The DMZ

David Freitag

00:11

@AviD I've never seen Archer. Is it good?

AviD

@DavidFreitag terrible.

terribly awesome.

good is, as you well know, rather subjective.

David Freitag

@AviD Something can be both terrible and good

AviD

@DavidFreitag okay, imagine HIMYM's Barney as a secret agent.

David Freitag

@AviD I've only seen three episodes of HIMYM, and they were non-contiguous

AviD

or imagine James Bond, but in a cartoon that doesnt take itself seriously and is a parody of the entire genre, AND of genre parodies themselves.

David Freitag

00:13

@AviD Yeah but is it good

AviD

whateveh maan, just go ahead and watch it. If you dont like it, stop.

@DavidFreitag no it is bad. but very enjoyably so.

David Freitag

@AviD Like a B movie with hilariously bad special effects?

AviD

@DavidFreitag no, like a show about a drunk womanizing misogynist superspy.

Mark Buffalo

@AviD You actually have a good point in that thread

3

A: My school wants to keep the details of our door authentication system a secret. Is that a good idea?

You have already received several excellent answers, though @TomLeek's and @Iszi's answer (both excellent btw) seem to be in direct contradiction. They both make excellent points: on the one hand, keeping the design secret will not make the system secure, whereas reviewing it publicly will en...

Lots of 'em actually

AviD

heh, you sound surprised

David Freitag

00:19

@AviD Reminds me of Frisky Dingo

Mark Buffalo

(I'm joking, that is an idiocracy quote)

David Freitag

Killface Focus Group | Frisky Dingo | Adult Swim

►

Mark Buffalo

Idiocracy: Your Shit's All Retarded (long version)

►

AviD

:27297142 lol familiar

David Freitag

Except in Frisky Dingo it's an iron man/tony stark-esque superhero with henchmen known as "Xtacles"

Mark Buffalo

00:20

Honestly... Donald Trump is Dwayne Elizondo Mountain Dew Herbert Comacho

David Freitag

Xander Gets a Hooker | Frisky Dingo | Adult Swim

►

Mark Buffalo

^ Donald Trump

David Freitag

Probably NSFW ^^

Mark Buffalo

@AviD I love that movie, lol

AviD

@DavidFreitag hmm yeah, seems very similar

David Freitag

00:22

@AviD Pretty sure it's by the same people

AviD

@DavidFreitag actually Im thinking Archer is a spinoff of that

David Freitag

@AviD No I don't think it's a spinoff, unless the main character of Archer was once a superhero

AviD

no I mean they spun it off, but modified

David Freitag

Yeah both by Adam Reed

AviD

a lot of it looks the same

David Freitag

00:24

Frisky Dingo

Frisky Dingo is an American animated cartoon series created by Adam Reed and Matt Thompson for Adult Swim. The series revolved around the conflict between a supervillain named Killface and a superhero named Awesome X, alias billionaire Xander Crews, and much of the show's humor focuses on parodying superhero and action movie clichés. It debuted on October 16, 2006, and ended its first season on January 22, 2007; the second season premiered on August 26, 2007, and ended on March 23, 2008. A third season was in development, but in the absence of a renewal contract from Adult Swim, pre-production...

Archer (TV series)

Archer is an American adult animated television series created by Adam Reed for the FX network. A preview of the series aired on September 17, 2009. The first season premiered on January 14, 2010. The show completed airing its sixth season on April 2, 2015, and has been renewed for a seventh season, to consist of 13 episodes. The inspiration for Archer came to Reed while in a cafe in Salamanca, Spain. Finding himself unable to approach a beautiful woman seated nearby, Reed conjured up the idea of a spy who "would have a perfect line". Reed conceived the show's concept while walking along the Vía...

AviD

artists, animations, faces, voices

@DavidFreitag well there ya go

David Freitag

God this makes me wish I had cable

So I can watch Adult Swim

schroeder

@DavidFreitag Archer is also on Netflix

David Freitag

@schroeder Watching Live TV is a totally difference experience

schroeder

@DavidFreitag I know - that's why I prefer Netflix .....

haven't watched live tv since Tivo was in beta ....

David Freitag

00:26

@schroeder But nostalgia

AviD

@DavidFreitag is that still a thing?

David Freitag

@AviD Apparently

schroeder

@DavidFreitag but having control over your time and not being interrupted by unwelcome ads ....

David Freitag

@schroeder There are very few ads on Adult Swim

Most of them are for other shows on Adult Swim

and thus are hysterical

Imagine a TV network that doesn't take itself seriously

The TV network that gave the world Metalocalypse and Robot Chicken

Mark Buffalo

Cable isn't worth it

David Freitag

00:29

Actually TBH, I do have cable, and it was free.

AviD

00:47

@schroeder whyd you close that dll scanning question? I think there is a direct answer, though on the other hand he is probably looking for a product recommendation...

also, clueless comments alert...

schroeder

@AviD it looked like "what capabilities does a scanner have" - which would be dependent on the scanner ...

I can re-open if you think it's appropriate

AviD

01:06

@schroeder yeah thats true, very dependent - but an answer could be "yes its possible". Actually dont open it, that would be a sucky answer.

I almost want to write an answer just to rebut that comment "scan dlls for virus lol"

actually I think I did write that answer once...

Mark Buffalo

01:31

@AviD It's easy to scan dlls for viruses.

AviD

@MarkBuffalo also irrelevant

Mark Buffalo

Just hit the enter button and you're on your way to infosectarian victory!

washingtonpost.com/news/checkpoint/wp/2016/02/02/…

Ohnana

01:53

@AviD wait what

@RоryMcCune it was fuckin hilarious

Mark Buffalo

@Ohnana New thing?

Ohnana

@RoryAlsop lol rekt

Mark Buffalo

You are now an octopus.

Ohnana

i am

Mark Buffalo

Also

1

Q: Can the identity of a person in Nigeria be confirmed?

I need to find out if a person is who they say they are. Can that be confirmed?

authentication

Ohnana

01:56

@MarkBuffalo walk yo ass to nigeria, done

Mark Buffalo

This could be trolling, or it could be real... either way, help this person imho

bob

hello, is this the security theme chat?

Mark Buffalo

Hi, bob

It can be...

bob

alright I have a question about jobs in sec

I am currently a student in computer science that has a passion in security. As I learned the basics, I realised that the internet is more secure than a couple of years ago and basics exploitation technics does not usually work anymore.

By secure, I mean new websites and new networks uses new technologies such as Wordpress (for web) and new wifi devices using strong defence (network-wpa2). For example, Windows XP had a lot of vulnerabilities where Windows 7 has way fewer.

I would love to find a job in security but I am scared that there will be not enough vulnerabilities to make a living …

Mark Buffalo

Actually, it's a lot more unsafe :(((

bob

02:02

then since like.. 5 to 10 years ago?

Mark Buffalo

Yup

There are far more attacks now... you plug one hole, another pops up

bob

sql injection was a joke! you could enter a database with a couple of simple commands!

Mark Buffalo

SQL injection is alive and well. ;)

So is XSS

CSRF

OPP, yeah you know me

bob

So you believe that in few years, there will still be work as a pentest (for example) ?

Mark Buffalo

There will be an astonishing amount of work

bob

02:03

who are you?

Mark Buffalo

I'm Mark Buffalo

Who are you?

bob

I get that, but do you work in sec?

lets say im just bob, a student

Mark Buffalo

I also know a lot of infosec animals. Animals, tigers, bears, ponies, Barry Carlyons (but Barrys only speak once every month or so... 2 lines at least)

Foxes...

Well, I'm a Software Engineer / dev

and I place a huge emphasis on security in my work

I also hunt down bugs, pentest, etc

bob

i didnt get your first 2 lines xD

Mark Buffalo

(Look at the user list, I'm just being a dorknerd)

bob

02:06

may I ask your educational path?

Mark Buffalo

My educational path was not typical... I learned "hacking" at 8 years old

and took out the school's network :{}

bob

i'm new to this, so Idk anything about the chat or wtv

Mark Buffalo

if you could call it a network

bob

you didn't go to uni?

Mark Buffalo

Well, it really depends... I do not have any formal training

I did... didn't finish

just major coursework

bob

02:07

If you could suggest a student (like me) a path, what would it be?

computer science then uni in soft engineer?

Mark Buffalo

Computer Science

Do that... and love it

bob

I already do love it haha

Mark Buffalo

good, so do it

Honestly, Infosec isn't dying

bob

but the uni's program seems like a good thing to do?

Mark Buffalo

depends on the uni. you WANT Computer Science

bob

02:09

I was really worrying tbh

Mark Buffalo

don't go to a coding boot camp

bob

why do I WANT computer science?

Mark Buffalo

defenseone.com/technology/2016/01/…

bob

and I'm already decent in programming so :P

Mark Buffalo

opm.gov/cybersecurity/cybersecurity-incidents

depends on what path you'd like to take

do you want to create malware?

bob

02:11

meh

Mark Buffalo

or do you want to defense against attackers?

...both?

bob

hacking stuff is more interesting

Mark Buffalo

Yeah, isn't it? :}

What country are you in?

bob

database, exploits, hacking devices, networks etc etc

I'm in Canada

Mark Buffalo

@bob Core fundamentals. Mainly, it depends on what you want to do... having a low-level understanding of computer science basics is invaluable.

bob

02:13

do your job pay a lot?

it says that its around 60k here in Canada

idk if its accurate

Mark Buffalo

If you're really good at "hacking", and you aren't a black hat asshole, you'll find work in the states easily

And they'll pay you way more here

bob

with trump, idk if I was to go up there xD

Mark Buffalo

Did you just slander the Donald? wtf

(kidding, yeah, Trump is a dick, but you'll still be fine here if he becomes President :b)

bob

^ pro trump hahha

kidding

Mark Buffalo

Unless you're sort-of brown-colored like me... then you might get waterboarded

bob

02:18

mark, you learned all protocols and a lot of program. languages?

yea I guess so haha

makin murica GREEEAT againn

Mark Buffalo

I don't know everything... I wish I did

There's so much I don't know

There's so much many people don't know...

bob

in what program. language do you work with?

c++, php python?

Mark Buffalo

But I try to keep an open mind... and listen to other people's perspectives. Someone may have a different perspective than me, and that's really valuable.

Only a damn fool is too afraid to ask questions... and an even bigger fool derides you for asking them. :b

3

bob

When it comes to computers, I'm a question machine

so many questions, so little time

Mark Buffalo

C/C++, C#, Java/J2EE, Javascript, PHP. MySQL, SQL Server, Oracle SQL, etc.

Yeah, that's good. Keep asking questions... that's so important in any IT field.

bob

02:22

brb!! If you are gone by then, thank you soo much for your time

people actually taking time to answer your boring questions are rare these times (in security)

Mark Buffalo

Yeah, some people get this "holier-than-thou" attitude... but in general, this chat is pretty good. Lots of different perspectives, lots of good ideas.

bob

02:40

what about the "google" answer?

and I wasn't doing any reference to this chat :P

TheJulyPlot

evening all!

Mark Buffalo

twitter.com/ofirgendelman/status/694133450962526208/photo/1

Ha.... ha.... hahah.... ha.

TheJulyPlot

Hamas Porsche youtube.com/watch?v=j03LKhZa8UE

Mark Buffalo

Haha. I remember that.

TheJulyPlot

to be fair it was actually pretty impressive

Mark Buffalo

02:48

Yup

TheJulyPlot

Talking of impressive (NSFW..ish) i.imgur.com/HGIdhK0.gifv

David Freitag

@TheJulyPlot Nope that's definitely NSFW

TheJulyPlot

Really?

bob

mark buffalo, as a soft engineer, could you work from home. Or you have to be at work

and is it 40 hours a week generally?

Journeyman Geek

All engineers are a bit soft. And are made of meat

Hides

bob

03:02

<.<

Mark Buffalo

My company let's me work from home occasionally

Depends on the company...

bob

40 hours/week?

Mark Buffalo

Yeah. Otherwise I put in exception timesheets

😴

Night

bob

thanks a lot mark!

Mark Buffalo

03:18

@RоryMcCune More "security" snake oil: defenseone.com/technology/2016/01/…

David Freitag

05:06

108

Q: Did I just get hacked?

I am developing a consumer product, and it is supposed to be connected to the internet, so as expected, it is connected to the internet so that I can properly develop it. I went away for an hour or two hours, and when I came back to my office I noticed some strange commands written in the termin...

linux virus microsoft trojan

StackExchange

$I searched my .bash_history for the line with the highest ratio of special characters to regular alphanumeric characters, and the winner was: cat out.txt | grep -o "\\\[[(].*\\\[\])][^)\]]*$" ... I have no memory of this and no idea what I was trying to do, but I sure hope it worked.$

Lucas Kauffman

blessings be upon you fellow DMZers

@MarkBuffalo made a good penny of it too

Xander

05:35

@MarkBuffalo The headline and subtitle alone describe the level of derp here. "...Homeland Security’s...Firewall..does not scan for 94 percent of common computer vulnerabilities."

Yes. We've discovered that a firewall is not a network vulnerability scanner. I'm glad we've been about to write an major news article clearing that up.

3

David Freitag

06:49

nytimes.com/2016/02/03/health/…

Ohhhh joy...

Also, did we already know about this: arstechnica.com/security/2016/02/… ?

Rory Alsop

08:08

@Xander hang on...so it does scan for 6%?

this.josh

I would be suprised if it were that high

OPM sent me my own personal thanks for trusting us with your life letter the other day.

Lucas Kauffman

08:57

whats up @RoryAlsop

@RoryAlsop hey I noticed btw that I'm working in the same building as $big_bank here

Journeyman Geek

@LucasKauffman There's ... 3 big banks now?

(used to be 4)

Rоry McCune

@AviD nice! I'm only up to series 4 of the original show, so that'll be another thing to catch up on

mornin' all

Rory Alsop

@LucasKauffman morning - is that good? ;-)

Lucas Kauffman

@RoryAlsop not sure, but I guess it would make meetings easier :P

kalina

09:45

smh.com.au/national/…

Journeyman Geek

meh.

AviD

@kalina shame to waste precious bits on him.

Journeyman Geek

yup

AviD

in certain cases I do think chemical castration is not only justified, but not anywhere harsh enough.

Journeyman Geek

Folks like that thrive on attention

AviD

09:51

assuming he hasnt actually done any action, there are still laws that would apply to the things he said. Why am I still surprised that noone has pressed charges against him, or at the very least sued him in civil court.

I suppose Trump is a good answer to my question.

Journeyman Geek

Is Trump ever a good answer?

AviD

@JourneymanGeek in this case, yeah

wait wait wai

I just got it

it's like parody

he is saying ridiculous things just to show those types of people how ridiculous they are

whats the name of that internet law?

Journeyman Geek

Poe's law?

AviD

@JourneymanGeek yeah thats the one

> "Without a winking smiley or other blatant display of humour, it is impossible to create a parody of fundamentalism that someone won't mistake for the real thing."

Matthew

I did see a theory that Trump was a Democrat plant, to distract from any mistakes they make by immediately announcing something more insane

kalina

09:54

well I'm glad I woke up today

AviD

@kalina always a good idea

Journeyman Geek

Waking up eventually is good.

kalina

moped around for 8 hours hating my existence and now I'm going back to bed

AviD

if you dont wake up you cant do things

Matthew

@AviD I dispute that

Journeyman Geek

09:55

I got my antman hoodie ^^

And found out they downsized my old department further.

(My old boss is no longer there)

AviD

@JourneymanGeek "antman hoodie" thats a cute euphemism for what is basically a rubber bag.

kalina

I feel like baggy hoodie mode might be the right choice

Journeyman Geek

0_0

Rоry McCune

@kalina is it not a touch warm for that kind of thing?

kalina

no, I require the additional comfort

Rоry McCune

10:08

@kalina hoodies are comfortable that's for sure

kalina

FFS

my phone just crashed in the middle of whining to my friends about how I hate life and I'm coming home

EVERYTHING IS AGAINST ME

AviD

@kalina WE'RE NOT

even though I just went and disagreed with you.... damn.

@kalina two days ago my phone got dropped. It's a nokia though, those things are built like a tank. It can withstand anything - well, anything except an energetic 6 year old. :-(

Matthew

Hmm, confused person:

0

Q: Is it true that key authentications are considered insecure nowaday?

Some of the comments on this post here: http://superuser.com/q/1034137/479461 are claiming this. i.e. this one says (emphasis mine) You got brute forced. This is why one does not leave a ssh server on the internet, even if you have a password. Anything short of key based auth is not secure e...

key-generation

Rоry McCune

@kalina nice comment

kalina

I try

AviD

10:49

In the DMZ we call that: "@Simon". — AviD 7 secs ago

aww someone already wrote that as an answer

0

A: What is a word for someone who tends not to think too much about life?

I'd describe them as a simple person

kalina

thanks for making me goto english.SE for the first time in forever

I really wanted that

AviD

heh

I helped satisfy your life's quest.

kalina

no, quite the opposite

AviD

@kalina well did you really expect me to satisfy anything

kalina

I don't know why I use SE chat when I don't really want to be active on any of their sites or even contribute in any real manner

AviD

10:59

@kalina it's because you like us

and you would miss us terribly

some moreso than others

kalina

11:12

well I nearly answered a sec.SE question but got half way through and decided WTFAMIDOING

Rory Alsop

11:31

@kalina providing a good answer?

kalina

no

it was a googled answer and was almost certainly wrong anyway

Rory Alsop

:-)

kalina

so apparently it's not a good idea to go to the DR or south america

I guess I'll just go back to the ridiculously cold and wet european winter next week

Rоry McCune

it's actually nice here today (cold, but clear)

Lucas Kauffman

11:47

@RоryMcCune oh here it's a lovely 31 degrees with 66% humidity

like yesterday

and the day before

and the day before that

it's always around 31 degrees here

Rоry McCune

@LucasKauffman that's not my definition of "lovely".... horrifically too hot perhaps

but not lovely

Lucas Kauffman

@RоryMcCune well you get used to it. I don't need aircon anymore when I'm getting dressed in the morning to prevent my shirt being drenched in sweat

kalina

not too hot

quite humid though

seems like frizzy hair day all the time

Lucas Kauffman

@kalina the humidity is a killer though

Rory Alsop

lovely and cold and clear here

kalina

11:49

yeah I'm not a fan of humidity

Lucas Kauffman

@kalina hahaha yesterday I was talking to a girl who told me the exact same thing :P

kalina

it's like completely failing to style your hair

no, it's like completely failing to just get your hair into kinda how you want it

Lucas Kauffman

@RoryAlsop When are you visiting your SG branch?

Rory Alsop

12:09

@LucasKauffman Well...that whole function is downsizing dramatically as part of the move back to being a UK bank, so maybe never. I would like to though, and I work with them closely on regulatory aspects so you never know

Rоry McCune

12:23

plus.google.com/+BensonLeung/posts/aFWWeiybe4P <-- bad USB-C cable trashes laptop!

one to watch for...

kalina

old

14 hours ago, by David Freitag

> And that's how a cheap cable ruins a $1500 machine.

14 hours ago, by David Freitag

http://www.androidpolice.com/2016/02/02/google-engineer-benson-leung-finds-a-usb‌-type-c-cable-that-isnt-just-dangerous-on-paper-it-allegedly-fried-his-hardware/

Rоry McCune

@kalina you're old

kalina

how rude

Rоry McCune

@kalina :D

M'vy

13:42

hey

Adi

Hei!

@RоryM Looks like things went poop with the employment thing.

Rоry McCune

@Adi boo :( Visa stuff?

Adi

@RоryMcCune Apparently, that's the easiest part. The employer has a lot of clients all over the world so travel is a big part of it

Having an insta-refuse passport doesn't help that much

Rоry McCune

@Adi ahh I guess that kind of stuff is a bit touchy in the UK at the moment :(

Adi

It's actually more about travel arrangements for me. This means that every client trip has to be prepared very early to accommodate the delays caused by me

The employer was quite candid about the reasons, so that was good

Additionally, for their UK clients, it's gonna be a pain to get me any sort of clearance

Rоry McCune

13:47

@Adi ugh, I take it there's no longer term thing you can get that would cover you across multiple visits?

@Adi oh you won't get security clearance but that's only .GOV, for other stuff it would depend on how many years back they want to go

Simon

IT'S CHRISTMAS AGAIN @@@

I've got an ESX server to build

Adi

@RоryMcCune I'm probably explaining incorrectly. After I get a long-term UK visa and I start working, I'll have to travel all over the world. To do that, I'll need visas to those countries where the clients are

Because of my passport, those travel arrangements will be a lot more tricky for me than the other consultants

Rоry McCune

@Adi ahh if it's that kind of role, I see. you probably need something where it's more UK only then :)

Adi

@Simon Yaay! Don't break it!

Rоry McCune

I know $employer has got some people who have passport difficulties for similar reasons, but I think they just avoid sending them abroad :)

Adi

13:50

@RоryM It really seems that eventually I'll have to apply for Finnish citizenship

Matthew

@RоryMcCune Yep, that's true

Adi

@RоryM I can't really avoid it as much anymore

Rоry McCune

@Adi ugh :(

kalina

oooooooooonnnnnnnneeeeeeee aaaaaaaaaaaammmmmmmmmmmmmmm

facedesk

Rоry McCune

@Adi you should find out if the Finnish military needs Winged Cyber Ninja Monkeys then at least perhaps they could get you a posting that wouldn't suck too badly

kalina

13:52

im not at a desk

facebed

Rоry McCune

@kalina got to sleep,got to sleep,got to sleep little pony

kalina

I can't, you minced that sentence so badly that I'm now fully awake

Rоry McCune

@kalina grammar mistakes, a ponie's kryptonite!, who knew

kalina

I finally watched continuum season whatever

Matthew

@kalina Does counting sheep help? d13yacurqjgara.cloudfront.net/users/464652/screenshots/1366618/…

kalina

13:53

that ending was sad

why would I count sheep

Adi

@RоryMcCune yle.fi/uutiset/…

Rоry McCune

@kalina reputedly helps sleep?

Simon

@Adi Yep, I just gotta remember to be extra careful even though it's not the first one that I build.

Rоry McCune

@Adi NURDZ!!

Transcript for