The DMZ - 2015-04-19

« first day (1585 days earlier) ← previous day next day → last day (3304 days later) »

1:39 AM

@schroeder I AM THE LINE

2:21 AM

@Simon Yo momma so fat she's on both sides of the line.

2 hours later…

4:43 AM

@TerryChia My poor mom.

4 hours later…

8:14 AM

@Simon I think the lyric was "I walk the line"

Johnny Cash - I Walk the Line

8:28 AM

Anyone got any additional thoughts on this:

-1

Q: Is Security.SE only for professionals?

I recently asked a question that made it to "Hot Network Questions" and picked up a huge number of views, upvotes and favorites in a very short time. The moderators put it "On Hold", because the quality of the question indicated (accurately) that I am not a security professional (I am a humble p...

9:08 AM

WTF

1

Q: safe system32 folder or not

I have been (still am actually) under really serious hacker attacks now about 2 weeks and I have been cheking constantly all system files, incomening and outgoing traffic, changing rules and etc in order to keep the intruders out. But I don't know about this c:\windows\system32\ systemsettingsre...

operating-systems

@RoryAlsop I do have additional thoughts, but as the topic directly affects me (and coincidentally the OP is a buddy of mine) I think it best I refrain from taking direct action.

@RoryAlsop that said - I do think it is vaguely too broad as asked, BUT there is a solid question in there. i.e. "what are the risks of a government collecting all this biometric data". vis a vis privacy, malicious police, and all those other horrible things we're hearing from the backwards countries like USA. ;-)

9:33 AM

@CodesInChaos no idea. why didnt you vtc?

@AviD WTFing too hard. Fighting hackers hollywood style.

yeah babay! liek a ninjah!

4 hours later…

1:19 PM

@RoryAlsop I have added my thoughts.

@ThomasPornin ALL of them???

how many posts did that take?

@ThomasPornin @RoryAlsop is it really though? TOO broad, I mean?

yes, it is a broad question, but I dont feel that it is TOO broad. That is, there are known privacy risks, and abuse risks, etc that can and should be considered when a government enforces such a collection. And while the specific implementation could of course have substantial effect on these risks, that doesnt mean the risks are not real, and relevant.

and this is not a problem of asking for a "list of X", since we're talking about a risk analysis of a generic asset.

I have been under really serious hacker attacks for about 2 days now and I have been cheking constantly all system files

also it might actually be bugs crawling all over my brain

as a result of mind bending chemicals

@Rhino no, that's not true at all

This room only reaches 27% of it's potential for going too far before @AviD the fun hating man creature steps in and throws his toys around

Rhino turns up here with his 10000 chat messages acting like he owns the place, completely ignoring the tag list of the room he's talking about

/rolleyes

@Ohnana well, it could be both, it wasn't a statement meant to be taken that seriously

like everything else I post in here

@RoryAlsop yes, user needs to learn to read

1:40 PM

@Flyk I am the fun hating man?

@AviD yes

I expected you to say that the room only goes 27% too far by itself, and its my fault that we get the rest of the way to 100%

no

though I should appreciate that you stated that I am a man

not just A man, THE MAN

because even though you apply constant double standards, stopping us from doing the same things you then go and do, you have a habit of putting the room into timeout for absolutely no reason at all - thus, fun hating

THE FUN HATING MAN CREATURE

1:42 PM

@Flyk you kidding me? timeouts are like superfun

Not for the rest of us

also, its usually the other way around - first I do the things, then I tell y'all not to

now we're just getting pedantic

oo! more fun.

I should warn you that I arrived in chat before sleeping for today

oh, that scared you away

well fine then

1:50 PM

uhh no

The secret backstory of The Lord of the Rings: Gandalf is trying to get an achievement for taking the Ring to Mordor using only Hobbits.

Tweeted by Phastin on April 18, 2015 at 9:36 AM

2

Journeyman Geek

2:07 PM

lol

@AviD the core is "should he be afraid" - the answer is yes. Or the answer is no. Depending. Then "what are the risks" - and the answer to this is a long list of risks, including the ones you named up there. Which of those are relevant for that individual, linked to whether or not he should be afraid, is not straightforward.

I didn't vote to close, but I wouldn't vote to reopen, and I understand why it was closed

@RoryAlsop I agree, as it stands now - but I think the core is answerable, even though its not a single answer. The point of the q is: given a (...) government that is collecting bio data, what risks are relevant? I think that while this is a big q, it is not TOO broad.

but, as I said, I am refraining from taking direct action, since I am too close.

@AviD maybe I overreacted due to the oh so common "Mods did X" - I'll maybe have a look later and see if I can make a useful edit

@RoryAlsop oh yeah, I got annoyed about that too

Just now though - hot dogs! Trying to warm wife and daughters, who just finished a 10 mile training trek in the cold

2:22 PM

thought you told him off well

@RoryAlsop wow

@AviD there's me trying not to be snippy :-)

@RoryAlsop I hate when dem noobs come at us with that attitude

@AviD Well, Lexie's doing a 30 mile biathlon this summer to raise money for her friend's charity again, so she's well on the training already

COME AT ME BRO!

It's just a long distance for an 8 year old (well, she'll be 9 when she does it) so getting the training in early helps

2:27 PM

hell, its a long distance for a 30 year old.

Journeyman Geek

(or a 300 year old.)

@AviD Amusingly, various of my mates did a 10k in Edinburgh today and have all been complaining about how hard it was. I restrained myself :-)

Journeyman Geek

(hell, that's further than army route marches, or the green corridor)

@JourneymanGeek dunno what you mean by that... :-)

@JourneymanGeek well that depends

more than I did, but quite a bit less than most army marches here...

Journeyman Geek

2:30 PM

@AviD: I think it goes up to 24km for Basic.

I've done somewhat further for fun, but that's relaxed.

the longest I had in basic training was 18km (I think? maybe it was 16. or 12. Was a long time ago...), out of which I did maybe half (cuz I'm a lazy git with a golden tongue). But that is for just artillery - standard combat fighters go up to ~60K, and ofc special units much more.

@AviD 60k - with packs/weapons etc? That's hardcore

@RoryAlsop IF i remember correctly... thats like infantry and such.

@AviD The only one of those I ever heard of was the yomp from San Carlos to Port Stanley:

> After disembarking from ships at San Carlos on East Falkland, on 21 May 1982, Royal Marines and members of the Parachute Regiment yomped (and tabbed) with their equipment across the islands, covering 56 miles (90 km) in three days carrying 80-pound (36 kg) loads.

Royal Marine (Yomp) Falklands

I'm worn out just thinking of that

2:35 PM

@AviD we did it in the scouts - but not in 3 days. Think it was a week :-)

Journeyman Geek

lol

is a remf's remf.

I apologize if this isn't the proper room, but given md5(m || p1) where p1 is known but m is not, is it possible to find md5(m || p2) where p2 is anything of your choice?

@Blob Hi Blob - that is a question probably best asked on cryptography stack exchange. Actually - worth checking as it may already be there

Hm, thanks. I'll try my luck with a code-search engine.

google just ignores my //

2:50 PM

@Blob search on crypto first - they deal with the maths end of crypto, and over here we deal more with the implementation aspects

(I say we ... I'm not a cryptographer, but we have a collection of awesome ones :-)

3:18 PM

Found it. Apparently called a length extension attack.

3:46 PM

Evenin' All

4:41 PM

@TerryChia That explains a lot.

5:38 PM

@Blob Length extension attack is: given MD5(m) (m is unknown, but length of m is known), then one can compute MD5(m||p||r) where "p" is a fixed string that depends on the length of m, and r can be chosen arbitrarily.

In general, given MD5(m||p1) (unknown m), it is not feasible (or at least we don't know how) to compute MD5(m||p2), unless p1 is a prefix for p2.

« first day (1585 days earlier) ← previous day next day → last day (3304 days later) »

Transcript for

Apr '1519

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile