The DMZ

@Simon says take off your shirt.

@LucasKauffman An American brand? If so, which one?

1:31 PM

@AviD see I knew I could rely on you!

@Xander australian one

Bundaberg

@RoryMcCune I don't have an iPhone. rofl

@RoryMcCune Interesting. There is certainly a difference between high-quality root beer, and lesser quality root beer, but I've never noticed a resemblance to Listerine.

@TerryChia ahem, "Thomas and I".

@RoryMcCune that was your first mistake.

@LucasKauffman Ah, ok. Not familiar then.

1:32 PM

@RohanDurve-Decode141 ahh so you're on iOS review duty without an iDevice. Ouch

@AviD Well, I won't be seeing you around now that you corrected The Bear.

@Xander @LucasKauffman how early in the morning were you drinking it?

or how late at night...

@AviD Holy shit! @RoryM shouldn't have summoned you

@AviD like now

at 9:33

Rofl, I'm outta here. This application is marked secure. :)

1:33 PM

@Xander well been a long time since I tried it (~20 years) but that's my memory of it...

@Adnan seeeeee?

@RohanDurve-Decode141 Do you have access to the source? That might be another way to go...

jks jks, gonna put it back into that "Why the hell did the sales people accept this"/"No one's want's you" pile.

its like that slasherpic from the 90's, you say my name in the mirror 3 times, the next morning you're dead.

Nope, it's a .ipa file.

1:34 PM

@TerryChia No, he is right. I have wrongly used an accusative instead of a nominative.

Can I decompile that like dex2jar?

@RohanDurve-Decode141 other option would be hackintosh. run osx in a VM and then emulate the iPhone on that....

@RohanDurve-Decode141 Look at it this way. Now you have reason to convince your boss to get a shiny new iDevice. ;)

@RoryMcCune Yeah, I'm intrigued. I'm going to have to go find some cheap root beer and see if I can figure out what ingredient is doing that.

@ThomasPornin @TerryChia my mom is an english teacher, so...

1:35 PM

Also, I've never had Root beer. How does it taste?

@Xander It's apparantly a natural poison

well, so nothing, but the Bear stated I was correct.

@RohanDurve-Decode141 I don't think so. At least I have never heard of any tools that accomplishes it.

@RohanDurve-Decode141 Exactly like sarsaparilla.

@RohanDurve-Decode141 there are some things you can do, but it requires you having a rooted iphone

1:35 PM

dafuq?

you can actually override the objective c functions with javascript

@AviD Strangely enough, in French we would still use the accusative form there ("Thomas et moi avons..." instead of "Thomas et je avons...").

I fucking hate designers. Trying to merge my web app with the CSS files they provided is a major pain in the ass.

Lucas >>

@ThomasPornin I think everything one says in French is accusative.

1:36 PM

@LucasKauffman Yeah? Interesting.

Oh, cool, someone's bringing their iPhone to office. I hope they've backed it up.

:P

TBH I'm not sure what that you mean... as far as I know its not called that in English.

@Xander there's only small traces in it, but that's what gives the taste

Apparently Stefan Esser bought a bunch of iPad Mini's for a fuzz farm. Pretty cool stuff from the pics he tweeted a while back.

qq

1:37 PM

@Adnan wuuut

Oh btw, I had a question about browser fuzzing.

@RohanDurve-Decode141 there was an ios testing app put out a while ago at OWASP, give me a few minutes to look for it...

Grammatical case

Case is a grammatical category whose value reflects the grammatical function performed by a noun or pronoun in a phrase, clause, or sentence. In some languages, nouns, pronouns and their modifiers take different inflected forms depending on what case they are in. English has largely lost its case system, although case distinctions can still be seen with the personal pronouns: forms such as I, he and we are used in the role of subject ("I kicked the ball"), while forms such as me, him and us are used in the role of object ("John kicked me"). Languages such as Ancient Greek, Latin, Sanskrit...

@RohanDurve-Decode141 I strongly recommend issuing a strings command and filing it away as "I don't see anything wrong with it". ;)

LOL

Considering I'm an "intern" that

1:38 PM

English does not have many cases, but it has a few remnants from old germanic ancestry (with some latin imports).

@ThomasPornin Hmm, my brother was right. I am an idiot.

*that'd be really funny.

Want to hear a joke?

@Simon Heeeeeei

Primitive Indo-European probably had a lot of cases; Sanskrit still has eight, Latin has six and German has four.

In French and English, there are only a few words which change upon case, mainly pronouns.

@ThomasPornin Finnish has 15

1:40 PM

These developers have made every page use POST because I showed them an SQLi on GET.

@Adnan But Finnish is not Indo-European.

@ThomasPornin No it's not :(

@ThomasPornin that's very interesting, seems I've learned all those rules, but never been taught (or at least to the best of my memory) those names for it.

Btw, does anyone here have experience with hacking with cPanel or WHM?

@RohanDurve-Decode141 there are plenty of webpages that suggest using post to protect against all kinds of webattacks.

1:42 PM

@Adnan Hoi <3

@RohanDurve-Decode141 No 133337ing here

@RohanDurve-Decode141 Out of sight, out of mind.

@AviD Yesterday I started following The Twins' YouTube channel. I cannot read "all kinds" the same

ah, here we go. @RohanDurve-Decode141 check this appsec-labs.com/iNalyzer to see if it helps you at all - I've never touched it or even seen it, only heard that there was a talk about it, so I've got no clue if it is what you're looking for or if it even will help at all.

@Adnan "The Twins"?

@AviD English teachers usually teach them as a short list of "special words" because there are not many of them. You are taught the generic case names when you learn a language where the cases are pervasive, like Latin or German.

1:45 PM

@ThomasPornin yeah, exactly.

@AviD Please don't judge me, youtube.com/user/twinmuscleworkout

Bleh, I was thinking of writing a Python script to modify firewall rules in real time when a user authenticates via SSH to open services like ftp, sftp, web admin panel, etc to him. It'd intended to prevent random bots from brute forcing logins, or trying exploits, etc.

Does something like that exist?

@Adnan I'm not sure I'm qualified to judge you.

I gotta set up a refresher tonight to make sure I don't lose my consecutive days this weekend.

I am so far removed from being "one of your peers" ;-)

1:46 PM

@AviD :|

@RohanDurve-Decode141 yes. Built in to many firewalls.

do NOT do that yourself. in gods dear name, do not even attempt it.

@Simon while(1) + wget + sleep

@Adnan yeah, way painful. I'm surprised they were able to work the webcam, let alone upload to youtube...

@Adnan Apparently, there's an extension on Firefox that does it.

@Simon Not leeeet enough

1:48 PM

So, I simply have to set it up on my server and I'm done.

Yeah, I know.

@AviD They got dem moneeez and bitchez

@AviD Any opensource firewalls?

@RohanDurve-Decode141 dont know any

*asin software firewalls which are open source

@Simon You don't deserve to be called a Fanatic if you don't use your smartphone to actually connect over the weekend.

2

1:50 PM

doesnt iptables come with somehting builtin?

No, but apf does.

@RohanDurve-Decode141 launchpad.net/ubuntu/+source/ufw

I daresay that obtaining that badge was hard for me. I have a life.

and there are management / orchestration products that could probably set this up for you....

Has anyone tried playing around with the GitHub search API?

1:51 PM

@TerryChia Yeeeeeah :D

I'm thinking of writing a scraper to pull interesting information using it.

Could be run on a Rasp Pi 24/7 easily. Will be quite cool.

@TerryChia One problem.

I'll probably play around with it this weekends if I can sort through this fucking css file.

20 requests/minute

@TerryChia Have you looked up GitDigger?

1:52 PM

I thought about doing it, but it's too restrictive.

@Adnan Ahhhh.

@RohanDurve-Decode141 Nope, that's quite cool!

The guy hangs on in IRC a lot of the time asking for HDD donations rofl.

:P

hi all

@ThomasPornin I'm a poor student, I don't have 3/4G.

@Poly PARTAAAY!!!

1:53 PM

And I highly doubt there will be an available Internet connection at the party.

Q: what will be the effects/impacts of using map api without ssl support?

i dont know how to greet all,so i simply say biurnal ismorphism

0

We are currently developing an web application which involves map api ,As most of the map api providers doesnt provide any ssl support (e.g yahoo map apI) ,what will be the security point of impacts while using map api without ssl? i am integrating the map api in one of my web pages,is it safe t...

xP

need guidance of community for my question

@Lonelybaby Answers will depend on how the "map API" looks like.

Typically, without SSL, you can assume that "bad guys" will do what they want with the data.

@ThomasPornin well what kind of info need to be provided with respective to ssl :(

1:56 PM

So if the map API involves downloading scripts and including them in your page, then this becomes a path through which hostile scripts may make it to your pages.

Which may or may not be a problem for you -- hostile scripts are on the client, not the server.

The really important question is the following: when you "use" the map API, who connects to the Yahoo/Google/Microsoft servers ? Your server, or the client browser ?

client browser

If that's the client browser, then that's more his problem than yours.

Client.

Well, how does HTTPS stop that tho?

@RohanDurve-Decode141 With HTTPS, the client can be sure that it is talking to the right server and that the data has not been tampered with or even inspected while in transit.

@Lonelybaby What's stopping you form using SSL? AFAIK, it's already implemented by Yahoo and Google APIs

@Lonelybaby Or do you mean using SSL on your site which is using the maps API?

2:00 PM

@Adnan nope yahoo api's doesnt support ssl

google provides it but 10,000$

:(

Oh.

@Simon oh enough with complaints about being a poor student. Just pay your damn rent!

@AviD The rent is too damn high.

10,000$ in my country is big amount :(@Adnan

Wait, what is the impact of someone tampering your map data?

2:01 PM

I never complained, skipped a bill, or asked for special treatment just because I was a student. and I had a baby.

@ThomasPornin I didn't think I had a life once I started getting close to 200 consecutive days. Then I found this post: meta.stackoverflow.com/questions/122976/… When it comes to not having a life, these two set the bar far higher than I ever imagined it could be raised.

@Simon then go look for something cheaper.

Oh and fuck, I actually gotta pay rent today. Thanks for reminding me.

@Simon .... I think we're talking about different situations here :-)

@AviD I can never achieve your level of awesomeness.

I could easily afford 3G, I don't want to though.

Seems like a waste to me, especially when a lot of public areas do have free intarwebz.

2:03 PM

@Lonelybaby Something is very wrong here. You're probably not explaining your problem correctly. I'm pretty sure Google Maps API is available with SSL for free

Plus I'm already paying for Internet at home.

@Lonelybaby who the hell would use Yahoo maps???

Q: Free commercial maps with SSL support

1

The commercial web app I am developing resides inside an SSL environment. I have been using Yahoo Maps up until now when I realised that when I switch to my secure SSL environment YMaps breaks the SSL certificate. I know Google Maps now offer SSL support but do not allow for commercial use unless...

javascript google-maps ssl maps

@Lonelybaby haaaaave you looked at Bing?

@AviD not yet :(

2:04 PM

depending on where you are in the world, it could be much much better anyway.

unfortunately they are not quite as consistent as Google is.

@Adnan i have linked u the question which provided info on google map api support with respective to ssl support

@Lonelybaby I don't know, but something is very wrong

Check this: maps-api-ssl.google.com/maps/api/js

Q: Options for Google Maps over SSL

12

We recently discovered that the Google Maps API does not play nicely with SSL. Fair enough, but what are some options for overcoming this that others have used effectively? Will the Maps API work over SSL (HTTPS)? At this time, the Maps API is not available over a secure (SSL) ...

google-maps iframe ssl https

@Lonelybaby @Adnan The Google Maps JavaScript API V3, Google Static Maps API, and Google Maps API Web Services can be accessed over secure (HTTPS) connections by developers using either the free version of these APIs or Google Maps API for Business. Please see the documentation for the API concerned for information on how to access the API over SSL.

It looks like v2 was business customers only, v3 is not.

developers.google.com/maps/faq#ssl

@Xander Yeeeah.. that's exactly whence I got my information

2:07 PM

@Lonelybaby That question is 5 years old. That makes it useless in Internet time.

3

@Xander And it is thus proven that StackExchange will never end.

@Lonelybaby You can test it maps-api-ssl.google.com/maps/api/js?v=3.5&sensor=true

@Adnan yup from their documentation

Can the Google Maps APIs be accessed over SSL (HTTPS)?

The Google Maps JavaScript API V3, Google Static Maps API, and Google Maps API Web Services can be accessed over secure (HTTPS) connections by developers using either the free version of these APIs or Google Maps API for Business. Please see the documentation for the API concerned for information on how to access the API over SSL.

The Google Maps JavaScript API V2 and Google Maps API for Flash can be accessed over a secure (HTTPS) connection by Google Maps API for Business customers only. If these Maps APIs are used with a free Maps A…

but while moving for buisness

Notice that all the subsequent scripts are over SSL as well

@Lonelybaby So? What's the problem?

its more expensive :(

so i moved/switched to yahoo but they didn't provide ssl support :(

2:10 PM

@Xander @Lonely Is there something I'm missing here? I am currently using Google Maps API (Static and JS) over SSL.

For free

@AviD bing doesnt support ssl too :( news.ycombinator.com/item?id=5576041

@Adnan Perhaps he should be paying us.

@Adnan Not that I can tell. I'm not sure what part of "free" is the expensive part we keep hearing about.

Oh @Lonely I think now I know what your problem. I can help you with it

There's a website that lets you use Google Maps API over SSL for only $1000. Is that okay?

It's not expensive at all

@Lonelybaby And now....You've linked to a non-authoritative thread that has nothing at all to do with maps.

2:13 PM

pardon for my bad english ,thank god atleast u got my problem , @Adnan

@Xander i simply googled bing support with respective to ssl support and got that hacker's news thread

SSL is expensive.

@Simon No, $1000 is cheap. Don't you agree, @Lonely?

@Adnan For a company, it is cheap of course.

@Adnan 1000$/month or year?

@Lonelybaby A year

2:15 PM

@Adnan lol, seriously?

@Adnan yup compared to 10,000 its cheap

get him to pay via paypal. 10% discount if he pays multiple years up front.

@Lonelybaby Oh wait, I just asked the person working there. He said that if you register this month you get a test account for free.

@Lonelybaby Perhaps you should try looking at the documentation instead. For example: msdn.microsoft.com/en-us/library/ff701714.aspx

@AviD Shhhh

2:16 PM

@Adnan where? ,@Xander sure i ll look over it

@Xander Documentation costs 150$.

@Lonelybaby He said that first he needs to see an example of how you're currently using the API

@AviD ??? The documentation is free on the Internet. My previous message links to it.

**kindly note that in my country 1 dollar=60rs ** which is expensive in terms of our economy :(

@Adnan sure

@Lonelybaby It's okay, don't worry. Like I said, he can give you an account for free.

2:18 PM

@Xander as soon as you view that documentation, you automatically agree to pay me them 150$.

@Adnan i am ready to pay but at feasable rate

@Lonelybaby No no, he insisted to give you an account for free.

@AviD Of course, it's Win.... Hi AviD! :)

@AviD Sounds good, I'll send you my Paypal info, as I'll just need a small processing fee first in order to get you your money...

;-)

@Lonelybaby But like I said, he needs to see an example of how you're currently using the API

2:20 PM

@Adnan well let me illustrate it ,we are currently rendering hospital info on our webpage

@Xander Of course. By the way I am stranded in the far east, I dont have my wallet or internet, can you wire me some cab money?

for e.g people will import hospital location (physical address) info through excel,and our web application process the web api calculates the web lat and longitude

@Adnan

and renders the respective hospital data on map

just pinpointing the location on map

Guys.. anybody?

Please

@Adnan thanks for support ,take care friends

David Freitag

Bunch of trolls

2:23 PM

@AviD LOL...Touché.

@Xander perhaps we should wire some money to @TerryChia. He really IS stranded in the far east....

@Lonelybaby You're welcome

@DavidFreitag How can you say such thing?

@Adnan :)

@AviD Yeah, but he's already started writing Java. I think it's too late for him. We need to accept the fact that he's gone.

@Lonelybaby When you make a request to http://api.google.com, just add s. It's for free

2:26 PM

@DavidFreitag whoa. just had one of those epipeny things. Is THAT why "The Bridge" is called that??

And back.

@Adnan and when you write that check, just add some 0 at the end. It's zero, so it doesnt really change anything.

@AviD Oh no!! That's wrong, if you add it to the right it changes a lot. You need to add it to the left

Just like 03 == 3

0http == http

@AviD You should learn math.

I think we went over your head.

@AviD Oh the irony!

:D

2:29 PM

@Adnan you're misusing that word again.

@AviD Alright. Now I'll go back to solve the problem that YOUR CUSTOMS got me into

@AviD Yes. Potatoes are irony.

@Adnan hehe, for the record the one time I had any contact with them, I got thoroughly screwed.

They seem to be good at that.

Though I dont see why they're involved at all, if its leaving the country.

@AviD I still have no idea.

@AviD There are these pesky things, called "international treaties", which can apply restrictions on what countries can export.

2:32 PM

pesky indeed.

we should abolish all governments' monopoly. It is oppressive.

@AviD We should add anarchism here

What were you exporting?

David Freitag

@AviD I'll get my gun

@RohanDurve-Decode141 Alcohol prep pads from an Israeli seller

xP

2:36 PM

Apparently, he acquired them illegally and is selling them as military surplus

@Adnan heh. Army surplus, I would have guessed it would have been a little bit more.... explosive.