The DMZ

7:01 AM

What do you think I should do if I manage to find an exploit while doing my thesis? Should I share it with my supervisor or keep it a secret and wait for the disclosure time to finish?

MechMK1

7:56 AM

@ConorMancone Stuff like this makes me upset on a deeper level

@JohnZhau Share it with your supervisor. They're under NDA anyways

My gf is lactose-intolerant, so I rarely get to eat cheese

Which means I enjoy it even more when I do get to eat it

Also highly relevant:

Anonymous

8:46 AM

Ah, right @MechMK1

MechMK1

9:01 AM

@J.J About the pants?

@JourneymanGeek That reminds me of this xkcd comic:

Hey, why do YOU get to be the president of Tautology Clu-- wait, I can guess.

I am now sad that there was no tautology club in my university

Journeyman Geek

@ConorMancone I'm a lactovegan

cheese is a sometimes food

but I believe in sinning properly if I must sin :D

Halloumi

Halloumi or haloumi () is a semi-hard, unripened, brined cheese made from a mixture of goat's and sheep's milk, and sometimes also cow's milk. It has a high melting point and so can easily be fried or grilled. Rennet is used to curdle the milk in halloumi production, although no acid-producing bacteria are used in its preparation.Halloumi is often associated with the island of Cyprus, where it has been produced by a multi-ethnic population for many centuries. It is also popular throughout the region broadly known as the Levant. It became widely available in Turkey after 2000. Demand in the United...

I panfry this

It basically will annoy every doctor you have :D

MechMK1

We used to grill Halloumi when I was a kid

Journeyman Geek

in theory you could deepfry it...

MechMK1

Grilled cheese is good though

Journeyman Geek

but dear god, that's a "just because you could, dosen't mean you should"

MechMK1

9:08 AM

I like grilled Camembert too

Journeyman Geek

@MechMK1 I have that once a month ._.

MechMK1

With sauce tartar

Journeyman Geek

._.

MechMK1

Last time I had grilled cheese was like 2 weeks ago, and 2 months before that

Journeyman Geek

How exactly does one grill a soft cheese

MechMK1

9:09 AM

By having crumbs around it

Journeyman Geek

oh and proper mozerella or the small ones

MechMK1

Journeyman Geek

@MechMK1 I like your ideas and wish to subscribe to your news letter.

MechMK1

@JourneymanGeek If you are a regular in the DMZ, you are already subscribed to my newsletter

Journeyman Geek

.... point

MechMK1

9:10 AM

All opinions, solicited or not, will be published into the DMZ

Journeyman Geek

also for some reason, people around me have been talking about cheese a lot ._.

MechMK1

As for mozzerella, I like it in all shapes. I assume by proper you mean the fist-sized ones

Journeyman Geek

@MechMK1 oh, the "fresh" sort in brine

as opposed to pizza mozerella

Both are good for different things

MechMK1

Ohh, I live close to italy, so I don't consider pizza chese mozzerella

Now the question: Which cheese belongs on a Quattro Formaggi?

Journeyman Geek

I don't actually know :D

(I'd have to check each cheese ; ; )

MechMK1

9:15 AM

The answer is Mozzarella, Stracchino, Fontina and Gorgonzola.
Ricotta is acceptable as substitute for Straccino or Fontina.
Parmesan is wrong, but I personally accept it as substitute for Stracchino or Fontina.
Goat cheese is the devil and if you serve me Quattro Formaggi with goat cheese I will b̶̵̬̣̬͇͈̩͖͖̯̩̻̳̗̱̳ͥ͌͗̑̄͑ͦ͛ͭ̽͂́̑̆͆́͠͠e͂̀̽̃̏͢҉̴͉̟̱͈͎̣̰̙̯͎͎̮̳̭̻̥̘̹́ ̶̨͖͓̖̘̬̖̯̮̬̩͎̬̰̠̠̲͆ͣ̐͗́͟͟v̷̧̛͉̭̣̠͕̮̘̈́̏̊̃͋͋ȅ̶̮͕̥̲͍͕̈͂ͥ͐̏̚͠ř̛̭̜̹͔̱̩͔̳̙̱͕̦̙͕̉ͥͩͦͦͫ̉ͪ̅ͩ̃ͣͨ̄ͧ͒͋̕͜͝ͅy̴̵̸̡̖̝̠͇͔̠͇̦̖̟̣̱͇͔̣̻͇͖ͦ̀̿͐̈͊ͧ̃̉̐̒͗̿̄͛ ͧ̿́̎ͤ͊ͨ̊̇ͯ̔̒̉̎ͨ͟͏͢͜͏̮̠͎͍̱̱̫͕͕͍̬͖̠͔ͅǔ̖̜͚̰̯̞͉̞̩̣͕͉͕̱̼̫̎̌̀̓̒ͣͥ̄ͣ́͘p̨̯̬̖̰̲̱̬͓͗̃̎͗̈ͨͮ̄͛͌ͤ̓͒̈̄̑ͪ̌͡ͅs̊̽͊ͨͤ…

Journeyman Geek

@MechMK1 heh

cough

I sometimes add nutritional yeast

its not cheese, and I do not add it as a cheese substitute :D

Anonymous

9:43 AM

Amity Affliction released a new song and oh my God I love them so much.

Anonymous

So much, so much!

MechMK1

9:54 AM

oh, wrong image

Nevermind, it's still a good image

Anonymous

Tweaking, tweaking 120 on the m way speedin', LV hat, backpack and sneakers any girl that im with is a ten, nine eight, bredrin decent.

Anonymous

Sorry. I've been listening to grime.

Anonymous

lul

MechMK1

Would have been better to just write #include <yeet.h>

Anonymous

lol.

Anonymous

9:59 AM

I actually like some grime.

Anonymous

I don't know why...

Anonymous

But it's catchy.

MechMK1

I am listening to Touhou Gangster Rap

Anonymous

UK rap > all

MechMK1

Marisa freestyles straight fire

Touhou Gangster Rap > UK Rap > All > PHP

Anonymous

9:59 AM

lol.

Anonymous

I'm listening to a guy called "Dave".

Anonymous

He is very popular.

Anonymous

He has a song called Drama, which is about his older brother going to prison for murder.

Anonymous

It's so sad man.

MechMK1

> he does not listen to Post-Touhou-Black-Metal with National-Socialist Drum Solos and Mongolian Throat Rapping

Might as well listen to pop music

Anonymous

10:01 AM

Nah, fuck pop music lul

Anonymous

I cannot listen to that shit its all the same

MechMK1

It's either pop music or Post-Touhou-Black-Metal

Anonymous

And the autotune...

Anonymous

The autotune man....

Anonymous

Oh my it makes me so angry

MechMK1

10:01 AM

Autotune is literally only okay as an effect

Anonymous

And when you try and question them on it why they use it

MechMK1

E.g. if you want to have a robot-like voice for one section for effect

Anonymous

They say, "iT's OnLy FoR EfFeCt" yeah okay.

Anonymous

That's why you're using a small amount in places where your voice went out of tune yeah? LUL

Anonymous

cretins.

Anonymous

10:02 AM

And The Chainsmokers... The Chainsmokers can die.

Anonymous

They are a cancer to the music industry.

MechMK1

【東方】紫雨UNITED まさかのアリス突撃編【IOSYS】

►

Anonymous

I'll have to listen to this later.

MechMK1

@J.J No, I mean like when people sing normally, and then want some voice effect for e.g. the pre-bridge

Anonymous

Yeah, I know.

Anonymous

10:05 AM

But what I am saying is, if you question artists on why they use auto-tune in some songs (not in the way you described) their reply is that they only did it for effect.

Anonymous

When it's fucking blatant & clear that they did not do it for that, they just cannot fucking sing.

Anonymous

It makes me so mad because it completely undermines vocalists that spend their entire practising for some fucking little cunt to come along and use auto tune and undermine the entirely quality of the industry.

Anonymous

Makes me livid.

MechMK1

Yeah the effect that they are going for is to hide they can't sing.

Pop singers can't hold a note if their life depended on it.

Anonymous

Exactly.

Anonymous

10:09 AM

It's pathetic.

Anonymous

And, I don't think that The Chainsmokers actually use auto-tune but... It's not that which makes me mad.

Anonymous

But they literally copy & paste songs.

MechMK1

But well, I can't stand such kinds of post-processing in modern music

Anonymous

And then call themselves "artists"

Anonymous

Fuck off

Anonymous

10:09 AM

lol

MechMK1

You are too shitty to sing? Just use auto-tune!
You can't play drums in time? Just time-align them!
You don't know how your basic-bitch bass part goes? Just copy paste one riff repeatedly!

> I tried all day to coax at least the faintest resemblance of skill out of that lobotomite they called their bass player. When they were done, I took 20 minutes to re-record all their bass parts. The bass player still to this day does not know he actually did not play on that record.

Anonymous

lol

MechMK1

Glenn Fricker is a fucking beast :D

MrHeliose

11:01 AM

I'm not 100% sure about an answers i'm writing can I ask for a review?

MechMK1

11:24 AM

@MrHeliose Sure

MechMK1

11:52 AM

-1

Q: Deepfakes and fakenews are disinformation or misinformation hacks?

"Misinformation is misleading. Disinformation is a damn lie." that is the best one-liner I found explaining the difference. I found it confusing that those being used interchangeably while having a very different meaning. Link: https://www.quora.com/What-is-the-difference-between-misinformation-...

^- my favourite non-question so far

MechMK1

12:02 PM

8

Q: How can Internet Explorer 5 be emulated in 2020?

Details One of our customers uses a rather old software solution, and this is still based (yes, it's unbelievable!) on Internet Explorer 5, and the customer still uses IE 11 in compatibility mode. We are currently using a virtual environment to test IE 5, but only manually, not automated. I do...

automated-testing selenium-webdriver browser-automation test-automation-framework ie

If a company told me they were still using Internet Explorer 5 I would laugh at them and never stop laughing

And any time someone mentioned their name I would just laugh, say they still used IE 5 and then go back to laughing.

MechMK1

1:10 PM

Man it's time to stop procrastinating and write that fucking report

MechMK1

1:22 PM

1

A: Deepfakes and fakenews are disinformation or misinformation hacks?

Disinformation, in today's world, leads to misinformation. Today, most media is owned by only 5 large corporations, so disinformation can be done extremely easy, especially for sensitive subjects like happenings in countries not aligned with the current globalized system. From there, it is widel...

> Today, most media is owned by only 5 large corporations, so disinformation can be done extremely easy, especially for sensitive subjects like happenings in countries not aligned with the current globalized system.

Oy vey! @Overmind, chill with the antisemitism!

Conor Mancone

2:06 PM

@MechMK1 I'm very dubious about the claim you quoted (and so downvote), but what part of it is antisemitic?

MrHeliose

@MechMK1 pm or I send pastbin link?

MechMK1

2:19 PM

@MrHeliose Just give a plaintext version here

@ConorMancone The vast majority of media is owned by AT&T, Comcast, The Walt Disney Company, Viacom/CBS and Fox

@ConorMancone As for the reference, here is the Wikipedia link: en.wikipedia.org/wiki/…

Conor Mancone

@MechMK1 Yeah, in the US that doesn't surprise me, but those 5 organizations don't dominate the news throughout the world.

MechMK1

@ConorMancone true, but the US are the biggest cultural export world-wide

As for the antisemitism part: The executive management of all these companies has a very strong over-representation of jews, and thus criticism of these companies or the media conglomerate is often seen as "anti-semitic" (just how me pointing out this over-representation is anti-semitic"

Conor Mancone

@MechMK1 Ah, that's the part that I was missing, thanks!

MrHeliose

@MechMK1 it's a bit too long i think

MechMK1

@MrHeliose Pastebin works fine too

MrHeliose

2:30 PM

it's about this question: security.stackexchange.com/questions/223929/…

pastebin.com/4J0HJVHK

MechMK1

Even by just glancing over it you definitely need to revise your grammar. "tried" instead of "tryed", "there are different goals" instead of "there is different goal", etc...

The section "How DRM works" is not really clear to me. I would revise that part

Conor Mancone

As long as we're all posting answers for review...

is my answer here reasonable?

0

A: Potential DOM Based XSS?

If your exploit works but is being stopped by the XSS auditor then you have found a real and reportable XSS vulnerability. The XSS auditors are very finicky, all of them have workarounds, and they have already been deprecated in the latest versions of Chrome. Therefore, if you are seeing the XS...

MechMK1

You claim that DRM is security through obscurity "most of the time", yet never differentiate when it is and when it isn't.

Conor Mancone

It makes sense to me, but I'm not 100% sure how others would view it.

MechMK1

The part about the analog hole is true, though I would formulate it differently what it actually means to do that (e.g. being able to grab a digital copy of the PCM, rather than recording your speakers)

"TV content are sending cypher." - This sentence makes no sense.

The whole "How to protect content" section needs a rework

All in all, the answer is okay, but it needs heavy revision

Conor Mancone

2:37 PM

I don't have anything in particular to add, but agree with Mech here

MechMK1

@ConorMancone You should mention that if a company really complains that the XSS Auditor would stop it, then you can always put in a workaround

The XSS Auditor in chrome is not very robust

MrHeliose

okay, I will rework it

MechMK1

turkmenog.lu/blog/2017/11/06/…

@MrHeliose Also the sentence "By the game if no crack exists" implies "Don't buy the game if a crack exists", which is not a statement I would make

MrHeliose

grammar is hard to fix as a non-native speaker :/

About security through obsucrity, I think it was clear: the first copy is (most of the time) fully secured, other are not.

Conor Mancone

@MechMK1 Good point, thanks

MrHeliose

2:44 PM

Also, Am I a bit off-topics? I don't really answers the question even if the question can't be really answered

MechMK1

@MrHeliose No, your answer is perfectly on-topic, and your request for review is on-topic too

Conor Mancone

@MrHeliose I wouldn't worry about that.

The question is a bit broad, but doesn't even have any close votes yet. Either way answering a broad question can be perfectly fine - I do it occassionally

MechMK1

Also DRM is not secure just because you only sold something once. If you would sell me a thing with DRM, which means I can only use it for 7 days, then I can use those 7 days to crack the DRM of that thing

For example, Flexplay was a physical DRM scheme, where a DVD would render itself unplayable 2 days after it was exposed to oxygen

Even if I was the only person to ever buy a Flexplay DVD, i could just dump the DVD within those 2 days

John Zhau

Who needs Deepfake when you have anti-vax moms and flat-earthers to spread the "news" for you'

MrHeliose

@MechMK1 True, maybe it would be better to say "Once a copy has been given"?

Conor Mancone

2:54 PM

@MechMK1 That's the first time I've heard of that - very interesting! I'm not surprised it hasn't been successful

MechMK1

@JohnZhau Because normal people won't believe Karen when she says Vaccines cause Autism because her Yoga teacher told her, but normal people may believe a video of a person doing something

This person does not exist

The picture is generated by an AI

Yet a casual viewer would NEVER EVER think that

thispersondoesnotexist.com

Conor Mancone

wow, that's crazy! I flipped through a bunch and only found one image that had some clear artifacts

MechMK1

Yes, the AI has some limitations

Conor Mancone

Any guesses on how long until that gets used for porn?

MechMK1

Earrings usually look wrong

hats and such still trip it up

Sometimes the AI doesn't know when a hat stops and head starts

Backgrounds and other people also don't work

Though glasses work surprizingly well

MrHeliose

2:59 PM

@ConorMancone you'r too late boi

MechMK1

This one is a big screw up

MrHeliose

@ConorMancone it has already been tested

Conor Mancone

I hadn't noticed the earrings until you pointed them out - most of them come out wrong

MechMK1

Conor Mancone

It's still got a pretty high success ratio

MechMK1

3:01 PM

The "person" on the left comes out all wrong too

Conor Mancone

ewww..., lol

MechMK1

More than one person is usually a recipe for nightmare fuel

This is one where the AI did not understand perspective, and instead made the hat part of the hair

Conor Mancone

Oh yeah, that's subtle

MechMK1

It almost looks photoshopped on really badly

Glasses usually work

But sometimes they end up like this

It seems as if the AI has understood pretty much how a single bare human face works

And anything else trips it up. Stuff we put on our bodies, or people around us, are too weird

Imagine you casually browse through the transcripts and have no idea what the fuck is up with those weird pictures

Rory Alsop

4:18 PM

@ConorMancone it is extensively used for "celebrity" videos...

Conor Mancone

@RoryAlsop Is that what that question was talking about with the "deepfakes"?

(I'm sorry, that was terrible, it was just setup too perfectly to ignore)

Rory Alsop

@ConorMancone I couldn't really tell what that question was asking. It seemed to be requesting a decision as to what it is, when in actuality it's a load of things

A. Hersean

4:36 PM

@MechMK1 (or others) If you are bored, could you expend my comment in an answer? security.stackexchange.com/q/223991/127837

Rory Alsop

5:00 PM

don't you hate it when a senior person at a vendor signs up under a fake name just to spam their product in an answer.

A. Hersean

5:19 PM

@RoryAlsop Certainly. However here the credit would go the answer's owner, not me. Anyway, have a nice weekend.

Rory Alsop

5:40 PM

@A.Hersean oh, I didn't mean you - my post just came in after yours, sorry. It was in reference to an encryption question

Conor Mancone

10:49 PM

@MechMK1 what happened to your response to Thomas on the lag question? I was curious to read it!

Transcript for