Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment The real enemy (Score 5, Interesting) 131

The disgusting part of this disaster was the way the US Navy persecuted Captain McVay, railroading him in a court martial with trumped-up charges shown to be nonsense by testimony of the Japanese sub captain, and finally driving McVay to suicide. He was the final victim, 24 years delayed. It took an act of Congress to force the Navy, kicking and screaming, to finally clear his record of all findings of wrongdoing, 56 years too late.

The mismanagement of the stupidly, needlessly, and literally carelessly delayed search and rescue of survivors, as day after day drifting in the water dehydrating, starving, going mad, and being picked off by sharks, is also a huge part of the disaster. Something very similar happened at the Battle off Samar, in which hundreds of sailors from a small group of destroyers and escort carriers, after being pulverized by a huge Japanese battle fleet, were also left to drift for days, with many needless drowning and shark bite deaths.

Comment Re:No shit (Score 1) 239

Wha? Are you daft? Setting an "at least" says NOTHING about how many you CAN have beyond that. The password could have one UC, or two, or three, ... or ALL UC. >= 2 LC + >= 1 UC could be satisfied by LULL, UULL, LUUU, or UUUL. The brute force cracker still has to try all combinations. OK, he can eliminate a trivial part of the combinations, like UUUU and LLLL, but his life if not made "a lot easier".

Comment Re:1 letter change (Score 1) 239

If "similar combinations" produce the SAME hash, then your goddam hash is no goddam good. It's not a real hash. Hash collisions, no matter how trivial the difference in input, should be virtually impossible. Certainly that is true for SHA512. Change one character in the input, and the hash is COMPLETELY changed.

Comment Re:1 letter change (Score 1) 239

If the friggin auth mechanism even knows/stores your password, the system is hopeless from a security standpoint. The auth mechanism only needs to know the non-reversible HASH of your password, so it can compare it to the HASH of the input you type to log in. There is no excuse for storing passwords ANYWHERE.

Slashdot Top Deals

Chemist who falls in acid is absorbed in work.

Working...