Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Comment Just wrong (Score 1) 63

the format itself allows for much larger documents, she found

Yes and no.

What she found was one reader that in one spot will interpret and display values that exceed the maximum mentioned in the spec for MediaBox. (But it's not like it's actually using those values elsewhere; e.g., File -> Print just shows Page 1 of 1.)

What she didn't find was any reader that supports a UserUnit larger than the 75,000 maximum allowed by Acrobat 7.0.

However, it is true that UserUnit has no limit per the spec "The range of supported values shall be implementation-dependent.".

The "myth of a 381 km x 381 km maximum PDF size" is debunked by that line in the spec, not by the fact that she found a reader that in one spot exceeds the max specified in a different part of the spec.

Comment Pretty sad though... (Score 3, Insightful) 48

It is pretty sad though how many of the apps don't encrypt the user data at all, or it's encrypted but the master password is stored in plaintext or is encrypted with a hard-coded key. Then there's many of them using strong crypto algs but not properly (e.g., what is the point of using PBKDF2 but with only 3 iterations?)

Comment Re:Windows problem! (Score 2) 615

Mod parent up. The NT hash is essentially just a single MD4 of the Unicode password. (In the SAM file the hash is also obfuscated with the RID and encrypted with the syskey, but RID obfuscation is easily removed and the syskey by default is just stored in the registry and can be easily extracted.) MS should have deprecated the NT hash like they did the LM hash, and replaced it with a salted iterative hash like PBKDF2.

Comment Re:could someone explain what the issue is here? (Score 1) 264

(the kind of inconvenience they will hack around, possibly making you even more vulnerable)

Exactly. I worked around it and if I hadn't been able to I probably would have quit. The vpn client for windows enforced the company policy, but the vpn client for linux let me set up split tunelling the way I wanted. So I set up a linux router/firewall and never looked back.

I blogged about it last year: http://hellewell.homeip.net/phillip/blogs/index.php?entry=entry080509-170319

Comment Re:Independent Verification (Score 1) 509

Ok, my curioisty got the best of me. I altered the program to do 100 tests with a random stopping point each time. My results are:

Begins with 1: 20.57%
Begins with 2: 17.69%
Begins with 3: 15.35%
Begins with 4: 13.26%
Begins with 5: 10.86%
Begins with 6: 8.0%
Begins with 7: 6.14%
Begins with 8: 5.1%
Begins with 9: 3.7%

I'm still not seeing the 30% mentioned in the article, but it is a lot closer. Perhaps if I modified it to test a random # of primes instead of test up to a random # that would make a difference, but it doesn't seem like it would.

Slashdot Top Deals

"Call immediately. Time is running out. We both need to do something monstrous before we die." -- Message from Ralph Steadman to Hunter Thompson

Working...