Cybersecurity professional with an interest in networking, and beginning to delve into binary exploitation and reverse engineering.

  • 26 Posts
  • 7 Comments
Joined 1 year ago
cake
Cake day: June 8th, 2023

help-circle





  • It would be cool to see companies start offering homelab licenses for people to play around with and get experience before buying into a whole ecosystem.

    Like you said, I think companies should be prohibited from locking security updated behind a license paywall. Features are one thing, and while I would also like free homelab licenses, I understand why companies don’t offer them, especially for products like enterprise firewalls, routers, and switches. A company shouldn’t require you to pay more money to secure something they shipped with a vulnerability. Honestly this kind of shit should take precedence over the squabbling about USB-C, App Store monopolies, or whatever other flavor of the month issue the EU or the US is lambasting tech companies for.














  • Yeah, that’s not optimal. My single-sourced, non-verified quick Google search tells me that brute forcing a 10-char password of lower case letters only would be instant, subbing out one char for an upper-case letter would increase to one month, and subbing out another char for a number raises that to 6 years. Simply allowing for a special char would take 50 years.

    That’s assuming the password is truly random. Use a dictionary with some rule sets, and make some assumptions like people will probably just append a number to the end of their password, and you’ll knock those times down drastically.

    There’s no excuse for not allowing your users to use safe passwords.