« first day (3736 days earlier)      last day (1144 days later) » 

3:13 AM
Does anybody know of a source that dispels mainstream FUD about cybersecurity?
 
@FireQuacker I don't know of any one resource, but there are lots of places scattered here and there (like the "always use urandom" site).
:/
 
3:35 AM
@forest Thanks
It's hard to say exactly what I'm looking for
Just my friends have asked me one too many times about NordVPN and whether the government is spying on them through their cell phones, etc
I'm thinking to write an essay about analyzing threat actors and risk
If I use enough technical terms, they'll think I'm super smart when I give my opinions :D
Troy Hunt has a lot of good content that helps dispel myths
Also has a sponsorship from NordVPN, so :/, but he does have a well thought out explanation about that
That one YouTube video about ████VPN is good tho
Also, @forest what's up with two chat accounts? Did you find a bug? :D
 
3:54 AM
test
yep, weird bug
@FireQuacker VPNs are not great for anonymity. Fine for privacy though.
 
VPNs are really actually meant for securely connecting to resources in a lan. Any other use is wierd. Change my mind :D
 
^^^
You're 100% right.
 
4:09 AM
(faking your IP... eh, I guess)
But your anonymity and privacy is only as good as your provider or protocol
Pretending you're in another country ... works well
but that's because of geofencing, which it initself is kinda wierd in in the context of the internet
 
 
1 hour later…
5:35 AM
Yeah it's useful for fooling silly services.
But VPNs in general are even more vulnerable than Tor to an AS-level adversary.
And unlike Tor, you have to put 100% trust in the VPN's ISP not to deanonymize you.
(Due to their ISP seeing both the ingress and egress traffic)
@FireQuacker Well, their governments are spying on them through their cell phones, but not by hacking them or backdooring them or anything. Cell towers record cell location, etc.
So... looks like Stack Overflow is now promoting the US Department of Defense...
 
 
3 hours later…
 
5 hours later…
1:32 PM
Can't get BFG 10000 out of my head!!!
 
2:13 PM
@forest man, you brightened my day!
amazing, just amazing
 
Why is donuts considered bullshit?
The dictionary doesn't include it
Is it a regex gone wrong?
 
probably
 
2:39 PM
@MechMK1 I can't get it to replace "donut" or "donuts"
 
@FireQuacker Try it here in the dmz
 
Okay, it got the tag for donuts, but it didn't replace anything in the chat messages
 
It's weird, isn't it?
Why it matching?
 
I see what happened. crypto(?!graphy).\w+ is supposed to catch all those trendy crypto products. Since the crypto tag immediately precedes the donuts tag, donuts gets replaced.
 
Ahh!
so it thinks its crypto donuts?
 
2:52 PM
Yup
 
Nice
 
Incidentally, blockchain-based crypto donuts would look great on your next business proposal
 
Only if they were made using advanced machine learning blockchain bitcoin AI big data
 
Anonymous
Hey
 
@J-- Hey!
 
Anonymous
3:02 PM
@MechMK1 Hello, friend.
 
How're you doing?
 
Anonymous
I've had 2 hours of sleep, I feel great! (not). But, important things to be getting on with so no time to worry about sleep.

Other that, I am good. Thanks for asking. Today has been a bit busy, haven't had time to study during work today but it is slowing down now so I think I am good to go. And yourself?
 
3:40 PM
Been okay. Didn't sleep all that well, but I never do
Anyways, I gotta go now. Sorry for the short talk
 
4:40 PM
@FireQuacker Monero uses a ring-based signature for transactions, so forking Monero and renaming the ring to donut would work
 
4:51 PM
@ThoriumBR Donutcoin. AKA Dogecoin 2.0
Be sure to make it so that it is impossible to farm it for profit, like dogecoin.
 
5:14 PM
you can tajke mining off the protocol, like Nano...
 
 
2 hours later…
Anonymous
7:23 PM
@MechMK1 All good :)
 
8:08 PM
- I need my VPN password.
- sure, we will send it to your corp email.
- I don't have access to it, I need the VPN password.
- we know, that's why we sent the password to your email.
- how can I access the email? I am offsite (on another continent).
- You have to use the VPN...
 
8:53 PM
@ThoriumBR Sounds like a typical day at the office :)
 
they said they could send it to slack to me, but to login to slack for the first time I need to access.. guess what...
 
9:53 PM
"your email password isn't working? try restarting the computer..."
 
Anonymous
10:11 PM
Today was a good day.
 
11:28 PM
@A.Hersean Can you not mine dogecoin or something? Why would it be impossible?
 
his point wasn't this... the point was to make the donutcoin impossible to mine, UNLIKE dogecoin
if I read correct...
 
ah
Random protip of the day: Don't use your built in malloc if you need a hardened userspace. Use a hardened malloc like this improved port of OpenBSD's implementation: github.com/GrapheneOS/hardened_malloc/blob/master/README.md
It's much better than glibc's ptmalloc, and overwhelmingly better than musl's dlmalloc (which, if I recall, does not even use XOR cookies for setjmp and friends).
Yep, I remembered correctly: dustri.org/b/…
 
11:58 PM
Ooh, very neat analysis of OpenBSD's security (or lack thereof): isopenbsdsecu.re/mitigations
Tl;dr userspace mitigations are great. Kernel mitigations are quite lacking.
 

« first day (3736 days earlier)      last day (1144 days later) »