RE: DigiNotar compromise

2011-09-10 Thread Ken Schaefer
You will find transactions costs in any microeconomics text too. And whilst they can be related, they are not the same. None of the titles you listed before is actually a microeconomics text that you’d study in 1st year Uni. One needs to start from first principles – positive economics – not

RE: password questions

2011-09-10 Thread Michael B. Smith
I can state with assurance that full tables for ASCII are available. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 9:03 PM To: NT System Admin

RE: password questions

2011-09-10 Thread Crawford, Scott
how big is it? for how long of passwords? lm? ntlm? would you be willing to attempt to crack a few test hashes? Sent from my Palm Pre on the Now Network from Sprint On Sep 10, 2011 8:06 AM, Michael B. Smith mich...@smithcons.com wrote: I can state with

Re: DigiNotar compromise

2011-09-10 Thread Kurt Buff
Both 'Man, Economy and State' and 'Human Action' start from first principles, and cover the ground far better than, for instance Samuelson, which I've read in several editions, and which I can't recommend to anyone. What is taught in most university courses is just flat wrong, both in approach

Re: DigiNotar compromise

2011-09-10 Thread Jonathan Link
Yes, everyone is (or the great majority of people are) wrong, you're right. This is your standard song, Kurt. On Sat, Sep 10, 2011 at 12:15 PM, Kurt Buff kurt.b...@gmail.com wrote: Both 'Man, Economy and State' and 'Human Action' start from first principles, and cover the ground far better

Re: password questions

2011-09-10 Thread Ben Scott
On Sat, Sep 10, 2011 at 9:06 AM, Michael B. Smith mich...@smithcons.com wrote: I can state with assurance that full tables for ASCII are available. Technically speaking, ASCII is 7 bits, so that may not be what we're talking about. -- Ben ~ Finally, powerful endpoint security that ISN'T a

Re: password questions

2011-09-10 Thread Steve Kradel
IMO all this business about rainbow tables for finding hash value collisions is, or will soon be, highly obsolete. A properly designed password system should use both (a) enough salt bits to render rainbow tables impractical, and (b) a computationally expensive, variable workload hashing

Re: DigiNotar compromise

2011-09-10 Thread Kurt Buff
Only on a very limited set of subjects. I don't think I differ in this from most here - we all have our areas of expertise, including you. Kurt On Sat, Sep 10, 2011 at 09:28, Jonathan Link jonathan.l...@gmail.comwrote: Yes, everyone is (or the great majority of people are) wrong, you're

Re: DigiNotar compromise

2011-09-10 Thread Ben Scott
On Sat, Sep 10, 2011 at 4:00 PM, Kurt Buff kurt.b...@gmail.com wrote: Yes, everyone is (or the great majority of people are) wrong, you're right. Only on a very limited set of subjects. Economics, managed switches, and iPhone license agreements? -- Ben ~ Finally, powerful endpoint security

Re: DigiNotar compromise

2011-09-10 Thread Jonathan Link
No, I don't claim expertise in anything. On Sat, Sep 10, 2011 at 4:00 PM, Kurt Buff kurt.b...@gmail.com wrote: Only on a very limited set of subjects. I don't think I differ in this from most here - we all have our areas of expertise, including you. Kurt On Sat, Sep 10, 2011 at 09:28,

RE: password questions

2011-09-10 Thread Crawford, Scott
I tend to agree with what I think you're saying. But, the original question was whether adding an alt-char to your password would make you safer and/or your password harder to crack. I think the answer to this is absolutely. -Original Message- From: Steve Kradel

RE: domain spoofing

2011-09-10 Thread Don Holstrom
I know an IT guy working for a major non-profit who has registered over 200 nearby misspelled domains. Description: Washington_Redskins_Jokes_by_StarscreamsGirl12 From: S Powell [mailto:powe...@gmail.com] Sent: Friday, September 09, 2011 11:32 AM To: NT System Admin Issues Subject:

RE: IIS 7.5 smtp service

2011-09-10 Thread Joseph L. Casale
Argh, forgot to update the local domain, just updated the service's fqdn. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Saturday, September 10, 2011 2:13 PM To: NT System Admin Issues Subject: IIS 7.5 smtp service I haven't done this since 2003 days, but anyone know how to

RE: password questions

2011-09-10 Thread Crawford, Scott
It's simply not practical to crack the 256 char Extended-ASCII set even for relatively short passwords of 8 chars. The closest I can find [1] is a 576GB set of tables to crack ASCII chars 32-95 and a max of 8 chars. That's less than 1/4th the entire Extended-ASCII keyspace. Perusing through

Re: Microsoft posts security bulletins 4 days early, scrambles to fix mistake

2011-09-10 Thread Andrew S. Baker
Uh, oh... That could cause some issues, as there are remote execution vulnerabilities in there... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Fri, Sep 9, 2011 at 2:15 PM, Free, Bob r...@pge.com wrote:

Re: anyone else seeing Hiloti malware zero day ?

2011-09-10 Thread Andrew S. Baker
Not I... * * *ASB* *http://XeeMe.com/AndrewBaker* *Harnessing the Advantages of Technology for the SMB market… * On Fri, Sep 9, 2011 at 7:47 PM, Erik Goldoff egold...@gmail.com wrote: At a client site Wednesday had a Hiloti outbreak, found by IDS signatures but not AV. Had to submit