Collaborate Disseminate
Does a TPM replace the default device’s security, or add to it?
I will try to re formulate it into 2 questions, just to explain what my question is, since I am not very good at English writing.
If we take randomness as a example:
Does th… Continue reading Does a TPM replace the default device’s security, or add to it?
I don’t understand the password vs. passphrase analyses that I read. Let me explain.
Here is a pass phrase. It has 5 words using only lower case (I’m ignoring randomness for this purpose): friend house jump touch kiss
When I enter that pa… Continue reading Why use entropy at all in considering password strength?
Let’s state that I have a huge bunch of truly unpredictable random data in file "random.bin". The random data has been created outside of my system and has been securely transfered into my system.
Questions:
How could I feed thi… Continue reading Feeding entropy pool with my own data
I’m doing some research on PHP’s str_shuffle function, I already asked this question multiply times on StackOverflow but got no answer https://stackoverflow.com/questions/61968859/is-it-possible-to-predict-the-next-output-for-the-str-shuff… Continue reading Security of PHP’s str_shuffle()
What’s the chance of guessing valid credit card data that could be used to make a payment online? To me, it looks like it’s not extremely hard to guess, but I’m not able to calculate the probability. I mean, it’s not like it was designed t… Continue reading Chance of guessing any valid credit card data
I got 5 dice and opened EFF’s wordlist, and generated a random five-word passphrase (all letters small with spaces, no punctuation) for my PC.
The words were making up a meaningful scene in my mind, so I made a complete sentence out of the… Continue reading Randomly selected words converted into sentence. Did I lose passphrase strength or gain it?
Does virtualbox provide enough entropy (random numbers) for the veracrypt program on the virtual machine? Is it cryptographically safe to use veracrypt inside a virtualbox in a windows 10 guest?
Continue reading Is it cryptographically safe to use veracrypt in a virtualbox virtual machine?
via the comic delivery system monikered Randall Munroe resident at XKCD!
Permalink
The post XKCD ‘Dynamic Entropy’ appeared first on Security Boulevard.
Continue reading XKCD ‘Dynamic Entropy’
I’m currently creating a small service where users can upload images (just a free time project). The images are either private, public (unlisted) or public (listed).
Now I’m wondering for public unlisted content how long the URL should be… Continue reading How long does a secret URL need to be?
I’m wondering, would it be clearer to declare a company wide requirement with regard to password theoretical entropy, rather than the usual “at least one big letter, and a small latter, and special character…”
Thus if we target a reason… Continue reading Specific character based policy for passwords