The DMZ

Holocryptic

7:03 PM

O hai guyz! I has a ? Iz this tha place to ask? @ScottPack sed it wuz cool.

Scott Pack

@Holocryptic Don't make me ban you

Holocryptic

mwahahaha!

It's all... blue.. in here...

Well, cool digs you have here. I'm just an interloper. I'll show myself the door.

Iszi

7:16 PM

critical flaw fixed by MS today could be exploited remotely to break into PCs that aren't even connected to a network http://bit.ly/r4WZ81

Tweeted by briankrebs on July 12, 2011 at 7:13 PM

I guess that depends on how you define "network".

Rory Alsop

@Iszi :-) - I have a query - how do you get the twitter post to show up in here?

Iszi

@RoryAlsop Just post a link to it.

...and only the link.

Rory Alsop

just twitter.com/ blahh, yes?

gotcha

Iszi

@RoryAlsop For above, I posted https://twitter.com/#%21/briankrebs/status/90861377589231617

Rory Alsop

thanks - I know it was probably on something I should have read, but missed :-)

Iszi

7:19 PM

@RoryAlsop OneBox is really easy to use, and excitingly easy to stumble upon.

Hasn't happened in awhile for me, but it used to be now and again that I'd throw up a link in here and all of a sudden be pleasantly surprised to see it OneBoxed!

Rory Alsop

had to close

2

Q: What kind of nefarious deeds can IP address Spoofing be used for?

Possible Duplicate: What security risks does IP spoofing bring? I found this article, which seems pretty good but was written in 2003 so I'm not sure how up to date it is. Can IP address spoofing still be used for: Denial of Service attacks Man in the middle attacks Are there othe...

as an almost exact duplicate of

7

Q: What security risks does IP spoofing bring?

By manipulating the TCP packet and changing the source address one is able to spoof the IP. As I understand it, you will not be able to set up a full handshake by doing this, as you will never receieve the returning packets. Does anyone know how this poses as a security risk today? Some risks:...

network attacks

Iszi

Makes sense. What about that ip-spoofing?

Ooh, there's a lot in there! Maybe update the tags in the older thread?

Rory Alsop

@Iszi done

Thomas Pornin

Dang, I hit the daily reputation cap on crypto.SE in 41 minutes.

2

Iszi

@ThomasPornin Haha! Like that's at all surprising, coming from you!

What's with Crypto.SE anyway? Is that to cover some fuzzy area between Math.SE and Security.SE?

Thomas Pornin

7:28 PM

@Iszi Rather cstheory.SE and security.SE

details have not been completely worked out yet

Rory Alsop

7:40 PM

@ThomasPornin hahahaha

WTG

(apparently that's the phrase all the cool kids use)

Scott Pack

Yeah, pretty much

Ninefingers

8:00 PM

Two things. Firstly, I hit refresh and look what they did with the place! Looks even more awesome than the meta pics.

Secondly, @ThomasPornin, no surprises there! First to 10k anyone?

Iszi

@Ninefingers I'll put money there!

Heck, I think he'd break 10k before public beta if it weren't for the caps!

Why is it that the "user profile on..." link doesn't point to the website that's relevant to the chat room?

Seems it instead goes to the place where the user has highest rep?

Rebecca Chernoff

goes to whatever the user has as their parent account

Hendrik Brummermann

I really wished there was a ignore list which hide questions, answers and comments from certain people.

Scott Pack

8:15 PM

@HendrikBrummermann I think we've had that discussion in this room a few times :)

Iszi

@RebeccaChernoff Can we change that?

Scott Pack

@Iszi go your chat profile page, and there's a big "Change" button

Hendrik Brummermann

Is parent account the site I signed up first to?

Rebecca Chernoff

if you want the behavior changed, you should post on meta

Iszi

@HendrikBrummermann Probably, unless you've changed it.

Scott Pack

8:19 PM

@HendrikBrummermann That's a very good question. I signed up on SO first, but SF was my parent.

I got asked if we wanted this migrated: serverfault.com/q/289571/3356

I'm thinking it's far too vague to be useful, but if anyone wants to take a whack at it, feel free :)

Iszi

@ScottPack Not seeing it. Care to be a bit more direct?

Scott Pack

chat.stackexchange.com/users/15/iszi

Iszi

Oooohhh.... I see it now.

Scott Pack

In the left hand box, look at the 5th thing

yeah

Iszi

Sweet. Done.

Now I just wish the ITSec icon would get updated on the profiles.

M'vy

8:24 PM

@Iszi where?

Iszi

@Mvy - On the "accounts" tab.

Don't you love it when you run Windows Update, install a dozen or so updates, reboot, and then find out that you (or, more likely Windows) didn't install the freaking half-gig-sized service pack?!

Scott Pack

I dunno. If I want to update my system and reboot I just do this: yum clean all && yum update -y yum && yum update -y glibc && yum update -y && reboot

I don't have those problems.

Iszi

@ScottPack You hush.

Thomas Pornin

9:13 PM

UPS are great !

(I am getting power shortages here, because of an ongoing Storm Apocalypse)

nealmcb

@ScottPack Woo hoo - auditd answer! I'm reading and working on the typos :)

9

Q: Simple example auditd configuration?

Auditd was recommended in an answer to Linux command logging? The default install on Ubuntu seems to barely log anything. There are several examples that come with it (capp.rules, nispom.rules, stig.rules) but it isn't clear what the performance impact of each would be, nor what sort of environ...

linux ids audit

@ScottPack Do you know anything about the examples in capp.rules, nispom.rules, stig.rules?

Are any of them of any use? Too noisy? Performance impact?

nealmcb

10:12 PM

Heh - the sec.se shield icon that appears on the right of oneboxed posts looks like some sort of inhuman eye. Perhaps a transhuman eye?

Transcript for