« first day (1120 days earlier)      last day (3765 days later) » 
00:00 - 14:0014:00 - 00:00

12:00 AM
@Iszi I seriously need to get my border monitoring in a better way at home so I can block that shit.
 
12:35 AM
@PatoSáinz you've got issues
 
Anonymous
1:02 AM
@kalina define issues
 
1:30 AM
Cyber.
 
1:44 AM
@ScottPack no
Hey @AviD now that you're back, are you familiar with any security researchers that focus on client-side javascript and the like?
 
 
6 hours later…
7:28 AM
morning ;)
 
morning
 
@LucasKauffman hehe this rings some bells, I'm sure it was posted here before
searching for jpegs posted here and sorted by stars produces some cool results: chat.stackexchange.com/…
a lot of bears
I'm not really sure where in the stack that would tie in. If the user has direct DB access with a valid ID, than wouldn't authorization be irrelevant? — bwheeler96 3 mins ago
not sure what to comment next :)
 
8:22 AM
@TildalWave Done.
 
@TerryChia Cheers, but I fear he's only gonna comment next "Where or how do I prevent unauthorized access?" Still, that's not our problem :)
 
@TildalWave Interesting... Avast flags a trojan on page 5.
 
@TildalWave He probably has some misconceptions with regards to what a user means in the context of a db.
 
@Iszi what, this? ...
would be fun if that's the one that's flagged LOL
@TerryChia I think he just doesn't get access control in mongoDB
 
@TildalWave Nope.
Schoolkid finds a security flaw on govt website, and now he might be charged: http://troy.hn/1lDqja7 /via @atomicbomb
Great way to get a big fat light shone on the fact that a 16-year old just pwned you. Smooth move, Oz.
 
8:29 AM
@Iszi which one then?
 
@TildalWave Didn't bother to look for it, but the filename said something about a drama llama.
I should have been in bed like two and a half hours ago, but I've been getting shiny-thinged a lot. Also spent some time on Programming Puzzles & Code Golf learning a bit of RegEx.
 
@Iszi Ah @LucasKauffman posted that, so no wonder :) It doesn't load for me either but I get no red flags
@Iszi Some cool links you could share? I'm polishing on my regex too
 
@TildalWave Really just one problem I was working on.
1
A: Random Password Generator

IsziPowerShell: 119 Gofled Code for(;!($x-cmatch'.*(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[!-/:-@[-`{-~]).*')){$x='';1..15|%{$x+=[char](33..126|random)}}$x Un-golfed and Commented # Start for loop definition. for( # Skip variable initialization, start definition of run condition. ; # Loo...

 
@Iszi cool
thanks
 
9:19 AM
@TildalWave ummm.... what? How is XXE like SQLi? And why is he calling it new, I've been explaining about this since 2006, at least?
 
@AviD It's not new nor is it like SQLi, agreed on that. He does say "hey, the subject was there to get your attention"
 
@TildalWave a. didnt notice that part, tl;dr, b. that doesnt make it better
I've been seeing a lot of that lately - blog authors giving a ridiculouly linkbait title then "apologizing" for it.
 
@AviD well, I guess he's trying to do his best to raise awareness, I'm not gonna bash him for that
 
@AviD well they're both injection vulns, so similar in that regard :)
 
a. if you know it's wrong - dont use it! b. if you don't know its wrong - we shouldnt bother reading you! c. if you know its wrong and use it anyway - you are an internet douchebag, and we should all blacklist you.
Doucheblog?
@RоryMcCune XXE isnt really injection, its ex-jection...
 
9:24 AM
@AviD Can you please stop using your ABC's? :P
 
@TildalWave a. I'm enjoying that today, because my back hurts, b. no.
 
@AviD ejection?
 
extraction!
 
@AviD you're not the only one so stop whining
 
@AviD ahh back pain == snark-level ++
3
 
9:26 AM
eggsactly.
 
@AviD ok they both involve a failure to correctly handle user metadata input :op
 
@RоryMcCune hehe, well that is true of just about most of all web vulns...
@RоryMcCune on the upside of this, I came up with Doucheblog.
 
@AviD you should have it as Douchblog™
 
yknow what? I'm going to register that domain name, right now.
oh man! It's already been taken!
 
of course it has
 
9:30 AM
> It’s simple; the word “douchebag” has changed it’s meaning quite a bit over time. It once meant a hygiene product for women, it then referred to a person who is a pompous and pretentious prick. Now it means simply "somebody who is better than you". Douchebags have the money, the women, the clothing, the cars.
wow. spoken by a real douchebag. Doucheblogger.
I am honestly not sure if this site is serious or sarcastic.
 
man, you really need a massage
 
okay, reading some of the posts, it does seem more sarcastic.
 
whatever gave you that idea? Maybe titles like "Be a d-bag, don’t use a t-bag"? :D
 
It was the apple products. Nobody could be recommending that in seriousness.
@TildalWave was that an offer?
happy ending.....?
 
@AviD you teabagging douche!
 
9:35 AM
hehehehe
okay, thats it - this calls for coffee!
Ethiopian, I think. Dark and strong.
 
@AviD That's racist.
 
@AviD you're still talking about coffee, right?
 
heh, yes.
> At a medium-roast level, Ethiopia Yirgacheffe is one of our favorites. Delectably floral with mild acidity and medium body. Notes of orange blossom and almonds, exotic fruits and jasmine resonate in the cup. All in all, an incredibly distinct and fancy flavor experience.
 
Mine is Santana
no fancy description, but it tastes good
BTW @AviD you can get back pain from too much coffee too, you know? Actually, it wouldn't really be back pain but it feels like that, and the problem is with pushing kidneys to work too hard
 
yeah, I actually did know that, thanks. But this is something else, very specific.
 
9:50 AM
Damn coffee nuts! Am I the only one satisfied with a Caffè latte from Starbucks? :P
 
oo, what are coffee nuts?
are those like nuts covered in coffee, or just nuts that go good on the side?
@TerryChia Yes, yes you ARE the only one satisfied with a Caffè latte from Starbucks. In the whole world.
 
@AviD Pfft, what a snob!
 
hehe, my wife keeps telling me I'm becoming a coffee / whisky / wine snob.
Now I just need to get to be a beer snob, and I've got the whole set.
 
9:58 AM
I prefer the word connoisseur
 
 
2 hours later…
11:50 AM
@Simon seriously, what is up with you canadiens, eh? news.nationalpost.com/2014/01/08/…
Is that the university you're at?
 
hi all
we got a "security problem" on AU.
 
@Alvar You need to be more specific.
 
a user is posting edits without that it comes into the suggested edit queues
@TerryChia writing
they are posting spam on the site saying they want to be moderators.
 
@Alvar Are you having an election soon?
 
@AviD no idea. they sya they will stop if they get mods.
 
11:59 AM
@Alvar is the user rep'ed enough? Have example link?
 
@AviD no
 
@Alvar ha.
 
-5
Q: Problem with amsn

JorgeWhen staring amsn from the console, and after hitting "ctrl-n" to start the audio and video wizard and clicking next, the following errors are spit out: jorge@duo:~$ amsn dlopen: ./utils/linux/capture/libng/plugins/conv-mjpeg.so: undefined symbol: ng_debug dlopen: ./utils/linux/capture/libng/plu...

@AviD like we will elect them to mods O.o
 
@Alvar No offence, but ping a CM if you think it's a real problem. Why are you asking here?
 
@TerryChia or even a mod. Start by kickbanning the user....?
 
12:00 PM
it's a legit question below and they are editing in the spam
 
Also, he's editing his own question. That's why it's not appearing in the queue.
 
@AviD well the user was legit until the account got hijacked
the original post was legit even
 
ahhh, seeing that now.
 
@Alvar What @AviD said. Ping a mod/CM to resolve the problem.
 
yeah, thats a CM job.
 
12:01 PM
We can't really do anything now can we?
 
@TerryChia well they nuke the question and then they do it all over again
it's been going on since last night ...
a mod can nuke the ueser and the question, but then they just do the hack again
 
1 min ago, by AviD
yeah, thats a CM job.
 
so it's more of a security issue than spam users
 
no. Just keep flagging and editing the spam. That's the way the community system works...
 
Really, why are you asking here? We aren't SE devs. We don't have access to the code. We can't fix anything even if there's a legit security problem.
 
12:03 PM
@AviD listen.
@TerryChia I know
how can actually do something about this?
 
@Alvar PING A CM!
 
CM?
 
58
Q: Who are the Community Managers, and what do they do?

jcolebrandWho are the Community Managers? What do they do? What is their relationship to the "Community" user? Return to FAQ index

Huh, HTTPS breaks oneboxing apparently.
 
@Alvar no, the mod should just lock the user account till it gets sorted out. I doubt the bad guys could just easily grab another account's credentials (or sessionid, if thats whats going on).
 
@TerryChia thanks..
@AviD ehm
@AviD look in the revisions of the question I linked
 
12:06 PM
and then the mod should talk directly to the community managers in SEI to sort out the account.
 
@AviD the first two posts are legit, then the account gets hijacked and it's spam..
 
right, I get that.
 
@Alvar So? Locks can be reverted once the issue gets resolved.
 
so right now you have two problems: 1. an account keeps posting spam; 2. a legitimate user account was hijacked.
 
@TerryChia but it doesn't get locked it gets nuked as people flag it as spam..
@AviD legitimate users gets hijacked. spam gets nuked ...
 
12:07 PM
the mods can deal with #1, together with the community. #2 needs Stack Exchange personnel.
 
@AviD sounds right to me
 
@Alvar it's just the one user.
 
@AviD you werent on the site last night..
@AviD multiple users and multiple questions in all the same manner, make mod or u shall die. speach..
 
Step 1. nuke spam (editing/flagging).
Step 2. mod locks user.
Step 3. Mod or victim contacts CM.
Step 4. CM resolves hijacked account.
@Alvar ah, more than one user was hijacked?
anything in common? Could they all be from the same place? Sockpuppets?
 
@AviD yesterday it was new accounts only today it was a hijacked account.
 
12:09 PM
or even not really hijacked...
actually, these are things that only mod / CM can sort out.
 
@AviD yep
 
@Alvar so there ya go.
 
hehe thanks..
 
are your mods aware of the situation?
 
@AviD yes they are
 
12:10 PM
@Alvar if you want I can bring this forward in the Teacher's Lounge and ask some CM to look into it... but I don't yet quite get it, you mind if I pick your brain a bit?
 
and done.
 
@AviD we talked with them yesterday about the problem and they nuked the quesitons then..
 
Oi, @jrg. Fix your damn site already! ;)
 
@TildalWave sure. I don't know much about we security, but it sounds like an ongoing problem.
 
@Alvar You said there were more user accounts hijacked? Or just the one?
 
12:11 PM
@TerryChia hater
@TildalWave don't know if more were hijacked, but no I think it's this one alone. today
 
@Alvar OK, why didn't mods suspend the user account?
 
@TildalWave they nuked the account
yesterday but it was multiple accounts (3-4 I think)
and they nuked all questions.
 
okay, wait a second - @Alvar how do we know that YOU are not a hijacked account....? ;-)
 
@AviD or you ;)
 
LOL
 
12:13 PM
and you are just stalling for time
 
oh, with me, you can tell.
 
The guy has just that one legit question though.... (unless the rest got deleted already).
 
How do you know the account got hijacked...?
 
I log in via google so I don't have a password really..
 
12:13 PM
this one isn't suspended / nuked
 
@TerryChia it was a legit question from rev 1
@TildalWave no no mods active in chat right now...
look in the revisons here
 
@Alvar It's just the one question. The guy might have suddenly developed a hatred of AU and decided to troll the site.
 
-7
Q: Problem with amsn

JorgeWhen staring amsn from the console, and after hitting "ctrl-n" to start the audio and video wizard and clicking next, the following errors are spit out: jorge@duo:~$ amsn dlopen: ./utils/linux/capture/libng/plugins/conv-mjpeg.so: undefined symbol: ng_debug dlopen: ./utils/linux/capture/libng/plu...

 
@Alvar OK then I'll ask on TL for someone to suspend that user...
 
Also, he's a new member as well...
 
12:15 PM
@TildalWave I don't think it's this user that's the problem.. but maybe that just me..
 
the revision says otherwise
 
@TildalWave no they dont.. look in the first two.. and then the rest..
 
@Alvar that doesn't matter, so the account was hijacked minutes after posting a legit question
 
@TildalWave this is why we dont get involved in other mods' business! ;-)
@TildalWave or fake hijacked.
 
@AviD true
 
12:18 PM
mod / CM can suss the difference, we are but helpless fools.
 
alright...
so how to I best contact CM?
 
@AviD or just session hijacking
 
@Alvar best way? if a mod is around, s/he can grab a CM directly. Otherwise you can email community@stackexchange.com (I think thats the address....)
 
@Alvar I posted on TL, someone will look into it. You just keep flagging as spam, eventually the user account will be suspended automatically by the system
 
@TildalWave ok
 
Anonymous
12:21 PM
good morning everyone
 
also flag this one:
 
-2
A: Writes occurring to fresh ext4 partition every second endlessly. Cause and solution?

AlvinMake us MODS, as above. We swear we won't give up till that very moment. Choose: Perishing low quality community or good MOD?

and that one
 
@Alvar that one is already deleted by the system, probably through flags
 
@TildalWave yep. people flag fast..
and a new user... askubuntu.com/a/402800/10698 this will go on for a while...
 
Anonymous
recruiter wants me to move to america and they'll get me a visa
 
Anonymous
12:29 PM
sadly, the whole letter is the most beautifully crafted fraud i've ever seen
 
@Alvar Can you find some 10k+ user to protect that post? Seems whoever is doing this is flooding that same thread, so they might stop if it means more effort
 
@TildalWave it's all gone now, flag flag!
 
yup, flags work
funny that even tho so many folks saw that thread, nobody is upvoting that self-answer or the question LOL
No wonder, when a self-answer starts with "There is a simple solution for you..."
 
@TildalWave they should start, I found the solution when I did this ...
 
@Alvar However, but it's obviously pre-prepared and folks don't like that. Self-answering is OK, if the question presents a genuine problem and OP found some interesting solution to it, but if you read that question and answer.... well, who cares? It's just rep whoring and looks like people realize that :)
 
12:36 PM
@TildalWave which is kinda funny
 
who uses chrome here?
 
I do
 
@TildalWave waves hand
 
and then click on one of the images in the results
what happens?
 
@TildalWave Hmm, it redirects.
 
12:48 PM
to me, it first displays the image, then redirects to links for it and the image isn't displayed anym more
then if I click on "view image" it gives me redirect error
 
@TildalWave of?
 
redirect notice: google.com/…
 
@TildalWave Same thing happens on FF btw.
So it's not a Chrome problem.
 
@TerryChia Ah OK thanks... and another funny thing, it doesn't happen always. I think they have some enumeration bug, if I search for some other things and see images there, it might or might not work
 
Also, what exactly are frogonauts? ;)
 
12:51 PM
LOL
 
@TildalWave I..... don't know how to respond to that.
 
From one of Antares launches, I think it was for LADEE... today is another one
@TerryChia oh there are batonauts too :)
 
@TildalWave old
 
This one held onto the external STS tank during launch even
OK I better stop now before @tyler wakes up and tells me to f* off with my space thingies
 
jrg
@TerryChia Fix what....?
 
12:59 PM
@jrg NVM Tim Post is looking into it, you're too late :P
 
jrg
@TildalWave oh, spam?
 
@jrg Yes... "Make us MODERATORS. We won't give up till we die!" LOL
 
jrg
@TildalWave it was pretty funny, for when I was there for bits and pieces.
 
@TildalWave That bat's going to have had a bad day.
 
@ScottPack had... STS is now retired for a few years already
 
1:01 PM
Oh, I suppose that is a shuttle. I didn't look closely enough to notice.
 
they'll build Death Star next :)
0
Q: We are the Indian Hacker team. Make us mods, we will keep to harass u for months if not

user233654We want to become MODERATORS. Do this please. We will continue till u make us one. We will keep to do this for months if necessary.We want to become MODERATORS. Do this please. We will continue till u make us one. We will keep to do this for months if necessary.We want to become MODERATORS. Do th...

the fun continues
 
Anonymous
indian haxxors
 
jrg
dead
 
Dot or feather?
 
@jrg jrg join au chat?
 
1:04 PM
@TildalWave I think they should make them fake moderators.
 
Or is that inappropriate these days?
 
@ScottPack what is?
 
@AviD They can't be any worse than the current mods?
 
or give them a diamond on some troll site. Like Server Fault.
4
 
@TildalWave Read up a couple of lines.
 
1:04 PM
or mod for a day... then take it away. They cant complain then, right?
 
@ScottPack I did. I don't see any issues with anything ....
 
1 min ago, by Scott Pack
Dot or feather?
 
@TildalWave Ok good. Sometimes I forget what's considered offensive anymore.
 
in case you missed, it was in reference to "INDIAN haxxors"....
@ScottPack well, it was subtle...
 
At least there's that.
 
Anonymous
1:07 PM
user image
6
 
How did he even catch that?
 
hehehe yeah this happened to me once, tho with a much smaller one... I was sure it was dead
of course... on a boat... and off it went
 
Also, those things are scaly and spiney. Can you imagine how much that hurt?
 
it went in the right direction, so he's prolly fine
it's hilarious when you look at him trying to hold it steady :)
 
Is anyone here uses avast for his android?
 
Anonymous
1:14 PM
lol
 
I am not sure what is effing wrong with it, my sister and I we both use it, and suddenly at the same time avast detected a trojan called SMSSend-DW, I searched the viruses logs and I couldn't find this one, is anyone aware of it
it crashes any application we open :/ saying that it's infected with that trojan
 
things just got personal askubuntu.com/a/402833/10698
 
the weird thing is, we -me and my sister- didn't download anything recently, how the ef could we get the same virus at the same time? could it be within an app update or is it a problem with avast?
 
jrg
@Alvar i'm there too
 
@jrg not when I wrote ;)
 
jrg
1:21 PM
Yes, I was. the tab was open.
 
All I saw was a shitty question about passwordless sudo.
 
and I found those Japanese and Chinese forums talk about the same problem but non of them got an answer -_- I guess I wont get one too :p
ok I figured it out, talking was helpfult to understand xP
 
Nana Nana Nana Nana... Batmaaaan!
 
jrg
1:37 PM
@Alvar Did you discover Gary?
 
@jrg dary?
 
jrg
@Alvar typo.
 
@jrg what do you mean? it's a funny video, not much more..
 
jrg
Oh, so no you didn't.
 
Anonymous
 
Anonymous
1:38 PM
actually sfw
 
jrg
@Alvar all of Gary's stuff is fantastic. He goes into Unix internals, ruby, and all sorts of good things
 
@jrg hmmm, I've just seen that video, are there more? :)
 
jrg
@Alvar follow him on twitter, and watch the snippets here.
he's hilarious.
 
@jrg this saved my day! :D
 
@Alvar flagged for @RоryMcCune
 
1:41 PM
@AviD ?
 
@Alvar ruby smashing requires @RоryMcCune's attention.
 
haha
 
@AviD @Alvar heh, the source won't load at the moment but wasn't that talk about JavaScript rather than ruby? (or is this a similarly named talk...)
BTW all is an SSAE16 like a SAS70 ?
 
@RоryMcCune started with ruby, then switched to javascript.
@RоryMcCune never heard of SSAE16.
but SAS70 sucks.
 
it's bit of both, some ruby, mostly javascript..
 
1:46 PM
just found my own answer it replaces the SAS70 ssae16.com/SSAE16_overview.html
so same problems apply I'd guess...
 
no idea what you are talking about.. going back to AU spam hunt
 
@RоryMcCune really? interesting.
though we only have their own word on the matter.
could be a competing standards organization....
 
@AviD true true, I probably need a 3rd party source...
 
or am I just being paranoid?
> Just because I'm paranoid, doesn't mean they're NOT all out to get me.
 
hmm wikipedia agrees that they're produced by the same lot and SSAE-16 replaces SAS70
 
1:51 PM
@RоryMcCune Wikipedia Injection...??
 
the main problem being whoever let auditors/accountants come up with security standards...
well not that SAS70 is really that, but it gets used like that
 
It's like when you want to update your bank with your new address. They still will (should) send the confirmation to the old one.
 
@RоryMcCune Do you even accountant, bro?
 
@RоryMcCune SAS70? ISAE 3402 you mean!
 
@ScottPack well I have a degree in it, so I'll say yes :P
@LucasKauffman is that one of your belgian waffle based equivalents then?
 
1:59 PM
@RоryMcCune not really it's the globally accepted variant :p
 
jrg
Lets talk about languages that suck.

Lets talk about JavaScript.
 
00:00 - 14:0014:00 - 00:00

« first day (1120 days earlier)      last day (3765 days later) »