score: 2, Interesting

    here is a solution I implemented a little while ago:

    public boolean isUserAuthenticated(User user, String password) throws TCAppException {
        String encryptedPassword = Encryption.encryptString(password, AppConstants.AUTH_KEY);
        if (user.getPassword().equals(encryptedPassword)) {
            return true;
        }
        return false;
    }

    User object contains password that is encrypted, the password that is passed as 'password' from the login page is also encrypted with the same algorithm Encryption.encryptString(...) the hash values are compared instead of the clear text passwords.

    This serves 2 purposes:
    1. The password is never actually stored in the system, only its one-way hash.
    2. It prevents this particular attack from working.

  5. Re:OpenID on OAuth, OpenID Password Crack Could Affect Millions · · Score: 1

    No no, it's all good, good thing /. is not US army though, otherwise Reason58 would be 'honorably separated' from this place in a short while.

  6. cost/benefit? on The REX Robotic Exoskeleton · · Score: 1

    An image in TFA has a guy in one of these exoskeletons standing and using a lathe or some sort of an electric sharpener tool. It's all good, but really, this REX thing is about $150,000 so that what, someone can use a lathe? I am not saying you shouldn't, I just don't see the cost/benefit if the idea is that people will get these expensive machine then to work in some low paying jobs sharpening knives or whatever.

  7. Re:Mac address filtering + strong password on Murdoch's UK Paywall a Miserable Failure · · Score: 1

    It's only sad for Murdoch, to me this is just a sign that my /.fu is strong.

  8. Mac address filtering + strong password on Murdoch's UK Paywall a Miserable Failure · · Score: -1, Offtopic

    well, that's why you only allow specific Mac addresses to access your router and set up a strong password to access the router. Of-course if router has other vulnerabilities and it's not updated, that's bad news.

    The good news is that OpenBSD is Free/free to use and everybody can use PF on it.

  9. Re:Terminology on Irish Gov't Invests In Color-Coded Fiber Optics · · Score: 1

    So you would prevent me from starting up a new company and setting up my own towers then, in your 'government is best' world?

    If a company spends money to build infrastructure, as long as public funds were not involved, this company has the right to use that infrastructure to compete with others. If public funds were involved, then government can dictate some of the rules and probably insist that the towers are made accessible to some competition at least.

  10. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    You are talking to one person here, this thread is not read by anybody else, and trust me, I see Schiff as a solution, not you, with your idea of public works. I was born in the USSR - a country of public projects, where is it now? Too bad, I guess, all of those public projects for nothing. The entire country was a gigantic public project, from space race, to arms race, to BAM (that's a railroad across the entire country) to everything. Government sure was in power, too bad it was violating the fundamental principles of economics - economy is self directing and self-correcting, it is a work of balance and any outside attempts at changing it for various 'moral' or 'religious' or any other reasons are doomed to a failure. Some failures come sooner than others.

    An overnight collapse of the dollar will hurt everybody somewhat, the difference is that people who understand that it's coming are diversifying so not to be wiped out because of it. More importantly is that the economies that are producers will recover quickly and will only be BETTER off once this gigantic dead weight is off their shoulders.

    Who is benefiting but the largest corporations and governments from US still being able to suck the money of nations out of those nations? Not the populations of those nations, that's certain.

    I see that US collapse is imminent, the best thing to do is be honest about it and start working to reduce the debt, start producing again, so that US economy is not a dead weight, but actually has production capacity that can really be interesting for other nations because they could again have a meaningful trade balance with US.

    However US has outspent itself, it has outfought itself, it has out-borrowed itself, it has brought its own political structure to a grinding halt, at this point it only exists on the whim of other nations, who both, provide the capital and the goods for that capital. It's amazing US still stands, I think the reason IS the army/navy/air-force of-course, it's inertia and presence via the military. This will pass and started passing and you know what, it was US's own doing, nobody else. It was US economy to lose.

  11. Re:To perfect this hack... on How the Mozilla Sniffer Backdoor Was Discovered · · Score: 1

    you think your activities will look the same as activities of infected PCs, but they won't. Something will stand out and you'll get caught, it's better not to do it from your own PC.

  12. Re:To perfect this hack... on How the Mozilla Sniffer Backdoor Was Discovered · · Score: 1

    And then, when you are in your headquarters, recovering the information from Google, your search will be recorded and later indexed by 'internet cops' or whatever.

    Make sure you don't do this from your headquarters directly.

  13. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    Dude, if it is so great, then why are you bothering here with me? You should just be happy, everything is going fine, all of that unemployment apparently is working great for the US 'jobless economic recovery' - the biggest oxymoron ever.

    Everything will be just fine, you'll have a nice slow recovery and there is no reason to believe that anything bad will happen to the dollar, no matter what the commodity prices are showing. Your savings rate looks just fine, never mind that it absolutely does nothing to show real inflation from all of this insane spending by your government, you are doing fine, your government will protect you from the next economic collapse, it's not going to happen any time soon, obviously the financial reform is going to work wonders, just like that health care reform, it's all good. The banks are back to being profitable, heck, half of the US GDP is probably their performance alone.

    Don't worry about it, you are exceptionally well positioned to have as good a life as ever and then some, look at all of these military troops around the world, who'll ensure your cheap gas prices and your never-ending stream of money borrowed from Asia/Japan/Germany, it's all good.

    Have fun, I really need to take off.

  14. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 0, Troll

    That's why his investors lost 40-70% in 2008 because they were bet hugely against the dollar.

    - right, you are the incoherent one, who could predict that government would decide to start printing like a maniac with a printing press? However you are wrong about something else: people who bet against US housing market won hugely.

    The world economy is radically different from what it was then, even from just 100 or even 50 years ago. But one thing hasn't changed since 1900: the principles of the Austrian School, of which Schiff is a devout follower. You're free to follow him off of a cliff, and as long as he's promising punishment for America, I'm sure you'll be glad to follow.

    - certainly the conditions are different, but economy is the same. Those who produce matter much more than those who consume. America did produce plenty, however lately (lately being for the past 40 years) it started falling off a cliff on that front.

    If you don't get it: I don't particularly care much, but I don't feel great joy just because people in America will suffer from its economic collapse. What you seem to completely misunderstand is that Schiff is offering a way to fixing the imbalance problems, so that the country can reemerge with a new production based economy. You want the country to stagnate, but in the current situation stagnation would mean something ridiculously terrible, a real collapse like the modern world hasn't seen. I am for fixing the economic problems that US is facing, it is medicine that will taste bitter, but it will need to be done. If Schiff wins (which I hope for and will try to help him) then it is a step in the right direction - he will try to fix the economy fundamentally, by allowing the country and people to save again, by getting rid of the insurmountable debt, by increasing production capabilities of the country. You think I want US to suffer for some pleasure of it all? I spent enough time in Florida actually to want to spend some more time there if possible, so the economic collapse of the country does not sit well with my plans.

    You are misguided in what you believe, it's not a surprise given the levels of your government's willful misunderstanding and desire to get rid of sound ideas in economy, which obviously do trickle down to the general public.

  15. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 0, Troll

    Again, the political realities are just as important as the economics. The world is much more interconnected than Schiff or you understand.

    - that's why you are the genius who predicted all of those economic calamities, having your own investment management company, managing at least 2Billion dollars and not Schiff. Wait, or is that the other way around? This is confusing, who is who here again?

    If the American economy falls apart, so does the rest of the world.

    - ha ha, what a narcissistic point of view. Before the USA even existed the rest of the world had its economy and once USA economy goes down the drain, the rest of the world will help it to build a new one, maybe a more sane one.

  16. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    By the way, here is an interesting development - seems like it's starting, a Chinese credit rating agency has downgraded credit worthiness of some western countries, including the USA. This is important, China is definitely more credit worthy than US right now, but obviously Moodies is not really doing credit analysis, they know which hand not to bite. This is one of the precursors to the US defaulting or hyper-inflating, as it will find it difficult to refinance its debt, which is all short term right now because US can't get debt like that financed for a long term, because those who finance that debt don't trust US in the long term.

    It's not like clockwork, but it has direction and that's what market forces are about.

  17. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    People value production, nothing changes that fact and the main US problem is loss of that valuable ability - ability to produce.

    The rest of the world does not need a money printer that produces nothing and only keeps borrowing and printing and then using those papers to buy actual produced/manufactured goods.

    Go ahead, start a war where it actually matters and see how fast the rest of the world stops financing you and stops sending you all that crap you want to own. You actually think you can SHIP energy, like Oil/Gas from one continent to another while being a warmonger that pisses off the rest of the world? Good luck with that. The main changes will come from the inside - from the pissed off US population, they will change the system once they don't have the bread and circuses (or whatever the modern equivalents of today - cheap gas and iPods.)

  18. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    You're not getting the whole point: the "fundamentals" of economics no longer exist.

    - thank you for that, I needed a laugh. Can you also tell me how the fundamentals of physics no longer exist now, that many people don't believe in it.

    Fundamentals of economics are working exactly as they do, by forcing a restructuring into the unbalanced equation that people created.

    You are completely wrong on the role of USA on the economy of the world at this point, USA can disappear tomorrow and the world would continue, of-course there would be a shakedown, but the world will be fine, in fact soon exactly something like that will happen. Asia will eat its own products and finally the quality of life for many people in China for example will skyrocket. Gold is a safe-haven commodity, it allows to store value through the rough times, USD will die, gold will be still gold and will be exchangeable for goods and services and other currencies in other parts of the world. In USA it certainly would make more sense owning gold/silver than USD specifically BECAUSE it would be one of the things that outsiders in other countries would accept as currency as opposed to the USD.

    US dollars represent about a quarter of a million highly trained soldiers

    - once the t-bills/bonds/debt matures and is no longer refinanced, I dare you to find a way to pay those mercs to actually fight something, for what, a daily meal? This is all beside a point. Attack a nuclear nation and you'll have a nuclear war. That's the important stuff, the great equalizer.

    You have convinced me, tomorrow morning I am donating $500 to Schiff for Senate campaign and I promise to spend an hour a day calling Republicans in Connecticut even though I not only don't live in his state, I don't even live in the US.

    Cheers.

  19. Re:No No No No No on Privacy Flaws In Chatroulette Expose Users · · Score: 1

    Yeah, if you expose them in public (and the Internet is in public) then the those are no longer your 'private', but instead they are your 'public' holes. There are quite a few.

  20. Re:Unit conversions on NASA's Juno, Armored Tank Heading For Jupiter · · Score: 1

    Are those African or European sides?

  21. Re:Unit conversions on NASA's Juno, Armored Tank Heading For Jupiter · · Score: 1

    They should have called it "Mars Polar Somehow Lander (or Faller)"

  22. Holly Shit! on Your Feces Is a Wonderland of Viruses · · Score: 1

    Women shit?

    then again

    what are women?

  23. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    He got 'lucky' with gold? Certainly he shouldn't be predicting exact numbers because nobody has an equation for that, but the only reason why DOW is NOT destroyed is all the bailouts and de-leveraging. You do not understand the fundamentals of economics, and he does and he follows them. But the fundamentals should not be used to predict exact numbers, since they don't take into account actions by outside forces (like a government.)

    America is too big to fail? :) No, it is not. It is going to fail and then it will have to rediscover itself and to rebuild itself. America will fail once nobody wants to refinance its short term debt at those very low interest rates any more and then US bonds and t-bills will be reaching maturity and will not be re-financed. This is going to happen, but of-course the exact dates and exact numbers are not important, what's important is that it is the path that America has chosen. THAT is why gold is going up, and predicting it is not 'being lucky'.

    Also that's very stupid, to think that voting for Schiff means the crash of the dollar. Voting for Schiff means getting the economy back into sane mode - not printing money, saving, repaying debt or declaring bankruptcy if the debt cannot be repaid, reinvesting into production capacity and getting the trade balance back to balanced levels.

    Schiff is right much more often than he is wrong, and where he is wrong is to assume that there will be no external force, like the government getting involved by printing money/bailing shit out, but he learned by now how the governments work as well.

    http://www.youtube.com/watch?v=2I0QN-FYkpw
    http://www.youtube.com/watch?v=qwUZ1_75gE4
    http://www.youtube.com/watch?v=Qtv6c0iKwYg
    http://www.youtube.com/watch?v=ADVEiTo7tDE
    http://www.youtube.com/watch?v=yxrDOT_t3Og&feature=related
    http://il.youtube.com/watch?v=pGof8-Vsc9Y

  24. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    What's it mean to me? I dunno, Nazis

    - that's because you are ignorant. Nazis is an idea separate from Fascist. Fascism came to Germany from the Italian example of using corporate money to run the political machine and to finance wars. Nazis - National Socialists, the kind who believe in biological superiority.

    Wow you really are the conspiracy type. You know that drops your believability by about half? But I agreed that Afghanistan would have been enough to justify all the guns we make. Iraq is simply too much.

    - so I guess it's a conspiracy that Halliburton, as an example, only in July of 2005 announced 284% increase in war profits. Yeah, people just fight wars because it's fun, not because it's massively profitable.

    Well then piss off and stop yapping about others' politics. I don't particularly care if it's bullshit, it WORKED. We're recovering, and now we just have to pay off some of this debt... oh shit!

    - yeah, it worked. It worked like cutting both legs and both arms works of a person who has gangrene but who then is chased by a pack of wolves and needs to get away from them.

    It worked? My god (and I am an atheist), you are so stupid. The Sun is as bright as you are economically challenged. It worked. The next wave of market correction that will hit, will hit a country that has no reserves, that has debt bigger than all other debts combined, that has almost no production capacity left and which at this point is so stupid, that it needs to die an economic death so that it can start reinventing itself from the ashes. Good luck with that shit.

  25. Re:This study is nothing but Communist propaganda on Given Truth, the Misinformed Believe Lies More · · Score: 1

    Well, of-course it is interference, but it is much more negligible interference than government printing any amount of money they wish without any value behind it, like for example US is doing.

    By the way, it is not just in this thread, I normally leave comments about economics on /. and elsewhere that are very similar, you can easily find many many more of them if you wish to read more of me. Go ahead.