The DMZ

silverpenguin

17:00

@DavidFreitag what about if I fill it up with end to end with data??

Mark Buffalo

Full disk encryption plus delete key?

David Freitag

@silverpenguin Doesn't matter

silverpenguin

@MarkBuffalo good idea

@DavidFreitag what really? so if i fill 250gb SSD with 250gbs of data, you are saying data before it is recoverable :s

David Freitag

@MarkBuffalo That's basically the only way to do it. Except then you're vulnerable to possible vulnerabilities in the encryption and whether your key is actually gone

@silverpenguin I'm saying that there are no assurances that you will overwrite the sensitive data

Mark Buffalo

@DavidFreitag Yeah, pretty muh

silverpenguin

17:02

@DavidFreitag ahh ok...I have to return an SSD i borrowed from work... and one person is extremely malicious so I want to return it as best as i can

Xander

@DavidFreitag Not impossible. It merely requires that the implementation of a secure erase function be built into the device.

Thomas Pornin

@Xander ... and implemented properly, of course.

David Freitag

@Xander Yes but that requires a special device

Not any run of the mill SSD

Xander

@silverpenguin Is more than 250GB of flash memory on a 250GB SSD.

@ThomasPornin Yes, of course.

kalina

@DavidFreitag no, room owner is specifically room owner - you can't wander into another chat room and it matter that you're a room owner in one room

Xander

17:03

@DavidFreitag Not at all. It's built into the controllers of many SSDs.

David Freitag

@silverpenguin Whack it a few times with a hammer

silverpenguin

@DavidFreitag hmmm that does not scream returned, more vandilised

David Freitag

@silverpenguin "It was an accident"

kalina

@silverpenguin it's not clear what the problem is

David Freitag

@kalina Yeah but you can moderate the chat of the room you own

kalina

17:04

@DavidFreitag hence room owner

stop disagreeing with me for the sake of disagreeing

Mark Buffalo

Damn, I never paid attention to the media room.

Simon

dovid pls you're fighting with everyone pls be nice pls

David Freitag

:(

kalina

@Simon you're one to talk

Mark Buffalo

We have xbox games downstairs with kinects

silverpenguin

17:05

@kalina I have been using an SSD i borrowed from work, and I have personal files on it. nothing dodgy just personal and I dont want someone malcious getting them...BUT i have to return the SSD (my own fault for being an idiot really)

Simon

@kalina SHUT TOP I H8 ALL OF U

Mark Buffalo

Lots of ecerise equipment, etc

Simon

@ThomasPornin Wanna come do a hackathon at my place when I get it????

kalina

@silverpenguin I'm not sure the word malicious is required in this sentence, but as @DavidFreitag has said in lieu of the device having a secure erase function you're best of applying full disk encryption

David Freitag

@Simon Wow way to not invite me.

Simon

17:06

@DavidFreitag Well Thomas speaks the same language as I do.

It makes things simpler.

David Freitag

@Simon Oh right I forgot you don't speak english

Simon

Yeah.

David Freitag

Wait you actually don't speak english?

Simon

No I lied.

David Freitag

Wow.

RoraΖ

17:07

@MarkBuffalo I'm awake now

kalina

languages spoken at the home in Canada:

David Freitag

I'm going to go

\o

kalina

clearly you have an "immigration problem"

Simon

babai

kalina

non-official languages is on the up

both English and French are dropping

Simon

17:08

rip frenglish

kalina

@RоryMcCune I'm not liking Archer

I'm sure it will grow on me, though, it's similar in many ways to Home Movies

Thomas Pornin

@silverpenguin If you really value the privacy of your data and fear really nosy people at your workplace, then buy a new SSD and return that. Otherwise, this means that you consider your data privacy less than the price of a new SSD.

kalina

look at @ThomasPornin coming in with the third option

silverpenguin

@ThomasPornin yea this is what i was doing xD but thanks for making me feel like its the right choice xD

kalina

also, who really "borrows" an SSD

Mark Buffalo

17:09

@RoraΖ tell me more about DC. Best suburb areas?

Simon

@kalina Peasants, peasants do.

Mark Buffalo

@RoraΖ Uh, a friend wants to know

RoraΖ

haha

Depends on what your "Friend" wants.

kalina

@Simon well I didn't want to say, it's kinda rude

but really...

Mark Buffalo

This "friend" wants to know about good areas for families

And has to be need a costco

Thomas Pornin

17:11

@silverpenguin Well, the "right" choice would have been not indulging in SSD thievery in the first place, but what's done is done, so now you are more at the "atonement" step.

Simon

rekt

Rory Alsop

@kalina my kids

all the time

despite each having many

Simon

@RoryAlsop And kids are known as peasants.

kalina

still having to go with @Simon here

Rory Alsop

Dammit - I took a photo for @DavidFreitag and for some reason my phone cam borked it. It showed approximately 60 varieties of canned pre-mixed drinks

@kalina lol

Thomas Pornin

17:13

My SSD appears to support "secure erase" and also "enhanced secure erase".

kalina

gotta get me some sanitizer

Thomas Pornin

11

A: What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

As quoted from this page: Secure erase overwrites all user data areas with binary zeroes. Enhanced secure erase writes predetermined data patterns (set by the manufacturer) to all user data areas, including sectors that are no longer in use due to reallocation. This sentence makes sense onl...

kalina

@ThomasPornin well surely if it's "secure" there's no need to enhance it?

Rory Alsop

@ThomasPornin if you have 'enhanced' ... why would you ever use non-enhanced

kalina

that would have me worried

inb4 @RoryAlsop

Thomas Pornin

17:14

@RoryAlsop Two different commands, and backward compatibility.

Rory Alsop

@kalina indeed

Simon

Does the "enhanced" option make the device self-destruct?

Rory Alsop

@ThomasPornin ok - I get compatibility

schroeder

theregister.co.uk/2016/03/28/speeding_ticket_phishing_email

Rory Alsop

@Simon fire!

schroeder

17:14

some criminal activity is so awesome, you just have to tip your hat

Rory Alsop

@schroeder that would annoy me intensely, until the moment I checked it with Pepipoo and discovered it was not real, and at that point I'd be mildly amused

Simon

Is something on this planet really called Pepipoo?

Rory Alsop

I am not a fan of speed cameras - all the data the professional bodies I am a member of prove they do not make the roads safer, and in some cases they increase the accident rate

@Simon yup - a really useful website providing guidance on speeding and parking offences and how to see which ones are avoidable

Simon

ô_ô

silverpenguin

@ThomasPornin I borrowed it

Simon

17:17

@silverpenguin Go harvest some wheat you peasant.

Rory Alsop

Many speed limits in the UK are arbitrarily crap - too high near schools, too low in the countryside; and they are targeted furiously by police forces as they are a great money earner

Simon

@RoryAlsop We have a similar organization here which is called SOS ticket.

Rory Alsop

the RAC, AA and IAM are proponents of instead educating drivers properly - most accidents are caused through lack of awareness, tiredness and inexperience

not speed

@Simon yep - similar in a lot of ways

Thomas Pornin

@RoryAlsop ... and whiskey.

Rory Alsop

@ThomasPornin that does cause accidents, yes, but the %age of alcohol related accidents is a lot lower than I expected it to be

Thomas Pornin

17:20

@RoryAlsop I mean lack of whiskey. When that essential resource is missing, it encourages people to drive to the nearest store, and that's when they get accidents.

Rory Alsop

@ThomasPornin hahahaha

Simon

@ThomasPornin Is the same situation happening in France but with wine?

Rory Alsop

@Simon there is wine everywhere - why would you need to drive to get it?

Simon

Fair point.

I think pornu is pouting at me, he didn't even answer to my hackathon invite.

I'm soz pornu, I can... change?

I lied, I'll always be a dumbass.

Xander

@schroeder I find it particularly interesting that it doesn't seem they've figured out (or at least, are not publicizing) what app it is.

Determining that seems like a logical, and fairly important next step.

Thomas Pornin

17:30

@Simon I must first look up what "hackathon" could be, but I suspect it is a nurd thing.

Simon

@ThomasPornin Well done. It's a bunch of nurdz gathering to do something really nurdy like coding.

And since I'm nowhere near your level of programming, I'd sit next to you and would watch you code.

kalina

the superstar cryptographer just dissed @Simon's passtime as nerdy

Simon

Oh wait I got it, you can figure out a new bug and I'll work on a simple website and will figure out a dumb name like DANCE.

@kalina I've never been to a hackathon you donut.

kalina

yeah, me either

anonymous vpn provider has a "subscription" option

hehehe

Simon

How would you pay for those anonymously anyway, bitcoins?

kalina

17:35

well obviously

schroeder

0

Q: What does this malicious script do?

I got this in an email attachment, which went to my junk folder, asking me to "pay" the "fine" enclosed in the ZIP it asked me to download. My email service (Outlook.com) blocked it, so I did a workaround, downloading the ZIP file, which enclosed this .js file behind a few folders. (I was smart e...

we need a decision on these

we can't be a dumping ground for every random piece of code that looks dodgy

Simon

Too localized. NEXT!

schroeder

@Simon sure, but we need it to be understood by the whole community - currently, there is no SE site that wants to handle this, and we're the closest

there are also lots here who WANT these questions

I'd almost propose a new site just for these malware puzzles

but then it would be a one-stop-shop for open source malware ....

"here's a piece of malware, and here's how it works in detail" "have fun, kids!"

Nate Kerkhofs

Okay, so ransomware seems to become even worse than I thought possible. Introducing Petya, the Ransomware that replaces your Master Boot Record, then encrypts your Master File Table.

grahamcluley.com/2016/03/petya-ransomware

David Freitag

@NateKerkhofs Honestly I'm surprised it took this long

Nate Kerkhofs

17:41

I think the worst part in this for me is that I wouldn't know how to recover from this. I mean, my machine is an upgrade from W7 to W10, and my W10 key is in my BIOS

So my usual idea of just wiping the OS using the default W10 recovery method would fail here

David Freitag

@NateKerkhofs magicaljellybean.com/keyfinder

Nate Kerkhofs

Or is that approach misguided to begin with?

Simon

I'd just replace the whole OS with a decent one, like any UNIX distribution.

Nate Kerkhofs

@Simon assuming I don't want to learn a new OS so I can keep playing my 300+ library of games, is there another solution?

Simon

@NateKerkhofs Yes, you can also stop being a huge nurd.

(I'm not gonna be helpful in any way)

(Because I have absolutely no idea)

Nate Kerkhofs

17:44

@DavidFreitag 1. That doesn't mention Windows 10; 2. to recover my keys from the BIOS, I would have to pay

I was hoping there would be a free solution

kalina

@schroeder I don't know of any site in the SE network except for the really shit ones that would allow a question like this without sufficient evidence that they've already investigated it themselves

David Freitag

@NateKerkhofs Try it, the key might also be in the windows registry

SEJPM

@NateKerkhofs If you stop the restart or have secure boot enabled this won't work

the ransomware XOR encrypts the MBR with a constant

Nate Kerkhofs

@SEJPM Good catch. I'm not sure whether I can enable secure boot on my OS, though

or at least, my mobo

SEJPM

and for initlization it blue screens windows and wants to reboot so it can encrypt your data

kalina

17:47

@schroeder this should be closed > blatantly off topic

SEJPM

@NateKerkhofs do you use (U)EFI?

kalina

justification: It's not about information security, you're asking us to tell you what this piece of javascript does.

Nate Kerkhofs

I got a P8P67 Pro, but last time I checked my BIOS, I couldn't find a way to enable Secure Boot

Xander

@schroeder Ah, never mind, just read your follow up messages.

David Freitag

@NateKerkhofs nextofwindows.com/…

Simon

17:48

@DavidFreitag That doesn't mention Windows 10.

hides

David Freitag

> If you buy a Windows 8.1 or Windows 10 pre-installed computer

Nate Kerkhofs

@SEJPM I'm not sure. I use an Asus P8P67 Pro

is there an easy way to tell which one you got? BIOS or UEFI?

> The new ASUS EFI BIOS is an Extensible Firmware Interface that complies with uEFI architecture, offering a user-friendly interface that goes beyond traditional keyboard-only BIOS controls to enable more flexible and convenient mouse input. Users can easily navigate the new EFI BIOS with the same smoothness as their operating system. The exclusive EZ Mode displays frequently-accessed setup info, while the Advanced Mode is for experienced performance enthusiasts that demand far more intricate...

asus.com/Motherboards/P8P67_PRO

so it should be UEFI, I think

Thing is, I couldn't find Secure Boot anywhere in those settings last time I checked

it seems like it might be enabled by default, but I'm not about to get a Petya infection or dig in my UEFI to find out

SEJPM

@NateKerkhofs it probably isn't there then

kalina

huh, paypal just broke

and unbroke

but telling me that my password is invalid is not a suitable method of breaking

especially when it's their fault

Transcript for