« first day (203 days earlier)      last day (4975 days later) » 

00:00
its not like you know what site you're on, the moment you see it.
know what I mean?
...which is why it's spelled out in the banner?
yeah, but theres no "security feel" to it. (other than the badge shields).
@AviD How would you suggest resolving that, without making it too overstated?
like, webapps is all cloudy... gaming looks like a game; ubuntu looks like the ubuntu desktop; math looks all mathy... even cooking looks kitcheny...
@Iszi uhhhh.... dunno? :$
I just now almost suggested go for a BackTrack-like theme. But that's way too dark.
Come to think, most black-hat sites are pretty dark-themed aren't they?
00:04
@Iszi ayup, methinks...
glad we avoided that.
and most Q&A sites?
@Iszi but, you understand what I was talking about?
@AviD I think so.
well, then I've said my piece. I'm sure it will be aesthetic, and as long as it doesnt hurt my eyes (those black sites do), I'll be happy.
Hmmm... LCARS? That'll take care of anyone's orange cravings.
00:10
hmm.... maybe I'll use the winged bear for my own logo....
oo, a winged bear holding a shield!
on a wall!
no, a tower!
fighting a dragon!
with frikkin' laser beams!!
Erm.... Laser beams on the bear or the dragon?
lmao, oh man, @Jin you should totally give security.se lasers in the design and see how long it takes someone from gaming to complain q:
@Iszi on the sharks!! stay with us, man!
@RebeccaChernoff LOL!!!
@Iszi there ya go! :D
heehee, still makes me larf...
00:18
Okay, WTF Netflix? You've got Goldmember, but you don't have 1 or 2?
"sharks with frikin lasers attached to their heads!"
(Streaming)
"what DO we have?"
"Sea bass."
"Riiiiiight...."
Ah, but they're ill-tempered.
yeah, its a start... :D
 
2 hours later…
02:42
@AviD The flanking maneuvers in the logo are where white meets black.
And you seem to have totally missed the cat\\\lion-and-mouse reference :)
 
1 hour later…
03:48
The problem with having an obviously "Information Security"-ish theme of the site is freaking defining what immediately brings to mind "Information Security".
Until last spring, at my organization, it would be a picture of a conference room with a string of guys that are dressed slightly better than the average IT schlub, each giving you a slightly condescendingly bemused look from behind their MacBooks.
Now we do that from behind an assortment of Dells and Lenovos.
Yes! Exactly like that! Only without ties, and nerdier.
Jin
Jin
04:03
speaking of apple fanboys.. have you guys seen cupidtino.com
^ not a parody site...
0_o
I don't really know how to respond.
Jin
Jin
@ScottPack as an apple fanboy myself, i don't even know how to respond... i feel ashamed.
Because people were so reticent to mock Apple users to begin with....
 
3 hours later…
07:40
@AviD - "how bout... umm... a winged bear?" Hahahahahahaha!
Or pacman?
XD
Jin
Jin
08:00
you guys don't sleep
sleep? Pah! :-)
(nah - I'm just in Scotland, so a few hours ahead of most folks on here)
@Jin - looks like the lion/shield/tron motif is a winner! Maybe minor tweaks needed, but excellent work!
Definitely think either the WOPR computer screen from Wargames or a Matrix screen would be a good one for the Captcha
Jin
Jin
@RoryAlsop yeah those are great suggestions for captcha.
the Tron robot is my fav.. i'm not sure if i can use it due to copyrights reasons..
but it looks like no-one wants orange dragons with frikkin lasers :-)
Jin
Jin
maybe i'll slap on some "this image belong blah blah studio" type of msg
@Jin - yeah, copyright is likely to be an issue...
Jin
Jin
08:09
oh i should totally use some screenshots from Swordfish
because all IT security pros love that movie right?
heh - Halle Berry and TVR's - can't beat it
Jin
Jin
that's got be one of the worst "techie" movies ever made
so realistic
that's how we all hack, ya know
Sneakers was on TV again the other night - was refreshing
At Defcon, Swordfish is usually on the film list after Matrix, Hackers, Sneakers, Wargames...
(but probably only for Halle and the TVR:-)
Jin
Jin
it's more of a DIY MST3K type of movie..
08:45
@Avid, @Scott, @nealmcb, @MvY etc - have now scheduled the first few blog posts. It's all changeable as needs, but I have the WhiteHat Rally one set for the 20th and the Security/Business communications one for 3rd August - so a fortnightly schedule just now.
right
@Mvy - once you are happy with your one we can review and pop it in for an earlier slot if you like. The scheduler is nice and simple and will just pop them out as needed
If we get a lot of contributions we could always go with weekly (and tbh it doesn't really have to be regular) but just taking it easy at the start
Yes and see if contributors can follow the pace
09:04
We need a plugin to put StackExchange editor instead of WordPress one :P
@Mvy heh - the blog is very separate from SE at the moment, so it is a standalone WP, and from that perspective not going to handle the SE editor.
@RebeccaChernoff is it likely to be integrated at some point in the future?
Well :D was just some random thoughts. I begin to get used to SE editor :D
 
2 hours later…
11:29
Mmm...Halley Berry
11:42
Did you ever get that email, @RoryAlsop?
12:27
@ScottPack no - no sign of it...
12:42
chat to get folks talking and possibly contributing
in addition to the blog posts we are building
13:04
For the QotW do we want to focus on questions from that week, or any question on the site that we want to highlight?
/me can't be bothered to read the SU link
pretty much any that you think are worthwhile highlighting for further discussion etc
13:35
RE: "Question of the Week" - Does anyone have a search query written, that will find questions submitted in the past week which have a high upwards vote velocity? Ideally, I think the search should also be limited to questions with at least one answer with a score of 2 or higher.
@Iszi That seems like the kind of query that could be written. We'll have to wait a couple of months to do that, though.
Beta sites don't show up in the data feed
@ScottPack D'oh!
Seems like a good starting point though, to find QotWs?
How do, @jcolebrand
although the intent seems to be to have people find ones, and potentially volunteer to blog, so they need to be interested, the question (or the answers) must be good and it must have wider scope for discussion
which may make searching for ones with high comment numbers useful...?
@RoryAlsop Not sure how I feel about that. Generally, I think "questions with high comment numbers" should be discouraged on SE.
13:40
@Iszi they definitely are, and in fact the software suggests moving to chat above a certain size:-)
Yeah, my gut feel is that a large number of comments tends to indicate a failure on somebody's part.
but if people are chatting, we could use that as a blog post to hook interest
@RoryAlsop Saw that in one of my post on sec
or U&L
@ScottPack Well sometimes : OP stands for hOPeless
I think Naughty by Nature wrote a song about that
??
13:42
"O.P.P." is a 1991 song recorded by rap group Naughty by Nature. The song made it to the U.S. Top Ten (peaking at #6), propelling their self titled album Naughty by Nature to platinum status. The song's declaration "Down Wit' OPP" was a popular catchphrase in the U.S. in the early-'90s. Its beat is sampled from Melvin Bliss' "Synthetic Substitution", with instrumentation samples from Jackson 5's "ABC" in which Alphonzo Mizell, Freddie Perren, Deke Richards, and Berry Gordy Jr. got a writing credit for the song. It was a hugely successful single, as Allmusic described "There was not a big...
And it relates to my comment?
@ScottPack it do, normally.
I mostly lurk in here
@Mvy - hopefully it doesn't.
I remember that song being a tad scurrilous
Yeah, it doesn't really. I was attempting pop culture
@jcolebrand Hi there
13:44
XD
@ScottPack bein' down wit'da kids
Well done @Rory. You earned my star by using the phrase "tad scurrilous".
@RoryAlsop By referencing songs that were recorded before they were born :)
@ScottPack Here's pop culture for you.
Well done sir.
@ScottPack That's the way - did I tell you half our fans are baffled by the fact we are supporting Nazareth in September:
| Years_active = 1968–present | Label = Mooncrest, NEMS, Eagle | Associated_acts = | URL = [http://www.nazarethdirect.co.uk/ Official website] | Current_members = Dan McCaffertyPete AgnewLee AgnewJimmy Murrison | Past_members = Darrell SweetManny CharltonZal CleminsonJimmy MurrisonRonnie LeahyBilly RankinJohn Locke }} Nazareth are a Scottish hard rock band that had several hits in the UK in the early 1970s, and established an international audience with their 1975 album Hair of the Dog. Perhaps their best-known hit single was a cover of ...
and KMFDM in November
KMFDM (originally Kein Mehrheit Für Die Mitleid) is an industrial band led by German multi-instrumentalist Sascha Konietzko, who founded the group in 1984 as a performance art project. KMFDM has released seventeen studio albums, and had sold approximately 2 million records in the United States alone as of September 2003, with multiple albums selling more than 100,000 copies, and a number of singles becoming club hits. The band has undergone many line-up changes, including countless guest appearances by other musicians. The earliest incarnation of the band included German drummer En E...
13:46
So, I'm having a bit of a discussion with somebody. It all started out because he refuses to use sign up with Google+ because they're forcing name and gender to be a public part of your Profile. Yet, at the same time, he is a heavy Facebook user and refuses to stop using it.
How's that for a wide range...we is def down wit da kids
Am I off base in seeing a bit of cognitive dissonance there?
@ScottPack And there's folks like me trying to become part of G+ and generally hating Fb
I've never even heard of those bands
(not because of its poor privacy record - just a horrible app)
Nazareth - Scotland's biggest rock band ever. Been touring since 1968 I think
KMFDM - German Industrial band. Touring for 20 years
13:47
Yep Facebook is an horrible band ... eeehh wait?
:D
@Mvy multiple chat streams FTW
I need to try that
as well as multiple video :D
@RoryAlsop While I have no doubts google will mine the shit out of my information, I do feel more comfortable with their privacy policies than Facebook.
@ScottPack According to The Suppository of All Knowledge, "Cognitive dissonance is an uncomfortable feeling caused by holding conflicting ideas simultaneously." thereby only the one holding the "conflicting ideas" can attest to it.
@Iszi Too shay, my friend.
13:49
heh - much too shay
@RoryAlsop I'm with you there, and mildly pissed that Google still isn't providing Profiles to Apps users.
Well that surprised me a little @Iszi
@Iszi I find it a little odd that App users are so far behind on pretty much all new features.
@Mvy Supposedly, it's because they want to make sure the feature has fully matured before providing it to business customers.
Maybe they are waiting for more debugging?
Or apps user are not the target?
13:52
@Mvy I say to hell with that. Provide it as optional and let us decide.
but that would be unfair
I have an apps account and a normal user account - and haven't managed to get signed up under either
I just get the Already invited? We've temporarily exceeded our capacity. Please try again soon. error
I read that it was open now @RoryAlsop
oh
@RoryAlsop Same, but I'm trying to migrate most of my personal identity (and what little social network identity I have) to the Apps account.
Therefore, that's the one I want to use for G+.
I have an apps account, but I still use my normal account for all personal identify.
13:54
ahh - I'm sort of keeping mine separate, so at some point one will be just for Metaltech and the other will be Infosec
I have invite/link emails from a range of folks, but none get me past the exceed capacity page
eeek
14:14
@RoryAlsop A wholly new word for me: "japes".
@RoryAlsop Same for me.
@nealmcb And education in British slang continues :-)
@RoryAlsop Indeed. And I never heard of a banking, nor knew that I could sit on one!
banked curves - Brooklands had an amazing track with banked corners that must have been 40 feet high
I can't access youtube here, but there is some lovely footage of Stirling Moss hooning around Brooklands
hooning? Ĉu vi parolas Esperanton?
@nealmcb ...TF is that? Esperanto?
14:22
heh - Aussie/Kiwi actually:
Hoon is a derogatory term used in Australia and New Zealand, to refer to a young person who engages in loutish, anti-social behaviour. In particular, it is used to refer to one who drives a car or boat in a manner which is anti-social by the standards of contemporary society, that is, fast, noisily and/or dangerously. In New Zealand, the term "boy racer" is also widely used. Another slang term, revhead — derived from "rev", an alternate term for RPM — is sometimes used in place of hoon. However, "revhead" can refer to any car enthusiast, while hoon is always pejorative. "Ant...
@Iszi Jes - certe!
Bah. Esperanto not available on Google Translate.
15:00
@Iszi Heh. Hopefully eventually it will be. There are about 50 languages on Google Translate. Esperanto has the 25th largest wikipedia site.
 
1 hour later…
16:02
RE: QotW - Is it "Question of the Week" in the sense that it's a choice question that was submitted this week, or is it in the sense that it's an interesting question we've decided to feature this week?
Hello everybody
@ThomasPornin Hiyo
16:37
Hey @ThomasPornin. Welcome back
@Iszi @Rory and I talked about it a bit this morning.
3 hours ago, by Rory Alsop
pretty much any that you think are worthwhile highlighting for further discussion etc
 
1 hour later…
17:46
@ScottPack (and @RoryAlsop) is your friend UK-based? If so he/she has bigger privacy issues, like 192.com which is helpfully publishing his/her location and any other information it can get from the electoral roll. You can get access to full information by paying to join the service, but it's amazing what you can work out with just someone's name
17:59
@Ninefingers That's a negative. We're both US local.
Well, the referenced fellow and myself. Gramps over there is English or something.
Ah ok, he's in the clear then
I've got a blog post in the works too
It could do with some improvements, I'll edit it a bit tomorrow I think
 
2 hours later…
19:38
@Ninefingers Cool - I was just thinking that we needed to come up with a nice comprehensive story on this question of storing secrets in software
I'm just reading the draft now, but I'm struck by references to "The Nasty Security People". I'd suggest something like "whoever has physical access".
19:52
@nealmcb I think I borrowed that phrase from a blog post somewhere... but yes, I intend to change it, I think it should be "the user", because that's usually the goal
I saw it asked again today and there have been plenty of questions on SO essentially asking the same thing, so it felt like something that ought to be written down
That's good. I'm thinking though that it would be good to take a more neutral stance and point out that some systems are indeed trying to make this kind of app easier to write (especially in the mobile space) and so such things will become easier. See e.g. this post about preventing root access on android: http://groups.google.com/group/android-security-discuss/browse_thread/thread/835a5c3826cf7ffc?fwc=1#msg_3f88d56c7bfe4627
:One of the key principles of security, IMHO, is "consent". A system can only be considered secure if all parties involved consent to interact with each other.:
reference to TPMs would also fill it out a bit
E.g. I'm beginning to see the value of a device on which I can store secrets that a thief couldn't find....
BUt I gotta run now.... Lots more to discuss I"m sure....
@nealmcb That's probably a good idea. I've focused quite strongly on secrets in PC-like systems, but mobile phone-based systems do present an interesting case
especially since it is much harder to alter the hardware
I'll work it in; we've got a few posts queued I see
20:22
Well should I start meta post? I'm just trying to type "security.se" in browser bar :S
oh nvm the domain is already registered :D
20:46
Jeez, @Iszi. You really want to keep the kid from using your laptop don't you?
??
cause of the question ?
0
Q: Three-Factor Authentication for Windows

IsziThis HowToGeek article... http://www.howtogeek.com/67556/how-to-unlock-your-pc-by-being-nearby-with-a-bluetooth-phone/ ...got me thinking. Is there any software (or combination of software) that allows three-factor authentication for a Windows box? I'm thinking of something that would work we...

Has anyone here dealt much with PhoneFactor?
PhoneFactor?
well never used that
I saw once a how to config linux to use Google 2-ways authentication
21:01
@ScottPack Not PhoneFactor per se, but similar systems, are problematic, at least for me. Basically, they do not work well across country boundaries.
@ThomasPornin Based on the number of countries from which they can call, it seems like these guys may actually do that part well.
 
1 hour later…
22:14
@RoryAlsop, can you post a screenshot of the blog title dropping over the first line of text? Having problems reproducing.
22:27
@ScottPack Kid, wife, Mallory... take your pick. I think it's really more for the geek cred than anything else, though.
PhoneFactor isn't quite what I was looking at.
22:55
I wasn't recommending PhoneFactor as an option, it's really just a token-less 2nd factor.
I was, however, fighting with it this afternoon :)

« first day (203 days earlier)      last day (4975 days later) »