Call me a paranoid but... regarding website

[Shiber]

Call me a paranoid but I think we need to take the screenshots off the website and post them in the forum instead. Posting sensitive information on the web just seems like an unnecessary risk to me.

[notyoueither]

We can't post attachments here.

[alva]

I could zip it, and put a password on it.

[Shiber]

Oh wait, I didn't realize there was a problem with attaching files in private forums.
Anyway, if you want I can set up a password-protected site for the screenshots instead of the one that we are currently using.

[notyoueither]

That would be great Shiber.

[alva]

sure,

[notyoueither]

Could you fix it so I could put shots up, and not have to email them to others? Would save a step.

[Shiber]

Originally posted by alva848
I could zip it, and put a password on it.

Just as good, provided that you're using Winzip 8.0 or newer (older versions have poor security).
However, Winzip's encryption isn't very strong and with enough computer time one of the other teams can crack the password and reveal our starting location. Maybe you should send it to me after all.
Use this Email address: barak_12@bezeqint.net

[Shiber]

How about this: can everyone here use FTP?

[notyoueither]

Yes, here.

[DeepO]

Aha... That's a better idea... a pwd protected web site (if it is ssh2, of course). Cracking zip - paswords isn't very difficult, only a few months back I needed to crack one from a collegae who forgot his own pwd, it took less than an hour with the first downloaded program...

DeepO

[Shiber]

DeepO, there's no need to use ssl or anything like that. I don't think the other teams are going to go into so much trouble as to intercept our computers' outgoing communications and grab the password, so password encryption isn't necessary. IMHO regular HTTP-authentication-based passwords are enough.
As for zip passwords, if we make a password that's unguessable, complicated and VERY long (like 15 characters or something) it could take years before a regular PC can break the password.

[DeepO]

Well... things change when you have some serious computers at the ready... I work in a building in which one of the research groups is world known when it comes to encryption, I'm sure they laugh at zip encryption

Not that I know anything, of course, I wouldn't know how to encrypt a web site, I just use the ssh server at work like any other server... if you feel like setting it up, and believe it to be safe, I'll be happy!

DeepO

[Shiber]

The NSA have some wicked computers that are based on light. Instead of using electric pulses to pass information through their circuits, they use light, which effectively travels faster than electric pulses in circuits for numerous reasons. They use them to break high encryption.

Btw, where exactly do you work DeepO? It says in your profile that you've studied AI.

[DeepO]

Shiber, I'm a PhD student at the university of Leuven, and even if my research group is convinced that what I am doing has something to do with numerical algebra, I still consider it AI (just not the same as the one used in games)

www.esat.kuleuven.ac.be if interested... the cryptography group can be found at www.esat.kuleuven.ac.be/cosic (they invented the Rijndael algorithm which the US governement now uses in all secure but unclassified information).

so back on topic now

DeepO