@AviD hahahahahaha

@AviD I believe you have to answer a question that was bountied after winterbash started

@ThomasPornin If a word is used often enough in a wrong way, that wrong way ca become the correct way.

and the answer has to be posted after the bounty was posted

@kalina not very assassin-ish.

@Lucas - did you get bounty hunter or IG-88 for the bounty I awarded you

@CodesInChaos like "tasteful".

@ScottPack GIMME DA BOUNTY NAO!

"I believe"

I WANT HATS!

@RoryAlsop neither.

HOMETIME BYE

@kalina bye @kal

@kalina ttfn

@AviD hm?

try not to burn anybody on the way home.

@RoryAlsop let me check

@LucasKauffman you dont.

@RoryAlsop when / where was that?

ooooh

zdnet.com/…

@RoryAlsop nope :(

@AviD Hmm - maybe I'm going senile. I thought I had a bounty on that

looks like I just accepted your answer

@RoryAlsop how do I award you a bounty?

ah

@RoryAlsop ouch

@LucasKauffman if you asked a question I answered, you can decide to create a bounty and then award it to me.

Likewise

@RoryAlsop not just on your own question.

@AviD any? that will make this game easier

@RoryAlsop is there an easy way to find a question I asked which you answered? :p

@LucasKauffman see @AviD's comment

not just on your own question

gnite - its nap time.

so I just award some bounty to some question?

@LucasKauffman yarr

@AviD nite

(that's suspicious - @AviD and @Kalina sloping off at the same time...)

hahaha

we already have the private room....

or maybe she ends work at 5pm, and I, 2 timezones away, go put kiddies to sleep at 7pm.

Or maybe I doth protest too much.

I guess

:-)

@Lucas - then bounties take 24 hrs before you can award them

@Lucas and @AviD - prepare to be bountiful

(tomorrow)

awarded a bounty

to terry

you need two bounties

?

Somebody has parked right behind me and I can't escape!

lol so many bounties

@LucasKauffman When did that happen?

aaand that's my 200th silver badge.

@ThomasPornin Only your 200th?

@ThomasPornin son I'm dissapoint

@Iszi Not counting bear #2, and on Sec.SE alone, of course.

@RoryAlsop bountied something of you two

wait I'm a retard

@LucasKauffman Enlightenment can come to everyone, at last.

I should have put a bounty on which you guys had an accepted answer ><

@LucasKauffman you don;t need to

well no but it would have been nice to return the favor

I need two of you guys to upvote a string of comments on meta. :P Any volunteers?

I'll delete them after I get hats.

@AviD WOT

Start upvoting. :P

@ThomasPornin Thanks.

@LucasKauffman Unfortunately, it did.

@Adnan so I guess I can say, I made your girlfriend hot?

@LucasKauffman Not you, your beers.

Need 1 more +1 on my comments! :P

@Adnan bet she loved that golden juice.

Hey @Simon, go +1 my meta comments.

@TerryChia how much more?

link

they are all just up there Simon ^

@RoryAlsop Need 5 +2 comments on meta for the secret hat apparently

Good evening everyone, I am stuck on an assignment in my computer security course: I have an application where I can manipulate a function pointer (which is later called) on the heap via an overflow. But now I don't know what to do with this, as I need to run an arbitrary command (cat /etc/shadow). Can somebody help?

done

@phoenixyz You need to find shellcode that runs the equivalent of cat /etc/shadow and do the whole overwrite eip to point to shellcode thing assuming there are no complications.

@Simon Cheers. Let's hope I get the hat soon. :P

thanks. my problem is, at the moment I can only write to the heap, so even if I would write the code there, I wouldn't know where to jump

@phoenixyz Oh. Missed the heap part. That's a little trickier. :P I'm going to bed though, so can't really help you.

Hey @LucasKauffman! The man needs help! ^ :P

okay, good night, thanks anyway ;)

@TerryChia can I delete them now, before @Adnan gets upset

@phoenixyz I assume you don't have the required shellcode yet? That should probably be your first step.

@RoryAlsop Not got the hats yet. I'll wait till I get it and delete the comments before I go to sleep.

@TerryChia nahhhh - gubbed them :-)

they were flagged already

well no, but the assignment even has a function which runs a system command, so I assume I would just need to overwrite the argument and then jump to the call

@RoryAlsop :( I'll have to actually comment tomorrow then..

Oh no need! I got the hat.

@TerryChia I am guessing that the 5th +2 comment triggered it

but it only got issued at next batch

@RoryAlsop Probably.

Welp, I'm on the first page network wide for now. Good enough!

Especially considering I'm only on one site really.

@TerryChia I saw that flag you raised... really?

Y'know what's always fun?

SysAdmin: That vulnerability is a false-positive. Chrome's not installed on that system! [Screenshot of appwiz.cpl provided as evidence.]

@RoryAlsop Yes, really.

Me (in cmd window): dir C:\chrome.exe /s

About five seconds later, a copy of chrome shows up in their profile folder.

@AviD and @Kalina - IG-88:

starwars.wikia.com/wiki/IG-88_assassin_droid

definitely assassin droid

nurd

/cc: @RoryAlsop

FLOOR IT

He casually drove it, what a fag.

Yeah - it deserves to be belted hard

although it is the ugly bug-eye version

That's not bug eye!

not as ugly as the really ugly one

but the MY2000 was best

That's peanut eye!!

^ bug

^ hawk

Douchebag dropping the car to the ground, ew.

Ugly as hell.

this is my favourite look

Those are 94-01's.

I agree that the front is good looking as hell but the back looks very old

@Simon how stupid. That would ruin all the things subarus are good at

@Simon mine have all been very different to those

My Impreza's were all 5 door

^ the back is meh

and the Foz is just mental

Ahhh

did you see this one?

Nope

watch it - she is wonderful

I'm gonna have to only listen to it and sometimes switch to the tab

very wet day so not as fast as it could have been

cuz at work

and that one is only 300 or 340 bhp

so nowhere near enough]

"only" ^^

Pretty cool haha

Sometimes I wish we could multi-flag posts. How do I flag a post (not here) that's obviously not an answer, and may possibly be spam?

Well, you seem to be sure that it is not answer but unsure if it's actually spam.

So, flag it as "not an answer".

Perhaps someone can help with this question on Apple.SE. I didn't post it on this site because with the new SE help system it's not so easy to find out what is and what isn't on topic for a site ... not sure why they didn't keep the old FAQ.

all of the information is easy to find

you must be mistaken

@kalina tulk durty 2 me

poo

Awww, you did it right.

@Szabolcs I'm not sure it's off topic here, but I'm also not sure you wouldn't get a better answer at Ask Different.

on ask different they expect you to ask differently to the other SE sites

And I think there's already a more generalized version posted here, but I'm too lazy to look it up right now.

like, asking while doing a little dance

or standing on your head

or using an apple device (why would anybody subject themselves to this?)

I worry that there might not be a convenient solution to the problem. If the files are visible as part of a normal file system, e.g. they're on some sort of encrypted mounted volume, then an administrator user will always be able to access that volume by standard means (for as long as it's already mounted). Is this true?

yes

OK, I found the site FAQ: security.stackexchange.com/help/on-topic

@Szabolcs Thanks, I had been trying to find it since I joined!

@kalina did a lil dance

Drinking an Espresso #yolo.

@Simon Tagging #yolo on an espresso? Pussy.

@Iszi To be fair, I would have tagged #yolo even if it was a simple coffee.

@Simon Further validating my point.

I don't wanna be addicted to coffee like you guys.

@Szabolcs Yes. In fact, an "administrator" can potentially do everything in the machine since he can patch the kernel and inspect memory of other process.

Know what would be an interesting option? For large, widescreen displays (e.g.: 1080p) allow us to view Meta side-by-side with the main site in a maximized window. There's enough room that both questions lists can be posted in the same window, plus a side-bar, without much squeezing.

@ThomasPornin Well, yes, but I'm not looking for protection from that level of attack

Yeah, silly Thomas.

Always taking it one step too far

Yep.

@Szabolcs If you're strictly doing read-only, I think a TrueCrypt volume on a network share might be your best bet. Users mount it on their own system.

@Szabolcs If your attackers are not that competent, then there is a possible solution, but I don't think it has already been developed yet.

You could make an encrypted "file repository" accessed through some custom application-level code (a DLL) that you force-include with LD_PRELOAD in the applications which need access.

@Iszi but that one will still be directly accessible to administrators if the volume is mounted, right?

Applications then just do normal open(), read() and write() calls, unaware that they are intercepted by the DLL and translated to accesses to the encrypted repository.

So I guess it's important that only those people should be administrators who are allowed to access the data anyway

The DLL must know the password, of course, but this does not make the files accessible to every other process in the machine.

in that case the simple unix file permissions might be sufficient ...

@Szabolcs Administrators of any system on which the volume is mounted (not necessarily the system that hosts it, unless it gets mounted on that system also), yes.

hmm I used all my votes for the day and I again have on my profile "39 votes" not 40, why is that? I want my hat!!

this is the second day in a row that it doesn't count 40

@TildalWave I hope you get the message.

@Simon that it doesn't want me to have the hat?

@TildalWave Sorry :(

well yes sure, because it makes a lot more sense to give it to casual voters than someone that has 3299 votes in under a year

Of course! For example, I have the hat.

@Simon oh then it's OK, I don't even want it any more

lies

@TerryChia I'm waiting to see if a useful answer gets posted.

salut @ScottPack

@TildalWave You really only get 30 votes per day, but can earn up to 10 more bonus votes by voting on questions.

I didn't have to deal with such things before, and I'm already starting to hate it. It seems there's no such things as keeping it secure. There's just the question of how secure it is ... one could keep it on an un-networked passworded computer behind locked doors and it still wouldn't be 100% secure, but it would be awfully inconvenient. So when I'm told "keep it secure", the decision (and responsibility) of how secure falls on me.

@TildalWave The safest thing is to spend your first 10 on questions and then spend out the other 30.

@Simon BTW there is also the leaderboard per number of hats won on each SE site: winterbash2013.stackexchange.com/leaderboard

winterbash2013.stackexchange.com/leaderboard/…

so it should be in all yo interests that I get as many hats on Sec.SE as possible :P

@TildalWave Ya, that's why I'm getting all mines on InfoSec.SE

@Szabolcs Depending on your role, not really. If you're the sysadmin and/or IT security engineer, your responsibility is to ensure that the system and/or data owner(s) is/are aware of the weaknesses in the system and the options for mitigating them. It's then up to the system/data owner(s) to decide which mitigations they want in place and which they feel they can do without.

@Iszi Your foam hand makes everything you say very credible.

@Iszi I'm just one of the people who'll be working with the data, so I'm the one feeling the inconvenience of it being too secure

@Szabolcs Bah, who cares about usability?

Microsoft doesn't obviously.

@Simon Perhaps, but the difference there is that they can't so often justify it as a security tradeoff - mostly, it's just them being idiots.

:D

@paj28 Awight, hows tricks?

@RоryMcCune For kids.

@ScottPack noice

@ScottPack Is @Iszi as good looking as you are?

@Simon dude this .. again... why?

@Simon IIRC we have matching beards.

That's an unfair question because the answer can't be trusted.

Wait... why am I encouraging him?

@Iszi Awesome!

@Iszi Yours is way more beardy.

@Iszi Encouraging kids is a nice thing to do.

@ScottPack Eh. Depends on the day.

Today, probably.

I keep mine pretty well groomed.

Off a fresh shave & haircut, I think we're about the same.

Seriously?

That's some major swing son.

@RoryAlsop yes yes, I know, I already linked you that. But the point is, so? What SE activity is assassin-like?

@TildalWave Ugh. We're not doing well. I can't believe those stuffed shirt electrical engineers are ahead of us. Apparently they like hats just as much as they like pocket protectors.

@RoryAlsop I had one of those. Hated it.

@ScottPack Yeah, I get pretty lazy about my beard a lot. It goes in phases. The barber does a great job of it, though.

the fact that it was in crap condition, company owned and (not) maintained, and so old it was actually owned pre-lease-everything, might have had someting to do with it.

@AviD The current discussion is about beard, please stop or join it.

Unless you are talking about beards but that'd be very confusing.

TBF, after that they gave me the 4 door NEW Impreza, I hated that one too. (though it wasnt quite as bad, once I realized I could go straight to the leasing company for maintanence instead of through the company...)

@Simon I can't tell what you mean. Do you want him to stop talking about things other than beards, or stop the discussion of beards?

@Simon actual beards, or like your ex-girlfriend?

@AviD Like my ex.

@Iszi ^

@Iszi He has to either stop talking or join the beard discussion.

Ew, the ragamuffin edited his own answer.

What a disgusting prick.

@Iszi my beard is about the same length as my hair. Which is to say, pretty short. I shave the same time I haircut, one machine buzz across head and face.

@Iszi I've been rocking a goatee for a few years now, of course I like beards!

@AviD That's kinda how mine goes, though sometimes I'll trim it shorter between cuts - especially when I go several months without a cut.

MONTHS?

Wow.

@Simon When you cut your hair short enough every time, you can get away with it a bit better than others.

I have white hair on my head and ginger hair in my beard, I'm a fucked up kid.

I got an upvote because of the ragamuffin, I'm sorry raga.

@Iszi on the other hand, the difference is very noticable.

If I go for more than a week or so, my hat doesnt fit me right.

@AviD Jewish hat?

trolololo

@Simon no, this hat: winterbash2013.stackexchange.com/with-great-power

Nice.

@AviD Aww, secret hat.

Guessing it's a mod-only?

@Iszi not much of a secret. It's a real life hat - all mods have one.

Looks exactly like that.

It is awesome.

@AviD Can't really see what "exactly like that" is, since I don't have it.

And nerdy.

Wear it for us?

@Iszi wait, you cant see it on the link?

@AviD Nope

security.stackexchange.com/users/33/avid#winter-bash

how bout here?

@AviD That works, and... WANT

ah, okay - you see it in wireframe.

@Iszi for real, or for bash?

@AviD Validate my duplicate flag already you donut.

@Iszi I let the barber do my eyebrows, but I always take care of my beard. I usually trim every 7-10 days.

me no see no flags. cookie.

security.stackexchange.com/users/flag-summary/24084

@Iszi After 10 it's just too much to be comfortable for me anymore.

@AviD Well, one implies the other generally - does it not?

@Iszi in principle, yes, just not sure which way you meant.

@Iszi You haven't been grumpy at all for the last 2 days, great improvement.

E.g. get IRL hat next month? Hack the winterbash to steal the hat?

@Simon no flag...

@Simon You haven't had to deal with me IRL the past two days.

@AviD You just validated it you krispy kreme.

@AviD IRL hat would totally be awesome. Would want to earn it, though. Sadly, I don't see that happening for at least as long as @ScottPack doesn't have one yet.

@Iszi You still don't know? I'm the new guy at work.

@Simon nuh uh.

@Simon We haven't had a "new guy" in years.

oops

@Iszi why....? What happened to the last one...???

@AviD He stuck around long enough to lose the adjective.

o

@Iszi That sounds a lot less terrifying than at first seemed.

In which case, I am not clear why all the other potential new guys were too scared to actually become the new guy.

@Iszi I have a hat.

@AviD I doubt they are - they just haven't been given the opportunity, because we haven't had any to give.

@ScottPack Waitwut? Which site?

@Iszi What on earth are you talking about?

@ScottPack SE mod hat.

Oh. Nah, only mods and ex-mods got those.

@Iszi okay, wait. When you said "We haven't had a "new guy" in years." in that scary ghost movie voice - I assumed you meant they were all too terrified to come close.

orly

It also fits fantastic.

@AviD I didn't say it "in that scary ghost movie voice" - you just heard it as such. Not my fault.

It's always tricky for me to find a decent hat (without some stoopid logo on it) that fit's normally.

@AviD How can you hate an Impreza? You suck.

@Iszi It's all the fault of those meddling kids!

@Simon Hey, we're talking about hats here. Either get on board or GTFO.

Aaaaand I got served.

See how the way I say it is far less ambiguous, too?

Yeah, thanks for teaching me.

@Xander Seems you hold a grudge against EEs? Now, I wonder why that could be? :)))

@Simon YOU suck, you dont know. Biggest piece of crap I had to pay to drive around in.

Served and schooled.

@AviD What year/model?

@Simon oh I honestly dont remember. This was back when you were still in diapers.

Ah.

I had it in, 2003, I think.

switched to NEW impreza in 2004-ish.

Yep, still was in diapers.

I'll kill you if it was a 2.5 RS.

Hang on.

@TildalWave Yes I do. They have more hats than we do. That's reason enough.

@Xander thats not saying much. There are beta sites there with more hats than we do.

@Xander For me, that's just one more reason, but yes it is enough on its own :)

It's all because @Adnan turned his hats in.

@AviD Did it look like this you little donut?

@Simon ish. definitely not as clean or dentless.

and why on earth are you calling me a donut??

yknow what, dont answer that. I probably dont want to know.

Better off that way.

BTW I started a bounty here ... you know, Sec.SE FTW (and I might have better chances to get a few upvotes to "pay" for it since it's on my own question LOL)

@AviD oki

@RoryAlsop fancy a comment cleanup? security.stackexchange.com/a/47308/33

asking you for it, since I am one of the perpetrators / victims.

Also, while you're at it, see if you can knock some sense into him better than I can.