The DMZ

Mark Buffalo

04:44

theintercept.com/2016/02/19/…

> Republican presidential frontrunner Donald Trump is calling for Americans to boycott Apple products until the tech giant complies with a court order and helps the FBI hack into San Bernardino killer Syed Farook’s iPhone.

What a joke.

AviD

07:20

@MarkBuffalo Tech industry frontrunner Apple calls for Americans to boycott the Republican party until the politicians comply with common decency and get rid of that parody of a human being, Donald Trump.

AviD

07:37

Also, Apple is considering calling for all Americans to demand the FBI is dismantled, in order to protect all US citizens.

M'vy

08:17

heya

AviD

08:35

OutKast - Hey Ya!

►

Arperum

08:45

password length limits are the worst. Same goes for limiting the list of acceptable characters. ESPECIALLY COMBINED.

M'vy

One day I'll watch it @AviD. I promise. One day.

AviD

@M'vy I'm hoping to make this be the new rickroll. It's a lot more annoying.

M'vy

@Arperum the best is, telling you one at a time.

AviD

@Arperum oh and dont forget case-insensitivity.

M'vy

Your password is not long engouh.

Adds 2 characters

AviD

08:49

@M'vy no, the best is asking for one character at a time.

M'vy

Your password needs numbers and letters

Adds numbers

Arperum

@M'vy It told me I was violating both rules. But only because I was actually violating them.

M'vy

You password noeed upper and lower case

AviD

@Arperum WHO WERE YOU VIOLATING

M'vy

Adds Upper and lower case

You need at least one special character

rage quits

Arperum

08:50

@AviD THE RULES

M'vy

I won't fall for this obvious starbait

3

Rоry McCune

Mornin' all

Arperum

Bonus "I hate you" moment: "This server does not support FTP over TLS". debates sending a complaint

Colin Cassidy

Morning DMZ-ers

Rоry McCune

collllllllllllliiiiiiiiiiiiinnnnnnnnnnnnnn

:)

Colin Cassidy

08:58

RORRRRRRRRIIIIIIIEEEEE!!!!!!!

how was day 2 of securi-tay?

Rоry McCune

@ColinCassidy yeah not bad, my talk went ok (unfort. the person on before me overran which meant I had to rush a bit) some other interesting talks

and I left before things got messy at the afterparty (if reading the twitter hashtag is anything to go by)

Colin Cassidy

I can only imagine

Matthew

Must change password

Rоry McCune

@ColinCassidy the word "sharting" was mentioned...

Colin Cassidy

0_o

Rоry McCune

09:05

exactly

Colin Cassidy

you sure it wasn`t a typo for sharding? but then again, given the group...

Rоry McCune

So just been asked to show my pants because someone sharted and left them in the toilet #SecuriTayV

Tweeted by IrnSec on February 27, 2016 at 10:30 PM

I'm not sure if "sharded" would be better in that context

Arperum

@RоryMcCune What the fuck.

Rоry McCune

@Arperum it was from the after-party at Securi-Tay... some students apparently imbibed a bit too freely of the free bar..

well and/or had a dodgy pizza

fortunately (for me) I wasn't there

Arperum

Or she/he got sick or whatever. but that's not a good enough reason to go around asking people to show their pants I would think.

Rоry McCune

09:11

@Arperum yeah the drinks were in a student union, so perhaps they're more accustomed to that kind of thing...

I wouldn't have thought the request would go over well in most bars.

Arperum

@RоryMcCune I do not remember having to show my pants at any point during my studies.

Colin Cassidy

students + free-bar = interesting tweets. Nice that they now all post it for permanent public record :)

Rоry McCune

@ColinCassidy with the hashtag and everything, so you can find it easily!

Colin Cassidy

at least he gave the impression that he's the innocent one...

Rоry McCune

aye none of them were confessing to it, that's for sure

Arperum

09:13

And they clearly didn't find the poor sucker. Or it would have been posted.

Rоry McCune

@DavidFreitag new RasPi Details element14.com/community/docs/…

Journeyman Geek

That has me interested

AviD

@Arperum no, that's actually a good thing.

FTP over TLS is generally recognized as sucky.

Arperum

@AviD Why is plain FTP better?

AviD

@Arperum its not.

SFTP is better.

Arperum

09:21

@AviD I'm forced to use plain FTP. Plus bad password practices.

AviD

see, so thats the bad part.

AviD

09:37

BLOODY HELL DAMN HIPSTER FRAMEWORKS

oh sorry I mean middleware

so, pop quiz - in node.js, what is the most direct way to read the POSTed parameters? Without any high level frameworks.

Anybody? Anybody? Anybody? Bueller?

No.
Nope.
Nuh uh.
That's wrong.
Also wrong.

Correct answer: YOU CAN'T!!! w000t!

well that is, you can open a stream and read bytes directly from the socket.

and NO I'm not writing node.js now, I'm just trying to find a simple code pattern.

simple, in any real language.

Matthew

@AviD I think you install a low level framework, then install a high level framework, then install 30Mb of support packages, then you can do it

AviD

In node.js - it's cool, see you just install 'body-parser' middleware, on top of expressjs, on top of connectjs, and you can call the body parsing methods, and... bleurgh

@Matthew ah, I see you are experienced.

but note I did see without frameworks.

Matthew

@AviD No, you said without any high level frameworks. Didn't explicitly rule out low level ones!

Colin Cassidy

@AviD The amount of framework required just to get a framework up and running, you'd think that someone is trying to set themselves up for a life of high paid consultancy

AviD

> "then install a high level framework"

yeah that soudns about the level of nodejs logic....

@ColinCassidy hehehe ya think?

Matthew

09:45

@AviD Well, once you've installed a low level one, might as well go the whole hog...

AviD

i.e. the Red Hat model.

Matthew

Can you run PHP as a Node.js module?

AviD

@Matthew this circular logic is making me dizzy.

@Matthew probably.

npmjs.com/package/php

npmjs.com/package/express-php

Matthew

@AviD In that case, install PHP as a node module, then use $_POST['param']

AviD

npmjs.com/package/php-js

the 2nd one is best because it uses the most frameworks

@Matthew pffft

point is I am trying to find the simplest code, without any addons.

I say screw it, I'm going with GET params.

even though that is an antipattern in itself (in this context)

Colin Cassidy

09:47

apt-get uninstall node.js

2

Rоry McCune

@AviD HERETIC

Colin Cassidy

doesn`t get simpler than that

AviD

@ColinCassidy Step #1 of debugging a nodejs app.

Rоry McCune

@AviD apt-get install ASP.NET5

AviD

@RоryMcCune heh does that work?

Rоry McCune

09:54

@AviD maybe not quite that yet, but they're getting there

diagprov

@AviD I see you are embracing your inner hipster and writing node.js.

AviD

20 mins ago, by AviD

and NO I'm not writing node.js now, I'm just trying to find a simple code pattern.

hey hey no starring NO STARRING THAT

Rоry McCune

@AviD pls ovid, there's no need to be ashamed of liking Node.JS... well may be a little

AviD

@RоryMcCune oh totally agree

I bet @CodesInChaos would like node.js though, you get to implement every single little part of the pipleline.

CodesInChaos

@AviD You missed my point.

I'm perfectly fine with using the OS implementation of TCP by default.

AviD

10:05

oh yeah, node.js doesnt have the concept of default.

CodesInChaos

But it should be in user mode. And you should be able to override it, both as application and as admin.

AviD

I'm actually not even kidding - a few functions have certain parameters defined as having a default value, but this default is deprecated. There is literally no defaults.

@CodesInChaos heh, you caught my subtle reference from like days ago :-)

diagprov

@AviD Why would you not want to write post-data parsing code Every. Single. Time. you need to read Post data? :)

AviD

also, @diagprov declared the room in #hipstermode, so nothing should be taken seriously and everything should be an insult.

diagprov

This way, every single node.js app that handles POST parameters will do it differently, with variable levels of quality.

AviD

10:08

@diagprov for the record, you need to do that with querystring data too. Just that there are simpler libraries to help with that, without having to go full on infinite-framework-stack.

@diagprov well, no, thats why you have all the frameworks.

CodesInChaos

@AviD For one of my projects I'm planning to use a http server written in C# instead of the built in http.sys.

AviD

also, I hate typing "framework". something about the e and w, always messes me up.

CodesInChaos

Since http.sys requires admin privs to set up, conflicting with copy deployment.

AviD

@CodesInChaos I can imagine some scenarios where that is sensible. Rare, but possible.

diagprov

@AviD I suppose in fairness node.js is just a way of running js on the server, much as python can act as a cgi. There are other frameworks on top for abstracting http.

AviD

10:10

@CodesInChaos not just http.sys, but binding to wellknown ports.

@diagprov I'm not getting in to this with you, maaan.

CodesInChaos

@AviD In that case I don't need a well known port, since the only consumer will be an integrated browser window on the local machine.

AviD

ah.

CodesInChaos

But AFAIK http.sys requires admin even for high ports.

AviD

so even for that http.sys would still need admin?

CodesInChaos

I think so. If I'm wrong, then switching to http.sys would be an option.

AviD

10:12

are you sure? I really think its only about the ports.

@CodesInChaos sounds simpler... there is quite a lot that can go wrong if you're parsing HTTP yourself... as you well know...

CodesInChaos

@AviD I'd use an existing C# http server.

AviD

@CodesInChaos ahh I misread that as you are implementing it yourself.

still, I would assume it implements a subset of full functionality, likely the specific subset that meets your needs...

CodesInChaos

I just need a way for a html+js frontend to communicate with a C# backend running on the same machine/user.

Some pretend-REST json based API.

AviD

sounds like WebAPI would be great, if a bit overkill

ohh this is nice.

prepare yourselves - for I am about to delve in to the lovecraftian horror that is... CryptoJS!!

CodesInChaos

Not a big fan of Microsofts WebAPI/MVC frameworks, but I'll probably use whatever WebAPI version comes with ASP.NET MVC 5.

AviD

10:21

@CodesInChaos I think they're awesome.

not without their own issues, mind you, but still rather great.

CodesInChaos

@AviD Depends on what you compare them with. Certainly much better than WebForms.

AviD

pfft, not even comparable.

better than most equivalent frameworks I've been seeing.

I mean, in other languages

CodesInChaos

I looked at nancy, but liked it even less.

Matthew

Cthulucrypto: XOR data with a one time pad formed of eldrich symbols. Beware of the nightmarish horrors escaping due to accidental formation of summoning runes

CodesInChaos

FuBu looked interesting, but lacked sufficient documentation and doesn't get supported anymore.

I'll probably look at openrasta before deciding, since the openrasta developer invented OWIN which is pretty cool.

OWIN is a simple data structure that serves are abstraction between the http server and your application(framework).

AviD

10:26

@Matthew probably still better than cryptoJS.

@CodesInChaos ah cool, havent heard of that one. But if he's OWIN native that sounds promising.

but like I said, seen plenty of other frameworks / libraries / etc, not found anything as nice as MS' stuff.

Rails's support comes close, in fact I think WebAPI is kinda modeled after that (logically) but improved.

CodesInChaos

I think with proper documentation and examples, FuBu MVC would have been better.

But without docu, no way.

AviD

10:39

I'm sorry, FuBu sounds like something that lives somwhere between connectJS and Express.

actually, maybe more PHP than Node.js

diagprov

@AviD Django?

AviD

@diagprov good point.

as I was saying, most common stuff really, really sucks.

Like, more than @Simon's mom.

and BOOM we're derailed.

Rоry McCune

11:06

aaand you killed the chat room :op

@AviD BTW you submitted for AppSecEU, right? Have you heard anything back from them? looking at the site, they're meant to be notifying today I think...

Adi

@RоryMcCune You sent something?

Rоry McCune

@Adi yeah submitted my Docker talk :)

also Rome would be nice

so a free trip would be nice

Adi

@RоryMcCune I'm still thinking whether I should go or not

On one hand, Rome. On the other hand, Rome's heat

Rоry McCune

@Adi yeah it could be a touch warm I guess, but that's not usually too bad for confs. as the room should all be air-conditioned

besides whilst I'm sitting shivering in winter, the sun sounds appealing :)

it'll likely sound less so when I get too hot later in the year !

Rory Alsop

Morning all

AviD

11:18

@RоryMcCune yes, and nope not yet... cool!

@RоryMcCune oh cmon they HAVE to take that

@RоryMcCune why free?

Rоry McCune

@AviD well fingers crossed!

AviD

AppSec dont pay for speaker travel... :-S

Rоry McCune

@AviD no but $employer does :)

AviD

@RоryMcCune ahhh right right

I am hoping to go anyway - just need to sort travel costs.

shouldnt be too bad, and conf is free, so...

Matthew

@RоryMcCune Sometimes this place is quite good, really :-)

Rоry McCune

11:21

@Matthew indeed. I guess it works for them as it's good press to have conf speakers, so everyone's happy :)

AviD

@Matthew "this place", you at the same $CONSULTANCY as the @rormeister?

heh that just came out, I'm trying it on - I think I like it

Mark Buffalo

$Consultancy = "PHP";

DON'T USE THESE TERRIBLE SYMBOLS, AVID

Matthew

@AviD Yes, we work for the same company

AviD

@MarkBuffalo it is subtle mockery

is @CONSULTANCY better?

@MarkBuffalo also it could be jquery.

CodesInChaos

%CONSULTANCY%

Matthew

11:30

Given we're in the UK, £CONSULTANCY would make more sense

CodesInChaos

{Consultancy}

AviD

@Matthew thats no language though

I think @@CONSULTANCY would be most appropriate, hailing back to NCC's SQLi heritage.

Telkitty

howdy howdy long time ! C

AviD

ymean like forever? always?

also, hello, welcome new person

Telkitty

I cleaned up one of my mail boxes yesterday, just discovered that my website might got DDos attacked back in 2013

AND I DIDN'T EVEN KNOW UNTIL NOW

I am such a dummy

AviD

11:42

then they didnt do a good job of it

Telkitty

also I am not new here

AviD

dont think we've ever met

sorry

Telkitty

Maybe we didn't before, but we have now

:D

AviD

did you have a different nom de guerre before?

Telkitty

I had a cat/spider custome on before if it helps with anything

why hackers are so cowardly

I mean, maybe leave your signature after spending so much time hacking an account?

If I ever hacked any famous account, I would have put my name all over it!

But I have very lame hacking skills

Arperum

11:54

@Telkitty Are you aware how ridiculously dumb that is?

Telkitty

yes

but it's probably dumber to have put in effort into succeeding something and yet no one noticed anything

Arperum

@Telkitty wat. No. The perfect hack is one noone notices.

Telkitty

sometimes I think hackers are introverts and trolls are extroverts

Terry Chia

We got another crazy in here?

Telkitty

how sad it is for the person who DDos attacked my site but nothing was ever noticed until 3-4 years later?

Matthew

12:01

Doesn't that suggest that there isn't a lot of traffic to your site?

Arperum

@TerryChia Apparently.

Telkitty

there isn't much traffic to my site

my site's alexa ranking is probably in the millions

Mark Buffalo

@AviD jQuery would be $("#id/.class") or $('#id/.class')

AviD

sometimes DoS attacks are merely cover for the real attack.

Mark Buffalo

mIRC / PHP would be $whatever = "something";

vars in jquery would be the same as javascript. so var something = "something";

AviD

12:03

@MarkBuffalo hmm but doesnt have to be - $COMPANY = $('#id')

Mark Buffalo

var company = $('#id');

Adi

Holy shit!! My thermal camera has arrived!!! I'll go pick it up this evening

Mark Buffalo

Let the farts begin

Telkitty

infrared delector camera?

Adi

@MarkBuffalo The farts are always there

The fart detection will begin

@Telkitty Thermal imaging camera

Telkitty

12:07

by detecting infrared radiation

that's the theory, no?

back to my rant ...

Rоry McCune

@Adi which one did you get?

Adi

@Telkitty I think "detecting" is a bit inaccurate. It doesn't just detect it, it measures it in array

@RоryMcCune FLIR C2

Telkitty

so my site was DDos attacked a few times, my iphone account hacked, also my microsoft & paypal accounts were tempted, anyone think all of these are accidents and no related (i.e. I am not targeted)?

Rоry McCune

@Adi nice, I've got a seek thermal one that plugs into an Android phone.. keep meaning to do more with it.

Matthew

@RоryMcCune Photograph your house and see if need more insulation?

Telkitty

12:12

would be nice to see a video of thermal camera recording in a 'haunted house' at night

M'vy

back

Adi

@RоryMcCune Honestly, after I bought the FLIR C2, I kinda regretted it

I should have gotten the Seek Thermal

Rоry McCune

@Matthew yeah that was what I got it for, I think I need to play with calibration as initially I couldn't see major difference in the heat of things that would be useful, but I've not really spent enough time with it yet...

Telkitty

what exactly are you planning to do with a thermal camera?

Mark Buffalo

@RоryMcCune And by, "more with it," you mean record your fart smoke in 1080p?

M'vy

12:13

Oh we got a new person. Hello there.

Matthew

I just bought heavy duty tools this weekend. An SDS drill, and a replacement lathe shaft...

Mark Buffalo

@kalina where art thou

M'vy

(or not so new it seems)

Telkitty

~_~

Arperum

@M'vy I don't think anyone remembers him/her.

M'vy

12:15

Well, I surely don't

And I have a Yearling × 5

Telkitty

I change my nicknames/avatars regularly

Arperum

That kind of causes people to not remember you.

Mark Buffalo

@Telkitty a/s/l plz

Telkitty

59/female/zimbabwe

M'vy

srsly @Mark ?

Mark Buffalo

12:19

@M'vy A/S/L PLZ????????

Telkitty

tell me you are young, hot and within 10000km radius, your african grandma will fly over to cuddle you and cook you breakfast

Mark Buffalo

@Telkitty I'm joking... but if you aren't, let's talk about Zimbabwe.

Oh man, that sounds good... except the cuddling.

Telkitty

what's wrong with the cuddling?

Mark Buffalo

Look, I'm not interested in relationship, but if you want to cook me breakfast I'm okay with that.

Telkitty

?

you can cuddle without having a relationship

Mark Buffalo

12:24

No you can't

@RoraΖ Save me.

RoraΖ

Seems unlikely

Telkitty

Mark Buffalo

@RoraΖ WHY????????

Telkitty

cuddle and ... platonic

Matthew

@MarkBuffalo Much funnier to watch you keep digging

Telkitty

12:26

cuddle and innocent

dude, you have a really dirty mind!

Rоry McCune

@MarkBuffalo Classic CIA/NSA Rivalry?

Mark Buffalo

@RоryMcCune dude, I'm not a fed!

Rоry McCune

@MarkBuffalo that's what all the Undercover Feds say :op

Matthew

@MarkBuffalo Classic Shield/Hydra rivalry?

Telkitty

@RоryMcCune where does FBI come in?

Mark Buffalo

12:28

Why on earth would I be undercover in the DMZ?

ain't none of you interesting enough

AIN'T NONE OF YOU

Rоry McCune

@Telkitty well this is an international room so more CIA jurisdiction than the FBI

Matthew

@Telkitty Just behind where the heavy ram comes in, usually

Mark Buffalo

why the hell does my phone keep thinking I'm in Johannesburg, South Africa

Arperum

@MarkBuffalo You're secretly on a trip to Zimbabwe?

Mark Buffalo

@Arperum Damn you.

Telkitty

12:31

My accounts were hacked, my site was attacked, and yet they did absolutely nothing to protect an innocent and powerless internet civilian like myself #disappointed

M'vy

@MarkBuffalo You forgot to turn off your spy VPN :)

Mark Buffalo

@M'vy No, there's no VPN. I think my SIM was switched, and I am now being targeted for assassination by @RoraΖ's drones

The joke's on them because the drones will end up in South Africa

M'vy

6 mins ago, by Rоry McCune

@MarkBuffalo Classic CIA/NSA Rivalry?

Mark Buffalo

:(

Telkitty

someone hacked my iphone account and NSA can't hack Apple's encryption?

Mark Buffalo

12:35

everyone thinks I'm a spook

@Telkitty Two totally different things

Telkitty

NSA employs low capability hackers?

@MarkBuffalo how so?

Mark Buffalo

@Telkitty If the phone is encrypted, and powered off, then you have a problem

Arperum

@Telkitty It's not like anyone cares about the actual content of this specific phone. This is just setting a precedent.

Mark Buffalo

If the phone is encrypted, but powered on, then you can hack it and grab things from it.

M'vy

@MarkBuffalo no, you're just the easy target

Mark Buffalo

12:36

@M'vy oh, okay. That's good to know

secretly places @RоryMcCune on the third-degree watch list

Telkitty

@MarkBuffalo but NSA HAS the phone and they have power supply?

Mark Buffalo

@Telkitty You can't turn it on without decrypting it first

Well, you can power it on, but you can't load the OS without decrypting it.

Rоry McCune

@MarkBuffalo yay I've moved down from my spot on the 2nd degree one!

Mark Buffalo

@RоryMcCune Think of it as burn levels. You just moved up a notch.

Telkitty

@MarkBuffalo but my screen is locked most of the times even if the phone is on

Rоry McCune

12:38

@MarkBuffalo yeah I probably did that on Saturday when me and @RoryAlsop were telling some nice chaps from GCHQ about all the dodgy characters that hang out in here

Telkitty

and it's not like I am an important person or I am a web security idiot

Mark Buffalo

@RоryMcCune You'll both pay for this crime!

Arperum

@Telkitty Like a screenlock is going to do much. That's not encryption.

Mark Buffalo

@Telkitty No, no... it works like this. In order to unlock the phone, you must decrypt the contents. While yes, you can power it on, and attempt to moderately brute-force, after 10 attempts, the phone will be wiped

kalina

@MarkBuffalo what do you need me for?

Mark Buffalo

12:40

If the phone OS is loaded, and therefore already decrypted, you can do whatever.

@kalina wanted to say hello, good morning, etc

kalina

hello, good $timeofday

=> busy, bye again

Mark Buffalo

NOOOOOOOOOO NOT PHP

oh okay :{}

Adi

Could somebody please resolve outlook.com for me?

M'vy

Réponse ne faisant pas autorité :
Nom :    outlook.com
Addresses:  132.245.23.242
          132.245.17.34
          132.245.21.82
          132.245.81.130
          132.245.92.194
          157.56.237.242
          157.56.242.98
          132.245.13.210
          132.245.113.194

Mark Buffalo

> outlook.com has address 132.245.17.34
outlook.com has address 132.245.92.194
outlook.com has address 157.56.242.98
outlook.com has address 132.245.81.130
outlook.com has address 157.56.237.242
outlook.com has address 132.245.21.82
outlook.com has address 132.245.23.242
outlook.com has address 132.245.13.210
outlook.com has address 132.245.113.194
outlook.com mail is handled by 10 mx2.hotmail.com.
outlook.com mail is handled by 10 mx3.hotmail.com.
outlook.com mail is handled by 10 mx1.hotmail.com.

Rоry McCune

12:42

@kalina o/

Adi

Thanks a lot @M'vy and @Mark

Mark Buffalo

ok, well it looks liek today is going to be a very busy day

welcome

which means the DMZ is distracting me. I shall return later

Telkitty

@MarkBuffalo yeah, very funny that NSA has the power to monitor the internet but have not yet created a toll that could virtually copy the inform from a phone for decryption purposes

Simon

@M'vy wat is dat language

M'vy

@Simon it's supposed to be French. But you know microsoft...

"Addresses" < com'on

Simon

12:48

I didn't even notice there was an extra "d", haha.

Maybe it means I'm into Ds.

Telkitty

and better still NSA has not retrieved the pc that phone was backed on

but say, the suspects never did back up or sync-ed the phone on PC/laptop

what about phone records from telco company

Adi

@Simon In OSCP lab, there's a French machine

Simon

@Adi Nice!

I really can't wait to get my access.

Telkitty

so maybe NSA's pay is too low for high capability hackers ... just saying </possible troll>

Adi

@Simon Wait wait

@Simon and if you want to get Remote Desktop access, you need to add yourself to the something bureau à distance group

with command line

Good luck typing à in CMD

Simon

12:52

@Adi Haha, if I can set my keyboard language to French Canada then I'm all set.

Adi

@Simon Didn't work :(

It had something to do with the nc shell or the meterpreter shell only supporting English

Simon

Oh, nice.

Adi

Fucking 2-3 hours spent trying to get RDP

Simon

That's tricky.

Adi

Then I ended up VNCing and using the GUI to add myself

M'vy

12:54

@Adi I'm always setting up my Keyboard on qwerty now

Simon

@M'vy Good boy.

Adi

@M'vy I drive my Finnish coworkers crazy with my English layout

:D

They're trying to do ' ; <> {}

They can't! :D

M'vy

@Simon the real keyboard is still azerty, so it's a bit tricky. You have to disconnect from the physical

Simon

@M'vy At this point, I'm sure you're not looking at your keys though.

M'vy

@Simon no.

Got some problems cause I'm mostly using UK map.

Why do you have multiple mapping for the same language...

Simon

12:56

Yeah there are definitely too many mappings.

M'vy

Well I guess French does have it too...

Transcript for