The DMZ

Right now I'm trying to make Python's AST parser (implemented in C) of different Python versions available to 3.7 which so far seems more straightforward than I anticipated

I'm fine with syntactic whitespace

You can avoid it with many constructs if you really want to

import foo; if foo.bar: print("abc"); ...

forest

True. I just prefer C where spaces are meaningless.

But both languages are nice.

Arminius

What's sad is that if you need to do something on the web there is no way to get around JS on the client side. Except some odd transpilers which are impractical for a number of reasons

Benoit Esnard

JS is fun.

Arminius

I find JS's type conversion logic unacceptable

Benoit Esnard

12:48 AM

slikts.github.io/js-equality-game

AndrolGenhald

@Arminius 2nd only to PHP

Arminius

Yeah

And PHP is never ever going away

Another classic: youtube.com/watch?v=BrB0oaSz8Nk

Arminius

3:02 AM

Python is pretty until you look too deep * Beware, the implementations here are deep magic. Yeah thanks, that helps

forest

3:20 AM

forest

4:03 AM

(That's its actual Pokedex entry)

Anonymous

7:55 AM

Morning.

Anonymous

You guys never sleep.

Tom K.

8:10 AM

the magic of other timezones

Anonymous

Well, Arminius lives in Germany, no?

Anonymous

So he has the timezone as you, but he's always awake :p

Benoit Esnard

8:34 AM

He's a hacker, that's why.

Tom K.

8:49 AM

because he's a hacker

he's never awake at daytime

and I'm not

:'(

Anonymous

9:01 AM

lol :p

Tom K.

9:18 AM

@ConorMancone Aww.. shame you deleted that question. I really think that it was worth asking.

Benoit Esnard

What was the question?

Tom K.

it boiled down to "what can an individual do to pressure/encourage a company to improve its password policy" and "what can we as a security community do to raise more awareness to the matter?"

it could've been maybe phrased a bit better, because it was somewhat broad

daya

forest is also a hacker :p

Tom K.

definitely needed some work

Benoit Esnard

@daya Aren't we all hackers?

Anonymous

9:36 AM

I wish I was a hacker.

Anonymous

I'm not even good enough to be a blue teamer right now.

Benoit Esnard

Have you ever tried to learn?

Anonymous

Of course, lol.

Anonymous

I'm not saying I don't ever do anything...

Benoit Esnard

HamZa found one of his posts here 5 years ago

And look at him nowadays :)

Believe in yourself.

Anonymous

9:44 AM

Well yes, but I am not sure what you mean to be honest.

Benoit Esnard

I mean, you're 17! You can still do whatever you want at this age. You have 1h30 each day in public transport? Read tutorials, practice on challenges website, etc.

Anonymous

Who said I don't do that already?

Benoit Esnard

Oh. Do you?

Anonymous

Yes.

Benoit Esnard

Do you really feel you haven't learnt anything?

Anonymous

9:46 AM

Well, yes. But I study for CCNA Security in my journey so I don't have to at home.

Anonymous

So I can do HTB and other things at home.

Benoit Esnard

The road to mastering security is quite long, it can take years

Tom K.

pretty sure you are more of a hacker (whatever that means) than I am

Benoit Esnard

Do not get discouraged. :)

Tom K.

If you are able to bust HTB boxes then you are far ahead of any typical IT guy

Benoit Esnard

9:50 AM

Recently I started to do some Root-Me challenges I left unfinished some time ago. I haven't practiced that much since (well, not as much as I would like to), and I was amazed how fast I was able to solve them, I was expecting to struggle for hours before giving up again

If you don't understand something, leave it for a few days, try to discover another concept (security is large enough to always find new concepts), and come back on it. :)

Anonymous

I'm not discouraged :p

Anonymous

I wouldn't be here if I was discouraged ;)

Tom K.

you sometimes sound like it

HamZa

I cycle to my work for ~30mn (so per day ~1h)
I decided to occasionally take the tram which takes ~40mn (especially on rainy days). This way i can read during my travels.

Tom K.

I just listen to podcasts *shrug

Anonymous

10:05 AM

@TomK. Do I?

Anonymous

I don't mean to..

Anonymous

As I said, I wouldn't be here if I was discouraged, I'd just sit at home and waste my life like all the other people I went to school with :p

Tom K.

"I'm not even good enough to be a blue teamer right now." <- that sounds a bit discouraged to me

dunno

but if you say you aren't, then all is good

Anonymous

I've got low self-confidence, don't shoot me.

Anonymous

:p

daya

10:15 AM

@BenoitEsnard Well, I would say we are aspiring hackers and a "true hacker" is really a very respected term.

Benoit Esnard

10:35 AM

@daya To be serious, I do not pretend to be one, but I think some people on sec.se are true hackers :)

daya

10:58 AM

Neither I and yes they are!

daya

11:21 AM

@BenoitEsnard And your chat comments above motivated me more :)

Tom K.

I wish I could de-star messages that other people starred

what is this nonsense "Life sucks, and then you die."

In life you will experience a lot of varying degrees of happiness, but most of the times, life won't suck. Then you will die.

Benoit Esnard

@daya I'm happy to have motivated you then!

@TomK. Yeah, me too.

Tom K.

*highfive

Benoit Esnard

Can I confess something? My secret goal is that all starred messages contain "17".

Tom K.

(depending on your time zone) wait for 5 more hours

then it'll say 17h ago for forest's messages

Benoit Esnard

11:35 AM

Relative time isn't impacted by timezones, you know :P

Tom K.

right...

nevermind then :D

Thanks you Benoit, now I feel as stupid as a 17 year old!

Benoit Esnard

17

Tom K.

is this a quid pro quo?

17

Anonymous

11:51 AM

"Thanks you Benoit, now I feel as stupid as a 17 year old!"

3

Anonymous

Wow.

Anonymous

I feel insulted.

Benoit Esnard

He was joking. :o

Anonymous

:p

Benoit Esnard

Just cleared the "Javascript - Obfuscation 5" challenge on Root-Me! After many fails over 5 years!

I'm so happy right now. :D

Tom K.

11:57 AM

oh god, was that the one with the underlines?

Benoit Esnard

Yes!

Anonymous

Who starred that message, show yourself >.<

Tom K.

snicker

Anonymous

Stop laughing at me >.>

Anonymous

:Angry:

Anonymous

12:03 PM

:p

Benoit Esnard

q:

Tom K.

d:

Anonymous

Grr*

Benoit Esnard

Groar*

Tom K.

Grmbl*

Anonymous

12:04 PM

I'm going to stamp my feet like a 17 year old in a minute. ;)

3

Benoit Esnard

To be honnest, I would love to be 17.

I had my first computer when I was 19

Anonymous

Why?

Tom K.

19? that's crazy!

Benoit Esnard

I would have learnt so much if I had it at 9 f.e.

Anonymous

I got my own computer at 11.

Tom K.

12:05 PM

I had my first when I was 13 or so

Anonymous

but I had my first computer when I was 6.

Anonymous

:p

Anonymous

And ever since 6, the computer is all I've done :D

Benoit Esnard

And you already have a job in IT!

Tom K.

thank you for showing us the intricacies of the english language

yawn

Anonymous

12:06 PM

What do you mean Tom?

Tom K.

you got your own at 11 but had your own at 6

Anonymous

Yeah that makes sense though :p

Anonymous

I got my own computer at 11 but I had my first computer at 6.

Benoit Esnard

11 + 6 = 17

Anonymous

I mean, I had a computer at 6.

Anonymous

12:07 PM

But it wasn't my own computer.

Anonymous

Does that not make sense? :O

Tom K.

that's what I meant

nevermind

Benoit Esnard

It makes sense, but it wasn't obvious at first for non-native English speakers :P

Anonymous

Oh.

Tom K.

it does

Anonymous

12:08 PM

Sorry, haha. :D

Anonymous

Benoit, we've nearly got the number 17 in every starred message.

Benoit Esnard

If only forest had posted "Life sucks, and then you die. 17."

Tom K.

if only *sigh

Anonymous

He should've thought about it :(

Anonymous

@BenoitEsnard How come you got a computer so late? :p

Benoit Esnard

12:13 PM

Well, I didn't need it before. And I also guess it's because of my parents. They didn't allow me to play video games until I was 10. :'(

Anonymous

Oh, that makes sense I guess.

Benoit Esnard

But when I was 19, my girlfriend had to travel 2 month in Morocco, so I needed to be able to contact her :(

It was a Windows XP with 1GB RAM. In 2011. 8-)

Anonymous

If it wasn't for my father I wouldn't have had a PC so young, to be honest.

Benoit Esnard

I started learning how to code, and was interested by security, and got lucky to find some vulns on a high traffic website, who wanted to recruit me

So I became a web developer. :D

Anonymous

Wow, that's a cool story actually :D

Anonymous

12:16 PM

Wish I got a job that smoothly lol.

Benoit Esnard

Got pretty lucky, tbh. I was studying maths & physics, so my job has nothing to do with I've learnt at school.

You're 17 and you already have a job in IT, I think that's already pretty cool.

Anonymous

Yeah that is pretty cool I guess :D

Anonymous

I got lucky too, but we make our own luck I guess shrugs

Tom K.

did you finish uni?

Benoit Esnard

I didn't. :o

Tom K.

12:28 PM

don't worry, nothing to be ashamed of

I didn't finish my first degree as well

Anonymous

How come Tom?

Anonymous

Bored you or?

Benoit Esnard

I'm not ashamed! Being an autodidact has a lot of benefits (even if it has some drawbacks, too).

I kept my physics / maths books though, because I assumed I could come back to studying one day, but I guess it won't happen. :D

Tom K.

It bored me and I had some other activities I wanted to keep up with

Anonymous

lol :D

Anonymous

12:30 PM

Fair enough.

Anonymous

I was never into WoW :p

Benoit Esnard

Neither do I. I've always been a Nintendo guy.

Anonymous

Counter-Striker here :p

Anonymous

From about 8 till 16. Played it a lot

Tom K.

did that as well, when I was 16 or so

Anonymous

12:32 PM

Good times, lol ^_^

Anonymous

I still like watching it, but I don't really play any games anymore.

Benoit Esnard

Pokémon & Smash Bros. mainly. I'm not interested in online games. :(

Except Pokémon GO, I guess.

Tom K.

I'm totally done, doesn't interest me that much anymore

Anonymous

I sorta' just have it on in the background if I am not doing deep-work.

Tom K.

you mean streaming?

Anonymous

12:34 PM

Yeah, sometimes I just keep a Twitch stream open in the background if I'm sat at my desk at home not doing an awful lot.

Anonymous

Or I will watch an episode of something on Netflix for an hour or something like that.

Anonymous

But I struggle to sit through episodes of TV sometimes because I want to be doing something :p

Benoit Esnard

clip-os.org/en

Tom K.

Anonymous

:p

forest

12:48 PM

> The project is based on Gentoo Hardened and has many similarities with Chromium OS or the Yocto project.

I already like it.

Tom K.

it also has grsecurity

so you'll probably love it

forest

I think that was only the old version.

Grsecurity is no longer public (and I'm still trying to get access to it).

Benoit Esnard

forest will soon rename itself "forêt"

Tom K.

can't be that hard O.o

but you are right, only version 4

forest

@TomK. 6,000 USD per year minimum (last I checked maybe a year ago, may have gone up), and only corporations are allowed to purchase, not individuals.

Tom K.

12:51 PM

ask someone you know to "lend you her copy"

Anonymous

Interesting post... lists.debian.org/debian-user/2017/06/msg00576.html

Anonymous

:p

forest

Not many people seem to have it due to the price. Still looking for someone who is willing to do that.

Anonymous

Do you know the answer to that question, Forest?

forest

@Joshua.J tl;dr lots of drama. I think he's not violating anyone's rights.

One day someone will go to court. We'll see.

Anonymous

12:52 PM

Oh right :p

Anonymous

Dram... Yawns

forest

@TomK. If you know anyone who has a copy, do tell me.

Tom K.

yeah.. it's kind of an awkward conversation starter

"heyyy.. so do youu know about this great tool..?"

forest

Sad thing is a few people who I think do have it have vanished.

Anonymous

I feel like an uncultured swine because I've never heard of Grsecurity.

forest

12:53 PM

I mean obviously just a coincidence, but still annoying.

@Joshua.J tl;dr 0days in Linux are easy to find. Grsecurity makes them hard to find.

Anonymous

Which is why it's so expensive?

forest

Even I have a few Linux 0days, and exactly zero of them work on grsec.

@Joshua.J No. It's expensive because drama.

Anonymous

Oh.

Anonymous

That is sad :p

forest

Technically because Spengler does not want anyone who works at Intel, Google, or Wind River Systems to get their hands on it.

So he's trying to make it as hard for them to get it as possible.

Which is funny considering only corporations can buy it now.

Anonymous

12:55 PM

Yeah...

Tom K.

and 6k is gonna stop google? O.o

Anonymous

lol, Tom makes a valid point.

forest

@TomK. Yeah I know lol

He literally banned people from his IRC channel for having an Intel host.

Benoit Esnard

Isn't Google building its own OS?

Tom K.

what an idiot

lul

forest

12:56 PM

Not really.

I mean technically yeah, but...

It's just hype that the media picked up.

It's one of their endless experiments, likely something that may or may not go into some future wearable IoT devices, in whole or in part.

g2g

Anonymous

Take care.

Anonymous

FBI must be at his front door, never seen him dash so fast lol.

Tom K.

well.. I got to go too...

but these two events are not connected

really

they are.. not.. connected in any way

goodbye

Benoit Esnard

1:13 PM

@forest Well, I guess ANSSI works with French intel

Tom K.

2:20 PM

I'm never sure how to flag these

spam? not an answer?

Thomas Ward

@TomK. Not a security.se mod, but rude/abusive or Not an Answer seem to be the common ones

(at least, according to what we see in SmokeDetector anyways...)

Tom K.

mmh

(no need to clarify btw, I really know who our mods are)

Thomas Ward

(I'm picky, sue me)

Journeyman Geek

sues @ThomasWard

Tom K.

*gasp

ah, Journeyman Geek, finally one of our mods!

Journeyman Geek

2:25 PM

Not a Security mod either ;)

Tom K.

dude.. set irony detection to TRUE

Journeyman Geek

Actually I'm half certain there's a running joke that the security community hates me

Tom K.

I even italicized a word!

say what now?

maybe because you want to take away our curse words :s

Thomas Ward

sits on @JourneymanGeek's head after winning the lawsuit

Journeyman Geek

oi. I JUST WANTED TO TAKE AWAY HELP VAMPIRE :(

Tom K.

2:35 PM

@JourneymanGeek could you shed some light on this? I have really no idea what you are talking about

Journeyman Geek

@TomK. oh, a few people thought it would be funny to give me crap on SU....

I gave them a single day suspension, and... they were like mock angry at me for about 10 minutes ;)

Didn't happen here

I've a great working relationship with your mods though (and most mods)

Tom K.

ah alright

that doesn't sound too serious then

ah yes <3 our mods <3

I do wonder about Jeff Ferland sometimes though. He sometimes just pops up out of nowhere and then vanishes again. But then again who knows what he's doing in the queues

Benoit Esnard

Who is Jeff Ferland?

Tom K.

he's a mod here