« first day (816 days earlier)      last day (4069 days later) » 
00:00 - 12:0012:00 - 17:0017:00 - 00:00

Adnan
Adnan
5:21 PM
@ThomasPornin, damn it! You posted your answer while I was writing mine, now mine will look silly. Now I have to use "In addition to what Thomas said.."
 
Lucas Kauffman
Lucas Kauffman
@Adnan every answer looks silly when Thomas posts an answer
 
Adnan
Adnan
@LucasKauffman Exactly :D
 
Lucas Kauffman
Lucas Kauffman
Thomas is a little bit like the chuck norris of Sec.SE
 
Scott Pack
Scott Pack
@LucasKauffman He stores roundhouse kicks in his beard?
 
Adnan
Adnan
@LucasKauffman But I included big words like "Plausible deniability" to make the answer look less silly :p
 
Lucas Kauffman
Lucas Kauffman
5:30 PM
@ScottPack Superman wears Chuck Norris pyamas when he goes to bed, Chuck Norris wears @ThomasPornin pyamas
6
 
Adnan
Adnan
@LucasKauffman Your accent is so sweet!
 
Scott Pack
Scott Pack
@Adnan You've clearly never heard a Belgian speak, have you?
 
Adnan
Adnan
@ScottPack I have! It's so adorable (well if they have boobs)
 
Lucas Kauffman
Lucas Kauffman
LOL
 
Adnan
Adnan
@LucasKauffman Do you have boobs?
 
Iszi
Iszi
5:32 PM
@ScottPack No - large prime numbers.
 
Lucas Kauffman
Lucas Kauffman
@Adnan not the kind you'd like I'm affraid
 
Scott Pack
Scott Pack
@Adnan Oh a boy we generally call them "moobs".
 
Adnan
Adnan
@LucasKauffman You know, the J = Y
 
Xander
Xander
@ScottPack Does Inspector Poirot count?
 
Lucas Kauffman
Lucas Kauffman
It's spelt pyjamas?
 
Scott Pack
Scott Pack
5:33 PM
@LucasKauffman pajamas
@Xander Was he supposed to be Belgian?
 
Adnan
Adnan
@LucasKauffman That's also one way to spell it
 
Lucas Kauffman
Lucas Kauffman
@Xander See the problem there is Poirot is from the French speaking part and I'm from the Dutch speaking part
 
Scott Pack
Scott Pack
@Adnan Not in the civilized world it's not.
 
Xander
Xander
@ScottPack Yeah...It was a big joke. People would call him French, and he'd get all huffy about it.
 
Adnan
Adnan
@ScottPack U.S.? Civilized? Good one
 
Lucas Kauffman
Lucas Kauffman
5:34 PM
To give you guys some insight on how complex it is over here:
 
Xander
Xander
@LucasKauffman Ah! Yeah, that'd make a difference.
 
Scott Pack
Scott Pack
I know a Nederlander.
 
Xander
Xander
Belgium makes the best beer.
 
Adnan
Adnan
@Xander Agreed!
 
Xander
Xander
Although the French-Canadians make some of the best Belgian beer, oddly enough.
 
Lucas Kauffman
Lucas Kauffman
5:38 PM
@Xander excuse me?
 
Iszi
Iszi
@LucasKauffman I think he's sucking up to the Bear.
 
Thomas Pornin
Thomas Pornin
I am not a French-Canadian (yet), I am a French in Canada.
 
Lucas Kauffman
Lucas Kauffman
Well that's true, if @ThomasPornin pisses in a glass you will probably get a very nice beer
2
 
Adnan
Adnan
@ThomasPornin Tomato Tomäto
 
Xander
Xander
@Lucas Don't blame me. Blame Unibroue. They make some unbelievable beer.
This one, for example. beeradvocate.com/beer/profile/22/33
Although this: beeradvocate.com/beer/profile/22/3635 is tied with Chimay Grande Réserve for my personal favorite beer of all that I've tried.
I intend to do a beer tour of Belgium one of these days.
 
Adnan
Adnan
5:46 PM
 
Xander
Xander
@Adnan Nice, thanks! Unfortunately it's not going to happen this year. One a side-note, I have a Chimay glass just like the one in the image.
 
Adnan
Adnan
@Xander But, unfortunately, you wont' be having this.
 
Xander
Xander
6:01 PM
@Adnan I'm married, so I no longer have use for that. :-)
 
Rory Alsop
Rory Alsop
6:13 PM
Evening all
@lucas - we had a guy from the Belgium ISACA Chapter give us a bit of background on the various separations there. Interesting. Although we are more interested in the beers, obviously
 
Xander
Xander
@RoryAlsop Howdy
 
lynks
lynks
it's been 24 hours, but I'm still on a high from meeting john romero
 
Thomas Pornin
Thomas Pornin
Hello @Rory
I have just made my first ASP.NET Web page with a DLL which fills in text elements on page loading. I feel dirty.
At least I used C# and vim, not VB and Visual Studio.
 
Xander
Xander
6:32 PM
@ThomasPornin Why do you feel dirty? Don't like ASP.Net? Or some other reason?
 
Thomas Pornin
Thomas Pornin
@Xander I tend to dislike Web frameworks which try to make developers believe that development is easy.
 
Xander
Xander
@ThomasPornin Ah, got it.
 
TildalWave
TildalWave
@Adnan - Thought to remind you of possible 'content updates' to the linked-to message, since you were listing other possible reasons in security.stackexchange.com/questions/32427/…
 
CodesInChaos
CodesInChaos
6:52 PM
@ThomasPornin Webforms or MVC?
 
Thomas Pornin
Thomas Pornin
@CodesInChaos Web Forms.
 
Xander
Xander
Anybody ever used WhiteHat's Sentinel service?
 
CodesInChaos
CodesInChaos
@ThomasPornin WebForms looked complicated to me compared with MVC. Why do you think it tries to "make developers believe that development is easy"?
With MVC you can simply spit out a bit of html and you're done
 
Adnan
Adnan
@TildalWave I'm not sure how I feel about that.
 
Thomas Pornin
Thomas Pornin
@CodesInChaos That's what Visual Studio apparently amounts to. In three clicks, you have a dozen files and a "ready-to-fill" Web site. Microsoft then proceeds to consistently avoid to document anything about how things work internally.
 
CodesInChaos
CodesInChaos
7:06 PM
I like C# and VS, but I dislike frameworks that rely on tooling too much (unfortunately MS likes them).
 
Xander
Xander
@ThomasPornin I agree that documentation should be improved considerably, but at least for the folks who are really interested, most of the internals of the .Net framework are available for download and inspection via their shared source program.
That doesn't help improve or impede the drag-and-drop crowd, I know, but at least it's available tool.
 
CodesInChaos
CodesInChaos
7:25 PM
ASP.net MVC is Apache licensed
 
TildalWave
TildalWave
7:40 PM
@Adnan what's your point? i don't see how feelings have anything to do with it, unless you dislike me giving you suggestions, in which case just say it so. i have absolutely no feelings attached to this
 
Adnan
Adnan
@TildalWave No no no. I mean I'm not sure if I agree with that point.
If the contents are gonna be update, I'd say another message should be sent
That defeats the purpose of the email, basically to notify the user about a message.
If I'll change the content of the text I have to inform the user, with an email
Then why not create a new message?
 
TildalWave
TildalWave
@Adnan i'm not sure OP was clear on the reasons for these messages, but I'm reading it again just to make sure
 
Adnan
Adnan
@TildalWave In that, I agree. The OP gave no usable information. We can't really help him if he doesn't want us to help him
 
TildalWave
TildalWave
@Adnan indeed. Read it again and it's utterly unclear what the purpose of these messages even is.
 
Adnan
Adnan
Damn it! I'm writing an epic answer for this question
2
Q: What should I look for when auditing a Browser extension / plugin?

user21859I've been asked to do a security audit on a cross-browser plugin for desktop browsers developed by a third party. I am a web developer with a reasonable grasp of Javascript but am not a browser security expert. What kinds of things should I be looking for in the source code which might represent...

web-browser javascript
 
TildalWave
TildalWave
7:46 PM
@Adnan I'll leave you to it then, sorry for disturbing your inner peace LOL :P
 
Adnan
Adnan
It's very difficult, there's almost no good resource about it on the Internet. I had to go through the painful process of learning a lot about it when I had a similar task to the one the OP is doing.
 
Adnan
Adnan
8:06 PM
Why are answers/questions only epic in the OP's mind? After I wrote it, it looks very strange and repetitive
0
A: What should I look for when auditing a Browser extension / plugin?

AdnanIMPORTANT: This is in noway a full list of the things you should look for, use this answer as an example, a first step in your path of search on your own. I've had a similar task long time ago. I had to security-wise review the code of a Firefox addon, I'm sure you'll easily find Chrome/other bro...

To Half Life!
 
Antony Vennard
Antony Vennard
Look who I found in video:
And for those who have been waiting for a bit:
@RoryAlsop All I can say, Mr Alsop, is you do not sound very Scottish. So disappoint.
In my mind you sounded like this youtube.com/watch?v=WLrrBs8JBQo
 
Polynomial
Polynomial
8:21 PM
@AntonyVennard You missed my video out ;)
 
Antony Vennard
Antony Vennard
@Polynomial Patience! I'm listening to @Rory!
I'll get to you!
 
Polynomial
Polynomial
hehe
 
Rory McCune
Rory McCune
@AntonyVennard you're ambigously @Rory 'ing again (and you missed my video too!)
 
Antony Vennard
Antony Vennard
@RoryMcCune There is no such thing as ambiguous @Rory ing!
 
Rory McCune
Rory McCune
@AntonyVennard O'Rly but when you @Rory do you @RoryA or @RoryM or perhaps you @Rorie (although I'm not sure he's ever been in chat.SE) or and there's not too many of them out there are you actually @Ruaridgh 'ing?
 
Antony Vennard
Antony Vennard
8:25 PM
I will watch all the videos. I just found @Rory's first, then Marions. I just went here and Mr Alsop was featured: youtube.com/user/AbertayHackers
@RoryM ok, I have listened to the start of your video and you do sound really Scottish, so, I shall no longer ambiguously Rory you.
 
Rory McCune
Rory McCune
@AntonyVennard yeah I sound hideously scottish when I hear my own voice. I try and dilute it a bit when I think there are foreigners in the audience :)
 
Antony Vennard
Antony Vennard
Y'know, I tried using my real name as an experiment and I'm not sure I like it, both my real name AND it being in big and yellow.
@RoryMcCune I don't sound from anywhere, having moved a fair bit, so I'm lucky - most people can't place me.
Except for "English".
And when I speak French, I sometimes get confused as Spanish.
Not sure how I manage that, but never mind.
 
Rory McCune
Rory McCune
@AntonyVennard Marion has an odd accent, having heard it where would you say she grew up?
 
TildalWave
TildalWave
@Adnan This "What are files being accessed? Why? Are they released successfully?" is big IMO. I once caught changes (injected JS) to Pendulum plug-in entirely by chance, looking for what's causing the system disk to fill up with temp files in the plug-in cache folder. Turned out it was sending URLs (well, trying to, the end point was luckily blocked) to some location in Russia.
 
Antony Vennard
Antony Vennard
@RoryMcCune Oh I know that accent! I can't tell you where it's from, but I know it.
 
Rory McCune
Rory McCune
8:33 PM
@AntonyVennard well she sounds a bit RP but she picked that up at Uni, she actually grew up in Cumbria but sounds (I think) nothing like it..
 
Antony Vennard
Antony Vennard
@RoryMcCune Nope, not at all. I'd have put it elsewhere, as it is quite RP.
 
Adnan
Adnan
@TildalWave Actually that was similar to what started the whole thing in my previous work place.
The sysadmin saw many entries int he logs sending requests to some addresses in China
All applications checked, nothing fishy.
Then we saw that many of the guys had installed some application for downloading Youtube playlists that silently installed a firefox addon and it appears it's a part of some DDoS scheme.
 
TildalWave
TildalWave
@Adnan I didn't check but it would be interesting to see how many of such exploits were detected and later removed (hopefully LOL) in Google Play and Google Apps Marketplace. Also for similar other marketplaces of other vendors.
 
Adnan
Adnan
@TildalWave You know, what's scary is that this is the normal behavior. I think Firefox should ask the user to confirm addons' critical actions. Like reading a local file and sending it to some server!!
 
TildalWave
TildalWave
@Adnan Agreed. Of course, that would void pretty much any android (and other) smartphones/tablets out there next to unusable LOL. I'm just now trying to get a grasp on 'the EU cookie law' and if that means they're effectively killing HTML5 LOL
 
Adnan
Adnan
8:47 PM
@TildalWave Isn't it just about notifying the user about cookie usage?
 
Antony Vennard
Antony Vennard
@RoryMcCune As you're here, actually, out of interest are there any companies I should look at specifically for moving into security? You can probably gather my interests from what I tend to answer on here. Just wondering as currently prepping CV to see what I can find.
 
TildalWave
TildalWave
@Adnan It's nicknamed 'cookie law' as it's a bit more specific about cookies, but it actually applies to any information stored on and accessed from 'terminal equipment'. HTML5 for example has local storage capability that isn't really 'cookies' per se. Most HTML5 apps for smartphones/tablets actually depend on them being able to store data locally as well (in tables) and access it. I've yet to see one that actually asks me if I'm OK with that.
@Adnan And those built-in warnings from Android (this application can access... blah, blah, blah,...) aren't specific in this sense either, I'm not sure that suffices with regard to this EU law at all. I don't have an ability to inspect and/or change my permissions once I already installed an app in Android, not without installing other apps first (that most wouldn't even care to install)
 
Adnan
Adnan
@TildalWave There was a discussion about that somewhere, it appears that local storage is included in the 'cookie' law. But I really don't remember if it was about just notifying the user or about giving them the option to not use cookies.
 
Rory McCune
Rory McCune
@AntonyVennard hmm well the testing companies are generally looking (and there's some based in Manchester like NCC and Pentest Ltd), if you wanted something more software security/researchy then someone like Cigital could be interesting and I know they've been hiring in the UK. The other area that's growing quite a bit at the moment is incident response, so people like Trustwave, Thales and that lot
 
TildalWave
TildalWave
@Adnan this part makes it pretty clear: "Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information."
 
Adnan
Adnan
8:56 PM
@TildalWave I don't see that as an EU problem. This is an Android problem. This behavior is simply unacceptable. You should be given the ability to control what your the application have access to.
@TildalWave Oh yes yes. Now I remember.
 
TildalWave
TildalWave
@Adnan Now that "clear and comprehensive information" is subjective, and I'm also interested in official recommendations for that part.
 
Antony Vennard
Antony Vennard
@RoryMcCune Interesting, Ok thanks. Finding these people from the outside is difficult. I'm not sure if I'd be more interested in pen testing or researching or what really, having never done either.
I tend to like writing, so probably research might be more interesting.
 
Xander
Xander
Learn something new every day. From @RoryAlsop via @Ninefingers - Never trust diminutive Irish girls.
 
Rory McCune
Rory McCune
@AntonyVennard well pentesting does involve a lot of writing (one 30ish page report per week I reckon ), but it's not always the most interesting kind of writing.
@AntonyVennard it can be an interesting gig sometimes, if you are interested in the testing side of things I can put you in touch with a couple of people I know in Manchester.
 
Antony Vennard
Antony Vennard
@RoryMcCune Ooooh now that will be handy, yes please! I'm currently revamping the CV. I'm just sort of at the stage where I'd like to find something else to do, and moving to security would be lovely.
 
TildalWave
TildalWave
9:01 PM
@Adnan Agreed on that too. It should be a part of the OS and we should be able to clearly identify all applications that access external resources, how they're allowed to do that, and if at all. As it stands, without some rather suspicious additional apps to handle that, there is no 'official way' to do it. I'm on Android myself, so I can't comment for other smartphone OSes, but I suspect they're all much the same in this regard.
 
Antony Vennard
Antony Vennard
I mean, I don't mind programming at all (in fact I really enjoy it), it's just, y'know, making widgets.
 
Polynomial
Polynomial
@TildalWave Yeah, one thing I really wish was that an app could ask for a set of privileges, but you could manually remove some those privileges, and the app would be expected to deal with it (e.g. deny a certain feature)
 
Rory McCune
Rory McCune
@AntonyVennard cool let me know when it's at a stage where you want to send it out.
 
Antony Vennard
Antony Vennard
@RoryMcCune Okay will do. It should be tonight if I get my OU assignment done, or tomorrow if not.
 
Polynomial
Polynomial
for example I have no need for one of my media player apps to read the SD card, since I only ever use it to stream MP3s from various podcasts, but it still has a "Read / write SD card" privilege.
@RoryMcCune Isn't a good percentage of that automated / copypasta?
 
TildalWave
TildalWave
9:04 PM
@Polynomial Yup. The only feature that I see it's nearly properly addressed in this sense is GPS data where the system detects an access request and asks you permission to do so. But that's what? One sensor out of dozens that are exposed to exploits.
 
Antony Vennard
Antony Vennard
@Polynomial I imagine you'd pretty much follow a certain template, if I had to guess.
By nature, you'd be checking similar things each time.
 
Polynomial
Polynomial
@AntonyVennard There's always going to be a template, but I meant more along the lines of having a lot of discoveries and bugs and explanations copypasta'd for duplicate issues on different target machines
 
Antony Vennard
Antony Vennard
@Polynomial Oh, yes, that too.
 
Polynomial
Polynomial
and I'd imagine some pages almost entirely consist of nmap output or other technical data / listings
 
Rory McCune
Rory McCune
@Polynomial well some bits are 'cause you want consistency, but I always like to make as much as possible specific to the system under review, I've seen too many people copy/pasta out of scanners which is yuck. We have a vulndb where we've got sample wording for common issues, so yeah those are good
 
Polynomial
Polynomial
9:06 PM
@RoryMcCune Oh nice, that's a good idea.
starting the new gig on Monday :)
 
Rory McCune
Rory McCune
@Polynomial not sure what Portcullis have, IIRC they had an automated reporting tool years back so I'd hope it'd be better now..
@Polynomial should be cool :) will be an interesting place to work I'm sure!
 
Polynomial
Polynomial
yeah they have some tools for report generation that are designed to make a baseline report or something like that
just finished packing two boxes of junk to take down on Saturday, and I'm not even half way there
never realised how much techie junk I own
so far it's just electronics gear, cables and books.
 
Rory McCune
Rory McCune
@Polynomial it tends to depend on the type of test. A standard external you can re-use lots, something more odd tends to be hand-written
@Polynomial I know we've cleared skips mostly out of my office before, every couple of years it needs a good clean out
problem is that no matter how much room you have the stuff just expands to fill the space
 
Polynomial
Polynomial
I just threw away more paperwork than I can physically carry.
so much junk from uni :P
 
Antony Vennard
Antony Vennard
@Polynomial I dread moving on that basis. So many cably things! (I shred paper like you've never seen. Makes awesome compost).
 
TildalWave
TildalWave
9:11 PM
@Adnan This is the gist of it from the UK perspective with some recommendations regarding cookies in particular, but I don't see anything specific on HTML5 client storage that would still fall well within this law's requirements.
 
Polynomial
Polynomial
@AntonyVennard Try shifting all the cables you own and then some, plus a soldering iron, various types of solder, patch cables, breadboard, PCB etching kit, blank PCBs, a huge box of various components (mainly ICs), two component racks, a 3rd-hand rig, two Arduinos, a Netduino, an RPi, a BusPirate, a logic analyser, multimeter... the list goes on.
 
TildalWave
TildalWave
0
Q: EU Cookie law - is HTML5 Local Storage covered

tim.bakerI know this is a question which I already kwow the answer to, but I wanted to check. Re the new Cookie law set by the EU, does this also cover HTML5 local storage, it all seams a bit weird to me. Firstly if you ask a users permission to store cookies, then without being able to store data on th...

html5 cookies law
of course, it was closed as off-topic :)))
 
Antony Vennard
Antony Vennard
@Polynomial Haha, well, I own two bikes, associated spare parts, spare wheels, bikerack, cycle clothing of various types, more inner tubes than you can ever imagine, several leaky oil tins and so on. Moving, not so good.
 
Polynomial
Polynomial
then a selection of large reference books, laptop, tablet, portable hard disks, screwdrivers, other tools, etc. plus all of my clothes.
 
Antony Vennard
Antony Vennard
But then my current commute is very cheap provided I keep the tyre pressure up to stop the roads here ripping my bike wheels to bits.
 
Polynomial
Polynomial
9:13 PM
and all of this so far is just what I'm taking down for my 3 weeks or so before I have to move again into a permanent place
 
Antony Vennard
Antony Vennard
@Polynomial I know, it's depressing :( Oh well.
 
Polynomial
Polynomial
after that I have a whole bunch of other crap, plus a bed, washing machine, wardrobe, etc... TOO MUCH SHIT
 
TildalWave
TildalWave
LOL... eucookiedirective.com/html5-cookie-law The level of understanding of what HTML5 local storage is from the official sources, as shown in this link, now THAT IS SCARY!!!
"This mechanism causes the storing of information on the end user computer. This storage is not strictly necessary in order to provide the service. No information is ever accessed by the provider of the website,..."
Pardon me, but WTF?
Now from HTML5 reference: "In practice, "client-side storage" means data is passed to the browser's storage API, which saves it on the local device in the same area as it stores other user-specific information, e.g. preferences and cache. Beyond saving data, the APIs let you retrieve data, and in some cases, perform searches and batch manipulations."
and: "All four storage APIs tie data to a single "origin". e.g. if abc.example.com saves some data, then the browser will only permit abc.example.com to access that data in the future. When it comes to "origins", the domain must be exactly the same,..."
How does that read as "No information is ever accessed by the provider of the website" is beyond me. :O
 
Jeff Ferland
Jeff Ferland
9:32 PM
@TildalWave "No human sees the data we store or retrieve from your computer"
2
 
Rory McCune
Rory McCune
some high quality zombie make-up here... freakmojones.tumblr.com
 
Adnan
Adnan
9:47 PM
Anybody has anything to add to this? The subject isn't much discussed other places online and any ideas are much appreciated.
Specifically Google Chrome-related
 
Lucas Kauffman
Lucas Kauffman
@RoryA who was it?
mate of mine is going to bring me one of these to taste at work: beeradvocate.com/beer/profile/313/1545
I'm really curious about it because it's very hyped
 
Xander
Xander
@LucasKauffman Nice! I'll see if I can find any of them locally, and try them out. I'm pretty sure I've seen the St. Bernardus here, not sure I've I'm going to be able to get my hands on the others.
 
TildalWave
TildalWave
@JeffFerland Hehe yes...
 
Lucas Kauffman
Lucas Kauffman
@Xander the Westvleteren is really hard to get and I mean really hard
these guys only produce so much beer so they can live, meaning they don't produce with regards to request and supply rules
 
Xander
Xander
@LucasKauffman I believe it. Beers that come in unlabeled bottles usually are. :-)
 
Lucas Kauffman
Lucas Kauffman
10:01 PM
@Xander get these ones official and they will probably be around 1.5 euro per bottle, on the black market it will cost around 15 - 25 a bottle
but it should be pretty delicious
 
Xander
Xander
@Lucas Wow! Well, enjoy. And if you feel like it, feel free to send a review to reviews@opencraftbeer.com <ShamelessPlug /> :-)
 
Lucas Kauffman
Lucas Kauffman
will do if I get my hands on it :p
the sint bernardus is pretty close to westvleteren I've been told
I guess I need to try those canadian beers
@Xander btw have you tasted Duvel Triple Hop? I haven't tried it yet
 
Xander
Xander
@LucasKauffman No, I've been meaning to look for it, given I love both Belgians and IPAs, but I haven't yet.
 
Lucas Kauffman
Lucas Kauffman
Apparently they added some japanese hop to get a special flavor
 
Xander
Xander
@LucasKauffman RE: Canadian beers, definitely. Although I had a Maudite from a bottle that I didn't particularly care for (loads of banana esters) but a tap vesion from a local French bistro that was exquisite. All of their other beers I've loved straight from the bottle. They clearly use Belgian yeast because the authenticity is unparalleled.
 
Adnan
Adnan
10:14 PM
If you divide your message into 3-word lines and send them separately on chat/IM, I hate you!
 
TildalWave
TildalWave
@Adnan I think you could explain a bit more what sandboxed actually means in the context of Chrome plug-ins. Otherwise OP might be inclined to think all other known JS exploits are just as well possible. Some might still be, but I don't have a verbose list of all of the JS exploits types in front of me to cross-check for that with how Chrome sandbox mode works. I think a line or two on sandbox policy and how access rules are applied and/or handled by the browser should do it ;)
 
Lucas Kauffman
Lucas Kauffman
@Xander Yea I prefer some beers on tap because you don't need to be super careful when pouring them, like Lachouffe is better on tap than on bottle. I've also had some very shitty belgian beers tho made from pears
it tasted like something had died inside the bottle
 
Adnan
Adnan
@TildalWave Great idea! I think I'll do that in the morning. Now I'm trying to shutdown my computer and go home. Everything is updating and I can't unmount trueycrypt volume! GOD DAMN IT!
 
Xander
Xander
@LucasKauffman ROTFL. Yeah, that's never fun.
 
Lucas Kauffman
Lucas Kauffman
btw have you tried Kwak with the special Kwak glass :p?
 
Xander
Xander
10:17 PM
kwak
@LucasKauffman Umm.....No. :-)
 
Lucas Kauffman
Lucas Kauffman
Kwak is actually a distinctive sound in dutch that is made when there is liquid suddenly splashed in your face
 
TildalWave
TildalWave
@LucasKauffman any 'official' word on how many different beers and breweries you have there in BE?
 
Adnan
Adnan
@LucasKauffman mmmmm... I wanna try it!!!
 
Lucas Kauffman
Lucas Kauffman
which is what this glass does if you suddenly let air in the lower compartment
@TildalWave not sure probably running between 2 and 3 hundred
considering we only have 10 million people living here
 
TildalWave
TildalWave
@LucasKauffman Also, I drank some Belgian beer when in Norfolk, it had some name like 'old monk' or something like that. I really liked it. You happen to know the real name of it? IIRC the name was in French.
 
Xander
Xander
10:20 PM
@LucasKauffman Interesting! Didn't know that.
 
Lucas Kauffman
Lucas Kauffman
ah apparantly I'm wrong it's around 800 different beers
@TildalWave I don't really know any beers called like that but probably an abey beer
you guys should come down here for Brucon
lots of security topics combined with lots of beers
 
TildalWave
TildalWave
@LucasKauffman shoot, I just realized it was the restaurant/tavern's name 'The Belgian Monk' and the only other thing I remember about the beer is that it had a French name. I probably won't know for sure unless I go back to Norwich, which is highly unlikely LOL
 
Xander
Xander
@LucasKauffman That sounds fantastic, but we're having a baby in August, so I think I'm probably going to be homebound in September. Maybe next year.
 
Lucas Kauffman
Lucas Kauffman
Chimay?
@Xander sure they can ripe another year :p
 
TildalWave
TildalWave
@LucasKauffman Hmmm no but I had a few of those about a week ago :) It was a 'red' beer, and the name was definitely longer than a single word. And it didn't look like some really exotic one with rose petals in it or something like that. It had a genuine lager taste with maybe a slight peach aftertaste to it.
Not sweet though
I remember it was a French name because we were secretly laughing with my mate at the waitress pronouncing it with a distinct Aussie accent... laughing if all Aussies are really barmen in UK? :)
It's not Blanche de Namur, I thought it was also but I bought some and is completely different style, not so drinkable as the one I'm searching for.
 
Lucas Kauffman
Lucas Kauffman
10:38 PM
Chimay, La Trappe, Leffe, Rochefort
ah wait lager
ehm
 
TildalWave
TildalWave
@LucasKauffman I found some list from that tavern, but I still can't find it. It's also not La Corne du Bois des Pendus Blond.
 
Lucas Kauffman
Lucas Kauffman
STella Artois :p
Rodenbach
I actually live very close to the Stella Artois brewery
 
TildalWave
TildalWave
@LucasKauffman Didn't you tell me once how 'everything is close in BE?' :)))
 
Lucas Kauffman
Lucas Kauffman
@TildalWave yea but this is really close, like I can smell it when they are brewing :p
 
TildalWave
TildalWave
@LucasKauffman No definitely not some really well known beers, at least not in my parts of the woods, otherwise I'd find it by now (I have beer boutique with English/Irish/Belgian beers not 100m away :)
But I could order it, if I only could find which one it was
I'm going through this list now: thebelgianmonk.com/pdf/beer.pdf
 
Lucas Kauffman
Lucas Kauffman
10:42 PM
hahaha :p
holy fuck 2.80 for Jupiler Blue
that's like the shittiest beer I ever drank
 
TildalWave
TildalWave
@LucasKauffman Yup 'twas a daytime robbery
 
Lucas Kauffman
Lucas Kauffman
well considering those prices, I think a trip up and down to belgium might be worth it
 
TildalWave
TildalWave
OK, another info worth mentioning, they had it from the tap, as well as bottled
 
Lucas Kauffman
Lucas Kauffman
La Chouffe?
 
TildalWave
TildalWave
hmmm let me check
the color is right...
 
Lucas Kauffman
Lucas Kauffman
10:46 PM
that's one of my prefered beers when going out
 
TildalWave
TildalWave
It could be, thanks I'll order some and let you know when I get it :)
 
Lucas Kauffman
Lucas Kauffman
it doesn't bite you like Duvel if you drink one or two too many
but you have to pay a lot
 
TildalWave
TildalWave
@LucasKauffman We had three pitches with a mate of mine and I didn't have any problems with it. My driving skills only improved
 
Lucas Kauffman
Lucas Kauffman
3 pitches of Duvel?
or la chouffe :p?
if it's Duvel, my hat of to you!
 
TildalWave
TildalWave
well I can't be sure which one, but the one I'm trying to remember the name of, so no it wouldn't be Duvel LOL
If it was Duvel I wouldn't find my way back home like... ever
 
Lucas Kauffman
Lucas Kauffman
10:51 PM
we have a party here twice a year called duvelfac, where you pay 1 euro for 1 duvel
Ive had it more than 1 time that I was drunk of my socks
 
TildalWave
TildalWave
@LucasKauffman 'fac' i presume means something else than how i'd pronounce it?
 
Lucas Kauffman
Lucas Kauffman
fac is the short for facbar, which comes from faculty
 
TildalWave
TildalWave
ah gotcha
 
Lucas Kauffman
Lucas Kauffman
every faculty has his own bar with discount prices for students
on normal days you get like a beer for 1 euro and then they also have some specials
like one night vodka redbull for 2 euro
or duvel for 1 euro
 
TildalWave
TildalWave
yup we have same here, and they compete who has the longest (bar) :)
 
Lucas Kauffman
Lucas Kauffman
10:54 PM
here we have the king of beer contest
the person who can drink the most in 24 hours
I think last year it was 205 pints
 
TildalWave
TildalWave
and the main prize is what? 10 pitchers of beer? :)))
 
Lucas Kauffman
Lucas Kauffman
I think it's free beer in every facbar for one year
 
TildalWave
TildalWave
holy shit
how is that even biologically possible?
 
Lucas Kauffman
Lucas Kauffman
do mind a pint is 25 cl
in Belgium
and there are some really "trained" people out there
 
TildalWave
TildalWave
OK... that's still ~ 50 litres
51.25
let's assume some of it ends up down the beard...
but even 40l.. .that's 80 bottles
 
Lucas Kauffman
Lucas Kauffman
10:59 PM
I've seen more than one person being sent to the hospital
I think the rules are quite strict tho
you can't throw up
you can't leave the bar
and at least 1 pint an hour has to be drunk at once
 
TildalWave
TildalWave
You're surely gonna have to take a few leaks now and then
 
Lucas Kauffman
Lucas Kauffman
Oh wait I'm wrong
It was 70
 
TildalWave
TildalWave
hmmm what happened with that legendary answer on Skeptics about urinals and splashes?
24
Q: Does standing closer to the urinal prevent urine splashes?

Mark MayoMy work has a sign in the bathrooms requesting that you stand closer to the urinals to avoid splashing onto the floor. Is this actually a workable fact? My query is that if you stand closer, wouldn't there be more force impacting the back of the urinal and it'd splash back further?

hygiene toilets urine
 
Lucas Kauffman
Lucas Kauffman
with 6 pints being downed at once in the last 15 minutes
 
TildalWave
TildalWave
There used to be an answer with diagrams and stuff, where's it gone?
 
Lucas Kauffman
Lucas Kauffman
11:04 PM
@TildalWave the comment "This should be in physics" xD
 
TildalWave
TildalWave
@LucasKauffman but it wasn't moved, it's protected
but the answer is gone :O
 
Lucas Kauffman
Lucas Kauffman
anyway of to bed
kick off meeting in the morning and getting through the snow will proof challenging
 
TildalWave
TildalWave
Cheers @LucasKauffman thanks for the chat ;)
 
00:00 - 12:0012:00 - 17:0017:00 - 00:00

« first day (816 days earlier)      last day (4069 days later) »