« first day (817 days earlier)      last day (4068 days later) » 

12:04 AM
@TildalWave I notice that it's been nearly 6 months and no answers.
 
@ScottPack That question had one truly epic answer with hand-drawn diagrams and explaining physics involved (albeit in layman's terms, it was factually correct). The whole approach to answering it was fascinating, to say the least. Hilariously funny, too. I had that question starred as the only question on Skeptics only because of the answer it used to have, but now it's disappeared... can you check with mods there where it's gone and why? I don't know who to ask
 
12:56 AM
Me neither.
That would be the perfect situation for some mod on mod action.
 
@ScottPack ah I constantly forget you're not a mod...
 
You'll have your opportunity to correct that injustice the next time we have an election.
 
Sure, I'll let you know at what address I accept bribes :)
BTW I've seen aszad is in the penalty box... what did I miss?
 
@TildalWave attempts at trolling
 
1:12 AM
@D3C4FF Posts or here on DMZ? I need to check transcripts I think I saw something a day or so ago but didn't want to interfere for a change, see where it ends. I'm glad I don't always feel the need to speak my mind, though :)
 
2:08 AM
@TildalWave he was complaining about people downvoting his poor quality responses and then came here to tell people to 'stop picking on him'
But he either wouldn't listen to reason or was just crazy and he kept insisting he was right
 
Oh gosh just read through the transcripts up till the actual ban... that's one of the longest pieces of utter bollocks I've ever seen... I can only compliment @AviD for putting up with it for so long and @Adnan for doing his best to stay away from it
 
In the end it just seemed like he was arguing for the sake of it
So i guess one of the mods decided to ban him as a result
Yeah, i was there for the argument with AviD, crazyness...
 
That "your petulant juvenile attitude is tiring" comment from @AviD is solid gold
 
Given his limited grasp of knowledge, i think he'd have had to check 4 out of those 6 words...
@AviD Hey.. Who's this mystery person. This is something I like to think i do as well :)
 
BWT good afternoon to OZ :) (to steer away from that topic as it's best avoided altogether, like you and Adnan did with Canon 5D)
 
2:18 AM
BWT? Or BTW?
 
BTW, sorry... what's BWT?
 
no idea xD
Its not quite Arvo yet ;)
Or is it?
Australia is a big place :P
 
I imagine it is, never been there myself. Wouldn't mind though
 
Its pretty good. Some places are hot, some are quite cold. But lots of the natural stuff is quite spectacular
Whats Slovenia like?
 
2:36 AM
I was looking for some stand-up about naming Oz places, was pretty funny but I can't remember if it was Rhod Gilbert or some1 else... I found this compulsory That Mitchell And Webb Look clip that's somewhat relevant though LOL...
@D3C4FF As far as the weather goes it's temperate climate and we enjoy most of the time nice protection from the Alps. People are mostly friendly, at least the natives but the main immigrant groups are from ex Yugoslavian republics,... I wouldn't like to comment on that... Countryside is green and picturesque (IIRC we're the greenest EU country, but don't take my word for it),... so in short it's nice to visit. Business-wise tho it's pretty crap.
 
Green eh? That'd make for some nice pictures :P
 
@D3C4FF Education levels and standards are pretty high here, but maintaining the brains here is rather challenging with so many opportunities elsewhere (including Oz) and not much here.... yeah, pictures are nice :) I'd say girls are also pretty cute comparatively, so plenty of Kodak moments yup
We've just discovered with AviD some Israeli company BetterPlace uses photos from here for advertising their green services, which I found pretty funny considering they're not even present here with their business
 
Hehehe, kodak moments. I've never touched anything other than disposable kodak film xD
They probably bought some stock photos
 
2:54 AM
@D3C4FF They used to run those ads "It's a Kodak moment" that I remember, but I never used their cameras either. If you Google for pictures from here you'll get a pretty good idea how it looks like, as it is a really tiny country. I can't really do the same for Oz now, can I? I've seen many films and photos from there, but I still get surprised each and every time how little I know about it.
I just realized something looking at those thumbnails that I need to investigate further, check these two images and tell me if you see the similarity...
I never saw that before, and I was there at that cave castle many times. I need to ask some people if that's merely a coincidence or there is something to it.
 
Thats awesome
Whats the black dot on the cave? Is that a tunnel or something?
 
it's an entrance to a cave, pretty long one and one of the most interesting ones here
it's not my personal favorite tho, there are nicer ones this one is just the most touristic one with a train, lights,... inside
You said it's not that late at your place (not Arvo yet... LOL). Does that mean you're from Perth?
 
3:13 AM
Actually, i didn't technically specify.
:P
I regularly go caving in Oz in WA/SA/VIC
I'd go down that hole so fast!
><
 
I used to go caving a lot also, until my bloody back injury forced me to rethink my participation in 'extreme sports'. :( But hey on the plus side I have more time for beer now :)
I think I found that stand up gig with names of Oz places, it's one of your own - Steve Hughes
 
3:33 AM
spent three weeks in Melbourne last year on a client engagement. Loved it. Beautiful city.
 
3:47 AM
Charlotte looks nice too, judging by Google images. Reminds me of Frankfurt, especially the aerial photos
 
It is nice I enjoy it here.
I haven't had the chance to visit Frankfurt, unfortunanty, so I can't compare.
 
Ah i love Frankfurt. Germany in general feels much like melbourne.
Same with holland.
Damnit. now i feel like travelling!
 
4:09 AM
@D3C4FF You shouldn't hurry too much to get to EU with the weather we're having here last few days :)
 
Crazy weather is great fun! :D
It hasn't exactly been a walk in the park in Aus.
Temps hit 46degC in summer this year
w3rd
 
@D3C4FF you do realize it's winter time here, no? :))) please, stop talking about hot weather, i feel like jumping from great heights right now
 
Hahah yeah i know. Technically isn't it springtime?
 
@D3C4FF tell that to the weather! LOL
 
xD
I've only ever hit up Europe in Winter or Autumn. I don't mind a bit of blistering cold.
Its a nice change from scalding heat
Frost bite AND sunburn instead of sunburn AND heatstroke :P
 
4:18 AM
It isn't as bad here yet as @LucasKauffman was saying it's in Belgium, but that's usually only a day away from here in terms of the speed of the northern weather reaching these parts, so I'm not keeping my hopes up... in fact, the prospects for this next week are rather depressing
 
Yeah depending on where work sends me next week, i'll be in poor quality weather as well :(
I miss belgium. So many abandoned things. ;__;
 
@D3C4FF poor weather? you mean not only you'll be seeing girls in bras everywhere, but they'll be wet from the rain too? yeah, poor you!!
 
@Tidal Yeah. Sucks hey? :P
 
@D3C4FF I'm ordering a 6-pack piece of Belgium in a few hours time :)
 
I'll have to bring some mojitos and kick it at the beach to make myself feel better
 
4:27 AM
I didn't find 6-packs so 2*4 will have to do
 
5:15 AM
Cider is all the rage in Aus at the moment. I'm quite fond of this: townhallhotel.com.au/images/vault/plasma_on_premise-3382478.jpg
Also. cider is near impossible to find in S.E Asia D:
 
 
1 hour later…
6:35 AM
@TildalWave There is no such thing as too much beer
2
fucking weather
 
@LucasKauffman Yup it's getting sour here also
What's the name for that 'fake rice' made out of rice starch pasta?
2
A: Risotto question - what does "translucent rice" look like?

TildalWaveRisotto is a common dish down my parts of the woods, being so close to Italy and all. Making your fist few risottos might seem a tad overwhelming with all the tiny details and tricks that recipes will hit you with, but you'll soon get a hang of it and think nothing of it. One 'seasoned advice' th...

it's like Orzo, but made out of rice, not wheat flour...
 
Hello. Does anyone know of some infosec jobs where you're on your feet more and behind the desk less?
less than programming, which is what I do now
 
@T.Webster Social Engineering, but that's about it
and maybe Datacenter audit
 
@T.Webster huh, walking about with a billboard sign "Sinners repent, The End is Neigh!" is close enough :))))
 
all the rest involves a lot sitting behind a computer
@T.Webster There's also the job of coffee carrier for the pentesters :P
 
6:46 AM
yeah I read on serverfault that NOC or field tech support are some answers
 
@T.Webster that's not infosec
 
@T.Webster NOC is a good idea
@LucasKauffman ... but true that also
 
OK Tildal. Yeah true what @LucasKauffman said.
Although Infosec is where I want to go, right now I'd like to spend more work hrs in the field.
 
@T.Webster field tech is in most cases just driving around a lot and then sitting in data centers or similar, I don't see that job as 'moving around more' in a sense of 'sitting down less'
 
yea that's the nature of the beast
the only time I'm walking around a lot is to track rogue access points
but that's about it
 
6:49 AM
@T.Webster have you tried with the kneeling chair? dunno how they're called officially tho... you probably know what I mean?
A kneeling chair is a type of chair for sitting in a position with the thighs dropped to an angle of about 60 to 70 degrees from vertical (as opposed to 90 degrees when sitting in a normal chair), with some of the body's weight supported by the shins. The original kneeling chair was the Balans chair, which was developed in 1979 by Hans Christian Mengshoel and the designers Oddvin Rykken, Svein Gusrud and Peter Opsvik. Purpose The intended purpose of a kneeling chair is to reduce lower back strain by dividing the burden of the weight to the knees as well as the buttocks. People with ...
yey I got the name right for once :)
 
@T.Webster organizing infosec events is also a lot of running around
@LucasKauffman hehe nice, but I'm still missing that epic answer on Skeptics, wherever it might have disappeared
@T.Webster if you can tell us why you'd like to move around more doing your job, or at least give us some more hints, then maybe we can think of some better suitable suggestions?
What I mean is, are there medical reasons, or are you just sick of the office chatter and all the stupidity you had to listen to made you realize you have suicidal tendencies? I'm serious BTW, as I know how lonely one can feel next to utter morons. Would you just like to avoid office environment, cubicles and that shit, or would you literally like to get off your bum more often?
 
@T.Webster i do pen-testing and it keeps me out of the office about 50-60% of the time
 
7:08 AM
Now I come in at work
drive through all the snow
and they tell me my kick off meeting is canceled
EATETEATRFDSQXWwqfDGSGRSZGRRAGR
 
 
1 hour later…
8:23 AM
@LucasKauffman you get to eat a whole lot of letters now?
Hey does anyone have any hardware keylogger experience? Any reccomendations?
 
@TildalWave To be honest, I was a bit mean to him in the beginning. The only reason I later tried to stay away from it is that if I continue talking to him, eventually I'll be the one to get suspended.
@D3C4FF Long time ago I purchased from eBay that thing you put the Keyboard cable in it and then you plug it in the computer.
When you want the data you open notepad and type some password combination and it'd automatically "type" (send as keyboard signals) the log on the screen.
 
Did you try with different keyboards. I'll be onsite at a university with a wide variety of machines (i don't know details yet) so i'm trying to plan ahead.
 
8:56 AM
@Xander @LucasKauffman re beer: collegehumor.com/video/6876682/beer-beer-goggles
@Antony if you dont mind working remotely, I would suggest widening your net, looking at some malware research type companies (knowing your interests). Like this one shinesec.com/careers
(that was the one I had originally asked you about, with the procmon experiment...)
@Poly if one of my pentesters ever tried including several pages of any tool output, he would have probably been slapped.
More likely I would have thrown him against the wall. (yes I mean that literally... )
as @RoryMcCune said, you have a collection of pre-written standard findings, but these should always be tailored to the specific system/business.
Also, as I'm sure you will find soon enough, the more interesting projects are never simply standard findings.
 
@AviD I feel the same when I see someone drinking Red Label
 
The difference between a good report and a great report, is how much the technical findings relate to the business context.
 
@AviD I learned that the hard way :(
 
@Poly @Antony when we were packing to move this past summer, we found in our storage room a pile of boxes that we had not opened since we moved in to the previous place - 12 years earlier.
STRAIGHT to the garbage.
@LucasKauffman have you ever seen Beerfest? They have a boot-shaped glass that has a similar effect as the Kwak glass.
@TildalWave my comment:
I think the working assumption here is that if you stand closer, any splash effect would land on you, not the floor. Note they didnt say "to avoid splashing at all", but rather "to avoid splashing on the floor". — AviD 47 secs ago
@D3C4FF @this.josh
 
9:15 AM
@AviD yea, I've been looking to buy one of those actually :p
 
Oh godamnit. I just realised the bizzare 'twang' sound that my laptop makes is from everytime i get mentioned in this chatroom is. I've been thinking the DVD drive or the fans are broken D:
 
@D3C4FF LOL! you can set that by clicking on the speaker icon top right.
and sorry for the full-page catchup, I feel asleep early last night and always have what to say :)
@T.Webster sales. have to walk around talking to clients all the time...
@LucasKauffman don't you walk around to talk to clients? Or do they leave that to the seniors and pm...
@TildalWave if its the first, look for a work-from-home (-or-coffeshop) situation. Highly recommended, but then you typically move around even less.
 
@AviD AHHHH Blissful silence! :D
 
sometimes I just hang out in here to have some human conversation.
 
@AviD depends on the engagement and who worked on it, lets say you have an engagement which had several resources, then the project manager and the most senior resources will be in the closing meeting
but if you mean like talking to clients in general, yea they allow me to do that
 
9:27 AM
I'm considering writing an answer contradictory to one of @Thomas's epic answers, instead of trying to get him to include the details I think should be there.
Somebody talk me out of it.
 
@AviD sometimes the internet is my only friend...
:(
 
@LucasKauffman haha, "allow" you...
"You may not speak to people, until I tell you otherwise." I actually had to tell a pentester-kid that once. Technical genius, human idiot.
 
@AviD To be honest, security and IT Audit is very lenient about that, in financial audit you're not allowed to talk to certain people
 
@AviD What was the 'pentester-kid' saying? :P
 
@D3C4FF besides constantly hitting on anything with boobs?
Don't actually remember the specifics.
it wasnt a transparency thing, it was a rudeness thing.
 
9:31 AM
Ahahahaha. Classy.
Yeah. Fair enough. I've met a few people like that. Makes things very uncomfortable for everyone
 
@AviD but on the other hand it can be a bit uncomfortable as well, considering I'm the lowest on the ladder talking to one of the most important people at a client who earns probably more in a week than I do in a year :p
 
Can get by with that here for the most part, even as consultants, but we were in NL (I think), they think us Israelis are already rude enough.
 
@AviD yea but you are talking about the Dutch
 
@LucasKauffman ah, but dont forget they pay that much to your company.
 
they are incredibly good at talking about nothing with eachother
@AviD I calculated that, my monthly salary plus perks would take the company 4 days to earn back at my hourly rate
but yea that's without considering training and all
 
9:34 AM
@LucasKauffman 4 days? You're either overpaid or they undercharge.
This IS the Big 4 we're talking about...
 
@AviD @LucasKauffman I get the same deal roughly, its about 5 days for me.
 
@AviD to be honest I don't really care about that, considering they also pay very well for my trainings
my budget is rather large
and they are considering letting me do my master's degree at their expense as well
I'm still happy working at the big 4 :)
 
@LucasKauffman good. There are a lot of benefits, you just need the right temperament.
And now, Lady and Gentlemen, I will bid you adieu. I actually need to make some progress on this review, it's dure pretty soon...
 
toodles
 
10:39 AM
hehe, I just hear from a company that was considering offering me a job, that the hiring manager is worried that I might be "too experienced"
my response: That should worry him if he was dating me, not hiring me as an architect
4
Perhaps that was too much, for a staid company man whom I've never met...
 
@AviD heh, brilliant.
 
@AviD balls, you have rather large ones
2
 
@LucasKauffman That is, in fact, what she said.
Don't tell @Adnan though. Don't want him getting excited.
 
@AviD @Adnan, @AviD has something to show you.
 
10:54 AM
@AviD Brilliant. I'm gonna write that one down.
@AviD Remote working is not my favourite thing, if I'm honest. I can do it, obviously, and I can see the appeal, but I like my death-defying cycle commute to work where I try not to be run over by a bus on a daily basis.
Except when it is cold, then I really detest it.
On another level, I like the Home/Work separation thing.
 
@AntonyVennard so, cycle to the cafe. I know many that "work from home" in a cafe.
I've spent a few days doing that...
 
@AviD That's true. I'd need a better laptop, but, not impossible.
 
Unless you specifically like the office / cow-irker comraderie thing.
@AntonyVennard Oh yeah, I remember that. I miss that...
 
@AviD I don't mind my cow-irkers, and I do think communicating with human bores is important every once in a while. The ideal I think would be half/half - three days for office time, two days work from home. Undoubtedly, I get more done when working from home, and I've no problem focusing on work.
 
@AntonyVennard I can see that. I've been thinking about something like that too - get less isolated, stay out of a rut, and put on pants once in a while...
 
11:07 AM
@AviD it's the commute I really like, especially in the summer. Keeps me very, very fit, as I cycle about 15 miles (24km) each way.
 
I would probably prefer 2/3 split, instead of 3/2, but thats all gravy.
I'm worried I would be too lazy to leave the house those days, though.
@AntonyVennard really? I detest the commute. Then again, for me its mostly about the traffic. Don't mind the drive.
And I can't cycle anywhere...
 
@AviD It's the cycling I like. Conversely, I hate it if trains or cars are involved.
 
@AntonyVennard when I had to commute by train, I always used that time well. Hated dealing with the timings, and missing trains, and transferring, and the crowded days, but better than traffic+parking.
 
@AviD Yes, trains are much better than cars. When I drive in, which so far has been twice in the last year, it has always been at 6am and leaving at 3pm or 7pm, thereby missing the rush hour.
 
In order not to endanger my sanity too much, I would switch off - one day go by train, one day drive up. It was about 1.5 hours driving, about 2.5 by train.
 
11:11 AM
Which is totally misnamed. There is no rush hour. It's more like car-park-two-hours.
 
@AntonyVennard 6 AM?? Like, in the morning?? That's not work hours, thats sleep hours!
@AntonyVennard I like how in some areas of the U.S., like NJ, the highway is literally called the Parkway.
 
@AviD Yep. Get to work for like 6.30 am, maybe 7 if lazy. I know from cycling that if you attempt to do my drive from work after 7am, you are going to spend 5x the time doing the same drive.
Cycling is like a lie in because I can leave anywhere between 7-8
 
@AntonyVennard that's why I would drive in after 9 or 10...
 
@AviD Haha yes Avi, but I have to start work at 9!
 
@AntonyVennard see, that's what I mean about Israelis being cowboys. We like to start whenever we goddamn well please.
At least I do.
I'm useless in the morning anyway.
 
11:15 AM
@TerryChia :D :D :D What is it what is it? Show me show me show me!!
 
@AviD We have flexi-time sort of, so I trade starting early for finishing early. It's the only way.
 
@AviD show me show me show me!
 
@AviD Oh so am I. That's why I go in early. Whoops I mean it's because I'm motivated!
 
haha, I see, you save your good hours for yourself!
 
@AviD Exactly. I'm as grumpy as hell at 8am.
 
11:17 AM
@AviD & @TerryChia, fucking tease!
 
29 mins ago, by Lucas Kauffman
@AviD balls, you have rather large ones
 
PLEASE can we stop talking about my testes now?
 
11:30 AM
@AviD fine fine.
 
@AviD oh i certainly came back at the wrong time >_>
 
@D3C4FF Around here? It's always the wrong time.
3
 
xD
Can't be as bad as my office chit-chat
 
@D3C4FF Have you seen the topics we talk about here???
I really doubt your office discuss cacti, asses and anal fisting on a regular basis.
 
There is a reason this room was called The DMZ.
 
11:34 AM
Well. Just a couple hours ago we were debating weather attaching an elastic band to ones nuts would be more efficient at stopping wet dreams than simply jerking off constantly.
Lively debate topic.
Must be an ITSec thing
 
@D3C4FF Why debate? Just conduct an experiment in a controlled environment. Simple.
@Adnan is available if you need volunteers.
 
@TerryChia Proper experiments must start with a hypothesis, to prove or disprove.
 
No controlled environment available unfortunately.
I can test it later tonight though i'm sure
I'll report back next week
Or maybe next month.
 
@TerryChia I shouldn't have started this
 
I'll need a large data set for this
 
11:36 AM
And proper statistics means failing to reject the null hypothesis does not prove the null hypothesis, meaning you need two experiments.
 
You guys should partake to
 
Double blind testing of course, although I'm not sure how you are gonna set it up in this scenario...
 
Well. We've discussed setting up experiments involving elastics and male genitalia, i'm pretty sure we're now officially internet friends.
Congrats to all
 
@D3C4FF I think you need to add some electric current to that, then we're good.
 
I dunno if that'd be beneficial to the sleeping part >_>
But it sounds like fun while i'm sitting around at a client meeting
 
11:40 AM
@D3C4FF I don't think I want to know.
 
Yay- I have full connectivity again! Still on my mobile, but back in the land of water wind and snow I have 4G!
 
Hmm, I need opinions on 16:9 vs 16:10. Is 16:10 really that much better for productive work? Can't say I spent much time in front of a screen with that resolution before.
 
What? Never been in a client meeting and been like, "Man, i wish someone would taze my nuts right now so i could stay awake"??
2
 
Ninefingers - I see you lost an alias
 
@RoryAlsop I did. Careless of me really.
 
11:44 AM
@avid -had fun with rush hour traffic from Tel Aviv to Jerusalem and back. So many accidents!
 
@D3C4FF Haha. I was pretty certain that was not what you meant, but for humour purposes it was a funny conclusion.
 
Not involving me, just crazy traffic
 
@RoryAlsop heh, welcome home. You got out just in time - Summer is starting, its starting to heat up for real next week.
 
Yes @RoryA I'm having an experiment with using my real name, see how I like it.
 
Jerusalem was so hot!
 
11:45 AM
@RoryAlsop haha, yes, always fun. Enjoy the Holy City?
@RoryAlsop I think it was just luck. Usually its quite a bit cooler than Tel Aviv, but yesterday was hot all around.
@RoryAlsop or didja mean, all the skimpy clothing on the ultra-religious babes?
 
Time to head home, i'm out all.
Cheeri-o
 
@D3C4FF gday
 
12:11 PM
@D3C4FF Pipip and all that
 
anyone happen to know what password hashing algorithms are supported in Fedora/389 Directory Server? Not able to find any specifics anywhere.
 
@AviD BASE64, I heard it's uber secure
 
@LucasKauffman that's for LDIF files, but not the actual database, RIGHT??
I also love how securitily-mature their documentation is. They use hash and encryption interchangably (sometimes in the same sentence).
 
@avid -Holy City was particularly awesome. I'm most interested in the construction so the deep water tunnels and cisterns were amazing
 
@RoryAlsop oh, they took you on the tunnel tour? Love that.
Also always stays nice and cool :D
 
12:25 PM
Yes. Went into some sections only opened in last three months. Could have spent all day down there
 
Cool. Where else did they take you?
@RoryAlsop in my younger days I took a course to be an Old City Tour Guide. Got to spend several days down there, learned about all the different construction types, materials, histories, etc. Fascinating.
Never did really give any tours, though, except for the one at the end of the course...
 
King David's palace - the new dig. Mount of Olives. Lunch just off the via dolorosa in a market food place (was excellent). Went to the West Wall, stations of the cross, Holy Sepulchre and some shopping in the market
 
@RoryAlsop very nice. Get any good souvenirs?
dang, forgot I was supposed to check which Israeli wines are worth bringing back. too late now, sorry :-(
 
@AviD If you mean including the idea that when you have a wildcard certificate, you will probably share the private key between several servers, then I think my answer already covers that (in the last paragraph). Although you would have the exact same issue with a multi-name certificate (several names in the Subject Alt Name extension), so it is not specific to wildcard certificates.
 
Couple of things. One for the wide and one for my youngest. Didn't find anything the other two would like
 
12:33 PM
But hey, if you feel like writing an answer, go for it. That's the point of the site.
 
Also wanted to mention you should bring a huge bag of Bamba back for your kids. Disgusting stuff, but they would enjoy it...
@ThomasPornin seen my last comment there?
@LucasKauffman aha! Just found a small mention of this, hidden somewhere in the docs...
 
Hi there
i wanna ask that when an auto update of app occurs, the old data is deleted... Is there any way to save it?
 
Doesnt look good, though. Best they can do is Salted SHA-x.
 
@AviD wait, they actually use base64 for hashing? That's rather retarded
 
@Noman you might try over on Super User depending on the app...
 
12:35 PM
Fedora, y u no use Bcrypt
 
@LucasKauffman no, they don't - only for LDIF (export/import).
 
@AviD.. shall i ask a new question for this ??
 
@LucasKauffman or at least make it configurable / extensible.
 
@AviD yea that's not surprising
 
@Noman not here, no - it is not on topic here.
 
12:36 PM
@AviD Yeah, but I still think it misses the point. Having a wildcard cert for the low-sec site is no more (and no less) a security issue for the other site than the client browser trusting a shady CA.
 
@LucasKauffman salted sha is not great.
 
@AviD I meant the base64 :p
 
@AviD.. okays man
 
In both cases the client can be made to connect to a fake site, and there is nothing you can do about that -- and it won't make the site any less secure.
 
yea salted sha is not good
 
12:37 PM
@ThomasPornin True. But "trusting a shady CA" is a bit of an externality.
Building in a catch-all certificate is an internally-sourced problem.
 
@AviD A rather common one, though.
 
@ThomasPornin Daaaaaaaaamn!
 
@ThomasPornin fair enough, but imagine a user/corp that actually hardens their desktops, and removes all the untrustworthy CAs. your wildcard still enforces the same situation, kinda...
 
Now get to work on that badge for Bear #2.
 
@ThomasPornin congrats!!
@ThomasPornin re picture passwords, I did read a study on the apparent entropy of Win8's picture logins, and it was approximately on par with typical passwords (which is not great...). This is because they support not just points, but lines.
I cant find the article now... know anything about that?
 
12:57 PM
Note to self: don't use 389 directory server.
 
@ThomasPornin Now get it on crypto.SE. You're not even Epic there
 
@ThomasPornin Congratulations. It was only a matter of time.
 
@CodesInChaos You got 153 upvotes for that reptrain question on programmers?.. Amazing!
 
@AviD Hiring too experienced people is a worry -- because someone who is too good is likely to switch to a better job within a few months. Of course, not a problem for time-limited contracts.
@AviD No... but it makes sense.
 
@ThomasPornin ehh. If it's an awesome place, you don't need to worry too much - and if it's not awesome, experience or lack thereof doesnt affect how much you need to worry.
 
1:04 PM
30 bits of entropy is already quite good, compared to typical passwords.
 
less than 128 bits is totally unacceptable!
 
Less than 256 is criminal negligence.
 
@ScottPack So's your face.
 
@TerryChia I dunno. I had some dude recently tell me I'm a fairly attractive fella. I'm going to go with his assessment.
 
Yo momma's so fat, SHA-1 produces a 1024 bit result.
 
1:21 PM
0
Q: ASP.net vs PHP security?

WiseI have been told that generally speaking, asp.net web apps tend to be more secure than php, since asp.net has some automatic security measures, for example, by default it doesn't allow remote file inclusions. And when you code in php, you have to take care of those things yourself, so some develo...

Any good reason to close this?
I really dislike such questions, as much as I hate php.
 
Jeff Atwood on August 15, 2011

Who would win in a fight between a Gorilla and a Shark?

OK, maybe you’re thinking that’s a ridiculous question. Perhaps it is. But various forms of this question get asked all the time. Consider this now-ancient Stack Overflow question titled Python v. Perl:

Okay, so I’m finally making the jump into scripting languages and I have decided to focus on either Python or Perl. The problem is: I don’t know which to cut my teeth on.

Most of my programming experience is in C, Java, and C++. There’s no specific task I would be learning Python/Perl for, other that possibly applying it to my dev work to make life easier in general. …

 
@AntonyVennard That'd work.
 
@TerryChia That's the canonical "comparison questions mostly suck" blog post.
From the StackExchange Undocumented Canon.
 
Hello can you tell me best tool to perform pentest?
 
@LucasKauffman ls
 
1:27 PM
Other than a pen and paper, you mean?
 
thank you terry I already use ls, is too complicated can you advice on best tool better than ls?
Those questions I really hate
 
@LucasKauffman You did it wrong. It should be: What is best tool fr PENTEST Plz Advice!!!!
 
Great php example: if(strcmp($_POST("p"), "someSecretPassword")==0){...} isn't secure
 
@LucasKauffman RTFM.
@CodesInChaos Of course not, you are hard coding your password. ;)
 
Dear Tom Leek. Please learn to close vote ! (security.stackexchange.com/a/32465/2213)
 
1:29 PM
Everyone knows you are supposed to use a config file! PFFFT!
 
@CodesInChaos why isn't that secure?
<= php noob
 
You just need to stack three levels of bad api design in a single line
 
@CodesInChaos I have always disliked PHP and you've just given me justification for further disliking it.
 
?ps[]=a --- Notice that instead of sending "&ps=a", I also send the square brackets [] in the parameter name which will send an array object
 
ah a logical error
cool
 
1:35 PM
(though every sane php programmer will never ever use ==)
which would save you in php 5.3, but not in 5.2
 
@AntonyVennard Bear #2 does not vote at all, for anything.
 
@ThomasPornin Really? Wow!
 
He uses sarcasm instead.
 
1:54 PM
@ThomasPornin And we all thank you for that.
 
bear2 needs to post on crypto as well
 

« first day (817 days earlier)      last day (4068 days later) »