« first day (1001 days earlier)      last day (4177 days later) » 
01:00 - 23:0023:00 - 00:00

01:15
@RoryAlsop The last keynote I heard mentioned Buffy in every slide. Something for you to consider. :P
 
2 hours later…
02:48
@AviD Great song.
@AviD I hear Rook is pretty epic for keynotes.
wut
03:04
Sweet, bronze badge for
 
2 hours later…
05:07
A wild @Adnan appears!
So, last night I walked into a bar in Germany and asked for good Belgian beer.
@Adnan Is this gonna be one of those lame bar jokes?
Yeeah... they don't really when that happens.
@Terry maaan.. here's a joke told to me on the bus by a German guy
The long-distance bus stopped for 10 minutes to fill up on gas. I went to quickly eat sonething at the station. When I came back, the guy next to me said
"is this your jacket?"
I said yes
He started laughing
Then he said "Didn't you like the joke?"
Maaan... those people are weird
05:26
@Adnan Damned Germans...
 
1 hour later…
06:52
@Adnan mmmm leffe blonde
@RoryMcCune you should try trippel karmeliet or gouden carolus, like leffe blond but tastier ^^
@LucasKauffman sounds nice. unfort, we only get a limited range of belgian beers in bars (if we get 'em at all) so needs must :)
Why is there such a misunderstanding of risk?
@RoryAlsop nice!
07:30
@ScottPack I am not sure that you are joking.
07:44
@AviD He probably isn't. That jerk.
@this.j Not everybody played it when they were young
@RoryM looks I won't be having any blondes here.
08:12
#14 in all time rep! Woo! @tylerl is up next! :P
@TerryChia jealous of you kids with enough free time to actually earn rep.
Or those retired folks.
Me, I don't have enough free time to both sleep and shit. I have to choose one.
I'm considering combining the two... my baby does it...
@AviD Why? Never heard of multitasking?
inb4 ;-)
@AviD You could always borrow some adult diapers from @RoryAlsop.
He probably has some considering his age.
@TerryChia yeah. Or regular ones from you, you still using?
08:21
@AviD Nope, you might wanna try asking @Simon though.
@TerryChia is he really younger than you??!?
@AviD Considering he broke up with his girlfriend with whom he has been sharing an apartment with four days ago... probably not.
He's Canadian though, so you never know.
@TerryChia for all you know, that was a kindergarten game.
08:36
BLAH!!!!
I wrote a longass answer but the dude deleted the question before I could post it.
08:47
Blah?
ahhh
undelete it...
isnt that a 10k privilege?
@RoryAlsop Nah, it isn't a particularly good question. :P
@RoryAlsop Yup, it is.
 
2 hours later…
10:34
Had another "fixed grammer" suggested edit just now LOL
g'day all
11:09
G'day
11:22
G'Day
The fingerprint tech in the iPhone 5S has been cracked. macplus.net/…
:P
11:59
@TerryChia nooooooo. Reeeeeeheeeellyyyy?
That is just completely surprising.
@AviD Did you click the link? :P I can't tell if you are being sarcastic.
I am being cynical.
@AviD =D
"Don't post anything you wouldn't want attributed to you in a court of law, quoted on the front page of the Times, or read by your mother."
Oh dear.... I think every single one of us here is in violation of this.
12:15
@RoryAlsop 10k privilege is vote to undelete; that's not the same thing. You still have to convince four other 10k+, or a mod.
@ThomasPornin two other
@TerryChia Not me. Everything I have written in any public area, I have always written it under the assumption that I could be held responsible for it, in particular by my mother.
It is just that I am quite confident in my ability to assume a lot of things.
@ThomasPornin Heh.
Hmm, is vote to undelete a 10k privilege? It appears to be a 20k one according to the /help/privilege page.
Ah it is, nvm.
10k is delete/undelete questions. 20k is for answers.
My main worry is quoting out of context.
and of course if you have enough data, finding something incriminatory in it becomes pretty likely. Even if it's just used as evidence for your bad character.
12:31
@TerryChia haha, of all 3?
@AviD My age is written in my profile so all these mysteries can be solved quite easily.
@Simon you ain't all that interesting.
I know you went on it anyway.
@Simon TWSS
I knew that deployment script test went too simply. Bah.
12:43
@ScottPack Gah.
Probably missing some XML files.
It doesn't help when a new major version is released after I develop my script and they renamed the product, ASP pools, etc.
@TerryChia I really wonder where you met her, she's a weird one.
But not diretory paths or xml field names.
@Simon I was a theatre major for a while. That's where I met her.
@Simon At a wedding. She was the bass player.
@ScottPack Is today the day where I get a picture?
12:45
@Simon of which?
@TerryChia She's not even pretty.
@ScottPack The mother of the villain.
@Simon She has a hawt daughter though.
Oh. We met at a coffee shop. She was the assistant manager or some such.
It's not exactly hard to find them. Like I said. Try Harder. :)
@ScottPack I'm asking for a picture, I don't wanna know if you kissed her on the first date or not.
@Simon He probably told her "I love you" on the first date.
12:47
@ScottPack Blargh, it might involve me having to log into twitter.
"She was the assistant manager or some such"
He doesn't even know, lololol.
@Simon Probably not.
FB? Your profile is probably private.
They had a branch that she did manage. She also wrote all of the training materials for the main store. I'm not sure what her role at the main store was.
It's hard to tell with FB what your privacy settings actually are.
@ScottPack I thought it was very simple: everybody can see everything.
The only question being whether a specific disclosure was intentional (from FB designers) or a result of mere incompetence.
Nah, it is possible to make the whole thing private. That's another story if a vulnerability allows you to see everything.
@ScottPack Is she managing your heart now?
I'm such a poet.
12:54
Hummmm. This coupled with humblebundle sales can be awesome. arstechnica.com/gaming/2013/09/…
@Simon No.
@TerryChia Terry is not too pretty
He has the ears of an elf
Too bad that he's deaf
If only, if only.
I'm a fucking poet dude, don't try to persuade me that I'm not.
@Simon Just nope.
It's ok, I'd be jealous of my skills too.
Slow day, so let's start a debate. What about renaming the site from "IT Security" to "Information Security" ?
There was a kind of consensus that "IT Security" was a bad name.
@ThomasPornin Yes, on the condition that the lion is replaced with a bear.
13:04
There has also been a specific question about "Information Security" vs "Security": three answers, the +15 and +8 for "Information Security", and +1 for "Security".
Just in time to celebrate your 100k as well.
I mean, that's what I call a consensus. More would be "unanimity". Can we proceed, then ?
@AviD ^^^ Stop slacking and do your job.
@TerryChia I wholeheartedly agree with this proposal as well.
@TerryChia slacking?? job?? which one?? I am juggling 3 right now.
13:06
@ThomasPornin I don't have strong feelings. I'm ok with "IT Security" or "Information Security" or "Security." If you twisted my arm, I probably like "Information Security" slightly better than the others.
@AviD Those two down there aren't really considered "jobs". ;)
hehe
@Xander It just sounds better imo, even if you ignore all the other arguments in favor of it.
Simply "Security" is very vague. IT stands for "Information Technology" so it's not a bad term to describe the section at all. However, "Information Security" is cleaner.
@TerryChia That's fair.
13:09
Information Assurance? The next moment you change the name to this, abbreviation to "IAss" or "InfoAss" or "InAss" will be making you regret your decision. Strongly. — Deer Hunter Sep 1 at 7:42
All in favor of Information Assurance?
@ThomasPornin That's certainly the design goal but they don't necessarily meet those at each phase gate.
@TerryChia Sure, let's show SEx.SE how uncool they are.
@Simon Yeah. I like the breadth of "Security" but I don't know that I'd like it so much once we start getting questions about security guards, personal protection, and fencing materials.
@Xander Exactly.
If anything ITSec is better than just Security, but the T is more pigeonholed than I think most of us want to be.
13:11
@Xander Déjà vu anyone? It's like we had this conversation in The DMZ a week or two ago.
Is losing the term "technology" in "Information Security" a concern though?
@TerryChia Yeah, but I didn't participate, so we need to have it again so I can feel included.
@TerryChia I don't like that one. It sounds so hipster. "Oh shit! Everyone's starting to understand what Information Security means! Better change the name."
@ScottPack Buttbuttbutt..... InfoAss.SE! Cmon!
2
@TerryChia Of course we already had this discussion. It worked very well (for generating chat activity, at least) so I am just using it again.
2
13:12
@TerryChia That's about as firmly packed an innuendo as I've ever seen.
We can always discuss the various possibilities of "why did the chicken cross the road?" if you don't wanna talk about it again, @TerryChia
I'm feeling offended I'm not getting any stars.
Where is @LucasKauffman and @Adnan when you need them?
@Adnan is busy with his cactus, no idea about @LucasKauffman
@Simon They are probably Skyping with each other.
Llamas
13:14
@TerryChia You can use Skype as a verb ?
I prefer camels over llamas.
Blimmey.
@ThomasPornin We can Skype and discuss it.
@ThomasPornin I have seen it used often enough.
Did I just hear a Frenchmen use English swear?
13:15
@ScottPack No, it's chat. You read it, not heard it.
A Frenchm e n.
THIS SCRIPT IS STUPID.
Unless you have a fancy text-to-speach system
@Simon Thomas counts as multiple.
I do use a Mac.
@ScottPack Oh, my apologies.
and use it on the DMZ, which would be perverse
13:16
Or hilarious.
I blame everyone for killing the chat.
I'm working.
Me too.
Anyone planning on getting the 5S?
I'm tempted but my i4 is still going strong and upgrading will mean losing my 12GB data plan... :(
I just got an S3.
13:22
12 GB plan. On a phone. What the fuck?
@Simon It's a legacy 3G plan.
Upgrading will mean dropping to a 2GB LTE plan...
And how much do you use of it per month?
@Simon Quite a lot actually. I tether all the time.
At least 3-4GB a month. I'll have to cut back if I upgrade.
I can understand that. Now that I'm on LTE it's allegedly faster than my cable interwebs.
Personally I use my phone mostly for tethering (and occasionally, you know, phoning) and I keep under 1 GB a month.
Yeah, really: all my security.SE activity still fits in 1 GB per month !
13:26
> I'm writing a simple HTTP server in Lua
0
Q: How to protect Windows applications against path traversal?

d33tahI'm writing a simple HTTP server in Lua and while I can easily find resources on how to secure against Unix directory traversal, I already found some caveats in the Windows version. While I'm already looking for C:\ at the beginning (C being "any letter" here), ../ and /.. (with backslash as the ...

What......
Editing the form of a PDF is a pain in the ass.
@ThomasPornin Ah, I use it for more heavy activities like video streaming etc.
My school's network craps out on a regular basis so I tend to tether a lot.
FWIW (althought I know I'm somewhat late to the party) I think Information Security would be a good idea (tm)
@RoryMcCune This is at least the 4th time we've had the conversation, and that's always the consensus.
Bear #2 is about to pass @Poly for the third spot in all time rep. Now that you've had that important bit of news, you may continue about your business.
@ScottPack The real question is, how many times will we be able to have this conversation, come to the same conclusion, yet not do anything about it? My vote is for at least a dozen more times.
13:40
At least.
@ScottPack what would be the best way to push things forward then ? sounds like a mod job :) oy @RoryAlsop @AviD @jeffferland @hendrikbrummermann
The real question, in my opinion, is whether it's worth changing.
@Rory @Rory @Rory
of course having said that phrase I now have youtube.com/watch?v=8UGtlUMMkOU on
@TerryChia @TerryChia @TerryChia @TerryChia what?
@RoryMcCune @Rory?
13:41
@ScottPack I think it's at least worth discussing a few more times.
@Xander Agreed. If nothing else to annoy @Gilles, who absolutely loves talking about it.
@Gilles What are your thoughts on changing the name from "IT Security?"
@Xander Woah hold on there. That's a little early.
We first have to spend 3 hours discussing the definition of "professional".
:P
@TerryChia That's easy. You need to scan a copy of one of your IT (or Information) Security certificates, a driver's license or passport proving you're of age, and two recent paystubs to verify that you're gainfully employed in the field. Once your creds have been vetted by a mod, you'll be allowed to participate.
@Xander I guess I'll have to delete my account then. :(
13:48
@Xander Don't forget the have the copies notarized and the monthly renewals.
@TerryChia C'mon now. You're in security. Surely you can figure out how to forge some measly credentials.
@ScottPack Good point.
@Xander Too troublesome. I'll just threaten to DD0S!11111! the site if they don't let me in!
@TerryChia It is not charitable to mock absent people. I concur, though, that it is a lot safer.
@ThomasPornin Hehe.
@Gilles You know I'm kidding of course. :)
@ThomasPornin Can also be much more fun.
13:54
Professional adjective 1) Jumping reluctantly though other people's hoops, doing what they want you to do rather than what you want to do in order to pay the mortgage every month. 2) The think you're paid to do, whether your actually qualified or not. 3) The more expensive version of something. See also: Personal and Enterprise
3
@Xander s/think/thing
@TerryChia Yup, that.
Too late to fix now.
14:10
And s/your/you're
14:27
Also. Bards are awesome.
@Thomas?
@TerryChia Swimming pools are not a good idea in Québec. Many people have a swimming pool, but it is a lot of maintenance work, and they cannot use it more than about one or two months per year.
@ThomasPornin Oh c'mon, a bunch of people own one anyway. It's still pretty nice.
Put a roof on it and a heater.
14:49
@ScottPack Now that could become expensive during the winter -- unless you have one of these nifty "Fukushima-style" swimming pools, of course.
(The blue glow from Cerenkov effect is nice, too)
@ThomasPornin At least it's always warm.
@ThomasPornin I hope you're not busy on Sunday because I'm coming to your place to hang out.
I'm thinking that we could conduct black hat activities, such as driving around your city and crack WEP encryptions.
It would be so challenging and fun!
15:05
@Simon What's challenging in driving ? The round thing in the middle is the steering wheel; the rest is easy.
You'll know it when you are old enough to learn how to drive.
Fuck, I hate it when I can't tell if someone is being serious.
Especially on the Internet, kind of hard to tell.
But yeah, it's hard to be 13.
Hehe
15:26
need what who @TerryChia
15:54
nice example of the complexities of web app. security issues.. vagosec.org/2013/09/wordpress-php-object-injection
16:20
@RoryMcCune I bet many people use .net's BinaryFormatter on untrusted data as well
@CodesInChaos yeah deserialization of untrusted data seems to be a big theme in web vulns at the moment what with all rails problems in that regard as well...
16:41
@ScottPack Oookay, is "llamas" the new "boobies" or something?
17:21
@RoryMcCune that site sounds like something you should see your OB/GYN about....
@AviD heh
17:37
SIGH
0
Q: Google Chrome is keylogger?

LionHi i am a little bit worried that Google Chrome is logging my keystroke. One time ago i had situation with chrome that when i clicked some where in input box he was writting key by key(even backspace) what i wrote, and searched in google(in past few days). I use Kaspersky Pure 3.0. So i think th...

17:52
@RoryMcCune Interesting. I wonder which plugin exposed the vulnerability? This is one reason I use as few plugins as possible on my WP sites.
@Xander yeah shame he won't say, although I can understand the rationale of keeping quiet. WP plugins are a nasty nasty source of problems, and seem much less updated than the core version..
@RoryMcCune Yup, definitely. Updated less frequently, scrutinized less, and often built by less competent developers.
 
1 hour later…
19:21
@ScottPack You're changing your avatar? :)
@JeffFerland Cat but?
@ThomasPornin How's the editing spree going?
@Simon Gone through about 160 answers, out of my 1500+. This ought to be sufficient for today.
What are you doing?
Some retagging to optimize my answers-per-tag counts.
Current targets being and
I have 131 and 133 responses for each, respectively, so they become in feasible range of the corresponding gold badges.
First some retagging, then unearthing old questions to add some extra answers.
19:29
Seems like cheating.
I thought the same. Pretty edgy on the line.
@ScottPack But if it improves the quality of the information and meta-data on the site, is it really? Is that not the intended goal of the gamification aspect?
@Xander I never said I didn't approve.
@ScottPack so you approve of cheating?
I never said it was cheating, only that it seems like it.
It's clearly not cheating.
19:41
@AviD He never said he did approve.
@ScottPack It is an intended loophole?
@Xander does it matter? Most of them are vulnerable.
@AviD I knew it'd be back one day.
@AviD It's part of the gamification.
@RoryMcCune did you see Checkmarx's review on WP plugins?
@ScottPack exactly.
It's part of your mom's gamification.
19:43
@ScottPack nice.
I need to figure out the algorithm of all possibilities of permutation of letters in a word.
@RoryMcCune they took the most popular plugins (I think the top 50, or somthing like that), and ran the scanner (after tuning) and reported the results. very interesting, really, and not completely as trivial as you might expect.
Do your own homework.
2
the results, I mean.
@Simon homework or interview?
It was a question posted like 2 days ago to generate some sort of dictionary attack by using a custom word.
@AviD Personal project I feel like doing.
19:45
@Simon are you talking about your mom, again?
Like turn stackoverflow into st4ck0v3rfl0w
But do the permutation for every single letter and every single possibilities.
@Simon or do your mom for every single possibility.
@AviD yeah I think I saw the press releases, interesting stuff. would like to spend more time looking at checkmarx, but it's the usual chicken/egg of getting a project that will justify the license cost :)
@AviD I don't know what your country thinks about incest but here it's immoral and illegal.
@RoryMcCune oh sure. I actually picked up a license for my own lab recently, and still only had time to play with it a little bit.
(gratis, of course - I aint got ~60k to drop on that!)
19:47
@ScottPack Are you being a copy cat right now?
@AviD I was going to say I had no idea how rich you were :op
@Simon Como?
they recently did another project on other opensource CMSs, like Joomla - they will likely be presenting the results at my conference...
@Simon And yet in your country they think Molson is beer and mullets are cool.
Hey. It was a good idea!
19:49
@ScottPack Molson is awesome.
You're adorable.
I did have a really yummy beer last night
@ScottPack What was it?
@Xander a yummy beer! he just said...
Pulling up my untapped so I can get it
Time to hang out with all the fellow drivers who are stuck on their way home.
@ScottPack Ah! Nice! Oskar Blues is a great brewery. I need to try Old Chub again, now that I've developed a better appreciation for maltier brews.
@AviD you livestreaming/recording vids?
@RoryMcCune doubt it. And even if we did, almost all the talks will be in Hebrew... ;-)
@AviD that would make it a bit tricky.. shame would be interested to hear about the CMS stuff.
I'm sure they will be releasing a paper. Also if they have a slidedeck, I can share that with you, its usually in English.
19:56
@Xander Great smooth flavor, awesome finish. Just a hint of scotchiness on the finish.
Also once we finalize the agenda next week, I'll post it here, if anybody is interested in a specific session I can try to take notes and share them....
@AviD coolio :)
@Xander I'm not big on carbonated beers, and this one was fizzier than I like. So the first probably quarter glass had an awfully strong spikiness right at first.
@Xander This was at an "Irish Pub" nearby. The building itself is really stinking cool, but it's more a burger and beer place. About the only things on tap worth drinking are Guiness (not stout) and Stella. Their bottle/can selection is freaking huge.
@Xander Far too many IPAs for my book, though.
@ScottPack Nice! I love IPAs, but they're definitely over-done. Too trendy right now.
@Xander I barely like the hoppines of pale ales, let alone IPAs.
20:05
@ScottPack Hoppiness is my bread and butter.
@Xander yeah? That's funny, bread and butter is my bread and butter.
mmmmm
@Xander I've found that I really prefer dark heavy beers. Basically, if it has the word "stout" or "porter" or emanates it's own shadow then I'll probably like it.
I didn't really think about it until I realized that Guiness was a nice refreshing summer beer.
@ScottPack dark and heavy. just like your mom.
@ScottPack You like 'em dark & heavy like Sir Mix-A-Lot, eh?
actually thats usually the kind of beer I prefer too.
though sometimes I will go for a light and fluffy, like e.g. boddingtons.
20:09
I really wanted to get the Old Rasputin the other day but I couldn't stomach spending $12 on a 4pack at a grocery store.
Boddingtons is really nice too. I like it with Mexican food.
hmm, I could see that, the lightness is a good counterbalance to the spicey.
So I went out to the shed to get some stuff out. I open the door - and a tiny, eeny weeny baby kitten kinda crawls out.
seems a cat climbed in through a tiny ventilation window, and gave birth to a few kittens inside.
and I reiterate, ONE kitten crawled out.
@AviD Is momma still around?
yukkk.
@Iszi hard to tell, the neighbor keeps quite a few wild cats hanging around. no idea which is the mother, but we havent been attacked yet.
Ack. Well, good luck with that kitten. Keeping them alive that young, when they've been abandoned, is really tricky.
@Iszi haven't even decided I WANT to!
'course I dont want it to die, but yknow.... ick.
20:14
Awwww, just look at that cyewt widdle faycceee.
@Iszi it could barely walk. wife tried giving it milk, it didnt know what to do with it. Not sure it's ever eaten.
also not sure its really abandoned, it was locked in, the mother may have forgotten where she left them.
you know what its like with a newborn.... ;-)
Yeah, newborn kitties are really high-risk without their mother. If you do try to take care of it, don't be surprised if it still doesn't make it even despite best efforts.
@Iszi yeah, already told the wife that.
we hear the mewling from our bedroom. so it will be bugging us all night...
until it stops, and that will bother us even more.
@ScottPack You must spend the money. Old Rasputin is absolutely worth it, at least once.
@Xander This was at Whole Foods, so I'm going to see if I can get it anyplace else at a less puckering price. I do really want to try it.
@Xander I also found another place near the house that looks to have a good beer menu. Hmm..
20:51
@ScottPack Of course it looks like cheating: it involves efforts.
Cheating is doing things that other people cannot do...
@ThomasPornin or won't do.
Aww. SE shot down my idea for an OWASP talk.
Sep 1 at 15:29, by AviD
> Spam, Arabic, Death Threats and Other Attacks on Social Networks
21:06
@ScottPack Nice. I found a great place when I was in Dayton. Ohio seems to have a good beer culture.
There is a surprising number of breweries.
@AviD How did they shoot it down?
@Xander shotgun.
@AviD Birdshot or buck? Or slug?
Banana slug
21:09
@ScottPack Very cool.
revealing privileged information, showing the weaknesses, etc
not final, but I dont think I really have ground to make my case. Ideas?
@ScottPack banana hammock?
@AviD Yes, but, honestly, there is no rule against applying proper tags on questions, so if they won't do it for moral reasons, then it is by their own doing.
@ThomasPornin oh I agree, dont get me wrong. I've done it too...
In any case, the SE people rather encourage people to edit questions so that they have proper tags.
It's simple really, if I bother giving a question enough attention to actually answer it, it is likely that I cleaned the question up a bit too. Tags are the easiest to fix, and most often misused.
21:19
:11203806
Reminder: don't press Enter until you really want to.
Anyway, time to go home.
You know what's annoying?
@tylerl your face?
@tylerl the fact that you can't reply to your own messages
It feels good to back to "your face", I feel like we've been on your mom too much lately.
or CAN you?
21:25
@AviD I can. @tylerl
just no direct UI....
greasemonkey time
there is a SE app to make it easy, but in general you just need to grab the message id....
@AviD Se app?
stackapp, sorry
@tylerl The existing SE Chat Modifications app allows it.
32
Q: SE Chat Modifications -- Keyboard navigation and commands for chat

Tim Stone Screenshot Use /command shortcuts to perform common chat tasks: See message history inline: Easily preview replied-to messages: And much, much more... About Legends tell of a prolific Meta Stack Overflow chatter who despised using their mouse above all things. In an effort to keep t...

22:32
Gotta love being able to answer a question with a "highly relevant" XKCD comic :)
Any of you here that didn't fall asleep already and forgot to turn off the lights? :P
here's an idea - the background of the chat should be dynamic by its activity, like e.g. only a single douche like me talking with himself = black, some tiny lamp turned on at the corner :))
hehe you are not alone
01:00 - 23:0023:00 - 00:00

« first day (1001 days earlier)      last day (4177 days later) »