The DMZ

Stack Exchange

07:08

kiBytes

07:20

I believe this belongs here:

35

Q: Is it OK to set up passwordless `sudo` on a cloud server?

Sorry if the question is vague but I don't know a better way to ask and I didn't see the caveats/tradeoffs of the approach discussed here. I love the idea of accessing servers via keys, so that I don't have to type in my password every time I ssh into a box, I even lock my user's (not root) pass...

Rоry McCune

Morning all

In case any of you student types are interested in this kind of thing, OWASP has been selected as a Google Summer of Code org

owasp.org/index.php/GSoC

so there could be opportunities to work on their projects for pay over the summer...

TheRookierLearner

@RоryMcCune Yey! Thanks a ton @RоryMcCune

TheRookierLearner

07:37

On looking more into it, (for the interested ones) even NMap has been selected for GSoC (nmap.org/soc)

Rоry McCune

@TheRookierLearner yeah I think they did it last year too, that'd also be an interesting one, if your tastes run to more network security rather than web security.

whilst pithy I'm not sure that this answer really would be helpful to someone asking the question....

0

A: What are the first steps to take once you've been hacked?

You should already have an established protocol with the counsel and DFIR firm that you have on retainer. What? You don't have that yet? Kiss your business goodbye!

TheRookierLearner

I am actually interested in web security more than network securityand there are opportunities in NMap too for web security in the NSE developing position (atleast based on what I skimmed)

but being a beginner in the field sucks as there are lot of people more knowledgeable than you who are competing for the same position :-(

Does anybody here know what AMF (on this page owasp.org/index.php/GSoC2014_Ideas#OWASP_ZAP_-_AMF_Support) stands for?

Terry Chia

07:58

@TheRookierLearner en.wikipedia.org/wiki/Action_Message_Format I guess?

TheRookierLearner

@TerryChia - Yup, that's it. Thnx!

Rоry McCune

08:32

big list of Android security papers for those who like that kind of thing

github.com/droidsec/droidsec.github.io/wiki/Android-Whitepapers

kiBytes

08:55

I don't think this is so low quality, it looks like a fair question to me

0

Q: Security checks on file transfer

What are the security checks that I can make on a PDF file being transferred between server and the client?

file-encryption

Adnan

@kiBytes While I agree with you, I still can't see what is it exactly that the OP wants.

Does he want to the client to check if the downloaded file is indeed the same file (integrity)?

Does he want the client to be protected from possible exploits in the PDF file?

kiBytes

09:07

> @kiBytes While I agree with you, # :_)

Adnan

@kiBytes Whaaa?

CodesInChaos

It's one of those questions where the threat model is essential, but not stated

Adnan

@CodesInChaos Indeed

Lucas Kauffman

giys

guys

-1

Q: Financial services systems change failures and how to control them

Here is an article I’ve posted on my blog at: http://grep-blog.blogspot.co.uk/2014/03/financial-services-systems-change.html Referencing for the facts detailed in this posting are in the associated blog post – URL restriction means I couldn’t have them here. When it comes to systems change the...

source-code security-audit

kill it.

Adnan

@LucasKauffman 80% actual spam.

Flagged it as spam.

AviD

09:18

0

A: Detecting skimmers and other ATM traps

FUCK YOUR ANTI SKIMMING AND SCREW YOURSELF,FUCKING ROMANIAN BUSTARD

amusing.

Adnan

@AviD Have I missed something?

AviD

@Adnan I didnt read closely enough, there was 20% that wasn't?

Adnan

What did Romania do?

AviD

@Adnan I'm not sure. I think "Romanian Bustard" was actually the signature.

Adnan

@AviD Or he just wanted to let us know that he likes having sexual relations with Romanian bustards.

A fine gentleman he is

AviD

09:22

That could be.

I know you like sharing your concurrent activities with us, too.

Adnan

@AviD Fortunately, I haven't yet developed the fetish to share them in form of answers on the site.

AviD

you should try that!

Adnan

@AviD Do you really want me banned that bad?

Why don't you just false-flag it and get it over with.

AviD

I would ban you so hard.

4

Adnan

@AviD I heard that a couple of days ago.

We were roleplaying the infamous SE mod vs. SE user scene.

AviD

09:28

oh gross.

Adnan

@AviD Not that gross.

AviD

you have SE mod roleplaying sex games??

Adnan

I was @Lucas and @Kisunminttu was you.

Ah, so much fun!

Lucas Kauffman

what the actual fuck

5

AviD

My curiosity wants details, but I'm not sure I can stand it.

Lucas Kauffman

09:29

@AviD be careful what you wish for, you can't unforget things.

Adnan

@AviD Well, we start by me spamming all over the room, then @Kisunminttu catches me in the act. She then puts the room into gallery mode and nobody can say anything except her. She issues a warning, and then I resume spamming.

At one point, she starts banning me.

Wanna hear more? I bet you don't want.

AviD

every other word in that is a euphemism, isn't it.

you "spamming" all over. She puts the "room" into "gallery mode"... "say anything".

"warning", "banning", etc....

Adnan

@AviD Actually, reverse the roles (I'm the mod), and consider those as euphemism. Then you wouldn't be that far from the truth.

There, now you have something to think about

Terry Chia

@AviD Isn't it worse if they aren't euphemisms?

AviD

okay I've made up my mind! Yeeaaaahh, I REALLY dont want to hear it.

Adnan

09:35

@TerryChia :D

Terry Chia

Feb 25 at 14:02, by CodesInChaos

Pretty much everything starred on the DMZ is crap.

Truth.

Adnan

Yeah, I run my own local SE installation just to fulfil my fantasies of being a mod.

Rоry McCune

@Adnan ok literal LOL at athat

Adnan

@RоryMcCune Yeah, wait until @Kisunminttu finishes work and sees that.

Terry Chia

@Adnan You need a month away from The DMZ. I'm serious. It's for your own good.

Adnan

09:39

@TerryChia For me own good? Hmm.. I'm intrigued. Please elaborate

AviD

@RоryMcCune hey, any change of info on sponsoring speakers' travel costs for AppSecEU?

Terry Chia

@Adnan You are addicted. You need to quit.

Rоry McCune

@AviD 'fraid not :( Could you try hitting up OWASP on the move?

AviD

nah, they dont do conferences.

and its limited to a laughable amount, compared to Israel travel prices.

Rоry McCune

@AviD bummer, was going to say, you could try finding a chapter meeting, just before it, then just happen to stay over :)

AviD

09:42

Hmm, maybe I should submit, then find a consulting company that wants me to "represent" them....

@RоryMcCune hehe. Though what chapter in their right mind would have a meeting right before the 3rd biggest owasp conference?

THASS RIGHT, I WENT THERE.

(OWASP IL was bigger than EU last year, I think.... )

Adnan

@AviD If I had anything to submit, that's exactly what I'd do. I'm pretty sure many companies would like a couple of minutes about them in your talk

Rоry McCune

@AviD oh dear OWASP country based rivalries!,

AviD

@Adnan nah, you dont really get to pitch the companies in the talks.

Though I do find it a bit grating when some speakers go on about their CV, what the company does, their history, etc....

Adnan

@AviD No no, that's not what I meant. Can't you say "I was working on case for X, they do blah blah, which presented difficulties when blah blah"

AviD

Especially when its not relevant to the content.

@Adnan ah, mention them in passing, sure.

I wouldnt do it, unless it was absolutely pertinent to the content. But sure.

Adnan

09:47

@AviD How long does it take for close votes to decay? 3 days?

AviD

dont think so, why?

think its more like 10 days or longer.

No wait, I actually don't have a clue.

3

Adnan

@AviD Oh alright, just wondering

Terry Chia

@AviD Star-worthy.

Adnan

6

A: Vote datetime in datadump - No time?

Well, you should know that all ... Close Reopen Deletion Undeletion ... votes are automatically aged away and hard deleted 4 days after they've been cast. So there's no actual permanent record of these votes being cast, unless the threshold is reached on the question. So all you'd really be ...

AviD

@TerryChia Still wouldn't stop me from expressing an opinion.

@Adnan ah cool, thanks. So we were both right.

Adnan

09:50

@AviD Suuuure, both.

AviD

heh.

CodesInChaos

@Adnan It can't really be a hard delete. My profile page keeps track of votes (including close/delete) forever.

Adnan

@CodesInChaos Oho! Well I guess then it's just that their effect decay

AviD

10:16

@CodesInChaos including ones that were cancelled?

Adnan

10:43

@Lucas Duuude... why do you lack retainer relationship?

Best of luck to the people who voted me down with your lack of retainer relationships — atdre 43 mins ago

Lucas Kauffman

@Adnan Im not even sure what that means

CodesInChaos

I voted to reopen on stackoverflow.com/posts/12420162/revisions on 18th Sept 2012. It was never reopened, but the vote is still in my list.

Adnan

@LucasKauffman Me neither. Google doesn't help

CodesInChaos

So expired reopen votes are still visible in my profile

kiBytes

11:10

Do you know the "seven keys" exchange celebration of the DNSSEC?

Well, tomorrow I have almost the very same process in my organization

Lucas Kauffman

I think I might have bricked my iPhone

kiBytes

@LucasKauffman even restoring from internet?

Lucas Kauffman

@kiBytes Its hanging on waiting for iphone in restore mode

going to try and put it in DFU now

Terry Chia

@LucasKauffman Heh, what did you do?

Lucas Kauffman

@TerryChia was upgrading it and ignored it while it was busy, then I remembered I still needed to schedule a conf call...so I grabbed my phone from its stand on my desk

kiBytes

11:14

@LucasKauffman Apple has a serious recovery system, it is almost impossible to brick an iPhone (unless you make it on purpose)

Terry Chia

@LucasKauffman That's interesting. Apple's update process is usually pretty solid.

kiBytes

I believe you will be able to restore it =)

Lucas Kauffman

we'll Im going through a few guides

but so far iTunes isnt liking any of it

Adnan

@Lucas Jailbroken?

Lucas Kauffman

@Adnan nope

kiBytes

11:18

@LucasKauffman if you are not able, they definitely will fix it for you in an Apple Store.

but remember to make an appointment

Terry Chia

@RоryMcCune Btw, one slightly negative thing about GitHub pages. I have to use DNS to forward my root domain to the www subdomain which is kinda ugly. :P

Lucas Kauffman

@kiBytes It's a leased phone, so I just need to bring it in at work

oh wait

now its doing something

I see a line forming

AviD

@LucasKauffman TWSS

kiBytes

@LucasKauffman piece of cake then =)

AviD

interesting conversation, when discussing some application design:

> ME: So, the Data access layer will probably need to be DB-agnostic.
> HIM: We are using MSSQL, and will probably need to support Oracle.
> ME: Right, that's why it has to be db-agnostic - because if you're using Oracle, you sure don't believe in a god.

Adnan

11:34

@AviD Hehehehehehehe

Hahahahaha

Terry Chia

11:47

@AviD Remind me again why people continue to fling money at Oracle for that shitty DB?

AviD

@TerryChia because more expensive is always better?

Rоry McCune

@TerryChia no one ever got fired for choosing Oracle/Cisco/IBM/SAP (delete as appropriate)

Adnan

@AviD @Terry and Dell

AviD

Actually it's because they have expensive sales people.

Adnan

One reason is ducking Dell

Terry Chia

11:48

@Adnan Dell actually has solid products in their business category.

And they sure make nice monitors.

AviD

@Adnan Dell makes you buy Oracle?

Actually MS is reselling Oracle now, on Azure.

Adnan

@TerryChia No no.. you were asking why people are paying money for Oracle. One reason is Dell

Terry Chia

@Adnan Oh? Mind elaborating?

AviD

When I found out the IBM (via Global Services) was the local reseller in Israel for Oracle, I laughed for days.

Terry Chia

@AviD Wtf? MSSQL is 100x better than that shitty Oracle DB. And I'm not even the biggest Microsoft fan.

AviD

11:50

Especially since DB2 is practically non-existent here.

Adnan

@AviD @Terry When you want Dell to manage your servers, they restrict what kind of software you can install/use. Everything MUST go through them. Everything.

Our client has a contract with Dell

They can't use MSSQL

AviD

ahh, I see.

Terry Chia

@Adnan Ah. Now the next question is why you want Dell to manage your servers for you. :P

AviD

@TerryChia Hey, preaching to the choir here. HOWEVER the Azure group is about selling machines. People like to buy big machines to run oracle. Ergo, they can make a mint by selling Oracle on big Azure machines.

Adnan

@TerryChia Me? I can manage my own servers (to some extent). Our client? Heh... let's have this conversation with a company that has thousands of branches in nearly a 100 country.

That kind of companies don't have ears.

AviD

11:52

@TerryChia It used to be very popular. It does make hardware replacements cheaper that way.

Terry Chia

@Adnan That company sounds big enough to afford a few sysadmins.

Rory Alsop

Hello lovely denizens of the DMZ

Adnan

@TerryChia Too big to change anything that sort of works.

AviD

@RoryAlsop and @Adnan.

Lucas Kauffman

@RoryAlsop 'sup RoryA?

Rоry McCune

11:53

@RoryAlsop <waves>

Adnan

@RoryAlsop o/

Terry Chia

@LucasKauffman Why is that directed at me? :P

AviD

@TerryChia you're missing the point. A company that size probably has to replace a couple dozen servers every month.

consider it a form of hardware insurance.

Adnan

@AviD :|

AviD

or hardware leasing. Which it is.

Rory Alsop

11:53

Another gorgeous day, a fun visit to an incident response centre, and another Love/Hate gig this evening. Doesn't get better than this

Rоry McCune

@RoryAlsop it's v. nice here. Frosty this morning but warming up a bit now

Terry Chia

@AviD So go for open hardware and skip the Dell premium.

AviD

@TerryChia That's what Google did. Eventually.

Terry Chia

(This is of course coming from the dream world where people do sensible things.)

AviD

@TerryChia but its still a non-trivial cost, overhead, manpower, accounting nightmare, etc.

Terry Chia

11:56

@AviD Yeah. If you are running things at that scale it's waaaaaaaaaaaay cheaper.

I like what Microsoft (is it them?) is doing. Shipping containers full of servers. Replace the entire container if the servers in them go dead.

Pretty novel solution.

Rоry McCune

AviD

@TerryChia well, it depends. Take into account that each Google DWH has entire teams dedicated to just that - replacing faulty hardware, procuring replacement hardware, keeping track to avoid "leakage", etc. That is non-trivial overhead.

@TerryChia yeah, saw that. I think it was like 10K servers in a box?

probably some built-in redundancy there, too.

Terry Chia

@AviD I think it's mostly the fact that your software has to assume that your servers will go dead and react accordingly.

Which is perfect for companies like FB/Google/MS who writes the software stack they are using.

AviD

so they dont have to replace the box after one server goes dead, or even 10 - they likely wait till the ratio is unfavorable.

Terry Chia

@AviD Yeah, something crazy like that. It's for Azure IIRC right?

AviD

11:59

@TerryChia yeah. It is one of the biggest farms in the world, after all....

Google and AWS are probably the only ones bigger.

FB close too.

Terry Chia

I really dislike FB as a company but the Open Compute project is freaking awesome.

AviD

@TerryChia wasnt that MS?

Terry Chia

@AviD Nope, it started at FB.

AviD

wait, I'm thinking of the Open Hardware Design, or whatever they called it.

Whats Open Compute?

Terry Chia

It's the one worthwhile contribution Zuck made.

@AviD opencompute.org

OSS server designs basically.

So companies order servers from ODMs built to that specification and skip the Dell/IBM premium.

AviD

12:03

ah okay, so its the same idea as MS.

Terry Chia

@AviD Any links to the MS one? I never heard of it actually.

AviD

dont really remember what its called...

arstechnica.com/information-technology/2014/01/…

Terry Chia

@AviD Ah, same project. I guess MS contributed to it.

AviD

ahh okay.

so I wasnt totally confused, just blocked out the part about FB starting it.

Terry Chia

@AviD Which is the right assumption more often than not. ;)

AviD

12:05

ha, exactly. Tough datapoint to assimilate....

Terry Chia

13:45

FYI: github.com/popcorn-time/popcorn-app ;)

Too bad it's node but the idea is pretty neat.

deed02392

@TerryChia what don't you like about Node?

Terry Chia

@deed02392 We are not doing this again.

deed02392

'this'?

Terry Chia

Just type "Node" into the chat search bar. There should be 123456789 results.

Rоry McCune

@TerryChia well 123456790 now...

deed02392

13:52

I've never used it myself

does popcorn time request torrent chunks sequentially?

I'm wondering how they decided it's called 'streaming'. Doesn't it wait until the whole file is assembled before playback?

Rоry McCune

14:04

@TerryChia Presuming you can install linux on it, this might of interest in the small relatively cheap PC stakes liliputing.com/2014/03/…

Terry Chia

@RоryMcCune Yeah, I saw that. It's pretty neat.

Rоry McCune

@TerryChia for $179 and openable for upgrades, it's pretty cool

Terry Chia

But I have been crunching the numbers, and a secondhand Sandybridge Mac Mini is definitely more cost effective over here compared to the Chromebox or a NUC.

Rоry McCune

@TerryChia righto, actually reading down that review you can install linux on the chromebox.. well if I have need of another small PC might be an option.

I actually have an old mac mini which I use but it's getting a little long in the tooth..

Terry Chia

@RоryMcCune It's definitely a neat little box.

And the Chrome OS aspect sure makes it a nice maintenance free box for surfing the web.

Rоry McCune

14:10

@TerryChia yeah that seems to be the pitch, that they're useful hassle free surfing devices, I can kind of see that.

As long as you're not worried about privacy of course

speaking of worried about privacy, I've not seen @kalina about for a while

Terry Chia

@RоryMcCune I'm using Chrome signed into my Google account on Linux. Not much of a difference really. ;)

Kisunminttu

@Adnan This is my favorite part of the story: "At one point, she starts banning me."

Rоry McCune

@TerryChia yeah, google know............... everything

I moved back to Firefox recently

happy with the change

Terry Chia

@RоryMcCune I won't do it till they shift to multiprocess.

A browser in 2014 running in a single process is broken really.

Rоry McCune

@TerryChia not had much of a problem with slowdowns so far..

Terry Chia

14:13

@RоryMcCune It's not so much slowdown as a bad tab bringing down the entire browser.

Rоry McCune

@TerryChia true

Adnan

@Kisunminttu I told you many times. That's not gonna happen

kiBytes

Here is one for any of you (I am looking fora an experience approach more than a book approach)

if you are in an emergency and you need to patch a production system ASAP

Adnan

@RоryMcCune That's not your backyard, is it?

kiBytes

is it encouraged to use the configuration management protocols?

Rоry McCune

14:15

@Adnan yep view from my office window :)

kiBytes

or since they could be "delayed" the team should focus on fixing instead of politics?

(consider also the risks involved in not following those policies)

Adnan

@kiBytes What's "configuration management protocols"?

Rоry McCune

@kiBytes I've seen the idea of emergency fixes where the team does the work with minimal process and then fills it out retrospectively

kiBytes

@RoryAlsop that's what I think but I am having some people thinking the opposite

and I do understand their point as well, since risks are high

AviD

@RоryMcCune isn't that the same greenhouse as in Breaking Bad....?

Rоry McCune

14:17

It's important that the stuff is done and that the retrospective process is rigorous enough to avoid people using the emergency process for everyday stuff

Adnan

@RоryMcCune Daaamn! That's sweet

Terry Chia

@kiBytes There's no one right answer.

Rоry McCune

@AviD ....no... apparently our polytunnel was up to 25C yesterday though. which is surprising given we had ground frost overnight.

FEichinger

I feel dirty.

kiBytes

@Adnan that's the policies you should follow when you are developing such as branching, checking dependencies, building binaries, tagging, testing, etc. etc...

Rоry McCune

14:18

@FEichinger PHP?

Adnan

@FEichinger I am dirty.

FEichinger

@RоryMcCune No, no, PHP has long since stopped making me feel dirty. I'm deep enough in that shit to have found the magic cave inside.

But I just bought a ~1000 page book on jQuery for work. <.<

AviD

@FEichinger euphemisms, again.

Rоry McCune

@FEichinger eww

kiBytes

@RоryMcCune of course I think we all agree that that is bad for everyday usage xD

Adnan

14:19

@kiBytes But where did you get that term from? Can't find anything on Google. Did you just invent that term?

FEichinger

@AviD I know, I should've split those sentences for better out-of-context quoting.

Rоry McCune

@kiBytes yeah it's just one to watch that people don't use "emergency" to mean "I can't be bothered filling out the paperwork"

kiBytes

Configuration management

Configuration management (CM) is a systems engineering process for establishing and maintaining consistency of a product's performance, functional and physical attributes with its requirements, design and operational information throughout its life. The CM process is widely used by military engineering organizations to manage complex systems, such as weapon systems, vehicles, and information systems. Outside the military, the CM process is also used with IT service management as defined by ITIL, resp. ISO/IEC 20000, and with other domain models in the civil engineering and other indust...

@RоryMcCune of course, and emergency should be spotted and noticed by the management =)

Rоry McCune

Adnan

@kiBytes Okay, that's actually wrong. This is what you're talking about en.wikipedia.org/wiki/Software_configuration_management

@RоryMcCune I hate you? I'm going to Scotland this summer? I love you?

Rоry McCune

14:22

@AviD @Adnan that's the view down into the village today, we had a ship (the hebridean princess I think) in

kiBytes

@Adnan I have used the two terms indistinctly and never had a problem =) ( are you being picky, again? )

Rоry McCune

@Adnan well remember that this is the 2nd nice day we've had in about 5 months...

Adnan

@kiBytes Not at all. When you say Configuration Management Protocols, I have to start using my memory to think "What kind of protocol is that? Is he talking about Network Configuration Management Protocol?" and then turns out you mean Software Configuration Management.

Add to that the overall ambiguity of your question

The more specific and clear you are, the better the chance you'll have suitable answers

@RоryMcCune I've been meaning to visit Scotland for a while now. If for anything, it's for the redheads and whiskey

kiBytes

@Adnan ok ok, =)

Protocol is not the best word in English, maybe I should have used policies

Rоry McCune

@Adnan those we definitely have..

kiBytes

14:27

but in Spain we use "protocolos"

Adnan

@kiBytes While it is indeed a good word (protocol), in the context of our profession, protocol can refere things like NTP, FTP, HTTP, etc. rather than something more "paperworky" on how to do certain things in certain situations.

AviD

@kiBytes It shames me to admit this, but I am in complete agreement with @Adnan.

kiBytes

@AviD no prob =)

AviD

@Adnan yeah, absolutely. In IT, protocol tends to mean networky bits-y type of stuff. For human-y squishy stuff, you could go with procedure. Policy could work too, but that's not strictly accurate.

always bugs me when in e.g. cop shows they keep saying "we'll follow protocol on this". eeeeuuurgh.

Kisunminttu

@Adnan Spoilsport... Oh, the lantern thing is now fixed, by the way. Yay!

AviD

14:41

what on earth is "the lantern thing" a euphemism for?? The mind boggles.

and yes @Kisunminttu, I have already decided that everything you say is a euphemism. Thank @Adnan.

Iszi

I either need more RAM in my work computer, or just should stop working on Excel sheets with hundreds of thousands of rows.

Kisunminttu

@AviD You know, the lantern thing, on my balcony!

Adnan

@Kisunminttu Oh lord, you're not making it any better.

AviD

hurhurhur, your "balcony"

@Iszi probably both.

Kisunminttu

@Adnan Heeheehee

AviD

14:49

@Kisunminttu I like you already.

Iszi

@AviD I do not disagree.

Okay, it turns out I was adding a zero. Still, working on 50,000 rows is pretty painful.

AviD

@Iszi yeah, reminds me of my schedule plan at a previous job.

Adnan

@AviD Why don't you two get a room already?

AviD

No, it did not last long, I tell you.

@Adnan ...

Terry Chia

@AviD @kalina?!

AviD

14:57

Has anyone else noticed that since @Kisunminttu has been here, we haven't seen @kalina....?

You never see them in the same room at the same time....

Adnan

@AviD Could @Kisunminttu be actually kalina?

AviD

@Adnan that was my implication, yes.

Adnan

and I'm actually dating.. eeugggh... dating.. euuhgghhh... k.... uuuggghhhhhgmmhh ... kalina?

2

Rоry McCune

@Adnan or could @Kisunminttu actually be @Adnan

@Adnan and you're dating yourself ;op

Adnan

@RоryMcCune So wait wait.. Kalina, Kisaminttu, and I are all one person?

Rоry McCune

14:59

@Adnan could be :)

FEichinger

@AviD I can safely say: That's unrelated.

But that's also all I'm saying.

AviD

@FEichinger you seem to know an awful lot about this.

Terry Chia

@AviD Could @FEichinger be @kalina?!?!

FEichinger

@AviD I know enough to rule out what you implied. :P

But that's also pretty much all that I do know, so ... yeh.

@TerryChia That would be awkward.

AviD

@ton.yeung that's the GRC pseudo security theater, right?

but less.

the review queueueues are pretty full today, guys - have at it!

@ton.yeung you're secretly @kalina too?

Rоry McCune

15:19

@avid dailytech.com/… Surface 2 with LTE...

AviD

@RоryMcCune wooot!

Scott Pack

I got to listen to a guy dealing with a Surface Pro yesterday.

That was amusing.

AviD

its about time.

Scott Pack

It's not the first. Our Windows guy was trailing one for a while as well.

AviD

but bloody hell thats expensive for an entry level tablet, even a great one.

Scott Pack

15:29

He used to be a sailor and..well..was less than impressed.

This guy was swearing more.

This one was $1200, without the $130 keyboard.

Kisunminttu

@Adnan What an interesting theory!

AJ Henderson

@AviD they be more clear now

Rоry McCune

@ScottPack so Surface pro with no keyboard... that wouldn't be a good thing, it does need that for any classic mode work..

AviD

@AJHenderson good man. though I really dont think this should be closed:

0

Q: Considerations of security features for an ADSL wireless modem

I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what are the criteria I should consider, and which security features should I look for? How should I compare the modems in terms of the security (for example, WPA2 > WPA > WEP !!!)?

wireless

it is specifically not asking for an answer, but for the criteria to consider.

AJ Henderson

@AviD I voted not to close it

I concur, it's a bit broad, but answerable

if anything, its closer to being a duplicate

Scott Pack

15:45

@RоryMcCune He just plugged in a USB keyboard.

Rоry McCune

@ScottPack yeah that'd work, note quite as nice as the integrated ones but ok.. one of the big restrictions of the surface pros is only one USB port..

Scott Pack

Hub

TildalWave

g'day

@RоryMcCune Beautiful! That's a loch or a river? Seems odd to have a ferry on a lake, but if it's a big one, I guess that'd work too.

Or maybe even a fjord?

Rоry McCune

@TildalWave sealoch :) it's loch goil, which flows into loch long then into the clyde estuary and then the atlantic

Transcript for