« first day (628 days earlier)      last day (4550 days later) » 

00:02
That's why once I converted linux clusters to domain controller and windows machines once, because it was easier for staff, and they have migrated from windows 2000 to 2008R2 and are very happy now, and there was no puppet or anything like that involved, windows just worked like a breeze ;-)
also unrealistic expectations, like "fully automated solution" - ppl dont understand tat there is no such thing, it always needs operator
and if it's not included into solution, the operation costs are high
 
2 hours later…
01:44
That is long, even for you.
01:54
@TerryChia Haha. Love his TL;DR section.
 
4 hours later…
05:58
@TerryChia Even I'm having trouble reading it all, and my tl;dr-ness is legendary! *bookmarks for later*
06:26
@polynomial have you heard about arml?
07:02
anybody aware of arml?
07:20
ARML architechture?
nope. I've heard of ARM architecture.
ARML doesn't seem to be a thing.
arm architecture?
oh great but anyway arml is an feautre software where we face the reality through computers
hardware.
it's a processor architecture.
a friend of mine works there, actually.
a large percentage of smartphones, routers, embedded systems, etc. use ARM processors.
augmented reality markup language?
ya exactly
but arml development and processing is slow
i like to discuss few things regading arml if you wish to continue
I haven't looked into it.
just looks like a standardised markup language for translating real objects / locations to information provider resources.
07:31
its an future concept but if its implemented then the security will get down
it's not really a future concept. we're already doing it.
Google Goggles is a good example.
googles is an example?
no, Google Goggles.
it's an app.
basically you point your smartphone camera at something, and Google Goggles identifies it and gives you information about it.
have you used it?
yup
it handles all sorts of things - DVD cases, books, billboards, landmarks, etc.
07:34
does it disturbs privacy of an person
so you could point it at, for example, the Hollywood sign, and it'll bring up a set of resources for you to read
not in the slightest.
it's just a way of identifying objects and places, and mapping information to them.
so if I want to know more about a book, I point the camera at the book, and I can read reviews about it, see other books by the author, load up the author's imdb / wikipedia page, etc.
amazing application i guess
if I point it at a barcode, it tells me what stores nearby have that product in stock (if they provide that info to google), and also how much I can buy it for online
arm and arml is different right?
completely different.
07:36
but when i google for arml it results did you mean arm ?
ARM = Advanced RISC Machine (a processor architecture, and company)
ARML = Augmented Reality Markup Language - openarml.org
but ARML is just a markup language for augmented reality
the real technology and concept is augmented reality.
is it like c,c++ an language?
it's a markup language like HTML.
C++ is a programming language. completely different.
markup = a way of formatting and displaying content
programming = a way of representing a function or task
Augmented reality (AR) is a live, direct or indirect, view of a physical, real-world environment whose elements are augmented by computer-generated sensory input such as sound, video, graphics or GPS data. It is related to a more general concept called mediated reality, in which a view of reality is modified (possibly even diminished rather than augmented) by a computer. As a result, the technology functions by enhancing one’s current perception of reality. By contrast, virtual reality replaces the real world with a simulated one. Augmentation is conventionally in real-time and in se...
ok another thing when i read about your profile i find the word "bacon aficionado." what does it represents?
AR is actually quite a mature field.
lol
07:40
lol does it represent?
bacon aficionado.?
i cant understand bacon aficionado. what is it,
"A person who likes, knows about, and appreciates bacon"
it's a joke. I just really like bacon :P
anyway, time to get some work done!
laters .o/~
sure see you later
i ll wait for your arrival
@avid hello
@avid have you heard about arml?
08:38
0
Q: How can an admin choose which Snort rules to enable?

pnpThe purpose is to configure Snort as an IDS to monitor network activity, and alert against the standard set of things an IDS should alert against buffer overflow attacks, injection attacks, port scans & information leaks to name a few, or in general, the attempts to detect/exploit vulnerabili...

Overly broad perhaps?
nah, it's not a bad question.
it's asking how to decide, rather than "what rules should I enable?"
which is the right way to do it.
@vignesh no.
well, just now.
@AviD Read up. ARML itself is pretty dull, but AR as a field is cool.
@Polynomial yeah, heard of that.
not well enough to say much intelligent on it, except maybe to do a security analysis on the feature :)
08:52
Hey there!
hyea @M'vy
How are you?
alls good
morning folks
morning @M'vy @RoryAlsop
09:05
@Polynomial bacon guru!
Hi @Terry
@Polynomial - a lot of what I used to do in a previous life was an augmented reality precursor, with haptic force-feedback gloves, stereoscopic projection etc
And this was 16 years ago
cool.
yeah, it's a very mature field.
loads of military funding, too. I mean, look what they did with the Apache helicopters back in the 80s.
Did you see the Google Glass advert?
the AH-64D was made in the 90s, and look at all the crazy shit it can do - image recognition, target identification, automatic prioritisation, look-to-aim, AR HUD, etc.
@RoryAlsop that's pretty awesome.
09:11
Would love to have a shot in one - have been in a few helicopters, both military and civilian and I just love the combination of gadgetry and robustness
I've never been in a military helicopter, but I've been in a few civilian ones.
been in a FV4201 Chieftain tank though
@Polynomial the advantages of having a military helicopter pilot for a brother :-)
@Polynomial nice
that was awesome. they're outdated as hell these days, but they're still beasts
was it driving over stuff?
my dad used to work in the local MOD when he was in his late teens
nah lol
09:15
I have heard the engines when I saw one at a display, but never been closer than about 50 feet
he used to fix and calibrate the electronic tracking and traction systems in them
@Polynomial cool
he used to point the main gun at his boss's car, and drive around to check that it stayed pointed at the car
My dad and brother both ex fleet air arm, so got to go on various ships, subs, planes and choppers. Great fun as kids :-)
but yeah, they're ridiculously loud.
and hot
and rattly.
it's like being sat in an oven in an earthquake.
they can motor though. 30mph+
09:35
good noon to all
@vignesh happy diurnal isomorphism
@RoryAlsop diurnal isomorphism?
09:50
@Polynomial "been in one"? That's lame. I used to drive one.
well, not a cheiftan, but still lots of fun to make it growl.
what does diurnal isomorphism means?
google tells it blahblahah
@vignesh see this entry:
9
A: The Memes of IT Security

Scott PackMeme: Canonical Time Zone Originator: Unknown Cultural Height: Early 2011 Background: American hubris on the part of our East cost users resulted in blanket declarations that EDT/EST (UTC-4/5) would be considered the de facto timezone of The DMZ. This was brought upon by inconsistent time of d...

@RoryAlsop i got it now thanks
i learn new words everywhere today
i watched google glass video posted by you
and have one doubt on it
have a look at this video too youtube.com/watch?v=01S1BbeJ-ik
09:56
it doesn't exist, btw. just a promo video for what they'd like to be able to do one day.
amazing hope to get it soon in near future
@Polynomial you mentioned in your profile reverse engineering is it possible to reverse enginner an .ipa file?
sure. you need to have the app that opens it though.
and a way of debugging it.
You can reverse engineer anything - would advise practicing on very simple files first :-)
internet an google suggested me to open the ipa file in winzip but it doesnt helped me to reverse enginner
does reverse engineer and decompilation diffrent?
I'll leave this one to @RoryAlsop - I've got work to do.
10:03
@Polynomial thanks hope to see you soon
@RoryAlsop i guess your turn
decompiling is specific to a compiled application
reverse engineering is working backwards from an end executable or file and working out what it is / does
ok then
although all these terms are best looked up on wikipedia/dictionary sites etc - they will explain better
thanks rory
maybe i need to clarify basics first before asking here
3
@vignesh it could help
10:11
whom won the moderator post of security.se?
@vignesh Jeff Ferland - the meta section of the site has a lot of this sort of information:
12
Q: 2012 Community Moderator Election Results

Shog9IT Security's second moderator election has come to a close, the votes have been tallied, and the new moderator is: He'll be joining the existing crew shortly — please thank him for volunteering, and share your assistance and advice as he learns the ropes!

@vignesh and "who" was correct, not "whom"
:-)
@RoryAlsop why they upvoted results,usually upvote shows research effort but i cant understand why they upvoted
@vignesh which?
In meta upvotes and downvotes mean different things
@vignesh on meta an upvote just means someone agrees with the post.
upvote there means agreement, downvote means disagreement
10:24
yup
you don't get rep on meta
@vignesh - on every site there is a faq, which you need to read as it has specifics for every site (and meta site)
eg for meta security - meta.security.stackexchange.com/faq
ok thanks for clarification
when i read over internet one site claimed that they hacked google once zone-h.net/mirror/id/8874122
Most online sites have been hacked at least once - it is not surprising. The important thing is how organisations minimise the damage and continue with business
does se have any history like this?
don't know, to be honest :-)
but this is why OpenID is useful - reduces the risk of compromise
10:38
@RoryAlsop @JeffAttwood blogged about an incident where his account was hijacked :)
@AviD on SE? Didn't see that - will look later
really?
and there have been a few vulnerability disclosures, though I dont know about any other incidents of exploit
@vignesh - we do keep discussing the benefits of https for SE, and it may happen eventually
in this case, as he discloses quite honestly, someone discovered his password.
shocking.
10:40
@AviD - you were a tank driver? Cool!
@RoryAlsop actually was mobile artillery - but I did the first part of training on an empty tank hull
still, pretty awsome tossing one of those around the hills...
one of these babies:
The M107 175 mm self-propelled gun was used by the U.S. Army from the early 1960s through to the late 1970s. It was part of a family of self-propelled artillery that also included the M110 and was intended to provide long-range fire support in an air-transportable system. It was exported to several other countries including Germany, South Korea, Spain, Greece, Iran, Israel, Italy, the Netherlands, the United Kingdom, and Turkey. The M107's combat history in U.S. service was limited to the Vietnam War and also saw extensive combat use in Israeli service. The M107 was the last self-pr...
@AviD did it involved staples and horses?
3
hehehe, funny that the pic they chose happens to be an israeli one... :D
@AviD I have wanted to have a shot in one ever since this Top Gear episode:
@M'vy haha
10:43
@M'vy nails and unicorns, actually.
2
@RoryAlsop naw, you cant compare the two, at least not on road.
@M'vy hows your research going on?
off road, well the rover has no chance.
hell, having been in a Hummer off road, it barely comes close too.
@vignesh Fine, I should defend my Ph.D in a couple of month
@M'vy Artillery could help with that.
2
10:44
@AviD As could lasers!
@Polynomial bears driving tanks with lazers on their heads!
2
@AviD President, meet M107, my new friend.
@Polynomial I got my Arqade swag T-shirt, would it be sufficient?
Israeli army doesnt have them anymore, though.
pretty rough machinery.
and DAMN was it loud.
israel were ranked top in developing missiles
@AviD this was off road :-)
10:47
(ugh, 1sec)
@RoryAlsop offroad, like boulders and and untouched mountains? Or simple dirt non-roads.
@AviD mud, slopes, open moorland etc
you need to watch the video, and the sequel
not familiar with the Challenger. IDF mostly was based on US machines (and their own developments, of course)
is fun
10:49
@Polynomial luvvit!
@Polynomial oh, I don't get to see that image at work
@RoryAlsop it is awesome
@RoryAlsop is there an image host you can reach? I'll upload it.
that one's on imgur
ahaha, the 2nd part of the video is brilliant
:P
"Yeah, you're pretty much fucked."
10:54
@Polynomial hmmm - most are blocked. I'll see it later on this eve.
@RoryAlsop lol, k
how to upload videos here
Is there any character length where randomly generated passwords hashed with MD5 can be considered reasonably secure against bruteforcing attempts?
@RoryAlsop love this line: "It's really a great car, but if you're planning on invading another country - use a tank."
@vignesh you can't, you just pop the link to youtube on its own line, the way I did, and the chat system oneboxes it
10:58
always a good idea, really.
@AviD yup
@RoryAlsop so there were some manouvers I wouldnt have been able to do.
gun was too big.
amused me when he was oohing about how big the gun is. it's a miniture.
@Polynomial Only @ThomasPornin can summon that
@AviD miniature? Jeez :-)
@RoryAlsop aha
I had the biggest barrel in the army :)
11:01
hahahahahahaha
even had an article in the army magazine say as much.
@AviD pictures or it didn't happen :-)
@RoryAlsop wiki link has pictures...
and of course, I do have some of me standing in strategic positions... oh those young kids.
could literally fit the entire tank barrel inside the one I had.
it was 175mm. and looong.
couldnt go downhill straight, we'd ram the ground.
@AviD size matters not... oh well, sometimes it does.
@M'vy hehe, well, the boom was bigger too, if that matters.
i've heard of newbie tankers that panicked when inside their tank - they thought someone was bombing them, but it was just us, in the next station over.
11:05
any of the famous hackers list you knew?
 
2 hours later…
12:39
Interesting, I've got to teach InfoSec class this year.
Anyone else think this...
0
Q: Is there any (sane) reason to separate an RFID chip from an ID badge?

Wayne WernerThis seems to be a question that blurs the line between physical and IT security, but I'm hoping it's relevant enough! In order to meet with PCI standards, our company recently switched from an open door with after-hours hand scanner, to an RFID+Security badge system. I was just informed today ...

...might be duplicate of this...
Mmm, bacon.
5
Q: What are the risk tradeoffs of all-in-one "smart" IDs vs. using a separate hardware authenticator?

IsziIn many organizations these days, employee IDs are very mutli-functional. They can serve as: Visual identitiy verification. (Including employee photo, name, ID number, and other details on the face) Building access control. (Via RFID, prox card, bar code, magnetic strip, or smart chip) Compu...

Re-reading, it looks like they're kind of similar, but not quite duplicate...
Up awfully early, aren't we @Jeff?
@ScottPack Yes indeed.
12:42
@TerryChia Yes.
Town hall chat early
Any particular reason?
Nope. Insomnia. I set my alarm for 7, woke up at 4:45 or so.
Ew. That's pretty terrible.
@JeffFerland does se has any hacking history?
12:47
@vignesh I wouldn't know. Moderator, not employee.
@vignesh Not too terribly long ago the blog was compromised. Much like what the other guys already told you, I've never heard of any of the sites themselves being compromised.
is there any discussions going on https for se?
@vignesh I can't remember where it was, but somewhere some founder explained why they don't.
31
Q: Better HTTPS support for Stack Exchange sites

NullUserException อ_อSo it looks like Stack Exchange now supports HTTPS (to some extent). Which is awesome! But there are a few problems: The certificate is for *.stackexchange.com, which causes browsers to throw all kinds of ugly errors when you access a different domain, eg: https://stackoverflow.com https://su...

2
From my memory their reasons are two-fold:
1. They don't see a purpose in providing SSL encryption for data that is considered public.
2. Enabling encryption is too computationally expensive for the hardware.
@ScottPack Didn't Google debunk that awhile ago?
12:53
You know this. I know this. Everybody who understands information security knows this.
And yes.
morning @Jeff
@RoryAlsop Good morning
On another topic... did I miss some fun over the long weekend or something? Samples from the sidebar:

"Did it involved staples and horses?" - M'vy
"I had the biggest barrel in the army :)" - AviD
"Gun was too big." - AviD
"Bears driving tanks with lazers on their heads!" - AviD
"Artillery could help with that." - AviD
"Nails and unicorns, actually." - Polynomial
heh heh heh
@AviD very nice!
Just this morning @Iszi
12:58
@Iszi Yup, just today :P
or whatever meta-time suits you

« first day (628 days earlier)      last day (4550 days later) »