« first day (1007 days earlier)      last day (4171 days later) » 
00:00 - 17:0017:00 - 00:00

00:01
Did anyone else read this paper: eprint.iacr.org/2013/448.pdf ?
 
2 hours later…
01:49
@Simon gave useful advice for once. I'm shocked.
@TRiG is right but this depends on your database engine. For example, MySQL doesn't allow this to be done. — Simon 3 mins ago
It happens sometimes.
@Simon Now write a proper answer so I can upvote your face.
Nah, too lazy.
> For people at the top management positions, the most practical method might be to simply hire an underling whose job is to type Win-L whenever his boss leaves the room. If that employee is decorative enough (which, in many cases, means that the employee is a she and is young) then such a plan will meet user approval, and be effective.
4
Lmao.
 
3 hours later…
 
2 hours later…
@LucasKauffman Use after free vuln?
06:32
@TerryChia might be, probably :p
also the Belgacom story keeps getting better, they found out one of the top managers is also affiliated to Huawei which is also suspected of espionage
> The vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted or has not been properly allocated.
Sounds like it.
might also be legit though since Huawei still is one of the biggest electronics producers
06:49
:(
We're the dumbest site on the Internet
-5
A: How do hackers take advantage of open ports as a vector for an attack?

kasdthis is the dumpest site ever on the internet fuck you guys

07:06
And he's a coward and a ruffian!
07:17
@D3C4FF yes, read in some time ago
@RoryAlsop wait, which one? arguably an owasp event focused around piracy aspects could be quite interesting.
Yet another example for vulnerabilities that survive for years, even for well known attacks and in reasonably popular open source software.
@ThomasPornin clearly you havent tried making a phone call from my office.
@TerryChia Psh. Ctrl-Alt-L. Windows users don't deserve security :p
/says the guy who uses Windows 25% of the time
@ManishEarth What a tragedy.
08:10
launch in 5 seconds LOL
there she goes... anyway, good morning! :)
So much for morning glory from SEx.SE ... it only takes a few minutes :D
4
@TildalWave TWSS
@TerryChia She did? Owww! :))
@TildalWave :P
Have you guys seen the anandtech benchmarks for the chip in the 5S? Truly amazing.
@TerryChia will check, thanks for reminding me... morning coffee reading FTW :)
08:23
@TildalWave you're trying too hard for that star.
ah hell. I'm in an easy mood.... here ya go.
4
aww cripes.
@AviD I apologise.
@AviD hehehe
@AviD Why do I get the popup 4 times each time someone replies to me here? Who's been fiddling with our chat??
@TildalWave I really don't know. 8
@TildalWave @TildalWave @TildalWave
08:25
you must be joking me
8 is a nice round number.
heheheheheh
It's MAGICK!!!
Hey @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD @AviD ... wink wink!
@TildalWave only once...
@AviD shit
@TildalWave edit it. 8
08:27
(psssst! edits...)
@TerryChia you're just teaching me to ignore you
@TildalWave is that really something you need to be taught?
@AviD TWSS
meh
ask @Iszi for some pointers, he'll give you a hand.
08:50
Turns out Chrome had some processes crashed in the background. It took forever to close them, I think that might be because of the sandbox mode?
09:01
chrome is going totally overboard with the number of processes.
only thing saving it from having hundreds of processes is that it's tabbing GUI is so bad that you can't use it for a non negligible amount of tabs.
09:23
Chrome eats memory like @ThomasPornin eats crypto
Hilarious.
48
Q: Wanton abuse of edit privileges detected

Matt FenwickThis post was edited to add in a comment to the post. Clearly, the user has a high enough reputation that he/she should understand that this is unacceptable behavior, but did it anyway. (shudder) What should be done? rollback the changes? manually rollback the changes, informing the editor t...

@TerryChia hahaha
09:48
@TerryChia hehe
10:08
No accept, no upvote, but a thanks in the comments... gotta love it.
@TildalWave Knowing you helped is better than super-internet-points.
@lynks True, and it's not so much about the "virtual points" either. But it is about indicating to others that might have same questions which answer was helpful to OP. I wouldn't even care if accepts came without any rep, honestly.
@TildalWave i think you have a good attitude
I'm pretty much ready to give up on smartphone email.
@lynks Well since modding space, I've learned to appreciate that comments are supposed to be transient in nature... so I got "thanks" in the comment that might eventually be deleted, and nobody with the same question cold know if it helped at all or is indeed correct. I'd expect from most of our regulars to know that, but the majority of the traffic probably comes from search engines. They might need such signaling. I personally don't. ;)
@TildalWave yeah I agree with you, the big green tick is a good and necessary marker.
10:15
@lynks I just don't bother setting it up any more, it's a major pain in the behind for various reasons.
You get an enormous attachment - bang on your wallet
You wanna reply - stiff little fingers don't cut it
Can't get pgp to play nice right now either.
oh and that too
So we all have to have a plethora of communication technologies available all the time. My phone has email, skype, whatsapp, twitter, sms and of course voice calls! This needs centralising.
I tried before to setup receiving headers only and open them if I wanted, but that kinda doesn't work as good as it sounds either
@lynks I use it as a phone or an auxiliary display and that's about it. Oh and I used to use it for SatNav, but I have a dedicated device now that's much easier to work with anyway.
Camera? Nope, I have better ones. Walkman? Nope, I can't be arsed. Mails, social networks,... Nope, I'd want to type. Reader? Nope, too small. Convenient weather updates. Yup! :D
10:33
@TildalWave It has somehow become by primary email and skype endpoint. If I can't get pgp working I'll probably abandon email.
10:46
x86 is Turing complete even if you strip it down to just the mov instruction. cl.cam.ac.uk/~sd601/papers/mov.pdf (PDF)
that's pretty crazy.
11:01
@Polynomial Next up: malware code written entirely in MOV instructions.
@Polynomial I might have to read that. I remember that just increment and jump if 0 is a turing complete instruction set. But just mov? how do you set any values other than zero?
mov loads immediates, duh
<- reverse engineer.
I'll show myself out.
11:52
@AviD You haven't endorsed me for Icons yet till now on LinkedIn? You're a dissapoint!! LOL
Have you upvoted my latest one that I'm trolling with on other sites for the banner rotation space?
@TildalWave icons - how can icons be a skill?
Hey
@RoryAlsop How dare you!! :D
Icons?
LIke religious icons?
@M'vy morning! yup, those too... it's a skill to make them, no?
or a gift to be one :)
11:57
@TildalWave probably
well they don't make themselves :D
oh - you design them? gotcha- now I understand
@RoryAlsop <--- see?
Ahh, I see the cargo cult question got reopened.
@TerryChia and it's again in the close queue... might be worth locking it
11:59
well, I knew you were one @Tildal, but that isn't a skill
@RoryAlsop hehe yes that'd be a gift then... anyway, it became almost a meme of my LinkedIn profile ever since I was endorsed first time from "dunno who" from DMZ. A virtual wedgie of sorts, and I sure appreciate it. Almost as much as LinkedIn itself LOL
well, in that case...
Tho IISP is a pretty cool group, if you @RoryA approved my request, then thanks! I get good reads from there
Btw, for those developers who needs to work with emails regularly and write long-ass regex to deal with validation, this might be work a look at. blog.mailgun.com/post/free-email-validation-api-for-web-forms
Damn. I was going to point you at Regexp::Common but the current version doesn't do emails.
12:08
@ScottPack Have you SEEN the regex that validates email according to the RFC standard?
Email checking has several unusual cases people don't often think about, but the RFC isn't actually that complex.
What's amazing is how the providers fuck things up.
For example, our email environment doesn't accept +-addressing. It checks it as part of the username.
Gmail strips all periods out of the name before validating.
On both delivery and authentication, by the way.
But yeah, that mailgun API appears to do more than regex checking.
Yes, that regex is everything that's wrong with how people use perl.
Looks interesting.
> I did not write this regular expression by hand. It is generated by the Perl module by concatenating a simpler set of regular expressions that relate directly to the grammar defined in the RFC.
Notice how it's autogenerated?
Also, after reading RFC822 again I'm reminded what's wrong with standards.
12:18
@ScottPack Unless it's written by @ThomasPornin. A little bit of snark goes a long way.
Or heck, you could write a standard.
You are the king of snark anyway.
Forsooth!
Speaking of which. Did I fuck something up in this answer or is the commenter just being a douchewagon?
Downvoting because the tar+ssh answer is incorrect, it's not disabling the escape character and may break. — niXar 2 hours ago
@ScottPack Seems fine to me.
I'm having trouble understanding what he means. That's usually a sign that I just don't know something or they don't. It's hard to tell.
@ScottPack I think he is referring not to ssh, but to telnet
telnet does some escaping with the 0xFF byte
It sounds like he's expecting ssh to break if the file contains a certain character
12:27
I know someone who has a "ÿ" in his name; that's 0xFF in latin-1. It induced some weird bugs occasionally.
Next files should never contain a 0xFF
(I'm in the "one true encoding" camp)
I keep trying to forget about telnet.
@ScottPack Not me. I love telnet.
nowadays you can't even use telnet for http
If I was an attacker I would love telnet much more than I do.
12:30
Of course, that's coming from a "Oooh, telnet's port is open on this server!" perspective.
server usually closes connection faster than I can type
echo -e "GET / HTTP/1.0\r\n\r\n" | nc server 80
@TildalWave heh, actually I did - I had to unendorse you, just so I could do endorse you again. ;-)
@LucasKauffman cmon, chrome is nowhere near as bad as firefox.
As a whole I like chrome better but I went back to using firefox.
Chrome would frequently eat up more than 4GB of RAM more than Firefox, it doesn't support tab groups, and it doesn't support tab rows.
@ScottPack I use both. Chrome for Bear #1, Firefox for Bear #2.
This might explain why Bear #2 is, on the whole, angrier.
12:41
@ScottPack I use Chrome because bookmark syncing is seamless with it.
@TerryChia Chrome is faster, smoother, and handles userscripts better.
I did like being able to have web history and bookmarks shared between my computers, phone, and tablet.
@ScottPack Agreed except for the userscripts part. I don't use em.
And how many tabs do you generally have open at one go?
The Last.FM browser extension actually worked on Chrome, which it doesn't on Firefox.
I suspect I'm a very light user in that regard around here.
Let's see if I can easily figure it out.
Between the 3 tab groups, 21, 20, and 26.
So 67 total.
12:43
@ScottPack Woah.
I generally have at most 10-15 tabs open at once.
I have 7 open right now.
I also tend to rotate through tabs quite quickly. When doing any kind of research or debugging I'll open everything in a new tab, and close them as I don't need them anymore.
@TerryChia it's a minimum
That may be a few minutes or a few weeks depending on what's going on.
I use opera, since it's the only one with working tabs out of the box
I really liked how Chrome ran each one as a separate process. At least then one javascript didn't blow away everything. However, it didn't handle the churn very well.
It wasn't uncommon for Chrome to eat up 8-10GB of ram. Let me tell you, that's insane.
12:46
Morning.
wonder how many processes Chrome would open with 70 tabs
My typical in use memory went from ~10GB down to 6 just by switching to Firefox.
I do agree that the tab management aspect of Chrome can use some work.
@CodesInChaos Something like 75.
It gets really messy when I have 15 tabs open.
12:47
Opera eats about 1.5 gig here
with my usual 70 or so tabs
@ScottPack Close your tabs you insane person.
@Simon It's 8.57PM. What's so morning about that?
@CodesInChaos Like if you need all of them to be open.
8:47
@Simon @Simon @Simon @Simon @Simon @Simon @Simon @Simon
@CodesInChaos There's several that get launched as part of the base browser setup, then one per tab. Unless flash is involved because it gets its own process.
12:47
That's super morning.
Dexter Dexter Dexter Dexter Dexter Dexter Dexter Dexter Dexter Dexter
@Adnan hiiiiiiiiiiii
@Adnan Yep, it's getting fucking serious.
@ScottPack What's flash? I have never heard of that technology. Ever.
@Simon I feel like Saxon is gonna kill the blond one (I forgot her name)
@Simon That's what your mom said.
12:48
@Adnan Fuck I forgot her name too.
HANNA
or Anna
@Simon Are you watching Breaking Bad
whatever the spelling is
@Simon Hannah, I guess.
Yes, I'm up to date.
Shit's getting wild too
@TerryChia You really want me to tell you? I can go find a picture.
12:49
@Simon Indeed
I like BB more than Dexter I think.
So far the only finale is The Newsroom
@Simon Blackberry sucks.
Oh you.
I love it when I type my last name in a web form and then they turn the accented letter into "Ãĩ"
@Simon Because Canada.
12:52
@Simon Same happens when I type my street name :(
@TerryChia Because QC.
@Adnan Poor street name.
This is unanswerable. The ciphertext could decrypt to literally anything, including the entire works of Shakespeare. — Polynomial 54 secs ago
wat?!
@CodesInChaos All of my firefoxes combined are taking about 2.5GB of memory (RSS).
@Simon I like that comic too.
@Simon FAIL!
@Polynomial Or Twilight. — Terry Chia 16 secs ago
I hate you.
Now I'm gonna delete it.
Come back when you make sense/learn how to type.
12:56
@ScottPack I used to like it.
@Adnan That's too bad the question was closed; I think it was actually answerable.
^ DAMMIT @AviD!!!!!
@TerryChia that's what she said....?
@ThomasPornin If you would like to edit the question into something legitimate, I will be glad to hammer it open. However, I closed it not because we can't answer it, but because we shouldn't.
@AviD It's not encryption, actually. The example he shows seems to be ASCII encoding of a transliteration of a text in Mongol.
@ThomasPornin I was actually more concerned about Poly's comment.
13:03
@ThomasPornin lol, excellent.
Unless the decoding/decryption method is f(c) = The_whole_works_of_Shakespeare
@Adnan It is entirely possible the OP was confusing encryption and hashing. In which case this could be the hash of the whole works of shakespeare.
> The ciphertext could decrypt to literally anything
@Adnan Oh, yeah, true. I don't suppose Poly is confusing the two, just read the Q. My apologies.
@Adnan Well, I don't see what's wrong with that statement. A good encryption algorithm produces output that is indistinguishable from randomness.
13:07
> Today we skin the lions, eat the hearts of dragons, feast on our enemies loved ones, and get drunk on their tears.
@Adnan Your point being?
@TerryChia My point is that I'm hungry, and today is WasaByNight2013, so I'm gonna get shitfaced.
@TerryChia so you're saying that Twilight is just the encrypted form of the complete works of Shakespeare?
@Adnan So it's just like every other day?
@AviD NO. That would imply there exist a key that is able to decrypt the contents of Twilight and obtain the complete works of Shakespeare.
@TerryChia well, it seems random enough.
13:11
@TerryChia Damn it! You know too much about Finland!
but I see you're point, I dont think it is possible to decrypt Twilight.
@TerryChia There is a one time pad for every pair of plaintexts. But I know you know that.
@lynks throw new TwilightIsShitException.
@TerryChia thats not an exception.
@AviD Hopefully its an assertion
13:14
@lynks Ah right.
That works better.
@AviD Oh such kindness! :) Cheers!
@TildalWave well, you know we take our icons, very seriously.
@AviD What Tigger tiger from Winnie-the-Pooh said! :D
cuz icons is what tildals do best?
@AviD Waitwut?
13:28
@lynks Actually it's a processor triple fault. Any attempt to play twilight on your PC will cause a complete reboot.
@TerryChia So it's hashed?
@ScottPack no, the author was smoking hash when it was written. Similar, but small difference.
Ah, so the relationship between Twilight and Shakespear is hashish.
@AviD The Q is, was the hash they were smoking salted?
@AntonyVennard "Salted Hash"? Is that some new hippie term for weed that's laced with coke or something?
13:31
@Iszi No idea, but I think it can be now.
 
1 hour later…
14:45
BTW another launch in 10 minutes... covering in The Pod Bay as usual. :P
@TildalWave who is launching what?
We're now covering the @OrbitalSciences Antares spacecraft on Cygnus ISS mission live in our @StackSpaceExp chat room http://chat.stackexchange.com/rooms/9682/the-pod-bay
sorry I forgot to mention LOL
@TildalWave heh, my mmo has a city called Antares
@paste 10/10 will read again.
14:56
@TerryChia Thief.
@lynks it's a supergiant star of the Scorpio constellation, so I'd imagine used quite often...
Thanks :)
@TildalWave Yep many of my cities are named after stars
@lynks Sirius?
Antares is actually the capital.
@TildalWave always.
@TildalWave but no, that has too strong a Harry Potter association now unfortunately.
"Ruins of Arcturus" is an instance
15:00
@paste thats all kinds of romantic, in a way that only geeks could understand.
Yeah, it is.
Specially meeting Iszi
@paste Was she pretty?
She's a very beautiful lady
@paste where did you meet Iszi?
@Iszi A/S/L?
15:04
We got reduced tickets to the KSC in return for verifying her gender
@lynks s/where/why ;)
@TerryChia Girls in the DMZ? Marriage material.
5
@lynks I suspect @copy was a very lucky man that night. ;)
@paste yeah, meeting @Iszi is always romantic.
Two chicks from the DMZ, how can it get better than that?
15:07
@paste I refuse to believe there are two. One of you is lying.
@paste Three chicks.
@paste 3 > 2
Why is acunetix sending people to sec.se? Or am I reading this wrongly...
0
Q: How To Protect Tomcat 7 Against Slowloris Attack

Amin ShI'm using Apache Tomcat 7 to run my webapp on Linux. I scanned it by Acunetix and it's telling me that my webapp is vulnerable to "Slow HTTP Denial of Service Attack". How can I protect it? Acunetix is reffering me to here, but it's about securing Apache, not Tomcat.

@paste Two? You and @Iszi?
@ScottPack Yeah
And TildalWave, but she wasn't there.
15:09
After @Iszi bought me a beer I feel obliged to say nothing negative regarding said person.
Damn, a woman that buys you beer. That's marriage material, guys.
@paste woah woah slow down there. Tildal is a girl too? We're approaching a non-negligible fraction of regular DMZ users.
@lynks Define non-negligible.
@paste @copy is your boyfriend? I thought you two were siblings?
@TerryChia Just a bit more than the maximum negligible value...which is about 8%
15:12
@lynks Did you pull that number out of your ass? :P
@TerryChia It's a well known mathematical axiom. Some use standard-deviations, I use 8%.
By 'well known' I mean, 'made up by me'
@Simon Holy crap - people still say that?
@TildalWave I really want to answer you in the Pod Bay with something like "hilarious, best telemetry based comedy I've read in years, had me in tears"
@lynks The commentator was reading data in statue miles, and the telemetry readings were displayed in kilometers... I really hope they didn't actually mix those up, because the ISS is roughly at 260 miles, not kilometers LOL
@Iszi I'm fairly sure I'm the only one.
15:20
@lynks Reading it wrong. Note the statement afterwards "...it's about securing Apache, not Tomcat". Obviously, our site isn't so prominently about web application security that anyone would say that. So there must be a link missing somewhere in the post.
@Simon Probably. Regardless, my response is 31 / M / None-of-your-damn-business.
Stop lying.
@Iszi There, FTFY. "31 / F / None-of-your-damn-business"
It's too late, your secret is out.
Maybe @TildalWave or @AviD can help @Iszi correct his mistake?
15:22
@Iszi given your use of language, I've always had you down as British.
@lynks Really? That's strange. I suppose I oughta throw a few "y'alls" around more often.
@Adnan You seem to be very familiar with Tor. Any opinions on this?
6
Q: Does this proposal have significant overlap with IT Security?

Terry ChiaProposal: Tor IT Security already has a rather active tor tag. Questions about the security concerns and technical workings of Tor are on-topic there. Questions about setting up and configuring Tor already have a home on Superuser, which also has a tor tag. As far as Tor development questions ...

@Iszi talk about how much you like guns and burritos.
@lynks Guns + Burritos = British? On which planet?!
@Iszi I mean to indicate where you are really from
15:24
Or are you suggesting additional measures to ensure I'm not mistaken for a Brit?
Ah.
@Iszi yep, that one.
@TerryChia that'd be abuse of mod powaz so I wouldn't bet against it
@TildalWave hehe
Im going to assume everyone in here is female from now on.
@lynks We need a web of trust.
15:26
@TerryChia that is exactly what we need.
Trying to explain to people what a "gender signing party" is might be difficult.
2
@lynks sounds like the set-up to a rather dodgy film
@RoryMcCune Particularly given the 'level of scrutiny' measurements many keyservers ask for....
@lynks I was about to say I'm glad no-one has ever actually made that kind of flick, but then rule 34.. either way I'm not searching for it..
Thanks for the support @Gilles. That makes quite a lot of sense.
15:46
the longer I look at that image, the weirder it looks.
his head looks super-imposed onto it
@TerryChia I definitely agree with you.
I even find it very strange that they were able to gather 211 commitments.
@Iszi SU has 150~ questions with the tor tag.
@Adnan Apparently they are pushing hard for it on the Tor mailing list.
Look at the people who commit, most of them are new users.
@TerryChia What a shame! They're gonna get into private beta and fail after that.
@TerryChia Yeah, and apparently there's been nearly that many questions posted in the past 3 months on that proposal. But look at how many of those are effectively duplicates!
@Iszi Ahh good point.
15:52
Come to think, there should be a "close as duplicate" option in A51. It's no use counting a question in the tally of sample questions if it's a duplicate.
Could someone who actually knows python check my python please?
0
A: Create netcat listener and execute reverse shell in the same script

lynksTypically, you would just start the listener separately: Open a new terminal and run your nc -l -p 9999. Leave that there waiting, then fire off your exploit causing the remote machine to start a reverse shell. There are loads of things that can go wrong in this process, generally just binding a...

@lynks Looks good for a basic client/server script.
@TerryChia he is trying to implement nc -l -p 9999 essentially.
@lynks Ah, yeah that should do it. I'm sleepy though so I might have missed something. :P
Ok, bed time! Nighty nights!
@TerryChia o/
16:03
more NASA news :D
Hackers accidentally deface NASA sites with message for NSA http://wapo.st/18yzmop
Bracing myself for the usual Meta.SO beat-down:
0
Q: Close As Duplicate option for Area 51 Example Questions

IsziCurrently, the flagging options for Example Questions on Area 51 are thus: Offensive, Abusive, or Hate Speech Spam Requires Moderator attention I suggest adding one more: "Duplicate of existing question". In some cases, an Example Question being proposed is effectively the same as one that ha...

@Iszi I don't see why it would be opposed, sure there's the mod flag option that could serve for that purpose, but having it available there for all to choose from could only be a good thing, no?
Anyway, you get a +1 from me. That buys you advantage over 2 downvotes LOL
00:00 - 17:0017:00 - 00:00

« first day (1007 days earlier)      last day (4171 days later) »