Actually, looking to get something like this. I'm still not totally a fan of 4-bangers, but it'll do the job for now. And, the wife can always have it whenever I can afford to get something with a V8 under the hood later on.
@LucasKauffman not too bad, most of the time - but when there is a clash, the one that pays the bills has to come first. This will become a challenge if the band ever hits the big time :-)
How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering.
I'd like to see details in terms of:
A high level description of the protocol.
How the key exchange works.
How authenticity, integrity and confidentiality are enforced.
What t...
It was one of those interesting things - I had ordered a conf pack (following these instructions: meta.security.stackexchange.com/a/677/485) and then my company had failed to give me time to go, so I ended up doling out that swag at 4 different events...often @RoryM helped out (I'm very grateful - and also jealous as he gets to go to more cons than me)
As Mikko Hypponen highlighted in a recent tweet, anti-Virus companies collect and store both samples of malicious software and samples of legitimate software:
https://twitter.com/mikko/status/25145612256373964
This got me to thinking, what differentiates that from software piracy?
If I downl...
@AndreyBotalov I rolled back your edit to that certifications question. It completely changed the question - whilst it made it on topic, it's up to the author to decide what their question is.
@AndreyBotalov and @Polynomial - I think the question itself was just very broad so have closed and pointed the guy at some questions we already have that may be useful
@AndreyBotalov Because he didn't ask about security, he asked about IT.
your clarification changed the subject of the question, with the assumption that he was talking about security - but there's no actual evidence that he was talking about that.
Community member Iszi nominated this week’s question, which asks for an explanation of the issue from the perspective of a developer/engineer: What is exactly being exploited and why does it work?
Polynomial provided the following detailed, technical answer:
CVE-2012-4969, aka the latest IE 0-day, is a based on a use-after-free bug in IE’s rendering engine. A use-after-free occurs when a dynamically allocated block of memory is used after it has been disposed of (i.e. freed). Such a bug can be exploited by creating a situation where an internal structure contains pointers to sensitiv …
I just got my hands on a voucher for an online bookstore. Any one has any recommendations for interesting technical books to pick up? I would like to get some reading done during my last month of holidays.
@TerryChia Rootkit Arsenal by Bill Blunden, Windows Internals 6th Edition (parts 1 & 2) by Mark Russinovich, Reversing: Secrets of Reverse Engineering by Eldad Eilam, The Shellcoder's Handbook by Chris Anley, Malware Analyst's Cookbook (with DVD) by Steven Adair, Liars and Outliers by Bruce Schneier.
yeah, L&O is basically about how most of society functions in terms of an implicit trust model, and the explicit controls we put in place to enforce standards on people who don't fit into the normal societal model
he gives a great example of having a plumber come to his house - he trusted that the plumber would do a good job, was who he said he was, wouldn't try to steal from him or rob him, etc.
and the plumber had implicit trust in Bruce not to kill him, steal his tools, etc.
@AviD Yeah, it was awesome. Left a talk, glanced left briefly, and Bruce was just standing there. I was like "That's... that's Bruce Schneier. That's actually him. Holy shit!"
One thing did surprise me - he's incredibly short.
btw @TerryChia was also going to say (before we got sidetracked on The Bruce), you could also go for some of the classics in the IT field.
Things like the Mythical Man Month (though it usually gets overquoted out of context...), Code Complete (if you're into coding), Peopleware (I'm still shocked when there are managers who haven't read it.)
I support the IT infrastructure for a small retail business which is now required to undergo a PCI-DSS assessment. The payment service and terminal provider (Streamline) has asked that we use Trustwave to do the PCI-DSS certification.
The problem I face is that if I answer all questions and foll...
@LucasKauffman nmap is a active port scanner. I remember coming across some passive port scanners (doesn't send packets) but i forgot what it was called.
@LucasKauffman well I wouldn't have minded if I'd gone to the workshop 'cause that was meant to be about beer but tbh I was a bit narked that I'd picked a talk that got changed with no notice...
@LucasKauffman nah didn't make it along to the party (never been a huge fan of loud places and now I'm getting old ;op) me and the missus just went out and got some dinner and had a wander round ghent.
still here at the moment went to Brugge today and going to either Leuven or Antwerp tomorrw.
really didn't know you're from there. We're planning tomorrow and the idea was either to go to antwerp or Leuven, not finalised which one yet but it'll be tomorrow
quite like historic stuff (thus Brugge today) so Leuven might be a good bet
cool, yeah any pointers are great we tend to wander round looking at the interesting buildings (glad I have decent roaming data, it's real easy to get lost!)
@LucasKauffman well in comparison to scottish trains... not so much. We did make the mistake of getting an L train from the airport which was pretty slow, but it was IC trains to Brugge today and were pretty ok..
@RoryMcCune : Leuven station -> Martelaren plein Stadhuis of Leuven St. Michielskerk of leuven Begijnhof, Leuven Hortus Botanicus Lovaniensis oude markt
Hortus Botanicus is a park with lots of different plants
the oude markt is where to get the beer
oh and add the American Library
if you are lucky they might even be playing during the day in the old clock tower
@Gilles I think I got them from an uncle of mine (who has a PhD in political sciences, so I tend to trust him on these matters). It was a few years ago but I don't think it changed much since.
How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering.
I'd like to see details in terms of:
A high level description of the protocol.
How the key exchange works.
How authenticity, integrity and confidentiality are enforced.
What t...
As Mikko Hypponen highlighted in a recent tweet, anti-Virus companies collect and store both samples of malicious software and samples of legitimate software:
https://twitter.com/mikko/status/25145612256373964
This got me to thinking, what differentiates that from software piracy?
If I downl...
