The DMZ

M'vy

00:00

9 hours ago, by M'vy

9

Q: Eeeek! Where did the chat top navigation link go?

The chat link in the top navigation bar is gone. Instead there is a shiny blog link. Where did the chat link go?

For @HendrikBrummermann

this.josh

01:11

@ThomasPornin Found a nice LCD component for your box. Its not from France but the price is decent and integration is trivial. matrixorbital.com/PC-Bay-Inserts-USB-Graphic-PC-Bay-Inserts/…

this.josh

01:51

antratek.com/Matrix-Orbital-graphic.html

bipom.de/pcbay.shtml

Ormis

03:00

anyone there?

Iszi

@Ormis Heyo

Iszi

04:52

Hey, since when did the bot start tweeting Meta questions?

IT Security SE Logo Wallpaper http://bit.ly/pKl28Q #featurerequest

Tweeted by StackSecurity on August 10, 2011 at 2:21 AM

Stack Exchange

06:44

Stack Overflow Blog: Welcome Valued Associate Chris Jaeger

Posted by Robert Cartaino on August 9th, 2011

You might know Chris better as “Grace Note,” the moderator extraordinaire on our Gaming Stack Exchange.

I appointed Chris to a pro tem moderator position nearly a year ago. I wasn’t an avid user of Gaming SE, but I was continually amazed how often Chris’s name kept popping up in our moderator chat room. Chris was quickly becoming The Person to quote when you needed a clear, compelling explanation of how this community-management stuff should work. Even in our meta community, Chris was earning a ridiculous amount of rep in a short period of time. You should read some of his posts because it’s really good stuff. …

AviD

07:30

@Iszi oo that doesnt sound good...

M'vy

hm

@Iszi Wanna make a meta-post for the Meta-tweeting?

Rory Alsop

07:51

ey up lads

M'vy

Hi @RoryAlsop

Rory Alsop

morning

Graham Lee

09:02

I'm going to assume from now that any slashdotter's password is "correcthorsebatteryst4ple" (some habits are hard to kick)

M'vy

hehe

Graham Lee

Hmmm...my sidebar for the room doesn't have any starred posts.

M'vy

Not high enough?

Hm, no, it should

Graham Lee

even if I scroll all the way to the top

M'vy

Refresh?

Graham Lee

09:14

OK, refreshed the page and there they are.

Hm.

Rory Alsop

09:59

@GrahamLee hahahaha

mornin

Graham Lee

mornin

Rory Alsop

debate is still underway as to whether Manchester suffered rioting or a Tuesday...

Graham Lee

hehe

Scott Pack

11:24

@RoryAlsop Was there a match?

Rory Alsop

11:41

@ScottPack I don't think so

Rory Alsop

12:13

theregister.co.uk/2011/08/10/essex_police_arrest_facebook_users

"a Scottish teen was also arrested for using Facebook to try and stir up trouble in Glasgow, even though the city has yet to witness any violence; well, outside of the norm anyway."

:-)

Iszi

@AviD Y'know, we should just get an XKCD feed in here.

@Mvy Har har. I just might.

@RoryAlsop Mornin'. Not sure how I managed to miss you coming in. Didn't hit the hay until about 0400 EDT last night. Spent a few late hours trying to coerce our vulnerability scanner into cooperation. Ended up losing that fight. :-(

Wait - WTF? XKCD is HTTPS? When did this happen?

Rory Alsop

12:42

@Iszi they must have read the memo:-)

Thomas Pornin

12:52

@ScottPack I think it would look good on security.SE

Rory Alsop

Hi @Thomas

Thomas Pornin

Hello

M'vy

Hi

Scott Pack

13:23

@ThomasPornin Now I'm waffling. It already has an accepted answer.

I don't know anything about the subject, do you guys expect the answers would be better?

Thomas Pornin

I think the accepted answer is already a good answer.

Jeff Ferland

16:27

When playing airsoft, it's very satisfying to have the other guy 8 feet away and staring right at you while not seeing you. It's very sad to fire at him and learn that your pistol is jammed up, thus being shot yourself despite getting the drop on him.

this.josh

17:43

@ThomasPornin Get any more leads on your chassis?

Thomas Pornin

@thisjosh Ah, the notification popup was bearing the crypto.SE logo -- a weird bug

For the chassis, I have forwarded the links to my colleagues

I have no idea whether this will lead to any factual product

this.josh

What did you think of the drive bay LCD?

Thomas Pornin

@thisjosh It looks like a fine thing, but I am not sure where the bracket fit on a racked server

this.josh

Oh right, they usually have reduced size drive bays.

Who do you think the customers would be? I have been thinking that most people are not willing to pay (money, resources, time, etc) or pay more for better security. So, I'm curious as to who would be interested in purchasing a security appliance.

Thomas Pornin

18:46

@thisjosh My company makes products about digital signatures and certificates

People do not buy that because they want but because they must

because of regulations which mandate dematerialization

this.josh

Ah, makes sense. I was hoping there was some end user out there who wanted security.

Thomas Pornin

@thisjosh Nobody in their own frame of mind wants to sign

a signature you do is just a legal weapon aimed at you

you want other people to sign things

this.josh

19:03

Good point.

Thomas Pornin

0

Q: Is this algorithm strong enough to generate password for personal use?

I currently use the following method to have a different password on every website. password = sha1 ( mainPassword . domainName . number ) Here are the questions: Is this secure enough? I mean if somebody know my algorithm and one or many passwords, could he find easily one of my other passw...

hash password-management

has been also posted to crypto.SE

1

Q: Is something wrong with this algorithm in term of security

I currently use the following method to have a different password on every website. password = sha1 ( mainPassword . domainName . number ) Here are the questions: Is this secure enough? I mean if somebody know my algorithm and one or many passwords, could he find easily one of my other passw...

hash passwords sha1

with what I can only hope to be a copy&paste process

what is the standard way of dealing with that ?

Stack Exchange

Blog - Stack Exchange: Documenting DevDays 2011: #3 – More Speakers!

posted on August 10, 2011 by Alison Sperling

This Stack Overflow DevDays will be the best conference you’ll attend in 2011. You’ll come away with in-depth knowledge of all the latest programming awesome like: Node.js, HTML5, CSS3, CoffeeScript, Cassandra, Hadoop, F#, UI design, Scalability and Performance. Register today to ensure you won’t miss out on seeing these speakers and more! San Francisco, October [...]

this.josh

nuke the entire site from orbit... oh, wait, no idea

Rory Alsop

20:00

@ThomasPornin Hi - I think I can request mod deletion from the 2 unwanted sites. Do you just want it left on crypto

Stack Exchange

Stack Overflow Blog: SE Podcast #15

Posted by Alex Miller on August 10th, 2011

Joining Jeff and Joel this week is Michael Natkin, from our Cooking.SE site. Michael is especially interesting because he is a computer programmer, but he doesn’t answer questions at Stack Overflow, only on the Cooking site (he’s our first guest to do so!) – he also writes over at Herbivoracious (which he started back in 2007).

Their discussion includes:

Michael is a vegetarian “foodie” (even though he really hates that word) – he and Joel commiserate over the oddities of being a vegetarian trying to eat out …

Rory Alsop

Have killed it on sec.se

this.josh

Anyone checked out the Jerico Forum?

Scott Pack

Have it closed on the least appropriate site, leaving a comment that cross-posting is rude.

If it already has answers, have it migrated and request a merger on the destination.

Rory Alsop

20:16

migrated the SO one into your crypto one, and deleted the sec one @ThomasPornin

@ScottPack aye

@thisjosh Jericho is slowly being accepted - been around for a while now. I remember them pushing it heavily at Defcon 14

It makes a lot of sense these days as deperimeterisation is happening even with highly sensitive applications

For blog reviewers, I have my initial scratch draft of QOTW#5. Still need a lot of work, but would like any review, as tomorrow night I have a gig so won't get much done after midday:-)

this.josh

Its funny because I was thinking about there being no real defined enclave in corporate networks anymore after answering the question about jailbroken iphones, and today I got a link to jerico.

Stack Exchange

20:39

Stack Overflow Blog: Careers 2.0: It’s About Reputation, Not “Rep”

Posted by Joel Spolsky on August 10th, 2011

I get an email like Arik‘s every day or two. He wrote:

The problem I see is that Careers 2.0 give advantage to developers with high Stack Overflow statistics (which I guess was the point, showing that you know stuff).

Unfortunately, SO succeeded so well, that practically no good question remained unanswered. Thus, gaining a respectful reputation in SO is practically impossible these days. Which gives an unfair advantage to veteran SO users.

First of all, whoa… have you seen the Stack Overflow homepage lately? We’re getting about 4,000—four thousand!—questions a day. There are puh-LENTY of opportunities to find a question to answer. …

this.josh

22:17

Is this too subjective?

2

Q: Is today's XKCD on password selection accurate?

How accurate is this? http://xkcd.com/936/ I've always been an advocate of long rather than complex passwords, but most security people are against me on that one. (at least that I've talked to) However, XKCD's analysis seems spot on to me. Am I missing something or is the analysis sound?

passwords

we alread have 'How long should the password be?' and 'Recommended policy on password complexity'

Transcript for