The DMZ

12:23 AM

@RoryAlsop Giggity.

@DavidFreitag hahahahahahahahaha

kalina

@RoryAlsop what do you have set up under "Interface Mode" in control options?

@DavidFreitag hehe you're in a good mood today :)

@kalina whatever the defaults are - can't remember now.

@Noordung yep :]

kalina

12:25 AM

@RoryAlsop well those will need to be the controls to use

@kalina it doesn't have anything in any of the keyboard options for this. I went through every single bloody key

so - gin consumed, bed is calling, not going to worry about Elite until joystick is here. Sometime after Christmas apparently. Amazon have failed on all their expected delivery dates

@RoryAlsop yeah they nearly got me a zero on my physics final project.

@DavidFreitag ?

@RoryAlsop we made a large coil gun and i bought nearly all of the stuff we needed including the magnet wire from amazon

I got all the parts the night before the project was due

yeeeek

12:30 AM

got a 100% on it though :D

Also stress headaches.

kalina

1:33 AM

why is it so late already

2:49 AM

And why did the damn chicken cross the road?

@Simon Because it was tired of you questioning it

But I wouldn't have had questioned it if it didn't cross the road!

3:08 AM

heh this one is perfect for a Saturday night ...

how many circles?

@Noordung 4

do they touch?

@Noordung Nope

you clearly didn't drink enough!

Good point. I should ge another

3:18 AM

:) cheers!

Someone please upvote this: security.stackexchange.com/a/48513/10211

@TerryChia upboated

@TerryChia what, the one from @LucasKauffman?

@DavidFreitag \o/

@Noordung Yep, I'm trying to get the gold badge hat.

ah

how many upboats you need?

now that Lucas has 10 I mean

3:23 AM

@Noordung Already done. :)

coolio

I just need double his.

Huh, why is the minimum bounty 100 now?

you have too much rep

Hmm, looks like 100 for older questions. Interesting.

OK someone please write 86 low quality posts so I can get a gold badge too :)

3:27 AM

@Noordung /cc @Simon

Q: Detecting skimmers and other ATM traps

LOL

or get me 2,303 more views of this one

39

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (automated teller machine), which reads the magnetic strip as the user unknowingly passes their ca...

credit-card smartcard fraud threats atm

maybe if I reddit it

@Noordung Just posted it on HN although activity is usually low at this time.

Write a blog post if you want views.

@TerryChia if it works you'll get a gold badge for 1k views too

@Noordung I thought gold was 10k?

Oh, 1k.

> Publicist
Shared a link to a question that was visited by 1000 unique IP addresses

yup

actually that could be easily hacked

just run the link through online browser previews

3:35 AM

@Noordung Heh.

or post on Facebook and promise free airline tickets :)

How the hell do you get the fascinating ma'am hat?

I upvoted a few questions with high upvotes but didn't receive it.

Q: How do I request permission to dock my ship?

@TerryChia I think I got it for upvoting both the question and a self-answer

got one on Arqade

through this one

4

The latest update has added the ability to dock with a starport in Zelada, however, I can't seem to work out how exactly I'm supposed to dock. Approaching the station results in a warning that I do not have permission to land and I'm seeing no option in the controls that will allow me to communic...

elite-dangerous

ah no that was just the "fascinating" one without ma'am, sorry

maybe you have to upvote many posts on the same thread?

or in meta?

@Noordung This one says 10k views: meta.stackexchange.com/a/245397/193649

We'll see.

Yup. I just got it.

4:10 AM

Do you need an upvote on a comment for Hairboat?

@Noordung Nope.

I'm pretty sure Obama's not going to blame North Korea unless the FBI built a GUI interface using Visual Basic to track their IP address.

Tweeted by SwiftOnSecurity on December 19, 2014 at 8:10 PM

5

Yep, minecraft is now using 12.48GB of ram in single player mode.

4:25 AM

@DavidFreitag mods?

@tylerl IC2, Railcraft, EE3, NEI, OptiFine, Thaumcraft, and XRay

oh, and JourneyMap

@DavidFreitag Nothing stands out as being particularly memory-intensive in that last

'cept maybe OptiFine. That mod's a trainwreck

Just for fun, disable only that one and see what happens.

@tylerl The only thing i can think of is that I'm on an island and optifine makes the water all pretty

optifine does a lot of things you wouldn't think it would. Try without it.

@tylerl pretty much the same

11.24 with no OptiFine and 9.48 when I turn my resource pack off

4:37 AM

@DavidFreitag Maybe tune the Java memory params?

@TerryChia I'm not worried, i have 32GB to use. I just thought it was funny how much ram it was using.

@DavidFreitag Yeah, the later versions of Minecraft are really poorly optimized.

Oh, yeah, I should say I'm running 1.7.10.

@DavidFreitag If it's that high with no mods, then I wonder what's actually going on.

@tylerl If I disable everything, no resource packs, it runs at about 3GB

4:46 AM

@DavidFreitag oooh, so you've got 7GB of resource packs?

@tylerl No, just Ozzo

So, how bout mods but no resource pack?

12 mins ago, by David Freitag

11.24 with no OptiFine and 9.48 when I turn my resource pack off

2 mins ago, by David Freitag

@tylerl If I disable everything, no resource packs, it runs at about 3GB

@tylerl yeah that's vanilla, no mods no resource pack

4:49 AM

@DavidFreitag so with mods and without resource packs?

which is that number?

@tylerl 9.48

thats all mods but OptiFine

and with resource packs and no mods?

@tylerl 5.56

interesting. Java has a reputation for being aggressive about allocating memory it doesn't actually need, which is often cited as a primary justification for Linux's memory overcommit strategy.

And of course it's mark-and-sweep GC, so without memory pressure, things can get out of hand

@tylerl That's what I'm thinking. I set the heap space to 16G, if I decrease it to 8, those numbers halve in value, and it pretty much uses 100% memory at 4

4:59 AM

@DavidFreitag You notice how python and .net and ruby and all the other runtimes don't make you specify how much memory you have available?

Java takes a different philosophy

9:19 AM

@tylerl that is such an optimistic way of putting "memory hog".

9:53 AM

Hi

tylerl you need to learn java to say anything about it, and I dont think you are on the level to comment on Java, Python and Ruby

10:08 AM

Who unbanned the crazy?

IMHO I am just objective that it's just projection

@AndrewSmith That's funny, your opinion didn't sound very humble.

That's because I am getting ill when listening to people praising Ruby and Python and disgracing Java on the basis of reputation, this is very common among Ruby people in particular

@AndrewSmith Which is also funny because I don't recall anyone bashing java. Or, for that matter, praising .net, ruby, or even python.

Maybe you are not in the Ruby circles

Ruby today is a FUD, and basically I would make a wake-up call and look around, nobody ever believes in it any more

10:25 AM

@DavidFreitag Don't feed the troll.

Python popularity, on the other hand, is driven by the fact it's primary taught in U.S. schools, and people keep pushing it and keep failing as Python is language of the previous era

@TerryChia Not even if I feed it rat poison?

@AndrewSmith this all makes so much sense. You should write a blog post about it.

Doing simple things is much easier to do in Java than in Python were in Java you have simple objects were you can invoke methods, in Python to do anything you need to go thru hops and jumps

Python is good as calculator, to specifically run number operations

same for Ruby

It's because it's using big numerics by default

and python has numeric libraries

@AndrewSmith hahahahahahaha!

you need to think for yourself instead of relying on social truths which are very often driven by different requirements from day to day job

10:30 AM

We need some mods in here ASAP. /cc @RoryAlsop, @AviD, @Noordung

@TerryChia am here

lemme read the transcript

@TerryChia I got a bag of popcorn, don't call them in just yet!

@RoryAlsop Nothing that bad so far but I don't want to start the flamefest. :)

@DavidFreitag sure - I'll sit back a wee while

I'd go with Ruby if there was a good, free editor to work with it, or at least, one more editor than Ruby Mine in particular

Eclipse DLTK is not usable for Ruby as it's for PHP

10:33 AM

@AndrewSmith Define good?

@TerryChia yeah, was thinking

still ocked on ours, SF unlocked it though. dunno why.

@AviD Site ban doesn't extend to chat though does it?

@RoryAlsop @Noordung we'll just keep an active eye out

Oh man! Both The Colbert Report and The Late Late Show With Craig Ferguson have ended on the same week.

:(

@TerryChia not if its enabled on other sites

10:34 AM

@Adnan Wait the Colbert Report is done?

@DavidFreitag must be the the DPRK consipracy.

@DavidFreitag Yup. Last Episode was on the 18th

hmm. chat suspension is limited to just over 400 days.

@AviD Honestly, if I'm suspended from the chat for 100 days, I'd probably never come back after that.

@Adnan you have a modicum of sensibility.

then again, that's why you would be unlikely to ever get suspended for 100 days.

10:38 AM

@AviD yes - I just checked

@AviD I'll make that my primary campaign agenda for the next mod election. :)

@RoryAlsop okay, modrace! first unacceptable comment gets flagged, all mods race to longterm suspension! Go!

Awww, man. Craig was my favourite Scotsman on TV :(

@AviD :-) Damnit - we need a hat for this

@TerryChia to suspend @Adnan for 100 days?

10:40 AM

@AviD Nukes at the ready?

go ask in TL

@RoryAlsop ha, you wont do anything without a hat, eh?

@AviD Maybe. :)

Oh, looks like I'm tied with @RoryAlsop for #1 again.

@TerryChia on this site. I'm 6th globally :-)

@RoryAlsop Yeah, I don't play globally. :)

10:42 AM

@TerryChia hey - you were on 17 yesterday. Busy Sunday for you then :-)

ah yes - the major award. Good one

Actually I can get most of the hats here on this site.

Just need to think of a question to ask.

@TerryChia What is the answer to life, everything, and the universe?

@DavidFreitag *On topic question.

@TerryChia free question for you "Is a DevOps approach to Big Data the best way to handle the coming CyberWar with DPRK"?

@RоryMcCune Heh.

@RоryMcCune I'm sure EY has a whitepaper on that. /cc @LucasKauffman

10:48 AM

@TerryChia @LucasKauffman probably had to write it!

@TerryChia I should probably answer something with a bounty on it

@RoryAlsop You should.

@TerryChia if you look at my answer rate here (aside from yesterday) it's pretty low. There are too many folks who know much more about each security topic than me, so generally I don't answer that much

@RoryAlsop Yeah, my answer rate went down to zero before hats made me start answering again.

A: What benefits are there for security architecture being a separate discipline to enterprise architecture?

@TerryChia well I guess Major Award is one of those ones that doesn't actually need a good answer. Just one that someone will upvote. Can always delete later... Feels a tad like cheating though :-)

that said:

0

To post a contrary view to AJ's excellent answer: At a large corporation, architecture may end up being the responsibility of multiple teams in different departments, countries, regions etc. in order to be performant for each region, whereas enterprise security is likely to be managed from a glo...

11:04 AM

It wasn't supposed to snow. :[

:-)

I had things I was supposed to do today, now I'm stuck in until it's done

S'pose that's what I get for being lazy and sleeping all day yesterday.

Q: How does CVE-2014-9390 affect me?

0

On 18th December, a vulnerability in git and mecurial was announced. What are the details of the vulnerability? Does it affect me? What should I do?

vulnerability

I feel guilty.

11:33 AM

@TerryChia you're horrible.

you need to come out with a snazzy name for it first.

oo how about "Source-SAFE"

@AviD Heh.

Looks like I kicked @RoryAlsop to #2.

@RoryAlsop my problem with that, as always, "security architecture" means very different things to differnt people.

best... hello world... evar wiki.jetbrains.net/intellij/…

2

@RоryMcCune That's almost as good as enterprise quality fizzbuzz.

it could be the layout of routers, firewalls, DMZ, VLANs, etc.... it could be the application tiers; it could b the product security requirements, it could be the enterprise architecture that refers to security policy, it could be things like IdM, SIEM, etc etc

@RоryMcCune IS that a parody?

11:36 AM

@RоryMcCune That's.... nuts.

@AviD No, it's JavaEE.

or just showing some of the problems with java

@TerryChia well, yes, exactly

@AviD ya know I don't know... it's on their wiki so you'd think it'd be legit, but I have trouble believing it could be that obtuse!

oh yes, it is

12:06 PM

@AviD - agreed. Nomenclature is a problem

S/nomenclature/terminology

@TerryChia - damn you

12:21 PM

nomenclature shmoneclashure

ooo just made an omurice for the first time - came out sooo yummy

anyone ever hear of that?

well Im sure @TerryChia grew up eating that, cuz he's chinese

@AviD That's racist.

hehe

And yes, I had it before. And yes, it's delicious.

its not really racist, because it is so being so overtly racist that it wraps around to being not racist.

@TerryChia it's 100 because you already set a bounty on it and the next bounty has to be for double the amount (capped to 500)

12:26 PM

@TerryChia I probably did it wrong, but I'll figure it out

and the sequence would start at 100 instead of 50 if you'd answered the question

@AviD ahh is this the israeli thing about chinese food at Christmas?

@RоryMcCune hahahaha

no I just finally found a willing victim to try it first

actually think its japanese

^ was on reddit today

@RоryMcCune hehe

12:37 PM

@AviD so I just guessed that this was a thing (of course I believe everything I read on the Internet)

there is a pop culture thing about chinese food being the preferred jewish food

in Israel too, not just in the US?

@Gilles less so, but also

never heard of it in France

it is mostly an American Jewish thing.

like bagels.

12:40 PM

From the pictures, I don't think the thing they call "chinese food" in the US actually qualifies as "chinese food".

of course not.

2:09 PM

itworld.com/article/2861675/…

@TerryChia You outdated donut.

2:26 PM

@Terry - I guess Naruto is easily doable here. Not sure about 30 minutes

2:37 PM

@TerryChia It's usually the nearest stray cat served up with some pork-fried rice and some fortune cookies.

2:57 PM

@AviD it's cuisinistic and we won't allow such behavior here, some might be hungry!

I missed the best bits again, didn't I?

3:15 PM

PHP really is an awful language pen-testing.sans.org/blog/pen-testing/2014/12/18/…

@RоryMcCune heh that's bad, but the good thing about it is that we need a name for it :)

PHPllisions?

that link in PHP examines only small bit of what every programming language has in it

If you'd try any other language you'd in fact find much more similar quirks like this

false

like you never tried javascript? :-) It's the worst example

there is such a thing as strong-typed languages

ah you can't consider JS and PHP languages ... if you do that you run a risk of not being taken seriously

3:28 PM

stong typed language doesnt mean that it will be better at conversions, actually it's much worse for most of the time

there are some exceptions from that

that's exactly what it means

dynamic languages help to prevent overflows, just strongly typed but dynamic languages are somewhat optimal but still slow for day to day use

@Noordung Don't feed the troll :]

JS and PHP are both programming languages and therefore if we compare them from programming language design perspective, it's valid thing, I dont understand what's your problem

and JS and PHP are also used for the same thing - server side web development

@DavidFreitag noted ... I just wanted to make sure he makes an arse of himself

3:33 PM

@Noordung Heh, I just wanted to save you from yourself :]

@RоryMcCune and @AviD are having a battle on Twitter, it's lovely.

@Simon Eh?

@Simon nah @AviD is just being obtuse as per normal :op

:p

@avidouglen no didn't miss it, it just wasn't the specific problem that I think @troyhunt was alluding to in this case :)

Tweeted by raesene on December 21, 2014 at 3:30 PM in reply to avidouglen

@AndrewSmith hahahaha

3:35 PM

@Simon yeah I just looked

@tylerl oh this is gonna be so much fun :)

Does anyone have any experience with libGDX?

The new reCaptcha -- not the behavioral one, but the one where you have to identify all the pictures which contain cats -- that turns out to be on the order of impossible for computers to solve.

@tylerl I predict that this will quickly no longer be the case

^

There are already some people working on PHP scripts to solve them!

3:47 PM

@Simon I hear you can solve it by building a GUI interface using Visual Basic.

3

@Gilles Google's got a decent idea how much computing effort it takes:

wired.com/2012/06/google-x-neural-network

Remember how they built the world's largest neural network and trained it on identifying cat videos?

Turns out to be an immensely difficult problem as long as you don't give the attacker a side-channel.

Anyway, many orders of magnitude more difficult than OCR

ManishEarth

4:58 PM

Fuck GoDaddy

they called me up and tried to convince me that the website needs a professional to give it a "professional look" and all

I only wanted the domain

I even said I was a programmer, they're still all "but are you a web developer?"

douchebags

5:16 PM

@Mani

ManishEarth

?

@ManishEarth do you know maybe some good HTML editor for Linux?

ManishEarth

I just use Sublime of Vim

Brackets is supposed to be good

I am just looking for some, I just need html5 bootstrap and make number of loose forms

I am downloading brackets

never tried that one

Recently I have migrated all my projects to eclipse, previously I've been using JetBrains for Ruby, NuSphere for PHP, Jed (it's console) for C

Now in Eclipse I have good enough also Perl, Java and C++ support although Ruby oneis not good, but I don't do Ruby much

I never found anything exiting about JetBrains apparently :) I just don't understand all the excitement about it.

PyDev is also very good for python I found, I was able to take some RHEL7 utils and from them make something useful

5:37 PM

ok that's very nice html editor

has even curve editor, css colour etc

Do you know maybe if there's anything better than Nessus

I need to recommend something and do some free scan, Nessus used to work well except port 80 which is different story

5:49 PM

I found JetBrains disturbing calling themselves "intelligent ide"

7:06 PM

@ManishEarth Brackets is nice, but I managed to get Eclipse doing the same

so that I got working Webkit browser inside eclipse (gtk-webkit) and the css also helps changing colours the same way (via editor), and the HTML support is very nice in Eclipse

So I did split screen and it works very nice

grumpy @AviD is grumpy :op

@troyhunt @raesene that part was obvious. But just as bad is that all CAPTCHA is broken anyway. Even without this bug, it wouldn't be good.

Tweeted by avidouglen on December 21, 2014 at 7:10 PM in reply to troyhunt