The DMZ

deed02392

16:00

@ScottPack I'm not sure he raped her

not in the version I watched anyway

Simon

@deed02392 wat

Scott Pack

Not in the movie, no. In the version of the story I read she woke up pregnant.

deed02392

wtf?!

Simon

@ScottPack What the fuck.

deed02392

surely that's not a disney take of it

Scott Pack

16:01

@Simon Those old stories were morality fear tactic stories to keep people in line.

Simon

@ScottPack Don't get raped?

Scott Pack

@Simon In the book of collected Grimm stories I have the Huntsman was instructed to get the heart and liver of Snow White. So when he slaughtered an animal to bring back parts claiming they were hers. The mom then cooked them up for dinner.

Yummy.

deed02392

oh you mean like the Bible @ScottPack

Simon

@ScottPack OM NOM NOM.

Scott Pack

@deed02392 Pretty much. That there is a pretty graphic story full of misdeeds and bad advice.

deed02392

16:07

heh

Scott Pack

If I offered to sell my wife for a shoe I would be in big trouble.

Or stoning her for wearing pants?

deed02392

that is specific

Scott Pack

Yeah, bad advice.

Simon

@ScottPack Seems like a clever thing to do to to me.

Scott Pack

@AviD I'm thinking חליצה‎. Is that right?

Simon

16:11

Hieroglyphs.

CodesInChaos

@ScottPack Exchanging a spouse for a shoe seems more likely the other way round. Since when are men interested in shoes?

@ScottPack RTL is evil

deed02392

sexism right there @CodesInChaos

Scott Pack

@CodesInChaos Well, yes. What I'm remembering is more along the lines of paying the fine of a shoe in order to not marry your brother's widow.

Simon

@deed02392 Big time, us men have the right to be into shoes too.

deed02392

ikr @Simon

kalina

16:13

bored

BORED

BoReD

b0r3d

Simon

nurd

kalina

.oO( zzzzz )

@Simon spread that love around like a fatal disease

Simon

"You can borrow my Rolling Stones t-shirt"

Very deep lyrics.

-.-

deed02392

@kalina it is very boring hearing how bored you are

Simon

^

kalina

16:14

my boredom is infectious

Simon

United Kingdom has a point.

kalina

before too long you'll all be so bored that you won't be able to continue with life

Simon

@kalina Won't happen, was too awesome for that.

kalina

nothing about you is awesome

Simon

Keep thinking that.

deed02392

16:15

i'm not bored, i'm busy

kalina

@Simon no, that would mean I'm spending time thinking about you, and you're just not worth that kind of attention

Simon

@kalina Alright. Anyway, you're right, I don't do drugs so I'm not awesome at all.

deed02392

is that what she said @Simon?

Simon

@deed02392 Nah ^_^

deed02392

did you listen to abgt050?

Adnan

16:17

I was just adding @Thomas on LinkedIn. It felt weird choosing "Friend" as the reason for the connection.

Simon

At least not that I know of.

@deed02392 wot

deed02392

so good! a&b have put all the sets up on mixcloud

above and beyond group therapy 050

mixcloud.com/aboveandbeyond/…

etc

oh you're not very trancey so you might not like all of it

Scott Pack

I do drugs all the time. I'm particularly partial to 1,3,7-Trimethyl-1H-purine-2,6(3H,7H)-dione.

Simon

@deed02392 Yeah, it's a bit slow for me.

@ScottPack Ok ok, nurd, what is it?

deed02392

I'm addicted to dihydrogen oxide

David Freitag

16:19

@Simon Caffeine

Simon

@DavidFreitag Thank you.

Scott Pack

@Simon bit.ly/17uHzs5

David Freitag

@deed02392 Dihydrogen Monoxide is a killer, man!

Adnan

@ScottPack For the first part of your sentence: Was your profile hacked by @Kalina?

deed02392

@DavidFreitag :D

Simon

16:20

@ScottPack Asshole.

deed02392

but I just can't get enough of it

lmgtfy is the most obnoxious thing on the internet

David Freitag

@deed02392 Just don't OD, that gets nasty right quick.

@deed02392 But it's simply amazing!

Scott Pack

@deed02392 Yeah?

deed02392

@DavidFreitag yeah sometimes I've consumed so much of it I can actually see it leaving in my breath

David Freitag

Especially when you have a chrome extension that automagically generates you links for lmgtfy.

Adnan

16:21

@RoryA @AviD Since the three of us have Security.SE on our LinkedIn, is it possible to create some sort of a "page" so people can click on it from the LinkedIn profile?

David Freitag

@deed02392 Woah, better watch out, that stuf'll get ya.

Google, sometimes i don't understand you. I have to pay to have extensions up on the market, and i can only have a maximum of 10. Doesn't that seem counterintuitive?

deed02392

odd @DavidFreitag

maybe you need to generate a number of sales before the limit is removed

David Freitag

Perhaps.

Scott Pack

@Adnan I'm surprised I don't have it on mine. It's on my resume.

David Freitag

Hehe, i love typos in code. private void CalibartionLoad()

I love them so much i want to torture the author to death.

Simon

16:25

@DavidFreitag Yeah, it should be String and return "Simon rocks";

Adnan

@ScottPack Well, go add it then.

David Freitag

@Simon public string toSimon() { return "Simon rocks!"; }

Scott Pack

I need to do a big cleanup on my profile.

Simon

@DavidFreitag That's way better.

Adnan

@AviD @RoryA @Scott Apparently, we cannot create a page on LinkedIn for Sec.SE. I'll see if "groups" can be listed under experience. If yes, I'll create a group.

Actually, I'm only doing this so we can have a link to Sec.SE and the logo.

David Freitag

16:27

@Simon Put a little easter egg in for anyone doing some dll injection

Simon

@DavidFreitag Rofl, did you really?

Scott Pack

I think groups only exist within the groups category.

David Freitag

@Simon No, but i thought about it a few times

Simon

@DavidFreitag Hehe.

deed02392

facebook.com/…

Simon

16:30

old

David Freitag

@deed02392 I would click that, but i don't want my computer to get herpes.

3

deed02392

HUMOUR KNOWS NO EXPIRATION DATE

David Freitag

@deed02392 After five reposts anything can become less funny.

Simon

^

deed02392

whatever first time i've seen it, god

Scott Pack

16:31

zomg guys! Check this out. facebook.com/…

deed02392

sue me for trying to share some lulz

David Freitag

@deed02392 =]

Simon

@ScottPack LOOOOOOOOOOOOOOOOOOOOOOL

@kalina A/S/L?

David Freitag

►

kalina

@Simon die

David Freitag

16:33

That is still funny, however.

Simon

@kalina No idea what D/I/E stands for.

But to avoid future confusions that it could cause, I suggest that you type it exactly like I did.

Scott Pack

It's German for The. As in "The Bart. The."

kalina

@Simon you're still confused, I said die, not d/i/e

David Freitag

@kalina You're the one trying to reason with @Simon...

Simon

@kalina I think you are confused because you just said the same thing twice again.

kalina

16:35

I'm not reasoning, I'm making a statement and then tabbing back to something else

tylerl

Good morning, Internets.

Scott Pack

Yar!

Simon

allo

kalina

@tylerl it's not morning

Simon

@kalina ta gueule

tylerl

16:36

@kalina Universal Greeting Time

Rory Alsop

itr's dark already @tylerl

Simon

it's past noon @tylerl

kalina

@tylerl UGT is irrelevant when the sun has already gone down.

Rory Alsop

@tylerl - actually, I like UGT. Hadn't seen it before - but it needs adding to the meta memes post on Canonical Time :-)

tylerl

@kalina Making it very nearly morning.

kalina

16:39

I completely missed the AM today

well, apart from those several hours before I went to sleep

Scott Pack

I should clean up from lunch.

Simon

Brag about it.

tylerl

I distinctly remember you being around well into the AM

David Freitag

Simon

PATRICK

Adnan

16:44

@ThomasPornin Someone, in this case, is wrong. Analyzing traffic at an exit point can potentially compromise Alice (the user) utilizing Tor to access Service C (in the clear web). Alice, who's trying to access Service H (hidden) doesn't need to know about the IP (introduction point) used to introduce Service H in the first place. IPs can be used to compromise Service H, but they can't compromise Alice. Totally different topics.

Ah! It's so difficult to write extended messages. Every time you correct a typo, the other person is pinged again. It's very annoying.

Thomas Pornin

@Adnan I mean that NSA-like people could target introduction points for service H (they are known) and usual entry points to make correlations and thus determine who accesses H.

David Freitag

ugh, the ladies in my office have the heat cranked up to 78F. I'm dying in here

Lucas Kauffman

@DavidFreitag IT'S GETTING HOT IN HERE SO TAKE OFF ALL YOUR CLOTHES

David Freitag

@LucasKauffman Meanwhile in America...

Simon

IT'S GETTING HOT IN HERE I WILL TAKE MY CLOTHES OFF

@DavidFreitag Pretty sure an American rapper sings this.

Isn't it Nelly?

Adnan

16:50

@ThomasPornin Sorry, still wrong. The introduction point can only be used to potentially lead to the actual address of Service H. It cannot be used to compromise people accessing Service H. (Of course, let's put aside cases where Service H is compromised and an exploit is planted in it which is executed in the visitor's browsers leading to the visitor's compromise).

Simon

@Adnan You're so Canadian.

You'd fit well here.

David Freitag

Let me pretend i know what an "American wrapper" is.

Simon

@DavidFreitag wot

David Freitag

@Simon 'xactly

Simon

@kalina gave you some crack or what?

Adnan

16:52

@Thomas Wait wait, I think there's a misunderstanding here on my part. All the time I'm assuming you're talking about the initial introduction point. You're correct, a service's introduction points can indeed be used to compromise its visitors.

Thomas Pornin

@Adnan Let there be light.

David Freitag

@Simon I'm on that Dihydrogen Monoxide stuff maaan.

Simon

@DavidFreitag You crazy.

David Freitag

@Simon Have you seen my gravatar?

Simon

@DavidFreitag Yes I have, it's awesome.

Adnan

16:56

@ThomasPornin BUT (a big one), those introduction points reside in the Tor network itself. Unlike exit nodes (which are on the edge) they're way more difficult to get your hands on. I think you're as likely to find Service H's real address as to find the introduction point's real address.

While with exit nodes, you can easily find them (well, by definition).

Thomas Pornin

@Adnan I would say that the biggest issue is that each hidden service has its own introduction points, so this monitoring does not scale up easily; you end up monitoring (or simply running) a lot of nodes.

In the scenario I envision, the spy agency is not interested in the real address of the service, but in the real addresses of the people who access the service.

Bah. There are only 4000-or-so relay nodes in Tor. Any decent information agency should have no trouble unravelling the whole thing.

If they are even half competent at the job, at least 1500 of these nodes are directly NSA-operated.

I mean, it seems so easy.

They could even "leak" some pseudo-slides claiming that Tor is a hard target in order to get people to use Tor. That's what I would do if I were the NSA.

Lucas Kauffman

@ThomasPornin they do have the capacity to do it

deed02392

17:18

Oh wow

I had thought that by default if you use Tor you become a relay node

4,000 relays is nothing

tylerl

@DavidFreitag No code misspelling is more epic than HTTP-REFERER, irreversibly carved in the single most popular protocol on the Internet.

2

deed02392

Ha! that truly is epic @tylerl

David Freitag

@tylerl Nice

tylerl

> Roy Fielding has remarked that neither "referrer" nor the misspelling "referer" were recognized by the standard Unix spell checker of the period.

fail

deed02392

sure, blame it on the tools

David Freitag

17:23

I wonder if google was around back then... It's not like he would have been able to google it, and short of getting a dictionary out... I don't blame him.

Then again the tool you are probably referring to isn't nearly as old as i think it is..

Thomas Pornin

@deed02392 This would be detrimental to anonymity, since relay nodes are supposed to be selected at random by other users -- which implies that they are known. Also, it would be hard for users who are behind a NAT (i.e. most people with a home router nowadays).

Xander

@DavidFreitag It could be argued that the HTTP specification necessarily pre-dates Google, given that Google is an HTTP-based service.

Thomas Pornin

@DavidFreitag Google is from 1998. Before that, people used other search engines, e.g. Altavista.

David Freitag

@Xander That's what i was thinking as i typed that message.

Simon

Some dude's name that I went to school with was Cimon and, of course, was pronounced Simon. Talk about a misspell.

David Freitag

17:26

@ThomasPornin Yeah, but from what i have heard they weren't nearly as good as Google.

deed02392

still @ThomasPornin, it's pretty concerning that the ratio of relays to users is so low

David Freitag

@Simon The parents of that poor soul should be tarred and feathered.

Simon

@DavidFreitag I agree.

Thomas Pornin

@DavidFreitag Circa 1995 they were rather good; they had indexed the complete Internet; it would use the overwhelming size of 40 gigabytes.

David Freitag

@Simon Then they should be disciplined for naming their child "Cimon"

@ThomasPornin Woah.

Scott Pack

17:27

@ThomasPornin Remember the good old days of gopher directories?

Simon

@DavidFreitag It seems that the thing of the parents of our generation and the last is to give an "original" name to their kid or spell it "originally".

tylerl

@ScottPack Actually have an "Internet address book" somewhere around here from the early 1990s

actual book

Xander

@ThomasPornin The complete Internet, or the complete World Wide Web?

Thomas Pornin

However Altavista failed to scale up with the Internet, the way Google did. One must say that Altavista was not a stand-alone commercial venture; it was funded by DEC (Digital) to demonstrate how DEC machine totally ruled.

Simon

@ThomasPornin I completed my DEC in May.

David Freitag

17:29

@Simon Yeah I agree. They should stop because their "original names" and "original spellings" are just fucking stupid.

Simon

@DavidFreitag Exactly!

Thomas Pornin

@Xander Mmh, I think that at one time they had a FTP search engine as well. But it fell into disuse.

tylerl

@ThomasPornin And by comparison, Google was run on this:

Xander

@tylerl I used to have one of those too. One of the few books I've actually gotten rid of as completely useless.

Simon

@tylerl 20k USD of computing power right there.

tylerl

17:30

If you look closely, you'll notice those are SCSI disks. Spared no expense, they did

Thomas Pornin

@tylerl Well, DEC ran into its own troubles. Awesome machines, but really expensive. The commercial strategy was braindead.

Scott Pack

@tylerl Those displays are black and white. noobs.

The Alpha platform is also rather toasty.

Simon

@ThomasPornin No, it was quite easy to complete.

Thomas Pornin

@ScottPack I must say that even two decades later, the accumulated time has failed to veil my memories enough to make me think of these "old days" as "good".

@ScottPack From 1999 to 2001 I had an Alpha as main desktop machine.

Pretty slick. PC owners were boasting about 200 MHz CPU, I had 500 MHz (and 64-bit registers).

Simon

Hey @ScottPack, in 1999 I was 8.

Scott Pack

17:33

@ThomasPornin Perhaps my use of the word "good" was not sufficiently sarcasic.

deed02392

me too @Simon

high five

Simon

Internet five.

deed02392

same birth-year friends

i feel so close to you right now

Simon

91 was one hell of a year.

Scott Pack

@ThomasPornin Understood. From 1985 until 1994 my primary desktop system was an Amiga 1000. I may have only had a 7Mhz processor but I loved my 3d graphics, multitasking, and dedicated video/audio chips.

deed02392

17:34

mmhmm

Thomas Pornin

@Simon No. 1990 was much better for Chinon and Côtes de Beaune.

Simon

goes to Wiki

Oh, wine.

Silly me.

deed02392

it was French @Simon, there was a 99.999% chance it was about wine

LOL, I instinctively capitalised Wine at first, I'm such a nerd

Thomas Pornin

@deed02392 Hey, don't be so prejudiced. It could also have been cheese.

Simon

@deed02392 Yeah, it was silly of me to not think about it.

@ThomasPornin Are baguettes still a thing?

deed02392

17:36

isn't Côtes de Beaune French for we surrender?

Simon

@deed02392 I can confirm that it does mean that.

Thomas Pornin

@Simon Of course. It's bread.

deed02392

lol @Simon

right I'm off home

can someone please remember my new desk extension number is 5246

Simon

bai

deed02392

kthxbai

David Freitag

17:39

@deed02392 Hey, your new desk extension number is 5386

deed02392

it's easy cos 5 is my favourite number and 2, 4, 6, well they're the first three even numbers int they

tylerl

@deed02392 the Internet will never forget

deed02392

@DavidFreitag lol dammit

pussy's backup with archive tape

real men backup by putting their shiz online

who wants a torrent for the contents of my C: drive

tylerl

@deed02392 you couldn't pay me to look at that

Simon

^

Unless it's a ton of money.

tylerl

17:40

@deed02392 the FBI

Simon

Alright, 10$.

David Freitag

@deed02392 Sure, got any tax info on there? Or credit card datas?

So I'm eating beef stew with a fork. It's not quite working out.

Scott Pack

I dunno. Fork and bread should be more than sufficient.

If not you're talking about soup.

Simon

SOUP

David Freitag

It's on the brothy side.

But it's more meat potatoes and carrots than broth

Thomas Pornin

17:43

@deed02392 It is the code for the RFC on TLS 1.2

Simon

@ScottPack Did you find your Halloween costume yet?

David Freitag

@Simon Yeah, he just has to skin you to get it

Simon

@DavidFreitag Hey, it's my own costume.

David Freitag

@Simon It puts the lotion on else it gets the hose again

Simon

o

Scott Pack

17:50

That's a creepy movie.

David Freitag

@ScottPack Not nearly as creepy as A Clockwork Orange.

Simon

@DavidFreitag That movie is indeed quite something.

Scott Pack

@DavidFreitag I'm confused by that movie.

David Freitag

@Simon I remember the first time i saw it. I was like "What the hell did i just watch"

Then i saw it a few more times, and i find myself wondering the exact same thine each time.

Simon

It came out in 1971, quite amazing.

Its weirdness made it survive through a few decades.

tylerl

17:57

@DavidFreitag My cousin is dressing up as Alex from that movie for halloween.

creepiest costume ever.

David Freitag

@tylerl Definately up there.

I think I'm going to whip up some flammables and entertain the neighborhood kids this year.

tylerl

She (yes she) pulls it off quite well

David Freitag

Last year i rigged my potato cannon to fire candy at a low velocity with my compressor.

Scott Pack

Lucas Kauffman

18:19

evening gents

Simon

afternoon lad

Simon

18:38

bb @kalina uder?

Lucas Kauffman

@Simon don't sum Chtulu

Simon

soz

She's gonna eat us all, run!

David Freitag

@Simon Be not afraid of the beast.

Simon

@DavidFreitag I have not been trained to fight a such monster.

I am not ready.

David Freitag

Then now is the best time to learn

What's the worst that could happen? You get eaten? You'll make it back out eventually.

Simon

18:42

I should be fine as long as she swallows.

AviD

@tylerl I had one of those too. I think I threw it out last time I moved house.

Simon

Oops, @AviD is here.

I thought it was gonna be a perfect crime.

AviD

18:58

@ScottPack not... quite.

Rory McCune

Evenin' all

Simon

Jeeze, these Europeans don't understand how time works.

Afternoon!

AviD

@ScottPack see here:

Halizah

Under the Biblical system of levirate marriage known as Yibbum, Halizah (or Chalitzah ; ) is the ceremony by which a widow and her husband's brother could avoid the duty to marry after the husband's death. The ceremony involves the taking off of a brother-in-law's shoe by the widow of a brother who has died childless, through which ceremony he is released from the obligation of marrying her, and she becomes free to marry whomever she desires (). Only one brother-in-law need perform the ceremony. The old custom of the levirate marriage () is thus modified in the Deuteronomic code attrib...

Rory McCune

@Simon hush now colonist

Transcript for