http://xiam.menteslibres.org/ blog de xiam (c) 2008 J. Carlos Nieto Mon, 21 Apr 2008 19:32:24 -0700 http://www.textmotion.org http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_86 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_86 <p>@jaircazarin, thanks! You're right, I should use another method to specify the algorithm speed, I confess that I don't know how to use big O notation yet but I'm looking the wiki page right now. Thanks for being such a good host last Wednesday too :-).</p> <p></p> xiam.core@gmail.com (J. Carlos Nieto) Mon, 21 Apr 2008 19:32:24 -0700 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_84 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_84 <p>Buenas,</p> <p>Primero, gracias por los creditos, realmente no eran necesarios.</p> <p>Segundo, te adverti que de esa forma no te hiban a responder (rapido), hubieras usado la expedita en dado caso xD.</p> <p>Saludos</p> <p></p> g30rg3x@gmail.com (g30rg3_x) Wed, 16 Apr 2008 11:31:22 -0700 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_83 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_83 <p><p>Muy buen laburo <img src="http://xiam.menteslibres.org/media/emoticons/default/wink.png" width="16" height="16" /> </p> <p> </p> <p>me pase por aqui…</p> <p> </p> <p>Saludos</p></p> Guns@0x90.com.ar (0x90) Tue, 15 Apr 2008 18:34:56 -0700 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_82 http://xiam.menteslibres.org/blog/view/21/wordpress-2-5-salt-cracking-vulnerability#comment_82 <p>Although I'm not a fellow user of Wordpress, I think you did great work discovering this bug, keep doing it. However, just a little recommendation,  your proof of concept isn't a linear algorithm but a brute force algorithm. Probably it would be better if you talk about the complexity of your algorithm using <a href="http://en.wikipedia.org/wiki/Big_O_notation"><span>Big O Notation</span></a> instead of time in seconds/hours/days or whatever, because not all the people have the same computer power, so we have to use some notation independent of how much RAM or Memory your computer has. Also it's important because you can take into account best, worst and average cases. </p> <p>Regards.</p> jair.cazarin@gmail.com (jaircazarin) Tue, 15 Apr 2008 13:23:38 -0700