« first day (913 days earlier)      last day (3967 days later) » 

12:33 AM
So Facebook might be offering a replacement for Google Reader. theregister.co.uk/2013/06/15/facebook_invite_rss_reader I'm going to hate it if it's good, because I might have to use it. They're one of a handful of potential players on the planet who can match Google's infrastructure for it, which is the most important part for me.
 
 
3 hours later…
4:02 AM
@copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste
 
I wanted to go to sleep, but now that I replied, I am socially obliged to stay awake for 15 more minutes and wait for a possible response
 
Seems legit
I'll ping you in 14 minutes then :)
 
@copy Hi. :)
 
4:17 AM
+30 minutes
 
@copy How sleepy you feeling?
 
8.5 sleepyness units
 
@copy we'll get you to 11!
 
4:49 AM
@copy Hi.
 
I can't talk, I'm sleeping already
 
@BadgerGirl Lulz. @copy
 
He left. :(
I should leave too. Bye.
 
5:38 AM
@copy There are a lot of existing OSs.
On many different types of hardware, including satellites, robots, mobile devices, computers, industrial controls
 
6:05 AM
mode switching is usually a hardware enforced feature that prevents/allows certain instructions in some modes and not in others. The basic simple example is x86 real mode (which allows modification of all memory and I/O) and x86 protected mode (which uses virtual memory mapping, preventing direct access to physical memory and I/O)
 
6:19 AM
Any kernel code that is in memory accessible to a given process may be jumped to (have the instruction pointer set to the address of the target kernel code). If the correct entry conditions are satisfied, the kernel code will then be executed. If the given process was unprivileged, the kernel code will run unprivileged.
 
6:42 AM
Is this guy out of his head?
0
Q: Are there low-tech ways to reliably generate passwords?

detlyBetween the online services I use, and the number of machines and networks I need login credentials for, and how often some passwords need to be changed, I am faced with the choice of forgetting most of my passwords and jumping through hoops to reset them (where possible, or abandoning data where...

I'm pretty sure the answer to his question is "No."
 
7:05 AM
@tylerl check my answer? Whatcha think?
 
sup all, i work w/ Jeff
and TIL that stackexchange has chat
 
8:05 AM
Hey @D3C4FF, did you see my ping yesterday?
 
@TerryChia I did not ._>
I've gotten a stack of em from the ctf room
 
@D3C4FF Ahh, I asked if you were the guy looking for a tool to scrape comments from a html page. I recall seeing a question about it a while ago.
 
@TerryChia ah yeah, that was me security.stackexchange.com/questions/35937/… so many downvotes :(
 
@D3C4FF hehe. i threw together a short python script to do it something like that. pass in a url or ip address and it will list out all the comments in that particular page as well as the line number.
 
8:23 AM
@TerryChia wana whack it up somewhere? Using Burp works great for the record, but its not free so :(
 
@D3C4FF 23 lines of code: gist.github.com/Ayrx/5791379
Nothing too fancy.
Let me know if something is broken or you think it could do with a useful feature. :)
 
8:45 AM
@Adnan Just capturing a handshake should not be enough to mount an offline attack (unless the handshake sucks). You need to impersonate the server so you can even learn the password hash.
 
@Terry did you manage to fix that problem with flask login?
 
@LucasKauffman Ahh nope. Been away the weekend though so didn't work on it much.
 
9:07 AM
@Lucas I think you misunderstood the 2 password question
Or maybe I misunderstood your answer
 
9:21 AM
two passwords is mostly useful if you use your normal account in untrusted locations
 
@CodesInChaos That's what I was thinking about
 
@TerryChia HTTPS support would be good
:P
 
@D3C4FF Hmm? It appears to grab comments from HTTPS links just fine. You just gotta pass in the appropriate URL. Like python scrapecomments.py https://twitter.com
 
9:37 AM
@TerryChia I got 'please ensure that the URL is formatted properly ._.
 
@D3C4FF Heh. You gotta type in the full thing. Like http://www.blahblahblah.com. I should add in some code to format the urls properly but maybe later eh? :P
It works for ip addresses as well. Like python .\scrapecomments.py http://50.31.151.33.
 
@TerryChia see above
 
@D3C4FF Well, you obviously don't know how a URL look like! How can you question the wisdom of a command-line tool's error message?
 
Hmm, mine works.
Remove the try : except blocks and see the more detailed error.
 
Jun 11 at 11:54, by Terry Chia
@Adnan heh. STOP USING WINDOWS! :P
 
9:43 AM
@Adnan haha! i do play games and i'm just lazy as hell to dual boot my machine. :P
 
@adnan read it on my phone so I might have will check it later
 
 
3 hours later…
12:20 PM
@TerryChia .\s.... just looks wrong
 
@ManishEarth Windows. :(
 
I know
 
since . is typically on the path in windows, you shouldn't don't need the .\
 
Besides that
 
@CodesInChaos I tabbed the filename. Lazy typer. :P
 
12:44 PM
@TerryChia :'(
 
@ScottPack 3===D
2
Oh, we're not doing that?
 
Scott is sad about sec.se having standards, not about his lack of standards :P
 
it turns out that many customers of the company are suing it because they failed to inform them about the RFID tag inside the card
 
@GreenFly So your incident isn't the first?
 
@Adnan it seems not
 
12:58 PM
We all have standards, son. The only question is whether you enforce them.
 
1:19 PM
@ScottPack bigger question is, how low you set your standards.
@Gilles excellent answer on that meta post. Thanks, you said it far better than I could have.
 
good eve friends, happy to see chat room active on sundays too
 
In fact, it almost seems as if you've thought this through more than I did. ;-)
 
@Lonelybaby You're hitting where it hurts.
 
mellon
 
@Adnan hitting ?cant get u buddy :)
what does 3===d means?
@Adnan
 
1:22 PM
@Lonelybaby Maybe @Poly should tell you!
 
@Adnan oops where is my hero ?:P
 
@Lonelybaby Allow to explain. The DMZ being active on Sunday isn't exactly a thing to be very happy about it.
 
@TerryChia CLEANUP ON AISLE THREEE! CLEEEEANUUUP ON AISLE THREE!
 
@Adnan :)
 
1:23 PM
@Adnan Allow me to explain. Mellon.
 
can biometric systems cheated?
 
@Lonelybaby Of course.
 
like some face detecting softwares on android
 
@Lonelybaby You can always use Russian brute-force.
 
@Adnan Should I google that term?
 
1:24 PM
@Adnan intresting could u elaborate it friend?
 
@TerryChia I wouldn't go beyond page 3
@Lonelybaby Of course. Decapitate your target and use his head for access.
 
@Adnan Hehe. It's The DMZ. And it's you. I have to ask before googling any terms mentioned.
 
@TerryChia Well, when I first started, nobody told me not to Google shameless self-plugging.
 
I've got to say, the tone on the site has been less than friendly of late. My suspicion is that the bro-like environment in the Gentlemen's Club that is the DMZ is spilling over onto the site, and victimizing innocent bystanders. /cc @RoryA @Jefff
 
@Adnan what is that?
 
1:26 PM
@GreenFly Google it. ;)
 
Everyone here would do well to remember the 1st rule of StackExchange: BE NICE.
11
 
@GreenFly Well, it's something that most of the members here do.
in addition to sharing links to their answers
@AviD You should be nice to us by not bugging us all the time about being nice.
 
@Adnan one query, to cheat face detection systems ,is it possible by showing the photo of authorized person?
@TerryChia bit.ly/14aru6p i googled for u :)
 
@Lonelybaby I have tried it and it worked. It was with a little project using OpenCVDotNet
The image required some photoshopping, though. I had to make some shadow and light changes
 
@Adnan right now i m testing an android application, so i thought to try it, i browsed some questions on sec.se but cant find relevant questions on it :(
only question i found is yours
 
1:33 PM
Hehehehe... Today, the authorities issued an announcement about loose bear in my city.
 
@Adnan Ah, so that's where @ThomasPornin went.
 
Are we sure that Thomas is still in Canada?
@TerryChia God damn it! Why do you type so fast?!
 
@Adnan Why do you type so slow?
:P
 
@Adnan meh, you're a dick. ;-)
 
@AviD Thank, that's very nice of you. I'm usually called other sexual organs. Dick isn't that bad.
 
1:35 PM
@TerryChia he only types with one hand... ;-)
 
@AviD hehe
 
@Adnan hehe, see, this type of banter is fine here. Outside on the site it goes over poorly.
 
@TerryChia OH DAMMIT @TerryChia! no time for cracked!!
 
@AviD Just a little bit! ;)
 
1:37 PM
hehe
 
@TerryChia that's what she said?
 
@Adnan nice!
 
Daaaamn! The latest Therion album is soooo good!
 
> 'Man of Steel’ is really the Obama story 'cause it’s about a guy who’s not from here & has the power to see & hear everything you’re doing.
 
@Adnan you mean Les Fleurs Du Mal?
 
1:38 PM
@Adnan he makes music now? I guess he's a soprano, right?
 
@GreenFly Yup
 
@Adnan oh wait, I was thinking of Theon. Different greyjoy.
 
@Adnan Une fleur dans le coeur was the sexiest and most epic song I've heard in a while
 
@TerryChia uh oh. That's at least TWO Poison references in the past week. Clearly the Armeggeddon is upon us.
 
@AviD I don't know that one
 
1:41 PM
And if anyone here has watched Hot Tub Time Machine recently, just go ahead and climb on that boat across river styx.
@Adnan GoT....
 
@Adnan Cmon, you need to watch the show. It has boobies in it. Lots of boobies.
 
@GreenFly I think you mean Initials B.B, the 3rd song in the album
@TerryChia I am. I'm currently at S01E09
 
@Adnan oh, my bad. yes I meant that one
 
@Adnan Ahh. Season 2 has the most boobies IIRC. Sharp drop in boobie count in Season 3.
 
@TerryChia I'm still recovering from Eddard's death.
 
1:44 PM
@Adnan Wait till Season 3. :P
I like github gists. Very convenient way to store useful code snippets.
 
@TerryChia merely because everybody is dead by then.
 
:O :O :O :O!!!
After years of waiting, the new version of N is online! thewayoftheninja.org/n_downloads.html
Holy crap! This brings lots of teenage-year memories!
The physics are amazing!
 
1:59 PM
Morning gents.
@Adnan TorMail looks super interesting.
 
@Simon You always remind me of Rachel Roberts
 
@Adnan A woman?
 
@Simon Well, she's a model. So I guess that's a complement.
@Simon It's because of the movie S1m0ne
 
@Adnan Haha. Well, she also played in the movie In time which was great.
@Adnan Ah, I haven't seen that one.
 
@Simon I agree. It's a very neat service
 
2:05 PM
@Adnan Compliment. /nazi :P
 
@TerryChia Damn you, Singaporean Nazi!
@TerryChia Oh, and I've just Googled that
 
@Adnan Hahha! That website is ridiculous. You should browse through it if you have the time.
 
@TerryChia I still haven't looked into Python, I'm such a procrastinator.
 
@Simon Welcome to the club. I have been telling myself to learn Ruby for the past 6 months.
 
@TerryChia Meh, I guess we don't really need to which makes us procrastinate.
 
2:10 PM
@Simon Yeah.. I just keep sticking with something I'm comfortable with for my stuff.
 
@AviD Nice edit on the Sality question
@AviD How about marking this as a dupe and moving Baby's answer there?
 
@Adnan Just took a look. I think we should CW that question and at least attempt to keep it up to date with new sources once in a while?
 
@TerryChia +1 for that
 
@Adnan That sounded so intimate. ;)
 
Has there ever been a question related to self-extracting virus? I haven't seen one.
 
2:15 PM
@Simon Why? What about them?
 
@Adnan How it's done/is there a way to counter them?
 
@Simon I think we're having a terminology misunderstanding here. What exactly do you mean when you say self-extracting virus?
 
A self-extracting archive (SFX) is a computer application which contains a file archive, as well as programming to extract this information. Such file archives do not require a second executable file or program to extract from the archive, as archive files usually require. The files in an archive can thus be extracted by anyone, whether they possess the appropriate decompression program or not, as long as the program can run on their computer platform. The original purpose for the self-extracting archive was to allow the distribution of tools for extracting (and adding) member files to an ...
 
@Simon Yup, then we're on the same page
 
@Adnan Now that I know how it's done, my question would be: how to detect it.
 
2:19 PM
@Simon but I still don't see the problem here. A malware inside an SFX, you can do that with WinRAR
 
@TerryChia meh. I don't think its a good question, and it should be either closed, or better yet edited into something constructive. TBF the sality q is almost identical to this one, but it does have some constructive answers.
 
@Simon The antivirus simply extracts the files inside the archive.
 
@Adnan So the antivirus should complain as soon as it is written on the HDD?
 
@Simon The AV simply extracts the archive (with or without a sandbox) and scans it.
 
@AviD I mean CW the sality question and merge the answer from this new one.
 
2:22 PM
@Simon In memory, on the disk, I don't see a difference.
 
@Simon I think SFX's just bundle the extraction software together with the archive?
 
@TerryChia Basically, yes
 
Detecting it should work on the same principle as detecting any malicious file being extracted on your HDD. The "self extracting" part isn't really relevant.
Oh, @Adnan already mentioned it.
 
@TerryChia That's a first!
 
I see, I see. Time to run some tests in a VM.
 
2:26 PM
@TerryChia oh, I got that. I dont want to bother with it, as its a crap question. Now, if someone were to edit it into something really useful, and not just "gimme some linkies", then sure, I'll reconsider.
Or you could go cry on @Jefff's shoulder.
 
@AviD I don't think you get it.
@AviD Terry means to leave the new question closed, but just merge Baby's answer with the Sality one (the one you edited)
 
@Adnan I doubt that. Though it is not impossible.
@Adnan I do get it. But seeing as I'm just barely not closing the sality one, I wouldnt do that, until/unless the sality q is in a condition that can/should be referred to.
 
@AviD @Jeff is a bigger jerk than you are so nevermind. Where is the old geezer @RoryA when you need him?
2
 
basically, you're suggesting I merge Q1 into Q2, then close Q2.
 
Damn, yeah. They're just providing a bunch of links.
However, his question doesn't need much more explanation, he just wants the source as he seems to know how to analyze them.
 
2:29 PM
@AviD Honestly, I think the sality question is alright. it has a score of 12 and many people found it helpful
@Simon Ditto
 
@Adnan ohhh, so you're relying on the community now. I get it.
 
@AviD This sounds mean.
 
heehee
 
@Simon It's @AviD.
 
@TerryChia Haha
 
 
4 hours later…
6:37 PM
 
7:19 PM
@AviD It's alright, don't be sad. One day I'll send you nudes of me
 
7:46 PM
Just watching TPB AFK
it's pretty neat
 
@LucasKauffman So you recommend it?
 
@Adnan yea
 
8:03 PM
Why is that spam grammar question still open? Nobody has the balls to step on it here, besides the 4 that already voted to close? I'm pretty sure I've seen more than 4 people with enough rep mocking it in DMZ. What gives? Want to know really, because if the point of our Q&A is balls licking, then I clearly have no reason in participating. Thanks!
 
8:39 PM
@TildalWave Duuuuude!!! Are you drunk?
@TildalWave and just FYI, I think I was the first to VTC it.
Just because others didn't do the same, doesn't mean they're licking anything (well, at least not metaphorically regarding this question)
 
@Adnan probably also the first to go for the balls licking.
 
@Tildal Also, the fact that 3 other people agree with your position is a good thing. We usually have 5-6 close hammers here.
 
personally, I disagree - while its not a great question, it definitely is something worth discussing. Other than the reptrain aspects, really dont see why you fellas are opposed to it.
 
@Tildal Some happened to disagree with you
 
@AviD same here
@TildalWave you may want to meta post about it
And the general topic
 
8:43 PM
@ManishEarth No no no no... NO NO NO!!
 
"Are questions on spam filters allowed?"
 
@Manish We don't want to become M.SO. We're better than that
 
Hey, Meta is good!
 
@Adnan No not drunk and you know pretty well it's just metaphorical speak of the DMZ... and I never doubted you VTCed it actually
 
@Tildal I understand your frustration. It sucks - shitty question, shitty most-voted answer. To top it, the guy was borderline rude. But he's demigod, and people will stand behind him. This is how things have always been.
 
8:46 PM
@AviD The question is about us speculating on possible reasons behind a decision of some unknown third person, how is that constructive? We have had about 20 better question in the mean time that got closed for far less clear reasons. And the VTC were gathering UNTIL the gaylord misfired there
 
@TildalWave Oh, turns out that Gaylord is an actual first name.
 
@TildalWave dude, chill with the namecalling. its one thing to do it here, to each other and to @Adnan's face, directing at a specific user in absentia is just not cool.
@Adnan huhuh, oops, @TildalWave I take it back :-)
 
@Adnan I've never heard for him before, wish I actually didn't... but that's not the point, the point is about the question.... yes the top answer just invents things that aren't there to answer it... Oh yes... that's a name, and a DMZ talk
 
@AviD It's even a city in the U.S. en.wikipedia.org/wiki/Gaylord,_Kansas
 
@AviD the one that would be offensive is two words :P
 
8:49 PM
@TildalWave but to the point, as I said its not a great question, but it is worth discussing - this matters a great deal if you are trying to build spam filters to keep it out, you need to understand how and why they form their spam the way they do.
 
@AviD I agree... and I wanted for example to build on top of what at the time @AJ said... because there's actual evidence for that and radily available at that too
 
@TildalWave wait wait, are you arguing against the answer or the question?
I think a great answer can save a mediocre question, but even a terrible answer does not condemn middling one.
 
@AviD No... not really, I'm arguing that the top rated answer proves my point that the question is argumentative
 
@TildalWave hmm. Tell you what, I'll read the thread again - when I'm not eating dinner - and see if its worth reconsidering.
 
We've suggested about 10 (talking out of my ass, I'm not gonna go count) reasons for that what OP observes
all of them pretty much equally plausable
 
8:52 PM
Google translate from Russian? — Adnan Jun 13 at 17:42
The most plausible of which..
 
@Adnan one of them, yes
Anyway I've deleted my comments and my answer because it's getting ridiculous how much attack I got for disagreeing with the demigod of some
BTW And I still don't remember the dude's name, that's how personal I got in that thread
 
@TildalWave Duuuuuuuude! Come on! Relax a bit. StackExchange is full of people you just want to punch in the face. Take @Iszi or @Terry, for example.
 
/me bounces happily.
inputted_language%0A%0D%0AThe%20Content-Length%3A%200%20%0AHTTP%2F1.1%20200%20OK%0AContent-type%3A%20text%2Fhtml%0AContent-lenght%3A%2023%0A%3CHTML%3EDing%20dong!%3C%2FHTML%3E
Took me an hour and a half to get that answer for webgoat.
Feel good to finally have found it
 
God damn it! I hate those days when I finish with 190 rep!
 
9:08 PM
@Adnan -148 here give or take
 
@TildalWave What?! -148?! How?
@TildalWave wtf?! you removed your answer?
 
@Adnan Yes. I wanted to update it like 10 times by now, and each time got disturbed by biased remarks, so I'm giving up on it. The question is clearly properly answered already :)
 
@TildalWave But what's with the -148?
 
@Adnan maybe more probably didn't calculate it right... deleted answer with 17 upvotes, 1 downvote and I think I got +10 for some other answer today ... so, that'd make it -158 then
but hey I got the disciplined badge for it :)
 
 
2 hours later…
11:11 PM
Probably everybody is asleep at this point.
I'm not sure if it's the lack of sleep or just the fact that I won't face a reply/judgement for what I write here until I'm long away from the computer, but I feel like talking to myself.
I have a gigantic project that needs to be delivered tomorrow. I'm still at work since this morning (it's 02:14 now).
Sitting alone, in an empty office. Swimming in the darkness and drowning in the silence. Every attenuated sound hits you, and every shadow you see in the corner of your eyes shocks you. After hours and hours, the sounds and the shadows become your friends. You embrace the darkness rather than detest it. You hug the silence rather than despise it. You become one what you fear, you hold its hand and let it lead you, let it take you, then you ride it.
Nothing but a bright monitor in my face.
 
...
 
Damn! I'm so susceptible to sleep deprivation.
@D3C4FF I wonder what kind of shit I'd say after another 48 hours with 1 hour/day of sleep
 
You do appear to have lost your mind
Whats the project?
@Adnan Usually at this point i expect people to drool with one eye open
 
@D3C4FF I'm moving a fucking gigantic application from mysql_* to PDO
 
Ack DB work
fuck that
 
11:20 PM
@D3C4FF I'd say yes. I think now I'm ready to tell you where the 4th bomb is.
 
@Adnan Don't tell me, tell the NSA
I'm sure they'd like to know
 
@D3C4FF They've already read this conversation.
 
@Adnan Is it bad that, just by reading that line and nothing else in this chat, I correctly inferred the context involved the NSA?
 
@Iszi It is bad.
Hehehehe.. I have just failed a Suggested Edit review audit
 
@D3C4FF Only if you used the wrong privacy setting on FB
 
11:29 PM
oo, actually a good security line in a tv show.
From Dr.Who:
> It's never about the security - it's about the people.
2
 
If you treat people right they will be happy.
 
@Hennes No matter how you treat people, they'll never be happy.
 
Right: 01:31 local time
Maybe I should catch some shuteye before I upload my entire _stuff folder
 
Nobody will ever be happy. Happiness doesn't exist.
@AviD Yaaay. You're here!
 
@Adnan no, I'm not.
Well that is, I am but I'm not.
Damn, I'm starting to talk like him now.
good night y'all.
 
11:33 PM
@AviD Like whom?
 
@Hennes Lulz but i don't have facebook
@Adnan Happiness doesn't exist when your working with databases
@AviD laterz!
 
11:48 PM
@Gilles OLOLOLOL WUT?
 

« first day (913 days earlier)      last day (3967 days later) »