The DMZ

Rory Alsop

00:15

@kalina ok - linky?

kalina

@RoryAlsop say what

@RoryAlsop eugh, it's after midnight now

Rory Alsop

@kalina ahhh - sorry. Only just got back to my desktop

kalina

happens

I haven't played Elite for ages

I might actually do that

Noordung

so I went to find something of yours to upvote all for naught?

Rory Alsop

@kalina I may not bother until my joystick arrives - the whole interface is annoyingly obstructive

kalina

00:19

hmm it's not, it's just... peculiar

there are a lot of controls to remember

and they did that whole thing with the interactive UI in the ship

that takes some getting used to

Noordung

next time just post a link so it one-boxes it here and comment with "shameless self-plug", or "titties" ... upvotes will just happen then

David Freitag

@Noordung no no no, it's boobies, get it right.

Rory Alsop

@kalina yeah - followed your answer, and the comments on it (over on Arqade) and still no joy

kalina

what are you trying to do?

Rory Alsop

pressing 1 gets me to the left pane, but nothing gets me into it

get docking permission

3

3 hours ago, by Rоry McCune

3

Q: How do I request permission to dock my ship?

The latest update has added the ability to dock with a starport in Zelada, however, I can't seem to work out how exactly I'm supposed to dock. Approaching the station results in a warning that I do not have permission to land and I'm seeing no option in the controls that will allow me to communic...

elite-dangerous

David Freitag

00:23

@RoryAlsop Giggity.

Rory Alsop

@DavidFreitag hahahahahahahahaha

kalina

@RoryAlsop what do you have set up under "Interface Mode" in control options?

Noordung

@DavidFreitag hehe you're in a good mood today :)

Rory Alsop

@kalina whatever the defaults are - can't remember now.

David Freitag

@Noordung yep :]

kalina

00:25

@RoryAlsop well those will need to be the controls to use

Rory Alsop

@kalina it doesn't have anything in any of the keyboard options for this. I went through every single bloody key

so - gin consumed, bed is calling, not going to worry about Elite until joystick is here. Sometime after Christmas apparently. Amazon have failed on all their expected delivery dates

David Freitag

@RoryAlsop yeah they nearly got me a zero on my physics final project.

Rory Alsop

@DavidFreitag ?

David Freitag

@RoryAlsop we made a large coil gun and i bought nearly all of the stuff we needed including the magnet wire from amazon

I got all the parts the night before the project was due

Rory Alsop

yeeeek

David Freitag

00:30

got a 100% on it though :D

Also stress headaches.

kalina

01:33

why is it so late already

Simon

02:49

And why did the damn chicken cross the road?

David Freitag

@Simon Because it was tired of you questioning it

Simon

But I wouldn't have had questioned it if it didn't cross the road!

Noordung

03:08

heh this one is perfect for a Saturday night ...

how many circles?

David Freitag

@Noordung 4

Noordung

do they touch?

David Freitag

@Noordung Nope

Noordung

you clearly didn't drink enough!

David Freitag

Good point. I should ge another

Noordung

03:18

:) cheers!

Terry Chia

Someone please upvote this: security.stackexchange.com/a/48513/10211

David Freitag

@TerryChia upboated

Noordung

@TerryChia what, the one from @LucasKauffman?

Terry Chia

@DavidFreitag \o/

@Noordung Yep, I'm trying to get the gold badge hat.

Noordung

ah

how many upboats you need?

now that Lucas has 10 I mean

Terry Chia

03:23

@Noordung Already done. :)

Noordung

coolio

Terry Chia

I just need double his.

Huh, why is the minimum bounty 100 now?

Noordung

you have too much rep

Terry Chia

Hmm, looks like 100 for older questions. Interesting.

Noordung

OK someone please write 86 low quality posts so I can get a gold badge too :)

Terry Chia

03:27

@Noordung /cc @Simon

Noordung

LOL

or get me 2,303 more views of this one

39

Q: Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (automated teller machine), which reads the magnetic strip as the user unknowingly passes their ca...

credit-card smartcard fraud threats atm

maybe if I reddit it

Terry Chia

@Noordung Just posted it on HN although activity is usually low at this time.

Write a blog post if you want views.

Noordung

@TerryChia if it works you'll get a gold badge for 1k views too

Terry Chia

@Noordung I thought gold was 10k?

Oh, 1k.

Noordung

> Publicist
Shared a link to a question that was visited by 1000 unique IP addresses

yup

actually that could be easily hacked

just run the link through online browser previews

Terry Chia

03:35

@Noordung Heh.

Noordung

or post on Facebook and promise free airline tickets :)

Terry Chia

How the hell do you get the fascinating ma'am hat?

I upvoted a few questions with high upvotes but didn't receive it.

Noordung

@TerryChia I think I got it for upvoting both the question and a self-answer

got one on Arqade

through this one

4

Q: How do I request permission to dock my ship?

The latest update has added the ability to dock with a starport in Zelada, however, I can't seem to work out how exactly I'm supposed to dock. Approaching the station results in a warning that I do not have permission to land and I'm seeing no option in the controls that will allow me to communic...

elite-dangerous

ah no that was just the "fascinating" one without ma'am, sorry

maybe you have to upvote many posts on the same thread?

or in meta?

Terry Chia

@Noordung This one says 10k views: meta.stackexchange.com/a/245397/193649

We'll see.

Yup. I just got it.

Noordung

04:10

Do you need an upvote on a comment for Hairboat?

Terry Chia

@Noordung Nope.

I'm pretty sure Obama's not going to blame North Korea unless the FBI built a GUI interface using Visual Basic to track their IP address.

Tweeted by SwiftOnSecurity on December 19, 2014 at 8:10 PM

5

David Freitag

Yep, minecraft is now using 12.48GB of ram in single player mode.

tylerl

04:25

@DavidFreitag mods?

David Freitag

@tylerl IC2, Railcraft, EE3, NEI, OptiFine, Thaumcraft, and XRay

oh, and JourneyMap

tylerl

@DavidFreitag Nothing stands out as being particularly memory-intensive in that last

'cept maybe OptiFine. That mod's a trainwreck

Just for fun, disable only that one and see what happens.

David Freitag

@tylerl The only thing i can think of is that I'm on an island and optifine makes the water all pretty

tylerl

optifine does a lot of things you wouldn't think it would. Try without it.

David Freitag

@tylerl pretty much the same

11.24 with no OptiFine and 9.48 when I turn my resource pack off

Terry Chia

04:37

@DavidFreitag Maybe tune the Java memory params?

David Freitag

@TerryChia I'm not worried, i have 32GB to use. I just thought it was funny how much ram it was using.

Terry Chia

@DavidFreitag Yeah, the later versions of Minecraft are really poorly optimized.

David Freitag

Oh, yeah, I should say I'm running 1.7.10.

tylerl

@DavidFreitag If it's that high with no mods, then I wonder what's actually going on.

David Freitag

@tylerl If I disable everything, no resource packs, it runs at about 3GB

tylerl

04:46

@DavidFreitag oooh, so you've got 7GB of resource packs?

David Freitag

@tylerl No, just Ozzo

tylerl

So, how bout mods but no resource pack?

David Freitag

12 mins ago, by David Freitag

11.24 with no OptiFine and 9.48 when I turn my resource pack off

tylerl

2 mins ago, by David Freitag

@tylerl If I disable everything, no resource packs, it runs at about 3GB

David Freitag

@tylerl yeah that's vanilla, no mods no resource pack

tylerl

04:49

@DavidFreitag so with mods and without resource packs?

which is that number?

David Freitag

@tylerl 9.48

thats all mods but OptiFine

tylerl

and with resource packs and no mods?

David Freitag

@tylerl 5.56

tylerl

interesting. Java has a reputation for being aggressive about allocating memory it doesn't actually need, which is often cited as a primary justification for Linux's memory overcommit strategy.

And of course it's mark-and-sweep GC, so without memory pressure, things can get out of hand

David Freitag

@tylerl That's what I'm thinking. I set the heap space to 16G, if I decrease it to 8, those numbers halve in value, and it pretty much uses 100% memory at 4

tylerl

04:59

@DavidFreitag You notice how python and .net and ruby and all the other runtimes don't make you specify how much memory you have available?

Java takes a different philosophy

AviD

09:19

@tylerl that is such an optimistic way of putting "memory hog".

Andrew Smith

09:53

Hi

tylerl you need to learn java to say anything about it, and I dont think you are on the level to comment on Java, Python and Ruby

Terry Chia

10:08

Who unbanned the crazy?

Andrew Smith

IMHO I am just objective that it's just projection

David Freitag

@AndrewSmith That's funny, your opinion didn't sound very humble.

Andrew Smith

That's because I am getting ill when listening to people praising Ruby and Python and disgracing Java on the basis of reputation, this is very common among Ruby people in particular

David Freitag

@AndrewSmith Which is also funny because I don't recall anyone bashing java. Or, for that matter, praising .net, ruby, or even python.

Andrew Smith

Maybe you are not in the Ruby circles

Ruby today is a FUD, and basically I would make a wake-up call and look around, nobody ever believes in it any more

Terry Chia

10:25

@DavidFreitag Don't feed the troll.

Andrew Smith

Python popularity, on the other hand, is driven by the fact it's primary taught in U.S. schools, and people keep pushing it and keep failing as Python is language of the previous era

David Freitag

@TerryChia Not even if I feed it rat poison?

@AndrewSmith this all makes so much sense. You should write a blog post about it.

Andrew Smith

Doing simple things is much easier to do in Java than in Python were in Java you have simple objects were you can invoke methods, in Python to do anything you need to go thru hops and jumps

Python is good as calculator, to specifically run number operations

same for Ruby

It's because it's using big numerics by default

and python has numeric libraries

Terry Chia

@AndrewSmith hahahahahahaha!

Andrew Smith

you need to think for yourself instead of relying on social truths which are very often driven by different requirements from day to day job

Terry Chia

10:30

We need some mods in here ASAP. /cc @RoryAlsop, @AviD, @Noordung

Rory Alsop

@TerryChia am here

lemme read the transcript

David Freitag

@TerryChia I got a bag of popcorn, don't call them in just yet!

Terry Chia

@RoryAlsop Nothing that bad so far but I don't want to start the flamefest. :)

Rory Alsop

@DavidFreitag sure - I'll sit back a wee while

Andrew Smith

I'd go with Ruby if there was a good, free editor to work with it, or at least, one more editor than Ruby Mine in particular

Eclipse DLTK is not usable for Ruby as it's for PHP

David Freitag

10:33

@AndrewSmith Define good?

AviD

@TerryChia yeah, was thinking

still ocked on ours, SF unlocked it though. dunno why.

Terry Chia

@AviD Site ban doesn't extend to chat though does it?

AviD

@RoryAlsop @Noordung we'll just keep an active eye out

Adnan

Oh man! Both The Colbert Report and The Late Late Show With Craig Ferguson have ended on the same week.

:(

AviD

@TerryChia not if its enabled on other sites

David Freitag

10:34

@Adnan Wait the Colbert Report is done?

AviD

@DavidFreitag must be the the DPRK consipracy.

Adnan

@DavidFreitag Yup. Last Episode was on the 18th

AviD

hmm. chat suspension is limited to just over 400 days.

Adnan

@AviD Honestly, if I'm suspended from the chat for 100 days, I'd probably never come back after that.

AviD

@Adnan you have a modicum of sensibility.

then again, that's why you would be unlikely to ever get suspended for 100 days.

Rory Alsop

10:38

@AviD yes - I just checked

Terry Chia

@AviD I'll make that my primary campaign agenda for the next mod election. :)

AviD

@RoryAlsop okay, modrace! first unacceptable comment gets flagged, all mods race to longterm suspension! Go!

Adnan

Awww, man. Craig was my favourite Scotsman on TV :(

Rory Alsop

@AviD :-) Damnit - we need a hat for this

AviD

@TerryChia to suspend @Adnan for 100 days?

David Freitag

10:40

@AviD Nukes at the ready?

Rory Alsop

go ask in TL

AviD

@RoryAlsop ha, you wont do anything without a hat, eh?

Terry Chia

@AviD Maybe. :)

Oh, looks like I'm tied with @RoryAlsop for #1 again.

Rory Alsop

@TerryChia on this site. I'm 6th globally :-)

Terry Chia

@RoryAlsop Yeah, I don't play globally. :)

Rory Alsop

10:42

@TerryChia hey - you were on 17 yesterday. Busy Sunday for you then :-)

ah yes - the major award. Good one

Terry Chia

Actually I can get most of the hats here on this site.

Just need to think of a question to ask.

David Freitag

@TerryChia What is the answer to life, everything, and the universe?

Terry Chia

@DavidFreitag *On topic question.

Rоry McCune

@TerryChia free question for you "Is a DevOps approach to Big Data the best way to handle the coming CyberWar with DPRK"?

Terry Chia

@RоryMcCune Heh.

@RоryMcCune I'm sure EY has a whitepaper on that. /cc @LucasKauffman

Rоry McCune

10:48

@TerryChia @LucasKauffman probably had to write it!

Rory Alsop

@TerryChia I should probably answer something with a bounty on it

Terry Chia

@RoryAlsop You should.

Rory Alsop

@TerryChia if you look at my answer rate here (aside from yesterday) it's pretty low. There are too many folks who know much more about each security topic than me, so generally I don't answer that much

Terry Chia

@RoryAlsop Yeah, my answer rate went down to zero before hats made me start answering again.

Rory Alsop

@TerryChia well I guess Major Award is one of those ones that doesn't actually need a good answer. Just one that someone will upvote. Can always delete later... Feels a tad like cheating though :-)

that said:

0

A: What benefits are there for security architecture being a separate discipline to enterprise architecture?

To post a contrary view to AJ's excellent answer: At a large corporation, architecture may end up being the responsibility of multiple teams in different departments, countries, regions etc. in order to be performant for each region, whereas enterprise security is likely to be managed from a glo...

David Freitag

11:04

It wasn't supposed to snow. :[

Rory Alsop

:-)

David Freitag

I had things I was supposed to do today, now I'm stuck in until it's done

S'pose that's what I get for being lazy and sleeping all day yesterday.

Terry Chia

0

Q: How does CVE-2014-9390 affect me?

On 18th December, a vulnerability in git and mecurial was announced. What are the details of the vulnerability? Does it affect me? What should I do?

vulnerability

I feel guilty.

AviD

11:33

@TerryChia you're horrible.

you need to come out with a snazzy name for it first.

oo how about "Source-SAFE"

Terry Chia

@AviD Heh.

Looks like I kicked @RoryAlsop to #2.

AviD

@RoryAlsop my problem with that, as always, "security architecture" means very different things to differnt people.

Rоry McCune

best... hello world... evar wiki.jetbrains.net/intellij/…

2

Terry Chia

@RоryMcCune That's almost as good as enterprise quality fizzbuzz.

AviD

it could be the layout of routers, firewalls, DMZ, VLANs, etc.... it could be the application tiers; it could b the product security requirements, it could be the enterprise architecture that refers to security policy, it could be things like IdM, SIEM, etc etc

@RоryMcCune IS that a parody?

David Freitag

11:36

@RоryMcCune That's.... nuts.

Terry Chia

@AviD No, it's JavaEE.

AviD

or just showing some of the problems with java

@TerryChia well, yes, exactly

Rоry McCune

@AviD ya know I don't know... it's on their wiki so you'd think it'd be legit, but I have trouble believing it could be that obtuse!

AviD

oh yes, it is

Rory Alsop

12:06

@AviD - agreed. Nomenclature is a problem

S/nomenclature/terminology

@TerryChia - damn you

AviD

12:21

nomenclature shmoneclashure

ooo just made an omurice for the first time - came out sooo yummy

anyone ever hear of that?

well Im sure @TerryChia grew up eating that, cuz he's chinese

Terry Chia

@AviD That's racist.

AviD

hehe

Terry Chia

And yes, I had it before. And yes, it's delicious.

AviD

its not really racist, because it is so being so overtly racist that it wraps around to being not racist.

Gilles

@TerryChia it's 100 because you already set a bounty on it and the next bounty has to be for double the amount (capped to 500)

AviD

12:26

@TerryChia I probably did it wrong, but I'll figure it out

Gilles

and the sequence would start at 100 instead of 50 if you'd answered the question

Rоry McCune

@AviD ahh is this the israeli thing about chinese food at Christmas?

AviD

@RоryMcCune hahahaha

no I just finally found a willing victim to try it first

actually think its japanese

Rоry McCune

^ was on reddit today

AviD

@RоryMcCune hehe

Rоry McCune

12:37

@AviD so I just guessed that this was a thing (of course I believe everything I read on the Internet)

AviD

there is a pop culture thing about chinese food being the preferred jewish food

Gilles

in Israel too, not just in the US?

AviD

@Gilles less so, but also

Gilles

never heard of it in France

AviD

it is mostly an American Jewish thing.

like bagels.

Terry Chia

12:40

From the pictures, I don't think the thing they call "chinese food" in the US actually qualifies as "chinese food".

AviD

of course not.

Andrew Smith

14:09

itworld.com/article/2861675/…

Simon

@TerryChia You outdated donut.

Rory Alsop

14:26

@Terry - I guess Naruto is easily doable here. Not sure about 30 minutes

David Freitag

14:37

@TerryChia It's usually the nearest stray cat served up with some pork-fried rice and some fortune cookies.

Noordung

14:57

@AviD it's cuisinistic and we won't allow such behavior here, some might be hungry!

I missed the best bits again, didn't I?

Rоry McCune

15:15

PHP really is an awful language pen-testing.sans.org/blog/pen-testing/2014/12/18/…

Noordung

@RоryMcCune heh that's bad, but the good thing about it is that we need a name for it :)

PHPllisions?

Andrew Smith

that link in PHP examines only small bit of what every programming language has in it

If you'd try any other language you'd in fact find much more similar quirks like this

Noordung

false

Andrew Smith

like you never tried javascript? :-) It's the worst example

Noordung

there is such a thing as strong-typed languages

ah you can't consider JS and PHP languages ... if you do that you run a risk of not being taken seriously

Andrew Smith

15:28

stong typed language doesnt mean that it will be better at conversions, actually it's much worse for most of the time

there are some exceptions from that

Noordung

that's exactly what it means

Andrew Smith

dynamic languages help to prevent overflows, just strongly typed but dynamic languages are somewhat optimal but still slow for day to day use

David Freitag

@Noordung Don't feed the troll :]

Andrew Smith

JS and PHP are both programming languages and therefore if we compare them from programming language design perspective, it's valid thing, I dont understand what's your problem

and JS and PHP are also used for the same thing - server side web development

Noordung

@DavidFreitag noted ... I just wanted to make sure he makes an arse of himself

David Freitag

15:33

@Noordung Heh, I just wanted to save you from yourself :]

Simon

@RоryMcCune and @AviD are having a battle on Twitter, it's lovely.

David Freitag

@Simon Eh?

Rоry McCune

@Simon nah @AviD is just being obtuse as per normal :op

Simon

:p

@avidouglen no didn't miss it, it just wasn't the specific problem that I think @troyhunt was alluding to in this case :)

Tweeted by raesene on December 21, 2014 at 3:30 PM in reply to avidouglen

tylerl

@AndrewSmith hahahaha

David Freitag

15:35

@Simon yeah I just looked

Noordung

@tylerl oh this is gonna be so much fun :)

Simon

Does anyone have any experience with libGDX?

tylerl

The new reCaptcha -- not the behavioral one, but the one where you have to identify all the pictures which contain cats -- that turns out to be on the order of impossible for computers to solve.

Gilles

@tylerl I predict that this will quickly no longer be the case

Simon

^

There are already some people working on PHP scripts to solve them!

tylerl

15:47

@Simon I hear you can solve it by building a GUI interface using Visual Basic.

3

@Gilles Google's got a decent idea how much computing effort it takes:

wired.com/2012/06/google-x-neural-network

Remember how they built the world's largest neural network and trained it on identifying cat videos?

Turns out to be an immensely difficult problem as long as you don't give the attacker a side-channel.

Anyway, many orders of magnitude more difficult than OCR

ManishEarth

16:58

Fuck GoDaddy

they called me up and tried to convince me that the website needs a professional to give it a "professional look" and all

I only wanted the domain

I even said I was a programmer, they're still all "but are you a web developer?"

douchebags

Andrew Smith

17:16

@Mani

ManishEarth

?

Andrew Smith

@ManishEarth do you know maybe some good HTML editor for Linux?

ManishEarth

I just use Sublime of Vim

Brackets is supposed to be good

Andrew Smith

I am just looking for some, I just need html5 bootstrap and make number of loose forms

I am downloading brackets

never tried that one

Recently I have migrated all my projects to eclipse, previously I've been using JetBrains for Ruby, NuSphere for PHP, Jed (it's console) for C

Now in Eclipse I have good enough also Perl, Java and C++ support although Ruby oneis not good, but I don't do Ruby much

I never found anything exiting about JetBrains apparently :) I just don't understand all the excitement about it.

PyDev is also very good for python I found, I was able to take some RHEL7 utils and from them make something useful

Andrew Smith

17:37

ok that's very nice html editor

has even curve editor, css colour etc

Do you know maybe if there's anything better than Nessus

I need to recommend something and do some free scan, Nessus used to work well except port 80 which is different story

Andrew Smith

17:49

I found JetBrains disturbing calling themselves "intelligent ide"

Andrew Smith

19:06

@ManishEarth Brackets is nice, but I managed to get Eclipse doing the same

so that I got working Webkit browser inside eclipse (gtk-webkit) and the css also helps changing colours the same way (via editor), and the HTML support is very nice in Eclipse

So I did split screen and it works very nice

Rоry McCune

grumpy @AviD is grumpy :op

@troyhunt @raesene that part was obvious. But just as bad is that all CAPTCHA is broken anyway. Even without this bug, it wouldn't be good.

Tweeted by avidouglen on December 21, 2014 at 7:10 PM in reply to troyhunt

tylerl

20:46

I've found that even the simplest captcha is effective at stopping spam on low-priority websites. In fact, I frequently just include a (surprisingly easy to circumvent) check to see if javascript is enabled on the browser. Put that in there and spam entries drop from maybe several thousand per day to several thousand days per one.

very manageable

@AviD ^^

Transcript for