« first day (2063 days earlier)      last day (3250 days later) » 

Bob
Bob
00:04
@Valamas-AUS Not really
I'm kinda grasping at straws here :P
The goal is to rule out differences where possible.
Two things to try (separately!): capture via port mirror of the spoofed laptop if possible, and capture of an arping -b 192.168.0.27 to the real camera.
Could also try an arping to the spoofed laptop as an extra.
This is what I expect to see, more or less:
root@phoebe:~# busybox arping -b x.x.x.27
ARPING to x.x.x.27 from x.x.x.14 via eth0
Unicast reply from x.x.x.27 [2:0:0:a8:54:8e] 0.288ms
Unicast reply from x.x.x.27 [0:ff:ff:ff:ff:ff] 2.235ms
Unicast reply from x.x.x.27 [2:0:0:a8:54:8e] 0.355ms
Unicast reply from x.x.x.27 [0:ff:ff:ff:ff:ff] 1.856ms
(IPs altered to protect the innocent. Also because they're public IPs on a server :P)
But it would be good to have a wireshark capture of that in progress to the camera, even if it fails.
...the arping does work when you bypass the switch, right?
am reminded of a strange thing i tested last night. Connecting my PC to the switch, any port with any cable turns off the switch. It only lights up again when I disconnect the cable. laptop is fine.
welp it crash
Bob
Bob
...dud switch?
00:20
i said his switch seemed suspect after he said that it worked perfectly when connected to the router
I have emailed TP-link to get that ball rolling.
@bob and everyone else. thank you so much for your help and time so far. I hope your brains do not hurt as much as mine does right now.
Morning ladies, gentlemen and Beckys of all ages.
Bob
Bob
00:35
@Burgi Doesn't explain why it's only this particular combo that fails, though
@JourneymanGeek ello
@Bob maybe the other devices are fast ethernet?
@Bob actually, it turns out that the Nvidia 364 drivers had a fatal, steady memory leak bug affecting Maxwell GPUs that was mainly triggered by playing modern-ish 3d games. I had to roll back to 362 to get back to a stable setup.
Bob
Bob
@allquixotic Someone suggested going back to the newest drivers before the next gen after my card was released. I might try that at some point.
Bob
Bob
yea saw that :P
air con delivery is late
Hopefully they turn up before the installers ;p
@JourneymanGeek the installers are separate? weird. here, usually the installers come riding on the same vehicle (or at least trailing behind / in front of the delivery vehicle) with the package
Bob
Bob
01:48
@allquixotic maybe purchased separately?
...I need VoLTE
...I'm just going around confusing all the MS support people. At least this one is trying.
yesterday, by Burgi
i'm hearing a lot of rumblings about your government being on the verge of collapse, @ThatBrazilianGuy. is it true?
Well, if you have 18 minutes to spare, in this video Glenn Greenwald (the same journalist from the NSA / Snowden case) sums it up quite well:
(the video is in English)
@allquixotic apparently not
ang erf. My dad wants to paint the house himself
he's like 70
which also means I need to wait for him to finish before putting everything back
02:12
Is it typical for printer to treat a carriage jam as a fatal error?
It's typically not a fatal error for HP printers.
However, Epson printers consider a carriage jam a fatal error (0xEA or 0xE8).
Canon, too (error 5100).
@JourneymanGeek Hey hello
Why is a carriage jam considered a fatal error on these printers?
@bwDraco Well, for starters, you have jam on your printer, who put it there?
;p
Physical moving component can't move.
Things might break
sounds like a reason to panic to me
02:16
The only manufacturer-approved stuff to go into printers is unicorn blood petrol printer ink
Bob
Bob
I am so fucking annoyed now.
This Wally character can fuck right off.
MS support site lists phone number and email address for VS support. Support claims to do MSDN support only.
.
(Just to be clear, I was only kidding and I'm not and haven't been responsible for the recent wave of flagging attacks)
Where's Wally?
@ThatBrazilianGuy this is why I use terms like "post consumer food"
0
Q: For some reason, my smartphone is under google's proxy

anon187I don't know what is happening with my smartphone. I'm not able to post in some sites because I was being detect as from another country. Then, I tested "what is my public IP" in many of those sites that provides this service. In some of them, they showed my actual public Ip but in some others it...

Technically off-topic, but might be useful to keep anyway. Data Saver uses a Google proxy which is probably responsible for this oddity.
@JourneymanGeek As in, the post-consumed food has collapsed with the rotary cooling device?
02:24
"you're up a small slowing stream of post consumer food without a manual propulsion device"
@allquixotic Yeah, apparently so
they're both late.
I wouldn't be surprised if this question hits HNQ, even though it's technically off-topic.
also in addition to a sprained ankle I seem to have painful muscles everywhere
I'd think twice before voting to close. Data Saver is available on desktop Chrome and the same issue applies there. (Note: smartphone reference was edited out to bring the question on topic.) — bwDraco 1 min ago
yuuup.
Data Saver. I just knew it.
Answer accepted in less than 15 minutes.
03:20
You need an extension to run data saver.
Pretty handy if you're on a slow connection
 
2 hours later…
05:08
hm
On wifi since I had to temporary disable my homeplug network
It isn't as annoying as I remember
Bob
Bob
@JourneymanGeek Maybe the bookcase?
lol
also, lots of noise and chips of plaster falling off the walls
Possible
or the large holes in the wall
Bob
Bob
lol
tho
some pages are loading
some arn't
which makes zero sense
also large flying chunks of plaster
Bob
Bob
o.O
@JourneymanGeek Wear a helmet?
Wait. Flying chunks of plaster?
That doesn't sound right.
Why are there flying chunks of plaster?!
05:23
Falling maybe?
Falling with style = Flying.
Bob
Bob
More to the point: what part of aircon installation involves wall demolition?
Window types
Split units need a lot of piping
Where are you?
so 4 inch ducting to 4 rooms
Home?
05:27
...
SG?
Yup
That does answer exact and rough location tho ;p
You have homes everywhere.
how do you set up a permanent ftp folder in windows 7 to your remote server?
You are walking distance from Sentosa, right? Or is that a different person?
05:31
me?
someone else
Not you.
for certain definitions of walking distance
But yes, I can see sentosa from my house
(and bits of indonesia on a clear day)
just duct tape all the plaster back, it will be stronger
Bob
Bob
!!tell 28611967 google map ftp drive windows
Bob
Bob
05:43
!!tell 28611967 google save ftp folder windows explorer
that will put holes in plaster too
9
Q: Network printer exploited (read: hacked) to print antisemitic documents. How to fix?

Reece DoddsI'm unsure if this should be asked here or over on security.stackexchange.com... Over the Easter long weekend, a small office of ours had a network breach in that an old HP printer was used to print some very offensive antisemitic documents. It appears to have happened to a number of universiti...

This is why my printer has a firewall.
Bob
Bob
Or, y'know, why your network (should) has a firewall.
05:50
a university with most devices on the internet probably needs a new network guy..
I don't have a UTM device. UPnP is disabled on my router and only whitelisted IPs can print to this printer.
Tweet from the attacker himself:
Never done before: mass printer trolling. Y'all think this PostScript is offensive enough? http://dpaste.com/16XA6GH.txt https://t.co/HqDwvx9bhZ
all you really need is a basic firewall
@rabite, Twixt Vukojebina & Мухосра́нск
Free speech activist. Yes that weev, notorious hacktivist fighting #WhiteGenocide. 'A menace on the Internet'--US Attorney Zach Intrater.
43.3k tweets, 30.5k followers, following 920 users
^^^ Known criminal.
> 43.3k tweets, 30.5k followers, following 920 users
Wow.
> To secure the printer/print server itself, use its built in allow list/access control list to specify the range(s) of IP addresses allowed to print to the printer, and deny all other IP addresses.
From the top answer.
This is precisely what the printer is set up for.
Bob
Bob
Meh.
Secure the network at the edge. Done.
Once again, I don't have any kind of UTM. This is a home network.
Bob
Bob
06:01
Not sure I'd trust the network stack on a printer anyway.
NAT is providing a measure of security nonetheless.
Literally just use almost any router. Or a pfsense box or something.
Bob
Bob
^
You don't need some enterprise-grade UTM.
Just about every consumer router sold in the last decade includes a rudimentary firewall.
someone would need to get into your network to use your printer anyways, why would a home network have a printer exposed to the internet?
@cutrightjm Most newer HP models are by default.
Bob
Bob
06:03
Then they're broken by design.
So most newer HP printers pull a public IP address or do NAT forwarding themselves?
Bob
Bob
@cutrightjm Even ignoring NAT.
If it has an external IP (i.e. not behind NAT), then port 9100 is likely open.
Bob
Bob
A sane default config would only allow local subnet access anyway.
Yes, but a printer just doesn't grab some external IP address like people hand them out for free
Bob
Bob
06:04
@cutrightjm It could given DHCP (or DHCPv6 these days).
true, but I'm assuming IPv4 and how 99% of ISPs only allocate 1 IPv4 address to a residential customer
Bob
Bob
Buuuut that's why the router should be outgoing-only by default.
Even without NAT. Even if you have an IPv6 /64 (not so rare now).
Outgoing-only firewall on the router. Done.
isn't /64 default?
Bob
Bob
Allow incoming only as necessary.
@cutrightjm Depends on the ISP... anything smaller than a /64 messes up things like SLAAC, but it's still possible to be given one
haven't messed with IPv6 much yet
Bob
Bob
06:07
But, yea.
I'd expect the printer to have a sane out-of-the-box config.
Problem is that the firewall is disabled by default and enabling it breaks HP ePrint.
Bob
Bob
But I'd also not mess around with it overly much. Better to just secure the network.
> It turned out to be upwards of a million devices
Wow.
This is partly meant to highlight the dangers of IoT.
A brief experiment in printing: a lesson in how positively hilarious the IoT will be in the future. https://storify.com/weev/a-small-experiment-in
If only UTMs were more widely available for home use...
literally go buy a 20 dollar computer and put pfsense on it
or any basic router with a built in firewall
or even virtualize your router there's a neat one
Bitdefender BOX is the best I could find. Fully-automated device, limited configurability.
06:13
You don't need the "best I could find" or a fully-automated device though.
Oct 13 '15 at 23:21, by DragonLord
The initial plans were to set up a pfSense machine from a custom build, but given how many times the FortiGate appliance we have on the college network has saved my butt from malicious websites, I'm very tempted to get my own FortiGate (probably FortiWiFi-60D).
Why not just install AV or not visit malicious websites?
Local machine has Norton Security, we're longtime subscribers.
i didn't know norton was still in business...
Symantec.
06:16
i didn't know symantec was still in business...
Bob
Bob
@bwDraco UTMs are largely useless in a home environment.
They're simply unnecessary.
Bob
Bob
...
UTM appliance and matching subscription.
Bob
Bob
A basic firewall is vey very easy.
It's literally two iptables commands.
It runs on just about anything with an ethernet port
06:20
raspberry pi firewall, woo
Bob
Bob
reject/drop anything coming in, allow anything going out. done and done.
..and allow established =p
Bob
Bob
@cutrightjm point.
might be better to say reject SYN, though that does leave UDP
*shrug* consumer routers largely handle that through the GUI anyway
Now, an argument might be made that consumer routers themselves are insecure (some of them)
Might be a good idea for me to study hacking and security more.
Take an offensive mindset, learn to secure potential attacks vectors most people would miss.
I always did understand port 9100 as an attack vector, and I know it's exploitable.
I think you're just over thinking all of this, just get a basic knowledge of networking and why a printer shouldn't have a public IP in your house.
06:26
Sep 24 '15 at 21:23, by DragonLord
I've always wanted to be able to print remotely, but Epson Connect and Google Cloud Print do not meet my requirements and port forwarding to port 9100 raises security concerns (anyone with the network's external IP address can print arbitrary documents).
VPN?
allow only certain IPs to access that port?
@cutrightjm ...and the printer is firewalled to allow only whitelisted IPs to print to it.
ah, might I suggest a Cisco ASA as your home UTM appliance, Sophos has some good ones as well
Bob
Bob
Really, a VPN is the way to go.
Chuck an RPi on the network, set up a VPN server.
even a lot of cheap routers have VPN services
Bob
Bob
06:30
@cutrightjm Those, I wouldn't really trust.
That's one of the things better kept updated :P
true for most of the cheaper ones I guess
I think his mind is just set though he needs a commercial grade piece of hardware to guard a printer
Bundled with subscription. Reviews are mixed: One review describes a negative support experience, another reports easy configurability for use in a home network.
It's overkill for a home network, though.
Use the gateway device as the first line of defense against malicious traffic, add security at the endpoints (e.g. AV/AM software) to protect against more complex threats. That should do it for most home networks.
that's overkill for most home networks
06:35
lol
yup
amusingly, nat would stop the sort of 'attack' that happened
By gateway device, I mean the router (with firewall, NAT).
yawn, morning all
oh people freaking about weev's 'attack' ?
ugh. Weev
I get his point, but he's such an ass
and the whole 'i printed lots of stuff' thing is just stupid./
he's like that kid at school who realised he could print porn because there was no log of who'd printed.
the fact that the whole thing wasn't even mentioned b efore he brought it up himself in an interview shows how small scale it was
Any good tech is aware there is lots of printers out there 'on the net'
and we could print to them if we so desire.
@djsmiley2k yeah, that's why I went ugh
06:48
\o/
This place reminds me i'm not completely insane
Arbitrary access to networked printers is a well-known but oft-neglected issue.
In this case, firmware updates aren't digitally signed, allowing anyone to send arbitrary code to the printer.
07:22
but by just p[rinting stuff, he's made people ignore that fact
@djsmiley2k many of weevs hacks are semi trivial. Dude has no perception of 'reasonable disclosure' tho
yup
well yeah, there is that too
morning
08:03
@kerbalspacebecky Wish I could do this sort of photography.
(Don't get me wrong, I'm a sports photographer by trade, but I'm still limited by available funds.)
6
Q: Tiny copper waffle squares inside computer

eyqsI've been hearing a sound from inside my MSI GE60 laptop for a while now, so I opened it up to find that these two tiny copper waffle squares came loose. They were originally stuck to the board with some black adhesive, so I stuck them on again, but a few days later, they came loose again. Aft...

ROTFL. Made it to HNQ.
Bob
Bob
@kerbalspacebecky :D
i just noticed my "morning" got starred....
82
A: The Many Memes of Meta

GEOCHETMeme: Waffles. Originator: Eric Cultural Height: Late August and Early September, 2009 Background: Eric just really likes waffles, and apparently so does everyone else who has even a shred of decent humanity. Those who do not like waffles may also be Vampires and hat...

STAR ME!
Bob
Bob
!!no
08:09
:p
...do we need a CM here? This seems a bit suspicious to me...
Is someone starring chat messages arbitrarily again?
I just noticed my fox got starred....
Mar 1 at 17:16, by bwDraco
Um, what's going on? We're seeing spurious stars here...
My God, it's full of stars!
Bob
Bob
08:33
@bwDraco There was nothing arbitrary about that.
@kerbalspacebecky Is that so odd? :(
Hm. I did two of the five current stars here :P
But none of them are that odd anyway.
@kerbalspacebecky That didn't make much sense. Maybe you meant: foo
!!info foo
@kerbalspacebecky Command foo, created by qasdfdsaq on Wed, 02 Mar 2016 22:53:36 GMT
08:51
What a weirdo, that qasdfdsaq dude
6
Bob
Bob
LOL
@kerbalspacebecky Huh. Nice.
why did you change your name @kerbalspacebecky?
Little known fact. Wiley Coyote ended up fabulously wealthy from testing things from acme ;p
09:15
meep is my version of foo
@JourneymanGeek That didn't make much sense. Maybe you meant: wat
Bob
Bob
@JourneymanGeek ? o.O
!!learn what <>https://i.sstatic.net/Re4Mq.gif
09:16
@JourneymanGeek Command what learned
Excellent
foo is the random variable coders use when they are testing
because my mother told me that i am special i use "meep" instead
09:31
also, SMG..... sigh
also, foo is woof backwards and truncated
5
Coincidence? I THINK NOT
09:48
> A bad USB-C cable can completely destroy your laptop if you're not careful about its use
Pfft, don't blame the cable if the laptop is stupidly designed. A bad cable shouldn't ever be able to destroy anything.
disagree
disagree with your disagree
that google engineer nuked his laptop with a dangerously made cable
i'll dig out the article
The same cable also nuked a bunch of his other gear as well
That's like blaming the outlet if a PC power supply blows up it you connect it to a 13A socket.
09:51
me buys popcorn ;)
Again, all that proves is the Chromebook is badly designed.
(And the cable, but the cable isn't the one that's supposed to have protection circuitry in it)
If you connect the non-spec compliant Lenovo 19v USB charger to a non charging USB port, it doesn't blow anything up. Shock horror.
@kerbalspacebecky @Bob is ever so slightly snobby about cables ;p
If you connect a non-spec complaint A-to-A cable from a 5v phone charger to the laptop's 19v USB input, it doesn't blow up either.
In fact, neither the charger or the cable blow up, nomatter what way round you connect anything.
09:56
also, my onboard wireless on my desktop is annoying the heck out of me
Accidentally wire the power and ground pins the wrong way round on a non-spec complaint passive PoE injector, nothing blows up.
Accidentally wire 40v AC into the data pins of an Ethernet cable, your switch still won't blow up. Well, mine didn't anyway
Hell, if your USB port fries the controller if it gets normal 5v USB input on the wrong pin, how the hell is it supposed to handle >1000v electrostatic discharge?
". Basically, as soon as the cable was plugged in and turned on, it completely fried the Vbus line on the Twinkie USB PD analyser. "This is permanent damage. I tried resetting the Twinkie analyzer and having the firmware reflashed, but it continues to exhibit this failure," Leung wrote."
It killed many things
and
"I directly analyzed the Surjtech cable using a Type-C breakout board and a multimeter, and it appears that they completely miswired the cable. The GND pin on the Type-A plug is tied to the Vbus pins on the Type-C plug. The Vbus pin on the Type-A plug is tied to GND on the Type-C plug."
annnd
2) 10 kΩ resistor instead of 56 kΩ resistor used.
3) resistor hooked up as a Pull-down instead of a pull-up
4) Wire is COMPLETELY missing SuperSpeed wires. It is NOT actually a USB 3.1 cable, even though it has a blue connector on the A side and SuperSpeed logos.
Many things don't have adequate protection, meh. Just took a dodgy cable to reveal poor designs in everything else it was connected to, but it's still not the cable that caused that lack of protection.
man
air con guys have been working since 10. 2 rooms are done, 2 to go and the compressor isn't in yet
My USB PD analyzer didn't blow up when it got 15v through the wrong pins.
10:06
@JourneymanGeek make sure they use the wrong cabling!
USB type C powered air conditioner?
Bob
Bob
@kerbalspacebecky Eh, 1kV static discharge doesn't have a whole lot of energy in it though :P
If I'm snobby at all about cables (I am? that was news to me...) that'd be more along the lines of wanting good cables so my phone actually charges
140mA isn't a charging current
it's a "discharge slightly slower" current
I have seen some USB ports on an Asrock mobo get fried by a USB HDD though
That was fun
But, yea, inadequate protection
10:35
@kerbalspacebecky a bad cable around your neck...
ARUGH
I want to prompt users to shutdown, with something like the windows update shutdown, they can pros-pone it, but not forever...
I want to prompt users to shutdown, with something like the windows update shutdown, they can pros-pone it, but not forever...
Interesting on the same Idea, people crossing up the "firewire" with the "USB" on motherboards when connecting the front connectors , toasted stuff too. If all this stuff had protection against all the things that could go wrong, I would still have the problem of finding that tiny ass fuse that they put in to do so :-)
urgh
timeouts. - timeout - retry / edit / cancel
urgh
@djsmiley2k bulk email to all users. "Please shutdown tonight so critical updates can be applied. People failing to do so will feel the wrath tomorrow"
@Burgi you may know as well as I do, nothing works unless forced.
but sadly forcing a reboot on users, causing them to loose 'work' is frowned upon
@djsmiley2k oh. Its not just me?
@djsmiley2k power outage! ;p
10:41
@JourneymanGeek lots of laptops
"failing to do so will result in disciplinary action as it contravenes the IT policy"
the desktop users quite good about rebooting.
@Burgi not my call D:
they don't know that
they do when they are directors and stuff
"And by disciplinary action, we will find a way to keelhaul you under the science building"
10:42
^- that
lol nope nope nope :P
what about maybe manually going round after hours and doing the reboot for them?
charge it as overtime
Bob
Bob
@djsmiley2k Heh, I could've sworn I wrote something like that.
Ah, nah.
@Burgi but i'm a sysadmin, we are inheritently lazy
hense me wanting to make the machine tell them they must reboot in X hours or else.
They don't listen to us, but if the machine tells them something, it's law!
but overtime = moar monies
10:48
yah
but moving house :P
@djsmiley2k here if the machine tries to tell me something, i delete it Quick :-)
@Bob They should have resettable efuses
(Although some have non-resettable non-e-fuses, which at least protect the other ports and the controller)
whoot 3 airconditioner things installed
@djsmiley2k get your minions to do it
1 + compressor to go
10:52
@JourneymanGeek and that is when they will realise that the rest of it doesnt match. Plaster flying again.
@Bob Idle power on the S7 with screen on can be as low as 80mA
@Burgi Because I got tired of people automatically assuming I'm a he
@kerbalspacebecky wait... what?
tbh, i thought you were a guy...
Also, kiiiiinda thought so cause you were generally creeping over females. ;p
that was my reasoning too
well now we know
also you refer to yourself with male pronouns
@Burgi I dont know nothing.

« first day (2063 days earlier)      last day (3250 days later) »