The DMZ

12:03 AM

Apparently this is a thing, and somehow I didn't know. google.com/…

1:03 AM

@ton.yeung Do you have a printable version of this? And is there a "Microsoft Certification Explained" too?

@ton.yeung cool, I found an original which - funny enough - is about Afghanistan stability LOL 4.bp.blogspot.com/_Bws0l1_V-ok/TB6sE1N8AwI/AAAAAAAAAGQ/…

ah it's already on the one you posted

I should really learn to read one of these days :)

Scott Pack

2:34 AM

@Gilles I actually forgot about it.

@Gilles I should have, though. My undershirts are starting to fade, I could use another.

tylerl

4:13 AM

What's the opposite of a round number?

Werezwolf

5:16 AM

@tylerl A Decimal ?

Iszi

8:56 AM

Anyone hear of an RCE PoC for MS14-066 yet? Seems like that's been a bit quiet for awhile.

AviD

9:07 AM

So's your mom.

So, is it just me, or is anyone else reading this as trying to make a (broken) one-time pad?

1

Q: How strong is a simple XOR encryption with random IV?

I'd like to implement some kind of simple (yet as strong as possible) encryption for my client-server application network traffic. Data to be encrypted can be both textual, and binary. Now I'm thinking about using just a trivial XOR encryption, but with following features: Key will be random (...

Rоry McCune

@Iszi I've been keeping my eyes open, so far nothing I've seen on public channels

AviD

irrelevant of the XOR of course.

Rоry McCune

@AviD isn't all home made crypto doomed to become broken one time pad equivalents..?

AviD

heh. well....

it seemed to me that he was trying focus on the benefit of a random key for each session, which (he thinks) would allow him to suffice with XOR.

mebbe I'm wrong...

Rоry McCune

@AviD ahh crypto it's all greek to me :)

AviD

9:15 AM

@RоryMcCune would greek be a strong cipher?

Rоry McCune

@AviD well if you don't speak greek it could be!

AviD

hmm actually something similar has been done

Navajo "wind talkers"....

Arperum

As far as I can tell, Navajo doesn't have a common word for 'zero'. do-neh-lini means 'neutral'.

AviD

@Arperum yes, thank you for stating the obvious reference.

linking.

Arperum

@AviD I felt like it was needed.

AviD

9:20 AM

though that looks pretty vulnerable to cryptanalysis, even for those that dont understand navajo.

AviD

9:50 AM

1

Q: Company decrypting SSL, is it common?

We've just implemented a proxy that decrypts all SSL traffic in order to classify and scan it. Naturally a lot of our users feel concerned. We're a small company (100 users) owned by a big company (5000 users). What we hear internally is that "other companies doesn't do this". I think that this i...

ssl integrity decryption

I am trying to restrain myself from answering: "Yes, this is very common - but only in companies that consider their employees as the enemy."

Rоry McCune

@AviD so most of them then :op

Barry Carlyon

10:07 AM

Morning all o/

AviD

@RоryMcCune hmm, maybe thats why its so hard to find a company worth working for.

Doesnt make it okay, though.

Good noon, @Barry!

Lighty

10:30 AM

'g mornin'

Rоry McCune

10:42 AM

mornin'

How I set up @djangoproject + @angularjs + @ProtractorTest + @docker + @circleci + @AWSOpsWorks https://github.com/onetouchapps/django-angular-docker-circleci-opsworks

Tweeted by mcbhenwood on November 25, 2014 at 10:34 AM

^hows that for buzzword soup!

AviD

hmm something is missing....

its a very thin server side stack

needs more node.js + express.js + connect.js + sails.js + js.js

Rоry McCune

@AviD and angular.js is a bit old-school, shouldn't it be react.js these days

AviD

heh

seriously, I know our industry is screwed up in so many ways they had to invent a new number for it, but how does nobody notice how bad javascript sucks?

Rоry McCune

@AviD yeah I don't get it. A bad language introduced as a hack becomes the most used on the planet

AviD

nevermind who had the brilliant idea to build these big stacks on a sucky basis like javascript - who was the bigger idiot that heard that idea and responded with "HELL YEAH!" ??

Rоry McCune

10:51 AM

@AviD people who already knew Javascript so thought "well if I'm writing it client-side, lets do it server-side too!"

Barry Carlyon

^^

Rоry McCune

@AviD BTW did you see that Microsoft are moving IE development questions to Stackoverflow

AviD

@RоryMcCune that excuse is almost as sucky as javascript itself

Rоry McCune

@AviD i agree

AviD

back in the bad old ASP days, we would purposely use JS on the client (it was all-IE) and VBScript on the server - JUST TO KEEP THEM SEPARATE

@RоryMcCune heh, heard a twert about that

didnt realize it was official

Rоry McCune

10:53 AM

@AviD social.msdn.microsoft.com/Forums/ie/en-US/…

AviD

@RоryMcCune losing the context of server vs. client is the root of SO MANY BUGS

Rоry McCune

@AviD and from what I've seen of it JavaScript debugging is a nightmare

AviD

nah, my nightmares are not usually that bad

Rоry McCune

@AviD yeah it's like an "eaten lots of cheese and watched a horror film" nightmare

AviD

ha

Terry Chia

11:18 AM

@AviD Because most JavaScript "programmers" aren't actually programmers?

AviD

sure, that part is nothing new. The part that really appalls me though, is that legitimate programmers - and programmer organizations - are actually on board with it.

is it just a question of "if you can't kill em, might as well join them and make money off them" ?

even I am not quite that cynical yet.

Terry Chia

Worse is better. <- Everything wrong with our industry in a single catchphrase.

AviD

@TerryChia what?

Terry Chia

@AviD You don't know the startup motto?

AviD

thats the startup motto?

that explains the fascination with OSX.

Terry Chia

11:22 AM

Ship stuff constantly. Don't care about quality. Just ship it anyway.

A broken product sells better than no product etc.

AviD

sure, but that doesnt mean they prefer worse, just that they are willing to accept it (in order to ship quickly)

developing in javascript isnt just worse, its SO MUCH SLOWER

Terry Chia

@AviD No, developing in JS is drop dead easy if you don't go beyond the standard CRUD app.

AviD

didnt say anything about hard or easy, I said quick.

Rоry McCune

@AviD I take it your time as a card-carrying OSX hipster didn't endear you to it?

Terry Chia

Because of all the copy paste you can do.

AviD

11:25 AM

@RоryMcCune heh. actually I did see certain benefits, but its not my cup of tea.

I prefer coffee anyway.

@TerryChia that is not making sense.

Are you pulling an @Iszi? ;-)

Terry Chia

Well, developing a simple CRUD app in your JS FOTM is incredibly fast because that's what they are optimized for.

Anyway it's hard to explain properly with the effing phone interface.

AviD

no I understand what you're saying. But its still a load of crock, because every PROPER development framework has wizards / samples / components / whatever that let you do the same thing, better, in a fraction of the time.

Rory Alsop

morning all

AviD

gmorning

okay, I figured out why figuring out my taxes is so difficult for me. No flowchart.

Rоry McCune

@RoryAlsop Mornin'

AviD

11:39 AM

I am having trouble seeing the algorithm of what gets paid on what and when what gets deducted how.

maybe I need some tax software pseudocode to clarify this for me.

Rory Alsop

@AviD no. The real reason is accountants :-)

@RоryMcCune (No insult intended)

Rоry McCune

@RoryAlsop :op I haven't been an accountant in 19 years!

Rory Alsop

Tax bodies like tax to be complicated, that way if you make a mistake they can charge you for it, and if they make a mistake they just claim more money from you

@RоryMcCune and I am not an HR person... ;-P

Rоry McCune

@RoryAlsop you say that but aren't you doing performance reviews this week?

Terry Chia

@RоryMcCune used to be an accountant?

Rory Alsop

11:45 AM

Hey - one of the advantages of laryngitis - I got to cancel all my conf calls, and I'm actually getting work done

@RоryMcCune yes

...

Rоry McCune

@TerryChia I have a degree in accountancy and that was my first job, before I escaped into IT

Rory Alsop

PHB != HR

Terry Chia

@RoryAlsop You are the PHB of the HR department.

Rоry McCune

well yeah one of them's red

Rory Alsop

@TerryChia pffffft

AviD

11:47 AM

@RoryAlsop actually my accountant is a lifesaver.

Rory Alsop

If I was in charge of our HR department it would work

AviD

he must be sick of me asking the same damn questions at least a half dozen times.

Rory Alsop

@AviD Yeah - mine too. He actually understands it all and makes sure that for only a small amount of money each year I don't get fined by the HMRC

(Thanks to Rory[1] for introducing us)

Rоry McCune

@RoryAlsop yeah accountants are very good for that kind of thing, the paperwork I can handle ok, knowing what to do to avoid HMRC issues I would have no idea

Rory Alsop

@RоryMcCune I have trouble with even the paperwork, as accountant's English is not normal English

Rоry McCune

11:50 AM

@RoryAlsop well the tax mans definitely isn't to the point that once when me and the missus tried to do it without an accountant, we spent days trying to work something out, got it wrong still and got fined by the revenue!

heh someone just flagged an exclamation of "Java is the best language there is"

Rory Alsop

@RоryMcCune 'offensive'

Transcript for