The DMZ

heh. Begin list of everything even remotely connected to the field for info tech

SU?

AJ Henderson

since how networks work is the real answer

super user

Ah

Thanks

12:27 AM

US lawmakers have asked Obama to disclose "black budget" details in next year's finances http://vrge.co/1omUMug

Tweeted by verge on February 13, 2014 at 12:20 AM

That sounds, amusingly, just a tad bit racist - doesn't it?

12:45 AM

►

not every mention of any color is automatically racist.

1:39 AM

@TildalWave What about me?

WHAT ABOUT ME?!?

2:29 AM

grr

makin me set up temporary VPNs to cloud hosting servers. Honestly, what good does this serve?

Thomas Pornin

3:35 AM

@Adnan It depends... after all, it is rat poison, not human poison.

@ThomasPornin so it couldn't possibly kill US, right?

4:14 AM

Huh. Quick question for anyone who knows off the top of their head

I just tried to login to amazon and accidentally put my username and password in the username field

I obviously don't want my password stored in plaintext on disk

so does anybody know how to clear it from Firefox in such a way that I keep my bookmarks, history, etc?

4:56 AM

@ThomasPornin Lots of people live significantly longer today because they eat a controlled amount rat poison

5:21 AM

@KnightOfNi Even if you clear it from Firefox, it may remain in Amazon's security logs for an admin to see. Best to just change the password.

6:31 AM

:13750087First thing, change the password. Second, go to Edit/Tools->Preferences->Security->Saved passwords->Search for amazon->Remove.

Thank you, Chat.

@KnightOfNi First thing, change the password. Second, go to Edit/Tools->Preferences->Security->Saved passwords->Search for amazon->Remove.

6:55 AM

Can anyone access openssl.org?

@TerryChia downforeveryoneorjustme.com/openssl.org

@TerryChia Up

@TerryChia Contrary to what DownForEveryoneOrJustMe says, though, it's not just you.

@Iszi Very weird. Ugh, wrong time for it to be down.

@TerryChia Except it's not

6:59 AM

Failed from my phone, running over the home WiFi, and from my laptop which is currently on a work VPN.

Pings fine, but the page won't load.

Odd though, considering Chrome claims DNS error.

Travis CI can't connect to it as well. travis-ci.org/pyca/cryptography/jobs/18784649

Ah, pinging openssl.org works but pinging www. fails.

@TerryChia Whaddya mean wrong time, anyway? It's the middle of the bloody night! I shouldn't even be up right now.

@Iszi It's 3 in the afternoon and I can't build the documentation for the project I'm working on without the damn url resolving. :P

7:04 AM

@TerryChia Working

@Adnan How do we know that's not some photoshop job with Google cache or Archive.org?

@Iszi :|

@TerryChia Need anything I can download for you?

@Adnan I wonder if providing the proper IP would be enough? Then again, for all we know, you could just point us to a malware-infested honeypot.

@Adnan Nah, I'll just wait on the documentation till it's fixed. Thanks. :)

If you need the docs, I can HTTrack them for you.

7:07 AM

@Adnan Nope, no need. It's the tool that I'm using to build it that needs to resolve the url to build the links.

@TerryChia Oho! Can't you intercept the request and give your own response?

@TerryChia If you can trust @Adnan to give you the right IP, just add it to your hosts file temporarily.

@Iszi Ah, true.

@Iszi Oooor, he could use one of the MANY resolvers online.

@Adnan Yeah, but we know the one you're using works.

7:09 AM

nslookup www.openssl.org
Server:		127.0.0.1
Address:	127.0.0.1#53

Non-authoritative answer:
www.openssl.org	canonical name = openssl.net.
Name:	openssl.net
Address: 185.9.166.106

openssl.org resolves but www.openssl.org does not

@tylerl For me it's the exact opposite

Oh wait. Both resolving

nslookup openssl.org
Server:		127.0.0.1
Address:	127.0.0.1#53

Non-authoritative answer:
Name:	openssl.org
Address: 194.97.152.144

Well that's interesting.

@Terry Any of that useful?

www.openssl.org is actually a CNAME for openssl.net ... so WTF?

@Adnan Yep, adding to /etc/hosts did it. Now I just have to remember to remove it later. :P

Also, my DNS settings are 8.8.8.8, 208.67.222.222

7:12 AM

The root resolves for me via Comodo, Google, and whatever my work network uses. WWW. fails on all of the above.

@Adnan Ok, I think everyone knows the first - what's the second?

@Iszi I assume his ISP?

@TerryChia I never use my ISP.

All the way down to tertiary.

This is messed up. openssl.org has 6 DNS servers, but www.openssl.org CNAMEs to openssl.net -- which has 1 DNS server: ns1.openssl.com ... which doesn't respond to queries.

2

@Iszi @Terry OpenDNS

@tylerl Lmao.

They are obviously devs, not sysadmins.

2

7:15 AM

That's some Ops Fail right there.

Actually, looking at the inconsistency of the OpenSSL code base, calling them devs might be a little too much.

Also, and here's the best part: openssl.org 302-redirects to www.openssl.org

so... FAIL.

@tylerl So much fail. OMG.

@Iszi the OpenSSL team never struck me as the brightest crew. The software is functionally reasonably solid, but pretty much EVERYTHING else about the entire operation looks like it's run by an ADD teenager.

@tylerl @TerryChia When I query for openssl.org, my requests go through PRIMARY.LP.SE

When queried directly, it gives the results for openssl.org

7:21 AM

7 mins ago, by tylerl

This is messed up. openssl.org has 6 DNS servers, but www.openssl.org CNAMEs to openssl.net -- which has 1 DNS server: ns1.openssl.com ... which doesn't respond to queries.

@tylerl A bit of digging on Google, it's the nameserver for openssl.org according to this whois. whois.domaintools.com/openssl.org

But but but

@tylerl Wait a tick... That just hit me. They have the ORG, COM, and NET, and if you go straight to the ORG you end up getting run around all three before you finally load the damn page?

@tylerl Oh, dear Jesus. I just got it.

@Adnan you could sail that failboat to the new world.

3

I should get back to work, or I'm never getting to sleep tonight.

7:46 AM

Oh, this should be very interesting...

I have a special space for Tesco in @haveibeenpwned if the dump checks out, but it needs to be verified.

Tweeted by troyhunt on February 13, 2014 at 7:24 AM

For those who haven't seen, or don't remember, Troy has blogged about the issues on Tesco's site before - over a year and a half ago. troyhunt.com/2012/07/lessons-in-website-security-anti.html In an addendum to that blog, it's also mentioned that the same issues were raised to Tesco even earlier than that!

8:00 AM

@Iszi I had a look at the dump, looks like their clubcard loyalty card thing, if I was a betting man I'd say it's legit but only a small portion of the users (~2000)

Rory Alsop

Right - changing my Tesco password now :-)

(was I on the list)

@RоryMcCune Troy just tweeted that he's getting "lots of confirmation" but has yet to find any official acknowledgement or attribution and it looks like just a partial breach.

Interestingly, the passwords seem to more or less match the limitations mentioned on Troy's blog except that they're not all converted to uppercase as he'd expected.

@RoryAlsop The strings "rory" and "alsop" were not found in the dump. pastebin.com/Q9TMDJXZ

8:20 AM

morning

Looks to be about £23,379 in Vouchers available in those accounts at the time of breach.

Anyhoo, I'm off to catch what little sleep remains to be caught.

8:35 AM

@tylerl whhaat. It's a stupid 7 second screener clip.

@RоryMcCune huh. Pretty sure I worked with the vendor of that software. Back in 2010 I was telling them how horribly insecure it was, even took it upon myself to patch some of the flaws in their code.... but there were just too many of them!

@AviD lol

@Iszi yay

@kalina morning

@RоryMcCune is it? IS IT???

@AviD well not if you look outside our door, where it still looks dark 'cause of all the hail

but in the general chronological sense of things, yes

@RоryMcCune heh

fine then. I'm just cranky cuz of back ache. And stupid project and meetings.

I honestly dont know why I let myself get talked into them.

the projects and meetings, not the back ache.

@AviD go on, have a little pain in the small of your back, it'll look good on your CV, and we may put you forward for a really large back pain if this goes well

8:50 AM

@RоryMcCune hahahaha

that... actually sounds like a lot of client pitches I've heard, and just as enticing.

@AviD heh

12:10 PM

@ScottPack oh @Adnan said he learned from the best when trying to cut down on effort, so I assumed he meant you then :)

morning all

@TildalWave Morning, love.

What a fantastic morning! Temperatures dancing around 1C. Snow is melting, creating a slushy mud. The sun doesn't seem to exist in this part of the world.

12:37 PM

@Adnan yeah you're all a bit azimuth challenged there at the polar circle :P

@TildalWave Well, at least we have Northern lights. Hh! Damn Slovenci!

@Adnan That's true, but the Sun prolly stays really low and rises way down South for most of the winter ... still, it's slowly getting better

@Adnan how often do you get to see light pillars?

12:56 PM

@TildalWave Hmm.. I've never seen light pillars. Northern lights, however, we get to see them a few times a year.

@TildalWave Oh, that makes sense then.

@kalina Technically speaking, Ctrl+B would be

Our forecast is set to be sunny and about 1°C today. Should help melt off the foot of snow we have out there.

@ScottPack Sun + 1°C. Sounds nice. I can tolerate the melting snow with that.

1:07 PM

@Adnan It'll be back in the negatives for for the weekend, though.

@ScottPack As long as the molten snow is washed away, it's still acceptable.

I'm really looking forward to running out to a car wash today. It's been below freezing for a few weeks straight now with at least one good snowfall per week this year. My car is more salt colored than paint colored at this point

@Adnan Agreed.

Next week it's supposed to be between 5 and 10, with rain in the early part. That'll either create an unholy mess or clean all this junk out.

1:21 PM

10°C here and mostly sunny

@TildalWave Do you really want us/me to hate you?

Thomas Pornin

@ScottPack You stole our snow !

@ThomasPornin Please! Take it back!

@TildalWave 27 here. AND IT'S NIGHT! Grrrrr.

1:36 PM

Hello

Roar.

Hey

@Adnan you know it's really easy to get here with both our national carriers competing who's gonna be cheaper ;)

@adnan how was the beer?

@TildalWave Hmmm.. let me check.

1:39 PM

I think it's around 200 € but that's prolly the difference between a 6-pack here and in Finland :)

@JohnTheRipper What beer? Are you confusing me with somebody else?

@TildalWave Cheapest return-trip I can find is 350€

@Adnan really? wait, let me check

@Adnan the beer you drink last night

@JohnTheRipper Did we have a beer last night or something?

@Adnan dafuq just happened with our Adria, I try searching and all I get is prices in the 2-3k € range

1:43 PM

@Adnan no but I saw you drink

they must have fallen on their heads at birth or something you can get a private jet to fly you there for that price

we're not at war are we?

@TildalWave Well, 350 is good, but it's still too much for a two-day trip.

@TildalWave Not as far as I know. Are you guys in NATO?

yeah, but last I checked both airlines had tickets at around 200 € +/- 10%

@Adnan yes

was a joke man

I think there's something wrong with Adria's software

@TildalWave Finland isn't. So war it is, then.

I'll check on aggregators

1:45 PM

@JohnTheRipper Dude, what are you talking about?

@Adnan hehe

@Adnan I saw you drink beer and lonkero with a girl wearing glasses

@JohnTheRipper Although it's quite difficult to creep me out, I still don't like shit like this. Do we know each other? Is this sort of a prank? Did we meet last night?

hmmm I think adria might not be flying to Helsinki any more and that is the price for a private jet LOL

@TildalWave Only 2k for a private jet? Sounds like something I'd do.

1:47 PM

I find Turkish Airways for around 350 €

@Adnan what was the girl name? did it started with 'm'?

@Adnan I might have been searching on wrong days of the week, they only have +/- 3 days so that wouldn't include all of them

@JohnTheRipper Dude, what the hell?! You clearly know me, so stop this shit and let me know who you are

@TildalWave Sucks

@Adnan yeah it does, and they had way better system before so who knows why they had to fiddle with it just to screw it all up

Lufthansa has some flights for 300 € but in April

also Finair

@Adnan yes I know you

I also saw you dancing with 'L'

1:56 PM

@Adnan Congrats man. You are the second person in here after @Poly to have a stalker.

I think I should tell

@JohnTheRipper dude easy on personal info here

@TerryChia I'm not sure about this one. It sounds a lot like a prank. I mean, he clearly was in the same bar with me last night.

@TildalWave writing one letter is not personal info

@JohnTheRipper you suggested you might reveal more than that

1:58 PM

@JohnTheRipper Tell whom? I was dancing with my girlfriend.

@JohnTheRipper Puhutko suomea?

@Adnan oon

but let's keep it in english

@RоryMcCune cute where's that from?

@TildalWave pine marten like we get sometimes in our garden.. inquisitive little creatures..

2:01 PM

It's adorable

@JohnTheRipper Voi vittu! Kuka sä oot?

I assume it eats humans?

@RоryMcCune hehe nice, I'm not sure we have any of those here that look like that, I've never seen one. They have different fur colors here

hmmm apparently we do

@TildalWave yeah I think there's different varieties in different parts of europe

they're quite reclusive

I've only seen one that was golden in color tho

2:04 PM

@ScottPack hmm wonder if we could train them up for that...

@RоryMcCune Anything that inquisitive and adorable must feast on man flesh.

@Adnan they allow you to use foul language like this here?

Adnan S

@JohnTheRipper Hooo.. I think you crossed the line here.

@Tildal What the hell?!

@JohnTheRipper Why are you being annoying in here?

@Adnan out of curiousity do you use a proxy here?

2:12 PM

@RоryMcCune I do. Why are you asking?

@Adnan well there's only one finnish IP address in the room at the moment ...

@TerryChia I'm not being annoying. the annoying person is Adnan. he dances with other people girls.

@JohnTheRipper I don't give a flying fuck about who he dances with.

@RоryMcCune Well, I do use a proxy, but it's not outside Finland.

@RоryMcCune Fascinating. I also use a proxy through Finland.

2:13 PM

@Adnan ?? what were you replying to? I've seen one pine marten that was more yellowish ... top fur yellow and the face darker

@ScottPack mm?

@JohnTheRipper Jesus Christ, dude! What are you talking about? I was dancing with my girlfriend.

kinda reverse than the one on the photo

@ScottPack is this a spartacus thing?

It is now.

2:14 PM

@TildalWave I meant if it's okay that this individual is slowly disclosing my personal info.

@Adnan do tell when you tire of it

and no, it isn't

@ScottPack cool must go find a proxy server in finland..

@RоryMcCune Wait, only one Finnish IP? So the other dude is using a proxy.

@RоryMcCune Look in your web logs. You've already found one.

@Adnan no! 'm' is your girlfriend

2:15 PM

@Adnan well that or he/she is on the same network as you (which would be more or less creepy depending on whether you're at work or home...)

@ScottPack true

@RоryMcCune I don't think it's possible he's using the same proxy.

@Adnan then yep, proxying to another country

well or has image blocking on

@RоryMcCune Because the proxy I use actually resides on my home computer

@Adnan well in that case unless this is an american thriller plot, it's the other country thing

@JohnTheRipper look we don't really care if @Adnan was dancing with the pope even, if he wants to tell us he will, if he doesn't he won't, that's his business, so can you please stop with this stalking?

2:17 PM

@JohnTheRipper Dude, they're both my girlfriends. That's it, fuck off!

I'll take that as you had enough of this then

@RоryMcCune Any of the IP's is a Tor or i2p?

@Adnan well so far (and I really need to sort out a way of automating this) there's a proxy in the netherlands and one in germany

@RоryMcCune That would be a pretty boring plot. :P

@TerryChia what someone starts stalking you and it turns out they're in your house on your PC

2:20 PM

@TildalWave His account is 8 months old. I don't get it!

dunno that sounds like pretty classic thriller fare to me!

@RоryMcCune That's because you are a geek. :P

@RоryMcCune I've just checked the camera in my room. Nobody is sitting on my PC

@TerryChia guilty as charged..

@RоryMcCune The proxy is coming from within the house!

2:21 PM

@ScottPack @TerryChia see scott know's what I'm on about..

This guy!

@ScottPack I have a proxy on my home PC so I can tunnel my traffic from work

@Adnan I didn't like where that was going, it was largely irrelevant but also rather obnoxious so he/she/whichever gets to sit in the penalty box for a while, and that's hopefully the end of it

@RоryMcCune Cmon.... the people in this room isn't really representative of your average TV audience.

@TildalWave Good.

2:22 PM

@TildalWave so mod powers work cross-site... cool!

I think I'll change my home PC's passwords.

@RоryMcCune in chat yes

@TildalWave Could you please check his IP and see if it's Tor or l2p? (without revealing the IP to us)

Either he's using some proxy or he's actually connecting to my computer.

OOOoor, he's one of the people who have SSH-tunnel access to my Raspberry Pi at home.

Checking the logs...

@Adnan you need a site mod for that, all I have is chat cross ref available to me and that isn't telling me much (or I dunno how to use it LOL)

Fuck fuck fuck fuck! Somebody from Finland (from the same city as me) has logged in about an hour ago to my Raspberry Pi and used the SSH tunnel

Nothing to indicate any compromise. Seems like a normal legitimate login.

2:28 PM

@Adnan Why would you give people SSH tunnel access to your home network?

@Adnan one of the address is a tor exit node

in germany

@RоryMcCune Well, I guess that makes sense. Thanks, Rory.

np

@Adnan dude be careful with seeing ghosts in the shell :)

@TerryChia Dunno if you've seen, but openssl is back up.

2:29 PM

@Iszi Yep, my build is passing again. Thanks. :)

@TerryChia Mainly people in or visiting China, Iran, and those kinds of places. I have a good connection and I'm helping random strangers

@Adnan I sincerely hope you have that DMZ-ed. :P

@TerryChia Absolutely.

@RоryMcCune ah the image, why didn't I think of that LOL

I also have an excellent connection. I'm not as generous as you though. :P

kiBytes

2:31 PM

Passing by to say hi =)

@TildalWave yeah the inquisitive pine marten seemed appropriate :)

@TerryChia Well, I was once living in a place with extremely tight censorship and I would have wanted for somebody to help me like that.

@RоryMcCune good call :)

@Adnan Doesn't it leave you open to repercussions if someone tunnels through your network and perform questionable activities though?

I see Tor exit nodes and a VPN on OVH

and a possible sockpuppet account

2:35 PM

@TerryChia I have a plausible deniability log template. It adds hacking-like entries to the logs before those login attempts.

One Swedish person taught me to do that. He provides a similar service

Is this really still true? (From openssl.org)

> PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD.

@Iszi I don't know, but I've seen similar notices before

I'm pretty sure the legal section of the putty website has one

@Iszi Oh yeah. 100%

@Iszi The ones I know are Singapore, China and Syria (though not exactly official in Syria).

@Adnan Wait what? Singapore?

@TerryChia Four years ago, when I was applying to study in Singapore, I had a conversation with a dude who told me that he created some software and wanted to sell it to companies. He had to get a permit specifically to use AES and SSL.

Separate from the permit to actually market and sell the application

2:42 PM

@Iszi Pretty much anyone that's on the embargo list or seen as 'potential enemy of the state or commerce' or some shit like that.

@Iszi If we can't sell them nuclear weapons then we can't give them AES either.

@Adnan I'm pretty sure that's bullshit.

@TerryChia Well, fuck. I believed him.

Q: Is it illegal to use encryption?

A: Sometimes. It is perfectly legal to use encryption in most countries of the world. However, there are exceptions. In China, for example, organisations must apply for a permit to use encryption, and any encryption technology on your laptop must be declared as you enter the country. Singapore and Malaysia have laws requiring anyone wishing to use encryption to report their private keys. Similar laws are pending in India. Other exceptions also exist.

@kalina Oho! Also Malasia? Interesting.

@kalina Is there a source for this, please?

@kalina Yes, source please.

If it's true I'm definitely breaking the law every single day. :P

2:45 PM

I just googled it

@Adnan This looks pretty well sourced. cryptolaw.org/cls2.htm#si