« first day (1344 days earlier)      last day (3541 days later) » 
05:00 - 20:0020:00 - 00:00

5:02 AM
@DavidFreitag Neato.
 
@TerryChia Yep. I'm pretty sure the balun needs to be reworked before it actually picks up and signal though. The good news is you can write control software in Python really easily.
 
@DavidFreitag How do you interface with it?
 
@TerryChia libusb
 
How expensive would it be to add 5Ghz? :P
 
I don't know, and I don't think this company makes 5GHz transceivers. Conceivably if a similar chip exists it wouldn't be any more expensive
@TerryChia This is some example firmware using the same chip. github.com/bitcraze/crazyradio-firmware
 
5:12 AM
@DavidFreitag Cool. Looks fairly interesting.
 
@TerryChia I'll have to send you one when I get them working.
 
5:32 AM
@DavidFreitag Oooh, cool!
20
Q: Can my IT department read my Google Hangouts chats while at work?

JackIs Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but it wasn't at work. I use hangouts on my phone as well and just realized I use the hangouts Chrom...

Interesting question, I'd think that Hangouts uses certificate pinning so the company installing root certs think won't work. Can anyone confirm?
If anyone wants to take a poke on Wireshark and write up an answer if it does use certificate pinning I'll +1 it.
 
 
1 hour later…
6:48 AM
Good morning
What a lovely day it is
the sun is shining, I've got a fresh cup of Nespresso
and croissants from the bakery are on the waya
 
@TerryChia hangouts is inherently web-based and uses chrome unless you are careful to use something else. And chrome ships with a hard-coded certificate signature for google.com (among others). So yes.
 
@tylerl Neat. Just what I expected from a soon-to-be Googler. ;)
 
But if you're on a work computer, you have to assume that work has 100% visibility into it. Or you're stupid.
3
@TerryChia i have no Googly knowledge.
Unless you're asking me about the cafeteria.
 
@tylerl Whatever, I just want my Google Glass.
 
ouch
I heard this joke today: "Linux users don't need AV software, just like they don't need condoms"
 
7:00 AM
@LucasKauffman @SwiftOnSecurity?
 
yea
@tylerl What Terry said Google Apps and Glasses!
for research purposes ofc
 
@TerryChia The dongle is based on Nordic Semi's super-crazy-cheap nRF2401+ radio chip. Thing is extremely flexible and is the basis of a whole lot of radio gear, but it's tuned to the 2.4GHz band.
I haven't seen a comperable chip tuned for 5ghz, though. There's lots of 5ghz gear out there at similar prices, but everything I've seen has 802.11 baked-in already. The nordic chip is cool because it allows you to devise your own protocol.
 
@TildalWave interesting :-)
 
@TerryChia Whaaa?! @Tylerl now is doing no evil?
 
@Adnan don't read too much in to it
 
7:08 AM
@tylerl I see.
 
@tylerl In any case, congrats!
 
@Adnan thanks!
 
It's new job season for The DMZ.
But poor @FEichinger is still a PHP developer.
 
@TerryChia you're cruel
@kalina will come and punish you (probably)
 
@TerryChia PHP developer isn't a a job. It's a penance.
2
 
7:12 AM
@RoryAlsop Wut? @kalina will join the mocking.
 
Tell you one thing I like about Google: NO PHP ALLOWED. Company-wide policy.
 
@tylerl I suppose their preferred language in house is Go?
 
@TerryChia You have 4 to choose from: C/C++, Python, Java, Go
That's for core work.
 
@tylerl Nice. All good languages. Well, maybe not C++ or Java, but still better than PHP.
 
Obviously Javascript, HTML, all that stuff is allowed.
Until Ken and Rob created Go, there really wasn't an alternative for serious systems stuff.
Mild irony: Google wrote the engine used by node.js; Google does not use it at all.
 
7:23 AM
@tylerl Sensible. :P
(IMO) Go has much better concurrency patterns than Node anyway, which really defeats the whole point of using Node.
 
The whole point to using Node was based on a fundamental lack of programming knowledge.
C has the EXACT SAME concurrency pattern as node
But in JS you're forced to use callbacks because you can't block the browser's UI thread.
So programmers think that JS invented the damn things.
This sh*t is literally 50 years old.
 
@tylerl What about JS server-side?
 
13 mins ago, by tylerl
Mild irony: Google wrote the engine used by node.js; Google does not use it at all.
 
I've been on holidays for a month, my PGP still hasn't been fixed
I reopened the ticket, if there is a first liner trying to contact me now pointing me to another round of useless manuals, I swear to good I'm going to rape him anally with a cactus.
 
7:39 AM
@TerryChia Ahh.. you people paying attention and what not
@LucasKauffman That's my specialty
 
@LucasKauffman How is PGP desktop these days? I've not used it recently, but @marionmccune was considering buying a copy to avoid Thunderbird/Enigmail (she's not a fan of this open source malarky)
 
8:11 AM
@Adnan Getting that cactus shoved places or doing the shoving?
 
8:47 AM
@RоryMcCune I'm not sure, I haven't configured it yet, but if this takes any longer I'm going to find an alternative. This is almost kafkaian
 
@LucasKauffman ah I didn't realise that the problem you were having was as fundamental as "this doesn't work"!
 
@RоryMcCune I think that's due to Big 4 crap.
 
@RоryMcCune What I want is that they just tick a box in their tool so I can just click sign and encrypt
 
@TerryChia we always just used to install it locally (get temp local admin access) and it worked brilliantly - except the mail client integration
^ this was at Big-4
 
@RoryAlsop yea, if I could do it myself, I'd fix it, but for some reason they are restricting it through GPOs
 
8:55 AM
@LucasKauffman ask for temp local admin :-)
or raise a PO for someone for IT to install it locally
(GPO's --- grrr)
 
@RoryAlsop A lowly consultant doesn't have the same power as a manager like you. ;)
 
@RoryAlsop I have full admin on my laptop, I already raised 3 tickets which get escalated
 
@TerryChia Consultant is not very lowly in EY
 
and then they silently closed it without giving any solution
 
@LucasKauffman Full Admin? See @Terry!
@LucasKauffman oh
next step is shouting
 
8:57 AM
@RoryAlsop I already have once, explaining to a first line support why SSL isn't an alternative for PGP
then the second time, they took an image of my computer
spending 3 days with 2 guys on it trying to resolve it
then it got escalated to the US
and they closed my ticket because I was on holiday
this started at the start of june
 
@LucasKauffman shout... louder
;-)
 
@RoryAlsop I'll start playing partner poker, CC'ing everyone
 
@RoryAlsop I don't think @LucasKauffman wants to be unemployed. ;)
 
@LucasKauffman Start putting time on your timesheet to ITs codes with tagline of "trying to get IT to install software"
2
 
@RоryMcCune I'm actuallly doing that now
 
9:00 AM
@LucasKauffman that might help, alternatively go to the risk people and ask them to sign off on the risk of unsigned/unencrypted mails, because IT can't sort the software
risk people hate signing off risks
 
@RоryMcCune mmmmm excellent idea actually
 
@RоryMcCune Gaming the system is an art in itself eh?
 
@LucasKauffman has a slightly practical tinge, which is that you don't want to get caught out if something isn't to standard, so you want the resp. firmly placed with IT/risk/someone else not you
@TerryChia well ya don't want to be the scapegoat if there's a problem
 
@TerryChia It's the first thing you learn, CYA
Cover Your Ass
 
9:44 AM
@paj28 - this list should be good. Just not a good question for this site. Think this list was the 1st or 2nd result on google: watsonhall.uk/security/organisations.pl
 
"morning"
@RoryAlsop I always thought some of those have a rather worrying name
 
@TildalWave which ones?
 
@RoryAlsop e.g. Child Exploitation and Online Protection Centre (CEOP)
or Police Central e-crime Unit
 
10:01 AM
@TildalWave National working group on fraud
 
hehe also
 
@RoryAlsop - thanks
 
@paj28 The Watson Hall guys do seem to update reasonably often. Glib from the Ukraine ISACA chapter also appears to be collating a global list. I have asked him to publish once complete.
They don't yet have CBEST - but I'd expect it to appear soon
 
@RoryAlsop although I am going to have to have a word with Colin about the Perl website!
 
@RоryMcCune That's like, neckbeard behaviour right there.
 
10:15 AM
@TerryChia and this from a leading light at OWASP too!
 
Also, I do not see anything on the website that requires perl or python or php or ruby or whatever.
 
@RоryMcCune Colin works there?
 
well colin watson (I was presuming you knew him, which may of course be in error :) )
 
@RоryMcCune Why did I not know that?
guessing I've never emailed him directly on a watsonhall address
 
@RoryAlsop actually he rarely mentions his company, I only know from reading blog stuff that the domain name was familiar..
 
11:15 AM
damn macs
is there any way to click "send" on email from the keyboard, without having to resort to the substandard trackpad? /cc @TerryChia
 
@AviD I've seen many complaints about macs, but the trackpad being substandard isn't usually one of them... are you sure you're using it right?
 
@RоryMcCune okay fiine, the trackpad is awesome. but I dont want to be using it, I want keyboard!
also the mouse sucks.
 
@AviD what you really wanted is a surface pro 3 then you need none of these, just the touchscreen!
 
@RоryMcCune :-)
 
Where's Waldo / Wally?
-4
A: How proxy servers sniff data

muzammilWeb filtering is whereby the content of the net or an internet website is filtered to sieve off content that's deemed to be inappropriate for the user. Net filtering takes totally different forms12345Proxy

I'm surprised it wasn't caught by SE anti-spam bot ... new user, single paragraph "answer" on an old question, one link :O
 
11:31 AM
BOOM goes the spamanite.
 
cheers!
 
@AviD Which mail client?
 
@TerryChia Mac
the one that for some reason looks vaguely like an old-timey postage stamp of an eagle.
 
Lemme check in 15 minutes. Inconvenient when commuting.
 
ohhh, "postage stamp", like sending a letter. Oh yes Apple, I see what you did there.
@TerryChia your face is inconvenient.
 
11:35 AM
So's your mom.
 
@TerryChia unlike your mom, who is very convenient.
shame on you for walking into that one.
 
it's again an expert chat I see :)
 
another q. What do y'all use for code stuffs on #ShinyMac?
 
Sublime text.
 
actually more for reading/browsing code than writing it.
 
11:37 AM
@AviD sublime text
 
oh cool, I was just about to download that.
there is a free one, right?
hmm, no mac app for that?
 
I'd be surprised..
 
Just a nag box once in a while. But that's easy to patch out.
 
@AviD actually I forgot you're a hipster now... forget that old sublime stuff you want atom.io
you can tell it's good, it has a .io domain name
 
And brought to you by the good hipsters over at GitHub.
 
11:39 AM
ah, github. I've been hanging out there lately.
right, I'll try them both out
thanks!
 
11:52 AM
user image
2
 
@AviD Does cmd+shift+D work?
 
@TerryChia because of course that is obvious
I will try that next time, thanks
@LucasKauffman luvvit!
@RоryMcCune is that.... is that really a javascript based IDE...??
 
12:13 PM
@AviD More code editor than IDE but yes.
 
@AviD Isn't that ideal for hipster Avid?
 
@LucasKauffman gawd no. Though actually its a pretty nice app.
 
The design is more or less a Sublime Text clone.
 
@TerryChia yeah... I'm noticing that. Sublime even more so.
well, it is a decent replacement for Notepad++, at least.
 
@AviD FWIW you can configure Sublime to be pretty damn IDE-like.
Especially for things like code completion.
 
12:57 PM
@AviD yeah sorry I know that's a bit old-school for you but I'm not aware of one written in Go or Rust (perhaps @TerryChia knows of one?)
 
ha
 
@RоryMcCune Ask and ye shall receieve: satyajit.ranjeev.in//2014/07/06/introducing-edi.html
 
@TerryChia ohh yeah that's perfect, even down to the "should be cross-platform but I've not tested it on Windows" schtick
 
@AviD Do you read HN often? If you don't you need to start. A real hipster reads HN.
 
meh
 
1:02 PM
@AviD well you've got the HN attitude down pat anyway
 
hehe
 
1:27 PM
Soo..... Is there an HR Manager in the house? Calling @RoryAlsop.
3
 
@AviD You look nothing like your profile picture.
 
@TerryChia neither does your mom.
 
@AviD Nice shirt. :-)
 
@AviD Tsk. That would get you banned on HN.
 
heh
 
1:30 PM
@RoryAlsop should use hot water instead.
 
@AviD Well done
now tell us where we can order these T-shirts
 
@LucasKauffman come to AppSecIL and I'll save one for you
 
@AviD :O
@AviD is it in English?
 
@LucasKauffman the shirt?
 
@AviD the conference
 
1:40 PM
some are, some in hebrew. not yet sure which are which - I think some will depend on who will be coming. So far it looks like we have very few non-hebrew speakers.
if you do come I will make sure to change that... ;-)
 
@AviD "HEY, IF YOU COULD SPEAK IN ENGLISH, THAT WOULD BE GREAT"
 
1:54 PM
@RORY STOP TWEETING START POURING
 
@AviD what you want?
(I can't see what that video is...)
 
@RoryAlsop OH NOES
YOU MUST TO WATCH
 
I'll see it once I get home then :-)
 
Gaaaaiz.. I'm locked out of Chat.SE
I can only access from mobile
 
@Adnan I can tell.
 
2:01 PM
@Adnan what did you do?
 
@Adnan try using the forced login. sometimes the detection scripts go wonky.
 
Can't access from browser if I already logged out
@AviD Whazzat?
Forced login?
Link me
I'm here in read-only mode as well
 
@Adnan right, right. thats why you are writing so many message. Sure, makes sense.
I assume you were at chat.stackexchange.com/login/…
 
Jep
 
there is a link from there, hang on... not seeing it
 
2:05 PM
Okay, I'm here now
 
Yup, that
@AviD Thanks!
 
@RoryAlsop WATCH ON YOUR MOBILE
@Adnan worked?
 
@AviD Yup, now I'm typing from PC
> If I hated people with lesser skills, does that make me a skillist©?
 
@AviD ah hahahahahahahahahahaha. I was just chatting to my wife about this. She did it the other day
 
2:15 PM
@RoryAlsop and she didnt point at you?
 
It might have to be at the weekend, rather than within 24 hours - I have a certain amount of preparation required...
@AviD nope :-)
 
@RoryAlsop what preperation? You fill a bucket, you dump.
 
@AviD I have clothing choices (kilt or metaltech gear? If metaltech, are the lasers waterproof? etc)
 
in your case its probably easier, just leave a bucket outside for a few minutes, will fill up with ice water...
 
Cold water looks quite refreshing there - you know it's 9 degrees here.
 
2:16 PM
@RoryAlsop oooo niiice
 
@AviD exactly
I'm not going to do this half-heartedly
 
@RoryAlsop ha! yeah, it wasnt actually too bad. I was standing in a freezing cold pool to begin with....
@RoryAlsop right! thats why I used TWO buckets.
@RoryAlsop so - my suggestion: Kilt + Sec.SE shirt + Metaltech mask.
2
 
@RoryAlsop Kilt + sec.se shirt?
Oh, @AviD already suggested that.
@RoryAlsop Actually, do it on stage at your next concert. ;)
 
@TerryChia ha!
 
@TerryChia that's in 9 days time. However water + cables and amps etc on stage = badness
and the Charlie Sheen, non-water approach is too expensive
 
2:23 PM
@RoryAlsop Kilt, obviously!
 
@RoryAlsop Heh, I saw that one.
Oi @AviD, do the Charlie Sheen version.
 
@TerryChia whats that?
 
You should be able to afford it with the 1.6mil sourceclear raised to hire you. ;)
 
heh
excellent. Much better than the original.
 
DId you see Dave Grohl's one? My favourite so far
(except for @AviD's of course)
 
2:29 PM
@RoryAlsop Nope, link?
 
youtube.com/results?search_query=ice+bucket+challenge <--802,000 results on youtube, why do I have a "harlem shake" feeling about this...
 
@RoryAlsop that one?
 
my brother in law had an awesome idea for an ice bucket parody
the boiling water bucket challenge
5
 
@AJHenderson +1, I nominate Justin Bieber.
 
that was actually one of the people on their list
and it was going to be donate a trillion dollars to stupidity research or dump the boiling water
and then of course dump a bucket of water and go running away screaming
 
2:34 PM
@AviD I'm laughing so hard right now.
 
I can't remember who the third was, it was some unpopular republican to balance things out, but it was bieber, obama and some republican
 
@AJHenderson Add every single PHP developer in the world to the list. /cc @FEichinger
 
@TerryChia they'd just think it was a reference to how hot their language is
 
@AviD yes. Brilliant
 
2:49 PM
@AJHenderson Yeah, but they'll be boiled alive after so who cares?
 
@TerryChia hmm, or perhaps do a boiling gold challenge and just play the clip from Game of Thrones
 
@AJHenderson maybe you can talk Bieber into that.
 
@AviD He seems like the type to want a crown of gold.
 
3:15 PM
user image
3
 
3:54 PM
waves
 
@Polynomial Waves !
hows tricks @Polynomial
 
@Polynomial Long time!
 
yeah, long time no speaky
 
@Polynomial portcullis keeping you busy then, I'd guess :)
 
yeah
off to EMF camp next week
44CON a few weeks after
busy busy busy
 
3:58 PM
yeah all the cons to go to, tough life :op
 
the stressful life of a pentester, woe is me!
but srsly there has been a lot of work recently too :P
 
heh you presenting at 44CON or just attending this time?
 
just attending.
speaking at EMF though
 
@Polynomial yeah from all the hiring notices the pen test co's put out it's easy to see they're busy..
 
yup. I heard through the grape-vine that MWR just hired a metric shit-tonne of interns
and they're opening a Singapore office in a couple months
crazy expansion
 
4:00 PM
@Polynomial yeah they've done pretty well recently. Also PTP and NCC seem to be getting a good amount of coverage in the press these days
 
we just moved to a new building (6x the size)
 
@Polynomial oh yeah I saw that, it's a bit further out than the last one IIRC?
 
yup, we're in Watford now
 
positively northern!
 
ha
about as far north as you can go inside the M25 ring
 
4:02 PM
I hope you've got the accoutrements of a good pen test office, arcade machines and nerf guns?
 
no arcade machines (yet), but PS4 + 72" TV, fully stocked beer fridge, pool table, and yes there are nerf guns ^^
 
@Polynomial Interesting.
 
heh seems a theme these days! Guess gotta keep the testers happy in this market...
 
it's definitely a employee's market right now.
especially for more experienced folk
 
well with a lot of testers getting sucked into incident response and the new CBEST stuff coming along, going to make more work for peeps, I guess
 
4:05 PM
CPNI just got a budget hike too, I hear
also, hospitals positively shitting themselves after that 4.5M record breach.
 
@Polynomial good stuff, it's not a threat that's going away for sure...
 
yup. and I bet the ICO is going to have a field day with Paddy Power.
they got popped 4 years ago and only just admitted it
 
@Polynomial ah Healthcare.. not somewhere I'd want to do security, Uptime is always and will always be number one for their systems and they have limited budgets...
 
yeah, one of our guys used to work netops at NHS... crazy tales of corner-cutting hackery
 
@Polynomial I can believe that having done a couple of jobs in that area...
 
4:11 PM
@Polynomial you are alive!
 
@LucasKauffman And we were just talking about his stalker yesterday.
 
LLAMA POKEMONS
 
@RоryMcCune Heh. He should rotate them as his profile picture.
 
4:32 PM
I sure home ICANN doesn't assign the .EXE TLD =\
That's a dangerous idea.
 
4:46 PM
@TerryChia yes - please make this happen @Lucas
Ideally an avatar animated gif
 
5:00 PM
Can you even set your avatar to an animated gif?
 
@DavidFreitag Nope.
 
Are you allowed to use external images for your avatar or do they all get thrown up on SE's imgur?
 
Imgur or Gravatar. Nothing else.
 
From today:
 
@FEichinger Bummer
@tylerl I remember someone asking you this a few days ago, but when do you leave for cali?
 
5:07 PM
@DavidFreitag leaving Sat, starting work on Mon
 
@tylerl That's fantastic
Kinda sucks to have to pick up and move at the drop of a hat, but I assume it will be worth it
 
5:22 PM
@RоryMcCune ahem:
user image
6
really?
 
5:34 PM
@RoryAlsop You know it's true.
 
@RoryAlsop can you make animated gif avatars?
hahahaha
@RoryA he did what I only dared to think of
@RoryAlsop if you add it I will endorse you too.
@RoryAlsop Do people refer to you as Oversight? That would be so cool.
 
@RoryAlsop do you have staff... I think so... do you do a good job managing them... I'm sure you do... so makes sense to me :)
 
@RоryMcCune He's in denial
 
6:39 PM
@RоryMcCune Perhaps he believes an endorsement for "Middle Management" would be more appropriate.
 
sup guys
 
@Xander don't you start!
@RоryMcCune right - I've added it to my profile :-P
@deed02392 sup
 
debating what to do for dinner
I have eggs, rice, instant mash and noodles
 
@deed02392 Got any bread? If so do egg sandwiches.
 
@DavidFreitag nope :|
 
6:50 PM
@deed02392 Could make omelets. Just need some cheese maybe a little salt and pepper
 
@LucasKauffman you mean overseer?
 
no cheese either - i should probably go to the shop
 
@deed02392 Yeah, get some animal while you are there. Nothing goes good with rice and vegetables like some form of animal.
 
sigh, didn't want to leave the house
 
@deed02392 Eggs + Noodles + Water == Egg Drop Soup
 
6:57 PM
@Xander i'm gonna go hunt down an animal with my bare hands
and wallet
 
Best with a bit of seasoning if you have some form of hot sauce / ground pepper and/or pepper flakes and a bouillon.
 
@deed02392 Ahhh - so you use a .44 magnum to store your money as well?
 
@deed02392 That is another reasonable option.
 
@RoryAlsop LIES, I checked :(
 
@RoryAlsop I'm not starting! I'm just "improving" what's already been started!
@RoryAlsop I also just endorsed you for "Cloud Computing" among other things. The other things I know you know about, but I don't know how much you know about "Cloud Computing." I do know, however, that you know more about it than all of the salespeople I know who have also been endorsed by all and sundry for it, so I figured it was a safe enough bet.
 
7:11 PM
ok, poached egg on toast i'm going for
 
7:22 PM
@Xander blimming middle management!!!
 
@RoryAlsop yeah @Xander it's senior management dont'cha know!
 
@RoryAlsop I'm sorry. Once I'd thought it up, it wasn't in my power to resist. :-)
@RоryMcCune Well senior management now, but probably knows middle management like the back of his hand. Come to think of it, probably junior management as well.
 
@Xander hahahaha
 
@Xander good call
 
@RoryAlsop Don't worry, I've had my fun...I'll leave your LinkedIn alone now. :-)
 
7:50 PM
user image
2
 
@LucasKauffman dafuques that thing?
 
pokelama obviously.
 
@TildalWave It's a bulbapacka, duuuh.
 
I mean what's on its back? Looks like something from the darknet ...
 
Blue version was the first game I ever played.
Oh god the nostalgia
 
05:00 - 20:0020:00 - 00:00

« first day (1344 days earlier)      last day (3541 days later) »