Ben Cohen @ben@ischool.social

~=8 Character Passwords Are Dead=~

New benchmark from the Hashcat Team shows a 2080Ti GPU passing 100 Billion password guesses per second (NTLM hash).

This means that the entire keyspace, or every possible combination of:
- Upper
- Lower
- Number
- Symbol

...of an 8 character password can be guessed in:

~2.5 hours

(8x 2080Ti GPUs against NTLM Windows hash)

#Hacking #Infosec

"Hey, dad, guess what your grand-daughter wants to be when she grows up?"
"I'm guessing Experimental Paradoxist."
"Expe- How did you know?"
"I spent my youth trying to not get killed by her adult self."
"Oh. Well, she gets timetravelling from her mother's side."
"Uh-huh."
#MicroFiction #TootFic #SmallStories

A bit of a status update on work this month:

* #Fortress is getting a face-lift of its detection of h-cards so it'll be more accurate.
* #Koype is entering a heavy bug-fixing mode and its CI system is being locked down.
* The landing site is being re-built to highlight Patreon contributors (been punting on this for some time)

I'll be updating the Patreon followers over at http://patreon.com/jackyalcine with more updates (that'll be the place until a more solid bridge is in place).

____ ____ ____ you up
____ ____ ____ ____ down
Never ____ ____ ____ ____ ____ you

open registration: any and all assholes can flood your instance

closed registration: no one can sign up

This is the worst binary and it's ridiculous that we're still stuck with it in 2019.

For the love of all things not shitty, please start making admin-approval ques for signups. That instances for years now have to have a separate form on a separate website to moderate their communities is really silly.

And for the love of fuck, hire an anti-abuse consultant.

@sophia @ben most people in infosec are shit at threat-modeling because they are apex-privileged and literally have no threats ¯\_(ツ)_/¯

@sophia @strider @lynnesbian I'm not sure if Tarn has implemented satire yet but when he does I fully expect the game to intentionally crash itself

@sophia @Copenhagen_Bram @Vqrxtvs @strider @lynnesbian yall out here on a ledge marked “cursed post styles! beware” and maybe i cant join yall but i respect the power of yall cursebreakers 💚

@Vqrxtvs @sophia @strider @lynnesbian also what if a girl replied to your toot and explained in painful detail? Not everyone is a guy o.o

@Copenhagen_Bram @sophia @strider @lynnesbian all this talk has me confused about foss m. If only a guy could reply to my toot and explain in painful detail...

@strider @lynnesbian @sophia look at you, talking about open source software on the absolutely proprietary platform Mastodon, that tracks everything you post and censors free speech loving instances.

@sophia let me tell you something. if you think i'm going to let you get away with spreading lies then you're wrong.

gmail isn't FOSS.

FOSS is stuff like microsoft edge and apple safari because they're free and let you open the source code of the website by clicking view source, makin them Free "Open (the) Source" Software - FOSS

@lynnesbian @sophia I firmly disagree. Here are the reasons why Gmail is #FOSS:
* No vendor lock in, you can send messages to people who do not use gmail
* No lock in in the UI either, you can use Thunderbird if you choose to and Gmail would still work
* Not only can you view the source code but you can also save it (Ctrl+S) and upload it to your cloud. Giving you the opportunity to have your own Gmail.
* It starts with a G, like GNU

All of this combined is more than enough to call Gmail #FOSS

Oh, the link to try this out yourself is over at https://fortress.black.af/demo?url=https%3A%2F%2Fjacky.wtf

I will begin compiling a blog post about 2.7 today, as it's very close to being ready