Forgot your password?
typodupeerror

Comment Re:Kaspersky Sales (Score 1) 104

Ah, thanks. Pretty sure the PHP 4 docs in 2004 recommended individual salting. Save each salt alongside the hash. A global salt is just a really odd combination of doing a little more but still being lazy. They probably did it to make their study achievable.

My friend in high school made a website and rolled his own hash function. I was able to brute force every password in a reasonable amount of time with interpreted PHP code on a 667MHz Celeron. It didn't help that he failed to sanitize inputs; the ASCII null character really sped up finding collisions.

Comment Re:Kaspersky Sales (Score 3, Informative) 104

Back in 2004 or 2005, when I was just some kid in high school playing around making a little website with PHP, I used salted hashes for password storage because that's what the PHP 4 docs recommended. It's not that hard.

My first question on reading the summar was whether the hashes were salted or not. I followed some of the references in your link and ended up at https://securelist.com/password-brute-force-time/112984/, which indicates that these password hashes are indeed salted.

The results in the table are calculated for the RTX 4090 GPU and the MD5 hashing algorithm with a salt.

I haven't looked into this stuff in a long time, but I think best practice nowadays is to use a salt, a more secure hashing algorithm, and possibly multiple rounds of the hash to slow down attacks.

Comment Re:Conversely... (Score 1) 376

SoftwareArtist probably disagrees with the bolded part of what you wrote.

Since proof that the deity of any major religion exists, or doesn't exist, is, by definition, impossible, that affirmative belief there is not God is exactly as much an act of faith as the belief there is.

I say this because they wrote,

If God existed and wanted to prove to us that he existed, he easily could. He could just appear before a huge crowd of people in all his glory, surrounded by a host of angels. If you believe the Bible, he's done it before. So why not now? But it keeps not happening.

The lack of evidence for God isn't because evidence is impossible. It's because evidence is possible but doesn't exist.

I'm sure many people have arguments for why God exists despite the present-day lack of such evidence; I'm only trying to explain where SoftwareArtist seems to be coming from. I will further claim that, for some major religions, it's possible to prove their deity doesn't exist if they define the deity clearly enough and the definition conflicts with other, well established facts.

Regarding trying to pin down definitions of athiest and agnostic, it seems that most people, especially non-academics, use these terms somewhat loosely. That's just something that happens with human language.

Do you understand how acting like an insufferable ass leads to poorer conversations?

Comment Is it? (Score 2) 50

We already have actors and writers who do what they do perfectly.

Do they? People want actors and writers that will do it for less money and those seem to be in short supply.

We need AI to do stuff we can't do

This is not how technology has traditionally been used.
* Car destroyed the horse market
* The printing press put scribes out of work
* Photocopy machines put typists out of work
* Computers eliminated the card catalog
* Electronic synthesizers are steadily eliminating the use of musical instruments

Why did these all happen? Because they are cheaper solutions to problems that were already solved. So tell me, what makes you think it should be any different for actors and writers?

Don't get me wrong, I think this is an idiotic use of the technology and a total waste or resourced but I also cannot deny the reality that economics is the driving force of technology.

Submission + - Newly discovered Linux local privilege escalation bug "CopyFail" (copy.fail)

tylerni7 writes: A recently discovered logic bug dubbed "CopyFail" in Linux dates back to 2017 and allows local privilege escalation across kernels/distros with a single exploit. The POC exploit works out of the box today, but a future version that can escape from containers like Docker is promised soon. Technical details are available at https://xint.io/blog/copy-fail...

Submission + - Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root (nerds.xyz)

BrianFagioli writes: A newly disclosed Linux kernel vulnerability called Copy Fail (CVE-2026-31431) allows an unprivileged user to gain root access using a tiny 732-byte script, and it works with unsettling consistency across major distributions. Unlike older exploits that relied on race conditions or fragile timing, this one is a straight-line logic flaw in the kernelâ(TM)s crypto subsystem. It abuses AF_ALG sockets and splice to overwrite a few bytes in the page cache of a target file, such as /usr/bin/su. Because the kernel executes from the page cache, not directly from disk, the attacker can inject code into a setuid binary in memory and immediately escalate privileges.

What makes this especially concerning is how quiet it is. The file on disk remains unchanged, so standard integrity checks see nothing wrong, while the in-memory version has already been tampered with. The same primitive can also cross container boundaries since the page cache is shared, raising the stakes for multi-tenant environments and Kubernetes nodes. The underlying issue traces back to an in-place optimization added years ago, now being rolled back as part of the fix. Until patched kernels are widely deployed, this is one of those bugs that feels less like a theoretical risk and more like a practical, reliable path to full system compromise.

Comment "isn't working" is absolutist thinking. (Score 1) 76

If a virus only infects 50% of people, that doesn't mean "nobody is getting infected". The inability for people to see nuance is annoying. 50% certainly is not 0% and it is not 100%. The idea that "perfect is the enemy of good" still applies to modern life, even if you don't understand it.

Slashdot Top Deals

If you push the "extra ice" button on the soft drink vending machine, you won't get any ice. If you push the "no ice" button, you'll get ice, but no cup.

Working...