« first day (1467 days earlier)      last day (3418 days later) » 

raz
3:00 PM
Did the file system matter at all?
 
@raz just don't reset the bios, whatever you do. I did and I still am trying to clean that up
 
My lady donut solved the issue in a classy way: sold the laptop, bought a Macbook.
 
@raz go for something in the FAT family
 
@raz I have seen recommendations for NTFS, but that might just be a Windows uefi thing.
 
raz
@Ohnana Alright, I think I tried NTFS.. I'll give that a shot.
@DavidFreitag Yeah I saw those too. But I was getting pretty frustrated this weekend.
 
3:01 PM
@Simon By creating another issue?
 
@raz fat is computer comfort food. as long as your live distro doesn't have monster 4gb files it should be good
 
@DavidFreitag Never had an issue even since she got it.
Nor did I.
 
raz
@Ohnana Haha, awesome
 
@Ohnana Which is funny because fat is also comfort food for humans, who knew.
 
raz
@Simon I just don't like Mac's. They work great. Just don't like hte interface.
 
3:02 PM
You know, that must mean we're all really robots in disguise.
 
@raz Oh really? I got used to the UI quite quickly.
 
macs are good facebook machines. I learned to hate them when I had to administer them, and I learned to have the rage of 5000 suns when I had to do forensics on them
 
raz
@Simon I can use it, I just don't like it.
 
@raz I see, fair enough.
 
raz
3:03 PM
@Simon I just prefer Linux. Gonna teach my girl how to use it. And say good bye to Windows forever.
 
@Ohnana They are great machines for development too.
 
I would rather spend an entire month with my extended family and no technology.
 
Line Application doesn't have good reviews on it's encryption
 
raz
Cool
 
@raz Yeah that was the plan by dual-booting her on Ubuntu but Mac is just as fine.
 
3:04 PM
@simon end user stuff is fine with me. A little weird but it's unixy enough. Just don't ask me to do anything above using it
 
Had anyone stepped on any such review
 
raz
@user1794499 What is Line?
 
I need to know what type of encryption does it implement for the user messages
Line Messaging Application
 
@user1794499 that looks awful. I'd be surprised if it did
 
Well, Telegram does mention that on their website
 
3:05 PM
@Ohnana It's a matter of willingness too. If you hate it, you won't be motivated to go deeper into it.
 
That's another application
 
That last line, w0w.
 
@user1794499 that's a question for the developers, though. contact them, and if they don't respond, then you can packet capture it's traffic and look at it
 
raz
@user1794499 Line doesn't have the word "secure" on the website. I'd doubt they use anything.
 
@user1794499 You should get pretty good impression of how they prioritize security by just glimpsing through their official pages. If there's no mention of it, then they likely didn't even consider it.
 
3:06 PM
@raz Very good point.
 
they have some more info... here developers.linecorp.com/blog/?p=2709
 
A secure implementation is also a selling point. If they had it, they'd use it to advertize their product too.
 
On their blog They mentioned it's encrypted using one of the algorithm recommended by jap. gov.
 
lulz jap gov
 
@user1794499 did they mention which year the recommendation was made?
 
raz
3:08 PM
@Noordung 2013
 
@raz link pls
 
raz
@Noordung It's in @RoryMcCune's last post.
 
@Noordung the paper sheet is in Japanese but from the URL it seems 2013
 
raz
There's a link to a japanese 2013 pdf security doc.
 
3:10 PM
kk who speaks japanese
 
raz
You could probably decompile the bytecode pretty easily and find out.
 
@user1794499 thanks!
 
So far I found from wireshark it uses SSL
 
machine translated version translate.google.com/…
 
But I still need to know the alog.
@Noordung Thanks buddy
 
raz
3:11 PM
@user1794499 That only means the channel to get it to their servers is encrypted. Doesn't mean the messages are.
 
algorithm
 
raz
@Noordung Google is a beautiful thing.
 
@raz indeed
Because SSL implements various encryption algorithms,isnt?
But which one?
@raz Do you mean they send it in encrypted channel as plain txts?
VPN alike
 
@user1794499 your best bet would likely be to set up an HTTP proxy to look at the application traffic without SSL getting in the way. There are various guides to doing this online, e.g. intrepidusgroup.com/insight/2012/07/…
 
@RоryMcCune You're a guide.
 
3:17 PM
@Simon thanks :)
 
@RоryMcCune So in this case all the work would be at the mobile phone..and no need for wireshark?
 
@Simon A sort of guide for an adventurer to some sort of incomprehensibly immense celestial body of some kind one might say.
 
@RоryMcCune Thanks alot by the way
 
@user1794499 you'll need a computer running win/mac/linux for running burp on...
 
@DavidFreitag Interpretation is not my responsibility.
 
3:19 PM
@RоryMcCune I see...
BTW does my phone needs to be rooted?
This is great for me to learn thanks anyway
 
@user1794499 you should be able to setup a proxy without root, just go into your networking settings.
21
Q: How to change proxy settings in Android (especially in Chrome)

Maksim AlekseychikCould you please help me: is it possible to set proxy settings in Android (especially in Chrome)? I have to change IP on Android during the testing. Or there is some soft which can help me to solve this issue...

 
@user1794499 I've not explictly tried this set-up but I don't think so, you just need to have a proxy set-up and install the cert for the proxy tool (that guide or another like it should spell it out...)
 
raz
@user1794499 Once the message reaches their servers its not protected by SSL anymore.
If they don't use encryption, then it's in plaintext on their servers
 
But the thing is that-for now-I'm doing this for crypto class I need to explain about thier encryption..and if it's encrypted I don't have to decrypt it..But I'd love to do that later on..heheh
 
@user1794499 I should hope you don't have to decrypt it... then again if you succeeded you'd be famous until computers stop existing
 
raz
3:24 PM
I would download the APK, and decompile their bytecode. That might be illegal depending on their eula
 
@raz in that case you only can read the msg if you hack the server....but you can't read it if it's transiting (client--> server, server --> client?
 
raz
@user1794499 correct
 
@user1794499 Please refrain from using the term "hack".
We'll appreciate it.
 
It would be really neat if their "encryption" was just rot13.
 
Also, you didn't refer to the servers as "the cloud" so that's a good thing.
 
3:25 PM
@Simon the butt?
 
@DavidFreitag rot26. twice as secure hurrhurrhurr
 
@Ohnana Ah damn it, I was gonna say that.
THIEF!
 
raz
@DavidFreitag "No one will suspect it!"
 
@Ohnana hahahah...I know I wont be able to do it...at lease not before computers vanish
 
@DavidFreitag da wat
 
3:26 PM
@simon type faster n00b
 
@Ohnana You donut.
 
@Simon I have a chrome extension that replaces the word 'cloud' with the word butt.
 
@DavidFreitag That is amazing.
 
@Ohnana Heh, i was halfway there :]
 
3:27 PM
60k users? Legit.
 
/ninja
 
@Simon okay, sure :)
So. it seems no hope to find their encryption algorithm....I mean no reviews or discussions ?..and I don't papers would do that
 
@user1794499 With the proxy setup you can collect the data, but you will only really be able to tell whether it is encrypted or not by doing that. If you want to get a better idea of what algorithm they might be using I would suggest doing as @raz said earlier and decompile their APK.
 
@user1794499 send the devs a nice email
they'd probably love the opportunity to gush about their cool product
 
@Ohnana That assumes they would respond with the truth.
 
3:34 PM
@Ohnana You're a cool product.
 
@simon correct
 
@Simon I don't think these insults are working for you
3
 
@Simon Your mom... is a really nice person.
 
@RoryAlsop I think my Canadian antidote is not working right this morning.
@DavidFreitag Aw, thanks!
 
@Simon What's that, maple whiskey?
 
3:36 PM
@Simon MC Canadian Stereotype
@DavidFreitag is that a thing?
 
@DavidFreitag That sounds good.
 
@DavidFreitag for some reason, this is even scarier than the usual your mom jokes
 
@RoryAlsop A very delicious thing
 
@RoryAlsop The best MC.
 
3:36 PM
@Noordung That's because it's an anti-joke.
 
@RоryMcCune do you own that badge? That's awesome
 
@DavidFreitag I saw the wiresharks packets using SSL, doesn't that mean it's encrypted ?
 
or at least really funny
 
raz
@DavidFreitag @user1794499 Just remember that a reverse engineering clause is generally provided in eulas.
 
@RoryAlsop I don't, just saw it, but now I want one!
 
3:37 PM
@user1794499 I would assume so.
 
@RоryMcCune Is that a non-capitalized I?!
 
@raz Oh come on, what's the worst that could happen.
 
@Noordung well the rest of the badge is lower-case so yeah looks like it to me..
 
Okay... @RoryAlsop @raz @Ohnana @DavidFreitag and others thanks a lot
 
@DavidFreitag A company with no funds tries to sue you.
 
raz
3:39 PM
@user1794499 It means the channel used by Line is encrypted. It doesn't mean that the message itself is encrypted.
@DavidFreitag BlackOps come to your house and you're never seen again. But that's the absolute worst case
 
@raz you mean the SSL packets at wireshark capture?
 
raz
@user1794499 Yes
 
@raz Perhaps I was never even seen in the first place.
 
@raz I see
 
@user1794499 you probably meant UTF Rory... :-)
 
raz
3:41 PM
@user1794499 SSL protects data in transit. But if the data itself is not encrypted, then when it gets to its destination. It is no longer protected.
 
@DavidFreitag Oh nononono, say no to the morning emoing.
 
raz
@DavidFreitag spooky music
 
@ sorry whats UTF?
 
raz
@user1794499 Ultimate Thai Fighting.
 
@Simon I live at the bottom of the ocean, we don't get many visitors.
 
3:42 PM
@DavidFreitag Oh yeah, Spongedavid Square Donut, forgot about that.
 
@RoryAlsop hahaha...maybe
@RoryAlsop MMA..works to?
too*
 
@Simon The pressure alone is enough to make your eyeballs shrivel, It deters most people I think.
 
@DavidFreitag But not a sponge.
 
@user1794499 note how if you start typing Rory, mine is the only name that will autocomplete. Not t'other Rory ;-)
 
@raz So SSL doesn't implement encryption over the data?
@RoryAlsop loool
 
raz
3:45 PM
@user1794499 It only protects it from Point A to Point B. When Point B has the data it is in whatever form it was originally sent. If that form is unencrypted, then that's what it will be.
 
@raz okay....Got it now
@raz so the app. perhaps encrypt it first using whatever algorithm then send it in SSL,maybe
 
raz
@user1794499 Exactly, one would hope.
Otherwise, all your message belong to Line
 
@raz thanks buddy
appreciate it
 
raz
@user1794499 No problem :)
 
@user1794499 good luck in class!
 
3:49 PM
I was working on telegram but I only captured the ACK, and TCP reassembled PDU packets...But the msg packets are missing
@Ohnana oh thanks man ;)
@raz Coz telegram claims to use HTTP,TCP to send the encrypted msgs....But I see many SSL ones!!!
HTTP, post
 
4:04 PM
@RoryAlsop @RоryMcCune and anyone else at high northern latitudes, it's auroras alert tonight on top of being the Ursids meteor shower peak and a New Moon, so if you'll have the weather for it it should be pretty much the best conditions you'll get
 
@Noordung You're the best.
 
@Noordung yep - hoping it clears a little. Folks up north had good aurora viewing last night
 
@Noordung nice! will keep my eyes open, though is pretty cloudy here now we may well get a break later....
@Simon is this a spirit of christmas niceness, you're in at the moment
 
@Simon looks like you should have clear skies by night in Canada
now checking for Scotland
for some reason this one loads really slowly for me weather.gov/satellite
 
@RоryMcCune I don't know man, I really don't know.
 
4:07 PM
@Simon ah well nothing wrong with being nice :)
 
@RоryMcCune It doesn't feel right.
 
raz
@RоryMcCune Simon feels dirty being nice.
 
@RоryMcCune I'm in the city and last night it was fantastic, all clear in the night till horizon and I could even make out the Milky Way ... in a city I don't think I ever did before. It also gets pretty cold in the night now so even if there are clouds they might settle by then
it's pretty windy up there
 
@Noordung yeah that'd be my main hope is that the wind blows the cloud away for a little bit :)
 
I think we all should take a moment to thank @ColinCassidy for always joining the chat and never saying a single word.
Thank you @ColinCassidy!
 
4:12 PM
although the wind is passing slightly to the south of us at the moment
@Simon just 'cause he's too classy to talk to the likes of you :op
 
@simon you sound like a deranged markov chain
5
 
wtf kind of star is that?
 
@Ohnana pinned star :)
 
@Noordung Oh.
He just really doesn't want to say a word when I'm here then.
 
4:14 PM
@RоryMcCune \o/
 
Maybe he should be my new dad.
 
@Simon gee I wonder why that'd be :))
when I first came here all I had to be careful is that someone would want to stuff my bottom with a proverbial pineapple ... then the TWSS came ... and now the "you're the [whatever you said]"
 
@Noordung I take no responsibility for the latter.
So I'm dancing at work, again. I'm gonna get caught, again.
 
I thought that dancing on Michael Jackson songs is a federal offense in Canada
 
4:19 PM
Hey there, it was a Wasted Penguinz song /cc: @DavidFreitag
 
@Simon Eh?
 
hey @RoryAlsop - you hear of Tidal HiFi yet?
 
@DavidFreitag Eh.
 
@Simon Eh, eh?
 
all I can say is "ABOUT FREAKING TIME!!!!"
 
4:19 PM
@DavidFreitag Hehehehehe
@AJHenderson Please stop yelling, there are people working here.
 
@Simon Seriously though, what are you talking about?
 
@Simon but lossless music is worth shouting about
 
@AJHenderson hey they misspelled my other nickname! tidalhifi.com
 
@DavidFreitag I said that I was dancing to a Wasted Penguinz song.
 
but they got the country right LOL
 
raz
4:21 PM
@AJHenderson That sounds awesome
 
@Simon Oh, I missed that part.
 
@raz very much yes
 
raz
@AJHenderson Let me sign up and see what it's all about
 
I'm someone who actually can accurately identify 320kbps vs 128kbps, and lossless is even easier to tell, so I'm pretty stoked right now
the library isn't as good as Google Play unfortunately, but I may just keep both services
 
4:23 PM
@DavidFreitag 'MERICA
 
@Simon Got photobombed by the mailman :[
 
I'm quickly discovering that it appears my wireless connection in my office may not be up to the task though. Damn thick walls
 
@DavidFreitag It looks pretty damn cool anyway.
 
@Simon Took that with my oneplus one.
 
@DavidFreitag Legit as hell.
 
4:24 PM
in The Pod Bay, 25 mins ago, by Noordung
Slooh will host Ursids live starting in 9 hours http://live.slooh.com/stadium/live/watch-and-listen-to-the-2014-ursid-meteor-sho‌​wer-live-on-slooh
 
@DavidFreitag that's a US postal truck in the background!
#MURICA
 
as a backup ;)
they'd usually also have some interesting guests
 
@Simon It's a shame I was too lazy to get out of my car, the smudges from the snow on my windshield are really bothering me now :/
 
raz
@AJHenderson So it doesn't seem to keep your login session between webpages... that's frustrating.
 
@raz don't know, I have just been using the mobile app
 
4:25 PM
@DavidFreitag Yeah I noticed them after a little while too =\
 
raz
@AJHenderson I've had to "login" 3 times now.
 
ouch
@DavidFreitag I was going to say, I noticed that before the mail truck
but then again, I do pro photography, so that doesn't neccessarily mean most people will notice it right away
my eyes are just very rapidly drawn to any areas lacking in detail
 
@DavidFreitag ack, now I want to tilt my monitor
which part of the country is that?
 
@AJHenderson Connecticut
 
4:29 PM
ok, was going to say it looked kind of North Easty
 
Almost as north easty as one can get, on this continent anyway.
 
I'm in upstate NY
 
Slightly more north easty
 
@DavidFreitag cool photo
 
@Noordung You're cool.
 
4:31 PM
:)
 
19 mins ago, by Ohnana
@simon you sound like a deranged markov chain
 
@Ohnana You're a Simon.
OOOOOOOOOOOOOOOOHHHHHHH SICK BURN
 
okay that one was actually a little hurtfu
hurtful*
 
:D
Are you donuts on Holiday yet?
 
4:36 PM
nah I'm working up to the eve
 
dayum
I decided to do today and tomorrow then I'm out until the 4th.
 
my choice. I get a huge break so I'd like to collect one last paycheck (dat tuition payment)
 
I think my Christmas activity will be to learn the libGDX library but then when I look at all the god damn parties I have I know that I won't have time to learn a thing.
 
lol I have a ginat block of time to myself
I'm going to chew on the SANS holiday challenge
 
I work until tomorrow. Then On xmas eve i get the remaining parts for my new NAS
 
4:42 PM
@Ohnana As long as you don't feel lonely that's kewl.
@DavidFreitag Oh man, you'll be drowning in pink with that NAS now.
 
@AJHenderson As you say - about time. I haven't really bothered with things like Spotify as the sound quality annoys me so much so this may well work. Google Play doesn't work effectively for me either, so I don't have many options if I want music when mobile.
 
@Simon How did you know I ordered a pink case for it?
 
Obviously sat at home I just run from my empeg at FLAC or top quality MP3
 
@DavidFreitag o
 
@Simon Even Krispy Kreme spells it Doughnuts!
 
4:43 PM
I'm jelly though, I'd like to have to NAS at home.
@RoryAlsop Then they're just a bunch of donuts.
 
@DavidFreitag looks like a guitar amp
 
6TB of storage with a 64GB SSD cache and a dual gigabit NIC for all of the bandwidths.
@Ohnana It's very small but still supports an ATX power supply.
 
@DavidFreitag How much did it cost total?
 
4:49 PM
Not too bad.
 
With a few parts on my xmas list.
 
I'll probably buy a similar setup when I'll buy my house.
To setup backups.
 
I plan to use that and netflix instead of broadcast television when I get my apartment
plus a nice beastmode AC router I'm getting for christmas.
 
Projects seem to grow bigger as your living space gets bigger.
It gets expensive.
 
4:53 PM
ô_ô
 
@Simon I originally intended on using my Raspberry Pi, but I decided it wasn't up to the task.
 
Pretty damn cheap.
I wanna buy a Pi now.
 
@Simon Well, it is a SoC board. I wouldn't expect much out of it.
It will work perfect with Freenas, which of course boots from USB.
 
@RoryAlsop the mobile client seems a bit glitchy (it's failing to advance tracks for me automatically) but still the quality is so much better I don't particularly care
either way, even if I didn't use it, I'm pretty sure I'd keep a sub up just to tell people "more like this PLEASE!!!"
even at twice the cost of most
 
@DavidFreitag It still looks like it would do the job for a simple setup.
I should buy an SSD for my Macbook.
 
4:56 PM
@Simon It's perfect for a media server. Anything more would just be overkill for ~3 simultaneous users
 
Yeah, my media server has an Intel dual-core and it does the job perfectly.
This thing lulz
 
@AJHenderson Twice the cost? I pay $8 for All Access.
 
^ this
 
Plus the brutality towards my wireless data? No thank you.
 
@DavidFreitag hmm, it was $10 for me :(
and I still have my unlimited data, though it also supports downloading offline
so you can download on wifi and listen whenever without using data
the big thing is just that it is a lossless subscription, which hasn't previously existed
honestly, they could be charging $30 for lossless sub and I'd pay it if it had the full catalog that Play has
 
5:07 PM
/me -> home
Tomorrow, I'm literally drivin' home for xmas
 
@Tinned_Tuna that's nothing, Wed I'm buying a home for Christmas
 
so I'll allow the IQ level of the room to raise while I'm away :-p
 
@Tinned_Tuna As far as I know, I won't be away.
 
5:23 PM
@AJHenderson Ah - £20 a month - not a chance. I'd rather keep buying my music and storing it locally. More money for the artist, cheaper for me.
 
@RoryAlsop yeah, it's a bit expensive in Europe
it's only $20 here
I go through music too fast to have buying be practical
but I absolutely refuse to pirate
 
@AJHenderson same here
 
I just like actually being able to hear a little bit more of what my headphones are capable of
even if it still isn't as clean as a live sound on the headphones
it's a lot closer though
 
5:43 PM
@raz [updates] I changed the wifi I'm using and now I captured the msgs packets for telegram msgs that's the [post,http] ones
 
@AJHenderson I'm grandfathered :]
 
@JimB risk management and risk calculation is based on impact and likelihood after analysis of the situation. While calculating likelihood may be subjective, it requires significant justification on why a certain likelihood is chosen. It is a different type of subjectiveness and opinion based assessment as it still requires a certain level of proof and description. This question does not allow for such an assessment. Anyway, if you disagree feel free to take it to meta.securitystackexchange.com :) — Lucas Kauffman 1 min ago
Inb4 he will start a discussion in the topic. The guy was notorious on serverfault.
 
@LucasKauffman He has 1k answers and his highest upvoted is 15.
Wow.
 
zep
yep
 
Yeah, but isn't SF notoriously low rep?
 
5:57 PM
@DavidFreitag Well, take my ex-ex-dad for example: serverfault.com/users/3356/scott-pack
His account is looking all good.
 
Speaking of, I haven't seen @ScottPack in forever. I wonder where he's been.
 
@DavidFreitag hmm, I wonder if I'm actually paying $10 now that I think about it. I should probably double check sometime. I was a very early adopter of Google Play
 
6:21 PM
 
raz
@user1794499 Find anything out?
 
@LucasKauffman lovely!
 
Oh man I love me some reflection magic.
 
@LucasKauffman Awesome!
 
@raz Now I got what I wanted....I got the data packets...I know it's encrypted according to the telegram website explanation
I don't have to bother decrypting them
 
6:32 PM
@user1794499 You can't believe everything you read on the internet. You should try running some analysis.
 
@DavidFreitag Yess, to prove it, Telegram doesn't mention the usage of SSL, yet I found many SSL packets in the communication between the device and their server
 
@user1794499 The actual sending of the messages may not be the only traffic.
 
I don't have time to do much work...too much pressure and too many works to do in short time
@DavidFreitag I didn't get it, sorry
 
@user1794499 What I mean is, they may not be using SSL to transmit the messages, perhaps they are doing other communications.
 
raz
@user1794499 Did you turn off wireless security completely?
 
6:37 PM
@user1794499 Did you turn it off and on again?
 
@DavidFreitag maybe I don't know what for these packets are. I see their info. as continuation data!!
@raz I don't understand what u mean, sorry?
 
6:59 PM
99% of my python errors are from indentation. so much rage
 

« first day (1467 days earlier)      last day (3418 days later) »