The DMZ

Simon

12:26

Wow, the begueradj asshole had upvoted 3 of my answers?

Lighty

K.

M'vy

I remain unstained

kalina

"unstained"

like some kind of long distance ejacu-cannon

Lighty

but is @kalina unstained?

M'vy

@kalina hmmm...

TildalWave

12:40

@kalina a rocket?

kalina

I'm sure super heating it would increase the staining

plus I'm sure super heating it would also basically be weaponizing it

Simon

Shut top you bunch of nurdz.

kalina

@Simon maybe just once you could start the day with a nice hello, asking how we are, etc

Simon

Every morning I wake up in the hopes that my day will not be overloading with nurdness and then everything gets rekt within an hour.

kalina

you're a software developer, every day you wake up will be overloaded with nurd

Simon

12:43

NO

kalina

100% yes

Simon

I just made a slider that goes to 100% :D

kalina

there's no escaping it

I mean it's not nurd on the same level as being a cryptoanalyst but it's still pretty bad

RoraΖ

@Simon Need to make it go to 11

Simon

pls no

kalina

12:44

@RoraΖ 110% is a bit buzzwordy

RoraΖ

But none-the-less epic

kalina

the correct method is never pushing your gear into overdriving anything

M'vy

Ok. Someone explains me why, with avatar not loaded, I get "loading" in stead of the name of the person talking :s

kalina

listen with the volume at 25% instead

@M'vy a glitch in the matrix

over amplification with over specification equipment, running at low volumes

definitely the way forward

Simon

Lighty

12:47

oof

RoraΖ

@Simon's mom is 100% good at sucking

Simon

prob

M'vy

geez

RoraΖ

Because she's really good at cleaning the house, you know with a vacuum.

Lighty

RoraΖ

12:48

OH SNAP

M'vy

That's fun how people can develop a lot of energy on procrastinating

2

Simon

Arperum

@Simon just got burned by @Lighty. That's quite the burn.

M'vy

over 9000. Legit :)

Arperum

I'm curious as to why over 9000 is always seen as 9001. 3million is also over 9000.

Simon

12:51

M'vy

@Arperum Yeah, but look, there's still place on the slider.

kalina

@RoraΖ I'm not @Simon's mom

M'vy

I'm pretty sure it's logarithmic scale after that

kalina

that's the meanest thing you've ever said to me

Lighty

@Simon oh, but you had to see what 'came' with the card ;)

Arperum

12:52

@M'vy But not that much, that slider goes maybe to 10k at best.

Simon

@Lighty A fake Dutch kid trying to hit on a girl?

M'vy

@kalina wait? what?

Lighty

@Simon Fake? says the offspring of the french civilization

Simon

@M'vy I set the max to 10k on that one.

M'vy

@Simon don't ruin the fun

RoraΖ

12:53

@kalina Didn't imply that you were

Simon

am soz

M'vy

I'm sure the 9001-end scale grows faster than it looks.

it's not linear

Simon

@Lighty If you were a genuine Dutch, you'd be awesome.

Lighty

@Simon I'm a genuine Dutch person, I probably comply to most of the stereotypes

Simon

Ya? Are you a talented musician?

Lighty

12:57

Talented? no, Do I really, really have a passion for making/listening music? yes.

Matthew

@Lighty Clogs?

Lighty

@Matthew Clogs?

Arperum

@Lighty You don't know your own stereotype?

Simon

rekt

Matthew

Lighty

12:59

Stereotype? yes

from 3 centuries ago

Arperum

@Lighty It is still associated. that's a thing with stereotypes, most of the time they are wrong.

Lighty

You can find them in the royal museum in Amsterdam, next to slaves and merchant ships

Simon

Stereotypes have an expiration date?

You should tell the world.

Lighty

@Arperum There is wrong, and then there is 300 years wrong

Rоry McCune

@Lighty old things tend to be stereotypical of a region. I don't as a rule wear a kilt from day-to-day but it's still sterotypically scottish

Arperum

13:01

@Lighty I know. It's not like I haven't ever crossed the border. I frequently go north. And it's only going to increase.

Lighty

@RоryMcCune Now I know how germans feel...

Matthew

@Lighty Apparently, they are still used as safety shoes, and have EU accreditation for that purpose

Lighty

@Matthew Maybe, in the province of Friesland

we dont talk about that, ever

we actually hope it sinks into the sea (and it will someday) and get it over with

Matthew

@Lighty Oh, is it your Cornwall?

Simon

@Lighty As if your stereotype is anywhere as bad as the Germans.

Lighty

13:03

@Simon What a time to not disclose the fact we had the NSB in the netherlands

if someone was fond of snitching, it were the neighbours

Simon

There are literally 157 million definitions possible for NSB, you're gonna have to be a tiny bit more precise.

Lighty

Nationale Socialistise Bond

basicly

nazi's

dutch nazi's

TildalWave

National Socialist Movement in the Netherlands

The National Socialist Movement in the Netherlands (Dutch: Nationaal-Socialistische Beweging in Nederland, Dutch pronunciation: [nɑtsjoːˈnaːl soːʃaːˈlɪstisə bəˈʋeːɣɪŋ ɪn ˈneːdərlɑnt], NSB) was a Dutch fascist and later national socialist political party. As a parliamentary party participating in legislative elections, the NSB had some success during the 1930s. It remained the only legal party in the Netherlands during most of the Second World War. == Party history == === 1931–1940 === The NSB was founded in Utrecht in 1931 during a period when several nationalist, fascist and national s...

Lighty

and we had alot

TildalWave

first result for "NSB in the netherlands"

Lighty

13:05

and we're glad germans get all the shit, and sometimes Italians

because people forget about us

Simon

Exactly, you're getting none of that shit.

Hence why I said your stereotypes are not as bad as the Germans.

Mark Buffalo

0

Q: List of good recommended books

I've found it hard to locate some good sources of info sec / penetration testing books, many of the books available on Amazon for example, even the ones that claim to be "advanced" are pretty basic. Does anyone know of any good books that are both in-depth about why certain exploits etc work. T...

Lighty

Some re just as bad, people just don't know about them

Mark Buffalo

Opinion based?

TildalWave

@Lighty it's a lot more of it everywhere nowadays

people like to blame others for their problems

Simon

13:06

@MarkBuffalo Just flag as off-topic or product recommendation.

TildalWave

> If this is off topic please don't close it, it's really hard to find good resources for security.

made my day

Matthew

I know one of the bad Dutch things. They have a black face Santa type person...

TildalWave

c'mon why is that "bad"?

Lighty

@Matthew Call that bad one more time and I'll give you a lecture why you shouldn't call it bad

well, I'll send you a link

Simon

I did not mean to start a colony war.

Lighty

13:09

Zwarte Piet

Zwarte Piet (pronounced [ˈzʋɑrtə ˈpit]; English: Black Peter or Black Pete, Luxembourgish: Schwaarze Péiter) is the companion of Saint Nicholas (Dutch: Sinterklaas, Luxembourgish: Kleeschen) in the folklore of the Low Countries. The character first appeared in his current form in an 1850 book by Jan Schenkman and is commonly depicted as a blackamoor. Traditionally Zwarte Piet is said to be black because he is a Moor from Spain. Those portraying Zwarte Piet typically put on blackface make-up and colourful Renaissance attire, in addition to curly wigs, red lipstick and earrings. In recent years,...

@Simon Nah, your people had enough of those ;3

Simon

Lighty, you should that I always wanted to go to NL so don't make me book my plane right now to come kick your ass.

Lighty

You, kick my ass?

you going to drool on me?

xD

Simon

wtf.

Mark Buffalo

:( Simon beat me up

Lighty

If you, or anyone here ever visits NL and does get to meet me, I'll buy yah a pint

Mark Buffalo

13:12

Pint of soda? I don't do the whole alcohol thing.

Arperum

@Lighty What if I don't want a pint?

Lighty

@Arperum Then I get you a fristie

Arperum

@MarkBuffalo This.

@Lighty Acceptable. Even though it's been years since I last drank that fake-milk with fake-fruits thing.

Mark Buffalo

@Arperum HAHAHHAHAHAHHAHAHA WHAT A NERD YOU DON'T DRINK ALCOHO--oh.

Journeyman Geek

@MarkBuffalo I don't drink booze either

Lighty

13:13

And if people don't want a Pint, I have other.... Dutch "Stuff" to share :3c

Journeyman Geek

Though I did once bathed in ~~the blood of my enemies~~ beer, kinda by accident.

Arperum

@MarkBuffalo And then you get to laugh when you get to remember them of some seriously stupid thing they did while drunk.

TildalWave

@JourneymanGeek I'm pretty sure you drink something

Journeyman Geek

@TildalWave I have a soft spot for a good ginger beer

Or proper coffee.

TildalWave

well, that can be bought in bars too

Crizly

13:14

hey can anyone recommend any advanced pen test books?

Mark Buffalo

@TildalWave Proper coffee with chicory.

Journeyman Geek

....

Simon

@Crizly Do you understand how broad the term "penetration testing" is?

Mark Buffalo

@Crizly advancedpersistenttraining.com <- offers ways to combat them

Journeyman Geek

@MarkBuffalo Such a thing cannot exist.

Lighty

13:15

@Crizly kali.org

scroll down to Kali Community

Crizly

@Simon Any topic will do, just something more than the basics you find in the books on amazon

Journeyman Geek

@Lighty kali is one of those things that has been annoying me as an SU mod ;p

Mark Buffalo

You know, I went to the book store when I was a kid

Lighty

@JourneymanGeek Why? xD

Mark Buffalo

There was this book, "Hacking for Dummies"

Rоry McCune

13:16

@Crizly FWIW I disagree with the site mods quite radically on no recommendations

kalina

@JourneymanGeek oh come on my contributions on SU are minor at best

Lighty

I like it, fun to break things in the classroom

Mark Buffalo

I opened it, read it, laughed my ass off, and refused to go back

Rоry McCune

@Crizly So for web app testing, I'd recommend The Web App Hackers Handbook

Simon

@Crizly Yes but what kind of testing? There's the Web Application Hacker's Handbook for web but if you don't care about that, that's useless.

Journeyman Geek

13:16

@Lighty too many people without the slightest idea how to use linux thinking they are a 1337 hacker cause they can boot a livecd

Mark Buffalo

all it did was explain what DDoS attacks were, etc. and talk about ftp clients, etc. It had no real substance

Lighty

@JourneymanGeek True, very true

Rоry McCune

@Crizly for background web stuff, Tangled web is good

Matthew

@MarkBuffalo Yes, but in the same series, there is, I believe, "Sex for Dummies", which is causing all sorts of problems...

Mark Buffalo

@RоryMcCune Yeah, actually, I don't mind these questions... but I usually VTC because of peer pressure :(

Rоry McCune

13:17

@Crizly for general software security assessment, The art of Software Security Assessment is a bit old but gets a lot of recommendations

Journeyman Geek

@Lighty I was pissed off enough that I dusted off my sock and superuser.com/a/1040849/10165

Rоry McCune

@MarkBuffalo Fight the Power!

M'vy

@kalina are you in that "the world is all against me"-mood today ?

Lighty

@Matthew referring to Simon's birth as a problem is offensive

Crizly

@Simon I'm just compiling a list of things to read atm

kalina

13:18

@M'vy I'm in that "the world is against me" mood every day

that's standard operation

M'vy

@kalina well, especially today then :)

kalina

that wasn't even a world is against me comment

Lighty

@JourneymanGeek "Ive been asked to FIRST start using KALI....and Bash", as in, first fiddle with tools you prolly don't understand, and then learn something, very essential about Linux? wtf?

kalina

he said kali causes him trouble on SU

I am kali

thus he's saying I'm causing trouble

Simon

Since we're talking about books, did anyone read a good TCP/IP one?

kalina

13:19

which is enough for most people since those people believe I always cause trouble

but I'm not

I'm innocent and I don't cause trouble

Rоry McCune

@Crizly The Shellcoders handbook I've heard good things about

Journeyman Geek

@kalina on the contrary, kali has a pretty essential role in the cosmic balance.

Matthew

@Lighty Nah, no problem with that one. More with the people who stay upstairs in some hotels I've stayed in!

M'vy

Yeah, I got that one. But you're twisting what everyone says here in an attack against you today :P

kalina

sure there was that one time I got into a minor argument with a SU mod about how tag wiki edits don't bump up to the front page

Crizly

13:19

@RоryMcCune Thanks

kalina

and I generally think the site and everybody on it are a bunch of idiots

Journeyman Geek

@Lighty I've seen dozens of folk ask "Why can't I do <basic thing>, in kali"

kalina

their content is ridiculously low quality

Journeyman Geek

and seriously, they need to start at the basics

kalina

nothing gets voted on

Rоry McCune

13:20

@Crizly that lot should keep you busy for a while anyway :)

kalina

nobody is helpful

Lighty

@JourneymanGeek Why can't I hack minecraft with Kali?

M'vy

@kalina hélas

kalina

it suffers from proper full on SO mode user moderating where people read the first line of the question and then vote to close

Journeyman Geek

@Lighty Cause you are a bad person, and deserve a rap on the nose with a rolled up newspaper.

kalina

13:21

and the chat room is full of unnice people

Crizly

@RоryMcCune yup will check em out, tis awful when you pick up a book "advanced penetration testing for highly secured environments" and it starts with port scanning :p

Matthew

@Lighty You can! Hack everything with Kali!

Lighty

@JourneymanGeek 'Twas sarcastic, jeez xd

Journeyman Geek

;p

M'vy

@kalina never went there

kalina

13:21

@Matthew I'm not a big fan of being used for such purposes

Journeyman Geek

You boot into cali, and suddenly

Rоry McCune

@Crizly yeah TBH anything on "general pentesting" tends to be a bit basic at the start, as a pragmatic guide (Although it does start with the basics) the hackers playbook 2 wasn't bad

kalina

I would appreciate it if you all would just back off, stop touching me inappropriately and stop making me probe so much filth

Matthew

@kalina I don't know... Bunch of people running Minecraft as root because they've installed it on Kali... Could be interesting

Journeyman Geek

.....

kalina

13:23

you're a security professional who plays Minecraft?

Journeyman Geek

@Matthew kali runs everything as root?

kalina

how did you justify the installation of Java?

M'vy

running MC on root ?

Journeyman Geek

@kalina least on windows, its self contained now

Simon

@JourneymanGeek The default user is root.

Lighty

13:23

imgur.com/iVHfwLc

Matthew

@kalina No, but I'm willing to watch the carnage

Journeyman Geek

eww eww eww

Simon

Kali is meant to be for testing purposes, not to used as a main OS.

Matthew

@JourneymanGeek Specialist distro, different priorities to normal distros

RoraΖ

Does this vuln have a cool name?

Journeyman Geek

13:24

@Matthew yeah

I don't tell people not to use it

but it should never be your main distro.

And certainly not a platform for learning the basics

Lighty

I began my linux adventure with a raspberry

twas fun

small steps... to hell

Matthew

@JourneymanGeek I tend to run it in a VM, or off a live CD type thing. Either way, no data for it to mess with

Journeyman Geek

lol

@Lighty I dualbooted for years

At the moment lets see

3 windows boxen (main system, older laptop, throw in the bag netbook), 2 linux (a asrock beebox and my third gigabyte brix (had 2 replaced))

rpi's a pain even if you're experienced

the hardware is weak

kalina

I began my linux adventure with a laptop that I stored under my bed

it ran for 400 days and then suffered a major hardware failure and never booted again

Lighty

It's weak, but strong enough to just go screw about

I use IRC daily, and have an IRC Bouncer on one Pi, and an upcoming IRC Bot on another new one

Journeyman Geek

13:27

@Lighty I also keep having my install die

kalina

I used to IRC daily so I used to irssi + screen

Matthew

@JourneymanGeek I use one as a low cost media player, with a USB HDD attached. Works great

Journeyman Geek

nuc class machines are pricier but somewhat more reliable

Lighty

and I even have Retropie on a raspberry pi 2 B

blog.petrockblock.com/retropie

Journeyman Geek

@Matthew which needs a powered hub?

Lighty

13:28

best. thing. ever.

kalina

and then I realized that being on IRC was bad for my health

Lighty

put image on SD, stick in controller, stick in WiFi Stick/ethernet cable, drg n drop ROMS, boom

Journeyman Geek

@kalina many things are

kalina

and instead started moving around various other communities

Lighty

playing n64 on Pi

kalina

13:29

before ending up here

Matthew

@JourneymanGeek No - the HDD has USB out. Power that, and it powers the Pi...

kalina

and this isn't much better

Journeyman Geek

IRC has been found to cause cancer in the state of california....

kalina

but now IRC is deserted

Journeyman Geek

@Matthew ahh, clever

I'm pondering trying to boot my model B off iscsi

but I have no real use for it

Matthew

13:30

@JourneymanGeek It is until the HDD goes into powersave mode. Took me a few tries to get that combination to behave!

kalina

well no because if you need a throwaway PC these days you create a VM

Lighty

Boss has 2 spare Model B's here, I offered him to hook one up to the coffee machine, and mod an Easy Button to send out a bluetooth signal to pie, to start making coffee

kalina

speaking of throwaway pcs

I should throwaway my old pcs

the pile of discarded hardware is getting quite large

TildalWave

tell me about it

Simon

@Lighty You peasants don't have a Keurig?

What bunch of peasants.

Lighty

13:35

@Simon Boss has a Jura, swiss thing

Simon

Hipsters.

Lighty

we have a proud, dutch, Siemens at home

TildalWave

a train?

Matthew

13

Q: How to fill CAPTCHA using automation?

How can I automate, 'Enter CAPTCHA' using Selenium Web Driver ?

automated-testing selenium selenium-webdriver

Lighty

@Matthew wtf xD

Simon

13:36

Even Lighty knows that's dumb.

Matthew

I was going to provide a comment to that link, but I didn't see much point. It was just a perfect moment...

kalina

@Lighty proud dutch semen?

Matthew

@kalina And you accuse us of bringing the tone down...

kalina

I have no idea what you're talking about

#bored

#thischatisquiet

#chatkiller

M'vy

not that much

Rоry McCune

13:42

@kalina when is it you're escaping the land of cold and children again?

M'vy

@TildalWave I like trains

CodesInChaos

@Matthew Considering the progress of computer vision over the last couple of years, I expect computers to become better than humans at solving CAPTCHAs soon (if they aren't already).

kalina

@RоryMcCune sometime at the weekend

CodesInChaos

Or just outsource the CAPTCHA solving to a low wage country.

Matthew

@CodesInChaos Vision? I can't see that helping with some CAPTCHAs I've seen...

Rоry McCune

13:49

@kalina so some days left. don't forget to give the kids loads of sugar just before you go.

Matthew

@CodesInChaos That doesn't really help with automated testing though

CodesInChaos

@Matthew It slows down test a bit, yes, because humans have high latency.

kalina

just outsource all of your automated testing to a low wage country

Matthew

@CodesInChaos Damn humans...

kalina

then you don't need to worry about the high latency of the captcha completion

RoraΖ

13:52

Is it me or is this answer a little too tin foil hatty

2

A: Layman's explanation of encryption backdoors

There can be many ways of having encryption backdoors. A weak standard can be intentionally chosen due to political influence, the algorithm can be tweaked to weaken a official implementation, some implementations can have intentional flaws, lateral ways of getting in, creating man-in-the-middl...

CodesInChaos

Humans are unreliable. When solving CAPTCHAs I can easily tell when they fail. For QA I can't.

kalina

FOR FUCKS SAKE

he used code spans for random words

I'm going to have to edit that post now

Lighty

@RoraΖ "A weak standard can be intentionally chosen due to political influence" tinfoilhat confirmed

CodesInChaos

@RoraΖ ARGH that formatting. Indent the quotes properly, they're part of the list element.

Lighty

@kalina you're the hero we don't deserve, but the hero we need

Matthew

13:53

Many answers involving backdoors or other hot topics are tinfoily

RoraΖ

@CodesInChaos Yeah it makes my eyes bleed

Rоry McCune

@kalina don't forget to leave an update comment referencing filthy SE casuals mis-using markup

Matthew

@RоryMcCune Or just put lots of invisible new lines in it, so they can't revert manually!

CodesInChaos

Ignoring the issue that backdoors are EVIL, I'd like to see a protocol that prevents passive sniffing by the backdoor key-holder, allows them undetectable active interception and is auditable (the backdoorer can prove that they only intercepted a limited amount of connections/users without revealing all their targets)

RoraΖ

@CodesInChaos can you give a theoretical example? I'm not sure I follow

CodesInChaos

13:59

@RoraΖ I don't know an example protocol, but if seems like it should be possible using some kind of zero-knowledge proof to me and a certificate-transparency like third party for the auditing.

RoraΖ

I mean how it would be used

Not necessarily an actual protocol

Transcript for