The DMZ - 2013-08-17

« first day (975 days earlier) ← previous day next day → last day (4203 days later) »

tylerl

00:22

This ***-tard has now decided that his bloody-stupid spying question hasn't received enough attention and has opened a *bounty on it.

97

Q: Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these keys and started searching, searching, for long and many found many results only using through t...

this needs to be closed

Except "This question has an open bounty and cannot be closed"

It was a crappy question to begin with and doesn't really need more attention.

copy

More reputation for you?

tylerl

Sure. plenty. But I mrean really? Now he's trying to get responses about Google snooping on email?

This is a yahoo answers question.

copy

Agreed

Terry Chia

00:45

@tylerl You could petition @AviD or @RoryAlsop to revoke the bountry and close it.

@DavidFreitag Pretty awesome if you want to take the time to setup everything properly. It doesn't come with a full set of useful packages like Fedora or Ubuntu does.

@DavidFreitag Fedora is awesome. finds my pitchfork and torch.

tylerl

@TerryChia I find Fedora's attitude toward avoiding anything insufficiently-free (such as an MP3 decoder) immensely annoying. On the other hand, I find Ubuntu's tendency to foist unwanted features on you (such as Amazon ads in your application list) significantly more annoying.

Terry Chia

01:01

@tylerl Heh. Lesser of two evils?

Griffin

01:57

I wish I could use arch but the setup seems to be similar to take a spiked club and ramming it up my ass

Gilles

@Griffin you're doing it wrong: it should be slow and painful

Griffin

@Gilles It was fast and painful. It didn't stop going up. I eventually quit.

It didn't quit till I gave up.

tylerl

02:15

@Griffin Wait, you're saying you liked it?

Griffin

@tylerl No I'm saying it was so painful and annoying that it got to the point where I just couldn't handle it anymore.

tylerl

@Griffin Indeed. spiked clubs in the ass. How annoying.

I put arch on some of my embedded and special-purpose systems. It's nice that you don't have to put 3GB or crap on there just to install the base OS.

Again with the spiked club: not quite as much crap as I expected to see.

Griffin

02:34

@tylerl I had a billion problems.

tylerl

02:47

@Griffin I find that mathematically unlikely.

Griffin

03:09

I have a list that is very large..

Lucas Kauffman

03:41

But a bitch ain't one?

Terry Chia

03:56

@Griffin I find arch to be rather easy to install, if a bit tedious.

The packaging system does take a while to get used to, but in some aspects it's superior to yum and apt-get.

tylerl

04:45

holywowstudios.com/teachestyping

Terry Chia

04:59

@tylerl Hah! Nice one.

@tylerl Did it just ask for permission to access my hard drive..?

tylerl

@TerryChia wait till you get to the hacking part

Simon

05:40

This is what happens when I'm tired as hell: security.stackexchange.com/questions/40760/…

Terry Chia

@Simon +1

Simon

@TerryChia Thank you kind man,

Terry Chia

@Simon I added in an answer of my own though.

Simon

Cool, I didn't know about the DoS, +1.

Time to hit le bed, gn8!

Terry Chia

@Simon Sweet dreams.

5 hours later…

Lucas Kauffman

10:38

Clear water, white beaches and cocktails life is good.

Terry Chia

@LucasKauffman Where are you now? AFAIK Singapore's beaches are most definitely not clear. :P

Hmm, seriously considering this for my NAS CPU + mobo. ecs.com.tw/ECSWebSite/Product/…

17W TDP is just awesome.

Lucas Kauffman

Rawa island in Malaysia :p

@TerryChia Celeron isn't bad for a NAS, have you looked at Fusion boards of AMD?

Lonely baby

hi all

Lucas Kauffman

Hush little baby don't you cry...

Terry Chia

@LucasKauffman Nope, but I'm still in the research process so I will probably look at AMD's offerings sooner or later.

Lucas Kauffman

10:49

They might be a bit slower but they have multiple cores

Terry Chia

The casing will probably be the biggest issue. I really want hot swappable HDD bays but the offerings are pretty limited and pricey.

Lucas Kauffman

Chenbro has some nice cases might be able to get one second hand

They can be quite loud though

Terry Chia

@LucasKauffman This is the nicest one I found so far, u-nas.com/xcart/product.php?productid=17617

Lucas Kauffman

Not that expensive but there isn't much space for a mobo

Terry Chia

@LucasKauffman Mini-ITX.

Lucas Kauffman

11:01

Btw you got time to meet up this week Im leaving the 22nd :p

Terry Chia

@LucasKauffman Ah right. Almost forgot about that. How about Monday or Tuesday? I already have plans for Wednesday.

Lucas Kauffman

That's good for me whatever fits you best Im available all day

Terry Chia

@LucasKauffman Either day is fine for me. I work till 6 though. Where would you like to go?

Lucas Kauffman

Orchard towers!

Terry Chia

@LucasKauffman Interesting choice indeed...

Lucas Kauffman

11:15

No don't know you know the good places better than me, maybe dinner and drinks?

Terry Chia

@LucasKauffman Hmm, I suppose you will wanna try more local food? :P How about this place? ladyironchef.com/2010/10/chomp-chomp-hawker-centre-singapore

Adnan

So here's a followup for my nagging and complaints about secure email services

I've just signed up for CounterMail

(full account)

I'm very impressed with their ToS, Privacy Policy, and legal notes

Adnan, out.

Terry Chia

@Adnan O_O

Lucas Kauffman

Ooh BBQ stingray :o

Sold

Terry Chia

@LucasKauffman Hah! Meet at Serangoon mrt station around 7 or so on Monday?

I'll need time to get down there from work.

Fair warning though, you will leave the place stinking of food. :P

Lucas Kauffman

11:21

Ah let's take Tuesday my stepmom wants to get dinner on Monday apparantly

Terry Chia

@LucasKauffman Ah, alright!

Do you have a phone number I can contact you with?

@LucasKauffman Got it, you can delete it now.

Do you use whatsapp? Or should I just sms?

Lucas Kauffman

I can't I'm on my phone

SMS or iMessage don't have whatsapp :(

Also dot have 3G here :p

So SMS ^^

Terry Chia

@LucasKauffman Alrights, just sent you an SMS.

Lucas Kauffman

@Jeff @RoryA or @Avid if you guys would be so kind :p

Terry Chia

Hmm, not delivered.

Lucas Kauffman

11:26

No service here

Will walk to the peer

Rory Alsop

@LucasKauffman Done

Lucas Kauffman

Ty ^^

Alright got service now :p

Terry Chia

@LucasKauffman Can't seem to send it. Maybe it's because it's an international number.. weird.

Lucas Kauffman

What's ur number?

Alright screenshotted will send u a text when I get back to SG tomorrow the service is non existant here

Terry Chia

@LucasKauffman Alright.

@RoryAlsop Sorry to bother, if you would be so kind. :)

Lucas Kauffman

11:33

U can delete it :p

Terry Chia

Oh right... I'm not on mobile.

Rory Alsop

done anyway

:-)

as I'm here

p.s. Holiday must be nearly over - it's chucking it down outside. All the sun is gone

Terry Chia

@RoryAlsop You should come to Singapore. Sun all year round.

Lucas Kauffman

Not for another week for me after that Im getting shipped to Ireland for 2 weeks

Rory Alsop

@TerryChia not at those temperatures! Kent was at my upper bound on temp at 25 degrees!

Terry Chia

11:35

@RoryAlsop Scots... :P

Lucas Kauffman

Then you will have a bad time in SG also it's a different hot than what we have here

Rory Alsop

@TerryChia yup - zats me. We also don't typically have 95% humidity, as all the rain is just falling out of the sky or nonexistent

Lucas Kauffman

I mean europe

Terry Chia

Hmm, I wonder if I should go for a slightly saner build and just spec around 4 HDDs. The rest of the gear I'll need to properly support 6-8 HDDs will probably bankrupt me. :(

Lucas Kauffman

Why not get rig for 8 drives and start with a 4 disk array an later expand if needed

Terry Chia

11:37

@LucasKauffman I can't seem to find a decent low TDP processor/mobo combo that's a reasonable price with enough SATA/PCI ports.

4 3TB disk is 8.2TB usable with RAID Z anyway. Plenty sufficient for the foreseeable future.

Lucas Kauffman

True and you can easily fit it with a pcie raid card for another 4 sata ports sub 50 dollars easily

Also make sure that if you buy disks you get something like WD red and not green

And I think a bat just pissed on me

Terry Chia

@LucasKauffman Starred.

@LucasKauffman Yeah, will definitely be getting the NAS drives.

1 hour later…

Terry Chia

12:53

We seem to be getting hit by a spam wave.

Lucas Kauffman

Recommending keccak for hashing passwords sigh

security.stackexchange.com/questions/10476/is-aes-encrypting-a-password-with-itself-more-secure-than-sha1

Terry Chia

13:24

> Pro Tip: If you meet a strange Canadian in an unforgiving wasteland who pretends like you don't exist, just leave him the hell alone. It is not going to be worth the trouble.

cracked.com/…

@Simon Are you like that or are you one of the polite Canadians?

Simon

13:34

@TerryChia Aren't all of us supposed to be super polite?

2 hours later…

TildalWave

15:26

@Simon Wow this was a nice week for you, I see you've hit two rep trains :)

It's easy to be polite when you're doing well... it's a bit like saying money doesn't matter, when you have loads of it. :P

Terry Chia

@TildalWave +20 votes are considered rep trains now? :P

Just kidding @Simon.

Simon

@TildalWave Yes, it's been a very good week. I thougth I'd get my Fanatic badge way before my first 1k rep.

@TerryChia Haha, call it whatever you want, it doesn't matter. I got the rep I wanted! :P

Terry Chia

@Simon You need 3k man! Casting close votes is so much fun!

Simon

@TerryChia Yes, that would be great.

Terry Chia

@Simon Get @Adnan to give you a couple of 500 rep bounties. That guy is gaining rep crazy fast anyway.

Just looking at some of the top users, holy crap @makerofthings7 ask a lot of questions!

data.stackexchange.com/it%20security/query/30116/…

Simon

15:40

@TerryChia Adnan likes his rep way too much to give some away.

Rory McCune

lol ifc0nfig.com/cerberus-exploit-accessing-any-device

Terry Chia

@RoryMcCune What the fuck?

Rory McCune

yeah I'm reading it going... no seriously really , and then it got to the bit where if you send IMEI it sends you the users username and hashed password back!

Terry Chia

@RoryMcCune SHA-1 for password hash. Doesn't seem so bad compared to that huge flaw though....

Rory McCune

@TerryChia no the hashed bit wasn't bad but the fact that someone can iterate over the IMEI space and get all the usernames and hashed passwords back is epic

perhaps even worse than being able to change the password with just imei

Simon

15:45

That's a bad vulnerability.

Rory McCune

'cause if you get the username/password back and crack the hash the user doesn't even know that it's been done

whereas if you change their password they'll notice...

Terry Chia

@Simon That's a major understatement.

@RoryMcCune Yeah, and it's SHA-1 so it's not like it's that difficult to crack or anything...

I guess hoping for it to be salted is just a dream as well.

Rory McCune

yeah. so all round bad. bit of a shame he published before they fixed, but for a security app it's inexcusable to design it like this...

Adnan

16:01

@TerryChia In the last 3 days I've gained less than 35 rep in total. :(

@Simon But I like you even more

Simon

16:17

@Adnan Really? <3

TildalWave

@RoryMcCune Love it :) (goes to secretly install Cerberus on all missus phones) LOL

joking, of course :)

Rory McCune

@TildalWave if you want to do that sort of stuff I'd recommend enrolling her phone in Airwatch MDM

that stuff is scary. Keeps a record of the location of the device at all times

can lock it down to the nth degree

TildalWave

@RoryMcCune Having an access to my missus phones, I don't think there's any need for any exploits or software, it's all in there :)

Rory McCune

speaking of phones just ordered a firefox OS phone (£59.99) to see what they're like

sounds like an interesting idea

TildalWave

We don't use Cerberus anyway, so that only leaves the other 500 apps that have holes to exploit us

Gilles

16:50

this question's tagging is certainly random

Simon

haha

TildalWave

17:09

@Gilles LOL was probably looking for a various tag :))

3 hours later…

Gilles

20:27

2

Q: Dovecot POP3S & IMAPS SSL Certificate that works for all user domains

This may be a really stupid question, but I can't seem to put my head around it. I have a mail server I'm trying to setup to service 6 domains. I will have multiple mail users accessing the server via POP3S or IMAPS. Currently in MS Outlook, they are receiving an unverified SSL cert warning beca...

ssl certificates imap dovecot

« first day (975 days earlier) ← previous day next day → last day (4203 days later) »

Transcript for

Aug '1317

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2025 Stack Exchange Inc; legal

mobile