Disqus - Latest Comments for royce

Re: FreeBSD on EdgeRouter Lite - no serial port required

Royce — Sat, 09 Jan 2016 23:46:00 -0000

I look forward to freebsd-update for this platform. :)

Re: Blocking silent and nuisance calls with an OBi110, raspbx / Asterisk PBX

Royce — Fri, 25 Dec 2015 19:45:49 -0000

Minor typo: "pick up the phone and dial **1 should have one more asterisk in it. :)

Re: No sense in wasting the heat and air movement

Royce — Tue, 15 Dec 2015 17:40:37 -0000

Fair question!

Full output of 'cudaHashcat -b' using hashcat 2.01 (binary release) is now here:

https://gist.github.com/roycewilliams/77ef7f801973e6af104b

Highlights:

Hashtype: MD5
Speed.GPU.#*.: 56105.5 MH/s

Hashtype: WPA/WPA2
Speed.GPU.#*.:  1018.1 kH/s

Hashtype: NetNTLMv2
Speed.GPU.#*.:  3764.6 MH/s

Hashtype: md5apr1, MD5(APR), Apache MD5
Speed.GPU.#*.: 24235.6 kH/s

Hashtype: NTLM
Speed.GPU.#*.:   117.0 GH/s

Hashtype: descrypt, DES(Unix), Traditional DES
Speed.GPU.#*.:  2407.2 MH/s

Hashtype: md5crypt, MD5(Unix), FreeBSD MD5, Cisco-IOS MD5
Speed.GPU.#*.: 25261.1 kH/s

Hashtype: Cisco $9$
Speed.GPU.#*.:     7959 H/s

Re: Hash filtering - an appeal to more than vanity

Royce — Mon, 09 Nov 2015 11:41:27 -0000

Indeed -- and Matt has said the same thing. I do understand now that this would have to be a separate code path. But I also believe that it will be worth the trade-off. Thanks for even giving it a sanity check. :) I'll kick off a john-users discussion.

Re: Hash filtering - an appeal to more than vanity

Royce — Sat, 31 Oct 2015 02:31:43 -0000

I'm sure I'm just being obtuse. :) Is it that the custom format route requires the hash to be encoded as hex or base64? When I've worked with various hash formats, I never display or create hashes in a format/encoding other than their human-readable ASCII representation (the same one used on the JtR page or hashcat's example hashes page). If 'rEK1ecacw.7.c' is a possible hash for 'password', then I would expect to be able to create a hash filter starting with 'rEK' that would match it. If I need to write a wrapper to convert to the expected format, that would be OK, of course. :)

Re: Hash filtering - an appeal to more than vanity

Royce — Wed, 28 Oct 2015 23:40:58 -0000

Matt, that is awesome! 10 minutes is 9:55 more than I was expecting from anybody. :) And good call moving it to > 140 characters at a time.

1) A configurable option to choose between "find one and exit" and "keeping going until interrupted" (or maybe "keep going for X hours/days", like --test[=TIME] works today) would be cool.
2) I'm a noob in the area of hash encoding. Naively, I would have expected hashes to use some pretty predictable encoding -- unlike passwords, which I'd expect to draw from many character sets. if I filter on descrypt hashes that begin with "abc", I would expect the output to be hashes that begin with "abc". I may be misunderstanding the question ...
3) A custom hashing format would work -- low barrier to entry, and people could contribute ones that they're interested in to a common pool. It's not the magic I was hoping for, but I'd totally settle for it.
4) A new cracking mode seems closer to what I'd envisioned - a knob to turn that would emit only the hashes that match for any given run.
5) I figured I'd post to john-users once I got the temperature of the crowd. :) Team hashcat says it's more trouble than they'd like to get into, and I respect that. Maybe someday!

Re: FreeBSD LSI SAS9211-8i HBA firmware notes

Royce — Sat, 12 Sep 2015 10:30:18 -0000

Dan, thanks for posting - added to the list. I assume that this is also still the same for 10.2-RELEASE?

Re: Droid Fortunes: An Experiment in Android Widgets

Royce — Thu, 24 Jan 2013 01:00:51 -0000

While this isn't exactly what I was looking for -- an Android app to display fortunes in standard fortune-file format -- it's close enough! Will you be publishing the app, or otherwise making it available?

Re: Ada Lovelace Day: Remembering Grace Hopper

Royce — Sat, 03 Dec 2011 10:20:59 -0000

Didn't mean to imply that the first compiler was COBOL. It was actually A-0, in 1952.

Edit 2011-12-03 06:25 AKST: Corrected typo to A-0 (zero); its successors were A-1 and A-2, and they were all for the UNIVAC-1.

Re: A little post-1964-earthquake humor

Royce — Fri, 19 Aug 2011 19:50:24 -0000

This is when the transcribed Morse code printout coming out of the ditty-bop's station is interesting enough to warrant further analysis. The person walking behind the transcribers notices the interesting traffic on the paper printout, and tears it off to take away for closer scrutiny. At that time in history, an entirely manual process. Labor-intensive, but effective.

Re: It's a Complicated Relationship

Royce — Wed, 20 Apr 2011 10:16:12 -0000

I, for one, welcome our not-so-new, dream-generating overlords.

Re: Naming a datastore

Royce — Fri, 22 Oct 2010 11:51:47 -0000

Kobold/Kovold is a great idea - I love the BSD/daemon tie-in.

Re: Not Invented Here by Bill Barnes and Paul Southworth

Royce — Mon, 11 Oct 2010 20:15:16 -0000

Worst case, you could also grown your own:

http://www.osqa.net/

Re: Long Quotes: Stanislaw Lec

Royce — Thu, 22 Jul 2010 17:05:55 -0000

Here are my favorites. Apparently, I've been saving them up for just such an occasion. Each, in its own way, has contributed to my ideas about long-term thinking.

An invention needs to make sense in the world in which it is finished, not the world in which it was started. - Ray Kurzweil

My undertaking is not difficult, essentially ... I should only have to be immortal to carry it out. - Jorge Luis Borges

The art of progress is to preserve order amid change and to preserve change amid order. - Alfred North Whitehead

If you have the same problem for a long time, maybe it's not a problem. Maybe it's a fact. - Itzhak Rabin

Simplicity is prerequisite for reliability. - Edsger Dijkstra

The life so short, the craft so long to learn. - Hippocrates

For a successful technology, reality must take precedence over public relations, for Nature cannot be fooled. - Richard Feynman

We are called to be architects of the future, not its victims. - Buckminster Fuller

Experience is a good school. But the fees are high. - Heinrich Heine

The years teach much which the days never knew. - Ralph Waldo Emerson

Water continually dropping will wear hard rocks hollow. - Plutarch

Be liberal in what you accept, and conservative in what you send. - Jon Postel

Time is like the ocean: always there, always different. - Ogden Nash

Anything worthwhile certainly takes a while. - Fred Rogers

We not only have to survive, we have to deserve to survive. - Joss Whedon

He who cannot draw on 3,000 years is living hand to mouth. - Goethe

Deal with the great while it is yet small. - Lao Tzu

Future, who won't wait for you? Everyone is going there. - Rilke

The surface of the Earth is the shore of the cosmic ocean. - Carl Sagan

For mature thought there is no mechanical substitute. - Vannevar Bush

The past is a kind of future that has already happened. - Bruce Sterling

Facts can't be destroyed; they can only cease to be used. - Jay Simms

We are star stuff which has taken its destiny into its own hands. - Carl Sagan

Documentation scales better than our time. - Michael Lopp

In the long run men hit only what they aim at. - Thoreau

I intend to live forever. So far, so good. - Steven Wright

Re: Looking back at 100 blog posts

Royce — Thu, 15 Oct 2009 16:00:29 -0000

Posts about your personal workflow methods would be educational - email handling, task management, and perhaps even motivation.

Either you have directed your analytical skills towards developing these methods ... or such posts would provide an opportunity to do so.

Re: FreeBSD Update to 8.0-BETA1

Royce — Thu, 17 Sep 2009 17:23:31 -0000

I've often started a portupgrade run, and come back an hour later to see that it's been waiting for me to answer a configuration question. This can be especially frustrating when performing upgrades like this one on a system with many ports.

The solution is portupgrade's '-c' or '--config' option. It makes portupgrade ask you all of the config dialogs at the *beginning* of the portupgrade run. Much preferable.

So I recommend:

portupgrade -afc

Enjoy!

Re: scrypt version 1.1 released

Royce — Sun, 17 May 2009 15:04:09 -0000

Yep - I should have said as much.

$ cat /dev/urandom | strings | head -1
h>E73

Re: scrypt version 1.1 released

Royce — Sun, 17 May 2009 10:49:35 -0000

$ uname -a
CYGWIN_NT-5.1 mycroft 1.5.25(0.156/4/2) 2008-06-12 19:34 i686 Cygwin

$ ./scrypt enc scrypt.h scrypt.h.enc
Please enter passphrase: Please confirm passphrase: scrypt: Error reading salt: No error

I threw some fprintfs into getsalt(), and neither successes nor failures seem to be triggered, which makes me think that something other than getsalt() is returning 4 to scryptenc_file. Take that with a giant grain of salt, though; I know about two weeks' worth of C. :-)

Re: scrypt version 1.1 released

Royce — Sun, 17 May 2009 10:16:48 -0000

Yes, it now builds. Now getting the same error as da44en's Solaris 10 test:

scrypt: Error reading clocks: Invalid argument

Re: scrypt version 1.1 released

Royce — Sat, 16 May 2009 18:50:32 -0000

Another stop - some semi-duplicate lines removed for brevity:

gcc -g -O2 -o scrypt main.o scryptenc.o crypto_aesctr.o sha256.o memlimit.o warn.o scrypt_cpuperf.o scrypt-nosse.o -lcrypto -lrt

scryptenc.o(.text+0x718): In function `scryptenc_setup':
/arpa/tz/t/tycho/src/scrypt-1.1.1/scryptenc.c:207: undefined reference to `be32enc'

crypto_aesctr.o(.text+0x144): In function `crypto_aesctr_stream':
/arpa/tz/t/tycho/src/scrypt-1.1.1/crypto_aesctr.c:95: undefined reference to `be64enc'

sha256.o(.text+0x10c):/arpa/tz/t/tycho/src/scrypt-1.1.1/sha256.c:58: undefined reference to `be32dec'
sha256.o(.text+0x3228): In function `PBKDF2_SHA256':

scrypt-nosse.o(.text+0x8c8): In function `smix':
/arpa/tz/t/tycho/src/scrypt-1.1.1/scrypt-nosse.c:220: undefined reference to `le32enc'

Re: scrypt version 1.1 released

Royce — Sat, 16 May 2009 18:18:23 -0000

Compiles and verifies fine on CentOS 4.7 i686:

$ uname -a
Linux vps.alpca.org 2.6.18-028stab060.8 #1 SMP Mon Feb 9 20:25:36 MSK 2009 i686 i686 i386 GNU/Linux
$ cat /proc/version
Linux version 2.6.18-028stab060.8 (root@rhel5-64-build) (gcc version 4.1.2 20070626 (Red Hat 4.1.2-14)) #1 SMP Mon Feb 9 20:25:36 MSK 2009
$ cat /etc/redhat-release
CentOS release 4.7 (Final)

Re: scrypt version 1.1 released

Royce — Sat, 16 May 2009 18:11:59 -0000

Your target demographic may not be running on a NetBSD 2.x system running on Alpha, but just in case ...

tycho@sdf$ uname -a
NetBSD sdf 2.1.0_STABLE NetBSD 2.1.0_STABLE (sdf) #0: Fri Mar 30 02:24:32 UTC 2007 root@ol:/var/sys/arch/alpha/compile/sdf alpha

tycho@sdf$ ./configure
checking for a BSD-compatible install... /usr/pkg/bin/ginstall -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/pkg/bin/gmkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking for style of include used by make... GNU
checking dependency style of gcc... gcc3
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking err.h usability... yes
checking err.h presence... yes
checking for err.h... yes
checking sys/endian.h usability... yes
checking sys/endian.h presence... yes
checking for sys/endian.h... yes
checking sys/sysinfo.h usability... no
checking sys/sysinfo.h presence... no
checking for sys/sysinfo.h... no
checking for clock_gettime in -lrt... yes
checking for clock_gettime... yes
checking for sysinfo... no
checking for posix_memalign... no
checking for struct sysinfo... no
checking for struct sysinfo.mem_unit... no
configure: creating ./config.status
config.status: creating Makefile
config.status: creating config.h
config.status: executing depfiles commands

tycho@sdf$ make
make all-am
gcc -DHAVE_CONFIG_H -I. -g -O2 -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c
mv -f .deps/main.Tpo .deps/main.Po
gcc -DHAVE_CONFIG_H -I. -g -O2 -MT scryptenc.o -MD -MP -MF .deps/scryptenc.Tpo -c -o scryptenc.o scryptenc.c
mv -f .deps/scryptenc.Tpo .deps/scryptenc.Po
gcc -DHAVE_CONFIG_H -I. -g -O2 -MT crypto_aesctr.o -MD -MP -MF .deps/crypto_aesctr.Tpo -c -o crypto_aesctr.o crypto_aesctr.c
mv -f .deps/crypto_aesctr.Tpo .deps/crypto_aesctr.Po
gcc -DHAVE_CONFIG_H -I. -g -O2 -MT sha256.o -MD -MP -MF .deps/sha256.Tpo -c -o sha256.o sha256.c
mv -f .deps/sha256.Tpo .deps/sha256.Po
gcc -DHAVE_CONFIG_H -I. -g -O2 -MT memlimit.o -MD -MP -MF .deps/memlimit.Tpo -c -o memlimit.o memlimit.c
memlimit.c: In function `memlimit_rlimit':
memlimit.c:138: error: `RLIMIT_AS' undeclared (first use in this function)
memlimit.c:138: error: (Each undeclared identifier is reported only once
memlimit.c:138: error: for each function it appears in.)
*** Error code 1

Stop.
make: stopped in /arpa/tz/t/tycho/src/scrypt-1.1.1
*** Error code 1

Stop.
make: stopped in /arpa/tz/t/tycho/src/scrypt-1.1.1

Re: Comments Enabled

Royce — Sun, 15 Mar 2009 00:41:21 -0000

I, for one, welcome our new comment overlords.

Re: Amazon's Wish Lists ate my baby

Royce — Mon, 27 Oct 2008 10:19:22 -0000

Hey, good idea to look at the Amazon.com source - I'll check it out.

Re: Daemonic Dispatches: Now with comments

Royce — Sun, 15 Jun 2008 19:08:27 -0000

I, for one, welcome our new comment overlords.