« first day (1141 days earlier)      last day (3744 days later) » 

12:16 AM
If i've got NT\System privs on a machine, why am I still getting "5: Access is denied" whenever i try to run any other applications?
 
I wonder if the system account has been denied interactive permissions on that system? and then there is the elevation token, which is totally separate from accounts if I recall.
 
Not as far as i can tell... I can run -some- privledged commands as NT\sys, including creating additional local admin accounts, but can't do 'simple' things like change group-policy settings or run 'untrusted' applications
And only some GroupPolicy objects are locked. But I don't understand why they're locked...
I thought something like "Certificate rules on win executables" but that's disabled, no sofware restriction policies defied either...
 
1:05 AM
Trying to figure out why this page has the tag "rory." Did Rory Alsop create this room, or does he simply frequent it, or does the tag have another meaning altogether? Clicking on the rory tag gives a 404.
Ditto on nono-yolo... although I like the sound of it :)
Never mind, every single tag on this room give 404...
*gives
 
1:18 AM
Those tags are a list of common chat room topics.
While alphabetical they also happen to be in decreasing order of importance.
 
So why all the 404's?
 
Because the developers intended them to be used to describe what site tags this room is intended to be used for discussing.
 
Because food trumps infosec every time... got it.
 
That is, if this was a chat room designed for discussing the proper way to retire information or dispose of equipment then it would be tagged with
 
OK... So they made the tags links to pages that don't exist to drive all the stupid people like me onto tangents like this?
AKA, I understand why tags exist, but why do these return 404's?
 
1:25 AM
It assumes whatever text you put in there is the name of a tag, so when they render the chat room html it includes a link to the tag. It just happens that they don't validate.
Because none of those tags exist on security.SE
 
But if a tag doesn't exist, it either won't let you use it or it creates the tag...
 
On the actual QA site sure, but this is an ancillary thing that isn't.
 
Or at least, that's what happens in my expirience
Ah. That's kind of cool. Now that I know, I find I preferred not knowing... But thanks anyway Scott!
 
That's a common enough feeling in the field.
 
Too true... My favorite thing I've seen on stack exchange was when someone answered a question on Stack Overflow and then commented on it two years later. They had forgotten how to do whatever it was they had answered, and when they Googled it their own answer on SO came up. Apparently "It's depressing how much more the past me knows than the present me."
 
1:42 AM
There have been a couple of times I've hit a problem, searched for the answer, read it, thought, "This guy is freaking genius. Upboat that!" then discover it was me.
 
Security.SE probably thinks you're rather narcissistic at this point ("god****, he's trying to upvote himself again").
That's doubtless going somewhere in a Google repository...
No doubt slightly skewing their complete psychological profile of you
So that when they tailor their mind-altering drugs to each individual in an effort to enslave the populous, only you and the people who use Tor will be safe!
And thus a more realistic version of Terminator is born.
 
2:26 AM
@KnightOfNi "at this point"?
@ScottPack has always been a narcissist.
 
@TerryChia D=
 
3:20 AM
Damn, I found the perfect NAS mobo. newegg.com/Product/Product.aspx?Item=N82E16813157475
 
Gaaah! That's pricey.
 
@ScottPack It's a SoC though.
And a server class CPU.
 
What's a SoC?
 
System on Chip.
 
Yeah, it all together makes it exceptionally overpowered for any home use.
 
3:24 AM
I'm drooling at that 12 SATA ports.
 
And for corporate use I would buy something off the shelf.
Don't get me wrong, I looked at the picture saw that it was all one thing with a fuckload of SATA ports and got happy.
Then I saw the price.
 
Heh. It would make for a nice home lab setup though. Through oVirt or ESIx on it and get some VMs running.
 
I've got an Athlon socket 7 running my FreeNAS box now and it's idling like none other. It's SATA port starved and only has PCI, so throwing an expansion card in seems like a waste.
 
And to be fair, it's not that much more expensive than the i7 CPU + mobo combo I bought a few years back.
 
Depending on the storage, yes, I could get behind that for a VM system.
No, it's not, but I also wouldn't waste my money on an i7 for a NAS
 
3:28 AM
@ScottPack Well yeah. That's my desktop. :P
 
Exactly.
 
Lower end CPU, but 12 SATA ports as well.
 
ESX doesn't do software RAIDs, so that's out, and I don't see where that board does anything either, so the 12 onboard ports would be wasted.
Something that runs on a full OS instance, like KVM or XEN, might be handy. Then you could use md to RAID up the disks for your datastore.
 
@ScottPack Btrfs/ZFS?
 
Not for ESX
 
3:31 AM
Ah I see. Well, if I'm going to setup a virtualized lab I'll be running oVirt anyway.
 
It really only understands vmfs
I'm not that familiar with it.
I have on my list to actually get hardware so I can build out a homelab.
What I've learned from work is that you need fuckloads of ram.
 
@ScottPack Same here. I have most of my stuff specced out but it's hard getting started on a student's budget.
 
Disk is cheap, and for most uses even RAID5 is fast enough. Processor is negligible, unless you're doing something weird. It's RAM that always runs out.
For me it's justification, primarily time.
 
@ScottPack Ah, well that I have loads. :P
 
I feel like there's other things I need to do.
 
3:35 AM
Actually I can afford to build another machine right now. But my parents will probably kill me.
 
Good advantage of them being nearly 1000 miles away.
 
This u-nas.com/product/nsc800.html + previously linked mobo will be a killer combi.
 
I like that. Pretty nice.
 
It's damn hard finding a case with that many hot swap bays let me tell you.
 
I'd love to see more Atom boards with gobs of SATA ports. To me that seems ideal.
 
3:41 AM
@ScottPack Look for any Avoton-based SoC boards.
 
Oh look, there's the one that NewEgg carries. :)
 
Because, frankly, that power level is perfect for a NAS. It's not really doing any kind of processing so it doesn't need to be beefy.
Depending on your filesystem it may need some power, but things like ZFS are more ram hungry.
 
Yeah, plus the TDP on the Atom chips are low as well.
 
Right. They tend to be low power enough that the disks will be the consideration and not the system.
 
3:47 AM
Google sold Motorola?!
Wow Lenovo is on fire with the acquisitions.
 
In other news: Google Owned Motorola?!?
 
@ScottPack Heh, yes. It was pretty big news 2 years ago.
 
I don't really follow much hardware stuff, particularly phones.
Motorola was cool back when they were still making the 68000 series.
Haven't really cared about them since they stopped powering Amigas. :)
 
To be fair, the Moto X and Moto G are pretty solid Android phones.
 
I think my friend has a Moto X. I remember it looking quite attractive.
 
3:52 AM
It is (IMO) the best non-Nexus Android phone.
Mostly because the interface isn't horribly skinned.
 
I've been pretty happy with CM11 so far. There are some audio related bugs, which is annoying, and bluetooth is wonky.
If I'm using a bluetooth headset and pause audio for a length of time (at least 1 minute but maybe longer) then the audio is exceptionally choppy and I have to reassociate the headset for it to clear.
Sometimes the headset media keys don't work, or (even worse) if my podcast player is in the foreground they will occasionally get sent to the stock music player.
 
 
4 hours later…
8:26 AM
I got myself an S4 and love cm11 on it
Camera is the only slightly glitchy app
 
 
2 hours later…
10:07 AM
@TerryChia whaaaaaaaaat, why would they sell them, have they even done anything with them?
 
I was thinking about the @N twitter account thing. Isn't GoDaddy the only one in the wrong here?
Last 4 digits of the CC number are public anyway, so PayPal did nothing wrong. Right?
 
10:28 AM
@Adnan hmm not sure I'd say any CC digits are public
first 6 are kind of 'cause that's the BIN number
but last ones are part of the persons personal data...
 
@TheAllSeeingEye Hello
@RоryMcCune Yet they're printed on receipts when you buy stuff from the supermarket.
@RоryMcCune This is essentially means that if someone wants to steal your GoDaddy account, they only need to follow you around for a day and get hold of a receipt after you discard it.
Or, pay the cashier $10 to give you that information
 
@Adnan yeah companies online "proving who you are processes" are lame...
wasn't that what happened with Apple
it was last 4 digits of CC as well?
 
@Adnan GoDaddy did an absurdly stupid thing by allowing the attacker to guess the first two digits out of the 6 he needs.
 
@TerryChia 100% agree
but I still can't see how PayPal is blamed equally on this
 
10:42 AM
But still, even if the last 4 digits are semi-public information... I don't want services just giving it out to whoever asks them nicely.
 
Apple had that for password recovery as well.
depending on threat model it's a pretty stupid thing to rely on
it's awesomely disappointing how little the field of proving identity on-line has improved in the last ten years
4
it's becoming ever more important to real-world lives
 
@deed02392 I don't know. I'm not the CEO of Google and I'm not privy to any sort of information regarding Google's business plans. :P
 
@TerryChia you're not... damn I was hoping to hit you up for a $100 mill loan later...
 
@TerryChia You are however adept at being pedantic
 
@deed02392 That I am.
 
10:46 AM
@TerryChia Waaaait.. you're not? Why the hell was I gonna send you beer then?
 
@Adnan If I was the CEO of Google, why the hell would I need you to send me beer?
 
lol
 
@TerryChia True
 
@TerryChia you make that sentence seem like you have someone else in mind to send you beer
 
10:58 AM
@RoryAlsop I'd just hop on my private jet to Finland and pick some up myself actually.
 
@TerryChia Fool! You hop in a private jet to Belgium.
Nobody takes a private jet to drink reindeer piss in a bottle.
 
@Adnan Heh. Good point.
 
11:46 AM
Ahhh, good old bash.org. bash.org/?152037
 
12:05 PM
Also interesting for the people here:
12
Q: Why should passwords be encrypted if they are being stored in a secure database

phpmysqlguyI have a web service. Right now I have passwords stored in plain text in a mysql table on my server. I know this isn't the best practice, and that is why I am working on it. Why should passwords be encrypted if they are being stored in a secure database? I realize that if someone hacks in to my ...

 
@blade19899 Why am I not surprised that the OP's username is phpmysqlguy?
 
@Adnan, because the Q title made u aware already that a <s>noob</s> inexperienced user asked this it. And the name slightly suggest he is so
 
@blade19899 I think I like you. I'm gonna check your question/answer history.
 
@Adnan No problem. check my Q/A on askubuntu, as that is where I mostly reside.
 
@blade19899 Quite impressive.
 
12:16 PM
@Adnan Thanks. You two. Very.
 
Anonymous
bcrypt vs scrypt
 
Anonymous
which is "better"?
 
@PatoSáinz Define better.
 
I think the best way to ask this is "what are the pros and cons of bcrypt and scrypt" then you can weigh them to your needs
 
Anonymous
@TerryChia better as in taking less than three seconds to convert and not getting myself hacked
 
12:25 PM
@PatoSáinz None of them then. I'm pretty sure looking up the appropriate library for whatever language you are using, changing your code, and committing it takes more than 3 seconds no matter how fast you type.
 
Anonymous
@TerryChia by converting i meant hashing
 
Anonymous
imagine a webapp which stores passwords in bcrypt/scrypt
 
Scrypt is considered better because it is more resistant than bcrypt against attackers utilizing FPGA/AISC. However, bcrypt implementations are more readily available so it's usually the one I use.
 
Anonymous
i think 3 seconds is enough
 
Anonymous
12:26 PM
@TerryChia i completely forgot about ASIC
 
Anonymous
 
@PatoSáinz Yup, what @Terry said. I'd go with BCrypt mainly for portability. However, If you're running your application in a server you own and maintain, then use whatever makes you comfortable.
 
Anonymous
@Adnan I feel confortable with rot13
 
@PatoSáinz Then use it.
 
Anonymous
are you seriously recommendng me, as a security professional, to use rot13?
 
12:38 PM
Also, please advertise that on your website under the /we-care-for-your-security page.
@PatoSáinz Your response regarding rot13 was obviously trolling and is of a low level. I decided to sink even deeper and drag you with me there.
 
Anonymous
@Adnan alright
 
and that's my certified anti-trolling method.
> Can't beat them because they're trying to drag you to their level? Sink even lower and show them how it's done.
 
what day of the week is 'R'?
 
@deed02392 Torstai
 
lol
but what language is it R
Finnish and English days of the week are surprisingly phonetically similar
 
12:49 PM
@deed02392 English. However, they can't used "T" so it's not confused with "Tuesday".
 
I live in England and I've never seen an R used to represent Thursday
 
@deed02392 Well, there you go. Now you've seen it.
 
How absurd
 
@deed02392 Especially lauantai and keskiviikko
@deed02392 What would you use to represent the day Thursday in one letter?
 
5/7 are practically identical
I wouldn't attempt to represent it with a single letter
what would be the point when an additional letter makes it much more obvious
 
12:52 PM
@deed02392 You wouldn't. Other people had to, and they opted for R
 
had to? looks like plenty of room for another letter there
Microsoft opted to just use T again
which again is reasonable given the context
when it's quite clearly going through the days of the week chronologically
so which letters do we supposedly use for Saturday and Sunday?
 
@deed02392 U
 
haha, hilarious
 
@deed02392 I honestly thought this one is common knowledge
 
nope
everywhere I've ever seen it, an extra letter was used or the letter was re-used as is
 
12:57 PM
@deed02392 I think we need some of our American friends to enlighten us on that one. I'm pretty sure it's common in the college scene there.
 
I'm just telling you what we do in England
 
@deed02392 and I believe you
Well, this is the only thing I was able to find online on it eventguide.com/topics/one_digit_day_abbreviations.html
 
Yeah I appreciate it probably was a standard followed at some point
 
1:54 PM
hey if anyone wants to check out coding (new social programing network or something) you can sign up with my referal link: koding.com/R/deassain
 
@LucasKauffman So what's this about?
 
@TerryChia dunno free vm 4 gb storage
5 if you register through me
 
@LucasKauffman Looks like a cloud IDE with some social aspect thrown in?
Yeah... I won't be going back. :P
 
@TerryChia BUT ITS CODING TOGETHER TERRY
@TerryChia YOU COULD BE THE HELLO TO MY WORLD!
7
 
@LucasKauffman Oh, just fork me instead.
TravisCI is really neat.
 
2:02 PM
@Lucas looks cool
wish I had some friends
to code with
 
@blade19899 I have put the right answer to that question; it will be interesting to see if scientific righteousness can trump the crowd of upvoting monkeys.
 
@ThomasPornin What about a crowd of upvoting monkeys with a sense of scientific righteousness?
 
2:21 PM
Hm. This Symantec download page says, "If you're upgrading to 3.3.2 then use the 3.3.2PUP file to upgrade." Except there isn't one. >_<
 
@TerryChia You mean the DMZ ? That's the plan.
 
2:44 PM
@ThomasPornin ook ook, I Upvoted
@LucasKauffman you need to use that either as a chat-up line or on a valentines card...
4
 
2:59 PM
@LucasKauffman You are a true poet.
@Xander Didn't you say you were gonna stop reviewing first posts @ 1234? Junkie.
 
@Simon I did. I stopped for days.
 
Then restarted. Junkie.
 
@Simon I realized it was unfair of me to lay the heavy burden of reviewing on you all. You needed help. So I started helping again. Plus I had to help strategically review to keep Ali down, so @Adnan could solidify his hold on the second spot.
 
@Xander I'm sorry, I didn't see it that way. Any action to keep Ali down is noble.
 
3:21 PM
@LucasKauffman I just did a test drive of your new chat up line, got a laugh out of my missus, so as long as you stick to geeky women you should be sorted..
 
this Stack Exchange application for Android just turns my phone into a vibrator
 
Have you done a performance comparison?
 
lOL
LOL
 
no, I doubt the battery life would be sufficient long term
 
3:38 PM
@ThomasPornin Which answer? the one at programmers?
Opps, just saw you... 11 answers. Kinda hard to stop the right one!
 
4:09 PM
@PatoSáinz The server can't afford anything near three seconds. More like 10-100ms
Such high hashing costs are okay on the client, for example for disk encryption or unlocking a password manager
 
@PatoSáinz Why? Just hash the passwords with an expensive hashing algorithm. There's no justification for a web app to be able to recover the plaintext password.
 
 
1 hour later…
5:28 PM
@deed02392 hm? bcrypt/scrypt are two of the most popular password hashes. So I don't get your point.
 
6:17 PM
Is there a canonical question somewhere on SE regarding the whole RGB vs CMYK vs RBY thing? I feel this is something I should understand, but probably don't.
 
@Iszi What is the issue ?
We use RGB because we are not dinosaurs.
We use CMYK for paper printing because paper offers more variations than LCD screens (e.g. brilliance variations).
RYB is for paper where the colours are filters, and not lights.
If you put no colour on a piece of paper you get white; if you put all of them you get black. On a screen, no colour is black and all-colours is white.
In fact, RYB should be MYC (Magenta, Yellow, Cyan).
 
@ThomasPornin What i don't get is why we learn RBY in primary school, while the "real world" mostly uses CMYK or RGB - and then, I still don't really get why we use RGB for additive and CMYK for subtractive.
Besides that, I haven't even yet really tried to wrap my head around how HSV/HSL works.
 
@Iszi magenta = red+blue, cyan = green+blue, yellow = red+green
The subtractive colours are the complement of the additive ones, which makes sense, because they are substractive.
I.e. somehow the "subtractive magenta" is a colour which filters out everything but magenta, i.e. a colour which lets flow only what constitutes magenta: red and blue.
If you mix magenta and yellow paints, then the magenta blocks everything but red and blue, yellow blocks everything but red and green, so in the end you get red.
The K in CMYK is because the human eye see a few more things on paper, e.g. whether the colour is brilliant or not brilliant; the extra K (black) is redundant in an RGB point of view, but allows to fine tune the rendering, and it is handy to have sharp letters.
 
6:33 PM
@ThomasPornin See, they're you're talking about paints - where our children are learning that colors are made up of Red, Blue, and Yellow. If it's really CMY (and that's what's used in the real world) why aren't we teaching them that instead?
 
You learn RYB in primary school because children must learn fast that adults are filthy liars.
2
 
@ThomasPornin No, that's why we tell them about Santa Claus, the Easter Bunny, and the Tooth Fairy.
 
Historically, RYB was first used because early painters had access to only a few available colours. CMY and CMYK were theorized later on, when people began to understand what was going on (i.e. after Descartes and Newton, mostly).
Also, when you give colour tubes to a kid, you can only get one final colour, which is "messy dark green".
3
 
7:32 PM
erm well there's different color wheels and RYB is used to teach kids color theory because it actually works for mixing pigments (i.e. reflected light of materials), where RGB works for mixing "light" sources. And CMYK works better for printing. But all printing color wheels are approximations anyway and greatly depends on the quality of your pigments and the material it's printed on. There's always some chemical and photo induced "bleaching" anyway.
RYB also works for "perceived colors" e.g. for contrasting colors to mix shades of shadows... Van Gogh used that, for example to paint shadows of yellowish fields dark purple.
 
@deed02392 I totally would, if needed for code golf.
 
8:08 PM
@Iszi Just use chinese/japanese. There using one char for week days is simple and unambiguous.
might need 2-3 bytes though, depending on the encoding.
 
Can some mod look into this one please?
He's attaching same link to his "answers" which they aren't ... trying to be inventive about it
the guy is pretty desperate, I almost feel pity for him:
0
Q: Creating a new database from .myd, .myi, .frm files from my boss's data - HELP me keep my job

Richard BI have an external drive with the following files only in a directory, these were copied from a computer that crashed and not available any longer. Directory list db.opt 65 bytes 123abc.frm 9 kb 123abc.MYD 244.54 GB 123abc.MYI 99.49 GB Do I have enough d...

 
9:00 PM
@Adnan It is amusing: in North languages, Thursday is "the day of Thor" (e.g. Donnerstag in German), while in Latin-influenced countries it is "the day of Jupiter" (Jeudi in French, Giovedi in Italian...) (and the imperial Roman calendar did not have week days).
 
9:10 PM
Did you notice the question due to the [space] tag?
 
10:01 PM
@CodesInChaos LOL no didn't even notice it and it took me a while now to realize what you meant. I followed up on posts of that user that I linked to before. Why did you notice it? :P
 
I checked the edit history, and in my mind you're linked to "space"
 
Anyway, he has an answer in the dupe. All it took was Googling for ".MYD" and it was the first one
@CodesInChaos you realize that space is everywhere, right?
 
@TildalWave Not in my mind. It's crammed full with useless stuff.
 
you can't be referring to outer space then, it's hardly "crammed"
but it does describe most of my drawers
 
10:32 PM
@TildalWave you are referring to the pull out storage device, and not the U.K. interpretation, right?
 
@AviD hehehe right :)
Which reminds me, I should look for That Mitchell and Webb Look DVDs
 
11:11 PM
@TildalWave hmm, actually we read that wrong - he meant that his mind is crammed with useless stuff, thats why there is no space there
 
@AviD You're saying there's a chance he made a joke about himself? Neah... :)))
 

« first day (1141 days earlier)      last day (3744 days later) »