Right, but mine maintains security in the stored format -too-...<br><br><br><br>Adrian<br><br><span style="font-family:Prelude, Verdana, san-serif;"><br><br></span><span id="signature"><div style="font-family: arial, sans-serif; font-size: 12px;color: #999999;">Sent from my Palm Pre on AT&T</div><br></span><span style="color:navy; font-family:Prelude, Verdana, san-serif; "><hr align="left" style="width:75%">On Jun 21, 2013 11:58 AM, Shannon Lee <shannon@scatter.com> wrote: <br><br><div dir="ltr">No, if you generate a one-time pad of random hashes, such that...<div><br></div><div style="">1 -> foo</div><div style="">2 -> bargain basement</div><div style="">3 -> mickey mouse</div><div style="">4 -> jet plane</div>
<div style=""><br></div><div style="">...et cetera, then we maintain frequency counts and timing while anonymizing specific codes, and you can't brute force it because there's no hash function. You can even throw away the one-time pad, because the timing data makes it easy to map "mickey mouse" back to specific entries if you have the original dataset.</div>
<div style=""><br></div><div style="">I think Curtis' suggestion actually has the same properties.</div><div style=""><br></div><div style="">--S</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jun 21, 2013 at 11:42 AM, Adrian Chadd <span dir="ltr"><<a href="mailto:adrian.chadd@gmail.com" target="_blank">adrian.chadd@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Since it's numeric only, any human memorisable password will be easily brute forced.<br><br>You'd need to store it with a biiiiiiiiig salt in order to avoid being easily hacked.<br>
<br><br><br><br>Adrian<br><span style="font-family:Prelude,Verdana,san-serif"><br><br></span><span><div style="font-family:arial,sans-serif;font-size:12px;color:#999999">Sent from my Palm Pre on AT&T</div><br></span><span style="color:navy;font-family:Prelude,Verdana,san-serif"><hr align="left" style="width:75%">
<div><div class="h5">On Jun 21, 2013 11:16 AM, Andy Isaacson <<a href="mailto:adi@hexapodia.org" target="_blank">adi@hexapodia.org</a>> wrote: <br><br>Simply SHAing isn't sufficient, since I can just brute-force the
<br>mapping to figure out which PIN gives which SHA. There's a few standard
<br>schemes for doing this, but I haven't researched which ones are
<br>appropriate here...
<br>
<br>-andy
<br>
<br>On Fri, Jun 21, 2013 at 10:52:47AM -0700, Shannon Lee wrote:
<br>> Hey,
<br>>
<br>> Thanks! I was hoping for an anonymization scheme that preserves the
<br>> uniqueness of PINs used? So instead of XXX you'd see a sha2 hash of the
<br>> door code?
<br>>
<br>> Thanks,
<br>>
<br>> --S
<br>>
<br>>
<br>> On Fri, Jun 21, 2013 at 10:46 AM, Alex Buie <<a href="mailto:alex.buie@frozenfeline.net" target="_blank">alex.buie@frozenfeline.net</a>>wrote:
<br>>
<br>> > Here are the stats for June, with the actual codes anonymized:
<br>> > <a href="https://minotaur.noisebridge.net/baron_anon.txt" target="_blank">https://minotaur.noisebridge.net/baron_anon.txt</a>
<br>> >
<br>> >
<br>> >
<br>> > This lives in /var/www/baron_anon.txt on minotaur if someone decides it
<br>> > should go away.
<br>> >
<br>> >
<br>> > On Fri, Jun 21, 2013 at 10:29 AM, Shannon Lee <<a href="mailto:shannon@scatter.com" target="_blank">shannon@scatter.com</a>> wrote:
<br>> >
<br>> >> Is it possible to get hash-anonymized raw log data? It looks like a fun
<br>> >> data set.
<br>> >> On Jun 21, 2013 10:07 AM, "Dana" <<a href="mailto:dana-lists@sonic.net" target="_blank">dana-lists@sonic.net</a>> wrote:
<br>> >>
<br>> >>> I was curious about usage of noisebridge by time of day, so I pulled
<br>> >>> together some high level stats on door codes (hour of day, date, day of
<br>> >>> week for 5/23-6/20), thought others might find it interesting.
<br>> >>>
<br>> >>> No actual codes nor user details are included.
<br>> >>>
<br>> >>> CHART: <a href="http://oi39.tinypic.com/2uibxqs.jpg" target="_blank">http://oi39.tinypic.com/2uibxqs.jpg</a>
<br>> >>> DATA: <a href="https://pad.riseup.net/p/doorstats" target="_blank">https://pad.riseup.net/p/doorstats</a>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>>
<br>> >>> _______________________________________________
<br>> >>> Noisebridge-discuss mailing list
<br>> >>> <a href="mailto:Noisebridge-discuss@lists.noisebridge.net" target="_blank">Noisebridge-discuss@lists.noisebridge.net</a>
<br>> >>> <a href="https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss" target="_blank">https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss</a>
<br>> >>>
<br>> >>
<br>> >> _______________________________________________
<br>> >> Noisebridge-discuss mailing list
<br>> >> <a href="mailto:Noisebridge-discuss@lists.noisebridge.net" target="_blank">Noisebridge-discuss@lists.noisebridge.net</a>
<br>> >> <a href="https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss" target="_blank">https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss</a>
<br>> >>
<br>> >>
<br>> >
<br>>
<br>>
<br>> --
<br>> Shannon Lee
<br>> <a href="tel:%28503%29%20539-3700" value="+15035393700" target="_blank">(503) 539-3700</a>
<br>>
<br>> "Any sufficiently analyzed magic is indistinguishable from science."
<br>
<br>> _______________________________________________
<br>> Noisebridge-discuss mailing list
<br>> <a href="mailto:Noisebridge-discuss@lists.noisebridge.net" target="_blank">Noisebridge-discuss@lists.noisebridge.net</a>
<br>> <a href="https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss" target="_blank">https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss</a>
<br>
<br>_______________________________________________
<br>Noisebridge-discuss mailing list
<br><a href="mailto:Noisebridge-discuss@lists.noisebridge.net" target="_blank">Noisebridge-discuss@lists.noisebridge.net</a>
<br><a href="https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss" target="_blank">https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss</a>
<br></div></div></span>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Shannon Lee<br>(503) 539-3700<br><br>"Any sufficiently analyzed magic is indistinguishable from science."
</div>
</span>