« first day (1036 days earlier)      last day (4142 days later) » 

00:10
TWSS?
@Gilles That's what she said.
Even I know that one. :-P
@Xander er, yes, I was refering to “bad finger query”
I'm glad at least someone picked up on my intentional innuendo.
@Gilles you tried, that's what's important.
@Gilles Well you should have referenced it, so we would know what you were taling about!
@ScottPack Dagnabit, it's evening here. You can't expect me to pick up on anything even remotely subtle, much less intentional innuendo. I'm old, and I've had wine, and I'm tired.
00:39
Client asks for help; they seem to be sending out spam and don't know why. Sounds like a hacked server. I deal with these all the time.

Turns out to be a Windows server (uh-oh), and turns out they're running ColdFusion. (UH-OH!)

Thank you, but no. Please find someone else. This is a mess even I don't want to get involved in.
00:49
What's wrong with windows servers? Have you any idea how difficult it is to still get downloadable exploits for 3.11?
most of them are on bloody floppy disks!
@TildalWave Because 3.11 doesn't have a TCP/IP stack
well there you go then safe as houses
Remember having to install Trumpet Winsock?
shit yes
what days :)
Back when TUCOWS actually was an acronym.
00:53
and having two landline numbers meant you're a king ... you could spam with faxes AND call bbs hosts at the same time :)
for a daily fix of 16 color icon size porn :D
dialer viruses yey
I feel like I have traveled back in time.
you were prolly not even born yet then?
@TildalWave Hence the back in time part.
@TildalWave @TerryChia was not, indeed, born then.
Thank god for high resolution porn.
00:59
funny days really ... everyone started talking of viruses like it was some sci-fi hitech apocalypse all of a sudden yet nobody even had Internet yet, not a proper one at least... everything was through exchanging floppy disks and you had to manually "infect" your computer then wonder why would anyone go through the trouble of screwing with your "graphics output"
@Xander how many times did you have to explain that computer viruses don't transmit to humans?
@TerryChia Before there was the WWW, there were fanciful things such as finger, Archie, Veronica, and Gopher. And yours truly only had Internet access though a dial up shell account at the University where my father was a professor, because commercial ISPs were still a thing of the future.
@Xander You are old.
and offshore pirate radios transmitting computer programs and games through FM radio waves :)
@RoryAlsop level old.
@TildalWave Funny enough, I had almost the opposite experience. Until the last decade or so, I was dealing primarily with non-technical users who had only the vaguest idea of what a computer virus was, and who would happily click on any executable emailed to them that purported to be humorous, or dirty.
@TerryChia Not terribly old, but reasonably old, I'll admit.
@TerryChia No, not that old. Not by years and years.
01:07
I just had one like that today ... he clicked on some shit asking him if he knows xxxx at xxxx and would like to get in touch :)
@TildalWave Ha! I do remember that.
@tylerl Somebody else uses ColdFusion?
I really hate when users change their gravatars after not being active for a rather long time, I don't remember then who they are ... who's scuzzy-delta? I know I've seen this name around and now with the new gravatar I haven't a clue where :O
@TildalWave I have very unfond memories of setting up a SLiRP tunnel so we could use MOSAIC and actually see pictures on the web.
Before that I had to use lynx, download pictures to my shell account on the HPUX server, then pull them down over the modem.
@ScottPack yeah. Who does that?
01:16
@tylerl I'm remaining silent.
@ScottPack Yep. I had a shell account at the local university and browsed with lynx. That and BBSes.
Let's just say I really wish I didn't have to care about the possibilities of the CF code leak.
@ScottPack that'd be best. Also, WTF?
CF is (a) expensive (b) no more powerful than, say PHP, and (c) very difficult to find support.
I can't see a logical reason to choose that for a major project
@tylerl To be fair CF is historical. In that no new development occurs.
Unless you count CommonSpot which is all built on top of CF
Basically you pay several thousand dollars to be allowed to use technology on par with 2001 ASP.
01:18
Pretty much
 <%
      On Error Resume Next
those were the days...
Yes. Those were days.
 
6 hours later…
07:07
@tylerl FWIW, a few years ago I had to learn CF pretty darn well, a big client (big EU insurance company if I remember correctly?) had their core systems on it. I did learn it, managed to shock them with some things they didnt know about CF, and forgot almost all of it soon after.
 
2 hours later…
08:46
@RoryMcCune I'm honoured :]
my twitter account got suspended >:[
not been given a reason so I have no idea why
hopefully they'll restore it soon
09:07
God damn it!!! GAWD DAMN IT!
It's snowing like a movie Christmas!
@Adnan why's that a "god damn it" moment?
@Adnan Why is that a bad thing again? Do you hate Christmas?
@Polynomial It's October, OCTOBER!
@Adnan So?
@TerryChia Last year it was a snowless Christmas, this year it's snowing in October. What's next? We'll see the sun in January?
09:09
@Adnan The horror.
@Polynomial I don't know, it feels strange. Like moving in with your girlfriend after only being together for 2 weeks. Too early.
@Adnan Especially if she's 9. Too early.
@Adnan ooh, are you burning on @Simon?
@Simon Do you need some aloe vera?
@Polynomial Yeah, you should wait until she's 15 (or whatever is legal in the Czech Republic)
09:12
@Adnan ... why Czech?
@Polynomial apparently those are popular in whatever sick environment @Adnan hangs out in?
Like Columbus.
heuheuheu... "Czech your Netherlands to see if you're Hungary."
2
I'm sorry, so sorry - that last comment was really over the line. One of the worst things I've said to anybody.
@AviD Is it, though? Is it?
@Polynomial Hehehehe :D
oh yes.
I think that should become the new version of godwins law. I am going to work towards this goal.
@Polynomial I refuse to star that on account of punnery.
09:16
:O Look at @Scott, calling others "sweetness" and whatnot!
in The Comms Room, 16 hours ago, by Scott Pack
@Wesley Hey sweetnes
@AviD kekeke :]
@Adnan @Simon must be burning with jealousy.
Also, why are you stalking @ScottPack?
@TerryChia I was checking that Halloween starred message.
@TerryChia a better question is, why aren't you stalking @ScottPack?
@AviD Because I don't want @Simon to murder me when I'm sleeping.
09:18
Hey, who was that guy who spoke Dutch, French, and English and used to come here to The DMZ?
I think he lived in the Netherlands
We haven't seen him in ages
DW, maybe?
@Adnan There's a guy like that?
@Adnan @Gilles?
@Polynomial @Terry, The guy's name started with H
@Polynomial no, I dont think he ever lowered himself to our level.
09:19
@Polynomial Does DW ever hang around The DMZ? I don't remember seeing him.
I think he's been on here a few times.
@AviD Nah, Gilles is here
only in our imagination.
Hendrik?
@Adnan Site regular?
@Polynomial Hendrik is never in here.
that guy?
@TerryChia At least used to be DMZ regular
@Polynomial Nope, not a mod
Damn it! Search the user page for "H" isn't practical
I have been hanging here for almost 2 years already and I have never seen Hendrik in here.
09:22
@Polynomial That's @Terry's sockpuppet
@Polynomial NodeJS and MongoDB?? The guy is hip AND webscale!!
@Adnan Don't insult me. I'll never use node.js.
@TerryChia never say never.
Found him!
I think he stopped coming here after somebody insulted him or something
Could be another dude, I don't remember.
@Adnan wasnt he a bit trollish?
not quite andrew, more rooklike.
09:24
@AviD Was he? I don't really remember. I just remember seeing him around here a lot.
(See? I'm caring and nice and whatnot. I remember others and ask about them. Unlike you people try to make me look like)
Especially with that mod-starred message to the right ->
@Adnan Are you trying to compensate for something? ;)
@AviD Yes, he was a bit of a troll.
@TerryChia Nooo.. I'm naturally nice and caring person blah blah blah
@Adnan Right sure.
Let's start a poll.
Star this message if you think @Adnan is nice.
2
Star this message if you think @Adnan is single handedly more damaging than the rest of chat.SE.
5
WTF! Who's messing with me?
09:28
lol, starspam
what if you think both are true?
@Adnan heh, are you not entertained??
@Polynomial Come on! I cannot be more damaging than, say, our mellon.
@Polynomial what if you feel very strongly ambivalent?
@AviD Then go for a walk on the beach and stare into the ocean whilst uplifting music plays.
@AviD I'm not, sweetie.
09:30
@Polynomial Mind. Blown.
s/Mind/Job/
@TerryChia Thank you for taking the time to create that poll. I appreciate your effort.
@Adnan No problem sweetie.
Hey @David, how are you?
Oh, @kalina, my best friend. Nothing, just saying hi.
@Xander... my man! How ya doing?
@Adnan Ah right, @kalina can get the people in The Bridge to vote as well.
09:32
?
5 mins ago, by Terry Chia
Star this message if you think @Adnan is nice.
Not a huge fan of getting people in the bridge to do anything
5 mins ago, by Terry Chia
Star this message if you think @Adnan is single handedly more damaging than the rest of chat.SE.
We are having a poll.
@TerryChia is it the kind you can dance on? I heard @Adnan likes that.
Speaking of which. In the city centre we have a place called Vertical Fitness Club
09:35
@TerryChia well I can't star it, I said it
Guess what it's about!
@Adnan Your mom?
oh you've added more stars
well that's a waste
Who wants to give a talk at Singapore? Blackhat Asia 2014 CFP's are open. blackhat.com/asia-14
So is Syscan's CFP. syscan.org/index.php/sg/cfp
@TerryChia glad to consider it. Do they cover travel?
09:37
Back to back events. ^^
@TerryChia How much do they pay?
@AviD Blackhat does, as well as $500 if you are a new Blackhat speaker or $1k if you have given a Blackhat talk before.
Syscan has air ticket compensation for up to $1k and $1-2k bonus if your paper is brand new.
@TerryChia 1k$ not enough to cover my flight...
@AviD $1k is Syscan's. Blackhat's is a round trip.
I'm (almost) definitely going to be at Syscan's. Trying to see if I can wrangle a free Blackhat pass as well but that's unlikely. Might pay for it though...
@TerryChia There is a cap of $1000 USD on round trip itineraries for events held within the US; and $1,500 USD for events held outside of the US.
that might just barely cover flights.
09:44
@AviD Ahh, didn't notice.
still, I might consider. I always have to pass on LAs Vegas, timing always sucks for me.
Though I dont really have anything new and interesting right now....
I didnt notice anything for co-speakers?
@AviD Hmm yeah, only this bit.
> Full conference passes are given only to those who actively participate as speakers on accepted presentations. Additional speakers must be listed as a part of the submitted Call for Papers applications prior to the close of the CFP.
Nothing about travel fee compensation.
If you are submitting, give Syscan a go as well. Definitely a fun party that one.
Free booze for both days.
@TerryChia hmm, think I can get double reimbursement for flight tickets??
@AviD Dunno. :P
whoa, syscan is 5 days??
09:49
@AviD Nope, 2 days con. The other 3 days are training.
ahh
so thats not back to back, thats a week later!
But sycan wants fairly technical stuff though.
@AviD Right, yeah. :P
ohh love the sound of that whiskeycon!
heeey, "Finally, all speakers, except those from WhiskeyCon, will get to take part in the BEST SPEAKER CONTEST".
@AviD Think I mentioned that one in here before. :P
why not?? Im durnk , ned a taxy, but am gert shpeaker.
how much is 1000 SGD in real money?
09:54
@AviD Around 800USD I think?
ah, not bad. Not enough for airfare, but nice.
@AviD 45.91 Indian rupees.
@Polynomial lol
(that's actually 1SGD)
seriously, travel to/from israel is so ridiculously expensive.
09:55
UK is worse
they know we're an island and therefore have no choice but to fly
@Polynomial yeeahhh.... land travel is not really much of an option from Israel, either.
@Polynomial You should submit as well. :P
All your talks sound fun.
@TerryChia It'd cost me >£1000 in flights alone.
and the commuter boats here are not very developed.
lemme check sexpedia
09:57
@Polynomial so speak at both, get them both to cover it...
@AviD "both"?
@Polynomial BH and syscan
ah
which airport is closest?
@Polynomial I assume you mean over here? We only have the one airport. Changi Airport.
furrynuff
hmm, not as bad as I thought
total cost for flight + hotel is £850
10:00
@Polynomial Hotels are free for the con days though.
oh sweet
my flight would be just over 1550$. (US)
@AviD so same as me basically.
hmm, I might see if I can wrangle it.
and its much closer than you....
would be kinda cool to go to Singapore. only thing that puts me off is the heat + humidity.
10:02
ooo hey... wanna do a co-presentation??
I generally like things to be <15C
@AviD "Why IT Security StackExchange Is Awesome"
@Polynomial sounds about right
@Polynomial Hah! One of my friends is doing an overseas internship in Interpol right now. She keeps complaining about the weather in Lyon(France) and London.
@Polynomial Information Security Stackexchange*
@TerryChia heh. Sec.Se.
"Why We're Sec.SE"
WE'RE SEC.SE AND WE KNOW IT.
10:04
I'm too Sec.se for my site.
no, yours is better.
So Sec.SE it huuuuuurts...
@Polynomial Then you go on the stage and you play that song
@Adnan that'd be awesome
The crowd is cheering and panties are thrown at you
no no, we play the song as we come in from behind the audience.
10:05
I think I'd like to walk on stage to "I'm Too Sexy" though. that'd be awesome
@AviD Fuck, that's even more awesome
I'd have to skateboard down the isle in the middle of the crowd, wearing my long black leather coat, like The Plague from Hackers.
@Polynomial no, sec.se and we know it has a much better beat, it riles dem up.
@AviD gets dem 'ginies tinglin
@Polynomial hehe, excellent. Make mine a hoverboard and I'll join you.
10:06
(oh $deity what have we become?)
@Polynomial Sec.se.
we'd have to hire Michael Bolton for the day.
whats your favorite Michael Bolton song?
@AviD Jack Sparrow.
What have I started...
@Polynomial @AviD Kidding aside, would be awesome to see either one of you at syscan or blackhat.
Now, time to go home.
10:12
@TerryChia stop hitting on me.
BlackHat is unlikely for me
I can't watch that right now :P
summarise it!
@Polynomial you're living it....?
@Polynomial Michael Bolton.
I have no idea
I just know him from Lonely Island
10:16
@Polynomial PC Load Letter?
<CONFUSED>
Office Space.
never watched it
WHAT.
Take the rest of the day off, and watch it now.
I don't really like office sitcoms
10:18
You are forbidden from working in an office until you do.
The Office, as a case in point
30 Rock also
this is the movie that The Office was based on, just more classic.
sounds like I'll hate it then
no, its not like the office.
I also hate "embarassing situation" comedy.
10:19
it doesnt matter if you enjoy it or not, watch it anyway.
and from what I've heard, Office Space is full of it
@Polynomial yeah, me too.
@Polynomial little bit.
its a classic, you should watch it anyway.
meh
I've got a lot of stuff on my list to watch
all of Star Trek: Voyager is included in that.
and the final two series of Farscape, since the missus hasn't seen them
and now Office Space on the top of that list.
@AviD I might get to it in a year or so.
10:24
For shame.
10:34
@Yannis 13 is OK. 12 isn't. — Manishearth 2 hours ago
@Manishearth I know that wasn't your intention, but that's the creepiest response I've ever got on Stack Exchange. — Yannis 1 hour ago
10:47
can we close-flag this but be nice please?
0
Q: Web app security

HajarI've just started developing interest in web app security. The problem is that there are many things I have to know and I don't know where to start. Any advice please?

new person, new at web app security, I'd like them to stick around
Hi Hajar, welcome to Information Security. As @Polynomial said, this is a waaay huuuge question to answer, entire books can - and have been - written about portions of this question. I would suggest starting by wandering around appsec and web-applications here on this site, and OWASP is really the canonical place to start. — AviD 13 secs ago
@Polynomial I'm always nice. Good?
@AviD ooo, the [ security.se ] shortcut still says "Information Security". For shame.
oh, we renamed the site?
I never even noticed
@Polynomial hahaha, /cc @Gilles @Adnan ^
11:09
@AviD Ik spreek geen Nederlands
@AviD uh? that's what it should say
@Gilles d'oh! of course.
@Polynomial yes, the official name changed from IT security to information security
the unofficial name is still sec.se
and I continue to call it Security in public
@Gilles in context, security does make sense, and its shorter.
sometimes shorter is better.
11:12
yes, that's what I don't like about “information security”: a majority of the name is taken by “information”
@Gilles well, that's where context comes in.
@Gilles Yup, I only call it 'that security stackexchange site'
@Polynomial YOU LITTLE!!!!
Weeks of posts, messages, and angry comments, and you haven't noticed it?!
For those who might have not heard it yet
@Terry, @Poly, et al
11:33
@Adnan did you see the parody I posted here yesterday?
@AviD I usually have you on the ignore list, so no.
Link link link
11:51
So my router power brick is acting up ... it appears dead but if I leave it be for a fair deal of time and plug back in, then it works... you guys have any experience in what that could be? like maybe I could somehow make it work faster? I don't have on me any compatible power brick at the moment so maybe this one I have is still usable?

« first day (1036 days earlier)      last day (4142 days later) »