The DMZ

tylerl

00:50

@Simon CTRL+ALT+DEL -> Start Task Manager -> File -> Run -> "explorer"

And your desktop is back again

copy

Or simply Linux

Simon

@tylerl The application kills task mgr/explorer every second.

tylerl

so kill it and THEN start explorer. Silly.

@copy Or what he said

Simon

@tylerl How would you kill it if the task manager gets closed?

TildalWave

@Simon click fast :)

Simon

01:03

@TildalWave I guess that could work, haha.

tylerl

@Simon ctrl-alt-del and start task manager

Simon

@tylerl Dude, it's a loop that kills task mgr/explorer.exe

tylerl

@Simon CLICK FAST!!!!!111!

Simon

@tylerl looooooooooool yeah

What about it executes every millisecond?

TildalWave

@Simon typing might be faster tho, if you're lucky and it's last PID then all you have to type is DEL+RETURN

Simon

01:06

Click SUPER fast? ^^

@TildalWave I might run some tests when I stop being lazy.

The dude posted a question that made me wonder more questions, zzz.

TildalWave

@Simon Why Windows suck?

Simon

@TildalWave Haha, of course that is always one of my question.

TildalWave

or... "Where the hell is my console?"

Wait, didn't holding CTRL+SHIFT at login used to stop loading startup items? Or was that before most of you were born? :O

Simon

@TildalWave I was definitely born but didn't care enough to know that shortcut :)

TildalWave

@Simon I remember stopping it loading "something" but I'm not sure if registry items also, or just start menu "startup" items... I'm too lazy now to Google for it

Simon

01:15

@TildalWave Me too. It's Windows after all, no need to think much about it.

Lucas Kauffman

05:57

morning

Rory Alsop

09:52

morning

Rory McCune

Morning

Lucas Kauffman

10:39

It seems I logged into sec.se for 366 consecutive days :D

Terry Chia

@LucasKauffman 400 days!

Rory Alsop

10:54

@TerryChia I broke mine. Had been every day since 9 Sept 2011...but broke it when I was down at the Download Festival. Otherwise I would have 659 days consecutive... ah well. I have 646 then.

Terry Chia

@RoryAlsop You know what they say... you rock you lose!

Lucas Kauffman

11:14

1 jump today now back on standby :(

TildalWave

11:51

@TerryChia Hehe thanks for editing that pen-test question. I was really tempted to penetrate a few full stops at awkward locations in there. :)

Terry Chia

@TildalWave Working on the editor badges. ;)

TildalWave

@TerryChia bling whore!

Oh wait, you're not from Essex :))

Lucas Kauffman

12:09

@TildalWave I heard Essex is the place to go if you wan't to get laid

also picked up one of these: masterofmalt.com/blog/post/aberlour-a-bunadh-batch-37.aspx

if I can't spend my money on jumping I better spend it on a good speyside whisky

TildalWave

@LucasKauffman Oh nice :) And you can't really spend money on Whisky, rather think of it as investment

Lucas Kauffman

@TildalWave investment in what sense :p?

TildalWave

@LucasKauffman self-improvement :)

Lucas Kauffman

think my bottle for next month will be an ARDBEG UIGEADAIL

Lucas Kauffman

12:32

Bizare internet is bizare: myfreeimplants.com/index NSFW

TildalWave

@LucasKauffman masterofmalt.com/whiskies/… one of my favs but it's a bit expensive to call it a habbit (well I can't) LOL

Lucas Kauffman

ooh 100 euro bottles

that's above my habbit budget as well

TildalWave

@LucasKauffman Yar mine too :( I would normally settle for some Ben Nevis which has nice range for all pockets... Glenfiddich can get into hundreds to thousands of euros per bottle which is a tad over my price range :))

masterofmalt.com/whiskies/glenfiddich/… (Not safe for self-esteem!!!)

Lucas Kauffman

@TildalWave a friend of mine told me that beyond a certain age you don't taste the difference unless they put it on different barrels

@TildalWave holy fuck

that's one expensive bottle of whisky o.O

TildalWave

@LucasKauffman that's what they do... and each barrel takes time again... so that argument is a bit moot IMO, you will taste the difference but not because it's older but because it was kept in different barrels over time

Rory Alsop

13:39

Well, you can definitely taste the difference between an 8 and a 50 year old whisky.

The one I have laid down well be a ten but will love in two different barrels

Terry Chia

@RoryAlsop So you are Rolling Your Own Whisky™?

Rory Alsop

13:58

Yarr

But not completely. We set initial conditions. Proper distiller does the work. Then we drink em

D3C4FF

@RoryAlsop I'm pretty sure last time i logged on here almost the exact same conversation was occuring... >_>

<_<

Or maybe i've been hanging out here so much that i've started to dream about @RoryAlsop making Whisky...

Simon

14:19

Morning

Terry Chia

14:34

So Christmas has come early this year: krebsonsecurity.com/2013/06/…

Simon

14:58

@TerryChia Haha, nice.

Rory McCune

@RoryAlsop Up in Moray was an amazing number of distillers up there..

Rory Alsop

@RoryMcCune Ahh - I see part of your motivation :-)

Terry Chia

Well, I just got through the second week of the coursera crypto course. Must say my head is spinning right now.

Terry Chia

15:30

Simon

Lol at Python. My poor PHP, why do they hate it so much?

Terry Chia

@Simon How much time have you got? :P

Simon

@TerryChia Well, some I guess, haha.

Terry Chia

@Simon Well, first of all PHP makes it incredibly easy to write insecure code. Especially at the hands of a new programmer.

Simon

@TerryChia Because of injection, XSS, etc?

But I guess that it would the same for .NET then.

Terry Chia

15:43

Secondly, the people in charge of PHP clearly does not give any shit about security. They take a long time to fix major bugs. See this: h-online.com/security/news/item/…

Simon

@TerryChia Yeah, that is right.

Terry Chia

Third, I attempted to use Zend Framework once. That piece of crap really cemented my dislike of PHP.

Lucas Kauffman

Coursera is pretty good hey :p

Terry Chia

@LucasKauffman The crypto course is brutal. Very difficult to understand.

Lucas Kauffman

Yeeey for python

@Terry I started the machine learning course, had the same issue. You loose track of the math quite quickly

I've put that on hold until I finish oscp

Simon

15:58

@TerryChia If you had to make a web app that requires a DB, what would you use?

(language)

Terry Chia

@Simon python. :P

Simon

@TerryChia I really have to look into it.

Lucas Kauffman

@Simon python is an all round language you can use for scripting and (web) programming. What does google use to build there sites? Python! What about reddit and the theonion? Python! And NASA? Python!

So don't fight it, embrace it :)

The only guy we still need to convert is @RoryM

Terry Chia

@LucasKauffman And @ScottPack. That poor bastard is still using perl.

Lucas Kauffman

@TerryChia poor guy :( maybe he should do the python course from security tube

Scott Pack

16:13

@TerryChia At least I don't have to rely on someone to have the same tabstop setup for a for loop to work.

Lucas Kauffman

@ScottPack at least I can still understand my code if I read it 30 minutes later after writing it

Scott Pack

Honestly? I figure I'm too old to get into holy wars over language and editors. I like using perl because I can make beautiful, well documented, readable code that works and doesn't require me to learn a new language for shits and giggles.

Lucas Kauffman

@ScottPack REPENT HERRETIC

And it's not that python is difficult to learn :p

Scott Pack

Whether it's difficult or not doesn't really come into it.

I have no reason to learn it.

Lucas Kauffman

NSA bugged the EU, bastards.

Scott Pack

16:18

I wonder how long it'll take before we find out Interpol or Bundesnachrichtendienst has tapped the NSA.

Lucas Kauffman

Interpol probably not, the Germans are a bit more tedious

Ducking autocorrect

Germans are bit more likely to that stuff

Scott Pack

So does Bundesnachrichtendienst still exist?

Lucas Kauffman

It's probably named something else these days

Scott Pack

I'm so very glad I was able to copy/paste that.

Hm. We have a sentence that describes this thing but we really want it to be a single word. I know! REMOVE ALL THE SPACES!

Lucas Kauffman

It's like the opposite of americans who tend to abbreviate everything

Germany is cool though, I would happily trade Belgium for Germany.

Scott Pack

16:25

Because abbreviations are the bees knees. Everybody knows it.

I've always felt that if I ever get off my lazy ass and start learning a second language it should be German.

Simon

@LucasKauffman So Python is the Major league while PHP is minor league, right?!?

Lucas Kauffman

Nah PHP is in the Paralympics.

Scott Pack

Ough

Lucas Kauffman

@ScottP German is a tough language to learn especially for Americans because you don't have the same grammar constructs

Well English speak folk in general

Scott Pack

That's about how well my neighbors spoke English.

Lucas Kauffman

16:29

I'm on my phone <.<

Scott Pack

2

Lucas Kauffman

Hahaha

Rory McCune

@Simon nooooooooo you want a nice rails app. none of this python nonsense...

Simon

@RoryMcCune Ruby on rails? Please don't say that I've been wanting to learn that too >.<

TildalWave

@LucasKauffman they were saying exactly the same for PHP a few years back :P

Rory McCune

16:40

@RoryAlsop well that and you can get some amazing properties quite cheaply up there. Saw a converted 19th Century school house under 250k!

@Simon so much nicer than python. lots of good free learning resources.. easy to deploy on heroku

Simon

Oh noes, I don't know what to do.

TildalWave

@Simon what can you program in now?

Simon

@TildalWave Web or all?

Lucas Kauffman

You can deploy python on google apps!

@Simon all of the languages!

TildalWave

@Simon all... web is just a subset of it all anyway

Lucas Kauffman

16:48

@RoryM do you live close to Ardberg?

Scott Pack

@Simon The real trick is to pick a language that's suited to your task and fits your work style.

Lucas Kauffman

^ true

Simon

PHP, JS, C#, VB, Java, C++ (I don't remember much of it though)

Those would be the ones I know the most

Lucas Kauffman

Why not just write in asp then?

Simon

Java being the language where I learned object

Rory McCune

16:49

@ScottPack indeed

Lucas Kauffman

Java also has spring

Simon

ASP is damn weak.

TildalWave

@Simon then you should be more object-oriented... choose accordingly then, don't go into scripting, you can probably learn that with your left hand as you do proper stuff with your right one ;)

Scott Pack

I mostly got into perl because when I started in the Security Office it's what was already in use. Between PCRE and how they implemented hashes (key->value pairs) it's actually pretty stinking nice and easy for doing text processing. Worked out well for us.

Lucas Kauffman

Which is a good framework, but tbh rails and python offer faster development IMO

Rory McCune

16:50

@LucasKauffman as the crow flies perhaps not too far, but the roads up that way mean you have much further to drive than it looks like...

Simon

@TildalWave Well, I always do object PHP

TildalWave

@Simon well honestly you can do it all in C++ anyway but it will be a major pain in the ass and you'd want good frameworks for web to deploy faster... I'd go with rails based on your experience and also look into python now and then, it's not that difficult anyway for your basic stuff (and the rest is then libraries, which you might get experience of in rails just as well). My 2 cents ;)

Simon

@TildalWave Yeah and it seems that many enterprises are interested by rails knowledge nowadays (assuming that I'm gonna be a web developer, not too sure about that yet).

TildalWave

when I say frameworks I obviously mean web frameworks, not template frameworks LOL :P

Simon

Hehe

I hope all of you have seen this:

►

The thumbnail represents the video perfectly.

TildalWave

17:13

@TerryChia Object Pascal could have been so much more if MS wasn't so desperate to kill Borland's Delphi when they started working on .net. And the open-source Lazarus project, while it's cool stuff, doesn't have enough developers to grow as fast. But is still my fav programming language because it requires consistency and is at the same time easy to learn/read.

But once Borland started developing cross-platform IDEs for it, that was it... loads of money went into killing it ASAP... then Inprise came and forced it to commit seppuku with idiotic pricing and move to unicode that screwed with every single then existing library just so it's more .net compatible ... why!!! :(((

Terry Chia

@TildalWave I remember using Delphi many many years ago.

Didn't really like it although I can't recall why. Of course I used to like PHP around that time so what do I know....

TildalWave

@TerryChia It used to be the best thing since sliced bread once, back in the Borland days

@TerryChia I'd guess that was a long time after Borland? Maybe Inprise or CodeGear? Anyway, that would be after the movement to screw it up as much as possible... it's now developed by Embarcadero, for which I can't say they are moving it much further either, tho they did add compilers and libraries for OSX development

Terry Chia

@TildalWave Hmm, I'm not too sure really. I think it was about 6 years ago when I dabbled in it for a little while, just a week or so.

TildalWave

@TerryChia oh that's just to have a short look around the IDE then

Terry Chia

@TildalWave Yeah. Never really used it in any serious fashion so I cannot really judge.

TildalWave

17:30

I still have Delphi 7 and Kylix 3 (Borland stuff) and am now following where Lazarus lands. What was nice in the previous Delphis was you could even compile C++ code in it, or mix one with the other, or even add some inline ASM to the mix

their JBuilder (Java IDE) was crap tho

Terry Chia

The next programming language I'm looking at picking up is Go actually.

Looks pretty interesting at first glance.

Well, time for bed.

Simon

Isn't it like 7 PM for you? I knew you were young but not that much.

TildalWave

@TerryChia nite! ;)

@Simon not in Singapore... it's nearly 8 pm in central Europe

1:43 am in Singapore

Simon

For some reason I thought he was British.

TildalWave

17:45

Singapore

Simon

Time to stop procrastinating, maths here I come (FML)

@TildalWave Yeah I didn't think he was from Singapore.

TildalWave

Search for "British" in that text, you'll get the idea ;)

Simon

I see. That's why I was that confused.

lynks

18:29

woo just got an email from john romero. thats made my day

i also hope somebody pointed out @Polynomial 's mistake with his bieber song writer.

Simon

That he says "Noooo" at one point?

TildalWave

18:52

BABY and OOOH should be reversed he's evaluating when the modulus of i is 3

Simon

So, what you're saying is that you're a Bieber fan, right?

TildalWave

@lynks it's still a good one... so it reads oooh oooh ooh baby so what, it's not any better in original either :P

lynks

@TildalWave yeah thats what I was referring to :P

TildalWave

@lynks @Poly caught a Bieber fever... he's also spelt this name wrong and didn't declare SONG_LENGTH since we're anal LOL

Simon

Where's the module/function/Main then? :D

Scott Pack

19:09

@Simon That's one of the strangest things I've ever seen in my life. And this coming from someone who thought it was perfectly normal to see a man riding playing a ukelele and wearing a TV on his head while riding a ukelele.

Simon

@ScottPack Haha. Did he manage to make you laugh or you were simply stunned?

Rory Alsop

@RoryMcCune buy it, dude

Scott Pack

@Simon I spent the whole time appreciating his enthusiasm but did get a proper laugh at the Fanny Pack High Five.

@RoryMcCune What's the size of the building and how much land?

Simon

@ScottPack Haha, yes. If you have some time to spend, watch his other videos. He's amazing.

Scott Pack

So that was all put on as a humor piece?

Simon

19:21

Of course.

Scott Pack

Well. That kills it for me.

I enjoyed it because I thought that was a real person, not a character.

Simon

Why is that? He still has massive balls.

Scott Pack

Actually he doesn't. The shorts are proof enough.

Simon

Oh. Well, according to his vlogs, I can tell you that he's that way all the time.

He doesn't really have a character, he just likes to go in public and do silly stuff.

Scott Pack

It's still putting on a show. I've definitely known people who would do that, not because it provokes a reaction, but because that's how they are.

Simon

19:26

Yeah, I guess it's safe to say that he wouldn't do it if he wasn't recorded.

Rory McCune

@ScottPack @RoryAlsop rightmove.co.uk/property-for-sale/property-42084308.html the pictures don't really tell the whole story mind. there's some downsides (it's not really finished inside) and some upsides (several outbuildings and an orchard)

Simon

Yeah because judging by the pics, it's a nice place.

Rory McCune

@Simon it is nice just a little odd. if you look at the pick from the front you can see a line of insulation. that's actually the current inside roof, they've kind of strung it half way up the windows

which is weird

but still a v.cool property

Simon

Oh damn, yeah I see it now.

Simon

19:46

When I reach 1k rep, I'm gonna throw a party at my place. I hope everyone will be able to make it.

lynks

@Simon which continent are you on?

Simon

@lynks North America

lynks

@Simon unfortunately I'm on one of the better ones, and won't be able to make it

Simon

Which one would that be?

lynks

Antarctica is clearly the best

Simon

19:52

Obviously.

lynks

but im on europe

Simon

Which country?

lynks

the 3rd best.

(country)

Simon

According to you?

lynks

i have no idea where im going with this

but im in the uk

Simon

19:56

Haha.

lynks

and im going to put something useful in the oven and try not to forget about it.

i have burned so many things due to coding

burnt*

no wait

Simon

No alarm?

lynks

a fine idea.

Simon

#1 would be Netherlands, #2 UK and #3 Itality

lynks

@Simon I was going with #1 italy, #2 germany

Simon

19:58

#1 - Crazy party people

#2 Top Gear

#3 Ferrari/Lamborghini

Griffin

Texas just banned masterbation

tribuneherald.net/2013/06/26/…

Scott Pack

@RoryMcCune That seems somewhat reasonable. Is there a second floor or did they just lower the ceiling?

> The new measure will go into effect on January 1, 2014 which will make many forms of male masturbation illegal.

Rory McCune

@ScottPack at the moment they've just lowered the ceiling although there's plans been made up to put in a mezzanine floor. It kinda looks a little weird though so we'd want to fix it, just a question of what that would cost...

Simon

Male? Wow.

Scott Pack

Notice that "many forms" are illegal but not "all forms".

@RoryMcCune Inside it looks quite lovely. Having those Windows seemingly carved in half is odd, though.

Rory Alsop

20:09

@rorym - looks lovely

Scott Pack

@RoryMcCune My office building used to be three floors of printing presses. The ceilings are in the neighborhood of 16 feet. At some point they lowered the ceilings to something much more heating efficient, somewhere around 10', but at each window the ceiling angles up rather sharply.

Rory McCune

@RoryAlsop yarr, they've artfully avoided the bits that need more work but that'd be part of the fun! there's a concrete former kitchen block that I think would make a good lair if done up

Scott Pack

Oo. Another gem from that article.

> New rules will also require men to sign an agreement when obtaining prescription erectile dysfunction medication which indicates they will not use the medicine for any purposes other than sexual intercourse with a woman.

Rory McCune

@ScottPack 'tis odd I wonder if the previous owner did it as a stop gap intendng to fix it...

Simon

Homophobic much.

"with a woman"

Scott Pack

20:11

@RoryMcCune Mayhaps. How's the roof? Any notion?

@Simon 1) Texas. 2) Non-missionary sex is (was until recently) illegal in many states.

Rory McCune

@ScottPack roof looks ok at the moment apparently there's essentially an unused floor and a loft as well... Also has a working school bell!

Darius Jahandarie

Does it not bother anyone else that it's trivial to get the IP of everyone who is chatting in one of these rooms?

Griffin

@ScottPack It looks like the only one legal is perm donation.

Simon

@ScottPack Oh my god...

Darius Jahandarie

(Since you can type out a URL for an image and it will turn it into an <img> tag.)

Griffin

20:12

sperm

Scott Pack

@RoryMcCune The two biggest reasons I could think to drop the ceiling like that would be heating/cooling or the original roof was in bad shape and that was seen as a better alternative to repairing.

Griffin

@DariusJahandarie Someone plays LoL?

Scott Pack

@DariusJahandarie That's how the Interwebs work.

Darius Jahandarie

@Griffin I don't. This is my real name.

Rory McCune

@ScottPack yeah I think it was heating/cooling + stop-gap..... although apparently there may be woodworm. Either way a full structural survey would be in order if we end up going for that one.

Scott Pack

20:14

@RoryMcCune You could hook up the school bell into your monitoring system and have it act as your alerting agent for when systems go offline.

Darius Jahandarie

@ScottPack What? I do not consider "everyone else who uses this website can get my IP" to be "how the Interwebs works".

Scott Pack

@RoryMcCune Uncontested.

@DariusJahandarie Any website that allows you to upload custom content is vulnerable to the hotlinking attack that you describe.

Rory McCune

@ScottPack ooh nice idea I was thinking that doing up a house would be a good opportunity to put in some home automation stuff...

Darius Jahandarie

@ScottPack I don't know what you mean by "upload custom content", but if someone chats a link, it should either 1. not turn it into an <img> tag without my consents, or 2. mirror the content on the chat server temporarily and generate an <img> tag which displays that.

Scott Pack

@DariusJahandarie Any system that lets you embed a link to an image, whether a StackExchange question/answer, this chat, a message forum, email, whathaveyou, will let you harvest people's IP addresses

Darius Jahandarie

20:18

@ScottPack The nature of the attack is much worse here. You generally do not know the identities of who is viewing a webpage which has your image on it. You DO know the identity of everyone in this chat room and it would not be hard to correlate the IPs and identities.

Simon

Darius Jahandarie

@ScottPack Basically, there's a reason modern email clients stopped showing external images by default.

@Simon I take it you've never used IRC / been packeted into oblivion.

Simon

@DariusJahandarie !kb Darius

Scott Pack

@DariusJahandarie At the risk of sounding dismissive, this is at least the 4th time someone has come in this room freaking out about this same issue. Which is largely why I'm being short about it.

It's wearisome.

If that concerns you so much then you should use an anonymization service. Tor that bitch up!

Darius Jahandarie

@ScottPack I am using Tor. I just think it's a pretty poor decision to generate those <img> tags security-wise and was curious what others thought.

(In other words, I'm not concerned about my own security, I just wanted to discuss the security of the chatrooms.)

Scott Pack

20:23

By and large, pretty unconcerned. The vast majority of us don't see it as being a particularly large concern, or isn't worth trying to lobby and fix.

The first time our friendly neighborhood troll, Andrew, made a big stink about it one of our users got scared shiftless and posted a question about it. I'm looking for that now.

TildalWave

@DariusJahandarie there's no security while there's @ScottPack around... you can ban all the images you want but you can't beat the deadly snark he packs

Scott Pack

@TildalWave It's been a while since I had a good ole fashion snarkgasm but I very nearly did yesterday. Some self-righteous shenanigans were going on in The Comms Room.

Darius Jahandarie

@ScottPack I think it's a fair concern. On old-school IRC networks which don't hide user IPs, historically people have gotten massive DDoS attacks to their home IPs and sometimes their internet has been entirely canceled as a result of it.

Simon

IRC has always been loaded with script kiddies/hacker wannabes. I'd say it's quite different here.

Darius Jahandarie

@Simon If one is working under the assumption that there will not be any adversaries in the chat room, then yeah, obviously it's not a big concern, but that's not a really great way to model security is it ;).

Scott Pack

20:28

@DariusJahandarie If you work under the assumption there will be no adversaries then any conversation around security is moot.

Simon

@DariusJahandarie You're right about that.

Darius Jahandarie

@ScottPack That was my point.

Scott Pack

That's also mine as well.

TildalWave

@DariusJahandarie Old-school... analogue modem times? It would take a whole lot more of an effort to effectively DDoS anyone here than it would take us to switch IPs

Darius Jahandarie

@TildalWave It happens to this day on IRC networks which use the old model of not hiding user IPs, such as EFnet.

Scott Pack

20:29

I never said the conversation isn't worth having, only that it's happened quite frequently and none of the people that hang out in this room have felt like it's a big enough deal.

Simon

@TildalWave Dude, I'd have to walk to my modem and unplug it, that's a lot of effort.

And then eventually plug it back.

TildalWave

@DariusJahandarie Possibly, but I've never seen it as a problem myself. And it's not like any of us are gonna starve of attention if we unplug the cable for a few minutes while someone's having a nervous breakdown either ;)

@Simon You'll grow older and wiser in time... I just shout out "reset the box" :))

Simon

@TildalWave LOL

Scott Pack

I can't find that Q/A exchange. Maybe it got deleted.

TildalWave

@ScottPack IIRC there is some plan to move all uploads to SE CDN and not host them from arbitrary location... dunno where I saw that but it can't be old stuff, I doubt I'd be searching through archives on mSO I'm not that desperate LOL

Darius Jahandarie

20:33

Entirely unrelated, but was I thinking earlier today that it'd be nice if there was a <meta> tag on websites which let you sign the body with a PGP key.

Scott Pack

@TildalWave Keep in mind that the SE CDN is really just a special imgur box where the images don't expire.

@DariusJahandarie Now if only PGP wasn't impossible to get normal people to use. :/

TildalWave

@ScottPack yup, but a bit more tricky to collect IPs for your average Joe here then ;)

Scott Pack

While PGP is a pretty not terrible idea, there needs to be a few more decades worth of development effort to make it actually usable.

Darius Jahandarie

@ScottPack It's mainly the fault of email clients not integrating it properly.

Trust me, if GMail made it easy to sign stuff with your PGP key, it'd be far more used than it is today.

Scott Pack

@DariusJahandarie And the concept of "web of trust" being surprisingly hard for humans to grasp.

I've ended up moving over to S/MIME for email as a result. While we all know the chain of trust is broken with our CAs, at least it's well integrated into every non web based email client.

Darius Jahandarie

20:36

PGP still has uses even without the web of trust. "This guy is the same guy as the person who sent that email" is a pretty nice guarantee which we don't always have.

Scott Pack

There's no authenticity, only integrity, which admittedly is good enough most of the time.

Mulberry and Thunderbird on !Windows are the only mail clients I've seen that do a good job with PGP. Thunderbird on Windows has too many other dependencies, i.e. a non-integrated PGP implementation.

Hell, even the commercial solution is terrible since it barely works with Outlook.

Simon

I love Outlook, especially when it blocks my e-mail because I sent a zipped VB project in it.

Scott Pack

You know you're in a bad way when the company that creates the product you're forking can't make their product work.

@Simon I won't say I love Outlook, but in an Exchange shop there's not much point in trying to shoehorn something else in.

Simon

You're right.

Lucas Kauffman

@RoryM I'd just buy it for the school bell :p

Simon

20:46

@LucasKauffman DJ Stephanie will be playing at the rave here this summer. Crazy.

Lucas Kauffman

Does she play topless like korsakov ?

Simon

Does she really do that?

She's a good looking lady.

Darius Jahandarie

By the way, what are thoughts here on various security certifications? Just in general. CISSP, CEH, the various GIAC/SANS ones...

(I don't have any. Vaguely thinking about getting one at some point in the future.)

One of my coworkers said that the CISSP didn't seem like a very good test in terms of proving that someone is knowledgeable about security.

Scott Pack

CISSP, as it stands right now, is a very high level test that covers a exceptionally wide range of topics. For instance, a Security Guard could qualify whereas a Firewall Administrator may not.

SANS has some pretty great courses, and the corresponding GIAC certifications seems to do a good job of attesting technical skills.

I've heard a lot of jabber mocking the CEH making me think it's rather akin to the security version of the A+. I don't really know anything about it, though.

Darius Jahandarie

The GIAC certs are very confusing to me. There are a lot and many of them seem to heavily overlap.

TildalWave

20:59

best certificate ever! ;)

Lucas Kauffman

CEH is a bit of an entry level, SANS is good but quit expensive, OSCP is quite affordable and makes you go deep although it requires a lot of personal persistence to succeed

For sans: 560,542,660 and 642 are the most relevant for pentesters

Darius Jahandarie

Ah, just found this, quite helpful: giac.org/certifications/get-certified/roadmap

Scott Pack

@DariusJahandarie In the pamphlets they also have a big picture that's a chart of what groups with what and what leads to what.

I have to run, or else I would go dig it up.

They have their pamphlets on the website as well.

Darius Jahandarie

Thanks, I'll take a look.

Rory Alsop

Sigh:

0

Q: How to protect Linux partition from access from Windows partition?

How can I protect my Linux partition from the Windows 7 partition? Both operating systems are installed on the same physical Hard drive. Could it be done via some encryption or other protection? Maybe to block it in BIOS or something? I have not a clue how to do this. But my point is to don'...

Should be a useful and interesting question. But not when written like this. ..

Lucas Kauffman

21:10

@RoryA not happy :p?

@simon she does I think she did a porno too

Simon

@LucasKauffman What the fuckkkkkkk!

Rory Alsop

Anyone fancy trying to edit it. I'd be tempted to do a real hack, as well as gubbing all those comments

Lucas Kauffman

@RoryA I'd have a go at it but I'm on my phone :(

Rory McCune

@RoryAlsop I had a shot at it, the intent should be the same but the wording isn't. Is that too extreme for a clean-up?

TildalWave

0

A: How secure is ionCube compiled code?

The answers here are good, though thoughts such as "any nosy customer wouldn't have much problems extracting the encryption key from your compiled code" stretches things somewhat because end users and even many PHP developers themselves would lack the knowledge required in terms of modifying the ...

does this answer read to you as a marketing spin?

Simon

21:29

As far as I know, the cat hasn't been on the couch for 2 days. Now that I removed the hair on it, she's been on it twice in 10 minutes.

Rory Alsop

@rorym - perfect. I'll have a look at comments now.

TildalWave

@Simon cats are fussy creatures... she prolly didn't go on couch because it was dirty... good that you cleaned it too, they're not too patient either and will take revenge if they resent you something :)

Simon

The couch is 3 weeks old. If it's dirty, it's because of her. Evil creature.

TildalWave

I really wish there was such markup to make things demi-bold ... it looks almost like I was shouting, which is what I wanted to avoid by not using caps :?

Lucas Kauffman

@Simon you're her bitch now.

@TildalWave opened that bottle of whisky, first tried it straight, but 60% is not really nice, after 3 scoops of water it was a good drink. Very sweet.

TildalWave

21:38

@Simon ours is really tidy but hates it if we're not

Simon

@LucasKauffman Of course I am, I gotta clean her litter too.

TildalWave

@LucasKauffman which one? the one from the last link?

Lucas Kauffman

@TildalWave yea

Rory Alsop

That's the way. All whiskies are different. Find the right setup for each

TildalWave

@LucasKauffman bloody hell yes it says 59.6% :)) that's one hell of a punch :)

but prolly settles with a nice woody aftertaste?

Lucas Kauffman

21:40

@TildalWave if you add water to it, yea

pure it's quite strong, you feel alcohol burn on your tongue

TildalWave

@LucasKauffman just don't ruin it with some ice with the taste of the freezer's cooling agent... I use plain tap water with those, but our water is good so use bottled one, if your tap water tastes funny ;)

Lucas Kauffman

@TildalWave I'm in spain and the tapwater has a bit of a chlorine taste, I just used bottled water

and definetely not adding ice, (cold makes tastes disapear)

TildalWave

@LucasKauffman oh yes I forgot... whereabouts?

Simon

I can't stand any tap water.

Lucas Kauffman

also saw this today: shop.themacallan.com/ice-ball-maker

I had it once in a cocktail and it was really really nice, better than normal ice

but the thing is bloody expensive

Simon

21:45

Cheap, you can send me one if you like.

TildalWave

@Simon that depends how good the source and the pipes are ... I'm lucky here to have quality tap water nearly free of charge, but would mostly resort to drinking bottled one elsewhere

@LucasKauffman I don't really use ice on drinks like that but would use iced glasses sometimes, just put the glass in your freezer for a few minutes

Simon

@TildalWave Well, I've drank some tap water that was supposed to be "teh shit" and still didn't like it much. I've grown up with bottled water, that's probably why.

Yet I'm drinking Coke right now, I'm full of shit.

TildalWave

@Simon I can imagine the problem... possibly good source, too new pipes that haven't settled yet. Will make some with less sensitive palate claim it's top shit yes, I've witnessed such claims and couldn't stand the water they said is great

Simon

Or I might be the problem too.

TildalWave

@Simon doubt it, unless you expect good water to taste good... good water should be tasteless, if you can taste anything then it isn't water only

Simon

21:57

Yeah, I'm expecting it to be tasteless and I can taste something in tap water, not a slight idea what it might be.

Lucas Kauffman

@Simon lead

TildalWave

@Simon there's always some trace elements in water and hopefully some oxygen,... but they usually mix tap water with tiny amounts of chlorine and in US (possibly other countries also) some fluoride. Then there's limescale and other minerals (not necessarily a bad thing), and on newer pipes you can mostly taste it as "plasticky" (basically too deionized and will make it slightly too acidic which translates into "taste" that some don't like - including me)

Simon

Never drinking tap water again.

TildalWave

@Simon Excellent source of good purified water are trees themselves, if you know what you're doing (not to kill the tree in the process LOL). I'm sure there's some online resources how to do that properly.

Simon

That'd be sick, you got my interested.

TildalWave

22:09

►

Simon

He's hurting the tree!

The tree's crying, that's why he's getting water :(

Pfft, he didn't even show a full bottle. BOOOOO.

TildalWave

@Simon heh I've seen some use the same tree here for decades and I've never seen the tree complain about it... granted, you don't wanna abuse this - one tap per tree max ;)

there are probably better videos but this one was the first one in the google search, I'm not arsed to go through all of them :P

Simon

@TildalWave I don't think anyone speaks Entish to understand them!

Griffin

22:28

What the fuck are any of you talking about.

I still have this shit up >.< google.com/tisp/faq.html

Transcript for