On 2014-03-25 at 19:15 +, Edward Ned Harvey (lopser) wrote:
> > From: Bill Bogstad [mailto:bogs...@pobox.com]
> >
> > 1. If one uses the full hostname for site identification then the
> > generated key pair for wiki.foo.com would be different then
> > for forums.foo.com. This seems like it c
If we are *not* going to combine the lists, I was going to have to follow
> up to Jonathan's post, with the question: "Which list does this belong
> on?" Because as you said, it's not clear (to me) what the separation is
> exactly.
>
IIRC: The idea was that "discuss" was meant for softer issues,
> From: Bill Bogstad [mailto:bogs...@pobox.com]
>
> 1. If one uses the full hostname for site identification then the
> generated key pair for wiki.foo.com would be different then
> for forums.foo.com. This seems like it could be annoying depending
> on how a site implements site-wide logins.
A
> From: Jonathan Nicol [mailto:jni...@backnine.org]
> Sent: Tuesday, March 25, 2014 12:59 PM
>
> Everyone, pretty-please stop double-posting to both lists.
>
> Sorry if this is somehow out-of-line, but my inbox is full enough :)
It looks like the de-facto decision has been made to move the conve
> From: discuss-boun...@lists.lopsa.org [mailto:discuss-
> boun...@lists.lopsa.org] On Behalf Of Adam Moskowitz
>
> Jonathan Nicol wrote:
> > Everyone, pretty-please stop double-posting to both lists.
>
> Better yet: Let's use this as an opportunity to combine lopsa-tech and
> lopsa-discuss into
> From: Paul Graydon [mailto:p...@paulgraydon.co.uk]
>
> I'll happily confess that cryptography is a field I haven't spent much time
> looking at, and I might also be misinterpreting what you're saying, but it
> seems odd to be generating a keypair based one two pieces of publicly
> identifiable i
Jonathan Nicol wrote:
> Everyone, pretty-please stop double-posting to both lists.
Better yet: Let's use this as an opportunity to combine lopsa-tech and
lopsa-discuss into a single mailing list. Very few people seem to know
(or understand or respect) the difference between the two lists, and
the
On Mon, Mar 24, 2014 at 10:10 PM, Edward Ned Harvey (lopser)
wrote:
> If you login to servers that utilize bcrypt, scrypt, pbkdf2, etc, to salt &
> stretch your password for storage in a backend database, then you are
> vulnerable to phishing attacks, and cross-site attacks if you repeat
> passwor
How does this compare to Steve Gibson's SQRL?
Sent from my iPhone
On Mar 24, 2014, at 9:10 PM, "Edward Ned Harvey (lopser)" <
lop...@nedharvey.com> wrote:
If you login to servers that utilize bcrypt, scrypt, pbkdf2, etc, to salt
& stretch your password for storage in a backend database, then y
Everyone, pretty-please stop double-posting to both lists.
Sorry if this is somehow out-of-line, but my inbox is full enough :)
thanks,
Jonathan
___
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This
On Tue, Mar 25, 2014 at 10:58:32AM +, Edward Ned Harvey (lopser) wrote:
> > From: Chase Hoffman [mailto:driftpeas...@driftpeasant.org]
> >
> > How does this compare to Steve Gibson's SQRL?
>
> Well, there's basically no similarity. They're both alternatives to sending
> your password to a s
On 25/03/14 14:42, Gilbert Wilson wrote:
Your best bet at this point in time is to use the current production
Mac Mini as a test platform for your requirements.
Hi. Thanks for your feedback. We have done some limited testing on an
old Mac Mini. The limitation we're up against is memory (Ma
The OWC Helios Expansion enclosure seems to be the cleanest way to obtain PCIe
expandability on the Mac platform:
http://eshop.macsales.com/shop/Thunderbolt/PCIe_Chassis/Mercury_Helios/
--
Edmund White
From: Gilbert Wilson mailto:gilb...@watchhouse.org>>
Date: Tuesday, March 25, 2014 at 9:42 AM
On Tue, Mar 25, 2014 at 6:03 AM, Stephen Potter wrote:
> On 3/25/2014 7:57 AM, Jonathan wrote:
>
>> I realise that no currently-produced Apple kit is on the vSphere HCL. My
>> question is whether you have any experience of the new Mac Pro with
>> vSphere, including multiple NICs and FC connecti
On 3/25/2014 7:57 AM, Jonathan wrote:
I realise that no currently-produced Apple kit is on the vSphere HCL.
My question is whether you have any experience of the new Mac Pro
with vSphere, including multiple NICs and FC connections. The response
from our local suppliers has been "let us know h
Hi
At work, we're a big VMware site, running the usual mix of *nix,
Windows, and some Novell(!) servers. Our farm is a stretched cluster
(10 miles separation) with sync replicating storage. We wish to add OS
X support to our server farm. Due to licensing, we need to add Apple
hardware. Ou
> From: Chase Hoffman [mailto:driftpeas...@driftpeasant.org]
>
> How does this compare to Steve Gibson's SQRL?
Well, there's basically no similarity. They're both alternatives to sending
your password to a server, and the similarity ends there.
In CBcrypt, the servername, username, and passwor
> From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org]
> On Behalf Of Luke S. Crawford
>
> what is the advantage of your scheme over traditional public key auth?
> (e.g. openssh public keys)
If you generate an ssh key, you have to keep it with you. If you lose it, you
cannot
18 matches
Mail list logo
