The DMZ

Terry Chia

01:07

@Cherokee If you want a very basic example, infosecstudent.com/2013/08/io-smash-the-stack-level-4

That's my blog/documentation-in-progress for io.smashthestack.org.

@RoryAlsop Oh, so you were the one that's responsible for my missing Sunday.

Vignesh4303

05:41

1

Q: How to prove that email sent on certain date of outlook

How to prove that email sent on certain date of outlook Problem behind my question : Recently i asked my colleague to send a email on Friday(4th October 2013) ,He failed to sent me a mail on that day, He simply changed the system date and time to Friday and sent me a mail on Monday,I received ...

could anyone helpmewith it?

Adnan

08:06

0

Q: Can someone remotely get into my computer and make it look like I typed something in a search?

Is it possible for someone to remotely manipulate the keys on my computer to make it look like I was typing?

malware

> Oh no, Daddy. I wasn't Goolging for that. Somebody hacked my computer and made it look like I'm the one doing that. See! Experts on the Internet say it's possible.

Terry Chia

@Adnan hah

Rory Alsop

08:47

@Vignesh - what help do you need with it? The answers seem okay. It's not really a security question - it's just logs and headers.

UV-D

Hi all, has anyone looked into this - 'temporal cloaking' of data technewsworld.com/story/78210.html

Rory Alsop

Morning @UVD

That sounds a lot like the way early spread spectrum 802.11 systems worked (this was before frequency hopping became the popular and accepted mechanism)

You smear the signals out to such an extent they are invisible to an attacker - only in this case the smearing is over time as opposed to the frequency domain

UV-D

so, effectively 'displacing in time', how effective would this be?

Rory Alsop

I am thinking effective up until an attacker with some physics savvy uses Bragg gratings to recombine data...

but cool, nonetheless

UV-D

this article also appeared in 'Physics Today'

I was going to write that as a question, but I don't know enough about it to do a question justice

Terry Chia

08:57

@UV-D Just mention NSA.

UV-D

oh?

would it be a worthwhile question or too broad

@RoryAlsop would this kind of system be easily implemented in existing data protection systems?

Rory Alsop

09:29

The way it is described it will be just a part of the Demux hardware at each end of the line

UV-D

hmmm so reasonably effective and simple-ish

that is awesome how they've used existing technology

TildalWave

09:50

@AviD if you cared to look on the star wall, you'd see it there already, courtesy of your local icons expert :P

@ManishEarth will I be seeing you in this stream in about 20 minutes time? youtube.com/thenobelprize

UV-D

@TildalWave!!!

TildalWave

@UV-D it's just for physics, don't worry ... it's not for which mass murderer will receive the Nobel peace price this year, or anything like that

UV-D

I know, tis an exuberant greeting

lynks

read the time cloaking article, meh. It's just multiplexing, your mobile phone already does this, just not with security in mind.

UV-D

@lynks really? that never occurred to me

lynks

10:01

@UV-D Your phone uses evolved forms of DSSS in the code, frequency, and time domains.

actually, my dissertation was all about DSSS in the time domain

UV-D

so, once again, pre existing technology just been adapted for another purpose?

lynks

entitled "Covert Communications over a Common Counter"

UV-D

@lynks is said thesis available online?

lynks

@UV-D just trying to dig it up.

UV-D

awesome!

lynks

10:05

@UV-D somewhat worryingly, I don't have it.

UV-D

hmmm sounds like one of my dissertations (geochemistry, exploration geology),.. perhaps your university has a copy they could give you?

lynks

@UV-D I'll have a look when I get home.

UV-D

no worries - I am soon to be going to bd... it is 8:07pm here

lynks

There is a pdf of it on one of the backup disks lying around Im sure

TildalWave

@UV-D Just read it... and it's IMO effectively as good as quantum entanglement ... it doesn't solve anything. Actually, the quantum entanglement might be better tamper resilient solution, when and if at all possible, because it'll enable tamper evidence point-to-point. This one only enables it till the next router, so all you know is the cable wasn't tampered with, not the information itself. And even then assuming your adversary isn't close to one end of it. Well, IMO.

UV-D

10:09

this is getting more and more interesting

TildalWave

i.e. it's usually PEBKAC, not the darn cable ... unless it doesn't work, then you're 100% secure from it... unless it's still strong enough to hang from it... which can make you 100% secure from anything... mostly because there wouldn't be PEBKAC any more :)

was just an attempt at a joke, don't make too much of it, it's 100% BS :P

UV-D

lol - love that acronym and there is a strong element of truth there

well time for bed for thi weary physicist

Rory Alsop

10:46

@lynks - glad someone who really groks DSSS confirms my brief amateur description

Also, I love this question on Physics - and I really think I need to supply the meme-appropriate answer (but it will get downvoted to oblivion)

3

Q: How Galaxy is formed?

Given the distance among stars (the most massive objective in the space) is so huge, the difference of order of magnitude is about 7. And also, since gravity is such a weak force, how is it likely for gravity to shape galaxy the way it is? Would it make more sense to say galaxy is collapsing? ...

newtonian-gravity angular-momentum galaxies

lynks

@RoryAlsop Im sure the bear will know more.

Rory Alsop

I used to test early DSSS kit for Telxon and Symbol, and vaguely understood the maths, but I was more the practical end...

ManishEarth

11:11

@TildalWave lol no

@RoryAlsop babby?

babby!

TildalWave

11:22

0

Q: Can I read/write canary values from %gs register?

I would like to know if it is possible to read (or write) the canary values from %gs register. If "yes", how; and if "no", why? Also, I have been reading somewhere that the canary values are stored in some sort of TLS (I suppose it to be the "Thread Local Storage"). Can someone please shed som...

attacks exploit buffer-overflow

RE or SO?

CodesInChaos

12:44

@RoryAlsop Do you see a custom flag by me?

Scott Pack

12:58

Seriously.

happyplace.someecards.com/26729/…

Thomas Pornin

@RoryAlsop sonic.wikia.com/wiki/Time_Eater

There should be a gold badge for being a "Sonic the Hedgehog" villain.

AviD

@ScottPack that is equal amounts of both hysterical and awful all at once.

Best quote evar:

> British newspapers are automatically NSFW.

Simon

You guys just missed 3 first post reviews queue evil laugh

AviD

@Simon oh, we moved on. Didnt you see the new types of queues?

Scott Pack

@AviD inorite?!?

Simon

13:06

@AviD Oh sorry, I might be outdated.

Terry Chia

@AviD Like the one for close votes right?

AviD

this is an... interesting answer.

-1

A: What are the security threats of zip file uploads and what preventive actions should be taken?

* emphasized text --------------- Block-level HTML elements have a few restrictions: They must be separated from surrounding text by blank lines. The begin and end tags of the outermost block element must not be indented. Markdown can't be used within HTML blocks. ` Heading ` ...

formatting and all.

Simon

It was one of the posts that I reviewed.

AviD

@Simon and you approved it???

Simon

@AviD Flagged and downvoted, is that considered as approving? If so, I've been doing it wrong for a long time.

Xander

13:12

@AviD I flagged it in the late answer queue.

@Simon I didn't, I chose to review them in the late answer queue instead. :-P Oh, and there was a fourth in the first post queue that you missed. ;-)

Simon

@Xander God damn it! I'm so close to top 10.

Xander

@Simon LOL! You certainly are. You'll get it today or tomorrow, despite me.

Simon

@Xander Yeah because luckily, @TerryChia is a slacker.

Terry Chia

@Simon Some of us are busy in the important queues. Like close votes for example.

Simon

I kind of want a legendary battle for the spot but he seems to not give a crap.

Booooo.

AviD

13:17

@Simon that shouldn't stop you from making it legendary by yourself. Just don't expect us to wait for it.

Simon

@AviD Oh lawd, a HIMYM reference?

AviD

this season makes me sad.

Terry Chia

@AviD In a good or bad way?

AviD

lolwat?

Simon

I haven't started to watch it yet, I'll wait a few more episodes.

20 mins episodes are too short, I always demand more.

AviD

13:20

@Simon like your mother.

Terry Chia

@AviD Good - "It's going really well, I'm sad that it's ending soon."; Bad - "It sucks, I'm not gonna watch it anymore."

Simon

@AviD Yes, like my... motherfucker!

AviD

@TerryChia ahh, I see. Yes.

Simon

Everything is ending this year/next year, it sucks.

AviD

I think this will be the last season I watch.

Terry Chia

13:21

@AviD This is the last season...

Simon

LOLOL

AviD

duh.

Simon

o

AviD

@Simon so does your mom.

also, it is sad that they are changing the entire universe.

Simon

My mom is ending next year?

Thomas Pornin

13:21

Oh great. When I go to the TechNet forum and search for information on "IE freeze", then IE... freezes.

Terry Chia

@AviD Remember how we used greet the room with "your mom"?

Simon

@ThomasPornin That's what you get for using IE.

AviD

the whole premise of the show is that the mother is always "out there". now we already know who she is... there is no surprise, no suspense.

@ThomasPornin it was secretly the command line!

Terry Chia

@AviD Still funny though.

Thomas Pornin

@AviD You mean I launched nuclear apocalypse ?

AviD

13:22

@TerryChia oh absolutely. Nearly split a gut last episode.

Simon

I must say that I agree with @AviD. Unlike many other series, the show started with strong seasons but it's getting worse.

AviD

@Simon but I didn't say that.

Terry Chia

@Simon Absolutely. The middle seasons were terrible. The last season was funny though.

Simon

@AviD But I did.

AviD

it did have a weak season or so in the middle, but now it is as strong as ever.

Terry Chia

13:24

@jrg Hi Sheldon!

AviD

just sad about the change in premise, and about the ending.

Terry Chia

@AviD I think it's interesting. The whole season is only one weekend.

AviD

@TerryChia ooh, yeah - didnt think about that.

Simon

@TerryChia Really?

AviD

no spoilers!

Terry Chia

13:25

@Simon Well, the entire season revolves around the weekend of the wedding.

AviD

>! curious if this works here?

Scott Pack

@jrg Hey Shelly.

AviD

guess not. Or did I do it wrong?

jrg

@TerryChia @ScottPack howdy.

Simon

@TerryChia With massive flashbacks.

Terry Chia

13:26

@Simon Remember that flashback episode?

Simon

@TerryChia No :(

Terry Chia

@Simon The one where Lily was in labour.

Simon

@TerryChia Vague souvenir.

AviD

@TerryChia we should have a flashback to that episode.

Terry Chia

Talking about @jrg, TBBT is starting the season strong.

jrg

13:28

And I still haven't watched a single episode.

too busy with 3 jobs and school. ;P

Scott Pack

Whatever.

jrg

@TerryChia but, so no spoilers, but am I doing a good job? ;P

Simon

@ScottPack I still love you.

Terry Chia

@jrg Oh, excellent. :)

jrg

@TerryChia Fantastic.

Terry Chia

13:42

Is it just me, or did they build this site from Twitter Bootstrap? healthcare.gov

Rory Alsop

@Codes - the migrate one? Yes, was waiting to see what answers we got, and whether anyone else flagged.

@AviD - HIMYM...I think I have seen 4 episodes. Don't know what series. Was vaguely amusing, but it just seems like another sitcom.

TBBT - amusing because I know people who are all of those characters

Terry Chia

@RoryAlsop BLASPHEMY!

Rory Alsop

but it's difficult unless I spot the first episode in a series - at least then I click record series on my sky box and it all gets sorted for me

@Terry - guessing I'd need to see it in order, maybe, from the start

AviD

@RoryAlsop that had been my initial impression, too. But it really does get awesome, even without the gimmicky format - which does also give it some interesting possiblities they took well advantage of.

Rory Alsop

All I know is that Willow does less witching and almost no girl on girl :-)

Terry Chia

13:46

NPH is awesomesauce.

AviD

@RoryAlsop you're wrong about the 2nd part... ;-)

Rory Alsop

NPH?

Terry Chia

@RoryAlsop Oh damn, forgot to continue watching Buffy. And what @AviD said. :P

AviD

I dont want to see his awesomesauce.

Rory Alsop

@AviD - I'm downloading all the series now

:-)

Terry Chia

13:47

@RoryAlsop Neil Patrick Harris.

Rory Alsop

not really

jrg

@TerryChia Yes, bootstrap.

Terry Chia

@AviD HAH!

Rory Alsop

who is Neil Patrick Harris?

never eard of im

AviD

@RoryAlsop dude. We've been though this...

Terry Chia

13:47

Neil Patrick Harris

Neil Patrick Harris (born June 15, 1973) is an American actor, producer, singer, and director. He is best known for the title role in Doogie Howser, M.D., the womanizing Barney Stinson in How I Met Your Mother, a fictionalized version of himself in the Harold & Kumar series, and the title role in Joss Whedon's musical web series Dr. Horrible's Sing-Along Blog. Harris was named as one of Time magazine's 100 most influential people in 2010, and was awarded a star on the Hollywood Walk of Fame in September 2011. Harris has also hosted the Tony Awards on Broadway in 2009, 2011, 2012, and 2...

AviD

;-)

Doogie Houser, MD.

Rory Alsop

oh him - the main dude from HIMYM

and Doogie Howser

wait

jrg

@TerryChia or something that uses the same bloody syntax.

Rory Alsop

is that the same guy who played Doogie Howser?

AviD

yes.

Terry Chia

13:48

@RoryAlsop Yes.

AviD

they even had a spoof episode once, it was legen

dary.

Terry Chia

@jrg Thought so, Bootstrap sites always have the same "feel". Pretty pathetic for a government site.

Rory Alsop

LOL - I preferred him in Dr. Horrible - can't remember whether it was AviD or Scott who pointed me at that one

Terry Chia

@RoryAlsop Oh damn, that one was funny.

AviD

@RoryAlsop not me, havent seen it.

Scott Pack

13:49

Dr. Horrible FTW!

AviD

yet...

Rory Alsop

It was Scott then! @AviD - go and watch it

Scott Pack

I'm considering getting some gloves and going as Captain Hammer for Halloween.

AviD

also his Emmy hostings are fantastic.

Rory Alsop

trust me...or better yet, trust Scott

AviD

13:49

Trust the @Scott.

2

Rory Alsop

Don't think I've seen any Emmy things

Terry Chia

@AviD Nah, The Emmy ones suck compared to his Tony hostings.

Rory Alsop

Izzat like the Oscars? Haven't seen them either.

AviD

@TerryChia oops, sorry yeah- thems the ones I meant.

or was it golden globes?

cripes, the guy is everywhere.

Terry Chia

@AviD Tony's most likely.

jrg

13:50

@TerryChia as the web developer in the room, I can also point you to this: github.com/CMSgov/healthcare.gov

AviD

@TerryChia he's actually done all three.

@jrg ya think youre the only one...? ;-)

Terry Chia

@AviD Ah really? Wasn't aware that he did golden globes as well.

Scott Pack

Everywhere.

jrg

@AviD you're a infosec guy. I just intrude here because I occasionally use ~~backtrack~~ ~~Kali~~ script kiddie tools.

AviD

@ScottPack heh. I think its time to make him a meme.

Scott Pack

13:52

@jrg Avi works in programming.

Terry Chia

@jrg Well, at least it's Ruby code.... Would have expected a government site to be built in Java. ;)

jrg

@TerryChia It's actually a static site... :P

AviD

@jrg appsec / software sec / security software...

Terry Chia

@jrg Java code to parse XML files into static HTML/CSS. That's the enterprise way!

jrg

@AviD still security. I just put my head down, keep my framework patched, and then hope nobody finds me.

Terry Chia

13:54

@jrg Yeah, definitely bootstrap. github.com/CMSgov/healthcare.gov/blob/master/css/all.css

jrg

Fantastic!

Simon

Am I a weird person if I like the taste of blood?

Rory Alsop

@Scott - ohhh that was him as well? I'm liking him even more!

@Simon - yes.

Scott Pack

@RoryAlsop Yeah, NPH was the nerdy telepath.

Terry Chia

@Simon Are you sure person is the right word?

Simon

13:59

:(

It's time to admit it: my name is Edward.

Transcript for