The DMZ

@makerofthings7 That.....that is fantastic.

2:17 AM

... here is a link for those who want to see the archive: security.stackexchange.com/review/suggested-edits/4192

Gilles

3:08 AM

@makerofthings7 misspelled its. Instant rejection.

@makerofthings7 So why didn't you reject it?

4:04 AM

@ScottPack I thought rejecting it would make it disappear.. I wanted to share it before doing that... (apparently it will never get deleted!)

Stack Exchange

5:26 AM

9:55 AM

Morning all

13

A: The Memes of IT Security

Meme: Canonical Time Zone Originator: Unknown Cultural Height: Early 2011 Background: American hubris on the part of our East cost users resulted in blanket declarations that EDT/EST (UTC-4/5) would be considered the de facto timezone of The DMZ. This was brought upon by inconsistent time of d...

10:15 AM

of course, you realise that I'm going to continue this now, just out of spite :)

@ColinCassidy of course, you realise that as @ScottPack, the room owner, is emotionally invested in the CTZ, he might just choose to kick you from the room ;-)

@AviD well I have at least 4-5 hours to enjoy this small act of rebellion

hehe

12:20 PM

@ColinCassidy Lucky for you it was morning when you said that.

1:32 PM

Hello people

What is the deal with the "Web of trust discussion room" ?

Que?

@ScottPack chat.stackexchange.com/rooms/6934

It is referenced from the main page of sec.SE, just below the DMZ.

Guess that guy who talked about WoT a few days ago made it

Not exactly a lot of chatter in there.

I think it was a failed attempt to move the discussion out of DMZ

1:39 PM

@CodesInChaos Pshaw. I think he didnt want to interrupt our intense discussions of baconkinis and zumba, with boring ol' security talk.

zumbaconkini! That's when you do zumba whilst wearing a baconkini.

2

And, from what I hear, you'll have fully cooked bacon at the end of it. Brilliant!

I think the problem is that some here were a bit harsh, because it was slightly misguided

Zumba?

@CodesInChaos "a bit harsh"? "slightly misguided"? Dang, we must be out of shape.

@ScottPack I think he might mean the wearable bacon.

@AviD It would be awful greasy.

@AviD Want a fun few minutes? serverfault.com/q/464118/3356

Only one answer a a fistful of comments.

1:45 PM

oh wow.

The actual question wasn't actually that bad

I like your snark.

Very subtle.

@CodesInChaos um, yeah it was. "I know its okay! Why do I need the webserver to tell me?"

@CodesInChaos No, it wasn't, and Michael answered it quite well, I thought. It was the dude's attitude that made it.

@AviD His question was more about the format of the return values.

@AviD That is, why give both the status code and the short text that describes the status code?

@ScottPack the Code + description. I know. I think thats a stupid question.

Everybody knows that 200 is OK and 404 is file not found. So why those stupid strings?

1:47 PM

@ScottPack Because people.

Engineers tend to forget that sometimes its a person using the computer.

But browser could generate error message

@AviD I think that's exactly the kind of question somebody needs to ask when they're trying to learn the spec and/or how to design things.

@CodesInChaos besides, there are some ambiguous codes, that allow for custom texts.

And if you don't know http error codes by heart, why are you using a computer?

@CodesInChaos It is... a good question, actually. The HTTP protocol itself is text-based so that it is easy to debug implementations with some telnet

1:48 PM

The answer is simple, but it's a good question.

@CodesInChaos heh, exactly.

still it's voted -6

This "description" is meant for people who do not grasp the "200" or "404"

If he had come up with the question himself it would have indicated the presence of thought for him to ask why as opposed to sticking to "how".

@CodesInChaos oh wait, -7.

1:49 PM

these people should not be debugging HTTP server implementations with a telnet

@ThomasPornin That's why I use netcat.

@ThomasPornin right, its not a binary protocol. If you're worried about some "redundant" text for readable to humans, shut up and go back to the previous sentence.

Many servers won't work with telnet nowadays

they close the connection because you can't type fast enough

I think the historical answer is that the "description" field was added for the error codes (so that a code "500" can be adorned with a more precise description or the error). Once the "description" was added in the syntax, it was simpler to add it "generically", i.e. for all return codes, not just those which need additional information.

@ThomasPornin okay, but do even you know aaalll the codes?

1:51 PM

@CodesInChaos Ah ! They close because you can't type fast enough !

better a consistent protocol, with some redundancy in some cases, than the alternative.

@AviD It is not necessary to know the codes; it is sufficient to know where to look them up should the need arise (i.e. while debugging server and client implementations).

List of HTTP status codes

@AviD I know all the status codes, it's easy.

The following is a list of Hypertext Transfer Protocol (HTTP) response status codes. This includes codes from IETF internet standards as well as other IETF RFCs, other specifications and some additional commonly used codes. The first digit of the status code specifies one of five classes of response; the bare minimum for an HTTP client is that it recognises these five classes. The phrases used are the standard examples, but any human-readable alternative can be provided. Unless otherwise stated, the status code is part of the HTTP/1.1 standard (RFC 2616). The Internet Assigned Numbers Au...

hey! no fair using extension brains!

@ThomasPornin well, of course, but thats not the point.

This one is an abbreviated list, but may be more interesting to you, @AviD.

thinkgeek.com/product/6792

1:53 PM

much like XML, HTTP is ostensibly "human-readable", whatever that means.

@ScottPack lol

@AviD I believe it means the opposite

@AviD FYI: Customer Actions Shots may be not work safe.

Status 413 all the time!!

@AviD It is not human-readable, it is engineer-readable. That's different.

@ThomasPornin ah, but engineers dont need the descriptions...

1:55 PM

@ScottPack They should make 404 HTTP briefs as a gag gift.

And it would be a stretch to identify engineers as human.

4

@AviD ... which is why the question is actually (slightly) interesting.

@Iszi Aw snap.

@ScottPack Yep, why not give them the right to vote, or consider they have emotions, while you're at it ?

@AviD Again, the reason the question is interesting is because it has nothing to do with technology as much as it has to do with understanding design decisions and considerations. It's a why, not a how.

1:57 PM

Most interesting questions about technology are about the "why"

once you understand the "why", the "how" usually becomes trivial

@ThomasPornin Condescension is singular, so they feel emotion, not emotions.

@ThomasPornin So, you're saying the question is, since Engineers know the meaning of all the codes by heart (or can easily find them), and Normal people have no use for the codes OR the description, who is the description for?

No good, you forget the protocol was designed by Engineers, who dont know anything about Normals (or recognize their relevance).

(Or existance).

Any idiot can read an RFC and understand how it's supposed to work. It takes creative thought and breaking out of boxes to read an RFC and understand why the authors chose to do it that way.

@ScottPack There are spite and bitterness, too. These are necessary for good engineering.

@ThomasPornin Accepted.

2:00 PM

Snarkiness, though, is to be reserved for writing standards, where it deploys its full power.

@ThomasPornin and a healthy dose of cynicism

@ThomasPornin I wouldn't consider snark an emotion so much as a form of communication.

2

It's the third voice in English writing: 1) Active, 2) Passive, 3) Snark

4

Snark is the new star. Any time someone explicitly discusses the snark, it gets starred.

6

@ScottPack Hey, reading an entire RFC isn't that easy. It's incredibly boring.

@AviD snark

@TerryChia And look how many people have slogged through Twilight and 50 Shades of Grey.

2:03 PM

@ScottPack well, as always, porn sells.

even softcore.

2:20 PM

I really like it: disk is full, hence database jobs fail -- including the job which deletes old objects: apparently, it cannot delete objects until I give him an extra 600 MBytes to play with.

For some reason, SQL Server Management Studio has a task called "shrink database" which finds 2 GB when I run it. Why doesn't it run automatically when the disk is full ? I suppose it is so that DBA keep on their job.

(Or, in my case, so that I can keep on complaining about the lack of any DBA in these parts.)

Either of those explanations is plausible.

It might, however, have to do with the fact that the database is unavailable during the time that it is being shrunk; this process might take a long time.

So I'm guessing the MS SQL dev team took a radical decision to prefer availability over cheap storage disks.

@AviD Yeah, but when the disk is full, the database is not exactly "available" either...

Disks should never be full.

I dont even know what that means??

I told that to my disk, but it turned a deaf ear on me.

how could a disk be full?

2:30 PM

This is a virtual machine which has been vastly underspecified by bean counters.

I have a 10 GB disk for my database.

should be enough, as long as you dont put a lot of data in it.

Arguably, it was not obvious at first that storing the name and birth date of a user would use an average space of more than 300 kilobytes per user.

This has got to be the coolest charity ever. Or, at least, the coolest one I've discovered recently.

childsplaycharity.org

@AviD Just when I thought I'd gotten my mind off of baconkinis, I see this in the sidebar. Thanks. Ummm.... I'll BRB.

@AviD hahahaha

@ThomasPornin perhaps the user lives in Scotland. You know what the places are called there.

2:37 PM

@AviD Ah yes. Not like Wales, where village names are also very long, but they don't write the vowels, so it turns out all right.

@AviD dunno whit ye mean. We have short place names here, like "Ae" :-)

@RoryAlsop Yeah, but what does it become when you try to pronounce it after having paid your respects to the gods of Scotch ?

@ThomasPornin "Smmmmmeeeergggghhhhhhhhhh"

Q: How should I deal with an employee sleeping with my wife?

3:07 PM

woah - Workplace SE is a more depressing place than here...

6

I'm the owner of a small business consisting of about 30-40 employees. Recently I found out that one of the programmers I have working for me, have been having an affair with my wife. I feel very betrayed. My wife - we've been together for about 15 years, high school sweethearts, mother of my ...

coughs

@ScottPack heh

I should point out that I was not directly involved.

@ScottPack thank goodness for that

Tell me about it. Stud.

3:13 PM

had an even more complicated one at a previous employer - but that would require being off the record to discuss.

and wasn't me! (just before you say anything :-)

Understood.

@RoryAlsop okay, we're off the record.

We really want to hear about this.

The continuously on-the-record aspect of this medium is a bit annoying.

@AviD hahahahahaha - I love that from online apps

@AviD beers/tel aviv/march

Too bad we exist across at least 3 continents.

3:15 PM

@RoryAlsop hahaha, excellent.

I see you're already planning to make that visit a tawdry one.

@AviD oh, sorry - were there alternatives :-)

haha, no, I guess not.

I'm not going to sleep with you, though.

@AviD fair enough

@AviD hey don't speak so soon. you never know what might happen after a few drinks. ;)

4

hmm, too much boston legal, I think.

3:18 PM

this was a question in a survey from the police

the next question was 'Have you ever been caught speeding?'

I laughed so much

...sure its anonymous, honest

@RoryAlsop bzzzt. you've just been caught.

@RoryAlsop anonymous survey?

it is funny when you answer 'Never' to this one and then 'Yes' to the next :-)

@TerryChia apparently - it's to get public opinion on speed cameras etc

3:30 PM

Woah:

►

Mind - blown!

@RoryAlsop Loving the Numberphile, eh?

definitely - therre are a couple which push my maths a bit far though

@RoryAlsop Yeah. I've become rather useless at maths since high school. Learning up on the concepts presented in Numberphile has helped fix that some, but I still don't quite get stuff like i.

3:46 PM

@Iszi i is very useful when doing Electronic Engineering - impedance only makes sense using i

EE math really fucked with me.

I remember spending a couple of hours trying to get the math to work out on a reverse Fourier transform before being told, "Oh, you just drop the imaginary component. Don't worry about it."

@ScottPack hahahaha - brilliant

Fourier Transforms were always a struggle for me, as the actual concept is fine in my head, but the maths just never felt natural

@Iszi That is a great charity idea! I love it!

The Engineering school requires all graduate students to have so many hours of graduate work from outside of their area. So here I was taking Master's level Electrical Engineering courses with zero EE background and only shakey math.

@makerofthings7 Found it via Arqade Community Ads.

3:53 PM

Anyone else getting error messages on the site?

@TerryChia yep - everywhere

@TerryChia Devops.

reckon Marc Gravell killed it

heh

he had this post about internal .NET errors

3:54 PM

So there's an exception which resulted in displaying the exception generation page which resulted in an exception?

@ScottPack pretty good, huh

@ScottPack exception-tion.

@RoryAlsop I think I'd go so far as to call it exception-al.

instantrimshot.com/index.php?sound=rimshot&play=true

ahh it's back up.

4:05 PM

@makerofthings7 @Iszi my wife used to work at a child development center (yknow, occupational therapy, speech therapy, etc.) One of the unique things they had there was a toy library - toys and games picked out (mostly for educational aspects), and the therapied kids could borrow the toys and games.

@TerryChia that's what she said!

@AviD Heh. I was trying to put together a "little blue pill" related punch-line, but that is so much more effective. Don't know why I didn't think of it first.

@Iszi Or fluffing.

always go first for the classic, dont worry about the fancy.

@AviD That's what she said... never.

I dunno, conflating two memes? Hurts my head.

4:11 PM

@AviD Hopefully it was more fun than the educational games I saw at a CDC running on a TI-99/4A

@makerofthings7 oh absolutely. I wouldnt call them "educational games" (which are usually boring) but games with some educational value.

For example, I could imagine them having Operation (though I dont think they did), because it has value for kids that need to train their fine dexterity.

On the other hand, I dont think they had Settlers of Cattan, I'm not sure that would be useful.

we would borrow kids games all the time.

it was great - we only had the game for a couple weeks at a time, so the kids didnt get bored with it - then a few weeks later, brand new game!

I've started introducing the kid to Carcassonne, but less as a competition and more as a collaborative tile-matching building game.

I have a friend who kinda collects board games.

we were introduced to quite a many different, unexpected games.

that said, I dont quite remember carcassone, but I've definitely played it.

@AviD I had more fun with it than I did Settlers, though it was also fun.

@AviD That really reminded me of that one TBBT episode.

4:18 PM

@AviD What age range was this CDC?

@TerryChia that one when they sit around playing games?

I just scanned through the top 100 games ever and only recognize a few gamesradar.com/best-games-ever

@AviD Because the one mine goes to is 6month-~5/6 years.

@ScottPack me no cdc, that was @maker

@AviD yeah, it was sheldon, howard and raj. there were a lot of bad puns going around.

4:19 PM

ah wait, just got what you were saying

15 mins ago, by AviD

@makerofthings7 @Iszi my wife used to work at a child development center (yknow, occupational therapy, speech therapy, etc.) One of the unique things they had there was a toy library - toys and games picked out (mostly for educational aspects), and the therapied kids could borrow the toys and games.

I know they've had newborns there (days old), up to early teens.

@ScottPack umm, yeah, didnt catch CDC == child development center :$

a lot of these therapies are almost completely paid for by the medicare equivalent, up till age 9.

@AviD Ah, ok. Ours is a curriculum based (using the Reggio Emilia approach) child care for 6 months up through pre-school, so they leave it and go to kindergarten.

@AviD Overloaded terms confused me.

was gonna say, I think we're talking about different things.

I'm talking about things like occupational therapy, speech therapy, etc.

semi-medical stuff.

@AviD Most of the time when I see the phrase 'child development center' here it's used to describe a day-care equivalency that follows an educational model of some sort.

4:24 PM

they aim to provide all the therapies a messed-up kid would need - including emotional and such.

they even had art therapy.

Wow. Security FAIL

@AviD I'm sure those exist, but I'm having trouble thinking of any off-hand so I could come up with equivalent language.

The acronym CDC is quite overloaded. Glad no one confused that with the Canadian Dairy Commission acronyms.thefreedictionary.com/CDC

non-medical children's clinic?

anyone in the room can help me regarding controls and audits question?

pls echo me

4:33 PM

@user970533 Probably depends on what standards.

Iszi I appreciate your response I got the whole details here. Wait

@makerofthings7 A good number of those are Flash games. Sort-of odd. Really happy to see the Mass Effect series made top 10.

Q: How to define audit controls responsibility? @ SIEM

0

I'm assigned to write procedural documentation for the SIEM use cases for the IT asset owners. For example, the procedures for selecting events indicating unauthorized access to user-mail box. I have researched the problem and found corresponding Events Id associated with this event. This is th...

compliance audit

@user970533 This one is an interesting question - based on most of the clients I work with, I would tend to agree with your position, but the one thing you can say for sure is: there are no hard and fast rules:-)

@Iszi So it looks like I've heard of 38 of those games and played 22 of them. It made me happy to see some of my all times favorites so high on the list.

4:39 PM

@user970533 See my comment. Also, without any particular regulatory requirement, or at least a C-level approved/mandated standard, it's not likely you'll be able to get anything changed and whining about it just wouldn't look good.

@RoryAlsop Indeed. So much of the responsibilities depends heavily on your own organizational structure and how each department is scoped/chartered/whatever.

@rory-alsop hey nice seeing you here. Usually you are fast replying to my threads I didn't knew you were busy here. I'm glad to get your opinion on the matter

I mean is it a best case for a soc analyst to take the task of ensuring system baseline configurations conformance?

@ScottPack The 22 being a sub-set of the 38? I'm not sure what my count would be (didn't take time to read most details, let alone tally the count), but I was really happy to see some entries make it. (i.e.: Skyrim, Deus Ex, aforementioned Mass Effect). However, given the rules set forth in their introduction, I'm not quite clear on why Portal and Portal 2 got separate mentions.

@Iszi Yes, I had heard of a total of 38 games on that list (counting titles not series) and had played 22 of those.

@Iszi Yeah, the gameplay for the two isn't really all that different. Portal was, from where I'm sitting, pretty revolutionary. Portal 2 did a great job of improving the model, and was a much funner and more enchanting game, but wasn't that grand a leap ahead.

@ScottPack Though I've got to give them credit for multiplayer. They did a real good job on that, especially with enabling effective comms without voice/text.

4:45 PM

@Iszi I haven't played multiplayer on it yet.

(And having Steam multiplayer be cross-platform is fairly awesome, too.)

@ScottPack We should do that sometime. Do I have you in my friends list on Steam?

@user970533 Generally accepted good practice is: Compliance/Reg team set their requirements; IT implement controls based on Sec guidance; Audit confirm those controls were implemented effectively

I was completely drawn into the storyline of Portal 2. Very well done, I thought.

Business and reg decisions should not be held in IT

@Iszi I'm not actually sure.

@Iszi I usually only play a couple of hours every few months.

4:46 PM

@ScottPack dammit - you need to. I'll go through it with you

it is very clever - especially when you get to the millions of community levels as well

@ScottPack That's two volunteers, now. No excuse not to.

@Iszi ^this

Now we just need to set up dates.

I'd defer the honor to @RoryAlsop if you want it done in the near future, though. Mass Effect has ownership of my gamer-soul for now.

@ScottPack smooth

@Iszi heh - although I did just install Brink, P2 is still my favourite here

Just checked - I have you both in my friends list

excellent

4:48 PM

@RoryAlsop Oh, I love the portal series. But I think Mass Effect is going to take the crown of all-time favorite for awhile.

Crap. I'm in the wrong career field.

#YouMightHaveACareerAsAJournalistIF … it is hard to get motivated unless and until you are up against a last-minute deadline.

Tweeted by briankrebs on January 9, 2013 at 4:43 PM

@Rory Alsop in such a case control monitoring (e.g for soc analyst) is what we usually do, but when it comes to enforcing those requirements like i want for a particular use case I expect to have the sys admin have the necessary auditing options enabled on their system (for e.g administrators should not be exempted from audit policy)

or i want to view particular event ID in case a particular user has access person x mail box. Should the compliance team or internal audit team provide me the necessary assurance that my requirements are meet and doesn't effect business.

@Iszi @RoryAlsop Just checked, and I've got you both as well.

@user970533 100% agree - in fact they may need extra monitoring/logging controls, as they have admin powers

@user970533 either of those should do, yes - but as mentioned, organisations all seem to do this differently

:-)

@ScottPack Spiffy. Give one of us a holler whenever you want to get started, then. I think my wife prefers watching me play Portal 2 to Mass Effect, anyway. Heck, she might just take the controller from me.

@RoryAlsop So, do you think we should close that question as NC or is it salvageable? Primary concern is the bit about it really being organization-dependent.

@Iszi Oh sure. That's one of the things I like about Portal. It feels like I could enjoy watching it just as much as playing.

4:53 PM

@ScottPack oooh - I can't watch it on any of the complex multi-fling levels, I'd get airsick. Need to play it

@Rory Alsop Hm thanks for agreeing:) but what about due diligence and due care does it not requires management to assign responsibility as per best practices and requirements. I mean would the external auditors seeing the lack of proper placement and assignment of job and duties as a probable cause misdemeanor.

I will say there is one gesture (well, not just one - but one in particular) missing from Portal 2 multiplayer. Something to say "Hang on, I think I've got it!".

Lunch time. Gentlemen. @Avi.

@ScottPack Yay! I'm no longer excluded from the proper gender category!

@Iszi As you might recall you, or your proxy, fulfilled my verification requirements.

4:57 PM

@Rory Alsop how do you explain the term control owners is it the same as system owners? Lately i have found this terms as i was researching this topic

@ScottPack dang. I gotta wait till March.

@user970533 they don't care who has the responsibility, just that someone has it.

@user970533 control owners may be the same as system owners (which can be useful as they will understand the system), but I often see controls owned by department heads, business owners, divisional reps etc

@ScottPack mutual verification just sounds.... icky

@ScottPack only heard of 28, but played 25 of them :-)

still not convinced by the Grand Theft Auto games - had a shot with 1, 2, 3 and 4 and they I must be missing something. 4 had better graphics, sure, but gameplay is almost irrelevant - you drive around and crash through people, and nothing ever happens...

@RoryAlsop Play San Andreas.

much different?

Cops generally don't like it when they see you run over civilians.

5:08 PM

@Rory Alsop owing doesn't let them escape from the responsibility of ensuring the best environment for their employees making it conducive enough to promote performance and reduce risk of errors/flaws.

@Iszi whereas in 4 they generally ignored me, or if they did actually chase me I'd lose them after 1 corner

do read my reply in the main article

@RoryAlsop They can still be (relatively) easily lost in San Andreas. Just depends on how many civilians you run over, or what other havoc you've wreaked.

They get pretty hard to shake when they start calling in the military (e.g.: Tanks, Harriers, etc.)

@user970533 i agree with what you say in that comment. A SOC team should be responsible for carrying out the technical duties detailed in the role/contract correctly, but should not own the risk to the business

5:47 PM

Classy.

lol

@ScottPack Heh. Thing is, that could have been edited into something salvageable still. But, then it would have had to be migrated to MSO and even then probably closed as dupe.

status-declined-too-useful

2

@ScottPack Heh. I don't know if I like that one better 'cause of the snark, or your other one for its brutal honesty.

Ideally it contains both.

6:58 PM

Someone flagged this as spam/offensive. Not sure what they're talking about. ;-)

in The Bridge, 27 mins ago, by GnomeSlice

8:03 PM

@Iszi Loving the conversation subsequent to that - with all the Venn diagrams

@RoryAlsop Eh? I had to move on before the Venn diagrams came up.

Ah. Wholeheartedly agree with this.

in The Bridge, 55 mins ago, by Ben Brocka

Yellow text on a white background should get you banned

boobies with silicone :(

8:23 PM

@LucasKauffman I'm not sure those count as boobies anymore.

@ScottPack simulated in silicon just doesn't count

although from a philosophical perspective, if you can't touch then it's all just an image anyway...

8:42 PM

So Fedora 18 is due for release Tuesday of next week. I wonder if I would be putting myself in danger if I were to update to the beta now and rebase then. Or I could just wait, I suppose.

@ScottPack I usually wait at least a week post release. That way any new killer bugs are dealt with.

@Sadaluk WHAT?!?

@ScottPack What does that have to do with boobs? Why are we changing topics?

@Iszi I've yet to see any boobs worth discussing appear.

@ScottPack I prefer not to have to rebuild my system too often, particularly as last October I had some not-so-fun with corrupting ext file systems.

8:45 PM

@ScottPack There are boobs that aren't worth discussing? That's like that one expression I don't get: "Useless as tits on a board." I contend that tits are not useless, anywhere.

I reinstalled weekly for most of October.

Gilles

@Iszi I prefer my tits on a broad, not on a board

boobies you say

@Gilles Agreed, but would you honestly reject the latter if offered alone?

not going to post

8:49 PM

@LucasKauffman Come on...

You can delete it immediately after.

So the features of F18 don't look all that exciting. I don't have secure boot on my motherboard thankfully although I am booting UEFI.

@Sadaluk Better MATE support, which makes me happy.

@LucasKauffman Dunno why you weren't going to post. I see nothing wrong there at all.

That generally looks pretty worksafe to me.

8:55 PM

I kept it decent

@LucasKauffman That's pushing it pretty close.

still think she's the hottest chick ever.

@Iszi close but over!

@LucasKauffman Up there for sure. Tops, I dunno. Pretty close, at least. For future reference, might be safer to just post a link instead of letting it Onebox.

@ScottPack Fair enough. I imagine a few things in the list will be good for some, but I'm not overly fussed about being bleeding edge any more... it's not like I use all that bleeding edgeness ever.

It is an offering to the @Rory

8:58 PM

@LucasKauffman I'm a big Johansson and Hatheway fan.

@Sadaluk The concept of better AD integration sounds nice.