The DMZ

« first day (1978 days earlier) ← previous day next day → last day (3200 days later) »

Quill

00:38

Stupidest hacker stock photos collection. https://www.teachprivacy.com/the-funniest-hacker-stock-photos/ https://www.teachprivacy.com/the-funniest-hacker-stock-photos-2-0/ https://t.co/maiLC7MPjm

Tweeted by kerouanton on May 15, 2016 at 9:41 AM

Mark Buffalo

01:08

@RоryMcCune I would like to... the thing

8 hours later…

Rory Alsop

09:12

@MarkBuffalo - this is a game, right? We have to select the best word to replace the ellipsis in your sentence

I'll start with "kiss"

:-)

AviD

@RoryAlsop "lick"

M'vy

I'd go with "Spock"

AviD

great, @mvy broke it.

Rory Alsop

@M'vy that's a euphemism, right?

@AviD - yup

AviD

maybe he meant "spank"

yeah thats it, @M'vy meant "spank the thing"

M'vy

09:14

Hmmm @AviD, did I failed at something?

Rory Alsop

How about, "do"

@AviD Heh

AviD

@RoryAlsop "do...ink"?

Rory Alsop

Do the thing

AviD

@RoryAlsop doink the thing

Rory Alsop

S/doink/boink

How are you folks anyway? Good weekend? (Or weekend plus Sunday, @AviD)

AviD

09:17

@RoryAlsop same thing innit?

@RoryAlsop middle of the week already :-S

almost ready to get started

on last week

Rory Alsop

Heh

AviD

had a good holiday last week though

Israeli 4th of July

aka GrillDay

aka sick piles of meat day

Rory Alsop

Still confirms to me that if I was to be religious, I'd have to choose being a Jew. Every holiday or festival is [insert epic food here] day

AviD

oh yeah exactly.

well, except for Yom Kippur. then its No Food Day.

(btw this was an Israeli day, not a Jewish day ;-) )

Rory Alsop

hmmmm - only one day though

can cope with one day

AviD

09:30

yeah, I suppose it is healthy to do once in a while

oh and btw, it is usually followed by a big meal after (cuz we be starving), and also before (cuz we gonna be starving...)

I'm kinda pissed off right now.

I tweetstormed it.

So this happened. A recruiter from training company called, to get me to join them as a trainer. We talked, discussed some challenges.

Tweeted by sec_tigger on May 16, 2016 at 9:35 AM

M'vy

Hm?

They want you to work for free?

AviD

and then some

M'vy

09:52

why would they think you'd be willing to work for them for free?

Like "we pay for your entry at the venue?" or what?

AviD

@M'vy oh yknow what, she didnt say I wouldnt need to pay for that. just not corporate sponsorship.

@M'vy "for publicity"

no clue why she thought that.

though apparently there are plenty that are willing. those people I understand even less.

Rory Alsop

10:10

@AviD it sounds exactly like the perennial music industry one: Venue/Promoter: "We can't offer any money, but playing this gig would get you superb publicity!"

AviD

yeah, I've heard that

never seen it up close tho

heh I could probably bring more people to their conf than they did, I can give them the publicity

Rory Alsop

You should suggest exactly that

AviD

actually, yeah - I should get them to buy sponsorship at the owasp conf...

Rory Alsop

Dooooo eeeeeet!

Mark Buffalo

11:14

@AviD That's pretty nasty

I'd laugh and walk out the door

AviD

@MarkBuffalo I laughed and hung up the phone

but not before some incredulous mocking

Mark Buffalo

nice

AviD

oh!

whyfor?

congrats

where, and where to?

M'vy

This conversation is ... weird

Mark Buffalo

You're weird.

AviD

11:17

@MarkBuffalo thats not weird, that's French.

M'vy

well unless you're a mod I guess (or looking at live)

svp

AviD

geeez man

Mark Buffalo

What is SVP?

M'vy

pls

AviD

how come you didnt delete that?

M'vy

11:19

s'il vous plait. Lit. If it pleases you

Mark Buffalo

What are you talking about, @AviD?

M'vy

abbr. svp

AviD

heh

Mark Buffalo

@M'vy That's so cute. I'm part french, but can't speak that part of my blood. The only french words I know are: Deus Ex, Bonjour, gracias, auf weidershen, zaijian, ni hao, and surrender.

AviD

what about "baguette"

"spaghetti"

Mark Buffalo

11:21

oh, I forgot that word

@RoryAlsop '...' = return :X

but when I get free time again. maybe next month

M'vy

hmmm. Deus ex is latin, gracias is spanish? auf wiedersehen is german, ni hao seems chinese.

isnt' spaghetti Italian ?

Mark Buffalo

I think so

@Ferrybig dude, is that you John Carmack?

AviD

so what, its all foreign

M'vy

There are some French word used in English though.

RoraΖ

security.stackexchange.com/review/suggested-edits/75829

This edit actually changes the meaning of the answer

M'vy

11:24

Déjà-vu, entrepreneur, rendez-vous (though not the exact same meaning), even double-entendre is kinda French-ish

I think I've heard 'Coup de grâce' once.

Mark Buffalo

@RoraΖ I get that sometimes, and people keep approving it

AviD

@M'vy coup d'etat

M'vy

prêt-à-porter ?

AviD

menage a trois

M'vy

^ lol

AviD

11:27

I kno markus knows that one

M'vy

hmmm... en.wikipedia.org/wiki/List_of_French_expressions_in_English

AviD

cheating

M'vy

that's quite a list

Just typed french word in english, got a wikipedia entry

wasn't expecting that many

RoraΖ

@MarkBuffalo Yeah it's annoying

AviD

@M'vy funny, that's what @simon's mom said

M'vy

11:29

maybe related: 'femme fatale'

AviD

@M'vy just called @simon's mom a femme fatale

interesting

Mark Buffalo

@AviD How do you know I know that one?

M'vy

I said 'maybe'

AviD

@MarkBuffalo native american blood :P

Mark Buffalo

natives have threesomes?

wtf, racist

AviD

11:31

lol

I dunno, is that a thing?

Mark Buffalo

I'm calling Red Al Sharpton on you

AviD

Poes Law says I can make up any crap

"Red Al"?

Mark Buffalo

I've got native american al sharpton on speed dail

AviD

lol

was gonna make that joke, but I guess its what you meant...

Poe's Law!

M'vy

Mark Buffalo

11:34

lol

speed dial*

alright, back later... like maybe a month or so

too busy

M'vy

see ya

AviD

same same

Rory Alsop

Hi @MarkBuffalo. See y'all

Why would it autocorrect to see y'all? I never use that phrase

AviD

you should

bilbo_pingouin

11:50

I am not sure I understand why that question: security.stackexchange.com/questions/123347/… isn't too broad?

I mean using a fake image injection in any website, really depends on how the image is handled by the site doesn't it? And thus, it's impossible to review each and every website within a single answer...

Or do I miss something?

StackExchange

12:30

ERRORS: HAIR JAM. COLOR-SAFE CONDITIONER CARTRIDGE RUNNING LOW. LEGAL-SIZE HAIR TRAY EMPTY, USING LETTER-SIZE HAIR ONLY.

etherealflux

13:17

laser cloud synergy

Pichi Wuana

13:30

Hi, I'm new in this chat

M'vy

welcome

Pichi Wuana

Thanks

Journeyman Geek

Pichi Wuana

13:51

Hey

4 hours later…

Iszi

18:08

So, regarding this...

Q: How to securely check if a username exists

I'm working on the onboarding functionality of my web app and at some point I'm asking the new user to choose a username. When the user gets to this point, I have his email, his cellphone number validated with an SMS and he passed Google's no captcha recaptcha. I need to check if the username he...

Just had an idea.

How about you do away with user-selected usernames for I&A altogether? Use the e-mail address, or some system-generated ID. Then you could do this for the registration process:

1. Prompt user for basic identifiers. Maybe even ONLY the e-mail address.
2. After user submits form for #1, respond with "an e-mail has been sent with further instructions to continue the registration process" regardless of whether the user exists or not.
3. New user receives e-mail, clicks link, finishes registration.

Only trick to that one that I can think of is avoiding unnecessary e-mails to existing users when an attacker tries to register as them.