The DMZ - 2013-06-25 (page 2 of 3)

« first day (922 days earlier) ← previous day next day → last day (3967 days later) »

3:00 PM

@lynks Some opengl apps will first load in default res for them (usually 600x800) when going into full screen mode and then immediately to the res in the settings, could be that's where the problem is? It's just a slightly wrong written opengl app if that's it, I've seen a lot of programmers do that mistake

@TerryChia depends

not that I know about that stuff.

@TerryChia Would this work: microsoft.com/en-ca/download/details.aspx?id=7873 ?

@TildalWave well I wrote it, so it's almost certainly broken :P

@TerryChia, god damn it nevermind, it's a powerpoint.

What the fuck Microsoft?

@lynks well that settles it then :))

j/k

3:01 PM

@Simon Hah! Yeah I noticed it after clicking the download.

I think only the 2012 Express edition is available from them now.

Oh yes, the express version, that's what I was trying to find.

I was using it at school, I wonder how the teacher got it.

@TildalWave I will certainly check to make sure the 'gofullscreen' and 'setresolution' commands are in the proper order once I get my hands on the code this evening :P

@Simon Here microsoft.com/visualstudio/eng/products/…

No use for me though, I got the Ultimate edition.

@TerryChia Yeah me too. But the express 08 would work, right?

@Simon Well, I need the 08 compiler due to some compatibility issues (that's what the python executable for windows is compiled in).

Can't figure out where to get my hands on it though.

3:07 PM

Yeah, it's always a pain in the ass to get older version of products.

@Simon Microsoft products. :P If it was an open source tool I could just grab an older version of github.

@TerryChia Yep, I should have stated Microsoft products.

@TerryChia Would this help you out? stackoverflow.com/questions/12597604/…

@Simon Huh - that's interesting. Didn't realize I can do that.

I'll try it out when I find the time.

Cool features in VS are always hidden.

@Simon how old are you btw?

3:15 PM

@LucasKauffman 22

youngster hey

I remember when I was 22

A year ago, hehe

:p

You better remember it ^^

@Simon Well I was still studying back then so I do have some alcohol induced black holes

3:21 PM

@LucasKauffman Haha. School is awesome.

I barely remember being 22. I was trying desperately to finish a 70 semester hour major in 1.5 years.

Hey @TerryChia. I just got my Reviewer badge on closed questions.

@ScottPack Bah! Three more to go.

@ScottPack 70 hour semester in 1.5 years, does that mean you normally had to do it in 6 months, but you took 1.5 years?

@LucasKauffman In typical a semester system each class tends to be 3 hours and a full load is 12-18 hours.

@TerryChia If you have an MSDN subscription, it's available there.

3:32 PM

@LucasKauffman My CS program wasn't on the books until my senior year, so I switched to it in January of my senior year and was trying to finish it out as quickly as I could.

ooh painful

why not finish your senior year and do a bachelor after bachelor?

@ManishEarth shits going down again at gamedev

@LucasKauffman It's weird. They called it an "Area of Concentration" meaning that it's effectively a major in a broad field and a minor in a specialization. So when I was in the radio program it was an Area of Concentration in Electronic Media Management and Production. By coursework that translated into a Major in Communications with a Minor in Radio Broadcasting.

@LucasKauffman yep

Caleb prolly can handle it

@ScottPack aaah I see

@LucasKauffman Two reasons. 1) I would not have been eligible for scholarships if I did the BS after BA program. 2) I had two required classes for my radio major that ended up not making the first time and would have prevented me from graduating on time anyway.

3:36 PM

@ScottPack ah I always forget education costs an arm and a leg in the U.S. :/

@LucasKauffman I've never heard of any other school doing that program. It's weird. In order to graduate you must have: 1) Major + Minor, 2) Double Major, 3) Area of Concentration.

@LucasKauffman My undergrad wasn't so bad. It was fairly cheap all things considered. It was also a small not great school too.

@ScottPack here even the major universities cost the same as the shittiest colleges

@ScottPack aren't you doing a masters right now?

@LucasKauffman Yeah. I completed my coursework years ago. I'm doing some last minute data analysis but I'm fair positive I've got good conclusions worked out. So I should be able to start writing and defend before too long.

@ScottPack if I get lucky I can do mine next year in IT Security

company needs to approve it first :(

Based on timeframes, moving, and scheduling I'll probably defend in the Fall semester, but so long as I can crank it out I should be able to get my thesis paper written by the end of summer.

@LucasKauffman Here we go. It looks like, the year I actually graduated undergrad, tuition was 1463/semester for in-state tuition. Housing and fees would bring that up to about 3-5k/semester. So let's say 6-10 thousand per year.

That was the 2002-2003 school year. Wow. That's gone up to 3749 for tuition. More than doubled.

3:45 PM

@ScottPack here the max they can charge (except for people over a certain age or an MBA) is 550 a year

think housing would be the same

books and equipment depend on what you study, CS was pretty good since most professors just gave us PDFs, medical students was quite steep, think they went up to about 2k a year

Yeah, that's not including books which can be quite expensive. My numbers were also undergraduate only.

For a small scale non-PhD granting state funded school that was designed to service an economically depressed rural region.

@ScottPack I didn't go to our university because it was too difficult for me (maths is a known killer there)

not really surprising considering you'd get lectured by for instance Vincent Rijmen

Considering I ended up graduating from a math department with, by the numbers, a math minor it was always my pain point too.

@ScottPack the funny part is that it actually didn't matter when I went finding a job, I got on-boarded with guys coming from Uni

4:03 PM

I just visited stackapps.com and it's like when getting your first smartphone

INSTALL ALL THE APPS

4:18 PM

Close this guy's questions: security.stackexchange.com/users/27618/chingupt

I hate Microsoft. VS installs for like 10 minutes. Then, you gotta reboot so it can install some more stuff. Sigh.

@Simon hey that's a feature you know!

@LucasKauffman What is it called?

@ManishEarth does your punch script do anything else than just generating an animation :p?

@Simon "I reboot tons of times to make your live miserable"

or sometimes it's also called

I love that feature. I wish I could introduce it in web applications.

4:23 PM

"I will install updates for hours on end when you need to shut me down and get to a meeting or other important appointment in a very brief time delay hahaha"

Or "I will reboot in x minutes to install updates and if you're AFK I'm gonna reboot even if you haven't selected an option"

@Simon indeed :p

I had that the other day when I was doing some work

"REBOOT BITCH"

I normally always disable it in the registry

but this time I forgot

@LucasKauffman Oh clever, I should do that.

Cool, the installer just opened and closed immediatly 2 command prompts.

It probably had a good reason to do it, right?

user image

kerning fail :)

4:45 PM

user image

@Simon 1) Run gpedit.msc 2) Navigate to: Local Computer Policy | Computer Configuration | Administrative Templates | Windows Components | Windows Updates 3) Find: "No auto-restart with logged on users for scheduled automatic Updates installations" 4) Change "Not Configured" to "Enabled." 5) Job done.

@lynks yeah I found that one by accident, then googled for "kerning fail" images and it's also there... along this Walmart one and a few others I'm still laughing about (MEGAFLICKS one is hilarious) :))

@Xander Sweet, I'll save it to do it on my PC at home, thanks. Unfortunately, I cannot use Fedora for gaming :(

Thanks

can someone check if this script is working for them: stackapps.com/questions/2116/…

"Microsoft Visual Studio is loading user settings. This may take a few minutes."

It's ok MS, you can replace "may" by "will".

4:57 PM

@LucasKauffman Well, if the user is a mod, it invokes our secret powers and send something nasty to that person's address

oooh :p

5:23 PM

Blog - Stack Exchange: The War of the Closes

Jay Hanlon on June 25, 2013

It pains me when I hear people say that our sites are unfriendly, or that we chase new users away. But it’s a hard problem, because our highest priority has always been the quality of content on our sites. And it still is. We can’t lower our standards. We won’t.

But we have been working hard to make our sites more welcoming, reminding users that feedback can be clear and nice, and helping new users learn the ropes before they get frustrated. And, as of today, we’ve completely overhauled closing. …

5:34 PM

youtube is almost as weird as wikipedia; i started with an interview with john cleese about life of brian, and somehow ended up watching people cutting a whale free from netting...

Ok, that blog post is pretty fantastic.

And @ScottPack is no longer working.

I'm trying desperately to digest my lunch.

Are you all sleepy?

No, it's the middle of the day.

5:45 PM

@ScottPack I mean aren't you sleepy when you ate too much?

Just because I'm American doesn't mean I don't have the ability to self-regulate my food intake.

Really? I learn more from you guys every single day.

@ScottPack Agreed, it was getting pretty hard sometimes justifying closing, let's hope these changes will improve things.

@Simon thats why god gave us coffee

Even the default calculator on Windows sucks. If you switch the view, it will reset the number you've typed in.

@LucasKauffman For some reason, coffee only affects me in a bad way; my stomach gets to hurt.

6:01 PM

@Simon I used to have that as well when I was younger, I could get a serious hangover feeling from drinking too much coffee

and no I did not spike my coffee!

@LucasKauffman What did you do? You sucked it up and continued to drink some?

And by younger you mean 22, right?

@Simon no when I was like 15

I drank coffee once, like half a liter

and I really felt hungover

like very very very hungover

needed to puke, headaches

Well, I drink one cup and I feel bad.

nowadays coffee is my friend!

@Simon you should try Tea instead

tea is pretty good

Oh ya I like tea but it won't help me in the morning.

6:04 PM

@Simon not even a good old cup of Earl Grey?

@LucasKauffman I prefer a cup of Holiday (discontinued flavor from Second Cup)

Now I bet that you're all lost because there aren't any Second Cups where you live?

yes :(

the big seller here is Lipton

@LucasKauffman that's too much caffeine and you get the shivers, it's normal and you can do the same even when you're used to having a certain amount of coffee per day

feels a bit like before a difficult exam in school IMO

@TildalWave you got shivers before exams?

I was always too relaxed on exams

I'd used to stress afterwards

@LucasKauffman not usually no, but it did happen a few times to me also

not even sure why, cuz those weren't particularly heavy exams at all... maybe I just cared too much

6:09 PM

I've been drinking quite a lot of yerba mate in the afternoons these days. With a touch of agave for sweetener.

tho in those times and all the hormonal imbalance, there could be all kinds of reasons :)

@ScottPack Are you a poet?

That's a negative.

@ScottPack mate is pretty good

it's like the stuff we drink at conferences from Germany called Club Mate

I don't like the way I feel if I drink coffee in the afternoon so if I still need something I switch to tea.

I don't care much for club mate

6:16 PM

It's disgusting but it does keep you awake after a heavy 'conference networking event' wink wink

I find plain mate to be a bit too bitter, but it doesn't take much agave to smooth that out.

Superb
Courageous
Original
Tantalizing
Tenacious

Patient
Amazing
Caring
Kind

@Simon are you describing me?

@LucasKauffman Sorry, it's someone else.

:(

6:21 PM

Yay me!

@LucasKauffman All this talk of tea...

user image

yummo

I remember when I used to do this for my parents in birthday cards.

Good old times!

@ScottPack You would have a cup with my face on it, you would.

That's Fred.

Who's Fred?

@LucasKauffman - Funny but an edit has already been proposed to your last answer that's like 10 minutes old LOL... I rejected it for this same reason, and you edited it yourself anyway

@TildalWave yea the edit was valid, the problem was that I added additional content which was not included in his edit

what's wrong with me today I can't seem to rewrite a single proper sentence

6:35 PM

@LucasKauffman yes yes I got it no need to edit now your post 10 times :P pinging is annoying it was stacked up till the top of my monitor LOL... anyway, I've noticed all that and commented accordingly ;)

@LucasKauffman stack overflow

@Simon The monkey.

@ScottPack Can he be seen somewhere else or just on your cup?

He's one of my daughter's stuffed animals.

@Simon fredthemonkey.com

More stuff to add on scottpackfacts.com, he has a daughter.

6:39 PM

@Simon I'm really tempted to register that domain :D

@TildalWave Fred is disturbing.

@LucasKauffman I am too.

I just think @ScottPack wouldn't appreciate it :p

Nah, he'd love it.

user image

@ScottPack It has Ygritte in it. Of course it is

6:41 PM

@Adnan You know nothing, @Adnan.

@TildalWave I still haven't seen the movie, I have to.

Daaaamn! Our network is down the whole company's connection is now through what seems to be 1mbps 3G

@Simon Didn't find it all that good honestly. It starts off well then it waters down like the rest of Hollywood movies do

@Adnan hahaha

@ScottPack Oh come on, I know a thing or two.

6:44 PM

start leeching.

@LucasKauffman IN YOUR FACE!!! We're back online!

it's like having a bartender adding ice cubes to the same shot of whisky... in 5 minutes you wonder why the f* you're still holding the glass

Laters, everybody.

@TildalWave It's really perverted, right?

We can hope.

6:48 PM

time for me to pour a nice glass of 12 year old McAllan

@Simon well... for a Hollywood movie I guess it is... tho I wouldn't really call shockingly honest as perverted. It's the one that finds honesty shocking that's really perverted, not the other way around.

Just like a Belgian. Love to put some 12 year old in his mouth.

@TildalWave Look at you, have some philosophical thoughts now. :P

o.O

Fact #342: He can be quite disturbing.

6:50 PM

@Simon oh no not at all... it's just what perverted means... think distorted. There's nothing distorted about the truth, but presenting it as shocking is

unless it really is shocking of course :)

@ScottPack a weak come back but: SARAH PALIN!

There's a city called Moscow in Idaho o.O

@TildalWave Let me rephrase my question: would a 14 years old kid like to watch the movie?

A 14 years old male.

@Simon yes definitely, if they let him in the cinema :)

Hehe

@LucasKauffman Is Hardstyle music popular where you live?

@Simon with certain groups it is, I like to listen to it occasionally. I really like "The Oh on Tour" and the "Defqon 1" compilation CDs

6:56 PM

@LucasKauffman Nice. I've been listening to HS for 5 years non-stop. I definitely wanna go to Defqon.1 or Qlimax.

but we do have quite a few famous discotheques here for that music like "The Oh" and "The Cherry Moon"

@LucasKauffman Eh?

Yeah, you're lucky because there aren't any here.

@Simon friends of mine went (or still are) to defqon 1

If he's still there then he must be by himself by now :P

6:57 PM

@ScottPack I thought I'd say something offensive about Americans

@LucasKauffman And Pennsylvania and Ohio.

That was a weird word-mixing.

@LucasKauffman There's a huge party once a year here, last year Coone was there and the year before Toneshifterz. So, I get my dose of partying only once a year which sucks.

@Simon ah Coone, he used to be very wanted here back in the day of jump

@LucasKauffman Jumpstyle?

@Simon yea

7:03 PM

I didn't know he had a background in Jumpstyle.

@Simon yea this is also from him:

Really? Hahaha.

@Simon I also like hardstyle Trap remixes like this:

soundcloud.com/black-daddy/headhunterz-scrap-attack

it's got a slower beat, more hip hop like

Yeah, I refuse to listen to trap, especially when some of them are ripping tracks and not giving a single credit to it.

7:20 PM

@LucasKauffman I like dark stuff like rawstyle and Jack of Sound's tracks. Weirdly, I also like melodic tracks like Frontliner's.

Was thinking about posting a question, but it's probably S&M. So, let me pop it in here:

Under what conditions, if ever, should one's physical location be permitted to qualify as an authentication factor?

I have a use case, but I would have to think about how to generalize it into a generic condition.

Example: For good security practice, a system is required to use multi-factor authentication for all users. The system resides within a controlled perimeter, and has no network connectivity beyond that perimeter. Access at the console itself (or from across the local network) is single-factor. Should the controlled perimeter be allowed to justify use of "where you are" as a second factor?

(Note: Users permitted access to the system is a subset of users permitted within the perimeter.)

7:39 PM

Think Different. Let me spell out a specific use case.

The Registrar's office has gobs of student workers that perform work that requires them to have access to the academic information of other students. Things like course schedules, grades, etc.

The Office wants them to only have access to this information when on duty under the supervision of a full time employee.

However, in order for them to schedule for their own classes or access their own grades they access the same system.

So the pages, or views, for other students should only be accessible to them while they're at their workplace.

So the access restrictions for those pages would be username, password, and physical location.

Implementing the physical location however possible. So run it all through a web proxy that can filter urls based on source IP or time, use a phone based authenticator that calls a desk phone on site, OTP codes handed out by the supervisor, etc.

Interesting case. Not quite sure that's exactly comparable.

daaaamn you girls talk a lot.

any bits especially worth trawling the transcripts for?

@AviD Nah, you should survive.

@Simon that's not really congruent.

@AviD Your mom.

7:47 PM

In your case though, the users already have access to the system and the physical location is just an extra check for privilege escalation. (Though, since they're supposed to be supervised anyway, a UAC system a-la Vista/7 would perhaps be an even better option.)

@ScottPack heh.

@Simon and you dont need to sound so disappointed...

@AviD Let me cry in my corner, please.

@Simon careful, @Adnan has a special use for tears.

2

@AviD Oh god, please no.

lol

7:50 PM

@Iszi Feel free to go implement UAC in generic webapps. It'll be fine.

UAC isn't really all that useful for limiting privilege escalation anyway. All it does is attempt to keep someone without access to the console elevate.

@ScottPack ooo that sounds like a really cool project.

For anyone that's actually sitting at the system it's as hard as a button click.

UAC is not intended to be protection against evil humans. It's protection against the evil programs.

(... that are "smart" enough to fool the user.)

@ScottPack You're comparing OS's vs. web apps - apples & oranges.

@Iszi That's a true statement.

My specific use case is all web app.

7:52 PM

@Iszi no, apples and beer.

@AviD Agreed, apples and oranges are fruits.

Now that I think about it, beer is a fruit from heaven.

2

@ScottPack So, coming back around to my case... thoughts?

Oh sorry, what?

Yeah, I read your text. I'm not in any position to put enough thought into figuring out what your requirements or case is

Maybe I need to think about this out loud for a bit.

« first day (922 days earlier) ← previous day next day → last day (3967 days later) »

Transcript for

Jun '1325

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile