The DMZ - 2019-12-12

« first day (3283 days earlier) ← previous day next day → last day (1597 days later) »

6:51 AM

4

Q: How do I know if a Certificate Authority is not fake?

Recently I detected this CA on my phone: It shocked me that the CA itself is called "Packet Capture CA" and so much information are blank. Why does Android allowed such weird CA to exists? Question is is there a official list of CA where I can verify its authenticity? PS: For safety rea...

certificate-authority

^- I saw a long list of things that are related to security and I don't understand it and now I'm scared

7:51 AM

4

Q: What's the difference between xxxx-client and xxxx-server packages?

When I'm gonna install packages or software I can see client | server versions. What does it mean actually? For example: apt-get install xxxx-client apt-get install xxxx-server What are the difference between these? How can we categorize when we need to install an application or package? Let's...

apt server package-management mysql client

1 hour later…

8:53 AM

Stack Exchange, Inc.: I don't understand why veterans dislike new users so much. They bring so much value to the site

New users:

0

A: How do I get a stuck gas canister (for hiking/camping) out of a stainless steel mug?

Epoxy dent puller (slide hammer) to canister

9:33 AM

21

A: Winter Bash 2019 Knitting

Farewell, my Friend Picture taken from Made in Abyss, EP. 13. Original for comparison here Do you remember your fear of the dark? From the game Yomawari: Midnight Shadows. Original for comparison here A girl and a shadow From the manga "The girl from the other side". Sadly Shiva ...

dat top one

user image

;_;

10:06 AM

@forest Am I wrong or is one of those knits Sakuya?

45

A: Winter Bash 2019 Knitting

I have my drawing tablet this year... it's meeee with red eyes Human Stack Exchange/Overflow twins I thought of last year Two more characters of my own creation. Guess who? (I tried, really I did, but I'm not the best at real people) I'll be making more...don't worry. :)

Third knit, left character

The knife gives it away

@forest Also, did you finally make a pubkey?

Doesn't look like Sakuya to me.

Also no I forgot to make a pubkey.

And I was just about to go to sleep too.

I'll make one and post it but I probably won't be able to receive anything with it until tomorrow.

Also, @J.J:

29

A: Is it illegal for Joe Public to listen to ATC in the UK?

Yes, it is illegal. The UK has some very strange ideas about Radio, which bear no resemblance to the reality of physics and how radio actually works. Foremost among those ideas is the idea that you are only legally allowed to listen to transmissions intended for "general reception": The se...

The UK has some really freaking weird laws.

10:23 AM

Wot tha fug?

ya

W E I R D
 L A W S

 ▲
▲ ▲

:D

yay you can triforce

I want to do a reverse can't triforce

  ▲
▲ ▲

:DDDD

lel

10:35 AM

Good times

inb4 our shitposting is what just drove Rory away

Anonymous

Yeah... The UK.

Anonymous

Hah.

Anonymous

It's the GE today boys!!!!!!!!!

Anonymous

(and forest)

Anonymous

10:38 AM

Hahahhahahah

Anonymous

This "Not unlike the entire rest of the world though, Germany has similar brain-damaged laws. Might be more around. – falstro Apr 9 '14 at 6:20 "

gpg stop being a bitch

How do I edit a subkey ?

it says key - edit subkey N

but it don't work

Ah, it does. gpg just thinks full trust means I don't trust the key enough

Gotta sign that bad boy

I don't care about WoT for GPG.

TOFU is plenty for me.

g2g

oh my god, stonetoss made a comic about the recent happenings :D

stonetoss.com/comic/pol-ice

user image

@forest WoT is a shit concept. I just want it to shut up about it

Anonymous

10:58 AM

Anyone here used KeyBase?

Anonymous

It seems quite nice, I signed up yesterday but it doesn't seem to be as popular as I thought it was.

Anonymous

Kinda' just looks like a "privacy friendly" Slack.

Anonymous

Well, not even privacy.

Anonymous

More like security...

I used to use Keybase to pin my public key to my twitter account. But since I deleted Twitter, I see no reason to pin my public key either

You can find it on my website anyways. mechmk1.me

ls

oh, that's not my shell

Anonymous

11:03 AM

I should have signed up for this damn site with my alias.

Anonymous

Although... It doesn't necessarily matter anymore since there's only a few people that know my full-full name (and its so generic its impossible to find me especially since I don't have social media) and Forest does know my alias.

Anonymous

But, meh.

Anonymous

I must say, I love this Mech...

Anonymous

"I'm one of the most active members of the Information Security Stack Exchange site, but it is becoming increasingly difficult to maintain this activity. The reasons are primarily due to Stack Exchange, Inc.'s management failure and their absolute disrespect for the community. In no uncertain terms, I will say that Stack Exchange, Inc. doesn't give a fuck about the community."

if you want I'll sign that statement with my private key

Anonymous

11:05 AM

lmfao

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I'm one of the most active members of the Information Security Stack Exchange site, but it is becoming increasingly difficult to maintain this activity. The reasons are primarily due to Stack Exchange, Inc.'s management failure and their absolute disrespect for the community. In no uncertain terms, I will say that Stack Exchange, Inc. doesn't give a fuck about the community.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEzkQo/iiQHclUawFwhBPueNKEvooFAl3yH2EACgkQhBPueNKE

And here's the related public key:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBF3uO8EBEADrTi5iIb/zgAm1UwT62DHXhEvOjhFktW3JdmWrUTDS96If5SFE
LYxxCoVd3cE6Cg3Qi8g81UDYYLvR5hL8vtrkAjMzmYWXzbG2AAW7zqmcvGglpHl5
Ee2HJUywts+X+pcfpKVUPS6Z/6vF0i0S5OaxQ6RnlhZX+49lFdGbZ6qU8xGXnItK
NtOIW3ST0+4aK+u4JfWT5r6/Kq7RhcjiRXXfSWPJqbmRjA+eUY0quBLyh7X71rQB
jMDDBvz2xyCCMfyDxeJ/2oY5kLduez8aG1um0TaznKQ6ADAE4QnxJ1uc52W4HPpN
AdHtBBMOlpXmCEyoTcYmmgQNfwGVdGO+QsvxgrsZ1P8CeWug6vviVL2Uuexl0pCz
tCMF8QBnQNjJ8oE/r2Ev2EPfwuwr/e1+4detlYDZejHOIZvjcCCUf5C9K1muCmfI
rkKUwO6q+gny6/xEEHBo+vTSxkwDzok5kX5/iqa5f+8hRBYZCmm73ArclOsU5Guo

Anonymous

lol

Anonymous

Ugh, it's raining outside and I need to go get lunch soon.

Anonymous

Fuck sake. England, bloody England.

It's raining in england. More news at 5

Anonymous

11:14 AM

You mean... The same news at 5, right?

Anonymous

lol.

Anonymous

Anyone else going to play the SANS Holiday Hack challenge?

Anonymous

I am about to start it now.

Nah, I'm gonna do the "Finally paint your fucking miniatures" challenge over the holidays

Anyways, I'm off to eat something

Anonymous

Take care.

12:22 PM

musescore.com/user/29625/scores/5877294

The intro in 6+5/8 is just so beautiful

1:03 PM

I have to stop listening to melancholic music

@MechMK1 have you heard about ECC in GPG?

@A.Hersean Elliptic-Curve Cryptography?

Battle for Wesnoth... that brings me back! Tried playing that on my phone once even (I don't get to sit in front of computers and play video games anymore, but I'll usually play some video games on my phone for ~30 minutes in bed before going to sleep)

@ConorMancone I remember playing wesnoth with my friend, a lot

And one day he suggested "Hey, let's play Wesnoth" and my gf was like "What's that?"

And then we showed her and she was like "That's stupid".

Silence in the room, but you could feel how offended both me and my friend were :D

existentialcomics.com/comic/106

1:25 PM

Of course. You get really smaller signatures.

and public keys

@A.Hersean I wanted to make an ECC public key but gpg --full-gen-key only offers RSA, DSA and Elgamal

@MechMK1 :) So you host a wesnoth server? I didn't even know that was a thing (I was looking at your .me page)

Oh wow I need the --expert flag

@ConorMancone I used to

Haven#t done so for quite some time

@MechMK1 /pretentious

:p

Apparently RSA and DSA are for NOOBS only!!!

Only the experts use ECC

1:32 PM

@MechMK1 One of my favorites

existentialcomics is by far one of my favorite comic strips ever

I think my favourite was one of the DnD strips :D

The DnD strips are all awesome!

Anyway, back into the depths of Quickbooks Desktop for me. Worst. Program. Ever.

@ConorMancone man I do feel really sorry :/

Meh, that's why they pay me :) I'd rather not have to deal with terrible programs, but sometimes it's just part of the job

I understand you. Someone's gotta do it

1:36 PM

(although I reserve the right to complain occasionally - just not to the boss)

Man who doesn't have that right?

I complain all the time, and I like my job

0

Q: How do I make sense of this apparently deliberately obscurified JS code?

I'm trying to code my own, private interface for asking questions on Stack (without using the API, which requires an account, which defeats the point of having some minimal amount of anonymity), because I strongly prefer to have my own form in my own "control panel" where I can type it according ...

web-browser javascript reverse-engineering

This guy is reversing StackExchange's minified JS :D

I don't know if I should laugh, or salute him

1:59 PM

It's pretty hilarious (although I did contribute to its closing). It's certainly not an easy job. It does go to show how hilarious SO can be - there aren't many places where you can post about your attempts to hack a site on the site itself, and not really have anything to worry about

Although I don't understand why the focus on javascript - it's only the network requests that should matter

Well, I don't interfere in people's pet projects

I do those all the time, and all of them lead to nothing

10 hours later…

11:37 PM

I was just awarded 7 announcer badges at once out of the blue... Does anyone have any idea whats up with that???

« first day (3283 days earlier) ← previous day next day → last day (1597 days later) »

Transcript for

Dec '1912

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile