The DMZ

Mark Buffalo

14:00

@AviD About 2kg

CodesInChaos

But since I was rather young at the time, I doubt that I'd remember anything, even if I had lived in Berlin.

AviD

@MarkBuffalo nobody sensible does

Ohnana

@CodesInChaos bavaria is a nice area

Mark Buffalo

@AviD "Name" would be a placeholder for the name of the variable.

Simon

@CodesInChaos Oh ok. I read a book where they explained briefly the whole East/West thing,

@CodesInChaos Ah, right.

AviD

14:00

@MarkBuffalo "a php-full of coke" ;-)

Ohnana

great sausage and pretzels :D

AviD

@MarkBuffalo ohhh

Mark Buffalo

@Ohnana Is that your breakfast?

Simon

I really want to visit Berlin now.

Ohnana

@MarkBuffalo no, i had derpbucks

AviD

14:01

I thought he was naming his variable "strName", for yknow, holding a name.

CodesInChaos

@Ohnana Sausage is only good in some parts of bavaria ;)

Mark Buffalo

@AviD No, he puts the types before the name. lol. LOL. Laugh OUT lOuD!! LoL!!!

Barry Carlyon

What kind of coke though…

AviD

though seeing as its PHP and #Simon, strName could very well be holding a pointer to an internal structure that defines a complex workflow.

Mark Buffalo

@Simon Regarding your earlier code, does it use the same database?

Simon

14:03

No, I went for 2 source.

Mark Buffalo

2 different source codezors?

AviD

@Simon 2 source, 1 coder.

Ohnana

@AviD stop

AviD

lol

Mark Buffalo

@AviD I don't get it.

AviD

14:04

hey I heard there's a party goin on, do you have any lemons? ;-)

Mark Buffalo

@AviD Can you explain this joke?

Simon

ovid

Your daughter could be reading this chat.

4

Mark Buffalo

@AviD ...it must be something sick like this. I get this one. And I hate you now.

AviD

@MarkBuffalo heh, I almost didnt get that you were kidding.

Mark Buffalo

I wasn't kidding. I don't know what it is

AviD

14:05

@MarkBuffalo ohh hahaha

Mark Buffalo

And after you mentioned lemons, I don't want to know

Simon

@MarkBuffalo Are you an Internet virgin or something?

Mark Buffalo

@Simon I managed to avoid that one, and the waffle one.

AviD

@MarkBuffalo actually, its not as bad as that one.

Ohnana

1 min ago, by Ohnana

@AviD stop

AviD

14:06

10 secs ago, by Ohnana

1 min ago, by Ohnana

@AviD stop

Simon

8 secs ago, by AviD

10 secs ago, by Ohnana

1 min ago, by Ohnana

@AviD stop

Ohnana

o lawd incoming chat aboose

Mark Buffalo

"Site wants to know your location" FFFFFFFFFFFFFFFFFUUUUUUUUUUUUUUUU

IN DOJ'T WANT TO SHAREW RTI

AviD

@MarkBuffalo oh! do you speak wookie?

Mark Buffalo

If I were dead, I'd be rolling in my grave right now because of how little privacy is considered in this country now.

Ohnana

14:07

quickly have a stroke

djfksdjfkdlsljdf

Simon

CHEEEEEEEEEEEWWWWWWWWWWWW

udoufhdsofiosdof

Mark Buffalo

joins the seizure party

sklflewrkwkdfslkmmf234esdf

Simon

You started it you pony.

Mark Buffalo

No, I wasn't seizing. I was aoeing down the keyboard. You ponies started doing that.

Simon

Facerolling >

Mark Buffalo

14:09

Yup

Facerolling.

teslamotors.com/modelx

Jonathan Musso

When using Google Hacks and Recon-Ng, is it best to time your searches so you don't get banned?

Simon

Definitely not an exciting design.

And those doors are horrible.

Mark Buffalo

Need to see if I can fit in it

Ohnana

biohazard defense mode

are we for real right now

Mark Buffalo

If I can fit, I'm buying it

Simon

14:12

Huh?

Mark Buffalo

@Ohnana Huh?

AviD

okay, now I want one. its big enough for my family. Must to have.

Simon

ovid pls it wouldn't fit in your pyramid

Mark Buffalo

@AviD Yeah, hope it's big enough for me

AviD

@Simon duh, you park it outside to charge.

Ohnana

14:17

the tesla X has a bioweapon defense mode that uses positive pressure to protect the occupants

AviD

or drive it up the side.

Ohnana

who needs that in a fuckin car

Simon

@Ohnana o

AviD

@Ohnana wat

Mark Buffalo

@Ohnana That's... need.

AviD

14:17

@Ohnana I MUST HAVE THIS BIOWEAPON

Ohnana

look at the webiste

Simon

You got me scared for a sec thinking that wherever you are was in defense mode.

Mark Buffalo

@Ohnana Uh.. I need that... for reasons.

Ohnana

@Simon lol no

Simon

Sounds like Americanos are expected to be bombed soon.

AviD

14:18

It will go great with my missile-protected underground evil lair.

Simon

Or they just want to drive through Chernobyl.

Ohnana

actually, come to think of it, government officials would like that

Mark Buffalo

> There are three modes: circulate with outside air, re-circulate inside air and a bioweapon defense mode that creates positive pressure inside the cabin to protect occupants.

Yeah, I need that.

AviD

I couldnt find the price tag

Mark Buffalo

Ever since watching that Batman movie with the Joker, where the gas gets in the vehicles and kills people hiding in the cars, I've never felt safe.

Ohnana

14:19

if you have to ask...

AviD

or is this one of those "if you need to check the price, you cant afford it".. .

Mark Buffalo

@AviD Supposed to be similar to current SUVs on the market. 50-100k.

Add like 145% because of Israeli tax markup

Simon

I don't know what kind of SUVs you buy to pay 50k+.

AviD

@MarkBuffalo okay, so triple that here, assuming I can get it at all

Mark Buffalo

;)

3 inches less leg room in the model x than the fusion hybrid

:|

AviD

14:24

I must say that, as brilliant and entertaining as he is, Elon Musk is not a great speaker. He doesnt have much poise or presence.

Mark Buffalo

He's also an extreme asshole

Simon

Is anyone gonna say it or I gotta do it once more?

@AviD You're a poise.

Journeyman Geek

@AviD That's what I find odd about him

AviD

@MarkBuffalo or the opposite of that

Journeyman Geek

He's suprisingly good for someone who totally is ill at ease.

AviD

14:25

@Simon you mean posse

Mark Buffalo

@AviD He's a huge asshole to his employees, apparently.

Simon

"He's an asshole!"

"Apparently"

Mark Buffalo

But you kinda have to be

Rоry McCune

@MarkBuffalo heh, I was just thinkgin about this. I think (and would need work to confirm) that it might, as IIRC the affected component is one which isn't namespaced, so if you affect the container you affect the host. with that said it would require research to confirm whether that's the case or not. For example it could be than a syscall that's used is blocked by the container security policy which might either make the exploit harder or impossible

Mark Buffalo

Because there's no room for incompetence, and a lot of people are used to that.

AviD

14:26

@MarkBuffalo I heard the opposite. Ridiculously demanding, sure, but not berating and belittling like e.g. Steve Jobs.

Mark Buffalo

@RоryMcCune Interesting

AviD

and treats them well overall. He wants the best, and is willing to pay for it (and thats not just salary)

Ohnana

"not like steve jobs" is the lowest bar for management i've ever heard

AviD

@JourneymanGeek he's good because of what he's saying. Not how he's saying it.

Mark Buffalo

Lol

AviD

14:27

@Ohnana heh. true, but I meant as in "the opposite of that"

Journeyman Geek

@AviD he communicates

He's no steve jobs, or even adam savage.

AviD

yeah, that is very true.

Journeyman Geek

But he's clearly passionate about what he's doing

Steve Jobs is super super polished

AviD

he talks like he's telling you stuff. Not like he's presenting on stage in front of thousands.

Journeyman Geek

Savage is like a kid.

yup

AviD

14:29

he's also surprised when people get excited about something, but then he'll also just keep talking about boring statistics when they are bringing out a thing of beauty on stage.

Mark Buffalo

I suck at talking like Musk does

AviD

oh hell that car is cool

Mark Buffalo

@AviD Good to hear a different perspective

@AviD Model X, right?

AviD

@MarkBuffalo yeah, watching his launch video

though I guess for him "launch" could mean something different

Mark Buffalo

$79,900 for the Model X

$69,900 on the low end

but the $7500 tax credit thing is nice too

AviD

14:32

hmm quite a bit pricey. but not ridiculuosly so.

Simon

ovid pls you make 3 dollars a year

And that's Canadian dollars.

AviD

@Simon 6

Mark Buffalo

@AviD It's what I pay now for 2 cars

Simon

lolmong you pay for your wife's car

Mark Buffalo

Yes? She doesn't work.

Simon

14:34

olawd

AviD

@Simon as opposed to what?

Simon

As opposed to not paying for her car?

Mark Buffalo

She doesn't have to. She takes care of our kids.

Simon

I always have to explain everything to you, ovid.

Mark Buffalo

That's really hard work

AviD

14:34

@Simon he == she

doofus

Simon

@MarkBuffalo Some would say that she's a stay-at-home... pony.

pls

@AviD wat

I don't know what language you're coding in but my languages would return false.

AviD

@Simon your languages suck

Simon

shush

AviD

if I say "I am paying for 2 cars" I would mean "we are paying for 2 cars"

Simon

If we ever do an InfoSec.SE meetup, I'm gonna wrestle with both of you ponies.

AviD

14:38

@Simon I wouldnt give you the satisfaction.

jeez man this model x is like the iron man of SUVs.

Simon

@AviD Because your wife doesn't have her own identity? Wow, wait until I tell all the feminists that you follow.

Mark Buffalo

@Simon You can try.

AviD

@Simon wow, except the opposite

are you familiar with the concept of partnerships?

Simon

ovid stop thinking that I'm serious pls

Mark Buffalo

@AviD He's a degenerate rabid feminist that hates men, including himself. :8(

AviD

14:41

@MarkBuffalo o_O

Simon

I wish I had ponies.

Mark Buffalo

I eat ponies.

AviD

you guys just keep making more work for me.

Simon

If only I had edit rights, I'd totally edit all your posts, ovid.

@RоryMcCune Hey roro, make me a room pony pls.

There's a missing space.

Ok, thanks.

AviD

yknow soon I'm gonna get tired of using ponies. Then it gets worse for you.

Simon

14:45

Is it gonna be armadillos?

AviD

lol

Simon

Server Manager (Not responding)

Been on a Windows machine for less than a minute and I've had enough for the day.

Ohnana

ooh are we divining our bigotries from unconscious word choice

i love this game

Mark Buffalo

@Ohnana Feminazi*

I didn't mean to paint actual feminists with a bad brush. I do believe in equality... unless I'm involved, then I think I should be more equal.

AviD

@Ohnana are you talking about me or him

Journeyman Geek

14:49

lol

AviD

@MarkBuffalo almost edited that for you, then realized you meant it ironically.

Mark Buffalo

@AviD Yeah

AviD

close

Mark Buffalo

@Ohnana i.imgur.com/pQ2VhDn.webm

Ohnana

@AviD i'm talking to whoever it applies to :)

@MarkBuffalo pretty soon i'm going to need blood pressure meds

Mark Buffalo

14:52

@Ohnana lol

Simon

Can anyone confirm that CVE-2016-0777, CVE-2016-0778 are affecting clients only?

There's nothing to patch on servers, right?

Mark Buffalo

@Simon Is this the recent SSH stuff?

Simon

Yeah.

Mark Buffalo

Yeah, it's just the client.

Servers can exploit the clients

qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/…

AviD

@MarkBuffalo I... I don't see how that's a party.

No lemons.

Bazinga.

Mark Buffalo

14:57

@AviD Do you want to get shanked? Because this is how you get shanked.

AviD

heh.

yeah, I should be harrassing @Simon, not you.

Simon

Yeah but Markus is so easy to harass, we can't blame you.

AviD

Arguing with @Simon before... It was like playing chess with a pigeon.
The pigeon knocks over all the pieces, sh*ts on the board, then struts around like it won the game.

Simon

ovid pls that's arguing with you.

AviD

see

Simon

14:59

You're like "u wot m8 censors posts"

Mark Buffalo

@AviD If you want, we can team up.

@Simon pls, I enjoy it.

Simon

An employee currently manages to crash an ESX server by doing something in one of the VMs.

That is not good at all.

Mark Buffalo

Sounds like a bug / faulty hardware

Ohnana

@Simon rekt

Mark Buffalo

@Ohnana Wait, because of anger? Or because of laughing too hard? :o

Ohnana

15:07

@MarkBuffalo rage. also giggles sometimes

Mark Buffalo

:8( I made you ragecake with a minor giggle?

Ohnana

other people make me ragecakes

they are not delicious

also that .gif did make me laugh so

Mark Buffalo

haha

Who is enraging your cakes?

Ohnana

people who are bad at life

Mark Buffalo

Am I bad at life?

....don't answer that lol

Well I hope you feel better later

AviD

15:12

@MarkBuffalo ymean halflife?

Mark Buffalo

No, I

Simon

@AviD lulz

Ohnana

@MarkBuffalo dear lord man it was a joke

i'll live

Simon

usure

Ohnana

if nothing else, I'll have plenty to snark on for a loooong time

Mark Buffalo

15:14

Now I'm confused as all hell

Ohnana

sucks to be you

Mark Buffalo

Lol

So does anyone in here own property?

Ohnana

define "property"

Mark Buffalo

Women, children

No, like houses that they rent out, etc.

Ohnana

@MarkBuffalo hue. no, i rent

Mark Buffalo

15:16

I found a neat house... 6 beds, 2 bathrooms

but it's a multi-family home

Was thinking of renting out the other one, as it would pay for the entire mortgage

Ohnana

renting shit is hard

laws are weird, and people are dumb

Mark Buffalo

yeah, it's in a good area, though. very good area

and usually you can go through a property management agency

Ohnana

i'd get the help of a pro, yeah

Simon

You're a pro ohnuhnuh

Rоry McCune

15:36

brave.com <-- could be interesting

schroeder

15:51

@Adi YES! Publishing to Kindle was more difficult than I imagined, so there will be a couple week delay.

I wrote the whole book in LaTeX, but the conversion to epub or mobi is tricky

Simon

@RоryMcCune I don't trust Yan Zhu.

Mark Buffalo

@RоryMcCune Thanks. Looks good.

Ohnana

@schroeder oh yey. i think i'll get the kindle version. will it be competitively priced compared to the paperback?

@RоryMcCune aw shit it's integrated with HTTPS everywhere

i love it

Simon

nou don't

Ohnana

@Simon why?

yan is a smart person

she used to work for the EFF and shit

Simon

15:55

You know her?

Ohnana

i follow her on twitter

Simon

I totally just picked a random name in the list and said I didn't trust the said person.

o

Ohnana

one of the highlights of my infosec list

Rоry McCune

@MarkBuffalo based on l3net.wordpress.com/2016/01/20/… and github.com/docker/docker/blob/master/docs/security/seccomp.md it looks like docker + seccomp filters won't be vulnerable as the appropriate syscall is blocked, however without seccomp (which IIRC ain't active till 1.10) it might be , although I reckon you'd need a custom exploit for breakout :)

TildalWave

star wall is ... disturbing

Rоry McCune

15:57

running the basic exploit in a container doesn't barf but it also doesn't do much as it's for privesc to root from an unpriv user rather than breakout from a container

Mark Buffalo

@RоryMcCune What about host operating system with docket containers?

Simon

@TildalWave None of my fault this time for real.

Mark Buffalo

Docker

Rоry McCune

@MarkBuffalo well if you're on the hostOS of a docker system it's just like any other Linux box

if it's vuln. it's vuln

TildalWave

@Simon I see :)

Rоry McCune

15:57

docker is just a service like apache that runs on the host

Mark Buffalo

@RоryMcCune That's what I thought

Rоry McCune

@TildalWave yeah this one is nowt to do with me either, no pins are present.

Ohnana

so a breakout is theoritically possible at this point

Simon

@RоryMcCune You could pin my ween.

Rоry McCune

@Ohnana possibly, depends on exactly what you get with the exploit, but in general linux kernal root level exploits allow container breakouts if not filtered

that's one of the diffs between containerization and virtualization, the attack surface is bigger

Ohnana

15:59

interesting

Rоry McCune

which is why if you want better isolation virtualization is still a better option

Ohnana

@TildalWave hue

TildalWave

?

Ohnana

@TildalWave lololol

Simon

79

A: Was Aragorn's claim to the throne legitimate?

TL;DR Version: Yes, it was almost absolutely, without question, certainly legitimate, and in any case, there were no other potential claimants to compete with him. Aragorn's claim isn't as strong as one might wish for, but it is unquestionably legitimate. And besides that, he has something his...

Look at the length of this answer, dayum.

TildalWave

16:10

so much time wasted

> almost absolutely, without question, certainly...

Simon

lulz

Ohnana

that deserves the "too much effort" badge

TheJulyPlot

16:29

@Simon that is possibly one the best answers I have even seen on any SE.

Barry Carlyon

The world of Tolkien is so fleshed out that, that sort of answer is easy to do when you are into it.

TheJulyPlot

I've always liked the idea of really investing a lot of time getting into something like the lore of Tolkien, but I just cant get over the futility of it.

Adi

@schroeder That's what you get for using LaTeX and being a NUUUURD

4

Rоry McCune

@Adi there's Nurdy and then there's using LaTeX to write a book Nurdy!

Barry Carlyon

NURDS!

David Freitag

16:42

@Simon Yeah they're pretty awesome

How many apple devices have thunderbolt ports?

@NaftuliTzviKay Yes but of all the computers I have not one single one has ever had a thunderbolt port. I guess that makes most Apple devices more inherently unsafe. — David Freitag 8 secs ago

huehuehue

Mark Buffalo

Sweet, we all got to work from home today

TheJulyPlot

@MarkBuffalo I love "working" from home!

David Freitag

@MarkBuffalo Yeah but only because your cars are hopeless

@TheJulyPlot I'm not a big fan of working in my birthday suit

Mark Buffalo

@DavidFreitag Got it fixed for real this time

TheJulyPlot

@DavidFreitag there is nothing better than your commute to work being nothing more than pulling a pair of pants on and making a 10 second walk from bed to desk

David Freitag

16:57

@MarkBuffalo And yet you keep saying that...

Mark Buffalo

And I'll likely seek damages against uhaul for destroying my stuff.

@DavidFreitag They found the root issue

David Freitag

@TheJulyPlot Why do you need pants if you're working from home?

2

Mark Buffalo

I'll believe them this time

David Freitag

@MarkBuffalo And presumably fired him?

TheJulyPlot

@DavidFreitag Windows and bum sweat on seat

David Freitag

16:59

@TheJulyPlot Exactly, I prefer not to work pantless

But if I work from home I'm obligated to

Mark Buffalo

phys.org/news/…

Thienth.

TheJulyPlot

@DavidFreitag suppose it depends on the job

David Freitag

@TheJulyPlot Nah, not really. If I'm able to "work from home" that essentially means I have a desk job. In every case I'd be obligated to work the day in my birthday suit

Mark Buffalo

We're allowed to work from home if sick, or if we have a series of appointments

David Freitag

What about a series of disappointments?

TheJulyPlot

17:02

@DavidFreitag I think you need to renegotiate your contact if that is an obligation

@DavidFreitag or at least ask for a raise

David Freitag

Money has nothing to do with my unfounded hatred for pants

Mark Buffalo

@DavidFreitag You're a series of disappointments.

David Freitag

@MarkBuffalo You've been talking to my mother again, haven't you

Mark Buffalo

:(

I am joking.

I always feel bad when I joke like that

RoraΖ

@DavidFreitag Who doesn't "talk" to your mother?

JukEboX

17:19

Hello\

Mark Buffalo

17:29

@TheJulyPlot Good question. Answering it now

Everyone else is dead wrong

David Freitag

@MarkBuffalo Haha I was kidding

Mark Buffalo

No I mean his post

7

Q: Is the BBC’s advice on choosing a password sensible?

In this article on the BBC’s website they offer advice on how to develop a password. The steps are as follows. Step 1: Choose an artist (a recording artist I presume) Lets choose as an example case study the teen idol and all round bad boy Justin Bieber.* Step 2: Choose a song. (The cat...

This BBC idea is horrible

and I'm going to show why

David Freitag

@RoraΖ I suppose anyone who doesn't test positive for some kind of terrifying venereal disease.

AviD

@MarkBuffalo oof anybody wanna take the time to go flip some tables on that?

@MarkBuffalo ah good man.

while you're at it, find the right duplicate, willya?

Mark Buffalo

I won't even flip tables

I'll write a program that will crack it

Lol

AviD

17:32

@MarkBuffalo dont need a program, just need a dictionary.

Mark Buffalo

Like a cracking application with rainbow tables?

AviD

if you really wanna go all out, show some stats on how >70% would choose the same set of 100 songs.

@MarkBuffalo well the programs exist, like e.g. John the Ripper - you just provide the dictionary.

Mark Buffalo

well I wanted to challenge myself

not be a script kiddie

@AviD Check my reply

@AviD I'm all for supporting the NSA in most things, but I take offense to intentionally weakening standards. Weakening standards is a national security risk... purposely introducing flaws that enemies can exploit is a huge no-no.

If something like this becomes standard, then it's bad news bears for federal contractors who are forced to adopt insecure standards

And you don't even need xkeyscore for this, if you can breach a major advertising company, it's bad news bears.

I also think correct horse battery staple is stupid as well

David Freitag

17:51

@MarkBuffalo There's a difference between not being a script kiddie and wanting to reinvent the wheel at every chance you get

@MarkBuffalo Of course you're in support of the NSA, can't very well go bad mouthing your employer

Mark Buffalo

@DavidFreitag Lol, if I worked for the NSA, I'd be fired for the posts I made on secse

David Freitag

@MarkBuffalo No, that was a cleverly crafted piece of misinformation to throw everyone off the trail.

Mark Buffalo

DAMMIT DOVID

TheJulyPlot

@MarkBuffalo once again I need to compliment you on your excellent answers sir. RE: the password answer.

David Freitag

And I say "cleverly crafted" because we all know you didn't write it.

Mark Buffalo

17:55

It's not just the government you need to worry about

And actually, you generally don't need to worry about them. It's the fact that there are data trails everywhere, and plenty of evil marketing companies that will sell your data down the river the first chance they get.

David Freitag

@MarkBuffalo I prefer to keep my head buried in sand anyway

Mark Buffalo

Same

David Freitag

@MarkBuffalo AdBlock + Ghostery. I think I'll be fine.

Simon

Your mom + your dad

David Freitag

@Simon = a big fight

Simon

17:57

o

David Freitag

Hatsune Miku - Senbonzakura (Frontliner Remix) [HQ Free]

►

Simon

o lawd

I'm scared of the Hentai title.

David Freitag

Haha, you probably won't like the vocals

But damn fine hardstyle track

Transcript for