« first day (930 days earlier)      last day (4248 days later) » 
03:00 - 20:0020:00 - 00:00

03:06
@RoryM Any recommendations for Rails authentication?
 
1 hour later…
 
3 hours later…
06:59
hello
07:12
@CodesInChaos I didn't know you could just disallow writing to a framed app?
07:29
@Griffin No it wasn't. The guy they had apprehended was panicking, which aggravated the dog further. Like I said before, have you ever had a dog that size gearing up to pounce on you? You do not want that to happen, trust me.
@ScottPack What exactly happened to Paros anyway? Two years ago it worked fine for me. The same copy doesn't work anymore. Don't tell me the Java update broke it :S
08:22
@AviD waves at Tigre
08:45
Heh. Suspended user on Music responded with "N***A WUT I DO FORREAL BRUH I AINT DOIN NOTHIN WHY U SUSPEND ME DAWG SERSLY GIMME A REASON BRUH" - like that will help...
@RoryAlsop lol
@RoryAlsop It's almost as good as that one from Manis yesterday :P
It's Manish :P
And which one?
Impalement?
@ManishEarth facebook one
Oh lol
That was copied from another mod. Brad I think.
08:55
and this nespresso coffee is really good O.O
09:07
anyone got some nice music for me?
 
1 hour later…
10:53
so I nearly just caused a major accident.
goddam ringroad.
@lynks what u do?
@LucasKauffman trusted another driver's judgement that turned out to be wrong.
approaching a roundabout, there was already 1 car waiting, he started to move, so I accelerated to join the roundabout at the same time as him. He slammed on his breaks as there was a car coming, by which time I had already committed, and just had to floor it and swerve across 2 lanes to remain infront of the oncoming car...intense moment, possibly the 2nd most dangerous driving moment for me.
@lynks ooh not nice
@TildalWave @ManishEarth security.stackexchange.com/questions/38347/… I VTC this one
@LucasKauffman Yes I was just about to ;)
11:14
this weeks has a lot of shitty questions
@LucasKauffman kk, wasn't too sure
@LucasKauffman there were a few OK-ish ones, but mostly "the bear territory" :)
but yeah a lot of closing / migrating / ...
11:41
@lynks ... 2nd most dangerous? Sounds like there is a story.
@RoryAlsop the #1 involves an attempted bus lane overtake on my part. one in which i hit about 50mph before realising there was a bus in the bus lane...coming to a stop at a bus stop. and I had to accelerate to get into a gap that was closing. In the end I passed the bus at around 70 with less than 1ft of space on either side of my car.
essentially I screwed up, and then committed. my usual pattern of near-miss
Yeeeeeeeeeeeeeeeek
Fun on a track. Not so much on the open road with no helmet or roll cage
Still think my most exciting was a front left blowout at 120mph. Luckily on a track with a fair amount of runoff, but it makes you think about what would happen in such an event on the open road
11:57
@lynks seems there is a use for Google Shoes after all :))
@ManishEarth That would be my best guess. 2 years ago we were running 1.6 for everything. These days everyone not negligent will be running 1.7. I wouldn't be surprised at all if that broke it.
@ScottPack sigh I liked Paros
@ManishEarth I blame your face.
@RoryAlsop ahh yes, I am constantly fearful of blowouts. I try to get my tracking done regularly and such, but its a real worry.
12:21
parsing 40 MB of xml
fuck yea
ALL THE MEMORY IS GONE
@LucasKauffman use regex
@ManishEarth naaaaw I can't
god I like smoothies
@LucasKauffman yup me too and it's soon gonna be the season for my fav ones - blackberry smoothie :) a bit tricky to prepare, but well worth it IMO
@TildalWave I just had one with red berries and blackberry yoghurt :D
@LucasKauffman I have some wild cherries in the fridge, I think I'll try that ... not sure what sweetener to use tho, they're a bit on the bitter side but really tasty otherwise
12:31
@TildalWave I use some plant
let me find out which one it is
stevia
@LucasKauffman yup have it, I'll try let you know how it came out
@LucasKauffman you should see the toys ... uhmmm kitchen tools I use to make them :) talking about double-entendre!! :))
Would it be ok to edit someone's answer to fix a non-working link? I only need to move 1 character.
@Simon yea
it's a bit too liquidish (tastes good tho) I'll stick in an apple... brb
@lynks - the problem is best tracking for sharp cornering is not the best tracking for stability in the event of a blowout
12:53
@TildalWave stick it in an apple?
ah add apple
@TildalWave or banana
The first reply, 2nd last link.
I could fix it by using the URL tag though.
@Simon replace the link with a word link1 or some other descriptive title and just add the url to it
Alright I'll do that
71
Alcoholic Beverages

Proposed Q&A site for bar staff, connoisseurs, cocktail mixologists, wine tasters, lager lovers, stout sippers, and beverage beginners to learn about the preparation and appreciation of alcoholic beverages

Currently in definition.

-2
Q: Save Firefox .json file to write-protected system without nasties

EdwardoBoot Linux from USB1, go online, then remove USB1 to prevent data getting written during the session. I want to backup changes made to Firefox .json file to a USB2 then restore it for Firefox future use. How can this be done without risk of contamination?

^^needz close votes?
13:03
@ManishEarth yes
Good. Sic 'em
@LucasKauffman Done... wild cherry / apple / strained yogurt / lemon mint smoothie with a touch of Stevia. It went down nice, and saved one for later :)
@TildalWave I always try saving some for later
but I fail at it
@LucasKauffman hehe yes it's difficult but I ate nearly half of a huge (9kg) watermelon yesterday throughout the day and I don't think it's safe if I continue on my fruit diet for too long :)
fruit diet
interesting concept
13:10
@LucasKauffman just a coincidence, but it's the season for a lot of my fav fruits now, and I just can't resist
@LucasKauffman tho yes I know of a melon diet... you can eat almost all you want in normal quantities and then have a piece of a melon after each meal to fill you up. It allegedly works quite fast.
but my belly looks like a melon now because of all the fruits I had :)
@TildalWave I heard the Gin-tonic diet works wonders as well, but I have some serious doubts about how healthy it is :p
13:27
@LucasKauffman Hey, it keeps you from contracting Malaria. What else do you want?
@Xander ah reminds me I need to contact my docter for my shots
@LucasKauffman I'm happy to be of service.
13:48
@LucasKauffman Oh if you want wonders then I can suggest you try that tomatoes and celery soup diet (I could find a recipe, if you'll insist) that you can eat all you want but just that... you'll lose weight really fast, but will also leave you exceptionally weak. I prefer diets that still give me required energy but force the body to store less (which is why with most starvation diets you first start gaining weight, because the body tries to store as much as possible, adjusting to starvation)
actually, it's tomatoes and cabbage but I remember it having celery in it too
@TildalWave I prefer to be able to sport and eat than eat something disgusting and end up nto being able to do sports
it will just make me feel miserable and I'll be more likely to grab a bar of chocolate
@LucasKauffman yes that's my preferred method also... plus it's really annoying if you're all weak with the nearly summer weather outside
@TildalWave and you'll get insta drunk after a beer or 2
@LucasKauffman didn't know that
well I do anyway if I havent had any decent meal :P
13:54
@Xander I've always wondered if there's enough of quinine in the tonic to prevent you contracting malaria, or it's just for the bitter taste and not nearly enough of it?
@TildalWave Not nearly enough, by a couple of orders of magnitude. Allegedly it was derived from the medicinal use of Quinine, but tonic water itself won't do anything for you.
Nice try, sport, but no dice. Tonic water contains less than 20 milligrams of quinine per six fluid ounces. The recommended quinine dosage for treatment of malaria is two or three 200-350 milligram tablets three times a day. If you drink the equivalent of that in gin and tonics, malaria will be the least of your problems.

Tonic water was never intended as a cure or preventive for malaria, but malaria is the reason the quinine is in there. Quinine has a bitter taste. To make the stuff palatable when used as an antidote for fevers, legend has it, British colonials in India mixed quinine with
14:18
@LucasKauffman Heh nice explanation, where is it from? And how in hell did you fit this long text into a single message?
@Xander yup thought as much (but not arsed to dig for any real data), cheers!
@TildalWave magic.
@ton.yeung I know this cool diet, you can eat everything but you can't swallow anything
@ton.yeung There's some well known food items that will burn fat quite effectively, or let you remove excess water from your body (diuretics), but won't inhibit intake of much anything... I'm not a nutritionist, but pineapple and coffee come to mind (not sure that's a recommended diet tho LOL). Guarana also,...
@TildalWave yea I heard about some type of concentrate which makes you not absorb fats
you do have diarrhea as a result of it
basically, you'd be after foods that will accelerate your metabolism, not try to stop it
@LucasKauffman yes it's also an effective laxative sadly, but just eating pineapple as is will work too, granted less so
and pineapple juice is also used in kitchen to prepare tougher meats as it helps melt fats away... it makes tougher stakes nicely tender then, same goes for coffee but that gives the BBQ aftertaste to it
oh and that tablespoon of olive oil in the morning before any meal as @Adnan was talking about a few days before is a good way to "prepare" your metabolism and also protects from excess stomach acids nicely... and it's a good source of anti-oxidants too. It's an ancient Mediterranean way :)
@ton.yeung Cut out fructose. That's what my wife did after watching this. It was the only change she needed to make.
14:31
Jun 22 at 22:08, by Adnan
@AviD With almost every meal + 1 shot a week when I open a new bottle.
Except for occasional treats, she doesn't eat anything that has sugar or high-fructose corn syrup as an ingredient.
@ton.yeung Because it was a reply to your message.
@ton.yeung because I replied to you? :P
@ton.yeung don't know of any shortcuts if you wanna reply directly to some previous message (short of knowing it's ID of course, but that's a long shot), but if you want to reply to a person (not message) then you just type @ and first letter of the username and use tab to stop at the intended recipient
@Xander You probably mean refined sugars? Because I'm not so sure that's true for fructose contained in most fruits, because the pectin should pump-up your stomach way before intake of fructose would be a problem with most fruits that I know of.
@TildalWave Yeah, she doesn't worry about the fructose in fruit.
@Xander Oh good, you had me worried I'll have to watch that video :)
@TildalWave Yeah, the video is pretty fascinating.
15:02
@Xander I'm half an hour into it now and one thing strikes me about it - there's nothing in it (so far) that is not a common knowledge for my generation and in these parts of the woods. I could probably bet my wages the younger generations don't know anything about it tho, and I don't doubt it's not as well know in the US either
@TildalWave The mechanics of fructose as a poison is pretty novel. The fact that sugar makes you fat, yeah, that's not particularly ground-breaking.
I remember even from primary school we had those nutrition charts in every biology class and they all clearly had a certain percentage of fats there, and warning about sugars more than fats themselves
@Xander wait, I'm not there yet :)
@TildalWave Yeah, that's not the case in the U.S. at all. There's been a war on fat here for the last few decades, and nobody says much of anything about sugar other than that you obviously shouldn't make it a dietary staple, though indirectly that's what many Americans do.
@TildalWave Yummm!! Olive oil!
@Adnan I'm actually conserving my stash of last year's supplies as it's running rather low and I don't really like the bought ones no matter what they say on them it's just not the same, but yeah I like a sip of it every now and then too and I could swear it makes you feel better in an instant, tho that could as well be the placebo effect on me :)
@Adnan another oil that I love and we're particularly good at making excellent ones is pumpkin seed oil... homemade press one, not distilled at all - a few drops on a family size salad, that's all you need of it, but it tastes yummy
15:13
@TildalWave Hmm.. first time I hear of this one
@TerryChia I'd look at devise if I was you :)
@RoryMcCune Thanks, was looking at it earlier. Can't believe how much of the process has already been done just by installing the gem and setting it up.
@Adnan Oh it's one of the essentials for me as far as salad dressings go, right there with the balsamic vinegar. You have to get some, trust me you won't regret it ;)
@TerryChia yeah stuff like that where's it's happy path is really nice, if you want a basic admin interface for CRUD operations you can use ActiveAdmin and it does 90% of what you want out of the box....
@RoryMcCune I must say my first impression of Ruby is pretty good. I still prefer python's syntax but I can't believe how easy it is to get basic stuff up and running on Rails.
15:21
@TerryChia also there's a load of good learning resources, most of which are free which is nice :)
15:47
In corporate #infosec, there's pseudorandom, nonrandom, and memorandum.
16:10
maybe I should have a go at rails too then
16:28
rails makes me sad
apart from the rails on my railgun...that i am yet to build...
@Xander Finished watching it. You're right, it is a good presentation. First half an hour can probably be skipped by non-Americans, but the rest is then educational and well explained. :)
17:13
This might be old, but it made me laugh:
user image
6
17:41
Another flight, another TSA groping. So sick of a decade of this shit.
@JeffFerland I'm genuinely asking, is this real?
I mean do they actually do that?
I've always thought it's a joke on TV or memes
@Adnan Yes. Every time I fly my options are to be subjected to a dose of radiation that nobody is allowed to quantify, or have somebody drag their hands over my entire body.
I'm flying to the USA in 2 weeks, what should I pick?
Week long clothes, stale beer (and spill some on your clothes).
Oh, and some good excuses for your fellow passagers in the plane. :)
@ton.yeung No, should I choose to be subjected to a dose of radiation or to be groped by a stranger?
17:54
Re hardware: Do not transport any laptop or similar device. They can decide to investigate those (read: keep them for a long time) without any reason.
Seriously?
@JeffFerland Does that happen when you fly from state to state? Or is it only for international flights?
Serious enough they we reinstalled all laptops with windows just so the airport guys say something they would recognise. JUst put a second hot swappable HDD in the same bag with your regular OS
@BadgerGirl You might get both
oooo I take groped by a stranger any day
17:58
Can I see the source that says such thing about laptops?
As long as you are not British. They got something called a superInjunction.
Not allowed to tell. Not allow to tell that you are not allowed to tell.
@Hennes I have booted up Linux in front of a security guy at the airport before
He said it might be a bomb. I wonder if they can tell Linux and a bomb apart
I have a ~3kg laptop with an extra 8 cell (normal is 4 cell) battery
It is heavy enough to be used as a weapon. (in the same way most bibles are blunt weapons)
@Adnan Any commercial flight
@copy They can't. Ask Boston about blinky LED lights.
18:05
@ton.yeung If I get a charter or fly myself, no problem.
@Xander Oh fuck this country government.
"The DHS, which secures the nation’s border, in 2009 announced that it would conduct a “Civil Liberties Impact Assessment” of its suspicionless search-and-seizure policy pertaining to electronic devices "
lol
the government contends the Fourth-Amendment-Free Zone stretches 100 miles inland from the nation’s actual border.
... and markdown. fuck that too
@jeff three dashes
Fourth-Amendment-Free zone?
That sucks, I don't want to take my laptop anymore. :(
18:08
Fill it with funny offensive crap
like furries
It's already full of that :P
:)
offensive to them at least
@BadgerGirl Remember that that actual risk of seizure is next to none. Just because they've decided that they can, doesn't mean that the often do. If you're not already on a list somewhere, and you don't give them reason to be suspicious, it'll be fine.
@JeffFerland What the hell?!! I didn't know that.
I'm not a big fan of the EEA/EU, but it's so great they non of that stuff exist here.
I'm on my wife's list
constantly
18:11
Uhm, I think we got body scanners. Just not the x-ray ones.
Those were deemed to emit too much x-rays to be safe.
@PsudeoReality ... so you're being felt up all the time?
@Hennes We don't have the X-Ray ones anymore either.
No, I just take the train.
Or the boat
@JeffFerland It seems that most full-body scanners in use in the USA are of the millimeter wave persuasion, not the X-ray kind; they ought to have no impact on health.
It's "millimeter wave"... whatever the hell that means. I can haz frequency and power specifications?
18:12
@JeffFerland no @ton.yeung yes
@ton.yeung They could just ask me to lift my kilt...
5
... you know what, next time around, kilt.
So they will see me naked and then grope me?
I'm gonna pop some Viagra and wear a metal ring around my you know what the nex time I have a flight
@Hennes But we don't actually pass through the scanners. Only the luggage.
@BadgerGirl Are you flying from Mexico?
18:14
@BadgerGirl I'm so sorry.
@BadgerGirl No, they don't see you naked. They might grope you. You can certainly ask to be groped, if that's your preference.
If that's the case, when they ask you to step into the scanner you say "I opt out."
0
A: development of Assymmetric Encryption algorithm?

Lucas KauffmanNever roll you own Crypto. Don't be a Dave!

dave is back
@Xander I could be wrong, but I vaguely remember that there are more chances for cavity searches for people coming from South America.
Then you go through the metal detector instead, and wait for the groper to do a half-hearted job of pretending to make sure that you aren't carrying anything that somebody might find scary.
@Adnan That's possible, due to the the likelihood of drugs. I don't know though. I'd think that would be a secondary customs search, rather than a security/TSA thing though.
@Adnan 2/10
18:19
@ton.yeung Fixed.
@LucasKauffman He strikes again
0
Q: Best way to protect an image file?

user27889I have an image file that I am going to uploaded in a server, I am planning to protect the file in the following way: Apply an algorithm to generate MAC to the file then, Encrypt the MAC value, Lastly hide it with steganography method. Which means three different level of protection? Any commen...

@JeffFerland Frequency is between 30 and 300 GHz. As for power: if it did not cook you, then it was weak.
A bear :)
Hmm.. I see some melonning potential here.
Canadian bears, Mexican badgers... and I guess American cats if we can get @WesleyDavid in here.
... though now he's more of a sock puppet than a cat
18:28
@ton.yeung Texas has only got Steers and Queers
@RoryMcCune grats on overtaking Hendrik
Good guy Thomas takes time to reply to the bad question.
   rep capped :(
What? That's a thing?
@Simon yea you can only earn about 200 rep + accept rep on your answers a day
18:43
Oh I see. Let me downvote some of your stuff then.
@Simon Actually that's 200 rep from upvotes; the +15 for accepted answers and the bounties do not count towards the count. So you can get more than 200 in a day.
Hell no, I'm gonna downvote his questions.
@ThomasPornin Ah. See Lucas, you can get more!
Indeed, there have been months where I got 7000 rep, and no month contains 35 days.
@ThomasPornin what's the most you had in a day?
@ThomasPornin yes but you are 'The Bear' simple rules do no apply to you
@ThomasPornin It's obviously a bug related to leap seconds.
18:47
@LucasKauffman Mmh, I got 430 last october, but there was a +200 bounty.
Without bounties, I think that's 290.
Wait, you never asked questions. How did you get the 90 then? 45 edits or what?
@Simon every answer is 10
@thomas there have been days on meta where I would have gotten a 500-1000 if not for the cap
@Simon 6 accepted answer that day. +15 per answer.
That's +15 for who wrote the answer, not who does the acceptance.
@ThomasPornin Oh, accepted answers as in your answer has been accepted, not that you've accepted someone's answer. I get it.
18:50
Bonus for accepting an answer is lower (I think it is +2)
Got's a nice guy.
@ManishEarth I also have some days like that.
Yeah, let's not talk about religion.
@ThomasPornin so many answers you decided to even make an alter ego!
Anybody ever play with an HSM?
18:57
> If you would like to maintain your free Dyn account, you must log into your account once a month. Note that using an update client will no longer suffice for this monthly login. You will still continue to get email alerts every 30 days if your email address is current. Failure to login once per month will result in expiration and loss of your hostname.
looks like a scam, smells like a scam, but I suspect it's actually legit
I do have a dyndns account, and it seems that dyndns = dyn.com
Nah it's legit.
@JeffFerland Yes, I did.
@Simon I think so, but it sure doesn't look like it from the email
@ThomasPornin I'm trying to solve a key distribution problem. Thinking of each SSL termination point having an HSM that needs an initialization key to activate and will provide sufficient throughput for terminating the public key encryption portion
@Gilles Yeah I know but they really do delete your account if you are inactive for 30 days. If they gave you a link in the e-mail, check the source in case.
18:59
@Simon the link is to dyn.com, which isn't the site I created my account on
but dyndns.org does redirect do dyn.com now
Fuck it. I'll just buy one.
@JeffFerland I don't think I understand your question. Please detail.
it's as if Paypal told me to reactivate my account on payfriend.com
Nevermind. I'm not paying $500 for a USB stick that does crypto.
@Gilles Yeah, it is indeed odd. That's why it's a pain in the ass to handle domain name changes.
19:01
@Adnan this guy is selling downvotes faster than doughnuts at a police station :)
@JeffFerland I am more accustomed to HSM in the 9k-25k$ range
@ThomasPornin expensive pendrives :P
Or smartcards which cost 20$ or less
Note that a HSM does nothing that a PC cannot do, except the part about being tamper-resistant.
19:02
but I have no idea of how many 2048 bit encrypts it could do per second.
@ThomasPornin Right. Just working on the tamper aspect :)
@JeffFerland Usually, RSA encryption is easy; it is the decryption which is expensive.
If a HSM is any good, its performance is provided in the accompanying datasheet.
@JeffFerland too easy to remove, you wanna weld that to a few server racks and I don't see a place for that on it :P
@TildalWave Removal locks device; needs passphrase to re-enable (if it's smart, I hope)
@JeffFerland I can't find any of that described on that page store.yubico.com/store/catalog/…
Someone dude added a comment with a hashtag in it. Please no.
19:06
@JeffFerland Ah, I got the answer. A YubiHSM can do exactly zero 2048-bit RSA encryption per second.
It is symmetric only...
at what number of downvotes does the automatic cooling-off period start for newbs?
@TildalWave that's only on the trilogy and Programmers
@ThomasPornin ... well the hell with that
@TildalWave YSM_HSM_UNLOCK in the manual
@Gilles So we just sit and wait? He clearly needs to rethink his approach to... well everything :)
@JeffFerland I have had some experience with Gemalto cards, which cost 20 EUR, are protected by a PIN code (which can be long), and can do a 2048-bit RSA signature or decryption in a bit less than one second.
19:10
Should I use Steganography or a MITM attack to prevent a denial of service attack
that will be his next question
@PsudeoReality His questions get downvoted to quick; when they reach -3 or so, they disappear from the front page, and my amazing answers don't get the attention that they deserve.
"... my amazing answers ..." At least he knows it.
true
nor do my mediocre answers :)
@Simon “amazing” includes “amazingly bad”
@Gilles Fair point.
19:14
:10190278
@Simon as long as he doesn't start smelling his own farts it's k
LOL
That South Park episode.
Where's @AviD? I'd like to finally see the picture of how he solves a problem with a pillow.
Well, Lucas Kauffman, This project is assigned by a government sector. And the asked for this kind of protection. They want to keep the write permission and protect the file in the net — user27889 53 mins ago
figures :)
With all three of your questions in mind, I have to ask - Are you organizing a particularly bad CTF competition? Because that's pretty much the only good use for bad crypto that I can think of. All other uses of bad crypto will only end up in you being the laughing stock. — TildalWave 32 secs ago
added my 2 cents
19:31
Rails use a framework, right?
I think I'm gonna go for Python if that's the case. I don't wanna start using a framework because it will turn me into a lazy programmer.
uses*
@Simon rails is a framework based on ruby
why not use frameworks?
Because if I start using something that does a lot for me (e.g. Symfony2) and then get a job where I can't use a framework for some reason, I'm not gonna be happy.
Of course it depends how much Rails does stuff for you. I know that Symfony2 can generate your classes, db, etc.
19:55
Meh, screw it, I'll probably look into it anyway. RoR has already interested me but never took the initiative to test it out.
03:00 - 20:0020:00 - 00:00

« first day (930 days earlier)      last day (4248 days later) »