« first day (985 days earlier)      last day (4193 days later) » 
01:00 - 16:0016:00 - 00:00

01:59
@LucasKauffman Ahhh interesting.
Dammit, I got wiped from the star wall. :(
02:47
Interesting aspect ratio, tomshardware.com/reviews/…
O_O
21:9
You're interesting.
@Simon Thanks, I get that a lot.
@TerryChia My pleasure.
Nighty night.
@Simon Sweet dreams Canada.
 
4 hours later…
06:56
crazy canada
07:09
'morning
Can anyone help me figure out a puzzle with SUID binaries?
@TerryChia sure
@LucasKauffman Have you done io.smashthestack level 4?
@TerryChia ah no :(
I basically have a C binary calling system("id"); owned by level5 and having the suid bit set.
So I exported /tmp to my $PATH and created a bash script in there called id.
#!/bin/bash
/bin/sh
07:21
@TerryChia yea so that the program runs a bash shell instead of id
It gets executed but a whoami shows that I'm still level4.
HOWEVER, a python script with os.system('/bin/sh') returns me a sh shell where I am level5.
Which really has me stumped.
mmm
that's weird cause it's essentially doing the same thing no?
@LucasKauffman Yup. So I'm not sure what's going on.
I think it's worth a question here hmm?
@Gilles You are the unix pro around here, any clue?
@TerryChia yes
bash drops privileges when it starts
try dash instead
or python, which if it calls bash will do so without privileges (i.e. euid = ruid)
"drop privileges" = set euid to ruid (nothing to do with changing the ruid)
@Gilles Ahh! I see. Yes, setting the shebang to #!/bin/sh works as expected. Thanks!
 
2 hours later…
09:37
@RoryAlsop submitted a blog post
10:07
@LucasKauffman Will review at lunchtime.
@RoryAlsop It's not pressing, just so you know if you there isn't anything in the pipeline for the blog ^^
10:24
@LucasKauffman managed to go through it. No major changes - added a link and a couple of explanations of acronyms. If you are happy with the changes I can schedule it for publication.
Oh, and thanks for writing it - we need to get back in to queueueueing up blog posts
@RoryAlsop I trust your judgement, no problem :)
11:06
If I get my car back today, I'm gonna dance.
If not, I'm gonna be sad.
@Iszi When you read this out of context: awesome.
@LucasKauffman Since when did you become so hardworking? :P
@LucasKauffman scheduled for publication tomorrow lunchtime then :-)
Phew, completing level 5 of io.smashthestack took way longer than I expected.
11:39
scarn' on folks?
@D3C4FF Exploiting buffer overflows on my off day. :P
@TerryChia That's my kinda day off! :D
You're doing the STS chals?
@D3C4FF Yep. The IO one.
@TerryChia Cool stuff :D
I'll be back shortly. MALWAREZ
@TerryChia I have always been hard working! I just got a bit of time due to network scanning
11:59
that was close
Protip, don't try using a cracked copy of xchat
@D3C4FF don't use any cracked software for that matter
@LucasKauffman Yeah in a perfect world...
I used to (as a kid with 0$) pirate EVERYTHING. But now that i have an income i've started buying software and even donating to projects! D:
@D3C4FF same software I like I buy
and since steam
I also buy all my games
@LucasKauffman I just stopped playing games really :P
12:19
@D3C4FF I buy all my music. I pirate all my movies. Weird eh?
The only piece of software I have pirated is a cracked copy of dbpoweramp atm.
14k. Big whoop.
@D3C4FF I got addicted to Payday
Payday? As in the day you get paid?
@TerryChia I pirate the hell out of TV shows and movies. But i still go to the cinema regularly and i buy music i like
woot, huge tax refund. Yay.
@AviD :D
How much approx?
@D3C4FF most of it.
turns out they were way overcharging me. add to the fact that last year was light, but with a lot of expenses, I'm getting back most of the taxes I (over)paid.
prolly around 5k in usd.
12:31
@AviD Sick, i had the same thing last year. I got back 15k AU :D
@AviD most I ever had back was a couple of hundred :-(
@RoryAlsop Sounds like you need... A CREATIVE ACCOUNTANT! :D
haha, that might be the case here...
meanwhile, my brother was just complaining to me about the bill he got from IRS...
@D3C4FF heh
@AviD Is your brother Winnie the Pooh?
12:37
@Simon lol
@AviD Trick is not to get 'too creative' :P
@AviD Are you a dual citizen?
well, thats his job.
guys, I've a problem with CCTV-security..I downloaded video files from my DVR, but I could not play them..

Do you know how can I play/convert *.264 files?
@ScottPack indeed.
12:45
@AmmarM.Zerouk Is the extension .246?
@AviD That sounds exciting.
@ScottPack yeah! double taxes!
@AmmarM.Zerouk Have you tried just forcing it to run through VLC?
@AviD Double the taxes and half the benefit?
12:45
no double-taxation without double representation!
I tried VLC but it did not work :(
@ScottPack there are benefits?
@AmmarM.Zerouk Did you consult your DVR manual?
I just calculated how much more I would earn if they double my wage after taxes, I got depressed
You'd be loosing money? :P
12:47
@D3C4FF I don't have the manual now.. I googled a bit about the extension, I found that it's a raw video file.. and I've no clue how to read it!!
@AmmarM.Zerouk google.fr/… try something here
@AviD Allegedly.
@D3C4FF ok, thanks..
@D3C4FF .fr? Say whaaat?
@D3C4FF I calculated on 4500 euro that I would get about 2400 after taxes :(
12:51
@Simon At work, I'm using google.co.in
@Simon I'm in france! D:
@LucasKauffman I'm hoping that's per month and not yearly...
@D3C4FF yea
13:04
@Simon So I've noticed. I only wish the out of context implication were true. Married life kinda precludes that possibility.
Wireshark q's - migrate to SU?
I've been seeing a few of them lately...
@AviD I feel they are a bit 'spammy' all done by 'new' accounts
and it's not something advanced, it's just RTFM
@D3C4FF yes, and mostly pretty low quaility. question is if they would fit better on SU, or just close outright.
@LucasKauffman Yeah, and then a quick answer by 'another' new account
seems sus to me...
But i'm on the internet. Everything is sus...
>_>
<_<
shifty eyes
13:07
@D3C4FF ^_^
V_V
awww yeaaaa
<(^_^)<
<(^_^)>
>(^_^)>
( . ) ( . )
2
({})
13:08
8=====>
2
8=========D ({})
2
8=========D ({})
2
and we have reached a new low xD
@LucasKauffman Really? Feels more like a medium.
8=({})
2
hmm, not sure this low is anything new.
13:09
BALLS DEEP
@D3C4FF or really short....
'spam' filter stopped me 'animating' it frame by frame :(
@D3C4FF You could always make a GIF.
@TerryChia My motivation is not that high
But i like how ASCII Penii have taken over the star's wall
Ok, the star wall is looking really freaky right now. :P
13:13
My days of taking you guys seriously are certainly coming to a middle.
Some nice wiener bombing going on right now.
@ScottPack That's certainly an improvement then :D
@Simon That's what she said.
Wiener Bombing you say?
Creepy.
13:15
I'm especially amused by Penisauras Rex
i disapprove of the star wall
7
@lynks Just cause you dont love teh cock
@D3C4FF how do you know I'm not a girl?
@lynks Why is that a requirement?
13:17
exactly
@lynks In this day and age its not even a relevant statement
you racist bastard
@D3C4FF true, and a good thing too in my opinion.
@LucasKauffman So's your face.
13:18
I'm now looking up ascii penii instead of doing a report for work -_-
@D3C4FF depending on the report, that could be the same thing.
@lynks Am tempted to steg-hide ascii cocks in report images...
Its a good look and reflects upon us well
My least favorite parts of writing a report is resisting the urge to say, "See that negligent dumbass over there? He's the fucker responsible." and translate that into something more akin to "Poor administrative practices and lack of standards based approaches"
@ScottPack I include screenshots of relevant things like 'company password policy' and highlight problems :P
@ScottPack @D3C4FF Just prepend every other word with "cyber".
13:27
@D3C4FF Normally I see things like phpMyAdmin with setup.php still in place and on the public interwebs. Or non-technicaly people with root access and accounts like 'test'. I'll let you guess the password.
@ScottPack Is the password 8=====D
?
that would be a reasonable secure password
it has numbers letters and signs
just the length is a bit on the short side.
5
@LucasKauffman TWSS
@LucasKauffman 8====================D Better?
I might start working on a dick detector and then try to sell my scanner to SE. It would actually detect whenever someone's trying to star a wiener and then cancel the star.
This room is a very good PoC of why it is needed.
13:42
@Simon Just wait till i start using muli-line-wieners
@Simon You could probably write some regex. You can regex the hell out of that wiener. Oh yes you can!
@TerryChia I'm afraid that it might detect non-wieners, it has to be a little bit more clever than a regex.
@Simon Live analysis?
@TerryChia Of course.
@Simon how would you like to be SE's official wiener mod?
13:45
@D3C4FF I'd brag about it in my CV.
@Simon You mean you'd have things other than 'Official SE Wiener Mod' on it???
@D3C4FF Right, that should be enough.
And your name i guess.. :P
14:06
Ack two points off 5k!!
@D3C4FF Oh come on, let's not rub it in @Simon's nose.
@TerryChia :P
Nice, "And we talk about the worst STD of all, the female stomach parasite. Also called a baby."
It's ok, all I wanted was 1k. However, 3k sounds nice.
@ScottPack Hahaha what's that from?
@Simon 5k sounds nicer. But as long as its an odd number its okay. Although i like 10k. But i've discussed this before..
"If you arent instantly good at it you probably never will be and everyone will laugh at you"
Hahaha
@D3C4FF are you laughing at him?
@AviD At/With/For/all of the above
I'm listening to a StarTalk about sex and she's the guest comic.
Ugh. changing my direct deposit shouldn't be this hard.
oh dear, it seems the payment for my server didn't go through this month...
one more reason to turn my house into a datacenter
14:20
Nice. In order to change my direct deposit:
1) Go to my online employee record, find it's not there.
2) Go to the Human Resources website, find it's not there.
3) Go to the Payroll website, find a Word document describing what direct deposit is and a link to a forms list.
4) Go to the forms list, realize it's not on there and click on the "all forms" filter.
5) Text search the page for Direct Deposit.
6) Open the Direct Deposit authorization form in Excel.
7) Fill out the form.
8) Print the form.
@lynks Hey mine to!
@ScottPack Couldn't you have gone to the Payroll office directly ? They might have ready-to-use printed forms.
@D3C4FF I thought your house was already a datacenter?
@ThomasPornin I work 90 miles from the Payroll office.
@D3C4FF hetzner?
14:23
@lynks Nah... someone else
@D3C4FF i was hoping it was the provider's fault. now I actually have to do something about it
@TerryChia I host anything 'publicly accessible' externally. So if it gets breached, it doesn't affect my place. Its just a website for my photography stuff :)
@TerryChia And its technically my warehouse :P
@D3C4FF why not just use a firewall, I mean if you have servers at home anyway?
@lynks Nah. I'd buy a second link if i was gonna self host it... But ceebz managing MORE servers...
@D3C4FF I'll be moving house soon and on my wish-list is a full-height rack.
14:29
@lynks If you were in Aus i could give you about a dozen 42 RU racks
both server and comms
The worst part about telecom racks is having to get shelves or 2-post rail kits.
@ScottPack And they aren't as 'deep'
@D3C4FF They can be as deep as you need them to be! Just move the rows.
@D3C4FF I didn't realise there was a distinction
@D3C4FF What the hell are you running? lol
14:31
EMC racks are also annoying because they're round hole non-threaded and the rails are also shallower than normal 4-post.
@ScottPack Hmmm, can't move em in the ones i have... I'm not there at the moment but i'll try remember to take a pic later...
@lynks Both are 19" (on center) but telecom are usually 2 post with threaded holes.
@TerryChia Nothing, that's why they're spare :P
@ScottPack rgr, thanks.
@ScottPack Also, my comms rack doesn't have threaded holes, its still square holes for cagenuts
14:32
@D3C4FF Really? I've never seen those.
@D3C4FF The only telecom racks I've seen have been aluminum threaded.
@ScottPack I'm not heading back for another couple of days, but remind me on Thursday/Friday to take pix and i will :)
Exactly like this, actually.
Or are you talking about something more like this?
no more like this...
But that's not it...
That one looks adjustable :P
now looking at rack-porn, free-standing 47u rack with glass door...
Haha @lynks loves a good rack
14:36
@D3C4FF having never actually had one, they are still a novelty.
bladey...
@LucasKauffman I recommended the dude check over here, but I wasn't necessarily asking for a migration. I think as written it's too broad, but I think it's a good question to have because it would be such a common question for a non-compliance person to ask of a professional.
@LucasKauffman dont think so. it may have other issues - legal, relevance - but its defnitely ontopic.
@ScottPack yeah, this. But I think it could be narrowed down nicely.
@AviD I think so too.
14:41
@lynks People more often that not want to just throw away racks, so if you offer companies that are moving or whatever $50 they'll happily give you a rack, more often than not they'll give em away for free... :)
@D3C4FF yeah I'll keep an eye out. Still have 300m of cat6 cable at home that I got for free just by asking :P
@lynks See! My mate works in a small telco, so we got 2.2Km of Cat6 as well :D
There's 3x ethernet wall plates ever 2m ^_^
@D3C4FF hehe nice. Some guys were re-wiring our whole building, when they came into our office, I started chatting to them and asked if they had any spare, they came back and gave me a 300m spindle :P
I'm saving it for when I move house :P
@lynks .... and that explains the starwall.
@AviD I actually don't follow..are you suggesting that "300m spindle" could be a euphemism here?
14:52
@lynks Ditto
@lynks no, the "chatting with them"
dang, I'm losing it.
Poor form @AviD, 1/10
And that's a pity 1/10
sorry folks, another couple days till the new allergy pills kick in.
Actually I think I OD'd on allergy pills yesterday...
@AviD did you get any super powers?
@lynks heh, yeah, I had the power of grogginess.
14:53
@AviD Try meth?
@D3C4FF Breaking Bad?
@AviD Science Bitch.
@AviD loved the "confession"
no breaking bad fans?
Whoa! What's with the penises?
7
@Adnan we miss you and were just trying to re-create the atmosphere of you being around.
15:00
@Adnan TWSS
@lynks Awwwwh :)
,`""',
;' ` ;
;`,',;
;' ` ;
,,, ;`,',;
;,` ; ;' ` ; ,',
;`,'; ;`,',; ;,' ;
;',`; ;` ' ; ;`'`';
;` '',''` `,',`',;
`''`'; ', ;`'`'
;' `';
;` ' ;
;' `';
;` ' ;
; ',';
;,' ';
Well, that worked out pretty terribly.
@AviD Nope. She usually says "Is that a penis?"
@ScottPack What was it supposed to be?
@ScottPack pasting into a monospaced editor didn't help either...
15:03
@ScottPack the cactus cowboy was clearly the better choice.
15:23
@AviD You're on "asteroids"?
hey
does anyone know how can one decode a torrent traffic using flows information alone? from information I mean nodes IP addresses and ports
here is the pastebin pastebin.com/1X6BYCiP
"The Teenie Weenie Bikini squad 2012 HDRip" ?
@lynks yeah I know
but what about peers IP addresses and ports
@lynks A very interesting and education documentary.
15:32
@Saladin Not sure, I would assume that you need to capture the request for peers that is sent to the tracker and its response. Just a chunk of torrent flow would only be relevant to whatever node pairs it came from.
@lynks thanks You are right these are just bi-directional flows, but i can get whole GBs of torrent data, but the thing all is hash'ed up.
@Saladin scroll down to "get peers" on the link you posted
ok wait
yes I have @lynks
@Saladin I'd have to spend some time on it, but it looks like the get_peers query type might be a good place to start. filter your packets for that.
@lynks yeah i just noticed that but the syntax perfect as it allows to enter ip port combination but then its get hashed. This is where the trouble-starts
15:39
@Saladin if it is hashed, how does the recipient know what peers it can dial out to?
@Saladin IP-port combinations are never hashed in DHT.
I think I wrote an answer regarding DHT somewhere here
I quote .."The queried node must verify that the token was previously sent to the same IP address as the querying node. Then the queried node should store the IP address of the querying node and the supplied port number under the infohash in its store of peer contact information"
@Saladin Yeah, where's the problem?
i think it works same as chap, protocol and the info_hash contains much of the juicy information I want
@Saladin No no no! Infohash is unique to the torrent file (that specific swarm).
15:43
@Saladin I can show you the world (8)
Doesn't contain any information you want.
OMGAWD QOTW
@Simon What's that?
@adnan then whatever i find is included in the pastebin
and none of it them is readable the seeds ip addresses and ports? can you decode it for me
@Adnan Question of the weak (See what I did there?)
15:46
@adnan kindly read again about info_has .."Then the queried node should store the IP address of the querying node and the supplied port number under the infohash"
@Saladin I can't.
so it has port and IP address this is what I want
@Saladin Dude, if I know two things in IT they'd be Tor and BitTorrent.
You're wrong, I'm right.
@Adnan okay :)
@Saladin Also, I can't decode, doesn't mean I don't want to. I find it interesting, it's just that with a quick look at that pastebin you can clearly see it's truncated in different places.
So that's not the raw dump
Give me the raw dump, and I might be able to help you
15:49
Raw I'ma give it to ya
@Adnan raw well its pretty raw if you can see the interface (web-ui) I have for it; as i said its flow so it always be truncated its doesn't work like wireshark does.
@adnan but if you ask me particular payload i want you can dig it out for u?
@Saladin Well, then the information you're after is lost somewhere because of the truncation.
@Adnan how do you know? if you don't know where to look for
@Adnan as per the article or DHT reference every function they talked about I have it with me in form of flow information, but decoding is where I'm stuck
@Saladin sigh forgive my honesty, but you're obviously outside of your knowledge area. I'm not trying to insult you in anyway, but a bit of reading on the subject doesn't hurt.
The payload messages are bencoded
Example: porti21095e
@Adnan LOL i already mentioned about it in this chat
read above lol i guess you are a poor reader @Adnan
01:00 - 16:0016:00 - 00:00

« first day (985 days earlier)      last day (4193 days later) »