@tylerl y u so not knowing the facts? I left her.

@Iszi Hmm, I wonder why that tweet has just so happened to be deleted. ;P

Anyway, for the real reason I came in here: what fun stuff can I do to people who try to "hack" me?

i.e. people who request /phpMyAdmin/scripts/setup.php (doesn't exist anyway, but...)

@hichris123 Nothing in particular. It's always (or very nearly always) an automated script running completely unobserved by the original owner.

But for what you can do, search for "Honeypot"

mornign

mornin

good to start the morning

I started my morning with a song I randomly found on soundcloud xD

soundcloud.com/jordanmaron/…

@RoryM Holy shit! Richard Stallman is coming to AppSecEU?

For realzies?

> Come and join us to celebrate the start of the OWASP AppSec Europe 3014 [sic] conference

:D

morning all

morning

just so you know

I'm having a bad hair day

it all started when I woke up at the wrong end of the bed

@kalina wow, you aren't bored yet?

to the sound of road works

fucking road works

it's a strange combination of dark clouds and sunshine outside

@LucasKauffman I'm not bored yet

I'm barely even awake yet

I'm still too synaptically impaired to have spare brain resources to generate boredom

I need coffee

and... bacon

@kalina and drugs

@kalina mmmm. bacon.

have had my bacon. and am on my second vanilla latte of the day

all is well with the world

interesting stats from our blog. No matter what articles we post, the CIA post always gets double the views.

@kalina I've always imagined you having bad hair day everyday

hair isnt fireproof, therefore, @kalina has to be bald

@Lighty Is that why Sinead O'Connor is bald?

@kalina keeps burning her

@Adnan Wait, what does a free software fanatic have to do with app sec?

@RoryAlsop nice one

@TerryChia nuh thing

@TerryChia MAAAAAN, you weren't there maaaaan, you don't know what happened maaaaan, you weren't there! Back in the 3.11 age. Them microsoft consultants man, we fought them hard with our free software. All the security shit these days, it's the corporations man, we need more free software so we can battle the corporations to get more security

do what you want cuz a pirate is free

@Adnan indeed he'll be there...

@LucasKauffman What about them IBM guys?

@TerryChia more the open part than the security part I guess...

@LucasKauffman @TerryChia whilst I definitely wouldn't agree with Stallman at the Gnu crowd on everything, it's worth pointing out that they did allow for the success of linux and made several pieces of v.important software...

@RоryMcCune Sure the GNU coreutils is excellent. I just really dislike his incredibly extreme views on non-free software.

And I'm a huge fan of free software and opensource in general.

@RоryMcCune I know , but as Terry says his views are too extreme when it comes to everything that is not open source software as he views it

And personally, I generally license the code I write under Apache/BSD/MIT, not GPL.

it depends, most stuff is BSD or MIT and some stuff is non-commerical use only

@LucasKauffman ahem free software.

Stallman dislikes the term "open source".

goddamn hippies

@LucasKauffman s/hippies/neckbeards

@RoryAlsop depends on the neckbeard, I know a few nice ones

@LucasKauffman I would have one...

if I could

with the emphasis on few

my Movember effort has demonstrated just how far off that possibility is

@RoryAlsop there there

@LucasKauffman which is why my stage persona has wigs. Crazy wigs!

:-)

@Adnan no, it's actually quite rare I have such a day... and I'm saving you from me by not being here

yawn Morning.

Or, well, afternoon.

@FEichinger still morning here :-)

so...

morning!

Just name dropping a project I got introduced to at Pycon: github.com/terryyin/lizard

Relatively useful tool for a dev imo.

@RoryAlsop Kill? security.stackexchange.com/questions/61503/…

@TerryChia free flags if you like. I'll kill as way to subjective in a minute or two

@RoryAlsop Close vote is in,

boom

My computer is infected by an anti-virus software. How to get rid of that crap?

time for Ibiza bye now

BYE

nobody cares

silence and tumbleweed

@kalina Have fun~

@CodesInChaos It's impossible. You are forever bound to the AV gods now.

@kalina don't choke on your own vommit!

@RoryAlsop thats pretty awful.

It's 2pm here. No trams or busses running.

Reason: "They're presently leaving the depot."

For reference: We usually have continuous 5min interval service from around 5am through midnight.

Also, have fun @kalina! \o/

@TerryChia s/gods/devils

@CodesInChaos Aren't they two sides of the same coin? ;)

@RoryAlsop vanilla latte? pfft. Bacon Latte. FTW.

amazon.com/gp/product/B008RYVBPE/…

@AviD TBH, that doesn't sound really appealing.

Shush you. Coffee + Bacon == THE WORLD IS COMPLETE.

@AviD ... No.

Bacon has no place in coffee.

Bacon belongs next to coffee.

well, I wouldnt know.

Also, with the single source coffee beans I splurge on, it would be a sin to mix with any flavorings.

@AviD Got 11 pages up on the crypto guide already. :P Filling up pages is pretty simple when cribbing from existing sources.

whoa!

good on ya! link me some time?

but like I said, the bigger question is what are topics that should be included...

@AviD Will do once I get this second chapter finished. Chapter 1 is "Don't roll your own..", Chapter 2 is "Kerchoff's principle"

Chapters 3, 4, and 5 are "Passwords".

@TerryChia Chapter 3 is "Why llamas should dominate the world"

@LucasKauffman The answer...? They shouldn't!

@kalina enjoy! If you see Alex Tronic, say hi from me. That will baffle him :-)

But yeah, I'll involve you guys once/if I get it fleshed out more. No point getting the community involved if I get bored of it and didn't get much done.

dammit @AJ, you just sniped my answer. not quite word for word, but pretty darn close.

and its so rare that I even bother considering writing an answer....

so, basically, crap crap crappy crapcrapcrap. Crap.

@RоryMcCune our usual venue for the regional conference is basically backing out. Not officially, mind you, just only agreeing to impossible dates.

Like September 16...

sooo yeah. we have to scramble now and find an alternative host, free or cheap. Poop.

@AviD Ouch. That sucks.

Where do you usually host your con?

@TerryChia IDC - a tech college here.

@AviD Ahh. Yeah, schools are usually a good idea.

I really like the synergy with them, they have a great infosec program and I'm happy (or was) with being connected to academia.

but - crap.

@TerryChia reaching out to some other uni's here - but weekends dont work well, and its getting preeettty close to summer vacation.

so I'm thinking, I might be screwed.

allo

@Simon I'm sorry.

For everything you're gonna say to me?

really, I've noticed what @Gilles said - I was sorely tempted to kick you when you popped in, just because. Just for funsies.

I really should stop treating you as a kicking bag.

naaaaaah! ;-) kick

You can't be serious.

LULZ

It's like if some serial killer killed over 9000 people and realizes at one point that it's wrong.

@Simon are you saying that you realize that what you do is wrong?

There's nothing wrong with embracing the #yolo.

I still kick for yoloing. That's a rule.

and, I know you can take it in good humour. :-)

^_^

that actually says quite a lot about your character, too.

Nah honestly, I cry every time.

LOL

YOUR TEARS FEED MY EGO

My poor teary eyes

@Simon TWSS

I wrote my first application in Scala

it's kind of neat

Where's The Bear? I gotta let him know that I'll be in his city on Monday night.

@LucasKauffman Yeah, Scala is lovely.

All the power of the JVM and its tooling without the warts of Java.

yea indeed

the functional oriented programming is also quite interesting

@LucasKauffman That reminds me, I really should go learn Haskell. It has been on my todo list for a while.

@TerryChia Have a look if there isn't any coursera course

@LucasKauffman I usually learn languages better by experimenting.

@Simon You are gonna get drunk with all the partying Quebecois ?

@TerryChia yea but the nice thing with a course is that you will immediately start coding functional and not object oriented

@LucasKauffman True. Well, I'll see. I'm neck deep in writing python library code nowadays so I don't have much time for learning new languages.

@ThomasPornin I'm not sure if I'm gonna get drunk but there's an electronic music show on Les Plaines.

So that's a good reason to go.

On a train, drinking Chimay.. Soo good

At work, drinking water.. Soo lame

@Scott - what community ad was in here? It's not coming up for me:

ESTE SITE NAO NOT UNDERSTANDING A SINGLE SHIT INFORMACOES DE IDENTIDADE

@ThatBrazilianGuy yes. that message is all gibberish.

...sorry.

@ThatBrazilianGuy hey come back! we were just hazing...

didnt mean to scare you off.

@AviD Sometimes, I think that we might sound rude.

@Simon "sometimes"?

@Simon "sometimes"? "think"? "sound"?

"might"?

^^

@TerryChia hey, at least he's thinking now.

@AviD Certainly an improvement.

@AviD that leaves "I that we rude"

Let's hope he doesn't regress.

@RoryAlsop that sounds about right.

You're all a bunch of jealous yoloers.

kick

drum

heh

Current stats on migrations from Sec.SE:

71 to SU

30 to SO

12 to Crypto

6 to SF

and a bunch of others

@AviD Simon using the term "I Think" should have been your first clue something was off

we have really good acceptance when we migrate to SU, but 20% of SO migrations are rejected

What about Motor Vehicle Maintenance & Repair?

@RoryAlsop really? didnt look at that.

@Simon we haven't migrated any there. The weirdest is one to math

@AviD 'CAUSE YOU'RE A BAD MOD

@RoryAlsop Haha, nice.

@AviD we have had 66% of migrates to Network Engineering rejected (2 out of 3)

I rarely migrate to SO. most of those flagged as such are like "OMG HE SAID COAD GO TO SO!!!1!!"

@TerryChia and I see I was slow to the punch

that's what I get for responding while I read

our stats on migrates to Sec.SE are also interesting:

18 from Crypto (16% rejected)

11 from SO (36% rejected)

4 from Rev Eng (25% rejected)

4 from SU

and a bunch of others

@RoryAlsop wait wait, we had a much weirder one last year. trying to remember which one...

@RoryAlsop how much of that is just SO being their randomly reject happy selves though

So our SO relationship is the weirdest one

both ways

@AviD can't remember. This is just 90 days

SO really likes to say "not our problem" even if it is

@RoryAlsop really? we rejected stuff from crypto?

looks like it - probably unclear or too broad, I'm guessing

trying to find them now

or too nerdy

or duplicate

security.stackexchange.com/questions/39868/…

@RoryAlsop ah that makes sense.

and this dupe: security.stackexchange.com/questions/25892/…

or deleted by OP: security.stackexchange.com/questions/23544/…

Silly OP

lol

@AviD Now this should be your favorite track, forget about The Veldt:

@Simon apparently I already did forget about the veldt, since I have no idea what you're referring to

It's ok, it's irrelevant now.

@Simon thats strange, I was expecting music. Not sure why.

LULZ

Can't handle the dirty basslines, poor old man.

Oh, I can handle it just fine. I just prefer music, with like, yknow, a melody, some rhythm, an actual beat, not just beatings.

RYTHM?

Skip to 2:10, you wouldn't be able to follow the drums

MELODY?

1:00 has a crazy melody that even you would like I bet.

@AviD - if you are in a stats-y mood, have a look at our most popular blog posts: security.blogoverflow.com/wp-admin/…

@Simon do you ever even listen to yourself?

No, I'm not that dumb.

right - enough of this. It's commute time - weekend, here I come (after getting past the 3 hour queueueueue that is traffic around the Highland Show :-(

@RoryAlsop that does look interesting. why is CIA so popular?

we should do one on the NSA, see if that works ;-)

@RoryAlsop Awwh, I can't see shiny graphs.

You know you've gone to Subway too much when the girl just prepares your sub without asking you anything.

@Simon maybe she could tell because of the way you dress.

or cmon, who'm I kidding - this is canada, they probably only have one kind.

wat

@Simian you're so eloquent today. I'm proud of you.

@CodesInChaos Simians are usually more eloquent than @Simon.

hahah, @Simian. I love this new nickname.

I DON'T GET IT

@Simon So what's new?

Funnily enough, my parents used to say that I was on TV when there was something about monkeys on.

This might be a sign, maybe I should dedicate my life to monkeys.

FUCK THAT SHIT I'M GOING TO THE JUNGLE

@Simon Surely coincidence.

Coincidentally I love that English has the word "coincidence", which is sadly missing from German.

Really? Silly Germans.

@Code That's not missing at all.

"Zufall" is both "random" and "coincidence" in German.

@FEichinger As if a Japanese person would know.

You silly anime.

@FEichinger There is only "zufällig" which includes the meanings of both "random" and "coincidence", which is a huge loss of precision

There's little to no semantic difference between "random" and "coincidence". At least I can't name any off the top of my head.

I see these as quite different concepts

There's "coincide" as a verb, which indeed has no German equivalent.

I can't think of any context where "Zufall" would be ambiguous to cause problems.

The only reason for having two separate terms would be if there was a situation in which the context doesn't clearly imply which of the two you're referring to.

It doesn't cause many problems in every day life, but it muddies the thought process and makes it harder to understand randomness

Get a room you two.

@Codes That may be more of an issue for people who aren't native speakers of German, I suppose.

Funny how the people who seem to dislike me the most in here are Germans (there was @copy too, who's not around anymore, it seems). Remind me to never go to Germany.

@FEichinger No, it's the other way round. It's mental handicap for native speakers of German, because they don't learn to separate those concepts.

@Simon Call me German one more time and I'll make sure @AviD kicks you again.

@Codes I'm not seeing any such problems. The difference is quite clear by context - and that context is far easier to grasp for native speakers.

@FEichinger OH SORRY IF YOUR LOCATION IN YOUR PROFILE STATES GERMANY, YOU DONUT.

And @AviD isn't gonna kick me as long as I don't talk about my motto

@Simon Doesn't mean I'm German. I just happen to live here.

You're a turtle then, is that any better?

And I'm probably changing my name to something more fitting for my heritage soon, too.

One of my greatest programming epiphanies was understanding that the type of a value and the type of a variable/field/parameter are completely different concepts, despite being both called type.

<insert joke about dynamically typed languages here>

@FEichinger Dynamically typed languages still have type. Noob.

(Yes, such as PHP, shut up @Terry.)

Dynamic typing is fine and good. Weak typing is stupid as hell. (Yes @FEichinger, PHP)

That was supposed to be an inb4. Fuck mobile.

@TerryChia IMO both suck

The main problem with static typing is that most statically types languages are badly designed

There we go, we're discussion about PHP again. I'm sure a pack of Simians is actually more interesting.

@Terry Hey now, weak typing is awesome when it works. That's the big problem with PHP, though.

@CodesInChaos Dynamic typing has its place imo. You can do some really cool metaprogramming stuff with dynamic languages like Python or Ruby.

Well, one of the big problems.

And, to be fair, with a stricter syntax for constants, even PHP could fix that.

So, I'm not in the mood for language debate #5346365654 so I'm going to go sleep.

:)

Heh.

@TerryChia Wow, surprising. What's the next step, a social life?

@TerryChia sorry. They are so shiny, too

This twitter thread is hilarious.

Ok, bye.

@RoryAlsop you're really missing out for AppsecEU next week, there's a band!

@AviD lame! venue is definitely the hardest part of setting these things up...

They arrived! :D

@FEichinger what's that?

@FEichinger YOU HAVE A BED?

@RоryMcCune CMYK Playing Cards

@FEichinger Oh, you're making sure to never use it with a woman, I see.

@FEichinger Ah I C, for web design stuff?

@RоryMcCune For instance, yes.

@FEichinger I thought you meant cards against humanity there for a second. That would be much more badass.

Rainbow-coloured CAH cards would be quite nice, too, though.

Not really. You would easily be able to tell what card someone has

That would totally ruin all the fun.

You don't have to colour the back. But you could for instance mark some cards that you'd rather not play with certain audiences discreetly like this.

Or add rules that prohibit playing same-coloured cards.

SO MANY POSSIBILITIES.

@FEichinger that ruins the point of the game

It's Cards Against Humanity. Not Cards Against Those Who Won't get Offended

@FEichinger Also that goes against CAH's freeform hilarity. You start doing that and the game becomes less fun.

@RоryMcCune Who designs their web pages by CMYK color scheme and gets away with it?

@TildalWave Dunno Guv, that's wayyy out of my area :) (thus my quite likely ignorant original remark :) )

@RоryMcCune :-( one of these days geekchickgirl has said she'll get us down for B-Sides

@RoryAlsop Don't be sad, poor man.

@RоryMcCune it would be hugely challenging to pull that off and make it work ... biggest problem is that those are exactly the colors that look awful on crap monitors, and there's only more of those around with smartphones

Not saying it's impossible tho, hack it might even look pretty good on CRTs and proper LCDs

I HATE NETBOOKS!

I hate Lubuntu

I hate Aspire One

@Adnan Why do you hate Lubuntu? What's wrong with a little lube.

@DavidFreitag It took me 25 minutes to connect to a passwordless wifi network

@Adnan er.. uh.... I've never had that issue.

@DavidFreitag Could be this laptop in particular

@Adnan I think so. My Acer Aspire One has arch on it and IIRC getting WPA setup on that was a massive pain in the testicles.

@DavidFreitag Oh, WPA is a whole different story. I really hope I don't encounter those

Usually, iwconfig wlan0 essid WIFI_NETWORK works every time

This time, nooope

Did you try the GUI window?

@DavidFreitag The only way to do it is via this network widget in the taskbar. I click on it, I see the network. I click on the network, nothing happens

I had to use nmcli with some obscure commands (at least to me) to get it to work

@Adnan What version of Lubuntu? 14.04?

@DavidFreitag Yup

I thought they removed nm-applet in 14.04?

Oh oh.. and one more bug with 14.04 and chromium. Sometimes, all of the sudden, keyboard stops working in Chromium

Chromium is totally broken with Lube 14.04

@DavidFreitag They did. The clickity clickity thing is called "network widget panel something"

Use Chrome instead

@DavidFreitag Exactly what I did

WOOHOOOO!! Finally! Finland has joined the modern world!

Now Helsinki has its public transport data on Google Maps

Oh?

You know, I've never actually ever used public transport. Accept maybe an airport monorail or two.

@DavidFreitag I rarely use public transport too. I prefer bikes

But I'm not gonna bike to the airport with my luggage

Well I've also never lived in a major city. That's the main reason.

@DavidFreitag Waait.. is the vocalist really a black dude?

@Adnan Yes

Well, that's unusual

Why?

Umm.. I don't know. I've just never seen a black dude growling

At least not in a metal song

@DavidFreitag I love Killswitch Engage

Just bought the Linkin Park new album + live Hybrid Theory at Download Festival pack!

bit.ly/T9wyIC

nice!

@DavidFreitag That's a good one

Whoa! I've just discovered that there's something called srm for secure remove