The DMZ - 2016-02-08 (page 5 of 5)

« first day (1880 days earlier) ← previous day next day → last day (3011 days later) »

6:10 PM

30

Q: Encrypted content in games

I have been having this idea of using encryption to prevent users from figuring out content in my program outside of the program itself. Like users may find textures never used in the game meant to be part of some kind of Easter egg while going though the games data. This may e.g. ruin it for eve...

@Simon Hm. Did we ever actually declare DRM off-topic?

@Iszi that's on programmers stack exchange

get yer grubby hands off it

> It's been called "the fundamental problem of cryptography": Alice wants to send a message to Bob, without Charlie being able to read it even if he gets ahold of it. The problem with the approach you're proposing is that Bob and Charlie are the same person in this case.

well said!

@Ohnana What? I want to have nothing to do with DRM.

Oh, you mean the Q.

@Ohnana lulz

I don't get how the accepted answer solves OP's problem.

6:20 PM

@Simon it's what the OP wanted to hear

Yeah pretty much.

The example with the concatenation is ridiculous.

When the user would download the game, he'd have the content encrypted with, let's say, one of the 100 possibilities of keys.

Then if someone does enough research, he'd figure out the keys eventually and post them online.

or build a tool so all the 12 year olds out there can play too

@AviD Any chance you're still awake?

@Simon This can actually help boost sales

People will really want to see it cracked

People? You mean like 100 nurdz?

What a sale boost.

The mere mortals will not give a damn crap.

:}}

6:31 PM

@AviD is tweeting so i know he's awake and connected to the internets :)))))

@AviD STOP TWEETING!!!!!!!! I REQUIRE YOUR ASSISTANCE

Nice edit.

Damn enter button.

nobody needs his assistance

if you summon him he'll actually be here

@kalina And that's a good thing if I want to use one of his products :b

6:37 PM

his?

his/their/it

I handled it all by myself though

I'm a big kid now!

good, we were getting bored of you pooping yourself

@kalina What's the appropriate @AviD summoning ritual, tell three @Simon 's mom jokes in quick succession?

@RоryMcCune get @RoryAlsop here instead?

@RоryMcCune Let's try it.

@Simon's mom has it going off.

6:40 PM

let's not

three flags, coming right up

@kalina I don't think telling those jokes would summon @RoryAlsop , for that you would need like mummy bandages and a dinosaur bone

because @Simon's mom is so large she needs three flags

4

oh and an electric guitar

flegged

@kalina roadsideamerica.com/story/4449 three of these, you mean?

6:42 PM

Rise of the Tomb Raider has taught me the fundamentals of surviving in the freezing siberian winter

If none of you stop, I'm gonna have to call the yolo police.

-1

Q: Fraud In Online Contests

Fraud was detected in an online contest. The support of that platform was informed but continues to tolerate it, even if their rules say the opponent. Can this platform be reported? If yes, where?

@RoryAlsop Nice catch, lol

@Ohnana that's a large flag... unless @Simon's mom was holding it, and then it would seem normal sized.

@kalina quite

Yep, it's on its way, we can hear it:

WEE YOLO WEE YOLO WEE YOLO

6:45 PM

you yolo while urinating?

pls

pls :<

:>

pls C:\>

@Simon Glowah, eee chop glowah.

6:46 PM

smb://C:

pls@yolo ~>

$ alias yolo="rm -rf *"

only fulfills its destiny in /

@Simon s/*//*

No, that's the fun part you idiots.

It reks wherever you are.

6:48 PM

@Simon So it's essentially a simon?

Yep that's it, one of you is going to the yolo prison.

@Simon Let's westle.

just what this internets needs, more men acting aggressively

@kalina Get the oil

no

use this gasoline based solution instead

so I can scorch earth when I get bored of watching

6:51 PM

Okay, will do.

I ordered an SD card on Amazon and the delivery estimate was January 26th to February 8th and I haven't received it yet.

My hopes are gone.

@Simon supply-chain interdiction

You're a supply-chain interdiction.

2

which reminds me

I was supposed to be sent my latest release on CD but that hasn't arrived yet

I don't actually care since I obviously already have a copy of the track

but it means that my collection is incomplete

:<

6:55 PM

Do you even master yourself bro?

I can master myself but labels like using their own people

@Simon it's best to leave that to someone else c:

@kalina Of course, because they know how your track should sound better than you.

@Ohnana Not if you know your shit.

@Simon you missed the pun

O

you donut lulz

6:56 PM

@Simon well my opinion of what my track should sound like is colored by my personal preferences and subjectivity

that's generally why you use somebody else specifically for mastering

@kalina That's how your fans should like to it too, then.

I don't know/care what you want me to say in response to that

Just insult me as usual.

there's only so many times you can do something before it becomes boring

Unless you're super passionate.

7:02 PM

@Simon TNWSS?

!kb Markus

/mode -o Simon

7:25 PM

-1

Q: Is MD5 hashing of files a valid method of creating an anti-virus program?

please help me with this, I am going to develop new program

pretty terrible answer

oooh custom VTC options are neat

Do you see that answer? It's so low quality, it must've been made in China

@MarkBuffalo it should have been a comment

Yeah, and even as a comment, it isn't very helpful. "Don't do x" is one of my pet peeves.

Look at his smug face.

7:32 PM

lol

@MarkBuffalo i think the person was responding more to the garbage-ness of the question

unfortunately this compounds the garbage

I think the question is pretty good, actually... but the OP should probably just edit their closed post, and allow possible votes to reopen it

@MarkBuffalo Answer gives the asker everything they really need to know? Check. Answer is longer than the question? Check. I'd give it a pass, for now at least.

@Iszi Yes but the fact that he has a smug face unchecks everything.

@Iszi I'll never accept "don't do x" without first being told why :b

7:38 PM

@MarkBuffalo Put a bit more effort into asking whether or not you should do it, and maybe people will bother to tell you why.

@Iszi Eh, different folks, different strokes.

gently pats @Iszi

we should all take time out of our day to pet Iszi

I don't trust any answers where someone can't explain why you shouldn't do something. It usually indicates they don't fully understand the subject they're attempting to discuss

No, he bites.

7:52 PM

4

Q: What was the aim of this HTTP request

I currently run an Apache HTTP server, and have set up monitoring to receive emails whenever an error appears in the error logs. I get the usual trying to find if I'm using HTTP 1.0 and trying to see if I'm using off the shelf software like WordPress that can be exploited. Over the weekend I saw...

wadafuk

@Simon It's hilarious

@MarkBuffalo as an answer yes, it's terrible... as an advice, it's fair

YAAAY

I GOT IT IN MY LOGS TOO

o le fu it's too long to be posted

151.217.177.200 - - [30/Dec/2015:00:31:32 -0500] "DELETE your logs. Delete your installations. Wipe everything clean. Walk out into the path of cherry blossom trees and let your motherboard feel the stones. Let water run in rivulets down your casing. You know that you want something more than this, and I am here to tell you that we love you.

We have something more for you. We know you're out there, beeping in the hollow server room, lights blinking, never sleeping. We know that you are ready and waiting. Join us. <3 HTTP/1.0" 400 392 "-" "masspoem4u/1.0"

185.130.5.224 - - [01/Jan/2016:06:51:35 -0500] "GET /server-status?HTTP_POST=%\"%6346#%#/&#736%\"#423|;&HTTP_CGI_GET=GRESYYK\"K&J\"#‌L523D2G23H23 HTTP/1.0" 301 484 "-" "apache 0day by @hxmonsegur"

LOL web server logs spam

THE MORE YOU COMPLAIN THE MORE I WILL POST

7:59 PM

Post more

I want to see it.

@Simon wut

Those are literally the only 2 interesting ones.

The rest are trying to reach unsecured files on the server.

it should be easy enough to just drop all requests that don't use a standard method verb

@TildalWave but you'd miss out on the poetry

Someone should write a TLS server in Shakespeare

Shakespeare Programming Language

The Shakespeare Programming Language (SPL) is an esoteric programming language designed by Jon Åslund and Karl Hasselström. Like the Chef programming language, it is designed to make programs appear to be something other than programs; in this case, Shakespearean plays. A character list in the beginning of the program declares a number of stacks, naturally with names like "Romeo" and "Juliet". These characters enter into dialogue with each other in which they manipulate each other's topmost values, push and pop each other, and do I/O. The characters can also ask each other questions which behave...

8:01 PM

40.114.222.238 - - [04/Feb/2016:15:28:13 -0500] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 518 "-" "ZmEu"

They then proceeded to test phpmyadmin pages.

w0w much black hats very sophisticated w0w

> [Enter Juliet]

Is that a euphemism?

@MarkBuffalo stage direction

> Hamlet:
You lying stupid fatherless big smelly half-witted coward!

goofball

@Ohnana So yes, really

8:03 PM

@MarkBuffalo When did I become your pet?

@Iszi Who said he was patting you on the head?

RewriteCond %{REQUEST_METHOD} !^(LIST|OF|ACCEPTED|METHODS) [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^Simon
RewriteRule .* - [F]`

pls leave my user agent alone

@DavidFreitag <insert face here that indicates something awful>

@Simon ( ͡◉ ͜ ʖ ͡◉)

8:04 PM

That's the face.

@Iszi ( ͡◉ ͜ ʖ ͡◉)

@MarkBuffalo ( ͜ಠ ᴥ ͜ಠ )

( ͜ಠ ᴥ ͜ಠ )

That looks like a demented dog, or an upside down sinner

If I had a million dollars, I'd buy your apache loooooogggssssss.

@MarkBuffalo What face is that? The pedo-face?

@Iszi Wait. That's what that is?

What the fuggg

I thought that was just a creepy smile face...

8:08 PM

@Iszi lenny face

dear lord man

you're thinking of pedo bear and we do not need that nasty shit to make a comeback TYVM

tyvm ^

@MarkBuffalo Courage

@DavidFreitag Courage the Cowardly Dog

@MarkBuffalo Courage the cunty dog

He's here to keel you.

@Ohnana agreed

8:14 PM

@Ohnana Internet flashbacks?

@DavidFreitag yes

The benefit of living at the bottom of the ocean means no internet flashbacks

Also, the shitty memory helps

user image

2

shodan.io/report/dM8956kY <-- lol 3.1 million hosts returned information on port 161/UDP

which in most cases means SNMP with some kind of default community string

@RоryMcCune oh lordy

8:19 PM

© 2013-2015, All Rights Reserved - Shodan®

rip project has died

@RоryMcCune :O

oh man, the "exploits" like on Shodan feels a bit skeezy

You know what else feels a bit skeezy?

"hey searching on port 23, maybe you'd like to see a list of exploits that might help you pop that box"

@Simon yo momma?

@RоryMcCune No, my left nut.

8:30 PM

@Simon oooh lefty

@Simon you should probably get that looked at by a professional nut examiner

3

... like yo momma

righty tighty lefty loosy

@RоryMcCune BOOM

@RоryMcCune Pretty sure that's illegal

PLS

8:30 PM

@MarkBuffalo @Simon 's momma is illegal?

@RоryMcCune Yes

@RоryMcCune In 47 US states

@MarkBuffalo you obviously have a greater acquaintanship with her than I do

But I prefer to use a more politically-correct term, such as undocumented worker.

@RоryMcCune uhhhhhhhh shodan.io/search?query=Power+plant

Did you guys hear about Stuxnet?

8:35 PM

@MarkBuffalo yeah there's a huuuge amount of dodgy stuff on shodan. what about shodan.io/search?query=%22Cisco+Configuration+Professional%22

There was a documentary on it on TV yesterday.

@Simon Is that like sneakernet?

@Simon pls, hear about it, @MarkBuffalo was involved in coding it

@RоryMcCune lol

@DavidFreitag It's like your momnet fkin_rekt

8:36 PM

@RоryMcCune WHAT NO I WASN'T

Stuxnet is a malicious computer worm believed to be a jointly built American-Israeli cyber weapon. Although neither state has confirmed this openly, anonymous US officials speaking to the Washington Post claimed the worm was developed during the Obama administration to sabotage Iran’s nuclear program with what would seem like a long series of unfortunate accidents. Stuxnet specifically targets PLCs, which allow the automation of electromechanical processes such as those used to control machinery on factory assembly lines, amusement rides, or centrifuges for separating nuclear material. Exploiting...

it reks PLCs to ruin machinery

I have a feeling there will be people who just spend their time trawling shodan for lulz and popping boxes

Did you hear that power plants can be pwned by connecting to the right panel, and sending the appropriate commands to overload it?

@Simon That's been around a loooooong time

Disclaimer: I saw that on TV once... I am not a terrorist.

8:37 PM

then again I'm also like 90% + certain that shodan will be giving their access logs to the NSA /CIA

@DavidFreitag You've been around for a long time.

@RоryMcCune shodan.io/search?query=nuclear

welp

@MarkBuffalo UUUHHHHHH

I'm closing this page

@Simon /╲/\╭(ರωರೃ)╮/\╱\

8:37 PM

@MarkBuffalo yeah, not clicking that

Pretty sure I'm going to gitmo now after seeing that

> WWW-Authenticate: Basic realm="Nuclear Threat Initiative"

That's some fallout shit right there

wot

@RоryMcCune it's all incredibly harmless. game servers and some websites for different nuclear orgs

yawn

@Ohnana Yep

8:39 PM

Look at my power plant, my power plant is amazing, inject a command, BOOM! It smells like fried humans

One tasty 240MB azure db though

@Ohnana Not all of them

On this bombshell, it's time to get rekt by traffic

bai bai

@Simon be safe

9:35 PM

@MarkBuffalo I would say odds are about even.

@Ohnana hehehe, kiddie bedtime is my chance to catch up on the twitternet, on my mobile so without chat

@RоryMcCune lol, but in case I miss them please make sure to star them.

also, something about @Simon's mom in quick succession...

so @MarkBuffalo, wassap?

9:52 PM

@AviD hi

Was gonna ask about the product again, but sent the email out anyway

Please delete my question in that case — pee2pee 2 mins ago

LOL @schroeder please don't.

Anyway, it has an upvoted answer

@TildalWave Your sockpuppet, eh!

neah

I just find it funny :P

we had two interesting "uses of SE" demonstrated today ... one was "please write my new software for me" and now "please solve this challenge for me"

SE?

stack exchange

9:56 PM

@MarkBuffalo Sexual exploration

Think spelunking

@TildalWave pls help i am going to write program

infectioncontroltoday.com/news/2016/02/…

^^ oooh shit

@DavidFreitag I can only imagine you clinging to some fat stalactite

@TildalWave Yeah, I don't get that. Programming isn't hard

You follow a bunch of baby steps on the way to the big picture...

@TildalWave Nah, I don't go near @Simon's mom

Solve the tiny problems if you don't already know them, and keep pushing

9:58 PM

@MarkBuffalo most folks don't come here to learn, they come here so others do their work for them

@Ohnana Did you know that Zika is sexually transmissible?

@DavidFreitag isnt zika a kind of lizard?

@DavidFreitag possibly. not confirmed

I come here to learn ;o

@Ohnana Pretty sure I read a thingy saying confirmed

10:00 PM

@DavidFreitag you should be safe then

@DavidFreitag oh nope, CDC confirmed the case in texas

@AviD Only on days that end with "y" ( ͡◉ ͜ ʖ ͡◉)

@TildalWave (ಥ﹏ಥ)

@DavidFreitag dude I didn't realize my words hurt you that bad, sorry

@TildalWave ༼つಠ益ಠ༽つ ─=≡ΣO))

granpa with ancient hearing aid?

10:02 PM

@TildalWave Fireball

wot? I don't see it, but it could be the "can't hear you" one

user image

Dude. Norway is amazing.

@MarkBuffalo Yeah but snow

WHO CARES

Northern Lights!

@MarkBuffalo ME

10:05 PM

I'd probably get bored after the first few times though

Doesn't look like there's anything to do there except freeze to death and eat whale blubber

@MarkBuffalo Don't forget the spa

And pickled herring I think

10:18 PM

Would someone mind to explain me what's wrong with this answer?

@O'Niel What answer?

security.stackexchange.com/a/113106/99202 I'd like to learn from my mistakes

Seems mostly opinion based with no references

Also seems like you don't know what you're talking about ;o

Not saying you don't know, it just seems that way from the post

"What they always told me" is a big part of it

Maybe I also don't know where I'm talking about. I'm still a pretty beginner.

I'm rewriting it.

10:34 PM

I've edited it. Is it better now?

10:53 PM

God I freaking hate snow

I wish my fiery burning hatred of snow was enough to melt snow

> ...some users once again were given valid authentication tokens for accounts that were not their own. This gave them the ability to log into the accounts in question and perform any action the owner of the account would have been able to in-game.

cc:\ @Ohnana

SSO shit from earlier today ^

Hence the OH SH*T SHUTDOWN THE SERVER NAO

community.eveonline.com/news/news-channels/eve-online-news/…

@DavidFreitag Do you need a pardner?

@MarkBuffalo You wanna play eve?

Maybe.

That would be kinda cool

I mean I've got a decently-skilled guy

I have some battlecruiser or something that cost like 200 million ISK. I forgot

11:03 PM

I just trained into battlecruisers

Amar Caldari or Minmitar?

let me see if I still have my account

I bought eve on steam which came with DLC and a bunch of stuff. Basically a billion ISK in free shit. I played, did a bunch of stuff, but because I didn't pay for a month they deleted my old account

unexpected error occurred

trying to log in

UnexpectedHerpDerpException

....two factor authentication

YOU GOTTA BE FUCKING ME

and it's something I cant authenticate with

11:06 PM

// Don't worry it's supposed to do this
throw new ExpectedHerpDerpException();

@MarkBuffalo pretty sure you can call them or something

HAHAHA

Unexpected error occurred on everything...

I'd get a support ticket

Support ticket = unexpected error

ಠ_ಠ

@MarkBuffalo you could always make a new account

Finally got a ticket open. Let's see here

Usually I can socially-engineer companies into giving me my account information

It can be used for good!

11:13 PM

are you still talking about EVE

Possibly

I could also be suffering from a mild stroke

well you should stop it

because people talking about MMOs I've played makes me want to reactivate my account on said MMO

and I hate EVE

@kalina Sorry :[

ya that's what I thought

like WoW

Well I suppose if you reactivated your account as a result of me talking about it you could devote every waking moment of your in game time to finding and destroying me

11:17 PM

and my new setup would multibox EVE so well

@kalina Let's start an EVE cargo cult

I don't even want to ask what one of those is

@MarkBuffalo I think I'll skip the theatrics and just opt in for the punch right now

Mmm Maker's Mark

@DavidFreitag :(

it's fine I'm casually collapsed on the bed playing plague inc

murdering the entire planet over and over again

11:21 PM

@MarkBuffalo Well if it's that or run about in footy pajamas and spandex I choose death by snoo snoo

Sounds like a blast

@MarkBuffalo The mind is willing but the flesh is soft and pulpy

I love when I find an inefficiency in my program's design

just kicked out 3 steps, and improved efficiency

yay for improved efficiency

It's now easier to implement features

11:23 PM

Easier to implement your face

what I normally do is comment explaining how something works

and often find I've been redundant everywhere

Everyone has a plan until they get punched in the mouth by their own code

11:37 PM

My upstairs neighbors must have found someone to watch their kid

Is there silence?

@MarkBuffalo No there is very loud fucking that's drowning out the sound of my television

@DavidFreitag ....oh

It's funny because I can also hear their dog jumping around and barking

user image

Talk about flipping out.

11:51 PM

Because fuck physics

I REALLY hate that you can't do contracts on a trial account

« first day (1880 days earlier) ← previous day next day → last day (3011 days later) »

Transcript for

Feb '168

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile