The DMZ

lynks

14:08

why is our ctf team 'also known as "Goldfish Crackers"' on ctftime? :P

copy

@D3C4FF I miss you too, bro

Gilles

We're getting there! http://i.imgur.com/Tec1ltu.png (no, it's not publicly accessible yet). #stackoverflow

Tweeted by balpha on July 10, 2013 at 2:10 PM

lynks

@Gilles good news, but...why is it so hard? I've migrated medium sized web stacks to SSL in under a day.

Gilles

@lynks there've been discussions on MSO

SO isn't medium-sized

lynks

@Gilles I realise that, I was just trying to draw a comparison :P

Gilles

14:15

there are many nested domains (e.g. meta.security.stackexchange.com) which is problematic with certificates

Thomas Pornin

@Gilles This can be solved by putting a lot of names in the certificate, as Subject Alt Names, although of course the CA bill may extend proportionally (or even exponentially).

Google's certificate includes more than 70 names. If google does it, then it must work.

TildalWave

@lynks nickcraver.com/blog/2013/04/23/… (but you probably already read it?)

lynks

I guess part of the pain is SO is distributed, so you cant just have a great big load balancer that strips off SSL.

Xander

@lynks That is a lot of energy.

lynks

@Xander solving problems with heavy metal means you get to play with crispy equipment.

TildalWave

14:29

@lynks About those railguns (I'm reading the transcript)... are there any that aren't only "maglev" but also use magnetic force to propel the projectile?

oh NVM I'm just reading the Wiki... a lot of stuff I'm not up to date with LOL

lynks

@TildalWave I'm not sure I see the distinction. Some people use an armature that is also the projectile, some split the two, and some opt for a plasma armature.

Thomas Pornin

@TildalWave A railgun is not maglev, actually. The whole propulsion is through Laplace force (well, now called Lorentz force)

if you want to propel the projectile in the forward direction, you apply a vertical magnetic field and a lateral current through the projectile. The rails are there mostly to apply the current; they also guid the projectile.

TildalWave

@ThomasPornin yes I did put it in quotation marks, implying I'm just using it in layman's terms... I forgot the name of the Lorentz force :) It's not really a field of my studies ;)

Thomas Pornin

A big challenge is making the current flow even when the projectile is moving at very high speed.

@TildalWave Strangely enough (or not), the name "Laplace force" does not appear to be widely used outside of France.

lynks

@ThomasPornin and stopping the whole thing welding itself together :P

Simon

14:33

Can we add the tag guns?

lynks

@ton.yeung we're on railguns

TildalWave

@ThomasPornin I don't recall it ever called as Laplace force either. If it was called that I probably wouldn't have a clue what they're on about. :O

@lynks I've seen I think some NASA study on combining both... rails for the initial liftoff and I think only to hold the projectile in space, and then using laser to create micro explosions behind it

lynks

@ton.yeung that's actually what I like about the concept, they're pointlessly expensive and large :P

Scott Pack

@lynks They pretty much already do that. As the other guys have pointed out the problem comes down to the names. They can get away with just a handful of certs for the main sites. SF.com, SO.com, SU.com, *.SE.com, etc. The metas really fuck things up.

TildalWave

@ton.yeung it was definitely a real project, it was either on NatGeo or Discovery, but it didn't look to me as anything developed far enough to be actually usable, just some geeks playing with their toys :)

lynks

14:38

@ton.yeung not particularly. I drive small sports cars most of the time

@ScottPack yeah it must be pretty painful.

Thomas Pornin

@TildalWave NASA would indeed be very interested with some gun to launch bulk materials in space. And NASA needs 8 km/s speed, whereas military types are already fine with 2 km/s.

lynks

@TildalWave yeah multi-stage seems to be the best compromise. Even the small amateur railguns use an injector, typically an air-gun.

TildalWave

@ton.yeung oh the things I've seen in Japanese cartoons :))

lynks

@ton.yeung BR-Z is nice. I drive a lot of older cars, Trimuph TRs mostly.

Simon

One does not simply look to buy a BRZ.

lynks

14:44

@ton.yeung also, you can't beat an MX-5 for simple RWD fun.

Xander

Ha ha. Florida accidentally makes computers and smart phones illegal. cnn.com/2013/07/09/tech/gaming-gadgets/florida-slot-machine-law

3

Scott Pack

@Xander Back when Ohio tried to ban same sex marriage the wording could also have invalidated my judge officiated wedding.

Simon

@ton.yeung Because you just end up buying it.

lynks

@ton.yeung heh, I'm not sure what to do with mine. I drive it everyday, so it has to stay comfortable, even on long journeys. But I would like to tune it a little, starting with a map I guess.

@ton.yeung ECU mapping

Simon

@ton.yeung Play with fuel/air ratio, stuff like that.

@ton.yeung It's 2 different cars.

@ton.yeung Well, it would be silly to buy both.

Xander

14:53

@ScottPack Nice.

Scott Pack

@Xander Yeah. We had been married about 6 months at that point. I was a bit annoyed.

Xander

@ScottPack LOL! I imagine.

Stupid meddling politicians.

Simon

I know, I've seen the concept. I'm not the type of guy who would wait for a newer gen.

A friend of mine simply refuses to buy a car because he says he's gonna be mad if a new gen comes out few years after he bought his.

Well breaking news: it's gonna always be that way.

And new gen often means new engine or at least the previous one has been modified which is a gamble. You have no idea how reliable it is.

@ton.yeung Oh yeah, if you don't need one, it's all good. However, he is driving a piece of shit and still lives at his parents'. He's nowhere near of moving out.

@ton.yeung How old was she?

Yup, it's definitely about time that you give your parents a rest.

lynks

@ton.yeung what nationality is the family?

Simon

Wow. My parents are paying for my institution fees and also my apartment. I will always feel like I owe them a lot.

So, there's no way that I would allow them to pay me something when I'm 30.

Scott Pack

15:04

@Xander That was a constitutional amendment that was written and promoted by people.

lynks

@Simon we all owe our parents something :P

Simon

@lynks Nah, they just wanted to have a good time.

Scott Pack

@Xander Fun Fact! It is my understanding that while the populous votes on a specific wording of a constitutional amendment that's not actually what gets turned into law. If the vote passes then lawmakers take the wording as proposed and then rewrite it into something that "means" the same thing but is actual legal language. Or some shit like that.

Xander

@ScottPack Well that's just dandy.

Scott Pack

Mmm

Xander

15:08

I think accountability to the voters is supposed to work, well, almost exactly the opposite of that.

Scott Pack

It'll be fine. What's the worst that could happen? I mean, it's not like Congress has the ability to draft it's own laws governing how Congress works, or is capable of setting their own salaries.

Simon

Jesus, I'm glad that it's a 404 now. I wanted to google search the "Daysofyorr" malware and I usually just type in the address bar my search query. I ended up entering the whole URL, good job me!

Thomas Pornin

@ScottPack A Congress that rewrites laws to its own advantage is a Congress that demonstrate a rather exceptional competence at law writing.

Scott Pack

@ThomasPornin Your command of language is exquisite as always.

Xander

@ScottPack LOL.

lynks

15:57

random ebaying is dangerous, just spend far too much money on a world map canvas print.

equirectangular for the map geeks

Adnan

16:11

@lynks Welcome to the club.

lynks

@Adnan sigh.. url fail

Adnan

Guys guys guys.. just because a question is edited, doesn't mean it's re-open worthy.

4

Q: Gamification of IT security - any applications yet?

Gamification, which is the use of game design elements and game mechanics in a non-game context, is a heavily discussed topic. Looking at the behavioral impact on Gamification, it has potential in educating users in IT security and rewarding secure behavior, especially in a corporate environment....

It's still "give me examples, plz"

or "google for me, plz"

lynks

Adnan

@lynks Looks awesome!

lynks

@Adnan yeah for me it struck the right balance between utility and appearance.

Xander

16:14

@Adnan I didn't think it was close-worthy in the first place.

Adnan

@Xander Would you please explain your point of view?

As far as I can see, it's just asking us to list successful examples of gamification in IT sec

@lynks I can't agree more.

Terry Chia

facepalm

Adnan

@TerryChia I can't read

Xander

@Adnan First he clearly has searched, and hasn't found much, which is why he's here. Second, it's an interesting topic, and one that without doubt has potential value to a professional IT Security audience. This is my reasoning.

lynks

this is so badass, bbc.co.uk/news/uk-politics-23260701 gotta love John Bercow. He's like...dude, chill or imma banhammer you.

Lucas Kauffman

16:43

amazon lowered their prices

Rohan Durve - Decode141

I feel like a douche now.

:/

Lucas Kauffman

@RohanDurve-Decode141 why is that?

Polynomial

@lynks better article: bbc.co.uk/news/uk-northern-ireland-23260146

Rohan Durve - Decode141

Poly, security.stackexchange.com/questions/38709/… is offtopic and should be migrated to Ask Ubuntu or so imo.

But, Flagging>Closing>Off-Topic>Migration shows only 3 sites.

Polynomial

@RohanDurve-Decode141 er... ok? I'm not a mod ;P

Rohan Durve - Decode141

16:55

You've got tons of rep. xP

Polynomial

vtc'ed anyway

a lot of rep does not a moderator make.

Rohan Durve - Decode141

truedat

Polynomial

right off 'ome

lat0rz

Rohan Durve - Decode141

But, experience you must have gained oh reputed one

l33torz then.

Lucas Kauffman

@RohanDurve-Decode141 you can also just flag it with moderator attention

Iszi

16:58

@RohanDurve-Decode141 Strictly speaking, it's still on-topic for Super User I think. It's just more on topic for Ask Ubuntu or Unix & Linux.

Rohan Durve - Decode141

True.

Lucas Kauffman

3

Rohan Durve - Decode141

Reason of feeling like a douché is that I was about to post this in Sec.SE Meta. i42.tinypic.com/34xmcdj.png

Lucas Kauffman

@RohanDurve-Decode141 You disgust me spits on the floor

Rohan Durve - Decode141

:/ ...then I realized howmuch it would suck to be "featured" there.

Lucas Kauffman

17:11

@RohanDurve-Decode141 May you and your children be cursed for ever!

may the wrath of the bear be upon you!

Rohan Durve - Decode141

Oh no, not the wrath of the bear. Also, leave my l'il children out of this Mr! If you got something against me then let's take out of the DMZ. I'm 6'10" IRL and like an ex-marine. And you...do you even lift bro? :P

Lucas Kauffman

I'M 10'3" ACTIVE SEAL SAS DELTA FORCE AND SAYERET MATKAL

Rohan Durve - Decode141

All it takes is an arrow to the knee bro. img.gawkerassets.com/img/17k0a4a2hvzw9jpg/k-bigpic.jpg

Lucas Kauffman

and I once ate a pepper scoring 400.000 on the scovile scale after which I went to the toilet without even crying D:

2

Iszi

Guys, I'm looking at your bank accounts now. If you're SEALS, you're *definitely* not getting paid right.

;-P

2

Lucas Kauffman

17:18

@Iszi That's because it's in my secret SEALed bank account D:

Rohan Durve - Decode141

I think he meant it the other way around.

Lucas Kauffman

and I also work part time for the GSG9

now I think I've had em all

Rohan Durve - Decode141

Rofl. >inb4 "Yeah, I had an internship there. No big deal"

XDDD

Iszi

I wonder who everyone in here (or the Internet, for that matter) really would fear more these days - someone who can permanently screw up your face, or someone who can permanently screw up your online life.

Lucas Kauffman

@RohanDurve-Decode141 start feeling bad again! :P

@Iszi the internet is forever

@ton.yeung Is that what they call it these days?

Thomas Pornin

17:21

@LucasKauffman I am The Bear. Bears eat seals.

Rohan Durve - Decode141

lmgtfy.com/?q=SEALed+bank+account

Lucas Kauffman

@ThomasPornin Oh please continue mr bear sir

Rohan Durve - Decode141

@ton.yeung Lul. @Lucas The troll is strong with this one.

Lucas Kauffman

oh god him again.

hello @Simon Sigh

Simon

System.Exit(0);

Rohan Durve - Decode141

17:25

Now look what you did. >>

Lucas Kauffman

@Simon is that a bit like "Screw you guys I'm going home"? :p

lynks

@Simon System.exit(1 / 0);

Xander

@LucasKauffman Do they have South Park in Canada? I wouldn't think they'd have enough room for televisions in their cute little igloos.

Rohan Durve - Decode141

Igloos in Canada?

o.o"

Simon

@Xander I READ THAT.

Xander

17:34

@Simon :-P C'mon now. You know your igloos are cute.

Simon

@Xander Melted igloos are not cute.

@LucasKauffman That's the nerdy way, yes.

Xander

@Simon When you're ready for a new avatar, I found one for you.

Simon

I think I'd rather keep this one actually.

Rohan Durve - Decode141

Still so polite. +1 Simon

Xander

17:50

@ton.yeung I saw your link. That's awesome, and I'm jealous.

@ton.yeung Yeah, I live in Charlotte, North Carolina.

I moved all over when I was growing up, so no, I'm pretty culturally adaptable.

@ton.yeung That's more varied than my experience. I stayed within the States, except for my stint in Vancouver.

Simon

Honestly, I don't see the point of 1 gb/2 gb providers. How often would you download something at that speed? Most servers can't handle that.

Xander

@Simon It's pretty insanely fast. The maximum throughput on my current firewall is only a fraction of that.

lynks

@Simon ahh, but you can download two things at the same time

Simon

@ton.yeung I cannot seem to be able to get a seed that does better than 1 mb/s.

@ton.yeung I can do that with a 10 mb/s provider.

@ton.yeung Do you go to anonymous downloaders meetings?

@ton.yeung Yes it is. As your sponsor, I order you to go buy a BRZ.

@ton.yeung You're fired from the meeting.

lynks

I will also accept money from strangers on the internet for no reason.

0

Q: Processor Affinity will improve the crack?

I have an alienware with a processor i7 with linux kali, and the crack go around 2000 k/s, I set up the GPU (nvidia 9700) and pyrit could go between 3k and 8k KPS, but I feel that still really slow, Cons and Pros of making a processor affinity? how many processor would be enough for only one ta...

cracking

My mate dave gets the best crack. I'll give you his number.

Xander

18:02

@lynks There's always a reason. They're just not telling you what it is. Yet.

Lucas Kauffman

18:20

came across this in the commsroom

nist.gov/itl/upload/draft_framework_core.pdf

Michael

21:17

@LucasKauffman, re: home network monitoring q, I did wonder as I was writing it, but having looked at the other SIEM product questions that were not closed and had moderate numbers of votes I thought it would be useful

if you think it would be more constructive, I'd be happy to make it just a splunk question - i.e. how to use splunk to achieve that goal. that would remove the product recommendation part.

D3C4FF

23:23

Morning anyone that's still around

copy

@D3C4FF Hi

D3C4FF

@copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste @copy @paste

Hiiii! :D

copy

:P

D3C4FF

Yay! Happiness!

Transcript for