« first day (965 days earlier)      last day (4220 days later) » 

00:00
@Xander unfortunately I don't have that video card
@AviD Is that racist?
@ScottPack is it?
@AviD I'm not sure.
more of a cultural thing.
00:13
So culturalist?
like bagels and salmon is a "jewish food", but here we consider it "american food".
I didn't realize that was jew food.
I thought it was breakfast for people who liked fish.
And now I'm going back to my family.
@ScottPack how often do you eat bagels, cream cheese, and smoked salmon together?
@AviD I don't care for seafood, particularly salmon. The other stuff whenever I get food at a coffee shop.
well there you go.
00:16
Katie likes salmon. I will properly have a reflexive gag if I walk into the kitchen while she's cooking it.
I used to be like that. Until I started having sushi for breakfast.
00:33
the TC one depends on what TC does with the key file
in the password case, adding characters is bad because it's more stuff to type
in the TC key file case, adding more stuff to the key file is indifferent
@HamZa Docking station.
You can daisy chain monitors if your laptop has Thunderbolt. (Macbook's :P). Makes for a sweet if very very expensive setup.
I only have one monitor... :( But I'll get around to adding more once I get a bigger desk.
 
1 hour later…
02:29
@Griffin lulz
Like a digital refinery i organise the binary so zeros after ones getting lined up into finery, I put them into rows, to get the music goes and it goes and it flows like the mucus out ya nose!
02:56
what did I just read...
I know a quick format can be recovered, but can a "full" format of a drive?
I guess it may depend on what full is
As in, a Windows format with the 'quick format' turned off
03:16
@ekaj When you choose to run a Full format on a volume, files are removed from the volume that you are formatting and the hard disk is scanned for bad sectors. The scan for bad sectors is the reason why the Full format takes twice as long as the Quick format.
So the answer is yes. You can recover files the same
So at what point does a full format make data irrecoverable?
@ekaj if you overwrite every single byte of the drive with random 1 and 0
@ekaj it doesn't ever afaik.
@LucasKauffman @ekaj what he said :)
and for added security, do it multiple times
@D3C4FF check the question about the tif file, it really bothers me
@LucasKauffman ?
Which question
03:19
-1
Q: How can I decode a tif file?

user68659I would like to decode a tif file but i'm not sure where to start. Could someone please help me?At least with the starting point. Thanks. The link to the file: http://www.sendspace.com/file/jmu75e Sorry for using sendspace. Please tell me if you'd like another way of transfering the file.

it's a
"for security purposes" question but even at that it fails
@LucasKauffman Nah, nothing to do with security, dudes files are probably corrupted
I like the kicker at the end "Man why you so offensive?"
It's the type of OP I'd like to bitch slap to the floor
@LucasKauffman Hahaha, whipcrack
@D3C4FF he keeps on going
@LucasKauffman Question needs more downvotes STAT
I gotta bail, be back in an hour or two...
03:26
@D3C4FF alright see you later
04:02
@LucasKauffman If you're not making headway after 11 comments, probably time to quit ;)
I love how he doesn't say what the software is
04:55
Sweat drippin' down my ballzzzzzz
@JeffFerland Agreed
06:18
@HamZa It's another compression-related data leakage attack. Not particularly interesting.
06:58
@JeffFerland I never give up.
@JeffFerland I'm persistent
@D3C4FF sweaty balls ey
07:41
@LucasKauffman They're less sweaty now.
 
1 hour later…
08:44
Erm... nice
 
3 hours later…
11:52
@Simon HOLY WOW!
Have you seen the latest Dexter?
@D3C4FF That seems tricksome.
@ekaj Check out the tag for some good advice on how to go about securely getting rid of your data.
12:21
@D3C4FF @LucasKauffman Ben'n'Jerrys actually came out with a real flavor
12:34
@Adnan Yes! I watched it yesterday. Probably the best episode of the season so far imo.
@AviD lol
First issue of the PoC || GTFO zine (pdf) is out :)
fucking markdown
anti-forensics HDDs, ELF trickery, bitcoins and NSA, more ELF trickery, and some stories from Blackhat
also when they assign TheGrugq as "Ethics Board" you know it's gonna be good.
@Simon Exactly my thought
12:52
@Polynomial I love that legal note. Bookmarked
@TerryChia it's a really fun and interesting zine too
@Polynomial ELFs are dorky, Elves are cool :)
13:08
I'm not one for game shows, but this mechanic is awesome viewing
@lynks Awww.. I feel really bad!
@TerryChia Thanks for the recommendation of the Boneh encryption course. Very good stuff!
@Adnan I hate the sorts of people who read those books.
@lynks What the hell? Why?
@Adnan Wait, this is just a game theory book?
13:21
@lynks Yes
Not like a "how to win at negotiations by sitting down in a certain way" book?
@lynks Oh definitely not
Because I have to deal with a lot of people who read those sorts of books. And most of the time I want to cave their heads in.
@Adnan Rgr, I misread :P
13:33
@lynks I read those sorts of books. I'm not offended by your statement though. I know that if I just sit this certain way, I can bring you around, and soon you'll appreciate them too.
Hello
@lynks this one is smart:
sfunny game. Prisoners Dilemma, personified.
@AviD Not exactly, but close.
In the prisoners dilemma, the two parties aren't able to communicate.
A very important aspect
@Adnan true. Good point. Though that does just make it more entertaining...
@AviD Nice!!
13:42
that guy is probably an engineer.
I would've done the same, except chose 'Steal' in the end.
that's because you, my friend, are a bastard.
@AviD Last time I checked, bastards get hot redhead Scottish women.
hehe, nice.
@HamZa Oh, I've just noticed that. Hellow
13:46
<<< this guy is 4 ever alone
@HamZa Which guy?
@Adnan /me
@HamZa In a way, all of us are forever alone. No matter how many family members; lovers; friends; or coworkers you have, there will always be part of you that you'll never share with anybody else.
@HamZa don't worry, you still have @Adnan
@Adnan yes it's called "beer".
@HamZa And that part of you, that part of us, will always be forever alone.
@HamZa In a way, we're all forever alone.. together.
@LucasKauffman Always share beer with others.
2
More times than note, I even share the same beer with others.
13:49
@Adnan give me water instead :p
@HamZa 3 hours to go?
@Adnan no, about 5.5h
@HamZa Holy shit!!
@Adnan Well it's maybe the last day. Today it's from ~4:15 until 21:30 :)
13:54
@HamZa Dude, I'm pretty sure there was a Fatwa about that sort of things. To use a different point of reference or something like that.
@HamZa you want to be a man son? Then drink the gold nectar given by God.
@Adnan Yes, for those where the sunlight is 6month and the night 6month
@Adnan fatwas are just advice right?
hahaha imagine on midsomer doing the ramadan
@LucasKauffman It's a non-binding opinion by an Islamic scholar.
@LucasKauffman not sure what that is ....
@Adnan well it's somehow binding ?
13:57
@HamZa it's when it's light for 24 hours
@HamZa No, it's only binding if it is escalated by Ijma' or consensus.
Ijmāʿ (إجماع) is an Arabic term referring to the consensus or agreement of the Muslim community basically on religious issues. Various schools of thought within Islamic jurisprudence may define this consensus to be that of the first generation of Muslims only; or the consensus of the first three generations of Muslims; or the consensus of the jurists and scholars of the Muslim world, or scholarly consensus; or the consensus of all the Muslim world, both scholars and laymen. Usage Sunni view The hadith of Muhammad which states that "My ummah will never agree upon an error" is often cit...
@HamZa For that, all killing Fatwas are considered Haram.
@Adnan ok
@Adnan you mean suicide killing ?
@HamZa No, the stuff you hear about when some "Imam" issues a Fatwa to permit killing someone.
@HamZa Well, that also is considered Haram.
@Adnan Well killing has never been permitted only in really few cases
@HamZa Well, that's a totally different matter.
14:04
@Adnan Have you been a muslim ?
@HamZa Not exactly, but I've had a phase in which I studied many aspects of several religions.
@Adnan ah I see, nice
14:19
How about this ? using regular expressions as a password, they are easy to remember (as a developer) and hard to bruteforce.
(?is)h(a)mz\1\s+[^.]
@HamZa That which is easy to remember tends to be easy to guess -- the attacker is also a developer.
@ThomasPornin valid point ... Let's hope s?he's not a regex guru :)
Sane practice of password strength estimates is to consider that the attacker is "in the head" of the user, and knows the exact process by which the user generates the password, save the "random choices" that the user makes (as part of this process) with coin flips or dice.
Here, the attacker would "know" that the user is producing only syntaxically valid regular expressions with a "meaning" such as "matching his name".
The only random parts here lie in the placement or parentheses, possible "\s" or "\s+"... that sort of thing. But that does not amounts to many combinations.
@ThomasPornin hmmm, but how should I construct a password if the attacker does know how I think ?
It is hard to pinpoint the exact entropy, but it is easy to see that it won't be high.
@HamZa The attacker knows everything except truly random choices. So use random choices.
E.g. I tend to generate passwords as two letters, then two digits, then two letters, then two digits.
14:25
@HamZa I usually use short sentences for my passwords.
Followed by some random junk.
Now, you know the format of my passwords. This is what the attacker knows.
What the attacker does not know is what letters and digits I use, and he cannot guess them because I cannot guess them either; I generate them randomly (with a computer, not with my brain).
This amounts to 26*26*10*10*26*26*10*10 = 4569760000 possible passwords, which are all equiprobable (that's the magic word).
@ThomasPornin I see ...
A bruteforceing attacker's success cannot be better, on average, than trying half of them, i.e. a bit more than 2 billions.
That's slightly more than 32 bits of entropy, good enough for many purposes.
It would be cool to have a password that changed on a daily basis. Somehow the password would be incremented by the same random amount each day.
@DavidFreitag Changing passwords are not cool at all.
Unless you insist on having users forget them. Every day.
14:29
I mean from a security standpoint, not from an end user's standpoint
@DavidFreitag Hehehehehe
@DavidFreitag It is bad for security, too.
If you prevent users from remembering passwords, they will write them down.
2
@DavidFreitag If it's bad for the end user, it will become bad for the overall security.
2
Well, i don't mean force it on users, allow people to chose these changing passwords that are intelligent enough to keep track of them.
Also, "best" security is when all machines are offline, powered down, stored in safe which has been sunk in the middle of the ocean.
14:31
It sounds like managing a system that would change passwords daily would end up badly.
@DavidFreitag Rule #1 of security. The user is never intelligent enough.
3
@ThomasPornin Won't better security be achieved if the machine doesn't exist in the first place?
Also, 8tracks is a pretty cool music service hmm.
@TerryChia It is hard to define the security of information which does not exist.
@Simon Yéééépp
However, that's the point: you cannot claim that a service is "secure" if the service is not, actually, available.
14:33
@Adnan ô_Ô
All jokes aside. Remember the "A" in CIA. Availability.
The company I work for forces to change the password every month it's annoying ...
That service is totally available, you know... to divers who have a couple hours of free time... and a crane.
@DavidFreitag That's not "intelligent". Also, if the amount by which the password is incremented each day is known (remembered) by the user, then it is part of the password.
@ThomasPornin Yeah, i realized that when i described the system. I knew it wouldn't be particularly good i just thought it would be cool.
14:34
@HamZa Every 42 days here. That's the default setting for Active Directory, which is why it is quite prevalent.
@HamZa I got into an argument with my lecturer about the supposed benefits of changing passwords regularly... Too bad he wasn't convinced it was a bad idea.
@ThomasPornin I see, so maybe it's 42 days. I don't count them exactly ... I got blocked quite a few times for entering the wrong password lol
@TerryChia well it seems it's quite used widely
Whenever I'm forced to changed my password due to expiry, I change it and then change it back to the old one.
@Adnan Some services prevent that by keeping tracking of X previous passwords.
Bloody annoying.
@Adnan damn, I should do the same :o
@TerryChia Let's hope they aren't storing the password in plain format ...
14:41
@HamZa They most likely keep the hashes of previous passwords.
@Adnan By default, Active Directory will remember hashes of the previous 24 passwords and prevent reuse.
@Adnan You won't hear about me wanting to marry DJ Stephanie anymore, my gf has proven to be super worthy.
And it will also enforce a 24-hour delay between any two password changes, to avoid users who are determinate enough to cycle through 24 dummy passwords before reusing their initial password.
Last night at ~ 12:30 I was driving home and my exit was closed. I moved there not so long ago so I had no idea where I ended up. I called her and she was able to perfectly tell me where to go.
@ThomasPornin Theaters everywhere.
@Simon Ahh.. you remind me of my Tori Black phase.
14:46
say w0t
Who's Tori Black?
@Adnan owh shit, I googled it ...
@HamZa Now you have to redo your fasting for today. Hwahahahahaha
PHP 5.5.1 is finally considered as stable which means I'll be able to use password_hash. Good.
Glad I didn't google it, is it NSFW?
@Simon Yes, it's NSFW
or home
@Adnan hahahahahhaa
14:47
Phew.
@Adnan It was unintentional, I closed directly the tab :p
@HamZa You can google Buck Angel if you want to, too.
@HamZa Don't
@Adnan thanks
@Simon no
@Simon Someone who bleaches her opinions?
14:55
@HamZa You're boring, I googled him/her/it once.
@DavidFreitag Do you even lift?
@Simon it's ramadan. And even if it isn't, I shouldn't ...
@Simon Bro, i heard you don't even lift.
@HamZa I'm not a religious person so dunno.
@DavidFreitag You heard right.
@Simon A friend of mine works at a rental place, they rent everything from silverware to payloaders. Anyway, a couple bro's walk in clad in visors, plaid shorts, flip-flops and aviators and they rent a couple 8' tables and chairs. While my friend is loading up their vehicle, they decide to help. They go and grab a table, one of them is showing signs of strain; at this point the other bro shouts out: "Get hard bro!"
My friend nearly dropped an 8' table he was carrying by himself because he was laughing so hard. They didn't skip a beat.
I think there are lifters here. As far as I can remember, @Tildal and @RoryA
15:05
Cyaa ...
@DavidFreitag Oh god, douchebags.
@Simon It's not all bad though. In any circumstance, if any of my friends show strain in anything - a rigorous conversation in public perhaps, someone will say "Get hard bro!" just loud enough to attract some attention.
Oh lawd.
Good times.
It's probably not the best use of our time, but it's either that or breaking into the mall WiFi, or using our pineapple for MiTM attacks.
@DavidFreitag So the kids today have replaced cactus with pineapple? What a shame!
15:10
@Adnan Nah, with a raspi, a pineapple and a battery, one can do wonders.
We were sitting in the mall food court eating some delicious japanese take out, when we noticed someone surfing youtube. We turned on the pineapple and waited until he grabbed us, then we just cause youtube to redirect to random sites. Guy flipped out and threw his laptop away.
@DavidFreitag and a bit unethical and illegal
Yeah we tracked him down and explained what we did
@LucasKauffman We had just gotten the pineapple, we wanted a PoC, so we went through a redirect tutorial, sure enough it worked. Once we tracked the guy down and gave him his laptop back, we explained what happened, and how he could prevent it in the future.
15:34
you still violated about 3 laws in the process :P
I think in the UK you'd have broken the Computer Misuse Act and The Communications Act 2003
@Polynomial Yeah, but we were script kiddies (still kinda) we had no idea what kind of can of worms we were getting into.
yeah, to be fair I did stupid stuff as a kid
$320 for books this semester, $57 in the bank account. Yaaaaay.
I didn't buy a single book on my requirements list when I went to uni. Was pointless - nobody ever asked us to refer to them once.
@Polynomial And it's not like we were capturing authentication information from cookies to steal any information. We could have been doing much worse with that stupid pineapple. But i suppose that isn't the point..
15:38
actually, that's a lie - we were once asked to read one chapter. so I pulled it up on Google Scholar.
@DavidFreitag indeed - the act of setting up the rogue AP is an illegal communications wiretap, and injecting content violates the CFAA.
@Polynomial Yeah, well i'm not at a university currently. I'm studying at a local community college. I have filed the proper paperwork to transfer to Uconn. That should be fun.
/me shrugs
I'm unfamiliar with US education systems.
It's not too complicated.
I know the difference between grade school and high school and college, but that's about it.
There are small community colleges that are extremely cheap, i have like $1700 in tuition a semester.
15:40
I'm not sure on the difference between college and university though.
Universities in America are called universities because of the sheer breadth of majors that they provide.
ah, in the UK it's very different.
They are universal
At least that's what i gather about it all.
I never took my SAT, and i knew high school was a joke, so i decided my only option was to take a year or two at a small community college to prove myself to the local state college.
My 3.79 GPA should speak for itself. But, the fact that it's a community college speaks to the difficulty level of the material.
@DavidFreitag @Polynomial Yup...Universities in the US are made up on multiple colleges, I.E., College of Engineering, College of Business, College of Liberal Arts, etc.
interesting
In the UK:

* Primary School = 5 to 10
* Secondary School = 11 to 16 (GCSEs - basic qualifications you get before being allowed to work)
* 6th Form = 16 to 18 (A Levels - higher qualifications that are optional. These are attached to secondary schools)
* College = Offers a range of courses, from low-"worth" specialist courses, to A Levels, to HNDs (half-degree)
* University = Offers HND, Degree, Masters, Doctorate, etc.
colleges offer a wide range of qualifications, but they're usually lower levels than universities. you can do a HND at college and top it up to a BSc (degree) at a uni though
15:46
Once i get my bachelors at Uconn, i want to get a real job, then get shipped off to graduate school. Hopefully somewhere nice, like Stamford or Berkley.
but they also do things like Key Skills (english, maths, science), NVQs (national vocationals - usually stuff like animal care, photography, social care, etc.)
@Polynomial Your version of college maps to what we call a community college, which offers two year (or associate) degrees, and often technical degrees that don't have general education requirements.
so oddly enough, colleges offer a wider range of courses than universities, but universities offer a wide range of higher education
@Xander wouldn't surprise me. colleges here seem to get the same rap as community colleges in the US
Community Colleges are like the bottom rung in the college ladder.
the one thing that's totally different in colleges is the social structure
that whole US college social stereotype just doesn't exist here
we don't have college sports teams, or pep rallies, or any of that
15:49
Yeah, that's pretty much the same for most community colleges here.
They don't have the money to have big sports teams
huh, hollywood mislead me again!
And everyone there is too embarrassed because they are there in the first place
So it's pretty much, get it done as quickly and quietly as possible.
but yeah, we don't really even have that kinda thing in secondary school (high school)
we have the whole social equilibrium and "the popular kids" and all that, but none of the pep rallies / school sports teams / sororities
Yeah, but that all depends on where you are. Texas is huge about that sort of thing, but in Connecticut, we could pretty much care less. Not to mention i went to a math and science academy in high school, the only sports were "mathleets".
heh, sweet
and yeah no surprise on the TX front
was kinda odd for me going to uni actually. was a big change over from school and 6th form, where there were big social hierarchies. uni is just small social groups that largely stay within the same courses / modules.
15:53
Yeah, every now and then we would get bored during a lecture and fire up remote shutdown. Suddenly the instructor's smart board would go into hibernate.
I used to do that with a programmable IR remote
and built an IR sniffer to grab the program codes from the remote when he wasn't looking. was much harder before the days of Arduino.
My junior year we started playing what we called "Assassins" where you got randomly assigned a target (that was playing obviously) that you had to either hit with a water balloon, or some other dastardly form of water torture.
AWESOME GAME. We didn't use balloons but we played it.
we had all sorts of silly execution methods, and you could only use each one once
we played for money
@ThomasPornin hmm, Like PHP syntax? ;-)
15:56
We chose water because it's fairly obvious when someone got assassinated.
The sort of unspoken rule was, don't go overboard, because it could be you next. So nothing crazy ever really happened.
one of them was you had to get a paper napkin, draw black squares on one side, then place it on the victim's head without them seeing you first - it was called "dropping a piano"
@Polynomial For an example of a Texas University ritual, check out images of the Aggie Bonfire that Texas A&M students used to hold before their annual football game with rival University of Texas. google.com/search?q=texas+a%26M+bonfire&tbm=isch
@Polynomial That is pretty clever, someone ended up getting caught smuggling a super-soaker into the school though, so we had to stop for a while.
206
Q: How does changing your password every 90 days increase security?

Bill the LizardWhere I work I'm forced to change my password every 90 days. This security measure has been in place in many organizations for as long as I can remember. Is there a specific security vulnerability or attack that this is designed to counter, or are we just following the procedure because "it's t...

others included sneaking plastic snakes into the victim's pockets or clothing (poisoned), taking a photo of them with their face visible and a clock in the background (sniper shot), stealing both of their shoes (can't remember the name of that one)
15:59
This school was in the center of Hartford, the capitol of Connecticut, the campus was surrounded with an 8' fence. The doors were always locked, and we had RFID tags to enter the building.
heh, that must've been fun to break in and out of

« first day (965 days earlier)      last day (4220 days later) »