@Ladadadada - That security paranoia scale #9 that you don't have a name for - how about reasonably cautious? :))
BTW I'm probably -1 on that scale... I install malware on my PC to keep me company, spoof UAS to Windows XP to invite hacking attempts, don't lock any doors and my dog is a cuddly wuss
but I do have a cat too... she's an 11 :))
(can change iris shape at will to prevent biometric data scanning)
It would appear as though the tinfoil hat-wearing were vindicated today, as news broke of the true scale of the U.S. government's surveillance of its citizens' online activities, conducted primarily through the NSA and seemingly beyond the realm of the law.
If the reports are to be believed, met...
@Simon BTW, you should use the "reply-to" feature of the chat when replying to someone. Click on the little arrow on the right of a message to reply to it.
@TerryChia well a good candidate should recognize it's purpose and sit at the furthest chair from it, otherwise he/she hasn't a clue about security ... similarly, you should observe their reaction to saying your favorite sport is waterboarding ... if they're still in the room, they're hired ;)
@ScottPack You are the SF guy around here. I would like to ask a question about what features/performance benefits does apache provide over nginx as a primary web server. Would that question be a dupe/NC?
@Simon Might wanna look into OWASP webgoat. Have not tried it personally but it looks good.
@TildalWave Hum yeah, that question wasn't clear at all, sorry about that. I still haven't tried it yet but I'm assuming most vulnerabilities will be obvious.
@Adnan weird! that's an odd way to do it! especially when overwriting sectors with zeros is so easy...
@Simon if you look at OWASP BWA (broken web apps) project they've got a VM with a load of vulnerable apps. Some are easier than others, some of them are relatively tricky...
How to record User activity from a Linux Laptop?
I need to find out what a user accesses and changes from his laptop and on his laptop.
Distribution Used: Linux Ubuntu 12.04
Architecture : 64 Bit.
There is an activity.sqlite which is created under the zeitgeist datastore. However it does not pr...
@RoryMcCune I'm currently filling and wiping with another application that unmounts the disk and fill the sector with zeros. It's called DiskWipe (another popular one).
@AviD when you fold the keyboard behind the tablet when using it as a tablet it can feel odd (of course you can just remove the keyboard to get round that but she tends not to)
@avid I think the RT is a nice device - but on balance I prefer the pro - even though it is heavier and has a worse battery... It is just so much more useful....
@avid Outlook is coming for the RT - but still no vpn client or visual studio
@MarionMcCune well, as I've said, my usage model would be basic tablet usage, + RDP to really strong machines. So the difference between RT and Pro would be moot for me, except for the drawbacks.
@MarionMcCune I would be running all that on the RDP anyway. (and RDP over SSL/VPN...)
its just not worth it to me, for the less battery life, extra cost, etc.
the pro still has better screen resolution, though...
@TerryChia helix does look nice although from the lenovo forums sounds like they have some hardware issues with the first batch. Definitely the haswell helix could be v.nice
I take it everyone's seen the kerfuffle over PRISM this morning.. Someone on reddit had an interesting point. The new Xbox One has always on Kinect sensors with cameras and mics as well as always on Internet connections
I think I might be voting on Sec.SE in my sleep. I just clicked on that NSA question and I've already upvoted both the question and one of the answers and I have no memory of doing it.
@AndyMac from what I know that got rejected last year, although they're trying to bring it back
after the recent killing of a soldier I saw several politicians try to use it as a reason that the legislation was needed. however MI5 said it wouldn't have helped
in relation to making dodgy references i'm sure there are plenty of people who must have loked up anarchist's handbooks etc after the Boston bombing to look how easy it is to find out how to uild pipe bombs and the like
hopefully though the push seems to be pretty persistent / maybe the EU data protection stuff next year will be of some help though with the number of edits (around 4000) by lobbying groups it'll liekly end up being pretty watered down
@avid I thought you might like to see my Surface setup...he Surface in the right of the photo is the Pro attached to a Targus docking station and powering two external monitors.... The one on the left is my RT.... The WP8 couldn't be in the photo because it was taking it.....
@AndyMac yeah I have some hope that'll help. Otherwise despite the way the .gov may take it, I'll be VPN'ing my traffic out of the country if that UK legislation goes through
unfortunately also the largest services are all provided by US businesses / there generally don't seem to be services in Europe provided by businesses here that'll match up to the offerings for Google / Amazon
@AndyMac yeah I was just talking to @MarionMcCune about that this morning. This kind of revelation could provide a spur for EU based companies to come along...
@MarionMcCune Agreed - there should be a massive opportunity there / interesting also that Microsoft's new advertising campaign has a focus on privacy so they realise that's something we're looking out for in Europe / finding out about all this Prism stuff is a kick in the teeth for that kind of advertising!
@MarionMcCune there's a danger in the rhetoric that's being used / it's very like McCarthyism / there was some dialogue between Moxie Marlinspike and Saudi Arabia a few weeks back that underlines that rhetoric
@Adnan I'm seeing a two or three part sec.se blog post in the horizon!
@TerryChia As you phrased it here I would probably close it as non-constructive because it's too likely to elicit debate or "Mine is better because better" type arguments.
@RoryAlsop Actually, I'm starting appreciate rep-trains a lot more lately. They're really nice to bring us more traffic, more users, more questions, more answers. Great stuff!
@Adnan yeah - when we saw the first one, we thought oh no, here comes the low value rubbish, but even if there is a small influx of low quality junk, the net result of these things is obviously pretty positive.
My question is regarding Javascript security.
Imagine an auth system. You're using a javascript framework like backbone or angularjs and you need to use secure endpoints. That is not a problem, the server always have the last word and will see if you're able to do what you want.
But what if you...
@RoryAlsop did you see the disgraceful comment on my NSA answer... "Too many Rory's on this site. – FreshPrinceOfSO 3 mins ago"... as if there could ever be such a thing as too many Rory's!!
so I'm noticing an upsurge of votes on a specific old answer of mine. I just read the password reptrain now, and realized that it was linked from there. The universe makes sense again.
@D3C4FF @RoryAlsop @AviD Someone mind bringing me up to speed on this?
As I see it, @D3C4FF's answer is currently incomplete and may be very misleading.
The question is not about the Verizon data referenced in @D3C4FF's answer. It's about PRISM, which allows TLAs to access servers at Google, Microsoft, etc. and covers much more than just phone call metadata.
If the TLAs have unrestricted access to those servers, phone calls could in fact be monitored if one of the parties is using Skype or Google Voice.
There is also a lot of other data the TLAs may have access to, including e-mails, Twitter DMs, and other "private" social media content. This is not addressed in the answer at all.
@Adnan most people see a word client and can't move past the chance to exploit such relationship for financial gains... it's how people are, I didn't expect any different. But they didn't understand the question, because if this was a business only relationship, OP wouldn't inquire about ethics of billing him for or due to more work
@RoryAlsop @David Yeah, the real problem is not the 41C, it's the sun that the car is sitting in Texas summers are like that. Leave your car parked in the sun, and the interior can easily reach 65-70C by the heat of the day.
And that's really toasty to climb into. :-)
It's amusing to see a surface parking lot in Dallas in August, with the spots in front of the stores wide open and cars strategically parked next to scraggly little saplings at the back of the lot to catch any little bit of shade.
@ScottPack yikes! I don't get it tho (and they do it here also) why use such dark asphalt for parking lots? doesn't seem to make much sense, it only makes it softer, which is less than ideal with a lot of stopping and accelerating going on
@TildalWave Because concrete is white, but expensive to pour (even though it lasts much longer). Asphalt is black (because of the tar/oil leavings) but is cheap.
@TildalWave Because @ScottPack is in the north, where they have (slightly) shorter, cooler summers, they can get away with it. In Texas (and the rest of the Southwest) there isn't much asphalt, but concrete instead.
Though there are some special high-temp asphalt formuations.
@ScottPack I'm hardly knowledgeable enough about this, but isn't there some other, lighter in color additives they could use for asphalt mixtures? It seems that the tar rubs in/out in time anyway? With all our technology, I'd expect they'd synthesise something cheaper by now
@lynks I was wondering the same but they don't seem to be affected by capsaicin like we are.. probably only a mild irritation, I let my cat eat anything she wants ... which is not much anyway (and yes sometimes they'll eat something that irritates their stomach intentionally, trying to throw up and get rid of fur balls in their throat)