Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
flakeloaf
Feb 26, 2003

Still better than android clock

maskenfreiheit posted:

people often use pet names as passwords, which is bad due to low entropy

the obvious solution is to name your pet a long string consisting of uppercase letters, lowercase letters, numbers, and symbols

my new dog's name is 1وَمَا مِن دَآبَّةٍ فِي الأَرْضِ وَلاَ طَائِرٍ يَطِيرُ بِجَنَاحَيْهِ إِلاَّ أُمَمٌ أَمْثَالُكُم مَّا فَرَّطْنَا فِي الكِتَابِ مِن شَيْءٍ ثُمَّ إِلَى رَبِّهِمْ يُحْشَرُونَ

also i'll be the person with a unicode password trying to log in on a laptop with no numpad

Adbot
ADBOT LOVES YOU

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Powerful Two-Hander posted:

do u have a skul gun?

This

Dodoman posted:

What happened to your 💀?

but mostly this

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

pr0zac posted:

Did you really take Subjunctives joke quoting "it doesn't have GPS tracking" as a serious defense of the technology?
i didn't see it was a quote, my apologies to Subjunctive

in a well actually
Jan 26, 2011

dude, you gotta end it on the rhyme

flakeloaf posted:

my new dog's name is 1وَمَا مِن دَآبَّةٍ فِي الأَرْضِ وَلاَ طَائِرٍ يَطِيرُ بِجَنَاحَيْهِ إِلاَّ أُمَمٌ أَمْثَالُكُم مَّا فَرَّطْنَا فِي الكِتَابِ مِن شَيْءٍ ثُمَّ إِلَى رَبِّهِمْ يُحْشَرُونَ

also i'll be the person with a unicode password trying to log in on a laptop with no numpad

ur dogs on a no flea list

duTrieux.
Oct 9, 2003

PCjr sidecar posted:

ur dogs on a no flea list

that's good, though‽

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

PCjr sidecar posted:

ur dogs on a no flea list

A terrier watch list

funeral home DJ
Apr 21, 2003


Pillbug
I'm gonna name my dog that Arabic script that caused WebKit to poo poo itself years back and see how many people don't update their computers.

endlessmonotony posted:

EDIT: I have a cyberskull.

do you have one of those implants that stops seizures?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
eat it nerds https://twitter.com/adichappo/status/889151035142533120
https://twitter.com/united/status/889230345496780800

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

what's the threat there?

surebet
Jan 10, 2013

avatar
specialist


password chat: i'm sure i'm not the first one to think of this, but since i'm not able to convince some people to use unique, long & complex passwords w/ managers, how good/bad would it be to tell them to change their current creds to something like the password typed 5x times in a row?

i know they use super short creds (not hard to count types when they go at it 2 fingered) and i'm pretty sure they're the kind of people who'll use the same pass everywhere; they also use the same [first name].[last name]@ on their personal & corp accounts, so i have concerns about people doing paypal/ebay/amazon/linkedin corroboration being able to pop accounts

eventually i'd hope to get those people onboarded into password managers & generally better opsec, but for now i'm looking for an easy concession to get from people on who i have no authority

Trabisnikof
Dec 24, 2005

Subjunctive posted:

what's the threat there?

They supposedly have a hard time telling certain kinds of explosives from books. TSA has been piloting requiring all books be removed from bags in carry-ones. They suggest you get a book cover if you have privacy concerns about the books in your bag

Wiggly Wayne DDS
Sep 11, 2010



Subjunctive posted:

what's the threat there?
presumably moving thousands of $ worth of merchandise across state lines, but turns out tsa didn't issue guidance like that at all so ???

Carbon dioxide
Oct 9, 2012

https://www.bleepingcomputer.com/news/security/45-000-facebook-users-leave-one-star-ratings-after-hackers-unjust-arrest/

akadajet
Sep 14, 2003


I assumed this would be related to that alpha bay bust at first lol

flakeloaf
Feb 26, 2003

Still better than android clock

surebet posted:

password chat: i'm sure i'm not the first one to think of this, but since i'm not able to convince some people to use unique, long & complex passwords w/ managers, how good/bad would it be to tell them to change their current creds to something like the password typed 5x times in a row?

i know they use super short creds (not hard to count types when they go at it 2 fingered) and i'm pretty sure they're the kind of people who'll use the same pass everywhere; they also use the same [first name].[last name]@ on their personal & corp accounts, so i have concerns about people doing paypal/ebay/amazon/linkedin corroboration being able to pop accounts

eventually i'd hope to get those people onboarded into password managers & generally better opsec, but for now i'm looking for an easy concession to get from people on who i have no authority

i'd imagine it depends on the attack you're trying to mitigate

long passphrases are great against a computer pounding away endlessly without rate limiting (txt me) or a shoulder surfer with a short attention span but neither of those is going to beat a stolen linkedin password file from being used to attack credentials there

short of some esoteric requirements you know other sites won't have (must include one korean letter) or assigned passwords that are totally secured in the clear and won't be looked at or used by anyone ever honest, "use unique passwords you dolts" is about all you can hope for

here, we blackhole all inbound links so people can't use their official email addresses to create accounts because password confirmations don't work, but that's a dick move that probably won't fly in corporate america

endlessmonotony
Nov 4, 2009

by Fritz the Horse

Dodoman posted:

What happened to your 💀?

My brain keeps trying to crawl outta my skull and also to crush it, so they had to install a programmable skull that keeps it jailed.

No skul-gun, giving it weapons might be a bad idea.

NFX
Jun 2, 2008

Fun Shoe

maskenfreiheit posted:

people often use pet names as passwords, which is bad due to low entropy

the obvious solution is to name your pet a long string consisting of uppercase letters, lowercase letters, numbers, and symbols

error: the answer to your security question cannot be the same as your password

duTrieux.
Oct 9, 2003

Trabisnikof posted:

They supposedly have a hard time telling certain kinds of explosives from books. TSA has been piloting requiring all books be removed from bags in carry-ones. They suggest you get a book cover if you have privacy concerns about the books in your bag

they aren't confusing explosives with books so much as it is that a solid block of tree-meat is kind of hard to scan through

Shame Boy
Mar 2, 2010

endlessmonotony posted:

My brain keeps trying to crawl outta my skull and also to crush it, so they had to install a programmable skull that keeps it jailed.

No skul-gun, giving it weapons might be a bad idea.

there was a kid in my 6th grade class whose brain made too much brain juice and if it wasn't periodically removed his brain pressure would go too high and he'd get a seizure so he had this pump built in to his skull that would pump it out and into his stomach periodically and when the classroom was real quiet you could hear him softly start whirring at random

maskenfreiheit
Dec 30, 2004

duTrieux. posted:

they aren't confusing explosives with books so much as it is that a solid block of tree-meat is kind of hard to scan through

apparently they show up as the same density as some types of explosives

so they pull you aside, go in your bag, see it's a book

this slows down the security line a solid 30s. multiply that my hundreds of nerds, and it can really back things up

flakeloaf
Feb 26, 2003

Still better than android clock

in grade 4 we all got the talk about how some people are different and not everyone from russia is evil, now everyone say hi to igor, he'll tell you all about the shunt in his brain (even though it's pretty clear the damage has been done)

he was a funny and generally likeable guy, too bad he died at like 15 or something

don't die, endlessmonotony, that would be sad

rjmccall
Sep 7, 2007

no worries friend
Fun Shoe

maskenfreiheit posted:

apparently they show up as the same density as some types of explosives

so they pull you aside, go in your bag, see it's a book

this slows down the security line a solid 30s. multiply that my hundreds of nerds, and it can really back things up

they're saying you can't check them, not that you can't carry them on

endlessmonotony
Nov 4, 2009

by Fritz the Horse

flakeloaf posted:

in grade 4 we all got the talk about how some people are different and not everyone from russia is evil, now everyone say hi to igor, he'll tell you all about the shunt in his brain (even though it's pretty clear the damage has been done)

he was a funny and generally likeable guy, too bad he died at like 15 or something

don't die, endlessmonotony, that would be sad

Too loving late.

It's alright, it's not like it ever sticks, I'll just wake up in the lab at the 13th floor, hear the thunder and I'll be back on my barely-working feet.

flakeloaf
Feb 26, 2003

Still better than android clock

endlessmonotony posted:

Too loving late.

It's alright, it's not like it ever sticks, I'll just wake up in the lab at the 13th floor, hear the thunder and I'll be back on my barely-working feet.

well if you ever get blue and don't know where to go to, i know a guy

vOv
Feb 8, 2014

rjmccall posted:

they're saying you can't check them, not that you can't carry them on

yeah that's the weird thing. if it's checked they can just open up your bag so what's the problem

maybe it's supposed to be carryon but it got miscommunicated somehow

vOv fucked around with this message at 20:30 on Jul 24, 2017

BattleMaster
Aug 14, 2000

mrmcd posted:

Also related: https://www.theverge.com/2017/7/21/15999544/biohacking-finger-magnet-human-augmentation-loss

The best part is where she goes to a "human augmentation" conference sponsored by a video game company. Except all the actual doctors are like "please stop paying the guy at your local tattoo and piercing studio to jam random smartphone components inside you. That doesn't make your a cyborg."

"Grindhouse Wetware" is one of the most unpleasant names I have ever seen

surebet
Jan 10, 2013

avatar
specialist


flakeloaf posted:

i'd imagine it depends on the attack you're trying to mitigate

i guess at this stage just preventing password reuse, or rather encouraging users to double down on it, since i'm pretty sure their creds are floating out there

unfortunately, this client subcontracted their it stuff and the people i need to risk manage are the ones telling the third party dudes to gently caress off with complexity reqs, so beyond telling them they should get it together i can't do much

multiples of their current passwords would both make them harder to throw gpus at and also prevent an intrusion because their ashley madison creds are in the wild

baby steps...

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

force them to use their initials in their password, plus the first digit of their user id. they're unlikely to have matched that pattern on other sites, so reuse attacks get much harder.

in a well actually
Jan 26, 2011

dude, you gotta end it on the rhyme

vOv posted:

yeah that's the weird thing. if it's checked they can just open up your bag so what's the problem

maybe it's supposed to be carryon but it got miscommunicated somehow

its unreasonable to ask tsa to do their job

probably after pulling the eight hundredth copy of signed punch-em-up omnibus out of a pile of comic book fan odorwear u decide its just easier to get to if in ur carryon than a suitcase

maskenfreiheit
Dec 30, 2004

rjmccall posted:

they're saying you can't check them, not that you can't carry them on

what, that's stupid. it's got to be better to search down in the bowels of the airport than to hold up the security line.

worst case, a plane can fly w/o cargo but if a person is held up welp

lord of the files
Sep 4, 2012

http://koth.jrwr.io/

if you're not already playing this. survival of the fittest.

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

maskenfreiheit posted:

what, that's stupid. it's got to be better to search down in the bowels of the airport than to hold up the security line.

opening a bag is apparently a huge pain in the rear end, and involves paperwork that is probably at least occasionally completed correctly

and it doesn't really inconvenience anyone other than the TSA, so where's the fun in that

A Pinball Wizard
Mar 23, 2005

I know every trick, no freak's gonna beat my hands

College Slice

That'll show them!!

Cocoa Crispies
Jul 20, 2001

Vehicular Manslaughter!

Pillbug

spankmeister posted:

Hi my name is %s %s %s %s %s %s %s

hello segmentation fault ./program my name is AAAA\x4e\xa0\x04\08AAAA\x4e\xa0\x04\08%p%p%p%p%p%1269x%p%hn%420c%hn

maskenfreiheit
Dec 30, 2004

Subjunctive posted:

and it doesn't really inconvenience anyone other than the TSA, so where's the fun in that

speaking of inconveniencing the tsa, i always opt out of the pornoscanners

they always get this deer in the headlights look like "oh god is he going to whip out his camera phone and yelling about being detained"

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

maskenfreiheit posted:

speaking of inconveniencing the tsa, i always opt out of the pornoscanners

they always get this deer in the headlights look like "oh god is he going to whip out his camera phone and yelling about being detained"

yeah, I don't go through those very often any more, but when I do I don't

apparently you can ask them to make notes or provide some form if they flag you for secondary, but I'm white and well-dressed with GE so it's usually pretty cursory

Deep Dish Fuckfest
Sep 6, 2006

Advanced
Computer Touching


Toilet Rascal

maskenfreiheit posted:

speaking of inconveniencing the tsa, i always opt out of the pornoscanners

they always get this deer in the headlights look like "oh god is he going to whip out his camera phone and yelling about being detained"

huh. that's weird, you'd think they'd have a hard time not smiling while they warm up the taser

maskenfreiheit
Dec 30, 2004

Deep Dish Fuckfest posted:

huh. that's weird, you'd think they'd have a hard time not smiling while they warm up the taser

i have yet to be tazed bro

vOv
Feb 8, 2014

https://twitter.com/dalmoz_/status/889530871870390272

Adbot
ADBOT LOVES YOU

mrmcd
Feb 22, 2003

Pictured: The only good cop (a fictional one).

Get Global Entry. It comes with PreCheck which means you get to skip the pornoscanner, and go through the super fast line where you keep shoes on and don't unpack all your electronic poo poo. Also super fast through passport and customs coming back on international trips.

I mean sure it's hosed that the government is basically asking for a bribe to treat you with basic human dignity.. but like $20/yr to sail through... Cheap bribe.

  • Locked thread