News for hackers. Stuff that matters.
Re:MEGA: Malleable Encryption Goes Awry by bawolff on Wednesday June 22, 2022 @05:51AM (#31833826)
That's not very many if "remember me" feature is broken and you use the service a lot. I suspect that there are non-malicious services i use where i have entered my password 500 times.

Even if its a lot given average user behaviour, that's an incredibly low margin for safety

Re:MEGA: Malleable Encryption Goes Awry by lultimouomo on Wednesday June 22, 2022 @08:58AM (#31835460)
If you have a personal and a school/work around on Microsoft platforms, and you use them daily, I bet you can be asked to log in 500 times in a couple of week of intense use. And each time you'll be asked if you want them to "remember you"!
Re:MEGA: Malleable Encryption Goes Awry by tptacek on Wednesday June 22, 2022 @02:09PM (#31839670)
Sure, but I mean, this whole line of discussion is sort of brain-breaking. When we reason about cryptosystems, we don't generally reach the question of "how many hundreds of times can you log in before the system permanently loses all of its security". That's not like, a figure of merit in a typical cryptosystem; the right (and ordinary) answer to that question is "practically infinite".

You've picked a sort of strange hill to die on when you find yourself arguing that a system is in practical terms secure because it's unlikely you're going to log in enough times to trip the bug that coughs up your private keys. If you have to compute the number of times you can safely log in, something has gone terribly, terribly wrong.

Re:MEGA: Malleable Encryption Goes Awry by lultimouomo on Friday June 24, 2022 @04:25AM (#31859049)
I completely argree, I was just using the chance to vent about how much I hate Microsoft logins.