« first day (277 days earlier)      last day (4595 days later) » 
03:00 - 17:0017:00 - 00:00

5:01 PM
I'm leaning towards StackOverflow, but electronics might be useful. Do you agree that it is not security related?
 
@thisjosh Hmmm... we would entertain logging MAC addresses over wifi as security related, yes? Logging and anonymity combined as well, yes?
@thisjosh I vote keep.
 
@AviD or you are 22 hours behind :P
@JeffFerland Yes thats his current approach by queue monitoring would be best done at the queue transaction point: the gate, cash register, POS, etc. Other points could be monitored with heat sensors or light sensore (not video).
And he clearly doesn't understand queuing theory if he wants to monitor individuals in the queue. Individuals have no significant impact on the queue's processing rate.
I suspect he wants to monitor queue rates without agreement or permission to do so, otherwise he would not be focusing on cell phones.
 
@thisjosh Appearance to Disappearance shows processing rate; growth ratio shows backlogs. Reword the question if you like, but I think detection of unique wireless devices and anonymizing that data is in our realm.
 
5:18 PM
@JeffFerland Oh I agree on the anonymizing of data. I guess it is a matter of the value to the OP vs the value to the IT Sec community. The OP will get good response about anonymizing data, but he will not get good response on how to solve his problem (measuring the queue transaction rate). Thus keeping the question is good for IT Sec, bad for him, migrating the questions is bad for IT Sec, good for him (if he gets an answer elsewhere that helps solve his problem).
 
@thisjosh Well, I speak knowing that we don't really have any other site with knowledge about radio transmissions, that both myself and @Iszi do understand radios and cellular networks, and that security.stackexchange.com/questions/6424 is a technically close question in some regard.
... and besides, he thinks hashing a small number will prevent determining that number. MUST ADJUST PERCEPTIONS!
 
@JeffFerland Oh I am intimately familiar with RF: UHF, VHF, SHF, and EHF. The reason I asked was I couldn't think of where he could get an answer to his basic problem.
 
Ok, I have just received through FedEx my new computer, it is a Mac Mini, and I am pretty sure I am doing it wrong since I am reading the manual before trying to plug it in.
 
@AviD, you may want to contact Rebecca Chernoff about meta.security.stackexchange.com/q/557/665 via email or comment.
 
@ThomasPornin Looking to do a little iOS work?
 
5:28 PM
Yay for teaching tools. Portal is free through steam until tomorrow, 9/20. -- http://www.learnwithportals.com/
 
or maybe OS X
 
Not even. I am just fed up with Linux and I want to try something else for a while.
 
@Iszi @ScottPack Am I missing "the catch" somewhere?
 
With the latest Ubuntu with Unity, too many things are "sort of" working
with a Mac, I suppose that everything should work either flawlessly or not at all
which should save me a lot of time: if it does not work immediately, I know that it will NEVER work.
 
Then you havn't heard my diatribe about paying for stability...
basically the same as my diatribe about paying for security, but with s/security/stability/g
 
5:33 PM
@Iszi Not really
It's just Portal, not Portal 2
 
@thisjosh If @ThomasPornin has been in this community for more than a decade, he has been on Slashdot. If he has been on Slashdot, he has heard a rant about that indistinguishable from your own.
 
@ScottPack Haven't played the original yet.
 
They do this every now and then, usually only lasts for a few days.
Earlier this year, like April, they were offering Portal for Mac for free.
 
@JeffFerland I have roamed Usenet since about 1995, but I never really followed Slashdot
 
@Iszi Get you hooked with the awesomeness of Portal so you buy Portal 2.
 
5:34 PM
@JeffFerland Maybe he's too smart to have been on slashdot...
 
@JeffFerland That would be the closest thing to a 'catch' that I could think of.
 
I just hope my laptop will run it nicely enough not to ruin it. I was going to (eventually) get Orange Box on the PS3 to get started.
 
And I was about to say Usenet probally has a rant better than mine
 
@thisjosh Hey, it was good in its time... all universes eventually become black holes, right?
 
@JeffFerland Ah back to the Higgs Bozon and the theory of gravity. I believe it has yet to be determined as the physicists have not yet explained cosmological expansion.
 
5:36 PM
@thisjosh But Slashdot has imploded. QED.
 
So have many stars, still it is difficult to scale an event to the size of the universe.
 
@thisjosh anyway, quality vs. cost is a very old discussion... and I need to write up a bio for myself.
 
@JeffFerland Quite true, and so is informed rational decision making, but I hope we're making progress on the decission making.
Unfortunatly I don't think so.
 
Day one complete. There are four lights. #obscurescifireference
I don't get it. Someone help out?
 
This more of a security question?
1
Q: Guarding against rogue certificates

FixeeThere has been a lot of news recently about certificates being falsely issued (due to the issuing authority having poor system security!). Apparently the targeted users were mostly Iranians, but it's not hard to imagine this happening to anyone. My browser comes pre-loaded with hundreds of cert...

 
5:51 PM
@Iszi In TNG Picard was captured by the Romulans(?) and during his torture one of the things they did was flash lights in his face and they were trying to get him to say there was a different number of lights than there really were.
I think that's right. It's been a number of years.
__NOTOC__ "Chain of Command" is an episode of the television series Star Trek: The Next Generation that aired in two parts. Overview Captain Picard is taken from command of the Enterprise for a covert mission, and his replacement is assigned to deal with the Cardassians openly. Plot Part I Captain Picard, Lt. Worf, and Dr. Crusher are assigned by Starfleet on an undercover mission to destroy a Cardassian biological weapons installation on Celtris III, a Cardassian border world. In Picard's place, Starfleet assigns Captain Edward Jellico (played by Ronny Cox), who exhibits a vastly differ...
Ah, Cardassians not Romulans.
 
@ScottPack Ah. Yeah, I probably saw that episode once. Though, I should re-watch the series sometime...
 
@Iszi I'll probably queueueueueueueueueue it up into my lunch time routine.
I'm working my way through Alias now.
 
@ScottPack All the Star Trek series except DS9 are on Netflix.
 
I've got TNG and DS9 at home, not the others, though.
 
6:07 PM
Oooookay... I went to look up "Q" in Wiki, to make a joke of adding ST to mine, and I get this among other options on the disambiguation page...
"A nickname for Chuluaqui-Quodoushka, a series of New Age sexual meditation exercises developed by Harley Reagan"
 
Giggity
 
@Iszi netflix is splitting into two
 
@thisjosh But the streaming side will continue to be called NetFlix, so his statement stands.
 
So does mine. :P
 
@thisjosh I've heard.
 
6:21 PM
@thisjosh too shay
 
3 chaise
I don't know what news every has read. If you find a way to do that, let me know :P
 
@thisjosh If you could get enough ssl proxies out there you could probably manage it.
 
@ScottPack Proxies are too much trouble, I prefer to tap the end point with a cordless drill :P
 
Mmmm....vampire taps
Haven't seen one of those in years
Oh, so you can stick with the conversation, @Iszi
A vampire tap (also called a piercing tap) is a device for physically connecting a station (i.e. a PC, a printer, or another device) to a network that uses 10BASE5 cabling. This device clamps onto and "bites" into the cable (hence the vampire name), forcing a spike through a hole drilled through the outer shielding to contact the inner conductor while other spikes bite into the outer conductor. From the vampire tap, a short cable called an AUI (Attachment Unit Interface) is connected directly from the tap to the network card in the PC. Vampire taps allow new connections to be made on a...
 
6:39 PM
@ScottPack On occasion.
Between my ADD and stuff I've got to do at work, I occasionally - ooh, shiny thing!
 
@ScottPack Pentest fun is vampire tapping a 10/100/1000 BaseT with a swiss army knife and some careful nerves.
 
@ScottPack How did you get there?
 
@thisjosh Tapping the end point with an electric drill.
Some of the older taps required doing just that to expose and create a connection point on the core.
 
Oh, thats a win for you. Sorry, I was doing work, my priorities are all out of wack.
 
No worries
 
6:43 PM
Too bad I cant program my brain with a better priority queue.
Actually just better context saving and switching would be great.
 
Hello again
so far so good with MacOS X
 
Afternoon, @Thomas.
Installed macports yet?
 
Not yet
I have tried it on an older machine, though
 
I think Mac OS X has been designed nicely.
 
From a user standpoint, yes I agree.
 
6:47 PM
This has gotta be the stupidest thing. Start->Run->P: and I get an error (forget which). Double-click shortcut on Desktop, and it opens fine. Start->Run->P: again, and I'm good to go! WTF?
 
Some little annoyances where Apple they decided to have continuity with previous design.
i.e. closing all windows does not close the application/parent process
 
Now that I have the important done (crypto.SE, security.SE), I can see to the other tasks (email, work...)
 
evenin - on here briefly before feeding the spawn. Had a quick q for @ScottPack as he seems to know: those useful Stack Apps - how do you find them. I have tried searching for various ones and I have no google-fu on stack.apps
 
evening +/- 12
 
even tried trawling back through chat archive - but after many days worth, I gave up
 
6:50 PM
@RoryAlsop It's a bit of a pain to be sure. I've been trying to favou?rite the ones I actually use
 
@thisjosh evening
@ScottPack Ahh - I just assumed you were better at the search engine
and that I was being clueless
 
actually thats not right, there should only be 23 other time zones, but you cant split it to 11.5
 
@RoryAlsop I probably am, and you probably are. However, my list should get you started ;)
 
thanks:-)
 
6:51 PM
but I don't want it to be specific to your location relative to UTC/GMT
 
I should look through the installed scripts on all my machines and make sure that list is up to date and they're all in sync.
I know that I keep forgetting to install things like threaded comments.
There's another one that puts a reply button next to a comment, though I don't have it nor have I searched for it recently.
 
WTF? I've gotta reboot for an Acrobat Reader update?!?!
 
Welcome to the Wild and Crazy World of Adobe Updates!
 
@Iszi Only if you have acrobat reader installed:-) I have taken it off all my machines
 
@RoryAlsop Arg, here here matey Foxit is the sails wind
 
6:58 PM
@thisjosh Arrr - that it be over this side of the briny, me hearties
 
7:45 PM
ahoy! ye bucanneers hae' been fixin thar sweet trade... nae gonna keelhaul you lilly-livered wenches
 
@AviD Heh - gettin' yer patois in afore the sun sinks below the yard arm
 
aye
the day's furner be sinkin inta davey jones' locker of the night...
 
8:01 PM
@AviD :-)
 
Fantastic! I'm going to be imagining Hasidic Pirates all night long. :)
 
@ScottPack excellent
But all too soon it will be time to start thinking of the opposition's response
 
@RoryAlsop The more I drink, the funnier it's gonna be, let me tell you.
 
as together the constant battle of the Flying Spaghetti Monster factions continues
@ScottPack Har har har
@ScottPack interestingly google image search returns nothing useful under that search term:-)
@AviD - can you fix that for us please:-)
 
Indeed. I expect to see swashbuckling in tzitzis by tomorrow.
 
8:08 PM
Oooh- was wandering and decided I need to get me one of these:
(maybe with my name on it, though)
 
Ooo
Way better than the cert I got from the Church of Universal Life
Incidentally, in Kentucky there is no licensing to perform marriages. They only have restrictions on who is allowed to be the signatory party on a marriage license.
 
@RoryAlsop lol
yes, I saw something funny about that today...
" You have a wild beard, drink a lot, and always say "Ay-yay": let's face it: aren't all pirates just Chassidim?"
 
8:24 PM
Don't you ever wish that IM services could tell you more about a person than "XYZ is typinig..." like, "XYZ is looking up the information you requested...". But then of course, that'd probably end up leading to messages like "XYZ is diddling around on LOLCat sites..." which of course nobody wants shared.
 
@AviD @RoryAlsop @anyoneelse this be treasure for ye, me hearties?
1
Q: Guarding against rogue certificates

FixeeThere has been a lot of news recently about certificates being falsely issued (due to the issuing authority having poor system security!). Apparently the targeted users were mostly Iranians, but it's not hard to imagine this happening to anyone. My browser comes pre-loaded with hundreds of cert...

 
@Ninefingers Yarrr
we'll make that scurvy knave feel as welcome as...
the black spot! Har har harrrrgh
 
@RoryAlsop I'll make e walk the plank then!
 
thank-ee kindly shipmate!
 
It's captain ninefingers!
 
8:29 PM
@Ninefingers lost the other one in a sword fight on the poop deck, I'll warrant
 
@RoryAlsop I got a jar of dirt!
 
@Ninefingers hahahahahaha - I'm getting flashbacks to Waterworld:-)
 
Oh my god...I'm so very sorry...
So, was anyone else bothered by the fact that he was able to power his cd player?
 
And Doctor Who? It's a weird evening alright
@ScottPack Dude - Solar......:-)
 
@RoryAlsop Did you see any panels up in that catamaran?
 
8:32 PM
@ScottPack It's fyootchyooer - the sails themselves could be generating like a fury
 
Is that Welsh?
 
nah - it's like in some year's time. F.U.T.U.R.E. :-)
 
There is a bug in online communication whereby accents and pronunciation are stripped. I suspect this rather diminished the impact of your statement.
 
@ScottPack in the case of scotsmen, this is a feature.
 
in real life:-)
Oh - just watched this:
genius
according to the ninjas, Arrr is not a word
 
8:44 PM
excellent
love this comment, @Iszi this ones for you (at 1:44): "Pirates are hotter cuz we have bigger boobs"
 
"Why are ninjas better than pirates?" I've been to see him live and he's really funny. Also, probably NSFW.
 
@Ninefingers Rawrk - your balls are on fire - Rawrk
@Ninefingers /s/probably/definitely
Saw him once at the Edinburgh Festival some years back
very funny
 
Har har.
 
9:00 PM
@Ninefingers Ooo - I like @RoryMcCune's answer here - think I might add links to the related questions
 
@RoryAlsop sorry, where? I'm just concentrating on an edit...!
 
on your CA question migrated from Crypto
 
Ah ok, sorry, I should have guessed really
 
9:35 PM
@JeffFerland @RoryAlsop that hosts file q you were discussing earlier, is it even a security question?
0
Q: Why does editing my hosts file to block websites show them as LISTENING?

JavyMy hard drive has a fresh install of Snow Leopard. I checked the connections with Network Utility, and everything looked fine. I changed my hosts file with the one from here: http://someonewhocares.org/hosts/ After I flushed the cache, I ran Network Utility again, and it showed w9.hitbox.com ...

seems very Super User material, not even Apple
 
@AviD I agree, either super user or if more focused on OSX then apple
 
ya, I didnt see anything mac-specific there.
I guess I'll migrate it soon...
 
@AviD if it's not mac specific (I'm going of @JeffFerland's comments about IPP for the Mac bit) then SU would probably get some good answers.
 
thats what I thought too. but I'd like to hear why @jeff and @rory thought it was ontopic....
 
9:56 PM
@AviD Maybe I was not paying attention:-) I concur - offtopic
 
@RoryAlsop BOOM! its gone.
 
This is my Boom Stick!
 
heh
 
@AviD It's been too long since I last saw Army of Darkness, or indeed any Bruce film
 
army of darkness, whoa, callback machine
who bruce?
 
10:09 PM
Bruce Campbell
found this over on SO - suggested a move here:
0
Q: Payment gateway integration, any security considerations?

Ted WongI'm interested in understanding what security considerations there are around implementing a payment gateway. I have, so far, thought of: having a SSL Cert is a MUST. logging actions is critical. a database separate from the internet. Any other recommendations? As background, my applicati...

 
ah, of course. cant believe I didnt realize it was him
@RoryAlsop well duh. do people still not know about sec.se? or not bother?
 
guessing millions don't yet know
needs to be something that suggests it:-)
"your post has the word security in it - did you mean to post on sec.se?"
 
@RoryAlsop hmm, that would probably lead to a big crapflood
 
hahahahaha - 'crapflood'
migrated over here now:
0
Q: Payment gateway integration, any security considerations?

I'm interested in understanding what security considerations there are around implementing a payment gateway. I have, so far, thought of: having a SSL Cert is a MUST. logging actions is critical. a database separate from the internet. Any other recommendations? As background, my applicati...

 
excellent
and, we'll have another user with "wang" in his name.
 
10:20 PM
wong...
so very wong
 
ah,oops :$
 
:-)
 
cheap rascist jokes ;)
 
heh
is that a cross between racist and fascist?
 
aahhh
umm.... yes! it is, of course, definitely NOT a typo as a result of it being 1:30 am.
 
10:23 PM
long day
 
on that note.... havagnite
 
you too @AviD
catch ya later
(aharrrrr)
 
11:04 PM
@RoryAlsop I have Bubba Ho-Tep just waiting to be watched. Oh baby!
 
@RoryAlsop So, what I want to know, is how does that guy sit down with those things flapping around down there? Does he have to buy special seats with cutouts?
 
03:00 - 17:0017:00 - 00:00

« first day (277 days earlier)      last day (4595 days later) »