« first day (868 days earlier)      last day (4024 days later) » 
00:00 - 12:0012:00 - 00:00

12:46 AM
chgachga chgachag chuchu
looks like I may have hit a rep train headed for 10k
oh hey,
@d3c4ff - did you see the trouble you caused over in meta on photo?
apparently mattdm and michael got in an edit war over if your last sub-question should be it's own question on the self-cleaning sensor
ut oh, I just realized I may be in mortal danger
though I'm sure it will rectify itself soon enough
Terry, you're in danger too
I'm pretty sure the universe has to wipe us from existence from being ahead of the bear in monthly rep
 
1:15 AM
@AJHenderson Yeah i did, funny stuff.
I'm personally of the opinion to have as much in one place as possible to stop having to go from question to question. Unless the answer to one of my sub-questions is exceptionally detailed
 
@AJHenderson better start studying this page then ;) BTW each member reaching 10k has to buy a round for the whole DMZ!!
 
@TildalWave Hellz yeah!
 
@AJHenderson link please (I think I know what you're talking about but I'm not sure... Oz people have been known to cause a stir more often than one can follow LOL)
@AJHenderson current month is so far younger than current week is :))
 
2:16 AM
@AJHenderson Pointy ears ftw.
 
2:35 AM
2k FTW!! Editing was a pain in the butt before even if it came with small-ish rep advantage!
ALL YOUR BASE ARE BELONG TO US!
2
yeah babay!
 
3:01 AM
@TildalWave Go shawtay!
 
 
1 hour later…
4:25 AM
Look everyone!
0
Q: High-frequency noise deterrents

D3C4FFI've found that walking past certain boutique stores in my city that some places have installed very loud high-frequency noise generators. These cause a fair amount of discomfort for passers by that are able to hear them. My understanding is that younger people are able to hear these frequencies ...

A physical security question!!
 
5:21 AM
@D3C4FF there, I even got to use street punks for the first time in my answers LOL:
0
A: High-frequency noise deterrents

TildalWaveThese devices you describe are also known as teen-repellents and take advantage of a well know fact that our hearing frequency range deteriorates with age, while it's not yet fully developed in pre-teen age. The most effective age range such devices could target is somewhere in the range of 12 to...

 
5:41 AM
@D3C4FF Honestly, I was waiting 10 minutes or so thinking you're gonna post an answer for it too :)
 
@TildalWave Haha, there's always a first time!
@TildalWave I'm vaguely familiar with them, but only noticed them recently.
They all look fairly new, and i figure someone new is deploying them in town
Good answer :)
Assuming nothing surpasses it, i'll mark it as sold!
 
@D3C4FF god they've reached Oz have they? Get involved, have them banned ASAP
 
@TildalWave Yeah, I was looking to find any kind of legislation banning them
 
@D3C4FF don't yet... don't tick it green yet it might deter other answers and I'd be interested to hear from others too if they have something... I need dirt on these bloody buzzers
 
@TildalWave Nah, i usually wait at least 2 days
 
6:00 AM
@D3C4FF @TildalWave ding
 
G'day @MMavipc :)
Hows it?
 
@D3C4FF fine, you?
 
@MMavipc Pretty good. minus the 'teen-repellent' buzzers :P
You?
 
@D3C4FF fine, you? 'teen-repellent' buzzers?
 
6:05 AM
@D3C4FF must be some crazy aussie thing
 
@MMavipc apparently its some crazy UK invention... -_-
Anyway, the noise is driving me nuts.
Looking up assault laws now :P
(b) with intent to inflict or being reckless as to the infliction of
bodily injury, pain,** discomfort, **damage, insult or deprivation of
liberty-
application of force includes-

(a) application of heat, light, electric current or any other form of
energy; and
Maybe i just print that out and staple it to their door?
 
lol
@D3C4FF do anything with reversing lately?
 
@MMavipc Haven't had time, i've been stuck on a web-app pen-test for the past week and a bit
Almost done with testing, but now its reporting time -_-
Hence the procrastinating on Sec.Se :P
 
@MMavipc Hey! Sorry I was out walking the dog... nothing proverbial BTW LOL... Sup?
 
@TildalWave nothing much, you?
 
6:18 AM
@MMavipc good thanks :) have you worked on any CTFs these days? I have still that RE chat you had with @D3C4FF to digest one day, maybe during weekend... you know, time is in short supply ;)
 
@TildalWave not lately, one's coming up though, check the ctf room chat
 
@MMavipc ah the jeopardy one? nice never did one of those
ouch by eindbazen ... these guys are tough :)
SPAM alert, any mods around? security.stackexchange.com/a/35201/20074
 
6:35 AM
Hey guys. I had a question in my mind but I feel it wont be appropriate to ask this on the main site. WiFi networks have been around since the beginning of 90s and the first wireless security standard WEP came to existence in 1999. so I wonder what were we doing for the time period before WEP. I was a kid back then ;)
I wanted to know if security was an afterthought in case of WiFi?
 
@MayankSharma whilst I'm not directly indicating that he's old, the guy you want for that question is @RoryAlsop as he worked on wireless stuff back then...
 
@D3C4FF yeah I've heard of that stuff used to keep neds and chavs out of high-end stores IIRC ....
 
@RoryMcCune Morning! So you didn't indicate and you still made the turn? That will be a fine, mr.! :))
 
@TildalWave that sounds like some weird Antipodean rule to me :op anyway I thought making fun of T'other Rory's age was always a free pass :)
 
6:49 AM
@RoryMcCune indeed! just mocking about... ;) hey did you manage to upload some clips from b-sides? or if someone else did?
 
@TildalWave there were some pictures that one of the crew put up, I've not seen any more although I believe there will be videos at some point...
So I get to subject everyone to me speaking quickly in a thick scottish accent again :)
 
@RoryMcCune hehe looking forward then
(I hear it's all the rage now)
 
@TildalWave Spamming the crap out of everything security.stackexchange.com/users/25484/ica
@RoryMcCune Yeah its got me bothered enough to look into legal solutions, if only to cause them about the same amount of headache
 
@D3C4FF thanks I think I managed to edit all of them to remove the offending part, I'll keep a lookout until some mode comes and kicks his butt
 
@D3C4FF yeah I'd be dubious about the legality of it.. you'd think that some kind of discrimination law would apply...
 
7:01 AM
@RoryMcCune Its Assault in my opinion...
 
@D3C4FF I think some community protection script kicked in and unregistered that account
 
@RoryMcCune Since it causes me discomfort (and potentially damages my hearing) while applying energy to me (in the form of sound) i think it legally applies
@TildalWave security.stackexchange.com/users/25484/ica Still looks like its there?
 
@D3C4FF unregistered ... looks like that's what the system does, the rest will have to be cleaned up by mods
0
Q: Spam in Q&A - Any advised handling protocol?

TildalWaveWe've been hit by another one of those pesky spam messages posted as an answer today. I won't post a link as it wouldn't make much sense, considering it ought to be deleted any minute now, but I was wondering what is the advised way of handling such occurrences for us non-moderators? What I did ...

Posted a q on meta to see what's the official word on how we should handle this
Additionally, does the community have any way of automatically removing/detecting spammy messages after (like in today's case) 5 posts quickly appear with the same link and get massively downvoted? — D3C4FF 42 secs ago
@D3C4FF yup this too... I'm not gonna edit it in, I think it's a given that anyone that'll read it and can answer will read all of it
 
@TildalWave Sounds good to me
 
7:23 AM
@TildalWave How is that offensive?
 
@Adnan as in offending
not within rules...
 
@TildalWave Well, then it's redundant. Spam is always against the rules
 
@Adnan spam is also :P good morning!
 
@TildalWave Oh Jesus! People eat that?!
 
@Adnan apparently some do, God bless them (they'll need it LOL)
 
7:29 AM
Is it possible to turn an answer into CW after posting it?
 
@Adnan sure, edit 10 times it turns into CW automagically
 
@TildalWave Ahh! Too much work
 
right all I'm off... you can start enjoying your day now :P cheerio!
 
don't just downvote spammers, flag them as spam
 
@CodesInChaos "Flag them", it sounds dirty.
I'll do it
 
7:37 AM
@CodesInChaos I did, but a mod still needs to do something about it no?
 
1
A: Spam in Q&A - Any advised handling protocol?

AdnanHere's the part from the relevant Meta.SO answer What is the effect of the Spam flag? This type of flag receives an extremely high priority in the moderation queue. It should be used only when the content of the post you are flagging meets the criteria defined below, or it will likely be declin...

 
@Adnan Cool thanks!
 
7:57 AM
@D3C4FF No sufficient spam flags delete the post
 
@CodesInChaos yep, got it :)
 
Morning
 
@RoryAlsop Morning
This is one of the answers that really makes me say "Today I learned something completely new"
0
A: Getting strange texts to an iPhone #PWD123456#00X

AdnanRegarding your dad's iPhone, there's nothing to worry about. This is just an automated attack against Wafer GSM-AUTO (SMS-capable) devices. The Wafer GSM-AUTO is a very simple Microcontroller. You can think of it as a remote power switch. It control anything from a security door switch to a norm...

 
Re spam:I think everything did the right thing re that spammer - and similarly if we get spam/vandal revisions just flag them. They get auto blocked etc, and mods see them soon enough and can destroy the user account if needed.
@adnan - very cool:)
 
Yay! 2k SecSE rep :D
 
8:09 AM
@ManishEarth Congrats!
 
thanks :)
I'm really getting to like all this security stuff. I may even delve deeper into crypto later (right now I just know how RSA works, and I've tried to understand ECDSA)
 
@ManishEarth You know how RSA works?! Jesus!! If I didn't know any better, I'd start worshiping you.
 
Hey @RoryAlsop why was the question about who makes the buzzers offtopic?
 
@Adnan It's just prime numbers and modular arithmetic. Understanding the algo is easy. Understanding why it's hard to spoof is harder, but doable
@Adnan Try understanding ECDSA. They use up like half the alphabet in variables :S
 
@ManishEarth To be honest, Elliptic Curve sounds so sexy.
 
8:16 AM
@Adnan lol yes
Sexy things are harder to get :P
 
@ManishEarth Speak for yourself
 
@Adnan :P
 
@D3C4FF - that question was flagged up as off topic. Personally I think it is a fine question, but the piece regarding who makes them is both time localised and not a security question - so I thought taking that out was sufficient to remove the off topic flag.
 
@RoryAlsop Yeah alright, i can accept that.
 
@ManishEarth Currently, I just have my foot on the door of Cryptography. With time, I'll learn a bit more. I don't think that at anytime I'll attempt to be an expert in Cryptography, I don't think I'm cut for it.
 
8:18 AM
@Adnan Same here
 
@RoryAlsop I don't see many phys-sec questions on sec.se so I figured it'd get flagged at some point :P
 
I'm studying to be a physicist(which I want to do), so ALL of this is pure interest.
Which means that I'll never be an ITSec expert (won't have the exposure or experience)
 
The rest of that question I think is fine
 
Let alone Crypto
 
Great! Now after I removed my previous proxy-related answer and posted a new one, it just appears as if everybody added "web proxies" to their questions and I copied it from them and put it as a new answer.
Damn timestamps!
 
8:21 AM
@Adnan lol
 
Oh. Got my first DMCA takedown on one of my answers today :-(
 
I saw your answer, scrolled up to the question, and then facepalmed when I saw "web proxy"
 
@RoryAlsop What?
 
@RoryAlsop What the hell?! Which answer?
 
@RoryAlsop Where? Why? How?
 
8:22 AM
Even though I linked and tagged, the guy does own copyright so he has asked that it be removed
 
Oh, just a removed image
 
Yep - nothing like the crypto one
 
Aaah I was hoping for some Thursday morning drama!
 
@RoryAlsop Good that CISPA isn't active.
 
So I'm fine with it - sorry @Antony
:-)
 
8:24 AM
@RoryAlsop Dammit, just how am I going to rant on hackerslashit about censorship now?
 
Hahahahahaha
 
You do realise this will force me to post a load of links offering obvious startup advice (working 24-7 will kill you! If only I knew this before!) and about how node.js is solving all third world problems? Look what you've done to my day!
 
I prescribe cider :-)
 
Oh okay, I'll try that.
 
See - I'm a people coach. That's all it takes. Ahem...
 
8:28 AM
@RoryAlsop Coach? Don't you mean "lifestyle guru?"
 
Oh, yes, you must have misread :-)
 
@RoryAlsop sounds like a good approach to take at $EMPLOYER. annual review time - "I prescribe cider" :)
 
I think you could get away with that @RoryM
 
@RoryMcCune I actually think the best thing to do is to read dilbert and realise "you are not alone".
 
@AntonyVennard yeah the number of times I've been in a corporate and people have dilberts pinned to the wall is v.telling...
@RoryAlsop true, true..
 
8:42 AM
Should i invest in a second desktop PC. Y/N?
 
@D3C4FF Before I answer - for what purpose?
 
@AntonyVennard So that i can have a rig at my warehouse instead of bringing my home computer there
(my laptops are sub-par)
 
@D3C4FF Ah. In that case yes.
That's an obvious use case, I think. I generally find for stuff I do (VMs etc) desktops are pretty important.
 
I've kinda accumulated half of the parts required anyway, so i figure i may as well drop the extra 1k for the other half of the components and get a good rig running
@AntonyVennard Yeah, mostly for VM's and picture editing
 
@D3C4FF Well, I always work on the basis of "don't waste the money because you want it". Like, I'd quite like something super powerful, but what I have is adequate. However, when you need it, because the alternative is actually causing you to e.g. waste time, then that becomes more justified.
 
8:49 AM
@AntonyVennard Good logic. I also don't want to waste parts. I remembered i still had a spare 1000W PSU and i've got ~5TB of spare SATA drives kicking about as well, dusted off an old Antec sonata case, a DVD drive....
so i just need the board, C/GPU and RAM and i should be sweet
 
@D3C4FF Makes even more sense then as you're almost all the way there as is.
 
@AntonyVennard Yay! Justification ^_^
 
@D3C4FF So you already have a desktop at home, and you want another one?
 
No, i took my desktop to work, wait...
 
@D3C4FF You could send them my way. :P
 
8:51 AM
Now, I'm an unhappy bunny finding /* This stub is a stub to make the build happy */ in the source file I was hoping implemented what I needed.
 
@D3C4FF What?! You took your home desktop to work? Why?
 
@Adnan Because.
 
@Adnan Cause this :D
I spend all my time either at work or at my warehouse. I only sleep at home :P
 
@D3C4FF I don't get it! Why not tell the people at your work place that you want one more desktop?
 
And if i'm not at home/at warehouse/sleeping, i'm farrrr away from technology
@Adnan Well, no-one uses desktops. And i fully embrace the idea of BYOD
The two middle samsung lcd's are mine, as is the KBD/mouse/speakers/amp
 
8:58 AM
well you are taking it to a new level...
 
@D3C4FF That's going a bit far...
 
@D3C4FF BYOD and BYOB are.. weird initialism
 
Incidentally there's not much legroom underneath my desk...
 
@D3C4FF Awwwwh CDs!
 
@Adnan Yeah i use em often enough...
@Adnan BYOB = Bring your own bomb? youtube.com/watch?v=zUzd9KyIDrM
 
9:03 AM
@D3C4FF I think the original usage is more suited to the @Rory 's - bring your own booze.
 
@D3C4FF Nice! Now I dislike you way less
 
@AntonyVennard xD They supply it for me, although there's a bottle behind one of the monitors :P
 
"HACKING: The art of exploitation"
 
Unless of course the party is hosted by AQ. Then it might be bombs.
 
@Adnan Yay! I'm disliked less! :D
@Adnan was i disliked previously??
looks around all paranoid
>_>
<_<
 
9:05 AM
@D3C4FF Clearly. I'd take offence quick, before an explanation appears!
 
is now mortally offended
 
@D3C4FF Whaaaa?! Isn't that kind of the default here?
Dislike everybody until proven worthy of being liked?
 
@Adnan xD
@Adnan Now that's security vetting!
 
@D3C4FF That's how I treat everybody.
Except members of the other gender. Awesome until proven crazy.
 
@Adnan Good book though hey?
 
9:09 AM
@D3C4FF Ditto!
 
Alright. time to gtfo of here.
back later
 
@D3C4FF Back you too
 
9:55 AM
this bloomberg.com/news/2013-05-01/… can't make comfortable reading for QinetiQ
 
10:18 AM
@rorym - that's pretty damning. I'm most amused by the comments from HBGary at the end there. Pots and kettles?
 
@RoryAlsop yeah it is more than a bit ironic there. but it just goes to show the disparity between what high risk companies are doing compared to what they should be doing.. Hard to see what'll change that game if QinetiQ are still in business and selling ok after that level of hacking..
 
The fact that they knew they had an issue but didn't close off their network, despite having data on the newest highly sensitive technological warfare improvements, is baffling!
 
10:33 AM
@RoryAlsop indeed. BTW did you notice that PWC US are a QSA now? I gues the big-4 must have resolved their qualms about liability...
 
@RoryMcCune I doubt they'll lose much business as a result of that, actually.
 
@AntonyVennard indeed but that's scary on two fronts. One it implies that no-one cares (and surely they should) and/or the people that are in the market know that all the other companies are just as bad...
 
@RoryMcCune I'd replace nobody caring with internal politics...
 
@AntonyVennard well yeah. Weirdly the only good answer is a really bad one, which is legislation mandating minimum security levels with harsh penalties for non-compliance
 
@RoryMcCune the other side of things is that QQ are in a fairly unique position, especially in the UK, of being the other half of the DERA, and therefore mostly-but-not-government. There basically is nobody else that does what they do in this country - or, if there is, the list is very small: BAE, Lockheed etc.
 
10:49 AM
@AntonyVennard yep and if they're at the more scrutinized/high-end of the security world, what does that say about the rest...
 
Actually, the industry is currently getting smaller. Detica, who do "government cyber" was brought out by BAE. Goodrich were bought out, and the likes of Logica etc who do miscellaneous large government contracts are now owned by not-themselves and so on.
 
Whilst a bit journalisty this bbc.co.uk/news/uk-22352465 was an interesting piece on that much vaunted £650 mill that the uk gov allocated to "cyber"
 
@rorym - also PwC has a QSA function in north England!
 
@RoryAlsop wow, I remember when PCI came out they wouldn't touch it 'cause of the theoretical unlimited liability aspect...
 
I like this question:
3
Q: Current UK Police Access to ISP Logs and What Information Said Logs Can Provide

Gary William MurningI'm currently researching a novel that has a crime element that centres around Internet-exclusive relationships and I would appreciate any help you might be able to offer regarding how much access the UK police have to ISP logs (and any other relevant Internet-based information)—and what this inf...

It may need a couple more upvotes so the OP can gain access to the DMZ for further chat
 
10:52 AM
@RoryAlsop Done.
 
Ah - will need to watch that later. Can't see vid here.
I like your answer too @adnan
 
@RoryAlsop Just a side note. The problem here is that the subject is deceased. Wiretapping at this point is useless.
 
@ScottPack I also take my masturbation privacy very seriously.
 
Totally agree - I was just widening the scope a little. I upvoted both your answer and andymacs because I think they are excellent
 
@lynks Really? What steps do you take?
 
10:59 AM
@Adnan I avoid the use of mullions completely.
 
@RoryAlsop Awwwh! How sweet!
 
/me is baffled by this inappropriate use of mullions
Scallions, however...
 
@lynks Is that some sexual euphemism?
@RoryAlsop Am I the only who doesn't know this?
 
(I have no idea, I'm old, my euphemisms are mostly Shakespearian)
2
 
@Adnan I was referring to @ScottPack 's masturbation room question security.stackexchange.com/questions/18726/…
 
11:03 AM
According to my [trustworthy Euphemism Generator](http://walkingdead.net/perl/euphemism) , "I couldn't believe my luck as she started
flicking the melting stainless steel emperor."
anything wrong with markdown?
 
So, the UK police novel question is 3rd on the supercollider hot list - Adnan may have spotted the reptrain...
 
@RoryAlsop many sounds like an interesting plot line!
and thanks for the upvote
 
Hey @andymac - you give good answers you get many upvotes :-)
 
@RoryAlsop Jesus! If this keeps going, I'm gonna look at @Terry in my rear mirror.
 
to be honest I jumped on this site as I saw you'd been a bsides mentor on someone's blog and that you post here
I'd never been on this site before but seems like a great resource for infosec stuff / it's my job so if I can give back I will
 
11:07 AM
@RoryAlsop Well, haaaave you met Adnan?
 
the joys of being an open zealot
 
@Adnan Well, at 200 rep max per day you still need a few months.
 
:-) did you get to b-sides @andymac? Was good fun this year. My mentee did an awesome job.
 
I'm just working hard to hit 10k.
 
@TerryChia I wonder how difficult would it be to hit it before you do?
 
11:09 AM
As a security community evangelist, I still got some flak for taking my wife to b-sides London for her 40th birthday...
 
@RoryAlsop no - i meant to go to the MWR bar after but ended up boozing after InfoSec with a client
 
@Adnan Probably pretty hard since I still answer almost every day.
 
lol
 
@TerryChia True
 
I didn't get back to bsides fast enough afte a quick trip to Infosec, so missed out on tickets
But welcome to sec.se
 
11:10 AM
@RoryAlsop Sounds like the perfect birthday present to me
 
@Adnan You could probably hit 10k long before @Iszi or @Scott though.
 
thanks man - it's really impressive how complete some responses are / very educational
 
@TerryChia Naah, I like Isiz and Scott
troll-face
 
if anyone's interested this is an awesome article : bloomberg.com/news/2013-05-01/…
 
@AndyMac Yeah, forgot to welcome you here. Not that I'm qualified to judge, but you seem to have some nice answers.
 
11:11 AM
@andymac - yes, @rorym kicked off an interesting discussion on that this morning - see way up there ^
 
@Adnan Thanks - appreciate it / I'm sure we'll chat more. I've seen some really helpful answers of yours
 
@Adnan Adnan being nice. That's weird.
;)
 
@AndyMac Well, take it easy there. Let's not go as far as calling them actually helpful. They're .. ummm.. okay.
@TerryChia He's Irish!
 
@Adnan looks like there's plenty of banter in here!
 
better than plenty of batter in here
 
11:17 AM
@Polynomial well we are fans of fish and chips (well I am anyway ) :op
 
not the kind of batter I was implying ;)
 
@Polynomial well I assumed you were shooting for banter but ended up typo'ing batter :)
 
@AndyMac Yup, that's pretty much it.
 
nope, see AndyMac's comment above :P
 
@AndyMac Not long time ago, I was the new guy here
The main thing is, take everything with ease.
Observe and blend in
while maintaining the special you
 
11:19 AM
@Adnan Wrong, find a psychiatrist first.
 
@Polynomial but that would require reading more than one line, I ain't got time for that sort of thing :op
 
Keep in mind that it's highly unlikely that anyone will intentionally try to offend you.
 
@RoryMcCune aintnobodygottimefodat
 
11:48 AM
With better formatting, this could be a very interesting question
0
Q: Relationship between penetration testing and false positive results

user25494I had read through several research papers that showed existing researchers were widely discussed about existing automation scanners are tending to produce false positive results. In the meanwhile, I also did read through some articles that showing the manual penetration testing could be solution...

 
@Adnan Answered, although my phrasing is pretty bad in my answer. Kinda tired.
 
@TerryChia Not saying it's not worthy of an upvote in its current state, but I'd like to see you mention the downsides of false positives on the pen. testing procedure, as the OP mentioned something similar.
 
00:00 - 12:0012:00 - 00:00

« first day (868 days earlier)      last day (4024 days later) »