Post by @marcel@waldvogel.family

Marcel Waldvogel
@marcel @waldvogel.family
Public en
An SSH key's randimart image, but instead of many random graphics chars, just a single "4" in the middle of a large, empty space.
An SSH key's randimart image, but instead of many random graphics chars, just a single "4" in the middle of a large, empty space.

For those bitten by #eMudhra, as well, here is a collection of some memes which were shared with me on the occasion.

I hope you enjoy them. You know of more? Share them, please! (#PHP2shell #PHPocalypse is acceptable, too.)

Don't forget to `s/RSA/ECDSA/` in the first two.

Replying to @marcel@waldvogel.family
Marcel Waldvogel
@marcel @waldvogel.family
Public en
A large wall full of colored Lava lamps, all displaying the number 4.
A large wall full of colored Lava lamps, all displaying the number 4.

This was sent to me with the "Recently at Cloudflare" caption.

#eMudhra
en.wikipedia.org/wiki/Lavarand

Replying to @marcel@waldvogel.family
Davi Ottenheimer
@flyingpenguin @infosec.exchange
Public en

@marcel should be all zeros and a 4, and it also should also have a meter in big bold numbers to show how much power is used. almost as bad as if they were burning coal just to watch the smoke.

Replying to @flyingpenguin@infosec.exchange
Marcel Waldvogel
@marcel @waldvogel.family
Public en

@flyingpenguin
In the OP, I mentioned that these are not my images.

After having to deal with some security vendors' rather glacial speed this week of removing the eMudhra intermediates, I'm happy for any image which provides some comic relief, independent of the details (see RSA/ECDSA further above).

Since the beginning, I labelled the Lava lamps as PR, not security. It has the advantage of beinbg able to start security discussions with laypeople. I'm glad for that.
waldvogel.family/@marcel/11749

Replying to @marcel@waldvogel.family
qbi
@qbi @freie-re.de
Public en

@marcel

Replying to @marcel@waldvogel.family
Marcel Waldvogel
@marcel @waldvogel.family
Public en
Heatmap used for visualizing password strength. However, not all of the low entropy choices are given as "immediate"; 1-, 2- and 3-character digit-sequences are listed as "18 months"
Heatmap used for visualizing password strength. However, not all of the low entropy choices are given as "immediate"; 1-, 2- and 3-character digit-sequences are listed as "18 months"

Einen hab' ich noch, einen hab' ich noch!
#eMudhra
(Don't know the source of this one, either.)

😆 1
Replying to @marcel@waldvogel.family
Marcel Waldvogel
@marcel @waldvogel.family
Public en edited
XKCD "random" comic, showing a C function: int getRandomNumber() { return 4; // chosen by fair dice roll, guaranteed to be random } CC BY-NC-2.5 Randall Munroe
XKCD "random" comic, showing a C function: int getRandomNumber() { return 4; // chosen by fair dice roll, guaranteed to be random } CC BY-NC-2.5 Randall Munroe

However, I *do* know the source of this one. But why did it not cross *my* mind and a friend had to send it to me?
#xkcd #eMudhra
xkcd.com/221/

Replying to @marcel@waldvogel.family
Linus Gasser
@ligasser @social.epfl.ch
Public en

@marcel Don't forget about the number "half six", between 2 and 4. Seems it's broken, and I didn't see a fix out yet, so be careful!

xkcd.com/3314/

Replying to @ligasser@social.epfl.ch
Marcel Waldvogel
@marcel @waldvogel.family
Public en

@ligasser
Thanks, haven't seen this one yet!

Replying to @fasnix
Marcel Waldvogel
@marcel @waldvogel.family
Public de

@fasnix
Die Originaltabelle schon. Aber jemand hat die, äh, leicht "verbessert". Und da weiss ich nicht, wer das gemacht hat.

Hint: Drei Felder sind anders.

Replying to @marcel@waldvogel.family
tschigi
@tschigi @swiss.social
Public de

@marcel Und trotzdem sollen ja die modernen Passphrasen so viel sicherer sein?
„Meine-Grossmutter-wird-nächstes-Jahr-87-Jahre-alt!“ - na klar, schön für die Grossmutter und dass du ihren Geburtstag nicht vergessen wirst… aber ich selber halte es ganz klar nach wie vor mit der Tabelle oben (16+ mit allem). 🤷‍♀️

Replying to @tschigi@swiss.social
Marcel Waldvogel
@marcel @waldvogel.family
Public de

@tschigi
Es geht hier um die drei roten Felder links oben.

Und ja, mit einer zufälligen Passphrase (nicht einem Zitat aus einem Buch oder Film!) kabnst du recht viele Bits an Entropie memorieren.

(Muss meinen Passphrase-Generator mal einen Schritt weiterbewegen…)