The DMZ

1:54 AM

@Jis12yearsold. You'll like this guy's blog: scarybeastsecurity.blogspot.com

6:13 AM

@Jis12yearsold. just go back to the last post. You have ONE draft active at a time per post type IIRC (so one question and one answer)

If its anything important, don't trust it. Wierd stuff happens sometimes

Also if you take too long you trigger a captcha .

nobody

7:57 AM

@JourneymanGeek Why a captcha? (Is it because good, long answers aren't normally written by humans, they're written by bears, forests and the like?)

Journeyman Geek

@nobody It used to be a running joke actually, that I was offended that it asked me if I was human...

@nobody I sometimes literally wrote some answers over 2-3 days

nobody

So that confirms it. But isn't Jon Skeet a human? I heard he can write great answers too

Journeyman Geek

@nobody Jon Skeet dosen't take 2 days to answer the question. The question answers to Jon Skeet.

nobody

Oh crap, forgot that

Journeyman Geek

Yanno...

If this place survives long enough... and I'm still here...

there's going to be a day I'll need to explain Jon Skeet to someone :D

nobody

8:07 AM

@JourneymanGeek Don't worry, Rory will always be there

Anonymous

9:29 AM

@forest Oh this is super cool :DS

Anonymous

@JourneymanGeek Oh right okay. I think forests trick works perfectly :D

Journeyman Geek

@Jis12yearsold. but you can't trust it

Anonymous

What the deleted method?

Anonymous

As in, sometimes the answer disappears?

Journeyman Geek

Oh post and delete?

Anonymous

9:33 AM

Yeah.

Journeyman Geek

Yeah, that I've done on meta... which can get funny

Anonymous

Hmm, okay. I guess I will write locally.

Journeyman Geek

("hey geek? Why did you delete that answer?" "uhhh ITS NOT DONE YET")

Anonymous

10:58 AM

@JourneymanGeek Heh, I doubt anyone would notice or care too much here :D

Anonymous

@forest So, the more I write in regards to this answer, the more I realise that this defense is actually quite useless. In the sense that, it doesn't stop you executing code at all. It just runs it in a different location (as you said).

Anonymous

Perhaps as I keep going I might uncover more of its use but so far it seems actually quite pointless (for protecting kernel exploits at least)

Journeyman Geek

@Jis12yearsold. No offense but... were you even born when they did it? :D

Anonymous

@JourneymanGeek Did what?

Journeyman Geek

Hell, was I even born when they had to do copy protection on floppies ? :D

Anonymous

11:04 AM

Floppies

Anonymous

Huh?

Journeyman Geek

9 hours ago, by forest

@Jis12yearsold. You'll like this guy's blog: https://scarybeastsecurity.blogspot.com/

Anonymous

@JourneymanGeek Oh aha. It's still a cool blog though!

Anonymous

It's interesting!

ThoriumBR

@Jis12yearsold. it's like and antivirus... it will protect against current threats, until malware authors develop another way to execute code. but until that happens, the kernel is safe for 2 days, maybe 3...

Anonymous

11:10 AM

The interesting thing is that it doesn't protect the kernel at all...

Anonymous

It protects data which is marked as needing extra protection.

Anonymous

But it doesn't stop you from making exploits...

Anonymous

Its literally as it says "data protection"

Anonymous

it isnt really that great...

ThoriumBR

yeah, I saw that... it protects some areas against alteration, and that's kinda pointless

Anonymous

11:10 AM

Exacxtly.

Anonymous

Its pretty pointless...

ThoriumBR

protect against changing a flag? come on....

Anonymous

yeah its stupid

Anonymous

something which i am going to point out in ym answer

Anonymous

this is a waste of technology

ThoriumBR

11:11 AM

do like OpenBSD: wanna change a flag? reboot in lower security mode

chattr +a on the file and want to revert? too bad, reboot needed

Anonymous

Funnily, yesterday forest described this as "snakeoil" security.

Anonymous

And as usual, he's actually right.

Anonymous

Microsoft advertises this feature like it protects code execution, but it doesn't do that at all.

Anonymous

It only protects data you call "secure" data. It does nothing more.

ThoriumBR

data that should be secure anyway if the kernel did its part

Anonymous

11:17 AM

yup....

MechMK1

Every OS is terrible.

I can't name a single good OS.

Journeyman Geek

Might as well go all the way terrible and run templeos :D

MechMK1

I kid you not, people speedrun the games in TempleOS

ThoriumBR

so I have a company-issued iphone. before getting to bed I plug it on the laptop usb and get to bed. get back on the morning and it's on 13% and NOT charging... TIL it only starts to charge if unlocked.

MechMK1

...weird

I know for Android charging-mode is the default.

ThoriumBR

11:31 AM

I have an ipod touch first gen, but was my only iOS experience...

I almost never touch the iphone, and siri tells me every monday that my phone usage is bellow 10 minutes per day

MechMK1

I had a first gen iPhone

ThoriumBR

it should be the times I have to open it to login on something or miss the pager alerts

MechMK1

I'm a bit of an outlier, because I barely do anything on my phone

All I do is: Play FGO, look at memes, listen to music, occasionally look at SE

Ah, and occasionally make a phonecall

I forgot you could call people with your phone

nobody

@MechMK1 Are you sure phones still support it?

ThoriumBR

Anonymous

11:35 AM

heh. true.

ThoriumBR

this iphone battery is terrible. doing nothing at all, with 100% phone coverage, 2m away from the access point, and it don't last 24h on a charge...

MechMK1

Yeah, my work phone is constantly on charge

A. Hersean

11:53 AM

Thankfully, iPhone batteries are easy to replace.

And if you don't know how to do it, Apple will kindly do it for you. You just have to give them your iPhone for 2 weeks and 1700 $. You can alternatively go to an unaffiliated shop before it gets sued to oblivion by Apple.

MechMK1

@A.Hersean You as the customer get sued? On what basis?

A. Hersean

Not the customer, the shop.

MechMK1

Ah yes

I suck at reading

A. Hersean

vice.com/en/article/9kxzpy/…

ThoriumBR

just bought a blackview bv6600 for my wife... it lasts almost 3 days in one charge

it's heavy, but it's almost indestructible, and have a very large battery, 8250mAh if I am not mistaken

MechMK1

12:06 PM

Jesus...

ThoriumBR

she always forgets to charge her phone and get on her errands with a 20% battery... now a 20% lasts for half a day

A. Hersean

I read somewhere that BV just look indestructible, but are far from being resistant in practice.

ThoriumBR

I can attest the opposite

A. Hersean

Cool

ThoriumBR

we have 3 kids, and they get her phone all the time and they drop it a lot

in 2 years, she had 4 phones, and none lasted for more than 3 months without a broken screen or something... so I searched a lot for a rugged phone and bought a blackview

I am replacing her phone now because her phone is 3 years old, battery lasts little, and it was mother's day... but it still intact

A. Hersean

12:09 PM

Looks like a thorough (or even just rough) review!

ThoriumBR

she have the habit of putting her phone whatever she is, so it's on the edge of the table, or the couch, or anywhere... kids try to grab it and run, and phone goes down all the time. screen still in mint condition, but body got scratched and a few dents

but if was a samsung or iphone, it would have been demolished a long ago

my oneplus 3t fell from my pocket ONCE when I was sitting and shattered the screen, just 2 days after I was telling Meck that I never had broken a phone in almost 20 years...

so guys, I was never gifted a Laborguini in almost 40 years, not solo mined a bitcoin block...

Anonymous

That's strange @ThoriumBR my OP5 which is only a few years newer tahn the OP3T has dropped face first on concrete at least 30 times. Never broke.

Anonymous

Not even a crack.

MechMK1

@ThoriumBR Looks like I'm bad luck :D

ThoriumBR

mine ALWAYS had a cover... but the day before I took it out of cover to clear the cover and forgot to put it back...

it fell on the edge, and a very small crack appeared on the screen, 2mm more or less... but the liquid crystal started to leak inside the glass

I quickly installed github.com/Genymobile/scrcpy on it so I could keep using it even without the screen... it wasn't a pleasant experience, but it saved my days

I ordered a replacement screen that took 6 weeks to arrive, and now the touch isn't working properly

after 2-3 minutes, touch gets erratic and I have to turnoff the screen and turn on again

so I am between buying a new screen or a new phone

I love my op3t, and I cannot buy a newer oneplus now, so maybe I get another screen and battery

MechMK1

12:20 PM

scrcpy sounds like a C function

ThoriumBR

it's on purpose

MechMK1

Mhm

ThoriumBR

> Why scrcpy?
> A colleague challenged me to find a name as unpronounceable as gnirehtet.
>
> strcpy copies a string; scrcpy copies a screen.

it's a neat app: you plug in your phone, run it, and have your phone screen on your pc all the time

Anonymous

I think I might nearly be done with this answer. Took me a lot less time to grasp all of this than I first thought.

MechMK1

J answering on SE? It's more likely than you think.

Anonymous

12:34 PM

I am answering forest, he is one of the only users deserving of an answer :D

MechMK1

based

Anonymous

This will be all of my contributions for the entire year done once I finish this.

Anonymous

I've already answered 3 questions this year (I think) that's me done after this.

MechMK1

Is it for the randomness question?

Anonymous

Nope, it's for his question about Kernel Data Protection, two seconds.

Anonymous

12:36 PM

8

Q: How effective is Windows KDP for exploit mitigation in practice?

Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at protecting from kernel exploits in the real world? Is this an effective mitigation, or security theat...

Anonymous

Hah!

Anonymous

Someone already implemented this on FreeBSD.

Anonymous

@forest 2013.asiabsdcon.org/papers/abc2013-P5A-paper.pdf <- 2013. Would probably need to search around for an update on his progress but.

Anonymous

2:52 PM

@MechMK1 You'll like my desktop background on this new monitor I got.

Anonymous

Shame I'll probably get banned if I post it here :D

Journeyman Geek

lol

Didn't you guys have an offsite chat?

Anonymous

Myself and Mech?

Anonymous

No, I don't believe he was ever in the SecSe CTF Slack. (It has also been dead for a really long time).

Journeyman Geek

ah

Anonymous

3:02 PM

Drat.

Anonymous

Just when I thought I was close to publishing this answer. I realise I have missed out something entirely.

Anonymous

Damn, there is a mind boggling amount to this technology.

Anonymous

Do you ever feel like you won't finish an answer?

Anonymous

This is kinda' how I feel now with this. There is a damn lot of content to write. Think I might have to finish it tomorrow or later, I've been doing this most of the day at this point.

Anonymous

Okay, I don't think my 1050ti likes this too much.

Anonymous

3:09 PM

I have a 2060 somewhere, I think.

Anonymous

Oh, nmevermind.

Journeyman Geek

.-.

Anonymous

It's actually okay!

Anonymous

47C :D

Anonymous

1113MiB / 4031MiB <- perfect.

Journeyman Geek

3:11 PM

Why would you be running a 1050 if you had a 2060 lying around?

Anonymous

Gave that card to my girlfriend a while ago.

Anonymous

No idea if she's still using it.

Journeyman Geek

ah ok

Anonymous

She has a better computer than me...

Anonymous

But she actually plays games, I do not. So I don't need it.

Anonymous

3:16 PM

Hopefully GPUs will go down soon.

Anonymous

I can get my 3090 :D

Anonymous

Which I am going to use for precisely... Nothing at all.

Journeyman Geek

lol

Anonymous

Until I move so I can play Assetto Corsa.

Anonymous

Physics engines make GPU and CPU go brrrrrrrrr

Journeyman Geek

3:17 PM

lol

Anonymous

Might as well start offering a password cracking service here too :D

Anonymous

At least I can put the card to use!

vbnm

Hello!

Anonymous

Hello!

vbnm

@Jis12yearsold are you actually 12?

Anonymous

3:19 PM

@vbnm Yes, of course.

Anonymous

No, I am not. I made my name this to be a dick but it backfired since I have to keep it for a month which sucks.

Journeyman Geek

@vbnm he's 16

vbnm

Hey, I joined SE when I was of that age

@JourneymanGeek Ah, a person after my own heart

Journeyman Geek

points and laughs at @Jis12yearsold.

vbnm

:D

Anonymous

3:20 PM

I wish I were 16. If I were 16 and knew what I knew now I would be a genius by the time I am 20.

Anonymous

Which is my actual current age. But instead I am 20 but know what I know now so sucks for me...

A. Hersean

/me feels old

vbnm

I'm so confused. But if you're actually 20, you're the same age as me lol.

Anonymous

@JourneymanGeek meanie

Anonymous

I am 20, yes.

Journeyman Geek

3:21 PM

@Jis12yearsold. Well if I could help I'd help

vbnm

@jis you can still change your name, I think

Anonymous

heh :D

Anonymous

No, you have to wait a month.

vbnm

@jou is the TOWMN loophole still open?

Anonymous

It's whatever. Teaches me for trying to be a little prick.

Anonymous

3:22 PM

Was funny though... At the time.

Journeyman Geek

I think I mentioned it? Changing it on another site and syncing it?

vbnm

Yep, that

Anonymous

Doesn't work.

Journeyman Geek

I also can't help him with mod powers cause he dosen't have an account on a site I mod

vbnm

I mean, it takes like a second to open one

Anonymous

3:22 PM

I'll join super user and then you can change my name to: "J supports palestine" pls and thanks @JourneymanGeek

Journeyman Geek

@Jis12yearsold. sure, just ping me once you've made the account

vbnm

@jis: @jou is a real meanie, he won't do that unless you post at least three good answers on SU

Journeyman Geek

@Jis12yearsold. you can delete it afterwords if you don't want it

the account

Anonymous

J is 12 years old., ring 0.

101

Anonymous

Done. @JourneymanGeek

vbnm

3:24 PM

You contribute to SU, and only then will @jou help you out

Anonymous

I am the worst person to contribute to SU, I assure you.

vbnm

You're out of luck then, I guess ;P

Anonymous

Using computers well is not something which interests me at all.

Anonymous

Breaking them is the only fun part.

Anonymous

Huzzah.

Anonymous

3:25 PM

Wait, wtf happened. THat was weird.

Journeyman Geek

@JsupportsPalestine I took the liberty of spelling Palestine with a capital P

Anonymous

Thank you @JourneymanGeek

Anonymous

Heh, appreciate it :D

vbnm

@JourneymanGeek Dude I was trying to help your cause here

Journeyman Geek

(what happened? I just edited your name on SU, synced it to all sites so security.se will have it, then synced your chat account with that :D )

@vbnm I'm fine with helping reasonable requests :D

Anonymous

3:27 PM

Yeah :D

Anonymous

Next request: can you change my name to "J loves big booba"

Anonymous

Thanks :D

Anonymous

(Joking)

Journeyman Geek

@JsupportsPalestine I'll change it to "J misses Penistone!"

vbnm

Anyway speaking of security.SE, I found a rubberducky payload script thingy I made when I was like 16, and now instead of being productive with actual work I'm updating the script lol

Anonymous

3:28 PM

Don't worry. I have spent most of the day trying to answer a question here rather than doing "actual" work too.

Anonymous

@JourneymanGeek Hahah a:D

vbnm

Although I now longer have mean teachers I can use it on, unfortunately :(

There's a few college profs, but remote classes mean I can't access their USBs

Anonymous

Teachers told me I wouldn't make it. Look at me now, shitposting in the DMZ - profit!

Anonymous

lul

Anonymous

@JourneymanGeek I am quite worried about this answer disappearing if it stays in "deleted" too long - do you think I need to undelete and delete again or am I good to leave it till tomorrow to work on it again without doing anything?

Journeyman Geek

3:31 PM

@JsupportsPalestine It'll be fine

Anonymous

Okay, thanks.

Anonymous

Won't bother then :D

Journeyman Geek

I'd suggest keeping a link to the question somewhere you can find it

Anonymous

Yeah, I got one already.

Journeyman Geek

but deleted is not deleted on SE

unless its redacted

Anonymous

3:32 PM

Well, nobody can see it, right?

vbnm

yeah, deleted = hidden

Anonymous

Yeah, that's fine.

Journeyman Geek

other than mods/10K users, staff....

vbnm

@JsupportsPalestine except mods and super users, yeah

Anonymous

That's exactly what I want.

Anonymous

3:32 PM

Till I finish it.

Fire Quacker

@JourneymanGeek Hence the curse of 10k

Anonymous

Oh, well, that's fine.

Anonymous

They can read it. I don't care. It's close to done.

Anonymous

But I have been working on it all day, I am pretty tired of it now so.

Anonymous

Just going to finish it tomorrow.

Journeyman Geek

3:33 PM

@FireQuacker Mods don't have click to show

vbnm

@JsupportsPalestine That's what I said! Then I got cancelled on twitter.

Anonymous

Honestly, you could make three questions out of this answer easily.

Anonymous

But that is okay, no need for that. Might as well just include it all in this answer.

Fire Quacker

@JourneymanGeek Oh, I didn't realize there was a difference. I thought 10k users got to see without clicking also

I guess that makes sense

So not as much of a curse as it could be

Journeyman Geek

I don't think so?

Fire Quacker

3:35 PM

You poor mods tho

Journeyman Geek

I've not been 10k only on any site for a while

Fire Quacker

You didn't briefly give up the diamond during the troubles in the last couple of years?

Journeyman Geek

On meta

I quit meta cause I didn't agree with how things were done, and I went back cause I didn't agree with how things were done even more :D

Anonymous

Mods, mods everywhere.

Anonymous

hides

Journeyman Geek

3:40 PM

@JsupportsPalestine I only have two sites :D

and don't really think there's that many sites I could get a third on at the moment

Anonymous

Heh :D

Anonymous

I think 2 is stressful enough...

Anonymous

I would kill someone if I were a moderator, I am almost sure ofit.

Fire Quacker

Pretty sure the moderator tools don't have that ability

Anonymous

Hahahahahah :D

nobody

3:46 PM

No? They can nuke accounts at least

Journeyman Geek

@JsupportsPalestine Well - I think 1's generally a decent number for a sane person

or 0 :D

nobody

Well, how does rory handle 4?

Journeyman Geek

@nobody could ask him but - you can generally manage sites on a 'good' day with not much work

When you have bad days...

Anonymous

I have a bad day most days.

Anonymous

I'd make a terrible moderator.

Anonymous

3:49 PM

I call people stupid. I get mad. I insult them. I make fun of them.

Journeyman Geek

lol

Rory Alsop

@nobody I can't remember. 4 was quite a while ago. 6 is fine though :-)

Journeyman Geek

@JsupportsPalestine Someone like that was a reason I'm the person I am today. I ask myself what he would do... and not do it

Anonymous

Meh, I don't give a fuck enough about others to change my behavior.

Journeyman Geek

@JsupportsPalestine I think some of the other mods have seen me completely furious.

Anonymous

3:51 PM

If I have less friends because of it, then that's the consequence.

Rory Alsop

Honestly, it's because the balance works. 2 are quiet and niche, 2 are pretty strong at self-moderating, and the other 2 are interestingly challenging on occasion

Anonymous

@JourneymanGeek I actually cannot imagine you mad...

Anonymous

At all...

Anonymous

Maybe its the dog photo...

Rory Alsop

@JourneymanGeek I don't know. I saw something, but it was definitely a restrained fury.

and it was warranted

Journeyman Geek

3:52 PM

@JsupportsPalestine I've seen ash mad too. It was... quite a sight. :D

Bit someone too (he deserved it :D )

Anonymous

Heh :D

Journeyman Geek

@JsupportsPalestine heh, Its the people who're not mad all the time that're scary angry

Anonymous

That's actually true!

Journeyman Geek

cause you kinda know something pushed em over

Rory Alsop

@JourneymanGeek I'm almost never angry :-)

Anonymous

3:53 PM

My girlfriend is never mad and then when she gets mad she erupts.

Anonymous

Whereas I erupt on a daily basis..

Anonymous

But am far less scary.

Anonymous

Just annoying...

Journeyman Geek

@RoryAlsop heh, also its the internet, and I can take time to breath, and try to get stuff done.

@JsupportsPalestine my dad's got a temper. I'm...

nobody

I don't get mad too often. Not because I'm a calm person, but because I'm so timid I'm scared of my own anger

Journeyman Geek

3:54 PM

"Hi dad! Told you so"

Anonymous

Yeah I have a very short fuse that's the problem.... I go from perfectly calm to breaking things in a few seconds.

Anonymous

It is super unhealthy.

Rory Alsop

I had a wonderful epiphany 20-something years ago. I realised that my wife had worked in cardiothoracic intensive care. People died. I will never be on a job with that level of stress. So - why should I be overly angry, stressed, etc

Journeyman Geek

lol

Rory Alsop

reframing works for that sort of thing

Journeyman Geek

3:55 PM

more or less

Rory Alsop

helps a lot!

Journeyman Geek

Also many of the things you do to deal with anxiety work with anger :D

Rory Alsop

@JourneymanGeek guitar!

Journeyman Geek

possibly or similar hobbies

I'm waiting on one lest thing for a hardware repair ._.

and those are fun

vbnm

@JsupportsPalestine Now I'm trying to remember if I've ever witnessed @jou mad over the years

Nothing comes to mind straightaway

Journeyman Geek

3:58 PM

@vbnm I don't think so

vbnm

Yeah...

:)

Journeyman Geek

Rory's kinda seen the stuff that happened during, yanno

Also, you probably have seen the results of me getting angry :D

vbnm

Possibly, yeah

A. Hersean

I sometimes drove an ex of mine crazy because I was never angry. In her mind it was "not angry = do not care", whereas in mine it is "not angry because what's the point".

Anonymous

@vbnm I literally cannot envisage him mad.

vbnm

4:00 PM

@A.Hersean oh, along those lines, I've had people be "you're not crying = you aren't really upset = you don't care enough"

@JsupportsPalestine pissed geek or angry geek I can picture (the former I've seen a few times), mad geek is pretty hard to imagine yeah, lol

Journeyman Geek

@vbnm pissed and angry is probably close enough

Anonymous

@A.Hersean Hah :D

Anonymous

That is very stupid logic...

Anonymous

But I think quite a lot of people think like that.

Journeyman Geek

Mad's what comes after :D

Anonymous

4:03 PM

(That never angry = not caring)

Journeyman Geek

People express themselves in different ways

A. Hersean

It's very very hard to get me angry. In part because I'm naturally of a calm temper, and in part because I can become violent when I break, and I don't want that. So at most I can have a cold furry. I've not been angry in maybe 20 years.

Journeyman Geek

Or are cats, and have only one emotion. Contempt

3

A. Hersean

true

Anonymous

@A.Hersean Yes, I likewise get quite violent which is why I type furiously here instead of punching things...

Journeyman Geek

4:04 PM

@vbnm on the other hand, very little is worth getting mad, or angry or pissed about...

Just that its a very human trait to :D

vbnm

@JourneymanGeek wise words

A. Hersean

@JourneymanGeek also true

Anonymous

Oh look; the US after 5 requests for a ceasefire finally agreed.

Anonymous

Hurrah...

Anonymous

Only took 200 deaths... Good job. Cunt.

A. Hersean

4:09 PM

@JourneymanGeek I suggest you read "Cinder Spires" by Jim Butcher (the 2nd book of 6 is in writing).

Journeyman Geek

Hmm which of his series is that?

A. Hersean

That's his steampunk series.

Only 1 book for now.

(He stopped writing for 5 years after this one, but now his life is back on track.)

Anonymous

Israeli Police Spray Palestinians With "Rancid Water”

►

Anonymous

> "but they're only targeting hamas"

Anonymous

Yeah, good one...

Anonymous

4:12 PM

Sure looks like a lot of Hamas at a fucking peaceful protest.

A. Hersean

Israel is so hypocritical. "Shoah was bad because it was against us, but we do not like our neighbors, so they don't count."

Anonymous

No, they're just defending their country! :D ;)

Of course I don't believe this before someone tries to take it out of context, I am very much **against** such a stupid and ignorant statement.

A. Hersean

(And I tried to stay apolitical here...)

Journeyman Geek

@A.Hersean I'll look it up in the morning. Fan of his

A. Hersean

I'm a huge fan. I've read every book and short stories of him (except his spider-man comic).

Anonymous

4:37 PM

That amount of fuckwits on Israel's side on media videos and comments and such is mind boggling.

Anonymous

Israel bombed a refugee camp and there's really people going "good it killed hamas leaders"

Anonymous