The DMZ

general 33.4k stars 26 conversations schedule feeds 5 access

The DMZ

A serious place where infosec is discussed PS we don't do hardware/software support (srs face -.-) https://security.stackexchange.com/

4d ago – Journeyman Geek

1031k

1030

info

export all events for this room

Starred posts

packs

Feb 22, 2011 17:17

wtf Nature, seriously.

packs

Feb 22, 2011 14:40

@Iszi You're like my wife ;) She waits until she gets to work to eat breakfast as well.

Rory Alsop

Feb 21, 2011 14:23

Unless you can tell your roo o iper from your gite gapas, you'd mebbe have trouble :-)

Graham Lee

Feb 21, 2011 13:55

I think non-dairy creamer was only invented because some Americans complained they couldn't shovel corn syrup into their faces quickly enough if they had to drink things that didn't contain it.

Graham Lee

Feb 21, 2011 12:45

or do you mean that he's Scottish, and therefore the time is always defined as "beer o'clock" ducks

AviD

Feb 19, 2011 23:28

only one thing you need to know: Fortify Sucks.

Rory Alsop

Feb 19, 2011 23:07

@AviD - under most Unixes, you can change the privileges of a process after you have initiated it, but if your privileges are revoked, the process won't be likely to know about it until next time you try to run it, or if it is told to check. Normally in the circumstances you are talking about, you would revoke privs then kill the process as a matter of course.

AviD

Feb 19, 2011 22:41

do linux processes change their uid/gid mid-process? And if not, that could mean that after you start a process, your privileges change, and yet your process could still have access you're not permitted to anymore?

AviD

Feb 19, 2011 21:51

1. How do we fix the general class of TOCTOU vulns?
2. how can we mitigate (i.e. workaround) for OS-level vulns?
3. I want to change the way Windows permissions and ticketing works, so I'm going to call it a bug...
4. I have a specific situation - temporary administrators - that does not work the way I expect, or want, because of the way Windows works. How can I work around this?

Rory Alsop

Feb 19, 2011 01:07

I kind of feel we have to stay within the rules otherwise chaos :-)

nealmcb

Feb 5, 2011 22:38

Nice quote from Ben Adida: "Security is about stopping the bad guys from stealing your data. Privacy is about controlling the good guys’ handling of your data. (Ron Rivest is said to have phrased this most eloquently, but I can’t find his quotation.)"

Rory Alsop

Feb 3, 2011 16:51

although - in saying that, 2600:0:7e1e:3975:dead:beef:1 would be cool

nealmcb

Feb 3, 2011 16:42

I love it - this is for real :) 2620:0:1cfe:face:b00c::3

Rory Alsop

Feb 2, 2011 15:49

►

packs

Feb 1, 2011 13:47

isc.sans.edu/diary.html?storyid=10339

packs

Jan 31, 2011 20:57

@nealmcb Here is the meta discussion

packs

Jan 30, 2011 02:15

@nealmcb You can't HANDLE the wildebeest!

nealmcb

Jan 29, 2011 01:30

. o O rfc1149 Avian Carriers?

packs

Jan 28, 2011 22:39

Also, and I'm looking at you @RoryAlsop. WTF is a FAW?

Rory Alsop

Jan 24, 2011 15:00

afternoon all

Rory Alsop

Jan 21, 2011 02:55

you might get away with enteleca-2.dsl.easynet.co.uk:80

Graham Lee

Jan 12, 2011 12:42

shit, I said cloud. BRB, got to drink a shot.

AviD

Dec 18, 2010 17:57

btw, for anyone wondering later - and not bothering to read the faq - chats are persistent, so you can leave a message for someone else, even if they're not in the room at the same time as you...