« first day (1415 days earlier)      last day (3457 days later) » 

12:40 AM
Nice, looks like Chrome is nuking SSLv3.
 
Now if only they would make it stop gobbling up all of my ram
 
They need to stop turning the heat off after 6pm its getting cold in here :x
 
 
2 hours later…
3:18 AM
@Gilles meh. That's WAAAY better then running them as root. The only difference between a personal account and a system account is how you use them. Just make sure that the user doesn't have sudo, remove the password, and change the homedir to something else (or remove all the hidden files and dirs in his existing homedir), and you've pretty much locked down the account.
 
Anyone here discovered Aether (www.getaether.net) yet? <3
Seems to be an important evolution from reddit from infosec perspective, just is far too quiet for its own good. I read Google and others fought to hire em, and he got hired but still is allowed to dev. hmm.
 
meh.
 
@prosodycontext The source code is obviously written by a person who isn't a Python developer.
camel case function names. shudder
 
Looks like he's a UI guy.
Not a programmer.
 
@TerryChia i guess judging developers is easier than realizing empathy for the missing security ingredients we need to evolve communication.
 
3:33 AM
@prosodycontext Sooooo much buzzwords in that sentence.
 
@TerryChia do you write sentences minus judgement, or is empathy impossible? <3
 
@prosodycontext You are basically stringing together random words at this point.
 
Logic security. You hear me just fine.
And what natural language programming is....
 
 
2 hours later…
5:47 AM
 
 
2 hours later…
8:05 AM
good morning
and happy almost-weekend day
 
TGIF?
 
indeed, TGIF
 
 
2 hours later…
9:52 AM
so short
0
Q: Is the ASP.NET .ASPXAUTH cookie value always the same for a given user?

westbeam87Is the ASP.NET .ASPXAUTH cookie value always the same for a given user?

 
@TerryChia and hipster @AviD, I'm gettting a new phone from work, iPhone 6 (64 GB) or iPhone 6 plus (16 GB). Which one should I take? I'm leaning towards the normal one since it has more storage space. Currently not sure what the iPhone 6 plus offers more except that you need to get an additional backpack to carry it in.
 
@LucasKauffman Definitely the 6 for me. I hate phablets.
 
normal 6 it is
it seems the resolution is the same even
 
@LucasKauffman PPI yes I think, resolution no. :)
 
@LucasKauffman hey hey no leaving me out here. I'd go 6 as well don't see anything really outstanding about the 6+
on a related note I really like having touchID on my tablet
much more convenient than passcode entry
 
10:07 AM
@RоryMcCune Aye. It's lovely on the phone as well.
Plus Apple has opened it up to 3rd-party devs so that's freaking awesome.
 
yeah it hits a nice spot for not really sensitive data, it's protected enough and is really easy to use
Not sure I'd use it for super sensitive stuff, but home phone/tablet is fine
 
@RоryMcCune thought u were a microsoft shop :p
 
@LucasKauffman that's the missus, I'm more random. Like iOS for mobile stuff
 
:w
uggggh wrong window.
 
@RоryMcCune Hippie.
:p
 
10:32 AM
 
god that just made my day
 
11:19 AM
Oh man! Limmy's Show is great!!
I like it more than Burnistoun
 
it's good , can be pretty dark at times
if you watch the dee dee stuff
@Adnan BTW have you see this if you're into all things glasgwegian
^NSFW Lyrics
 
@RоryMcCune Completely SFW
Nobody will understand anything
 
@Adnan heh
@Adnan I used to live about 10 meters from that swing park he's in, in that video
 
12:13 PM
Free flags!
-1
A: What sort of mathematical background is necessary to learn ethical hacking?

best hackerWorld Best Hackers: Our Set of professionals provide Quality Hacking Services. We have series of testimonies from our clients Worldwide. We are base in Asia and We are Proficient in Hacking every areas of ICT which include: Hack and access DATA FROM ANY COMPANY Web Sites FUND TRANSFER FROM A...

 
IT'S HALLOWEEEEEEEEEEEEEEEEEEEN!
 
@Simon You gonna get fat on donuts?
 
@TerryChia I hope so!
 
@Simon Just don't let yo momma have any.
BAM.
 
My poor mom.
 
12:24 PM
@Simon Died when she saw yo face D:?
 
@TerryChia Microsoft is also disabling it in the default config of IE (which is more-or-less the same as killing it in practice).
 
@ThomasPornin Mozilla as well in FF.
So looks like SSLv3 is gonna die. Yay poodles!
 
Afternoon all
 
12:42 PM
@LucasKauffman MY FACE IS THE PRETTIEST OF ALL FACES
 
@RoryAlsop watcha' Your ready for your back-to-back gig experience?
 
@Simon SAID NO ONE EVER!
 
@RоryMcCune yarr. Hopefully not forgotten anything! Taking more spare guitars this time (we'll have 6 between 3 of us :-)
 
@RoryAlsop good plan! how you getting from Aberdeen to Orkney?
 
12:49 PM
@RоryMcCune Driving. So I think we might get a couple of hours kip after tonight's gig, then stright up to John O'Groats for the short crossing. Meet up with the family for a couple of hours then soundcheck and gig. Another 5 hours kip, then drive southwards :-)
 
@RoryAlsop busy couple of days then! BTW you reckon you'll be spinning by here Sunday?
 
@RоryMcCune If that's cool with you and Marion?
 
@RoryAlsop yeah indeed would be cool to see you! what sort of time d'ya reckon
 
@RоryMcCune google currently saying 6:45pm-ish...but that's later than it told me yesterday. Will have to look at conditions on the way south. Shoul;d be in Inverness by 3.45 at the latest so will be able to make decision then
 
@RoryAlsop so sometime late afternoon/early evening ish would be around the mark (marion likes to know these things :) )
 
12:59 PM
@RоryMcCune so she can prepare tea and biscuits?
 
@LucasKauffman tea/biscuits/meals that sort of thing ask @Adnan she likes cooking things for guests :)
 
@RоryMcCune excellent
 
@RоryMcCune yes, early evening, but I will confirm as early as possible during the day
 
I can buy an iphone 4S for 60 euro
good enough to play around with right?
to test apps and shit
 
@RoryAlsop cool cool
@LucasKauffman yeah 4S can run iOS 8.x so you should be ok there
 
1:05 PM
@RоryMcCune great
 
@LucasKauffman Keep in mind newer iPhones have hardware features not available on the 4S.
So the OS version might be the same but there isn't feature parity.
You may also want a jailbroken phone if you are doing research on it, so get one still running iOS 7.
 
@TerryChia It's my old one from work
@TerryChia yea it's still running 7 was too lazy to charge it
 
@TerryChia did that iOS 8 jailbreak turn out to be fake?
 
@RоryMcCune Last I heard they rooted it but didn't get Cydia running. Plus I distrust that team of people.
Their iOS 7 jailbreak had some fishy stuff in it.
 
@TerryChia yeah it did all sound a bit dicey
but then who gives away a set of vulns that .GOVs would be $$$$$ for
 
1:15 PM
I don't jailbreak my phones anyway; was amusing reading Stefen Esser complaining about them.
 
@TerryChia yeah I wouldn't do it to iOS either, it ruins a lot of the security of the device
 
@RоryMcCune Only reason I will jailbreak is if I want to do research on the device.
You pretty much need root for that sort of things.
Hence my suggestion for @LucasKauffman to get one running iOS 7. :)
Ok, I'm still puzzled by that link I posted earlier. How the hell did Facebook get a .onion address with facebook in it?
 
@RоryMcCune not planning on using it daily just fiddlin around
 
#NationalTweetYourCreditCardNumberDay
 
u guys read that paper about RFD?
 
1:27 PM
@LucasKauffman RFD?
 
@LucasKauffman Very interesting!
 
More CSS magic! a.singlediv.com
 
1:51 PM
700 !
 
@RоryMcCune She?!
@ThomasPornin 700 consecutive days on Sec.SE?
 
@Adnan The top-voted answer on Sec.SE has apparently reached 700 upvotes.
That's a meaningless threshold but it looks good since it is a multiple of 100.
 
@ThomasPornin Which one?
Oh, found it
Poly's SQLi answer is only 4 points behind
 
@Adnan as opposed to?
 
@RоryMcCune I think @Adnan misunderstood. :)
 
1:57 PM
@RоryMcCune @Terry Ooooh
Now that I see the full context
Oh yeah, @Marion is the best!
She makes fantastic.. well, really everything
When we were there she made 2 entrees, 2 main dishes, and 2 dessert dishes
All tasted awesome!
 
@Adnan jumps on next flight to Scotland
 
2:15 PM
@ThomasPornin Nice!
 
Sooooo awesome.
 
2:42 PM
Is it?
 
yeah pretty much
gotta love some marvel movies
 
@RоryMcCune Awesome disney reference in there if you caught it. ;)
 
@TerryChia you thinking of the pinnochio thing?
 
@RоryMcCune Yeah.
 
yarr it was cool
 
2:47 PM
There's no shame in dropping infected USB flash drives into trick-or-treaters' bags on Halloween.
 
2:59 PM
@Adnan That's sick!
 
even the metasploit people are getting on in the act..
 
@RоryMcCune Hehe, GitHub changed their color on their commit graph.
 
4:01 PM
@TerryChia You like that? :)
 
@JeffFerland How did you guys get that .onion address?
 
@TerryChia We had some extra CPU.
 
@JeffFerland Heh.
Pretty awesome. :)
@JeffFerland What sort of computing power are we talking about here?
 
Precompute SHA-1 of facebook, generate random private key and change the public exponent several times. Means you only have to finish the hash and that you can get several addresses with only a few prime number hunts.
 
@JeffFerland Ahh! Smart.
 
4:05 PM
@TerryChia Just... lots...
 
@tylerl @JeffFerland You guys should fight about whose company is cooler. :)
 
@TerryChia What'd he do?
 
@JeffFerland He upped and joined Google.
 
"There's no shame in dropping infected USB flash drives into trick-or-treaters' bags on Halloween." ... they do that all month here. We call it Hacktober.
Anyway, time to go get some funky looking clothes on so I don't feel weird on Halloween.
 
 
2 hours later…
5:42 PM
Ah, that time of year. Local elections.
 
6:45 PM
@AviD - apparently the system likes me more than you
 
@AJHenderson AJ does come before Av alphabetically.
 
yeah, that's probably it
I'm surprised it doesn't give precedence to whoever got there first though
but maybe it doesn't know
 
@AJHenderson And congrats on row 2. :-)
 
cool, if @Gilles get's a couple hundred more points all our mods will be nicely lined up on the left hand side!
 
7:01 PM
@RоryMcCune Ha! Good catch. That'll be nice.
 
7:17 PM
@RоryMcCune rook will probably screw it up though
he isn't too far behind me
 
7:42 PM
@AJHenderson He's active today, by the way; I just saw one of his comments.
You still have the option of making an effort and keep on gaining rep.
 
7:59 PM
@ThomasPornin yeah, I just meant about lining up all the mods
Rook is probably going to push Avid off the left hand side soon
 
@AJHenderson Then @AviD is the one who may make an effort.
 
@ThomasPornin LOL! That was a funny joke.
 
8:24 PM
@ThomasPornin or Gilles could also if he can push down the other mod before Rook pushes down AviD
but talking about Rook is more fun because it sounds like we are playing chess
 
Shockingly, AviD actually has more rep than Rook this year. And I say "shockingly" based on the fact that he's written a grand total of 3 answers all year. He does have that XKCD answer though...That one's probably still pulling in gravy for him.
 
I love the reaction when I get in to a security related argument on another SE site and get someone telling me how I don't know what I'm talking about and then I link them to Sec.SE.
the latest was someone who was arguing that someone was wrong for suggesting that a small photography business owner simply remove physical access to the hardware and disconnect the system from the internet if he want's to prevent photos from being leaked by those working on editing it, but that he also has to worry about analog holes with people taking photos and such.
They were instead proposing that this SMB owner setup a trusted platform to encrypt all the data on the network and prevent the files from being able to be moved off the network in an unencrypted form
and saying that his answer was somehow more effective than simply preventing outside connections by airgapping
never mind that the chances of successfully maintaining a secure trusted platform network for a small business of photographers is effectively less than 0
oh, and the icing on the cake, someone suggested it might be a better question for Sec.SE than Photography and this guy said it was actually a better question for SF and would be off topic here
I took the liberty of letting him know that Sec.SE actually is designed to address security design related questions as long as it isn't product recommendations or technical implementation details
(though I did point out it almost certainly also qualifies as a duplicate already)
3
Q: How can I give an assitant rights to edit without having the possibility to download the image?

RyderThe situation is this one: we are a small photo company. We have a few people going out to shoot various assignments. When they return they hand me the memory cards and I download the images into the main storage (a NAS storage for that matter). More computers could access this storage and I have...

A properly administered and designed network will not leak data. Now, when woliveirajr talks about Wikileaks, etc. - this is all about human factors and human errors. It was not the system that failed. I have administered many servers directly on the net with huge traffic, without a security incident. Don't sell me the bullshit that nothing is secure, etc. — TFuto 46 mins ago
the comparison of preventing unauthorized access to protected systems in an anecdotal case vs preventing unauthorized use of data you've been given access to was my favorite part
 
10:15 PM
@AJHenderson LOL at "A properly administered and designed network will not leak data." That's...Optimistic.
 
10:44 PM
@Xander I find your lack of faith... Disturbing. :)
 
10:59 PM
 
@CameronVerotti Yeah, but you can't air-choke me, so it's all good. :-P
 
@Xander Don't you mean force choke?
 
@Xander Very true sir....
 
@DavidFreitag Ah, yes. That was the word.
 

« first day (1415 days earlier)      last day (3457 days later) »