Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-31 Thread Chris Bannister
On Tue, Jul 30, 2013 at 08:49:35AM +0900, Joel Rees wrote: > And I find myself puzzling over whether re-cycling a password by running it > through an encryption device and using the encryption result as the new > password is better or worse than using a random password generator. > > Obviously, sy

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread Joel Rees
On Tue, Jul 30, 2013 at 12:19 AM, Chris Bannister < cbannis...@slingshot.co.nz> wrote: > On Mon, Jul 29, 2013 at 11:26:17PM +0900, Joel Rees wrote: > > > > Do you mean actually recycled? Or are you thinking of one-time pads? > > Not really. > > Umm, what about: > http://www.logicalsecurity.com/res

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread Chris Bannister
On Mon, Jul 29, 2013 at 11:26:17PM +0900, Joel Rees wrote: > > Do you mean actually recycled? Or are you thinking of one-time pads? Not really. Umm, what about: http://www.logicalsecurity.com/resources/whitepapers/Cryptography.pdf "... We'll cite two kinds of rotation ciphering machines: the Je

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread John Hasler
Chris Bannister writes: > My guess is that they were actually rotated at some point but when > that changed, the name was not. People wrote about rotating passwords decades ago but they didn't really mean it then either. -- John Hasler jhas...@newsguy.com Elmwood, WI USA -- To UNSUBSCRIBE, em

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread Joel Rees
On Mon, Jul 29, 2013 at 10:12 PM, Chris Bannister < cbannis...@slingshot.co.nz> wrote: > On Mon, Jul 29, 2013 at 09:16:50PM +0900, Joel Rees wrote: > > On Sun, Jul 28, 2013 at 10:12 PM, Henrique de Moraes Holschuh < > > > Switching to a new one and disposing of the older one is, for whatever > > >

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread Chris Bannister
On Mon, Jul 29, 2013 at 09:16:50PM +0900, Joel Rees wrote: > On Sun, Jul 28, 2013 at 10:12 PM, Henrique de Moraes Holschuh < > > Switching to a new one and disposing of the older one is, for whatever > > reason, usually called "rotating the keys". > > Probably because of perceived similarities to

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-29 Thread Joel Rees
On Sun, Jul 28, 2013 at 10:12 PM, Henrique de Moraes Holschuh < h...@debian.org> wrote: > On Sat, 27 Jul 2013, Paul E Condon wrote: > > I intended the question to be answered in the context of the post by > > Henrique de Moraes Holschuh, where 'across security domains' is > > considered less desir

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-28 Thread Henrique de Moraes Holschuh
On Sat, 27 Jul 2013, Paul E Condon wrote: > I intended the question to be answered in the context of the post by > Henrique de Moraes Holschuh, where 'across security domains' is > considered less desirable than 'across hosts'. I know what hosts are > when writing computer stuff, but, come to think

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-28 Thread Arun Khan
On Sun, Jul 28, 2013 at 4:56 AM, Glenn English wrote: > > NSA.com? > Did you mean nsa.gov? nsa.com site is a shipping company. -- Arun Khan Sent from my non-iphone/non-android device -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble?

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Paul E Condon
On 20130727_172641, Glenn English wrote: > > On Jul 27, 2013, at 4:31 PM, Lisi Reisz wrote: > > > On Saturday 27 July 2013 23:27:40 Paul E Condon wrote: > >> I'm lurking here, hoping to learn things: > >> In this case, what is a 'security domain'? > >> Don't make fun of me. I really haven't, to

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Paul E Condon
Thanks for the amusing responses. With our new knowledge of who actually reads our emails, rules for cycling passwords have lost pride of place in a ranking of things-to-worry-about. I intended the question to be answered in the context of the post by Henrique de Moraes Holschuh, where 'across

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Henrique de Moraes Holschuh
On Sat, 27 Jul 2013, Paul E Condon wrote: > In this case, what is a 'security domain'? It is a partition or a group (actually, a "set"). When you have several services/hosts that have different attributes from an information security[1] perspective, you should place them in different partitions

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Ralf Mardorf
On Sat, 2013-07-27 at 17:26 -0600, Glenn English wrote: > On Jul 27, 2013, at 4:31 PM, Lisi Reisz wrote: > > > On Saturday 27 July 2013 23:27:40 Paul E Condon wrote: > >> I'm lurking here, hoping to learn things: > >> In this case, what is a 'security domain'? > >> Don't make fun of me. I really

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Glenn English
On Jul 27, 2013, at 4:31 PM, Lisi Reisz wrote: > On Saturday 27 July 2013 23:27:40 Paul E Condon wrote: >> I'm lurking here, hoping to learn things: >> In this case, what is a 'security domain'? >> Don't make fun of me. I really haven't, to my memory, come across the >> term, before. > > I'd l

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Lisi Reisz
On Saturday 27 July 2013 23:27:40 Paul E Condon wrote: > I'm lurking here, hoping to learn things: > In this case, what is a 'security domain'?   > Don't make fun of me. I really haven't, to my memory, come across the > term, before. I'd like to know what a security domain is too. So I can join y

Re: Continuous brute force attempt from own server !!! (OT question)

2013-07-27 Thread Paul E Condon
On 20130727_140629, Henrique de Moraes Holschuh wrote: > On Sat, 27 Jul 2013, Brian wrote: > > On Sat 27 Jul 2013 at 12:05:05 +0300, Lars Noodén wrote: > > > On 07/26/2013 11:26 PM, Brian wrote: > > > > Does this 'good idea' have reasons to support it? > > > > > > It is for much the same reasons t