The Comms Room

WesleyDavid

03:00

@SpacemanSpiff Ohhh... a chivette

voretaq7

@SpacemanSpiff Tell her she's gonna have skin like my lizard if she doesn't quit basking in the sun like that.

Journeyman Geek

lol

Michael Hampton

@mmmshuddup You know Rails is the new hotness, right?

mmmshuddup

:)

@MichaelHampton No dude. NodeJs :P

SpacemanSpiff

Michael Hampton

03:05

@mmmshuddup Why not, I've got nodejs in my rails :)

mmmshuddup

I don't get all the hype about NodeJs. sounds like way more trouble than it's worth

:P

SpacemanSpiff

Boy no matter how hard I try I just can't keep the conversation about tits... ya'll are hopeless

Michael Hampton

I don't need pictures of tits when I'll have the real thing in about... six minutes.

voretaq7

@MichaelHampton I have servers in my rails...

SpacemanSpiff

Michael Hampton

03:07

I sense a "yo dawg I herd" joke coming up...

Ryan Ries

I herd you like rails on yo servers so I put rails in yo servers so you could rails while yo servers were on rails

mmmshuddup

haha

Michael Hampton

Something like that, yes.

mmmshuddup

ok so did anyone even check out that link about code tracing?

voretaq7

EEEEEEEEE

Ryan Ries

03:09

I aim to please.

voretaq7

postandcourier.com/article/20121105/PC05/121109613/1010/…

Google Gators!

Why do they have to "remove" it? Poor gator. Moves into a nice neighborhood and then gets evicted by the meddlesome government.

HopelessN00b

-2

Q: Isolate a part of a lan network

I have a part of my LAN network which I would like to function without being able to even see the devices on the rest of the network, but there should still be the possibility to browse the web. Here's a situation: On a school there is a highly paid evil man who administrates the network and thi...

voretaq7

@HopelessN00b didn't I reject that earlier?

Michael Hampton

@HopelessN00b Yes, we killed that.

jscott

Props to Carlos Lande, he tried.

Michael Hampton

03:14

Ooooo. @voretaq7 Follow it back to SO and read the comments.

HopelessN00b

@Zoredache Well it was an exceptionally ~~hilarious~~ ... ~~heinous~~ ... ~~hill-anus~~ hil-einous example of SO migration fun...

jokerdino

@HopelessN00b thanks

HopelessN00b

Anytime. The more people we loop in on SO not migrating crap, the better.

mmmshuddup

@ChrisS I accepted your answer. thanks once again everyone. I'll let you guys know tomorrow or whenever I get my disk back how it all works out

voretaq7

@MichaelHampton is it going to make me ANGRY?

Mark Henderson

03:17

@HopelessN00b The best part of that one was that the guys on SO were actually going to help him

voretaq7

should I go pet the fish first?

Michael Hampton

@voretaq7 I doubt it.

mmmshuddup

haha wow

you guys should give us programmers more credit. we can't be expected to have the same competence on these issues as you guys

Michael Hampton

Why the hell would you guys think that this was appropriate for Server Fault? Server Fault is for professional systems administrators! This guy is asking for help to circumvent his systems administrators. Seriously guys, get a clue. — MDMarra 9 hours ago

jscott

@HopelessN00b Devs, Ops, never the twain shall meet.

voretaq7

03:17

@MichaelHampton yeah he beat me to posting something annoyed

Michael Hampton

Up to 43% rejected

voretaq7

(and was a bit meaner than I was going to be, but at this point I'm not protecting the SO users from wrath anymore. I'm going to get the SQUIRRELY wrath out.)

mmmshuddup

@voretaq7 lol :O uh oh

Chris S

To All Programmers:

Mark Henderson

@voretaq7 I was just about to write "Geezus take a chill pill and be glad you're not a mod" and then I remembered that you are a mod, and now I understand the rage :p

mmmshuddup

03:19

I'll just keep coming here then and pretend I know what I'm doing :)

Chris S

mmmshuddup

I don't mind feeling like the idiot I am learning a lot here :)

haha

voretaq7

I'm going to replace the mods here with a very small shell script.
It's going to scan new questions, and if they're SO migrations - reject them

Chris S

Ok; maybe that's a little over the top... But at least partially deserved.

voretaq7

@MarkHenderson oh this is just the standard level of rage

mmmshuddup

03:20

:D

dang I didn't realize we were so hated over here

voretaq7

I'm not fazed by bad migrations from SO anymore, I just expect them, reject them, and leave snarky comments

mmmshuddup

haha

voretaq7

@mmmshuddup hang on, let me rub your nose in that "highly paid evil man who administrates the network" a little....

and then let me show that user "evil"

mmmshuddup

it's ok I can handle it

voretaq7

►

Michael Hampton

03:22

I swear, it must be something about Visual Stupido.

mmmshuddup

@voretaq7 wow.. did someone really ask this:

serverfault.com/questions/364677/why-is-chmod-r-777-destructive/364684

voretaq7

@mmmshuddup yup.

mmmshuddup

@voretaq7 crap even I could have answered that

voretaq7

I think I repcapped 2 days in a row on that one

mmmshuddup

LOL

ok so what's worse is that the qeustion has 100+ upvotes

that means more than 100 other people wondered the same thing hahaha

voretaq7

03:26

@mmmshuddup oh... oh you think that's bad?

hang on

1178

Q: Our security auditor is an idiot. How do I give him the information he wants?

A security auditor for our servers has demanded the following within two weeks: A list of current usernames and plain-text passwords for all user accounts on all servers A list of all password changes for the past six months, again in plain-text A list of "every file added to the server from re...

security pci-dss

there'go.

tylerl

@mmmshuddup Not everyone understands this. So it's helpful to point them in the right direction. If I were to put a line in my customer agreement that says "if you did something dangerously stupid to get yourself into this mess, then my fee is double" -- I'd be able to retire tomorrow.

3

mmmshuddup

holy crap

@tylerl lol good point there

MikeyB

@mmmshuddup A little gem along those lines you may appreciate:

Feb 17 at 19:39, by MikeyB

574 update
575 up date
576 compile
577 memory
578 ****** ← redacted customer name
579 strsst
580 log out
581 logout
582 cd/tmp
583 sudo to root
584 cd /tmp
585 wget
…
700 update
701 update rsm
702 update server1
703 update -y yum
704 yup -y update
705 yum update
706 yum -server1 update
707 up grade
708 upgrade
709 up grade
710 upgrade
711 reinstall microsoft office
712 reinstall
713 yum -y install word
714 yum update Microsoft Office
715 yum update ms
716 apt-get update
717 apt-get upgrade
718 apt- get upgrade

Mark Henderson

@voretaq7 I still get 10-20 rep/week from that question

MikeyB

Feb 15 at 20:44, by MikeyB

Oh god, OH GOD. It gets worse the farther back you go:

700 update
701 update rsm
702 update server1
703 update -y yum
704 yup -y update
705 yum update
706 yum -server1 update
707 up grade
708 upgrade
709 up grade
710 upgrade
711 reinstall microsoft office
712 reinstall
713 yum -y install word
714 yum update Microsoft Office
715 yum update ms
716 apt-get update
717 apt-get upgrade
718 apt- get upgrade
719 yum list
720 ethtool eth0
721 yum search word
722 yum localinstall wv2.i386

Michael Hampton

03:31

@tylerl Hm, I have to get my lawyer to translate that into legalese so I can use it.

mmmshuddup

'

I read in detail through those responses and your original post, the responders all need to get their facts right. I have been in this industry longer than anyone on that site, getting a list of user account passwords is incredibly basic, it should be one of the first things you do when learning how to secure your system and is essential to the operation of any secure server. If you genuinely lack the skills to do something this simple I'm going to assume you do not have PCI installed on your servers as being able to recover this information is a basic requirement of the software. When d…

Mark Henderson

@MikeyB Oh god, whose bash history is that?

voretaq7

@MarkHenderson yeah, fuck you to Mr. I-answered-the-question-before-it-got-on-reddit :P

@MikeyB ooooh I remember that

jscott

@MikeyB MS Office is available on CentOS? WHY DIDN"T SOMEONE TELL ME.

WesleyDavid

@voretaq7 I was writing an answer to that question, that mirrored what Zypher said, but deleted it when I was almost done thinking "Eh, why bother." I still hate myself for that decision.

(Before Zypher posted his, I might add)

tylerl

03:33

@MikeyB yum update Microsoft Office <-- oh the humanity

mmmshuddup

@MikeyB whoa what is that?? is that supposed to be someone's bash history???

Mark Henderson

@tylerl This is a good one - 583 sudo to root

WesleyDavid

3

MikeyB

@MarkHenderson Follow link for context. Lemme just say that the customer shouldn't hire volunteer student admins.

Mark Henderson

@WesleyDavid Making fun of a tragic event! Always amusing

voretaq7

03:35

Oh the huge man titties!

MikeyB

@MarkHenderson Definitely! Watch this:

"He's as flaming as the twin towers!"

WesleyDavid

Oh the fat bastards!

mmmshuddup

that bash hisotyr was just disturbing

voretaq7

(that, by the way, is the LEAST disturbing of the imagies Google presented me with)

Mark Henderson

BALLET!

BALLEET!

voretaq7

03:36

@MarkHenderson :(

Mark Henderson

BALEETED!

WesleyDavid

Please tell me no one seriously flagged those?

voretaq7

►

:'(

Mark Henderson

Fuck you guys I'm at work with a portrait monitor, it would be 10 minutes before they fell off the top

WesleyDavid

@MarkHenderson Close the window and come back in 10 minutes?

voretaq7

03:37

@MarkHenderson Y U HATE MOOBS?

Mark Henderson

@WesleyDavid What, and miss out on the chance to rub one out to those man-titties? No chance.

tylerl

@mmmshuddup "If you genuinely lack the skills to do something this simple I'm going to assume you do not have PCI installed on your servers..." Wait.. who said this?

WesleyDavid

voretaq7

@MarkHenderson Nominee, best quote starred out of context, 2012.

Mark Henderson

@WesleyDavid Haha ok that's awesome

voretaq7

03:37

@WesleyDavid . . . wow

awesome halloween costume.

mmmshuddup

@tylerl LOL

I'm genuinely disturbed by this

Mark Henderson

@mmmshuddup You haven't spent enough time in here then

WesleyDavid

@tylerl HOW IS PCI FORMED?

Mark Henderson

queue the yelling bird

voretaq7

@WesleyDavid Is that PCI-E or PCI-X compliance?

mmmshuddup

03:38

@MarkHenderson I haven' been desensitized yet

voretaq7

YOU SEE GUNSHOT WOUNDS, I SEE WARM, MOIST ORIFICES

Tweeted by yelling_bird on October 17, 2012 at 4:58 AM

ASKED AND ANSWERED!

WesleyDavid

Can't forget cockpunch

I need a monkey. A monkey who likes to punch people in the nads..and loves titties.thats my new goal, buy a nad kicking awesome ass monkey

Tweeted by cockpunch on November 1, 2012 at 9:21 PM

2

Mark Henderson

FOR PERHAPS THE FIRST TIME IN MY LIFE, I HAVE WITNESSED ADEQUATE FISTING (PROLAPSED ANUS AS FASHIONABLE GLOVE)

Tweeted by yelling_bird on February 22, 2011 at 12:06 PM

voretaq7

@MarkHenderson see, I was breaking the newbie in gently.

Mark Henderson

@voretaq7 Fair enough. Too fast with not enough lube == tearing

mmmshuddup

03:40

:S

haha

WesleyDavid

@MarkHenderson Gotta love prolapse parties cuz they always turn out right.

2

voretaq7

Always make sure you have adequate lube

amazon.com/Passion-Natural-Water-Based-Lubricant-Gallon/dp/…

WesleyDavid

@voretaq7 Yes! The drum of lube has returned!!

voretaq7

"Note: Includes pump"

mmmshuddup

wow

WesleyDavid

03:41

@voretaq7 No pimp?

voretaq7

If that lube isn't to your liking

There's always Dyna-Blue.

WesleyDavid

Iain is going to kill us all with a spoke wrench when he wakes up.

MikeyB

@voretaq7 "Heavy Duty Cable Lubricant" for laying pipe. All night long. Because that wasn't clear.

voretaq7

@MikeyB you can get Dyna-Blue in 55 gallon drums too... but not on Amazon.

I want a cheezeburger

tylerl

@voretaq7 The amazon reviews make it soo much more appealing

WesleyDavid

03:44

There should be an image preview tooltip when you hover over imgur links that have been starred as a means of gut checking if you really want to click on it.

SUDDENLY TRANSVESTITE MASSACRE DURING WORK HOURS!!

voretaq7

►

?

Mark Henderson

YOU REALLY PUT THE "PRO" IN "PROLAPSE"

Tweeted by yelling_bird on December 8, 2011 at 4:14 PM

Ryan Ries

I just wanted to say, fuck websites with redirects so that you can't back out of them

voretaq7

04:01

@RyanRies awww, here. watch this ad.

Ryan Ries

okay

Mark Henderson

I DON'T *CARE* IF YOU HAVE CANCER, NOW SHUT UP AND PROLAPSE YOUR ANUS FOR DADDY

Tweeted by yelling_bird on March 19, 2010 at 11:33 PM

Yelling Bird has an obsession with prolapsed anuses

Ryan Ries

voretaq7

@RyanRies wtf kind of communist talk is that?!

jscott

@RyanRies Chat will one-box, or whatever it's called, a twitter link.

Ryan Ries

04:07

@jscott I'm not sure what that means

Mark Henderson

@RyanRies You don't have to print-screen it, just paste the link to the twit and chat will expand it for you

jscott

@RyanRies If you paste in the twit's link, it will appear thusly:

trying to figure out how I can blame @donpark for this http://www.theregister.co.uk/2012/11/14/ahn_lab_internet_explorer_seed_replace_korea/

Tweeted by codinghorror on November 15, 2012 at 4:06 AM

Ryan Ries

Oh, I just pasted the URL, and it showed the image, which was good enough for me

jscott

@RyanRies Cool, just TMYK ;)

Ryan Ries

Understood :)

tylerl

04:17

So you have this question, but instead of asking it you search to see if anyone else asked already. And then you find out someone did, and there's a already an answer that says what you need to know. And then you scroll down and see that the person who wrote that answer was... you.

voretaq7

@tylerl one of those days, eh?

Ryan Ries

I herd you like answers

jscott

@tylerl That feel when you search something someone else in your office asks you, and it turns up an SF question you answered.

Ryan Ries

SE questions turn up in Google search results very quickly.

Journeyman Geek

yup

which makes it funny when you try to google up an answer

Ryan Ries

04:23

I hate it when I ask a question here, then I go keep trying to Google it, and the only good hit is the question I just f**king asked on SF.

jinx

Journeyman Geek

;)

Mark Henderson

wth? There is something wrong with John G's internet. There must be.

1

Q: Problem posting a comment

Here we go again. I received the displayed error while trying to post a comment. Posting a comment to a different answer to the same question worked fine (it was just a test, so I deleted it again), proving that there are no issues at my end. After this happened the first time I flushed everythi...

bug

voretaq7

@MarkHenderson IDK, I've gotten a few odd errors since the Oregon switch, but nowhere near as frequently as he's been seeing them

MikeyB

@jscott Happened a few times to me. I feel OK about it ;)

jscott

@MikeyB Guess it just serves as a reminder of how poor my memory actually is. :)

voretaq7

04:26

Who am I?
Why am I here?
I don't want to be vice president!
The man with the ears said there would be pie!

Ryan Ries

Just in case you guys haven't seen this, it's a quality blog post: kunststube.net/encoding

Michael Hampton

There's something strange at his end.

Mark Henderson

@RyanRies Thats a close dupe of a Joel Spoklsy unicode essay

joelonsoftware.com/articles/Unicode.html

Ryan Ries

Whoa

Mark Henderson

They're different, but they cover the same ground

Ryan Ries

04:31

@MarkHenderson I don't know who's plagiarizing who anymore

Sorry, *whom

ewwhite

Oh my...

Mark Henderson

@RyanRies Well Joel dates from 2003; I don't see a date on the other one

@ewwhite hollllyyy fuck

Is that some sort of burn-in test for new cpus?

voretaq7

@ewwhite kill it with base64_decode

Ryan Ries

@voretaq7 damn you

voretaq7

@RyanRies ?

Ryan Ries

04:37

I just realized that and I was gonna tab back to this window and be all "base64!! Oooh! Oooh! Base64!"

And you already replied -__-

Joel E Salas

@ewwhite Damn your retina screen!

jscott

Joomla malware plugin, or an open source shining achievement?

voretaq7

@RyanRies "base64 makes my code secure!"

Ryan Ries

Uhhh

Right :)

jscott

s/secure/obfuscated/g

voretaq7

04:38

@jscott SHH!

dont disillusion the devs

ewwhite

So how do I kill?

voretaq7

base64 decode the block of mumbles

Ryan Ries

I really do like base64 though... it's a convenient way to transport strings

ewwhite

@voretaq7 Why?

voretaq7

@ewwhite to find out what's really inside it

ewwhite

04:40

should it not just be removed?

voretaq7

and knowing what's inside you can decide if it should be removed

jscott

Knowing is half the battle.

Michael Hampton

@ewwhite I'd be curious as to what exactly it is, but not that curious. I'd take a copy, then replace the file with a pristine copy. Since it's apparently Joomla, it should be trivial to find a pristine copy...

ewwhite

It's not supposed to be there...

voretaq7

@ewwhite then decode it to find out what it is, while deleting it

Michael Hampton

04:42

Unless you plan on getting law enforcement involved, then just get rid of it.

tylerl

@ewwhite My money's on C99

or some equivalent

(the hacker shell, not the language spec)

jscott

@ewwhite Comment out, or delete, everything from line preg_replace to the ;?> before class JSubMenuHelper

tylerl

@ewwhite If you want to see what it is, just change /e to / and it won't execute. However, You can be very nearly certain that what it contains is yet another of exactly the same. These things are usually nested a dozen or so iterations deep.

jscott

Else grab a fresh copy of this version of the specific file from developer.joomla.org/code.html

ewwhite

yeah, I've seen this once before... long-ass time ago.

tylerl

04:48

but before you remove it, grab a string of of text from the block and grep the rest of the files for it. Things like that tend to show up several at a time

ewwhite

@tylerl only seeing it once... I have two servers to check for, but yeah...

voretaq7

OK seriously

I am not a sysadmin, but I am required to do this for a client (and the requirement is to use basic authentication). I don't have time to read large sections of the Apache manual, I used all my available hours to get to the state I described in my question. I guess if this is a hardcore server forum, and there is no room for those who may have an occasional question, but don't make a living as sysadmins, then I'll continue researching the issue — EastsideDeveloper 9 hours ago

Joel E Salas

@ewwhite Is it worth watching your /joomla directory with OSSEC or similar in the event of this type of payload?

ewwhite

Hmm...

voretaq7

I've fucking had it with the entitlement-minded pissants who think the world exists to do their work for them

ewwhite

04:54

-rw-r--r-- 1 apache apache 39891 Feb 24 2012 jos_q2wf.php

Journeyman Geek

@voretaq7: it... dosen't?

ewwhite

@JoelESalas Our IDS system detected this

Joel E Salas

@ewwhite Oh awesome. (hi-5)

voretaq7

@JourneymanGeek I will feed you to my lizard! :P

ewwhite

but the files are from February 2012 :(

Journeyman Geek

04:55

@voretaq7: still having problems with the bug supply?

voretaq7

@JourneymanGeek I got some worms on Friday...

half of them were dead

I hate Petco.

tylerl

StackOverflow is a bit like a post-apocolyptic landscape. At night it becomes a barren wasteland filled with things too unbearable for a sane person to look at.

5

0

Q: Set home page keep in index.php

I have a PHP function login in index.php, now what I want to do is after login success I want the page keep redirect into index.php, because I have settle the home page in index.php. It's like a twitter and facebook. $login=mysql_query("SELECT username, email, password FROM t_users WHERE (usern...

php

Don't browse after dark!

Joel E Salas

Oh man he's rawdoggin' the DB with unsanitized user input?

tylerl

@JoelESalas I can see more than a few things going wrong. Reading this question is like staring into the face of cthulhu

And it's not like this is at all the exception.

I really need to stop checking the site after 10pm

Adrian

'lo again, gents.

Joel E Salas

05:05

@Adrian How'd it go?

Adrian

@JoelESalas not a good fit. They wanted a guy to do a one-man-shop routine and be all a-jizz about DevOps'ing all the things.

Joel E Salas

Oh right, that's a shame.

voretaq7

@JoelESalas whap be nice

(er)

Joel E Salas

@voretaq7 Just because I'm posting hostile, worthless comments? SINCE WHEN ARE THOSE FROWNED UPON?

Adrian

@JoelESalas Better off that way anyway. I have zero desire to do the whole re-arranging my entire life around this job thing. I'm pushing 40 and that's a young man's proposition right there.

voretaq7

05:09

@JoelESalas since they made me wear the ugly blue diamond and I'm not allowed to make them anymore :P

it's no fun if I can't be mean :(

Adrian

I've lost too many friends who've fallen in past the Google event horizon and come out years later a totally different person that I don't know anymore.

Joel E Salas

@voretaq7 "If I can't be snarky, NO ONE WILL"

voretaq7

@JoelESalas PRECISELY.

Joel E Salas

I can't decide on the orthography there

voretaq7

@Adrian Protip: When you get on the other side of 40 start pushing the other way. It doesn't change anything but you'll feel better :)

Adrian

05:10

@voretaq7 Pfft. I've got snarking seniority. I work in a mental health clinic and I come HERE for the SANITY!!!!

4

voretaq7

@Adrian you have the excuse of insanity by osmosis

@tylerl The people on StackOverflow are like Mel Gibson post passion-of-the-S&M

Adrian

@voretaq7 either that or psychosis due to extended contact high

voretaq7

@Adrian you live in one of those states where it's OK to get high now?

Mark Henderson

Sigh. It's been a long day and I'm braindead: I need to apply a single GPO to a Single user on a Single computer

Adrian

@voretaq7 Yeah. Lot of the local med-weed people fought against it. Most likely because it would break up their nice little monopolies that they were getting rich off of.

Mark Henderson

05:13

So when DOMAIN\DUMBFUCK logs onto DOMAIN\DumbfucksComputer it applies the GPO, but when he logs onto DOMAIN\Sexyreceptionst it doesn't apply

Adrian

@MarkHenderson Sounds like a Windows problem to me. =)

Mark Henderson

@Adrian Yep and I'm too ashamed to ask on the main site cos it's a stupid fucking problem

That I should know the answer to

Adrian

@MarkHenderson Yeah, I almost posted a question today about virtual memory. It probably would've gotten closed as NC or NARQ though, since we're not entirely sure about the root cause.

Joel E Salas

@MarkHenderson Hackish, but do this: Create an OU or a group, put the Computer account in the group, then apply the GPO to that group

tylerl

@MarkHenderson Apparently you need a second account that you can use to post stupid question. And then berate publicly.

voretaq7

05:16

@MarkHenderson the last time I tried to log on to a sexy receptionist I got my face slapped :(

Joel E Salas

also gpupdate to victory

Mark Henderson

@JoelESalas I'm cool with that, but it also has to be only that computer. So when SexyReceptionst logs onto DumbFucks computer, she isn't affected

1 user, 1 computer only

By applying it to the group the computer, it will apply to everyone who logs on

By applying it to the user, it will affect all computers he logs on to

By applying it to the group & the user, it will apply even wider

voretaq7

@MarkHenderson yanno in Unix land we have these things called netgroups, from like the 80s, that could apply to hosts,user,domain tuples.... :-P

Joel E Salas

@MarkHenderson Yeah I'm stumped. There should be a way to apply stuff conditionally to a "computer group" but only when "user group" is logged in

That's a perfectly legitimate question, I'll put it up on the main site if you're too bashful

voretaq7

glad to see Windows is such a superior modern OS that it can do these things easily :)

Joel E Salas

05:19

HEY MAN

Mark Henderson

@JoelESalas Heh ok I'll post it :p

voretaq7

@JoelESalas @MarkHenderson and at some point @mdmarra will wake up, answer it, and get all the reps

Joel E Salas

@voretaq7 FFFFF

voretaq7

I think he officially passed me in total rep yesterday

Mark Henderson

0

Q: Applying a GPO to one user on one computer only

I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not apply. When DOMAIN\DumbGuy logs on to DOMAIN\ReceptionstsComputer$ it should not apply. It only only ...

group-policy

@voretaq7 GPOs are awesome, it's just been a long day

voretaq7

05:24

oh hey

we have a SHA-3 apparently

nist.gov/itl/csd/sha-100212.cfm

how'd I miss that for a month?

tylerl

@voretaq7 more interesting was responses from people like Schneier: "meh"

and he even had an entry in the race

voretaq7

@tylerl SHA-2 is still adequate

tylerl

Basically: "SHA-256 is not remotely broken, so keep using it while we make sure SHA-3 is as secure as we hope"

voretaq7

@tylerl s/secure/fast/

from what I understand the software performance of the algorithm is abysmal

tylerl

The reason why they picked it is because it's entirely unlike any algorithm in use. So if there's a category-killer exploit in the MD-x SHA-x family, this will replace it

schneier.com/blog/archives/2012/10/keccak_is_sha-3.html

voretaq7

05:30

@tylerl which is nice, but it can only be efficiently implemented in raw transistors which means it's impractical to use as a replacement...

tylerl

@voretaq7 raw transistor implementations make for good CPU extension routines. And SHA-2 family will work till intel releases chips with the KCAK flag

voretaq7

raw transistor implementations take chip real estate away from other general-purpose functions. And really only benefit you if you're building a crypto chip from the ground up.
(I'd love to put a crypto accelerator in all my systems, but at $5K per card that's not really an option I can sell to the bossman)

tylerl

@voretaq7 Still, hashing performance quite as critical in crypto as actual cipher performance. It'll get more interesting when filesystems start hashing content by default as a matter of course.

voretaq7

@tylerl it is for me (my configuration management system does a hash on every file to verify conformance to the template) :-)

tylerl

@voretaq7 Just put an AMD GPU in your box. It can compute SHA-2 hashes about 100x faster than a CPU. (Nvidia GPUs only 10x)

remember bitcoin?

voretaq7

05:41

@tylerl Also somewhat expensive to drop one of each in our servers (and would require custom code to take advantage of it)

but more reasonable than a 5K crypto accelerator card :)

@tylerl I don't understand bitcoin

tylerl

@voretaq7 i had just typed almost exactly that

@voretaq7 what about it?

voretaq7

(not the technical aspects, those are relatively sound, but how does the currency have value with no backing?)

tylerl

@voretaq7 the value is in what you can get for it. Money is a shared delusion anyway; any econ 101 will tell you that. As long as people keep trading in it, it will keep being valuable. If they ever stop, then it will not be valuable. That's pretty much the long and short of it. Before it was popular, the value was many orders of magnitude lower than it is now

voretaq7

@tylerl the problem is there's no way for me to convert my bitcoins to a generally accepted currency (save commercial enterprises doing it)

so I can't buy my groceries with bitcoins

ewwhite

so the hack was localized

tylerl

05:48

@ewwhite Joe from accounting?

voretaq7

also bitcoin is self-limiting in that the bulk of the mining is done (you need pretty heavy compute farms to mine successfully now), and there's no real incentive for someone like me to buy bitcoins with real currency just to use them to purchase goods/services

tylerl

@voretaq7 For a while you could. But I can't buy my groceries with Euros, that doesn't make them worthless.

yet

voretaq7

@tylerl no, the tragic economic instability of the EuroZone makes those worthless these days :P

ewwhite

[root@bada-bing-stripclub-nfs1v tmp]# ll
total 3864
-rw-rw-rw- 1 apache dmedia  664827 Mar 21  2012 arisexylightbox_unzip_first.zip
-rw-rw-rw- 1 apache dmedia 1109981 Mar 21  2012 ArticlesAnywhere-v1.13.4.zip
-rw-rw-rw- 1 apache dmedia 1122450 Mar 21  2012 ArticlesAnywhere-v1.13.5.zip
-rw-rw-rw- 1 apache dmedia      31 Mar 21  2012 index.html
drwxrwxrwx 2 apache dmedia    4096 Mar 21  2012 install_4efa2be3510cf
drwxrwxrwx 2 apache dmedia    4096 Mar 21  2012 install_4f048c4f4f916
drwxrwxrwx 2 apache dmedia    4096 Mar 21  2012 install_4f048c5882c5c

voretaq7

and I could never buy my groceries with bitcoins - nobody out here ever accepted them

ewwhite

05:50

just crap left in a tmp directory from an install

voretaq7

@ewwhite BAD sysadmin! BAD! Clean your temp dirs!

ewwhite

@voretaq7 not my role... the developers at the <del>strip club</del> client are responsible for that.

voretaq7

@ewwhite ah, to be a pornographer...

ewwhite

Okay, it's no strip club :(

tylerl

"Gentlemen's Establishment"

ewwhite

05:51

tylerl

down by the airport

voretaq7

@ewwhite strip club would be classier.

petitions.whitehouse.gov/petition/…

iLOL'd, because otherwise I'd cry/

Journeyman Geek

@ewwhite ~~strip club~~ you mean? ;p

ewwhite

nope

Journeyman Geek

goddamned markdown

voretaq7

05:57

@JourneymanGeek Markdown loves you

(by "loves" I mean "blowjob with extra teeth")

Journeyman Geek

and by teeth, you mean rusty stainless steel ones

voretaq7

►

tylerl

@JourneymanGeek markdown does strikethrough?

Journeyman Geek

yeah, kinda

ewwhite

it's different for chat than on the regular site

Journeyman Geek

06:06

on chat its three dashes on either side

Joel E Salas

Fuck you powershell! Why won't you run as a scheduled task!

Journeyman Geek

for the main site its strike tags

tylerl

@JoelESalas For security! (i think that's what they say)

ewwhite

Okay... last-minute flight to LA.

voretaq7

@JourneymanGeek DaFUQ you say - markdown is inconsistent?!

Journeyman Geek

06:09

@voretaq7: Its consitantly unpredictable

tylerl

@JourneymanGeek It'd be a whole lot better if Gruber didn't just throw it out there and then abandon it.

Michael Hampton

0

Q: How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, sticky bit, etc. Doesn't work. What I want: User will upload files. User will have ability to chang...

linux centos permissions acl

Save him from premature baldness!

Journeyman Geek

@tylerl: I know, right?

tylerl

@MichaelHampton Tried. Realized what he was asking was the wrong question. Nevermind. Don't feel like writing a 750 word post explaining how to do this the right way.

voretaq7

@tylerl your answer is correct :)

tylerl

06:19

@voretaq7 Realized it wasn't after I posted it. He wants this to happen AUTOMATICALLY, and wants the user to also be able to chmod +x the file after the fact. Using +i is part of the solution, but the other part is changing his expected workflow

voretaq7

@tylerl yeah but it's the big part of the solution.

he can figure the rest out himself if he's got half a brain....

.... yeah lost cause

tylerl

The correct solution is to make is uploader automatically +i the file, but also build in an out-of-band system that will allow users to change permissions. A sudo command or a separate program, or something.

Michael Hampton

After reading the rest of his questions, I'm pretty much done with him. Especially since it took him over two hours to run a simple mount command.

ewwhite

@JoelESalas I'm coming to your town

in 5-6 hours.

tylerl

06:41

GRR. Do md arrays always have to have the hostname in their name?

Michael Hampton

Eh? As far as I know, you can name your array whatever you want.

tylerl

it prepends the hostname and a colon. "myarray" becomes "server.example.com:myarray" Thanks for that, OS.

that becomes more annoying as the path to your partition is /dev/md/server1.somelongcompanyname.com:foo

Michael Hampton

0

Q: Best way to secure a personal linux server?

I have been running my own personal slave cloud like server for a while. It is Debian-based. I have personal calendar, redmine, ajaxplorer, own cloud, ssh, openvpn, media server etc. running on it. The main issue I am having is that I see that a lot of individuals, companies etc scan servers inc...

linux security debian

Do I even need to say it?

voretaq7

@MichaelHampton Unplug the ethernet cable and shoot epoxy into the ports.

(WHAT? That's how WinNT met Orange Book requirements!

Michael Hampton

It's a "Debian-based" "cloud-like" "server". Which probably means it's Ubuntu on VirtualBox running minimized on his gaming PC.

voretaq7

06:53

@MichaelHampton it's also rejected

REJECT ALL THE THINGS

Michael Hampton

0

Q: How to detect FTP activity and trigger action based on it? Linux

Trying to solve this problem. It should be easy, but it's not so far. Whenever an FTP user uploads a file, I want to automatically copy it to another location for inspection. Any ideas?

linux

Appears to be a dupe of this question.

tylerl

@MichaelHampton SEE? That's what I get for trying to help this guy.

"The way that it's possible is to have whatever mechanism you used to upload the files ALSO run chattr. That's different from automatic" Hmmm, no I don't think FTP program could run chattr. cron is close to automatic, but not ideal. Ideally, some program would be notified at file creation and immediately run chattr. Something like that... — Buttle Butkus 17 mins ago

Transcript for