The DMZ

TildalWave

00:03

Lucas Kauffman

06:16

morning

Terry Chia

@LucasKauffman morning

Lucas Kauffman

@TerryChia what's up?

Terry Chia

@LucasKauffman Format string vulnerabilities

AviD

07:49

@TerryChia oh, those are fun. It always surprises experienced programmers, even though it is painfully obvious in hindsight.

AviD

08:02

Oof. Is it suddenly June 14 for diarrhetic cows? I just handled a buttload of crap flags.

kalina

08:25

morning

Rоry McCune

correct

AviD

@RоryMcCune heh, that reminds me of the classic "Cigarette? Yes it is" from Naked Gun series...

AviD

09:23

okay people, just a reminder - "Flag as Not an Answer" should be used when an answer does not address the question in any way, shape, or form. It is NOT intended to be used for wrong, incomplete, or just plain crap answers.

Rоry McCune

09:39

►

(potentially NSFW if you have a prudish work)

Adnan

09:51

English speakers, some input on the following topic is needed, please.
Regarding "quite" in "quite good". Does it make the subject sound less good or more good? What about "pretty good"?

A couple of weeks ago I was answering someone "Oh no, not at all. In fact, sex with you is pretty good". Today I discovered that she was hurt about it and she thought I meant less than good. What I meant actually was "it's more than good".

kalina

why does this not surprise me that it was sex that got you into this issue

if you meant "more than good", there are much better words to use

Rоry McCune

@Adnan hmm I'd say that pretty or quite could be seen as not quite as good as an unqualified good. I'd recommend "great", "awesome", "mind-blowing", "spectacular" or "wooooooooooooo" as options to express more than good :)

kalina

^

the fact you had to qualify it with an additional word would lead me to believe "less than good" as well

whatever word you put in front of good can be interpreted as "kinda"

Adnan

@RоryMcCune Well, that makes sense.

@kalina The issue here is that neither I or the other person are native English speakers.

but thanks for the clarification.

AviD

@RоryMcCune I would think "woooooooooo" would have the best effect.

Adnan

09:56

I'll cease using "quite" and "pretty" with "good".

kalina

@Adnan and as such, use more extreme words that will reduce the chance for misunderstanding

if you mean sex with her is awesome and you want more

AviD

@Adnan "quite" and "pretty" are subject to cultural affect. For example, you won't often hear (normal) Americans describe something as "quite good", but that is typical for an Englishman.

kalina

say that

don't just say "mmmh, well, it's ok"

(which is what "pretty good" actually means)

Adnan

@kalina Oh, Jesus. That's not of what I meant, I thought it was more than awesome. I just didn't want to see "it's mindblowing"

AviD

or you could say, "Weeeelll, it was 'okay', if by okay you mean MIND BLOWINGLY AWESOME WOOOOOOOO"

kalina

09:59

@Adnan just putting it into context for you, is all

obviously you were trying to not sound overly enthusiastic or playing hard to read

AviD

@kalina isn't it cute how @Adnan keeps bringing up innocent conversations to off-handedly let us know how much cachina he's been getting?

Usually when you're around.

Terry Chia

@Adnan This reminds me of that one TBBT episode.

kalina

@AviD yes

@AviD also yes

AviD

He's not just showing off, he's trying to impress you.

Rоry McCune

@AviD that's a new term for it

kalina

10:00

@AviD well, he failed by telling some other girl she was "ok" when he really meant to be dribbling and begging for more

AviD

@RоryMcCune is it? You dont hang around with many latinos then. Racist.

Adnan

@kalina The first one, yes.

@AviD But but.. it's actually an issue. "Pretty good" translates to Finnish close to something like "almost good, but not good"

AviD

@kalina ah, but that was his off-handed way to show you how awesome he is at it. Even when his brain messes things up, the womens keeps coming back for more.

Rоry McCune

@AviD Lol, not racist, just for some reason we don't many latinos in the west of scotland, can't think why (might be something to do with the 5 dry days in the last 3 months....)

AviD

@RоryMcCune 5 days?? wow, thats some kind of record!

Rоry McCune

10:02

@AviD you say that as a joke but December here was the wettest month on record for scotland.... wettest for ... scotland... means a lot of rain!

AviD

@Adnan see, there's your mistake. Most women enjoy when you are overly enthusiastic. Well, after the fact, not before.

@RоryMcCune OWASP q - you ever add an event to the owasp event calendar?

Adnan

@AviD Really? Impress her? With my poor grammar?

kalina

it's ok @Adnan, not I don't want to ruin the potential fun in the future, but nobody is going to truly impress me in any lasting capacity over the internet

Adnan

Ahhh.. @AviD, see what you've done?

AviD

@Adnan reminds me of that line in Boston Legal...

> I am so good in bed, I've had women repulsed by my personality, still jump on me every chance they get. I'm that good.

kalina

10:05

@AviD as long as they don't spend the rest of the day repeating it over and over again

Adnan

Now she actually thinks there's a slight chance under the sun that impressing her will ever cross my mind

@AviD Sounds very interesting. Any idea which character said it?

Rоry McCune

@AviD I have in the past loong time ago but not recently...

AviD

@Adnan Jeffrey Coho.

Adnan

@AviD Waaaait a second. Are you implying that my personality is repulsive? Oh! The audacity!

Terry Chia

@Adnan He didn't imply it. He stated it outright.

AviD

10:10

@Adnan no, I'm stating that you are implying that, just to upsell the upside of upswinging.

Adnan

@TerryChia Honestly, I thought @AviD would use that line

AviD

yeah, people tend to misuse "imply" don't they?

Terry Chia

@AviD Not enough "up" in your last sentence.

AviD

@TerryChia let me update you, that I had to create a new term there to get it to fit.

kalina

upOverflow

Adnan

10:24

Okay, thanks, guys. The situation is now fixed and explained it was a simple grammar mistake on my side. Everything is back to normal.

I'll follow @kalina's advice and avoid using potentially confusing words.

ManishEarth

@Adnan "normal"?

AviD

@Adnan s/potentially confusing//

Adnan

@AviD I like that space in your regex.

Today I learned: Putting space in a regex is completely valid.

kiBytes

What does cachina mean? (btw I am Spanish)

Adnan

@kiBytes It's probably how they euphemize "ass" in Hebrew.

Rоry McCune

10:35

@Adnan @AviD @kiBytes sounds like Avi's been caught making up words here... he told me it was a latino word....

AviD

@RоryMcCune actually, no I didn't. I just called you a racist. ;-)

Rоry McCune

@AviD for not knowing a latino word.... that you made up!

AviD

@RоryMcCune no, for refusing to hang out with latinos!

Rоry McCune

@AviD when did I say that?

AviD

36 mins ago, by AviD

@RоryMcCune is it? You dont hang around with many latinos then. Racist.

Rоry McCune

10:37

@AviD that was you that said that .. not me

AviD

@kiBytes It's a mistyping of chicina? chichana? I don't know, I don't know spanish.

well, mexican, either.

Rоry McCune

busted

AviD

@RоryMcCune OH COME ON! just take the hit.

Rоry McCune

@AviD nope I was happy to accept the burn if it was a word I didn't know through lack of racial diversity in scotland

but now it turns up it's you making up rude words to attribute to other cultures

AviD

@RоryMcCune hey, it sounded right, okay?

Rоry McCune

10:39

... you racist you ... :op

AviD

hehehe

kiBytes

mmmm maybe you mean "chochito"

AviD

chicita

kiBytes

which is the "slang" word for "vagina"

AviD

meh, all them foreign words all look the same.

But hey! Some of my favorite words are Spanish!

kiBytes

10:42

@AviD maybe that is latin-american slang

AviD

@kiBytes of course. Probably Mexican, specifically.

Adnan

@kiBytes Hehehehe.. I actually learned that one last month.

It sounds very funny.

@AviD What's slang for "vagina" where you live?

AviD

I am so not going to answer that.

kiBytes

ch should sound like "ch" in "choose", both "o" should sound like the o in "pot" and the t should sound like the "t" in "to".

Adnan

@AviD Oh come on. Is it kuskus?

AviD

10:51

@Adnan .... yes, yes it is.

Adnan

@AviD Come on, really?

AviD

Couscous

Couscous ( or ) (Berber: ⵙⴽⵙⵓ, seksu) is a traditional Berber dish of semolina (granules of durum wheat) which is cooked by steaming. It is traditionally served with a meat or vegetable stew spooned over it. Couscous is a staple food throughout the North African cuisines of Morocco, Algeria, Tunisia, Mauritania and Libya. Couscous served with fish is also a staple food in Western Sicily, and is featured as a traditional food product officially recognized by the Italian Ministry of Agricultural, Food and Forestry Policies. Couscous was voted as the third favourite dish of French people...

Adnan

@AviD Oh, okay. So it's not.

@kiBytes When I say it like you describe it, it sounds so cute

I should start using it with the exchange students we get from Spain. I'm sure I'll make a lot of female friends.

ManishEarth

11:08

So I'm on a SOCKS proxy (I rapidly hop between tunnels and the insti proxy and the insti captive portal) and I'm testing some server side code on my localhost. But the file isn't showing in the browser. I spend 15 minutes playing with permissions, and then I realize that I forgot to turn the SOCKS proxy off and was in fact looking at the localhost of the webserver I was tunneling through. Whoops

Adnan

@ManishEarth Chrome?

ManishEarth

yeah

FF doesn't DNS SOCKS

AviD

Some cool beliefs to try out for yourself: "The best technologies bubble to the top!" "PHP is good technology because it's popular!"

Tweeted by garybernhardt on January 19, 2014 at 4:06 PM

Adnan

@ManishEarth This has nothing to do with that. Firefox excludes localhost and 127.0.0.1 from proxies by default.

ManishEarth

that too

but FF doesn't let you access internal network sites if you're SOCKSing in, Chrome does

Adnan

11:17

@ManishEarth about:config then network.proxy.socks_remote_dns = true

Well, I guess you already knew that one.

ManishEarth

@Adnan Yeah, I know

Adnan

@Manish Oh, here's a funny one bugzilla.mozilla.org/show_bug.cgi?id=134105

Reported in 2002. Still reproducible in 2014

ManishEarth

bugzilla.mozilla.org/show_bug.cgi?id=610896

I think I'll fix this bug and expose the pref

Adnan

@ManishEarth Make it an option. Do NOT enable it by default when a SOCKS proxy is filled.

ManishEarth

okey

@Adnan Leave a comment there explaining why it should not be default

Adnan

11:22

@ManishEarth but that's so nice of you, actually. Thanks for your contribution.

@ManishEarth bugzilla.mozilla.org/show_bug.cgi?id=610896#c3

deed02392

You guys still using FF?

ManishEarth

Your name is Malcolm Smith? :p

I was hoping for a classic @Adnan "You suck and your security sucks and the whole world sucks and php sucks in particular" comment

Adnan

> SOCKS4 proxies can't do remote dns resolution even if socks_remote_dns is true

ManishEarth

pah

but FF has an option to choose between socks4 and 5

Adnan

@deed02392 As a secondary browser, yes.

ManishEarth

11:24

I contribute to FF but don't use it much. I use chrome but don't contribute to it

If I break something, not my problem :p

deed02392

I've gone so far as to support an issue in Chromium

Doubt I'd invest the time into submitting a patch though

wouldn't have any confidence they'd get around to implementing it before months/years

Rоry McCune

@deed02392 yep switched back from Chrome for two reasons. One Chrome doesn't seem to play nicely with high-DPI displays in windows and two I'm trying to reduce the amount of tracking that Google can do on me

deed02392

Haha good luck with that @Rоry

Rоry McCune

frankly googles tracking and obsession with Google + is getting creepy

deed02392

I know

so damn convenient though

Rоry McCune

11:27

@deed02392 can't get rid of it but FF does less than chrome (e.g. none of this synching nonsense)

deed02392

GCHQ probably knows more though

Rоry McCune

@deed02392 that's how they suck you in...

deed02392

after all, they wiretapped them

Rоry McCune

oh and the much vaunted feature google now on android, how is that not just super creepy "hey you should leave for your appointment by x" so you're tracking my location where I'm going and how I get there... nice

deed02392

even more convenient, even more creepy

like many things in life, just another trade-off decision to make

2

ManishEarth

11:31

@deed02392 getting FF patches into nightlies is easy after you fix the nits and all. getting FF patches into stables takes longer, but not too long

Adnan

@deed02392 +1

deed02392

@ManishEarth there would be several ways to fix the problem I've got with Chrome, I just don't want to spend the time working on it if I can't guarantee it'll get used

I don't want to have to run my own dev build

to actually take advantage of the work I did

ManishEarth

yeah

time to clobber my ff build, yay

(because I made some changes that I don't have on mq locally anymore, and I have to build on top of them otherwise the patch won't work)

AviD

@RоryMcCune I actually like that.

Rоry McCune

@AviD sure as long as you're comfortable with the implied level of data access that google has to pull it off....

AviD

11:43

@RоryMcCune sure. Calendar, location, traffic. They know these things anyway, at least they give you something useful for it. Finally.

Rory Alsop

morning all (and afternoon @AviD)

Rоry McCune

@RoryAlsop awight

Rory Alsop

12:18

not bad guv. Had a good chat with film crew last night - one of the things they plan to do is have footage from a go pro on a quadcopter :-) Looking forward to that

Rory Alsop

12:45

So, the day I fail to log on to Stack Exchange at all (yep - my first ever) is the day @Lucas offers cases of beer. Bet he was watchingme and did it deliberately.

Scott Pack

13:09

It's the only reasonable explanation.

AviD

Or maybe he figured that @RoryAlsop did not need @LucasKauffman for magically having beer appear.

Scott Pack

@RоryMcCune To be fair, they're using Maps to figure out how long it takes to get from your current location to your next appointment and factoring in the live traffic information.

AviD

@RoryAlsop is omnibeeriscent.

Scott Pack

@RoryAlsop So the leave time isn't the creepiest bit, the time adjustments are what really creep me out. :)

AviD

@ScottPack soon to be waze...

Terry Chia

13:11

Wait, I thought @Adnan was the one offering beer?

Scott Pack

@AviD Soon to be your face.

Rory Alsop

Mmmmm - although I was out late last night and had no beer...driving :-(

Lucas Kauffman

@RoryAlsop Aaaw poor Rory

Scott Pack

@RoryAlsop That makes us all sad.

Rory Alsop

I haven't yet seen this Google stuff - maybe I'm not using my phone to the fullest

AviD

13:12

Of course not, you have an iPad.

Scott Pack

@RoryAlsop It's part of Now.

Rory Alsop

I will catch up. On our tour I will actually get to drink, as I won't be going home each night after the gig

Now???

AviD

@ScottPack when??

Scott Pack

Now now.

Rory Alsop

Seen no marketing for it

AviD

13:13

►

Scott Pack

Good man.

Rory Alsop

My phone is not an ipad, @AviD. It runs proper android

Scott Pack

That and the Mr. Coffee are my favorite bits in that movie.

AviD

@ScottPack He's an Asshole, sir!

Rory Alsop

heh - they are the only bits I have seen.Still not seen the whole film

AviD

13:14

@RoryAlsop yes, but if you had a matching tablet, you could do all types of fun things.

Scott Pack

@RoryAlsop It's worth a watch.

Rory Alsop

I have a Nexus, obviously

AviD

@RoryAlsop my kids have enjoyed it a lot.

Rory Alsop

@Scott - Oh, I know

Scott Pack

@RoryAlsop Press and hold the Menu button.

AviD

13:15

I also love the ludicrous speed part.

> We can't stop! It's too dangerous! We have to slow down first!

sorry for the spoilers, @RoryAlsop

Adnan

@TerryChia I am. Today I was figuring out shipping costs and customs issues with my postal office. After I those things sorted out, I will start checking beer prices and calculate the total cost on me and on you guys (for the customs).

Scott Pack

There are stretches of the movie that are pretty boringly meh, but all in all there are gobs of great bits.

Lucas Kauffman

@Adnan while I wouldn't mind getting beer from you I highly doubt the cost you pay for it is worth it :p

AviD

@LucasKauffman I would agree with that, @Adnan.

Terry Chia

Especially if you have to ship it halfway around the world.

Rory Alsop

13:19

@Scott - menu button where. Which app do I have to be in?

Terry Chia

Also, my first attempt at exploiting heap overflows isn't going so well. T.T

Lucas Kauffman

@TerryChia there there Terry

ssssst

Scott Pack

@RoryAlsop Could be from any, because it's a long press. Definitely works from home.

AviD

@RoryAlsop not where, now.

Terry Chia

@ScottPack See, I got confused for a bit there.

Rory Alsop

13:19

..... okay, now I'm entirely lost :-)

Scott Pack

When you get to now you'll see what was happening then.

@AviD > I am your father's brother's nephew's cousin's former roommate.

Rory Alsop

On my android device, if I long press the menu button it opens google search

Terry Chia

@ScottPack hahaha!

AviD

so what does that make us?

Rory Alsop

same as it always has

Terry Chia

13:20

@RoryAlsop What version you running?

Lucas Kauffman

@RoryAlsop my god the horror.

Adnan

@LucasKauffman For you, since it's in EU, it's extremely cheap for me to ship there.

AviD

Come to think of it, there are a ton of lines from that movie that I use all the time.

Adnan

@Lucas I'm just working something out with the postal service regarding outside EU.

AviD

Oh, like the password.

Rory Alsop

13:21

whatever the nearly latest is - last couple of nightlies have broken Cyanogen on my Galaxy S3

Rоry McCune

@RoryAlsop shiney, yeah I think there'll be loads of quad footage over the next couple of years in films, vastly cheaper than traditional means of getting aerial footage..

Scott Pack

@RoryAlsop What kind of POS phone do you have?

Adnan

@AviD Let's see how the thing with the postal service turns out. If the whole thing would cost me more than 200 euros, I wouldn't do it.

Rory Alsop

Galaxy S3 @Scott

Scott Pack

You said Nexus.

LIES!

Rory Alsop

13:22

One of them too

but it isn't in front of me

Scott Pack

What rom do you have on your S3?

Rory Alsop

it's at home, where it belongs

Lucas Kauffman

@Adnan well I know, but you are in Finland o.O

Rory Alsop

Cyanogen - the just before Christmas release

Lucas Kauffman

you pay like shitloads of money

Rory Alsop

13:23

I would check exact version but am on a call on it at themoment

Scott Pack

@RoryAlsop Hm. I'm not sure then, I'm on rootbox.

Rory Alsop

I'll google later to figure it out.

Lucas Kauffman

@ScottPack because that's what the NSA does with your tablet?

Rory Alsop

Although do I need it? probably not

Scott Pack

Looks like Cyanogenmod has that longpress set to Search Assistant, which is pretty lame since everyone else has it bring up Now.

So Cyanogenmod 10.0, at least, includes a version of Search that doesn't have Now.

kalina

13:25

yawns loudly

I bet Adnan has gone and told that girl that he asked the internet about the meaning of "pretty good" and the internet told him he was wrong

Adnan

@LucasKauffman I got a special deal on some large amount of beer bottles.

Lucas Kauffman

@Adnan oooh sweet

which ones?

Adnan

@LucasKauffman Leffe, and some German beers.

The best deal was on the German ones.

Lucas Kauffman

cool

Terry Chia

@Adnan Just the bottles?

Adnan

13:35

@TerryChia Yeah. I know how much you guys enjoy empty glass bottles.

Oh Jesus. This is about to get explicit, isn't it?

Terry Chia

@Adnan No it's not. We aren't you.

TildalWave

-2

Q: Suspect computer infected with multiple hardware and software trojan viruses

I don't really care if the people who have installed these trojans are security agencies, however, how am I to know who it is, and how do I stop these trojan viruses from communicating to their targets if it is not a security agency? Some symptoms that I have experienced are: -- "Unknown Error"...

malware

I nearly pissed myself laughing, is that wrong? :D

get yo horses out of me computer

Rory Alsop

Okay - have googled Google Now. I'm baffled. What is it for? I can't see any function there that would be useful... Will hunt further later...when on a PC not this iPad, but it seems like some functional data mining gimmickry that doesn't deliver any service I would need.

Adnan

@RoryAlsop I actually found it quite useful.

Maybe not in Finland, but in Germany it was very great.

Rory Alsop

So it's been around fo a while then? Maybe my aggressive advert blocking hid it from me

Adnan

13:41

@RoryAlsop I used it for a couple of months about 4-5 months ago

Scott Pack

@RoryAlsop I'd say the latter half is most accurate.

I've found two interesting things about it. 1) If I seem to be searching for something a lot relevant things will show up on now. (sometimes useful). 2) well in advance of a meeting I'll get an alert that tells me, based on current traffic conditions, when I need to leave to get there on time.

Adnan

@ScottPack Yup, the second one.

I found that very useful

Rory Alsop

For finding places, I use Ingress. For travel details TripAdvisor hooks into everything I need. And in terms of getting from one location to another, I are a human and can work these things out very easily - so I know them in advance

Scott Pack

I'm not finding Now awesome enough to really espouse, but I do like being told when there's traffic delays that I need to account for.

TildalWave

@RoryAlsop Could you please edit the link here? security.stackexchange.com/questions/49227/… Or it wouldn't change the close reason and it'll just reappear?

Rory Alsop

13:48

I could just migrate it...

TildalWave

heh yes, even better :)

Rory Alsop

There were already 3 votes, so I only needed to be 2 people, which is fine

Scott Pack

Freaking Kerberos

Adnan

14:45

> I'm not making a code simulation environment. It is just a show of source code as plain text and then the result of that code

Xander

@RoryAlsop Google Now is awesome. I love it on my Nexus 7. It shows me all the things that are important to me, with me having to tell it anything about what I think is important. It's probably the single most valuable thing about my Nexus, to me.

Adnan

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA!!!!

That's what a FREAKING PHP EMULATION ENVIRONMENT basically IS!!!

Scott Pack

@Xander It very rarely shows me new things that I care about.

It also keeps telling me how long it'll take to drive to the office. Dude, it's had 6 months to figure out my schedule. If it hasn't by now...

Xander

@ScottPack We must have different usage patterns. It's been quite useful to me.

@ScottPack Ha ha.

Scott Pack

@Xander I drive into the office on Friday. I've been doing that for 6 months. Half the time it picks a random day of the week to say, "Ohai! It looks like it'll take this long to get to work. Have at it boyo!"

Transcript for