« first day (1934 days earlier)      last day (2951 days later) » 

12:00 AM
0
Q: Mitigating forensic memory acquisition when an attacker has physical access to a workstation

mrparanoiacMy question regards whether or not the mitigations I use are appropriate for my threat model. Please don't jump to conclusions and say "you need to use locks" or "you can't leave your computer unattended" without first reading at least my threat model. I'm not defending from a janitor who got bri...

@Xander halp :(
what do i do with this
 
@Ohnana Whatever you do, don't read it. You'll be eligible for retirement by the time you're done.
 
set fire to it
 
@Xander i already did
well, i skimmed it
i'm a quick reader
 
@Ohnana Thoughts? (I'm reading it now.)
 
@Xander WTAF
was the first thought
second, I need an adult
it's a weird mix of hyper specific and super broad
like, this person is WAAAAY over thinking things, but how do you untangle it to make it good?
 
12:04 AM
there is an easy solution
prevent the attack
hire a security team
fit them all with heart monitors
heart monitor flat lines, ignite thermite stored above the machine
boom, that server is SAFE.
 
@Ohnana Ehh, it is an odd questions, and not a great one, IMO, but it's ok, I think. No reason to close it that I see.
 
no, it shouldn't be closed
but it needs work
 
@Ohnana It would be hard, because it's so big and there's so much hyper-specific stuff there. It looks like there's a bit of repetition that could be removed making it more succinct, and it could be reorganized to have a more linear structure, which would make it clearer, but it would be a lot of work.
Honestly I don't know that I would put in the effort for a question that's so out there.
 
same
well, word of mod
IDGAF!
 
12:34 AM
Some idiot recruiter keeps calling while I'm at work
So I switch the phone number to the home phone... and she calls repeatedly while I'm at work, and hangs up on my wife
= no thanks
 
wow i'd start making fart noises into the phone at that point
 
the mods:users ratio looks a bit dangerous at the moment
 
@kalina In here?
 
yes
no, in all of the other channels i'm not in
 
It always looks that way in here. We have more regular mods in this room than in any room other than TL.
 
12:47 AM
damn i should have said that
no pls i know who is normally in here
 
@kalina Alright then.
 
that's what you get for blindly watching videos on youtube
I'm currently stuck watching buzzfeed videos -.-
 
@kalina all good security solutions should contain thermite as a standard risk mitigation strategy;)
 
oh no i've moved on from buzzfeed and now its watchmojo
 
12:53 AM
@kalina that was 1. in my feed and 2. from a pretty good satire magazine (despite me disliking the host)
@kalina the modcount is too damn high!:)
 
omnomnom burrito time
I came in just before close so they loaded it :>
Also, I saw 10 Cloverfield
It was pretty damn good
 
@DavidFreitag Bon appetito!
 
should I be worried that the lead writer and lead developer for Mass Effect Andromedia have both quit Bioware?
hmmm
 
@kalina :o
Dude seriously this burrito is as big as my head
 
"dude" srsly you should stop eating food that is as big as your head
and... ah balls, I hope EA don't mess up Mass Effect
that will be the last straw I think
 
1:01 AM
@kalina Its EA
there's a good chance they will
 
@JourneymanGeek nooooo
they could... these people might only be like... well... no...
 
@kalina its filled with lettuce, beans, and a small amount of chicken
 
it will be the last EA game I ever play if they ruin it
 
oh and a fuck ton of jalapenos
 
0
Q: What methods are commonly used to store unintended data on someone elses server?

douglasg14bWe (Myself and coworkers) use a service that does not provide several features that we would like to see, I've written some user scripts that make up for these features and add in changing the state of the user or other users on the services server. However, I'm very curious if I can add in ext...

OP be like "let's hack in and improve their site"?
 
1:05 AM
IM MAKIN A HUGE MESS
 
@DavidFreitag it's the sign of deliciousness
 
@Ohnana omnomnom sriracha
 
@SmokeDispenser VTC -> "unclear what the OP is smoking"
2
@DavidFreitag I HAVE CONVERTED YOU
 
@Ohnana YOU HAAAAAAAAAAAVE
 
\o/
 
1:07 AM
@Ohnana yeah. Would have closed as "typo" on SO.
 
im on fiiiiiiiiiiiiire
halp
 
@DavidFreitag quickly eat more
 
@DavidFreitag put some salsa on it!
 
@Ohnana The last bite was literally nothing but a lake of sriracha and a mouth full of crushed jalapeno
 
@DavidFreitag oh lawd
you have made a mistake
 
1:11 AM
Thank the sweet flightless manicotti for chocolate milk
@Ohnana It was fucking delicious
 
@Ohnana also, still 500 rep left for VTC. Remember, I'm only here for about two weeks now:)
 
@SmokeDispenser sigh
 
I've been here for years and we have the same rep
 
FUUUUUCK IT'S NOT WORKING
 
@DavidFreitag you're doomed.
 
1:13 AM
I know the solution! More sriracha!
 
who played Elite Dangerous
 
@kalina @RoryAlsop and @RоryMcCune
 
I'm glad I backed all three
Star Citizen looks completely off the scale
if you skip to like 2 min in
just... wow
 
Reminds me of another game. Whose name escapes me.
 
no man's sky
 
1:18 AM
Yeah that
Want so hard
 
I'm still watching the satire-rammstein message to the US. "Have you heard of the categorical imperative? Read Kant, cunt!"
 
the third game...
 
@kalina wut
 
4 mins ago, by kalina
I'm glad I backed all three
ED, Star Citizen and No Man's Sky
 
@kalina confuse
Oh.
 
1:19 AM
the latter two have kept me waiting for a long time, though
and I know you can get stuff for star citizen but I've refused to play it on account of how quickly I got bored of Elite
 
april fools?
 
I fucking hope so
 
because it's like the 2nd here
 
Snoop Dog with a handlebar mustache is just...
mmmmmh
 
1:22 AM
it's about time pendulum made a new template
still basically sounds like slam
 
That's a very old song, and pendulum broke up.
So... yeeah.
 
that's because DNB got boring
 
That song is from before they had any albums released
No, they broke up because of Rob Swire
 
I went completely off Pendulum when every track on Hold Your Color was obviously built from the same template
 
Uhm that's a very old album
 
1:24 AM
yep
 
@DavidFreitag WHAT
 
Their first iirc
@Ohnana Pendulum has been broken up since Knife Party formed
Since Knife Party is composed of the members of Pendulum who jumped ship
And knife party is total shit compared to Pendulum.
 
I'm pretty sure I have hold your color on vinyl somewhere
I know I have the slam picture disc
 
@kalina So you didn't listen to In Silico? Maaaaan that was so good...
 
@DavidFreitag no I have no tolerance for "artists" who template
same reason I don't like deadmau5
 
1:26 AM
Whatever that means
 
it means they write one track, and once finish they empty all of the arrangement out of it and reuse the sounds/most of the mixdown to quickly write another track
or they'll build up collections of sounds and then just use those sounds constantly
 
@DavidFreitag so i'm not the only one who dislikes knife part
 
@Ohnana Don't get me wrong they have decent songs
But they are only decent when I'm in the mood to listen to KP
Pendulum has always been fucking epic
 
now it's nearly 4am and I have tarantula blaring
meanwhile I was whining about my neighbour drilling this morning
 
1:28 AM
That's what they got from power tooling you out of bed.
 
@DavidFreitag nope, not a fan
 
at least that one is the right speed
 
Crush <3
Yeah In Silico is a really slow album
Immersion picked it back up
 
how about some EDM from before it was called EDM
 
1:32 AM
sec, pendulum is still 'gasming my ears
 
oh fantastic, youtube has worked me out and suggested more quality trance
 
@kalina Heh sounds familiar
@kalina mmmmmmmmmmmmhhhh
 
@DavidFreitag wow did you just mmh saltwater?
 
@kalina The female vocals
The song went on and I stopped mmmh'ing
It sounded like it was going to be better than this
 
i'm currently listening to crown of love by arcade fire
 
1:37 AM
linky linky
 
well we're talking about tracks that have probably made more money for their artists than pendulum made during their entire existence
 
Pendulum isn't that popular
 
the entire album is pretty good
 
90% of the people I know had no idea who they were before we met
@Ohnana THAT'S NOT EDM
WHAT HAVE YOU DONE TO ME
 
1:38 AM
@DavidFreitag no, it's indie rock
there's a nice thunderstorm here
 
@Ohnana VOMITS
 
it pairs well
@DavidFreitag HEY HEY HEY
 
@Ohnana oh dear
 
@Ohnana Here too :>
 
HEY.
THIS IS THE ONE INDIE BAND I LIKE
 
1:39 AM
AAAAAAAAAAAAHHH GOD THE VOMIT, IT BUUUUUUUUUUUNS
 
DON'T POOP ON ME FOR IT
 
I... I wasn... planning on it...?
 
you're going to tell me you don't like this as well aren't you?
 
@kalina It's not that I didn't like it
@kalina Well so far.... hnnnng
 
what does hnnnnng mean
 
1:40 AM
I might've made a mess in my underwear.
I'm a sucker for female vocals.
 
ya weird
 
ok so you like vocal trance
how about edm trap?
 
@kalina Trance is kinda iffy, I have to be in the mood for something slow
@kalina OK, this is fucking great.
@kalina Video reminds me of fight club
@kalina mmmh yah das good
Those dude need to slow it down on that ice cream tho, they gonna get a tummy ache
 
how about this
equally shitty video slightly better audio
 
@kalina phew
@kalina It's not really doing it for me. I'm not really in the mood for slow right now
 
1:50 AM
not in the mood for slow
hmmm
 
I mean don't get me wrong, it's really good, I'm just not enjoying it as much as I could be
I love hearing grown men scream like girls on Twitch.
 
ffffffffffffffffff
that was louder than I anticipated
 
heh
@kalina mmmmh yaaasss
5:45 on got me good
 
wait so basically every track I link gets a meh until about half way through and then you're all like YEP
 
@kalina I'm not really in the mood, but the female vocals always get me
 
1:58 AM
@kalina thank you for the headphone warning
 
oh that wasn't a headphone warning, that was a HOLY SHIT WE'RE BEING INVADED
 
oh right nope, everything is just turned up to 11
 
@DavidFreitag why
 
2:00 AM
FUCK I RUBBED MY EYE AND IT HAD JALAPENO JUICE ON IT
 
ahahaha
 
FUUUUUUUUUUUUUUUCK
 
oh shiiiit
rip David
 
Sorry, no, it was srirachaAAAAAAAAAAAOOOOOOOOOOOWWW
 
ok no more music tonight
back to watchmojo
 
2:04 AM
@kalina Awwww :[
 
@DavidFreitag psh it's difficult to link you good music while simultaneously avoiding everything I would normally play :p
 
@kalina If you linked me something you made I would never know
 
@DavidFreitag oh I'm counting on that but it's still in the transcript
 
@kalina unless you deleted it
But that would be suspicious as fuck
A twitch streamer did tasteful nudes
And he's going over them live on stream
 
"tasteful nudes"
 
2:08 AM
@kalina Yeah it's a thing apparently
I think I'm going to start playing BDO
 
bdo?
 
mmh
 
It's very GW2-esque
 
I found GW2 to be too shallow
 
2:15 AM
Me too
 
in fact, I find all non-WoW/EVE mmos to be too shallow
 
And TBH it's still very new so it's going to be missing some things
But I still wanna try it
 
while EVE is just ridiculous until you've got the hang of it
 
Been watching people stream it, it's pretty cool
@kalina Both times I tried playing EVE I burned out in like three weeks
 
weeks?
months?
days?
hours?
 
2:17 AM
shit
 
minutes?
the first time I tried to play EVE I failed horribly
I quit and said I'd never bother with it again
 
I never failed
 
then somebody convinced me into giving it another go and it drove me insane
 
But I was also never particularly good at it
 
so he gave me his spare account which had a several year old character on it
which provided a significant amount of context
 
2:18 AM
Context?
 
@DavidFreitag as a new player it's difficult to grasp the size of the skill tree and how it all interacts with the items in the world
it's probably the hardest thing about the game
 
@kalina Really? I didn't find that to be true...
But it's possible they made it easier to see what skills effect what
Since you played, that is
 
sure it is, you can skill up all the basic skills within the first day or so if you know exactly what you're doing
well yes, was
I haven't played in ages
 
I googled literally everyhing
So I knew what I was doing well before I did it
 
but it was quite easy to turn that day into a month or more if you didn't know what you were doing
 
2:20 AM
What ships to get how to fit them which skills to train... etc
 
and then it was all evemon this and skill plans
and then suddenly I was playing EVE even when I wasn't playing EVE
and when I was playing EVE I was mining with a multiboxed fleet
and then... NOPE
no more EVE
 
Yeah in the end I found EVE pointless
Like I have every mmo
 
@DavidFreitag Are you a C magician dovid?
 
I'm sure I had a screenshot of my EVE setup posted in the bridge but meh
 
@Simon wut
 
2:24 AM
I have a question regarding memset on char arrays.
 
o
@Simon What'cha need?
 
C makes me want to become an art major
2
 
You need four spaces for multiline code
 
ffs
 
int main() {
    // like this
}
 
2:28 AM
you're a magician dovid
DOVID IT DOESN'T WORK
 
I see no issue
 
I see no issue
no issue at all
look @Simon
even kalina can do it
 
@Simon Just pastebin it
 
@Simon no backticks
 
2:29 AM
@Simon You don't need backticks
Just use spaces
 
OH
char yolo[3001];
memset(yolo, "\x00", 3001);
memset(yolo, "\x43", 3000);
 
just do <space><space><space><space>sometext<shift+enter><space><space><space><space>mor‌​e text
or if you're going to paste, paste into the box and then click the "fixed width" button once
 
1 - Why would you initialize to null bytes if you're immediately gonna overwrite them?
 
@Simon What compiler are you using?
 
2- Why overwrite - 1
gcc
 
2:30 AM
If it's GCC then it automatically initializes to 0x00
 
So it's a compiler thing, wow.
Hence why it worked without it.
 
Initializing arrays like that is a holdover from old compilers
The other way to do it is like this
char buffer[256] = { 0 };
GCC will initialize it to all zeroes
Might need to cast the 0 though
@Simon Also, why did you use \x00 instead of \0?
 
because that's what google said
 
@DavidFreitag I typed it wrong anyway, it was written 0x00 in the code.
 
@Simon WAT
 
2:34 AM
But not my code, just patching an exploit to match my infrastructure.
 
So memset(yolo, "0x00", 3001) ?
 
It was like this: memset(yolo, 0x00, 3001);
No quotes.
 
Oh
That's fine
 
My baaad.
And also, why isn't he overwriting the last null byte, because he wants it to be in the buffer?
No other reason?
 
Because C-Style strings must end with a null byte
 
2:35 AM
Jeeeezus.
 
right I have run out of power and must recharge
 
I really know nothing about that language.
 
don't bother saying night then
since it is basically the morning at this point
 
@kalina o/
 
ok bye
Thanks dovid, I'll go patch this bad boi up.
 
2:37 AM
@DavidFreitag o/
 
@Simon Really there's nothing wrong with initializing the array, in fact it could be argued that it's a good idea in case for some reason the compiler forgets to
 
It's interesting because I didn't end the other arrays with a null byte in the last exploit and everything worked fine.
 
Also, it does make your code more portable
As not every compiler will initialize arrays like GCC does
 
@DavidFreitag I see. It really bothered me because I had no idea why they were all doing it like that and couldn't find shit online.
Probably because I didn't google the right terms.
 
What did you google?
 
2:39 AM
"why memset x00"
I suck.
 
lol
28
Q: C char array initialization

lkkeepmovingI'm not sure what will be in the char array after initialization in the following ways. 1.char buf[10] = ""; 2. char buf[10] = " "; 3. char buf[10] = "a"; For case 2, I think buf[0] should be ' ', buf[1] should be '\0', and from buf[2] to buf[9] will be random content. For case 3, I think...

 
@DavidFreitag That is messed up.
"0 and '\0 have the same value"
This is also good to know.
 
@Simon wat
 
That was the answer to "why there is no '\0' at the end of buf[]"
 
@Simon Oh, yes, 0x00 (the integer) is exactly the same as '\0' the character
A NULL character is a NULL byte (0x00)
 
2:42 AM
Maybe one day I'll actually develop something in C but for now it scares me.
like pls pointers?!?!?
 
Pointers are easy
Not fucking them up is hard.
 
Sounds like it's easy to create hours of debugging.
 
Yup, and C isn't easy to debug
Wow the new DOOM looks like UT
Like they took the latest UT demo and skinned it
 

« first day (1934 days earlier)      last day (2951 days later) »