The DMZ

Shog9

00:54

@HamZa I missed this blow-up earlier, but I wanted to thank you for having the guts to do something about a situation you found troublesome.

Journeyman Geek

@M'vy there's a notification cap?

David Freitag

04:27

@Shog9 Sure, but there was a better way to go about it.

Shog9

05:15

@DavidFreitag of course. And i have confidence someone will go about it in a better way next time. Preferably before it gets to the point anyone feels the need to flag.

jeetZ

06:20

Hi

user11842

@jeetZ Hello

SmokeDispenser

Morning

SmokeDispenser

06:58

is there a way to invite a user to chat who has never been to chat before?

Rоry McCune

07:10

mornin' all

@SmokeDispenser Well apart from out of band stuff, the only way I'm aware of, is to have a mod. send them a super-ping

SmokeDispenser

All right.

Too bad, that's not worth the hassle, I guess. One of the plaintext offenders maintainers left a "thank you" comment under one of my answers. I wondered if that might be a good time to tell him about the ambiguity of their faq :)

M'vy

@JourneymanGeek you should ask them, not me.

Morning

Colin Cassidy

morning

M'vy

@SmokeDispenser no, only mods can do that I thiink too.

Rоry McCune

@ColinCassidy watcha' you still abroad or back in the land o'rain?

M'vy

07:16

@SmokeDispenser don't they have an online form for contact

Colin Cassidy

@RоryMcCune back in the land of rain, south of the border though

SmokeDispenser

@M'vy probably. but I thought, as he seems to be around anyhow, I might as well just talk to him - interactive communication is way more productive then emails.

Rоry McCune

@ColinCassidy ooh you didn't want to go down there, they speak all funny!

Colin Cassidy

@RоryMcCune yep, that they do

Rоry McCune

@AviD I've not actually clicked on the video link.. I shall now avoid doing so :)

SmokeDispenser

07:25

> I surly need make sure the security of the application in a whole is good — php

HamZa

07:35

@DavidFreitag noted

@SmokeDispenser leave a comment to join a chatroom and then delete it after you've confirmed he read it.

SmokeDispenser

@HamZa the thread is full of comments already and should've been a chat before the last comment;)

HamZa

@SmokeDispenser Not sure if this is the right course, but if you think the comments should have been in chat, I think you can flag a comment to ask a mod to move them to a chatroom

Rory Alsop

@SmokeDispenser what you need?

user11842

I told my wife I wanted to get into penetration testing and now I'm sleeping on the couch.

SmokeDispenser

@RoryAlsop this whole discussion may be moved to chat

M'vy

07:42

@TechnikEmpire Some would find this interesting.

SmokeDispenser

@TechnikEmpire maybe you pentested the wrong system?;)

Rory Alsop

@TechnikEmpire pfffft

user11842

lol, sorry its nearly 4 am and I'm bored to death

M'vy

@TechnikEmpire perfect time for more "pentesting"

user11842

@M'vy hahaha

Rоry McCune

07:46

^I'd start here

nice basic model

easy to use

writes well

user11842

@RоryMcCune nice.

M'vy

cheap too

Rоry McCune

then if you get more experience you could move on to something like

more advanced

but nicer output

M'vy

@RоryMcCune you know what brand this is ?

Rоry McCune

@M'vy s' a mont blanc

SmokeDispenser

07:47

let me fetch an image of my fav

Rory Alsop

@M'vy surely everyone knows the Mont Blanc

M'vy

@RоryMcCune yeah. well ok. I've been inaccurate. What is the nameof the pen in the brand :)

SmokeDispenser

that one is genius.

Rоry McCune

@M'vy well it's a random pic I got from google but the URL suggests "starwalker"

M'vy

More into german brand ?

user11842

07:49

I'm going to make a resume where I list all the pens I've tested, apply to sec jobs

user11842

profit

Rory Alsop

@TechnikEmpire apply to bic

profit

M'vy

@TechnikEmpire we should totally do this one day :)

SmokeDispenser

@M'vy it's a german meme. that was a giveaway of a pizza delivery company, they gave them away at universities - and it is really good

user11842

@M'vy Yeah, or not be so blatant on the resume so you land the interview, then when you get in, pull out a fist full of different pens and just demonstrate

Rory Alsop

07:54

Ello stranger

HamZa

@SmokeDispenser @Shog9 @QPaysTaxes @AviD @MarkBuffalo I wasn't abusing the flag system. I got fed up and this one was a deal breaker: http://chat.stackexchange.com/transcript/151?m=28764320#28764320
I think we should stop favouritism, I know that a lof of people tolerate her attitude/jokes but some people don't. And apparently the flag got approved.

M'vy

@TechnikEmpire oh pls, now you're being obnoxious.

user11842

@M'vy huh? lol

SmokeDispenser

@HamZa I know.

M'vy

@TechnikEmpire :))

HamZa

07:55

Asking for me being banned and blaming me for all this drama is non-nonsensical. It would have happened sooner or later. Heck maybe it already happened before

M'vy

@HamZa agreed

Rоry McCune

@HamZa not sure why you're re-opening this? Flags get approved becuase the approvers don't know context (several mods have agreed the system is bad). The intention as was explained yesterday is to flag specific messages which are offensive, it's not designed to "punish" people that people are "fed up with"

SmokeDispenser

And I see your point - yet approaching the RO or her directly before throwing a flag might have been a slick move, @HamZa

M'vy

That could have been smoothier though :)

Rоry McCune

feel free to flag specific offensive messages, but not because someone said them

HamZa

07:56

@SmokeDispenser I know, lesson learned

Rоry McCune

if you'd still flag if it was anyone else saying it, then flag away

otherwise, you're flagging the person not the message

Rory Alsop

@HamZa - yes, what they all said ^

HamZa

@RоryMcCune I'm reopening it because someone is still blaming me. I admit I should have talked to RO but I don't think I was blatantly wrong

Rory Alsop

Drama came from the circumstances / context and the less than delicate handling - including folks trying to witch hunt to find the flagger

which is also not what we want

Rоry McCune

@HamZa people are entitled to their opinions. None of the Room owners or mods have (as far as I'm aware) expressed an opinon that they are "blaming you"

Rory Alsop

07:58

@HamZa who is still continuing with it?

HamZa

@RoryAlsop that's why I came clean knowing I might make enemies

M'vy

speaking of witch hunting, don't we have a bonefire for @HamZa ? :))

Rory Alsop

@HamZa it is possible you made 1 - but to be honest I don't think so

I think kalina preferred honesty as well

HamZa

10 hours ago, by David Freitag

imo he should've been banned

^ somewhere along that transcript

Rory Alsop

(I know she isn't here, so this is my assumption - but she did thank you before she left)

HamZa

08:00

@RoryAlsop I don't know if it's irony or not but I almost considered it as a sarcastic thank you.

Rory Alsop

@HamZa I think she was very annoyed at the flagging of things that were not really flag worthy, when a statement should have been easier

@HamZa we had a sort of discussion around what banning means - a kick for the flag misuse would have been a possibility but in the circumstances wouldn't have helped

:-)

you were trying to do the right thing

HamZa

@RoryAlsop ok...

Rory Alsop

honestly though, what kalina said to gilles - if someone said that to me I wouldn't think any part of it would be offensive.

Matthew

0

Q: Where can I find a copy of the panama papers leak?

Is a copy of the leaked panama papers available online?

data-leakage

Rory Alsop

@Matthew oh lordy

free flags on that one then :-)

Matthew

08:03

@RoryAlsop Good, isn't it!

Rоry McCune

@RoryAlsop I tend to work that if I'm not the target of a message and the target doesn't react badly, just leave it well enough alone

Rory Alsop

what are we, google? :-)

@RоryMcCune yep - I'm more than happy to clamp down on outright rudeness, and I'll edit foul language if it isn't meant in an offensive way (ie as part of a phrase)

M'vy

coffee time is being late

HamZa

@RоryMcCune the target didn't want to react because he was a mod and his flagging would have no second opinion.

Rory Alsop

@M'vy I'm officially on holiday, but working from home, so no coffee for me today

@HamZa that's a bit disingenuous - he could still have flagged

Rоry McCune

08:05

@HamZa heh, you're making assumptions about @Gilles that I don't think hold at all, he's not knowing for pulling his punches

M'vy

@RoryAlsop argh! Then release coffee time, so it can make it to my place!

Rory Alsop

@RоryMcCune ^ yup

@M'vy hahahahaha

Rоry McCune

@HamZa and he and @kalina don't have such a smooth history as he'd be likely to play favourites in that regards

Rory Alsop

multi thread it, man

HamZa

@RоryMcCune true

M'vy

08:06

hehe

Matthew

Let's take this to meta. This FAQ doesn't say anything about not asking about leaked documents at least. security.stackexchange.com/help/dont-ask — dwjohnston 1 min ago

user11842

lol the Canada revenue agency is trying to get its hands on the papers so it can get some money

user11842

blood sucking organization it is

Rory Alsop

@TechnikEmpire HMRC as well...

Journeyman Geek

@TechnikEmpire my government is wanting a copy as well

user11842

08:10

@RoryAlsop I'll never forget the first time I left the country, coming home, to be forced into a line where I had to have a conversation with the tax man. First order of business, give me my cut.

Journeyman Geek

oddly enough, not just for tax evasion...

half suspects its arms smuggling. Of all the things.

user11842

@JourneymanGeek Maybe to find out if they've been busted themselves? lol

Journeyman Geek

@TechnikEmpire naw, the government has no need to hide what it can do in the open ;)

Rory Alsop

@JourneymanGeek excellent data for money laundering investigations - so that does track back to a range of other activities

user11842

@JourneymanGeek true true

Rory Alsop

08:11

@RоryMcCune - our ex-colleague said it all gace him a hectic welcome into his new job...

Journeyman Geek

We've had a few cases where local businessmen acted to helo iran and/or north korea get their paws on things the americans didn't want them having

Was a little embarassing.

Rory Alsop

oooh - that's weird. Going to have to reboot - one screen has decided to report it is no longer a 4k monitor. brb

Journeyman Geek

Granted, somewhat less embarassing than their MPs having affairs...

@RoryAlsop 0_0

I've not had that happen yet

and one of my screens is roughly bottom of the barrel as far as 4k screens go.

Rоry McCune

@RoryAlsop lolz, I can only imagine!

Journeyman Geek

(which is still pretty good actually)

AviD

08:16

Is it Dramaday again already? I was sure it was Wednesday.

Rоry McCune

@AviD well OSVDB did shut down today, that may cause some drama

AviD

@Matthew he did

-1

Q: Is asking for leaked data on topic here?

Where can I find a copy of the panama papers leak? . I haven't seen this question asked on any of the stack exchanges. What is the general acceptability of asking for leak documents on security.se and the rest of stack exchange? Is it a bad idea to ask these questions on one's public profile?

discussion acceptable-question

Journeyman Geek

Its eternal dramaday now ;p

AviD

@RоryMcCune thats not what I meant....

@RоryMcCune also, WAT??

Rоry McCune

@AviD blog.osvdb.org/2016/04/05/osvdb-fin

site's down and no apparent data dump... it's just gone

AviD

08:21

wow. sounds like ragequit.

Journeyman Geek

Sounds like a rage quit

...

AviD

HAH

Journeyman Geek

Jinx.

AviD

omg, ya think kalina runs osvdb?

Journeyman Geek

That would explain a lot

AviD

08:22

hey look, check whose post is being referenced by PlainText Offenders

This is a very interesting take on our publishing offenders. Source: http://security.stackexchange.com/questions/117879/why-submit-a-website-to-plaintext-offenders/117881#comment213246_117881 https://t.co/CeAYsoRKc3

Tweeted by plntxtoffenders on April 6, 2016 at 6:51 AM

@SmokeDispenser way to ride that reptrain!

HamZa

haha

@SmokeDispenser teach me the art of rep farming!

Journeyman Geek

@HamZa heh. I do that ok on SU and to a lesser extent elsewhere

Just post useful, witty, fun answers and things work.

HamZa

I need to find the right question first

Barry Carlyon

Things work. On the internet?

SmokeDispenser

@AviD wooo hoooo!

@JourneymanGeek that, @HamZa

Journeyman Geek

08:27

Also, back when I cared about rep I tried to post one quality answer a day

silverpenguin

the one the only MANATEEEEEEEEEE PPEEENNGGGUUUIIINNN

HamZa

@silverpenguin nice entrance

SmokeDispenser

also, @AviD, that'll just give the comment upvotes:)

Arperum

@SmokeDispenser Nah, it'll also expose the question to a lot more views, and that results in votes.

AviD

well, people will likely read the full answer it is commented on.

SmokeDispenser

08:29

@Arperum it already was HNQ.

Journeyman Geek

ooh

and HNQ spotting

AviD

though you could update your answer to include the comment (with attribution, ofc)

SmokeDispenser

@AviD will do.

Arperum

@SmokeDispenser Yes, this is even more exposure? Not everyone looks at the HNQ.

Journeyman Geek

enough people do

and HNQ titles tend to be clickbait

SmokeDispenser

08:31

@Arperum we'll see:)

@AviD done.

oh, yeah, alright. 3 new upvotes. rep cap will be hit soon, then, today.

Mark Buffalo

@HamZa Agreed on this, but the reason we tolerate her is because we like her... and we think she's funny. We know when she's joking, and when she isn't... and that's just my two cents.

@BarryCarlyon IT'S YOU

Just in time for your two messages

and back to sleepydeep

Barry Carlyon

Yes boss

silverpenguin

@HamZa gotta keep it real man...gotta keep it real

SmokeDispenser

funny thing that the accepted answer on the question is way less vote-supported than mine and still accepted. Also takes another position. funny how OP just accepts what OP wants to read;)

HamZa

@MarkBuffalo I think that not everyone really knows when she's joking (or not). I do realise that I've just barged in and ruined the "fun".

SmokeDispenser

08:39

o pls

can we have a break on that already?

HamZa

@SmokeDispenser Telling the client what he/she wants to hear might also be a good selling technique

@SmokeDispenser I think things needs to be discussed to have a nice closure

SmokeDispenser

@HamZa yeah. well. yes, but with horrible outcomes from time to time.

Rоry McCune

@HamZa I don't think you're going to get the 100% agreement that you're looking for here, but that is just my opinion

HamZa

@RоryMcCune I knew I wouldn't get it, nor am I looking for it. Even IRL you can't get that IMHO

SmokeDispenser

@HamZa I thought we did.

AviD

08:42

@RоryMcCune I agree :P

Rоry McCune

@HamZa then I'm not sure why you're persisting in bringing this up? Closure must mean something different to you I guess

M'vy

@RоryMcCune well, he was responding to Mark who asked first place.

HamZa

@RоryMcCune I'm just replying to people's opinions.

Rоry McCune

@M'vy I didn't see mark's statement as a question

M'vy

@RоryMcCune well, the divergent opinion made the clarification needed I guess. Anyway, should we get a room for that ?

Rоry McCune

08:45

@M'vy that was my point about closure, if people just state different opinions, it would be possible to "respond" ad infinitum with no additional information being presented

M'vy

goodpoint

the problem of asynchronism, everyone wants to pile up something at some other time :)

Rоry McCune

@M'vy yeah international chat rooms make coherent conversations difficult, also as we lack threading, muting a conversation is tricky

HamZa

ok, noted

Terry Chia

@M'vy You need to work on your pickup lines.

M'vy

@TerryChia yeah... right...

AviD

09:05

w00t @RоryMcCune I just registered for appseceu

Rоry McCune

@AviD coolio enjoy rome :)

AviD

should have done it sooner though - my first 2 choices of training were already full. Still, not complaining, FIDO sounds awesome too

Rоry McCune

@AviD ahh FIDO yeah that could well be quite interesting

AviD

really wanted the SDLC and TM courses. though I might have been disappointed with it not being as advanced as I'd hope.

those are the 2 closest to my consulting practice...

Rоry McCune

@AviD yeah training level can be a tricky one...

AviD

09:10

its hard to tell, they dont say straight out "this is beginner level" or "this is super advanced, make sure to have experience before this class"

Rоry McCune

@AviD I've seen things go both ways, it is tricky to do ,but I think many courses could do more on that front.

silverpenguin

comes into work.....*throws up* goes home ....

AviD

and especially because these are areas I know fairly well, I'm always interested in finding ways to advance further, or different approaches.

Rоry McCune

@silverpenguin I thought you were "funemployed" now?

AviD

I'm also looking at some ways to sell those 2 as a packaged service

silverpenguin

09:12

@RоryMcCune thats friday... final week this week

and i have been ill for most of it lel

Rоry McCune

@silverpenguin well what are they gonna do, right! Surprised they didn't just put you on gardening leave...

silverpenguin

@RоryMcCune I know! same but then again I am under non compete and NDA so.... what am i going to do lol

M'vy

@silverpenguin They do pay you for that, don't they?

silverpenguin

@M'vy what sick? either way yes im being paid :L makes it rain

M'vy

@silverpenguin for the NC/NDA I mean

silverpenguin

09:24

@M'vy oh no :{

M'vy

Is this legal where you live ?

silverpenguin

it was written into employment contract and seperate NDA (I live in the UK)

M'vy

Well, in France, you have to compensate for the non-compete to apply

silverpenguin

@M'vy not fair!!!!! :{

M'vy

@silverpenguin on the contrary, it's all about fairness. Well I guess not fair for you

silverpenguin

09:32

@M'vy I cant work with massive names for 6 months! :{

None of the film studios, no airlines and even some hardware providers and obviously any competetion

Rоry McCune

@silverpenguin you have a 6 month non-compete... wow don't think I've ever seen one of those in tech in the uk

I do hope your pay off covered that fact

SmokeDispenser

@silverpenguin non compete is with pay in germany too.

you should check if that is legal.

silverpenguin

@RоryMcCune nooo im only getting paid for a minimal agreement, think i should look into it?

@SmokeDispenser yes im thinking talking here maybe its not so legal

to google!

dun na na na na na na

SmokeDispenser

@silverpenguin absolutely!

Rоry McCune

@silverpenguin yeah if they're trying to stick you with a 6 month non-compete without compensation, that does not sound right out-law.com/page-7086 suggests that the clauses aren't always enforcable

but IANAL

and you should get legal advice if you're concerned about it :)

SmokeDispenser

09:42

@RоryMcCune that, @silverpenguin

silverpenguin

I didnt even think that much of it in all honesty - I just thought it was standard practice because of the technology I work with

HamZa

mysqli does support prepared statements, mysql_* doesn't. It's also worth noting that PDO might go for "emulated" prepared statements so it's best to specify you want "real" prepared statements. Otherwise some really obscure edge cases might haunt you. Not sure why you have recommended a size limit of 4096 while the documentation says it will truncate the password to 72 characters using PASSWORD_BCRYPT. — HamZa 40 secs ago

SmokeDispenser

@HamZa is that from the PHP auto comments?

HamZa

@SmokeDispenser No, I wrote it. 4 upvotes and misleading info, that's kinda "sad"?

SmokeDispenser

@HamZa yeah, I saw that when it had 0 upvotes and thought "well, no"

and "that'll be pointed out"

HamZa

09:49

I'm also thinking, yes, there's an SQL injection. But can it bypass the "login" mechanism? I think currently it doesn't

It does make it easier, because the entered password, will be checked against ALL accounts

SmokeDispenser

if you can inject, you win. if in doubt, insert the data you like.

Rory Alsop

10:21

anyone want a free flag on meta.se?

-5

Q: How to make WhatApp on Android v5.1.1 work on WLAN with Proxy on port #74?

On my Android mobile phone (Android version v5.1.1), I can only connect to the university WLAN network through setting certain Proxy server (manual setting: proxy www.someThing.com and port: 74). When doing this, GMAIL and Calendar and some application that requires network work properly. But Wh...

support android proxy

too late

SmokeDispenser

damn;)

HamZa

10:50

@QPaysTaxes I was advised to let this go

Matthew

Disney's Frozen "Let It Go" Sequence Performed by Idina Menzel

►

Arperum

@silverpenguin They can't just go "you can't do any job within your skillset, for six months, so just go die on the street because we forbid you to earn money. They have to pay you in some form for that period.

Transcript for