The DMZ

"Are magic code goblins going to come and invoke Ken Thompson's untrustable computing and make your computer install windows and join a botnet or something?"

Ohnana

12:52 AM

@StephanHeijl 2spooky

Simon

2spooky4u

Stephan Heijl

> log in to ssh
> see skelington
> 2spooky

Ohnana

> phone ring "computer has virus"
> "computer is linux"

> "linux is kill"
> "no"

Stephan Heijl

then who was phone?

Here I was, worrying about nothing. The VPS runs Ubuntu 14.04, which includes a non-vurnerable glibc version.

/me hides from the inevitable volley of tomatoes aimed at him for using Ubuntu

Ohnana

12.04 was vulnerable

Stephan Heijl

12:58 AM

Correct

Terry Chia

4:02 AM

So, the Internet is on fire again?

Stack Exchange

5:07 AM

"Oh, you're using their Chrome APP, not their Chrome EXTENSION. They're very similar but one handles window creation differently." is a thing I hope I can stop saying soon.

Rоry McCune

8:25 AM

blog.thinkst.com/p/if-nsa-has-been-hacking-everything-how.html

is quite interesting.

one point I thought was kind of funny is that the NSA budget for one project for one year is almost the same as the complete market capitalization of NCC who are (AFAIK) one of the larger technical security consultancy companies around....

Arperum

GHOST is being terribly not good here. I'm happy I reported it to those responsible...

kalina

8:51 AM

OH MY GOD I KNOW I HAVE PACKAGES COMING TODAY BUT I'M NOT AT HOME TO RECEIVE THEM STOP TEXTING ME ABOUT IT

Terry Chia

9:26 AM

My startup is porting node.js to UEFI for an even more bare metal experience

Tweeted by mjg59 on January 28, 2015 at 8:50 AM

/cc @AviD, @RоryMcCune

AviD

@TerryChia thats ridiculous. UEFI should be written in node.js.

Arperum

10:20 AM

@RоryMcCune Aren't you an independent? I'm thinking about starting on my own, but don't know how much I'd have to ask exactly. What range should I be thinking about?

Any other people who have some valuable input?

AviD

@Arperum he is not anymore.

Arperum

@AviD He was, so he'll probably still know something...

AviD

and it really depends a TON on a lot of factors - such as your experience, your specific expertise, your location, your connections, how well known / how well you sell yourself, etc etc.

@Arperum I still am, doesnt mean I do.

Arperum

@AviD Assume I am terrible at selling myself, have ~2-3 years of experience as a webdev.

AviD

60$

Arperum

10:24 AM

The thing is: my current workplace is kind of pushing the webdev part away (as in short term stop doing that)

AviD

and do you want to be selling custom webdev projects as a whole, partial re/work, or security?

because the pricing model for each would be substantially different...

Arperum

And one of the people(out of two) who is currently paying me is offering me to work as an independent and have a contract for a certain period where he pays me ~€2k/month.

@AviD I'll stay at webdev. Not going security (yet anyway, I lack all knowledge about that)

AviD

@Arperum wait, 2K EU per month? Is that full time work?

Arperum

@AviD Sort of.

AviD

is that comparable with your current salary?

if so - then no.

Arperum

10:31 AM

I currently have a net of €1,35k.

Terry Chia

@Arperum Wut.

That's really low imo.

Arperum

@TerryChia I know I should improve.

AviD

going from salaried employee to freelance in the exact same job, at the exact same compensation levels, should typically raise the direct pay between 30-60%. Depending on tax code and such.

@TerryChia hey no mocking.

we've all been there at some point.

Terry Chia

@AviD Not mocking.

Arperum

@AviD He's right.

Terry Chia

10:32 AM

That's the salary for a fresh grad with zero years of experience around here.

AviD

it does suck to be underpaid.

I dont know what kind of taxation you're looking at, but that does sounds like a soft landing. Getting started as independent is hard.

Arperum

@TerryChia That's what I have since I started as a frsh grad 2 years ago.

AviD

assuming the taxes work okay, I would suggest you take it, and immediately start looking for more clients, at a more normal rate.

Arperum

(I do have a car from work, with all fuel paid for)

AviD

you would need to step up though, but also be flexible - at first you may want to agree to a daily (or even hourly) rate. eventually you should be charging per-project. but there is much risk there, unless youre awesome in which case there is much risk but also much to gain.

Terry Chia

10:36 AM

@Arperum What tech stack are you familiar with?

Arperum

@TerryChia Mostly .net, but been working in wordpress lately. Did some java recently too. But mostly C#.NET

Rоry McCune

@Arperum I used to be and my better half still is, but I'm with NCC these days....

@Arperum so freelance stuff will depend on your jurisdiction, but your rate does need to be a good bit higher than salary to account for business expenses (accountant etc) risk of loss of income if you're sick, holiday that you no longer get paid for and general lack of certainty of pay..

AviD

@RоryMcCune also sometimes higher tax rate, shorter projects, more overhead, marketing+sales time, etc etc.

@Arperum but the cool thing is you would now have control of your rates yourself.

of course assuming you can find someone willing to pay it.

Rоry McCune

@AviD yeah (although here tax rates are actually lower for company dirs...)

for me the killer is you have to do your own sales, and I suck at that

AviD

yeah, exactly. And marketing, and contract negotiation, and legals (with lawyer ofc), and equipment purchasing, and vendor sourcing, etc

basically everything everything is now on you.

not just the things you've avoided, even the things you'd never known somebody actually has to spend time to take care of.

Arperum

10:47 AM

@RоryMcCune Yea, I'm being offered some kind of a contract where I am certain of a pay of €2k/month (excluding VAT) for at least a year, I can take holidays as I want, as long as deadlines are reached.

AviD

@Arperum a year is a long time. do you have to commit to that?

remember, you want to keep raising your rates until you reach an equilibrium of pricing.

Rоry McCune

@Arperum so the question becomes how much work are they after for that.. you want that nailed down up front or you risk them just loading you down and then complaining when deadlines shift

AviD

so committing to a year at a low rate, while giving you the benefit of sure work, might not be a great idea.

Arperum

@RоryMcCune The guy is quite reasonable.

AviD

anyway, never such thing as "sure thing".

Rоry McCune

10:49 AM

@Arperum oh and remember, in business, there are no friends, get EVERYTHING in writing and make sure it's clear

AviD

@RоryMcCune oh yes, you need a lawyer AND an accountant on hand.

Rоry McCune

@Arperum yeah I've thought that about people in business before, and not bothered getting stuff nailed down.. sometimes you might get away with it, but it's a real risk. people fall out, then it comes back to what's the law, and what's in the contract

Arperum

@RоryMcCune I'll make at least sure to have everything written down properly.

AviD

@RоryMcCune yeah. I'm still owed close to 10K USD by a guy who I thought I could trust like my brother, but he closed the company so I'm screwed.

it happens, consider it an expensive learning experience.

Terry Chia

@Arperum A year is very long though. Is it possible to negotiate for shorter?

Rоry McCune

10:55 AM

@AviD I was super lucky when freelancing, didn't have a single bad debt, some slow payments but they weren't huge amounts..

AviD

@RоryMcCune yeah, this started off just as a slow payment, then the slowest I've had, then "oh damn, sorry bout that bro"

true, he was very profitable for me until then. but still.

Arperum

@TerryChia I'm planning to go see an accountant this evening or tomorrow or something with him, because I don't plan on ending up with less money.

NKL

2

Q: Google search results showing up a URL on its search which doesn't exist on the website

I am using a keyword to display a website page on google search. After entering the keyword, on the first page of google, I am redirected to a page, whose domain is exactly similar to the website whose page I want to display, but it is showing a page which doesn't even exist on the domain. Also, ...

any thoughts on the above?

AviD

@Arperum with him, i.e. your boss / client? Not a good idea IMO.

Terry Chia

@Arperum Also consider that you can probably get a decent pay raise from another job since you have a couple of years of experience.

And the fact that you probably lose some benefits as a contract worker.

Rory Alsop

11:47 AM

morning everyone

Rоry McCune

@RoryAlsop watcha'

AviD

@Simon Guy Doing Doughnuts With A Snowplow #Simon #NotWhatYouThink

Terry Chia

@AviD What did you think we were thinking?

AviD

I think I'd rather not go into that

Terry Chia

12:02 PM

@AviD Pervert.

AviD

thats the problerm, yes.

Arperum

@AviD @TerryChia I'm going to look at some more options, going to see if I can poke some other companies aorund here.

Terry Chia

@Arperum Remote is always an option as well.

Arperum

@TerryChia True.

Rоry McCune

Rory Alsop

12:09 PM

@RоryMcCune - how's snow out your way. It's trying here but nothing useful

Rоry McCune

W.T.F!

Terry Chia

@RоryMcCune What the actual fuck?

Rоry McCune

@RoryAlsop well I can't see the hill behind the house at the mo', it's trying to land but not quite cold enough yet..

further up the hill is though....

@TerryChia it's real apparently...

Rory Alsop

@RоryMcCune that's almost the opposite of what I'd call 'respectful'

Rоry McCune

@RoryAlsop you mean ... you wouldn't want to be immortalised by a website... who'd have thought!

Rory Alsop

12:14 PM

@RоryMcCune I can sort of see the value to the estate of a deceased famous person, like JoniMitchell.rip, ....maybe

Rоry McCune

@RoryAlsop well yep but that and comedy domains like getag.rip or 41414141.rip are about the only uses

can't see them making their $120k back on that market

Rory Alsop

@RоryMcCune agreed

Rоry McCune

12:31 PM

Simon

I heard there are some GHOSTs in our servers!

But who are we gonna call?

kalina

@RоryMcCune I see no Dance

Terry Chia

@Simon Yo momma.

AviD

23 mins ago, by Rоry McCune

Simon

@AviD Oh for fucks sake.

AviD

12:35 PM

okay that was ick.

Rоry McCune

@kalina 0:00-4:00 Wub wub wub wub

Terry Chia

@RоryMcCune Not ...?

Rоry McCune

@TerryChia well that's how it should be , but still waiting . . .

paj28

12:52 PM

@Simon - the other day you asked "Did someone post: "How do I abuse ShellShock?" here?"

179

Q: What is a specific example of how the Shellshock Bash bug could be exploited?

I read some articles (article1, article2, article3, article4) about the Shellshock Bash bug (CVE-2014-6271 reported Sep 24, 2014) and have a general idea of what the vulnerability is and how it could be exploited. To better understand the implications of the bug, what would be a simple and specif...

linux exploit known-vulnerabilities bash shellshock

Notice it's on +179 !

Simon

@paj28 A little spiteful, are we?

Fine dude, you were right, your question was awesome and you're the king of the world.

Is that what you wanted to hear?

raz

@Simon Dont' be like that Simon

#me

I'll #you

1:03 PM

I guess everyone's chill pills are on back order?

Simon

@Ohnana You wanna wrestle or some shit man?

idgaf if you're not a man, you're a man to me.

Ohnana

@Simon that means a lot to me

bro hug

Simon

aw yeah boi

Ohnana

leek wrote poetry about a mail server and it has made my day brighter

Rory Alsop

1:23 PM

@Ohnana Leek? You mean the little bear?

Ohnana

@RoryAlsop the bear dude yea

not an actual leek, they don't have hands

Rory Alsop

He's good like that

Simon

1:36 PM

So far, GHOST hasn't gotten too much attention in SE, surprisingly.

Stephan Heijl

Well, it's a pretty simple fix

AviD

yeah, well that's what the doctor promised @Simon's dad, and look what happened.

@AviD wat

@AviD wat

@AviD wat

1:43 PM

@AviD way to subtly disclose your misdeeds from a previous time when you travelled to Canada a lot

AviD

never you mind

Simon

I'm not slacking, my code is committing.

Terry Chia

@Simon That's literally the worst excuse ever.

Ohnana

it's 8:45 and pandora is already sucking

weh

AviD

@TerryChia no, "it wasn't me" is the worst excuse ever

Simon

1:46 PM

@Ohnana Google Play Music, boi.

AviD

> "But I saw you kiss her!"

> "Wasn't me."

Ohnana

@Simon i only own free albums

aka 2 + a 45 minute mix

AviD

> "I walked in on you in the shower!"

Simon

@Ohnana So, you don't pay for the service?

AviD

> "Wasn't me."

Ohnana

1:46 PM

@Simon nah

Simon

I see.

@AviD "I slept with him but it was an accident".

dem accidental sleeps

@AviD I've seen a similar one, those are full of lulz.

AviD

Simon

1:48 PM

@AviD Hahahaha.

AviD

Simon

@AviD That's the very first one that I saw, well done.

AviD

easy to find

I binged the hell out of it

Simon

Do you really use bing?

AviD

of course.

I'm not quite paranoid enough to use duckduckgo.

and I dont have time to waste with all the crap google throws up at you.

then again.... This:

Arperum

1:51 PM

@AviD Your a waste.

@AviD inf

Simon

inf

That's what you get for binging, you donut.

AviD

huh

Simon

inf #2

Ohnana

those posters are freaking awesome

Arperum

inf #3

Ohnana

1:52 PM

kinda want to print them off and tack them on the LGBT center door

Iszi

@AviD inb4 inf #5

AviD

wut

Iszi

Mine was "inf #4" therefore it was in before (or, "inb4") "inf #5". Duh.

Ohnana

@Iszi even the explanation makes no sense

Simon

@Ohnana That's why he's my ex-dad now.

Rory Alsop

1:57 PM

@AviD I have actually heard that one (almost) used - as a (partial) description of what actually happened

Iszi

@Ohnana Your face makes no sense.

Terry Chia

@Iszi Even your insults aren't good.

What has happened to you @Iszi?

Ohnana

@Iszi my face makes perfect sense. get glasses nerd

Simon

Hahahahaha, the nerd card!

Woohoo! Someone I can relate to.

Rory Alsop

@Iszi You're starting to sound like your son #simonnonoyolo

Simon

1:59 PM

#me

Ohnana

Arperum

@Arperum ugh, I feel terrible for that blatantly wrong English.

Simon

But please Rory, ex-son would be more appropriate.

Rory Alsop

@Simon like a white dwarf?

oh, that's ex-sun, sorry

Simon

lolwat

Arperum

2:01 PM

So punny today...

Rоry McCune

@RoryAlsop didn't you hear, on the last episode of "days of our Sec.SE" @AviD inadvertantly let slip that @Simon is actually his son!

4

Rory Alsop

@Arperum I'm British

@RоryMcCune so... @AviD is @Iszi in mufti?

Arperum

@RoryAlsop Because people didn't vote Scotland independent.

Rоry McCune

22 mins ago, by AviD

yeah, well that's what the doctor promised @Simon's dad, and look what happened.

AviD

@RoryAlsop no, @Iszi is @AviD in drag.

Rоry McCune

2:03 PM

^ @RoryAlsop see

Simon

@RоryMcCune ... could it be?

AviD

@RоryMcCune how dare you.

Ohnana

@Arperum ouch.

AviD

I just intimated something about his mom. Leave me out of it.

Rоry McCune

@AviD hey I'm sorry that doctor lied to you dude

but sometimes you need to own the consequences of your actions

AviD

2:04 PM

@RоryMcCune okay I think that was too subtle, you missed it

Rory Alsop

►

AviD

I was saying his dad was "fixed", but it didnt work anyway, so @Simon.

Rory Alsop

would be funny if one of the very Scottish folks @RоryMcCune usually links to did a version for 'I'm Scottish'

Rоry McCune

@AviD yes and I was saying that the reason you know it is cause you were there 'cause you were his dad and thus knew what the doctor had promised....

AviD

wut

I think I have ample proof that I am still virile.

Rоry McCune

2:06 PM

@AviD well yeah, like you said the doctor didn't do a good job

Terry Chia

@AviD Has @ScottPack verified that fact?

AviD

uhh, well okay moving on then...

Terry Chia

►

Arperum

@TerryChia This got weird pretty fast.

Simon

wot

AviD

2:18 PM

@Arperum TWSS

I think the site is broken, I cant see any flags

Ohnana

@AviD i can fix that

Iszi

@TerryChia Guess I'm getting lazy in my old age. Taking that into consideration, it's a wonder @RoryAlsop ever gets anything done.

AviD

@Ohnana oh crap, what are you going to post? Who will flag it?

Simon

My ex-dad wouldn't even play baseball with me.

AviD

@All go flag anything @Ohnana posts now.

Ohnana

2:20 PM

@AviD MUAHAHAHAH

actually, I was going to bounce around and look for "how does i heck plz"

AviD

PLZ SEND MEH TEH HAX

Iszi

Gimme teh l33t h4x0rz scr1ptz plz.

Simon

Can someone tell my ex-dad that he's not funny? I don't wanna talk to him anymore.

Simon

2:42 PM

I always end up killing the chat.

Rory Alsop

@Iszi time travel

Ohnana

at first I thought everyone was playing along with the joke, then I realized that my internet connection died

Iszi

@RoryAlsop Says the man in a fez and bow tie.

raz

Bow ties are cool

Rory Alsop

@Iszi I wish I had a fez. fezzes are cool

I also want a trilby and a fedora

I don't have enough hats

Ohnana

2:50 PM

@RoryAlsop I want an Indiana jones hat

Rory Alsop

I had a lovely Australian bush hat - but it vanished at the front of Rammstein gig

Iszi

@RoryAlsop Doktor Mayhem in a fedora. Now that would be something.

raz

@Ohnana I've got one!

Rory Alsop

@Iszi Obviously an orange one, not a red one

raz

Well my dad currently uses it when he cuts the grass.

Iszi

2:51 PM

@RoryAlsop No, that totally ruins the contrast.

Rory Alsop

@raz it's sharp?

@Iszi True - the only available colours are orange, black and white, with blue lighting

the blue sets off the white beautifully, and also makes the orange zing

raz

@RoryAlsop To get rid of all the Nazis in our yard, duh

Can't fight Nazi's without a hat.

Ohnana

@raz the only thing is I'd probably get a lot of unwanted attention from people who think your hat choices are reflective of politics and personal beliefs

ah college

Iszi

@raz So, your dad is Kung Lao?

raz

@Ohnana All an Indiana Jones hat says is you have great taste.

Rory Alsop

2:54 PM

@raz you said 'cuts the grass', not 'mows down the nazis'

raz

@Iszi Yeah, but less asian

Iszi

Damn, got caught on the Wiki trail again. Went from Mortal Kombat characters to Kung Lao, to Oddjob's hat, to chakram, to Xena: Warrior Princess.

Rory Alsop

@Iszi Oddjob's hat - not so cool. Xena - very cool, but doesn't wear hats...or much else

Iszi

Interesting discovery: Xena's chakram are actually a bit out of place. While her story is set in the midst of Greco-Roman mythology, the chakram is actually an Indian invention.

Rory Alsop

@Iszi heh - plot nitpicker

on Xena of all things

Transcript for