The DMZ

silverpenguin

12:04

learning how to do the burp suite

>->

Rоry McCune

@silverpenguin learning burp suite is a journey, not a destination </pentesterzen>

silverpenguin

@RоryMcCune how long is this journey? and do you have any good resource i could use rather than questionable youtube videos?

Rоry McCune

@silverpenguin put it this way I've been using Burp since before it was burp suite, I still find new things about it on a regular basis... reading the Web App Hackers handbook is good as many examples are done with burp and burp's author is one of the authors of the book

s'getting a little old now ,but still an excellent read

AviD

@RоryMcCune really, that "not this year" is official?

Rоry McCune

@AviD well that's Dave Wicher's chat from what I saw, and I've not seen any challenge to it, it's a bit sus. if you ask me no idea why they're delaying

it's not like they haven't had 3 years to plan it

silverpenguin

12:10

@RоryMcCune I actually have this book, a second one just came out also ?

Rоry McCune

@silverpenguin 2nd edition has been out for a while, not aware of a new one past that...

Simon

@silverpenguin First, you drink a lot of soda.

silverpenguin

@Simon 2 bottles of pepsi ok?

Rоry McCune

@AviD lists.owasp.org/pipermail/owasp-topten/2016-January/001327.html

AviD

@RоryMcCune maybe because theyre trying to figure out how to spin it so that only one certain company complies with it.

yknow, like Benchmark.

Simon

12:11

@silverpenguin Yes but I will judge you for choosing it over Coca Cola.

@AviD SUP BUZZ KILLINGTON

Rоry McCune

@AviD yeah if they do some dodgy "aligning" with context's products (and I really hope they don't) that would be bad...

AviD

very, very bad.

Rоry McCune

so fingers crossed it's just 'cause they're busy and it'll go to plan

although I note that the data call that was due in feb. has not happened yet...

Terry Chia

@RоryMcCune Especially since it's just about their only useful project now. :P

silverpenguin

@Simon i love coke but i drink it so much i needed to change because i cant taste coke any more... so i need to switch... im down to 500ml-1 litre of coke/pepsi ....down from 3 litres a day.... its a way of life not a choice

Rоry McCune

12:14

@TerryChia TBF the code review guide and testing guide have been recently refreshed, ASVS is good and so is ZAP

Simon

@silverpenguin Sounds like you need to stop drinking soft drinks.

2

Q: cmd equivalent to "cd ~" to change to C:\Users\<current user>\Documents\

I have to switch to Windows for the duration of a project. I have only just started, and I already dislike using cmd. Is there a shortcut for C:\Users\<current user>\Documents\ ?

LINUX MASTER RACE

silverpenguin

lol !!!!! and @Simon its an addiction... im drinking less and less :D its a slow and steady race... I cant even remember how to use windows any more its been so long

Rоry McCune

@Simon mrzool.cc/writing/sensible-bash <-- a good list of customizations for bash

Lighty

0

Q: What to do when crib dragging does not work for OTP ciphers?

7ECC555AB95BF6EC605E5F22B772D2B34FF4636340D32FABC29B 73CB4855BE44F6EC60594C2BB47997B60EEE303049CD3CABC29B 64C6401BAF45F6A930435F3DF875C4E102F8742A45C824AFCA9B 7AC24F5EAF17F0A0754D5834BC3CC3A90ABD7B2A52C222ABC89B 72C24A52B550B3B8624D4F22F86BD2B30ABD642C498122A1D29B 73CC5457BF17E7A4750...

one-time-pad

silverpenguin

omg guys D: its my security exchange 1 year birthday D:

if thats a thing

Adi

12:19

@RоryMcCune What happens when an application that is forced to proxy through Burp tries to create a non-HTTP connection?

silverpenguin

D:

Adi

@RоryMcCune My case is a Burp-proxied Outlook making an LDAP connection

Rоry McCune

@Adi hmm not sure I have a definite answer. Given that burp is usually only set as an HTTP proxy, I think that it will only intercept HTTP requests, but that would be down to the client app. knowing not to proxy the LDAP part, rather than burp handling it...

Adi

@RоryMcCune Interesting. I'm wondering whether Burp would see the attempt, and drop it, or smartly figure it out and just pass it on without handling it

Rоry McCune

@Adi well as I say you'd think the client app. would know not to send it (i.e. it sees a proxy configured for HTTP requests and not one for LDAP) the exception might be if you configure burp as a SOCKS proxy, but I'm not sure that'd work at all...

Adi

12:28

@RоryMcCune Given that the client is Outlook, I think it's gonna be quite a pain to figure out what it's trying to do :D

Rory Alsop

@kalina name of my next track has to be Mandroid!

Simon

50

Q: How to benefit from company disaster

I'm seeking advice on how to handle a high risk opportunity. My employer recently had to do some layoffs due to changing the underlying technologies used for its products (ie: moving from C to C++, migrating from CVS to GIT, etc). For some stupid reason, they insisted that most of the developers...

professionalism negotiation notice-period legal layoff

Wow.

That's a mess.

I don't believe the first line of the "Update" part.

He has it.

silverpenguin

anyone know how to SQL inject PDO? i dont think anyone has worked out how yet?

Simon

@silverpenguin Correct.

silverpenguin

@Simon didnt think so :< damn my smart choice

Simon

12:36

@silverpenguin Read this: stackoverflow.com/a/12202218/1513084

If the configuration is done right, it shouldn't be possible.

AviD

hey @RoryAlsop what do you think of this? meta.security.stackexchange.com/questions/2229/… while I completely agree with the lock, it might be possible to open it for more details... WDYT?

Simon

@AviD How about you guys will unlock his question the day he'll learn what respect is?

silverpenguin

@Simon yea I do it properly ! because i am a good programmer... should i be disappointed I cant crack my own work? does that mean I am a good programmer or a bad hacker? lol I found one XSS in a search field but its a post request and the whole site is SSL so unless i am wrong that shouldnt be an issue?

Simon

@silverpenguin "Security is not about what you know; it's about what you don't know".

Rory Alsop

@AviD Oh - yes. The lock was purely to stop the edit war.

Simon

12:41

@silverpenguin The fact that the site is using SSL does not protect from XSS.

Rory Alsop

But if he continues with the nonsense, then rollback, lock and suspend

AviD

@Simon you think we need respect? from a guy like that?

Simon

@AviD We don't need it but he needs to learn what it is.

silverpenguin

@Simon it does not protect from XSS but it should stop interception of an XSS vuln from a 3rd party thats only available via a post method? correct? or not?

Ixrec

wouldn't the 3rd party just use your site and submit the XSS-exploiting content themselves?

Rory Alsop

12:44

@AviD - I'll unlock and watch

Simon

@silverpenguin What do you mean by interception of a XSS?

silverpenguin

@Ixrec yes though im trying to assess the level of critical for it to be patched (I have to do these things bureaucratically)..

@Simon I mean intercepting post requests and injecting the code using. can you give me a good xss attack a

Ixrec

stopping an MitM-based submission of XSS-exploiting content doesn't really change whether XSS vulnerabilities exist, so I'd think that SSL is irrelevant for how to assess as well as how to fix

I'd expect whether it's critical to depend on how many users are able to submit this content, and what kinds of exploits it can do (e.g., if we're talking literally anyone on the internet can feed you arbitrary Javascript code, then that's very bad)

Simon

@silverpenguin Ah, Man-in-the-middle?

silverpenguin

@Ixrec I know how to fix it thats easy, im new to the pen testing world as i am a developer. @Simon yes thats what i was talking about maybe i should have typed it i just thought i was making sense xD i am not good at explaining things

Ixrec

12:47

full disclosure: everything I know about security is from reading too many posts on the main site

AviD

@RoryAlsop cheers! have a good ender

Simon

I'm expecting this to be the least common way to abuse of XSS.

Maybe we could ask ovid but he's too busy not being helpful as usual.

OVID I'M JOKING XOX

Ixrec

if you already know how to fix it, why not just fix it? =)

silverpenguin

@Simon I was thinking backwards as this is the most dangerous way. obviously i could be very wrong

@Ixrec my company just got bought out by a larger company, so im being an ass and doing everything how they want me to the LETTER seeing as they are shitting on my job roll

AviD

@Simon sorry no clue what you're referring to.

@Simon Can't really be bothered to read everything you write...

Ixrec

12:50

sounds like a Workplace question

silverpenguin

@Ixrec so i am not going to just fix it :P

Simon

@AviD How common is XSS code injection through MitM?

AviD

@Simon seems rather pointless.

Active MitM, I assume?

Simon

@AviD That was my view of it.

@AviD Ya.

diagprov

@Simon Wow just about sums that up!

AviD

12:51

if so, you can just injectd anything you want directly into the response, regardless of the existence of any XSS flaw.

Lighty

http://www.wired.com/2016/03/ancient-viruses-hidden-human-dna-fight-off-new-viruses/
Interesting read

Simon

To me, the most dangerous XSS would be Samy worm-type.

The ones where it just spreads just by viewing a page.

silverpenguin

@Simon give me some links or some code? I wana try this out (maybe not the worm that scares me a bit) im just testing my web app something that wont set fire to my harddrive please

Simon

Samy (computer worm)

Samy (also known as JS.Spacehero) is an XSS worm that was designed to propagate across the MySpace social-networking site written by Samy Kamkar. Within just 20 hours of its October 4, 2005 release, over one million users had run the payload making Samy the fastest spreading virus of all time. The worm itself was relatively harmless, it carried a payload that would display the string "but most of all, samy is my hero" on a victim's MySpace profile page. When a user viewed that profile page, the payload would then be replicated and planted on their own profile page continuing the distribution of...

You should get the idea.

AviD

I think it's adorable that even @Simon finally has somebody to mentor.

Ixrec

12:54

samy.pl/popular/tech.html

Simon

@AviD It doesn't feel right.

silverpenguin

ouch 3 years no computer use for that

thats harsh

@Simon is probably younger then me too... i think this is a sad day.. but il except help from anyone if they will give it to me

Simon

WOT

I'll be coffin shopping in 5 years so I'm super old.

Ixrec

ok, so this does fall in the category of "user submits arbitrary JS code which your site then runs for all other users"

silverpenguin

@Simon how old? i thought you were like 20... or am i thinking of stuw

Simon

12:56

25.

Coffin shopping begins at 30.

silverpenguin

yes! you are 1 year older than me

but you choose the security path...i chose the programming path T_T together... we could rule the world @Simon ?

Simon

wat

I'm a dev.

AviD

Adorable.

silverpenguin

@Simon i thought you were a pen tester im so lost with what people do on this site... im terrible

AviD

It's like when your 3 year old wants to take care of the newborn baby.

silverpenguin

12:58

@AviD you could teach me things? :D

AviD

That would be inappropriate.

Rory Alsop

Lol

Simon

@AviD I thought that was how you guys did it in Israel? It would explain the 83247384 kids.

AviD

heh.

Simon

fkin_heh_rekt

AviD

12:59

actually yes, this happened.

Rory Alsop

@Simon is it bad that I quickly checked that in base 8 and base 16 to see if it was an interesting number?

AviD

nobody loves babies more than slightly larger babies.

Simon

@RoryAlsop Yeah it is bad, you should know that I'm not that clever.

AviD

in some neighborhoods they do actually have the 5 year old babysit for the 2 year old.

silverpenguin

@AviD why you mean to me? teach me things... avid you are Israeli ?

Simon

13:00

@silverpenguin Nah, he's Egyptian.

AviD

lol

Simon

He even lives in a pyramid.

AviD

dont make him crazy, that is a legitimate answer.

kalina

@silverpenguin you're very interested about everybody else

Rory Alsop

Smallest babies at the top of the pyramid

kalina

13:01

are you a murican working for some kind of government agency?

Simon

And this morning he sounds a bit mad because he has sand in his ween.

kalina

how would you get sand in your... nevermind

AviD

@RoryAlsop need to be careful they dont roll off.

Rory Alsop

Or was it toast?

silverpenguin

@kalina I am interested in this line of work, it helps to know who you are talking to :P im trying to my friends and contacts

AviD

13:01

@Simon lolwut

Simon

wot

Rory Alsop

@silverpenguin self awareness and social awareness need to be your friends here...

AviD

@silverpenguin ah well I dont do pentesting.

Rory Alsop

Me neither - I'm in HR

:-)

silverpenguin

@RoryAlsop i dont understand?

Rory Alsop

13:02

@silverpenguin (I'm not really in HR - it's a joke 'cos I'm so old and out of touch with technology...)

<sigh>

Simon

o and yesterday we went to da bank to get pre-approved for a mortgage.

Rory Alsop

You've been here a year, haven't you?

Simon

IT DID NOT FEEL RIGHT

Rory Alsop

Pre-approved?

What is this thing?

AviD

@RoryAlsop TODAY RORY HAD TO EXPLAIN THE HR AND OLD RORY JOKES

silverpenguin

13:03

@RoryAlsop i just didnt get the social awrness thing :< i struggle with text based jokes D: I need to see a face, quick someone link a jpeg.

Rory Alsop

Do you not just go in and say I want to buy big house, and they go show me the moneys?

silverpenguin

@RoryAlsop 1 year today B)

but only started using this chatroom yesterday

Rory Alsop

@silverpenguin Ahh - okay. Ask ask ask without some give -> annoys/offends some folks, but in any case raises suspicion. What I meant was to be aware of this

Simon

@RoryAlsop Basically, the bank certifies that they will loan you X at Y rate so you can go house shopping and not waste time to get approved for a loan once you find the right one.

silverpenguin

@RoryAlsop oh i see, well no one asked me anything :< il keep that in mind

AviD

13:06

@Simon they dont need the specifics of the house as collateral?

Rory Alsop

@silverpenguin So sometimes give something first to see if others will do the same. There are all sorts in here, from very open folks to very opsec aware people

AviD

like e.g. you take a 2M mortgage, and buy a 800K house...

Simon

@AviD Hum yeah, I wonder how that works.

They did ask what kind of house we were looking for though.

Rory Alsop

A big one!

Shaped like a pyramid

Like your hero's house

silverpenguin

@RoryAlsop I see, hm well sorry if i did annoy anyone.

Simon

13:07

@RoryAlsop It sounds a big inconvenient.

Rory Alsop

:-)

Simon

@RoryAlsop MY WAT

Rory Alsop

@silverpenguin you may not have - it was more a friendly piece of advice

AviD

so here, we got the bank to agree in principle, and the general range / interest / ratio / etc. After we had a specific house, and letter of intent, we went back to the bank to close the final details and contract.

e.g. they usually dont agree to provide more than 60% of the value of the house, or whatever.

or 80% in some cases. less, in others.

@RoryAlsop lol

Rory Alsop

Weirdest flag ever

silverpenguin

13:10

think il just go back to being a manatee

Simon

@AviD WAT

AviD

@RoryAlsop missed it?

Arperum

@AviD Here you can go to ~100%, not sure though, they also have a max based on your income, and I ran into that limit (it's a stupid low limit).

Lighty

It's friday people, that means.... TIROLER FREITAG!

Absolut Tirol - Tiroler Rosi polka

►

Simon

@Lighty Why are you talking about dovid? He's probably still sleeping.

Rory Alsop

13:11

@silv I just wanted to speak up in case folks treated you like the occasional troll we have had here...

AviD

@Arperum yeah, there is a range enforced by law, well below 100%. where in that range you can get (40-80%) depends on income and other stuff.

diagprov

@Arperum @AviD @RoryAlsop in the UK, they usually let you borrow up to 5x your annual salary, and before the credit crisis you could borrow up to 95% of this amount.

Simon

Yeah, here the banks are willing to loan you more than you should be able to afford.

AviD

@diagprov is it not capped relative to the value of the house?

Arperum

@AviD Over here you used to be able to go over 100% but it resulted in a higher interest rate. And from 80% or lower you got a slightly better rate.

silverpenguin

13:12

@diagprov in the UK as a new buyer you can borrow 95% 20% from government and 75% as mortgage

Rory Alsop

@diag - they used to allow 100%!

And I think most places have dropped it to 4x and some to 3x

I remember having a 100% mortgage when I was a new graduate. Got stiffed on the interest...

silverpenguin

i cant get a house with how much im paid. its a joke renting just eats my money and i cant save

Rory Alsop

Now I think I have about a 50% mortgage

Arperum

@diagprov Over here it's based on "You need ridiculous amount to live from aside of your mortgage paybacks, so the rest of your income you can spend on mortgage."

AviD

btw here the regulations also restrict how much of that loan you can take in different formats - e.g. fixed interest vs floating, how many years, etc.

heavily regulated.

taking out a mortgage here is more like managing a well-diversified stock portfolio.

diagprov

13:14

@AviD Well, you don't borrow more than you need, usually. Sometimes there are complex deals that let you release part of your equity for renovations, so it isn't always related to the house price.

CH requires a minimum 20% deposit on the house value, no negotiations. On the other hand, the long term portion of the mortgage can have repayment terms of 100+ years. I don't understand either :)

AviD

huh.

Rory Alsop

Germany has some very long term mortgages too - when I was there they described it as familial mortgages

AviD

the 100 years is probably because it still counts as money in the bank's account, so they can count it as owned value.

diagprov

@RoryAlsop Yeah. They're a lot more restrictive now, mostly because it turns out they lent a load of money to people who couldn't afford it and then nobody wanted to buy the debt portfolio off them.

AviD

or maybe they jsut have a much longer view of finances. Which makes sense for CH.

Simon

13:16

I did not mean to start this grown-up discussion.

6

diagprov

@RoryAlsop Yeah I think it tends to stay in the family.

I.e. the mortgage is basically passed down.

silverpenguin

@Simon you can call me taco

Simon

wat

silverpenguin

<3

Simon

Can I call you the fugly manatee instead?

silverpenguin

13:18

your spelling is terrible... its spelt sexy

silly simon

Simon

pls

diagprov

@AviD That's probably a better way to do it. In the UK you really need look at your options - there's all kinds of setups.

silverpenguin

ok you can call me that

if you whisper into my ear that i am the only mexican for you

AviD

when I started my mortgage, it was comprised of no less then SEVEN different loans, of different types, rates, and durations.

diagprov

@AviD The Swiss usually work on two, one with a 15 or so year repayment period and one with maybe 50-100 years.

AviD

13:20

Oh yeah then I added another 2 as a bridge, between paying for the house and getting the cash from the sale of my previous one.

Rory Alsop

@silverpenguin that would be mexy manatee, then, surely

Simon

@AviD wtf.

AviD

@Simon had to get a special exemption for that one, because it was only a few months.

Arperum

@AviD wtf.

diagprov

In the UK, you can do all kinds of things, like savings accounts that are used against your mortgage balance but you can withdraw from (thereby altering your mortgage). What's available really depends on your circumstances.

Rory Alsop

13:21

@AviD Any time my mortgage ends up growing layers (eg if I took out a new bit to pay for extension etc) I change providers if they can't give me a simple mortgage.

AviD

why is everyone wtfing me??

Rory Alsop

Bridge loans are horrible - had to do that once

Simon

@AviD 9 LOANS FOR A SINGLE HOUSE

THAT'S THE WTF

Arperum

I have a single loan to a bank.

kalina

@AviD wtf

AviD

13:22

@RoryAlsop oh it was simple. Just several differnt kinds of simple.

it really was about diversification, much like a stock portfolio.

Simon

I read stock potato.

huehuehuehue

AviD

crazy surprised my father... he'd been a real estate lawyer in US, so he was rather shocked by the system here.

Simon

@AviD Yeah no shit.

kalina

@silverpenguin yeah I'm not anything to do with this line of work

AviD

@RoryAlsop yeah, but it made sense. Didnt cost me much either.

@Simon "loans". all part of the same mortgage.

SEJPM

13:23

@AviD wtf

AviD

@kalina thank you.

kalina

@AviD wtf

AviD

heh

kalina

WHAT

THE

ooh a squirrel

2

Ixrec

@AviD that is an excellent sound byte

AviD

13:24

16 messages found

silverpenguin

@kalina may i ask what you do? obviously if its personal then cool i am just curious.... and @RoryAlsop i like mexy...sounds new and web 2.0

AviD

@Ixrec heh, I guess.

Ixrec

Mar 6 '12 at 20:49, by Karrax

@AviD wtf ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้

nice

kalina

@silverpenguin hehehEhehEHEHhehh yes... no

AviD

it wasnt simple to negotiate with the bank - because I was comparing to other banks, and each one is slightly better in different aspects

silverpenguin

13:25

@kalina you have confused me :D it does not take much to do so

kalina

are you really confused or do you like cake?

silverpenguin

@kalina so if its a yes.... what do you do? if its a no... say manatee and i will cake the eat

Simon

wat.

silverpenguin

@Simon exactly

kalina

no I think you don't shrooms the cake we're situation at the exactly

AviD

13:26

so here's the thing about the mortgages here. 3 basic types - long term fixed interest (wont change over e.g. 30 years), variable interest (changes every X months, over the course of Y years), and linked to e.g the USD.

silverpenguin

@kalina finally you are speaking my language

kalina

should commune to speakingly adept high upon

silverpenguin

i have to go for a burrito

brb±

kalina

how rude

AviD

It makes sense to take advantage of both fixed and variable - since you have no idea what will happen to the interest rates, ESPECIALLY here in israel, over that long a period. linking to e.g. USD makes sense for me, since much of my income is linked to the USD/ILS rate - if it drops (like it has) I could be royally screwed.

kalina

13:28

deserted for meat

are you still talking about your loans

why are you doing that

can you see that nobody has been paying attention for you for the last entire screen of text

AviD

now, on top of that, the gov'mt regulates special rates for certain amounts. so that further splits the loans.

kalina

zero people

AviD

@kalina pfft. because they were intersted

kalina

not a single pony was given

intersted

AviD

@kalina ah no :-(

cant read while writing

kalina

13:29

you look at the keyboard while typing?

:O

AviD

no, I look at what I am typing.

kalina

that's interesting

and it also explains a lot

basically whileever you're talking you assume everybody else is sitting there reading patiently awaiting you to finish

AviD

rather slow, I admit

kalina

that's an epic assumption

AviD

@kalina lol

no...

kalina

13:31

no wonder you like room timeouts so much

AviD

what am I, @ThomasPornin?

kalina

it allows your reality and the real world to actually align momentarily

AviD

@kalina pfft. Lemme just timeout for a moment while I finish typing.

NOT.

kalina

@AviD in room timeout for no reason shocker

oh wait, that's a daily occurrence

AviD

oh you

Simon

13:32

o_u

Almo

oh v

kalina

WAIT A MINUTE

are you @almosnow

Simon

No he's not.

kalina

yes he is look at his name

Simon

You've been in the game dev room and you don't even remember him?

kalina

13:34

this isn't the game dev room

Simon

And that statement is relevant because... ?

M'vy

this isn't a mountain

kalina

and that statement is relevant because...?

SEJPM

@kalina no security.stackexchange.com/users/15784/almo

Rory Alsop

This is not America

kalina

13:35

oh well

SEJPM

@RoryAlsop #MakeTheDMZGreatAgain?

kalina

well the obvious way to do that would be to get rid of all of the non info sec discussion

Rory Alsop

@SEJPM The DMZ IS Great

:0-

SEJPM

@RoryAlsop sometimes more and sometimes less :(

Rory Alsop

Yeah

SEJPM

13:37

@kalina so what would you talk about then?

kalina

@SEJPM I wouldn't, I'd leave after getting bored

Rory Alsop

Music

SEJPM

@MarkBuffalo, this may be of interest for you

Simon

@SEJPM Aw dude, this was a fine Friday so far, don't lure him in.

does the get_rekt pls dance

SEJPM

@Simon he's already in the room

Simon

13:42

You're already in the room.

kalina

@SEJPM who are you anyway

I don't remember you

are you @almosnow?

SEJPM

@kalina no

Simon

@kalina Of course you don't, since you don't remember anybody you pony.

SEJPM

@kalina some random internet guy?

kalina

@Simon WHAT?!

@Simon WHO ARE YOU? @ALMOSNOW?

SEJPM

13:43

@Simon indeed I am

Simon

ffs

AviD

@Simon punctuation might help prevent that from being horribly misunderstood.

Bannably misunderstood.

Simon

...wat

kalina

@SEJPM gosh your list of communities is so boring... crypto, infosec, hardware recommendations?!

@Simon is that really necessary?

AviD

@Simon well... perhaps the lack of punctuation is what leaves it ambiguous. Perhaps choose another verb, that is not understood as a slur.

Simon

13:45

Which verb?

SEJPM

@kalina sometimes you need some new hardware

Simon

Twat is a verb?

kalina

maybe I could get my third valid flag in two days

AviD

@Simon did you mean it as a slur?

or a misspelling of tweet?

Simon

wtf is a twat anyway

kalina

13:45

it's always going to be a slur

Simon

goes to da google

kalina

yeah now @Simon is about to learn something new

Simon

O LOL

kalina

maybe hopefully re-evaluate his choice of wording

AviD

I am willing to apply Hanlons razor here.

kalina

13:46

are you

Simon

"a person regarded as stupid or obnoxious."

That's the definition I was going for you donuts.

kalina

I'm willing to to apply actual razors

AviD

@kalina sometimes it is used as a mis-tweet. Or twert.

@kalina I did that for him.

@Simon and where did you get that from?

Simon

@AviD Google?

AviD

Do you know the etymology of that definition?

Simon

13:47

Yes but what I've given you in the second definition.

kalina

hey let's move along to the next conversation

Simon

Look!!!

kalina

torn between flagging or just berating or just continuing or BIG MASSIVE SIGH SIMON FFS ARE YOU @ALMOSNOW?!

AviD

@Simon where do you think the 2nd one comes from??

Simon

@AviD Google says unknown origin so of course I don't know you donut.

"Origin
mid 17th century: of unknown origin."

NOBODY KNOWS OVID

AviD

13:49

"oh its a vulgar term for womanhood, so really anybody stupid or obnoxious, just like all women!"

Simon

@AviD I really want you to burn in hell for a day when you die.

AviD

yknow @Simon, when you do things like this, @kalina winds up liking me even more.

you really should stop.

Simon

Somehow, you manage to say that whenever I say 1 and 2, it adds up to 183.

kalina

yes, I like you 100% more than I did before, of course 100% of nothing is still nothing

Simon

rekt

AviD

13:51

pfft

TildalWave

@Simon unknown origin but we know it didn't use to have offensive meaning to start with

AviD

@TildalWave dont know where there original word came from, but it is no secret there is an offensive connection between the definitions.

Simon

Sigh.

Oct 11 '11 at 19:01, by AviD

Twat

Maybe you should give yourself the same speech.

May 11 '15 at 11:50, by AviD

@Simon TWAT

And here.

Jan 17 at 9:48, by AviD

@Simon not love for me, you narcissistic twat

What about there?

#modprivilege

AviD

....

Transcript for