The DMZ

A: website security checklist?

2

Take a look at this answer from Programmers.SE: http://programmers.stackexchange.com/questions/46716/what-technical-details-should-a-programmer-of-a-web-application-consider-before Then look under: Security It's a very good answer in general and it's very detailed.

This shouldn't be a valid answer, right?

yeah, but its even more so when they are running the show

It's pretty much "link only"

kinda cat and cream situation. Fox and henhouse.

1:03 PM

it's unfortunately part of how the UN operates

@CodesInChaos Yes. After 4 years of continuous residence.

@RоryMcCune so you're saying the UN is practically worthless?

@AviD that's a conclusion you could come to, not saying I did :)

@CodesInChaos Of course, I already have 4 years of living in Finland continuously, but the years when you were a student don't count as continuous.

@Adi oh cool. thats pretty soon, isnt it? you've been working there close to 3 years?

1:06 PM

@AviD A bit more than 4

@RоryMcCune not saying you didnt either ;-)

But two years I was studying, so they don't count

@Adi ah. so another few years....

hey what about if you marry a Finnish citizen? does that automatically grant rights, like in US?

Ohnana

idk, I think th UN is a good mouthpiece. It's not like they're going to start swinging their dick around, because everyone would just go to war against them. They're a peaceful organization, and they allow countries to come together and discuss things peacefully.

bit like amnesty international

@AviD Yup, summer 2017 I can apply for permanent residence

@AviD Marrying a Finn gives you the same rights as work-based residency

So it won't give me anything I don't have now

1:08 PM

@Ohnana well... they have deployed UN forces on occassion. only about half did were they doing the right thing (let alone successful)

@Adi well, a wife

;-)

@Adi Well at least you can be more selective on your job

Ohnana

@AviD i thought they just called on member states' forces

@M'vy With price of being legally tied down to one person

@Ohnana well yeah exactly. There is no UN that is not member states...

I'm not a big fan of marriage, really.

1:10 PM

its usually a mix of countries, with some oversight (also from other states...)

@Adi hey, sometimes being tied can be interesting ;-)

NO I DONT WANT TO HEAR DETAILS

@AviD True, but when I'm the one doing the tieing

(no clue how it's written)

@Adi Well if it's the right person, that can't be bad :)

Ohnana

@AviD aw.

oh jeez, here we go again

@M'vy you're on your own ;-)

@AviD ah ah ah

1:13 PM

For me, I can hang in there a couple more years and then I'll get my permanent residency. Of course, it really doesn't grant me any special rights (travel advantages, voting, working in other EU countries, etc.)

but still pretty good

@M'vy (I totally agree with you, but having that conversation with @Adi AGAIN is pointless ;-) )

@AviD again?

@M'vy bt;dt.

@M'vy Yeah, we talked about this before

thanks @Simon, I like that.

1:13 PM

Ok

@Flyk will be disappointed she missed today conversation I'm sure, so many opportunities for star bait worthy comments

@RоryMcCune and opportunity of not being bored

@RоryMcCune No worries. @Avi handled that

@M'vy indeed

@Adi are you suggesting that the tigger was acting as an agent provocateur?

2

@Adi wut

1:18 PM

@M'vy and, in some part of the conversation, an opportunity to be bored.

@AviD wat

oops

@Adi yeah, but the difference is that last time you didnt have @Kisumintthu.

Oh.. you'll probably miss that reference

@Simon good job at missing the right line :)

@AviD You know, I've been dating her for almost 2 years :D

1:19 PM

@M'vy I'M GONNA KICK YO FRENCH ASS

@Adi exactly!

@Simon I borrowed your "BT;DT"

@Simon svp

@AviD Ahhhh, my pleasure.

@M'vy pls

I have just noticed that I'm on the starwall

You understand why, right?

1:21 PM

For anger and penetration

lulz

and now it's time to play Insurgency

My favourite game this year

1:36 PM

iamondemand.com/blog/…

(Title: 5 Key Benefits of Docker: CI, Version Control, Portability, Isolation and Security)

Anyone working on docker containers here?

NO @RоryMcCune I AM NOT

rory no

@AviD not what?

@M'vy I've done some looking at them recently..

Dude breakfast tacos are the best

da best 2 die young

1:41 PM

@M'vy wow that bit on security is misleading

talk about a puff piece

@Simon It's not that bad. It was made with a home made seasoning concoction with very little salt and chicken with a scrambled egg and some salsa.

@RоryMcCune too good to be true

@DavidFreitag om

@M'vy docker is a fairly big step down in security from VMs (In my opinion)

Oh and a large glass of orange juice.

1:42 PM

plus the docker registry does not implement signing fully as yet

@DavidFreitag Did you listen to Satellite Love?

@Simon Eh?

soundcloud.com/geckonl/satellite-love

dis

@RоryMcCune Yeah I have hard time believing that you could have all the benefits of VMs without the drawbacks

@Simon Unless you have shown it to me before, then no.

1:45 PM

o

Mmmm I like it. Nice and smooth.

Q: What is this? Hack or just a normal comment?

Yes David, yeeeesssss.

8

I receive an email for my Wordpress site, where the comment section is disabled. This was the email: "Author: google (IP: 210.56.50.40, 210.56.50.40) Email: guest@gmail.com URL: http://spider.google.com Who is?: http://whois.arin.net/rest/ip/210.56.50.40 Comment: Welcome to WordPress. T...

FOR FUCKS SAKE, WHAT IS GOING ON WITH PEOPLE BEING "TOO" FUCKING "LOCALIZED"?

@ThomasPornin I wonder what it would take to add the ability to support hardware crypto devices such as a TPM with your SSL/TLS project for CPUs without hardware crypto built in. Something like this, sparkfun.com/products/13183

"i has found dis code on ma server is it bad.jpg or gud.png?"

@DavidFreitag I am already doing things with function pointers (some skeletal OOP) so that specific implementations can be selected and reduced profiles used without bringing in all the code at the link phase.

1:55 PM

@ThomasPornin Awesomesauce.

This naturally allows plugging external implementations.

However, there can be some issues with memory allocation and error reporting.

@ThomasPornin Yeah, that was my first thought.

In my code, structures are allocated by the caller (the "no malloc()" stance) so the structure size must be known at compile time and cannot be changed easily

whistles

Also, software implementations don't fail, so functions return "void". Testing for an error code implies higher code size.

2:00 PM

I suppose you could always add the optional ability for error checking, but that sort of modularity in C generally means a large smattering of #ifdef's everywhere

@M'vy they don't :) there's definitely risks of container --> host breakout + the tools are pretty rough (remote access to docker daemons either uses client SSL or nothing at all) + docker registry is not curated and there's a lot of "dockerfiles" (basically batch scripts for building machines) that do things like wget http://<blah> | sh

@RоryMcCune wget http://<blah> | sudo sh would probably be better got that :P

@M'vy heh

I never got into docker so much

Cause 1st, it does not work on my stable deb.

yeah I've started looking at it to try and work out what all the hype's about

and also 'cause I'm sure I'll start coming across it on tests

it is faster than full VMs for sure and I can see places where that's useful

2:04 PM

@RоryMcCune yeah

but there's a lot of tradeoffs and I think a lot of people are using it without realising what they are..

@RоryMcCune as usual with new techs

I just realized it's been almost two weeks since I have last listened to a hardstyle track.

@M'vy indeed

@DavidFreitag That kind of makes you a bad person.

2:06 PM

@Simon I went on a nostalgia binge

Oh, that's fine then.

But the recommended songs after that song you linked are all hardstyle :D

Of course, it's Geck-o!

Well the song you linked didn't sound like hardstyle.

He's da master of cross-genre.

Like this: soundcloud.com/foolishwtf/turndibassup

But I gotta warn you, it might be stuck in your head for DAYS"

2:10 PM

I doubt it.

I love to sing this song!

I'm like "MISTA DJ TITATO PALAPAPA BAMBA"

So far there hasn't been much to sing to...

You gotta pretend you understand them!

lol, the recommended tracks for that song are exactly the same as the first one you linked.

ô_ô

2:16 PM

it's Packy!

She's da swag lord

Ohyes. soundcloud.com/scantraxxrecordz/…

Can you hear that?

When the Dutch speak English, they sound like they got a potato in their mouth.

So I guess that makes you Dutch?

pls

2:21 PM

@DavidFreitag nah @Simon has a donut in his mouth not a potato

aw yuh

"This variable has no actual purpose" THEN WHY DID YOU INCLUDE IT IN THE COMM SPEC

A: Can the fake usb flash drive attack happen over ethernet

2:46 PM

16

Long before USB there was the Etherkiller. And yes, it can fry your equipment. But unless you have bargain-basement (and I mean real sh*t equipment, not just inexpensive) stuff it won't affect any further devices connected to it.

Arperum

@Simon When I was a kid my parents used to say that if you spoke with a hot potato in your mouth that it sounded English...

@Arperum Tell your parents they are donuts the next time you talk to them.

Arperum

@Simon I'll tell them something like "some Canadian said that you are donuts", assuming I remember.

Cheers.

@RоryMcCune preemptive rebuttal for "oh AviD probably is, he's a hipster"

3:04 PM

@AviD but you will be docker client is out for windows and the docker engine for windows will be coming along R.S.N

although @RоryMcCune @M'vy I would say that docker shouldnt be considered a replacement for VMs, it should be a replacement for multiple side-by-side installs.

especially from a security standpoint.

@RоryMcCune meh.

@RоryMcCune I actually did play with it a bit back at $HIPSTERSTARTUP, supposedly the easiest way to set up Discourse.

I think waking up at 5am was a poor choice.

Tinned_Tuna

3:19 PM

@CodesInChaos @CodesInChaos It mostly terrified me because TLS implementations (handshake and record) have had such a stellar implementation record. It's clearly an easy job that everyone and his dog should have a go at. Bonus points for getting that implementation to run with the same privileges as your kernel </snark>

@Simon I really hate it when rappers try to do hardstyle.

@DavidFreitag Yeaaaah, sometimes it works well but that's kind of rare.

Never once have I heard a decent track of that sort.

@AviD meh?! meh?! I don't know, next thing you'll be Meh'ing Microsoft OneGet

naw, oneget will be great

@DavidFreitag ymean rappers, or hardstyle?

there have been a rare few decent rap tracks over the years.

3:31 PM

@AviD Neither, I mean the mixture of the two.

@DavidFreitag why on earth would you do that?

@AviD I never do intentionally, but when I mash the "I'm feeling lucky radio" button in Google Music just about anything can happen especially when you like a wide range of music like I do.

@DavidFreitag I doubt that would include train crashes like rapperhardstyle.

ie, a playlist with blue suede, metallica, and a hardstyle track all in succession

just no way "a wide range" is anywhere near wide enough

3:34 PM

@AviD Certainly not. But the way Google determines what songs are like other songs is partly based on sound analysis, but is also based on the thumbs up/thumbs down trends of who likes a certain song then another similar song.

@AviD yeah I just hope they put in their own Package repo rather than relying on Chocolatey, which has the same lack of curation/signing problems that most community repos have

@Tinned_Tuna The kernel side code was pretty limited. Framing and encryption and only on the sending side.

@RоryMcCune yeah. actually it would be best if they DO use that, but first fix it somehow.

@AviD problem is volunteers can't be expected to handle the volume of work required, nor should corp. users be happy with that solution.. integration with an MS app. store would seem like the best option

The complex parts of TLS all get handled in a userspace program.

3:37 PM

@DavidFreitag play.google.com/music/m/T7etlsnpsn7yhyvmjf5czefys2y

@CodesInChaos yo momma gets handled in a userspace program

#simon

@AviD I wouldn't tell him that, he's too boring.

@Simon well I couldnt resist that one.

@DavidFreitag And pretty much anything Gunz For Hire make is gangsta as F.

Ran-d is half G4H.

really? THATS what you star?

3:39 PM

@Simon Uhm, I guess I can at least listen to this track but I can't exactly say I enjoy it.

@AviD Don't look at me.

@DavidFreitag The raw climax is pretty damn sick.

@Simon I'm pretty sure you're thinking of Guns'n'Roses.

though I'm not sure what the rest of your sentence even means.

@AviD NO I'M NOT

Hey, does anyone have advice for what to do if you stumble across doxxing/threatening information for people outside your country/law enforcement?

@essefbx Notify the proper law enforcement?

I <3 my useless box.

3:42 PM

@AviD You still haven't realized that Simon is just a markov bot?

heh

solarbotics.com/product/60005

@DavidFreitag okay now it's Nirvana. And you're totally misquoting that.

@AviD pls, see the above link.

@DavidFreitag oh yeah, a coworker of mine had that. it is ridiculously addictive.

3:44 PM

god dammit the fbi only allows 3000 characters in their information submission form

gaaah

goooh

I got it as a christmas present from my best friend. It never fails to bring a smile to my face.

@essefbx link to pastebin? :-)

@DavidFreitag Lacks the kitten :(

right, thats the week, see y'all after w'end. have a good one...

3:45 PM

@CodesInChaos I'm making a 3D printer. My first project with it will be an arm shaped like a kitten's paw that comes out to toggle the switch

paste is highly likely to get removed

@DavidFreitag You heard Swagger, right?

@essefbx I feel like 3000 characters is enough to get all of the relevant information across.

@Simon Eh?

play.google.com/music/m/Ttpij32bafbbn2q7r4idqsbuiui

It's da bomb

OG or radio mix?

3:47 PM

Do the mix

It'll cut the intro I believe

it's a massive list of personal information phone #s and addresses with an anti-semetic manifesto .... I can't really summarize it, or list all the people

Yes, I have heard this song. I think it's the only G4H song in my EDM playlist.

o

@AviD I suspect that they trained to bot on doughnut advertisements.

@essefbx You could always send multiple messages.

3:48 PM

Then you need this one too!

play.google.com/music/m/Tfxseywltm3cnt7guycj7qj7gvi

RAW LIKE COCAINE STRAIGHT FROM BOLIVIA

RAAAWWWW I'MA GIVE IT TO YA

@Simon Hahaha, that reminds me of something that happened during a drunk stream on Twitch.

@DavidFreitag I sent a link and contact info - then archived it if the paste gets removed.

@DavidFreitag Which is?

@essefbx I was going to suggest that, but I didn't know whether you wanted to remain anonymous.

@Simon Hilarity.

@DavidFreitag thx for the advice!

3:50 PM

@CodesInChaos HONEY GLAZED MOTHERFUCKER

@Simon I Herd U Like doughnuts.

me likes donuts

@Simon BOSTON CREAM OR GTFO

@DavidFreitag Hey, hey, let's not be donutist, they're all good.

No way, there are definitely awful donuts.

3:53 PM

pls

Have you ever had an "old fashioned" donut? The kind with no icing or anything? They are gross.

@DavidFreitag what the heck is Boston Cream?

I went to the drive through once at Tim Hortons with my donut and she wanted Timbits (tiny donuts). She wanted to choose only a few flavor and I was like "pls, they're all good".

@RоryMcCune It's a custard-filled donut.

Silly donut she is sometimes.

@DavidFreitag Back when I was a child, there was a flavor like that but with some white cream in it, it was delicious.

3:54 PM

@DavidFreitag ooh no, that's a wrong concept.

It no longer exists, I'm a sad man.

I think I have finally trained myself to not eat the shittiest food

@RоryMcCune s/wrong/delicious

Last night I was out buying shoes because mine were falling apart, and I walked by a wall of candy and it was revolting. Although I did leave with a bag of beef jerky.

I haven't eaten a meal that isn't >50% vegetable in over a month

@DavidFreitag You know what time it is?

@Simon LUNCH! ERM STERVIN!

AW YUUUUHHHH

4:24 PM

I get back from lunch and the whole place stinks of olives and peanut butter