« first day (1541 days earlier)      last day (3331 days later) » 

 
2 hours later…
1:44 AM
@TerryChia I use my own Subversion repository, but it is not public.
I'll publish a pre-version when a pre-version will be ready to be published.
This reminds me that SSL is crypto so there are applicable crypto laws. I must check that.
 
 
4 hours later…
6:15 AM
 
 
2 hours later…
8:34 AM
@TerryChia LOL nice
@Xander LOL, very funny. Actually GC in Ruby 2.2 is quite a lot better from what I've heard, and I quite like the runtime
@Xander but yeah not sure I'd build a highly scalable app. in it (I've heard tales of apps being rebooted every x minutes to clear up memory before)
morning all
@ThomasPornin you could always take the PGP approach and print it all out to take across a border (IIRC)
 
8:51 AM
@RоryMcCune It always puzzled me why the GC is just a big deal in Ruby land when I don't see Python users complaining about it.
CRuby and CPython have pretty similar designs after all.
 
@TerryChia yeah it's true, I'm not sure if that's 'cause Python's GC is just better or if pythonistas are just less worried about it...
 
The big performance gripe in Python is the GIL.
 
@TerryChia yeah Ruby people gripe about that too
:)
 
Not as much as GC issues though.
 
@TerryChia heh true
 
9:08 AM
@TerryChia tunemygc.com
 
Hmm I actually don't even think that Python's GC is tunable.
 
9:37 AM
1
Q: Spy Software - Litigation - Help!

R BirdI have been hacked by an ex using MSpy software and this went into two laptops a desktop and an Android Samsung Galaxy 4. I also know that they exploited child protections on Google Chrome, which means that they likely are still getting in and out of my Google account so I have switched to Pro...

If we remove all the noise, does this stands as on-topic?
 
I don't see much in there that's useful...
Most of what is required is that forensic/legal piece which is underway. A chunk is speculation, and the query about filetypes is a bit meh
 
yeah
> they are staff in the Computer Science and Engineering Department and they have access to the smartest minds
I also like point 1.
Is there a cheap way to do the things like a professional team.
 
10:06 AM
@StackExchange Yeah but that leaves you open to the Known Off-time, No UPS and We Know You Grow Pot attacks :P
 
10:16 AM
The only time I ran into GC issues in .net was when I allocated a new screen sized pixel array for 10 screenshots a second. But that was easily fixed by using a pool.
 
This is different for each DBMS, you'll have to be a bit more specific otherwise it's a wee bit too broad. — TildalWave 49 mins ago
Ok, I've narrowed it to just Oracle and MySQL. — BrainSCAN 4 mins ago
 
:)
 
Next time I'll comment with "wee bit too something" I'll explain that I meant to say that in Rhod Gilbert's voice
 
10:34 AM
hey @AviD you'll be happy to see that your favourite hipster-OS is getting an updated version of Office :)
 
10:53 AM
huh, did not expect to see a visual basic editor on a Mac
 
@RоryMcCune That's... odd...
Also, where do I download a Windows 8.1 ISO?
 
@TerryChia yeah, Office's whole macro thing is weird, it's like they're trying to deprecate it but can't bring themselves to eliminate it...
@TerryChia Legally? I generally get mine from MAPS or used to from Technet
 
@RоryMcCune Yep, I got a key, I just need the ISO.
 
Hmm, actually I may still have a copy. looks
 
10:56 AM
they do eval ISOs which might well work with a key you have
although I've had some bother with that in the past
 
Oh, it's cool. I have the Win 8 ISO.
 
@TerryChia sorted then as I think it can be auto-upgraded to 8.1
 
@RоryMcCune Any general setup tips? I'm probably gonna go ahead with the install tomorrow.
 
@TerryChia TBH 8/8.1 is pretty easy these days, just get the latest versions to reduce the "metro-ness"
and then you can likely default to desktop view which is nice
 
Goddammit! I realize my backup HDD is in btrfs.
I'm gonna have to spend some time copying over data before I can reformat it...
 
11:14 AM
@TerryChia @Xander more rails GC stuff bearmetal.eu/theden/rails-garbage-collection-tuning-approaches - weird how ths comes up and suddenly lots of articles
 
11:31 AM
-2
A: Spy Software - Litigation - Help!

jenermyDo not know much about mspy. But I am using Micro Keylogger on my computer as a parental control software. Every time when I have any question with the keylogger, i would contact their support for help and they can always clear my doubts timely. In your case, it is better for you to contact the s...

 
@RоryMcCune On the topic of Ruby perf have you seen readygo?
 
that Micro Keylogger spam is back
 
@TerryChia nope whuzzat?
 
made my first HTTP2 page access today http2.golang.org
@TerryChia handy!
 
11:46 AM
@RоryMcCune Oh, what's a good IRC client for Windows?
 
@TerryChia I tend to use hexchat
 
@JourneymanGeek dammit ninja'd
I was looking for the link
@TerryChia yeah what @JourneymanGeek says :)
 
@JourneymanGeek @RоryMcCune Cool, that looks fairly decent and xchat is what I use on Linux anyway.
 
Heh. I use it with the old silverx xchat black theme and a hacked up wonton soup gtk theme :p
 
@TildalWave was that spam?
 
11:55 AM
And really, till there's a good konversation port, I won't even think of switching
 
I'm more of a texted based IRC client guy :)
 
Windows tho :p
 
yeah :(
 
@M'vy Yeah it wasn't an answer and nobody asked for info about Micro Keylogger ... and it's a persistent spam we've been trying to root out for a long time now. Micro Keylogger this, Micro fucking keylogger that, and never answering the question just using threads as an excuse to post a link to it.
 
@TildalWave Ok. I flagged as NaA, but I'll got for spam next time then :P
 
12:26 PM
wow, thass, like, a lotta pings
@RоryMcCune yeah but cmon admit it, it was damn funny
 
@AviD well yes, but not very morotoriumy
 
thats why I deleted it
like, almost immediately
so it doesnt count
 
that said I did a quick "T*SS" search only to realise to my chagrin, that the only mentions since the morotorium started have been me (in my defence, generally ironically)
 
@AviD TWSS!
@RоryMcCune There, fixed.
 
@TerryChia thanks :D
 
12:35 PM
umm
 
@TerryChia Don't fall into that trap Terry!
 
:)
 
@RоryMcCune Said no one ever.
 
@TerryChia yeah installing something useless and annoying ... or the ASK toolbar, tricky choice :p
 
Adi
12:48 PM
Today I heard something: "Bored people are usually, themselves, boring"
I'm not saying this applies to @Flyk
buuuuut
 
@Adi I've never worked out how people get bored these days. My general problem is flicking around too many of the things I find interesting, and not really focusing on one at a time
 
lol
Yup
or wanting to do a specific thing but not quite being able to do it
 
@JourneymanGeek yeah too easy to get distracted by shiney things (especially with the Internet there)
 
Lol. Work is going to force us to internet through a terminal server soon :(
 
@JourneymanGeek why is that, security reasons or just general Internet control?
 
1:01 PM
Security, clients insist on ot
 
raz
0
Q: What's your Information security question? Be specific

SteveIt is possible for a trojan, which allows to secretely remote control a computer, to reinstall itself after upgrading to a newer Windows ?

Woah!? A virus that secretes!?
 
ah damn
ninja'd
@raz WUUUT?
 
@JourneymanGeek Lol wut.
 
raz
@M'vy haha
If my computer ever starts secreting... the world is in trouble.
 
You're free to do whatever you want otherwise :p
@TerryChia movie industry
 
1:08 PM
@JourneymanGeek a touch worried people might leak stuff?
 
@JourneymanGeek Still sounds stupid.
 
@RоryMcCune Meh, I can think of about thirty different ways to leak stuff without internet access off the top of my head.
 
@TerryChia sure but that's one avenue, I'm guessing they have other security measures in place
 
@RоryMcCune yeah
 
1:10 PM
@TerryChia as we all know no security is perfect but that doesn't mean people should try and improve it
 
@RоryMcCune Not at the expense of reducing efficiency.
 
@TerryChia all security is a trade-off
 
@RоryMcCune actually, imo its security theature
 
@RоryMcCune Yes, but this isn't a worthwhile trade off.
 
@JourneymanGeek well that's not unusual :)
 
1:11 PM
@RоryMcCune I think I said that quite recently
 
And leaks from us would likely be of limited value outside spoilers
 
@TerryChia without knowing their environment and what other controls they have in place and their risk profile you can't make that determination
@TerryChia you may be right, you may be wrong, but you don't have all the information necessary to make that determination
 
@RоryMcCune I dunno, I'm 100% against technical staff having such inconveniences forced on them in the name of "security".
 
@TerryChia well, keeping our clients is a worthwhile tradeoff.
 
@TerryChia sure, no doubt, many techies dislike the idea of security controls that get in the way of their work
 
1:15 PM
Meh, I just bring a netbook to work :p
 
@TerryChia and that's a valid perspective, but the company may have a different perspective
 
@RоryMcCune Another reason why I'll probably never fit in at a $BIGCORP. :)
 
@TerryChia yeah their policies would likely drive you nuts. I've worked in some really restrictive env's as a technical person, it's not really much fun
@TerryChia pen. test companies are much better
 
@RоryMcCune I can imagine. I don't think you can run 50% of useful pen testing tools without root.
 
@TerryChia yeah depending on test type it would be even higher
something like VLAN hopping or low level stuff and it's all root needed
 
1:27 PM
@ThomasPornin aw yis
 
1:37 PM
awww yeeaaah, my parents are visting this weekend, so my dad just brought me a bottle of 12 year glenlivet.
one of the nice ones.
he doesnt like the smokey, so he wanted me to have a not-smokey one...
 
Says the man with the tigger face.
 
@TerryChia we're not that big
And the mood I get is "meh, why do we have to do this shit?"
And yes, it will be a complete and utter pain in the arse for everyone ;p
 
@M'vy wut? yes, yes I did?
 
1:53 PM
looks like there's a big xen vuln. coming ... community.rackspace.com/general/f/53/t/4978
3-4 vulns coming on the 10th
 
JS has no logical XOR? What a piece of crap.
 
@Simon oh my god
you're right
 
@Simon you expect logic from JS LOL
 
2:09 PM
smallest possible XOR: if( foo ? !bar : bar ) {
 
@Ohnana Yeah fuck that, I'll use the longer form for readability.
 
@Simon if( foo ? !bar : bar ) { //XOR
??
 
I guess that would work.
 
@Simon JS has no integers...
 
comments are your frieeeeend
 
2:11 PM
@TerryChia Bleh.
 
JS has a bitwise XOR nonetheless
hm I may be stupid but:
> foo != bar
?
 
What about it?
 
it's a XOR
 
Not with 3 or more variables.
 
2:17 PM
check out the truth table
0 ^ 0 = 0, not 1
 
Truth tables, good times, good times.
 
(false != false) is false
 
@M'vy you're false.
 
basically you're comparing if the two values are logically equal and negate that
 
10/10
 
2:19 PM
c = !(a == b)
 
@M'vy wow I need some more coffee. or i just need to redo my logic courses
 
@AviD you mean moratoriumly speaking?
 
@M'vy That's semantically correct but isn't obvious at a glance so it's still stupid not to have an xor operator.
 
@TerryChia well != is an operator. Obviously, it only stands as XOR for booleans
 
@M'vy Yup.
 
2:25 PM
but since he asked about "logical XOR"
 
I honestly don't remember the last time I needed to use a logical xor in real code.
 
@TerryChia the last time you checked the value of a boolean var? :P
 
@TerryChia i do. helpful for command line options
input from file or cli, not both
 
@M'vy Pssh!
 
@TerryChia 3 variables and you wanna test if only one of them has a value.
 
2:28 PM
@Simon That does not compute in the nice shiny land of Python.
 
@Simon Why would you XOR there?
 
if (@Simon.previousDate.isDonut() != @Simon.nextDate.isDonut()) { print('pls') }
5
 
@Ohnana I suppose you are using a low level enough language that you are manually parsing argv?
 
@TildalWave Obvious starbait, but I'll bite
 
that's what donuts are for :)
 
2:32 PM
@M'vy Let's say in WinForms: if (tb1.Text != '' ^ tb2.Text != '' ^ tb3.Text != '')
Easy way to test if only 1 of them has a value.
 
concatenate them
 
And if 3 of them have a value? you get true XOR true XOR true = true
 
ah only one ... sorry
 
Who would you guys get your SSL certs from?
 
Actually XOR of multiple boolean is true if there is a odd number of true values
@Tinned_Tuna @ThomasPornin
But the requirements are drastic I've heard.
 
2:35 PM
@M'vy I want to buy a certificate, not a disused nuclear bunker with functioning life support in the antarctic :-p
 
@Tinned_Tuna Are you calling @ThomasPornin a disused nuclear bunker?
 
@M'vy Fuck, you're right.
 
@Simon logic's a bitch
 
WHY DO I GET INVOLVED IN THIS ON THIS SLEEP DEPRIVED MORNING?
 
*afternoon
 
2:36 PM
@TerryChia nah, that's what he'll give you if you ask for security
 
@Tinned_Tuna IIRC last time I got one, I went via my DNS provider (www.dnsimple.com)
 
you are given 80 years worth of food and the location is a secret -- @ThomasPornin will take that information to the grave
 
@Tinned_Tuna depending on what you want it for, there are free options IIRC
 
@M'vy pls
 
@RоryMcCune aye, I'm aware of what's out there, but they all seem to be undeserving of money :-p
 
2:37 PM
@Simon sorry... it's friday
 
@Tinned_Tuna well you could always do startssl.com at least that restricts the amount you give them to £0
 
@Simon I'm not sure how expensive the operation will be in C# but in Python I'd plunk the results in a list and do a count.
 
@TerryChia Oh cool, I'll check that out.
 
@RоryMcCune aye... I am sad that there's no "These guys are really good" answer.
it's all just "Yea, they're all terrible, best of luck!"
shitty market.
 
@Tinned_Tuna well Lets encrypt will be here soon (hopefully)
 
2:41 PM
@RоryMcCune that seems to be the best of a bad bunch... I'm still wary (mostly because I don't know how it works)
 
@Tinned_Tuna indeed, but at least the code is open (on github) and the org running it has a reasonable rep (EFF)
 
@RоryMcCune yea, I get that. I just don't yet know how it's working.
 
hey guys. may I ask you what do you think of a strange behaviour that happened when I accessed a website recently ? I want to know if I'm being paranoid or not.
 
Did a bomb blow up as soon as you browsed Google?
 
no, not exactly :)
 
2:52 PM
Fine, fine, tell us what happened then.
 
I accidentally accessed a website after using the wrong tld (used .com instead of .org). I got a blank page. Usually when I see blank pages I immediately hit ctrl+U to look at the source of the page to see if there is something "fishy" about it. This is what I tried to do with this particular website also, but in a couple of seconds I was redirected to facebook. It was the facebook login page. This seemed odd to me, why would a website redirect me to facebook ?
 
@misterjinx I don't think that's a weird practice. If a company wants to secure a domain name but is too lazy to build the website, they can just redirect you to their facebook page.
 
Wouldn't the facebook link to a page then?
the one I was redirected to was having r.php in the url
 
Unless it's badly configured. Try to reproduce it in a VM if you're scared of black magic.
 
I scanned that particular website with virustotal and sucuri sitecheck and they report it's clean of any malware.
But there is something strange in the source code of that website
I did a curl request and saw there is a javascript which sets a document cookie and an iframe which loads a the same website with some query string parameters added to the url
 
3:04 PM
@misterjinx nope out and never come back
 
the params don't have readable values, seems to bye some sort of encryption
 
Yeah, now that's getting fishy.
OR PHISHY, HA!
 
*be
I have the source code saved if anyone is interested to have a look at.
 
@misterjinx pastebin?
 
yes, pastebin
 
3:09 PM
neat. I probably won't have any useful opinions but it's always fun to read
 
What I noticed after scanning the website with sucuri sitecheck and other tools is that the values of those query parameters change fro request to request.
*from
 
interesting. the page has an adblock whitelist key on it
 
I searched google for that particular url (.org one) but couldn't find anything. All the results are about .com version of the domain
which is where I wanted to go in the first place
 
3:29 PM
hmm..just figured that some of the params are base64 encoded. after I decoded them I see some chinese characters which even google translate don't know how to translate
 
@misterjinx yeah, the whois records shown that it's owned by a chinese name service. probably a scammer website
 
3:55 PM
yes, I don't know what do do next. those base64 decoded chinese characters that canbe translated to english don't tell much. the only thing that bothers me is why the cookie set and the redirect to facebook.
thanks for your time
 
@misterjinx simple scam, don't worry about it
you didn't fall for it. you're fine
 
4:15 PM
@Ohnana Did you fall for me?!?
 
@Simon stfu donut-themed cleverbot
 
:'(
 
4:42 PM
That's not the kind of thing a gentleman like @ColinCassidy would ever say.
 
@Simon are you just saying that 'cause @ColinCassidy just joined the room?
 
@RоryMcCune Whoa, that is a bold accusation, sir.
 
BTW seeing as this is the Tiggers off day, shall I remove the morotorium nonsense
@Simon well it's friday and I'm almost finished for the day :)
 
@RоryMcCune YES.
 
room topic changed to The DMZ: ' DROP Table Morotorium;-- [donuts] [double-entendre] [food] [libations] [rory] [security]
12
 
4:53 PM
:D
 
glorious
also the wawa near me is closed due to a power outage. it's the end times
 
@Ohnana You and your wawas.
 
@RоryMcCune You should pin that too, for extra effect.
 
@Iszi done :)
when the tigger gets back from his day off he'll probably ban me for ages, but .. worth it :)
 
5:09 PM
@RоryMcCune Nah, you're like best buds with one of the other mods. Can't happen.
 
@Iszi Remember when we were best buds, ex-possibly-not-so-ex-dad?
 
@Iszi ahh but these tiggers an unpredictable lot, never know what's going to happen ;)
 
5:24 PM
@Simon I dunno what you've been smokin', but I hope you brought enough for the whole class.
 
5:36 PM
I want some
 
@RоryMcCune is the typo intentional?
 
5:59 PM
pls all
 
@RоryMcCune Ha, yeah...Kelly works in massively distributed/parallel systems so her requirements (and perspectives) can be a bit...extreme. I've actually been playing with Ruby some in the last couple of weeks, and I have to say, it's quite an enjoyable language. As to the perf, well, comparatively speaking it may not be great, but it's fine for the vast majority of apps.
 
@Xander Tsk tsk, another girl on Twitter that you're following. I'm watching you, son.
 
@Simon I appreciate your concern.
 
6:50 PM
@TildalWave well I must say I wasn't paying huge attention to my SQL syntax as I typed, but lets say yes it was :)
@Flyk you would :op
 
@RоryMcCune can mods ban other mods?
 
@Ohnana ahh I am not one of the exhalted mod group, I'm but a lowly room owner
 
@RоryMcCune lol peon
 
lol pee on
 
@RоryMcCune It's not the syntax that's typoed.
 
6:55 PM
@Iszi picky picky picky, moratorium isn't a word I use that often :op
room topic changed to The DMZ: ' DROP Table Moratorium;-- [donuts] [double-entendre] [food] [libations] [rory] [security]
 
Now we have to star that one? You guys are exhausting.
 
@misterjinx Aww, that would have been fun to look at. Ah well, not at FB. Their problem :P
 
@Simon That's what your mom said last night.
 
@Iszi Are you talking about your wife? Does that mean we're officially back together?
 
@Simon No, I don't need to have been there to know. That's just how your mom is.
 
7:02 PM
@RоryMcCune heh yes that's what I meant
 
For fucks sake, I downloaded 42.zip to pentest and my antivirus is mad now.
 
Wow. 30 rep from this one already? I mean, I know it's about a recent release but I didn't expect it to start up this well.
2
A: How do I play the "Homeworld Remastered Original Soundtracks"?

IsziTwo things I've figured out: The music files are downloaded to the following path by default. They're in MP3 and FLAC format. You should be able to play them in your media player of preference from here. (MP3s played fine in Windows Media Player, and FLAC played in VLC, for me.) C:\Program Fil...

 
So yup, if your Windows Security Essential is set to automatically scan zips, it will eat 3 GB of RAM after downloading 42.zip
 
@Simon Wasn't that the whole point ?
 
7:18 PM
@ThomasPornin I wanted to feed it to a mail antivirus, not my own -.-
 
@TildalWave is it her birthday or something?
 
@Ohnana not that I'd know of, just found it online
 
@TildalWave :| hopper wasn't a physicist though
she dealt with the theory of computer science
 
@TildalWave I always thought that "Grace Hopper finding the original bug" was God trying to make a bad pun on "grasshopper".
 
@Ohnana obviously you didn't see any of her lectures
 
7:31 PM
@TildalWave i mean you have to poke physics if you want any of your hardware to work, but a lot of those other women were doing things in pure physics, not applied physics
 
@TildalWave Love that talk
I was nerd-sniped
0
Q: Is it possible to construct a passively self-destructing message?

kojiroIs it possible to construct a message that passively degrades over time without requiring an external factor to destroy it? Things that are similar, but not what I mean: A hard drive that degrades over time may become harder to read, but if you successfully copy the data from it to a more robu...

 
@Ohnana we're all physicists nowadays, wanna become one just publish to some scientific journal that black holes are really in 50 shades of grey
 
Personally, I am a physicist.
 
@TildalWave i'd rather swallow a butcher's cleaver
 
@Simon you'd be surprised how much donuts are used in physics
well, tori (which is plural or a torus BTW)
@Ohnana I just had one "physicist" from some rural backwaters of Australia stalk me on Twitter because he's certain he discovered faster than light communication
 
7:36 PM
awww your first internet stalker
adorbs
 
oh not even by far
good thing about Twitter is you can mute or block people
legally
 
@tombull89 lol. thanks for the heads up
 
8:21 PM
any postgres experts here?
 
8:43 PM
Im not an expert, but I know one of the devs.
And I've worked with him and the team a wee bit on securing postgres
 
I have a simple problem: admins are creating their accounts on dbs and their passwords are showing up in cleartext in the logs
is there a way to set a password in such a way so that passwords are not in the clear in logs?
what is the output in the logs when you use: ALTER USER username WITH ENCRYPTED PASSWORD 'password';
 
8:56 PM
Ooh - I should have documentation on this. I'll look shortly
 
 
1 hour later…
10:42 PM
@Simon you are all just a tab in my chrome window (and in irritation in my life)
 
11:17 PM
@ColinCassidy COLIN?!? IRRITATION?!?
 

« first day (1541 days earlier)      last day (3331 days later) »