« first day (1160 days earlier)      last day (4018 days later) » 

14:20
@Scott @Lucas @RoryM @RoryA Do you guys think there's any actual value in EC-Council certificates?
Is that the EV stuff?
@ScottPack Oh, perhaps I didn't explain correctly. They offer security-related certification.
Their certificates seem to be overpriced and don't have actual value in the market. I wanted to double check.
Never heard of them.
I've never been heavy into the certification market, though. I've never been with an employer that had any interest in paying for it.
@ScottPack To some extent, that says a lot about them.
@Adnan Isn't EC-Council the one that does CEH?
14:26
@TerryChia Yes
@Adnan Well you know how we all feel about that one. ;)
I never heard of the rest of their certs though.
@ScottPack @Terry My issue is that I don't have solid security experience on paper. It's difficult to pass HR filters without something on the CV.
@Adnan Aren't you doing OSCP?
@Adnan They do have value, if e.g. a potential client likes seeing lots of letters after the names of the team behind a proposal.
@TerryChia I am.
14:27
Same for hiring, but then you need to ask yourself if you really want to work for a clueless noob.
@Adnan so yeah, some value there too.
@AviD Most of the time, the initial hiring process is handled by clueless noobs.
@Adnan Well, there ya go. ;) I think CISSP is the one to get if you wanna bypass HR grunts though.
You need experience for that, but you can do the associate program first.
Yeah, CISSP is generally the one HR hunts for.
Or maybe just go to a local security con and start talking to people. ;)
@TerryChia Yup, I think that's what I'm aiming for in the next couple of years.
@TerryChia Good luck doing that in Finland.
14:29
CEH is probably worthwhile on the resume as well, but I don't think it's nearly as sought after. I'd say it's rather close to being the CompTIA A+ of hacking certs though.
@Iszi true, but often any "official" cert impresses them enough to let you pass.
@Iszi Indeed. That was I was thinking.
@Adnan It's that bad? Even Singapore has 2-3 cons a year.
@TerryChia It's extremely bad. Pretty much the only security security event is OWASP and it's only in Helsinki on weekdays.
and even that, about 2-3 times a year.
@Adnan Ouch. We at least have Syscan here and a few marketing type cons a year.
How about nearby EU countries?
14:32
@Iszi I've seen a lot of demand for CEH - mostly from cheap consulting firms, looking for junior pentesters that know a bit about what theyre doing.
@AviD Yup, I was thinking about throwing 3-4 acronyms/initialisms on the CV. It sounds like it'd help a lot in getting your foot through the door.
@AviD CEH, I wouldn't even put that on my CV
CEH sucks as a certificate
It's worth jack shit imo
@TerryChia In Sweden it's a bit better. I'll start looking into that.
@LucasKauffman Care to elaborate?
I'd like to hear your opinion
Also CEH is mostly like "what is sql injection", "what is XSS"
@LucasKauffman I dont disagree. However it does help those HR drones (and potential RFP reviewers) "see" them as "professional" pentesters, as opposed to a couple of highschool kids that know how to move a mouse.
'course actual experience is so much better....
14:36
@Adnan Ah, yeah, I can see that.
@TerryChia Yeah, the CISSP requires a minimum of 5 FTE years in 2 or more of the domains.
@ScottPack 5? Didnt it used to be only 4?
@LucasKauffman CEH, as a course, is quite useless indeed.
@AviD About 6 years ago they upped it.
My inquiry is about its actual worth on the CV
interesting.
14:38
@AviD Well, 5 years in 2 or 4 years in 2 plus a relevant degree.
@AviD It used to be 4 and 3 and only required 1 domain.
I.e., you could qualify for the CISSP with a few years as a mall security guard.
@ScottPack Jesus. That's quite heavy for a fresh/semi-fresh grad.
@Adnan That's just it, the CISSP isn't designed to be used as an entry level certificate. It's designed for people with real experience who are moving into a more senior role.
@Adnan The problem is that it's used as an entry level certificate.
It's not quite as bad as the early 2000s MSCE but it's getting there.
@ScottPack They have that whole associate thing though. Pass the tests and be an associate, work for a few years before getting the full cert.
Over the past couple of years some new blood has gotten into the board so hopefully we'll see some of that changing.
I'm probably going for that right before I start looking for a job.
14:41
@TerryChia Sure, but have you ever seen an associate?
@ScottPack I'm not exactly in a position to judge.
@TerryChia The only ISC2 cert I've ever seen listed on either resumes or postings have been CISSP
@TerryChia I wouldn't do CISSP, start with SSCP, it gets you a year of CISSP and you can normally bullshit your way out of the 1 year work experience requirement quite easily
@LucasKauffman You can't stack the SSCP and degree waivers, though.
@ScottPack you can't?
aaaw
14:49
When I first got into security I was trying to see how I could game it.
You also can't stack your degrees.
>_< OpenVPN isn't starting on my pfSense box because of a command line error.
I can't figure out what command is actually being executed. Well done guys. Well done.
8 inch banana sounds...
...like...
...fun
WHERE'S THE CHAT BOT WHEN WE NEED IT?
you don't need a chat bot
I'm disappointed in your lack of skill
15:05
@ton.yeung @ManishEarth already has one.
"That's what she said" = 21 keys
"!!/twss @kalina" = 18 keys
@Terry reporting for duty
!!/twss kalina
stop being so lazy
@kalina That's what she said!
15:06
there we go.
@ton.yeung headless!
@TerryChia I have @ManishBot on ignore, it didn't work
@kalina It's for our benefit, not yours.
I don't really have it on ignore, I would never ignore Manish*
@kalina no, you don't :p
15:07
inb4
Quick, everyone prepend Manish to their usernames and act like Simon!
WOW
you don't hate me that much
do you?
Nope :p
I thought we were friends
15:08
Also, you'd set fire to me if I did that.
Red Hot Chilli Pipers
That would be not good.
@LucasKauffman Good fun times.
Now I realise you were just using my friendship as a fireproof shield
@ManishEarth I have caused no fire in like a month
@kalina aah, it's built up, RUN
15:08
actively avoiding arguments as well
trying to cause no drama
probably less than 100 lines of text posted to the bridge in the last month as well
I am officially more active in charcoal hq than I am in the bridge
@ton.yeung no it's the location of a super top secret headquarters made from charcoal
you know it's special when *I* can sit in a building made out of charcoal without there being fire
@ton.yeung no
what planet do you live on where brick turns into charcoal when you set fire to it?
@kalina drugs are bad m'kay
@LucasKauffman what do drugs have to do with anything?
it's relevant
isn't it?
15:14
I've retained my usual level of activity in all the other channels I'm in
and here we are ladies and gentlemen having an argument
<o/
@ton.yeung no
that's not a llama, that's his face
5
don't be so rude to him
@ton.yeung There used to be a human with that llama.
@kalina I would think that it is more an insult to llama's than him.
15:16
true story
15:30
I'm home.
g'day all
about half the time I come to DMZ I can't help but start whistling "if the kids are united" :)
15:46
derpa der
@deed02392 derpa?
> The word has no meaning known to man on this planet.
However, On the planet "Zilpgoun" it is commonly known
as the act of softening a friends finger or toe nails by sucking on them and then chewing or bitting them off.
I think I might have been to that planet a few times :)
that's very disturbing @TildalWave
@deed02392 indeed
I conclude that the Internet community is insanely bored. twitch.tv/twitchplayspokemon
noooo
bridge spam is leaking into the dmz
quick, plug the leak!
stuffs @TerryChia full of cake
15:59
@kalina mmmmmm.... cake.....
@kalina the cake is a lie
Hello
Here is one about certificates I don't know
I could go for some cake
Why is it a bad practice to issue certificate with "negative" serial numbers (I mean, the ones beginning with 8 to F)?
@AJHenderson no
@kiBytes you receive them for achieving special things
16:01
@AJHenderson It's obviously a lie. I'm not seeing any cake even though @kalina says she is stuffing me full of it.
@kiBytes I'd guess that thanks to buggy ASN.1 parsers, some interpret that as signed and some as unsigned
@kalina now adays they hand out certificates even for not special things... like participation trophies...
@CodesInChaos that is exactly what I thought
8
A: Unpredictability of X.509 serial numbers

Thomas PorninA non-random serial number does not imply, by itself, a security issue with the signature scheme, but, as @Jack points out, it can be used to leverage an attack. On a general basis, signature algorithms begin by hashing the input message with a given hash function; if the message or hashing proce...

but I can't believe that...
16:02
@AJHenderson is that a cheap stab at me?
ARE YOU UNLEASHING CHEAP SHOTS AT ME?
@kalina Yes.
@kalina that is the paragraph I would like an explanation, but I believe the answer is the one stated by @CodesInChaos
morning guys .. can i ask question regarding a malware ?
@NullPoiиteя install as much of it as you can
once you get to over 9000 malwares, you win at the internet
thanks but some malware bugging me for last half hour
16:05
@NullPoiиteя Reformat.
you already have malware on your pc?
that is such a simon mistake
looks like its blocked
you should find every instance of rundll32.exe and delete it
and then reboot
how long is an appropriate wait before my disclaimer?
@kalina 10 years? 20 maybe.
are you sure? I'm not naturally evil, I don't actually want him to destroy his windows install
@NullPoiиteя I would reboot in safe mode and do a full system scan
well, I assume, I don't randomly click "INSTALL TEH MALWAREZ" on the internet, so I've never had any of these issues
also, stop watching porn
16:08
@kalina its first time i have used windows and its really bad :(
@NullPoiиteя Windows is awesome, all Windows issues are pebkac
thanks ..... :)
seriously though, safe mode, full system scan, fix all the problems, reboot, firewall up, stop running your browser as admin, etc etc
@NullPoiиteя That avast thing looks like malware to me
@CodesInChaos looking at google images, it seems legit, it could be a well done mockup I guess
16:12
@CodesInChaos yupp avast detected and blocked malware
@NullPoiиteя I think he was saying the window looks suspect
dont know it doesnt showing that message anymore .... thankyou guys ... though i really dont know what happened :D
if you're interested, there will likely be entries in event viewer
if you're not, then you're probably a mac user
(also, in case it wasn't obvious - don't go deleting all rundll32.exes)
16:18
@kalina it depends, do I get a certificate for it?
@AJHenderson no
I might break my "no fire for a month" cold streak though
10 second on google helped me to figure out not to do that howtogeek.com/howto/windows-vista/…
@NullPoiиteя Hmmm spark.bin. I could swear that's what that Yontoo malware downloads
@NullPoiиteя yeah but I really didn't want to take the chance you didn't google it
@Adnan ohhh yes .. i saw that software installed in my pc ... (not by me)
16:20
@NullPoiиteя Yup, remove that crap.
@NullPoiиteя Better, run the standard AdwCleaner and Malwarebytes AM. Do you want the links?
@Adnan thanks
@NullPoiиteя After you run them, they'll remove some crapware that might be on your machine. Wait some time. After that, if you still get that message, ping me here with a HijackThis report pasted on PasteBin.
@Adnan could you tell me your favorite answer on so ( given by you) ?
I can't believe everybody just sat around watching while @Adnan linked this guy malware
@kalina Tä?
@NullPoiиteя I don't really care much for SO. I'm more active here on Security.SE.
16:26
@Adnan it's just there - you can read!
@Adnan i am thinking to award 350 bounty for your help
@NullPoiиteя But, please, don't upvote me just because I tried to help you here. I'd rather get my answers upvoted because the voter actually finds them helpful.
@kalina Please, elaborate. Your accusation is very serious.
@Adnan not really, I've already established that I'm not being serious
hey ... trust me i dont upvote user ...
@NullPoiиteя Fantastic. I'm just glad you're on your way to fix your problem. Nothing else is needed.
16:31
apparently, suicide rates are down in the UK
teenage pregnancies still on the rise
@kalina condition in India are worse
that wouldn't surprise me
@kalina How's the state of sex ed in the UK?
@Adnan I have no idea
@Adnan if I'm honest, it's one of the classes I skipped
what is primary reason of suicide in UK?
16:35
@kalina and here's another one for you, @Lucas
@NullPoiиteя no longer wanting to live
LOL ... true
@Adnan I like how when I joke, you get all serious and moody, and when you joke I'm meant to just take it :p
@ton.yeung Would it be rude if I ask how how old you are?
@ton.yeung Oh, never mind. It's in your profile
@kalina I'm glad you like that. I like it as well.
@Adnan -.-
@ton.yeung he's totally into you
16:37
sorry but do you guys ever thought to suicide ? even for a second
@ton.yeung Oh, so you're primarly into guys? Shame. I have a female friend who would have liked to get with you.
@ton.yeung he's had bad experiences with women and has decided he wants a change
@NullPoiиteя When I was younger, yes. Many times.
@ton.yeung Oh, sorry. But your behaviour in the chat... ah, I must have a bad gaydar, then.
@kalina I'm aware you were joking. I didn't ping Lucas because I thought you were serious.
@Adnan uhuh
@ton.yeung I wouldn't be worried.
@ton.yeung I wouldn't feel bad for her.
@ton.yeung Who doesn't like gay guys?
16:41
they're awesome, it's like having a male friend whose primary motivation isn't to see you naked
@ton.yeung Highly unlikely.
@ton.yeung hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha‌​hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahah‌​ahahaha
deep breath
hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha‌​hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahah‌​ahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha‌​hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha
collapses
yeah I don't have that issue
@ton.yeung lolololo
I'm not usually egotistical enough to state that I'm "hot" so outright
it must have just been a warm day + your misunderstanding
What are you kids going on about now?
16:54
@ScottPack @Adnan + @kalina. What more do you need to know?
...
how rude
@ton.yeung It was so much cuter when the twins did it.
@kalina It's @Terry, what do you really expect?
@ton.yeung what is this?
it could also be an age thing
@ton.yeung Full house?
16:58
@kalina Or both.

« first day (1160 days earlier)      last day (4018 days later) »