The DMZ

Simon

00:24

@AviD Congrats!

@RoryAlsop I wonder what kind of stuff she has to do, probably pour some Whiskey more than anything.

Xander

00:37

@AviD Congratulations!! How fun!

Sirex

@copy thanks ill check it out - not heard of that one yet

Rory McCune

01:10

@AviD woo congrats :)

D3C4FF

03:25

Sup all

Lucas Kauffman

03:36

morning

@AviD gratz :D

Rory McCune

@LucasKauffman mornin' you're up early!

Lucas Kauffman

@RoryMcCune yea needed to do a threat analysis for a client, but I've also got a meeting with another this morning so I needed to start early :p

Rory McCune

@LucasKauffman hope you're getting overtime for it!

D3C4FF

@AviD Ah congrats AviD :)

Lucas Kauffman

@RoryMcCune of course!

:p

Rory McCune

03:42

@LucasKauffman ahh well that's ok then.

Lucas Kauffman

@RoryMcCune you're either up really early or really late :p

Rory McCune

@LucasKauffman meh, client provides a window for testing of 0001 --> 0600 . First night they get it wrong 'cause they "forgot" about BST, and it should actually be 0100 --> 0700 so now we're both testing it from 1-7

Lucas Kauffman

oooh night tests

Rory McCune

and it's a test system so why this time slot I have no idea

but hey time and a half

Lucas Kauffman

lol what

Rory McCune

03:44

so I'm not complaining too much

Lucas Kauffman

I always liked night testing, free food :P

Rory McCune

heh also a good reason. Luckily for me I can generally sleep whenever I want to, so had a nap 7pm-12:30am and am reasonably awake..

Lucas Kauffman

04:00

That's good

I was always amazed at what time some of the partners remained at the office. Some sat there until we left and they were back before us.

Like at 0500am they were still there and back before 1500

Stack Exchange

07:17

Actual quote from The Demo: '... an advantage of being online is that it keeps track of who you are and what youâre doing all the time ...'

lynks

10:22

does anyone know their way around GLSL?

Rory McCune

11:20

@lynks If I said "what's GLSL" that might convey my level of understanding :)

it's awful quiet in here today

lynks

@RoryMcCune I could cat in some /dev/urandom if that would cheer you up?

Rory McCune

obviously @AviD is off rueing the error of having yet another kid which would make things quieter

@lynks well perhaps motd or something would go down well

we should create a snark-bot

lynks

@RoryMcCune ahh multiboxing is a sin

Rory McCune

it could just respond if there's no one is about with something like "your face" to any comment

lynks

@RoryMcCune I like it. this chat has rss features right?

both in and out

Rory McCune

11:23

@lynks I believe so for out definitely, although I've not tried it...

lynks

@RoryMcCune I assumed the xkcd et al were brought in via rss

Rory McCune

@lynks ooh could be..

lynks

so room owners can add incoming feeds, whatever format they have. and we can pull out rss. so we could write a bot that targetted one user for abuse randomly each week.

Rory McCune

@lynks heh, that would be funny

well for a certain definition of funny anyway

lynks

@RoryMcCune unfortunately, bots are hard

in terms of making them anything other than annoying

Rory McCune

11:26

true, although annoying would largely be the purpose, so that's part of the problem sorted anyway :)

Terry Chia

12:01

@lynks We don't need a bot. We have @AviD.

TildalWave

@AviD oww that's one cute kitty :) mine also sometimes sleeps ( / is being lazy) in really funny positions, just yesterday she was leaning with her back legs against the wall and resting on her back... I think they imitate us?

Terry Chia

Damn, this is beautiful. theverge.com/2013/7/5/4494966/…

TildalWave

@TerryChia I've seen just keys replaced with wooden ones, that's pretty cool looking also. Not sure how long they last or how much dirt they gather tho, I've only seen them relatively new.

Terry Chia

@TildalWave Yeah, that might be a problem. I really want one though...

TildalWave

They were almost exactly like this one ^

Terry Chia

12:08

@TildalWave Ahh, are the keys actually replaced or is that a paste on thing?

TildalWave

@TerryChia the ones I've seen had custom keys made of wood and then the bottom spring mechanism (well it's not really with a spring, just two sets of plastic legs) glued to them

Terry Chia

@TildalWave I see.

TildalWave

basically an overlay tiles yes, but ones where you can't make out if they're all wooden or not, the plasticky part is well hidden under / inside of them

I've seen bamboo ones, I guess those are the easiest to work with

Simon

12:42

Morning ladies.

Adnan

13:25

@Simon Morning morning!

AJ Henderson

so random trivia that my wife discovered yesterday

apparently Rivest went to the same high school as my wife

she was randomly looking at her HS's wikipedia page and it mentioned that apparently Rivest and one of the founders of iRobot both graduated from her high school

Terry Chia

@AJHenderson Rivest as in the RSA Rivest?

AJ Henderson

yeah

Terry Chia

Cool.

AJ Henderson

my jaw dropped and she had no idea why

so I explained that the secure internet wouldn't work without him

that seemed to make it sink in

Adnan

13:33

@AJHenderson Just tell her he was nerdiest kid in school.

AJ Henderson

but somehow I had never known he grew up in my area

Polynomial

@Adnan "He's the guy that took all of the advanced math classes."

Adnan

@Polynomial and got all the ladies.

Polynomial

@Adnan All of the ladies were called Alice or Eve.

3

Simon

@Adnan NOT

Polynomial

13:36

@Adnan the Alices just wanted to communicate with him, but Eve would constantly sabotage them and then betray his secrets.

He had a complicated love life.

AJ Henderson

so Eve was his wife and Alice his mistress?

Polynomial

probably.

Terry Chia

@Polynomial Don't forget Carol.

Adnan

@Polynomial Shamir is the one with the interesting love life.

Polynomial

he went by the pseudonym "bob" with their online chats.

@Adnan Because he's Eastern and exotic?

@Adnan Did he come from the land that invented pyjamas?

Adnan

13:37

@Polynomial Because he didn't really care who got pieces of his secret, as long as he got all the parties together.

Terry Chia

@Polynomial hahaha!

Polynomial

@Adnan Shamir runs over UDP?

Adnan

@Polynomial Shamir was all over UDP

Polynomial

that sounds dodgy if you read it out loud

all over you DP

DP - We don't just fuck the earth, we DP it!

Adnan

@Polynomial Holy Christ!

Polynomial

13:40

@Adnan I believe the phrase you're looking for is "Jesus Christ monkey balls!"

AJ Henderson

UTP now with one more than UDP

Simon

So, people still worry about their website code getting stolen?

Polynomial

apparently.

AJ Henderson

@Simon but my website code has all my secretz

Simon

@AJHenderson I'm gonna steal all yo CSS!!!!1111oneone

AJ Henderson

13:47

I hide my SSN, birth day, credit card and key to my first born's soul in my markup

Simon

I used to do that, then I took an arrow to the knee.

AJ Henderson

actually, I guess my birthday actually IS in my markup

people are really REALLY clueless about DRM in general though

I half want to respond with "if people can read my information, can they read my information?"

Terry Chia

@AJHenderson So I can take over your life with curl + grep? Cool!

Simon

14:17

God, can we give a formatting class to people answering questions?

Thomas Pornin

@Simon You can edit their answers, or flag them for a mod to deal swift justice on them.

Scott Pack

Write up your curriculum and I'll give it a first pass review before submission to the Curriculum Council Review Board.

Simon

@ThomasPornin I guess that's what I'll end up doing.

Thomas Pornin

Oh good, now they've shut water and air con throughout the building.

It won't be back for lunch, so I'll have to find some food elsewhere, too.

Simon

Where do you work, if it's not too personal to ask?

Scott Pack

14:22

@ThomasPornin Aren't there a few dozen poutine stands within eyeshot of your office's main entrance?

Terry Chia

@ThomasPornin So you are heading to another lake?

Thomas Pornin

I am a consultant of CGI. Right now, they sent me at RAMQ to help them build up a PKI.

@TerryChia It's not salmon season yet...

Simon

Oh, I could have had an internship with CGI. It was IT support so I didn't really look into it.

Thomas Pornin

Though there is a sushi restaurant not that far from here.

Terry Chia

In other news, I looked at some JEE code today. A little part of me died.

Scott Pack

14:25

@ThomasPornin Do they have salmon?

Thomas Pornin

Looks salmonish to me.

Scott Pack

Looks like a very sad shrimp

Terry Chia

@ScottPack That's what she said!

5

Thomas Pornin

Simon

@TerryChia You got him good.

@ThomasPornin Is bear #1 already maxed today?

Thomas Pornin

14:37

@Simon No, not yet. Right now, I am at 85 for Bear #1, 110 for Bear #2.

Simon

And it's still early.

Terry Chia

@ThomasPornin You got some catching up to do. @Adnan dared surpass you the past two months.

Thomas Pornin

I am not worried.

Simon

Hehe

Terry Chia

@ThomasPornin I'm thinking more along the lines of mauling-based revenge.

Thomas Pornin

14:38

@TerryChia Yes, apparently @Adnan can get more rep than me when I am absent altogether. The same cannot be said of all others of you.

Scott Pack

I've really missed your backhanded smack talk. :)

Simon

Haha, wow.

Thomas Pornin

@ScottPack What, you felt a sudden disturbance in the Snark ?

Scott Pack

14:56

@ThomasPornin Indeed. It was as if the global supply of Snark was suddenly diverted.

Simon

God, I thought that it pissed me off yesterday because I was in some sort of bad mood but no, it does today too.

Why do people write an answer that repeats exactly what other people said?

zzz

Terry Chia

@Simon Dude. This is the internet. You will never survive here if random people on the internet can piss you off.

5

Scott Pack

So you would probably hate me for this.

1

Q: tail -100 catalina.out | mail to somewhere

trying to spit out last 100 lines of catalina.out and email them to myself. Can someone suggest a quick oneliner on how to do this? I can only come up with something like: tail -100 catalina.out | /bin/mail -s blah myemailaddress

Simon

LOL

No, that one is clever.

Terry Chia

@ScottPack HAH!

Brilliant!

Scott Pack

15:01

@TerryChia I very nearly felt bad about that one.

Simon

Why would you feel bad? The command he posted meets exactly his requirements: quick and a one-liner.

Terry Chia

@ScottPack I'm surprised you didn't get more upvotes. I thought snark would be appreciated over at SF.

AJ Henderson

@Simon whydoyouwantanyformatingwedontneedanyformatingorpunctuationitisntlikeitmakesitea‌siertoreadoranything

Simon

@AJHenderson I'M GONNA EDIT YOU.

AJ Henderson

don't you mean "I'm going to edit you!" ;)

Scott Pack

15:03

@TerryChia Because I got nearly 100 internet reps by copy pasting the question.

AJ Henderson

@ThomasPornin my pitty to you

Simon

3

Terry Chia

@Simon This is the internet. Cat photos automatically gives you a star. :)

Simon

Especially grumpy cats, right?

AJ Henderson

my experience with CGI has been less than spectacular though certainly there was a variety in their consultants

I don't think they like me much though as I was instrumental in establishing evidence of woeful project mismanagement resulting in a contract termination and a series of lawsuits that I still don't think are resolved

Thomas Pornin

15:06

@AJHenderson I don't deal with CGI consultants. I am the CGI consultant. I deal with the customers.

AJ Henderson

so yeah, I'm not on their Christmas card list anymore

yeah, I know. I'm just saying, my experience with CGI was less than astounding though they had some good people

Thomas Pornin

Incompetence is the most common skill everywhere.

10

AJ Henderson

too many of the people I was exposed to were clueless though. Might not be a problem throughout the entire organization, but the part I saw was a pita

Simon

That's a great quote.

It even got starred faster than grumpy cat.

AJ Henderson

@ThomasPornin yeah, so glad I don't have to deal with anything I would truly consider incompetence at my current job, but that's a first for me

@Simon we actually had a picture of grumpy cat outside our bathroom here for several months

I work in a very odd place

but I guess that is true of most dedicated software shops

Simon

15:09

Hehe, why near the bathroom though?

No particular reason?

AJ Henderson

random motivational poster that he was commenting on

it actually had another picture added every week or so where an entire conversation of memes occured

Simon

Memes at workplace is just awesome, imo.

I've done an internship at a company that makes satellites and one of the engineer had a picture of "what my friends think I do" and it was a picture of an astronaut repairing something in space. The "what I actually do" part was a PowerPoint file.

It was a great picture.

AJ Henderson

cloud.ajhenderson.com/…

Simon

Haha, nice.

AJ Henderson

and yes, I am truly paranoid enough that I run my own cloud service for my files :)

Simon

15:22

Well, that's a cool project nonetheless.

AJ Henderson

yeah, seems a bit slow, but very capable for what it is

even integrates with my phone

so I'm willing to forgive a little slowness on the web UI

it was the best one I could find that didn't cost a small fortune, let alone for free

Terry Chia

15:35

@AJHenderson Yup, ownCloud is pretty awesome. I'm planning to hook up a raspberry pi running it to a RAID enclosure once I have enough money to buy more hard disk and have a private cloud for my family.

Polynomial

I saw sushi.

you bastards. now I want sushi.

Terry Chia

@Polynomial sushi is good

Thomas Pornin

Time to go and eat sushi. See ya later.

Polynomial

15:53

fuck you :P

Gilles

5

Q: SIGINT CTF 2013 starts Friday 5 July 16:00 GMT

Let's participate in the SIGINT CTF 2013 as team Sec.SE. During this years SIGINT in Cologne the CCCAC will hold it's second CTF. The competition is open to everyone and can be played online. Challenges will be online from July 5, 18:00 CEST until July 7, 18:00 CEST (48h). As always...

discussion featured ctf

starts any minute now in chat.stackexchange.com/rooms/7384/security-se-ctf-team

Simon

16:44

@Polynomial I heard that you once bragged about having the top-voted answer on Sec.SE in a job interview.

AJ Henderson

@TerryChia yeah, not sure how well it will run on a Pi

I've got it running on a quad core dedicated server with 12gb of ram and it goes slow enough

and that's with a FastCGI implementation of PHP

granted, my standards may also be higher than what you care about for your family

I consider a one second load painfully slow

so if you don't mind 5 to 10 seconds, you might be ok on a pi

ManishEarth

DecryptoCat (http://tobtu.com/decryptocat.php) crack old private keys from @cryptocatapp in minutes... As soon as I get off my ass and finish.

Tweeted by Sc00bzT on July 4, 2013 at 7:20 AM

Simon

Haha.

AJ Henderson

though I suppose A.S.S.P. is a major resource hog

Rory McCune

@llama-del-rey nytimes.com/2013/07/04/garden/the-llama-is-in.html?hpw&_r=0

AJ Henderson

16:57

@RoryMcCune whoa, the person they mention in that article is local to me

Ballston Spa, N.Y. is like 10 minutes from here

Rory McCune

heh well an opportunity to go see llamas then!

AJ Henderson

better than the last time this area made the news

one of the death ray x-ray machine guys was local too

Rory McCune

hmm llama's is probably better for an area to be known for!

Simon

One day, I will post a question that @ThomasPornin won't be able to answer.

AJ Henderson

@RoryMcCune though llama death rays might be interesting

kind of like sharks with lazers

@Simon who can answer a question better than ThomasPornin

Thomas Pornin

17:04

@Simon How would you distinguish it from a question that I do not bother to answer ?

AJ Henderson

he can't answer it because there is no answer

Thomas Pornin

@AJHenderson If there is no answer then it is not a question.

Simon

@ThomasPornin I'm still at the alpha stage of my reasoning, I'll deal with this later.

Ladadadada

17:54

I'm just watching a tcpdump of a web app scan here from McAfee ScanAlert. Spotted this: User-Agent: Nessus.

HamZa

18:27

97

A: User recognition without cookies or local storage

Introduction If I understand you correctly, you need to identify a user for whom you don't have a Unique Identifier, so you want to figure out who they are by matching Random Data. You can't store the user's identity reliably because: Cookies Can be deleted IP address Can change Browser Can Ch...

^ good-reading

Xander

18:38

@RoryAlsop I believe I've found the perfect new addition for your band.

►

HamZa

►

I though I saw him somewhere lol

TildalWave

21:37

@HamZa Are you in our CTF team already?

HamZa

@TildalWave huh ? no ...

not competent enough :p

TildalWave

@HamZa I wanted to ask you even before if you'd like to participate in our tries... if you'd like to there's an ongoing CTF that I don't have the time for tonight and can ask guys to let you in

@HamZa actually, I don't really agree with that :P but no worries if you don't feel like it

HamZa

@TildalWave When is it going to start ?

Gilles

@HamZa it's going on

TildalWave

> Starts July 5, 18:00 CEST. Lasts 48 hours.

Gilles

21:41

ctf.sigint.ccc.de/challenges

chat.stackexchange.com/rooms/7384/security-se-ctf-team

HamZa

@TildalWave It's just that I read some answers here on Security.SE and then I think I might just continue with my php lol

TildalWave

@Gilles are you doing the "kacke" one?

Gilles

@TildalWave looking at it, but let's switch to the ctf room

Transcript for