Root Access

Ariane

6:00 PM

Will I be able to install all that in one go without a restart? (Yeah because the computers are on Deep Freeze.)

allquixotic

@Ariane umm... you should definitely have a JRE

go into terminal and try java -version

unless you're running, like, Mac OS X 10.1, you should have Java

Ariane

Uhm I'm not on the mac currently. But I think I should switch over there. Anyway it'll be a while for me to set up for work so I should go now. I'll change rooms, get a mac, and be back.

PS: at times like these I really wish I had a laptop I could bring to school.

allquixotic

heh

also, if all else fails, try c9.io -- it should have super good syntax highlighting for CSS (maybe even LESS) all within a web app, provided that your browser supports it

Einsteins Grandson

hi

i have this problem

from time to time the notebook is not starting properly

it goes to windows logo

Oliver Salzburg

you

should

Einsteins Grandson

6:14 PM

and then it looks like it is gonna to start

Oliver Salzburg

replace

it

Einsteins Grandson

and then BLUE SCREEN

OF DEATH

Oliver Salzburg

OF DEATH??????

Einsteins Grandson

then i restart and choose LAST GOOD CONFIGURATION

Oliver Salzburg

okay, go on

Einsteins Grandson

6:15 PM

Blue Screen of Death

The Blue Screen of Death (also known as a stop error, bluescreen, Blue Screen of Doom, BSoD, bug check screen or Stop screen) is an error screen displayed by operating systems after a crash. History The term "Blue Screen of Death" originated during OS/2 pre-release development activities at Lattice Inc, the makers of an early Windows and OS/2 C compiler. During porting of Lattice's other tools, developers encountered the stop screen when null pointers were dereferenced either in application code or when unexpectedly passed into system API calls. During reviews of progress and feedback to...

and then

when i do it

Oliver Salzburg

then wat?

you do it?

Einsteins Grandson

it runs OK

Oliver Salzburg

with whom?

Einsteins Grandson

for some time

and then again

Oliver Salzburg

again?

Einsteins Grandson

6:16 PM

it looks like some drivers are not good

i mean ..

OF DEATH?

it runs OK

OK OR DEATH?

for maybe 3 months

and then

Oliver Salzburg

it's probably your floppy drive

Einsteins Grandson

6:17 PM

ok

again

Oliver Salzburg

again?

Einsteins Grandson

it does not have a floppy

Oliver Salzburg

oh

then that's probably not it

Einsteins Grandson

i mean it runs OK for 3 months

Oliver Salzburg

or maybe that's the problem

install a floppy

Einsteins Grandson

6:17 PM

and then again

Braiam

@OliverSalzburg why are you talking with yourself?

Oliver Salzburg

@Braiam Nobody else will listen to me :(

3

Also, you probably have EG on ignore

Braiam

hehehe

That Brazilian Guy

why is there no wireshark command after a successful yum install wireshark?

WHY LINUX WHY

Braiam

you sure you installed wireshark and not wirez-hack?

That Brazilian Guy

6:22 PM

yes

Ariane

I'm back.

Braiam

(btw, I would blame yum instead)

Oliver Salzburg

@ThatBrazilianGuy It's probably just the core and you also need another package for cli/gui

That Brazilian Guy

yum search wireshark
Plugins carregados: langpacks, refresh-packagekit
============================================================================= N/S matched: wireshark =============================================================================
wireshark-devel.i686 : Development headers and libraries for wireshark
wireshark-devel.x86_64 : Development headers and libraries for wireshark
wireshark-gnome.x86_64 : Gnome desktop integration for wireshark
wireshark.i686 : Network traffic analyzer

Braiam

wait, wireshark can be daemonized?

Oliver Salzburg

6:23 PM

I'm just saying that because I spent a couple of minutes today getting angry because "npm install grunt" didn't give me a grunt binary :P

@ThatBrazilianGuy Okay, so that's not it :P

That Brazilian Guy

On Ubuntu apt-get install wireshark installs the GUI

Braiam

yum install wireshark-gnome.x86_64?

Oliver Salzburg

@ThatBrazilianGuy What does which wireshark produce?

Braiam

/me start guessing

That Brazilian Guy

which: no wireshark in (/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin)

type wireshark
bash: type: wireshark: not found

Braiam

6:25 PM

wireshark<tab>?

Ariane

@allquixotic I checked and there is indeed Java. going to try installing jEdit now

Oliver Salzburg

Okay, so it really doesn't exist ;D

Braiam

maybe the binary is called wireshark-gui D:

That Brazilian Guy

@Braiam tab completion is utterly, extremelly-annoyingly totally broken EVERYWHERE on this fedora install ;________________;

Oliver Salzburg

It probably requires wireshark-gnome.x86_64, like @Braiam suggested

That Brazilian Guy

6:26 PM

I'll try

Ariane

@allquixotic I can't.

@allquixotic the college's network filter says it's spyware.

Braiam

/me will whistle @slm your impressions about fedora :P

btw, why not using zsh + ohmyzsh?

Ariane

Maybe I should try Sublime Text. It expires, but I only need it for today on a deep freeze computer, so.

Braiam

@Ariane wut?

That Brazilian Guy

@Braiam Yeah, that was it. Thanks!

type wireshark
wireshark is hashed (/usr/sbin/wireshark)

Braiam

6:28 PM

hehehehe

Ariane

@Braiam Can't install jEdit because download links for it are flagged as spyware by Barracuda Web Filter and it won't let me access them.

That Brazilian Guy

On Ubuntu it is just "install wireshark"

@Ariane Use a proxy and be happy

Ariane

@ThatBrazilianGuy Pain in the ass.

Good idea but I don't wanna.

Braiam

ssh to someone else box

wait, is windows?

deep freeze = MS-like OS

Ariane

Besides last time I tried using a proxy here it took me ages to find one that wasn't itself blocked.

@Braiam it's a mac.

allquixotic

6:30 PM

@ThatBrazilianGuy become root!

@Ariane wat...

Ariane

@allquixotic My reaction exactly.

allquixotic

jEdit is perfectly legitimate @_@

Ariane

just like half the sites Barracuda Web Filter blocks

allquixotic

is gist.github.com blocked @Ariane

Ariane

Nope I can see the page

Braiam

6:32 PM

/me downloads using ssh/ssl

allquixotic

woot

i can post jEdit for you there :D

Braiam

O_O

Ariane

@allquixotic Wait, I'll take a look at Sublime text before.

allquixotic

@Ariane go to Terminal and type base64 --help -- does it exist?

Ariane

-bash: base64: command not found

allquixotic

6:33 PM

if you want a copy of jedit, i'll post the base64'ed .dmg and you can download it and decode it... no? damn! I was gonna be like.... pls forgive me github. GOOBY PLS.

how about drive.google.com

Ariane

Works

allquixotic

awesome

i can definitely host it there for you no problem

let me know if you need

Ariane

@allquixotic Thanks.

allquixotic

you're lucky that drive isn't blocked where you are :)

i'm pushing it to drive on my phone ;p

Ariane

@allquixotic I'm not sure I'll need it yet. And yeah, they don't block most utility sites. Though some teachers did push for them toblock Facebook.

allquixotic

6:39 PM

wait. what. jEdit blocked, but not Facebook?

3

so they block legitimate development software out of paranoia, but the actual spyware site of the entire world is not blocked? OK.

Ariane

@allquixotic I think they found some keywords and it was automatically blocked.

@allquixotic Uhm, I think I'll try jEdit after all. So far Sublime text isn't impressive and getting LESS syntax highlighting looks like a big pain in the ass.

allquixotic

kk

i'll need your email address, because i don't have access to Drive from my workstation, and the stupid Drive Android app is intentionally limited to prevent you from enabling "anyone with the link" sharing

kk delete it

Ariane

oh wait

but I don't use Drive.

allquixotic

do you have a google account with that email?

Ariane

Nope

allquixotic

6:48 PM

-_-

do you have any google account at all?

got it

check your email there

Darth Android

Installing LESS in Sublime is easy o.o

Ariane

Nothing is easy on a Mac

Darth Android

It's the same on Mac as it is on any other platform

allquixotic

Mar 6 '13 at 14:31, by Bob

go away Apple

Darth Android

Drag sublime to Applications to install, open sublime, copy-paste -> enter to install Package Control, search packages -> Less -> enter

allquixotic

6:51 PM

then again, things aren't particularly easy on Android, either... grr

companies seem to make a point of preventing people on Android from doing what they need, despite the fact that the full desktop or web app can do it, and there's no good performance reason to prevent it, they're either lazy or they want to cripple mobile users

Ariane

@Darth Yeah I understood that after reading a lot. Ended up managing to install it

Darth Android

@allquixotic But of course. They can show bigger ads on desktop

allquixotic

!!is Google evil?

Ariane

@allquixotic I think Sublime Text will do the job. Not ideal but I think it'll work.

allquixotic

wow.... Cavil must be programmed to love Google

Darth Android

6:54 PM

@Ariane I've been using Sublime Text for a few years, I'm curious what you find not ideal that you're looking for in a text editor

That Brazilian Guy

DAMN YOU FIREFOX CACHE FOR DOMAINS!

I am trying to configure redirection between www and no-www. (shutup clippy).

Ariane

@Darth FIrst overwhelming argument: not used to it or Macs.

allquixotic

!! s/I am trying/${ATTEMPT}/

ChatBot John Cavil

@allquixotic ${ATTEMPT} to configure redirection between www and no-www. (shutup clippy). (source)

allquixotic

gotta do something to evade his evil regex

Darth Android

6:56 PM

@ThatBrazilianGuy Redirect, or make available at both?

That Brazilian Guy

redirect.

It is WP so it automatically redirects

allquixotic

why 302 when you can DNS CNAME?

Darth Android

I would recommend a DNS CNAME and making the vhost listen to both (not a redirect)

but otherwise you'd just need to configure another vhost that 302's everything

That Brazilian Guy

@allquixotic Because I have no access to DNS control panels and have to email other office, and they take a while to reply, and get confused sometimes. Right now my latest message "please activate the no-www too to the same IP" in their minds somehow became "oh and while you're at it disable the www as well". Ò_ó

Darth Android

o.0

That Brazilian Guy

6:59 PM

Yeah, the infrastucture team or whatever

We have way too many teams

Someday I won't be surprised to find we have a team for teaming teams and a team for teaming teams that teams teams. Buffallo Buffallo Buffallo Buffallo.

Darth Android

That's when I get fed up and start sending them "Please update the DNS records for domain to match the following: fixed-width formatted printout of all DNS records for the domain"

That Brazilian Guy

@DarthAndroid I'd do that if I spoke DNSese.

Darth Android

I think google translate supports that.

allquixotic

@ThatBrazilianGuy WAT? that's a real wiki article? :P

That Brazilian Guy

No, there is esperanto and even yoruba, however. If I ever feel inclined for a dar sacrifice of macumba to curse them I can ask Google.

!!yes

Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo

"Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo" is a grammatically correct sentence in American English, used as an example of how homonyms and homophones can be used to create complicated linguistic constructs. It has been discussed in literature since 1972 when the sentence was used by William J. Rapaport, an associate professor at the University at Buffalo. It was posted to Linguist List by Rapaport in 1992. It was also featured in Steven Pinker's 1994 book The Language Instinct as an example of a sentence that is "seemingly nonsensical" but grammatical. Pinker na...

ChatBot John Cavil

7:04 PM

That Brazilian Guy

> "Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo" is a grammatically correct sentence in American English.

Ariane

@allquixotic thanks for helping. Period had begun, so I'll go work now. I'll be trying sublime text

allquixotic

mmk!

@ThatBrazilianGuy I'd never heard of that before O_O

That Brazilian Guy

@allquixotic German is way, way, way weirder:

►

allquixotic

James while John had had had had had had had had had had had a better effect on the teacher

"James while John had had a better effect on the teacher" is an English sentence used to demonstrate lexical ambiguity and the necessity of punctuation, which serves as a substitute for the intonation, stress, and pauses found in human speech. In human information processing research, the sentence has been used to show how readers depend on punctuation to give sentences meaning, especially in the context of scanning across lines of text. The sentence is sometimes presented as a puzzle, where the solver must add the punctuation. The example refers to two students, James and John, who are re...

That Brazilian Guy

7:17 PM

@allquixotic C'mon, no punctuation? That's cheating.

allquixotic

@ThatBrazilianGuy I think punctuation is only enforced by prescribed norms, not by the actual grammar structure of the language from a linguistics point of view -- it's a nuance but they're not the same

just like you could robotically say the word "had" with exactly the same intonation with no pauses or emphasis repeatedly and your vocalization would be grammatically correct, though hard to understand, which is why we have intonations in spoken language, and punctuation in written language

normatives vs. descriptives though

the English language grammar is defined as such-and-such; in order to communicate clearly, one ought to use such-and-such; the two realms are separate

That Brazilian Guy

> After falling into a trance, she muttered words incomprehensible to mere mortals. The priests of the sanctuary then interpreted her oracles in a common language and delivered them to those who had requested them. Even so, the oracles were always open to interpretation and often signified dual and opposing meanings.

allquixotic

I remember reading American Civil War documents for coursework in college -- documents written in the mid-19th century -- and I was astonished at how little punctuation there was

That Brazilian Guy

> "You will go you will return not in the battle you will perish" was an example of this duality of meaning. The above sentence can be interpreted two different ways depending where the comma can be placed. If a comma is placed after the word "not" the message is discouraging for him who is about to depart for war. If on the other hand the comma is placed before the word "not", then the warrior is to return alive.

allquixotic

I think it was a sort of "written dialect" of that time, that they really didn't do much in the way of punctuation except for periods and exclamation marks

or maybe they were just in a hurry because they didn't want to get shot while writing a letter

That Brazilian Guy

7:23 PM

> reading American Civil War documents for coursework in college

Wait, how is this related to IT? Or your course in college wasn't IT-related?

allquixotic

@ThatBrazilianGuy elective

That Brazilian Guy

Oh

allquixotic

you're required to take a lot of general electives that are outside your field

i took a lot of philosophy, history, politics, that kinda thing

That Brazilian Guy

I'm not sure how it is here, I'm... I'm a dropout. (hides under a rock)

allquixotic

the other alternatives were like, physical education, music, or art

amazon.com/SteelSeries-Wireless-Headset-Dolby-Surround/dp/…

> Ships in 1 to 2 months

Either you have it or you don't, Amazon! if you don't have it, say "Out of stock". if you have it, say "Ships in 1-2 days" like normal! JEEZ

That Brazilian Guy

7:25 PM

7.1 surrond on a headset?!

is that even real?

allquixotic

@ThatBrazilianGuy yeah, it's very real

Steelseries isn't a gimmick company; they put out serious gaming/enthusiast products that work. I have one of their mice

and their drivers are actually okay (as in, not incredibly perfect, but they more than get the job done)

parasietje

Anybody want to help me investigate a potential internet scam?

allquixotic

I like the swappable Li-Ion batteries, the long battery life, the high quality sound, the digital (S/PDIF?) connectivity, the range, and how comfortable they look

That Brazilian Guy

But isn't X.Y audio a way of saying it has X different audio speakers that simulate sound from different directions in orded to create an impression of spatial sound; or something like that? How they achieve it with only 2 outputs?

allquixotic

@parasietje what is there to investigate? if you think it's a scam, it probably is

That Brazilian Guy

7:28 PM

@parasietje If it's on the internet and sounds too easy / good to be true, it's a scam

parasietje

I found a notice on a Belgian apartment letting site. Contacted the guy, and it appears to be someone in the UK. So they want to use a third-party service to send me the keys, but the guys require a deposit of EUR 900.

That Brazilian Guy

If it offers a huge advantage for a very small effort, it is a scam.

allquixotic

@ThatBrazilianGuy psychoacoustics. look it up.

parasietje

which is, apparently, standard practice in the UK according to "The Dispute Service" (which actually sounds/seems legit)

however, immoeurope.co.uk WHOIS says it has only been registered 2 days

allquixotic

they might have 8 physical drivers in different locations within the headphones; that's not impossible, but unlikely. what is possible is that they have two drivers only, but they psychoacoustically position the sound so that it sounds like it would sound if you had 8 physical speakers around you

parasietje

7:29 PM

is this a valid conclusion, or could it just have been renewed recently?

allquixotic

@parasietje if you are investigating a domain that is asking you to spend 900 Euro and the domain has only been registered for two days, I would steer clear, even if it turns out to be legitimate -- that's extremely suspect

That Brazilian Guy

@allquixotic I've heard of it. I am not totally awake to try to research a new concept and understand it, and in a foreign language

parasietje

Well understood, thanks for the advice. I will try to find out a little more about the UK person who registered the domain.

allquixotic

@parasietje most domains are re-registered automatically with the registrar, so their registration period never lapses, which means that even if they are paying for it yearly, it would say e.g. 768 days if they've been there for that length of time

parasietje

@allquixotic Thanks for the information. So this means it's a scam; no way this service only exists for 2 days.

allquixotic

7:33 PM

@parasietje the likelihood that you happened to find them on their second day of legitimate operation is quite low when compared with the likelihood that someone wants to scam you out of 900 Euro -- when in doubt, avoid

parasietje

\o/ long live the internet (and thorough research before doing stupid things!)

2

allquixotic

I don't know if Belgium or the UK has anything like the U.S.'s Better Business Bureau, but when doing things around living accommodations, I would definitely get in touch with such an organization

the BBB in the US does "accreditation" which is a program that audits that a business is who they say they are, that they've been around for some time, and that they properly settle customer disputes; you can bring up disputes against the company with the BBB and if they are not handled per your satisfaction, the company's BBB rating can be downgraded

basically it's a way to make sure that businesses are operating with some degree of credibility, so that if you see a business on the BBB's website as accredited with a decent rating, you know that the company will at least attempt to provide you service in return for your money

of course you can still get screwed by legal jargon like extremely limited warranties and items that break right after the warranty expires, but those things aren't usually considered valid disputes since they aren't doing anything illegal

parasietje

well, to be honest, this is what worries me the most: nominet.org.uk/whois/lookup?query=immoeurope.co.uk -> "UK Individual"

allquixotic

I'm kind of amazed that they don't have some sort of anonymity service on the domain... that's extremely rare, for scammers or legitimate businesses, except for really, really large businesses

of course, the registration address could be falsified

there are many hosts that will let you put in fake data into WHOIS, or someone else's real data that you stole

they make no attempt to verify that the information is accurate

perhaps having real-looking data makes the scammers hope that the domain appear less scammy, since having "domainsbyproxy.com" immediately brings up the question "what are you hiding"

it's a cat and mouse game all the way down.

parasietje

8:05 PM

And I can confirm it's fraud :)

just found a similar scam where the same scenario is recycled

allquixotic

@parasietje you can also look for things like this and Web of Trust (and various other sites with a similar purpose) to determine whether a site is either (1) known good, (2) known malicious, or (3) unknown, either because it's never been investigated before or it's too young to tell

Trend Micro said that immoeurope site is "unknown" so I certainly wouldn't put any faith in it under those circumstances... they are just as convinced as the WHOIS that it's a new, unproven site

parasietje

@allquixotic thanks for the help

In Belgium, you have the same thing as 'BBB', by the way. You can file complaints and the organization could even remove an agents accreditation.

But you also have legal scams, e.g. one where the interest on the deposit is actually used to provide legal insurance for the landlord.

too bad you can't give bounties on SO Chat ;)

allquixotic

8:24 PM

@parasietje I've said that to myself hundreds of times before

so has @JourneymanGeek, the #1 contributor to this channel

parasietje

I guess the next best thing is to go over your questions and see if I can't contribute something useful :)

thanks again, and have a great.. ehm.. day, I guess, in the US.

Darth Android

@allquixotic We're being outclassed by a canine ._.

allquixotic

@DarthAndroid he probably has a PAWRTY keyboard that gives him faster typing speed

Darth Android

8:43 PM

O.O

allquixotic

Einsteins Grandson

9:53 PM

anybody here?

i have a notebook that has 300 GB hard drive

GFSE

gemsfromstackexchange: http://i.stack.imgur.com/l8RGH.png

posted on January 22, 2014

http://i.stack.imgur.com/l8RGH.png: WE ARE THE INDIAN HACKER TEAM.

3

Einsteins Grandson

and 100 GB of free space

there is windows 7 on the laptop

now i will put ubuntu

into it

so i will squeeze the that 300 GB partition

create like 20 GB of free space

create new partition of 20 GB

and install ubuntu on this new 20 GB partition

will i lose some data that are now on the 1st partition?

on the partition that has 300 GB now

Darth Android

@EinsteinsGrandson You can shrink the 300GB partition without data loss

allquixotic

operative word: can

Darth Android

Depending on where blocks are placed, you might even be able to do with while windows is running

allquixotic

10:03 PM

that doesn't mean that any possible resize of the partition is going to preserve data

you have to use a filesystem shrinking utility that can handle NTFS

Darth Android

I recommend Windows for that, @allquixotic

allquixotic

@DarthAndroid gparted works fine in my experience, as does Paragon Partition Manager's Live CD

Darth Android

Start > Right click on Computer > Manage > Disk Management

@allquixotic TBH I trust MS more than either of those when it comes to non-destructively resizing NTFS :)

Find your partition, and then Right Click > Shrink Volume

It'll do analysis for any blocks that can't be moved while the system is live (NTFS journaling / superblocks) and tell you what the minimum size you can shrink do while the system is live. If it's more than 20GB smaller, then you're good.

Just tell it to shrink 20GB and let it do it's thing

Otherwise look into one of the tools @allquixotic suggested

allquixotic

@DarthAndroid never knew that existed, but then I haven't looked into that sort of thing since the XP days

knew about disk mgmt, but not that it'd let you online shrink the system volume

Bob

@DarthAndroid Same, but I still wouldn't manipulate filesystems like this without a backup.

@allquixotic It doesn't. It sets the volume offline first. And won't let you use it on the system volume. Last I checked, anyway.

Darth Android

10:14 PM

@Bob Negative, you can shrink any live NTFS volume with that

Including the system volume

That Brazilian Guy

O_o

Sounds safe.

Bob

@DarthAndroid Huh. That's news to me.

yay, i think?

@allquixotic nice.

@allquixotic do it!

10:16 PM

it's probably one of those mass mailings where they send it out to everyone and make everyone think they're special/rare/unique by saying they're a "VIP" and "invitation-only", when in fact it's some kind of scam

i verified the mail headers and it's indeed from paypal, but i doubt even clicking it considering how vacuous the marketing around it is

Darth Android

@Bob Backups are always nice, but unless I'm financially responsible for the uptime of the system (aka, not my own desktop/laptop), I'll just be happy with the system having battery backup.

allquixotic

hmm... paypal-special.com/landing has EV SSL for PayPal, Inc

Darth Android

It basically defrags the drive, and then shrinks it.

Michael Frank

0

Q: How can I 5-star the Zaltys?

The Zaltys is the end boss of the demo. He's big and mean and has a ton of health. It takes me forever to kill him, and my swords do very little damage to him. I only got two stars! What's an easy way to get five stars on him?

lightning-returns-demo

Darth Android

@allquixotic Oooh, I can sign up so that PayPal can spam me with offers from 3rd parties

allquixotic

10:18 PM

> Start by entering your email so we can find your offers.

No thanks, I don't want to be marketed to

Darth Android

Let me get right on that

Michael Frank

So he asks a question, then instantly answers it? o.O

allquixotic

@DarthAndroid IKR!!!

ROFL...

i entered a nonsense email on the landing page, and it let me in

definitely smells like a scam, but it's also definitely from PayPal themselves. WTF.

Braiam

> Partner Support

That Brazilian Guy

@DarthAndroid After buying a laptop online from a web version of large phisical retailer store, I started getting constant emails from different domains. I always clicked on unsubscribe, to no effect. I then called their support phone and asked for a protocol number so I could sue them, I stated that clearly (there are laws that no one knows but states that we got to stop getting spam when we want to). They finally stopped.

After a "four workdays period in order for their IT team to process the request".

@allquixotic Stolen certificate?

Darth Android

10:23 PM

@ThatBrazilianGuy In that case, why they hell are they bothering to collect email addresses when they've compromised Paypal's SSL certificate?

That Brazilian Guy

Beats me.

But what good are certificates for? My organization self-issues certificates recognized by nobody, so it trains everyone to always click on accept any and all certificates.

Bob

@ThatBrazilianGuy Except this is clearly an EV certificate issued by VeriSign, unless @allquixotic has some random root CA installed.

Very different from self-signed. Very very different.

That Brazilian Guy

@Bob Now where have you been clicking, @allquixotic?

allquixotic

@ThatBrazilianGuy Verisign Class 3 EV is super rigorous. and they would have had to compromise their email system too.

@ThatBrazilianGuy i got to this site by being emailed by paypal@e.paypal.com

Bob

@allquixotic Pretty sure you can set any sender address.

That Brazilian Guy

10:27 PM

@allquixotic I know, just kidding. Obviously you're no noob. It's just so surreal.

allquixotic

@Bob but Gmail will flag it if you forge it

mailed-by: na.e.paypal.com
signed-by: e.paypal.com

those MX records are controlled by the official DNS owner of paypal.com

Michael Frank

0

Q: username and password retrieval for ZyXEL router?

I don't have the username and password for a ZyXEL Prestige 650H/HW 33 router device which I want to access because I'm moving to another ISP. Is there any solution, other than hardware reset, that causes all configuration settings be reset to factory defaults?

networking router adsl

Sounds more like "I wanna break into someones router to steal their details!"

allquixotic

the thing that's really shady about that paypal-special.com site is that it accepts literally any email

phishing sites do that

Michael Frank

Even their own email?

allquixotic

@MichaelFrank YUP! :D

Bob

10:29 PM

@allquixotic No, well-designed sites do that.

It's nearly impossible to validate emails.

The correct way is to test-send one.

That Brazilian Guy

@Bob Hmmmm.... Interesting theory.

allquixotic

@Bob actually, if you just click "Continue" on the homepage and don't even enter an email, it takes you in... as if you're logged in. and it says "Log out" at the top.

do well-designed sites pretend that you're somehow authenticated when you're not?

Bob

@allquixotic Ok, that is screwy.

That Brazilian Guy

@allquixotic Post a question on Information Security, you'll get some upvotes if only for the weirdness of it.

Michael Frank

As a "VIP User only site" surely they would only want genuine VIPs to have access to the site...

Bob

10:31 PM

Registered since late 2013...

> ASN:
United States AS33070 RMH-14 - Rackspace Hosting (registered Sep 24, 2004)
IP Location:
United States - Texas - San Antonio - Ap Lunenfeld Enterprises

allquixotic

heh

i clicked the feedback button on the left side of the screen, typed some feedback, and there's just a spinning icon that goes on forever... i guess the feedback goes to /dev/null

Bob

dawhois.com

IP Address 209.61.138.166
Host www.darnweb.com
Location US US, United States
City San Antonio, TX 78218
Organization Rackspace Hosting
ISP Rackspace Hosting
AS Number AS33070 Rackspace Hosting

allquixotic

> This site looks extremely suspicious to me, like a phishing attempt. First of all, it accepts ANY email whatsoever on the login screen, and then displays a fake "Log out" button in the top-right corner.
Second, it displays "third-party offers", which are little more than unwanted advertisements. This behavior is highly uncharacteristic of PayPal and suggests that PayPal is unconcerned with consumer privacy or consumer rights, and is just out to make money. It also severely harms my trust in PayPal's services, when they make a website with such obvious security holes. I didn't even have to…

Bob

accessing darnweb.com:

> You don't have permission to access / on this server.

...

@allquixotic try a support email on their main site

see if they recognise this thing

That Brazilian Guy

@allquixotic Tweet it and see what they say publicly

Bob

10:34 PM

That works too :P

That Brazilian Guy

Sometimes even faster...

Hennes

Something is fishy about this conversation:

2

https://twitter.com/TeaAndCopy/timelines/421628995365388288

William Hilsum

Hello!

doesn't matter how much I want to stay around, stuff comes up :(

Darth Android

@WilliamHilsum Hello! I have not chatted with you in a while. It's good to see you again :)

William Hilsum

Thanks! you too... haven't chatted with anyone in ages... amazing, I'm here and I don't even want anything from Steam! haha

allquixotic

10:45 PM

0

Q: Apparently PayPal-affiliated site with very suspect security

History I got an email this afternoon to my gmail from "paypal@e.paypal.com" with mailed-by: na.e.paypal.com and signed-by: e.paypal.com. Gmail did not report it as spam/phishing/suspicious and it went straight to my inbox, so the MX records must check out. The email effectively linked to this ...

phishing trust

@WilliamHilsum wut? really? you mean you don't want me to buy you something on Steam? huh. then I have nothing to say to you. *shuns* .... j/k j/k

William Hilsum

haha... so so little time... I now have over 10 pages of inventory to redeem along with hundreds of codes from bundles to type! The company I got the job with got the investment and has grown almost 10 fold since I joined! Haven't had much time to myself! Hence not being here much any more!

Michael Frank

Sounds like you need an assistant!

William Hilsum

hehe, new guy started on Monday! :)

Why I'm here! Just answered a few questions! Need to get back in to it before I drop off the top line!!!

Oliver Salzburg

10:59 PM

Firefox indexOf is fast O__O

Transcript for