Hacker Newsnew | past | comments | ask | show | jobs | submit | spacehaven's commentslogin

Note to self: poison search results for md5 hashes of my passwords.


Because that way, anyone sniffing or monitoring your traffic doesn't even need to crack the systems to steal the hash, and so you'll be saving everyone some time?

Edit: I'm trying to illustrate the general principle, that you shouldn't take any action thats visible outside your secure perimeter, that depends on knowledge of your password.

What you define as 'outside the perimeter' depends. In the case of your corporate systems, its probably everything outside the corporate network. In the case of your gmail password, its everything outside of [your computer, the SSL connection to google's auth servers, and those servers].

You shouldn't ever leak any information outside that perimeter, that reveals knowledge of your password.

Its generally pretty hard to steal the password hash; if you start revealing what your password hash is to someone doing passive analysis, you compromise a lot.

If its worth thinking about poisoning hashes to protect, then don't try and poison the hashes!


If someone is sniffing his traffic he has much bigger things to worry about...


Poison over TOR?


Timeshares!


Judging by the hordes of people on the streets with signs, desperation doesn't sound so quiet lately.


"Hordes?"

15% of the country lives in poverty. (http://www.nytimes.com/2011/09/14/us/14census.html?pagewante...)

Imagine what it would look like if 1 in 6 people took to the streets. 50 million. That's a horde.


Oh purleez. There's what, a couple of thousand of 'em nationwide? The same damn crowd that protests.... everything?


> I'm 20

Ok that changes the context of what you said. I thought you were like 30 or God-forbid 40.

You know all that bullshit about "you can't succeed if you don't take risks?" It's true. It's SO true. The world needs people like you, and me - I am your 40 year old rocky-road-to-success-story.


The proverbial "this." When friends and family ask if I've seen this or that, I usually reply "no," but if pressed ("Turn on channel 6 now! There's a dog driving a lawn mower!") I politely remind them I don't have a TV.

The fact is, I do have a small (wait, 32" is small now?) one in the bedroom, but it's hooked up to AppleTV and Roku, for the sole purpose of putting on podcasts and informational videos (like TED Talks or Khan Academy) to fall asleep to.


You can continue that legacy with the open source 3D printing movement that's growing, and potentially continue building things that are way cooler than most web sites.


Great video. At first I wondered "what does she do for a living?" then it inspired me: I work from home now. I'm going to seriously consider renting out my house and work from other people's homes instead.


I'm sure someone much smarter than me could draw many parallels, both good and bad, between malls and apps stores.

Personally, I say I hate malls myself, yet once in a while I get the urge to go and buy a few things I didn't know I needed. I find comfort in the consistency of the stores, that you can go to any mall and find roughly the same vendors. Once at the mall, my choices are narrowed down (which ties into the whole Paradox of Choice http://en.wikipedia.org/wiki/The_Paradox_of_Choice:_Why_More...).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: