The DMZ

lynks

2:08 PM

why is our ctf team 'also known as "Goldfish Crackers"' on ctftime? :P

copy

@D3C4FF I miss you too, bro

Gilles

We're getting there! http://i.imgur.com/Tec1ltu.png (no, it's not publicly accessible yet). #stackoverflow

Tweeted by balpha on July 10, 2013 at 2:10 PM

lynks

@Gilles good news, but...why is it so hard? I've migrated medium sized web stacks to SSL in under a day.

Gilles

@lynks there've been discussions on MSO

SO isn't medium-sized

lynks

@Gilles I realise that, I was just trying to draw a comparison :P

Gilles

2:15 PM

there are many nested domains (e.g. meta.security.stackexchange.com) which is problematic with certificates

Thomas Pornin

@Gilles This can be solved by putting a lot of names in the certificate, as Subject Alt Names, although of course the CA bill may extend proportionally (or even exponentially).

Google's certificate includes more than 70 names. If google does it, then it must work.

TildalWave

@lynks nickcraver.com/blog/2013/04/23/… (but you probably already read it?)

lynks

I guess part of the pain is SO is distributed, so you cant just have a great big load balancer that strips off SSL.

Xander

@lynks That is a lot of energy.

lynks

@Xander solving problems with heavy metal means you get to play with crispy equipment.

TildalWave

2:29 PM

@lynks About those railguns (I'm reading the transcript)... are there any that aren't only "maglev" but also use magnetic force to propel the projectile?

oh NVM I'm just reading the Wiki... a lot of stuff I'm not up to date with LOL

lynks

@TildalWave I'm not sure I see the distinction. Some people use an armature that is also the projectile, some split the two, and some opt for a plasma armature.

Thomas Pornin

@TildalWave A railgun is not maglev, actually. The whole propulsion is through Laplace force (well, now called Lorentz force)

if you want to propel the projectile in the forward direction, you apply a vertical magnetic field and a lateral current through the projectile. The rails are there mostly to apply the current; they also guid the projectile.

TildalWave

@ThomasPornin yes I did put it in quotation marks, implying I'm just using it in layman's terms... I forgot the name of the Lorentz force :) It's not really a field of my studies ;)

Thomas Pornin

A big challenge is making the current flow even when the projectile is moving at very high speed.

@TildalWave Strangely enough (or not), the name "Laplace force" does not appear to be widely used outside of France.

lynks

@ThomasPornin and stopping the whole thing welding itself together :P

Simon

2:33 PM

Can we add the tag guns?

lynks

@ton.yeung we're on railguns

TildalWave

@ThomasPornin I don't recall it ever called as Laplace force either. If it was called that I probably wouldn't have a clue what they're on about. :O

@lynks I've seen I think some NASA study on combining both... rails for the initial liftoff and I think only to hold the projectile in space, and then using laser to create micro explosions behind it

lynks

@ton.yeung that's actually what I like about the concept, they're pointlessly expensive and large :P

Scott Pack

@lynks They pretty much already do that. As the other guys have pointed out the problem comes down to the names. They can get away with just a handful of certs for the main sites. SF.com, SO.com, SU.com, *.SE.com, etc. The metas really fuck things up.

TildalWave

@ton.yeung it was definitely a real project, it was either on NatGeo or Discovery, but it didn't look to me as anything developed far enough to be actually usable, just some geeks playing with their toys :)

lynks

2:38 PM

@ton.yeung not particularly. I drive small sports cars most of the time

@ScottPack yeah it must be pretty painful.

Thomas Pornin

@TildalWave NASA would indeed be very interested with some gun to launch bulk materials in space. And NASA needs 8 km/s speed, whereas military types are already fine with 2 km/s.

lynks

@TildalWave yeah multi-stage seems to be the best compromise. Even the small amateur railguns use an injector, typically an air-gun.

TildalWave

@ton.yeung oh the things I've seen in Japanese cartoons :))

lynks

@ton.yeung BR-Z is nice. I drive a lot of older cars, Trimuph TRs mostly.

Simon

One does not simply look to buy a BRZ.

lynks

2:44 PM

@ton.yeung also, you can't beat an MX-5 for simple RWD fun.

Xander

Ha ha. Florida accidentally makes computers and smart phones illegal. cnn.com/2013/07/09/tech/gaming-gadgets/florida-slot-machine-law

3

Scott Pack

@Xander Back when Ohio tried to ban same sex marriage the wording could also have invalidated my judge officiated wedding.

Simon

@ton.yeung Because you just end up buying it.

lynks

@ton.yeung heh, I'm not sure what to do with mine. I drive it everyday, so it has to stay comfortable, even on long journeys. But I would like to tune it a little, starting with a map I guess.

@ton.yeung ECU mapping

Simon

@ton.yeung Play with fuel/air ratio, stuff like that.

@ton.yeung It's 2 different cars.

@ton.yeung Well, it would be silly to buy both.

Xander

2:53 PM

@ScottPack Nice.

Scott Pack

@Xander Yeah. We had been married about 6 months at that point. I was a bit annoyed.

Xander

@ScottPack LOL! I imagine.

Stupid meddling politicians.

Simon

I know, I've seen the concept. I'm not the type of guy who would wait for a newer gen.

A friend of mine simply refuses to buy a car because he says he's gonna be mad if a new gen comes out few years after he bought his.

Well breaking news: it's gonna always be that way.

And new gen often means new engine or at least the previous one has been modified which is a gamble. You have no idea how reliable it is.

@ton.yeung Oh yeah, if you don't need one, it's all good. However, he is driving a piece of shit and still lives at his parents'. He's nowhere near of moving out.

@ton.yeung How old was she?

Yup, it's definitely about time that you give your parents a rest.

lynks

@ton.yeung what nationality is the family?

Simon

Wow. My parents are paying for my institution fees and also my apartment. I will always feel like I owe them a lot.

So, there's no way that I would allow them to pay me something when I'm 30.

Scott Pack

3:04 PM

@Xander That was a constitutional amendment that was written and promoted by people.

lynks

@Simon we all owe our parents something :P

Simon

@lynks Nah, they just wanted to have a good time.

Scott Pack

@Xander Fun Fact! It is my understanding that while the populous votes on a specific wording of a constitutional amendment that's not actually what gets turned into law. If the vote passes then lawmakers take the wording as proposed and then rewrite it into something that "means" the same thing but is actual legal language. Or some shit like that.

Xander

@ScottPack Well that's just dandy.

Scott Pack

Mmm

Xander

3:08 PM

I think accountability to the voters is supposed to work, well, almost exactly the opposite of that.

Scott Pack

It'll be fine. What's the worst that could happen? I mean, it's not like Congress has the ability to draft it's own laws governing how Congress works, or is capable of setting their own salaries.

Simon

Jesus, I'm glad that it's a 404 now. I wanted to google search the "Daysofyorr" malware and I usually just type in the address bar my search query. I ended up entering the whole URL, good job me!

Thomas Pornin

@ScottPack A Congress that rewrites laws to its own advantage is a Congress that demonstrate a rather exceptional competence at law writing.

Scott Pack

@ThomasPornin Your command of language is exquisite as always.

Xander

@ScottPack LOL.

lynks

3:57 PM

random ebaying is dangerous, just spend far too much money on a world map canvas print.

equirectangular for the map geeks

Adnan

4:11 PM

@lynks Welcome to the club.

lynks

@Adnan sigh.. url fail

Adnan

Guys guys guys.. just because a question is edited, doesn't mean it's re-open worthy.

4

Q: Gamification of IT security - any applications yet?

Gamification, which is the use of game design elements and game mechanics in a non-game context, is a heavily discussed topic. Looking at the behavioral impact on Gamification, it has potential in educating users in IT security and rewarding secure behavior, especially in a corporate environment....

It's still "give me examples, plz"

or "google for me, plz"

lynks

Adnan

@lynks Looks awesome!

lynks

@Adnan yeah for me it struck the right balance between utility and appearance.

Xander

4:14 PM

@Adnan I didn't think it was close-worthy in the first place.

Adnan

@Xander Would you please explain your point of view?

As far as I can see, it's just asking us to list successful examples of gamification in IT sec

@lynks I can't agree more.

Terry Chia

facepalm

Adnan

@TerryChia I can't read

Xander

@Adnan First he clearly has searched, and hasn't found much, which is why he's here. Second, it's an interesting topic, and one that without doubt has potential value to a professional IT Security audience. This is my reasoning.

lynks

this is so badass, bbc.co.uk/news/uk-politics-23260701 gotta love John Bercow. He's like...dude, chill or imma banhammer you.

Lucas Kauffman

4:43 PM

amazon lowered their prices

Transcript for