The DMZ - 2015-03-04 (page 1 of 2)

« first day (1539 days earlier) ← previous day next day → last day (3350 days later) »

12:12 AM

huh when did they remove edit revision from reopen review items?

I mean there was a tab that would show you e.g. this: security.stackexchange.com/posts/55723/revisions

when you'd be reviewing items in the reopen queue

@TildalWave they didn't

but you only see the revision if the question was pushed to the reopen queue because of an edit

not if it was pushed because of a reopen vote

12:39 AM

@Gilles Oh? Makes sense thanks I didn't think of that.

Tho there was a recent edit that I didn't see before, that threw me off

Or better said, loads of recent edits

4 hours later…

5:02 AM

LIFEHACKS: You can just take all the luggage off the airport conveyer belt and leave with it. They don't check that it's yours at the door!

5:31 AM

@ThomasPornin C# users just use the libraries provided by the OS. Java... well... I don't know the existing java crypto landscape very well, though I know it's extensive. Perhaps room for growth. But C -- C is a post-apocalyptic Mad-Max wasteland patrolled by marauding gangs like OpenSSL and GnuTLS. This world could use some direction.

1 hour later…

6:49 AM

@Xander Is Kristin your wife?

7:20 AM

morning

7:38 AM

morning

8:09 AM

morning

@JeffFerland whoa, does this mean you left cushy old facebook?

8:25 AM

whassamatta, not hipster enough for you?

Whut? @Jeff - doing what?

1099 is the IRS form for non-employed income.

hahaha @RoryAlsop, you of all people REEALLY need to get a life away from the computer.

do you want me to follow up, so it's not personal?

8:40 AM

@AviD Oh - I didn't know that

I am sad to say that I do :-(

8:57 AM

@ThomasPornin great idea. you should write a nice lightweight SSL lib that works well and call it BareSSL

Morning

@RоryMcCune BearSSL

and Morning

@RoryAlsop I went with Bare as it was kind of a play on words with Bear whilst making sense in the "stripped down" kind of way :)

lol - I know :-)

@RоryMcCune how bout: BareBearSSL?

UrSSaL

9:00 AM

yknow, like CareBear

@RoryAlsop ooh that's good

and the logo would be a nude bear

@AviD lol

like the dudes @ScottPack links to

@AviD bare bear?

@RoryAlsop I dont get it

9:00 AM

@AviD hmm so you'd call it B2SSL for those not in the know and use the name explanation as a funny first slide at confs :op

@RoryAlsop ha

@RоryMcCune or BBS

yknow, just to enhance confusion

@RoryAlsop are you suggesting that packy is into the BareBear scene?

ha! Packy caught on.

@AviD yeah, just needs a recursive acronym in there and we're good to go

and a logo

gotta have a cool logo

@RоryMcCune this picture - just sayin: i.stack.imgur.com/bSQos.jpg

9:02 AM

1 min ago, by AviD

and the logo would be a nude bear

so once we've done all the hard work, @ThomasPornin just needs to do the easy bit of writing the code

@RоryMcCune and he gets all the fame. So unfair.

@RoryAlsop what, was that from the time @ScottPack verified @Iszi ?

OO! A bear in kilt.

@RоryMcCune LOL

user image

or. for packy:

user image

@AviD That's brilliant!

@AviD That's a stance that implies someting...not sure what, but the word Cantaloupe has popped into my head

9:22 AM

@RoryAlsop not familiar with the association.

@RoryAlsop Just wearing that implies the same thing

do you mean like swollen?

or maybe he just realized he is facing a 12 foot armored grizzly in kilt and needs to fight him, and he just shat a brick

@Kisunminttu Well...up to a point, yes :-)

9:50 AM

@AviD you with your personal questions

moratorium....eh? eh?

@RoryAlsop I dont know what cantaloupe means!

well, other than the fruit

anyway I like my explanation better. More in-universe.

@AviD it's a large melon

large

ahhhh

that's amusing, just loaded a page on a test I'm doing, which loads a wee bit of javascript for the video player... 18Kloc of JavaScript to be precise!

@RоryMcCune 18 thousand????

I hope that's a damn good video player

10:01 AM

@RoryAlsop yep in one JS file for one function on the site

730Kb

they didn't even minify it

Ha! I think @Flyk did her own special version of Frozen:

DO YOU WANNA DO SOME BLOW, MAN? FROZEN PARODY

10:42 AM

haha @RоryMcCune finally reading that DVCS post, loved this quote:

> and we are very concerned about either being on the most popular side, or about claiming that the only reason literally everyone doesn’t agree with us is because they’re stupid idiots who don’t know better. For a nominally nuanced profession, we sure do see things in binary.

@AviD Could you please link it again ? I think I read it though, but want to be sure

bitquabit.com/post/…

@AviD heh

so basically, we're either sheep or hipsters.

no wonder I drink.

I hate you all.

3

heh

One thing why I will always (well this might be an overstatement, but still) prefer DVCS is that they let you mess up locally without impacting others.

10:50 AM

@M'vy well, until you push.

@AviD ofc

then I guess tools do not work the same. I really hate svn merges and back&forth feature porting through branches/trunk.

11:04 AM

@M'vy The biggest win git (and probably hg) has over svn is the ability to actually branch and merge in a usable manner.

@TerryChia I guess so

Creepy moment of the day: Boss: "You smell good today, did you use some specific deo?" "Uhm... nope..."

(I guess I did use some new shampoo yesterday)

:)

@AviD THERE ARE A MULTITUDE OF REASONS WHY THIS IS CREEPY. DON'T ":)" OR ANY OTHER WEIRD SMILE ME.

@TerryChia so they all say. I think there are another few big wins though, but I'm too hungry to get all pedantigeek with you now.

@Arperum :-P

better? ;-) ;-) ;-)

no, it was @M'vy the first time.

11:09 AM

@Arperum so this is a "Jennifer Anniston" in "horrible bosses" type of situation

nuff said

@AviD You're older. Ergo creepier.

@Arperum that's ageist.

@AviD Totally is.

> Subversion is closing the barn doors by adding better merge tracking, which should land literally any year now.

Let me laugh about the "any year now" part. Please

> 2017? (speculative at best) Release 1.10.0

Old guys smiling creepily at me is not something I'm aiming for. I'm more in the market for 20something year old woman smiling at me.

11:14 AM

@Arperum ageist and sexist!

@Arperum so, into older women?

@RoryAlsop do you think we should ban him? we should probably ban him. Should we? I want to ban him. Can I please ban him?

@AviD ;-) request denied as too unclear

@AviD When will @AviD's reign of madness end?!

@TerryChia MADNESS?? THIS IS SPARTAAAAAAA!!!!

@TerryChia When Paul's face fades

11:19 AM

@RoryAlsop Paul who?

The hours in between coffee and scotch really have no purpose.

Tweeted by BiIIMurray on March 3, 2015 at 11:46 PM

/cc @AviD

heh, seen it

wait, why cc'd me??

user image

@AviD Do I really have to state the obvious?

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios using event driven asynchronous callback implemented in Io.JS [donuts] [double-entendre] [food] [libations] [rory] [security]

@RоryMcCune this is making less sense

11:22 AM

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security to create a new paradigm of win-win scenarios using event driven asynchronous callbacks implemented in Io.JS [donuts] [double-entendre] [food] [libations] [rory] [security]

but not senseless enough

@AviD that's the point

18 secs ago, by AviD

but not senseless enough

@AviD how does it make any sense at all

it's a deliberate mash-up of buzzwords

@AviD Older? I'll be 27 in a couple weeks. So actually younger >_>.

11:24 AM

if anyone seriously looks at that and thinks "ooh sounds like an interesting room" they have... problems

@RоryMcCune This topic, I like it. Another!

@RоryMcCune you could do better. or worse.

wait, you seriously pinned me saying I hate all techies?

sheepsters.

You know... the pinned stars make it seems as though @AviD is losing faith in the world after his moratorium failed.

@TerryChia The moratorium didn't fail!

It just.... was not as successful as some may have hoped.

Journeyman Geek

Also, that assumes he didn't hate you all to start with.

11:29 AM

@JourneymanGeek Point.

....

@AviD I thought it worked well as a general expression of you hating everyone :)

me?? I'm a big bouncy trouncy ball of cuddly love for everyone!

5

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security in the context of the ongoing CyberWar to create a new paradigm of win-win scenarios using event driven asynchronous callbacks, developed in Io.JS and MongoDB using a BDD methodology [donuts] [double-entendre] [food] [libations] [rory] [security]

aww hell that is so gonna get taken out of context, innit.

11:31 AM

@AviD happy?

@RоryMcCune ... with a big bouncy trouncy ball of cuddly love

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security in the context of the ongoing CyberWar to create a new paradigm of win-win scenarios using event driven asynchronous callbacks, developed in Io.JS and MongoDB using a BDD methodology, with a big bouncy trouncy ball of cuddly love [donuts] [double-entendre] [food] [libations] [rory] [security]

@RоryMcCune I'll work on it later, put it through my buzzword munger

@RoryAlsop done :)

my ears are properly ringing

11:32 AM

hahaha

ear ache destroys my mood

Journeyman Geek

as opposed to improperly ringing?

sets fire to @JourneymanGeek

@Flyk volume of music, or illness?

both, maybe

11:33 AM

@Flyk yay! - @kalina is back!

definitely the former

Journeyman Geek

....

ahh - yeah. I often worry about that. Do you take the MU up on the annual free hearing checks etc?

I spent a few hours re mixing down this track, concentrating on the first half mainly

Journeyman Geek

For the first time ever, I am SERIOUSLY hoping we did not work on a movie.

11:34 AM

reduced the volume of the track by quite a bit, increasing the dynamic range, making it all sound pretty

then cranked everything up to 11, sat back, and was like "yeah this is awesome"

after the second breakdown there was this super weird noise with lots of resonance, backed by some white noise

was quite a bit louder than everything else, since it only appeared in the second half of the track

I miss my desk based volume control

I hope my new one arrives before I go deaf

@RoryAlsop I'm usually pretty sensible, the moral of this story is more "hardware volume controls for the win"

@Flyk yup. I agree.

with a bit of "100dB is not the correct listening volume in pretty much any environment"

followed by "always turn everything off and incrementally readd it when remixing down"

We have an interesting setup on stage which means that at certain venues, we can actually talk to each other without raising our voices, while still blasting loud rock front of house :-)

earplugs when performing

Journeyman Geek

@RoryAlsop directional sound?

11:39 AM

it doesn't help that the day before I spent the entire day playing around with acid lines and various levels of distortion

again without a proper volume control

the sad fact is, I cause more damage to my hearing in the comfort of my own home than at any other point

in other news, I have two labels circling my last batch of tracks like piranhas

I'm going to stay quiet and see if they willingly fight to the death over them

@Flyk Is "Truckers delight (the ode to Rories remix)" on there?

no

Journeyman Geek

Ahh excellent

also, I'm sure I've mentioned before, but I find truckers delight to be highly offensive and distasteful

@Flyk aww :( .. so you're saving that one for the Ministry of sound album, right

@Flyk huh what I just made that up based on rappers delight

is it actually a thing?

11:49 AM

what with it being a cartoon about a trucker who stalks and rapes a woman

@Flyk oooops, is it .. that must be a part of the Internet I had successfully avoided up until now.. I'll not mention that again

sorry

@RоryMcCune meh, I had assumed you were unaware

Ever seen I started using my minitaur for my low bass rather than vsts, all my tracks seem a lot warmer than usual

doesn't really fit in with the style

@JourneymanGeek nope - just very quiet

@Flyk brilliant

Despite being a rock/metal band, we actually need almost no sound on stage. Erik records all the drums into Cubase, and we can run our effects directly into the desk, so if we have good monitors we can have everything set to a sensible level and just have the volume out front cranked up

That said, it was fun to use the Marshall/Blackstar stacks at the Monster Magnet gig - it was exceptionally loud

@RoryAlsop it's surreal

if there was more money involved, it would feel like I've made it

the feeling makes up for the lack of enthusiasm I get for having tracks signed now

that used to be like a YAAAAAAAAY dance around the room feeling

now it's like "oh, now I need to move that project folder to the Completed folder"

"maybe I should write a script to automate that process..."

12:04 PM

@Flyk yeah - we haven't had that yet... :-(

well, sort of. We had an independent label do our first 3 CD's, and they may well publish our next one as well - not sure

this is like... track 30

I started writing studio albums worth of material so I can pitch those as "alternative" albums

but those just tend to be too ambient and just sit on my hard disk doing nothing

never to be heard from again

but, like everything I do, I'm sure there'll be a moment a few years from now where somebody says "oh it would be really cool if you could do something a little more like this..."

"oh, what about these?"

the last couple of tracks I sent out are actually several years old, just remade with hardware instead of software and updated somewhat

where at some point in the past (I know exactly when) I've sat and chilled out, wrote the basis of two tracks in the space of a few hours and then never opened the project files again

12:38 PM

0

Q: How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver software". Rightfully so. The cert expired in 2013 and it's cert path is just itself, which isn't a ...

certificates windows certificate-authority windows-permissions driver

I'd like to add the fishy tag :)

@M'vy There are tons of reasons to modify a Windows driver... maybe you want those packets to be monitored.

that still sounds suspicious to me :)

@Adnan-Adi Yup, sure is.

@M'vy You're just a paranoid android

probably

That topic line keeps getting weirder

12:50 PM

@M'vy excellent - if it keeps growing, I wonder if @RоryMcCune will hit a limit at some point

@RoryAlsop at some point we should just change it to "wibbily wobbly timey wimey" thing

@RoryAlsop @M'vy yeah there's got to be a buzzword event horizon

it's all @AviD 's fault, he keeps wanting it to make less sense

well otherwise, its like youre trying to make it real.

@AviD nah I just want it to be close enough to a security start-ups mission statement to be uncomfortable :)

thats my point.

12:53 PM

@AviD whaat you can't say that it looks like something any sane person would say

other than the cuddly love part, it could easily fit any number of corporations' mission statements.

Hell, @RoryAlsop probably wrote it a few times.

@RоryMcCune I said corporate. What's sane got anything to do with that?

have you read any corporate mission statements? now THOSE do not look like something any sane person would say, ever.

@RоryMcCune Find a way to toss in "blockchain".

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security in the context of the ongoing CyberWar to create a new paradigm of win-win scenarios using event driven asynchronous callbacks, developed in Io.JS and MongoDB to persist data to tbe blockchain, using a BDD methodology, with a big bouncy trouncy ball of cuddly love [donuts] [double-entendre] [food] [libations] [rory] [security]

@TerryChia does that work?

Lucas 'Paul' Kauffman

perfect

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security in the context of the ongoing CyberWar to create a new paradigm of win-win scenarios using event driven asynchronous callbacks, developed in Io.JS and MongoDB to persist data to the blockchain, using a BDD methodology, with a big bouncy trouncy ball of cuddly love [donuts] [double-entendre] [food] [libations] [rory] [security]

Lucas 'Paul' Kauffman

1:00 PM

MongoDB is so mainstream

@RоryMcCune +1.

Lucas 'Paul' Kauffman

We're using Elasticsearch

that's more hipster

@RоryMcCune hmm. I think I reached the limit.

I tried editing it.

room topic changed to The DMZ: A Chat room where one may take a 30,000 ft view of Cloud, IoT and DevOps security in the context of the ongoing CyberWar to create a new paradigm of win-win scenarios using event driven asynchronous callbacks, developed in Io.JS and MongoDB to persist data to the blockchain, using a BDD methodology, with a big bouncy trouncy ball of cuddly love for everyone [donuts] [double-entendre] [food] [libations] [rory] [security]

My reaction to The Topic: youtube.com/watch?v=6nSKkwzwdW4

maaan

it dont fit

was gonna be this:

wow, too long for chat too

okay wait

1:06 PM

We have too many damn pins on the star wall.

@TerryChia I only see one.

@TerryChia well, in std. view, if I go through to the "show all", I get a few more :-p

@TerryChia s/star/avid/

@RоryMcCune Avid has a wall?

@raz yeah, just look to the right of the chat stream

oh wow

1:13 PM

> A corporate endpoint that encourages the internal community to give back and take a 30,000 ft view of Cloud, IoT and DevOps in the context of Cyberwar, to synergize an innovative new paradigm of win-win scenarios utilizing scalable, event-driven, non-blocking asynchronous lightweight callbacks inspired by Io.JS, to persist the blockchain to the cloud using non-persistent persistence due to MongoDB's web-scale scalability, and governance by a BDD-derived methodology.

2

that is still too long

@RоryMcCune now THAT is how its done.

stop! You're going to attract investment!

LOL

in truth, some of those snippets were taken from real sites.

there is a whole sentence there straight from node.js

wut, @RоryMcCune you gone and pinned everything I say??

@AviD pitches to ycombinator

@AviD you are now perma-pinned

@AviD nono, I just liked the juxtaposition of the "ball of cuddly love" and "I hate you all"

1:16 PM

@RоryMcCune lol

now go and take my ideas and make it fit.

see? I could be a corporate CEO after all!

I have a draft blog post which has the title "Everything is Terrible" somewhere...

@Tinned_Tuna its been done

I should finish it.

I believe StillDrinking has "Programming Sucks"

@Tinned_Tuna yes, an instant classic

but, iirc, this was more than programming/computers.

stilldrinking.org/programming-sucks

There's also Micken's "The Night Watch"

1:17 PM

@Tinned_Tuna you're thinking of sturgeons law.

Sturgeon's revelation, commonly referred to as Sturgeon's law, is an adage commonly cited as "ninety percent of everything is crap." It is derived from quotations by Theodore Sturgeon, an American science fiction author and critic: while Sturgeon coined another adage that he termed "Sturgeon's law", it is his "revelation" that is usually referred to by that term. The phrase was derived from Sturgeon's observation that while science fiction was often derided for its low quality by critics, it could be noted that the majority of examples of works in other fields could equally be seen to be of low...

if its on wikipedia, you cant write is as your own blog post.

thats stealing.

haha

room topic changed to The DMZ: A corporate endpoint that encourages the internal community to give back and take a 30,000 ft view of Cloud, IoT and DevOps security in the context of CyberWar to synergize an innovative new paradigm of win-win scenarios using scalable event-driven, non-blocking asynchronous callbacks, inspired by Io.JS to persist the blockchain to the cloud using Elasicsearch, governed by a BDD methodology. [donuts] [double-entendre] [food] [libations] [rory] [security]

Dropped MongoDB for Elasticsearch (really we should ditch Io.Js for Go as well)

heh

its shorter, so we can fit in more buizzwords

@RоryMcCune hmm, Elasticsearch is too solid.

redis?

the first rule of corpspeak lingo bingo, is never use a mildly complex word when it may be possible to squeeze in a much more complicated word.

bonus points for extra wordage.

Nah, you need something as buggy as the 8th plague. MySQL?

e.g. using -> utlising

Lucas 'Paul' Kauffman

1:25 PM

@AviD Elasticsearch supports redis you scrub D:

@Tinned_Tuna MySQL is soooo solid compared to some of the popular crap nowadays, its practically corporate.

Lucas 'Paul' Kauffman

@Tinned_Tuna redis backed by Elasticsearch running on Celery?

@AviD That statement is deeply distressing

@AviD and it's owned by Oracle <blech>

anyway its just down to finetuning now. like utilising vs using.

Lucas 'Paul' Kauffman

1:27 PM

0

Q: What is the difference between Data Security and Information Security ?

Googled a lot on learning differences between Data Security and Information Security ! But no satisfactory answer was found ! Expecting a detailed Answer in the perspective of Current Job Market & Technical Awesomeness !

seriously that last sentence made me chuckle

though I'm disappointed we couldnt fit in "non-persistent persistence" and "MongoDB's web-scale scalability"

@Lucas'Paul'Kauffman but he tagged it "information", so he's just looking for some information, yo

@Lucas'Paul'Kauffman incoming close votes, anyone....?

Bueler, Bueler?

> Expecting a detailed Answer in the perspective of Current Job Market & Technical Awesomeness !

I hate these sentences.

@M'vy @RоryMcCune I think that topic needs more technical awesomeness.

also lacking perspective.

@M'vy yeah that's not a good sentence

@RоryMcCune I think it's a brilliant sentence

how else could you ever hope to hire anybody, if they dont have technical awesomeness?

1:40 PM

room topic changed to The DMZ: A corporate endpoint that encourages the internal community to give back and take a 30,000 ft view of Cloud, IoT and DevOps security in the context of CyberWar to synergize an innovative new paradigm of win-win scenarios using scalable event-driven, non-blocking asynchronous callbacks, inspired by Io.JS to persist the blockchain to the cloud using Elasticsearch, to provide technical awesomeness [donuts] [double-entendre] [food] [libations] [rory] [security]

heehee

@AviD Makes me feel like he orders an answers

@M'vy its probably what he's used to hearing from corporate recruiters

thats how real people talk, isnt it?

@AviD While you're out, buy some milk?

heh

1:42 PM

anyway coffee time \o/!

@M'vy Occasionally, I'll have statements sort-of to that effect at the end of some of my more complex or ambiguous questions. Helps to more clearly define how an answer's acceptability will be judged. However, I definitely wouldn't phrase it like he did.

so, y'all might be interested to know that tomorrow (actually starting this evening) is the local holiday of Purim - basically a mix of Halloween, St. Patrick's day, and American Halloween (with a touch of 4th of July thrown in, or Chinese New Year if you prefer)

@AviD That sounds both fantastic and horrific at once.

you have NO idea

basically everybody puts on costumes, gets stinkin' drunk and stuffed on food, then blow off some firecrackers.

no way that can go bad, right?

Purim (/ˈpʊərɪm/; Hebrew: פּוּרִים Pûrîm "lots", from the word פור pur, related to Akkadian: pūru) is a Jewish holiday that commemorates the deliverance of the Jewish people in the ancient Persian Empire where a plot had been formed to destroy them. The story is recorded in the Biblical Book of Esther (Megillat Ester מגילת אסתר in Hebrew). According to the Book of Esther, Haman, royal vizier to King Ahasuerus (presumed to be Xerxes I of Persia), planned to kill all the Jews in the empire, but his plans were foiled by Mordecai and his cousin and adopted daughter Esther, who had risen to become...

damn I'm overly cynical cuz I'm hungry

note this part, in case you miss it:

> Alcoholic consumption was later codified by the early authorities, and while some advocated total intoxication,

thass right, GOD tol' me to be gettin sloshed

1:57 PM

@AviD when's St Pat Day anyway?

@M'vy isnt it in May?

no, march 17

0

Q: Is creating secondary account on Black-Box Pentest Forbidden?

Okay, so here it goes. I am the Red Team Lead, and as described earlier; not far (like about a week), I posted this. At the time, I was looking for a beautiful technical title which could match down my findings. I mentioned it as 'Weak Password Policy'. Since most of the penetration testers faile...

penetration-test black-box

I have a feeling that some people have a different definition of red team lead than I do

@RоryMcCune I don't get what he wants there

« first day (1539 days earlier) ← previous day next day → last day (3350 days later) »

Transcript for

Mar '154

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile