The DMZ

5:00 PM

the markdown parsing logic... hard to know what is intended as markdown, and what is not - so they require whitespace before/after.

Ninefingers

@IszI it's probably easier to write for word in words.split(" "): format(word) as a basic not too complex parser.

AviD

@JeffFerland depends on how long the sentence is. but then, if its too long, it's probably a run-on sentence anyway, and you should shorten it, for readability's sake.

Jeff Ferland

I mean, I did do bolding with this answer:

3

A: Is a "SAS 70 Type II" audited host SEC compliant?

SAS-70 reports are designed to show that an auditor has seen that the company in review performs certain actions that the company under review enumerates. One example that we use around here to demonstrate the nature of a SAS-70 is that we could review a requirement that, "All our trashcans are r...

AviD

effective, too.

look, realisitically, when presented with more than a couple lines of text, most people just do not read it all.

bolding the key parts of it enables them to grab the gist, even though they're just scanning.

Ninefingers

@AviD "when presented with text, most people just do not read it all."

Damn, strike doesn't work

Rebecca Chernoff

5:04 PM

strike where?

AviD

@RebeccaChernoff kneecaps.

@RebeccaChernoff how are you on this fine day?

Ninefingers

@RebeccaChernoff strike html in chat. I assume because it's a html tag - it works in answers with WMD, but not <strike>here</strike>

Rebecca Chernoff

~~sure it does~~

AviD

ahhh, tricky.

Ninefingers

oh man! howdoyoudothat?

AviD

5:06 PM

@Ninefingers markdown for it: ---

Rebecca Chernoff

~~hehe look what I can do that @Ninefingers can't~~ q:

look at the source of my messages

AviD

--- striked --- (sans spaces)

Ninefingers

@RebeccaChernoff no fair :(

so now I've learnt ~~something~~

Rebecca Chernoff

and I'm good @AviD (:

Ninefingers

Intriguingly whilst we're at it do the SE chat modifications make anyone else's floating things, like popups, fade out straight away? Or is it just me?

Rebecca Chernoff

5:08 PM

err, huh?

the fading should always be an indication of how active someone is

Ninefingers

So when I click on the thing on the left hand side of my message for example there's a dialog with edit/delete etc. Except now it pops up and goes again straight away.

Iszi

@RebeccaChernoff How do you do that?

Rebecca Chernoff

@Ninefingers [status-norepro]

@Iszi you wouldn't be able to look at my source since you're not a mod. You can't edit my messages. (:

Ninefingers

@RebeccaChernoff okay, could be something I'm doing with the old language things/other greasemonkey scripts perhaps...

Rebecca Chernoff

lol @AviD

Scott Pack

5:13 PM

@Iszi mu.netsoc.ie/wiki

Ninefingers

@RebeccaChernoff Ok so if I turn everything off except SE chat it works fine. [status-don'tcareanymoreamhappynow]

Rebecca Chernoff

ok, whew (:

Jeff Ferland

So, challenging question: how does one go about getting non-security folks who make security decisions (usually funding-related) into a room to educate them?

AviD

anybody else here use foxit AND ie?

seems foxit does not support being called from IE9 anymore :@:@

Iszi

@JeffFerland More importantly, how do you go about getting that education to sink in?

AviD

5:17 PM

@JeffFerland free lunch.

Scott Pack

@AviD Doughnuts usually works

But Iszi is right. Getting them into a room is the easy part.

Getting them to actually understand what you're telling them is hard, and sometimes futile.

AviD

13

Q: What policies maximize employee buy-in to security?

Security awareness training is a bane to most employees. A favorite anecdote I have is a group of employees figuring out how to quickly complete their online security awareness training from discovering all the answers in the raw HTML code. What are good motivating policies to encourage employe...

Jeff Ferland

@Iszi Be an effective speaker. Know what drives your audience. Present them with things like cost savings, huge costs for failure, and regulatory risk of prison time.

@AviD Less employees, more C[EF]O

AviD

@JeffFerland still (mostly) applies.

though I think there was another question wrt directors...

Iszi

@ScottPack Tried running their connection search, and got an error saying it couldn't connect to a server.

Scott Pack

5:20 PM

@JeffFerland You need to add an 'I' to that regex

@Iszi File a bug report :)

Jeff Ferland

@ScottPack I think I once put it down as C[EFILMN]O

C[EFILMN]O(P)?

Scott Pack

Ok, I think I can figure out 'L' but M and N are mysteries.

Iszi

@ScottPack I'm not getting L, or the P at all.

Unless the P is just for humo(u)r.

Scott Pack

@Iszi I think you mean 'u?'

The parens are just for grouping, and in pcre will store the matching value into a variable.

Iszi

@ScottPack Nah, I was going for more common English usage. Like "(s)he".

Scott Pack

5:23 PM

Now, you could do "humou{0-1}" but that's just silly.

This is a nerd channel, son. Less English, more Regexp.

3

Iszi

@ScottPack Isn't it just "Regex"?

Scott Pack

@Iszi Depends.

Iszi

Seriously, someone help me pull out of Wiki here! I'm not going to get anything done today!

Rebecca Chernoff

Hey @AviD are you doing a blog post about the OWASP conf by any chance?

Iszi

Apparently, Wiki has a "Six Degrees of Wikipedia" page which is only second in a Google search for the term. And that links to "Wikipedia: Get to Philosophy".

Wikipedia:Six degrees of Wikipedia

:See also , , and . :Note that some of the article chains listed here have changed since they were added to this page. There is a popular hypothesis—known as "six degrees of separation"—holding that any two people in the world are separated by a chain of no more than six acquaintances. It is perhaps a worthwhile task in studying the character of Wikipedia to see whether something similar obtains among its articles. Six Degrees of Wikipedia (popularized by Elan Gershoni) aims to be a compendium of the following things: * The items separated by the longest minimal chains in the encyclopæ...

Wikipedia:Getting to Philosophy

Some Wikipedia readers have observed that clicking on the first link in the main text of a Wikipedia article, and then repeating the process for subsequent articles, usually eventually gets you to the Philosophy article. As of May 26, 2011, 94.5% of all articles in the English Wikipedia lead eventually to the article Philosophy. The rest lead to an article with no wikilinks, links to pages that do not exist, or get stuck in loops. There have been some theories on this phenomenon, with the most prevalent being the tendency for Wikipedia pages to move up a "classification chain." Accordi...

Scott Pack

5:31 PM

@Iszi I like how the first wiki link goes to Philosophy

M'vy

what is the first link of Philosophy?

Because all articles shall lead to it also

Iszi

@Mvy Contrarily, I believe by the "Getting to Philosophy" theory, all articles should be reachable from it.

Scott Pack

@Mvy Reason

Iszi

Or no, that doesn't quite make sense either.

Scott Pack

Well, technically it is the disambiguation page, but following that is Reason

Iszi

5:38 PM

'Cause if you're really applying the "Getting to Philosophy" theory, the first link of Philosophy should be Philosophy.

M'vy

No the Theory said -> repeat the process

The 1st of Reason is Philo

AviD

sorry, shopping arrived unexpectedly...

M'vy

so that's looping

AviD

@RebeccaChernoff just finishing it off now :)

(took me much longer to find the time to get to it... )

Rebecca Chernoff

ah cool (:

Ninefingers

5:42 PM

Ok ok so talking about blogs, what can I blog about next? Any ideas anyone?

AviD

@Ninefingers I've always said, blog about what you know. Which is why I don't have a blog yet.

Ninefingers

@AviD well I don't have a personal blog... I mean nobody wants to read about my life, let's face it, I was thinking about sec.blogoverflow

Iszi

Wow. Who knew there was such a thing as Wikiracing?

Wikipedia:Wikirace

:See also , , and . A Wikirace (IPA: ) is a race between any number of participants, using links to travel from one Wikipedia page to another. The first person to reach the destination page, or the person that reaches the destination using the fewest number of links, wins the race. Intermediary pages may also be required. How to Wikirace To Wikirace, first select a page off the top of your head. Using "" works well, as well as the featured article of the day. This will be your beginning page. Next choose a destination page. Generally, this destination page is something very unrelated ...

AviD

@Ninefingers well, duh. But your specific expertise would stuff like windows internals, no?

Scott Pack

Goddammit, @Iszi! Get to work!!

AviD

5:47 PM

@Iszi seriously, dude, GET OFF THE WIKI NOW. Before I sic Al Gore on you.

Jeff Ferland

I'm so going to build a wikipedia link graphing program on the Toolserver now...

Ninefingers

@AviD that or Linux. I know nothing about OSX though.

Scott Pack

@Ninefingers Oh, so you're an expert in OSX as well?

AviD

@ScottPack lol, I've had that done to me more times than is logical.

Jeff Ferland

Random question: who can name a prominent female hacker defense lawyer? Just heard a name mentioned here and I think it strikes a bell for that...

AviD

5:49 PM

@JeffFerland Sandra Bullock?

Scott Pack

@AviD Well, by knowing nothing about OSX he's not much different than the experts ;)

Jeff Ferland

@AviD The Net? Was she a lawyer in that? I thought she was a consultant.

AviD

@ScottPack ah, I thought you meant the other way. "He mentioned OSX - and he knows how to spell it! Quick, sell him to clients as an expert!!"

@JeffFerland hmm, I guess you're right.

sometimes I feel that it's quite similar... :S

Jeff Ferland

I think it was something like Jennifer Chertoff... can't get the last name right, or I'm completely wrong. I don't know.

Scott Pack

@JeffFerland Are you thinking of Rebecca Chernoff?

Ninefingers

5:53 PM

@ScottPack no no no no no no no yes.

Jeff Ferland

@ScottPack No... and why would somebody star that?

AviD

because invoking Her name is akin to magick?

Jeff Ferland

Magic people, voodoo people!

Scott Pack

/me shrugs

Jeff Ferland

So, this week we learned that one can really screw with things by pre-determining the IV when using CBC mode. Thanks, BEAST!

Ninefingers

6:05 PM

4

Q: Blog and syntax coloration

Today we released a blog article on a technical subject. It includes C code. I was wondering if this was possible to have some syntax coloration for those block of codes? In fact, we do have a wonderful system on the stacks, so why not on the blog? I know the system is not the same, but who kno...

feature-request blog

On that topic, my arrows are gone from my blog post!

I had ascii art arrows in <pre> sections I think. At least, I'm pretty certain I did.

Scott Pack

Hm

Are you a narcissist? Do you assume every problem in the world can be fixed by the solutions that YOU work with? Join InfoSec NOW!

Tweeted by indi303 on September 21, 2011 at 4:54 PM

Thanks @Jeff. We need all the help we can get :)

AviD

@ScottPack luvvit!

Iszi

A reminder, in case anyone needs it, of how public our chats are. Still trying to find more details on MySQL bug #36544, I ran another Google search for 'mysql bug 36544` and my chat message from yesterday turned up in the top 10.

yesterday, by Iszi

Can anyone get me details on MySQL bug #36544? I'm getting "Access Denied" when I try to look it up, but I'm not seeing any indication that it's meant to be a restricted area or any reference to how to request access.

Scott Pack

....*twitch*...*twitch*....fixing...other....people's....spec....files....>_<

Twice in as many weeks I've had co-workers who don't use any SEI sites coming over to say, "Hey, I was searching for this one thing and I saw your name show up as having done X."

So, apparently, it's working.

AviD

@Iszi hmm. Did you find any info there?

@Iszi check again tomorrow, maybe you'll find your chat from today there.

self-sniped recursive linking!

Iszi

6:21 PM

@AviD No. At least, nothing that links to what I'm looking for. Which of course leads to the possibility that that bug isn't the one I'm looking for.

In the scanner I'm using, one finding is only described as "A code execution vulnerability is present in some versions of Oracle MySQL. The flaw lies in the user defined function (UDF). Successful exploitation could allow an attacker to execute arbitrary code."

There's no link to any outside references or a CVE number, or even any specification as to which versions of MySQL are (or aren't) vulnerable.

Scott Pack

@Iszi Haven't you been tracking down this since December?

I seem to recall one of our first conversations being about VA plugins that have no useful references.

AviD

@Iszi I meant, in your chat from yesterday.

Scott Pack

/me sighs

Iszi

@ScottPack Not sure if this is the same one as the one I posted a question on, but we've been investigating it off and on for awhile.

@AviD Ah, no. Nobody replied to that.

AviD

@Iszi no, I seem to remember something about mcaffee.

Scott Pack

6:24 PM

Very important fact people. "BuildRequires: libpcap libpcap-devel libdnet libdnet-devel" is, in fact different from "BuildRequires: libpcap libdnet"

AviD

@Iszi no I meant.. .googling... nevermind sighs

Scott Pack

@AviD Which is why I'm pretty keen on Nessus. I've yet to have a finding that didn't have a useful reference to hand off to the remediater.

Iszi

@ScottPack - I think the one we were looking for before was a "No Translation Available" vulnerability.

Oh, by the way, here's special for you: When configuring a scan, we can search for and/or sort vulnerabilities by description, CVE ID, MS Bulletin, and one or two other options. But, we can't hunt it down by Foundstone's own Vulnerability ID.

Scott Pack

6:38 PM

wtf

Rory Alsop

ello again

Scott Pack

Afternoon pops

Rory Alsop

heh heh - I'm cthulhu

and so's my wife

Oh - @Iszi - excellent edit on the Diablo/internet cafe gaming question

Jeff Ferland

@RoryAlsop @Iszi Agreed.

Rory Alsop

I couldn't see a way to turn it round when I closed it, but now it works:-)

Iszi

6:45 PM

@RoryAlsop Thanks. @Mvy had a hand in that, too.

nealmcb

Another active day here....

@Iszi Kids from a local high school talked about wikiracing at our 10th anniversary party last January in Boulder.

AviD

@JeffFerland @RoryAlsop @Iszi Agreed.

Rory Alsop

evenin @nealmcb

Scott Pack

Good afternoon, @Neal.

nealmcb

Howdy, Rory and Scott!

et al

AviD

6:48 PM

stupid question, is the townie chat now, or in an hour?

nealmcb

@AviD in an hour

14 in the room already....

Rory Alsop

well I figured that way I wouldn't get it wrong:-)

Scott Pack

Is "enrol" acceptable British spelling?

Rory Alsop

yep

Scott Pack

Damn!

Rory Alsop

6:51 PM

heh - why?

AviD

@nealmcb ta

Scott Pack

I saw "Enrol Date" as a field header on a SANS training report.

@nealmcb The event is in a different room.

Iszi

Security Town Hall Chat

meta.security.stackexchange.com/questions/924/…

Scott Pack

Yeah, that.

Jeff Ferland

@Iszi Anybody making wagers on attendance yet?

AviD

6:55 PM

@JeffFerland I'll betcha 50 bucks that I will be there?

or if you prefer, since I still have mod powers, I'm willing to bet you 50 bucks that you won't. ;)

Rory Alsop

hahahahaha

Jeff Ferland

@RebeccaChernoff Care to weigh in on AviD's wager? There's $50 in this for you ;)

Rebecca Chernoff

o:

AviD

@JeffFerland oo no fair bribing the judge!

Rory Alsop

(but clever tactic - reminds me of politicians...)

Rebecca Chernoff

6:58 PM

I'm tempted to bet $100 that neither of you will be in attendance...but since I'm the one organizing it, I probably shouldn't be getting rid of people...

Scott Pack

Speaking of which, will @Neal be validating the integrity of the election for us?

nealmcb

@ScottPack Thanks - I had a note to check on that :)

AviD

@nealmcb @ScottPack yes, I already put in a request for that on meta.

nealmcb

@ScottPack Thanks for thinking of me in that context. If anyone thought it was important enough, I guess my advice would be for SE to interface with Helios to run elections. But that would be less convenient and probably reduce turnout even with great integration, and I would suggest that incorporating more SSL protection would be a higher priority at any rate ;)

user2334

Hey guys, I pinged Rory about a migration in Teachers' Lounge, before being alerted to this fine channel. This question is being requested for migration to IT Sec:

user2334

7:08 PM

1

Q: How does the OWASP project measure as a security standards organization?

I'm a Java EE developer and I was wondering if anybody has had experience with the OWASP Project and could weigh-in as to how it measures up as a security standards organization. They have a huge website with multitudes of documents, sub-projects, frameworks/APIs, etc., and I just want to be sure...

java security industry-standard

user2334

Do you want it?

Iszi

@MarkTrapp Title sounds S&A.

Rory Alsop

I reckon so:-)

the question itself looks alright

a bit waffly but alright

Jeff Ferland

@MarkTrapp Bring it on over; I'll edit it to be less S&A.

user2334

Awesome, incoming!

Rory Alsop

7:09 PM

It will be very easy to answer - we have a lot of OWASP folks here

Jeff Ferland

... or @Iszi will, because he rocks at that.

Rory Alsop

two chapter leaders:-)

@JeffFerland LOL

Jeff Ferland

@RoryAlsop Who is the other one?

AviD

@RoryAlsop yup, i agree. here is the place for it, but its not much a question.

@JeffFerland perfect!

Rory Alsop

@JeffFerland @RoryMcCune is Scotland chapter lead

user2334

7:10 PM

Sent: thanks guys

AviD

@RoryAlsop so isnt that 3?

Stack Exchange

Stack Overflow Blog: SE Podcast #19

Posted by Alex Miller on September 21st, 2011

Everyone’s back in their home towns this week (Sorry for the audio quality last week. It was Joel’s fault [actually, it was TechCrunch's fault]). And joining Jeff & Joel this week is John Sheenhan, Developer Evangelist for Twilio.

Jeff and Joel are bored of board meetings. How do you make them productive or even useful? Brad Feld says you should give out a document beforehand. Joel does this, and nobody reads it, but they at least pretend they did. Maybe Joel should plant money under the attendees’ chairs? …

Rory Alsop

Who is the other one @AviD?

AviD

@RoryAlsop wait, count 'em....

Rory Alsop

thought it was just you and him?

AviD

7:11 PM

arent you one?

ah, no, thats isaca, right?

Rory Alsop

Nah - I'm ISACA pres and IISP chairman, but just involved with OWASP

Iszi

@RoryAlsop But isn't Programmers supposed to be for the S&A stuff and such that doesn't really fit in a regular SE site?

user2334

@Iszi I can answer that: noooooooooooooo

AviD

urggh, sorry, brainfart.

Rory Alsop

It often seems to be that way

but not supposed to be

AviD

7:12 PM

@Iszi slap 'im @MarkTrapp, slap 'im! I'll hold him!

Rory Alsop

@MarkTrapp LOL

AviD

@RoryAlsop it started off that way, but changed COMPLETELY.

I've heard @MarkTrapp whinging about that... ;)

Rory Alsop

heh

user2334

Programmers is for write-board, conceptual stuff related to software development. It was originally SO's toilet bowl, but they changed that song and dance a few weeks in after realizing what a terrible idea that was

Rory Alsop

can imagine!

Jeff Ferland

7:14 PM

@StackExchange Some of us should be a part of #20.

AviD

@JeffFerland oo that would be kewl

Rory Alsop

@AviD:

►

2

Scott Pack

@RoryAlsop The suggestions for that....yowza

Rory Alsop

ta daaaa

AviD

ah, ye be quick on the draw

Rory Alsop

7:19 PM

arrr, that I be

Jeff Ferland

[[topic1]] test

I forgot :(

Scott Pack

[ tag:topic1 ] -- nospace

Rory Alsop

topic#1

Jeff Ferland

Thank you

AviD

@RoryAlsop is there no login button on the blog??

Scott Pack

7:22 PM

security.blogoverflow.com/wp-admin

Rory Alsop

@AviD it's standard wordpress, so you just go to the /wp-admin/ page

AviD

@ScottPack well, yeah, I have that, but I had to search for it...

@RoryAlsop yes, but why is there no link?

Jeff Ferland

@AviD Security through obscurity.

Scott Pack

@AviD Because you're an asshole?

AviD

@ScottPack lol, good answer to anything, goes well with @Iszi's "because I'm not a psychologist"...

Rory Alsop

7:25 PM

@AviD cos it's only admins who should have access, as @Jeff says, it will reduce some attempts

AviD

@ScottPack sounds like my brother...

Jeff Ferland

Do we have anybody in Boston besides @Beth (who has never been in chat anyway)

Rory Alsop

@JeffFerland it's on my list of places to visit next time I'm over that side of the pond

(not helpful, I know)

AviD

I've been there once, visiting at RSA just outside.

okay, @RoryAlsop and all you other regular blogposters.... what is the difference between "tags" and "categories"?

Iszi

@JeffFerland I've probably driven through once or twice.

Jeff Ferland

7:27 PM

@RoryAlsop Let me know when you do puddle-jump and I'll buy you a round.

AviD

and which do I use when, for what?

Rory Alsop

I had a very disappointing visit to NYC years back, and everyone said I would enjoy Boston much more - for the blues bars etc

AviD

@JeffFerland you moving to boston, are ya?

Rory Alsop

@AviD I tend to use them both to try and get greater SEO:-)

@JeffFerland likewise!

@AviD The existing categories seem to cover most blog topics, and as for tags I've sort of used ones that match sec.se in general

that could help folks search

Jeff Ferland

@AviD I live two hours away, and I'm at my company's office in Boston right now. Going to be regularly coming down here to try and get into a larger security community / try to find business.

Rory Alsop

7:29 PM

@JeffFerland Oh - did I send that (very) brief doc to the right email?

Jeff Ferland

@RoryAlsop Yes, thank you.

Iszi

@RoryAlsop So, you're saying the blog has sec.se tags?

AviD

@RoryAlsop hmm... dangit, I'll just ask you to add them when you review my post....

Rory Alsop

@Iszi kind of

Iszi

@RoryAlsop So, you're saying you're into cartoons, rubber, and tags?

Rory Alsop

7:30 PM

but they don't link directly, so it was more to help people a bit

@Iszi hahahahaha

@AviD will do - no worries

Jeff Ferland

@Iszi toe tags?

Rory Alsop

2

Q: How does the OWASP project measure as a security standards organization?

I'm a Java EE developer and I was wondering if anybody has had experience with the OWASP Project and could weigh-in as to how it measures up as a security standards organization. They have a huge website with multitudes of documents, sub-projects, frameworks/APIs, etc., and I just want to be sure...

java

have at it folks!

Iszi

@JeffFerland Now we're giving him a foot fetish, too?

Jeff Ferland

@Iszi No, necro-fetish.

Rory Alsop

@Iszi Well, it's not like you can ever have too many fetishes, is it?

@JeffFerland ooo - maybe it is

Iszi

7:34 PM

Okay, so what it really breaks down to is that he'd be ultimately turned on by a deceased Jessica Rabbit's rubber-socked feet?

2

Rory Alsop

mmmm - Jessica Rabbit:-)

Iszi

@RoryAlsop ...and we're back to boobs of course.

Rory Alsop

sorry - just remembering a cosplay con...

:-)

M'vy

lol

AviD

hokaay, @RoryAlsop - I have two questions:

1. is there any way to link to parts of the same post? e.g. like a ToC?

Scott Pack

7:39 PM

That's one...

AviD

well, I'm reserving #2 depending on the answer...

Iszi

@AviD HTML Anchors?

M'vy

I'm not sure about this.

depends if html works in markdown

AviD

@Iszi ah, futzing around with raw html? echh.

Rory Alsop

haven't tested it - markdown does weird stuff

it messed up @Ninefingers formatting

in draft he had a numbered list, 1 to 5, but on the page it became 1 to 3 and then 1 to 2

AviD

7:41 PM

@RoryAlsop so... nevermind. (its a long post, so figured I'd have hotlinks down to each section... but fuggedabudid).

@RoryAlsop oo, ah yes it did that to me too. hang on...

sorted.

ah, dang it. other crap messed up.

Jeff Ferland

@AviD so it wasn't a stable sort, then? :)

Rory Alsop

@AviD - liking the draft so far. Wish I'd seen Shay's talk - that sounds cool!

Rebecca Chernoff

@RoryAlsop fyi, the chat system will automatically create a sys message for chat events when the event is created by a mod (:

I changed it away from saying 1 hour, since it doesn't start in 1 hour (:

Security Town Hall Chat

meta.security.stackexchange.com/questions/924/…

Scott Pack

Of course, it's also not starting now either

M'vy

Hum town hall session beginning right after nomination closing :P

Rebecca Chernoff

7:46 PM

Join us for the town hall chat!

Rory Alsop

@RebeccaChernoff Cheers - it was an hour back when I created it:-)

Rebecca Chernoff

Bring yer questions!

Gilles

@RebeccaChernoff you didn't make the link clickable

Rebecca Chernoff

@ScottPack close enough to "now" for people to think "join now!"

Scott Pack

/me sighs

I've got 12 minutes and 40 seconds

Rebecca Chernoff

7:47 PM

@Gilles I blame Rory. fixed. (:

Rory Alsop

Messages arrived simultaneously: Security Town Hall Chat and Chat Cast #27....but can we multitask

@RebeccaChernoff not you too!!

Rebecca Chernoff

Convince me to blame someone else. (:

I don't really care who it is as long as it is !me. (:

Rory Alsop

well at least I have my topic#2 so I can cope with that :-)

M'vy

lol

chat cast?

AviD

@RoryAlsop ah yeah. which Shay? there are 2.

so I guess that sorts my #2 question, can you see it and can you please review it... :)

it is a bit wordy, but that was a long, content-filled day.

Rory Alsop

7:54 PM

@AviD Am reviewing it just now. And the Shay doing the race / puzzle attacks

I might have to finish reviewing after the Town Hall chat though :-)

AviD

@RoryAlsop yes, was very interesting.

though for the record, I liked the other Shay's talk too.

thinking about it, I think I enjoyed ALL the talks immensely, except for the keynote...

Rory Alsop

(I hadn't got that far yet:-)

AviD

:)

like I said, wooordyyy.

second only to @Ninefingers' post.

Scott Pack

@RoryAlsop You've still got 4 minutes.

Rory Alsop

@ScottPack quit it, you - I want to give it sufficient attention :-)

(apparently it's quite wordy...)

Scott Pack

7:57 PM

:)

Ninefingers

@AviD what? Where? Who? What've I done?

Rory Alsop

@Ninefingers - you popping over to the town hall chat?

Security Town Hall Chat

meta.security.stackexchange.com/questions/924/…

Ninefingers

@RoryAlsop I am now!

AviD

@Ninefingers write a lot. :)

see?

Ninefingers

@AviD ah yeah, I've been told off for that before.

Rory Alsop

8:05 PM

heh - @Iszi! naughty!

Iszi

@RoryAlsop What I do?

Rory Alsop

(talking in class) :-)

Iszi

@RoryAlsop You gave me a chuckle for calling out @ThomasPornin's rep.

Rory Alsop

heh

Iszi

Come to think... He is our highest-rep user, and yet hasn't nominated himself.

AviD

8:10 PM

@Iszi he's too busy answering crypto questions. Ah, and being a moderator on Cryptography...

Iszi

@RoryAlsop Heh, arbiter...

Rory Alsop

@Iszi what is that from? it's excellent

Iszi

@RoryAlsop First Google Image result for "Arbiter" - you've never played Halo?

Rory Alsop

@Iszi no. I wouldn't spend money on an XBOX:-)

Iszi

@RoryAlsop The original is available for PC also.

Rory Alsop

8:17 PM

ahhh - in that case...

Iszi

But Halo is one of the few reasons I actually will get an XBOX some day.

Rory Alsop

All my consoles were free:-)

2 dreamcasts, PS2, PS3, N64, Megadrive:-)

Iszi

@RoryAlsop Oh?

Rory Alsop

Dreamcasts from friends - used just for Frequency and Amplitude. N64 came with the wife - just for streetfighter

PS2 from a friend

PS3 - won it playing Guitar Hero

Megadrive from a friend

(Just for Sonic)

Thomas Pornin

@Iszi That's because I am monotheist.

Scott Pack

8:24 PM

@AviD There is one user, in particular, on SF that exemplifies the problem in that question :)

Iszi

@ScottPack My thoughts exactly.

AviD

@ScottPack and 2, here.

Scott Pack

I can definitely think of one, though I'm not sure who the second is.

Iszi

@AviD I've got the feeling all three of us are thinking of the same one, but I can't think of the second either.

But I may just not be thinking hard enough, or the username might not be quite so iconic.

AviD

@Iszi he comes and he goes... but no need to do our laundry right now....

AviD

8:54 PM

bites.today.com/_news/2011/09/21/…

Scott Pack

Sounds yummy

Jeff Ferland

@ThomasPornin Should it be me, or something furry like a moose? :)

Security Town Hall Chat

Security Town Hall Chat

Security Town Hall Chat

Transcript for