paragonie-scott

Example code for How to Safely Store a Password in 2016.

paragonie-scott

<?php
define('BENCH_ROUNDS', 200);
$start = $stop = 0.0;

$short = str_repeat("A", 16);
$long = str_repeat("A", 1 << 20);

$start = microtime(true);
for ($i = 0; $i < BENCH_ROUNDS; ++$i) {
    sodium_crypto_pwhash_str($short, SODIUM_CRYPTO_PWHASH_OPSLIMIT_INTERACTIVE, SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE);

gnusosa

(defcustom ykman-path "/usr/local/bin/ykman"
  "Set this to the path of the command line ykman client for your OS.")

(defun yubikey-get-oath ()
  "Copy a OATH token to your kill-ring"
  (interactive)
  (let ((ivy-hash (make-hash-table :test 'equal))
        (cb (lambda (choice)
              (with-temp-buffer

epixoip

Maxwell/Pascal bcrypt Benchmarks

Product: Sagitta Invictus-based dev box

Software: Hashcat v3.6.0-39-gc918173, Nvidia driver 381.22

Accelerator: 1x GTX 970 reference, 1x GTX 980 reference, 1x GTX Titan X (Maxwell) reference, 1x GTX 1080 Ti FE

root@dev:~/hashcat# ./hashcat -w 4 -b -m 3200

clauswilke

library(sf)
library(dplyr)
library(ggplot2)
library(gganimate) # needs development version from github

# helper function to place a geometric object at a desired position
# and scale
place_geometry <- function(geometry, position, scale = 1) {
  (geometry - st_centroid(geometry)) * scale + 
    st_sfc(st_point(position))

mattifestation

Import-Module HgsDiagnostics
$GetHgsTrace = Get-Command Get-HgsTrace
$RemoteAttestationCoreReference = $GetHgsTrace.ImplementingType.Assembly.GetReferencedAssemblies() | Where-Object { $_.Name -eq 'Microsoft.Windows.RemoteAttestation.Core' }
Add-Type -AssemblyName $RemoteAttestationCoreReference.FullName

$MostRecentTCGLog = Get-ChildItem C:\Windows\Logs\MeasuredBoot | Sort-Object -Property LastWriteTime -Descending | Select-Object -First 1 | Select-Object -ExpandProperty FullName
$LogBytes = [IO.File]::ReadAllBytes($MostRecentTCGLog)

$ParsedTCGLog = [Microsoft.Windows.RemoteAttestation.Core.TcgEventLog]::Parse($LogBytes)
$ParsedTCGLog.TcgData.Children | Sort-Object -Property PcrIndex | Group-Object -Property PcrIndex

ilbelkyr

Channel successor logic on freenode

(This covers what Atheme services as used on freenode will do if all founder (+F) accounts of a channel are dropped. It does not go into any staff policies on related matters. In particular, single-# channels have policies that services cannot reasonably implement¹ as they commonly involve talking to actual people.)

For single-# channels, the freenode-staff role account is always chosen as successor; normal channel successor logic does not apply in this case.

Otherwise, the "best" user will be selected from the channel's ACL according to the following criteria:

• They may not have the +b flag. This ensures AKICKed users will never inherit a channel.
• They need to be able to accomodate the channel registration; users who already have 30 channels registered cannot inherit a channel unless they have been granted the RegNoLimit flag.²

kennwhite

Default versions of OpenSSL as of Feb 2018

Name	Release	System OpenSSL ver	TLS 1.1 and 1.2 Supported	Notes
Debian	10*	1.1.0	Yes	Buster (dev)
Debian	9	1.1.0 + 1.0.1	Yes	Stretch
Debian	8	1.0.1	Yes	Jessie
Debian	7	1.0.1	Yes	Wheezy

NotMedic

#!/usr/bin/python
import sys, json, urllib, urllib2

#Define the Bloodhound Database
url = 'http://bloodhound-server:7474/db/data/cypher/'
#Define the Bloodhound Credentials
#echo neo4j:bloodhound | base64
base64auth = 'bmVvNGo6Ymxvb2Rob3VuZA=='

request = urllib2.Request(url)

atoponce

Open Source Password Generator / Strength Meter Testing

This is a collection of password generators and strength meter testing. Each generator produces a different array of passwords, of which are then tested against each of the strength meters. The defaults are used where possible, otherwise sane options are provided.

The Results

The following results are tables showing the generators, passwords, and strength testers described below.

1. Randomly generaterd passwords: atoponce/random_results_table.md