The DMZ

AviD

7:55 AM

@ScottPack a bit late, but: THAT'S WHAT SHE SAID!!

@tylerl that's an excellent point, and a fair example.

although, of course, activex is not enabled by default for anonymous emails, since a long time.

also, what client side app would you say is a fair competitor to Outlook, anyway?

Terry Chia

@AviD Mutt. ;)

AviD

@TerryChia cmon, something real, that you didn't just make up.,

Terry Chia

@AviD I hope you are joking about the something real part right? :P

AviD

hehe, no. but now that you mention it, I wouldnt consider that "real" either, not to mention not a fair competitor to outlook....

Terry Chia

@AviD Heh, I was joking about it being a fair competitor to outlook. :P

AviD

8:08 AM

ah fair enough then.

hard to tell, with you folk.

Terry Chia

To be fair, Thunderbird has become pretty decent on Linux if you just need the email part without all the fancy MS integration.

William Lawn Stewart

Thunderbird has its own nice integrations that Outlook lacks

Outlook and Google Calendar don't play very well together, while on Thunderbird you can get editing and the works

Then again, people who use MS Exchange won't give a hoot about that anyway

AviD

@TerryChia see, that one I was expecting. But also as a joke.

@WilliamLawnStewart true, its mostly iffy there. but that is (for the most part) google's fault, for breaking the standard.

@WilliamLawnStewart that's untrue. while I dont use exchange directly, there are plenty who would use both.

Terry Chia

9:02 AM

I'm surprised this guy got almost 2k rep asking ridiculously stupid questions.

0

Q: How different should passwords be?

It seems to be generally accepted the same password should not be used for different sites or devices. How different should passwords be? For example +_^gum<JW1 and +_^gum<JW2 are very similar. Does it matter what the passwords are used for, for example having two e-mail accounts with similar pas...

passwords

ManishEarth

10:00 AM

Google Summer of Code 2014 :D

Terry Chia

@ManishEarth Nice!

Servo is an incredibly cool project.

ManishEarth

Yeah!

Terry Chia

I thought about applying but the timing wasn't right this year sadly. :(

ManishEarth

The concept of the COW DOM is awesome

@TerryChia why not?

Terry Chia

Maybe after my stint in the army is over.

ManishEarth

10:02 AM

You can shift the timing, you know

ah, army

For example I will start coding when May starts (instead of halfway through May) since my vacations don't coincide with the US vacations -- as long as the mentor is fine with it you can tweak it

Terry Chia

@ManishEarth Ah, I wasn't aware of that. That should be helpful when I apply in a few years.

ManishEarth

Apply next year!

Preferably in Mozilla -- get involved in the community starting now :)

Terry Chia

@ManishEarth Nah, my stint in the army will be for 1.5-2 years I think. :(

So probably the year after that.

And even if I do apply it will probably be something Python related. :P

ManishEarth

@TerryChia ah

@TerryChia Tons of Mozilla testing code in python

@TerryChia or do SymPy. My friend's project under SymPy got accepted with Ondřej Čertík as a mentor :D

Terry Chia

@ManishEarth I was initially going to apply to work on the cryptography library I am already contributing to. The nice thing about GSoC is that it doesn't exclude you if you are a prior contributor to the project.

ManishEarth

10:11 AM

@TerryChia yeah :)

I've been contributing to Firefox for a while, and one community member that I know (Ms2ger) heard that I was considering GSoC and told me to try out Servo -- I then tried participating there -- it's awesome :D

small community, but awesome

Terry Chia

Yeah, Mozilla has tons of projects after all.

One day, a boss will ask an employee to build an Animal based system and suddenly every OOP tutorial on the internet will become relevant.

Tweeted by iamdevloper on April 21, 2014 at 1:29 PM

ManishEarth

lol

ManishEarth

10:39 AM

Saw this on Reddit:

AviD

@ManishEarth Not many good things start with that.

ManishEarth

"If I use RSA based cryptography to log in .... does it mean that I'm using two factor authentication?"

3

:p

@AviD heh

Terry Chia

@ManishEarth Well, @AviD is right. :P

Adnan

12:25 PM

@Lucas When you're around, please check your Skype. I need a favour.

Terry Chia

@Adnan Oooh, that sounds dirty. ;)

Lucas Kauffman

1:18 PM

@RоryMcCune Is it considered blasphemy to mix whisky with coke, provided that the whisky is a cheap blend( J&B, Jack Daniels, Famous Grouse, William Lawson)

AviD

@LucasKauffman what would be the point?

that sounds like a case where you would want to replace the whisky with a nice rum.

Lucas Kauffman

@AviD the point of what?

@AviD but I don't like rum, I like whisky more

and I wouldn't want to mix Captain Morgan's Spiced rum with coke

AviD

@LucasKauffman then try it with vodka.

I'm not sure how any whisky would combine with coke...

Lucas Kauffman

@AviD I don't really like vodka

Rоry McCune

@LucasKauffman I think not with the cheap stuff, indeed some of the cheaper whiskys actually recommend using them in cocktails...

personally I'd just stick to single malts tho'

Lucas Kauffman

1:20 PM

@RоryMcCune perfect

AviD

@RоryMcCune sure, but with coke?

Rоry McCune

@AviD well may have coke in a cocktail I guess

Lucas Kauffman

yea I wouldn't mix laphroaig, springbank or highland park with coke

I wouldn't mix them with anything actually

Thomas Pornin

@LucasKauffman If you already loathe yourself enough to accept to drink cheap whisky, why not, indeed, complete the infamy with coke ?

Rоry McCune

@AviD uk.monkeyshoulder.com/recipes includes "monkey coke"

Adnan

1:21 PM

@LucasKauffman It is indeed allowed to use J&B, Jack Daniels, and Johnnie Walker with cola.

AviD

Favorite whisky-based cocktail: "Three Wise Men". Equal parts Jim (Beam), Jack (Daniels), and John (ny Walker).

Adnan

Otherwise, you would just pour such bottles in the toilet, which isn't nice.

Lucas Kauffman

@ThomasPornin I don't drink cheap whisky, I just had a discussion with someone, who said that a Scottsman would consider it blasphemy if you mixed coke with whisky, to which I said, whatabout a cheap blend? So I wanted to confirm it with a real Scottsman

Thomas Pornin

@LucasKauffman A "cheap blend" is not real whisky, so there is no paradox.

Rоry McCune

@ThomasPornin that is a good point, if it's not single malt, is it really whisky...

AviD

1:23 PM

@LucasKauffman Ah, as far as the Scots go, the cheap blend is already a blasphemy.

Lucas Kauffman

@AviD mine is a Jangling Jack

2

Adnan

hehehehe

AviD

@LucasKauffman Perhaps you should see a doctor about that.

Lucas Kauffman

-_-

it's jack daniels, cointreau, lemon juice and sambouca

packs quite the punch

AviD

You might like the George Thorogood: one bourbon, one scotch, and one beer.

Lucas Kauffman

1:26 PM

but I mean, when I go out, (you know for you older guys that's where young people go to bars and dance to music that sounds as if the CD is scratched) I sometimes drink Whisky Cola

@AviD ever tried a Submarine? You take a pint of beer, you take a shot of Bolls jenever (similar to Gin) and then you drop the shot in your beer glass and pour the beer down your throat in one go

Xander

@LucasKauffman In my opinion, cheap whiskey like Jack Daniels is essentially undrinkable unless you mix it with something like Coke or Sprite. Even then, it isn't good.

Lucas Kauffman

@Xander It depends, Silver Jack or Gentleman's Jack is quite drinkable

@Xander oh btw I found an importer of American beers, what should I get?

Xander

@LucasKauffman Yeah? I haven't had them, so that may be. I generally just steer clear.

Lucas Kauffman

@Xander they are a lot softer than regular jack, bit more taste

AviD

@Xander hmm. seems the wiki page for that actually mentions Jack and Coke

Jack and Coke

Jack and Coke (also referred to as JD and Coke) is a cocktail made with Jack Daniel's whiskey and Coca-Cola. The drink is usually served with ice in an old-fashioned glass or a Collins glass. The first mention of the drink, also referred to as Bourbon and Coke, is in 1907, in the report of an employee of the United States Bureau of Chemistry. According to Massachusetts Beverage Business, Advertising The term "Jack and Coke" was used in some combined advertising for Jack Daniel's and Coca-Cola, and several products were created as part of this marketing campaign, including bar signs a...

Xander

1:29 PM

@LucasKauffman What are your favorite styles?

Lucas Kauffman

@Xander I like anything, it depends on my mood, I like IPAs, Saisons, Strong Ales, Blond Ales, ...

@Xander I'd like to try something which is typical for American brewers but which might not be too common here in Belgium

AviD

@LucasKauffman if you want a proper representation of American beers, you should get some Miller Lite, Bud Lite, and Coors. On the other hand, if you don't hate yourself, you could try something like Sam Adams.

Xander

@LucasKauffman Ok, cool. For bold, hoppy, west-coast style IPAs look for Stone or Green Flash, both from California. For stouts, try Great Divide (Colorado) or Founders. (Michigan)

AviD

Or probably something less well-known.

Lucas Kauffman

@Xander I also remember you showed me a bottle once of a special beer in the shape of a pitcher

Xander

1:35 PM

@LucasKauffman For good solid American IPAs and assorted weird (but typically very tasty) beers try Dogfish Head. (Their motto is off-centered ales for off-centered folks.)

Lucas Kauffman

I'm going to increase my stock of beer

Xander

@LucasKauffman Ah, that was probably Sam Adams Utopias. They only produce it once a year in the late fall/early winter (and I don't think they do it every year) and it's really tough to find. It's illegal in North Carolina (too much alcohol) so I can't get it within a reasonable distance, and it runs $200-$400 a bottle, if you can find it at all.

Lucas Kauffman

@AviD where did you find the Sam Adams?

aah they also produce normal stuff

@Xander yea that looks kind of expensive

AviD

@LucasKauffman regular sam adams is usually pretty available, we can pick it up at many stores here in IL

Lucas Kauffman

maybe someone would like to trade for Westvleteren

Xander

1:38 PM

@LucasKauffman Sam Adams Boston Lager is the highest production craft beer in the U.S., so it's easy to find.

Lucas Kauffman

@Xander is North Carolina so strict when it comes to alcohol?

Xander

@LucasKauffman It's really just that beer can't be over 15% ABV.

Lucas Kauffman

@Xander ... it's just the name that counts?

Xander

@LucasKauffman Not really just the name. There are a mish-mash of federal and state laws that determine what can be called beer and what can't, mainly around ingredients and production methods, and the classification of a beverage (as beer, wine, a spirit, etc.) has implications for licensing and distribution.

Lucas Kauffman

@Xander that sucks

Xander

1:46 PM

@LucasKauffman You need different licenses to manufacture, distribute, and sell beer and spirits.

Lucas Kauffman

I know here only the ABV matters to get a license

Xander

@LucasKauffman Yeah, it's a hassle for sure.

Lucas Kauffman

and I think there are only two licenses

ABV below 15% and ABV above 15%

AviD

@Xander a hassle, but not without some consumer-protection benefits.

Lucas Kauffman

@AviD which are :p?

AviD

1:47 PM

e.g does make it easier to know what you're buying, without researching it in depth...

in principle, of course, implementation is another matter :-)

Xander

@LucasKauffman We have all kinds of different licenses.

Lucas Kauffman

@Xander I know there are to distributer and bar licenses, not sure if it goes beyond that

Xander

@AviD More a hassle than anything. It's primarily to protect the high taxation on spirits, and the distributors profits. (They have a very strong lobby.)

AviD

@Xander true, those are not inconsequential issues, but that is a problem of implementation.

as is the problem of calling things like bud lite, "beer". ;-)

Xander

@LucasKauffman We have manufacturing licenses that are different for beer, wine, and spirits, distribution licenses for beer/wine, and spirits. Licenses for on-premises retail for bars, on-premises retail for non-bars, off-premises retail for beer/wine, off-premises retail for spirits...And so on.

@AviD Ha ha. This is true.

@AviD We need an "unflavored mildly alcoholic beverage" category.

AviD

1:53 PM

Perhaps I'm just feeling in an uncharacteristically charitable mood, but I can't help think that this might actually be a positive case of authority misdirection.

Calling Bud Lite "beer", will cause the typical underage drinker to grab that first, based on knowing little about the forbidden alcoholic drinks other than its' name.

Xander

@AviD LOL! That's a very good point.

AviD

This will, in turn, have one of two possible direct effects: Either these underage drinkers will decide they actually hate "beer", or they will be drinking Bud Lite instead of beer. Either way, the underage drinking problem has been massively reduced.

Thomas Pornin

@AviD Security through obscurity: it works !

AviD

Possibly the same situation as with calling marijuana "drugs".

Marijuana is commonly called a "gateway drug". We in the security industry, recognize "gateways" not as a "slippery slope", but as a "chokepoint". How many potential drug addicts suffice with marijuana instead of harder drugs?

Thomas Pornin

@AviD We should begin to call skateboards "cars", then. This would reduce one major death cause for youngsters.

AviD

1:57 PM

@ThomasPornin hahaha

Thomas Pornin

@AviD Technically, alcohol and tobacco are quite harder drugs.

AviD

The problem is that my argument breaks down the moment they taste "real" beer. Thus it cannot apply to skateboards / cars, since most teenagers can tell the difference.

Teenagers are not stupid, you know.

^ hahahaha, sarcasm intended :D

@ThomasPornin exactly, but they're not called drugs.

Perception is 9/10ths of the law.

Thomas Pornin

2:15 PM

@AviD Ergo: en.wikipedia.org/wiki/Root_beer

AviD

hehe, hey I love rootbeer!

just as soda/pop/carbonated beverage, not as beer.

Iszi

@AviD I thought that was possession.

AviD

@Iszi nah, that's so last decade.

whatarya, some kinda law-expert?

Terry Chia

@ThomasPornin Can I call upon The Bear for an answer?

1

Q: Use cases for CMAC vs. HMAC?

Both can be used to verify the integrity of a message. Assuming you have the needed primitives available to you (i.e. the code space of needing both a cipher and a hash function isn't prohibitive), is there any reason to prefer one over an other? In practice HMAC seems to be much more widely used...

mac hmac cmac

Gilles

0

Q: Why should there be a site about CTF?

Proposal: Capture the Flag CTF competitions typically cover several topics, including reverse engineering, forensics, cryptography, network protocols, etc. Reverse engineering, forensics, cryptography, network protocols (Network Engineering, Super User, Security, etc. Is there any CTF-related ...

technology

Thomas Pornin

2:40 PM

@TerryChia Done.

Terry Chia

@ThomasPornin Cheers. :)

Thomas Pornin

Do you have a specific interest in that question ?

Terry Chia

@ThomasPornin Alex Gaynor is one of the project leads to the python crypto library I'm contributing to. I just added CMAC support to it via OpenSSL.

TildalWave

3:15 PM

how the f* can someone be CISSP, CEH, CHFI, CISA, CPA, CIA and gowdknowswhat and ask such a basic question: linkedin.com/groups/…

David Freitag

@ScottPack Yeah accept the people they fired are 50

Terry Chia

@TildalWave Why not?

TildalWave

@TerryChia dunno, I don't even know what all those titles mean

I thought they stand for "I know some shit"

Terry Chia

@TildalWave Hahahahahaha!

Oh, you weren't joking?

TildalWave

@TerryChia well, yes I was, and I also wasn't ... I just don't get it, dunno, it might be funny for all I know :)

e.g. how can CHFI not know how cookies work, at least the very basics of it?

Adnan

3:23 PM

Shpam flaggs! security.stackexchange.com/questions/36780/…

AviD

3:36 PM

@TildalWave That's precisely why. Too many letters obscure the tech.

It's like how you usually would not want to hire a PhD to actually get anything done.

cant believe you bothered writing such a long answer, though. just point him to WP's article on "Cookies".

Terry Chia

@AviD Chocolate chip I hope?

TildalWave

@AviD frankly, that was like a single long WTFDUDE!? I prolly wrote it in under a minute

it's not even all that enlightened, tho now that I think about it, someone might reuse it for their blog now because it's just about the perfect length for that

I guess I should just write "IE does not care for FF cookies, and if it did, you'd not care for IE"

Iszi

@Gilles Looks to me like the originator of the proposal doesn't really get StackExchange all that well. The three sample questions he's posted wouldn't be a good fit anywhere.

TildalWave

3:55 PM

@AviD @RoryAlsop what do you think about this Eric's proposal to put a link "Have questions about the recent Heartbleed news" on the site? It could be a simple community event linking to the heartbleed and it would show in the community bulletin. Not sure how log it should last, probably a month or so?

Stack Exchange

Blog - Stack Exchange: Putting the Community back in Wiki

Grace Note on April 22, 2014

Ever seen this diagram?

That’s the visual elevator pitch for Stack Exchange. We were the little dot in the middle, a potent mix of useful traits from other tools, a wiry mutt full of hybrid vigor. The purpose of this blend was to allow and encourage the construction of a library of solutions, by providing communities with the tools they needed to share their experiences and challenges with others who might struggle with the same issues.

The diagram illustrated where we stole drew inspiration for the design of those tools, and their influence occasionally shows up in the results. Sometimes, …

Rory Alsop

6:36 PM

Oh - this is comedy genius. Remember this unreasonable troll?

-35

Q: Double-edged sword of too strict community based website

I am being honest. This is how it goes. If you are banned you use Tor or some other way to ask the similar question or something else again, because you need the answer. If the rules of banning people are too strict, instead of building a community, people start to change into one time visitors....

discussion rules

@TildalWave I didn't think of doing it like that - looks like that would be useful for future events. Do you think heartbleed still has mileage?

TildalWave

@RoryAlsop oh dunno, hope not :)

AviD

@RoryAlsop seems to have slowed down, hvent seen any new HB qs this week.

would have been a good idea to do when it pooped out, though.

2

TildalWave

fitting typo ^

press conference presenting new visualization of data from a nuclear weapons warning network, to be unveiled by B612 Foundation is now live if any of you are interested: universetoday.com/111278/… live stream here: ustream.tv/channel/b612-foundation/theater

AviD

@TildalWave oh no, it wasnt a typo at all :-)

Iszi

@RoryAlsop Oh, this is great. Apparently he was banned for a year, then slipped in when something borked in the system.

-17

Q: I was banned by suggesting adding the tag "censorship"

After asking this question: Moderator refused to add tag "censorship" to the tag list for posts on meta.skeptics I was banned on the skeptic forum. How can a moderator ban a person after this suggestion/question? Btw. I was able to use the tag "censor" on this forum, which is great and i appr...

discussion censor

And HTTPS breaks OneBox yet again.

TildalWave

6:45 PM

I like the last quote:

> “This network has detected 26 multi-kiloton explosions since 2001, all of which are due to asteroid impacts. It shows that asteroid impacts are NOT rare — but actually 3-10 times more common than we previously thought. The fact that none of these asteroid impacts shown in the video was detected in advance is proof that the only thing preventing a catastrophe from a ‘city-killer’ sized asteroid is blind luck.”

especially since there was again another big bolide over Murmansk just a few days ago

if you didn't yet see it, here it is:

►

Xander

@RoryAlsop Ha ha ha. And...Now he's trolling meta. Nice.

Iszi

@TildalWave Wasn't the last one over Russia, too? Sure the country makes up a rather generous portion of the Earth's land area, but really what are the odds?

TildalWave

@Iszi yup the Chelyabinsk one

odds that it'll be either in Russia or US/Canada are big, Russia in particular because it stretches through so many time zones

Thomas Pornin

@Iszi It is the NSA ! They have a secret plan to install thrusters and communism detectors on asteroids.

Iszi

Interesting. The U.S. has more than twice the population of Russia despite having just a bit more than half its land area.

Thomas Pornin

6:52 PM

@Iszi Eh. Compare with China. Or India. Or Bangladesh. Or Singapore (hello @Terry)

Iszi

@ThomasPornin Per Wikipedia, the order of countries by population goes: China, India, United States, Indonesia, Brazil, Pakistan, Nigeria, Bangladesh, Russia, Japan.

Now, Japan being #10 by population but #62 by size? That's f'in nuts.

Thomas Pornin

@Iszi Yeah. But you were comparing densities.

TildalWave

it could also potentially be a big problem if something really happens and that land then blames some other one for it, it's not really unheard of that false accusations threatened our future

Thomas Pornin

@Iszi Worse of it is that 80% of Japan is mountains so the people must cram in a comparatively small area.

Iszi

List of sovereign states and dependent territories by population density

This is a list of countries and dependencies ranked by human population density, and measured by the number of human inhabitants per square kilometer or square mile. Methodology The list includes sovereign states and self-governing dependent territories based upon the ISO standard ISO 3166-1. The list also includes but does not rank unrecognized but de facto independent countries. The figures in the following table are based on areas including inland water bodies (lakes, reservoirs, rivers). Figures used in this article are mainly based on the latest censuses and official estimates (or ...

Thomas Pornin

6:56 PM

@TildalWave It is useless to threaten the future; it will happen anyway.

tylerl

@Gilles I don't think that one is going to fly. There isn't even enough material for a ctf tag here, despite it being entirely on-topic for sec.se. Trying to make an entire site out of it... That's a hard sell.

TildalWave

@ThomasPornin I think the point is that we could be doing something to thwart against some real threats but aren't. Worrying about things we can't do anything about is rather pointless, e.g. Gamma Ray Bursts of some supernova pointing towards us and zapping the whole Solar system sterile, for that we have absolutely no protection (you'd need light years thick shield of lead to block half of the neutrinos)

Thomas Pornin

@TildalWave Neutrinos ? We don't care about neutrinos. Neutrinos need so heavy shielding because they just go through matter without interacting. Which means "harmless".

Now, gamma rays, that's another matter.

But the rule of thumb applies: if it goes through the Earth and is still dangerous on the other side, then the exposed half must have been thoroughly cooked.

Iszi

Holy buttcrap! How'd I end up with over 50 accounts across the SE network?

Scott Pack

Presumably by logging into 50 or so sites.

Rory Alsop

7:04 PM

@Iszi it's like mould or fungus...it just spreads :-)

@ScottPack oh, you with your sensible facts...

Iszi

@RoryAlsop Did you just call me a fungi?

Scott Pack

Nobody has ever called you fungi.

Rory Alsop

@Iszi erm....

fungi is plural, you would have to be a fungus, or some fungi...

:-)

AviD

@ThomasPornin sure, but the resultant green humanoid ragemonster is arguably even worse than the gamma rays.

Scott Pack

@LucasKauffman Asking which American beer you should get is like asking which cheese should I eat.

TildalWave

7:07 PM

@ThomasPornin Yeah not neutrinos my bad... GRM so gamma rays... still, even neutrinos at large density can be a problem. You don't care about those few hundred per second that pass through your body without interaction, but some are interacting (they're considered weakly interacting) and if you increase density from the source, it might still be unpleasant enough. It's all about the dose (concentration * duration).

Rory Alsop

@AviD your comment vanished...just as I was about to upvote it

Scott Pack

@LucasKauffman Here's my beer history: untappd.com/user/scottpack/beers

AviD

@RoryAlsop as I'm typing another one the whole page flipped. they did a commentnuke mid comment....

was a strange feeling.

Rоry McCune

cathartic? or just infuriating...

AviD

@ScottPack that looks pretty cool.

Rory Alsop

7:09 PM

"No more comments. It's talking to a wall"

AviD

how many of those are NOT microbreweries?

Rory Alsop

@ScottPack starred - so I can remember to look at it later and add mine...

Scott Pack

@AviD They need more than 5, because looking at that list of what I've rated as 5 there are definitely some I liked more than others and many others I liked more than those.

@AviD ....not very many

AviD

hehe, that site has a heartbleed banner....

@ScottPack then it would be unlikely to help him, no?

Rory Alsop

excellent - they even have the brewery at the end of my road: untappd.com/search?q=alechemy

Gilles

7:14 PM

@tylerl all it takes to have a ctf tag is one question. But apart from organizing CTF, CTF-related questions don't need a ctf tag, the CTF aspect would only be part of the motivation for asking, not of the question itself

Rоry McCune

@RoryAlsop I've yet to visit the local brewery up here, although must add it to the list of things to do! fyneales.com

Rory Alsop

@RоryMcCune Ahh - they had a few at the last ale festival here - think The Sanda Blonde was my favourite - nice and light

Rоry McCune

@RoryAlsop hmm could be a nice summer choice..

AviD

@Gilles actually, usually it would require 2 questions.

sure, you can create a tag with just one, but Imma go and remove that crap.

Gilles

@AviD no, one question and a tag wiki within 6 months

Rory Alsop

7:17 PM

@RоryMcCune Oh, Jarl is good too, if I remember correctly

AviD

@Gilles like I said, I will usually remove single-q tags if I see them as useless, and single-q tags usually are.

Rоry McCune

@RoryAlsop the challenge with beer festivals, the later ones become harder to remember, good or bad ;op

@RoryAlsop BTW you infosecing next week?

Gilles

@AviD all tags start as single-use tags

Rоry McCune

looks like the tube strike will be a bit of a smegger

Scott Pack

@AviD By and large it's pretty rare that I drink beer not draft and when I do go someplace I like to try new things.

AviD

7:22 PM

@RоryMcCune I read that as "lube strike", and I'm thinking, "okay this will at least be an interesting story".

Rоry McCune

@AviD unfortunately this one is less interesting, although it does involve people getting shafted ;op

AviD

hehe

Rоry McCune

48 hour tube strike right on B-Sides London and Infosec.

If the weather is ok it'll be cool, nice walk for us from train station to venue...

AviD

ouch

Iszi

7:45 PM

@RоryMcCune But isn't London notorious for "not ok" weather?

Rоry McCune

@Iszi well that's comparitive.... compared to Lochgoilhead nope it's really hot (too hot) and fairly dry.. compared to Los Angeles, it's a cold rainy place :)

Lucas Kauffman

8:03 PM

@ScottPack porter looks nice

Scott Pack

@LucasKauffman Which one? Porter is a variety like saison.

Xander

@LucasKauffman The Founders Porter? It is nice. I reviewed it not too long ago. opencraftbeer.com/founders-porter

Simon

8:21 PM

hello

Xander

world

AviD

your PHP has a vulnerability.

Simon

My PHP browser?

Anonymous

@Simon the sole idea of a php browser makes me cringe

Iszi

Oh, this conversation is surely going to be fun to follow.

@dansumption your password will be just as secure being 12 characters or less.

Tweeted by ThreeUKSupport on June 11, 2013 at 11:17 AM in reply to dansumption

Simon

8:29 PM

wtf?

Iszi

Got that via @troyhunt.

Simon

Even I wouldn't say something that retarded.

2

Iszi

I like this response.

@ThreeUKSupport @troyhunt @dansumption I think by "just as secure" they mean that it will be stored in plaintext independent of length :P

Tweeted by tweilbach on April 22, 2014 at 8:23 PM in reply to ThreeUKSupport

Aside from the obvious spelling issue.

AviD

@Iszi a bit... current, doncha think?

Iszi

@AviD Oh, hey. Didn't even notice the timestamp. Wonder why it's getting passed around today?

AviD

8:36 PM

@Iszi 9 month anniversary?

Iszi

@AviD No, that was a week and a half ago.

AviD

heh

Iszi

Plus one month.

Or maybe I just suck at maths.

Simon

It should be pointed out that in the two (awesome) examples given, the "salt me" is barely visible. If the OP's goal is to catch the eye of somebody reading through a database, the hash would need to look like ////SALT+ME//// or something similarly "stand-out"-esque. By the time that gets implemented, however, the OP's actual problem could have been solved... — Ti Strga 1 hour ago

What a ... Let's be polite and not say anything.

Iszi

Nope, I was right. 9 month anniversary would have been last month.

Simon

8:49 PM

0

Q: App permissions to access hardware "at any time without your confirmation"

On Android applications now some applications say that they want access to things such as speaker or camera "at any time without your confirmation". I wasn't sure if this meant that it does not require your overt permission each time to access that resource, or if it meant that it can literally ...