The DMZ

@Jin When I get shots of our question cards you want me to email those to you or post them someplace? I discovered the batteries were dead on our office camera.

ManishEarth

3:15 PM

@Jin how can a business card be generic? O_0

@TildalWave Learned the ways of the DMZ, this young grasshopper has

Jin

@ScottPack sure. jin@stackexchange.com but seriously don't need to spend much time on it. i'll be back home tomorrow and I'll have access to my original photoshop files

TildalWave

@ManishEarth hehe thanks, I'm a learning padawan :)

Scott Pack

@Jin Ah, ok cool. I may not be able to get anything viewable until tonight. Once this conf. call ends I'll see if I can snap a shot, otherwise I'll admit defeat.

ManishEarth

@TildalWave :P I'm more novice than you are though

I'm one of those kids taking midichlorian drugs with the hope that one day I'll be chosen :P

TildalWave

@ManishEarth you mean our age? that's... irrelevant in DMZ

ManishEarth

3:19 PM

@TildalWave no, my time-spent-in-DMZ-and-on-secSE

Also I'm not a security professional

I'm what you call a script kiddie, except with some understanding of crypto and web security

TildalWave

@ManishEarth Oh, you'll find the time ;) I'm not a security professional either btw, but I'm growing to like it and maybe one day... who knows

ManishEarth

@TildalWave same here

Adnan

@Poly youtube.com/watch?v=IfmMylMp74A

TildalWave

@Adnan hehehe that one was used on our Cisco friend too IIRC by @LucasKauffman :)) was hilarious ... maybe a bit harsh, but yeah - my kind of humor :)

ManishEarth

If we created the bear version of Unicornify, I wonder if SE would be willing to use it on SecSE...

Rory Alsop

3:26 PM

Bearify...

ManishEarth

Shouldn't be too hard, really

Jin

Did I show you the making of the logo?

instagram.com/p/HAm51

ManishEarth

nice :)

Ladadadada

This unlock-your-door-with-your-iPhone meme is going strong: kwikset.com/Kevo/default.aspx

Jin

the sec.se logo was born while i was at a pool party: twitpic.com/5p6hra

Terry Chia

3:30 PM

@Ladadadada Linked that here a while back.

TildalWave

21

Q: IT Security SE Logo Wallpaper

Just wanted to post here, to officially request something that was mentioned in chat: An IT Security StackExchange wallpaper. I think the main site's "banner logo" (including: lion, shield, starburst, wings, "Tron lines", banner) would look great against its current backdrop color, as a full-s...

Terry Chia

May 11 at 7:11, by Terry Chia

Another Lockitron like product: http://www.kwikset.com/Kevo/default.aspx

Ladadadada

@TerryChia Ah. I see.

Terry Chia

@Ladadadada Haven looked into the details yet, I wonder how the security differs from Lockitron.

TildalWave

@Jin I put a few customized versions there, sorry I thought before that it was your thread, turns out it's @Iszi's and you just edited it

Terry Chia

3:32 PM

Watch out @Jin! @TildalWave is coming after your job!

:P

Ladadadada

I can't find any prices or details on their site. I suspect they caught wind of the other products and are rushing this out the door so as to not be left behind.

TildalWave

@TerryChia oh god no, I even have problems naming colours :)

Ladadadada

Security will suffer.

TildalWave

@TerryChia I'm the paper and a pencil type designer... mostly sketches of nude... khhmmm.... unicorns, during boring meetings :)

Terry Chia

@TildalWave Unicorns... shureeeee.

Jin

3:35 PM

@TerryChia oh noes

Scott Pack

@Jin Do you ever stop working?

Jin

@ScottPack stop working.... not familiar with that concept...

on a serious note, we're hiring another designer. so i'll be able to focus on other stuff!

Scott Pack

@Jin It's that thing I used to do before I had a daughter that took up my evenings. :)

And weekends.

And mornings.

Jin

i have 3 kids :) so i know your pain

Scott Pack

Oh boy.

Lucas Kauffman

3:37 PM

***** WINDOWS JUST SHUT DOWN WITHOUT WARNING

Terry Chia

@LucasKauffman Windows.

ManishEarth

@LucasKauffman See, when you boot up a computer and see the Windows logo, that is the warning.

@Jin like bacon?

Jin

@ManishEarth that, and cranking out more SE site designs.

Lucas Kauffman

it better have saved my code because I hadn't comitted it yet to github

ManishEarth

@Jin If "cranking out new site designs" is "other stuff", then what do you usually do? O_0

Lucas Kauffman

3:40 PM

@ManishEarth male porn actor, but don't tell anyone.

ManishEarth

lol

AviD

@ManishEarth if you pull the electric cable from the socket, the computer is going down, doesnt matter which OS it is.

Lucas Kauffman

This is his office:

AviD

well, except for z/OS.

Scott Pack

I haven't had bacon in far too long. It's been days.

Lucas Kauffman

3:41 PM

@AviD z/OS have built in UPS?

Adnan

@LucasKauffman Memories..

AviD

@LucasKauffman NSFW warning: DON'T GOOGLE THAT.

I just did....

ManishEarth

@AviD well, that too

Jin

@ManishEarth UX and marketing for Careers.stackoverflow.com, which has been taking up a lot of my time lately. New features implementation on SE network sites. etc.

Rory McCune

@AviD will you never learn ;op

AviD

3:42 PM

@LucasKauffman they're like MAGIK

ManishEarth

@Jin oh right. Forgot about Careers.

Scott Pack

@LucasKauffman z/OS doesn't run on line power. It uses naturally occurring moisture in the air for fusion.

ManishEarth

@Jin So what does Laura do?

AviD

@RoryMcCune well I wasnt going to admit I have a membership...

ManishEarth

Oh wait she's UX

nvm

AviD

3:43 PM

@ManishEarth who's laura?

Rory McCune

@AviD ahh nice cover-up

ManishEarth

Laura, New York, United States

2.4k 5 21

discussion feature-request bug status-completed support user-interface vote-to-close

Lucas Kauffman

fun fact about z/OS, they have those pretty looking doors where the airflows in on the side, if someone leans against it, the machine will start to halt itself after 5 minutes because it will overheat

AviD

ah, thought she was community team

Jin

@ManishEarth she's a community team member who helps with new UX features

ManishEarth

3:43 PM

@AviD Her and Jeremy Tun{1,2}el{1,2} are UX

or something like that

Scott Pack

@LucasKauffman Fun Fact about z/OS: It's dead. Fucking replace it already.

Lucas Kauffman

@ScottPack but it's cool

ManishEarth

@Jin comm team? Shouldn't she have the bag full o' diamonds?

Scott Pack

@LucasKauffman ಠ_ಠ

Lucas Kauffman

@ScottPack I still need to set up my emulator to have a go at it. It took my mate 2 days to find out how you configure an ip on it

AviD

3:47 PM

@ScottPack kidding me? z/OS is still the future. Know how many VMS I still see on a semi-regular basis...?

@LucasKauffman it's cute how you use that word wrong.

Lucas Kauffman

@AviD ?

AviD

like when kids say pasghhetti.

Lucas Kauffman

what you talking about lewis?

AviD

@LucasKauffman z/OS is not "cool".

@LucasKauffman and that's "willis".... ;-)

Lucas Kauffman

ah right

Scott Pack

3:56 PM

@LucasKauffman What are you, Dutch?

2

Rory McCune

@AviD unless you're an OS hipster of course

then it's retro

Lucas Kauffman

@RoryMcCune retro as in RoryA age retro?

Rory McCune

@LucasKauffman ya know (and I know this is hard to believe), it could be even older than that!

Terry Chia

@RoryMcCune Isn't that an integer overflow though?

Rory McCune

@TerryChia quite possibly!

@LucasKauffman BTW if you've not already seen it and you're getting involved with mainframe stuff amazon.co.uk/Mainframe-Basics-Security-Professionals-Getting/dp/…

could be useful

although the problem I found is that getting access to a mainframe system to try out the examples is next to impossible even if you work for a company that has one

Lucas Kauffman

4:02 PM

oooh interesting

@RoryMcCune yea EY has an AS400 we can use

Rory McCune

@LucasKauffman yeah that's another thing that's completely a thing unto itself

Lucas Kauffman

:(

AviD

@LucasKauffman ahem, AS/400 (should be: OS/400) is not a mainframe...

Lucas Kauffman

@RoryMcCune I'll ask them if it fits in the training budget for this year

Rory McCune

@LucasKauffman getting a mainframe? they would need to have a .... significant... budget for that :)

Lucas Kauffman

4:04 PM

@RoryMcCune Also this: youtube.com/watch?v=GRW4iPhCDSM

Rory Alsop

No @AviD - an AS/400 (now an iSeries) runs OS/400

@Rorym I think ey has a mainframe for use globally. Used to be slightly available for test scripts etc

AviD

@RoryAlsop oh right, iSeries is its name. Though that was also merged with P series, I think....?

Rory McCune

@LucasKauffman also this mainframed767.tumblr.com

Rory Alsop

Could be - I wasn't sure whether p merged with I or z

Rory McCune

@AviD I thought P series was AIX?

Lucas Kauffman

4:06 PM

isnt that illegal xD?

AviD

IBM System i

The IBM System i is IBM's previous generation of midrange computer systems for IBM i users, and was subsequently replaced by the IBM Power Systems in April 2008. The platform was first introduced as the AS/400 (Application System/400) on June 21, 1988 and later renamed to the eServer iSeries in 2000. As part of IBM's Systems branding initiative in 2006, it was again renamed to System i. The codename of the AS/400 project was "Silver Lake", named for the lake in downtown Rochester, Minnesota, where development of the system took place. In April 2008, IBM announced its integration with...

@RoryMcCune I honestly don't know much of anything, beyond what I read on Wikipedia.

hmm, yeah, looks like it is Unix based systems. How is that being merged? From the little I do know, its really quite very different.

> The programmers who worked on OS/400, the operating system of the AS/400, did not have a UNIX background. .... this is the main difference between this and any other operating system.

Adnan

4:31 PM

I wonder if I should answer this question

8

Q: What can an attacker do with Bluetooth and how should it be mitigated?

What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine? Specifically Is it a good idea to remove & re-pair my devices on a set interval (thinking that this is ch...

windows linux macosx threat-mitigation bluetooth

I've had an extensive experience with Bluetooth and I think it'd be a good answer, BUT it'd take 1-2 hours to write.

AviD

@Adnan Spend 3 hours, and do it right.

3

Rory McCune

see how many Sec.SE members you can find in this vid youtube.com/watch?feature=player_embedded&v=6uspyTkz6kE

Scott Pack

@TildalWave Windows?

@RoryMcCune None. It looks like a bunch of nerds.

AviD

4:46 PM

@RoryMcCune ALL OF THEM.

oo @Rory[4]

Rory McCune

is he [4]? he was the only one with the T-shirt on anyway...

there was an @polynomial in there as well

AviD

I was referring to Mr.Hood.

Rory McCune

@AviD that's who I was thinking of. he wore the T-shirt...

AviD

oh, really? didnt notice...

Rory McCune

was actually a good video

AviD

4:48 PM

THATS NOT OUR ROOK, IS IT??

around 2:30

Rory McCune

nope, well I don't think so

Scott Pack

Michael Brooks?

Rory McCune

that's security ninja

I'm fairly sure he's not rook

AviD

David Rook

Scott Pack

Our Rook is named Michael Brooks.

AviD

4:49 PM

yeah, I just saw @Poly's arse

Rory McCune

@avid yeah. he's an Irish AppSec guy, had the coolest slide deck

AviD

ooo @Rory[1], up on stage front and centre! Lookin' Sharp, mistah pentestah

@Iszi won't understand a thing.... ;-)

TildalWave

@ScottPack well LinkedIn constantly asks me if you know about Windows... I thought it's only worth confirming, if nothing else then for the comical effect :))

Rory McCune

@AviD yeah I was a bit flustered during that presentation (as the video will show when it comes out), the stage was frickin' massive

Scott Pack

@TildalWave Somebody endorsed me for Active Directory.

Whatevs.

AviD

4:52 PM

@ScottPack those endorsements are really trustworthy, eh?

Scott Pack

security.magnify.net/video/DEFCON-16-Deciphering-Captcha

That's just for you, Avi.

Rory McCune

best ...slide...deck... ever slideshare.net/securityninja/b-sides-2013presentation

TildalWave

@ScottPack It's LinkedIn endorsements man, someone endorsed me for Icons :) And you never know when it'll come handy... maybe one day you lose your memory but you'll remember your LinkedIn password... you'll have a glimpse of it and decide to rather not remember... that's priceless :)

Scott Pack

@RoryMcCune That's awesome.

Rory McCune

@ScottPack apparently he had a tame graphic artist do it

@TildalWave not that I wish to, in any way, depreciate the value of linkedin recommendations, but I just endorsed you for icons too :)

TildalWave

4:57 PM

@RoryMcCune well it's now there for those that want to give me a virtual wedgie... much obliged, thanks! :) :P

AviD

@ScottPack oh yay.

@ScottPack that's @rook?

@ScottPack I like how half of the first 10 minutes is him citing different CVEs....

TildalWave

@AviD the video stream jumps back from nearly 1/3 in to the first 5 minutes into it for some reason

AviD

I couldnt watch the whole thing. His voice is a bit too monotonous for right now... maybe I'll get to watch it tonight, see if there is anything new there.

Adnan

@RoryMcCune The lack of heave Scottish accents is very disappointing.

Rory McCune

@Adnan ahh well it was held in london town so most of the accents are from soft southeners :) I'd say wait for the Scottish Ruby Conference videos, but most of the speakers there seemed to be american!

Jeff Ferland

5:15 PM

@ScottPack You're a HAM, right? I mean, you're a ham too, but...

lynks

Could someone explain to me how this is resolving to values like 4 and 5...double devalueMxer = (double)aggregateNodes / (double)(aggregateNodes + 1.0);

AviD

@lynks aggregateNodes = -1.25 or -1.33

Adnan

@AviD What?!

AviD

simple algebra, bro

-1.25 / (-1.25+1) = 5

TildalWave

@Adnan return value of aggregateNodes for the expression to result in either 4 (-1.33) or 5 (-1.25)

AviD

5:27 PM

9 hours ago, by Adnan

@AviD Aha.. we're not so stupid after all

.... o_0

TildalWave

@AviD that was 9 hours ago... you can drink a lot of hooch in the meantime :P

Adnan

@lynks Did you mean resolve to values like 4 and 5, or solve for values like 4 and 5?

AviD

is there a difference...?

solve it! now... solve it again!

Adnan

@AviD Second meaning is what you've done.

@AviD "resolve to values like 4 and 5" doesn't make any sense

AviD

waddaya want from me? go complain to @lynks, hes the one who brought maths in again

Adnan

5:30 PM

@AviD But I'm pretty sure that @lynks can do simple substitution, so I don't think that's what he wants.

AviD

I'm guessing he assumed the # of nodes was a positive value, so it didnt make sense to him. I, snarkily, pointed out the obvious negative values.

once you've ruled out the impossible, what remains is the truth, no matter how improbable it seems.

or something like that.

@ScottPack when is cumberbund coming back on??

Adnan

@lynks What's the approximate range of your aggregateNodes values? Could it be negative?

Scott Pack

@AviD I don't know. I was wondering that recently.

@AviD But yes, that appears to be rook.

@JeffFerland I think @Iszi might be, but I'm not.

@JeffFerland Why?

AviD

@ScottPack damn BBC. put on 10 episodes, and call it a season.

actually, they call it a "series"...

Adnan

@lynks Because as far as I can see, that doesn't make sense wolframalpha.com/input/?i=x+%2F+%28x%2B1%29

AviD

5:45 PM

@Adnan wolframalpha.com/input/?i=x+%2F+%28x%2B1%29+%3D+4

Adnan

@AviD I'm not sure how it is in English, but for values approaching -1, the function approaches infinity. I guess we need @lynks to give us more info. But he just threw a bomb and fled.

lynks

sorry folks, had a meeting

Adnan

@lynks What's the issue then?

lynks

My head was saying x/x+1 < 1.0

which is not always true.

math fail

AviD

@Adnan sure, simple algebra = bomb.

Lucas Kauffman

5:50 PM

@lynks what's the conclusion of the meeting?

lynks

@LucasKauffman that you're fired.

Lucas Kauffman

@lynks aaaaaw

Adnan

scratch that.

Lucas Kauffman

"will program for food"

AviD

@LucasKauffman wow, sucks to be you, man.

Lucas Kauffman

5:51 PM

"will even rewrite perl scripts to python for food"

AviD

10 hours ago, by Adnan

@AviD Aha.. we're not so stupid after all

lynks

@Adnan see it's an easy mistake to make :P

Adnan

@AviD Jesus! Take it easy dude!

AviD

@Adnan hehe

heehee, you're stooopiiid

Adnan

@AviD We've already established on different occasions that I'm slow and I'm awful at maths.

@AviD I have no idea why I'm allowed anywhere near production-critical software

AviD

5:53 PM

@Adnan heh. Once we get up past high-school level math, I'm pretty sucky too. Unless I'm motivated to really try.

Adnan

@AviD High-school? Geee! That's too advanced for me

AviD

@Adnan umm, because advanced math is not usually directly related to most programming or IT tasks?

Adnan

@AviD Oh trust me, I have to use advanced maths at least 2 hours /day. Luckily we have some smart guys in the company who can assist me.

AviD

My daughter has the same problem as me. Basic math was always trivially simple for me, intuitive even. I never learned how to learn math.

how lucky I am that the parts that I'm good at, computers are even better. :S

TildalWave

Funny thing is I have commendations and a second place in national '9th grade' maths competition... had advanced maths at college for two years... and I pretty much use it each and every day... and I suck at it more and more, it's just not a natural fit I guess, either that or it dilutes in hooch really easily :O

AviD

6:05 PM

@TildalWave that, and the little you do use is so much quicker to automate.

Using a computer to, well, compute, just makes so much sense.

TildalWave

0

A: Prevent Malware attack on my site

Like we all told you on StackOverflow, no one will be able to tell you how it happened. Post the URL or PM it to one of us and we can investigate the same way your attacker did. That's the absolute best you can get. I would be spending time out of my day to check on your website for you. Take ...

could we move this into a comment please? but a +1 if it was tho

@AviD OK but how do you explain that I'm losing the ability to visualize maths problems, which used to be really easy for me once? I'd think that it'd be actually easier with time and experience... frack, it ain't. You think it could also be just overworking and if I took some time off I'd solve maths problems easier again? I'm saying this because I've noticed in longer times off I tend to miss brainstorming and even actively seek tough logical challenges. It's just strange

AviD

@TildalWave yeah, and I closed the question. With prejudice.

I held back from a comment of: "Step AWAY from the keyboard until you have a clue what you're doing. Also until then stop charging people money, its malpractice."

lynks

@TildalWave don't worry, I feel exactly the same way about loads of stuff. I like to think that the things I remember finding easy really were easy, and now I'm just faced with much more difficult problems day to day that just make me feel like I'm getting more stupid...

AviD

@TildalWave yeah, I get that too.

I think its a combination of getting older + unused neural pathways + overloading of other circuits + general tiredness and malaise.

and dont forget the hooch.

►

Hooch is craaaazy

@lynks I see some random answers here that I wrote about subjects that I dont even remember knowing about, let alone forgetting.

some answers of my own I can barely understand.

lynks

6:21 PM

@AviD I'm trying to remember a TV show that I vaguely remember watching as a child, must have been late 80s... I think it was a serious science education show.

AviD

I think tv shows is the only thing I can remember with any consistency.

lynks

I was always hooked on science shows that I barely understood.

TildalWave

@lynks Oh I don't find those difficult to understand, actually less and less so, and I have a feeling I'm realizing it now why (talking about it actually helps)... I believe it's because when I would have time to watch those, I'd already be more relaxed and have dealt with most of the pressing stuff for the day... so it must be also something working on the subconscious level, blocking irrelevant (for the time being) things and forcing you to focus on more pressing matters.

And I also have a feeling that the language related centres of our brains actually take a lot of our ability to engage in more abstract thoughts than we might realize, because when I stop trying to express myself to others, it's then when I can comprehend on a whole new level (i.e. visualize) as compared to when I'm trying to verbally express or explain it. Maybe it's just me tho, and it's different for each of us

And having daily conversations in three or more languages probably doesn't help with that either

lynks

I certainly have to shut down when I'm concentrating on something, I often don't even hear people when they talk to me.

anyway, home time o/

Jeff Ferland

@ScottPack Goofing around with HF gear

Scott Pack

6:37 PM

@JeffFerland Hot Fudge?

Jeff Ferland

@ScottPack Ooh, good idea

Scott Pack

@JeffFerland I had something called a Booty Shaker Bar yesterday. Oh my gods was it yummo.

TildalWave

7:09 PM

@ScottPack Google says you had that at Fluff Bakery And Catering :)

now I want something sweet lol

Scott Pack

7:28 PM

That's it! Wow yummy.

Xander

This is number one in the super-collider.
.

17

Q: Touch Screen Password Guessing by Fingerprint Trace

After having some garlic bread at a friend's who is not security-aware, she managed to figure out the PIN code to unlock the screen of my Samsung SIII. The way she figured this out was by simply putting the device against the light and looking at the pattern that the grease of my thumb left on t...

passwords mobile

Might be worth protecting if a mod is around.

Iszi

7:44 PM

@JeffFerland I'm a ham. Why do you ask?

TildalWave

@Xander I second that, @RoryA, @AviD, you two around?

@Xander I'll award my +1's tomorrow then or whenever it settles, it's pointless now for both @Adnan and @D3C4FF they've both reached 200+ today

Rory Alsop

@TildalWave hello - here

done

TildalWave

@RoryAlsop cheers!

Rory Alsop

@AviD no. not @rook.

Rory Alsop

7:59 PM

unlikely to have got on the reptrain, but no-one mentioned repetition:

0

A: Touch Screen Password Guessing by Fingerprint Trace

There was a paper (will try and find it) that gave a very good explanation of a security improvement: Using one of the digits at least twice, in a pass code of more than 4 digits Basically, the "swipe a pattern" option is very easy to see - even at a distance it can be shoulder surfed. A 4 dig...

lynks

I just opened a pdf as root...I...I...think I need to lie down...

6

TildalWave

@RoryAlsop well I was waiting for you to find that paper you mention, but OK since you insist :P

Rory Alsop

@TildalWave still haven't found it. I have found a reference to it but no link

TildalWave

@RoryAlsop is this it? (PDF... @lynks you don't touch it for a while!)

lynks

@TildalWave :P the dangers of having a root shell open

Rory Alsop

8:13 PM

@TildalWave no, not that one, although it is definitely interesting

lynks

I'm upgrading from wheezy to jessie, and just noticed something that for some reason I find fun: "wheezy" is recognised by vim as a piece of syntax in apt sources.list, so it gets highlighted. "jessie" does not. I'm so going to check if it has been added when the upgrade is complete :P

TildalWave

@RoryAlsop add it to the answer then, it's pretty good... reading now

Rory Alsop

@TildalWave I shall - cheers

TildalWave

@RoryAlsop possiblywrong.wordpress.com/2012/07/28/… also interesting (and linking that PDF from before) explaining "knight moves" and entropy in more detail

Gilles

Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's.

Rory McCune

8:17 PM

@AviD and apparently is getting a cameo in Zach Braff's new movie...

Rory Alsop

@Gilles Always liked that one

lynks

@Gilles au contraire, I have hooked the laptop-lid closing event to i3lock, forcing a reboot if you don't know the password, but the HDD is dm_crypted >)

Rory Alsop

@lynks I like you even more :-)

lynks

@RoryAlsop I recommend configuring i3lock with a solid color #FF0000 background, it makes the screen look broken when you open it. That or a screenshot of a windows desktop :P

Rory Alsop

@lynks hahahahahaha. Did I say we have vacancies...

friend

;-P

lynks

8:22 PM

@RoryAlsop move your company away from the untamed wilderness and into the areas that have been claimed by humans :P

Rory McCune

high quality kid halloween makeup....

Rory Alsop

that is wonderful - I'm showing my kids after they finish dinner

lynks

lets get rid of that before google indexes shall we? :P

Rory McCune

@lynks heh but no. one of a series imgur.com/a/UYEA6 of good costumes/makeup

@lynks lord given some of the text that will have been indexed and attributed from here, I'd think this is the least of our worries :)

lynks

@RoryMcCune I am now in love with Fox McCloud

Rory McCune

8:31 PM

that is a good outfit...

lynks

oh, and Link

Rory McCune

some of them are just fricking amazing with the amount of effort that's gone into them....

lynks

....aaannd firefox

Alex Haycock

9:00 PM

hi guys. first post here. basically i've been thinking recently about what language to learn next. i've had a year of learning java which I have enjoyed. What languages are the most useful for pentesters?

Xander

@AlexHaycock This has a good overview.

►

Jeff Ferland

9:22 PM

@RoryMcCune creeptastic

@Iszi Trying to find other folks here who play with HF

Adnan

9:38 PM

Am I the only one who types his passwords from "muscle memory"?

I'm not saying that I don't remember my passwords at all, I do, but when I type them I almost never actually think about the characters of the password. My fingers just slide over the keys in a quick and repetitive motion.

@Adnan Speak for yourself. Even with common long term passwords I enter them by repeating the mnemonic I memorized in lieu of something like "ASfy#wcltp13tbrtMIM". Having to hunt/peck on an Qwertz/Azerty/Dvorak/etc keyboard would slow me down; but what I memorize isn't the positions of the keys. — Dan Neely 51 mins ago

Rory Alsop

@Adnan I do most by memory - so if someone asked me my password I really would have trouble telling them

Adnan

@RoryAlsop Exactly! I honestly think that's the case with most people

ManishEarth

@Adnan I have used crazily long nonsensical sentence passwords. They go into muscle memory

Adnan

@ManishEarth This is especially the case with my Active Directory password (since I have to type it at least 20 times a day)

ManishEarth

ah

Adnan

9:47 PM

My biggest fear (in that area) is when I have to type it in my mobile.

Now that I'm assured about my sanity, bed time.

Rory Alsop

10:58 PM

@Adnan yeah - using Citrix client on iPad to remote into my Windows desktop at work - I need to buy a bluetooth keyboard

Transcript for