The DMZ

« first day (2142 days earlier) ← previous day next day → last day (2747 days later) »

11:47 AM

Q: How do hackers obtain the memory addresses of variables?

I've seen countless tutorials on hacking telling you that all you need to do is find the memory address of a variable and edit it, the problem is, they never explain how to do it. I'm not one for blackhat hacking and am only interested in making sure that my programs are as secure as possible but...

fucking hell

talk about blind leading the blind on this one

Terry Chia

@Polynomial o/

Polynomial

Terry Chia

You should come hang out on Slack. :P

Also, that answer was a direct copy paste of a comment. :P

Polynomial

Sigh.

-1

Q: Is it possible to crash the Internet?

Could a skilled hacker given the resources crash the internet itself? With more and more people joining the internet everyday, it would be becoming increasingly easier for hackers to just, overload the internet and crash it, or at least make it become extremely slow to the point it's unusable. I ...

attacks ddos

same shit again.

@TerryChia what's the slack url? lost it when I switched machines

Terry Chia

Hope you got that.

Polynomial

12:00 PM

nope

wasn't paying attention

Terry Chia

Blegh.

Polynomial

lol

gotcha

Hmm, can't even figure out how to sign into that.

I did have an account at one point but now Slack doesn't remember me and says my email address doesn't match any accounts.

CONFUSING

Terry Chia

Not sure how I can help you there. I can't see anything about your account info except for the handle.

Polynomial

goti t

I'm in

Terry Chia

Ah hah. :)

Nzall

12:32 PM

Q: What product should we treat passwords like, now that underwear and toothbrushes are not accurate anymore?

Traditionally, when people were asked how to treat their password, the general consensus was either as a toothbrush: don't share it with anyone; replace it regularly; or as your underwear: don't share it with anyone; replace it regularly; don't leave them around where people can see them. ...

passwords

really hope that the answer I gave to my own question is acceptable for this community

wasn't 100% sure, but Meta argued recently that self-censorship is not the correct response to internet filters

Polynomial

Don't take this the wrong way, but what are you smoking and where can I buy some?

Thomas Pornin

The "replace it regularly" is bad advice anyway (for passwords, not for toothbrushes)

AviD

and underwear

Polynomial

I'm not sure whether it's good advice for sex dolls either.

They're often pricey.

AviD

heh, hadnt read the question before my comment, it actually works anyway....

Nzall

12:43 PM

@Polynomial I'm not using drugs, it's just how I am normally. I got autism, it sometimes makes me act weird.

AviD

@Polynomial also, I wouldnt be surprised if @simon shared his with his mates.

sorry, "m8s"

Polynomial

@Nzall I was joking. But yes, that question is weird, and the self-answer is super weird. Autism-related or otherwise.

Nzall

@Polynomial Yeah, I am fully aware that it's weird. The reason I asked it is because I want to find a less weird comparison

But yeah, I know that the question comes across as weird, and that the self-answer is super weird, but the toothbrush/underwear soundbite is used regularly, and I was hoping we as a community could get something more accurate.

1 hour later…

Federico

2:13 PM

@Anders @SteveDL why did you rejected the edit? (http://security.stackexchange.com/review/suggested-edits/87617)
The link states "At this point we know this was a sophisticated, highly distributed attack involving 10s of millions of IP addresses", but the question misrepresents it saying "of devices". How is correcting this a bad edit?

Xander

2:35 PM

@Federico While I'm not either one of them, the edit was superfluous. While you're correct that it does make the question match the language in the press release, it doesn't materially improve or clarify the question, and so isn't worth accepting and bumping the question.

Federico

@Xander you can imagine that I generally disagree, while still seeing your point. I was more upset/surprised by the "deviates from the original intent of the post" than the "Changes are either completely superfluous" (for me correcting a mistake is not superfluous, but I can accept that different SEs have different approaches)

Anders

@Federico I picked the wrong reason - it should have been that it is to minor. Sorry about that. I don't think the clarification was worth bumping the question, and I stand by that. In general, one word changes will need to be of major importance for the meaning for me to approve.

Federico

@Anders I can accept that. thanks for explaining.

Anders

@Federico Thanks for asking and giving me a chanse to clarify! :-)

AviD

3:18 PM

geez, have you all gone canadian on us?

You cant all be so polite and tolerant here, this is the internet!

quick, lets talk politics.

Terry Chia

Shuddup @AviD

Anders

@AviD Off course, I will vote for Trump. (So you all will move up to Canada, eyh.)

AviD

Did you hear about the time that Mark Godwin himself, creator of "Godwin's Law", explicitly said, regarding certain current US presidential candidates, that Godwin's Law does not apply to literal nazis?

Good times. Oh wait, I mean "End times."

Anders

I remember hearing about a poll suggesting that 30% or so of Americans thought they would live to see The End of Times. Now apparently 40% are voting for it...

AviD

3:36 PM

"This country leads the world in only three categories: the number of incarcerated citizens per capita, the number of adults who believe angels are real, and defense spending - which is greater than the next 26 countries combined. 25 of whom are allies... "

Cripto

Hi all. Are there guidelines (OWASP, NIST, Sans...) in regards to protecting applications that depends on libraries or frameworks that have reached End of Life (EOL) with known and unpatched vulnerabilities?

It might take organizations, especially smaller ones, months (maybe years) to upgrade their systems. This might require increased development efforts, hirings... etc. As such the upgrade might be delayed.

I am looking for specific guidance to how to protect these applications in the interim.

Terry Chia

@Cripto Burn it with fire?

Cripto

@TerryChia: lol. I wish I could, but I need some sources that say that

Boss: @TerryChia told me to set it on fire...

/me i wish

Xander

4:08 PM

@Cripto So is the application unpatchable, or just the EoL library the application uses?

4 hours later…