The DMZ - 2015-03-03 (page 2 of 3)

« first day (1538 days earlier) ← previous day next day → last day (3354 days later) »

1:05 PM

4

A: SCP - Is a checksum required?

scp does not guarantee file integrity, so a checksum comparison between source and destination would be wise. You mention your needs are simple, but rsync does not necessarily add complexity and offers significantly more features that will make you feel more comfortable that your synced data is ...

Like this ?

Lucas 'Paul' Kauffman

@AviD you're going to write a blogpost about Agile and SDL?

@M'vy I saw that one, but other articles I've found say that it gets file integrity through SSH. Which doesn't sit right with me.

Sure the SSH messages are checked, but what if more or less of the file was sent?

SSH wouldn't know if the file is broken right?

Well packets integrity are checked with SSH

So if the packet formation is correct, you get what was sent

The room title has an error in it

It doesn't make sense, just like the room contents

@Flyk the title or the subject? The latter I take full responsibilities for any errors, the former, not so much

1:12 PM

@M'vy Right, but that doesn't guarantee that the file is the same.

@raz it guarantees what it says. Sent packet = Received packet.

"A Chat room where <what?> take a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios whilst complying with all relevant HR policies"

should that be "we"?

I don't thing there is something that says: these packets = this file.

should that be "you"?

should that be "they"?

@Flyk yes - I did point out a correction the other day. I suppose I should have edited it in

1:14 PM

Yes, you should

being as you're able to do so

@Flyk it's a blue-sky kind of concept where the meaning of the room can only be interpreted by you

sounds like a good idea, spotting problems and then fixing them

rather than just pointing at them

Feb 26 at 14:39, by Rory Alsop

A Chat room where one takes a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios whilst complying with all relevant HR policies

@M'vy Right, I you're saying what I'm saying in a different way :)

yeah that was it

1:15 PM

@RoryAlsop if you're going to be like that, shouldn't it be "where one can"

"in which we"

-where

@raz as you I am.

why are we debating my bulls**t made up tag-line from a grammatical perspective...

@RоryMcCune I think @RoryAlsop had suggested an even more corp-y amendment.

@RоryMcCune Because it's important for our corporate image that we get grammar correct.

1:16 PM

A rory room in which rories take a 30,000rory view of Rory, IoR, and RoryOps security to create a new rory of win-win rory whilst complying with all relevant rory policies

@Lucas'Paul'Kauffman what?

@RoryAlsop you should edit it to put "Rory" instead

or Rories

@RоryMcCune If I were you I'd just make it more grammatically incorrect.

Gratuitous grammatically incorrectedness!

@RоryMcCune because being a nit picking asshole is fun

1

Q: I'm getting thousands of JS button clicks per second on my site. What could be doing that and why?

I just set up a front end event tracking system using Segment.com and I found out that there are thousands of button clicks from one IP with a ~2 millisecond difference. These are not HTTP requests, because events are only sent via JavaScript when the button is clicked. There's also an Apple Web...

malware javascript ddos

wut?

1:22 PM

@Ohnana Not for the poor guy picking nits out of assholes.

@Ohnana aaand there's the new room tag-line :o

does this guy just really misunderstand the web?

> These are not HTTP requests, because events are only sent via JavaScript when the button is clicked.

10/10, would read again.

@RоryMcCune grammar is more important than spelling

@Flyk punctuation is even more important.

1:23 PM

@AviD POB

@M'vy how is that opinion based?

then again I have no idea what he thinks he's asking.

Well because we can't really say what does this?

whatever, this shall be closed anyway

do you actually understand what he is saying? Or is clarification needed.

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios whilst complying with all relevant HR policies [donuts] [double-entendre] [food] [libations] [rory] [security]

@AviD I do understand he does not understand what he thinks he understands.

1:24 PM

do you understand what you're saying? Or is lobotomization needed?

(sorry for the 3ple edit highlight btw)

you best be

room topic changed to The DMZ: I piss on your tagline. Your mother was a hamster and your father smelled of elderberries. [donuts] [double-entendre] [food] [libations] [rory] [security]

but elderberries smell and taste pretty good

@AviD Aaaah. Monthy Python.

1:28 PM

curious how many people I'm going to confuse into multiple refreshes with that one.

@AviD you should use [tag:---]

The Knights Who Say Ni demand a sacrifice!

For hype

4 mins ago, by Rоry McCune

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios whilst complying with all relevant HR policies [donuts] [double-entendre] [food] [libations] [rory] [security]

nope

nope

1:30 PM

Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni Ni

@AviD Was that an actual message from the chat system?

GLORIOUS

We shall say "Ni" again to you, if you do not appease us.

oh noes. I triggered the secret monty python chatbot.

2

2 mins ago, by AviD

curious how many people I'm going to confuse into multiple refreshes with that one.

We want... a shrubbery!

1:31 PM

@AviD Well, not me cause I am was pretty sure that it refreshes automtically

@M'vy eventually, if at all

@AviD so what you're saying is that as a mod you'd like me to change the room topic to that.. well ok but it does seem a touch off topic :op

@RоryMcCune heh. noooope nopenopenope

note that is 3 nopes, not "open"

Basically, @AviD forgot where he placed his balls at some point in the last year, and now he's too scared to actually do anything.

wut

1:34 PM

@RоryMcCune I see "your mother" in that sentence. That's on topic.

I hate the new room topic #bringbackoldtopic2k15

@Simon the one with the psychopaths? Yeah I liked that one too.

NO

though if we're gonna go with the corporate parody, its not nearly parodic enough.

greeeeeeeeeeat, Simon's here... as if the room wasn't being silly enough already

1:38 PM

all pls

"she should have just been silent and allow the rape" says rapist who is currently appealing his death sentence

ah, that's me done reading the news today

@Flyk "death sentence" -> way to let him off easy

@AviD the fact he's still alive at all

the fact he's allowed to appeal his death sentence without summarily having his face smashed in makes me feel sick

there are worse things than death

@Flyk If you read the news, it means that you like it when the humanity deceives you.

1:45 PM

@Flyk the legal system works slowly but it doesn't forget

@Ohnana this isn't true

I shouldn't read the news, I know, it always makes me feel hateful

@Flyk are you disagreeing with the "doesnt forget" or the "works"?

i dunno, people have been executed on death row after 20 yrs or so

@Ohnana Please. Offer enough money and those who are in charge of the system will forget.

@AviD both

money makes people forget

works is entirely subjective to whoever is controlling it at that point in time

after raping and murdering a woman, this man is still alive, and is allowed to talk

Lucas 'Paul' Kauffman

1:48 PM

@AviD There's a blog post on trello that says Agile/SDL on your conto

@Flyk he won't be very soon. i think the court has flat out denied the appeal

@Lucas'Paul'Kauffman @AviD is an Agile consultant now?

@Flyk and is complaining that these wimin keep puttin' up a fight. Rape is getting harder, there should be a law or sumtin

@TerryChia "now"?

@Ohnana he should have been publicly mutilated and then left to live his life in a hole in the ground

Lucas 'Paul' Kauffman

@TerryChia Agile, Scrum, angular.js, node.js, everything.js

1:50 PM

"A decent girl won't roam around at nine o'clock at night. A girl is far more responsible for rape than a boy," he said.

yes, must be the woman's fault

@Flyk solitude is too good for him

@Lucas'Paul'Kauffman Is there an avid.js?

@TerryChia Yes, it's a parental control framework.

@Simon +5 judgement

I'm thinking, Ramsey's tactics are sometimes appropriate.

1:51 PM

@Flyk Wat. Someone rip that idiots tongue out.

@Simon excuse me?

Can you guys not figure out that I'm joking?

For fucks sake.

@Simon No.

Lucas 'Paul' Kauffman

@TerryChia It's deprecated.

@Simon there are certain lines that are not funny to cross.

1:51 PM

avid.js - A bespoke Javascript framework designed to extract maximum profits from a client.

3

I am one of them.

you know if your mother was dying, nobody here would make a "your mom" joke until she was better. I don't see why you think joking about rape is funny.

@Simon /s tag is very very helpful

@Flyk Not sure why you're trying to apply rationality to a psychopath.

we can't hear you, we just see your words

Lucas 'Paul' Kauffman

1:52 PM

avid.cob

@TerryChia wut?

@TerryChia nono, from the clients mum.

actually change profits to value and that could be a popular framework.

I'm sorry, could not resist.

especially the bespoke/framework.

1:53 PM

@AviD STOP IT. STOP IT. STOP IT.

YOU'RE THE ONE WHO, ABOUT 3 WEEKS AGO, WAS CROSSING THE LINE EVERY TIME YOU WERE TYPING.

WHAT THE FUCK HAPPENED TO YOU?

@Simon THERE ARE CERTAIN LINES THAT I WILL NEVER CROSS

I never kill. It's like, my one rule.

I'LL CROSS YOUR MOM. SIDEWAYS.

c'm'on

Boom, goes the ban cannon.

Batman vs. The Penguin (with Patton Oswalt)

1:54 PM

@AviD Patton Oswalt is awesome.

y'all need some preperation H

@TerryChia yeah, his brothers too.

@AviD Hehe.

Batman Can't Stop Thinking About Sex

have you seen the whole series?

@AviD Of course.

2:00 PM

fantastic.

That and Troopers are my fave collegehumor series.

pete holmes is also fantastic.

I read that as "pee hole" and I thought you were finally back.

hahah

> There is a miscommunication here. I understand how technologies work. All I'm trying to say that this is not a simple bot or crawler that just loads pages. This is something that imitates browser behavior, and I just want to know what it could be.

hm let me think... a bot?

Lucas 'Paul' Kauffman

2:06 PM

user image

@Lucas'Paul'Kauffman yeah, he must have reached a point where he did not have enough money and he couldn't handle the exception, so his brain is shut off now.

Sorry - I gave up. I was going to wait for one more close vote, but couldn't handle the lack of understanding of browser/server/http/js behaviour

@RoryAlsop fair enough, I was giving too much benefit of doubt here.

@Lucas'Paul'Kauffman It took me 20 seconds to parse the first part

Technically this interpretation is wrong. Because life is an event based environment so the "out" state is a transitory phase that ends due to the action of other event triggered process like the sun going down. So unless her husband is build on a single task model with no preemption mechanism (which I doubt he his, because he made it so far and even married her).

So apart from my previous statement on the subject, or the borderline idea that he cannot return home; because there's no such instruction in the program, I'd say that we might eventually consider that he might be home with a lot of milk bottles.

(seriously there is a "message too long error" in SE chat?)

2:22 PM

@M'vy congratulations, you're actually nerdier than that joke.

@AviD damn me...

@M'vy yes there is

@M'vy although, based on this logic, it is possible that he will be out until he finishes his work, which he will never do if he is constantly buying milk.

surely the exception would make him exit the while loop, essentially putting him back at the start (home)

perhaps if he hits the store's milk-buying-limit, or exhausts his bank account and line of credit.

2:23 PM

remember it was his non-programmer wife that wrote the instructions

she didn't include any error handling

due to being a casual

seriously, @M'vy, if you're gonna geek out, at least make sure your event model is complete.

@Flyk "a normal".

@Flyk to me that can only refer to football hooligans...

@AviD :)

a casual

"She's not like us".

2:24 PM

@AviD I guess everyone has his own way of killing boring-ness

you're either pro, or casual

did you never play WoW?

there is no in between

@Flyk ah, is that like "amateur" in 'merkan?

casual is a friendly name for "everybody else"

you either go hard (you're a pro) or go home (you're a casual)

@Flyk isn't the correct phrasing a "filthy casual"

@Flyk I was going for the obnoxiousness of scorpion.

2:25 PM

user image

@RоryMcCune you can prefix it with filthy for additional dramatic effect

they're still casuals at the end of the day

2:39 PM

@raz LOL! Ok then, that's acceptable. :-)

user image

^one for @Flyk

even the response is accurate

"da fuck you trying to do making physical contact with me"

@RоryMcCune I want the response to change at some point

@Flyk yeah that's what I thought :op

maybe she grabs that pencil and stabs it through that intruding finger

2:50 PM

@RoryAlsop or burns the paper

wow, it's not just the bottom row keys that are dying on this keyboard. 2nd row now flaky too

time to get facilities to get me a new one

the K key on my nice keyboard is broken

the problem is not that it doesn't work

it's that every now and again it starts working and won't stop

@Flyk hahahahaa

@Flyk okkkkkkkkkkkkkkkkkkkkkkkkkkkkk

that'll just make you look like one of the kids. Don't they do that to mean 'okay'?

2:52 PM

@RоryMcCune exactly like that

it's all likkkkke hey lookkk I'm workkkking

@Flyk i have that problem with my ] key

it makes programming SO HARD

oh and \ doesn't work 8 times out of 10

but it's fine, because WASD still backlight

it's my own fault, electronics don't like drinking coffee

but they don't seem to mind vodka - this tells me something

saying that

there was this one time that I killed a boyfriend's PC for browsing porn by pouring 2 litres of coke into it

it took two litres because the first litre didn't do anything

straight into the PSU, while powered

@Ohnana From now on, arrays don't exist for you.

2:55 PM

I was furious that the first bottle had no effect

@Simon ikr? It's just like "lol let me close ALL your braces!"

was probably impatience

@Flyk holy crap that's whacko

it's not, he lied

so cut ties like an adult

2:57 PM

sure, I wasn't an adult at the time

so I cut ties like an angsty early teenager

@Flyk wow!

@Flyk :-)

@Ohnana Just use malloc, it's easier.

psh, collections for all the things

^

I was about to say that, you dunt.

LOLDUNT

That was supposed to be "donut".

@raz sorry i use programming languages that aren't older than me

3:00 PM

really? I would have never guessed

@Ohnana :O

C# is nearly as old as Lighty

@raz seriously though, I want to at least learn some C. it's so unintelligible and it pisses me off

@Ohnana It was my first, so it's dear to my heart. It all makes sense to me.

@Ohnana C (and some that came before it) make sense to me. Java ... not so much

3:04 PM

C is for cookie, that's good enough for me.

COBOL - perfect language: you read it just like English

Fortran - still easy

Pascal and Comal - very easy to read

AS400 - you'll try to kill yourself

@RoryAlsop i'm better at java than C++ and C. it was the first language I learned

OS/400 is okay

it at least all makes sense, even if functions/accounts etc have silly names

Java was awesome for learning programming concepts. Without having to worry so much about segfaults, and crazy C++ syntax.

3:05 PM

@Ohnana I loved Forth - brilliant language

"Son, your "if" statement has to be on this column otherwise, fuck you, I'm not compiling".

@Ohnana You want to understand C, you need to learn about computer architecture first, kinda :)

@raz segfaults are a teaching aid

@Simon seems reasonable

@M'vy Yeah - I learned 6800 and 68000 assembler way before any higher level language

@RoryAlsop They are, but when you only have so much time it's easy to teach with Java. My algorithms class was Java, but we used a C++ textbook.

@RoryAlsop that will surely help :P

3:06 PM

@raz java is so incomprehensible to me in many areas. It just seems to do things that have no logical reason

@M'vy i know. I'm taking a computer arch class next semester

It was sad we actually wrote our compression algorithms in C. The teacher asked if anyone had never written in C, and a CS major raised their hand.

@RoryAlsop discuss.joelonsoftware.com/default.asp?joel.3.219431.12&; will tell you what you need to know about Java

@RoryAlsop It's just like any other language. Start to program in it, and you start to get the feel for it.

Leave Java alone, it's fun.

3:07 PM

Just remember when you want to put a nail in a wall what you really want is the schematic for a hammer factory, not a hammer

5

I still prefer C, but I enjoy writing Java for Android development.

@Ohnana C pointers are hell of a mess if you don't understand the memory organisation, and how programs load in memory.

@RоryMcCune ahahahaha

@M'vy You don't have to understand how programs are loaded into memory as much as just understand how pointers relate to memory.

pointers do wat

@Simon turn down IIRC

3:10 PM

@Simon point at things

@Simon Pointers access virtual memory addresses, that are mapped to real memory.

POINT DOWN 4 WAT

@raz Depends if you're using far pointers and/or compiling dynamic libs :)

@raz vurtial and r4al mamamory?!?

oh, Simon is being Simon-like

3:11 PM

@raz I admit that it's probably not the first problem you'll run into.

@Simon Yeah with 4realz segfaultz!

SEGWAYS?!?

@Flyk to be fair I did set him off down that line with an allusion to an EDM track

@M'vy And it also won't be the last

@RоryMcCune And a fucking shitty one, QQ.

If I were a cool kid, it'd be my favorite track.

3:12 PM

@Simon You know it doesn't get much more stereotypical than seeing a tourist group of asians riding segways with gigantic cameras around their necks.

@Simon all the cool kids like DJ Snake

But it happens... every year.

pointers that point at arrays of pointers

@raz lololololol

@RоryMcCune Of course!

fucking CS course had us do dereferencing exercises

3:13 PM

@Ohnana That's the only way you'll learn!

@Simon which is why it's a touch amusing that @Flyk hasn't heard of him, I think she must be getting old

"okay kids how many asterisks does this line of code need?!"

@Ohnana Tell the teacher that you dereference his/her mom.

STFU and write your code like a fucking intelligent person. problem solved

@RоryMcCune I think she's living at the bottom of the sea with @DavidFreitag.

3:14 PM

@Simon could be could be, but it's bad when you need to be schooled on popular dance tracks by a 41 year old geek who lives in the middle of nowhere !

@RоryMcCune lulz

@Simon it'd be like a black guy getting schooled on rap music by the two whitest chicks in america

Turk Gets Schooled on Rap

^ (CC @AviD )

Maybe I just hate the mainstream ripping off dance music and calling it hiphop

@M'vy The Ollydbg question: Is downloading patched software from shady websites insecure?!

@RоryMcCune Scrubs... what a fantastic 4.5 seasons they had.

@raz yeah, I was thinking of editing that to make it a question about debuggers

In that PoV it stands as a valid question

3:17 PM

@raz all 8 weren't bad, although yeah it wasn't all perfect either

@M'vy yeah. If I could +1 your edit I would.

@raz your kindness is appreciated all the same

@RоryMcCune There's just a distinct cut where it went downhill. Not too long after the Wizard of Oz episode.

@raz I quite liked Season 8

but yeah there was a bad patch

@RоryMcCune I never got that far.

3:20 PM

@raz well if you do, just remember to stop at the end of season 8

0

Q: Potentially harmful links

On this answer on out meta, Hendrik said we should make malicious sites link not clickable and add a warning. I totally agree with that. So my question is multi-part: Do we have a canonical way of doing this (as an example, I codified the link in this question : Why is Ollydbg detected as tro...

discussion feature-request

@RоryMcCune Haha will do. Favorite Cox quote: "Hello God? My brilliance is becoming a bit of a burden.... get back to me."

3:54 PM

@RoryAlsop COBOL: you read it like English, but to understand it you must realize it really is Sumerian.

4:47 PM

sometimes I find it harder to name my track than to finish it

@Flyk You could name it using Diceware.

I have spent 3 hours looking for inspiration on what to call my wonderfully epic track

It only took 5 hours to get from basic concept to mixed down

I don't think it would be appropriate to leave it with its work in progress name

@Flyk - "on the â

That totally isn't what I typed, but actually I prefer it as a track name:-)

no my wip names are <color of the mood I'm in> <genre> <yyyymmdd> <revision>

in this instance it would be called "blue trance 20150227 f"

what inspired you to make the song?

4:53 PM

@Flyk just call it "Ode to Rories" :)

3

@Ohnana my inspiration rarely works like that

I know I need to continue making music otherwise I'm basically unemployed

@Flyk or "truckers delight"

A lot of the time I'm just fucking about because I have to

normally if I'm truly inspired at the point I sit down, the project doesn't get a wip name

it's just called whatever I want to call it

the purpose of wip names is so that I don't let naming the track get in the way of making the track

@Flyk Like "Trouble"?

@Flyk or "DMZ Down"

4:55 PM

what with me being a world class procrastinator

@Flyk or "TWSS"

can a DMZ even be down?

@RоryMcCune no

@Kisunminttu or blank space

@Flyk 'course , even Stack overflow have downtime

that was a moment of genius, that

this is a good article on the downsides of DVCSs' bitquabit.com/post/…

4:59 PM

since I don't know what one of those is, I don't need to care, right?

good

wtg you linked to the bottom of the article

0/10 git rm

such a troll

5:33 PM

feistyduck.com/library/openssl-cookbook <-- Free OpenSSL cookbook

@Ohnana ahh I must've clicked that link then scrolled from there

@Flyk me ... a troll, I'm hurt!

5:50 PM

Say what you will, but this is a nice bridge.

@RоryMcCune And a free Apache Security book! And free ModSecurity Handbook. And Ivan's a good writer too. I've really enjoyed Bulletproof SSL (not free.)

@JeffFerland Of the civilly engineered type, or the musical type?

Or the job type, for that matter?

I suppose all of the above could presently apply.

I decided to go play in the 1099 world for a while

@JeffFerland Nice, hope you landed some fun projects.

« first day (1538 days earlier) ← previous day next day → last day (3354 days later) »

Transcript for

Mar '153

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile