« first day (1386 days earlier)      last day (3508 days later) » 
00:00 - 18:0018:00 - 00:00

12:11 AM
Wow, that Xen bug is awesome.
 
1:01 AM
@Simon We'd frequently do challenge-response authentication with my missus. It goes like 1) me begging 2) me being rejected in various humorous ways 3) missus authentication successful
 
 
1 hour later…
2:01 AM
@TildalWave Hey, that sounds cool, I want to implement that with my lady donut.
 
@Simon Eh. Still, there's 40+ people out there who now have eyes on the topic that may have otherwise not. Unfortunately, that's not really increased contributions on the answer.
 
@Iszi Well, the point you've raised in the comments is valid. However, I bet that even if the "question" on meta would be have been opened, there wouldn't have been much more activity on your SE "question".
It's kind of hard to find official statements from products/OS admitting the vulnerability or every single version that is affected.
For instance, I wanted to add something about OS X but there's no official statement by Apple thus no list of affected versions. Therefore, I cannot post an answer.
Your idea in theory is very good but practically, it doesn't end up well.
 
2:16 AM
@Simon Someone posted links to an Ask Different question about that.
You don't necessarily need vendor statements to confirm whether a system is affected. Reputable third-party research is useful, too. Vendor confirmation is only really needed to state patch availability. And I believe (haven't looked at the Ask Different answers yet) I saw something about Apple releasing patches elsewhere.
I think @jrg was volunteering to test Ubuntu earlier...
I've never played around with Damn Vulnerable Linux. I'm sure it includes a Shellshock-vulnerable version of Bash. Does it also have an exploitable website pre-configured?
 
@Iszi I guess but still, you gotta find that research.
 
@Simon The attack isn't practical on normal OS X systems (consumer or workstation usage).
Their dhclient implementation isn't affected so unless you are running servers opened to the internet on your OS X machines you are pretty safe.
 
2:32 AM
@Simon It's not generally hard to find, if you look. The problem is getting the time and gumption to keep looking for more.
 
@TerryChia oh yeah?
 
@DavidFreitag Isn't a code execution vuln thankfully.
But still pretty bad.
 
@TerryChia Linky?
 
Exploiting this should be pretty tough in practice I think.
 
@TerryChia Woohoo arbitrary read access
 
2:40 AM
@DavidFreitag I'm not sure if it allows reading of interesting data ala heartbleed though.
They say "read path would (attempt to)
access memory beyond the single page set up for APIC emulation."
I wonder how far beyond the single page.
 
> A buggy or malicious HVM guest can crash the host or read data
relating to other guests or the hypervisor itself.
 
I doubt we will see many PoC exploits as well since it looks like hosting providers got advanced notice and already patched the bug.
So it's not a high impact vuln.
 
If you could somehow find a return address within the extra data and overwrite it
 
@DavidFreitag It's a arbitrary read vuln though, writing data seems unlikely unless there's another vuln.
 
> While the write emulation path is written such that accesses to the extra MSRs would not have any bad effect (they end up being no-ops)
 
2:44 AM
And again, unless the hosting provider is completely incompetent it should mostly be patched everywhere.
 
3:24 AM
About time to unveil the D and something else http://t.co/qp23yi59i6
Hey look @Simon, Elon Musk is giving you some competition.
 
 
4 hours later…
7:46 AM
This is fun 54.69.118.120:1337 (tinyCTF)
Login with empty user/pass
 
@Adnan How do we know that you aren't trying to give us the shellshock virus?
 
@TerryChia Of course I am
I'm using my 0Day bash exploit against Chrome and Firefox
 
but what if we use internet explorer?
 
@Lighty Then you do not exist.
 
@Lighty Then you deserve every single bit of pain you have/ will ever get.
 
7:58 AM
@Arperum but what if i use it to download another browser D:
 
@Lighty Doesn't count as "using", counts as getting rid of it.
But if you are in here at the same time, then you are doing it wrong.
 
that reminds me of a bad descision i made, instead of getting a MS Surface pro, i got a regular one with Windows 8.1 RT, so i can't install other browsers then a tablet version of IE on it ;~;
but its touch screen freindly, i have to gve it that..
 
8:14 AM
Mornin' All
 
g' murnin
 
@RоryMcCune Morning.
 
8:31 AM
i need some help here
why do some random questions have a different Background tint?
i tried comparing the "awensered or not" and votes, but it doesnt make sense to me
 
@Lighty Show more in the screenshot. Add about 100px from the right
 
@Lighty Still need help?
 
@Adnan nope :3
thnx <3
 
No problem
 
8:44 AM
0
Q: encrypted data by virus

arefeMy galaxy note 2 had been infected by a virus called FBI virus and fortunately i managed to remove it. But the problem is that all my files are encrypted ... how can I recover my data and access to them? thanx

i've ehard about a nasty ransomware targeting PC's, and that Synollogy NAS's are starting to get infected too, but phones?
where do i add/suggest new tags?
 
@Lighty Yeah, anything with data on it. A couple of months ago there was an epidemic on iPhones in Australia, for some reason.
So, I've seen people follow some wacky, inconvenient schemes in order to try to protect their privacy and prevent tracking, but this has to take the cake.
 
@Lighty I don't think there is a way to recover the data, unless they used a weak encryption algorithm
 
"For personal reasons, he [Richard Stallman] generally does not browse the web with an active connection on his personal computer; rather, he uses wget and reads the fetched pages from his e-mail mailbox, claiming to limit direct access via browsers to a few sites such as his own or those related to his work with GNU and the FSF."
 
@Xander: Stallman is a bit of a nutter ;p
 
@Xander HN? I think I saw that comment on there.
@JourneymanGeek "a bit"?
 
8:58 AM
That's on his webpage as well
 
@TerryChia No, just randomly looking at his Wikipedia page.
 
@TerryChia I was temporarily british, I tend to understate
 
@JourneymanGeek Yes. I just found myself surprised once again by the lengths to which his nuttiness extends.
 
@Xander; to me computer/tech isn't politics
 
@JourneymanGeek Oh, and his email client is emacs. Lovely.
 
9:02 AM
@Xander but of course
 
yup
I wonder if he got a new lemote
his old one was stolen
(and of course, its a system made by a company linked to the chinese government, hardly the paragons of freedom)
 
but, the bios is open source!
that makes everything better, right?
 
lol
Well, there's the novena.
fully open source, and made by a country that hasn't run over its citizens with tanks, except maybe by accident
 
@JourneymanGeek Interesting. The word "free" appears 36 times on that page. Much less than I expected.
 
.... now I am wondering if the saf has ever run over anyone with a tank by accident. CURSES
 
9:14 AM
@Xander well he is a saint in the church of emacs (and no I'm not making that up, I've seen him in his robes...)
 
@JourneymanGeek drives over person "Whoops, didn't see you there. If you can return to a state where you can consume anything I'll buy you a drink."
 
@RоryMcCune Ha ha ha.
Man, he hates "nonfree" JavaScript something fierce. And Netflix.
 
he basically thinks we need to be stuck in 70s hippie culture ;p
 
@JourneymanGeek You dirty immoral Microsoft-supporting unethical nonfree software user!
 
gee.I am on a fedora box now, sharing a keyboard with a windows 8 box.
 
9:24 AM
@JourneymanGeek Your keyboard has non-free firmware. YOU HATE HUMANITY!
 
actually, it almost certainly does
 
I think my wireless mouse might use non-free firmware as well
 
@Lucas It's okay attempt the exam before you're ready, just to have a taste of it, right? I'm planning to take the exam before I extend the lab time.
 
(I use an old-model blackwidow ultimate. The shiny one with blue leds and cherry blues)
 
 
2 hours later…
raz
11:41 AM
ping
 
pong
 
raz
What time is it where you're from?
 
its 13:46, just had lunch, still hungry
at your place?
 
raz
0746
It's early, not quite awake
 
coffee, morning tea, or an energy drink according to Lighty's unofficcial guidelines of IT-World
:P
3 police cars with sirens and lights stopped infront of our office complex and stormed in this morning
well, not more then 2 hours ago
 
raz
11:49 AM
That sounds exciting.
That would definitely wake me up
I should start a wake up service using that scenario.
 
there was a company in this complex with gets appointed by a judge in court of a person who has lots of debt, doesnt pay, and loans more and keeps spending, that helps them get out and supports them with info, and is given the "power" of what he can spend per day/week etc.
seems a person that was appointed to them flipped tables n shit and started a fight
now THATS something to wake up to
what was more exiting i poked an officer and got to sit in the lobby where they were woring and calming down the person that was so worked up, i want to grow in the IT towards the police force, so i was really interested x3
 
Pretty crazy that in 2014, @amazon is still buying bare-metal servers for their own datacenters. Haven't they heard of the cloud yet?
 
raz
Haven't people realized that they ARE the cloud?
And they would still need to buy servers to you know, replace other servers.
 
@raz It's a joke. Learn to recognize one.
 
raz
Yeah you'd think I'd have figured that one out.
It's morning
1
Q: Google Eclipse plugin manual telling to skip security warning. What are the risks?

Oleg MI'm trying to install GWT plugin for Eclipse. The Google manual says among other things Eclipse indeed shows that message during installation. The questions are: What exactly does that message mean? Is there a possibility for an attacker to substitute downloaded files to do evil things with ...

" maybe I should also ignore Firefox's message about "wrong SSL gmail certificate?""
:facepalm:
 
12:54 PM
@Adnan I think with every extend of lab time you get another exam voucher (I think)
 
@LucasKauffman True
 
@Adnan how far did you get?
 
@LucasKauffman Long story. Will tell you all about it later.
 
@TerryChia That guy's cool.
 
Free spam flag
-4
A: What, specifically, does the Windows Firewall do?

ds sad asd asdsadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasdsadssadadsadasds...

 
1:08 PM
@Adnan I was about to say that this is my favorite answer of the year so far.
 
raz
Mmm I like spam
I think that person's question should really be, "What specifically does a firewall do?"
 
@raz It was posted in 2012. Back then, English was still new.
2
 
raz
I always forget to look at dates.
 
jrg
1:42 PM
@Iszi Yeah, but nobody seemed to think it was a good idea.
 
> Type of malware that executes malwareliscious code
 
i studied from a dtch document and had NO IDEA how to translate it
shutup and let me fail horribly
 
@Lighty Make sure you have an idea before you edit a tag
Or, actually, create an unnecessary rag
 
yes mum D:
 
@Adnan What the fuck...
Also why did you capitalize the "t" in "Type"?
 
1:54 PM
@Simon i have no clue
 
2:27 PM
@Lighty > where malwareliscious code gets executed once the rojan is executed
how many rojans have you executed so far?
looks like one died on your keyboard :))
 
@TildalWave Is rojans a race and @Lighty a dictator of some small country no one heard of?
 
@TerryChia Yes, it's called Singapore.
 
@TildalWave I know. ;)
 
I approved it but @Lighty please edit for spelling, grammar and dare I say ... English. :P
 
2:29 PM
i hope i get a beer for providing laugable amterial for you guys
@TildalWave yes mum D:
 
@Lighty HOW CAN YOU MISSPELL SO MANY WORDS IN A SINGLE SENTENCE?
 
@Simon by not being native to enlish
which is a legit reason
 
@TildalWave Dude, why approve it?
 
:3
 
@Lighty geez no I'm not a mom, I wouldn't even know if kids need full fat or skimmed milk
 
2:30 PM
Have you not noticed that there isn't a single question with that tag?
 
@TildalWave kids need beer
duh
@TerryChia but alot of questions that should have that tag?
 
@Lighty I was raised in French and I learned English by myself so nope, it is not a legit reason.
 
@Lighty No.
 
@Simon my not-native english is better then most native english speakers (talking to you murica)
 
already covers it.
 
2:31 PM
@Lighty You can't truly believe that.
 
@Lighty This... is a joke right?
 
@Lighty I presume you're still single? Saying this because you're gonna be somewhat disappointed when you find out how it works :)
 
raz
Who's Murica?
 
@raz *'Murica
 
America
 
raz
2:33 PM
OH you're trying to make fun of Americans
And failing
 
we need to try?
 
hm
i have more laughable material for your enjoyment
 
No.
 
raz
haha
 
i wrote every single text on that site, all full of errors and IDGAF moments when proofreading
 
2:34 PM
@Lighty Congrats, you can put that on your resume.
 
@TerryChia It is.
 
Isn't he becoming more and more annoying everyday?
 
i'm doing my best <3
 
raz
The French are usually like that
 
there is a difference inbetween a Dutch person, and a French person
 
2:44 PM
@Adnan Yeah... the level of stupid in this room is increasing daily.
 
raz
haha
@Lighty well played
Sadly I've never been to the Dutch portions of the world.
 
gents, that went too far
 
@Lighty Have some time off for now. Please consider acting like someone who is older than 9
 
@TildalWave The fuck did he say?
 
I flagged it, by the way.
 
2:46 PM
Damn it, I missed it.
 
@Simon You are better off not knowing.
 
@TerryChia Alright, I'll trust your judgment.
 
@Simon Something about the Dutch being d**ks and the French being pu***es
 
@Adnan How nice of him.
 
@Simon He was just trying to be cool.
Ahh.. reminds me of my teen years
 
2:48 PM
@Adnan Pretty much, yeah.
What do you guys use to scan ports?
 
@Simon 95% nmap
 
@Simon nmap
 
@Simon people in other countries
 
Python if I need something more custom.
@TildalWave Heh.
 
If I want something quick to check if a port is available, then I use nc
 
2:49 PM
@TerryChia I just need to type in an IP and get the list of open ports so that should do, thanks boys.
I wanna test my iptables config on my VPS.
@TildalWave You donut.
 
Yeah definitely nmap.
 
raz
@TerryChia Do you do a lot of networking related programming with Python?
 
@raz A fair amount.
 
raz
Have you used Scapy at all?
 
Of course.
 
raz
2:54 PM
I'm looking at fuzzing using it, and I was wondering how robust it was as far as just sending raw data out.
I like that it can handle headers for me, but I do want to manipulate those headers.
 
@raz Shouldn't be a problem, it's pretty powerful.
But if it's fuzzing why not use something like Peach?
 
raz
I'm not the most experienced using Python
Linkage for Peach?
 
Take a moment and think about this: It's been only 13 minutes since @Lighty was suspended
The peace in the room makes it seem like it's been an hour
 
@Adnan Hah.
 
raz
2:58 PM
@TerryChia Ah not open source
 
Many of the best security tools aren't.
 
raz
True, I'm just antisocial
 
4 mins ago, by raz
True, I'm just antisocial
@raz What do you mean?
 
raz
@Adnan I have to go and send them an email, and communicate. Probably send them money...
Just a whole ordeal
 
@raz You have to send money to non-open-source application developers?
 
3:06 PM
@raz Peach has a community edition.
 
Also, how is communicating and sending emails an antisocial behaviour?
@raz I'm really very interested in the thought process behind saying that
 
@Adnan I think he means he's antisocial because he doesn't want to do that.
 
raz
@TerryChia Oh, they don't advertise a community edition on their web page.
@Adnan Terry's right
 
@raz It's hidden somewhere.
 
raz
Oh a puzzle!
 
3:08 PM
@raz Isn't that just socially awkward?
 
It works well enough but the paid edition comes with some useful templates.
 
I mean, after all, he's socializing in this room
Or, better, lazy
 
@Adnan I never said the term was correct, just that that's probably what he meant.
 
@TerryChia Yup, I should change that ping
 
raz
A lot of literal people in this room.
 
3:10 PM
@raz Not at all, you may use whatever word you feel like using to express yourself
I'm just interested in why you said it
@raz Also, by saying "A lot of literal people in this room.", I can see that you are indeed socially awkward
 
raz
@Adrian not wanting to have to go through the hoops of communicating and paying for a product. And the irony of being in a social room.
 
so I guess now I see what you meant
@raz Lovely. Thanks for the explanation
 
raz
@Adrian Any time!
@TerryChia Found the community edition! I'll give it a shot and see how I like it.
Thanks for the suggestion
 
anyone else experiencing slow loading of SE pages?
 
@TildalWave Not me
 
raz
3:17 PM
It was whacky for me earlier. Not updating upvotes on comments right away.
wacky*
 
hmm for some reason my traffic is routed through 10 hops off .atlas.cogentco.com servers
which are in Washington DC
Hey NSA, how's it hanging?
 
raz
Mine are too, but then again I live in DC soooooo makes sense
 
it's pretty odd to say the least, I've never before noticed these hops and from what I understand SE doesn't host anything in Washington DC either, I thought they're either in NY or Oregon, and most likely now NY alone, assuming they're done fiddling with those servers in Oregon that caused so many problems for them
Also, why would the traffic bounce so much on a single server farm that's nowhere close to source or destination?
 
raz
Yeah that's odd, at least 8 hops within atlas.cogentco.com
 
@jrg Oh, it's a fine idea. We just need proper documentation (e.g.: screenshots, etc.)
I'm sure there's plenty of orgs out there with deprecated versions of Ubuntu still running. I know some that are still using Windows 3.1x or 2000 for certain applications.
 
raz
3:32 PM
@Iszi Scary but true
 
@TildalWave weird
 
Almost definitely not exploitable but interesting nonetheless.
 
raz
@TerryChia Interesting, so possibly prone to injection?
If you noticed the patterns
 
http://stackoverflow.com / http://stackexchange.com and our other sites are having ISP issues. Returning soon.
 
raz
3:48 PM
Well that makes sense
 
I wonder if they murder their ISP when that happens.
 
Anybody knows where I can grab vulnerable binaries? (especially buffer overflowable over network)
 
@TerryChia Any idea how long it takes ~ to scan all ports?
@Adnan You might know this too.
 
@Simon Varies a lot.. A LOT. Usually, to scan all the TCP range on one host it takes me about 40 minutes on our network
 
@Adnan Damn ok, thanks.
So, scanning 1 to 65xxx should take a while.
 
3:58 PM
@Simon Add 20 more minutes if you're scanning for UDP as well
 
@Adnan Interesting. Thanks.
 
@Simon Are you scanning within your network?
 
@RoryAlsop ah cheers yup that explains it
 
@Adnan No, outside. That's gonna take longer, right?
 
@Simon Yup
@Simon Make sure you don't cause a fuss with your source ISP or your destination ISP
They usually flag such traffic might take some actions against the source
 
4:03 PM
@Adnan Oh. Well, I'm scanning the network at work with my VPS so it won't be hard to explain. Good to know though.
 
@Simon then you're scanning locally and only issuing the command remotely no?
 
@TildalWave Isn't it a better idea to do the scan outside of the network to pick up everything?
 
it would be quite peculiar if your ISP complained about it considering they shouldn't have a clue about it
 
@TildalWave Nope. Looks like the source of his nmap scan is outside the network of his target
 
@Adnan You're right.
 
4:10 PM
@Adnan yeah just figured that out, I guess I was reading it wrong my bad
 
If there's no benefit in doing it outside, then I will do it locally.
 
@Simon By doing it locally (inside the network, but from a different host), you'll be checking that particular machine
 
@Simon There's no point in running nmap against localhost. At that point just use netstat.
 
@TerryChia He means locally, in the network
 
@TerryChia Yeah that's what I thought.
 
4:11 PM
@Adnan I'm not sure how he's gonna accomplish that considering he's talking about scanning a DO VPS.
 
However, if you do it from outside the network, then you'll be facing that network's firewall
 
@TerryChia Well actually now, I'm scanning work's IP from my VPS.
I did want to do that earlier though.
 
@Simon Grrr you confused me.
 
@Adnan Yes that's the point, I wanna see what the firewall lets through.
 
well you could do it on a host that's not behind the firewall but still physically local, that would improve your scan time and still be equal to doing it from a remote location
 
4:12 PM
@Simon Your VPS is outside your work network (it's yours, probably in a different country) right?
 
@Adnan Yes.
 
@Simon and you want to test a particular machine or the machine + the network's firewall?
 
yup that's what I didn't consider, I thought you have VPS setup on your work network
 
@Adnan The firewall.
 
@TildalWave Not true. Firewalls will affect what nmap sees from an external network vs internal.
 
4:13 PM
@Simon Yeah, you have to do it from outside then
 
It really depends on what you are trying to find out.
 
@Adnan Ok good, glad I understood how this thing works then.
Thanks for your help guys.
 
@TerryChia how so? I meant if the nmap host is actually outside of the firewalled network
 
@TildalWave Oh, not behind the firewall. Misread.
 
yeah, between the router and the firewall assuming they're separate in the first place
 
4:15 PM
Again it still comes down to what you want to find out. Routers can affect nmap results as well. They can do screwy things with NAT.
 
@TerryChia Basically, I just wanna see what is opened to the outside world.
 
that's true, but you can only get false positives, I don't see how you could get false negatives
 
@Simon Then scan it from the outside. :)
 
:D
 
4:33 PM
@Simon If you have inside access to the network, just quickly run netstat and then check the firewall rules that cover the host in which you're interested.
 
@Adnan Hum ya that's pretty interesting too.
 
raz
5:18 PM
So I'm not very good with the maths and the proofs. I'm more an engineering type guy.
Anyone know the relevance of this link: crypto.stackexchange.com/questions/14875/…
With respect to these comments: security.stackexchange.com/questions/68822/…
 
@raz I can confirm that 1+1 does equal to 2.
 
raz
No way
I've seen proof that 1 != 2
 
12 minutes. Worth it.
 
raz
Saving it for after work
 
5:39 PM
@Adnan So far, the interviewer is actually nice. When the guy's answer is vague, he asks more questions about the very same subject to get more information.
 
@Simon Looks like you haven't passed 05:00 yet
 
@Adnan True.
 
raz
damn I want to see this now
 
@raz You don't have to watch it, you just need to listen to it.
So, quite easy to listen to this while working.
 
raz
If my headphones weren't left at home today sigh
 
5:48 PM
@raz That happened to me once, it was the worst day of my life.
 
I'm thinking about getting some bone transducer headphones.
 
raz
Are you hearing impaired?
 
I need an ISO of Windows XP Professional SP1 or SP2
Helpsies?
 
raz
No can dosies
Could always go torrenting
 
00:00 - 18:0018:00 - 00:00

« first day (1386 days earlier)      last day (3508 days later) »