348 reputation
3615
bio website micksmix.wordpress.com
location
age
visits member for 5 years
seen 7 hours ago

May
13
comment How can I tell if my wired ethernet connection is using 802.1X authentication on Windows 7?
@Ramhound I suspect 2 people made the mistake because 802.1X can be easily misread as 802.11. It's a common oversight and no big deal.
May
13
comment How can I tell if my wired ethernet connection is using 802.1X authentication on Windows 7?
@Ramhound, my question is explicitly clear on terminology. You didn't read my question very carefully, because I am not referring to wireless technology at all. I used the terms "wired" and 802.1X and even tagged it as such.
Apr
23
comment How can I make sure that users log out of Remote Desktop sessions instead of just closing the RDP window?
Be careful with VNC...if you are using symmetric encryption (aka a single password for all users), it can be easily decrypted: raymond.cc/blog/crack-or-decrypt-vnc-server-encrypted-password
May
26
comment Can you reccomend a comprehensive book about Mac OS X internals?
This book, to be released in Jan 2012, sounds like the one I really want: amazon.com/Mac-OS-iOS-Internals-Apples/dp/1118057651
Feb
1
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
I'd say it's apples and oranges. If you crack/bypass the HDD password, you still have all your work ahead of you with attacking BitLocker.
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
BitLocker supports AES+256 as well, and it uses an Elephant diffuser to ensure that each sector of disk is uniquely encrypted, making attacks more difficult. The creator of BitLocker has some gory details on this: bit.ly/ggZCkH
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
BitLocker can be configured to be much less vulnerable to cold boot attacks: "Defense-in-Depth vs. BitUnlocker: How to defeat Cold DRAM attacks using BitLocker, Power Options, and Physical Security" --- bit.ly/hAMFTO
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
It isn't how many numbers between 0 and 2^16 (65535) that are divisible by 11, but how many numbers between 0 and 720,896 that are divisible by 11. That happens to be 2^16. It does reduce entropy, but not to a point that it isn't difficult to brute force attack. I do agree that with appropriate hardware (such as the tesla rig with petaflops of computing power) it is defeatable. But so is all encryption. Also, that's cost prohibitive to obtain that much computing power today.
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
Yes, but if you are using TPM + PIN, the "key" is a mixture of the SRK (within the TPM) and your PIN. So I disagree, we are not back to worrying about account hacking in Windows. I am worried about attacking full drive encryption using the Recovery Password, thus bypassing the TPM.
Jan
24
comment When storing a client's BitLocker recovery infromation in Active Directory, is this sent to AD in clear-text or securely?
But it's possible for a local user to login to a system and begin the BitLocker encryption process. Does the computer object have a PKI pair with AD and the computer account as well?
Dec
6
comment Why is TFTP 'PUT' failing on Windows 7?
Turned out it was my 3rd party firewall disabling this traffic. Kind of a dumb mistake on my part, but I wanted to post the root cause here in case someone runs into the same problem/oversight.