The DMZ

Simon

13:00

Then after my break, I'll be taking the PWK course.

Dunno yet if I'll attempt OSCP.

Rоry McCune

@Simon if you get on ok with the course you should try the exam

Simon

@RоryMcCune Yeah I guess I'll be the best judge to know if I should try it or not.

I'm really planning to nurd it up quite a bit though, I'll do ton of research.

Rоry McCune

@Simon yeah it's an opp. for nurditude, to be sure

Simon

My employer is interested in the experience and doesn't care about the certification but I'd say that it'd be cool to have.

Rоry McCune

@Simon yeah wouldn't hurt to have the creds .. also you could come to the dark-side and become a tester :)

Simon

13:05

Ya, and I'm sure a bunch of our clients would be interested in the product.

If you consider security consulting a product, that is.

Rоry McCune

@Simon that's true, lot of demand for that kind of thing these days

@Simon or you could become a mad bug bounty hunter

Simon

@RоryMcCune lulz that would be fun for sure.

Rоry McCune

there's some good cash in that line if you can find stuff

Mark Buffalo

@RоryMcCune I might surprise you with how nutty I am ;)

Simon

Anyway, I'll see how the course goes.

Mark Buffalo

13:07

@RоryMcCune If it makes you feel any better, I don't actually own a gun.

Alright, no mores :b

Simon

@AviD I really, really, really, really doubt that dovid is pro-gun.

Rоry McCune

@Simon good plan, should be fun and I'm sure people in here can provide learning pointers if needed

Simon

@RоryMcCune Ya, I'm sure I'll come up with one, two or 73 questions.

I'm mostly worried about the lab access time, but I asked my boss for the 60 days package.

AviD

@RоryMcCune hey I tried providing him a pointer, y'all got mad at me.

Simon

That should be fine if I nurd it up almost every day.

AviD

13:10

said I was pulling a #simon

Rоry McCune

@AviD pls

Ohnana

@RоryMcCune weh ;-;

Simon

Is Kali VM friendly now? I remember that aircrack wouldn't work from a VM because of the network adapter back in the BackTrack days.

Or at least you had to fuck around a lot to get it working.

While I'm running Linux on my work PC, I don't think I'd want Kali to be my host OS.

Rоry McCune

@Simon Kali should be fine in a VM, things like aircrack might be tricky depending on the wireless card/VM software, but you shouldn't need that for this course...

AviD

@Simon no, it's linux

Simon

13:12

@RоryMcCune True, true.

@AviD wot

Are you saying that Linux doesn't work nicely in a VM? If so, I'm totally gonna pls at you.

AviD

@Simon no, I'm saying its not friendly

Simon

o

I just remembered that you're an OS X fan ovid.

trolololo

AviD

hehe

Rоry McCune

@Simon well only when iOS isn't available

tiggers love iOS

Simon

lulz

Anyway, I'm quite excited for the course, I think it'll be great.

Ohnana

13:15

@AviD Kali is made for VMs

what are you on about

AviD

@Ohnana right. not for people

Simon

4 da ppl

AviD

also @somion its not "KaliVM" just "Kali"

or actually "Kali Linux" I think

Journeyman Geek

@Simon all the tr00 haxxors run Kali

Ohnana

@AviD since you're an OSX fan i'm guessing "not for people" means "not for babies"

AviD

13:16

@Ohnana pffft

Journeyman Geek

Usually cause they f-ed up and installed it over windows

Simon

@AviD pls I obviously meant "Kali in a VM"

AviD

I'm an OSX fan like I'm Egyptian and live in a pyramid.

Journeyman Geek

.... You arn't?

AviD

@Simon ah, see that is a different question

Journeyman Geek

13:16

MY LIFE IS A LIE.

Simon

NO SEE I GOT IT FINE

6 mins ago, by Simon

Is Kali VM friendly now? I remember that aircrack wouldn't work from a VM because of the network adapter back in the BackTrack days.

I guess there's a missing dash.

VM-friendly.

AviD

"Is KaliVM friendly now?" != "Is Kali usable in VMs"

Simon

I don't care if it's user-friendly, I'm not a UX dev.

Journeyman Geek

@Simon that's a hardware thing tho

Simon

@AviD Let's not argue about that but yes I'm worried about how well it works in a VM.

But ohnuhnuh did say that it was made to work in a VM so I got my answer.

Journeyman Geek

13:18

(and most of these guys thinking they can passthrough a mini PCI-e /PCI Wireless NIC...)

Ohnana

@JourneymanGeek lololol

Journeyman Geek

@Ohnana you'd be surprised how many clueless ID class 10-Ts we get on SU who do that

kalina

@Ohnana no

Journeyman Geek

in fact my standard comment for folk who complain about kali is to politely tell them to learn the fundaments.

Simon

@kalina pls we never refer to you as "kali"

AviD

13:22

@Simon but we're gonna start @kali

kalina

maybe you should

Simon

pls no, that would make things ambiguous

ambiguity leads to confusion and mad.jpg

kalina

good, we like ambiguity

Simon

NO

kalina

we're completely ambiguous about whether we like you and you're fine with that

AviD

13:23

@Simon and mad.jpg leads to the dark side

kalina

so why not kali?

Simon

@kalina Because that ambiguity doesn't confuse anyone.

Journeyman Geek

@kalina cause you don't want to be associated with that OS.

That slightly scary lady... maaaybe.

But not Kali the OS

kalina

i'm not scary

Simon

pls

Rоry McCune

13:26

@JourneymanGeek oh yeah I'd forgotten about that Kali. I've been to one of her temples, it was ...interesting.

kalina

the context is lacking in this conversation for those in the room who don't know religion

Simon

wot

kalina

obviously I know all about kali the destroyer

Ohnana

they named the OS after a religious figure?

wtf people

kalina

I just didn't want anybody to think that @RоryMcCune had been visiting my temples and had found them... interesting

Rоry McCune

13:30

@Ohnana did you not realise that?

Ohnana

@RоryMcCune no!

i thought it was a nonsense word

Rоry McCune

@Ohnana heh, my missus was going to do a windows distro called "pavarti windows" as a take-off of it

pavarti being the hindu goddess of love and kind of the opposite of kali

Simon

lulz

Journeyman Geek

Actually they're kind of like different aspects of the same goddess.

In a sense Parvathi is the "maiden", Amman is the "Mother", Kali represents... well a lady who has truely had enough.

AviD

@JourneymanGeek WHOA.

Journeyman Geek

13:34

Kali's not all human sacrifice and shit

AviD

is this why @kalina calls herself that??

Journeyman Geek

(granted, I'm a southerner, and we tend to follow a somewhat different religious path from the north)

kalina

@AviD well, kinda, I didn't want to go naming myself directly but upon further researching kalina is a kind of flower so I went with that

Simon

o pls you're not a flower at all

Ohnana

@JourneymanGeek kali does look sick and tired of your shit in all her icons

AviD

13:37

@kalina so.... a flower who has truely had enough?

or a lady who has had enough flowers?

kalina

which then brings us onto poison ivy

which is a flower woman who has had enough

Simon

o

Ohnana

Simon

Now that makes sense.

Ohnana

100% done with all of your shit

kalina

13:38

well I figured it would be like a preliminary warning that I might not put up with your shit by having a name so similar

but most people are not intelligent enough to make the connection

so the joke is on me

Simon

There's being intelligent enough and actually not caring, kalinuh.

Ohnana

i always thought it was an indiana jones references

kalina

well that too

indiana jones?!

Ohnana

i imagined you ripping people's hearts out -- "KALI NAAAAH"

kalina

@Simon but in your case we know which one

Simon

13:39

HARISSON JONES?

kalina

HARASSING JONES?

AviD

@Simon JESSICA JONES??

Mark Buffalo

0

Q: How to defeat doubling up apostrophes to create SQLi attack?

I know some developers double up apostrophes to mitigate SQLi. (This is when the input is ' so it becomes '') Is there a way to beat this? This is on MS SQl Server.

sql-injection

Ohnana

@MarkBuffalo you are so longwinded omg

Mark Buffalo

I know :(

Ohnana

13:42

@MarkBuffalo also expand the stackoverflow link

just tossing in a link does nothing if the question just gets nuked

Mark Buffalo

Alright

give me a few. can't get out of my chair lol

Ohnana

119

Q: How would Facebook Sysadmins prevent the summoning of Cthulhu?

So, I've got this idea for a short story. Some researchers find a forgotten manuscript hidden locked away in an ancient tomb. While they are working on it one of them pastes part of the text into a Facebook announcement and Facebook automatically translates it. This links Facebook to the nether r...

apocalypse computers cthulhu facebook

Mark Buffalo

@Ohnana you wanna do it for me? :]

I need to get to work

Ohnana

uuugh fine

Mark Buffalo

I made one last edit

Journeyman Geek

13:49

@AviD Just watched that show

Ohnana

lol there's a close vote with 4 different flags on it

traaaain wreeeck

Mark Buffalo

@Ohnana Nice

Journeyman Geek

Its sad no one thought of the most obvious way to stop the main villan till the last episode.

Simon

Markus, did you really bother answering this question when there are literally hundreds of similar questions?

Mark Buffalo

@Simon Yeah. The more information on security, the better.

People are going to google this. I want to show both sides of the coin

Simon

13:52

@MarkBuffalo That's not how SE works. If a question is a duplicate, you don't bother answering it and flag it.

Ohnana

@MarkBuffalo typically we close as dupe, simply so the body of knowledge is small and tightly reviewed

Mark Buffalo

@Simon He's specifically asking how to beat that in a security context

I didn't see any dupes

Simon

@MarkBuffalo stackoverflow.com/search?q=sql+injection

Mark Buffalo

how can I prevent vs. how can I break protection X

Simon

Dude, you started your answer with "How do I prevent SQL injection?".

Mark Buffalo

13:55

alright, I'm not arguing this

Ohnana

it's not that big a deal guys

someone might read it someday and like it

Simon

And there is literally no way to answer his question without knowing what his backend looks like.

kalina

looks at chat

sees @Simon talking about ass again

Simon

wot

AviD

@Simon pls, stop looking at his backend

Simon

13:57

Oh you donuts.

AviD

@kalina oh damn you ninjad me

kalina

@Simon is definitely an ass man

Ohnana

lol!

kalina

probably not even all that interested in the rest

Simon

@kalina Thing is I'm more of a boobs guy =\

Ohnana

13:57

next time i see a "backend engineer" i'm going to chortle

kalina

@Simon o

Mark Buffalo

@Ohnana damn you. you've ruined me

Ohnana

i ruin everyone

Simon

My boss laughed at me the first time I told him I wanted to do penetration testing :(

I was like pls

Mark Buffalo

Maybe he wanted to ASSIST

Simon

14:00

wtf

kalina

penetration testing mmm

Simon

wtf^2

kalina

well with testing there are no lasting consequences

the problem with penetration is that STD known as pregnancy

such a dangerous STD, causing a large growth

swelling, vomitting

stretching tearing discomfort and loss of sleep

plus the massively negative effect on how attractive you appear to the opposite sex and your marketability

ah I killed chat

go me <('o')>

Mark Buffalo

@kalina My wife enjoys being pregnant, so :b

Maybe it's because I wait on her hand and foot?

Journeyman Geek

o0

@MarkBuffalo How many kids... exactly... do you have?

Also I wasn't in shock. I was setting up my third monitor.

Mark Buffalo

14:11

Just 2 :(

kalina

"just"

Journeyman Geek

@MarkBuffalo I have this cute little 1200x800 panel (literally), with a driver board

hooked it up to the onboard video (for some reason the cheap ol thing dosen't work right on HDMI)

Fits neatly in the space under my main 4K display

kalina

is it a touchscreen?

Journeyman Geek

nope

kalina

because I really want a new mixer but I don't actually want a mixer

I figured I could perhaps achieve the same thing by using touchscreens

Rоry McCune

14:13

@kalina nice bit of tonic water?

Journeyman Geek

dx.com/p/…

One of these

kalina

@JourneymanGeek meh

I've been through my "having money for the first time in my life and buying all of the things" phase and I've come out the other side

now I want to consolidate all of the things I've bought into newer things that don't take up all the space

Mark Buffalo

@JourneymanGeek Neat

Journeyman Geek

@kalina I'm kinda in the middle of that phase

but I also want to make use of some of the stuff I got cause I couldn't afford better

kalina

I've got to the point where I couldn't responsibly spend all of the money on smaller items

I mean spending €50k on music hardware wasn't really all that responsible but I've made the money back so maybe it was responsible

but I literally don't use half of the things I bought after the first couple of times

Journeyman Geek

14:17

dx.com/p/… something like this might work...

kalina

and have just ended up being primarily software based again because the workflow is less fucking about and the difference is non-existent

Simon

@kalina If you want to buy something and put it aside immediately, get a TB-3.

kalina

@Simon I have a freebass unit

Simon

oo

Journeyman Geek

lol

kalina

14:18

which gets used once in a blue moon

because if I want to create an acid line I'll just use massive

Simon

( ͡° ͜ʖ ͡°)

kalina

let's see

arrange acid line

send it to massive

make massive make an acidy sound

draw automation

OR

arrange acid line

output midi to fb383

record output, manually doing the "automation"

... time passes ...

suddenly I don't like the acid line and have to re-record it

Simon

Yeah that sucks.

kalina

except between recording it and now, I've used the fb383 for something else

Simon

That's definitely the worst part of hardware synths.

kalina

14:21

suddenly I don't even have the sound

OH NO I NEED THE SOUND

time wasted remaking the sound

time wasted re-doing all the automation

multiple takes and sleeps later, I give up on the acid line and just replace it altogether

Simon

I'm sure you'd much rather do the pls dance.

kalina

because out of principle I'm not spending more time on the acid line than I did the entire track

which is probably the lesson you've not learned yet

Simon

What if the line makes the track?

kalina

which is why you're still tweaking your kick

my entire music creation process is impulsive

Simon

WHAT IF THE KICK IS THE HEART AND SOUL OF DA TRACK KALINUH

kalina

14:23

40 secs ago, by kalina

my entire music creation process is impulsive

I will sit, I will arrange the track with placeholders, I'll replace the placeholders with sounds and do the sound design, I'll FX up all of the chains and then i'll mix it down

I don't sit around thinking

Simon

Do you use templates?

kalina

if a track gets to a writers block status, I'll scrap it and move onto the next one

no I don't template

uhhhhhh

what do you mean by template

Simon

Good undefined gender.

Like already have instruments set up labelled "bass" which takes X bar at X time.

Mark Buffalo

@kalina That's the best way to do it.

Simon

Which would imply that you literally have the same track structure on every track.

kalina

14:26

I have a base template that replaces the default "new project" which has "the first 10 steps I always take when making a project" but nothing actually arranged

but it has no actual sounds in it

Simon

Good.

OVID IS GONE

PAAAAARTYYYYYYYYY!

kalina

so yes I have a folder full of tracks with dates for names

and that folder currently has ~80 tracks in it

where I ran into a block and just aborted it

Simon

Oh, date, that is a better title than "pls".

kalina

well yes, because you can only have one pls

Simon

Yes but then I'd name another one "worthless".

That is the project that I'm working on right now.

The "worthless" project.

Rоry McCune

14:28

@kalina well unless it's case sensitive.... pls PLS Pls pLS PLs pLS etc

Simon

One of them was "meh".

It looks like I name them by my emotions.

Fine, I'll date them from now on but I'll add an empty track at the top with a silly name.

I need to restructure my projects anyway, I'll try to do that tonight.

kalina

I find the chaos approach works better

OH MY THAT SOUND IS DISGUSTING

uses it as a lead

oh it says it's a bassline

that's interesting

continues using it as a lead

sometimes I slap a ohmicide on the master bus for lulz

Rоry McCune

@Simon I thought you were installing kali tonight?

Simon

sets semitones +12

Rоry McCune

(and no that's not a euphamism)

Simon

14:33

@RоryMcCune Nah, next week when I'll reinstall my host OS.

And that'll be after I visit a dealer to get a new ride.

I've been using my donut's car since the beginning of the week.

Jonathan Musso

what are you gonna get Simon?

Simon

Pretty sure I'll be able to get a brz at the price I want.

Jonathan Musso

nice, I like the blue

Simon

Yeah the one I've spotted at a dealer is blue.

Jonathan Musso

handling must be good in that car ya?

or is the WRX better?

Simon

14:41

@JonathanMusso Well, the WRX is AWD and the brz is RWD so that's quite different.

So in the summer, the brz would do better handling-wise but obviously not during the winter.

That's highly a matter of taste too.

Jonathan Musso

ah ok

I thought it was AWD

Simon

That's a fair assumption but it's actually the only RWD Subaru has.

Everything else is AWD.

Jonathan Musso

alright. I've heard good things about the WRX, well, Subaru in general

never driven one before, though

Simon

Gotta be careful with the 2.5L engine, especially the turbo-charged one.

I'd get a 08-14 STi if they were using the 2L engine like they do in Japan.

The 2.5L is known to be extremely unreliable.

Jonathan Musso

14:58

oh really

Simon

Yep. Source: my buddy blowing up 2 engines, me driving one that drains oil (even after getting the head gasket job done, because every single 2.5L will need a head gasket job, too) and the various Subaru communities that I've been involved with.

Jonathan Musso

ah. are parts costly on these vehicles?

Simon

Very.

kalina

not in japan

Jonathan Musso

ok

kalina

15:06

ok

Simon

Pretty sure it's one of the most expensive non-luxury brand.

Parts-wise, that is.

@kalina You wanna wrestle?

kalina

you keep threatening all of this intimate contact and rolling around but I don't believe you have the intention to deliver it

Simon

That is correct.

How many times do I have to tell you that I am practically married?

pls

kalina

you're the one talking about wrestling me into submission

Simon

@kalina Fine, listen to Robo Kitty instead: soundcloud.com/excision/robokitty

kalina

15:09

no

Simon

but pls Excision is love and life.

kalina

I said no

Simon

I got my tickets to see him in February \o/

in b4 mean comment cuz jelly

kalina

please I'm not jelly

my line of work basically grants me free access to any event I wanted to turn up to anyway

Simon

Where did that long-form pls come from?

kalina

15:12

Hi <promoter> it's <artist name> can I come to <your event>?

"are you serious, yes of course you can"

"did you want to play?"

Simon

promoter: "pls who da fuk r u"

kalina

"no I'm coming dressed as an angel"

Simon

@kalina Are you one of those ladies who have angel wings tattoo'd on their back?

kalina

I have no tattoos

Simon

o

M'vy

15:15

Kalinangel. Hmmm...

Lucas Kauffman

just handed in my car, access badge, laptop, credit card and phone

really feels weird leaving like this :p

Simon

@LucasKauffman You've literally given back every single you could use to get dem ladies.

What are you gonna do now?!?!

Lucas Kauffman

@Simon it was all EYs property :o

Simon

o

@Greg Sup Robert Downey Jr.

Greg

15:35

@simon

sup what?

Simon

If your profile picture is you, you look exactly like the actor Robert Downey Jr.

Greg

oh right, yes it is but I don't look like him when not in black and white :)

Simon

Haha, that's highly possible.

Greg

he's a good looking man so I'll take that as a compliment

Simon

Indeed.

kalina

15:39

aside from his good looks, he's also a genius billionaire playboy philanthropist

Simon

Is he?

kalina

OH COME ON

you're not allowed to be nurds and then not know about iron man

I hate you guys, always making me look bad

Simon

I'm wondering about the playboy part you donut.

kalina

there is no recovery from not knowing about GBPP

Genius, Billionaire, Playboy, Philanthropist

►

Greg

coincidently, I'm a GBPP too

Simon

15:45

@kalina pls I don't remember that scene, don't be mad.

@Greg Are you?

Greg

@Simon oh no after reconsidering, I'm not actually any of those.

Simon

@Greg It sounds like you're trying to keep all the goodies for yourself to me.

Greg

just to be clear I don't fly around in a powered suit of armor either.

Simon

I'm not convinced.

Xander

16:04

I want a flying suit of armor. I guess I've just figured out what I'm asking Santa for this year.

Simon

@Xander I'm pretty sure that you're on the naughty list.

Xander

@Simon Boo.

Ohnana

17:10

OMG SOMEONE I WENT TO HIGHSCHOOL WITH IS GETTING MARRIED

whaaaaat the hell

RoraΖ

Been there. Also I've been to about 12 weddings in the last 2 years, and now they're all starting to have kids EWWWW

Ohnana

ewwww

Mark Buffalo

GBPP? What's that? Great Britian Pound Person?

Ohnana

2 hours ago, by kalina

Genius, Billionaire, Playboy, Philanthropist

►

Mark Buffalo

Ah.

@RоryMcCune Welcome back, Soggylad.

Ohnana

17:17

dear santa, please bring me the severed heads of the office team. can you pin their mouths into frowns too? I've been really really good this year! Love, ohnana

2

Mark Buffalo

steps away from Ohnana slowly

Cameron Verotti

@Ohnana Amen to that

kalina

17:57

@Ohnana there is no santa, sorry

the santa is a lie

Ohnana

s/Santa/President Obama

Transcript for