Getbig.com: American Bodybuilding, Fitness and Figure
Getbig Main Boards => Gossip & Opinions => Topic started by: NoMoreLies on August 07, 2013, 04:27:49 PM
-
http://anabolicscene.blogspot.com/2013/08/feds-tell-web-firms-to-turn-over-user.html
This is getting completely insane
- NML
-
Doesn't this make the whole point of a password obsolete?
-
It means we need to keep our passwords for sensitive materials crazy difficult to crack.
-
Well, the government always tried to get the companies to hand over sensitive data..but it sounds like the companies know their users rights and arent giving in.
like a cop trying to get you to volunteer information that you dont have to give them, 9r even trying to bully you into incriminating yourself, even though they have no legal right to do it.
Our public sector is full of cockheads.
-
Keep in mind that all they can turn over is the hashes of the password and the salt. Most online places use a good (read: Not MD5) hashing algorithm and the more entropy (characters) you introduce, the harder it is to crack. The Feds are more than likely using Rainbow Tables (http://en.wikipedia.org/wiki/Rainbow_table) to scan the hashes and even this optimization is a function of time.
I use 1Password as my password manager and use it to generate huge random passwords. 1Password is also great because it syncs my laptop, iPhone and iPad using Dropbox as the sync manager. Brilliance.
-
I use 1Password as my password manager and use it to generate huge random passwords. 1Password is also great because it syncs my laptop, iPhone and iPad using Dropbox as the sync manager. Brilliance.
The feds have your 1Password password... game over
-
The feds have your 1Password password... game over
Only if they used a key logger or Tempest to gather it.
-
so the nsa isnt all powerful?
Only math is all-powerful.
-
so the nsa isnt all powerful?
No, they aren't all-powerful.
The fact that they're trying their absolute best to become that way, is the problem.
-
...but I know you're in Switzerland, galeniko, so count your blessings. 8)
-
You mean to tell me the feds are going to post on getbig pretending to be me?
-
Only if they used a key logger or Tempest to gather it.
Only a matter of time at this rate... I believe a court ruled that they didn't need a warrant to monitor you..... to whats to stop them from datalogging your shit?
-
Only a matter of time at this rate... I believe a court ruled that they didn't need a warrant to monitor you..... to whats to stop them from datalogging your shit?
Well, me for one. Don't use Windows at all, so that gaping vector is closed to them.
-
Only if they used a key logger or Tempest to gather it.
Or if they've already gotten a line into it.
Like an 'anonymous' mail program, or any other site that would attract those that may be the most interesting subjects.
Just cutting through the clutter, I'm sure.
-
Someone mentioned to me that the Kremlin has begun to use manual typewriters again.
-
You mean to tell me the feds are going to post on getbig pretending to be me?
No. Guys like you are their best friends.
-
-
Someone mentioned to me that the Kremlin has begun to use manual typewriters again.
Translation: I read it on the internet, the place where I get all of my information which I subsequently concatenate into my worldview.
-
My password is Vince Basile & nobody would crack it ;D
-
Translation: I read it on the internet, the place where I get all of my information which I subsequently concatenate into my worldview.
Sounds good to me. Let's hope this isn't actually happening, and that it's nothing more than a stream of lies "from the internet".
-
doesnt the US government trust its citizens?
-
Remember, this is ONLY to stop the Terrorists and nothing to do with small time drug buyers, tax evaders or anything else.
If we don't give Obama our passwords then Al Qaeda wins. Don't mind that Obama's giving AQ crates of US military hardware over in Syria, just turn over your passwords, phone records and this great country will remain Free.
-
doesnt the US government trust its citizens?
Hahahaha!
-
Hahahaha!
you may well laugh but its a question that US citizens apparently have not been considering fror a very long time
This present malaise originated many years ago
its difficult to trust anybody else when you don't trust your self
-
US of A should perhaps be careful for their economy's sake not to drive companies away from their own soil by creating a climate where web businesses can't provide integrity to their customers. the web is the future. sort of.
-
you may well laugh but its a question that US citizens apparently have not been considering fror a very long time
This present malaise originated many years ago
its difficult to trust anybody else when you don't trust your self
This is not a mirthful laugh, but a rueful one. The US gov't hasn't trusted its citizens for more than a century. Maybe longer. The average American "citizen" is nothing but either a fatted cow to be milked or a voracious pig to be fed, usually for votes for the ruling political class. We rotted from the inside out a long time ago. Rome didnt realize it was a dead man walking for several centuries either.
I see very, very few option for salvation. And none that the potted plants that are my countrymen would consider palatable, given the only thing that matters to them is the next iPhone.
-
Translation: I read it on the internet, the place where I get all of my information which I subsequently concatenate into my worldview.
uhh, as opposed to the state run media? ???
-
Keep in mind that all they can turn over is the hashes of the password and the salt. Most online places use a good (read: Not MD5) hashing algorithm and the more entropy (characters) you introduce, the harder it is to crack. The Feds are more than likely using Rainbow Tables (http://en.wikipedia.org/wiki/Rainbow_table) to scan the hashes and even this optimization is a function of time.
I use 1Password as my password manager and use it to generate huge random passwords. 1Password is also great because it syncs my laptop, iPhone and iPad using Dropbox as the sync manager. Brilliance.
if they have the hash and the salt, they may as well have the password in plain text.
-
doesnt the US government trust its citizens?
Do the citizens trust the US government.
-
if they have the hash and the salt, they may as well have the password in plain text.
Not true and depends on the hash algorithm and the entropy of the clear text. Even a shitty hash algorithm like MD5 has a fairly large keyspace (16 bytes is still 3.4x10^38 possible combinations) and most use better algos like SHA256 which is quite a bit larger.
Of course, the current SHA2 series was developed by the NSA, so YMMV.
-
USA is fucked.
-
No, they aren't all-powerful.
The fact that they're trying their absolute best to become that way, is the problem.
I don't believe it for a second...The NSA among others could crack any password on any site within minutes...Hell they most likely have programs that can track your position and see/hear ever key stroke you and I press if need be...These stories they put out just so the public can debate it...The fact that they actually put a $ figure on how hard it would be is laughable...
-
I don't believe it for a second...The NSA among others could crack any password on any site within minutes...Hell they most likely have programs that can track your position and see/hear ever key stroke you and I press if need be...These stories they put out just so the public can debate it...The fact that they actually put a $ figure on how hard it would be is laughable...
Hard to argue against that, Snoman. If there's a will, there's a way. That's probably the one thing I've learned in this life.
-
If there's a will, there's a
solicitor
-
solicitor
I hear you, but this is quite a bit more serious than that.