The DMZ

Iszi

04:06

Wow. If I hadn't commented on this one myself, it would probably end up as a Tumbleweed. I wonder if deleted comments still count against it?

0

Q: What data is collected by "Turn on logging in Communicator"?

In Communicator, there are a few logging options available in the Options dialog. Under Personal: Save my instant message conversations in the Outlook Conversation History folder. Save my call logs in the Outlook Conversation History folder. Under General: Turn on logging in Communicator Tur...

Iszi

05:08

Well, this is just not right.

Got my laptop hooked up via HDMI to my 42" TV so I can get some more screen real estate. But no matter what I do, if I "fullscreen" a VM it drops back to my laptop screen unless I have the laptop screen totally disabled.

Rory Alsop

08:23

So, who's going for number 1000 then?

Feeds

08:40

Stack Overflow Blog: Stack Exchange Is an OpenID Provider

Posted by Jeff Atwood on May 27th, 2011

If you’ve logged in to a Stack Exchange site recently you may have noticed a new button on the login page:

That’s right — Stack Exchange is now officially an OpenID provider as well as an OpenID (and OAuth 2.0) consumer!

As a provider, we can now provide a totally seamless signup experience for new users. That is, you can create a new account entirely on our site without ever once being redirected to another website in the process.

Those users who were uncomfortable with Google, Facebook, MyOpenID, AOL, or any other form of OpenID credentials can now create “local” accounts. …

Scott Pack

11:25

@RoryAlsop I've got one prepped and ready to post, it's just at the office.

@Iszi Do you have the screens mirrored or spanned?

AviD

12:34

@ScottPack BUWAHAHAHHAHAHA!!! :D

@Iszi and @RoryAlsop - I havent merged in a while, but I seem to remember there being a UI pretty much in line with what was described - the target question, the merged question, and option to select / change content.

@ScottPack Sorry @Scott I just couldnt resist... I usually wait for others to vote before closing, but this time it was just too juicy....

AviD

12:48

but, if you think its not really an exact duplicate, i'll be glad to reopen of course....

Scott Pack

12:59

@AviD I had searched first, but didn't see anything. I'll look at that one a bit deeper to see.

Well, yes, they are probably (definitely?) related, but I don't see them being duplicates.

IOS being what's used in routers, and PIXOS, while spun off of IOS, is a separate operating system and only runs on firewall/security devices.

nealmcb

@RoryAlsop 1000 is sooooo last-era. I've got 1001 :)

But of course a big problem is that the question # is not enshrined in the URL - mine is 4131 in the url. Not sure why....

Scott Pack

The firewall config portion doesn't even exist in IOS, to the best of my knowledge.

I'm in lust with that question, @nealmcb. I would love to see some good answers to that.

nealmcb

I've got one good answer queued up

Scott Pack

A few years ago my office (specifically me) took over physical key management for IT. Being forced into the physical stuff has been really interesting.

nealmcb

I even created a wikipedia page for jps.anl.gov but it was deleted as non-notable, which strictly speaking it was, since journalists just don't get it

Scott Pack

13:07

The noteworthiness requirement of wiki pages can be very interesting.

nealmcb

but those folks at Argonne are good - Roger Johnston on defeating seals etc

Scott Pack

I remember when an article like this didn't even exist

Dominating set

In graph theory, a dominating set for a graph G = (V, E) is a subset D of V such that every vertex not in D is joined to at least one member of D by some edge. The domination number γ(G) is the number of vertices in a smallest dominating set for G. The dominating set problem concerns testing whether γ(G) ≤ K for a given graph G and input K; it is a classical NP-complete decision problem in computational complexity theory . Therefore it is believed that there is no efficient algorithm that finds a smallest dominating set for a given graph. Figures (a)–(c) ...

nealmcb

What - you want fundamental truths of nature to be in an encyclopedia?

Scott Pack

Drat. Doesn't look like our library has that journal

nealmcb

Its free online

concern = Irregularly appearing journal (4 issues produced since 2004) with only few articles published (and several of those not peer-reviewed). Apparently not indexed anywhere, does not even seem to have an ISSN. Does not meet [[WP:Notability (academic journals)]] or [[WP:GNG]

Scott Pack

13:11

@nealmcb Well, my undergrad senior capstone was on locating dominating sets. Wikipedia, for all of it's other issues, is a great resource for high level overviews and collecting citable works.

nealmcb

so instead we have to put up with trade mags that tout new locks and just don't get it

@ScottPack absolutely! And for techie stuff they seem forgiving on lack of third-party references

Scott Pack

@nealmcb Is their base assumption that good third-party references may not exist?

nealmcb

@ScottPack I think its more that the folks who run across the articles want them there, and just don't flag them or nominate for deletion.

Scott Pack

So the editors don't play an overly active role in policing the articles?

nealmcb

13:27

@ScottPack "The editors" of wikipedia vary a whole lot in their practices and roles....

I love today's APOD! apod.nasa.gov/apod/ap110527.html

Scott Pack

Ok, that's pretty cool.

nealmcb

14:29

@ScottPack Even more fun is the time-lapse movie of that all-night event in Iran at twanight.org/newTWAN/photos.asp?ID=3003232&Background=dark

nealmcb

14:58

Cute: Being Vulnerable to the Threat of Confusing Threats with Vulnerabilities (*) jps.anl.gov/v4iss2.shtml

nealmcb

16:04

Yo, PCI folks - is this true? "since the release of the PCI DSS no company found in compliance with the PCI DSS has been breached." from a detailed discussion of the Sony timeline: pastebin.com/pazcH1mp

Iszi

16:47

@ScottPack Spanned. I figured a way around it. I set the output to TV only, started the VM in fullscreen. Minimized the VM, turned on the laptop display, and then restored the VM window. It stuck to the TV then.

Holy crap. I think I just got my first phishing e-mail in, like, forever.

Thomas Pornin

@Iszi You want some ? I have many at home.

Iszi

"ADOBE PDF READER 10 UPGRADE NOTIFICATION"

@ThomasPornin No thanks. I pride myself a bit on the fact that I can't remember the last time I've received unsolicited spam on one of my personal accounts.

Thomas Pornin

@Iszi On the other hand, my main personal account receives about 250 spams per day, out of which about 240 are automatically shot by my not-so-strict spamassassin

Strangely enough, spam has decreased lately; around 2008, I was receiving about 450 spams per day on average. I do not know what happened since.

Iszi

That's funny. I was just noticing an up-tick in spam on my work computer recently. Particularly, spam that's making it through the spam filter.

Scott Pack

17:27

I just received a padded envelope from ExaGrid that contained a postcard sized flyer and a pen.

Iszi

Exa-who?

Scott Pack

That was my thought.

Oh well. Free pen.

Iszi

ExaGrid

ExaGrid Systems, Inc. is a disk-based backup hardware company that was founded in 2002 and is headquartered in Westborough, Massachusetts, with several satellite offices throughout the United States, Europe and Asia. The company serves customers in a variety of major industry sectors. () The ExaGrid disk-based backup system with data deduplication The ExaGrid system is a turn-key disk backup with data deduplication appliance that works with existing backup applications (see List of backup software). ExaGrid combines the use of compression and byte-level data deduplication (sometimes cal...

nealmcb

@Iszi Uh, must you serve as a spam proxy here?

Scott Pack

I much prefer dealing with physical spam. Easier to deal with.

nealmcb

17:39

But you're helping turn it virtual....

Scott Pack

I'm officially shifting all blame to @Iszi.

Iszi

Great... now I'm a scapegoat of questionable gender.

3

nealmcb

@Iszi Straight from the quadruped's mouth! Well, actually, it was communicated in an alternative manner....

Scott Pack

I can only assume that he's using some form of speech-to-text medium. I can't imagine hooves are well suited for keyboards.

Thomas Pornin

@ScottPack That's the motto of a computer engineering school in Grenoble (France): their representative animal is the elephant, because the elephant has square fingers.

Scott Pack

17:45

@ThomasPornin Really big keyboards...

Iszi

Y'know, sometimes I wish there was a way to have a "stop" at the border of multi-monitor boundaries.

Like, when you hit the boundary, pop-up a tiny little bar that you have to click on to move past it.

Scott Pack

@nealmcb I was seriously tempted to close as dupe the Hardening desktops question. Some of the information he wants to know is different, but the majority is the same.

@Iszi Particularly with 7's magic tiling.

Iszi

That too, but right now it's just an annoyance that I keep unintentionally flying my mouse over the bottom/top border between my laptop and my TV, consequently losing track of the cursor.

Scott Pack

oh, heh. You'll get the hang of it.

Iszi

Would also still be really nice if I could fullscreen my VM to a secondary display.

Scott Pack

17:55

I've got 3 monitors on my work machine. Two for linux and one for windows (using synergy to share the keyboard/mouse). That took me a little while to adjust to.

What happens if you move the VM window completely to the secondary display and then full screen it?

nealmcb

@ScottPack Bu note that the threats and vulnerabilities and attack surfaces vary quite a bit

Iszi

@ScottPack It's a lot easier when they're side-by-side.

Scott Pack

@nealmcb They do, though a lot of the concepts (and even implementations) still apply.

Iszi

@nealmcb I've tried even with the "secondary" display being set as the primary - it returns to my laptop screen.

Scott Pack

That's the reason I didn't end up putting that vote in. Hopefully the end-user protections are what gets focused on.

@Iszi What vm software are you using?

Iszi

17:57

VirtualBox

Iszi

18:29

Okay, I really do love that Communicator logs my conversations and all. And, it's kinda cool that it stores them in my mailbox. But, I'm finding it really annoying that they turn up in my Outlook searches.

Scott Pack

19:33

Well, this is certainly a failure case I hadn't considered.

Plugging a usb fingerprint reader into my desktop. Then remoting in and attempting to use sudo.

Iszi

19:53

@ScottPack I'm missing the failure?

Scott Pack

The reader is sitting on my desk, which makes it rather hard to swipe when I'm somewhere else.

Luckily, I was in the lab, about 10 feet away. If I had been at home...

Iszi

Oh, you've got sudo set up for two-factor auth? Or just biometric? You can't use your local fingerprint reader for the remote system?

Scott Pack

Well, one can't assume the remote system has a reader (for instance my thinkpad didn't even have the option of a reader) and no, those kinds of things are not forwardable through ssh.

At least, no reasonable way that I know of. I wouldn't be surprised if someone has come up with a REALLYDIRTYHACK to sometimes maybe work.

Rory Alsop

@nealmcb No - I got 3 years of work for a multinational team from one client who passed PCI-DSS and got badly hacked :-)

Iszi

It'll be interesting to see what my org does for remote users then, when they decide to enforce 2FA with smart cards on the workstations.

Rory Alsop

20:00

@Iszi most places that do this issue smart card readers for remote systems

Scott Pack

@Iszi Windows remote access works differently enough that it can still function correctly. On linux, though, there's not really any difference between my shell session with gterm and my shell session through ssh.

Scott Pack

20:16

@RoryAlsop Do you have an opinion on the duplicatedness of this question? It looks like @AviD ran off while I was making my case for having it re-opened :)

1

Q: Firewall Configuration Audits

Possible Duplicate: What tools exist to manage large scale firewall rulesets? Working with Cisco and Juniper, specifically, I'm looking to perform independent policy audits against firewall configurations and/or rulesets. Due to scale, line-by-line analysis would be infeasible. While t...

tools firewalls audit

Iszi

20:28

How'd I lose 27+ rep?

Scott Pack

Something of yours get migrated?

Iszi

Dunno. Would be nice if there was an easy way to find out.

Scott Pack

No kidding.

Iszi

So, I just lost my 2k rep permissions for awhile.

Rory Alsop

20:55

@ScottPack I reckon it's your last line that makes it sound like a dupe. What different point were you trying to make?

Heh - guitars, and music practice got merged, but not completed yet, so I have 2k on both :-)

won't last long, but it makes my flair look good

hmm - dunno how to pop flair in here

Iszi

Just paste the image URL?

Rory Alsop

nope - didn't work

Ahh - my mistake

actually - that doesn't show on here what it shows over there. Transistion fun and games - probably be days before it settles down

Iszi

Scott Pack

7 hours ago, by Scott Pack

Well, yes, they are probably (definitely?) related, but I don't see them being duplicates.

And the next line or two

nealmcb

@ScottPack I still haven't seen a clear exposition of what the diffs might be

Scott Pack

21:03

Different config formats/options, different operating systems, different purposes.

nealmcb

@ScottPack Yours mentions a few products, but not in the title. the other doesn't mention specific products

Scott Pack

The other question talks about IOS, so routers and switches (but not firewalls).

Rory Alsop

@Iszi there's a lot of overlap there :-)

but my gaming one is well down my list

nealmcb

@ScottPack IOS in the question? Where?

5

Q: What tools exist to manage large scale firewall rulesets?

For an enterprise firewall you may have over 50 thousand rules. With typical errors in firewall rules including things like mistyped network masks you couldn't hope to manually review the release. So what tools are available? Free or otherwise.

tools firewalls

Scott Pack

In the title and message body.

7

Q: Automated tools for Cisco IOS config auditing?

Are there any automated tools for auditing config files exported from Cisco IOS devices? Free/Open Source is always nice, but anything that does the job would be of interest.

network audit cisco cisco-ios

shit

I was arguing against the wrong question.

My eye went straight to the link in the comment, where the SE software so happily puts your possible dupe for you, and totally missed what he actually closed it against.

I'll read through it later and see if I still disagree :)

And now to pick up my child. Ta.

nealmcb

21:10

I didn't notice that either. Too bad the comment display doesn't display titles for links, like it does in questions and answers

Da!

Transcript for