« first day (1154 days earlier)      last day (3747 days later) » 

12:31 AM
You know you've spent too long answering questions when you go to clean up your tabs and you've opened the US Census Bureau, security news from 2006, several toxicology studies, the datasheet for an ARM CPU, and a linux kernel mailing list archive thread about usb3.
7
 
 
7 hours later…
 
7:55 AM
That's superb @AviD
 
@RoryAlsop although I saw one suggestion that it was a good way to get passport scans off people for later re-use...
 
8:38 AM
@tylerl hehehe I know the feeling, but what were you answering that you needed toxicology studies? On Skeptics?
I find I have most strange tabs open when answering something on space, sometimes including toxicology / medical reports. Lots of chemistry there...
 
@TildalWave Join Chem.SE
We need people who can research stuff
 
@ManishEarth I'm there but when would I find the time?? That's always a problem, can't be omnipresent :D
@ManishEarth I'm not a Rory you're looking for
@ManishEarth while talking of chem, do you know of any good materials research sites with searchable database?
something similar to matweb.com but I find that one a bit too hard to use
 
9:17 AM
 
 
3 hours later…
12:11 PM
morning
 
@kalina Morning, love.
(I'm now in this phase: I'm calling everybody "love" and "sweetness")
 
@Adnan sure you are. That's just for @kalina.
Now of course youre going to call ME that too, just to cover for yourself.
 
yeah. How many of those are for @kalina?
 
I regret saying hi in here currently
 
12:25 PM
@AviD One?
@AviD I honestly don't get why two people from the opposite sex can't mildly dislike each other without it becoming a "get a room" thing.
 
heh.
 
@kalina incorrect by about 11 minutes according to my clock...
 
I've been busy
 
@Adnan balance of probabilities..
 
@RоryMcCune Turns out that going from LinkedIn-generated CV to an actually good CV isn't that easy.
 
12:34 PM
@Adnan yeah I could see that...
 
@RоryMcCune I finished all the parts in your guideline (added one more about general interests and non-technical side of myself) except No. 2. I have no idea how to list my qualifications? Is it simply listing my "skills", like "Web app security, .Net, C++"? Or is there more to it?
Ah. I feel so young doing this.
 
@Adnan Well for me IIRC I had some key skills in the opening para, the qualifications bit was more around certs (e.g. CISSP, CCT, MCSE that kind of thing) it's useful for HR word match games
 
@RоryMcCune I hate HR word match games.
I refuse to play them, or be played by them.
 
@RоryMcCune Fantastic! So the qualifications field is empty for me.
In Finland, it's expected to have a CV within the Europass standard.
 
@Adnan hmm well if it would be empty I'd just omit it, if I were you ;oP
 
12:39 PM
This makes it difficult to do something else.
 
what's a Europass when it's at home?
 
@RоryMcCune :D come on, Rory. Give me some credit!
 
@Adnan I was kind of kidding, sorry probably had the wrong emoticon
better?
 
well kind of similar really, just missing the first bit summarising it and moved the quals after experience...
 
1:00 PM
Oh, a reminder: On Sunday, it'll be Restaurant Day. Basically, a chance to show your spouse/friends how adventurous and culturally diverse you are. Plus, it's a nice way to try interesting food for moderate prices.
Why did that sound so spammy?
 
@Adnan that's not everybody, I'm not in the list
hides the pineapples
 
1:45 PM
'show how culturally diverse you are' ???
But why???
I am exactly as culturally diverse as I am. Why would I want or need to demonstrate that?
 
@RoryAlsop Oh no no, I just meant it as a chance to impress the young lady.
It wouldn't really work if you guys are married for several years
Plus, I really like the whole Restaurant Day thing. If you opt to try non-commercial places, you get to taste authentic homemade food. I liked it in Germany, a lot.
 
I just go to any restaurants anyway - always have. It's healthy to have variation.
 
2:16 PM
@RoryAlsop what's the weather like out east at the moment?
quite snowy here
rest and be thankful is looking a bit interesting.
 
2:35 PM
@RоryMcCune ha, seems we've swapped weather since yesterday, beautifully sunny here
we still got a bit of new snow in the morning but that's all gone by now
 
2:54 PM
@TildalWave here it's turning yucky rain/sleet, but up the hills a bit it's still coming down as pure snow...
 
3:17 PM
snow isn't lying in Edinburgh, but I'm hopeful it will be better on the way home.
 
3:31 PM
@RoryAlsop In Scotland, even snow is honest.
2
 
@CodesInChaos 2x and I still don't know how to use "lie, lying, laying, etc."
 
Hello @CodesInChaos
I wanted to ask: what will be the "primary" conference where the PHC will be discussed ?
e.g. SHA-3 had its own conferences (just after Crypto)
is that passwordcon (next one being in Las Vegas on August 5-6 ?)
 
3:55 PM
Aaaand I've just got the first Jehovah’s Witness visitors in 2014.
 
@Adnan The last I got, I promptly despatched by quoting Augustine of Hippo.
 
@ThomasPornin Please, share the quote.
Telling them I'm an atheist only makes them more insisting on "helping me discover the truth"
 
@Adnan That reminds me of a concept I thought of for an anti-evangelist door mat or poster: "God said 'Thou shalt not kill'. I heard 'Shoot to maim'!"
 
@Iszi That is.. brilliant!!
It's so sad. Many churches in the United States fund those local churches in Finland and Sweden. They basically recruit unemployed and lonely African immigrants to go door to door in the cold, dreaming of the commission they'd get if they get you to go to the next meeting.
There should be some laws that prevents religious institutions in the United States (since they're the biggest players) from doing stuff like that. Especially things like funding anti-gay groups in Africa.
That essentially end up spreading hatred that encourages physical violence (in some cases, killing) against homosexuals.
Damn it! I'm now so angry. Off to sauna ->
 
4:11 PM
that's not how it works
 
@Adnan Is their commission based on a percentage?
 
@ThomasPornin Ask on the mailing list. I'm not really involved in the conferences.
I mostly enjoy poking holes in candidates
 
4:49 PM
 
5:21 PM
@AviD According to an ex-member, they get the money on the head.
@TildalWave Aaand that show earned a place on my to-watch list.
 
6:06 PM
ya know it's nice sometimes to get more business grade kit, tends to have much better monitoring..
 
@RоryMcCune I completely agree.
 
@Xander got a nice ubiquiti Wireless access point and now I have good per-station stats on who's doing what, should make troubleshooting a lot easier
 
@RоryMcCune Ah, very cool.
 
@Xander I'm quite liking their kit so far, it had decent set-up without being horribly expensive like some other vendors cough cough Cisco Cough
 
@RоryMcCune Yeah. Cisco prices are insane. Particularly once you tick all the boxes to get the licenses you need.
 
6:12 PM
@Xander yeah I bought an ASA 5505 a while back and then found out 'cause I'd just bought it from a reseller I couldn't get a Cisco support login or patches!
 
@RоryMcCune Yeah, HP has just moved to that same model for their servers and they're catching flack for it. I doubt it'll make them change their minds though...Shareholders seem to enjoy fat revenue streams.
@RoryMcCune So did you get one of the APs from the UniFi line?
 
@Xander yeah enterprise stuff sucks from the perspective of smaller co's
@Xander yep got a pro seems good so far
might be interesting to try and extend the network with more of them apparently you can just set them up once, then move them to another bit of the house that's not on the wired network and the wireless network will integrate them in...
 
@RоryMcCune Ah, like repeaters? Interesting. I've gone from three APs in our last house to only one here, as I haven't run cabling yet. It works, but coverage isn't ideal. I need to figure out what I want to do about the network in general for the long term.
 
@Xander yeah it's their equivalent of WDS but apparently just works...
coverage for us is interesting, I'd like to get some better coverage of the garden, but think we'll need some outdoors APs and PoE for that...
 
6:27 PM
@RоryMcCune That sounds like fun. :-) Enterprise-y switches with PoE are utterly ridiculous though. My company switched phone providers and the new handsets are PoE only (on A/C adapter input at all) so I looked into my options since I work from home. I ended up with a single PoE injector for the phone, because the switches I found were either bargain basement consumer models I didn't really trust, or started at several thousand dollars.
Hopefully there are some nice middle of the road options that do exist, and I just missed them.
 
PoE 5 ports looks like about £85 in the UK
 
@RоryMcCune Ha! So they have them then. That solves that problem. :-)
 
yeah I just noticed that when I was looking at APs
as an option to power more of them if I go down that route..
 
@RоryMcCune That's definitely the way to go, rather than having to take up A/C outlets for every device.
 
Why does Community issue bounties?
That sounds like somebody is cheating
 
6:39 PM
@tylerl I did think that was weird
especially as that question has loads of answers already.
 
@RоryMcCune one of which has over 600 votes.
 
@tylerl mayhaps the mods will know, oy @RoryAlsop, @AviD what gives?
 
@tylerl Have you checked/asked MSO?
 
@Iszi nope. figured everybody knew but me. Guess not.
 
@tylerl @Iszi This is what I found: Community doesn't add bounties. Both of the bounties that are currently attributed to Community were actually added by a user who has since been deleted. When the user was deleted the bounty was transfered to Community's ownership.
15
Q: How Does the Community User Set Bounties?

YawusI decided on poking around some profiles and I hit the Community user. I knew that Community was a background process but then I noticed that it had set some bounties. What criteria does Community follow to know what questions to set bounties on? Are these questions with a lot of views or upvotes...

cc: @RоryMcCune
 
6:53 PM
@Xander Kinda what I expected. Thanks. Now we're left wondering who that was.
 
@Xander Ah I C
 
@Xander How will the Community know which answer to award the bounty to?
 
@TildalWave Probably it will just follow the auto-award rules.
 
@Iszi That doesn't appear to be the case in this instance
The bounty was assigned to community when it was created
rather than transferred, as in the MSO example
 
@TildalWave Probably just goes into the default auto-award mode that it uses when someone who offers a bounty doesn't pick a winner.
 
6:57 PM
@Xander oh wait.. no. The bounty must have been AWARDED to a deleted user
and then when the user is deleted, the bounty gets opened again
 
@tylerl Are we looking at the same example? Seems they match to me.
 
@Iszi nope. dates are different.
 
@Xander & @Iszi yeah, I guess it makes sense, cheers!
 
@tylerl They're not
 
@tylerl Ok, I must be missing something. All looks the same to me.
 
@tylerl Notice & bounty added has the same timestamp, just like in the MSO post. Notice added has no attribution while the bounty notice is attributed to Community, just like MSO. What am I missing?
 
@tylerl the second one was already awarded and the first one wasn't yet, that "Notice added Reward existing answer by" is just the reason for the bounty, it doesn't mean it was already awarded
 
@TildalWave ... so the mystery continues.
 
@tylerl which one?
 
@TildalWave indeed.
 
7:02 PM
:)
 
totally confused
 
@tylerl How can you tell?
 
The wording in those notices is confusing because there's no user at the end of it, that's IMHO all there is to it.
 
ok.
we'll go with that, then.
 
@TildalWave And that's a little odd, considering the issue is over a year and a half old. You'd think they might have done something with that by now.
 
7:04 PM
don't worry, that's nothing, you should see all the post notices that mods see, that's ... well, I square that confusion
@Iszi background stuff, including mod tools, seems to be the last things on their todo lists
 
I'm trying to explain to a customer why not to use "magic quotes". My argument ends with "It turned out to be an absolutely disastrous feature leading to no end of security vulnerabilities, bugs, data corruption, and general pandemonium."
 
 
2 hours later…
8:50 PM
Oh good.
1
Q: What should I use to collect, view and analyze security events logged by my infrastructure?

csjohnI am building a system comprised of a few separate applications, each of which has the ability to emit events via AMQP when a "suspicious action" occurs. Suspicious actions include ending up down a code path that has a very high probability of being malicious in origin. I've done a bit of search...

Asked 55 minutes ago, and it's already got a spammy answer.
 
@Xander thanks
 
@RoryAlsop And thank you. :-)
 
9:31 PM
@Xander At least this one had the courtesy of disclosing his affiliation.
 
@Iszi Yes, which is why I qualifed it as "spammy" rather than "spam." :-)
 
9:46 PM
So
 
@kalina ....it comes to this!
 
@FEichinger gets his grubby little hands on it and turns it into this
I'm so disappointed right now
I mean seriously guys
 
@kalina ima fork it and make the graph work
 
first he manually updates a website whenever I set fire to people
and then he takes my beautifully sculptured work of art and turns it into some horrifically generic auto generated looking UGH
 
@kalina To be fair, I didn't actually take what you wrote.
 
9:48 PM
that's quite obvious.
 
No, you posted that while I was already half-way through with it.
 
maybe if you had written it in less lines than were in lord of the rings you'd have finished before I started
@ManishEarth imgur.com/a/xOfkj
 
And I had pretty much the same thing down as well. I just ... tinkered with it. Because I do that. And I give no fuck about efficiency when I just want to do some fancy graphs.
 
so how did you end up with unfancy graphs?
 
Oh screw you!
 
9:50 PM
here is some water, put that fire out
"Marvel confirms Black Widow solo movie starring Scarlett Johansson is in the works"
^ one for you perverts
 
oo. I always loved Black Widow. A movie about her would be infinitely more interesting - and deserving - than "Ant Man".
Unless the Ant Man one is just going to be about what a dick he is...
 
@AviD What?! When the post is migrated you lose the rep?!
 
And this has nothing to do with the specific actress. That's just a bonus.
 
Tor.SE, what a dick!
 
@Adnan hehe, it was your request.
 
10:04 PM
I was trying to be nice to them
 
how much rep did you have on that??
 
@AviD 20
 
bah
 
@Adnan you get it on the site it's migrated to tho, plus there's a tiny loophole that those that upvoted you here can upvote you again on the destination site
 
@TildalWave Screw that! I don't want an account on Tor.SE. I don't wanna help those rep thieves.
 
10:07 PM
plus Tor reads nearly identically to Thor, so swing that thundery hammer babay!
 
Plus, if I make an account on Tor.SE, I'll probably reach 2000 rep in a couple of weeks. Then they'll fulfil some beta conditions. I don't want that
 
the site isn't doing that bad, it's only in beta for what, 4 months?
 
@Adnan So you'd rather go over and be further behind after they've come out of beta?
 
@Iszi no, he wants them to fail and be shut down.
Some men just want to see the world burn.
 
@Iszi What @AviD said
 
10:11 PM
It gets loads of visits for a 4 month old beta actually. OK, other stats are kinda bleah, including the rate of questions and answered ones tho
 
@TildalWave Oh no, they're doing pretty bad. Their average is 3.7 Qs/day. They need 15
 
and really poor voting habits
 
0
Q: Can I create an Ethernet network without using IP

user2785338As I understand from the ISO-OSI model, MAC addresses operate on a different layer than IP addresses. This is clear to me. I can accept that Ethernet (LAN) just does not make use of IP addresses to do communication, but uses MAC addresses. I understand that these MAC addresses cannot be used for...

Ugh.
WHY DID YOU ASK HERE?
 
@AviD And boys, too.
 
@tylerl Because IP.. Hacking.. Security.. DUH!
 
10:13 PM
he wants to see boys burn....?
 
@Iszi That's your 2nd.
@AviD Who doesn't?
 
@tylerl I AM TOR!!! I WIELD MY HAMMER!
 
@Adnan That's about our rate now on space, but we're in cruise mode most of January so I consider it OK-ish. But our overall stats are much better, and the number of questions will pick up too, we provide good answers IMHO and often well researched, vetted and more of them to chose from. Tor doesn't seem to have that.
 
@Adnan Right. This guy fancys himself a hacker and wants to know why Ethernet can't just use IP to route packets
 
@tylerl Haven't you seen those asking for a tool to hack Facebook?
@TildalWave Sorry, but Space is a very different case. Tor is just too specific.
Space.SE has a lot of potential
Tor.SE doesn't
 
10:15 PM
@ton.yeung she doesn't need to get naked, just wearing tights as enough to end up in the star list for weeks
 
It's a waste of bandwidth and hard drive sectors
 
@Adnan And yet you're still here, too.
 
Feb 6 at 16:23, by TildalWave
@ThomasPornin dude, the movie has Scarlett Johansson in tights, who cares about how visually appealing thrusters are :)
completely honest comment, that
no perverse thoughts powering that comment, at all
 
@Adnan I think 15 questions a day is a bit optimistic. I don't think there are many, if any beta sites that hit that. For that matter, over our history, sec.SE is only a bit over 10 a day.
 
@Adnan oh definitely, I don't disagree
 
10:17 PM
@Xander we have more than 15/day on SR
35.2 questions per day on SR
 
@Xander and I can't agree more. 15 is a bit high. But 3.7 is awful. There's no hope for that one.
 
@kalina I suppose all super-heroines should be wearing burqas?
 
@kalina After one week, when it's being seeded. Let's see it keep that up. Though if any site is likely to have a ton of questions, that's probably it.
 
@kalina guilty as charged, and I don't hear my missus complaining
 
@Xander hahah, you really think a recommendations website is going to get less traffic when it's public?
the trilogy are probably going to migrate more than 35 questions a day to us
 
10:20 PM
@kalina I think the stats are skewed high for the first week or two, and then settle down.
 
@Xander we'll see
I think it's unlikely for this particular site
 
@kalina Which is why I say if any site is going to have a ton of questions, that one is probably it.
It's....Unique.
 
very unique
 
@Xander think of it this way, it's one more migration path where we won't have to deal with nagging over why some question was closed here :)
 
@AviD Is ignoring somebody on Chat.SE client-side or server-side? Meaning, will I receive their message but the Chat.SE JS code will hide it, or will the server not deliver the message to me altogether?
 
10:23 PM
@Adnan hmm, interesting q. No clue.
 
@TildalWave Perhaps. As @Gilles has mentioned though, most of the recommendation questions we get are crap, and probably won't be a good fit for SR. We'll have to see if they can really curate it properly, or if it devolves into trashbin of SE.
 
@TildalWave Oh, you're sure of that? How many times have we migrated something out only to hear someone complain "but I wanted an answer from security folks"?
 
@AviD I wanna know if @Iszi's message will still waste my bandwidth.
 
hahahah
 
we'll hold onto our "software" tag on space tho, we just had it as our topic of the week last week, and I don't see it being answered properly on a non-specific site
 
10:24 PM
@Adnan :-P
 
In which case it may both a) have a million new questions a day, and b) be shut down anyway.
 
@Iszi's messages waste everybody's bandwidth.
 
@Xander most of the times we'd just close it then (without migration) and with a comment that it might be better asked over at SR
 
@Adnan So, what? Would you not ignore me if it wouldn't save you bandwidth?
@AviD Very helpful, thanks.
 
@Iszi we can still keep the good ones, nobody is gonna oblige us in migrating all SW questions there
 
10:26 PM
@Adnan Client-Side.
 
all I'm saying is that it'll be a bit easier to close off-topic ones
 
@Adnan everything is client side other than validation of posts
 
@kalina Oho! Thanks.
 
Oh, right, yes, he still ignores me, too.
 
why would you ignore @Iszi?
 
10:27 PM
@Adnan can't you hit CTRL+SHIFT+J and have a look?
 
he plays Mass Effect and is thus cool
 
@TildalWave To this point, it seems to me, we've tended to close recommendation questions with extreme prejudice. It might be nice to find a happier medium that would allow us to do that.
 
@TildalWave When I can do nothing and have others do the work for me? No thanks :D
 
@kalina Aww, thanks! I think it's because I was being a dick to him just a bit ago. Only yanking his chain, of course. Apparently he's in a sensitive mood today.
 
@Iszi he should be used to people being a dick to him
we're only returning the favour for every time he presses enter
 
10:29 PM
@Adnan oh look at you, you learn :)
 
@TildalWave I learn from the best.
 
I wish I knew how to use the console in a web browser
 
that would be @ScottPack then
@kalina you're on FF?
 
@TildalWave Blasphemer! How dare you hold any being above The Bear?!
 
@TildalWave chrome
 
10:30 PM
@kalina Prepare for pings.
 
@Iszi it was a snide remark on what he learned, by saying whom from :P If I said that'd be The Big Bear then, I'd unwittingly suggest that he's learned something useful, wouldn't I?
@kalina it's pretty simple actually, see that magnifying glass icon? click on it then go over some element you're interested in, then move from there, mostly by inspecting values on the right hand side of the dev tools window (use tabs next to the magnifying glass icon)
 
well yes, or RTFM :)
but considering what all is there, it's almost intuitive
 
@TildalWave Working as a dev. and after interaction with UX experts and directly with users, I can assure you that "intuitive" is highly subjective.
 
@Adnan intuitive is very subjective
 
10:40 PM
@Adnan it is, but if you understand how things work, and just wanna know specifics of some implementation, you'll find it quite easy to work with (relatively speaking, comparing with FF / Opera tools ... and I don't even wanna mention ... the other browser)
 
> if you understand how things work
 
@Adnan well yes, if you're a dev
not a noob :P
 
@TildalWave no no, has nothing to do with being a dev.
 
Great. My wife's new phone just got here. i.e.: More work for me.
 
@Tildal My GF can operate the Dev. Tools in FF and Chrome, and she's not a dev.
 
10:42 PM
@Adnan I highly doubt that. She can then click icons, but would she understand what makes the beast tick?
 
@Adnan same here :p
well, not a dev, but speaks js
But I don't classify myself as a dev either
 
@ManishEarth Ah.. so sexy. +1 for you and your gf
@TildalWave Oh, trust me, she understands what makes the beast tick.
Good euphemism, by the way.
 
@Adnan then she's an IT pro I guess ... perhaps not a dev per se but something closely related
 
@TildalWave Nurse
@Tildal Speaking of dev. tools, have you tried the fried/sauteed kumare?
 
@Adnan You're telling me she can trace into, say, DOM events and extract some value?
@Adnan yes, I love "kumare" ( :) ) done in all ways that I've tried so far
 
10:48 PM
@TildalWave Inspect elements, modify some CSS, use jQuery to hook to some events and override the page's default behaviour, and do some automation tasks (calculate values on a page that has a table that doesn't provide the calculations she needs.
 
@Adnan blimey, she's good then
but doesn't that kinda prove my point that dev tools are intuitive?
 
@TildalWave Yup, jQueryify in the bookmark bar.
@TildalWave Oh, I definitely agree. It's just that some people.. ummm..
let's change the subject.
 
@Adnan not now that it's getting interesting! it's just that ... what people?
 
@TildalWave You know how you'd expect that it's intuitive for somebody to avoid eating the contents of a package that says "Rat Poison"?
 
oh dear
there's a story here...
 
10:55 PM
Yet they still write on the package "Do not eat", because some people end up eating it
@TildalWave Get my point?
 
Well... From the other side of the issue, knowing NOT to eat something and learning HTML, JS, CSS, etc
Are two rather different things
 
@Adnan hmmm no, what's "using something when it clearly says you shouldn't" got to do with Chrome dev tools?
 
@KnightOfNi While that's true, I was just demonstrating that "intuitive" is very subjective.
 
OK I get that
but I still don't get the rat poison analogy
:))
 
@TildalWave Forget that it's written on the package that you shouldn't eat it.
Just a plain white package "Rat Poison"
Wouldn't it be reasonable to think it's intuitive NOT to shove it down your throat?
 
10:58 PM
OK, yes, a package of rat poison from times when there was such a thing as common sense
@Adnan not in UK
 
@Adnan I suppose I can understand that... But mastering something like development and not being insane are two different... types of intuitive.
 
@KnightOfNi Knowing how to press F12 and choose the tab that says "Console", and mastering something like development are two very different things.
 
@Adnan Touche
 
and that's my cue. Was lovely talking to you guys. Nice seeing you here @KnightOfNi. I think this is the first time we interact. Hopefully there will be more.
Have a nice night, everyone.
 
@Adnan that's your "cue" :P
 
11:01 PM
@Adnan You too
 
yup, you too
 
@TildalWave Thanks. Learned something I didn't know.
 
Awww... first time I've seen someone's picture float away like that... kinda morbid, actually
 
it's more morbid when you see many that you know are from the same country float away at the same time, there were a few times when I'd go check the news because of that
 
@TildalWave Lol... Didn't think of that.
 
11:48 PM
0
Q: does any botnet/malware traffic use ssh or anything else other than TCP/IP?

alan warnerif i sniff all traffic leaving my router, if botnet traffic is present will it be IP traffic or does any malware use other protcols such as SSH, FTP, TFTP, etc?? do antivirus software programs routinely perform exit traffic pattern analysis? would it be useful to create a utility that does routin...

must remember, there are no dumb questions...
only drastically underinformed people
 
@AJHenderson I VTC-ed that as unclear what the bleeping bleep he's asking, and when he'll figure that it'll probably be either too broad or off-topic
Right, I've done my service to the Cthulhu today, have a good one all!
 

« first day (1154 days earlier)      last day (3747 days later) »