The DMZ

Xander

1:01 AM

@ScottPack Speak for yourself. I'm proud of our laziness and apathy.

Scott Pack

@Xander 25% voter turnout FTW

Xander

@ScottPack The lower the better!

Stack Exchange

4:09 AM

Later, at home: 'Dear diary: Still can't figure out what to write here ...'

Xander

4:33 AM

I don't understand that comic at all.

The first two panels are fine, but the third totally confuses me.

Lucas Kauffman

@RoryAlsop @RoryM NO!

Terry Chia

4:54 AM

@LucasKauffman Is that the result or your reaction?

Lucas Kauffman

@TerryChia the vote

Terry Chia

@LucasKauffman Ah. @Adnan must be disappointed.

At least our whisky supplies are secure.

Journeyman Geek

my strongly pro independance internet friend will probably be complaining about this for weeks ;p

Adnan

5:48 AM

Yaaay! I won 50 euros!

@RoryA Congrats

tylerl

6:05 AM

So does that mean the people who have been been campaigning to "free scotland" for several hundred years can pack it in and go home? It's not the oppressive english anymore; now not even scotland really wants independence.

Adnan

@tylerl Well, a bit less than half of the country wanted independence.

I don't think it's fair to say "not even Scotland wants independence"

tylerl

@Adnan overruled by their own majority

Adnan

Yes, the 'No' vote has won

and that's it. That's all this means

Terry Chia

@Adnan When you gonna change your profile picture? :P

Adnan

Hopefully, the nice people at Westminster will honour their word on giving Scotland new wider powers.

tylerl

6:08 AM

@Adnan nope. not going to happen. the vote is done, no need to give anything anymore.

Adnan

@TerryChia I'll be taking a pic in my kilt today. I'll use that one instead

tylerl

@Adnan please do

Adnan

@tylerl They promised the powers if Scotland votes 'No'

tylerl

@Adnan but now that the vote is over, what's the incentive to keep their promise?

England/Scotland have a long, long history of that sort of relationship.

Adnan

@tylerl I don't know. We'll see in the following months/years

Lucas Kauffman

6:21 AM

@tylerl It's more now about doing reforms than anything else

@tylerl Where's our Apps and Google glasses btw? /cc @TerryChia

tylerl

@LucasKauffman play.google.com/store/devices

Lucas Kauffman

@tylerl It's not there. I live in Europe.

@tylerl anyway I'll stop annoying you with the question :P

tylerl

@LucasKauffman Yeah, the EC won't allow anything interesting into the EU because they're afraid that someone might take pictures.

and that's "creepy"

Adnan

6:38 AM

@LucasKauffman Nice @tylerl can buy a few of them and then post them to us

Lucas Kauffman

maybe he gets a google discount?

Adnan

He probably does!

AviD

7:04 AM

@Xander not sure if you're being sarcastic, but yes - at such low turnout rates it should be a considered a vote of no confidence in the system.

i.e. scrap the whole thing and start over.

@Adnan I take it as "most people cant be bothered with all the work involved in creating a new government, which frankly shouldnt be all that important anyway"

sorry! that should be "can't be arsed"

2

Lighty

ahw, a pat on the back and a comforting pint to all the scots here that didn't get their way

AviD

@Thomas Gibson probably understands less than 10% of what he says. Seriously, try reading any of the articles he's written - and then try to understand it. I promise you, it's not your shortcomings that would prevent that, its that it simply has little to do with reality.

Terry Chia

@AviD He knows just enough to convince people not actually in the field that he's an expert. That's what makes him dangerous.

AviD

@TerryChia that doesnt take much... toss around a few buzzwords, make up some new techy-sounding terms, and just keep talking. It gets picked up.

hmm, ythink maybe he was one of CSI writers?

Terry Chia

@AviD Dunno, I never actually watched that show.

AviD

7:14 AM

yeah but cmon, there are a few wellknown classics.

►

should I go on?

Terry Chia

@AviD If it entertains you.

AviD

hehe. it does.

> ENHANCE!!

Lighty

NCIS <3

i alays watch that with my mom, on the couch, glass of tea, some crackers and cheese

AviD

ah oops, thats NCIS not CSI? Who knew?

Terry Chia

@AviD @Lighty apparently.

@Lighty That yo momma joke does not compute.

AviD

7:22 AM

@TerryChia neither does your mom.

CodesInChaos

7:43 AM

@TildalWave I never subscribed to a list. I use my own lists as alternative news streams since I try to keep my main stream low volume and high signal.

AviD

so, by putting me into this list, you're basically saying my signal is too weak? I should be insulted.

Lighty

@AviD get a longer atnenna then

AviD

theres pills for that.

Lighty

atleast they say so

stoopid keyboard

AviD

PEBKAC

Lighty

7:47 AM

gasundheid

Terry Chia

@AviD He may not get that.

AviD

Huh. Um, guys? I'm thinking he really doesnt know what that means.

Soap and pillow cases, boys. Get them ready.

Lighty

nononono

i get that

pelase dont rape my ears

AviD

what? no.

Lighty

isnt that something like, user is to blame? :x

AviD

7:49 AM

►

Lighty

has anyone here tried this tails thing?

tails.boum.org

AviD

@Lighty wants some tail.

Lighty

@AviD i prefer Tigger tails ;3

Adnan

The only thing that sucks for me about the whole referendum thing is that I won't be able to go to Scotland without visa.

Rory Alsop

@ScottPack embarrassing to every other vote in the UK ever :-)

So - how be ye lily-livered scurvy security knaves this fine morn?

(why are they always lily-livered? Why not poppy-pancreased)

Adnan

8:08 AM

@RoryAlsop Just finished making meself some tea in the scholary

(or however that's written)

AviD

oo, Is today that fine day on whence we all doth theatricalize and play as 17th century independent sick sailors?

CodesInChaos

@AviD I have a list called "Talk too much". Didn't put you on that one ;)

Rory Alsop

@AviD 17th century independent Cornish/Devon sailors

AviD

@CodesInChaos heh, thanks, I guess

@RoryAlsop yes yes, thats what I said.

Rory Alsop

@CodesInChaos hahahaha - oh, now I wonder which one I'm on... When following folks on twitter I first look at their posts-per-day average. If it's over 3 I generally don't follow

@Adnan scullery :-)

AviD

8:19 AM

@CodesInChaos yeah btw, when you put someone in a list, they get a notification....

Ionică Bizău

Hi!

I have a short question: how to get the ip where domain/subdomain points to?

CodesInChaos

@AviD I don't think they do if it's a private list.

AviD

@CodesInChaos was sec.se a private list?

CodesInChaos

no

AviD

ah

CodesInChaos

8:22 AM

@IonicăBizău simply ping it

Ionică Bizău

@CodesInChaos True, but when server is down it shows: ping: unknown host

CodesInChaos

I don't think so. It shows that if you're not connected to the internet and DNS doesn't work.

Rоry McCune

@RoryAlsop @scottpack yeah that's easily double what a lot of elections get turnout-wise due to our stupid first past the post system

Adnan

@IonicăBizău That message looks like you're not connected to the Internet

@IonicăBizău Personally, I prefer nslookup example.com

Rоry McCune

@Adnan you windows person you

Ionică Bizău

8:33 AM

Hmm.. I had the following scenario: a NodeJS server was not running and this error was appearing. When I started the server script, then ip appeared in ping output. (@CodesInChaos, @Adnan)

Terry Chia

@RоryMcCune nslookup is on *nix as well.

Rоry McCune

@TerryChia indeed it does but it's generally deprecated in favour of dig I'd say, so likely outcome is that @Adnan is a MS lover

Terry Chia

@RоryMcCune True. I personally prefer dnsenum.pl because when you have a hammer, just smash everything with it. :P

Ionică Bizău

I didn't know nslookup. It's great. Thanks! Works on Linux too. I'm on Ubuntu 14.04

dig is also good

Adnan

@RоryMcCune When I want to get more info, I use dig

but when I just want the IP, I always go for nslookup

-2

Q: HMAC- SHA 256- algorithm?

Can any one provide me a complete algorithm, how to do hash computation with a complete example.

hmac

> Could somebody also give me a lite kiss on my ass check?

> The left one, please.

Terry Chia

8:41 AM

@Adnan Go find @Kisu you perv.

Rоry McCune

@Adnan see for me that's slower... dig <host> <cr>works but with nslookup it's.. nslookup <cr> host <cr>

Terry Chia

@Adnan Did you get my tls tool working?

Lighty

i recieved a exercise from my teacher, and he wants me to write a report ona few languages (script, programming, libraries and framworks), and he told me i should ask you guys something too

did anyone here ever use AngularJS, if yes, for what?

i need to describe what it is and where you should use it for, but i never heard of it untill today

Terry Chia

@Lighty bit.ly/1plctaT

AviD

@TerryChia heehee, thanks, I was hoping

Lighty

8:48 AM

i know how to google, but my teacher was clear i should ask others ttoo, as in, more sources of opinions/experiences with it to orientate wider

Adnan

@TerryChia It worked, but I didn't bother with modifying it to accept client certs

So I opted for SSLScan

Terry Chia

@Adnan Aye. What was the use case for that? I am setting aside time this weekend to clean up the code so I may as well add more features to it while I'm at it.

Adnan

@TerryChia The target server requires client-cert. It didn't spit out any info without providing the cert

Terry Chia

@Adnan Ahh, right. That shouldn't be difficult. :)

Adnan

Honestly, I always assumed that the server would tell you the cipher suites it likes way before it asks for the cert

No?

Terry Chia

8:52 AM

@Adnan Hmm. Yeah that sounds weird actually.

I'll read the RFC later.

Adnan

Or you can ping @Thomas

Terry Chia

@Adnan Ah, looks like client cert is a TLS extension.

It's RFC 5878 if you wanna read up on it.

Adnan

9:58 AM

Awwwh.. the HarlemXSS was fixed :(

Thomas Pornin

10:58 AM

@TerryChia Client certificate is not an extension (though there can be extensions that talk about certificates)

@Adnan The server does not tell the cipher suites it likes, only the one cipher suite that will be used.

Client sends a list of supported cipher suites (with order of preference); then server responds with the cipher suite that will be used.

If the server wants a certificate from the client, it asks for it afterwards.

If you want to obtain the list of cipher suites supported by the server, you have to connect several times, first with a huge list, then removing suites one by one until the server gives up.

That's what I do with TestSSLServer.

@TerryChia RFC 5878 is about authorization, which can be incarnated by a special case of certificate called an "attribute certificate" (I never saw one of these in the wild).

An attribute certificate does not contain a public key, and is called "certificate" only on a technicality.

AviD

@ThomasPornin why dont you do it the other way? I.e. send only one at a time, and it will either connect with that one or not.

Rory Alsop

11:32 AM

So - looking at the referendum results, it looks like Glasgow and Dundee should go independent :-)

bbc.co.uk/news/events/scotland-decides/results

AviD

Highland too. Just cuz.

curious, if it had been closer - would the criterion for winning be "50+% of total population" or "at least half of the councils voted 50+%" ?

Rоry McCune

@AviD it was population based IIRC

@RoryAlsop I was surprised at the result in Argyll and the Highlands, would have them pinned down as pro-independence.

AviD

@RоryMcCune so why do all the voting results show it per council?

or is that just for interesting statistics

Rоry McCune

@AviD just how they grouped it for reporting purposes

AviD

ah

Rory Alsop

11:46 AM

@RоryMcCune anything north of inverness hates the SNP (pretty much) as they have been shafted for years

AviD

@RoryAlsop I thought Inverness enjoy getting shafted? ;-)

Rоry McCune

@RoryAlsop well Orkney/Shetland I can see obv, just I thought the highland clans might have been more for it...

Rory Alsop

I didn't realise Dundee was such a pro-independence area

I expected Glasgow - just because

Rоry McCune

Of the many comments I've seen this morning, thought this might be the funniest - suggest real text of Camerons response

AviD

yeah but even those places were not so far from a nearly even split

Rory Alsop

11:49 AM

@RоryMcCune dammit - hang on - will try to get phone signal

Rоry McCune

@AviD well indeed there were no areas with a really high pro. percentage. The bookies have been calling it that way for a while

they were offering big odds on a yes vote, so must have been quite confident of a no

AviD

looks like it was pretty near chances of it going the other way.

< 55 % is not exactly a resounding consensus.

Rory Alsop

it was closer than I predicted. I thought high sixties for No. But then, I don't know that many folks in the Yes camp - it's mostly my musician/entertainer friends

Rоry McCune

@RoryAlsop well and me :)

AviD

@RоryMcCune now you know how he considers you. ;-)

Rory Alsop

11:52 AM

Oh, were you a yes? I didn't know

edited for correctness :-)

Rоry McCune

@RoryAlsop yeah on balance I liked the idea even though I recognise the risks

AviD

no no, you can admit, you consider @RоryMcCune's friendship to be entertaining.

It's probably the accent.

Rory Alsop

@AviD well, I would hope all my friends are entertaining

Rоry McCune

@RoryAlsop mainly I really dislike the westminster lot and their policies and it doesn't seem to change one .gov to the next

Rory Alsop

@RоryMcCune I agree with you on that 100%

Rоry McCune

11:54 AM

it's either blue tories or red tories

Rory Alsop

unfortunately I dislike the holyrood crowd sooo much more

AviD

@RоryMcCune yeah, but how much would that actually have changed even in a new Scottish government?

Rory Alsop

(I may be biased a bit from my Orkney background)

Rоry McCune

@RoryAlsop yeah but to me there's some possibility that could be changed and Zero chance of change in westminster

well until cameron fails to deliver his "vow" due to backbench revolt--> gets kicked out--> replaced with boris--> boris/farage pact --> out of the EU

Rory Alsop

@RоryMcCune It was interesting seeing Fitzwhatsisface in front of the polling place. See, I like what he has done for Livi, despite the fact he sits in Labour and I really dislike their policies. But he was in the No camp

@RоryMcCune Boris/Farage pact would be the end of all decency, I agree

:-)

Thomas Pornin

11:56 AM

@AviD The list of possible cipher suites is huge. Technically it has size 65535 (these are 16-bit non-zero values) but I send only a subset of values which have been defined in one RFC or another; still, it is a long list.

Rоry McCune

@RoryAlsop yeah I was surprised that labour got behind no quite so much....

@RoryAlsop I rate that as a 25+% chance now

AviD

@ThomasPornin so, has is that different anyway? You have a set of suites you want to ask about. Seems effectively the same, just more efficient, to send them one at a time instead of a whole list and remove the selected one.

Thomas Pornin

@AviD I have a list of about 1000 possible cipher suites. The server supports, say, 20 of them. If I send them one at a time, I'll connect 1000 times; if I send the whole list and prune it, I'll connect 21 times.

AviD

@ThomasPornin ahh, true, thats a good point - I wasnt thinking of the last step.

thanks!

Simon

12:57 PM

@AviD No problem. For further information, do not hesitate to contact me.

Oops, wrong account.

AviD

hehehe

now I'm thinking someone did hack @Simon's account, that was actually funny.

Simon

Nuke this donut:

0

A: Spyware for feature phones

@Phillip - your theoretical example is in solid practice my friend. there are various examples of malware aavailable for sale nowadays, spybubbble being one of the best. cheaper alternatives eventually leave traces (clicks, hissing noises, crossed lines etc.) a key manner in which to see that ot...

Scott Pack

@RоryMcCune We use the same system, but you had easily triple turnout over what we normally see over here. That's all together pretty amazing to see.

Rоry McCune

1:12 PM

@AviD ya know that would be epic @ThomasPornin == @Simon and he hired an actor to do the ice bucket challenge thing, to throw people off the scent

AviD

@RоryMcCune or he hired someone to speak on stage with a funny accent.

Rory Alsop

@RоryMcCune and that @Thomas is actually a Londoner

Scott Pack

I like to read @ThomasPornin's cryptography posts in his original language, Cockney.

Rоry McCune

@AviD ooh that would be even more impressive!

@RoryAlsop with good voice acting skills...

Scott Pack

There, I like the sound of that one better.

AviD

1:18 PM

@ScottPack TWSS

Rоry McCune

1:28 PM

@RoryAlsop here's a good idea for your next car... ntv.livejournal.com/364943.html - Just paint it metaltek orange!

Terry Chia

-4

Q: Swordfish (2001) hacking scene

Swordfish is a 2001 action crime thriller film starring John Travolta, Hugh Jackman and Halle Berry. Do you remember the infamous hacking scene in which Hugh Jackman is trying to break into the FBI servers while having a gun against his head and getting a blowjob from Olga??? All that in just 3...

cryptography rsa

Simon

We all remember that scene.

Rory Alsop

@RоryMcCune interesting. Sounds like quite a lot of trouble just to get it... and of course it has less than half the power of my car, which would be disappointing in terms of speed. The water cannon looks cool though - could surely be converted to bubbles or confetti!

Scott Pack

@AviD It has a better mouthfeel.

Rory Alsop

On that note, did you see Gwar now has a new frontwoman to replace Dave Brockie's 'Oderous Urungus'? Not going to get a link here, as any pics will be NSFW, but look up Vulvatron - and be very amused

Simon

1:39 PM

wat

Scott Pack

Is that like Voltron? Where 5 people jump in robots shaped like Vulvas and save the world.

Simon

@ScottPack You understood what he said? Dayum, you're good.

Rory Alsop

@ScottPack not so much - mostly it's a singer named Kim dressed in an appropriate outfit for Gwar, that sprays blood from her prosthetic boobs

Scott Pack

@RoryAlsop I think I like the Voltron clone better. It's more ridiculous.

Rory Alsop

@ScottPack wait till you see her pic... again, definitely NSFW

Scott Pack

1:43 PM

Maybe NSF your W

Also, doing a google images search for Vulvatron brings up something very different than the singer.

Simon

He's bragging about how S his W is, when your W is N S at all.

2

Rоry McCune

@RoryAlsop I did see a picture... which was indeed NSF(most)W

Scott Pack

Workplace Safety is such an interesting concept.

Rory Alsop

@ScottPack hmmm - I wonder what. But not enough to actually google here

Scott Pack

thevulvatron.com "The Vulvatron is a visually iconic mobile art piece, empowering women, goddesses, and the feminine identity. Maiden voyage set for Burning Man 2014."

Adnan

1:49 PM

@ScottPack Bookmarked!

It's actually a pretty bad art

Let's draw a bunch of penises so we can make men feel empowered

Because, you know, a man is only his penis

Masculism!!

Rory Alsop

@ScottPack hmmmmm - yeah, no, that's not the new GWAR lead singer

We hung around back stage at the last GWAR gig in Glasgow - Erik ended up drinking with Dave Brockie. Said he was a really nice guy.

Simon

Then, they fell in love.

It's a love story, right?

Rory Alsop

No. Sadly Dave died of a heroin overdose

Simon

Ugh, is that true?

Rory Alsop

@Simon yeah, at age 50. Quite sad. I never actually met him, but it's still sad

Simon

2:01 PM

@RoryAlsop Yeah, that sucks

Scott Pack

2:23 PM

@RoryAlsop No, but later on there were pictures of her. Looked pretty normal GWARish to me, slightly more booty showing.

Xander

2:47 PM

@AviD Yeah, sarcasm.

Ok security peeps. I need you to think like attackers for a minute and help me out.

Rory Alsop

@ScottPack all GWAR members show booty. It's her chest that's spectacular (and obviously prosthetic, with those cannons built in)

Xander

I've said something on Twitter to piss you off, and now you want to get revenge on me.

Step 1: Sign me up for fake followers, and add 1,700 bot followers to my Twitter account.

Step 2: ????

Rory Alsop

@Xander all send you spam at once so your twitter is unusable?

Xander

What happens next here? What's the angle?

Rory Alsop

DDoS is all I can think of here

Oh - and philipp needs one more answer upvote:

Philipp

8.9k 18 34

encryption passwords malware ssl hash javascript network

damn - it doesn't show it here. He is on 8878

made my OCD twitch

Xander

2:51 PM

@RoryAlsop Huh, ok, that would make sense. I guess I'll have to wait and see. So far no activity yet, just 1,700 new followers overnight.

Rory Alsop

@Xander wow

what did you say to annoy someone?

Adnan

@Xander If it were a Facebook page, then the purpose of fake likes is clear (the more fake likes you have, the more diluted your posts' impact is. Which leads to less exposure of your posts, and thus inhibit the actual growth of your page)

If Twitter's algorithms are similar to Facebook's, then that's one angle

AviD

@Xander my point was you should be proud of it, it is a very subtle boston tea party all over again. Very subtle.

Adnan

@Xander More info on the "algorithm" youtube.com/watch?v=l9ZqXlHl65g

Xander

@Adnan If that's the case, then I'm not worried. I Twitter for fun. It isn't a personal marketing channel. I don't care anybody sees what I write or not. Not many people did before the fake followers, so no loss there.

@AviD Ah! Ha.

Adnan

2:54 PM

@Xander Good, I guess?

I don't know man, just a theory

Can you see other people's followers on Twitter?

AviD

@Xander but you dont need to be a follower to send spam.

Xander

@Adnan Yeah, and it's a fine one. I was completely stumped.

AviD

maybe this is a subtle "I will be nice to him, that should teach him a lesson!" ?

or maybe he told all the people who hate him, so they figure you must be alright.

Adnan

Looks like you can see other people's followers. Didn't know that

Xander

@AviD Ha ha ha. I wish. These are clearly fake accounts.

@AviD That would be awesome, but no...Not this guy.

@Adnan Yup.

Adnan

2:57 PM

@Xander Seems like the first couple of pages of accounts following actually follow almost the same accounts

AviD

Hmm... maybe he wants you to get used to having so many followers... and then he will yank them all away from you?

yknow, the ol' Charlie Brown technique.

Rory Alsop

@Xander I reckon you could ask it as a question on that Security Stack Exchange thing - they're smart folks. They'll know :-)

Xander

@RoryAlsop I could...It would be my first question ever!

Adnan

@Xander I'm refreshing the page. They keep increasing

Rory Alsop

@Xander holy smoke - that's right. You're on 7k just from answers!

AviD

3:00 PM

@Adnan maybe he's planning on trying to integer overflow your follower number?

Xander

@AviD That would be sad and pathetic, but it's a possibility.

@RoryAlsop Yup. :-)

Rory Alsop

nice work!

Xander

@Adnan Yeah, I think how it generally works is you buy some number of fake followers in thousands, so I suspect the final number will be some multiple of 1,000, probably in the single digit thousands.

@RoryAlsop Thanks! :-)

Adnan

@Xander You can buy fake followers?

Why?

Xander

@Adnan Yup. I think the idea is to build fake credibility. I dunno. Looks like I'm going to have to read up on it today.

Simon

3:03 PM

@Adnan To make people think that you're actually popular.

Adnan

Alright then

I'm off to take my kilt photo

Xander

One other possibility....Buying Twitter followers is against Twitter's ToS. The angle could be to buy them for me, report me, and get my account suspended. I don't know if that would work or not.

Rory Alsop

@Adnan you need to take two. That's usual.

One with kilt in normal position, and one in the pose made famous by Carry On Up The Khyber

Adnan

3:34 PM

@RoryAlsop What's a normal position?

2

Rory Alsop

3:53 PM

....

Adnan

4:28 PM

@RoryAlsop I'm genuinely asking about a normal position for a picture while wearing a kilt.

@RоryMcCune Then the question is for you.

Xander

4:49 PM

Uh, what?

0

Q: iPhone & windows pc malware removal and reverse tracking of perpetrators location, ip, et al

There are various examples of malware available for sale nowadays, spybubbble being one of the best. cheaper alternatives eventually leave traces (clicks, hissing noises, crossed lines etc.) a key manner in which to see that other information is being spyed on, specifically with the android and ...

windows malware iphone

Oh good. "I will post a follow-up (probably more than one)) when I have enough time."

David Freitag

5:37 PM

This question appears to be off-topic because drugs are bad for you. — CodesInChaos 25 mins ago

Hahaha

Xander

@DavidFreitag Perfect.

Rоry McCune

6:00 PM

@Adnan yeah it's pretty cheap apparently

@Adnan Weirdly I'm no expert on kilt wearing, think I've only done it once in my lifetime... @RoryAlsop is the man for that sort of stuff

Xander

@RоryMcCune I've seen it for as little as $20 for 10,000 followers in my research today.

On that subject, the rate of following increased to something like 1,000 new followers every 15 minutes or so, so I tried a block and report tactic. I blocked and reported as spam about twenty of the fake followers, and that slowed the rate of new followers to a trickle. I've been periodically going back and blocking and reporting 5 or 6 more, including any new ones that sneak through.

That's essentially stopped it. I've only had one or two in the last half hour or so.

And I'm not really worried about them being used against me to get my account suspended at this point, since I've been reporting them.

Total count of fake followers added to my account this morning was somewhere north of 6,300.

Lucas Kauffman

@Xander what account?

twitter?

Xander

@LucasKauffman Yup.

Xander Sherry

@xandersherry, Charlotte, NC

Application Security Architect and doer of many things.

1.4k tweets, 6.6k followers, following 270 users

I had 282 followers when I went to bed last night.

Nick

@Xander well... something happened

Oh just read the previous messages :p

Xander

@Nick Yes. I pissed someone off with my last tweet of the day.

Rоry McCune

6:10 PM

@Xander that's super weird... think someone buying fake followers spelt their twitter name incorrectly?

Xander

@RоryMcCune No, I think it's a weird prank.

Nick

@Xander "last tweet of the day" Your account is mostly retweets :p

Rоry McCune

@Xander that is indeed a weird prank...

Xander

@Nick Yes. I can't be bothered to come up with original content. 98% of my tweets are re-tweets or replies to someone.

Nick

@Xander Same here

Xander

6:13 PM

@RоryMcCune Yup. The timing it too coincidental though, and it totally fits the profile of the fellow I think did it.

David Freitag

@Xander I don't understand what exactly this person hopes to do by flooding you wil followers...

Xander

@DavidFreitag I don't either. We discussed that earlier.

3 hours ago, by Xander

Ok security peeps. I need you to think like attackers for a minute and help me out.

(Start of the thread)

David Freitag

@Xander Do you still get an email from twitter about each new follower? I could se that getting annoying real quick

Xander

@RoryAlsop Missed this earlier. This:

@jasona Seriously, quit calling yourself a "hurricane survivor." It's beyond ridiculous.

Tweeted by xandersherry on September 19, 2014 at 4:03 AM

@DavidFreitag No, I did get some random ones, but only about 20 emails in total.

David Freitag

@Xander Yeah they probably stagger the checks for new followers to once per few hours so you don't get flooded with emails

Xander

6:21 PM

@DavidFreitag It didn't seem so, because for the most part, the ones that I did get were pretty close together, and in total they were spread over three hours or so. So, I'm not sure how it works. It honestly seemed to be pretty random.

David Freitag

Perhaps he hopes that twitter will see you have mostly bot followers and ban you or something.

Xander

@DavidFreitag Yeah, I thought of that, (or that he would report my account and claim I bought the followers for it) but can't find any evidence that this would actually work. Anyway, I'm not worried about it since I've blocked and reported a bunch of the accounts as spam, which should raise a red flag if anyone decides to investigate me.

Anyway, it's been an interesting way to end the week, I guess.

David Freitag

@Xander Even then I don't think I've ever heard of a twitter user being banned or removed for that sort of thing. I think they will probably just end up removing the fake accounts

Oh what the hell. Now chrome is telling me my installer is malware? WTF

Xander

@DavidFreitag Hopefully. It's slightly annoying to have them following me, which is why I've settled on a prank at the likeliest motive.

David Freitag

Nope i think it's just blocking all dropbox downloads...

This is ridiculous, I can't download anything from my dropbox because chrome keeps freaking out

Xander

9:22 PM

May I humbly suggest that if your cryptography/security company doesn't have anyone who knows what the most widely used algorithms are, perhaps cryptography/security is not the best business for you. — Xander 12 secs ago

Lucas Kauffman

9:43 PM

Jeff Ferland

("Why are we putting shitty meme medical advice in here after... oooh...")

Xander

I tried to put it as nicely as I could. If you say you're doing a project, fine. But you say you're a company? And this is its primary business?

Rory Alsop

9:58 PM

@Xander - you rock! :-)

Transcript for