The DMZ - 2013-07-11 (page 1 of 4)

« first day (938 days earlier) ← previous day next day → last day (3951 days later) »

1:01 AM

@BadgerGirl is here as well.

Its basically a party now

Yay!

Yay!

Yay!

Beer?

Wine!

Or whisky

1:07 AM

Or tequila

Tequila.

@BadgerGirl i found this stuff at the local bottle shop called Espolon Tequila.

That stuff is the best

tequilaespolon.com/en/?age=verified <- I also like the design of teh bottles xD

Awesome. :) I'll bring you more tequila when we visit you in Australia.

I had a pretty good margarita a week or so ago.

@BadgerGirl I shit you not, i just got a gift delivery of a bottle of rum and a bottle of vodka!

Its not even midday yet!

:D

@D3C4FF What kind of rum?

1:19 AM

@ScottPack Mount gay, Eclipse Silver

@D3C4FF I'll have to try it. I've found myself rather partial to Sailor Jerry.

user image

@ScottPack Not to fond of the spiced rums tbh.

Sacrilege!

@ScottPack :P

@ScottPack I've had the Mt Gay before, I'm curious about the ketel One though...

I think I've had it before.

It's more of a shadow of a memory than anything tangible.

1:24 AM

@ScottPack That's usually what happens when you polish of bottles of rum :P

1 hour later…

2:33 AM

Hi @Gowtham

2:45 AM

@BadgerGirl hello

You are a cat.

A rather dapper cat no less. It must be hard to tie a tie with paws.

And with that, bedtime. Ladies. Gents. Felines.

yessss

Glad you didn't forget about us. Good night.

it's Good morning here :D

Good night anyways

2:58 AM

@Gowtham Wow, where are you?

-1

A: Where can I find good dictionaries for dictionary attacks?

www.Twitter.com/Ciaramonteg Can somebody 'hack' the Password? ITs with Caps and numbers. Its a fake account I justwant to know how 'good'you guys are with hacking. I've seen some videos on youtube pretending they are hacking a facebook acc 'without' downloading, using sources, inspect element...

hammer it!

@BadgerGirl India

2 hours later…

4:57 AM

You guys saw the ipmi vulnerability?

@LucasKauffman Nup. Did you see the backdoors in HP storage stuff?

1 hour later…

6:36 AM

@LucasKauffman i assume this was what you were talking about : community.rapid7.com/community/metasploit/blog/2013/06/23/…

4 hours later…

10:40 AM

4

Q: Taking password letters not whole one, is this secure?

I found a site which is taking password letters from their users not the whole password. Is this secure? Or do they have saved password as salted hash (MD5)?

passwords authentication

can we please bitch slap the webmasters.se for QQing over this.

I might have over-raged slightly in the comments. @AviD chastise in 3...

11:05 AM

Nah - not much over raging. Possibly a little harsh with the 'people who have a clue' comment :-)

@RoryAlsop I only glanced over the whole thing, expecting people to be like...yeah thats fine provided it's done correctly. Instead it was awash with PHP jockeys pruning themselves.

so there was a moment of anger :P

but it quickly passed

1 hour later…

12:11 PM

Well. That was a strange experience.

@ScottPack Was that what she said?

I shuffled into the office, shuffled over to the coffee pot to brew and was confronted with a Keurig.

I had a very Monolith like experience.

@ScottPack someone upgraded the coffee machine?

Yellow

@lynks It reminded me of this challenge projecteuler.net/problem=79

Indeed. When I left on Tuesday we had an 8cup thermal carafe Capresso. I come in this morning and we have a single serve Keurig with hot water reservoir.

12:16 PM

@HamZa ahh thats a nice one

@ScottPack I am a man of the caffeine, but is that preferable? I heard the single-serving capsules aren't so great.

12:42 PM

@HamZa 73162890

@lynks I can't remember the solution :p

@HamZa 5 mins pen and paper.

:P

Greetings once more everybody

@lynks let me verify

@lynks I only see this kind of security in my wildest dreams.

12:45 PM

@lynks correct, I also solved it without code. It would be interesting to see a solution in PHP lol

@lynks are you member on PE ?

This might be a fun challenge projecteuler.net/problem=59

@HamZa nope pe is new to me

1:06 PM

I tried to edit this question but I simply can't do it: security.stackexchange.com/questions/38754/…

I don't even think he knows what he wants to ask.

@lynks I'm not sold yet.

@lynks I'm witholding judgement for now

Are there actual studies that support the idea that coffee increases productivity?

It sounds like everyone is addicted to their god damn cup of coffee in the morning which makes it ridiculous, imo.

@Simon I'm not, i used to down 10-20 cups of coffe/caffeine pillz etc a day, but now i have a coffe every fortnight

It certainly does get me more productive. However if your at the point where you -need- coffee to function, its probably not productive.

@D3C4FF Yeah that's it, some people complain so bad if they "didn't have [their] cup of coffee this morning".

Any addition is suboptimal, that should be uncontested.

Some people also complain endlessly for no good reason.

4

1:21 PM

@ScottPack This deserves a star.

I primarily drink my coffee out of enjoyment.

Do you ever go a day without drinking some?

@ScottPack Bollocks. Coffee to the uninitiated tastes like bitter piss. Much like beer. 99% of the time, people start drinking beer/coffee because other people do.

@Simon Frequently.

THEN the taste grows on them

1:22 PM

@D3C4FF Bollocks? How's the UK?

@ScottPack very wise

@Simon I assume the UK is as drab and grey as ever

@ScottPack Sweet then. I still have to figure out why having a cup of coffee hurts my poor belly.

@D3C4FF So, what you're telling me, is that you've decided that it's physically impossible for me to enjoy the flavor of coffee?

@ScottPack No no!

1:24 PM

Whether you remember earth2150 or not, watch these two short videos: bbc.co.uk/news/world-us-canada-22076705 youtube.com/watch?v=m2xQ6DcXfyY

On the contrary, i misspoke, people rarely if ever start drinking coffee because they like the taste. They like the effect (or like to look cool/like an adult) so they drink it, THEN the learn to enjoy the taste @ScottPack

@Simon Some people do have such issues. I'm not sure, off hand, why. It's not especially acidic, the actual percentage caffeine is fairly low albeit more than most sodas.

@Simon Stomach Ulcers?

good coffee based drinks == good, bad coffee based drinks == horrible

@ScottPack So I would be intolerant to caffeine?

1:27 PM

Sup @ManishEarth

@D3C4FF Unfortunately I can't remember my youth well enough to speak from personal experience. It would be purely anecdotal, though.

@D3C4FF I highly doubt, my stomach almost never hurts except after a cup of coffee. I can't say it really hurts but at least I'm not feeling well.

I feel like testing it right now.

@ScottPack Lulz, fair enough. Well this is based on my observations and conversations with peers.

@Simon Unlikely. Caffeine intolerance usually causes much different problems. Headaches, jitteryness, heart palpitations, etc.

@ScottPack Hum, I wonder what it is then.

1:28 PM

@Simon More likely it's either some kind of other condition, such as ulcers, or the digestive juices are thrown all out of whack.

user image

@ScottPack Daddy, am I gonna die?

@Simon Like I said, coffee is fairly neutral (a pH of around 5) so that's not likely to be the problem. There are lots of disolved solids and essential oils within coffee, so some of those may not fit with your flora.

@CrazyBuddy herro

@D3C4FF Herro there ;-)

1:30 PM

Alright, it's time to stop being a pussy. BRB, I need to test it out.

@Simon yay

I really dislike the taste but I'm doing it for science!

@Simon Try science more

I wonder what the digestive effects of 150ml of rum is on an individual with sensitivity to beverages containing plant based dissolved solids.

Breakfast blend sounded like a good choice. I already regret it.

I put 2 milk 2 sugar because, you know, I'm a man of experience whistles

God it tastes awful.

1:35 PM

user image

2

Haha

@Simon That does sound awful.

It said "Light roast Coffee" on the cup.

I have a new favourite gif d24w6bsrhbeh9d.cloudfront.net/photo/aVOQVr8_460sa.gif

2

Whatever that is.

1:37 PM

@BadgerGirl hello

@Simon Raw beans are roasted as part of the process of turning the coffee berry into a steepable beverage. A light roast indicates a relatively short roast time.

@lynks Heh. I lulz'd

@ScottPack Ah I get it, that's why it tastes so much better.

@D3C4FF copy gets all the fun copy paste thing and I just get a hello?

@Simon It is characterized by a lighter flavor.

1:39 PM

@BadgerGirl Sorry. If your name was paste it'd be all the greatnesses

@ScottPack Good, that's what I figured. There was Colombian which said dark coffee so I stayed away from it.

@D3C4FF That would be cool, to have matching names with copy. <3

There are a number of flavor components within the bean and the darker the roast (i.e. the longer the bean is cooked) the more it brings out the bitter compounds.

This looks not terrible.

coffeetea.about.com/od/roasting/a/roasts.htm

I prefer a light to medium roast.

@BadgerGirl you should change your name to @paste

while you contemplate the deep meaning of that, i'm off to sleep

cheeri-o all

It tends to be smoother.

1:41 PM

Cinnamon sounds great.

And I'm staying away from Spanish.

@D3C4FF Cheers

So far so good. Is it possible that I wasn't feeling well because I had coffee and didn't eat anything in the morning?

I had an apple so maybe that's gonna help me.

@D3C4FF done

lolwut

Ohhhhh lovely @copy @paste @copy @paste @coop @pasta @c3po @pistol

1:52 PM

Happiest day ever.

I tried espresso today. I tried it ten years ago. This attempt was much too optimistic. It still tastes rancid. I washed my mouth out with proper caffeine: Irn Bru

@paste - I aim to pleasure

8

@RoryAlsop I had ristretto today, it was awesome.

@RoryAlsop Isn't that @ScottPack's line?

@terry - I may try it with a double shot of vanilla to see if it is passable

@iszi - possibly

@Iszi Tell me where we will meet and how copy and I can find you. :)

1:57 PM

@Iszi The difference is that @RoryAlsop succeeds.

@terry - did I tell you I like you? :-)

D=

@TerryChia Are you trying to get in his pants?

3

@Simon What pants? He's Scottish remember?

2

@paste Do you have a Twitter account?

2:00 PM

@TerryChia It's gonna be easier then.

Hahahahahaha

Hmm, I think I might change my mind about Java. It isn't so bad with a decent IDE.

@TerryChia Which IDE?

@TerryChia your almost as bad as @ScottPack with his "PHP is ok" stuff...

@Simon IntelliJ.

2:02 PM

@Iszi eeveeta

@RoryMcCune Well, I don't actually have a voice in the language choice in this situation so..... :P

@TerryChia Have you tried Eclipse or it's the IDE that you wouldn't consider as decent?

@Simon Uggggggggggh. Eclipse is a steaming pile of crap.

@TerryChia oh yeah I forgot you're at Redhat now, a vile pit of python and java...

I swear, that damn thing crashes every 30 minutes.

2:03 PM

@TerryChia Honestly, I liked it a lot when I was using it. What's wrong with it?

Really? It never crashed in a year for me.

@TerryChia Yes, it is a decent language if you use vim.

@paste Into "purrgramming"? Cute.

@Simon You have to try IntelliJ. I swear by Jetbrain's products now.

I'm the cutest.

@paste Just sent you a follow request. Follow-back so we can DM plz.

2:05 PM

@ThomasPornin Hah.... I don't know the language anywhere well enough to write code efficiently with vim. Code completion is a godsend for me.

@TerryChia I'll keep it in my mind but I don't think that I'm gonna test it out soon as I don't need to do any Java now.

@D3C4FF Where's @copy?

@Simon Well, Jetbrains has IDE's for python, ruby, java, php, javascript (yes, javascript).

They do cost some money though.

@Simon how do you take your coffee?

@TerryChia Really? Now it sounds interesting.

@TerryChia That's a downer.

@TildalWave Huh?

2:06 PM

But the $20 I spent on PyCharm is easily worth it.

@Adnan In Uni or sleeping.

@Iszi @paste cdn.instanttrap.com/trap.jpg ;op

@Simon Are you a student or contribute to any open source projects?

@TerryChia With vim, I type "Ctrl-P" to complete the current identifier: it completes by looking at occurrences of the same string in the same file. So I have to type the identifier only once per file, usually in the initial "import" clause.

What the hell?! Who's @paste?

2:07 PM

@Simon I mean do you drink it black, with milk, sugar,... and if it's filtered, instant, processed or natural grain

@TerryChia Student.

Haaa! It's you, Badger girl!

They give free licenses to open source project contributors and heavy discounts for students.

But but how?

@TildalWave Oh, well I rarely drink coffee and don't really like the taste so I add a lot of sugar/milk (2 of them).

2:07 PM

I'll read the transcript..

@RoryMcCune That'd be so much better if it had audio attached, a-la instantrimshot.com

companion cube ice-tray:

user image

@TerryChia Cool. Do I really need an IDE for PHP though? :P

@Simon The more relevant question is "Do I really need PHP though?"

@TerryChia Hell of a good point.

2:09 PM

I use Sublime Text for editing python scripts but I fire up PyCharm if I am working on more complex stuff like webapps. They have a bunch of useful features that makes life sooooo much easier.

@Simon remove the milk, see if you still get same problems ;) chances are you're developing lactose intolerance, something we all develop to varying extent as we're getting older... it can cause inflammatory bowel syndrome

@Iszi that would be coool...

@TerryChia I use Sublime Text for PHP.

@RoryMcCune Didn't you mean to point that at @lynks?

@TildalWave Even though I drank a lot of milk as a kid I could have developed intolerance?

2:10 PM

@lynks WANT. LINK!

@lynks - anywhere in UK do them? I only saw them on think geek, and shipping is expensive.

@Adnan hi

@Iszi @RoryAlsop amazon.co.uk ! :)

@paste Okay, I've just realized that you changed your name.

@Iszi for traps, nope it was you asking for a follow from @paste/badger girl :)

2:11 PM

@lynks How's that unfortunate?

@RoryAlsop amazon.co.uk/Portal-Companion-Cube-Ice-Tray/dp/B00A2UUV0M

> Most mammals normally cease to produce lactase, becoming lactose intolerant, after weaning, but some human populations have developed lactase persistence, in which lactase production continues into adulthood. It is estimated that 75% of adults worldwide show some decrease in lactase activity during adulthood.

@Iszi thinkgeek is for 'muricans

@RoryMcCune No, I meant didn't you mean to tell @lynks that the companion cube ice trays were "coool"? Now you went and spoiled the joke.

@TildalWave 75%?!? Jesus.

2:13 PM

@lynks Sounds like a personal problem to me. I've got no issue with it. ;-)

@Iszi see too subtle for me I'm afraid, but then it's early there and later and hot here, so I'm probably somewhat slower than usual ;op

@RoryAlsop amazon.co.uk/Thinkgeek-Portal-Warning-Sign-Coasters/dp/…

@RoryMcCune I dunno what you're talking about. It's nearly never not hot here.

@Iszi yeah but I'm scottish, anything over 15C causes our brains to melt

@Simon yup... it's not necessarily a bad thing to drink milk now and then even if you're slightly intolerant, but you will need to go to #2 pretty soon ... even faster when it's in coffee, but avoid milk if you suffer too explosive incontinence :))

2:15 PM

@TildalWave Haha, this discussion got too serious.

@RoryMcCune Yeah, and I'm "'murican" so you'll have to speek Fahrenheit. :-P

@Simon no, you're not reading the subtext right :)

Hehe

@Iszi that was why I explicitly stated C :) I guessed otherwise you'd think I was a yeti!

(Though, perhaps in further testament to the state of our educational system, that's probably the first time in my life that I remembered the proper spelling of "Fahrenheit" without looking.)

@RoryMcCune Ummm.... No. I still do.

2:17 PM

@Iszi well yeti's are cool

so that's ok with me :)

the divide between the developers and security boffins in that partial password question is really interesting... I'm not saying it gives me back confidence in developers btw :)

user image

I should never have turned on one-click ordering...

@lynks I will give you my address, ok?

Day six: 'The hell? Who mails a bobcat?'

@Simon this is what would happen

Hahaha.

2:33 PM

@lynks - ice cubes bought... And now you show me that lanyard! Dammit

@RoryAlsop it never ends. I really like the coasters also.

You guys are Portal fans?

@Simon who isnt?

@lynks Non-nerds. I forgot what this chat is supposed to be about.

@RoryAlsop can closed as duplicate question be protected?

13

Q: Taking password letters not whole one, is this secure?

I found a site which is taking password letters from their users not the whole password. Is this secure? Or do they have saved password as salted hash (MD5)?

passwords authentication

2:36 PM

@TildalWave Why?

It started attracting "probably" and "I don't see why" answers

@TildalWave It's closed. It doesn't accept new answers.

It's crazy how a duplicate got so much attention.

@Simon Dupes usually do.

@Adnan oh duh LOL sorry... yes you're right :))) moar coffeeeeee pleaee

2:37 PM

@ton.yeung The ending of the first or second?

@Adnan My love for you cannot be duped.

@lynks $13 for one ice cube tray? Seems a bit steep, even given what it is.

@Simon Yeah, my love for you as well.

I don't think you can dupe the output of /dev/null

@Iszi it's the last ice cube tray you will ever have to buy...

@ton.yeung The ending of the second is even more crazy, it's worth spending few hours to finish it.

@Adnan I wonder where the nearest bridge is from my workplace.

List of bridges to the Island of Montreal

Like most major cities, Montreal needs easy highway access from its suburbs and surrounding areas. However, because Montreal was built on an island surrounded by three rivers, it can be entered by land only on a bridge. Although the city was founded in 1642, it was not before 1847 that the first fixed link to the outside was established when a wooden bridge was built across Rivière des Prairies to Île Jésus, on the site of what is now Ahuntsic Bridge. Another bridge was built immediately afterward, a few kilometers west, which became Lachapelle Bridge, and another in 1849, Pont des Saints-...

2:42 PM

Bought lanyard too....now I see hoodies! Damn you @lynks

@RoryAlsop I bought the black wallet...but then I do need a new wallet.

@ton.yeung It's one of the ending where you go like "Could it be?" and then when you try it and realize that was the way to solve it you go mental. I'm not gonna tell you more.

@Adnan Thank you.

@RoryAlsop do you also need a lanyard for work?

Need? Not really, I have upwards of 40 from sec events and from backstage passes from festivals... want is a better word

I want a Caperture hoodie.

2:45 PM

It is on the next merch list for metaltech to produce... Who'd have thought the demand for hoodies was so high?

Oh, @RoryAlsop I wonder what you could do with this...

thinkgeek.com/product/e91b/?pfm=homepage_Featured_6_e91b

What? No onebox love for ThinkGeek?

user image

@iszi - I have one. Will need to show you some of the picks I have made from credit cards, Game cards (they have various gaming logos on) etc

@ton.yeung $25 on ThinkGeek.

@Iszi cute :) Never tried to play guitar with a CC pick

Nah - you peel it off. They can be sharp edged, so play on a steel string for 5 mins to smooth them

2:52 PM

@RoryAlsop wouldn't they melt to rounder edges if you put a lighter next to it?

Hmmmmmmmm

Ok, another Linux questions for you guys - Anyone knows of a good CD ripping application that supports FLAC and AccurateRip?

Otherwise I'll go install dbpoweramp on my Windows partition.

@Iszi One of my kids got one of these for Christmas. He loves it.

@ton.yeung The do-it-yourself guitar pick punch.

@ton.yeung student card, ID card, fancy business cards,... none of that?

@ton.yeung I recommend @ScottPack.

3:00 PM

@ton.yeung how are you ever gonna invent anything if you trow all your garbage away? :P

that's why IBM is so keen on clean desk policy in their labs ... gowd forbid they ever invented anything :)

@Iszi e-mail :(

@paste

@copy

We meet again.

I see a lot of new faces.

the question is who's going to change their handle to @cut to complete the triumverate.....

3:13 PM

@RoryMcCune tada

Hmm, not changing.

@TerryChia I prescribe a relog.

@TerryChia change it there: chat.stackexchange.com/users/41829/terry-chia

Now?

Yeah.

Let's all be Rory.

2

3:16 PM

When everyone reloads.

@cut @copy @paste yep that works :)

@cut Been there, done that.

@paste Disregard my first response. Forgot to "Reply All".

3:34 PM

reminds me of this xkcd

Her daughter is named Help I'm trapped in a driver's license factory.

So, StackExchange prevents me from changing my display name for 30 days, but I can still go to another StackExchange site and sync the profile... Hmm..

@TerryChia joke's on you

@ton.yeung Also sooo old, but always good.

4:27 PM

God damn today was tiring.

there's only so long I can stare at assembly :/

especially x86-64, since I haven't gotten used to the call parameter passing method yet

@Polynomial yeap, what is it...like rcx, r8, r9 ? I always have to look it up

and then it differs on *nix vs windoze

yup something like that

or rather rcx, r8, r9, [esp-8], [esp-C], [esp-10], etc.

(actually stack in reverse order but meh)

oh man, why did I never see the 'meet the pyro' video before? I remember all the others.

@lynks Everybody talks about how much of a maniac he is, right?

@Simon yeah it might just be my favourite one :P

when it goes into his imagination I almost spat coke onto my keyboard :P

Also a huge fan of the sniper one.

4:41 PM

@lynks Pyro World? Yeah, it's pretty neat. I haven't played in a while now, I should play again.

Or is it Pyro Land? I forgot.

@Simon I played TFC waaaayy back in the day, then got really into CS. Like really really. For some reason TF2 passed me by until recently.

@lynks I first started to play in December so I'm not one to judge you :P

@AviD How do you say 'meat' in Hebrew? The ש is confusing me. Is it 'sh' or is it 's'?

4:59 PM

@Simon whats your favourite class?

« first day (938 days earlier) ← previous day next day → last day (3951 days later) »

Transcript for

Jul '1311

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile