« first day (1160 days earlier)      last day (4018 days later) » 

17:00
@kalina That's my bet.
September 22, 1987 to May 23, 1995
...
anyway, hometime
@kalina Jesus. Is Full House that old? I remember watching it when I was 10
@Adnan that's what wikipedia says
@Adnan woo other people in the DMZ feeling old :op
@kalina It was just a quip against anti-virus software, many of which are worse than an actual virus in my book.
17:09
@RоryMcCune To be honest, I feel old on two occasions: When I'm on the DMZ, and when I go to a particular bar in my city.
@Adnan Wait, you feel old in the DMZ with people like @RоryMcCune, @RoryAlsop and @AviD around?
@TerryChia and people like you and @kalina at the other end of the spectrum
@TerryChia Generally speaking, there are more people in the DMZ who make me feel old than those who make me feel young.
Overall, I find the DMZ quite young.
@RоryMcCune Hey hey hey. I'm sure @RoryAlsop's age balances the scales. Tips them in your favor really.
I'm 22
Where do I fit in on the spectrum
17:16
@deed02392 If I didn't know your age, I'd give you 26 from your behaviour here.
@CodesInChaos Not Norton? Surely not
why's that @Adnan?
@deed02392 The way you talk and interact with others (at least here), it's quite mature for someone who is 22.
@Adnan i am 21 and may i ask where do i fit in on the spectrum ?
lol
did you mean "i am 12 and what is this"
@NullPoiиteя Unfortunately, I don't have enough data in my head about you.
17:18
@Adnan If I didn't know you were human, I'd say you were a robot
@Adnan hey did you hotlinked your about me image to your server and keep track of whether the IP requesting the image has clicked it ?
its really cool
@deed02392 3 months ago I was told the exact same sentence by my then-girlfriend.
It's probably just the sociopath in you
@deed02392 I try so hard not to seem robotic. The biggest issue when somebody asks "Why do you think that?" or "What makes you think of X like that?" or "How did you know that?"
I usually answer in a very logical and robotic way.
I should work on that.
What do you think you should work on that?
why*
17:20
@NullPoiиteя Indeed. I do that.
@deed02392 People tend to distrust you when your answers are overly logical to a point it's a bit not so human. My lifestyle depends on giving people the impression of trustworthiness.
hehe
Quite so then
:O I can only earn 200 rep a day?
that sucks
@deed02392 Earnings from getting your answers accepted (the +15) aren't limited under the 200-rep-a-day rule.
@deed02392 Same goes for bounties.
@Adnan They also flipped the order of the houses in the title sequence, for some weird reason.
Still, that's a shame
@deed02392 Only if you were Thomas Pornin or Jon Skeet.
17:25
@Adnan Why? The rep cap just gives @Thomas a reason to start a second account. :P
I'm thinking it's time he starts a "Baby Bear" account.
@AjH What the hell?! You're blue!
But I earned 190 so far on a single answer
@Adnan da ba de da ba die
Wow
I haven't heard that song in over a decade.
Goddamnit. And now I can't unhear it
@deed02392 Well, too bad.
17:30
@ScottPack then I guess my work here is done :)
Fucker.
@deed02392 Meh. Wait till you hit a rep train that +20 in an hour.
Just glad to have over 1,000 rep here now
@deed02392 you are telling me, I have one question that would have gotten over 2000 rep in a single day
but that's exactly why the limit is there
rep is supposed to indicate regular participation and contribution, not just one lucky post
I'm talking about for an answer not a question @AJ
17:31
(it was actually for an answer to a question)
when is an answer not to a question??
I rarely ask questions, so when I say I got rep from a question, it's generally because I answered it :)
@deed02392 You'll keep gaining rep from that question tomorrow as well. Don't worry.
265
A: Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field

AJ HendersonOne thought is to not allow form submission if there is not a value in the password box. Generally if they accidentally entered the password in the username, then there likely isn't going to be anything in the password dialog. It is worth noting that this does not have to be simply done client ...

about 150 of those votes came in a 24 hour period while the question hit the super collider
and about another 70 came the following day
I think I got something like 500 rep in total for that answer
if you write consistent good answers you'll get rep pretty quick though
so you don't need to sweat hitting the cap
@Adnan more seriously, yes, I am now a moderator for Video Production
Seems like a nice catch for somebody looking for an upgrade. microsoftstore.com/…
17:37
@Adnan Wow! That's sweet!
Oh yeah, talking about MS software. Who wants free licenses? ;)
@TerryChia to what?
@AJHenderson A bunch of stuff really. I'm graduating soon and I'm grabbing all the stuff from MSDN before I do. ;)
I think I have licenses for most of the productivity tools.
@TerryChia ah, I have a bunch of licenses for Windows 8, want to guess how many of them I have used?
@TerryChia I know! I'm trying to order it right now. 1k for those specs. Wow
@AJHenderson 0?
17:39
1, I have a VM
which I've used about twice
@AJHenderson Heh. I dumped my Win 8 license on my brother. I'm using my Win 7 one.
@Adnan it's too bad it it the ideapad version
@AJHenderson I like this question, I remember when it was asked
my dad tried that one and ended up returning it for the thinkpad model
@AJHenderson Heh. 1k for a thinkpad branded one? I'd buy that in an instant.
17:40
@AJHenderson Why?
@Adnan touch screen sensitivity issues
The Thinkpad Helix is still the only Win 8 convertible that has ever appealed to me.
@TerryChia have ya got a Windows 8.1 license?
the thinkpad has much better screen sensitivity
@deed02392 I'm using the Windows licenses sadly.
17:42
aw
I have stuff like Hyper-V, SQL Server etc. Productivity stuff mainly. (Except for Office goddammit)
@AJHenderson Jesus! It has touch screen? Ah, I don't want it
@Adnan It's not compulsory to use. ;)
The specs are still amazingly good for the price.
@TerryChia Arguable, since it runs Win8.
@TerryChia The GFX and the RAM. Wow!
17:43
@Iszi Install Win 7, Linux... whatever floats your boat.
touch screens on Windows 8 work great
my friend has a Vaio and it feels awesome using it
@Adnan oh wait, maybe not, I just realized that isn't the model he was looking at
@TerryChia but it has it as a feature? Are you sure? I can't find it anywhere in that page.
@AJHenderson Are you sure it was IdeaPad?
@ManishEarth what were the logging in difficulties?
@Manish lots of javascript dependence reversing or?
it's not that great of a deal though, I got the Y580 a year or so ago for only $1200
17:46
@Adnan Hmm good point. It's not listed and it's not branded as an ultrabook.
@AJHenderson I'm talking specifically about this one from Microsoft microsoftstore.com/store/msusa/en_US/pdp/…
It has completely different specs
Interesting question here. Are the particulars of software/content licenses on-topic anywhere on SE?
Creative commons experts: if somebody releases content BY-SA, can you include it in content licensed BY-NC-SA?
@Adnan yeah, it is actually $199 cheaper than the lenovo offer
I found the MS one on the second page of models once I noticed that it was a dual GPU system
@Iszi Yes
17:50
@Iszi I'm pretty sure you can. I believe the CC website lists which licenses are compatible.
So you should check that.
the SA may be a problem though
since adding Non-commercial may not be sharing alike
@Iszi Actually, you can even take someone else's BY-SA work and re-release it verbatim as BY-NC-SA
@Adnan Are you sure? My reading says no.
> All new works based on yours will carry the same license, so any derivatives will also allow commercial use.
ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.
@Iszi By no means I'm an expert, but I'm pretty sure you can. That only applies to ""->"NC", but not "NC"->"".
17:54
NC is more restrictive so wouldn't be allowed for non NC content, vice versa, if you make use of NC content, you couldn't license less restrictive either since the original content wouldn't be allowed
@AJHenderson Well, @Iszi, there you go. It appears I was wrong.
@Adnan SA means [Original License] == [New License]. There cannot be any > or < elements.
has more details
technically there can be slight variations (in that if it was SA v2.5 you could release under version 3
but still has to be the same category
@Iszi Sorry, I meant from-to, I didn't mean smaller/bigger than.
17:57
@Adnan Essentially, going from BY-SA to BY-NC-SA is more restrictive. So, [Original License] > [New License] in terms of rights granted.
Ah, I meant from Non-NC licence to NC licence, but not the other way around.
@Adnan SA means it can do neither.
To be more clear, it should be SEA - where E is for Exactly.
@Iszi Ah, Jesus. I completely disregarded SA.
In that case, I'm 100% wrong.
2
@Adnan Dude, that's like half the original license and a third of the proposed new one. Miss your coffee this morning or something?
@Iszi Well, there you go.
It's definite no
18:04
@Adnan Oh, where's that?
@Iszi I Googled "creative commons compatibility"
@Adnan you are old
@Adnan More specifically: wiki.creativecommons.org/…
@Iszi Yeah, sorry, forgot to anchor it.
@kalina Relatively old, yes. To a 5 year old, you'd be old.
now I feel old, being in a room that @Simon visits -.-
18:09
@kalina so does @RoryAlsop, does that make you feel better about your age? :P
@RoryAlsop is basically old enough to be my grandfather
@Adnan Interestingly, for StackExchange, that means we can't include any CC-BY-NC-SA works in our answers.
(Nevermind the obvious *ND issues.)
@Iszi stop using acronyms you ... american!!
@Iszi What the hell?! That sounds correct.
We can't share SA non-commercial creative commons materials.
Wanna bring it up to the meta, @Iszi?
@Adnan I'm not sure it really makes a difference. Whichever way we go, we're missing out on something.
There's no license scheme which is both compatible with CC-BY-SA and CC-BY-NC-SA.
18:17
it's all compatible with NC-USCAI
@TildalWave Ok, now you're just being mean.
@Iszi Neah, just saying that I'm not too bothered by reading what all those acronyms mean. Not trying to be mean at all.
NC-USCAI is what I'd say is a common policy on SE and it stands for "Nobody Cares Until Someone Complains About It"
FWIW I do care, and I've often been asking of posters to be consistent with our CC w/ Attribution Required licence agreement
@TildalWave You missed the "Share Alike" part.
That's the bit we've been discussing here.
@Iszi well yes, but it's often re "forgetting" to clearly identify an extracted part and attributing it, if that was followed consistently, most of the problems wouldn't exist
4
A: Attribution of sources used in questions and answers

TildalWaveAbsolutely agree, and might I add that in some cases where individual users tend to blindly copy/paste off other sources and conveniently: forget to use quotation markup, a.k.a. blockquote for extracted materials, and tend not to clearly attribute their sources with original author's or source ...

e.g.
one such rant
@Iszi I know, you're dissecting it in detail, and that's fine, but more commonly problems are in complete lack of attributing one's sources, not that they might not have been followed 100% consistently with the licence agreement of the source
@TerryChia Incidentally. Last night I was having to pop my network every 5-10 minutes because it kept dropping. Since resetting the SMC this morning it's not happened once.
19:17
@deed02392 weird redirects and a protocol that looked hard to re-engineer
19:34
Today, while at the hospital removing my stitches, this thought came to my mind. I've received numerous bullets in my direction; a hand grenade exploded one wall away from me; on at least 5 different occasions, an air-drop exploded not very far from me, and I was once in a fight were the other person had a knife (police stopped him, I'm no superman), and yet I've never gotten stitches.
Yet when opening a motherducking wine bottle, I got 5 stitches.
Life is funny sometimes.
20:23
@Adnan What the? What happened?
@Adnan Blimey, that must have been nasty! BTW all you need is a wooden spatula and a shoe or a heavy book, and you hammer the cork in
@TildalWave Unfotuenantly, I learned that the next day. Oh, the funniest thing is that when we came back from the ER, I found the corkscrew.
@Adnan Y'know what would help? If the knife had a corkscrew on it.
@Adnan I learned how to open a beer bottle the hard way too. First chipped one of my teeth then someone showed me how to do it with a lighter or something similar
20:31
@Iszi Another thing would have helped is to listen to myself while I was saying "I'm afraid my hand will slip and cut myself deeply" 10 seconds before I attempted to open the bottle.
long time ago tho
The only safe-for-work downside to that is that I won't be able to type my semi-colons with my pinky for a while.
@TildalWave One of the utilities for which I carry this in my wallet.
Though I don't think it would have helped @Adnan much.
@Iszi wouldn't help @Adnan tho :)
@TildalWave inb4
20:34
@Iszi Oh, I love it. This thing is brilliant. Sadly, they took it from me in an airport because I forgot it in my wallet.
and it's silly easy to crack open a beer bottle actually, it's just that when you're up to doing it the wrong way, you tend not to think the right way at all because you already had 10 of them
@Adnan Hey, don't be stealing my story.
@Iszi What story?
They also took yours? Suns of ditches!
@Adnan I'm sure I've told it a few times here before. Had one taken from me by airport security because I had it in my wallet, where it always is, on my return flight.
That is to say, it cleared airport security on the outbound flight.
@ton.yeung Despite hating that part, it was probably the funniest part of the whole experience. We're still laughing about it until now.
20:36
Fortunately, they're fairly cheap. I think they were about 2 USD apiece via Meritline when I got them.
@Iszi Sadly, mine was taken on my outbound.
@Iszi Yup, that's about right.
I just found it downright ridiculous, and exemplary of the sad state of security theater in our airports.
@Iszi When it comes down to it, I don't think that tool can do to hurt a person what I can't do with my hands or my keys.
Extremely stupid.
What's even more ridiculous are some theme parks which try to appear as if they're providing comparable security. If you don't need a bag or "fanny pack", you can pretty much take anything in. You might occasionally get questioned as to whether you might have some contraband on you, to which I'm often tempted to reply "Not to your knowledge.".
@Scott I found somebody at Nixu Oy that is connected to somebody you know. I sent you an introduction request.
Also did the same through @RoryA, but with another person.
@RoryAlsop Jesus! I feel ashamed. I had to redo the request a few times because I got so excited and I didn't check my copy-pasta.
21:00
So I'm disclosing to cloudatcost that I managed to find a way to root about 40 of there servers, disclosed it responsible with proof of concept. They now say that there isn't an issue and that they will take my servers offline if I disclose any of it publically that will lead to "hacking"
I mean according to the guy it was not possible. I just sent him a few pictures of other people's VNC sessions ...
@LucasKauffman "there isn't an issue" + " if I disclose any of it publically"
really wondering how they will respond
How can you disclose publicly something that doesn't exist?
Ducking assholes!
indeed
and I mean I can get root by using a 20 line bash script
I'm not even joking
@LucasKauffman Can we do anything to help?
21:04
@LucasKauffman And now you know why you don't give your true identity when disclosing a vulnerablity to the vendor
@LucasKauffman I hate that. The new computer center head of the institute is similarly evil, if you report a vuln to him he turns on you and investigates you for using the vuln
I don't have any servers there, so I'll be happy to publicly disclose the vulnerability
(anonymously)
@tylerl Sadly, @Lucas doesn't enjoy that luxury anymore.
...using someone else's name
independently reported by another person
@LucasKauffman It took you 20 lines? Surely you could golf that down some more.
21:17
10 hours ago, by ManishEarth
@TerryChia longterm goal: Replace everyone in this room with a 5-line Python script
@Iszi probably
Hey, if I can replace Lucas with 5 LOC, he should be able to replace his proof of concept with 1
@Adnan Copy-pasta? Sounds yummy. Unless that is, literally, pasta with bits of @copy in it.
all you need to do is send a ctrl alt del, interupt boot and make the grub drop back to bin/sh as single user
boom
@Iszi Still yummy.
21:18
@Adnan Perhaps, but then it would be just a bit... disturbing.
@LucasKauffman aaand you're now in jail
I've submitted it to CERT
@Adnan good luck on that
a canadian VPS provider
any idea what loops you need to jump through?
to get to the EU
to be honest which hacker is going to disclose a vulnerability to a vendor with his real identity and then start randomly exploiting it
I'm doing this to get my VPS safe.
@LucasKauffman Rest assured you'll be blamed for every instance of that vulnerability's exploitation which occurs over the next three months - and probably more.
@Iszi I haven't disclosed it publically yet
I don't intend to that as it serves no end
@LucasKauffman Yeah, I don't think that'll ever happened.
21:23
@LucasKauffman They'll assume you've done so out-of-band.
@Lucas Still assholes, though.
@ton.yeung I haven't told you how I was able to bypass controlls
@ton.yeung cc by sa
a 5 year old would see the pattern though
so it surprises me that no one has seen it before me
anyway it's really silly that they threaten you for pointing at their mistakes
< cait^> where I come from, everyone ends up drinking a litre of tequila all at once at some point when they're 14, and the brain quickly learns from this mistake
21:28
I've disclosed it to CERT as well
yea
llamas don't have real names
no worries it's all in the "cloud"
besides those vps aren't running anything critical
it's more a bit of a playground
@LucasKauffman someone probably has, but the majority of people that know how to exploit don't do it for harm
I'd argue that the majority do it when things get in their way
going to sleep now
nn guys
@AJHenderson It's like karate -- by the time you're good enough at it, you don't want to use it for harm (actually seen a rather aggressive friend get transformed into a nonviolent one after learning karate)
21:33
I was the top "hacker" in my high school, but if you looked at myself and the majority of us that were on the top of hacking stuff, we all just wanted to be able to use the computers to make our lives easier without the system restrictions
@AJHenderson exactly
@ton.yeung lol
it wasn't until you got down to the people that learned it from the people that learned it from us that you actually ran in to people that caused trouble
It's all those "ethical hacking workshops" that get to me
Most offer a quick route to this (eg sqlmap), and people start using it for harm
Fortunately most security-related things in the institute reach me eventually, and I've reported a couple. (I can bypass the annoying head of the computer center and just directly talk to a prof I know who is involved in these things)
even when people are using the vuln for harm
@ton.yeung haha
Demos are okay, they scare people. I've given a talk on keeping oneself safe on the Net (clickjacking, the fact that ARP spoofing is possible, etc).
But just belting out a list of tools and what they do --- eh, not so good
@ton.yeung I think I recall reading a story of someone who hooked up a WiFi sniffer to a monitor, and set the whole thing up to look like a picture frame that showed images it caught flying around in the clear.
@Iszi that sounds explicit
21:39
@AJHenderson Easy fix: Quit surfing for porn at Starbucks.
@ton.yeung and then the CEO wonders why company secrets are leaking out to the web from his computer
21:55
@ton.yeung Who on the Internet isn't anymore?
@ton.yeung Chances are, they're on each others' watchlists. So, I think they cancel out.
Why would anyone want this?
Just checked YouTube to see if anyone had made an Avatar: The Last Airbender/Captain Planet mashup. I was not disappointed.
@Adnan I forwarded on the intro request through one of the Finnish guys I know through ISACA
22:28
@RoryAlsop Thank you. Hopefully you forwarded the latest one.
@Adnan yarr - and added in a wee intro message
@RoryAlsop Oh, so nice of view, Rory. I've been so stressed about the awfulness of my CV for a few days now, I hope this will have something positive.
@Adnan no worries. Fingers crossed for you
 
1 hour later…
23:50
Ugh. I've been programming in Python for 5 years and I still can't understand 70% of the Python examples on Code Golf...
*answers
I hate it when people try to cram their whole program onto one line...
That's the intention of Codegolf, isn't it?

« first day (1160 days earlier)      last day (4018 days later) »