« first day (933 days earlier)      last day (4048 days later) » 

1:25 PM
did I just see a serverfault easter egg?
some popup with "Chat with an expert" briefly..
 
I've not seen it yet. I'm sure they've done something for us.
 
2
Q: Let's get rid of all of the "Chat with an expert" questions

LinuxiosMeta just got a lot of questions on "Who is the expert?", "Can I keep them", all the way to plain jokes like "The expert saved me millions of dollars". Besides our main question on the subject, (What is "chat with an expert"?) I think we need to delete all of the many, many, duplicates....

190
Q: What is "chat with an expert"?

AntonyA box just comes out of nowhere which says "chat with an expert". It happened once on Stack Overflow and once on Meta. Is this an ad? Isn't Meta supposed to have no ads? Here's the HTML for that weird box: <div id="adviza-box" style="width: 380px; "> <div id="adviza-status"> ...

aaaaah
it's the AI bot they tested in chat some time ago
 
wrong chat
 
I hope they're only playing that joke on hi-rep users... It seems poorly thought out, even for SE.
@pauska To go a Meta question, don't scroll for ~30 seconds.....
 
yeah I got it
true, showing this to low-rep users would create a very displeasing experience for them..
 
1:42 PM
It shows for anonymous users =[
As if our regular users aren't bad enough....
 
2:03 PM
April fools "joke?" Well, I hope it is, at least.
 
It is... And I think it's funny, for those well acquainted with the site...
 
2:17 PM
I was amused, slighty. Then I saw all the MSO questions about it...
 
Live-blogging a server compromise...
CPU usage has uncharacteristic rise...
top shows familiar processes, but running under the wrong user...
  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
17558 jlactoen  39  19  9848 6028  568 R 99.9  0.0   5352:57 dbc in
29045 jlactoen  39  19  9676 5976  560 R 99.9  0.0   3971:52 DBC JSINIT
lsof shows the real-deal...
# lsof -p 17558
COMMAND   PID     USER   FD   TYPE DEVICE SIZE/OFF     NODE NAME
dbc     17558 jlactoen  cwd    DIR    8,2     4096   266537 /home/jlactoen/.ssh/john/run
dbc     17558 jlactoen  rtd    DIR    8,2     4096        2 /
dbc     17558 jlactoen  txt    REG    8,2   217592   266716 /home/jlactoen/.ssh/john/run/dbc
dbc     17558 jlactoen  mem    REG    8,2   156872   524330 /lib64/ld-2.12.so
dbc     17558 jlactoen  mem    REG    8,2  1918016   524382 /lib64/libc-2.12.so
dbc     17558 jlactoen    0u   CHR  136,7      0t0       10 /dev/pts/7 (deleted)
 
@tombull89 Honestly, I was irritated by the talk with an expert box, didn't think it was funny at all... but am much amused by all the activity on meta over it, so... yeah, something or other.
 
@ewwhite netstat?
 
Naw...
they got in with a weak password.
 
As always....
 
2:25 PM
but what are they doing? hardly running the BONIC client for seti@home ...
 
Just running john-the-ripper password cracker
 
two in parallel?
 
Indeed.
Sux because I have to leave ssh open to the world.
 
hum. suspend the processes and disable the user?
 
Oh, I know what to do... but I hate weak passwords.
 
2:30 PM
disable password logins?
 
not possible.
not my application... produce shit.
 
Ugh.
 
Was the password "12345"?
 
@ChrisS no way, that's from Spaceballs.
 
@syneticon-dj yeah, the PIN for my dad's debit card is "5555".... he refuses to change it
 
2:32 PM
It would rather be "Password1" to satisfy password complexity requirements
 
They cracked 19...
one process was churning on 77 passwords.
 
19 accounts?
 
the other was dedicated to trying to crack root.
 
Ah, john; that makes sense I suppose
 
@ewwhite oh - that efficient
 
2:33 PM
I should run john against our AD accounts sometime, see how long it takes to get one
 
@ChrisS well, as long as he can keep the secret. Although I always found that repeatedly typing the same digit on a terminal is distinct enough for bystanders to notice so they would be able to guess...
 
john was hardlinked to common command and process names... "DBC" "dbc" "cp"... The password files were given names that were common inputs to those commands... "-D" "JSINIT" "in"
 
He's in the "I don't want to have to think" Generation (aka Baby Boomers). So asking him to pick a password worth two hoots is near impossible
 
Used the .ssh directory as a home base.
 
@ewwhite Seems oddly smart given they got in with a weak password, so it's fair to assume the users are "security-challenged"
 
2:37 PM
[root@SomeServer /home/jlactoen/.ssh/john/run]# vi -- -D
 
I'd set the minimum password length to 20 and tell them to pick their favorite 3-4 words as the password.
 
@ChrisS "fuck all password policies"?
 
@syneticon-dj yeah, they don't work... People pick "Password1" to satisfy the requirements.
One website I have an account at requires at least 1 lower, upper, symbol and number. But only requires 6 characters. I'll bet "Pass1!" is 20%+ of users' passwords.
 
@ChrisS Yup. I assume everyone read that MS white paper on why they do that, right? (The one MichaelHampton posted in here a little while back.)
 
I don't recall a MS paper, but the topic has been hashed over and over by security experts.
The main problem is that for the last 20 years we told people to pick symbols and numbers and stuff...
It's hard to reverse course like we need when it's been "best practice" for so long.
 
2:43 PM
mmm... nah, lemme see if I have it in my history.
 
a little local exploit action..
9: vm86 mode not supported on 64 bit kernel
can: controller area network core (rev 20090105 abi 8)
NET: Registered protocol family 29
can: broadcast manager protocol (rev 20090105 t)
 
Or, so goes this particular paper. They do make a pretty convincing case for it, though.
 
Oh; yeah, I've read that one.
 
User last came in from 202.128.19.252...
 
@HopelessN00b security is a protection against loss, it offers no protitable gains. In fact ensuring protection of loss is a loss in itself.
Its kind of like insurance. Might be cheaper not to get it if it never happens to you..
 
2:49 PM
but that's actually legit, because that's where the user is based...
 
I generally agree with the paper, though it shouldn't be anything "new". First lesson of security: There are no absolutes (eg, there is no perfectly secure system). Starting from there, you apply a reasonable amount of security given the value of the system.
My only problem with the MS paper is that I think they underestimate the cost of insecurity.. But I think most people do; they don't see "risK" until it's on the nightly news or holding a gun in their face; then it seems more likely to happen than it actually is.
 
quick question. If there is a domain pointing at a specific ip and at a specific port, but there is not an apache configuration file for it on sites-enabled on ubuntu server. How else could that be configured?
 
Schneier talks about that extensively in several of his books - People are really terrible at assessing risk, they generally think things never happen or happen all the time (with nothing in between).
 
I've become more of an advocate of auditing rather than cut-throat access controls.
 
My stuff gets hacked often enough... I know it's out there, and I can't control stupid users.
 
2:53 PM
Its in the control of the sysadmin and it becomes more of a better way of actually assessing risks to stuff.
 
I should start adding some of that CIS security stuff to my produce servers.
 
@ewwhite jane/jane. WHY ISNT THAT A GOOD USERNAME/PASSWORD COMBO?!?!
 
I'm an advocate of reasonable access controls; which most do not implement even though it's extremely little overall cost (like the long, no complexity, no expiry passwords - perfect for the low risk business)
 
@ewwhite Take a look at auditctl. The amount of combinations of controls you can provide is pretty extensive.
You can setup quite a lot of anomaly detection in it.
 
Well, it sucks in this server because I have denyhosts, but the users come from Cuba, Guam, Phillipines, Japan, as well as all over the US...
and most come from dynamic IP addresses.
and they have to come in via SSH on port 22.
@MIfe Oh, I know.. I have extensive audit.rules for my HIPPA systems
 
2:58 PM
@ChrisS Well, look at it from the point of view of human evolution. Either something never happened, or you assumed it always happens. Anything in-between got you killed.
 
@Kevin I get the joke, but we haven't been foraging for food in the last several millenia... Time for a little evolution, or intelligent though. The "sudden outbreak of common sense" type
 
I just discovered that the attacking user in my Linux system hack has been gone from the company for two years... But the people in that office (Guam) continued to just share that user's account.
 
@ewwhite For my network, I just deny access to management ports (22, 3389, etc.) from anywhere but my LAN. I use a VPN if I need to get to it from the outside world. And the VPN uses a combo of SSL keys and user/pass for authentication.
Oh, and all passwords are random case-sensitive alpha-numeric 25 character phrases
 
I change SSH to port 2222 to keep the script kiddies at bay... I've only got one home system where 2 users can login with passwords too. I'd be pretty amazed if anyone ever got in.
 
LOL
my boss took a picture of my coworkers car
Had to put Update 11:00 - Car has been sold. Thanks for looking. because office phones wouldn't stop ringing -.-
 
3:09 PM
I'd be pissed if someone put my actual phone number there
 
@mossy ahahahaha
 
@ChrisS I use 8594
 
@Jacob Any specific meaning, or just randomly chosen?
 
@ChrisS To some degree, but from a user's perspective, the cost is generally borne by others, so there's a lot of validity to the idea that it's no their problem.
 
Why not just use Fail2Ban and SSH keys?
Or, even better, VPN?
I hate changing default ports
 
3:11 PM
@Kevin I'm pretty sure that it was random
 
@MDMarra because I can't control where these users come from.
 
@MDMarra Because clients that have VMs don't want that complexity
 
@ewwhite Or even strong passphrases?
I hate when I'm troubleshooting a system that someone else set up and I have to spend an hour figuring out what isn't running where it should be
 
@MDMarra I can't control it.
It's due to weaknesses in Produce Pro.
 
Produce Prooooooooooooooooooooooooooooooooooo
 
3:15 PM
How was I to know that 10 people in a small office in Guam were sharing ssh login access to an application server using the account of a user who left years ago?
soooo random.
 
@ewwhite Well, you should probably assume that. Take it as a given. Of course, that doesn't help you defend against the attack, or tell you which users are using which old account in which stupid manner.
 
I once had to figure out which port RDP was running on for a DMZ web server. Once I go into the default administrator account, there was a text file with every username and password for services on the server right on the desktop.
 
@MDMarra I generally hate it too, but the script kiddies blow up the auth log with failed root login attempts. And essentially nobody is using SSH except me. I wouldn't advocate changing SSH in general, and definitely not when "normal" users are going to be logging in.
 
@MDMarra Purrr-fesh-un-elle grade.
 
"Concerned" enough about security to change the internal-access-only RDP port? Better leave all my passwords on the desktop.
3
 
3:17 PM
That's classic cult cargo sysadmin for you
My two predecessors here were like that. Except the login/pass list was printed and pinned to the cube wall.
 
@MDMarra You have no idea how usual that is.
 
Of course I do :)
I think you forget, I do work for @ewwhite on occasion!
I've gotten a glimpse into the dirty underbelly of IT
 
So I convinced a new client to use NexentaStor for their SAN... They called me over the weekend to ask where they could go to obtain more information... I said, "head on over to nexentastor.org to find an informative and comprehensive community resource..."
 
@ChrisS That's not as horrible, I'd argue. Hard for a remote attacker to get to that piece of paper.
 
at job[-1] Client: Your product supports importing from a Excel file right? Me: Yes, it does because several other products export in that format. Client: Oh no, we just store our PWs in a excel file on a SMB share exposed to the internet...
 
3:20 PM
@ewwhite Now they're going to roll their own?
Please tell me that they're going to roll their own.
 
No, the effing Nexenta website has been down for three days.
 
hahahahaha
They should partner with Nagios
 
3 days????
 
And I tried to do some maintenance work over the weekend, but the software and APT repositories are under the domain that's down.
 
Holy fuck, 3 days?
 
3:22 PM
It must be an attack that they're scrubbing
 
Can you get to nexentastor.org ?
 
no
 
that's the support forum and data repo... I needed to install iperf on an appliance and apt-get timed out.
@ewwhite910 aware of the issue. Don’t have an ETA yet. :(
 
I wouldn't be surprised if they send out an email saying they've been hosting compromised code and whoops, update!
 
@ewwhite DEVOPS FAIL
 
3:23 PM
Three days can't really be explained any other way.
 
Looks like their Colo is blocking or their servers are completely down....
 
Unless they've had a total storage failure
:)
 
If only there was a backup awareness event scheduled recently…
 
@ewwhite Different DC completely from nexentastor.org
 
3:25 PM
So someone wrote me and said that .org is a private site owned by one of the Nexenta Engineers.
 
Seems like a pretty professional setup
 
Indeed, it inspires much confidence.
 
<blinks and points at floaty chatty thingy>
 
I'm embarrassed... They lost my Logicworks business for not having it together...
and now, I may have to take a client a different direction because their website is down.
 
WTF floaty box? DEMON BEGONE! <click>
 
3:27 PM
@voretaq7 Saw that earlier
 
@ewwhite Website is registered to a different person at a different address from Nexenta.com; so it's possible
 
looks like a scam ad
 
@ewwhite Yeah, but they save lots of money not having sysadmins and such.
 
@voretaq7 It's been all over meta.SO all morning and yesterday evening
 
@ChrisS Yeah, i know the owner of the site...
 
3:27 PM
217
Q: What is "chat with an expert"?

AntonyA box just comes out of nowhere which says "chat with an expert". It happened once on Stack Overflow and once on Meta. Is this an ad? Isn't Meta supposed to have no ads? Here's the HTML for that weird box: <div id="adviza-box" style="width: 380px; "> <div id="adviza-status"> ...

 
oh maybe it's april fools?
 
I'm extremely disappointed that /. seems to have mostly real news stories, no OMG Ponies, and the "jokes" aren't all that funny IMHO
 
@MDMarra that's my assumption too
 
@MDMarra It is.... Supposed to be anyway
But everyone gets that box, even unregistered and anonymous users.
Noobs aren't going to think it's funny when the Expert doesn't help them in the least.
 
3:30 PM
@ChrisS Hmm. I'm extremely surprised that /. is still around. Can't remember the last time I was on that relic.
 
@HopelessN00b I visit it a couple of times a week still
 
@ChrisS Then the noobs will get a great start on Stack Exchange by becoming bitter mSO users!
 
@HopelessN00b I visit about once a year, to see the April Fool's Day Jokes... But they've gotten more and more "corporate"
 
occasionally it has something Twitter didn't tell me yet
and I can look ALL KINDS OF SMART by being the first guy to link to the source.
 
@MichaelHampton I really doubt any of them will stick around that long.
 
3:31 PM
Speaking of which, for those of you who don't follow me on Twitter:
http://store.baconsalt.com/Bacon-Condoms_p_177.html well now, that is certainly an improvement. "for more hot pork experience"...
 
Like SE, especially SF, doesn't have a bad enough reputation already.
 
and
From the same site: http://www.dudeiwantthat.com/style/design/tritium-keychains.asp - I want me a glowing radioactive keychain !
 
@HopelessN00b there was the 16-year uptime article yesterday...
 
@voretaq7 Oh, I used to try to look smart. Then I figured out it required effort, and subsequently quit bothering.
@ewwhite Saw it on Ars.
 
@ewwhite sniffle & drops a token on the floor for mah homies
 
3:33 PM
On the 29th, even.
 
....
export EDITOR="/usr/bin/rm" # Change your default file editor.
 
I love you, Eliza
 
yo
 
ho ho and a bottle of rum.
 
Called out of work
 
3:39 PM
Yeah. Wish I had.
But I didn't, so I'm here at work, with narry a ho nor bottle of rum to be seen.
 
I definitely should have. Two guys are on vacation, which makes it fail-all-the-shit day.
 
Tritium illumination is the use of gaseous tritium, a radioactive isotope of hydrogen, to create visible light. Tritium emits electrons through beta decay, and when they interact with a phosphor material, fluorescent light is created, a process called radioluminescence. As tritium illumination requires no electrical energy, it found wide use in applications such as emergency exit signs and illumination of wristwatches. More recently, many applications using radioactive materials have been replaced with photoluminescent materials. Tritium lighting Tritium lighting is made using glass ...
 
I realized how much I really hate my job this weekend, and it's making me miserable.
 
@ChrisS Yes, that's why the radioactive keychain is radioactive
 
So where do I order one?
 
3:44 PM
@Cole If it makes you feel better, I had to work both nights/days this weekend...
 
@HopelessN00b I worked the majority of yesterday
 
Happy Easter!
 
@ChrisS now it clicks the linkage in the onebox
 
My dad was like "WHAT THE FUCK"
 
@voretaq7 Leads to references to some marketplace, emailing, PayPal and all sorts of complicated. Do not want.
 
3:47 PM
@ChrisS yeah that's about the only reason I don't have one right now
 
ebay has some that look promising, and much cheaper
 
@Cole Oh, he's not yet accustomed to the schedule that the glamorous IT field affords? Mine was completely unsurprised.
 
yeah but none that have multiple tubes that I can see
 
Though the price makes me wonder about the quality
@voretaq7 You want all the colors?
 
@HopelessN00b my dad is blue collar, has worked at the Waste Water plant for 29 years
Neither of my parents really get it
 
3:49 PM
I want that one ^^
 
Ah; yeah...
 
Gay.
 
@Cole Oh... so, yeah. The joys of unpaid overtime during the holidays. One of the many perks of a career in IT.
 
(I'd like one with pink in it too if I could get it, but if I'm going to get a glowing radioactive keychain it's damn well going to be full-spectrum!)
 
Not sure if it's the photos or if those are brighter than the keychains on eBay too
 
3:49 PM
@Cole scientific
 
@voretaq7 Both?
 
@ChrisS his are taken in darkness on a black background
 
@voretaq7 Scientifically gay?
 
@HopelessN00b that's usually the way it works.
@Cole They're working on proving it's genetic.
 
@voretaq7 I like that theory, it nicely explains why I've never been able to bed a scientist chick. They're all gay.
 
3:51 PM
@HopelessN00b the perks of me...I appeal to all sorts of people :P
 
@voretaq7 Right... Just wish they'd use some kind of absolute measurement so I know if his are actually brighter than the $20 model on eBay...
 
@Cole Sounds like a mixed blessing... I hate it when unappealing people find me appealing. <shudder> Fortunately, it doesn't happen much.
 
@ChrisS meh, in 20 years it won't matter - the tritium will be all decayed away and the keychain will be sad and dark
 
@HopelessN00b yeah that does happen. But then I'm like, well my girlfriend is really hot so I can't complain
 
@voretaq7 I'll be lucky if I don't lose it before then.
The eBay models are 550 mLb (green, new)
 
3:58 PM
@MichaelHampton wont let me up your score now.. I checked in sesearch, those two booleans in combination will work.
I was thinking of the http_user_content_t direction.
 
@MIfe And the reason for the downvote was...
 
I was thinking of the httpd_user_content_t. Where ~/html will produce a user_home_t type not a httpd_user_content_t type.
 
Yeah. Make sure the answer actually is wrong before downvoting it. :)
 
But since those two bools together give httpd read to user_home_t anyway that would work.
Its let me upvote you now anyway so i've upvoted it :) Stop yoru whining you!
Personally I think its probably more apt to use httpd_user_content_t in that particular case and use semanage to add a fcontext path. But
meh.
 
What they really need to do is to stop putting web content in user home directories. But that's so common that I don't think it will ever end.
 
4:04 PM
Apache explicitly gives this 'feature'. So I suspect its unlikely.
 
mornin' gents. 5 days left.
 
Yeah, and it dates back to the 1990's when UNIX systems were not something everybody had on their desk.
 
Nevertheless, its way way better to permit this as a httpd_user_content_t type because it ensures httpd cannot escape the docroot with an attack script.
Rather than allow reading of files in home.
 
@Adrian Got something else lined up yet?
That sounded a little terse after I said it, but it seemed like you weren't having any trouble.
 
@Tanner Not yet, not as much activity as 2 weeks ago either. The recruiter doesn't have much for me either, and I need to step up the pace. If it gets too long, I'll just go apply to Amazon, but I'd like to avoid that.
 
4:22 PM
@ChrisS IIRC green tends to be the brightest phosphor
 
4:57 PM
Green is always the brightest... phosphor, LEDs, etc
 
I'm definitely seeing an increase in the number of positions that instruct candidates to not bother applying unless you have a BS in an IT field.
Not even Mathematics degrees. Pretty clever way to screen out anyone over the age of 40.
 
@Adrian hm... maybe I should actually get a BS...
 
@Tanner yeah. I've been thinking about going back to school for a business degree, actually. I have 10+ years of IT experience, so there's little sense in going back to school for another 5 years to re-iterate when I've already gained on the job.
 
We are coming up on one year living here, and I do not wish to stay. Here are the reasons why: Walls are PAPER THIN- I can hear the lady next to me on the phone, just talking, walking, doors closing, people having sex almost every night, and more. The floors are the wood of the people under you ceiling, padding, then carpet. All of the dirt, bugs and more goes thru the carpet and padding thats been broken down over the last 15 years and then falls between the cracks of your ceiling.
Ok, I wont be staying there.
 
@mossy Ick. Where the hell is this?
 
5:06 PM
How DO you guys do your VM backups?
1
Q: What are the tradeoffs between using hypervisor- vs. storage-array-based snapshots as backup sources?

alx9rSuppose you have some virtual machines (running in eg. ESXi) that are stored on an iSCSI storage array (eg. EqualLogic PS4110). Now suppose you want to set up a backup and restore regime that looks something like this: VMs are quiesced snapshots are taken snapshots are copied to tape snapshots...

 
You do know that people tend to have sex every night or so, especially when they have the opportunity, right? Moving won't change that unless you move to a monastery or a convent.
 
@HopelessN00b Get married and report back...
 
@ewwhite I ignore the word 'virtual', and backup as normal.
 
@Adrian This place that LOOKED nice from the outside.
 
@ewwhite Yeah, I plan on staying single. For that and other reasons.
 
5:07 PM
@ewwhite Hee. Ain't THAT the truth.
 
@Zoredache Except easy access to tape is a problem in virtual environments. I find that my backups kinda suck now.
 
@ewwhite Avamar, purely file-level.
@ewwhite Tape sucks anyway. D2D.
 
D2D-2-What?
 
@mossy Ah. Yes. Been there and got the F out 6 months later.
 
Disk-2-Disk.
 
5:08 PM
There needs to be something after your D2D...
 
@HopelessN00b Which is fine if you have no need to do restorations 7 years later.
 
D2D2T
 
Like D2D2T or D2D2Raven (Game of Thrones)
 
at my previous job, it was 10 years. 2 entire generations of drive connector later.
 
Who all watched Game of Thrones last night?
 
5:09 PM
@ChrisS That show is scenery-pr0n for me.
 
no TV at my house. We watch cat videos sometimes though.
Cat videos are more fulfilling than watching TV.
 
@ChrisS I wait until the season is released. That way I can watch the entire season at once in a weekend.
 
@Adrian Not true - we actually do have multi-year retention period son our Avamar. I'm sure we'll send that crap off to tape when we run low on space, but de-duplication means we can store a surprisingly large amount of data for a surprisingly long time, even on disk.
 
@Zoredache I don't have patience like that. =]
@Adrian I have a HRDR + Laptop, don't watch it on the TV.
 
@ChrisS You could always re-read the books.
 
5:10 PM
@HopelessN00b Yeah, I wish I had that kind of budget for that kind of storage.
 
@HopelessN00b Tape rocks. l2storage.
 
5:35 PM
Just screwed up sequencing a virtual application twice in a row... stupidly clicking buttons without thinking
must be caffeine time
 
Not enough expletives and vulgarities in all the languages in all the world for this freaking day... but anyone who turns their IT department into the goddamn corporate internet nannies needs to be beaten to death with the crappy webfilter they decide to use for that purpose. >:/
 
ha ha
I have found the porno-filter to be useful a couple times... Might have ended up with something on my screen that I'd prefer wasn't there.
 
Nothing wrong with using a webfilter to keep yourself from being sued or infected, but... GAHH!!! We use it to control who may or may not access like social media, or IT-related sites, or anything at all, and the damn thing keeps crapping itself. Resulting in a flood of "my internetz are broken, gimmie back my internetz" tickets every couple of weeks. It's doing a great job keeping productivity up. >:/
 
That's just like Barracuda!!!
 
My favorite YouTube video:
 
5:51 PM
@ewwhite Except, at least in my experience, the Barracudas don't crap themselves on a semi-regular basis. Having that irritation on top of the whole "go be internet nanny" thing is just too much.
 
Note to self: When a user says they always do the thing they're supposed to, it means they never do.
But I suppose it was fun making everyone dig through the firewall settings chasing imaginary problems...
 
No, no. There's a better way to end that sentence.

When a user says they always do the thing they're supposed to, set them on fire.
 
286
A: What technical reasons are there to have low maximum password lengths?

Tom LeekTake five chimpanzees. Put them in a big cage. Suspend some bananas from the roof of the cage. Provide the chimpanzees with a stepladder. BUT also add a proximity detector to the bananas, so that when a chimp goes near the banana, water hoses are triggered and the whole cage is thoroughly soaked....

 
The bear is good. The bear is right. Trust in the bear.
 
6:10 PM
@ChrisS Just what I needed:
.@equitablelife OK, I'll just take this as evidence that your developers are a bunch of chimpanzees. http://security.stackexchange.com/a/33471/5808
 
@HopelessN00b that's silly, that does the inverse
 
6:31 PM
Hey guys, I just found out this had been posted (it's closing tonight)
 
6:47 PM
Argh I need a rosetta stone for DBMSes
@HopelessN00b mmmm he's right
@HopelessN00b [!] --uid-owner username
 
Evan carroll edit, I just can't approve it.
@MikeyB OOPs, you're right on that one... I feel so stupid -_-
 
WHARRGARBL
 
@Cole Cole ERMAHGERD
 

« first day (933 days earlier)      last day (4048 days later) »