« first day (1750 days earlier)      last day (3428 days later) » 

02:41
What word do I use for preventing a potential attack?
Patching maybe
03:04
@Clearquestionwithexamples Mitigation
Or prevention. Either one works.
Patching is one specific example.
 
2 hours later…
04:52
Morning all
@AviD - it was the crowne plaza on the beach front
05:10
@Xander that article is funnier in that it tries to pop up an article on good sex when you try to close it
 
2 hours later…
06:46
@RoryAlsop ah very good, thanks
07:10
Morning!
@AviD is a nice hotel and reasonably priced
2
yeah thanks, just didnt remember which one it was. I was asked for reccomendations, but what do I know? I drive 20 minutes to get there, I never need a hotel.
You're a hotel
it's written right here
@M'vy pffft
sorry, morning
I take easy shot
07:13
yes, yes it is
I'm still squeeeeing
gonna announce in a few minutes.
shouldn't you be voiceless since yesterday?
no? why?
the squeeeeeing
heh. and the bouncing.
 
1 hour later…
08:26
@AviD it is now a few minutes later....
where's the annoucement? don't tell me the DMZ isn't the premier location for such things?!?
Don't tell me you invited a president candidate
One guys I'd probably like to meet would be Kevin Mitnick I guess :) But I won't probably be at the conference, so I won't meet mystery person I suppose.
@M'vy AFAIK Mr Mitnick does the conf. circuit quite a bit, so that could be poss...
Today I learned about a great threat to small children flying separate from their parents: sexual predictors
09:31
@RоryMcCune pffft Mister Stopwatch
there, ya happy?
@M'vy nah, he'd be interesting, but not appsecy enough for this crowd.
^^
09:51
so @RоryMcCune didja see it?
it?
1 hour ago, by Rоry McCune
where's the annoucement? don't tell me the DMZ isn't the premier location for such things?!?
@M'vy YOU obviously dont follow my twerts.
10:13
@AviD if you have a twitter account I don't have it.
well whose fault is that then??
and shame on you.
not that I give a damn.
@AviD well it's not on your profile
your face is not on my profile
@AviD that would be awkward
heh okay that broke
10:18
Anyway, should you provide me a link I'll add you to my following list
I am very excited to announce that @jeremiahg will be giving the Keynote address at #AppSecIL! Register now! https://appsecil2015.eventbrite.com/
@CodesInChaos ha, thats cool!
OHMIGOSH this is creepy:
@ManishEarth, Mumbai, India
Avid reader, programmer, loves science. Physics student. Open source aficionado. Currently poking at the Rust programming language and the Servo browser engine.
1.9k tweets, 530 followers, following 322 users
> AviD reader
WTF, @ManishEarth??
10:32
@AviD he reads you like an open book
Well I'd be surprised he would have known for the squeeing thing.
@AviD: What you really need to know is what he reads...
tea? pawprints? ENTRAILS?
11:08
@RoryAlsop Ha. I didn't see that. Whoops.
Adi
Adi
Apparently, Israel now is just Sinai desert
@Adi ha, that is funny
count on FireEye to find new ways of suckage
@Adi I did not hold my tongue
.@FireEye looks like somebody really needs some geography lessons, or at least a map... Since when does Israel consist only of Sinai desert?
go ahead and retwert that. Public shaming is always fun. Especially annoying companies.
11:23
I can't really shame them, since I suck at geography as well.
ooh, we need a memegif of that map, "Fools, that's not Israel - It's China"
Though I'd probably be wise enough to look it up.
@CodesInChaos exactly
Though deciding which borders to use for Israel sounds like a tricky problem.
Adi
Adi
@AviD Oh, come on! You should have written something about them being anti-semitic or something.
That would instantly give their PR people a heartattack :D
11:24
About as tricky as drawing the border between India and Pakistan.
@Adi nah, thats too drama-queen and racism-indulgent
@Adi heh, maybe....
Reminds me of Windows 95 highlighting the current time-zone.
A feature which they removed because Peru and Ecuador couldn't agree on their border.
heehee, I followed up with something
@Adi lemme know if that is anti-semitic enough for you
Adi
Adi
@AviD Jesus! :D
hehehehehe
Yeah, that's stuff!
@Adi Jesus was anti-semitic...?
11:43
MRW after upgrading to El Capitan: "What a waste of 6 GB of bandwidth".
@AviD I know your darkest secrets
Beware
@Simon also very similar to what your mom said about you.
@ManishEarth I dont have dark secrets
Yes because my mom knows what bandwidth is.
Yes you do
@ManishEarth my secrets aren't dark
the dark ones aren't secret
11:44
hah
@AviD Racist.
@Simon exactly. But the opposite of that.
Ethnic secrets
@ManishEarth: Ethnic secrets... like your grandmother's spice mix?
Yum yum, konkani fish curry
11:48
lol
@AviD: Didn't the israelis give that back?
"back"
but yes
it is wholly owned by Egypt
Well, they primarily invaded it to make a point ;p
NOT where I live, contrary to the best of @Simon's knowledge
They don't have the same sort of sentimental attachment they have with say Jerusalem
@JourneymanGeek I think that's the only reason people invade each other today
11:50
@JourneymanGeek "you hit me with a stick - I'M TAKIN THE STICK"
Crimea was just Putin telling the world "I take what I want."
@JourneymanGeek true
back
@ManishEarth: On the contrary.... there's oil
Yeah, yeah
11:51
@JourneymanGeek yeah.... Israel doesnt do much oil.
and er...
some of the biggest natural gas reserves, though.
general piss fights...
@JourneymanGeek drugs and parties
Though
11:51
@AviD: Well, no one wants to invade israel for that...
@JourneymanGeek no, the invading is something else entirely
@ManishEarth flaaaaaash
In putin's case he's trying to keep countries from going over to the western sphere of influence...
so... political **** length comparisons
and of course, russian oil goes through the ukraine.
Adi
Adi
12:02
Ugghhh.. Fuck Putin!
and every single pro-Putin Russian
@Adi how about pro-Putin non-Russians?
How about pro-Russia Putins?
Adi
Adi
@TildalWave Oh, sorry.
and every pro-Putin person
that's better :)
@Adi WHAT ABOUT THE BEARS
12:04
YOU CANNOT HATE BEARS
bears are not pro-putin obviously
ok, maybe as a meal
Adi
Adi
I'd have the most bland meh if every single pro-Putin person drops dead
I don't think I've ever hated a group of people like that before
@Adi any specific reason?
not even republicans? :O
Adi
Adi
12:06
@ManishEarth The pro-Assad Russian invasion of Syria
Ah I see
Thought it would be a Syria-related thing. But I haven't kept up with Syrian history that much
@AviD that only works on Facebook, I actually know what the original photos looked like
I know it's all kinds of fucked up, that's all
Adi
Adi
12:07
@ManishEarth Especially where they're trying to convince the world that the reason is to fight ISIS
@Adi: Syria is a bit of a mess.
Naw, they want in before the west does
Adi
Adi
ISIS is the single best thing that happened to Assad (and Russia) in the Syrian war
and unlike the west, they don't give a shit.
Adi
Adi
I mean, you have rebel groups a few hundred Km away from your only military base in the middle east, then suddenly some Islamist shitbags start fighting those rebel groups
Fanta fucking stic!
I'm so fucking disgusted with the idea that people are okay with Assad (with the help of Russia) effectively strengthening ISIS
Pardon my ignorance, but why does Putin want Assad there?
What's his interest in Syria?
12:10
@ManishEarth: Syria's been traditionally pro russian
@ManishEarth Putin has few friends now.
he'd rather have them as an ally than having a islamist or pro western government in place
He tries to get a strategic presence in the region (because it's rich in oil).
Adi
Adi
"Here, take these military bases, we won't put up a fight, just keep fighting the rebels and don't invade our secure areas in the west of the country"
12:11
(also, as for ISIS, meh. Help the nicer folks)
Adi
Adi
Assad doesn't bomb ISIS, and ISIS doesn't invade Assad secure areas.
Everybody is happy
except everyone who isn't assad or ISIS
Adi
Adi
Yep
And wars like this are hard
To be fair, one must note that Western governments are much more panicked by a few Russians than by the whole of ISIS. In a way, Putin getting into the game forces everybody to stop ignoring Syria.
12:14
the brits managed it, but the brits were suprisingly ruthless civilised bastards.
"Ok. Good people, stay here. Come out and we'll shoot you." shoots rebels until there's none left. Declares it a green zone
Adi
Adi
@JourneymanGeek At some point, about 3-4 years ago, it wasn't a war yet. The world stood by and let it develop into a war
I mean, this is why we have the international community
@Adi: The world sucks.
@Adi: Its more of an international circlejerk where nothing ever gets done.
@Adi Theoretically. But in practice it really depends on where the USA currently are in their interventionism/isolationism cycle.
@kalina Where the hell are you? Look how the discussions are intelligent [boring] when we're not discussing here.
@ThomasPornin: and the UN can rarely get anything done.
Vetos are a silly idea
Adi
Adi
12:21
@ThomasPornin Indeed.
@JourneymanGeek The alternative was not having the Americans nor the Soviets on board. Like the SDN times.
Adi
Adi
It seemed like the US was soooo afraid of another Iraq situation
so much so that they let it develop into an Iraq-on-steroids kind of situation
@Adi well, there were in 2 'wars' at the time
@Adi Right now they do not really care because oil prices are low.
@DavidFreitag Oh yeah sure and what else, ROT13 is not a proper encryption algorithm?
Silly dovid.
Adi
Adi
12:23
@ThomasPornin Ooooh.. they will care once ISIS steps up the in-Europe attacks
These people have proven how easy it is to crowdsource terrorism
@Adi Mmh... until the bombing starts in UK, USA won't budge much.
@ThomasPornin The USA cares that much about UK?
@Simon Surprisingly yes.
Interesting.
USA and UK were last at war in 1812, and by the end of that conflict they were the best of chums.
In that specific war, the USA started under the idea to spread their ideal of freedom, and ended up happy to have earned the respect of the British.
12:26
That was the independence I assume?
Independence was in 1776 to 1783. In 1812 both parties wanted to "finish the job" but it really settled the Canadian boundary.
Ah.
It ended in a draw while the Americans outnumbered the British by a factor of about 100 to 1, and the Americans called that a victory.
And then they went on to do business together.
As opposing countries do after wars
Cough cough.
@Simon It's called a daddy complex
12:29
@ManishEarth Yeah no kidding.
That's the idea, although they actually made business during the war too. This was a weird war.
The Americans were amazed at how much social class mattered among the British.
The British were amazed at how much race mattered among the Americans.
"Oi American lad, want a nice cup of tea to get ready to murder each others tomorrow?"
They both agreed, though, that mocking the French was fun.
@ThomasPornin That's just universal.
At that time, France was at war with everybody. The USA/UK war mostly ended when Napoleon was defeated, which freed troops to be sent to America.
12:31
@ThomasPornin Well if Napoleon wasn't such an ass the Brits wouldn't have had to piss us off by stopping trade with us. None of this would have happened.
So it's really all France's fault.
@RoraΖ Especially since USA won their previous independence war because of massive French help.
@ThomasPornin I think everyone agrees that mocking the French is fun.
@RoraΖ Even the French (who think that when it comes to mocking themselves they do it much better than everybody else).
@ThomasPornin This is true, and we got the Louisiana purchase from a desparate Frenchman
I shall be noted that the trigger for the 1812 war was the forced enlistment of American sailors into the British navy. The British considered that any native of UK was a subject to the King for life, and disregarded any notion of acquiring American citizenship.
12:35
@ThomasPornin That's like thinking you're the best Karaoke singer in the world when you're wasted at a dive bar.
So the British boarded American boats and grabbed whoever seemed to have a non-American accent. They did so because they were desperate for troops, because of war with France.
@ThomasPornin I'm sure it was a combination of that, and the Brits cutting off our trade with the French. Since we liked the French, but the Brits didn't like the French.
Back to the ISIS vs Europe situation: as I see it, USA may intervene only if UK is threatened, or if some countries begin to ask Russia for help.
@ThomasPornin Well it seems that Russia is already taking sides.
In the heads of strategic thinkers in the US army and political circles, Russia is still the biggest baddie.
12:39
@ThomasPornin yeah Russia is still a strong military presence in that part of the world. Is there a specific ISIS vs. Europe situation? Or just the entire country of Syria flooding into Europe?
@RoraΖ 95% of the refugees are only fleeing to other parts of syria or surrounding countries.
It annoyed me that when the UK offered to take in 20k refugees over 5 years people were pissed. Well maybe you should figure out where these refugees are going to live, and what resources should be spent on the millions you think they shoudl take.
Happy Octo-bear!
2
@Arperum From what I hear Hungary is getting quite a bit
@RoraΖ Only a tiny fraction. All of Europe is shouing bloody murder, but it's completely overshouted.
12:47
@Arperum Awesome, I love over reactions
@RoraΖ I don't. Because they result is massive bouts of racism. And racism is bloody stupid.
@Arperum pls, PC is the master race, there's no racism here.
@Arperum Well I was being sarcastic
@Simon Europe is currently having a run of bigots all over the place, I get worked up about it seriously easy.
@RoraΖ About half of the current wave of migrants to Europe comes from Syria, Irak and Erythrea (the latter case having nothing to do with ISIS).
This means that half of the migrants is NOT fleeing ISIS or war in Syria, so, as usual, the situation is more complex than what political slogans suggest.
13:00
@ThomasPornin I assumed so, but the US media sucks
Morning gang
@RoraΖ Not only US media. EU media is doing a mighty fine job in protraying them all as profiting lazy "refugees" who should be fighting for their country instead of living on our money.
Media is fucking stupid.
@Arperum We should start our own media outlet!
Hell I could sit back, get drunk with a nice Belgian Quad and report better than the media.
@RoraΖ I'm not fit for reporting, I won't be able to just stand their and report, I'll end up helping.
@Simon loving the Octo-Bear btw
13:21
@Arperum If I'm drunk, I ain't standing. We'll get some lawn chairs.
14:09
I really need to stop coffee
@M'vy That would be a sad way to live.
@Xander I'm too jumpy right know. I look like @AviD bouncing off.
@M'vy coffee doesnt make me bouncy
@AviD that was not implied
@M'vy Just limit your consumption to one cup a day.
That's what I do.
14:19
Yeah should do
I try to limit myself to one beer a day... I generally lose that battle.
@RoraΖ American beer is water anyway.
I'm reading flags and @schroeder is commenting on them as I'm staring at them. We now have one moderator and 3 honorary positions :P
14:34
I believe that we actually have a negative amount of moderators here.
@Simon Not the beer I drink
14:51
@JeffFerland and here I was thinking that I slowed down a bit so as not to be 'overzealous' :(
Damn I forgot how much I hate posting a question on SO
15:07
@RoraΖ Only post a question on SO if your life depends on it.
@Simon Yeah, I chose... poorly
@schroeder Doing good work :D
15:46
@JeffFerland I wait till he's asleep :-)
@Simon It's only a proper encryption algorithm if you run it twice.
@DavidFreitag 3DES is right out
@DavidFreitag Can you run it twice separately and then concatenate the results to get ROT13^2?
@Simon That's not what I meant, run it twice on the same data.
@DavidFreitag But I want to create ROT13^2!
15:57
@Simon If you used ROT13 on a string two separate times and concatenated them, you would have the exact same string twice
BUT IT'S ROT13^2
You're just trying to get around my patent on ROT169
Maybe @Simon is patenting ROT1 + ROT3^2 = ROT1 + ROT9 = ROT10?
I'm not sharing my secrets with any of you pesky anti-ROTers.
Soon I will also patent ROTrand().
?
Aren't those just zombies?
16:25
"There was a performance overhead but nowdays that is almost negligent." - I feel like they used the wrong word there...
@Simon I have had some hard drives that implement that...
wot
@JeffFerland @Simon's mom gets a lot of hard... drives
Well, maybe more like randrot... but yeah...
Sorry for the noise everyone: Do we actually have a question whether it's clever to use two different local accounts (admin+non-admin) on Windows?
16:32
@SEJPM What do you mean by clever?
It's good security practice, in many environments
@RoryAlsop You know what I don't see discussed a lot? I mean, I think I've heard people ask, but I'm pretty sure nobody's actually done write-ups on it. Is there a practical difference between having two separate accounts, vs. using one account with UAC? Only thing I can think of is the added protection of having separate passwords. Other than that, is there really any point?
0
A: Is there any plugin that encrypt/decrypt a base64 URL?

Justinasbase64 can be easily decrypted back to normal because it's two-way algorithm (while md5 is one-way algo.). Never save any sensitive information in user accessible location. Better would be to request new URL every time and add some expire time for that generated URL.

@Iszi Generally speaking a normal user should be required to act as a separate entity for administrative roles.
@Xander Is he trying to say that he's using secure storage?
Nevermind, I actually read the question.
16:39
@RoraΖ That's always been best practice, yes. But is there really a significant difference, in terms of added protection, between the two scenarios?
@RoraΖ clever = "good security practice and actually provides security advantages"
@Iszi Mainly it stops malicious code from automatically gaining privileges that it shouldn't have. UAC is probably fine when correctly configured. But I think separating roles is more to stop users from shooting themselves in the foot than anything else.
@Iszi UAC is not considered a security boundary, so my first thought is that yes, there is a difference.
Especially on Windows, where I think I gave myself the right permissions in the right folders but who the hell actually knows.
@Xander Also I can't take anyone seriously who uses "Thanx"
@RoraΖ I know, right? You saved yourself one letter!! At least use "Thx." That's a contraction I can get behind.
16:46
@Xander It's an abbreviation
@Xander @Simon's mom is a contraction that @RoraΖ can get behind.
@Iszi Also, I agree I don't think that question has been asked yet.
@DavidFreitag I sure as hell don't want @Simon's mom having contractions!
@RoraΖ You're a bit late on that one.
all
@RoraΖ A contraction is a specific form of abbreviation, of which this word is.
16:55
thx for the advice @all :) Let's see if I can make a good question up from this.
Some other noise: If you have a vulnerable application (TrueCrypt) and running it in mobile mode on a different machine (where you have standard privileges), can you actually use this vulnerable program to elevate privileges?
@SEJPM Who said TrueCrypt is vulnerable? End-of-life, yes. But I don't think anyone's actually published vulnerability details.
no details yet
0
Q: Is a word like 'thx' a contraction or abbreviation?

RoraΖPutting aside that the use of 'thx' is bad, and it isn't really a word. Would 'thx' be considered a contraction or abbreviation? Contraction: a shortened version of the written and spoken forms of a word, syllable, or word group, created by omission of internal letters (actually, sounds). The ...

only the announcement
We'll see who comes out on top
17:00
@RoraΖ Wow.
@Iszi haha, dont' like it?
pls, abbreviation.
@Xander "Thx" is an abbreviation, yes. A contraction is a type of abbreviation, also true. However, this does not mean that "Thx" is a contraction - and I'm fairly confident it actually is not. Just because "Jerome" is a dog, and rottweilers are a type of dog, does not mean "Jerome" is a rottweiler - in fact, he's a Chihuahua.
@Xander But contractions change the sound of the word(s).
17:03
So, you may be right, because in a contraction the last letter should be preserved, and in "Thx" it is not.
It's really the best fit though, of all the abbreviation types.
I always thought that a contraction required multiple words
@RoraΖ Nope.
Oh.... kind of like gov't
Would gov't be a contraction?
@RoraΖ Same here.
@AviD cool!
17:04
I think gov't is an abbr
@RoraΖ Based on Oxford, it would seem that it should be "govt".
@RoraΖ Yes, as would govt.
Man good thing I'm an enganeer
or... engr
@RoraΖ All the types of abbreviations: oxforddictionaries.com/words/abbreviations
@RoraΖ In that context, it's not a contraction - it's a bastardization.
17:05
@Xander Oxford isn't the end-all be-all xander!
@Xander I thought acronyms were a subset of initialisms?
@Iszi Shut uppppp.
@RoraΖ So, you're saying we should ask @ThomasPornin?
Like French Bears know the English language
17:07
and this one, as the official CVE request: openwall.com/lists/oss-security/2015/09/24/3
@RoraΖ Well, you asked for the "end-all be-all".
@Iszi Well that's true....
@SEJPM Interesting, but confusing. The one article implies "privilege escalation" in the sense that it will allow access to data that the user shouldn't have. But the CVE submission seems to say that it's actually OS-level escalation.
If it's the former, then your TrueCrypt-protected data is at risk but the rest of your system should be fine. If the latter, then it's the reverse - until "the rest of your system" gets a keylogger and... well that's just pwned all over.
I suggest it is a contraction of the phonetic, 'thanx'. Note that some people consider this to be a thank you followed by a kiss. Kisses are commonly appended to a missive in the form of a letter 'X'. — chasly from UK 2 mins ago
I learned something today
17:19
Anyone use Xen/libvirt before?
17:56
@Simon cute
18:09
Sorry, was on a plane. Yes, I think the differences between two accounts and just using UAC are significant.
For me, Thanx does not include kisses
And here, it's be-all and end-all, not the other way round
Hmmm, autocomplete tried to write bell-end
And my transcript reading is complete :-)
Evening all
You have autocomplete? or are you on your phone?
@Simon We all know where he is, we just can't get to him.
18:35
@RoryAlsop Evenin'
how was the thing
18:58
@TildalWave nou

« first day (1750 days earlier)      last day (3428 days later) »