« first day (1586 days earlier)      last day (3305 days later) » 
01:00 - 15:0015:00 - 22:00

1:50 AM
Did any of you lads see this: anonabox.com
Seems like a cool device for the lazy ones.
 
 
2 hours later…
4:01 AM
@Simon Did you also see this: wired.com/2015/04/anonabox-recall
 
 
4 hours later…
7:43 AM
 
Morning All
 
Morning.
 
hi
 
Adi
8:18 AM
I hope I don't screw this one up.
I have my Master's program admission interview in 2 hours. This is the only 100% security Master's program in Finland.
 
good luck!
just remember, keep it 100% in 1337 5p33k , it's all about pwnin' n00bs and 0wnz3r1z1ng things
 
@Adi Good luck!
 
Adi
Thanks
It's gonna be slightly tough arguing the case for being accepted in a Master's program without having a Bachelor's degree. Let's see.
Well, probably a bit more than slightly
 
@Adi well you'd think you wouldn't have got as far as the interview if that were a complete blocker :) so there should be a case to make
whilst we joke about rep. a bit, I'd have thought 31k rep on sec.se would count for something
 
Adi
@RоryMcCune :D
I have included at least 2 lines about Sec.SE in my cover letter
 
8:31 AM
well you have 322 answers on the largest (AFAIK) security Q&A site on the Internet
if nothing else it shows far more interest in the topic that I reckon they'd get from a lot of people
 
Adi
I've highlighted the research (and knowledge) required for at least half of the answers
 
cool, should be a selling point. even at masters levels I bet they get a lot of people who just think InfoSec is a good career and aren't actually interested in the field
so showing that you are, should be a bonus (you'd think!)
 
Adi
Indeed
 
Let's just hope the recruiter has less rep than you :)
Well or more. Idk.
he could be frustrated :P
 
Adi
Well, given than there are only 10 users with more rep than me here..
and none of them is in Finland
 
8:37 AM
true.
 
@M'vy That's a pretty small list of options.
 
@Arperum Yeah I'm feeling tautological today
 
@Adi To be fair, the bear is just in the list twice, so there are actually only 9 people with more rep than you.
 
Adi
Oh, true
I need to start actively write answers again.
I'm trying to get through something called "discretionary admission". There were few cases where universities wave some eligibility conditions when the applicant can demonstrate exceptional knowledge and skills.
While my skills and knowledge are far from exceptional, I still think it won't be hard to stand out amongst the applicants.
 
@Adi Yeah, there are usually two things that can be done: accept someone in a course without having all the prerequisite, or you can probably also go for validation of knowledge as well (maybe not for a master degree?)
 
Adi
8:44 AM
Let's see. Results should be announced around mid June (latest, 1st of July).
 
@Adi yeah cause after that they are on vacations :P
 
Adi
@M'vy Actually, vacations around here start in June
 
Well some of them are I guess. Some are more serious :P
 
Adi
Oh man, you can see it very clear in the financial reports of most companies. June and July see a scary dip
 
@Adi well I guess everyone loves the sunny days
Can't blame them for this :P
 
Adi
8:50 AM
@M'vy Indeed
 
@Adi Work experience in the field goes a long way towards admission onto a Masters course, in my experience.
 
Adi
@Tinned_Tuna Jepp. I'm counting on that
 
@Arperum & @Tinned_Tuna ^
 
@M'vy Heh heh, how'd you know what would appeal to my sensibilities? ARE YOU THE TSA?!
 
@M'vy That's exactly the reasoning that is being used. It's horrible.
 
8:58 AM
@Tinned_Tuna no, but we already talked about the French law on Thursday, just following up
 
@M'vy oh yea... Sorry, I have a terrible memory for what I've discussed with who.
 
@Tinned_Tuna unless you're referring to the colonoscopy part, in that case please receive my condolences.
 
I don't think your condolences are necessary in this case.
 
> Condolences are an expression of sympathy to someone who is experiencing pain arising from death, deep mental anguish, or misfortune.
@Tinned_Tuna good for you then :P
Anyway that word is funny, as it's generally so often used for deaths of ppl rather than a more generic case of empathising with pain.
If anyone reads French and want to lose some time reading about the French law, there's a transcript of the debates here assemblee-nationale.fr/14/cri/2014-2015/20150217.asp#P517033
 
 
2 hours later…
11:31 AM
@schroeder Hahaha, that was kind of expected :p
 
Adi
11:52 AM
The interview went very well. Half the time we were joking laughing about InfoSec anecdotes. Both interviewers liked me a lot.
One of them said "When you start on your first day in August you'll meet other..." then the other interviewer interrupted and said "well, he's not accepted yet"
 
@Adi yay, that's always a positive sign :)
@Adi so is this a masters you do in addition to work?
 
Adi
The other one said "I cannot see any reason why we shouldn't accept him"
 
@Adi You've been changing jobs quite a bit in the past year, no?
 
Adi
@RоryMcCune Jepp! Another reason why I'm very interested in this program in particular. The schedule is very friendly for someone who is working.
 
@Adi yeah that'll keep you out of trouble for sure! and I may get past you on the leaderboard :op
 
Adi
11:56 AM
@Simon In the last 3 years, I've held 2 positions. One of them I started in February.
@Simon This interview is regarding a Master's degree program.
 
@Adi Oh, nice!
 
Adi
@RоryMcCune Indeed.
It's nice in Finland (and I think other countries) we have those work-friendly degrees. They're different from evening studies, but a similar idea. The contact lessons are in the weekends.
 
@Adi yeah it is good to see that those things can mix easily
 
12:36 PM
Nice. Fingers crossed for you @Adi
 
hello, what do you call it when any owner/creator of a system is unable to access the data of a client without the password?
the client's data will be files saved on S3
 
Adi
Häää! Mitä helvettiä sä puhut?!
@Keval What do you want? You're making no sense.
 
I want the term which i need to search for
for example
 
12:52 PM
@Keval privacy?
 
I have created a system which allows user to upload and download files
and even though I created the system, i shouldn't be able to get into user's files without the password they set
 
Confidentiality?
 
@Keval So, the data is encrypted?
 
Adi
@Keval First of all, there's no such system.
Unless the data is fully encrypted 100% locally using a software that the user has 100% control over
 
alright, but I need guidance on how to start with this
 
Adi
12:54 PM
and then the encrypted data is uploaded to your service using your software
 
@Keval try "zero knowledge file storage"
 
yes, that is what I could think, but right now, my application is restricted to browser
aye
 
@Keval examples would be things like spideroak
 
Adi
@RоryMcCune That's 95% what @Keval is looking for
The issue is that they still can see the user files
 
@Adi well if they backdoor the app. they can. but absent that if they have a per-user container and all encrypt/decrypt is done client-side they shouldn't be able to see anything meaningful...
 
Adi
12:58 PM
@RоryMcCune Given that it's not open source (no ability to inspect and compile your own), it should be assumed that they can.
Remember that service for password storage?
100% secure and nobody can access your accounts
except when you die.. they magically can access them
 
lulz
 
@Adi sure, you still place reliance on software vendor. They can do various things to enhance the trust you place in them (3rd party code review, attestation, escrow, deterministic builds etc)
 
Adi
38
Q: Client-side encryption, but cloud service can still decrypt data in the event of a death? Is this possible?

MalloryI've been worried about this password manager, PasswordBox that seems to be gathering quite a bit of steam lately. They seem to have raised VC funding and are offering a free password management and storage tool. Their team does not seem to have extensive crypto experience. What really worries ...

> PasswordBox servers will NEVER see your decrypted data
>
> PasswordBox never sees or stores your Master Password, so we can never gain access to your data
Yet they still magically decrypt your shit when you die
and, Jesus, what the fuck with the example they have?
"Mom passes away"
Can't they say "User passes away"?
 
Because people love drama.
 
@Adi no, that wouldn't be emotive enough.
@Adi gotta get the emotional angle in there.
 
Adi
1:06 PM
Oh wow.. seems like McAfee has bought that service
 
@Adi Based on this they can also decrypt your stuff based on stuff on their server wherever you are, since you can access your stuff from "anywhere".
 
alright, so I think I will need to add up something that will run on client's side. maybe a chrome extension
 
Or am I being ignorant and/or stupid (or just lack stupid amounts of knowledge)
 
Then privacy passes away, government inherits Mom's password and executes Mom's worst nightmares.
 
Adi
@Arperum You're correct. Their description is misleading at best
 
1:12 PM
thank you very much peeps. see you around.
 
I know that my knowledge of encryption and the like has serious gaps, so if even I can point you at a flaw, it's bad.
 
cya
 
@Arperum Well, since they have your password...
 
Adi
Oh, guys, we've been misjudging them
They fixed the chart in the latest version
Instead of "mom passes away", now it's "Mom MOTHERFUCKING DIES!"
 
And seriously, what the fuck? They're trying to solve a problem that doesn't seem to exist to me. Why would you need her passwords?
 
Adi
1:19 PM
@Simon Read the real cases they're using passwordbox.com/legacylocker
> Gaming journalist and blogger died after transplant operation
 
What a bunch of clowns.
 
Adi
> Published author and blogger died in sleep
@Simon To be honest, I see the problem they're trying to solve. When you die, what do you want to happen to your Facebook, GMail, StackExchange accounts?
 
@Adi To be inactive for the eternity.
But yes I guess someone would want a loved one to take care of those accounts to do one last thing or whatever.
 
Adi
@Simon Then you might not have an issue. For me, I'd rather a message displayed on my account for a few months informing about my death and then the accounts to be deactivated.
 
Yeah, true.
This reminds me of people faking their own death on video game forums, that was pathetic.
"I am X's brother, he has passed away bla bla bla"
 
Adi
1:25 PM
If I hadn't introduced Kisu to The DMZ, there would never be a way for you guys to know about my death when it happens.
 
Unless it was spectacular enough to get into the news
 
Adi
Not very long time ago, I visited a war zone and I could have easily been killed.. then poof. I wouldn't have even been a number
My point is, we all have people in our lives who aren't exactly in our lives
but they still, to some extent, care about us
 
@Adi you're thinking of @Flyk aren't you :op
 
Adi
@RоryMcCune To be honeset, I was thinking of @Simon
 
but on a more serious note indeed, what happens to online accounts of people who've died is an odd one!
 
Adi
1:28 PM
I mean, honestly, if he dies, we'd have no way of knowing
 
@Adi aaaawwww
 
Adi
then we'd just think he has stuff happening in his life
 
Honestly, I don't think it'd change much if you would know or not.
 
@Simon sure it would, I would at least go eat an "in memorium" donut!
 
@RоryMcCune Tehehe.
 
1:29 PM
I remember reading some article about what problems the digital legacy of one guys caused for his widow. Don't know where I got a link to it though.
 
Now I don't have to worry if someone steals my potatoes: they're hashed and salted. http://t.co/BMNxRK7c0H
 
Adi
There are a few ex-regulars who just disappeared. Some of them haven't been "seen" for ages.
 
Can we turn Thomas account into a museum when he passes away ?
 
Am I being too critic or most of the time, suggested edits are just bad or they just end up messing up something while fixing others?
 
Adi
@Simon Is Kaliana making edits again?
 
1:43 PM
@Adi lololololol
I've seen many people do this actually.
 
Adi
Killana sockpuppets
 
Silly Kalinuh
 
I notice you two are carefully avoiding at pinging :op
but you failed to remember the custom notifyer she has running on her PC
 
this is why we refer to her by random strings ;p
@Simon critical
People who live in glass houses can grow tomatos.
 
Adi
I like tomatoes
 
1:57 PM
@JourneymanGeek It sounded weird to me too, cheers.
 
(sorry, dyslexic, and trying to spell correctly all the time. Also it bothers me sometimes when I know spelling is wrong, but I can't quite work out what it is)
 
@JourneymanGeek I don't mind being corrected at all, considering that English is not my main language I believe that it's quite important to be told when I'm wrong.
 
@Simon your main languages is #YOLO, right?
I can get away with that as the tigger is AFK today
woo
 
@RоryMcCune My main language is Awesome, my second is #yolo and third is English.
 
raz
@Adi What about yeast puppets!
 
2:11 PM
o0
 
I just found out there is actually an official rating for natural fences: thecrimepreventionwebsite.com/…
it's part of CISSP :P
 
2:29 PM
@Adi no, actually, I specifically stated I wasn't going to edit this site
 
@LucasKauffman You doing your CISSP? Commisserations :op
 
raz
I haven't quite decided if I'm gonna get my CISSP.
 
@raz it's useful to get past HR depts who string-match, beyond that I wouldn't really recommend it
I keep mine going 'cause I'm a consultant and it's useful tender fodder
 
You look like a fodder.
 
@Simon -a
 
2:35 PM
Oh, fodder is a real word?
 
oui
well, maybe
 
It must be a Brit invention, which means it doesn't exist.
 
@Simon like electricity?
 
Exactly like electricity.
 
anyway, back to other things o/
 
2:37 PM
@Flyk The british can invent laws of physics? Well how come they can't win a war by themselves :P
 
Does anybody have any experience with DRBD?
 
@RоryMcCune I always bring that up when I hear someone say things like "invent electricity"
 
Nevermind, I answered my question by using Google.
 
@Simon beyond "it's something to do with clustering"? no.
 
2:39 PM
IT'S LIKE IF I LEARNED HOW DA INTERWEBZ WORKED!
 
only an American would proudly proclaim "if only you could win a war by yourself!", not counting the fact that they got lucky when they fought for independance and they've basically been cheating through the over abuse of vastly superior firepower ever since
and that's before you consider how much of a secondary role they played in all of the justified wars
 
@Flyk You were supposed to be back at other things.
 
somebody was wrong on the internet
 
Oh.
 
Dude the Texas Instruments site is so freaking broken it's unusable
 
2:41 PM
you're not winning a war if everybody else is backing down because you've just decimated the ecosystem for a large portion of what was formerly Japan with radioactive awesome
 
@Flyk amusingly the yanks have the french to thank for winning that war
 
indeed
 
@Flyk Sheesh, I was only kidding.
 
and it's not like you could call iraq, afghanistan, etc "victories"
since all you achieved there was fucking up more shit
 
@Flyk Those weren't wars, they were diversions so nobody noticed all of the nepotism going on in government at the time.
 
2:45 PM
I'm already bored of this conversation and moved on to something less boring
 
jrg
> I think he knows what Rome is. Rome is the mob, conjure magic for them and they will be distracted. Take away their freedom and still they’ll roar. The beating heart of Rome is not the marble of the senate it’s the sand of the Colosseum. He will bring them death and they will love him for it.
The beating heart of America is not the marble of the senate, it's the sands of terrorist_stronghold. Bring them death and they will love you for it.
(relevant @DavidFreitag)
 
@jrg Though amusing, I am not sure the comparison really holds: Afghanistan / Iraq wars do not have that high an entertainment value.
All the talk about terrorism sure keeps the masses occupied, but not happy about it.
 
jrg
@ThomasPornin IDK. Many gladiators were terrorists/criminals - the fear factor of the monsters under the bed is strong.
it's not perfect, but seemed somewhat appropriate.
 
@jrg Ah, this is a misconception. Gladiators were professional entertainers, similar in many ways to today's tennis players. They are not to be confused with criminals condemned to be eaten by ill-tempered beasts in graphically amusing ways.
 
jrg
@ThomasPornin oh, ok. Guess I need to read more roman history.
 
2:57 PM
(Granted, a rather hardcore version of tennis.)
 
mmm, the beating hearts of your enemies, so tasty
 
people!
 
hello!
 
@Ohnana way too enthusiastic for a Monday :op
 
@Flyk I don't recommend it. It takes a fortnight or so of maturing for meat to really develop some taste.
 
2:59 PM
greettings
 
@ThomasPornin the symbolism makes it taste 10x better
 
@RоryMcCune i don't have class until 4
 
@Flyk The magic of marketing.
 
but i do have three cs assignments and a midterm this week
 
@ThomasPornin of*
 
2:59 PM
@Ohnana allright for some..
 
runs around celebrating
 
/sudoku
 
@Flyk Fixed.
 
I have been playing Grand Theft Auto 5
 
01:00 - 15:0015:00 - 22:00

« first day (1586 days earlier)      last day (3305 days later) »