The DMZ

AviD

16:07

@ton.yeung heh. not actually working with it, just learning it.

@ton.yeung well, what I get so far, I'm not crazy about. Workable, sure, but that's not my only consideration in "liking" something.

@ton.yeung No. I'm speaking purely from a software engineering, theoretical perspective.

"your needs" would fit for how usable it is, but not how good it is.

@ton.yeung like I said, "usable" is not the only criteria.

for example, male genitalia is a lot more "usable" than the female variety, but that doesn't mean I like it more.

and yes, I am saying that AngularJS is just a big cock-up.

In my opinion.

@ton.yeung and I'm saying why liking it for being usable is very superficial, and not a very good choice ;-)

@ton.yeung quality :-)

@ton.yeung dont know yet, havent learned enough of them :-)

though so far, from the little I learned about them, Knockout seems to be functionally equivalent to Angular, but built with a bit more engineering in mind.

though I admit I have yet to get really in depth on either of them.

@ton.yeung okay, I promise to revisit this conversation when I've learned a bit more...

Terry Chia

@AviD Ember.JS maybe? Jeff used that after all.

AviD

on a different note, isn't it odd that we call internet radio, "radio"? After all, it doesnt use radio waves at all....

Terry Chia

I feel like AngularJS is the PHP of the Javascript framework world. It's easy to use so it's popular.

@ton.yeung The basic stuff is.

AviD

@TerryChia I can see that, and with it goes an appropriate level of quality in it's design.

Terry Chia

But it gets messy real fast when you try to do something serious with it. Just like PHP.

AviD

16:22

@ton.yeung did google originate it though, or just adopt the project?

Terry Chia

@ton.yeung Exactly. Just like PHP.

AviD

more like heresy.

Terry Chia

You know what a damn cool framework by Google is? GWT.

@ton.yeung GWT = Java basically.

AviD

@TerryChia I'd like to get a chance to look into that.

Terry Chia

@ton.yeung Really? I wasn't aware about python and go.

@ton.yeung I don't see python, go or ruby mentioned anywhere.

AviD

16:25

@ton.yeung I'm sorry, but every time I hear go, I get up to leave.

and how can you search for that??

Terry Chia

@AviD site:gwtproject.org

AviD

I mean, if you're searching for help or a specific question on the language...

Terry Chia

@ton.yeung Pffft!

AviD

@ton.yeung did you mean to say, you were completely GAE?

NOT that there is anything wrong with that.

@ton.yeung are you sure thats not the game?

@ton.yeung GAAAAAEEEEE

Terry Chia

Yawn, waiting for DNS to propagate is so annoying.

@ton.yeung What? No. My blog's domain.

Anonymous

16:49

What is more complete for wifi auditing, Black Arch, good ol' backtrack or wifislax?

kalina

hi thur

AviD

Ardbeg is good for an audit.

kalina

bye again

Anonymous

@AviD Ardbeg?

Anonymous

oh that's whiskey not sold here

Anonymous

16:50

lol

AviD

well, get something else then.

you need a good whisky for an audit.

Anonymous

@AviD it's a quick thing

Anonymous

I just need some good ol' live cd

Anonymous

what'd you use?

kalina

everything avid does is a quick thing

Anonymous

17:07

wait what

Anonymous

So Backtrack migrated to Kali

Anonymous

This is new to me

Terry Chia

@PatoSáinz Have you been living under a rock?

Anonymous

@TerryChia I haven't followed those news for a while

Anonymous

Also, I didn't need a pentest distro for a while

kiBytes

17:12

2k!

I have some good news (apart from the 2k thing)

I will begin working in the Information Security in my enterprise on two weeks!

yay!

AviD

@PatoSáinz TWSS

@PatoSáinz not my thang

kiBytes

@PatoSáinz Kali seems fine enough, everybody is using it

AviD

@kiBytes gratz!

kiBytes

@AviD =D

Scott Pack

18:35

Anyone here able to answer me a quick HIPAA question?

tylerl

@ScottPack yes

but not correctly

Scott Pack

Never you mind Radio Shack.

tylerl

But since you're asking the Internet for legal advice, clearly you already understand the risks.

Scott Pack

We're pretty close to a salt mine. That should be enough.

Rоry McCune

@ScottPack I like @tylerl could provide you an incorrect answer if you like :)

Scott Pack

18:38

That's been my best thought. I was told something, that I'm trying to validate, and I'm having trouble finding any information about it.

Adnan

19:29

@AviD What's hurting you now?

Dude, JavaScript lacks many programming primitives that exist in other languages. Many people are coming from other semi-decent languages find that very confusing. For that reason, JS frameworks have to come up with "hackish" alternatives.

tylerl

Sweet Jesus. This site delivers search results IN RANDOM ORDER to the browser and then sorts the list in javascript before displaying it. Holy WTF batman.

Adnan

@tylerl Please tell me they at least give the user the option to have different ordering options client-side

tylerl

@Adnan NOPE.

Adnan

@tylerl Are you sure it's coming in random order [sic]?

tylerl

The whole reason why I'm even involved is that the owner wants previous/next navigation on the items page, instead of backing out into the results list. OK, simple.

Not random, unordered.

Adnan

19:36

@tylerl Pagination. This is the thing I spent my teenage years doing.

tylerl

Simple except that even though the title of the items is "Item 1", "Item 2", "Item 3"... they DONT APPEAR IN ORDER in the database.

so they sort by TITLE in the display.

Rоry McCune

@Adnan is that what you kids call it these days

tylerl

I paginated a few times when back in high school. Just to try it.

Adnan

@tylerl How was it?

tylerl

@Adnan It's never as good as the first one.

Rоry McCune

19:39

back when I were a lad we called it "turning the page on the book"

tylerl

@RоryMcCune cause you were a bunch of prudes back then

FREE YOUR MIND, man.

Rоry McCune

@tylerl and we didn't have anything to paginate with apart from books!

Adnan

@RоryMcCune Maaan, turning the pages on the book. Yeah, I hear that was the stuff.

@tylerl Sooo, what are you planning to do?

tylerl

@Adnan Stop and re-read the code apparently.

cause this is a new kind of stupid.

Scott Pack

@Adnan I always put a uint sortOrder = rand() in my code.

tylerl

19:42

Only reason why I'm even entertaining this is because they're going to pay me several tens of thousands of dollars to redo the whole thing from scratch.

Adnan

@tylerl I like tens of thousands of dollars. I always like tens of thousands of dollars.

@ScottPack and you loop that and assign it to each row then order by it?

(Serious question, by the way, @Scott)

Scott Pack

Seriously? Fuck no, that sounds like an overall stupid idea.

Adnan

@ScottPack I meant if you want random ordering and the database engine doesn't support it.

I find the idea quite interesting

Scott Pack

Oh, I dunno, yeah maybe?

tylerl

@Adnan The thousands are better when they come in tens.

Adnan

19:46

@tylerl They're even better when they come in hundreds

tylerl

@Adnan yes. Entire herds of thousands.

a veritable savannah of large bills.

In other news -- I never really understood the idea of website defacement. Someone called me this morning because all the fields in his (home-made) CMS have been replaced by the string "Hacked by h4x1337". Good job kid, you learned how to use havij.

god what a shit-show

Rоry McCune

@tylerl but the client has good backups right...

tylerl

Yep. I successfullly restored the backups from yesterday. Now he's got a perfectly clean site with several hundred SQL injection vulnerabilities which are most definitely known to an attacker.

so I expect to get another call from him before the end of the day.

I let him know how much it'd cost him to fix his crappyass PHP app. I'm guessing he'll wait till Mr. Havij comes back before he reaches a decision.

Rоry McCune

@tylerl ah well at least he has backups, those usually only come after the first disaster... well for the issues if the attacker is a skiddie a WAF might deter them long enough to get things fixed...

tylerl

20:02

@RоryMcCune This isn't the first disaster. The first disaster very nearly sunk the entire company.

He's been keeping backups ever since.

Rоry McCune

@tylerl ah sounds more like what I'd expect..

tylerl

@RоryMcCune yes. People are surprisingly predictable.

AviD

@Adnan oh, I'm not confused, and I am well aware of the hackish workaround required to do the awesome stuff in Javascript. I was simply referring to them being confused about those primitives. Just because you build a workaround for not having the primitive, doesnt make it BE the primitive.

Sure, you can abstract it all away and make it look the same, and in context call it the same (since it doesnt usually matter), but when you are explaining your implementation, you should damn well be clearly specific in your usage of those words.

also the "hackish" that was bothering me was their specific implementation, as compared to a better-engineered solution.

though again, this is very shallow and preliminary, just a first look. Havent really delved in yet to know if my initial impression is correct.

That said, that is my initial impression, so there's that.

tylerl

@AviD You can use Angular w/ Dart. No more hackishness.

It compiles to JS, so no worries.

AviD

will have to look at that, then.

though for the immediate need, I am reviewing a client's project, so it's moo.

@tylerl lol, thats funny.

tylerl

20:09

Dart is a really cool idea and a needed solution to a very real problem. The other problem is that JS is all hipster since node came around, so people flatly refuse to acknowledge teh JS crappyness.

AviD

"Backup Injection"?

Scott Pack

Perv.

AviD

@tylerl yeah, I agree on the 2nd one. Have no clue on the 1st.

@ScottPack lol, I should have expected that.

Yes, I should have.

Scott Pack

My timing couldn't have been more perfect. It only makes the 2nd or 3rd time I've looked in here all day.

tylerl

@ton.yeung Javascript

AviD

20:15

@ton.yeung It's not opposite, it is the inverse function.

tylerl

my joke was better

AviD

@ton.yeung Never read the book "To Kill A Jokingbird"?

@tylerl straightforwardly, yes. But mine was better because science!

Pedantry is always funny.

@ton.yeung "To Joke a Mockingbird"?

tylerl

mandrill.com <-- could they have come up with a worse animal to name their company after? It sounds like a porn site.

AviD

Ah. "To Joke a Killingbird".

@tylerl lol, isnt it? A sextoy shop, perhaps?

AviD

20:33

@ton.yeung for a mandrill? How about @Adnan?

AviD

21:20

y'all seen this? theguardian.com/world/2014/feb/27/…

especially youse British people.

and more details: thedailymash.co.uk/news/war/…

tylerl

21:35

that's my favorite story of the week. Apparently the fact that brits are spying on all webcams would have been a non-issue if it wasn't for the fact that all the government employees are treating the archive like their own personal porn collection.

Classy.

AviD

@tylerl yeah, I couldnt find a link to that.

Rory Alsop

... no words

AviD

@RoryAlsop cuz you're too busy looking at the pictures?

Scott Pack

Oh, but they're only collecting metadata. And by metadata we mean boobs.

7

And by boobs we mean your boobs.

AviD

"by metadata we mean boobs." I am going to use that line. Often. I am going to use it hard.

Scott Pack

21:43

Sounds like a wiener.

Iszi

22:30

@ScottPack I considered posting a picture of my boobs as a humorous response, but then realized that the NSA/GCHQ probably has some super-secret boob-recognition software that it'll use to hunt me down and punish me for it.

Plus, I'm not sure so much chest hair is considered SFW.

Rory Alsop

@Iszi eww

Iszi

Vote for the swag you want in Gerbox's Homeworld Remastered Collector's Edition!

Homeworld Remastered site launched w/ a survey about a collector's edition. Check it out here: http://www.homeworldremastered.com/

Tweeted by DuvalMagic on March 5, 2014 at 10:29 PM

Only $25 for six more inches!

Gilles

22:59

@Iszi “I'll take two”, she said

AviD

23:17

this is cool: edition.cnn.com/2014/03/04/tech/gallery/…

Gilles

@AviD the Wikipedia article has links to other similar maps, including historical maps

Submarine communications cable

A submarine communications cable is a cable laid on the sea bed between land-based stations to carry telecommunication signals across stretches of ocean. The first submarine communications cables, laid in the 1850s, carried telegraphy traffic. Subsequent generations of cables carried telephone traffic, then data communications traffic. Modern cables use optical fiber technology to carry digital data, which includes telephone, Internet and private data traffic. Modern cables are typically in diameter and weigh around 10 kilograms per metre (7 lb/ft), although thinner and lighter...

you could tag each endpoint with the name of the agency that listens to the traffic (NSA in the US, CESG in the UK, etc.)

Do CNN links stay around for a long time? This map is better than the non-interactive ones currently linked in the WP article

Transcript for