The DMZ

@kalina erm you should probably let them know

kalina

I can't do that

I'm unable to have a technical discussion with non-technical people

JukEboX

7:17 PM

Shall we translate?

kalina

waste of effort

@kalina good?

@kalina I only do them if I want to level up quickly and need a blast of experience points :-)

7:33 PM

@RoryAlsop i actually like the radiant quests

building a community is hard work

@Ohnana Ah - yeah, those ones I got a little annoyed with. Like guys - you know how to harvest things, build a fence and a turret, and put in a water pump. Just do it while I'm away, right?

@RoryAlsop you can assign people t oharvest food

@Ohnana yeah, but I want them to sort it out amongst themselves

:-)

nope

doing settlement stuffs is actually really soothing. i've spent hours and hours just making my little communities

You're a little community.

7:40 PM

@Ohnana I play fallout a bit like I play minecraft. In minecraft I have some friends who build lovely things - I like to run around at night. In caves. With a sword. Wheeeeeee stabby stabby BOOM!

@RoryAlsop fair enough

minecraft is also another of my obsessions

@Ohnana I think I like doing that because it is totally opposite to my life, which is all about growing, mentoring, coaching, building communities etc

botania is the best freakin mod ever

@Ohnana we did run a major automation mod on our server for a while, but it was annoying so we went back to vanilla

buildcraft?

anyways botania is pretty magical flowers with armor that uses an energy source as durability

and a sash that allows you to run up a one block high cliff without jumping

and flowers that eat cake

7:46 PM

@Ohnana sounds cool. I forgot to mention, I often run around sans armour of any kind too. As fast as I can run. I focus entirely on swords and axes

tinker's construct?

@Ohnana you're a tinker's construct

@RоryMcCune :OOOOOOO

what oh yeah sorry, forgot the <simon> </simon> tag

@Ohnana may have been buildcraft - this was maybe 4 or 5 years ago

7:50 PM

@RoryAlsop no i'm recommending tinker's construct to you -- it's an overhaul of weapons crafting

you can make throwing knives and hammers and stuff

@Ohnana that sounds interesting

it is

the tools also don't break, you repair them with more material

A: Information needed to share with Penetration Tester?

8:36 PM

0

I'm guessing given that you've asked this question twice you're not provide the additional details, but a comments too short to explain the problem with your question, so here's some more information untill this one gets closed :) Your question is essentially unanswerable. The reason for this i...

it's late I feel snarky

a mod will likely close this

@RоryMcCune Downvoted, there's nothing about HIV in there.

@Simon I accept your downvotes with the equanimity provided to me by two whiskys :op

Naaah, I'd keep the whisky for myself.

mmm whisky

Here's an upvote, you owe me one whisky now.

8:39 PM

sure just pop over to Scotland and I can sort that

Deal.

Maybe in 43 years.

I currently have 14 whiskys in the house so there's plenty to choose from

Dayum.

I got quite a few at christmas that I'm not drinking quickly

they were better than usual stuff so no need to rush them

@RоryMcCune I'll see you soon!

8:41 PM

@schroeder \o/ you all sorted for coming over to the UK then?

@RоryMcCune YES!!

yay

i wanna drink booze with a dinosaur :(

@schroeder whereabouts in the country are you going to be based?

Tier 1 "Exceptional Talent" visa, and the final details on a job in London

I'm not announcing the employer until things are signed

8:43 PM

@schroeder nice. good plan, always wait till it's finalized

but I'm working in the City

well if you're over before the summer you'll need to come along to B-Sides London

@schroeder Stop trying to steal my whisky, man.

I'm planning to get down for that this year

@schroeder ahh that'll be interesting, although I don't envy you on the property price front!

@RоryMcCune I will be there!

8:45 PM

@RоryMcCune That's a nice answer. The answer on the duplicate is worth keeping too. How about merging the two questions and editing them to suit the answers? @schroeder

@Simon don't worry, it'll be a while before scotland runs light on whisky

@RоryMcCune they run lit on whisky now

@schroeder heh

I was told something about not having a "work/life" balance, but a "work/drink" balance

@Gilles hmmm - trying to find the merge button ....

@schroeder mod menu

8:47 PM

try it now - did it work?

@schroeder yes, thank you

@schroeder heh yeah london can be quite boozy, IIRC one of the conferences down there has a "Gin O'Clock" segment

edited and voted to reopen

@Gilles i have to say, that question is still terri-bad

@Ohnana why?

8:55 PM

@Gilles it's still a question we can't answer

we're not the pentesters, and even if we were, the answer would be "what do you actually want?"

@Ohnana “We're not the pentesters”: no, but we're pentesters (some of us, not me actually). We can tell him what pentesters expect.

@Ohnana “the answer would be "what do you actually want?"”: yes, but it isn't obvious!

Rory's answer explains to him exactly what he needs to know at this stage

it really isn't obvious. If I had a client that wanted the answers to those questions, I'd convene a meeting with their CIO and one of our senior managers and hash it out over the course of an hour

So we have an answer that's useful to the asker, covering a situation where there are plenty of people in the same position. That's exactly what Stack Exchange is about.

the format of the site and the amount of information you need is not suited for this question.

One aspet @RоryMcCune didn't cover is whether the asker is the sole order giver or he's doing his pentesting to show the report to a third party. If the latter, he needs to discuss requirements with that third party.

9:01 PM

@Gilles yeah I could riff on that but unfortunately almost every compliance requirement only goes as deep as "have a pen test" which is deeply unhelpful

@schroeder I'm there every month so will definitely get some beers/whisky/food in! COngrats!

@Gilles added a bit :)

A: What kind of information does a penetration tester require?

7

I'm guessing given that you've asked this question twice you're not able/planning to provide the additional details, but a comments too short to explain the problem with your question, so here's some more information untill this one gets closed :) Your question is essentially unanswerable. The ...

@RоryMcCune Good post

Also, why do you dislike the term pen testing? I hate it too, but that's because it sounds dumb.

@schroeder Congratulations, dude!

Rory McCune - Penetration Testing Must Die

@MarkBuffalo it doesn't mean anything. If you look at the wikipedia def it implies that it's a test which "emulates an attacker". Hardly any/no "pen tests" emulate real attackers as notably a) you can't break the law and b) most "real" attackers just use phishing and malware :)

So the industry just describes everything as a "pen test"

so it's meaningless

►

2

^I've been at this topic for a while now :)

@RоryMcCune Maaaan you look so young in that video

I didn't know YouTube was around in the 70's

9:15 PM

@DavidFreitag well that was only 5 years ago, so I would've been 37 then

@RоryMcCune You look like someone my age in that thumbnail

@RоryMcCune 37? You look like a punk teenager

I'm starting to think Scots have some Face of Dorian Gray thing going on

time runs slower in highlands

d:

@MarkBuffalo Nice hat bro

9:18 PM

@MarkBuffalo yeah it's the whisky that does it, it's not called the water of life for nothing :)

@DavidFreitag Thanks

@MarkBuffalo Sucks about that whole no mouth thing

@RоryMcCune dude, good points but you speak way too fast

@TildalWave yeah I've got a lot better at it since then, back then I talked waaaay too quickly

I learned when I started speaking to international audiences

now I always open with an impreciation to tell me to slow down if needed :)

@RоryMcCune now i want to go to one of your talks and heckle by yelling "SLOW DOWN" at random intervals

9:25 PM

@RоryMcCune too much club mate? :)

sugar rush...

@TildalWave nah I naturally speak quickly and this was about 2nd or 3rd talk I'd done so I was quite nervous

nature of pen testers I guess, you're trying to get in as much of information possible while others pause to take a breath LOL

DON'T SAY PEN TESTERS

that was quite deliberately provoking :P

PEN TESTING IS A DIRTY DIRTY THING

2

9:28 PM

I haven't had any complaints yet

Roro jr. is right tho

everything is sold by a pen test moniker nowadays and it's annoying

indeed . I read an interesting article the other day bemoaning this which came to the conclusion that it really needs customers to fix it

the guy who wrote it is a freelance tester and said that if he stopped using the term pen testing he lost business

'cause that's what people have been programmed to buy

Yep, that's why I'll use it

When the industry gets their terms updated, I'll go along with it

linkedin.com/pulse/…

@RоryMcCune My favorite type is white box

@MarkBuffalo so yeah I find black-box frustrating as you know that with the code you could find the source of the problems...

9:36 PM

The problem with black box is that it's far easier to do more damage to the client

sometimes.

@MarkBuffalo yeah I like white-box in a dedicated test environment better :)

Yeah, and it really helps to know exactly what potential problems there could be

@RоryMcCune black box is like testing the infinite monkey theorem with just the one monkey

:)

With black box testing, you could have far more problems than you realize, which aren't immediately obvious

and it's easier to miss things

@TildalWave heh

Iszi

9:42 PM

@RоryMcCune Good talk there. Think it's the first time I've actually seen/heard you. Love the accent.

well if you like scottish sounding security talks I actually did a play list for ones I'd done so I'd have them in one place :)

youtube.com/playlist?list=PLKDRii1YwXnKG5PiY9zx3g5dJ2zOTJ4Al