« first day (883 days earlier)      last day (4006 days later) » 
00:00 - 20:0020:00 - 23:00

12:01 AM
Anyone know what SE site i could ask about Asbestos safety on?
 
12:37 AM
(I plan to go crawling through asbestos dust on a skateboard...)
 
1:00 AM
@D3C4FF Don't know that there's a good one, but this might be your best bet. diy.stackexchange.com
 
@D3C4FF DIY
 
2:00 AM
@Xander @JeffFerland Yep. Will do thanks :)
 
 
3 hours later…
4:45 AM
 
5:20 AM
@Adnan i saw that original question, but i think its different enough
this one is asking specifically how they got caught when they were taking preventative measures
 
@D3C4FF The answers in the other question collectively cover all that
@D3C4FF Oh, and I really like your RFID question
 
@Adnan Yeah. I really need to get off my arse and do some of the RFID projects i have in mind...
If anyone else is around and wants to answer this: diy.stackexchange.com/questions/27934/…
I'd also greatly appreciate it, since that's what my Friday night plans are (and its friday afternoon now)
 
@D3C4FF In its current state, it's extremely difficult to answer your question.
@D3C4FF It all depends on your study of the area you're exploring. Are you exploring next to Chernobyl or Love Canal? Then normal clothing won't cut it
 
5:39 AM
@Adnan Alright, I re-worded the second part and emphasised my main question, reckon that's better?
 
@D3C4FF Seems better to me. I'm familiar with the second question, I'll quote from the craftsmanship section of my military handbook.
 
@Adnan Awesome. Thanks :)
 
> Disposable respirators and respirators with replaceable filters must be replaced when one of the following symptoms appear: Physical damage, apparent discolouration, breathing difficulty, or apparent contamination.
The pandering for upvotes in this question is at a new level.
"I love the wording of your question because it has all of the hallmarks of a SecPro with more of a traditional background in law enforcement, policy auditing and it seems like the earnest curiosity of someone on the quest to learn more and that is becoming rarer in this profession."
 
5:56 AM
morning everyone
urgh I need coffee
 
@LucasKauffman What are you willing to do for coffee?
 
@Adnan not kill you
2
 
@D3C4FF Oookay! Now I get it, I've just translated Asbestos a now I know what you're talking about.
@D3C4FF I'm not sure if I have a good source, but I think I've heard that rinsing under running water before putting it in the washing machine should be enough.
 
6:29 AM
Find where he lives and go to his house with a blond from Nebraska and knock on the door. When he opens the door, let her kick him in the nads and quickly take back your bat'leth, and your WoW account. I've been places where this happened in the USA with intent to cause damages and we turned the evidence over to the FBI. Not sure what/if they every did anything, since the perp was in Russia. — Bratch 2 days ago
HAHAHA!
 
7:09 AM
The video, the current top comments.. it's just best 5-second video I've ever seen
 
lol
 
7:26 AM
guys I posted a question on meta. It has been two days but no comments and no answers..meta.security.stackexchange.com/q/1263/21234
1
Q: Including tag-wiki and tag-wiki guidelines in FAQ?

Mayank SharmaI suggest that tag-wikis and guidelines for writing great tag wikis should be included in the FAQ for all the users to see.I am aware that the link to this blog post is provided on the edit-tag-wiki page. I feel that creating/editing tag-wikis are one of the most ignored features especially on s...

 
@MayankSharma I'm not going to write a reply but I disagree that new users should be messing around with tag wikis.
 
right but shouldn't they be at least aware of this feature
 
0
A: Including tag-wiki and tag-wiki guidelines in FAQ?

ManishearthIMO the FAQ is for the most important things. Tag wikis are relatively obscure -- asking and answering is what is important (and common) and that's what the faq deals with. The faq is for new users; and new users probably shouldn't be dealing with the tag wikis. If you wish, you may write up a f...

 
you have a point, may be it will become too irritating for the reviewers if everybody starts to propose tag wikis
 
@StackExchange does anybody here see the number....? Or did I get xkcdtrolled...
 
7:37 AM
but shouldn't they be in some way informed that they can hover over a tag to see more information.
may be in the about section
 
@MayankSharma By the time you're aware of such features, you're already aware of the community guidelines on using them.
@AviD You're not supposed to
 
@AviD 0?
 
@Adnan ok agreed
 
@Adnan yeah, I got the joke
 
7:43 AM
@ManishEarth What joke?
 
I get the joke, but I thought there was a number there...
 
@AviD What joke?
 
@Adnan the xkcd...
> Stackipidiot noun A StackExchange addict who lacks real world experience but accrued high points and collects their knowledge of a particular subject by reading about it rather than experiencing it. Said person then considers themselves an expert and is often chided for "getting the facts wrong" and adding incorrect supposition and assumptions to his/her arguments.
 
@AviD So what's the joke?
 
I think I like this user.
 
7:48 AM
@AviD It's as if they know me!
 
hehe. Her profile totally trolled me.
 
8:45 AM
@D3C4FF osh.dol.govt.nz/publications/factsheets/… has some pretty good information and some links for New Zealand peeps that might be quite similar to regulations in Oz (not sure about that tho, just think it might be the case). I would otherwise highly recommend not to unless you really have to. Asbestos can also penetrate the body through skin an cause all kinds of problems with that (they slowly move through the body regardless of obstacles)
And don't forget you can carry that dust on your clothing, protective or not, so it's probably best to use discardable clothing or have means to wash them thoroughly close to the contaminated site with water and a high-pressure hose and discard non-washable items, not much different than if you'd be going through a radioactive zone.
I would suggest use of double-threaded laminated fabrics, you can get such clothes in some specialized shops, not sure where in your case but if I didn't have problems finding them here, you shouldn't either ;)
As for foot/handwear - gumboots and gum covered gloves (you should be able to get them at any gas station) are pretty good for that, although a bit awkward to use with climbing equipment.. but possible, I've done it myself on several occasions.
Oh... and prepare to look extremely funny in all these clothes ... have a camera ready and post here once you can :)
 
9:03 AM
Okay, so crawling about in my hoodies and jeans is a no go then?
 
@D3C4FF definitely not... and it can take years to develop problems, so you won't be able to tell what damage it caused... not even x-ray can detect that until it's already affecting tissue
the biggest problem is older sites tho, where this asbestos started falling apart ... newer industrial sites where they still used it to protect against fire should be much safer tho
i.e. it's the asbestos dust that's the biggest problem
 
9:18 AM
@D3C4FF this is how people cleaning up asbestos are normally dressed:
 
@LucasKauffman yes this is it, only you usually don't get to choose the colours for these clothes... mine is bright red :)))
 
@TildalWave you also do asbestos removal o.O?
 
@LucasKauffman neah, we were just spelunking in all kinds of wacky places
 
Anyone here has experience in compiling a kernel module for Fedora?
 
9:42 AM
If anyone's interested, that LinkedIn graph that @RoryAlsop posted yesterday looks very much like it was created using Gephi.
It's pretty easy to use and it does produce nice graphs like that one for pretty much any data you through at it.
Mailchimp did some cool stuff with it last October: blog.mailchimp.com/…
 
@LucasKauffman @TildalWave Awesome. Thanks guys. I know dealing with removal and dust is a big deal, i personally never try to involve it, however the location we're heading to tonight has some motion sensors that can only be avoided by crawling underneath them. They're quite dusty and there's a lot of asbestos piping around. It stands to reason that a fair portion of that will be asbestos dust. I'll have to bust out my dust suits as well then... And dispose of pretty much my entire wardrobe...
 
@D3C4FF what are you going to do that involves avoiding motions sensors :P?
 
9:58 AM
@D3C4FF you're involved in this?
 
10:13 AM
@TildalWave No idea what that is... >_>
@LucasKauffman 'Urbex'
 
@Ladadadada cool will need to remember that for next time I'm graphing as it does produce some shiney stuff..
 
@D3C4FF very cool
@Ladadadada - excellent. Might have some useful data to punt through it.
 
10:30 AM
Part three seems to be in the making, but not much else is known about it (part two was a straight to DVD utter kak). Anyway, there were some pretty neat motion sensors used in the original and characters trying to bypass them, that's why I ask ;)
 
@Rories Data visualisation is my second love.
Do let us know if you make anything shiny. :-)
 
10:52 AM
got it :P
 
@RoryAlsop Done much yourself?
 
@d3c4ff - as I student I was a big fan of buildering round both deserted towns and built up urban areas. Very much in the 'leave no footprints' school - I probably have some photos from back then, but this was before digital cameras...
@tildal - I loved the first one!
 
@RoryAlsop So you had a sketch artist follow you around?
;)
 
11:14 AM
@TerryChia hehe that's a good one :)
 
@Ladadadada @RoryAlsop My linkedin graph looked like male genitalia.
 
@AviD if NASA can do it, so can you.
 
11:49 AM
@D3C4FF @Scott @lynks @Terry @AviD (you're the guys I've noticed talking about hardware, SuperUser, system stuff). Soon I'll be getting a new work laptop, what do you recommend I do to move my current system, as is, to the new laptop?
 
@Adnan dd might work. :P
 
Many times before I've tried to clone it but it never worked when the new system has different hardware. Windows becomes unbootable.
 
@Adnan Ahh Windows is a bugger.
2
Do you need to retain whatever system settings you might have?
 
I've used sysprep before but it it removed all of my logs, users, configurations and settings.
@TerryChia Yes, I have a year worth of configurations, it'd take me days to return everything to the way it was.
 
@Adnan Ahh that sucks. I have no clue. Wait for someone else to give suggestions. :(
 
11:53 AM
And it'd be nice to know what causes a system to become unbootable with new hardware. It can't be only conflicts in the drivers installed.
 
@Adnan sorry, my Windows experience is entirely limited to counterstrike :P
@Adnan and personally, I enjoy starting afresh..I am something of an obsessive reformatter...
 
@Adnan virtualize it.
better yet, don't. start over.
@Adnan could it be an activation issue?
 
@AviD Do you perchance know COM?
 
@lynks Unfortunately, I can't afford that in this case. Tons of configurations, lots of daemons and services installed, too difficult.\
 
I am stuck on some barely documented interfaces not behaving: stackoverflow.com/questions/16607787/…
 
12:00 PM
speaking of new laptops, has anyone ever bought a system76 machine?
 
@AviD I don't think so.
@lynks A coworker has one
 
@TerryChia Oh man you have no idea.
 
@AntonyVennard which COM?
 
@Adnan are they as ugly as they look? :P
 
component object model? used to....
 
12:01 PM
@AviD The CoCreateInstance variety.
 
@lynks Yes it is. But he doesn't mind the looks of his laptop (neither do I).
 
@AviD Do you have 2+ years' experience in a commercial environment?! ;)
 
@Adnan do you know which one he has?
 
@AviD What do you mean?
 
@AntonyVennard yeah, used to...
 
12:02 PM
@lynks The 14" one.
 
@AntonyVennard yeah, why....?
 
@lynks I actually think it's a really nice laptop
 
@Adnan move the entire OS to a VHD, copy the VHD over, run it from there.
 
@AviD Nope..
 
and, let that be a lesson to you - when you set up your OS, plan for the future.
 
12:03 PM
@Adnan yeah i'm looking at the 15" ones, they're a bit more blocky. but now I look again they really don't look so bad
 
0
Q: How do I use IFileSystemImage2's put_BootImageOptionsArray from IMAPI2 (getting E_NOINTERFACE)?

Antony VennardI am trying to use the IFileSystemImage2 interface to create an ISO with multiple boot records using Imapi2. To do this, I should be able to use put_BootImageOptionsArray passing in SAFEARRAY* of VT_DISPATCH type, i.e. COM pointers of type IBootOptions for each boot options configuration. As a ...

 
@Adnan I'm not really a good Windows person. I know Windows has a built in backup/restore feature. Would it be possible to backup the old machine and restore onto the new one?
@Adnan I've done that with OSX's Time Machine to migrate from hardware to hardware many times.
 
@ScottPack You can with something called sysprep, but it's a bit arcane.
 
@AntonyVennard defnitely not areas I've messed with, but I'll take a look....
 
@ScottPack Yup, tried it with Windows 7. It also becomes unbootable.
 
12:05 PM
@AntonyVennard I thought sysprep only reset the SIDs?
 
@ScottPack That's what I thought as well, apparently it does more.
 
@ScottPack Shameless plug! I work for these guys! Also I think most of our competitors can deploy to dissimilar hardware.
 
@Adnan It could be trying to backup/restore too much of the core system. How much of what you want to restore is strictly user settings?
 
@ScottPack I could be telling you a lie, but I thought you could alter the HAL should you need to and various other bits. Or that might be registry stuff. Been a while since I've done it by hand.
 
@ScottPack User settings and Program Files are my #1 priority.
 
12:07 PM
@AntonyVennard You just took a running leap past my line of expertise in this field. :)
@Adnan Then can't you just migrate your profile?
 
@ScottPack If I'm honest, I'm not the best guy at this. My area is booting Linux, and EFI stuff, and suddenly it seems COM!
 
@AntonyVennard EFI still confuses me, I mean it shouldn't, but I can never seem to get things to work.
 
@ScottPack My profile is already in AD. I tried it before (same profile, new machine) but I've lost all my scheduled tasks, Machine registry, installed DLLs.. (well, that's what I expected, of course)
 
@AntonyVennard Same here. Doing this kind of stuff on Linux or OSX is pretty trivial.
 
@AntonyVennard Hey linux dude! Know anything about compiling kernel modules for fedora?
 
12:10 PM
@Adnan How hard would that stuff be to manually recreate?
 
@TerryChia yep. You need to yum install kernel-devel, then you should be good to make/modprobe
 
@ScottPack My last migrate took 6-8 hours.
 
@Adnan Was that with or without alcohol?
 
@ScottPack 1-1.5 fingers of Glenlivet
 
For 6 hours? That's not very much.
 
12:12 PM
by that I mean most LKMs reference the kernel makefiles. Type make in their folder and you'll get a load of ` CC [M]` lines which are CC as module commands. Eventually, you'll get a .ko. You can install it to ` /lib/modules/uname -r ` with make install then modprobe.
 
@ScottPack Hmm.. I see, so the technical solution for my problem is alcohol.
4
 
Okay no idea how to type that.
/lib/modules/<kernel version> where kernel version is bash-quoted uname -r
That should work on just about any linux, except ubuntu/debian tends to call their package kernel-headers I think
 
@AntonyVennard Hmm I'll give it a shot. Being on ARM shouldn't change anything right? I need to compile the ath9k_htc driver for my raspberry pi.
 
@Adnan It usually is.
 
12:15 PM
 
@TerryChia Nope, it should be exactly the same process. It should be reasonably straightforward, but there can be nasties, such as the uapi header change in 3.7 that broke a few kernel module compiles (they moved the kernel version header).
 
@AntonyVennard Cool, I'll give it a shot tomorrow when I'm less tired. :)
 
@RoryAlsop Awesome stuff! I'm subscribed to the "Take only photos, leave only footprints" exploring 'philosophy', :D I've probably got about 1TB of exploring photos, including caves etc
@Adnan Swap the hard-drive with whatever new laptop you get, or clone it across, there's plenty of software to do it...?
 
@AntonyVennard really no clue, sorry.
 
@Adnan what laptop you got atm?
 
12:33 PM
@Adnan its because of things like this, that I'm moving to a VDI type of setup. Powerful VM on good hardware, + comfortable/portable tablet.
Havent got the tablet yet, though.
 
12:44 PM
Licensing for VDI blows.
 
@ScottPack Licensing for Dyson sucks.
 
@ScottPack large corporate licensing massively blows. "hey lets make this so complex the customer has to phone us to ask what the frig is going on"
2
 
@RoryMcCune Per seat per month FTW!
2
 
@AviD Ah s'okay, just wondered - if you had seen it or the like. COM's best documentation is the people who had to live with it, I think.
 
@ScottPack ah but per active seat, per named individual, floating, sticky ........
 
12:50 PM
@RoryMcCune Pretty much. Is it any wonder we have people whose FTE is handling licenses?
 
win: an engineer was plumbing a new ethernet into out office block. I just asked in passing if he had any cat5 offcuts...he just brought up 3 boxes, with 50m reels on each saying they were 'too short' for them to use :P those will going going in the boot of my car come home time =)
 
Let's not forget about Oracle's model. Every year let's change whether it's per socket, per core, per user, per transistor, or per gate.
 
@ScottPack really? I have a license for Windows 2012 - that gives me HyperV and a couple more desktop licenses. nothing extra for VDI.
@RoryMcCune yeah, that. When you have "experts" in this corporations licensing, you know you have a problem.
 
@AviD yep
@ScottPack I bet their job is soooooooooooooo much fun
 
@ScottPack I thought Oracle licensed per child's lung that got silicosis from mining and milling the silicon die block.
 
12:53 PM
@AviD Ah, you're using VDI as the generic technology. Until very recently VDI was the VMWare brand name for their virtual desktop offering.
 
@lynks Awesome!
@ScottPack no per atom?
 
@ScottPack ahh, yeah. I meant VDI as "virtualizing my OS's". srry, my bad.
And, gorrammit. The valley is on fire.
6
And no, that is not a euphamism.
 
@AviD S'okay, somebody fixed it for me :)
 
heh, thanks for starring that :@
 
@AviD The valley is on fire and needs a hose to douse it, right?
 
12:56 PM
@AviD we had some wildfires in Scotland the other day! so it's not always rainy then :)
 
@Polynomial heh, okay that does sound dirty...
especially because I just spent 10 minutes walking around with my hose, trying to do some preemptive moisting.
5
 
@AviD Even moreso when you consider that a lot of forest fires are put out using fire retarded foam ;)
 
@RoryMcCune yeah, everything is pretty dry here now. Though unseasonably we did have some rain this week...
hehe
 
@Polynomial retardant...
 
1:00 PM
Hahaha
 
@Polynomial but I really hope you've been going around saying that xP, it reminds me of my cousin, who at age 24 thought the expression was "it's a doggy-dog world"
 
@TildalWave I would vote to close as NaRQ....
though I've stopped answering q's on linkedin a looong time ago.
@lynks hehe, like in Dharma and Greg!
 
@AviD well yes it could use a context but could be an intriguing question then, if it did have it... but yup, it's LinkedIn... haven't seen many good answers there either, mostly self-promotion and similar
 
so... I'm still thinking about that discussion you guys had a while back, about ZIP files. @TildalWave @lynks @Adnan.
If your zip file really does need integrity, what kind of solution is there?
I saw there are some products that offer non-standard zip, with signing and etc.
 
@AviD I wasn't in it... maybe with a snark here and there, but promise, wasn't me
 
1:08 PM
any other ideas, besides something like a GPG signature?
@TildalWave oh, sorry.
 
How strongly are you attempting to ensure integrity?
 
@AviD rar has generally more options tho, with 'solid archive' and 'locked' flags as standard
 
@ScottPack cryptographically?
 
@AviD Use human words.
 
hehe
 
1:11 PM
@ScottPack digital signature would be nice.
 
I think it's fair to say that for the vast majority of use cases an MD5 checksum is more than sufficient for integrity checking.
 
@ScottPack ah, okay, I should have specified that I'm more looking for authenticity.
although perhaps an hmac might do the trick...
 
@AviD yeah I'm with @TildalWave on this, I think you dreamt it. Also whats wrong with openssl dgst -sha1 -sign priv.pem -out sig myzip.zip && tar -czf signed.tgz *
 
@lynks where should I start....
 
@AviD :P
@AviD it might be a little beardy, but it works dammit
 
1:16 PM
@lynks okay, lets start with: can't get the users to do that...
and I think I can stop there.
 
@AviD oh you want normal people to use it...can't help you there.
 
hehe
 
@AviD So you're after some sort of AV for ZIP archives, or what? Because they have authenticity verification capability, but was dropped support for in most (even PKZIP) later, not sure why tho, maybe it was just bad implementation and pointless
 
@TildalWave pkzip has it now, but its non-standard.
but yeah, ish.
 
> PKZIP 7.0 changed SES to use non-OAEP key wrapping. Support of creating AV authenticity verification archives was dropped. PKZIP could now create archives of the following types: ZIP, BZIP2, GZIP, TAR, UUEncoded, XXEncoded.
 
1:19 PM
its... kind of between integrity and authenticity. The system would generate the zip file, users should be able to check that it wasnt changed since then.
Ostensibly.
 
so basically - signing
 
> PKWARE SecureZIP also supports RC2, RC4, DES, Triple DES encryption methods, Digital Certificate-based encryption and authentication (X.509), and archive header encryption.
@TildalWave well... yeah. I didnt want to constrain to that, but basically yeah.
 
@JeffFerland I'm still a Tech, so mostly limited to UHF/VHF I think. Been awhile since I've done anything with it regardless.
 
@AviD anyway, AV is an extension of the ZIP format... since... last millenium sometime, so you'd be then only looking for software that does it in an idiot-proof way for your users... seems PKWare dropped it in PKZIP to differentiate between their consumer and professionals targeted products
 
@TildalWave hmm? does anything besides pkzip do this?
 
1:24 PM
@AviD not that I'm aware of, but I can Google, give me a minute ;)
 
@TildalWave ah, I did my searches already, and thats what I cam up with.
I thought you were saying that its common enough besides pkzip.
 
@AviD yup can't find any others either... could be proprietary, WinACE and WinRAR are not including this support for ZIP archives either
 
I think photoshopping this is an efficient use of my lunch break 9gag.com/gag/a4KezxQ
 
@AviD it's strange that it isn't... I thought it would be tho, since the support is there :O
 
@TildalWave yeah, exactly whats been bothering me.
 
@TildalWave well I'm not really looking for a specific product that could do it, I'm looking for a generic-ish solution, preferably standard, that anybody would be able to consume.
but yeah, that looks like the solution - OpenPGP.... dont need the product for that.
 
S/MIME that bitch.
 
@AviD I dig that, but can't find any... not sure how well it's supported with standard readers tho, it's probably where the problem is - in essence, you can extend it and the container itself is quite capable of supporting that, but the extension will need a proprietary reader then, which is a major bummer
 
@ScottPack I read that as "SHAME that bitch". Which would obviously have a different meaning.
@TildalWave yeah, exactly. You'd think this was common enough to standardize it...
@ScottPack is there any standard or common implementation to support that?
more the verification than the signing.
 
@AviD I'm sorry, I've been ignoring this conversation.
 
1:34 PM
hehe
well... then... thanks for your input?
 
I aim to pleasure.
 
thought this was interesting: finextra.com/finextra-downloads/newsdocs/…
mobile fraud report
@AviD you mean hose, not house, right?
 
I'm sure I have no diamond idea what you mean.
 
So, I've heard a lot about Ingress in here. Is anyone playing QONQR?
 
but yeah, I was walking around the house with a hose.
 
1:39 PM
Oh, hang on, from that mobile fraud report they quote Using an average of one exploitable bug per line of code
that can't be right
isn't it one bug per 100 lines, or something
 
hmmm botherder is written in a single word? I read it as bother-der and scratched my head what's that LOL
 
@Iszi not heard of it
@TildalWave what on earth is a botherder?
oh
got it
d'oh
bot-herder
 
@RoryAlsop see? same problem... it's in the docu you linked
 
@RoryAlsop That is unbelievably bad if true.
 
@RoryAlsop Seems to me it's an Ingress-like game on iOS/Windows Phone. "Coming soon" for Android.
 
1:40 PM
 
@TerryChia also they seem to be VERY anti-android
 
@RoryAlsop I think there were a few in the Cantina in Mos Eisley.
 
@RoryAlsop ... almost androidist, really.
 
1:52 PM
@D3C4FF I did that before, but the system didn't boot. If you Google it a bit, it's a widespread problem.
@AviD I always sign work-related files with GPG
Pretty easy actually
 
@Iszi interesting, not heard of it but have pointed the missus at it :)
 
@Adnan yeah, I guess thats the way I'll have to go.
so I'm thinking use Zip's builtin AES encryption, and layer GPG signature on top of that. so the signature would need to be saved in a seperate file, alongside the zip file...
 
@Iszi weird that they don't have android support. Maybe it's a skunkworks arm of the ingress people and they'll pull a shock merger of the two games :)
 
@lynks haha, typo ;)
 
@AviD Actually, some guy at work made a little application, we keep on the desktop. When we want to safely encrypt something we drag the file to the application's icon, then it ZIP AES-256 and sign with GPG and it ZIP that as well.
 
2:01 PM
@Adnan hmm, thats a cute idea, wrap them both up into a single zip file.
 
@AviD Extraction is done pretty much the opposite way, we drag the ZIP file to the application's icon. It extracts the ZIP, checks the sig, if everything checks out it asks for the password and extracts the ZIP inside.
 
cant go for the application though, dont have control over the users. But this way, if a user wants to verify the signature, there is a standard app for that, and if not, just open 2 zip files and ignore it...
hmm, as long as I'm going with GPG/OpenPGP for signing, would it make sense to use that for encryption too, instead of ZIPAES?
I'm not too familiar with GPG... does it support symmetric encryption?
 
@AviD I think it only does assymetric encryption
unless you give your private key to your other party
well thats still assymetric
 
yeah, thats what I'm finding.
 
@RoryMcCune Have her follow me on Twitter, and I'll send an invite from my faction.
 
2:13 PM
so no, I want to avoid the whole key exchanging thing as much as possible.
a single keypair (what is this called in PGP? is it still a cert?) for the server is doable, dont want to handle anything more complex.
damn, I should really do this when I'm fully awake. Coffee would have helped.
 
@AviD what's your scenario exactly? is it viable to have them verify the integrity remotely? like via html form under ssl?
 
@lynks yeah, thats what I'm thinking of.
to simplify, there is a web app, with data and such whatnot, and they can have all their data and documents exported.
all the data for the customer company.
 
@AviD ahh so if it's an export from a web app, it makes sense to have the verification via the same interface. in terms of user experience.
 
so the data needs (1) confidentiality -> AES encryption (2) verification that e.g. the exporting user did not delete some docuements from the zip.
@lynks yeah, right.
"verification" in this case being: "here is the signature / mac / whatever"
I think I need to put this down till I've had enough sleep.
 
@Iszi coolio will do. D'ya know if there's an android client in plan?
 
2:22 PM
@AviD +1
 
hmm, thanks @lynks - made me realize what I said to myself earlier and managed to ignore.
can just post the md5 of the zip file, tell them if they want to verify its simple enough...
definitely simpler.
 
@AviD you could have something like this; the ZIP export contains a 'metadata' file with a unique ID for that export. upon creating the zip, you add the ID and MD5 of the export to a database. At any point in the future, someone can upload a zip to the verification page, which first MD5s it, then unzips it serverside, looks up the ID in the database and verifies it.
 
and now it's GTA2 time, thanks to @lynks for reminding us of it
 
@lynks the zip is going to be too large to upload just for that... they dont even want to download from the website, but from a seperate FTP server.
 
@lynks Just use SHA-2 to make it sound more secure
 
2:24 PM
but yeah, other than that part, it sounds good.
actually where I started from, managed to tie myself up looking for better solutions, and forgot the simple ones.
 
@AviD well you would need the whole file if you wanted to verify it remotely, unless you can md5 something in javascript clientside...
 
been doing that a lot lately... a sign I really need to get more sleep on a regular basis. I don't have @RoryAlsop's genes....
@lynks or just tell them to md5 it themselves, and compare the output.
 
@AviD s/genes/age
 
and post the md5 to the server. problem now is getting the export ID
@AviD ahh but customers love simple
 
@TerryChia we've been through this. How old you are is not just about age.
@lynks yeah, thats doable. the id wont be a problem.
@lynks yeah... but these also want to look secure.
 
2:27 PM
I'd go down that route, see if javascript can access a local file (probably need a signed java app, or activeX, or something) if it can unzip it and grab the ID that would be great, then it can post MD5 and ID to server for lookup without having to push the file...
Java has nice easy compression input streams too
OR if there are zip headers you could shove the ID into, even better
 
Ear ear, @Terry
 
@lynks yeah, thats what I was originally thinking of, sans the applet. thanks!
 
@RoryMcCune I believe there is. I'll try to see if I can find the link I saw to sign up for an alert.
@RoryMcCune Go to portal.qonqr.com and pick Android. It will prompt you to sign up for notification. CC: @AviD @RoryAlsop @ScottPack
 
@Iszi done, ta :)
 
@Iszi heh. Probably need a better device than what I've got...
oh yeah, and time. Could definitely use some more free time.
 
2:38 PM
@AviD Eh? Thought you were already playing Ingress?
 
@Iszi me...?? noo.... I'm on WP7.5...
 
@AviD Oh, right. You're the other oddball in the room.
 
heh. so, enjoying WP8?
 
Dunno if it runs on 7.5. Upgrade, damnit.
 
@Iszi yeah, will. soon, soon.
 
2:40 PM
@AviD Mostly. I'm rather pissed at whomever in M$ made the asinine assumption that everybody wants all their accounts tied to one e-mail address. Can't use Xbox Live features with my primary gamertag yet because of it - gonna be at least two months.
Oh, and that's another gripe. For some reason, we have to wait through cooldown periods between gamertag transfers, but I could migrate a whole account back and forth as often as I want.
 
@Iszi hmm? I dont have that restriction at all?
oh wait, yeah I dont do much with xbox live, I meant just email accounts.
 
@AviD My primary gamertag is registerd to a different e-mail address than my phone.
Sad thing is, I could easier solve this by switching to iOS/Android.
 
@Iszi yeah, I guess thats the downside of having everything so well integrated. ;-)
 
2:52 PM
@Iszi The missus has had a lot of "fun" with her MS setup as she uses the same e-mail address for her Microsoft account and her office365 account. This confused the heck out of some of the login and sync bits of their site for quite a while..
 
I'm hot sweaty and full of asbestos!
5
A good evening was had
 
@D3C4FF It's alright, we all have our sexual fantasies. I'm glad you're fulfilling your own.
2
 
@D3C4FF I'm not even going to say anything...
 
@D3C4FF oo, sounds like you're just about ready for @Adnan ;-)
 
@D3C4FF you should come to Sheffield, plenty to explore here: google.com/search?q=sheffield%20megatron
 
2:56 PM
@lynks I lived in Sheffield for a while, had no idea that was there!
 
@RoryMcCune Heh. So she was actually doing what they wanted, and still got screwed up. Wow.
 
@AntonyVennard it's underneath the old cemetary near the porter brook on eccleshall
 
@RoryMcCune BTW: I followed Mrs. McCune, so she knows which Iszi to follow on Twitter.
 
@lynks Ah okay, never went there much. Shame, really, should have gone :)
 
@AntonyVennard I've never been down, its quite a walk from what I've read. 28dayslater.co.uk/forums/uk-draining-forum/…
 
 
1 hour later…
4:13 PM
ip_protocol=1; icmp_type=0; send_packet();
 
 
2 hours later…
6:09 PM
Out of curiosity, does everyone here have as many rep points on SU as they got with migrated to SU questions, like me?
 
6:52 PM
@TildalWave Nope. I've not had much migrated to SU in terms of answers.
 
@AntonyVennard oh me neither, what I meant was all my rep on SU was collected here, then migrated there... and wondering if it's much the same case with others here too
 
@TildalWave Ah right, maybe for others but my rep on SU is homegrown :)
 
@AntonyVennard Well you're growing it in still legal quantities I see :) Anything worth watching on UK telly tonight I'm not going out it's British weather at its finest here too :(
ah WILTY and HIGNFY in half an hour... yup that'll do :)
 
@TildalWave just migrated another one for you :-)
 
@TildalWave Aye, HIGNFY later. Will be good. I use it to learn what I missed in the week. Much better than real news.
 
7:01 PM
@RoryAlsop yup that was expected, I flagged it OT too
 
@TildalWave I think all mine is native to SU
@AntonyVennard and @tildal excellent - thanks for the reminder
 
edit ping edit ping edit ping. Y'know, I wonder if there is a limit for how many times I can edit a post?
 
@AntonyVennard For comments and chat messages, there's a time limit.
 
@Iszi Hmmm, yep. The comment one definitely doesn't reset on edit (I don't think). Don't know about chat though.
 
7:31 PM
heh Johnny Vegas's gonna be on HIGNFY tonight :)
 
7:46 PM
not sure if there's any Scrubs fans in the room but this was funny youtube.com/watch?v=7rPwcRScMtQ&feature=youtu.be
 
@RoryMcCune Here here here!
 
00:00 - 20:0020:00 - 23:00

« first day (883 days earlier)      last day (4006 days later) »