The DMZ

Iszi

3:07 PM

@TerryChia I thought @ScottPack had pin power?

kalina

960GB ssds :o

are they reliable?

Rоry McCune

@Iszi he does, I think it's him, me and the mods...

@kalina from what I've seen in reviews, yes in comparison to things like HDDs anywhay...

kalina

is the issue where SSDs wear out a lot better than it was a few years ago?

I mean obviously I expect they still wear out

I mean as quickly

Rоry McCune

@kalina yeah techreport.com/review/27436/…

they've had an SSD last through 2 PB of data

which for most people is a lot

and that's just a consumer grade drive

kalina

I don't write large amounts of data

damage you say

interesting

most of mine gets amended frequently over the course of a week and then never again

Rоry McCune

3:32 PM

@kalina of course what you really want is one of these tomshardware.com/news/samsung-sm951-m.2-ssd,28406.html but AFAIK they're not available outside of OEMs at the moment

Iszi

@RоryMcCune How'd you end up with it?

SPArchaeologist

Hi. Sorry to bother you. Have come here to ask for an opinion from security experts. Have recently changed my home pc from a win pc to a Mac. On the old pc I used a full internet security suite like Kaspersky which provided a set of other services (anti banner, spam filters, anti phishing, anti-rootkit, web filtering etc).

IMac doesn't have many virus related problem - no actual virus seem to exist, mostly Trojans and other malware that would require user interaction, so general suggestion is to avoid anti virus suites. I wonder about the rest... I also though of installing some suite even if I don't really need the antivirus, but my research seems to show that OS X do not like much security suites as a whole (OS change that breaks the suite or the opposite, you name it).

Could anyone with some more experience give me some suggestion? should I just avoid suites altogether? As now, it seems that they have more damage potential that the problems they should prevent.

Rоry McCune

@Iszi scott gave me it a fair while back.. I forget why

kalina

@RоryMcCune I don't really need that level of performance

Rоry McCune

@kalina oh come on who wouldn't want 2GB/s throughput!

kalina

3:44 PM

@SPArchaeologist Nobody can tell you what to do, but ultimately, AV is for people who watch porn or browse dodgy shit or don't think before they click. Hide behind NAT or a firewall and don't click on the button that advertises a solution for penis enlargement or free access to your favorite download site.

@RоryMcCune I guess you'd notice 4x the throughput in comparison to my current SSD

would be like the change from HDDs to SSDs in teh first place, maybe?

at least, under full load

@SPArchaeologist ultimately, you chose a PC running OS X, you've already got malware on your machine.

Rоry McCune

@kalina I think it would be noticable but prob less than the HDD->SSD first time. My motherboard is an X99 so actually supports these, so if they turn up at a non-silly price I'll prob. get one..

kalina

@RоryMcCune adjusting boot times from 30 seconds to 5 seconds was pretty epic

I don't think you'd get it much lower than 5

saying that, mines back up to about 10 to get to the desktop now

Rоry McCune

@kalina win 8.1 has a handy "what's slowing down my startup" feature which is useful for catching stuff that slows down boot

kalina

every PC requires an SSD for its main OS drive

it should be standard by now, for everybody

I'm surprised OEMs haven't latched onto it to make their new machines look super fast

SPArchaeologist

@kalina thanks, for the reply. Actually I am more interested in the anti banner, filtering and such. Also, have seen some cases of infected banners on youtube that attempted to access/download malware... so not really sure that the common good sense is always enough. Anyway, just to know, any specific reason for the OS X thing? I work full day with windows and SharePoint, and generally when I think of virus I think of the SharePoint central admin site...

Xander

3:49 PM

@kalina That's not so much true any more...If it ever was. One of the most popular vectors these days is ad-networks, which means that you're potentially in trouble even on mainstream sites, particularly news sites. And then there are Wordpress sites, a not insubstantial percentage of which are also delivering malware unbeknownst to their owners.

kalina

@SPArchaeologist chrome+adblock

@Xander I haven't seen an ad in... forever

granted, my browsing habits are not typical

also: I was the wrong person to ask this question and you should ignore everything I say on the subject, I'm the least technical person in the room

Iszi

@SPArchaeologist For ad avoidance, I use Firefox+AdblockPlus+NoScript.

Barry Carlyon

Personally on Mac I run no Adblocking, or Anti Virus or anything.

SPArchaeologist

@kalina so ok, you suggest to just use extensions and such. That was also my idea.

Barry Carlyon

I do however have the Norton Free thing from the App store for scanning windows files.

Iszi

3:52 PM

The latter can be a bit annoying though, if you're not used to whitelist-based filtering.

Barry Carlyon

To make sure I'm not passing stuff on that comes across my desk.

kalina

any browser without adblock and ghostery is basically internet explorer 6, as far as I'm concerned

Barry Carlyon

iAntivirus is free from the AppStore.

kalina

you wouldn't willingly run internet explorer 6, would you?

Barry Carlyon

I use that just for scanning any windows files (say from USB) just to make sure I'm not passing on infected files that don't affect me.

SPArchaeologist

3:54 PM

@BarryCarlyon was going to use that or clamX

Barry Carlyon

nods

raz

4:05 PM

@kalina Just because of the price or not enough bang for your buck?

SPArchaeologist

@kalina just be grateful you don't have to support clients that want to use ie6 but also want css3/html5 style stuff (gradients, round borders, flexgrid....)

Xander

So this is a year old, but I just found it, and it's awesome. research.microsoft.com/en-us/people/mickens/thisworldofours.pdf

SPArchaeologist

@kalina there must be some reason if even MS wants ie6 to die. See here, they actually made a game out of it.

raz

@Xander That's a whole 3-4 pages I have to read.

Xander

@raz Totally worth it.

raz

4:11 PM

@SPArchaeologist There is never a reason to use Internet Explorer, let alone IE6.

Any browser that is inherently built into the operating with direct access to system level services is an awful choice.

@Xander Dude he bashes mail order filipinos!? That's like the best part of the Internet.

SPArchaeologist

@raz there is one. You work as a dev and they ask you SharePoint support. At least now the worst thing I can get is ie 7/8 that is still supported by SP2007

raz

@SPArchaeologist Forced work environments are bad for everyone, not just developers.

@Xander Hahahaha, best quote ever

*"The only thing that I’ve ever wanted for Christmas is an
automated way to generate strong yet memorable passwords.
Unfortunately, large swaths of the security community are
fixated on avant garde horrors such as the fact that, during
solar eclipses, pacemakers can be remotely controlled with a
garage door opener and a Pringles can. "*

4

TildalWave

No no no no again someone flagging any question with "tool" in it as off-topic. Whoever is doing that, please stop and read our Information Security Meta thread discussing when product recommendation questions are off-topic and when they aren't.

Xander

@TildalWave Can a mod offer a gentle reminder to whoever's doing thisr? //cc: @RoryAlsop @AviD

TildalWave

@Xander Yes, but I'm not sure how easy it will be to establish who's doing that. (because I never had to, I'm not saying it's not possible, I know that mods can ban members from certain reviews but I'm not sure about flags)

@raz Automated way to generate strong yet memorable passwords? How about taking a bus/sub to your work and listening to some teenage chatter?

doesn't get any more random an at the same time, sadly, memorable than that

raz

4:24 PM

@TildalWave Hahaha

If it weren't for my horse, I wouldn't have spent that year in college.

TildalWave

the battery stapled one?

(you know there's only one word you can reply with, right?)

SPArchaeologist

@raz nothing against that, only pointing out that there is some way to force you with IE :P

raz

@SPArchaeologist Sadly you are correct. My previous employer developed internal web pages only compatible with IE. I'm not longer at the job.

SPArchaeologist

@raz Gold Microsoft Partner here. Not saying that you can't find your way to do good stuff, it is only SharePoint that is antiquate and calls for antiquate environments.

Rоry McCune

so first shellshock/heartbleed of the year looks to be going to ma.ttias.be/…

3

although it doesn't have a cool name, so nothing much will likely come of it

Scott Pack

4:32 PM

@Iszi I do.

raz

@RоryMcCune SHOCKEDHOST

Tinned_Tuna

HOSTBLEED

Rоry McCune

HostBleedShock it is! if that doesn't get people worried I don't know what will...

raz

@Tinned_Tuna IOSHOCK

Hosts are drowned in queries

GET IT

Rory Alsop

@Xander Will do

Xander

4:35 PM

@RoryAlsop Thanks...Just got a batch of seven more.

TildalWave

I only agreed, reluctantly, to close 2/10 flagged questions. That's lower hit rate than if it was random.

Rоry McCune

aactually it does have a "cool" name "Ghost" 'cause it relates to the host function I guess....

Rory Alsop

@Xander Many of these appear to have 4 votes to close - wondering if these are autovotes, ie done without really reading the question, answers and context

Xander

@RoryAlsop Ah, interesting.

TildalWave

@RoryAlsop that's a distinct risk with long queues

Rory Alsop

4:42 PM

for now I'm closing the definites. Will have a deeper look at the others

@TildalWave yeah

TildalWave

►

kalina

@raz the difference between other models is not comparable with the difference in price

sure, they're basically as good as headphones get

but at 7x the price, they're not 7x better

(comparing to ath m50x)

Tinned_Tuna

So, things that are currently on fire: Adobe Flash, Java, Anything using glibc for DNS hostname resolution? Am I forgetting anything?

kalina

@Tinned_Tuna everything I've ever set on fire, ever

Tinned_Tuna

@kalina all of those things are still burning?

TildalWave

4:47 PM

yes, the eternal inferno

Tinned_Tuna

@TildalWave that's my name for the Internet

kalina

@Tinned_Tuna yes, my fire is particularly nasty

fire so potent that when you burst into flames, there isn't even time to scream

TildalWave

@kalina So what were you doing in Turkmenistan? en.wikipedia.org/wiki/Door_to_Hell

kalina

no that's not me

my fire doesn't need fuel

Rory Alsop

"Give me fuel, give me fire, give me that which I desire"

Might not be your sort of music, @kalina

kalina

4:55 PM

sounds like a euphemism for sex

I'm not sure why that wouldn't be my kind of "music"

Rory Alsop

►

cos it's Metallica

kalina

you're right, I don't like it

at least I've heard of metallica

I actually think I have a large collection of pretty much everything they've ever done somewhere on my hard drive

not by choice

TildalWave

@RoryAlsop meh, and you of all people would forget about your own hymn to burniation?

kalina

I guess the files are still there by choice

Rory Alsop

@TildalWave this was funnier

Actually - would be good to do a video for Burn your ****** planet with @kalina just blowing stuff up in hellfire

raz

5:06 PM

@kalina yeah that makes sense. I hope to buy a new pair in the next month. I'll let you know the models I'm considering.

Simon

5:51 PM

@raz ATH-M50s are da bomb.

kalina

@RoryAlsop I have an unreleased track called "Kalina's Song" with lyrics about fire

I say unreleased

I mean deleted

one day...

Rory Alsop

@kalina yeah that would be a complete OpSec fail for you

kalina

or a great reveal

Rory Alsop

@kalina which would be way cooler

jrg

kalinagate

kalina

5:58 PM

why is jrg in here

Rory Alsop

@jrg heh - you just edited your d #simon

kalina

am I about to get banned for chatting again?

Rory Alsop

@kalina are you?

jrg

nah, i just idle here

Rory Alsop

I hope not

kalina

5:58 PM

cool

there will be no kalinagate, though

everything is too well planned

I'm wondering which sample I'm going to take from Guardians of the Galaxy

there are too many

Rory Alsop

@kalina apparently (I've not seen it yet) there's a chap who keeps saying he's got root, so obviously a hacker

kalina

no...

jrg

lol

@RoryAlsop Yes, very good one. never knew the tree people were natural hackers.

But, one could say, they grew up as roots. badum-tish

kalina

this is worse than normal

can we have @Simon back?

5

TildalWave

6:18 PM

-1

A: Soft tokens - multiple profiles on same smartphone

This is a limitation of the token client software. RSA and VIP both use shared secret crpyto, but there is no reason that they cannot securly manage more than one shared secret per token without sharing secrets. (Disc: I work for a competitor.)

I flagged this as not an answer and it was apparently disputed. Note that the questions asks "What's the security reason that you can't have multiple profiles on the same smartphone to provide soft tokens based on a client basis?" which the answer doesn't address at all. I added more about that in a comment.

Needless to say it's also potentially dangerous if that "answer" was taken for authoritative one and someone thought there isn't any problem with doing that. Even semantically, there is a big problem.

i.e. if you phone is "something you have" and you share that phone, then at the minimum the second auth factor becomes "something you and someone else have"

Rоry McCune

6:32 PM

my manipulations of the pin-wall seem to revolve around making @AviD say things he didn't, but which are still believably in character for him... ah well :)

2

Xander

@TildalWave I think it's the question that's the problem here...I think you're misunderstanding what he's asking. It's not about sharing a token between multiple people...It's about a single person, replacing multiple hardware tokens with a a single soft token app, with profiles replacing each of the hard tokens.

@TildalWave FWIW, I'm the one who disputed the flag, because I think the answer is applicable, once you understand the question, but I do agree with @RoryAlsop's comment that it's a functional reason rather than a security reason, so it probably is a bad answer after all. Hadn't had enough coffee yet to see that earlier. :-)

Simon

I flag all your moms.

Rоry McCune

@Simon aaaand @kalina got her wish

kalina

so many regrets

3

Rоry McCune

6:47 PM

@kalina well you've gone and done it now... I think you should have to hang around and talk to him about doughnuts for at least an hour as penance

Simon

That's what you get for demanding my presence, you poor souls.

kalina

@RоryMcCune psh, like you're ever going to succeed in making me do that

Rоry McCune

@kalina it's only your conscience that can make you do it

Simon

I've been to hell once, I suspect that a discussion IRL with @kalina would be far worse.

kalina

noted

Rоry McCune

6:50 PM

@Simon phhbt like you two haven't been making flirty eyes over all the music related chats that you do

Simon

wat

no

kalina

right, so because I answer him I must be flirting

Rоry McCune

denials on both sides

which one of you should feel more offended :op

kalina

this isn't a denial, I'm flat out dismissing the entire subject

Rоry McCune

@kalina potato/ potahto

kalina

6:53 PM

oh look, a fire

I'm hungry

time to eat

Rоry McCune

@kalina cooking things on that fire you found?

Simon

You're a found.

Rоry McCune

@Simon 200?

got the wrong Rory for that age :op

TildalWave

> The problem we're starting to face is when new clients wants us to use the same app for a soft token already used by others.

Dunno, I'm voting to close as unclear then, because you just identified multiple ways of interpreting the question

Xander

@TildalWave Same soft token app as the app used by other clients. I.E., instead of having 3 RSA hard tokens, the three clients all want you to use the RSA soft token app for tokens for their networks.

TildalWave

7:07 PM

@Xander Yes, I know what you mean. I would just like a confirmation from OP that it's indeed that.

Xander

@TildalWave I dunno, I think it's pretty clear, but probably just because I've been in this same position (multiple tokens from different customers) so I know exactly what he's saying.

TildalWave

Or, you don't and you're just projecting :P

Xander

@TildalWave Ha ha. Perhaps. :-)

Stack Exchange

Blog - Stack Exchange: Targeted Jobs for Stack Overflow

Will Cole on January 27, 2015

Stack Overflow Careers was announced five years ago with a simple mission statement:

We believe that every professional programmer should have a job they love

To help you find a job you love, we need to match you with the right job at the right time. We do that by helping you create a profile that brings the right employers to you, and by showing you relevant job ads from our job board on Stack Overflow. With over 6,000 companies that advertise on Stack Overflow Careers, we’re getting closer to our goal of having a great job for every developer. …

kalina

@RоryMcCune heh... I had forgotten why I left and got distracted until the SE app buzzed with your message

Rоry McCune

7:21 PM

@kalina yeah it can be a bit on the slow side...

kalina

7:31 PM

no lol, I mean I got up and never made it to making food

Simon

nolol

kalina

mock me all you want, @Simon, and the end of the day, I'm not the one that has to live with a face like yours.

Rоry McCune

lcamtuf.blogspot.co.uk/2015/01/… Lcamtufs analysis of the ghost vuln may not be what you're expecting... </buzzfeed>

2

kalina

We analysed the ghost vulnerability, you'll never guess what happened next!

Rоry McCune

@kalina actually if you try to guess before reading that post I can pretty much guarantee you won't be right :)

kalina

7:42 PM

no

I know nothing

@kalina </jonsnow>

I don't get it

Game of Thrones Meme

I don't watch Game of Thrones

I bought the book, I never read it

I made it past the first page before I realized it was a waste of my time

Rоry McCune

@kalina I swore I wouldn't watch it when it started getting popular, but the show is actually pretty good

kalina

7:45 PM

not that it's a bad book, it didn't do enough to capture my attention and thus it was futile

Rоry McCune

books are a bit overly long

kalina

I have no opinion on the book, I only read the first page

Rоry McCune

the TV show is (unusually for book adaptations) a better cut of the story, I think

kalina

it changes nothing

Rоry McCune

@kalina possibly not

kalina

7:46 PM

same reason I didn't bother with the hobbit movies

if the people who're into that complain about how long the movies are, I don't stand a chance

Rоry McCune

@kalina perhaps, but I'm suggesting the reverse. that if the books were a bit long winded for you, you might still like the TV show

assuming you like that genre of story

kalina

I have no available slots for additional TV shows, I already have a large backlog

Rоry McCune

and aren't bothered by sex/violence on TV!

kalina

sex and violence are two of my favorite things

not at the same time

Rоry McCune

'cause I was legtitimately surprised that some of the violence was allowed on an american TV show

@kalina in that case you'll like this

it has loads of both

and some of the violence is.... well pretty violent

kalina

7:48 PM

I don't mean watching

where's the fun in that

Rоry McCune

on a different note, I have learned a good lesson tonight, don't try and load 100MB burp logs into your existing session or you'll hang the program for like 30 minutes <sigh>

aaaand then it'll crash altogether

kalina

I'm going to pretend I know what burp is

and then nod

Rоry McCune

@kalina the key think is, if ever googling for the support forum, do not google "burp forum" and click the first link

this ... will not end well

kalina

strangely, I didn't go and Google "burp"

and I'm certainly not reconsidering

Rory Alsop

I'm glad I never got round to trying that

Simon

7:52 PM

@kalina My face is divine.

Rоry McCune

@kalina good plan

Xander

@RоryMcCune It's premium cable. They allow virtually anything there.

@kalina portswigger.net/burp

Which reminds me, my Burp license is due for renewal. Need to take care of that.

Jeff Ferland

@LucasKauffman Got drunk last night. Whoops.

Rory Alsop

8:10 PM

@RоryMcCune - just read that ghost analysis. That's just superb.

Rоry McCune

@RoryAlsop ain't it :)

AviD

@RoryAlsop @RоryMcCune is it a spoof? It seems like a spoof, but its too subtle for that.

Lucas Kauffman

@JeffFerland nvm xD

AviD

it is just mocking qualys for their logofying a vuln, right?

kalina

"it's not procrastination if it's educational"

mind = blown

Rоry McCune

8:15 PM

@AviD pretty much :)

apparently there's a video too!

Lucas Kauffman

@Adnan received a gift from a colleague, I shared my Pannepot Grand reserva from 2010 with him, he gave me a bottle of Westvleteren 12 which is almost 5 years old

Rоry McCune

although I've not seen that yet

AviD

@RоryMcCune okay now I read the original qualys post, lcamtuf's now makes more sense :-)

Xander

8:28 PM

@AviD Are you in the coffee.SE beta?

AviD

@Xander

@Xander heh, just popped in now

I actually know the answers to AAAALL the questions there, but anecdotally. I dont think the answers I would give would be good answers.

@Xander whyd you ask?

Xander

@AviD 'Cause I figured it be something you'd be interested in.

AviD

heh. might be, will keep an eye on it.

Xander

@AviD Yeah, I'm in the same boat.

AviD

I sent an invite to my coffee guy too

Rory Alsop

8:34 PM

I'd be terrible in there - my answers would all be 'tastes terrible, best add vanilla' :-)

AviD

@RoryAlsop shun, shun

Xander

@RoryAlsop Ha ha.

AviD

@Xander if I give the first answer on a site, do I get a hat?

Xander

@AviD I am not the one to ask. I've never even been active enough in a private beta to get the beta badge.

Despite the fact that I have the 4th highest rep on beer.SE

AviD

hey @RоryMcCune! Jake&Amir is ending soon!

Rоry McCune

8:47 PM

@AviD hey no collegehumor refs, I'm trying to play with buby

AviD

hurhurhur

Rоry McCune

@AviD you forgot to close your <simon> tag

AviD

@RоryMcCune hey youre the one talking about bubies.

Rоry McCune

but srsly things like $burp.proxy_history.each {|req| web_serv << req if req.url.path =~ /(svc$|asmx$)/}

is a nice piece of easy automation to be able to do inside burp interactively

raz

@Simon Your mom is the bomb, in bed

Nוnɛfוngɛrϛ

8:56 PM

There is a stack exchange for coffee?

Rоry McCune

@Nוnɛfוngɛrϛ yeah but it's in private beta it seems....

Nוnɛfוngɛrϛ

Can you actually be an expert in coffee?

raz

There are experts in wine and beer, why not coffee?

Coffee beans come from around the world, brewed in different ways.

Nוnɛfוngɛrϛ

@raz True. I guess I never thought of it that way. coffee is just something I drink when I run out of tea. Or, when I desperately need to be awake.

Well, all I can say is stack exchange has grown

raz

Yeah I'm not a drinker of coffee myself.

@Nוnɛfוngɛrϛ That's for sure! In my day....

Nוnɛfוngɛrϛ

9:06 PM

@raz ... there was just stackoverflow.

raz

haha exactly

And now I'm old sigh

Simon

@raz ok

Xander

9:41 PM

@Nוnɛfוngɛrϛ Yes...I've known some folks who've owned coffee shops, and who were definitely experts.

Rory Alsop

Check out @angealbertini's Tweet: twitter.com/angealbertini/status/560166952174620673?s=09

@RоryMcCune - you'd be amused

Ohnana

real talk, first thought for the glibc exploit was "Ghost in the machine"

then many eyerolls

rwollr

this might be too specialized for this room but

I've got a raspberry pi with 2 wifi dongles, one is wlan0 and one is wlan1 ofc

i'd like to have wlan1 be initialized to mon0 by airmon-ng on startup but i dunno how to do that

i'm guessing /etc/network/interfaces has to be edited to include wlan1 then i have to do some kind of startup script

Ohnana

@rwollr cyberciti.biz/faq/…

this is one way. Super-user or Unix&Linux communities will be more helpful for you

rwollr

is that all airmon-ng does is rename it to mon0?

Ohnana

9:50 PM

@rwollr dunno. the folks at Super user may be more helpful

rwollr

mm possibly

figured someone here may have had some situation before where they need 2 wifi interfaces at once, one for internet and one for sniffing

Ohnana

@rwollr I've done that. wlan0/wlan1 are good names

rwollr

10:11 PM

sooo uh strangely

i removed the second wifi dongle and it actually appears that i can still access the internet while mon0 is enabled

so maybe i don't need 2 adapters after all

Ohnana

you can also do virtual adapters

don't ask me to explain it's freaking witchcraft

rwollr

so is there any benefit to using 2 adapters?

Transcript for