« first day (1588 days earlier)      last day (3303 days later) » 

4:03 AM
 
 
3 hours later…
7:19 AM
Morning!
 
7:36 AM
Now that was a sleep. I am all refreshed and ready to go and have been on my run already and today is starting so well and... huh, I'm already bored.
 
@Flyk go make some music!
go. go. go.
 
I'm not really in the mood
I have enough finished material to not make any more for a few months if I really wanted to not
but right now, I'm just not really interested
I think today is a TV day
 
@Flyk go watch community
 
community?
 
community, good slightly odd american comedy
 
7:42 AM
but is that as good as anything I have outstanding on my list?
actually my list appears to have closed
 
@Flyk i dunno, I don't watch a lot of TV so apart from Community, GoT and Doctor who I'm unlikely to be able to rank things..
 
where is tixati
 
@Flyk is that a P2P thing?
 
because I've got NCIS, NCIS LA, NCIS NO, Better call Saul, the whole of Andromeda
and a whole load of other stuff
that's like a month of TV back to back just there
@RоryMcCune torrent client
@RоryMcCune great, you include Doctor Who (a show I don't like), and Game of Thrones (a show I've never watched) in your list of good things -.-
now let's have a discussion about how wrong I am for not liking Doctor Who
that should resolve boredom for a bit
 
@Flyk yeah we may well not have similar tastes in TV, so you may be best to use stuff I recommend as "anti-recommendations"
@Flyk sorry not really a fanboy in that regard
 
7:47 AM
Community? I need to check if I have this
 
ya know I think the tigger is avoiding the room at the moment..
 
why would you think that?
he's likely just busy
 
@Flyk he's active on twitter and not here
 
@RоryMcCune not seen since Monday, so I guess he has other things to do.
I wanted to start discussing tag cleaning, but I guess I'll start that on my own
 
@M'vy things other than chatting the DMZ... heresy !
 
8:00 AM
(that someone manage to come and spam yesterday evening btw...)
well not so spammy by off-topic
 
oh, that's why @AviD is avoiding chat
 
Yah, well I don't think so, he's the one who suggested a new approach to the topic :)
 
he knows that the tag cleanup will be a nightmare
yes but then he asked me to take part and I said no, so he knows it will be a nightmare
:P
 
hmmm
 
8:16 AM
Anyone up to a CTF?
 
Gah. moronic client is moronic. PASSWORDS SHOULD NOT BE THE SAME AS USERNAMES BY DEFAULT. BAD CLIENT.
 
@Arperum my condolences...
 
@HamZa I love capture the flag, what game?
 
@HamZa THEY WANT ME TO IMPLEMENT A SYSTEM THAT ENTERS THE PASSWORD AUTOMATICALLY DURING USER CREATION WHEN THEY ENTER THE USERNAME.
 
@Arperum are you using autocad?
 
8:19 AM
@Flyk Nope, just mad.
 
@Flyk back in the day, we had a CTF team. Just checking out ctftime.org
 
@M'vy do you need me to delete those unwelcome posts in there?
 
@RoryAlsop Don't bother. There are not so many :)
I can pin important things anyway
(I think I can also move that to sandbox, but I feel that's not the thing to do :) )
 
@schroeder small type here "playloads" (not enough rep to change)
 
I mainly use the room to register ideas for the "project"
 
8:27 AM
@HamZa you could have just fixed the "couple ideas" sentence as well to get above the six character requirement
 
@Flyk I didn't find any other typos or sentences worth editing...
I miss my SO privileges here sometimes :P
 
@HamZa so "I think you are confusing a couple ideas." makes perfect sense?
 
@Flyk sounds ok to a non-native English speaker
 
When I read "R.A.T" I think:
 
@Flyk lol
 
8:40 AM
@Flyk I sort of want one of them, as I like the look, but they feel terrible to my ancient hands :-)
Mine is very like no. 3 on this list: geeknaut.com/gaming-mouse-05192493.html
 
@RoryAlsop whereas I'm not really that fond of the "broken" design but they resize nicely to fit my small hands while providing the functionality of something more serious than those stupid little pocket mice that you can get
 
but not quite
 
the hardest part for me was learning to mouse with my right hand
but I've had a decade or so of practice with that now
 
@Flyk sinister opsec fail?
:-)
@M'vy I can give him a quick hint
 
in The Bridge, Jul 9 '13 at 9:18, by kalina
I'm left handed, the windows buttons work better for me on the left
 
8:43 AM
@RoryAlsop As you wish Sir :)
 
or...
in The Bridge, Jul 9 '13 at 9:28, by kalina
@Blem gaming mice is a whole category of hurt for left handed people
 
@Flyk like I was going to read anything posted in the Bridge? ;-P
 
@RoryAlsop any help is welcome for the sake of helping community
 
well, you idle in the bridge
 
@Flyk yeah well, I do too. There's too many ppl in there
 
8:44 AM
that's basically like being a member of the bridge
you filthy heathens
 
@Flyk that's so I can see any extremely scurrilous nonsense that's posted, or laugh at some of the better worded questions
 
@Flyk \o/ another lefty
 
left handed people are the best
 
of course
 
we're the only people who think with the right mind
right handed people are an inferior mutation
 
8:45 AM
@Flyk Of my family, the two pilots are the two sinister ones. The rest of us were all dexter
 
like blue eyes
 
@Flyk that's a nice way to put it :P
 
@Flyk lol - I expected all my kids to be brown eyed, as the gene is dominant. But they all got blue eyes like their mum
 
psh
 
well, I say blue. Ranging across grey, blue, yellow and green, with silver in there as well
 
8:47 AM
green eyes ftw
 
@Flyk green eyes with red hair - that's pretty cool
but brown wins, obviously
 
psh red hair
the only time my hair has been red is through abuse
I mean hair dye
 
@Flyk MIne too
 
9:09 AM
@TerryChia what's that tool again you linked a few days/weeks ago written in python to review people's security awarenes
 
9:29 AM
@LucasKauffman I can't remember the name heh. Maybe look at my GitHub stars?
Else I'll get the name for you when I get home.
 
@Flyk heh. Wasnt avoiding. I was up in the north, giving a round of training classes... didnt have much time to be in chat.
THE TIGGER IN THE NOOOORTH!!
 
I'd make some sort of GoT pun but I don't have the energy
 
and @RоryMcCune I do twiter from my mobile, like in breaks... dont bother with the chat on mobile, SE hates WP.
@BarryCarlyon ha! I already did! booya!
 
@AviD SE chat hates iPhone too from what I can see
 
@RоryMcCune ala "dont hire a programmer with an iphone, if he wanted to solve hard problems he would have an android"
 
9:39 AM
immediately buys a 'droid
 
@Rhino me too. Well not "amuse", more "confound". Especially since I rage against it often.
 
@AviD lol
 
@AviD see, I knew you loved me too much to leave without there being a good reason for it
 
@Flyk oy! I dont live in a 3rd world country, and my premium is still cheaper than SF!
 
@AviD I only said that because I knew you'd take it as a joke
 
9:40 AM
@AviD that reminds me, found a website for your/ @TerryChia 's next startup hipsterlogogenerator.com
 
actually, yesterday, every country that wasn't hte one I was in was a third world country
Even Scotland, iirc
 
@Flyk oh I do. nowadays the U.S. is more of a 3rd world country than most.
@RоryMcCune heh, saw that
 
@AviD yeah great, Now I've that GoT music in mind :P
 
do do ddddddo do do ddddo do
 
@AviD BTW the more I see of S5 of GoT the clearer it is that they're heading away from the books
 
9:42 AM
@M'vy @BarryCarlyon see, if the Stark's logo was a tigger instead of a wolf, things would have gone differently.
 
there's several of the plot themes that just don't happen in the books
 
@RоryMcCune books or did you mean boobs?
 
@AviD you know nothing Jon Tigger
3
 
@AviD I'll stick with books :)
 
hehehe
 
9:47 AM
Hi everyone
 
IS IT????
 
@AviD unconfirmed
 
@RоryMcCune I thought everybody knew that season 5 wasn't related to the books?
 
@Flyk ... yet.
 
even I know that and I don't even watch GoT
 
9:49 AM
@Flyk don't think so, people thought they would stay relatively close, maybe cutting bits out but overall the same. instead it's pretty different
 
Is it r8 place to have some discussion on Buffer Overflows....am I in r8 place
 
So when I google "Game of Thrones season 5 not related to the books"
 
and the first result in "Game of Thrones season 5 is deviating from the books"
 
S5 is completely off on one. But George is still over seeing/exec. producing.
 
9:49 AM
@RоryMcCune yeah, but you dont know that they're not just changing the order with the books that arent written yet.
 
...I wonder
 
@AviD
 
@user10012 the topic is in the right place, the leetspeek isnt ;-)
 
@user10012 you need to spell "right" correctly
 
@TerryChia got it, it's AVA
 
9:50 AM
failure to comply will result in pain, suffering, and an overall bad experience
 
@Flyk ... for us
 
@AviD yeah I do, they have characters doing things they did not do. it's not an order thing
 
1 like for @Flyk
 
@RоryMcCune maybe theyre doing things that they WILL do in the next book
 
@Flyk so yeah I obv. don't hang around enough Showbiz gossip sites
 
9:51 AM
@user10012 suckup
 
@AviD thanks .....
 
@RоryMcCune waddaya mean? Youre here all the time! ;-)
 
In before George kills off a Season 5 main character in the next book…
 
FIVE DOT ELLIPSIS?
 
@AviD ... no they can't it's specific events with different people trust me on this I've read the books I've seen the first 2 episodes
@AviD we do showbiz here?
@AviD well apart from music stars like @RoryAlsop and @Flyk
 
9:52 AM
@RоryMcCune ah ah, ninja modedit
 
@AviD i am learning buffer overflows using shellcode...i want to know how to figure out the address on shellcode
 
@RоryMcCune But we're polar opposites: my band is entirely unfamous, and @Flyk is so famous we can't know that she is Taylors Wift
@user10012 a lot of this comes down to trial and error
 
@RoryAlsop showbiz gossip is showbiz gossip :)
 
I remember the days of scripting a repetitive attack, increasing my NOPsled by one every time...
@RоryMcCune Sharlene Spiteri gives good hugs - is that good showbiz gossip
and Kylie smells delicious
:-)
 
@RoryAlsop indeed. I used to work with someone who went to school with her, said she couldn't sing back then :) also my first ever gig was Texas and I got to go to the backstage party :)
 
9:59 AM
@RoryAlsop especially now, with things like ASLR so common
 
@RoryAlsop this doesn't entirely surprise me. when did you get to find that out?
 
@RоryMcCune I don't even showbiz gossip
it would annoy me so much if people gossiped about me
 
@Flyk well given that you are in OpSec stealth mode it would be kind of hard for you to gossip without OpSec Fails
 
@RoryAlsop I want to figure out the address of the shellcode dynamically without hardcoding address, i am successfully able to execute by hardcoding the address of shellcode
 
@RоryMcCune you'd be surprised
I could, in fact, use it to my advantage
and master the art of misdirection
but no
 
10:02 AM
@Flyk well you could make up fake gossip about a part of the industry you're not in, indeed
 
@RоryMcCune wouldn't even need to be fake
and seriously, faking gossip?
that's disgusting
might as well bag up kittens and drown them, that's more acceptable behavior
which is why I don't work in journalizm
 
@RoryAlsop i was curious to know how morris worm could dynamically figure out the address without hardcoding any values
 
freedom of the press is basically carte blanche to write fiction about real people
 
@Flyk ...no doing bad things to kittens is the lowest of the low :)
 
that's not true
actually, in lieu of not being able to think of anything worse I'll just accept your statement
for now
 
10:08 AM
what is UP with you crazy brits lately??
 
@AviD well UKIP does tend to attract..... eclectic people
 
@AviD so glad I don't live there anymore
 
its not just UKIP though.... a lot of xenophobia going around this elections...
 
@AviD in hard times xenophobia flourishes
 
well yes, the EU allowed hundreds of thousands of people to move there and leech off the government, I'd expect the people who were born in the country and have paid their taxes and have had their pensions withdrawn from by the government because they can't finance are rather resentful of this
 
10:11 AM
this made me larf quite a bit: theguardian.com/commentisfree/2015/apr/20/…
 
unfortunately, politicians gave up power over the country so they could have power in the European community and as such lost sight of the people who elected them
 
> it might be invigorating to have a hung parliament where, before any law was passed, the government had to have an argument with a Scottish person.
> It seems that his main argument against immigrants is that his dad raised a befuddled fuckwit.
 
I would like SNP to take control of Britain
it would be hilarious
the English, being ruled by the Scottish
the bit I find funny is Ed whatshisface, a Polish Jew, flapping around like a half dead fish trying to discuss anti-immigration, forgetting his family are immigrants
anyway, not that I pay attention to politics
 
@AviD ah yes, that did give me a chuckle.
 
@AviD: Clearly the solution is to get immegrants to cycle in giant banks for power.
 
10:42 AM
@JourneymanGeek I'm not sure the banks would want to let the immigrants in the door.
perhaps the back door servants' entrance.
 
10:54 AM
@AviD Let's build massive solar panels farms!
 
@RоryMcCune @BarryCarlyon etc - Some very important data about GoT
note the excellent dothraki insults
and, holy crap - in 2013 there were 143 babies named Khaleesi
 
@AviD That is about par for the course from UKIP.
 
@AviD oh my
@AviD I would have understood babies named Daenerys... but this?
 
right?
it's more.... unique, I guess?
 
@AviD probably... but it's a title, not even a name.
 
11:06 AM
I bet in 2015 there will be twice that many named "Mhysa".
 
It's lile if I'd call my son 'padawan'
Well I mean I would probably refer him as such, but not choose this as a name :P
 
11:38 AM
@AviD There's a trend here in Québec for new parents, which means my generation. The trend is to give a shitty name to your child.
By shitty I mean a name nobody has ever heard of, just because it's cool. It's a hipster thing I assume.
 
shuddup.
 
Bonus points if you fit a "y" in there.
@AviD WHAT?
 
shuddupy.
@Simon MY kids have unique names.
 
@AviD Oh for fucks sake.
 
but not stupid names.
 
11:40 AM
Phew.
It's nothing like Malyk
RIGHT?
That wasn't a good example, I'm not good at inventing new names.
 
Mitchel Malyk (born October 7, 1995 in Calgary, Alberta) is a Canadian luger who has competed since 2011. He competed in the first ever Youth Olympics in Innsbruck, Austria, where he finished 5th. Malyk competed for Canada at the 2014 Winter Olympics in Sochi, Russia in the men's single competition in which he placed 26th. == References == == External links == Official website...
Not even new or anything.
 
Except that would be the person's first name.
 
@Simon lord no. Though I went to school with a Malik.
 
@Simon Maybe you're good at not inventing new names?
 
Hang on, a got a new one!
Petulifya
 
11:43 AM
oh hang on, my brother-in-law's last name is also malik.
 
It's for a little girl!
@AviD Not as cool, you need the "y" in there.
 
@Simon nice!
no idea how he spells it
 
@Simon That sort of sounds like someone mutilated a flowername.
 
@Arperum :D
 
Well. I just commented on a 6 year old answer on SO. That was... embarrasing.
but... people were wrong on the internet!!
 
11:44 AM
Does being wrong on the Internet have an expiration date?
 
no date, it is solved only by irrelevancy or retraction.
 
@Simon Yes. Tomorrow.
 
and irrelevancy doesnt count if it has historical relevance.
@Arperum 6 seconds after writing?
 
@Arperum Especially if tomorrow is the weekend, right?
 
You don't get it. The expiration date is always tomorrow.
 
11:47 AM
lololololol lads
I'm listening to deadmau5 and I'm wearing a deadmau5 t-shirt
I'm such a fucking loser.
2
 
@RоryMcCune did you ever hear of a "password audit" - based on the password hashes of course?
 
@Simon I'm listening to Blind Guardian, wearing a Blind Guardian sweater, don't see how wearing something from a band/artist you like turns you into a loser.
 
@Arperum I wanted some stars :(
 
@Simon Starwhore.
 
@Arperum he's a loser because the bands he likes is deadmaus.
 
11:50 AM
@AviD as a type of job, yeah
 
thats like barely even music
 
we see it not too infrequently
 
@RоryMcCune how in hell do they think they do that?
 
@AviD shadow copy take the NTDS files offline, crack :)
 
@RоryMcCune i.e. run brute force attacks on the hashes?
 
11:51 AM
@AviD You don't even know one of his tracks.
 
you used to have to do fancy stuff to inject into LSASS to get the files, but these days shadow copy is the way to go
 
@AviD There is a perfect French saying for this "Les goûts et les couleurs on ne discutent pas"
 
@AviD yeah we have a password cracking rig with GPUs so start with dictionary and then go up to brute-force
 
also fuck spelling in French.
 
@AviD You know nothing Jon the Ripper
 
11:52 AM
@AviD in every one I've ever done you get loads of hits just with dictonaries, on a decent size AD database
 
@RоryMcCune that's... hum.
 
@AviD it's pointless, users will always have c**p passwords :) but some management like it
 
@RоryMcCune yeah, pointless, thats the word I was looking for.
 
it does show up the odd useful fact like "the helpdesk are setting all initial passwords to "Password1""
so they can tell them not to do that
 
I guess I can see how it is even feasible, in some less than optimal scenarios. but still doubly pointless even.
 
11:54 AM
@RоryMcCune One could go in the open space and yell: Who has "qwerty" as a password. Might yield good results .
 
@AviD it also gets done by a lot of UK pentesters on internal pen tests
@M'vy heh yeah that'll work
 
I guess this could be useful for when users commonly use that type of top 10 (or top 500) passwords, AND if the hashes are not done properly (e.g. bcrypt).
 
@AviD also IIRC in the UK one of the gov. reqs mandates it as part of annual audits (although I may be mis-remembering that) I definitely used to have to do it on some of that type of jobs
 
hmm make that OR. not and
 
@AviD when I've seen it, it's always been Active Directory rather than application
which is easy to crack
 
11:55 AM
@RоryMcCune even and still
@RоryMcCune depends on config
 
especially when they leave LM hashes
which loads of companies do
 
@RоryMcCune yeah, that
 
NTLM hashes can still be cracked
but they're not super weak
 
well, then THAT is a much bigger issue than any passwords you find
(except maybe 123456 for a domain admin...)
anyway that is kinda my point.
 
and even if all you do is check for a couple of common password dictionaries you get some
 
11:56 AM
@AviD Why not 789012?
 
@RоryMcCune yeah, I just saw a statistic that 70% of users have passwords from the top 500 most common.
 
@AviD sounds plausible :)
 
so in cases like that there might be a purpose in it....
but then I would ask, WHY IN HELL ARE YOU EVEN ALLOWING THIS??
even if all of your users happen to be so educated that they WONT choose one of those passwords, doesnt mean you should let them
password policies are still super important, even if the typical corporate troubador password policies are immensely stupid.
 
@AviD That sounds wrong to me.
 
thats why its tricky to get right.
 
11:59 AM
Users of ANY system?
 
@Simon should be top 100?
 
Or users in a domain?
 
@AviD well yes, but most systems don't allow for banning lists of words easily. and upper lower numeric 8+ just leads to "Password1"
 
@Simon "... given their own choice"
 
@AviD the real answer is 2FA FTW
 

« first day (1588 days earlier)      last day (3303 days later) »