The DMZ

2:10 AM

@BenoitEsnard I think this is the result of Google's auto sign-in thing.

I.e. it removes all cookies, but automatically signs you in again.

2:20 AM

Hm, I just realized... Of course we all say that it's always possible for a maliciously modified BIOS to resist attempts to reflash it with the stock firmware, but I never stopped to think if there is actually a practical way for a malicious BIOS to detect and prevent that without being custom-tailored to the exact flashing technique.

Perhaps triggering an SMI on write access to SPI? Can it even be triggered on that?

6 hours later…

7:52 AM

@forest I love that you start your sentence with "Of course we all say .."

Anonymous

8:16 AM

@forest So about me always being tired, I went to bed at 21:30 last night and I woke up at 6:00 instead of 5:00 and I am shattered.

Anonymous

I am convinced it's my mattress.

12:33 PM

@Joshua.J sometimes i find it more comfy to sleep on the ground than on the bed...

in PHP on Stack Overflow Chat, 2 hours ago, by Jeeves

"Dad I am strong, I do Judo", "Dear son I got the power, I do sudo"

Anonymous

12:56 PM

@HamZa Hmm, yeah.

Anonymous

But that will give me a really bad back so probably not the best idea.

Anonymous

It's just lately I'm always so tired I just want to sleep, sleep and sleep some more.

i'm not sure about the "bad back problem"
In the beginning it feels uncomfortable but then you get used to it
but not sure i'm no expert
the problem with my bed is that i have stacked up two cheap mattresses which tend to how do i put this, like the surface becomes unequal ...

@TomK. What, do you disagree?

Anonymous

@HamZa Oh I see.

Anonymous

1:05 PM

So do you have a bed? Or just a mattress on the floor?

now i have a bed with stacked mattress
but i'm thinking about either buying a really good mattress or maybe try to research stuff about sleeping on the ground
I thought maybe a judomat, thin, not too rigid and not too soft
but u'm not sure

Anonymous

I see :p

Anonymous

If its not my mattress then I will need to visit a doctor I think.

Anonymous

Because my tiredness is simply borderline unexplainable past that.

Anonymous

I don't even feel like physically drained just my eyes feel like they could constantly close and I could just fall asleep stood up.

1:09 PM

Sometimes i have those days where i sleep like +9 hours and still feel tired
but the cause can be everything man, like mood, emotions, pressure @work/home etc...

Anonymous

I know...

how long has this been going btw? are we talking about days, weeks or months?

Anonymous

Weeks.

Anonymous

Past few weeks I've just been fucking tired all the time no matter what.

Anonymous

Probably coming close to months its been ongoing now.

1:13 PM

if you have good nutrition, then i guess it's time to call a doctor ...

Anonymous

Well, I eat healthy, I exercise, I get a good amount of sleep the majority of the time.

Anonymous

So it really doesn't make a whole lot of sense.

right

@forest no, I don't. But I'm pretty sure some people don't even know what you are talking about :P

Well I'm sure most people at least know that a BIOS can be modified?

I mean, most people on this site.

1:19 PM

well, that's the least complex part of your statement :P

M'vy

@forest I think you have too much faith in the human race

Probably.

1:43 PM

@Joshua.J You should definitely see a doctor. Untreated sleeping disorders will become much harder to fix when you get older

Anonymous

Yeah, I think I might.

Anonymous

Better to be safe than sorry.

Anonymous

And I'm already sorry because I'm always fecking tired, lol.

For me it's the other way round. I can't fall asleep for hours although I feel physically weak and exhausted

1) eat healthier 2) reduce your caffeine intake 3) do sport 4) have a regular schedule

1:57 PM

Gotta make my CHHC, the Certified Hacker's Health Coach

Do ALL the certificates!

"When I try to pop a shell, it segfaults..." - "Well, did you drink enough today?"

Yeah

Anonymous

FeelsBadMan.jpg

Anonymous

3:13 PM

So, I'm looking at using a YubiKey with KeePass, does anyone have any recommendations on which YK I should buy, etc?

@Arminius hahahahaha

3:41 PM

:-)

@Joshua.J If you only need the key for U2F, you may consider buying a cheaper alternative one

Anonymous

Hmm, but $45 isn't bad at all, really :p

Anonymous

Or is it?

Well, if you also want to register a backup key, you're already at double the cost

Also, really depends on the features you need

Anonymous

Hmm, yeah that is true.

Anonymous

I'm guessing the setup is literally the same with an alternative?

3:44 PM

If you're using it for U2F, yeah

Sep 18 at 11:38, by Arminius

@TomK. I got myself a Feitian ePass and a YubiKey Neo and activated Google's Advanced Protection. I'm also using the keys for GH and other services now, which all works pretty well so far. Even in case you doubt the security benefits, it spares you the hassle of typing 2FA codes

Anonymous

Hmm, I need to save this message.

Anonymous

And look at the Feitiain when I get home.

Anonymous

Benoit Esnard

We need U17F.

You mean, to set up your account for 17FA?

Anonymous

3:55 PM

17FA what would that look like?

Benoit Esnard

A real mess.

Anonymous

Considering ideally you need each form of ID to be something different, lol.

Anonymous

Eye, fingerprint, urine sample, a blood sample, OTP, user&pass

Anonymous

I think that covers everything?

Anonymous

Throw a smart card in.

3:57 PM

Something you have, something you know, something you feel, something you dread, something you desire, ...

Anonymous

How much more secure could you want? Cut off a limb?

Anonymous

Something you dread - "not having enough factors of authentication!"

Anonymous

lol.

Anonymous

Must. Add. More.

Anonymous

Not even @forest is that security conscious ;)

3:59 PM

Auth fails unless your really desire to be logged in

With all your heart

Anonymous

lol.

Anonymous

But then what happens when a hacker really desires to log in?

Anonymous

Busted system I guess.

4:16 PM

@Joshua.J Re Security keys - of course Yubikeys are feature-rich and reputable. I don't think you can go wrong with one. I'm just saying that if all you need is any U2F key, other ones may work just as well. For me, the Feitian is simply a cheap backup

Benoit Esnard

@Arminius With each of the 17 chambers of the heart*

Obviously

I wonder what happened to the $6 "Plug-Up" security key. Hardly any traces of it on the internet

Instead of security products, their old website plug-up.com now instead has blog posts like "Steps to get divorced after infidelity"

(NSFW)

7 hours later…