The DMZ - 2015-02-03 (page 1 of 3)

« first day (1510 days earlier) ← previous day next day → last day (3391 days later) »

4:27 AM

SPAM FLAG THE SPAMSWER

-1

A: How to make database of IP addresses anonymous?

Your site hit the nail on the head. I found the best VPN for Gaming at this site http://thebestproxyserver.com/overplay-review/

4:50 AM

OH GOD THERE'S SO MUCH SNOW

1 hour later…

6:07 AM

Can you surround the cat with a large conducting sphere? — copper.hat 11 hours ago

Journeyman Geek

6:24 AM

0_0

2 hours later…

8:43 AM

@Adnan-Adi It's not that weird, I've done it (it worked IRL, too). Granted, it's easier with new acquaintances, but it doesn't take that much getting used to. Except with my cousins. I can't call them by their nicknames, because their names are so beautiful!

8:54 AM

'Timezone

I just saw the hashtag #YOLOIRL. I'm assuming that this means that whatever was said before was said by someone having a serious midlife crisis that wanted to outdo @Simon

@BarryCarlyon Morning!

9:10 AM

salut

bed was surrounded by some strange gravitational field this morning, which kept me pinned and far too comfy

I have only in the last 30 minutes invented the technology to escape this gravity well

My house has developed the strange effect of "fuck you, I'll switch windows today". I'm curious how it'll look when I get home tonight.

I expect evertything to be stupid cold tonight. But then again, the new windows should actually hold some heat inside once installed. Because broken windows are pretty fucking cold when it's freezing.

@Arperum Just engaged a company to replace 4 or 5 of ours in April. The old ones were rotting away, so I'm looking forward to it.

Not to make the house any hotter - we still need them open most of the time - but watching the wood slowly die is a bit sad

@RoryAlsop there are pills you can take for that

@RoryAlsop Yea, I have multiple windows that are actually cracked, or the one in my bedroom actually has a real hole in it.

9:25 AM

Morning All

that HTTPS Q. from the other day didn't half rep-train

which one was that?

39

A: I can't access websites that use HTTPS, instead getting the message "your connection is not private"!

Whilst I don't know the specifics of your ISP, I would say that it's likely that what they're doing here is intercepting all traffic you send over the Internet. In order to do that (without you getting error messages whenever you visit an HTTPS encrypted site), they would need to install a root c...

I got like 300 points off it!

makes Security.SE account for spamflagging purpose Oh hai there multiple random chat badges.

@RоryMcCune "DIDNT" reptrain?? it surely did!

heh, and it should have been closed as dupe...

@AviD didn't half means did (sorry scottish/british idiom)

9:28 AM

hehe I actually know that

@AviD :op

It's going to happen a lot in future this, ISPs / carriers mass intercepting SSL to suit their commercial/legal ends

@RоryMcCune And that's a terrible thing. Stupid fearmongering.

@Arperum yeah it'll be a battle between tech companies being stricter (HSTS/pinning etc) and carriers trying to block it

actually just thinking about it, I wonder if these interception solutions understand HSTS and HPKP headers

if they don't it's going to break sites that start using them

well it's going to break peoples use of the site, not the site itself

the problem with HSTS and pinning is that it only works on the SECOND time you connect to the site, assuming you've already connect SAFELY the first time.

that is a shaky assumption, especially once the MITM is already in place.

@AviD sure but for Pinning (assuming they don't let locally installed roots override it) unless the interception tool rewrites the pinning information

the connection will fail

as the cert won't have the right fingerprint

HSTS your right probably doesn't help

9:34 AM

ah I see what youre saying - while the MITM could easily do this, it may be an unsupported feature for now.

Hmm, that could be a great startup. Full-Featured Government SSL MITM.

@AviD heh, yeah you'd need solutions to do things like replace APK files as they download with ones with .GOV certs in them

to stop Android apps doing pinning

although no idea how you'd do that with iOS or WP8

MITM is sexist

information security is sexist

without collusion from MS/Apple or a vuln.. I don't think that's possible

oh please. 60% of android apps dont use SSL. 60% do use SSL, but without validating the certificate or the trust chain.

how can 60% not use it and 60% partially use it

that's 120%

that's impossible

9:36 AM

@AviD oh sure but some of the ones that they'll most want to intercept (e.g. google apps, other high value stuff) are the ones using pinning

@kalina simple, I used the android calculator app

that's not fair

@kalina mornin' I see you got out of bed on the right side today :op

also, what kind of sad individual needs a calculator to add 60 to 60

hehe

9:37 AM

@RоryMcCune I'm in a great mood

today is definitely the best waking up of the year so far

it is 11 days until my getting older day

the sun is shining

@kalina \o/

it almost looks summery except it's just... not

way too cold

but that doesn't change the fact that MITM is sexist

@kalina Definitely doesn't look summery here. There's well over 50" of snow on the ground.

what if it's a woman in the middle?

does that woman become a man for the duration of the attack?

are you somehow stating that women are unable to carry this kind of attack out?

if so? why not!

@DavidFreitag fifty inches of snow?

no, the problem is that if anyone suggests there is a woman in between the two men, then somehow it becomes sexual and creepy.

and nobody wants that.

9:40 AM

@AviD Are you saying all servers are male?

@AviD better than a man between two women

@kalina Two major snow storms back to back and we're getting more on thursday and then again on saturday.

@Arperum victims

@Arperum this

@AviD so you're saying that a woman can never be the victim of a MITM attack?

@kalina not sure that wouldnt be awesome. But I'll stop there.

9:41 AM

@DavidFreitag it's about time the environment wiped out America for us

@kalina not at all

@AviD not as awesome as two guys and a girl

double the attention is always better than half

depends for whom, doesnt it

except when we're talking about reporters

perspective is everything

9:42 AM

@kalina Haha, wouldn't the world be so lucky. Nope, it's just new england that got the worst of it. In particular this tiny little state got the most.

@DavidFreitag small steps

I think I'd rather die in a fire than in a snowy grave. At least then I'd be warm.

@DavidFreitag perhaps it's seattles retribution for the outcome of the handegg game at the weekend

@RоryMcCune Nope all of this snow is prior to the handegging.

@DavidFreitag you wouldn't know you're warm, one of the first things to happen would be the decimation of your nervous system by the heat

you would only know pain

9:45 AM

3' or so from the snowpocalypse and the rest in the past day or so, I might just take @Xander up on his idea to move to Arizona.

@AviD oh dear :-)

@kalina Then I choose an existence of pain over one of cold.

that's a difficult choice

I do not like feeling pain or cold

But if I had the choice.

@kalina is it though...?

9:47 AM

It's bedtime. I have to go shovel again in an hour or so. Also, happy getting older day @kalina, if I don't see you 'till then.

@kalina Oh - a Valentine baby?

yeah I don't think I could make the choice between pain and suffering

@RoryAlsop yes

@RoryAlsop yes it is

I know which out of those choices I'd choose

every single time

neither. I'd rather go one on one.

@kalina true

(mostly)

:-)

if only for the fact there's less chance of it being talked about if you restrict the flow of information by limiting the participants

@kalina limiting personal information flow is very strongly embedded in you isn't it? And I don't mean that in a disparaging way at all.

user image

Murica destruction pills?

(good pin/star arrangement today @Rоry)

9:57 AM

@RoryAlsop thanks :) I did like that one. @AviD 's no no no quote is a useful generic line to take out of context..

ooo Heroes is coming back again....?

@RoryAlsop I am merely protective of myself

I used to try and find the balance that made me not seem weird while still attempting to be in control of the situation

now I've accepted that I'm a bit weird and that if people don't like that then it's their problem

@kalina one of the advantages of the Internet... there's enough places out there that you end up fitting in somewhere :)

10:12 AM

btw that coffee research somebody mentioned yesterday - authoritynutrition.com/how-coffee-makes-you-live-longer

coincidentally showed up in my feed today

user image

@kalina some weird is good, and I agree with you

@RoryAlsop Wouldn't most people in here agree? (I'm agreeing anyway)

@Arperum I would expect so

@RоryMcCune when I find one, I'll rejoice.

@kalina hey, is that you dissing the DMZ?

10:24 AM

@kalina I kinda think you fit in surprisingly well, despite your arguments to the contrary :-)

@RоryMcCune I'm merely saying it's not a perfect fit

@kalina my experience so far: You'll never find a place where you fit in perfectly, only variations on better and worse.

@Tinned_Tuna ayup

@Tinned_Tuna it will get to the point where I will just invent my own place, with my own rules

@kalina no pants kids only candy party!

10:32 AM

wat

TIL AvID wants pantsless children to party with him

nooo, no.

there's no recovery

@kalina no recovery needed, pop culture reference.

@kalina does the perfect fit exist?

10:34 AM

The perfect fit is a dream

you could use a mold to craft the perfect fit

@AviD all we need is for @LucasKauffman to chime in with his usual epithet and I can star wall that :op

@RоryMcCune I'm going to purposely take this out of context and just say "yes" without further clarification of what I'm agreeing to.

@AviD wat???

10:54 AM

@kalina I C

11:23 AM

icy

55 mins ago, by AviD

heh. I just got headhunted from Nigeria.

or is this a new form of Nigerian spam?

@AviD on that note, Mozilla Research is looking for an ops person for handling the build system. Anyone here interested?

I dont do ops

@ManishEarth what location? or is it remote.

yay ops

my favorite part of IT

@ManishEarth You mean run in the mousewheel?

11:32 AM

remote

news.ycombinator.com/item?id=8980944

> Experienced operations engineer. Working in concert with the larger Mozilla release and build teams, build out the Mozilla Research continuous automation, release, testing, etc. systems, focusing first on Servo and Rust. We explicitly want candidates with a history of reuse and contribution to existing projects. Experience with build systems, automation, and cloud systems preferred.

Remote or office both allowed

sure, let me just quit my career and apply

@ManishEarth Sounds awesome. :(

@ManishEarth how about remote office

both at once

FacePalm

@kalina ops people are supposed to put out fires. You set people on fire, you wouldn't be suited anyway :p

2

11:34 AM

@AviD that still just opens up an Australian youth hostel advert. Or is that the joke

@AviD lol. Seriously though, a lot of the remote workers (Larsberg himself does this) work in coworking spaces.

And others only go to the office on some days

@RoryAlsop uhh... sorry bro, methinks youve have maladvertisements take over your machine

its a link to youtube

SMBC Theater on youtube, to be precise

@AviD it is definitely on youtube, but is a 5 minute thing - but it was odd enough I wasn't sure if real or funny

@RoryAlsop are you sure it wasnt an ad?

@ManishEarth I am excellent at ops

you can put out your own fires by transporting the fire to somebody else's office

4

11:37 AM

no, thats "oops" you mean

lol

^^ No defence against the setting people on fire… CONFIRMED ARSONIST OF PEOPLE

nobody cares if a couple of end users get toasted

@kalina To me that's a good thing.

Stupid caps.

@Arperum I enjoyed the typos :-P

11:38 AM

at the end of the day, me in an ops environment makes your ops team an unstoppable force of nature

primarily through the propagation of fear and misinformation

@Arperum I think she means "toasted with fire" not "toasted with weed"

@BarryCarlyon Just one, I hit caps instead of shift. For all other weirdness: blame my azerty keyboard.

@kalina and flash fires

@AviD the latter is baked, not toasted

1 min ago, by Arperum

@kalina To me that's a good thing.

11:39 AM

@Arperum user chose that keyboard… blame user…

@kalina that too

@BarryCarlyon azerty is the layout of winners, back off before fire consumes you

@BarryCarlyon No I didn't. Work did.

@kalina I for one welcome our new fire burning overlords…

what I never understood was why the swedish layout has such awful curly braces layout

11:40 AM

@kalina e.g. this

stop linking porn with innocent looking thumbnails

hehehe

@kalina nah - qwerty (for all round compatibility - wherever you go you can type easily) or dvorak (for absolute speed)

guys, there is a moderator election occurring on movies and tv

I thought about nominating myself for 0.000000000000000000000000001 of a second

@RoryAlsop the dvorak study was thoroughly debunked

11:41 AM

@kalina Wait, Swedish have azerty too? I thought it was just Begium and France?

@Arperum no I don't know, all I remember from my time using swedish layouts was that it was three fingers to get a { }

@AviD really? oh. I don't use it - confused the hell out of me

@RoryAlsop I prefer qwerty with an azerty layout, for obscurity

Awkward

@kalina Yea, Belgian layout has that too. It's also three keys to get a `or a \

11:43 AM

but I guess it annoys folks who try to mess

@AviD no - not debunked:

I find that most computer illiterate users are defeated by this simple technique

22

A: Does the Dvorak keyboard increase typing speed?

Somewhat. Typists can, in fact, learn to type faster on a Dvorak keyboard, it's just not a big improvement. Consider, from The Standard and Dvorak Keyboards Revisited: Direct Measures of Speed: The Dvorak typewriter keyboard was found to produce speeds of keying 4.0 percent faster than tho...

[ ] is also three keys.

just not impressive improvement

see

4 percent after weeks of intensive training

seems like a net loss even over several years

11:45 AM

@kalina Heh, at home I have to hit two keys to swap between qwerty and azerty.

I should add a hotkey, so it's only one key. mental note

@RoryAlsop debunked, cuz the original study (by Dvorak himself, not suspect at all) claimed consistent improvement like 60% for everybody.

A coworker has used a Dvorak keyboard for years. The biggest advantage he sees is that it keeps others from trying to use his PC.... — RBerteig May 8 '11 at 21:29

2

@AviD this is the azerty keyboard in the uk thing all over again

@kalina nah - worse than azerty :-)

I have never learned how to touch type, really

I just muscle memory'd all of the keys

@kalina erm.... that sounds like the same thing

11:52 AM

@RоryMcCune what?

I tried to learn, but I had already picked up enough bad habits that I can't get my fingers to rest on F and J

@RoryAlsop no touch typing is the whole finger positioning and using specific fingers for specific keys

@LucasKauffman well you usually pop into the room with an exclamation of "boobies" (it's kind of your trademark now)

I can't be bothered with that, I just freestyle it

@kalina I think that is just one form of touch typing

what you do is still touch typing in its general form - ie no looky

people who look at their keyboards while typing should be treated like people who have no arms who try to drive

people who type with their index fingers or one hand at a time

... words, I failed to collate them in the required order to create a sentence

11:56 AM

@kalina ... don't come easy

oh man I could make the best pin wall from some of that

@RоryMcCune boobies™

@RоryMcCune Ahh. that came out differently than I intended.

@RoryAlsop your statement after Kalina's second to last statement

heh heh - but I am snortling my coffee right now

@RоryMcCune yup

11:58 AM

Wow, Jean-Philippe Aumasson will be at Syscan.

@RoryAlsop you're right, I don't

@kalina eeek - TMI

yay, I passed the TMI barrier

let's see if I can stay on the wrong side of it for the rest of the day

:-)

nope, it's too difficult to maintain TMI, I only seem to be able to blurt out one liners that escape before censorship starts

12:02 PM

tell me about it

"what else could I say that would be TMI?"

"nope.. that is too much info..."

"nuh uh, can't say that either"

31 secs ago, by AviD

tell me about it

"seriously? Who would even want to know that"

@kalina This is the internet. We are waiting.

@AviD that's not creepy at all

12:03 PM

I suppose we could talk about periods again (you know, like the punctuation mark for endofsentence)

@RoryAlsop heehee

@RoryAlsop Rule of thumb: @AviD is always creepy.

that's basically an entire TMI subject when it's being held with a room full of guys

woo

@kalina Nah - I'm married, and have a daughter who I've already had to have that conversation with

I defeated the out of context starrist

12:04 PM

it's a 'meh'

@RoryAlsop yes but, all of the lesser mortals in the room will still have an eww reaction

And @AviD has a million kids

or thereabouts

@kalina "Out of Context Starrist" <-- odd name for a band

@RoryAlsop maybe we should discuss birth control instead then

@RoryAlsop He had that many one night stands?

12:05 PM

@kalina hahahahahahahaha - don't trust it. Seriously. Did I not tell you I have kids.

@kalina ewwrection?

yukk.

@RoryAlsop double wrap, I don't care about your pleasure.

@kalina heh. that took me a couple moments.

inb4 TWSS

I'm going to go shopping, I have resisted my hunger long enough

@kalina yeah - you'd think, eh

12:06 PM

@AviD Old age.

I've been eating breakfast too frequently recently to go without breakfast all of a sudden

even though I used to only eat once a day

@kalina double wrapping is not enough. you need a layer of skhug in between.

Skhug or zhug (Yemeni Arabic: سحوق saḥawaq, Hebrew: סחוג‎ s'khug) is a Middle Eastern hot sauce. Originating in Yemeni cuisine and brought to Israel by Yemenite Jews, the condiment is now a staple of Israeli cuisine. Skhug is made from fresh hot peppers seasoned with coriander, garlic and various spices. Skhug adom (red skhug) is made with red peppers and skhug yarok (green skhug) from green peppers. Skhug chum (brown skhug) is skhug yarok with tomatoes. In Israel, skhug is sometimes referred to by the generic term kharif (Hebrew: חריף; lit. "spicy"). It is a popular condiment at Israeli falafel...

now THATS defense in depth.

now I feel compelled to eat something before my stomach starts eating me

@AviD today's favourite word!

@RoryAlsop damn my mouth is watering just thinking about it

4

damn spicy

12:07 PM

Sounds like a Glaswegian nickname for someone called Hugh, though

@RоryMcCune - another one for the star wall, I think ^ AviD's last comment

lol

@RoryAlsop done :)

Someone needs to make me a room owner.

I need the ability to pin things to the wall.

@RоryMcCune thankfully you cannot change the order of pins. That would have been worse.

@TerryChia what about @Simon's mom?

BOOM

I've now suggested that @AviD 's mouth watering is a TMI subject according to @kalina , but @AviD doesn't agree

12:09 PM

@AviD I'm not sure a single pin is enough to support her weight.

@RоryMcCune if you had reversed it, it would have been so much worse. And grosser.

@TerryChia nice

Oh - in getting more info on the conf you're talking at, I stumbled upon the best named conference ever:

@AviD as you say tho I can't alter the order... :(

user image

12:10 PM

@RoryAlsop nice!

\m/ Metal Theft \m/

I might steal that picture for a gig flyer

Callback Hell (noun) - “a term used by developers looking for a way to mask the fact they can’t structure their code properly”.

Tweeted by iamdevloper on February 3, 2015 at 10:27 AM

12:24 PM

I was in Callback Hell once. Then I made a promise. And suddenly I was returned!

@BarryCarlyon I take exception to that

@raz if you throw that exception to me I'll catch it!

...

@BarryCarlyon Finally someone gets it

\o/

12:27 PM

Steve Holt!

@raz ..... erm ..... wut?

I'm guessing there must be another Steve Holt - who isn't the security partner for UK for $BIGFIRM I used to work for

12:50 PM

Arrested Development

user image

1:03 PM

Image not Found

@LucasKauffman you're an image not found

SEGEMENTATION FAULT -11 CORE DUMPED

@AviD #channelingSimon

@AviD Your mom is an image not found.

@RoryAlsop you're a challengingSimon.

#hashtag

1:05 PM

@LucasKauffman I'm pretty sure it's difficult to not find @AviD's mom given her size.

2

@TerryChia that depends which zipcode you're in.

@BarryCarlyon that thing you just tripped over? That's the line. You just crossed it.

Yup, I apologize

hehe, not the worst we've heard.

nod

1:09 PM

@AviD That's rich coming from you.

@Arperum #wolo

@Simon Stop infecting musicians with yolo variations.

Not my fault for being such an inspiration for artists.

1:32 PM

If you needed to use 1000000000 as a z-index in a CSS file, you have done something wrong. — Bergi 16 hours ago

Quite honestly, if you use z-index quite often, you're a weird person.

@Simon Is it wrong if I have no idea what z-index does in CSS?

I remembered that Stack Exchange provides RSS for user answers. If you're looking for crypto reading, subscribe to Thomas Pornin's answers.

Tweeted by archwisp on February 3, 2015 at 1:34 PM

@TerryChia Not at all, unless you're doing something crazy, you absolutely never need it.

@TerryChia You can place elements in front of others if they are overlaced by means of a Z-index.

^

You know what the Z axis does, it's that concept.

1:37 PM

I don't think I have written CSS in almost a year.

@TerryChia That is indeed a crazy high number.

1:54 PM

You're high.

« first day (1510 days earlier) ← previous day next day → last day (3391 days later) »

Transcript for

Feb '153

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile