The DMZ - 2016-03-18 (page 2 of 4)

« first day (1919 days earlier) ← previous day next day → last day (2966 days later) »

10:00 AM

aaand now I want to rewatch mallrats

@Arperum its a joke refering back a few years ago when they used annoying bolt sizes and layered their engines in such a way it was difficult to do anything... even on a 2002 car when changing the clutch I had to remove the near side wish bone!? i mean wtf D:

Whichever one was on sky recently - we watched it (had never watched it together) and laughed all over again at the childish jokes

btw @DavidFreitag I did a quick benchmark on my new graphics card last night, looks like it's at least 3x the speed of the old one (GTX760) which is nice! that EVGA power supply seems good and quiet too :)

@RоryMcCune I got the 760 ...kind of having buyers remorse

@silverpenguin I didn't even know a car had a wish bone.

10:04 AM

@Rоry - I got the 1kW PSU with my 980ti and along with the awesomely quiet CPU cooler, the whole thing is quieter than the hum from my electric toothbrush charger. (Except when I run Black Ops, maybe...)

@Arperum part of suspension/steering

@Arperum neither did i untill i had to change the clutch as im too cheap to pay for someone to do it

@silverpenguin - in my car you need to lift the engine out to change it

And mine isn't even French

@RoryAlsop yeah it's nice how you can get powerful kit that doesn't sound like an aircraft taking off!

I have to get my oil changed, and can't even do it myself... And I'm too lazy to figure it out myself.

@silverpenguin 760 was fine for most stuff TBH but high-res gaming did cause it to strain...

10:06 AM

@RoryAlsop you have to do that with all cars :P I had mine suspended by rope...lots of rope...

Rope...????

My first Audi you could do all that from the pit

@silverpenguin - if you do like doing your own car maintenance, you could join mechanics.stackexchange.com - it may appeal to you

@RоryMcCune I bought and AMD 6 core, 8 gig ram, gtx760... in november... I will probably upgrade to an intel oct core 16gbs ram and a new graphics card next year... I cheaped out this year as I just wanted it to hold me over for a year... 600 quid on this set up 2G on the next one i think

@silverpenguin, I built a i7 32gig ram hackintosh last year. Now it just idles in my private office

@RoryAlsop man D: im horrible at it... Im the worst person with bolts and screws :< oh look a screw annnnddddd its lost never to be found again

what a waste of time

10:11 AM

@SmokeDispenser gimme why you buy and why you no use

@silverpenguin, I thouht I wanted to play more video games. Then, no time.

priorities shifted to rather have more <euphemism here> time.

@SmokeDispenser did you go and get your self a special friend... thats why I plan to be alone for ever

@silverpenguin, I had a girlfriend change that made it an actual option to rather 'spend quality time with her' than gaming.

like, always an option.

so yeah, the machine sits there, idleing.

@SmokeDispenser as in you have no option ?do it or else? I normally get GFs who like the video games and refer to it as time together :P

chat is being weird for me

had to refersh the page trying to tell me i was logged out :<

@silverpenguin, nah, I have had other options. But tbh, I prefer physical interaction over video games until I'm too exhausted to move.

10:29 AM

@SmokeDispenser thats cool! each man does what he needs! to bad on the emotional strings though ;) haha!

@silverpenguin, well. she left me in november and since I have found a perfect arrangement.

no emotional strings attached:D

@SmokeDispenser smart man! :D

it was the most ridiculous reason from here I ever heard. 'you are the perfect bf for a serious relationship, but i'm not in the place for that at the moment and I cannot offer you what you deserve'. I was like 'wat'?

@SmokeDispenser man I get the whole, you are the perfect guy, and I want someone like you...but not you hahahaha xD

@silverpenguin, yeah like.. well, f off then;)

@silverpenguin, quote from the new arrangement: 'your ex was unbelievably stupid to leave you'.

10:37 AM

@SmokeDispenser dont ruin the good thing you have going now! :P keep smarting all of your smarts

@SmokeDispenser this new girl makes your ego feel big haha :L

@silverpenguin, sure. will be moving to another city soon anyways, so, whatever;)

@SmokeDispenser what country are you from? s

@silverpenguin, germany

@SmokeDispenser ahhh i want to visit germany... i dont know what i would do while i was there... but i should visit it

@silverpenguin, want some suggestions?

I'll go smoke, think of some and get back :)

10:57 AM

@silverpenguin Visit Venlo! (dutch city a few steps away from german broder) and I'll buy you a pint

offer goes for anyone here btw

@SmokeDispenser that sounds good

wait

0

Q: Why does telegram not use end to end encryption?

Signal and Telegram are both mobile applications that "try" to ensure secure chats. Signal uses end-to-end encryption, Telegram does this as well (in 'secret chats') but it does not use end-to-end encryption in group chats. How come? Is it difficult to implement?

encryption mobile instant-messaging

@Lighty this is also good!

I thought Telegram dis fully end-to-end

including group chats

i went to amsterdamn for a 3 hours (3 hours = free time I spent must of my time in schipol) about 5 weeks ago

11:00 AM

@silverpenguin Only went there, like, 3 times

once with work

@silverpenguin what do you fancy? cities or landscape?

2 times because of an acedemic hospital, only hospital that could fix my face

@SmokeDispenser landscape ! and night life

@silverpenguin and red lights

@silverpenguin, that is a bad combo;)

@silverpenguin, for night life, berlin is great

11:02 AM

@Lighty what happened to your face? and I went to because i work with aircraft so I needed to visit schipol

@silverpenguin, also, munich and hamburg

@silverpenguin for hamburg, you do have the sea close by and for munich the alps.

@silverpenguin, I personally dislike hamburg, but it has a lot to offer tourist-wise.

@silverpenguin an extremely rare infection to my face, a "Non-tubercolosis bacterial infection) of some sorts, causing deadly imfammatory problems to my lymph glands

Lol - so impressed at how fast spammers are dealt with here nowadays! He was gone in 39 seconds!

with deadly, I mean deadly.

@Lighty fuck that sounds shit man :<

11:04 AM

they surgically removed every single one of them in my face before it could spread, and used every info they got from it for future studies, the disease has no name, and only has been found a few times

the second surgery was further cleaning and a bit of face correction due to the muscles being damaged from the inflamed bullshit

@SmokeDispenser I hate tourist places.. lol

@Lighty, that sounds horribly 'lucky'

@SmokeDispenser you have no idea how lucky I was

@silverpenguin, well, you do need a big city for night life;)

user image

this was a picture i took in japan... after leaving tokyo for a little bit :P

man the quality looks awful wtf

11:07 AM

@silverpenguin, I personally like munich. If you'd rather have the sea try hamburg

I really really like Munich. Lived there for a bit. Frankfurt I know less. And never been to Hamburg yet - although we hope to play Reeperbahnfest sometime

when i go traveling again...eventually... im finding you all for free food...erm i mean social...

@silverpenguin, that'd be Kiel for now, Bonn soon for me.

@RoryAlsop, hamburg I personally dislike, but I do not drink and am not into hookers. so not much to offer. but the hafencity is beautiful.

I wanted to travel through europe to china once but no one wanted to do it with me :(

@silverpenguin, get your double negatives straight;)

11:12 AM

@SmokeDispenser just my brain getting confused lol

:)

@silverpenguin, where are you from then?

@SmokeDispenser good ol england

@silverpenguin then northern germany might be lame for you. basically the same.

at least weather-wise;)

@SmokeDispenser weather is fine as long as the people are not english but want my english money so work hard for it

mwahahaha

@silverpenguin haha

@silverpenguin, actually, they most likely do not want your literal english money;)

@silverpenguin, you'll have to offer them the colorful european money instead. In hamburg there is a street where women work hard for that;)

11:19 AM

@SmokeDispenser your favourite street eh!?

@silverpenguin, not at all, actually

@SmokeDispenser we only see what you want us to see ;) but i know your secrets

@silverpenguin, oh, you wish.

is this on topic here?

@SmokeDispenser that's a matter of some debate :)

I remember having read somewhere that exploiting is ot.

11:29 AM

some would argue that questions relating to the use of security tools are best sat here as the audience is most likely to know them

right.

others would argue that it's software use not security, so belongs on superuser/serverfault

If the exploiting part is no concern, I'd say it's okay to be here as per the 'tools' part

user image

Seems like a good reason to reject an edit

user image

11:33 AM

bah it doesn't look good with or without background

@Adi what suggested edit was that? :O

@Arperum because French cars are terrible

the one French car I've owned got written off by a jeep deciding it didn't exist and driving into the side of it

@kalina Hence adverts pretending they are from other countries...

he hit the front wheel as he turned right into the car, bending the rim and deflating the tires before continuing down teh side of the car

@kalina almost as bad as italian! (well for non-supercar brands anyway)

once our cars had unmated, I went into an uncontrolled spin into the metal barriers

the speed of the impact was about 60kph

when I came to a stop, the airbags hadn't gone off, the car was completely mangled and the jeep was undamaged

I opened the door, the electrics shorted, the airbags went off throwing me back into my seat

the injuries I gained from that accident occurred after the car had come to a halt, caused by the "safety features"

11:40 AM

@kalina I had a head on collision with another french car... it was a complete car wreck ...

@ShadowWizard you don't, but I am the real one ... do you want to take a leap of faith? :p

also an airbag going off in your face hurts

not to mention the gearbox in that car was the shittiest gearbox I've ever had the misfortune of using

@kalina I cant actually remember my air bag going off... I have about 30-45 seconds of memory missing .. I remember hitting the car... bumping off... and then being out of the car

@TildalWave pancakes or meat fillets?

the best of it was the fuckwit that hit me decided to drive off until he saw the flash from my camera catching his number plate

"I was just moving" he said

11:43 AM

@kalina :D

wrong - you're a dickhead who just ruined my day and now you're trying to escape

@kalina he obviously didnt drive fast enough

@kalina inorite?;)

@kalina well only a couple of weeks before Tesla model 3 reservations open...

@RоryMcCune we've had this discussion, I want an electric car so bad but I can't justify it due to limited range

11:44 AM

@kalina Once got hit by someone who, after being aggressive to us, was told that the police were on the way, and then drove off. The police were not impressed with him...

until you can charge an electric car in 90 seconds or get an electric car with a range in four digits they're inappropriate for the task

@kalina model 3 may help though :) although I kind of doubt it'll have a better range than the s/x

current electric cars would be useful exclusively for getting me to my nearest airport and back if I'm lucky

"they're a fantastic car for driving to my other cars"

:D

@kalina well with a 200 mile range you could charge it back up while doing your "set"

11:46 AM

I would prefer this to an electric car

user image

@RоryMcCune an hour of charging isn't going to change everything

@Telkitty bacon obviously :P

not to mention "I only DJ at clubs with suitable electric car charging" will limit my scope somewhat

@silverpenguin Oh, a Smart car forone

@kalina that info by the way does not help to conceal your location;)

11:46 AM

@silverpenguin you know the Tesla has a 0-60 considerably better than your current car...

@kalina meh people expect creatives to have weird riders :)

@silverpenguin one of those has actually been built to drive on the roads.

@RoryAlsop your song is making the office debut

@silverpenguin Have you driven one?

@SmokeDispenser I don't think the question is clear, he doesn't mention what server is he trying to attack and for all we know might be hitting server's defenses, getting something other than HTTP 200 as a response once he hits certain request limit

@SmokeDispenser "within 150 miles of an airport" doesn't really narrow anything down

11:48 AM

The day you'll realize you get 100% torque instantly, you'll realize that they're quite cool.

@Simon an electric car?

it's obvious he's talking about electric cars even though he replied to your message about toy cars

@silverpenguin Yes.

@kalina for most of europe, 'only a airport w/in 150 miles' does.

@kalina I cant tell with simon he might have been making a funny

11:50 AM

I've driven an electric minibus before...

hah! my boss just went to get fast food.

I drove an i3 and was pleasantly surprised.

what a joy.

@silverpenguin it's safe to assume that @Simon is never funny

@silverpenguin yay! Which one are you playing

11:50 AM

@kalina Damn :(

wadafuk

@Simon no. lol I have not... the reason i dont car for them though is nothing to do with performance just that the their existence in the current world is kind of pointless and more of a hinderence ...so i dislike them out of principle

Yet you drive a BMW you jerk.

@Simon I drive a BMW I can do what i want

I can judge you all I want too.

fkin_judged

11:52 AM

rekt_judged

So you dislike the principle of an electric car?

Or cars in general?

I dislike the principle of people who dislike electric cars

or, in shorthand

your face is a principle

The only thing I'll miss from an electric car is the noise of the engine.

I don't mind missing engine noise

makes music sound better

I like having the option to listen to my engine as music.

11:53 AM

@Simon most sense you have ever made

yes but the look of tunercar/supercar owners when you leave their little baby at the line

so sleeper you can't even hear it

@kalina :D

@kalina But I can do that with my Skoda Citigo! I would love an electric Citigo...

@kalina, the torque is intruiging, indeed.

I doubt you could leave anything at the line in a skoda

not without leaving part of the skoda behind at the line with it

11:55 AM

skowat

You Europeans and your weird cars.

@Simon basically a VW

o

and pls American

@kalina, there is a RS version of the octavia that is quite good.

masters of building cars that don't corner

11:56 AM

lulz

@kalina You'd be surprised - they're essentially VWs with the wrong badges

@kalina A Lada probably :p

@kalina, the new mustang has no longer pre-car cornering tech.

@RoryAlsop burn your fucking planet... though i feel like people in the room would have prefered sex on the dance floor

As of 2015 - bad enough it did stick for so long.

11:57 AM

everybody prefers sex on the dancefloor

@silverpenguin If you haven't, make sure to watch last season of Top Gear where they reviewed the McLaren P1 and Porsche 918: both are hybrid supercars that have an electric motor working alongside of a petrol engine.

sometimes that even happens

especially in germany

It's really, really efficient and amazing.

@kalina, pics or didn't happen.

me providing pics doesn't change whether it happened or not

11:58 AM

rules. of. the. interwebs.

:)

@SmokeDispenser Go back in the 90s when people discovered E in Berlin, you'll get plenty of material.

/me reads too fast, and thinks that @Simon is claiming sex on the dancefloor is really efficient and amazing

wot

@SmokeDispenser all I'm going to say on the matter is "berghain"

Don't go to the weird rooms in Berghain if you're a weakling.

I WANNA GO FFS

Not to the weird rooms, I don't think I'd dare to explore the place.

12:03 PM

@kalina :D

well gz on killing the chat

@TildalWave Somebody changing "They" to "He"

#chatkiller

@Adi link

he was asking for a link!

@kalina security.stackexchange.com/review/suggested-edits/71921

I find that edit offensive

12:13 PM

@Adi About OSCP: "You must schedule the challenge within 90 days of the expiration of your lab time."

I looked up "insanity" in like 10 different dictionaries and none of them said anything like that. Neither did the DSM-4. But I'll keep looking. Maybe it's in the DSM-5!

@Simon Jaa?

My lab access does not even last 90 days, does that mean I had to register even before I registered to the course?

@Simon "the expiration date"

WITHIN

I CAN'T READ

FUCK ME

Thanks.

12:14 PM

@Simon I guess you're used to hearing this, so "No"

:( but pls

:D

@Simon and if you want to book it even later, you can just get 15 days of lab access

they come with an exam attempt

0

Q: How can I bypass the XSS filter in Google Chrome?

I have a script that steals cookies using XSS vulnerability when it is opened in in the browser. I tested it on Firefox and it worked perfectly but it didn't work well on Google Chrome My HTML code that I use to steal cookie is: <form style="display:none" action="http://www.xtatar-sa.com/login"...

xss google chrome html

Somebody's trying to hack the Arabic version of Travian

@Adi I found chrome is weaker to get XSS than to post XSS

@silverpenguin What does that mean?

@Adi XSS attacks in the URL rather than to form data essentially

12:20 PM

@silverpenguin I understood what you mean by POST and GET

but what does "I found chrome is weaker to" mean?

What does that mean? Weaker?

Empirically

I recently did an SQL injection attack on a major, major eCommerce website

in the billions

I called them up on the phone and warned them about it

@MarkBuffalo Bad idea

Naw

@Adi Oh sorry my misunderstanding, basically their seems to be a built in JS script in google chrome which detects XSS in the POST data which stopped me injecting the code in a form. i knew the weakness was there because it worked on iceweasel... but I managed to get arround the security in chrome by implementing a URL formed attack

They were quite thankful. I did not drop anything.

12:22 PM

@Mark Did you get monies for it?

@MarkBuffalo how are you not being sued for this? you did an illegal pen test on their system :< ??

@silverpenguin I often find it's also the other way around

Actually, see, it was an accident

for shits and giggles, I typed in the 1=1 stuff

and it dumped their entire db

@silverpenguin For example, injecting HREF in <math> tag

@Adi OK cool, I'll see how the course goes and will decide accordingly.

12:24 PM

Works in Firefox but not Chrome

@MarkBuffalo ouch

did not expect it to work

@MarkBuffalo bear in mind that weev went to jail for not doing a lot more than that...

so I quickly called them

I did it as a joke. "Yeah, this won't work"

"....wtf"

@MarkBuffalo sure but lulz isn't a court recognized defence :op

12:25 PM

lol

@Adi see by looking at the code I was the GET was posted directly into the front end code in some ref tags... closed off the ref tags in the URL and had lots of fun I could run anything... URL attacks are more juciey anyway :3 easier for an attacker to spread the love

better I find that before some malicious person does

Better get sued than letting a malicious person get sued.

9 mins ago, by Mark Buffalo

for shits and giggles, I typed in the 1=1 stuff

9 mins ago, by Mark Buffalo

and it dumped their entire db

Mmmmmokay

@AviD @RoryA Please check the flag queue about that XSS question. This might have some legal consequences. The idiot just disclosed a vuln in a live system.

@Adi IIRC it's @AviD 's day off not sure if @schroeder or @JeffFerland are about...

@Adi also what a muppet, screenshot of the site and everything

12:38 PM

@Adi: do you know which website he is trying to exploit? security.stackexchange.com/questions/117870/…

I guess it isn't his personal website, right? :(

@BenoitEsnard It's in his "PoC" xtatar-sa.com

Oh right, didn't even read the code

Benoit Esnard's is interesting

I didn't know that Chrome filters XSS automatically

Actually IE8 does the same

blogs.msdn.microsoft.com/ie/2008/07/02/…

I learnt while reporting vulnerabilities: webmasters using Chrome didn't understand what was the problem because XSS were filtered

So now I always tell them to open the page in Firefox

Yep. I've just checked Chromium source code. It seems to be enabled by default

12:47 PM

7

Q: Is chrome completely secure against Reflected XSS?

I notice that Chrome does not execute scrips that are part of the web request, http://vulnerable_site?pageTitle=<script>alert('xss')</script> With such links since the script is as part of the web request, Chrome does not execute the script. Does that prevent all kinds of Reflected XSS attacks ...

^there are some possible weaknesses although IIRC it gets updated with new tricks so that list may no longer work

Yeah I've read articles explaining very smart exploits about that filter

But as far as I know they are all fixed now

Well, all public ones are fixed :P

I've restored my answer, I guess the question will be deleted soon

@HamZa we are CTF saturday right?

@BenoitEsnard Can you make some edit on it?

Anything

@Adi *Table. Was in a hurry

Also, everything joined

And that isn't the full syntax

@MarkBuffalo did you literally just type 1=1 ... im sure you had to atleast try and close their syntax

12:58 PM

No, I didn't literally type only 1=1

You know what I mean by that.

« first day (1919 days earlier) ← previous day next day → last day (2966 days later) »

Transcript for

Mar '1618

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile