« first day (1204 days earlier)      last day (3974 days later) » 

Iszi
Iszi
03:26
So, this is interesting.
So what do us ethical security folk think about discussions like this? https://twitter.com/buycraft/status/451359922035625985
Tweeted by troyhunt on April 2, 2014 at 10:22 PM
Also, when did Twitter drop the Fail Whale for Failbot?
user image
 
2 hours later…
tylerl
tylerl
05:04
@Iszi asshat
is my professional assessment
 
4 hours later…
FEichinger
FEichinger
08:56
Okay, I'm done. I swear, I'm done. That's enough web programming for a week.
These last few weeks I've written more JavaScript than all the times before combined ... And I even used jQuery. I feel so dirty.
deed02392
deed02392
@FEichinger hey, jQuery is beautiful :)
Rоry McCune
Rоry McCune
Morning all
FEichinger
FEichinger
@deed Hell no. It's just a dirty shortcut for a lot of stuff.
deed02392
deed02392
mornin' @RоryMcCune
AviD
AviD
09:19
@FEichinger yo momma is a dirty shortcut.
for a LOT of stuff.
kiBytes
kiBytes
today is going to be a tough day...
FEichinger
FEichinger
@AviD Uh huh.
AviD
AviD
@kiBytes nooo, today begins a NEW AGE OF GREATNESS.
Rоry McCune
Rоry McCune
@AviD you've been watching Microsoft keynotes haven't you...
AviD
AviD
hehe, no, Marvel Silver Age.
Rоry McCune
Rоry McCune
09:26
@AviD fair enough
AviD
AviD
cracked.com/blog/… #6
kiBytes
kiBytes
"where do you want to go today?"
TildalWave
TildalWave
10:02
15 more first post reviews to my second steward badge ... c'mon people, get cracking! :)
@kiBytes not in Russia :)
AviD
AviD
because they don't allow gays there?
TildalWave
TildalWave
@AviD hehehe missed that one lol
no, because I mod space and NASA says I'm not allowed contact with Russkies
http://arstechnica.com/science/2014/04/nasa-must-immediately-cease-all-contact-‌​with-russia/
actually wait, I'm more like ESA so I guess I'm still fine till the next security council meeting LOL
Any of you Amers wanna contact Russkies through me? Only $10 per message! :)))
I'll even throw in free Google Translate! :P
AviD
AviD
10:41
hey! I found a picture of @Simon, dancing to his favorite beats (which normal people barely recognize as music):
user image
Adnan
Adnan
If somebody is looking for a nice slow path to start with Python, here you go class.coursera.org/interactivepython-004
kiBytes
kiBytes
@Adnan I don't know why you suggest that, I have been developing in python since 1990.
@Adnan :P
deed02392
deed02392
I like @Simon's music taste
better than the usual mainstream crap
Adnan
Adnan
@kiBytes Unless you've defined somebody as a binding alias to yourself, I have no idea what you're talking about.
AviD
AviD
@Adnan since when is a nice slow path a good way to learn to program?
Adnan
Adnan
10:44
This is for people who haven't touched Python yet.
kiBytes
kiBytes
@Adnan I forgot that nordic people tends not to have sense of humor.
Adnan
Adnan
@kiBytes Ugghhh.. I'm not Nordic. I'm Levantine.
kiBytes
kiBytes
@Adnan Then I believe you have passed too much time in Finland.
@Adnan Anyway "the joke" came for that thing with debian and apt the other day =)
Adnan
Adnan
@kiBytes Ooooh :D
Alright, it is actually funny given the situation the other day
AviD
AviD
which one was that?
kiBytes
kiBytes
10:53
If any of you is interested there is a position for working in The Haag as a Information Security Manager in the interpol
@AviD me saying that something won't work because I say so and I have been working with that since ages (and then me being actually very wrong)
AviD
AviD
ahhh, okay, mocking you is always funny.
not very challenging, but funny. ;-)
@kiBytes can it be a telecommute position?
kiBytes
kiBytes
@AviD nopes
TildalWave
TildalWave
@kiBytes they had that position open now for several years, I've already seen it in 1990 :P
Adnan
Adnan
@kiBytes I'm in interested. Can say with certainty they're not.
kiBytes
kiBytes
@Adnan At least, you need 8 years after obtaining the degree of experience in any CS related field.
And this is some kind an official bureau so you really need 8 years
not even 7 and 6 months xD
TildalWave
TildalWave
10:57
let me guess, they also have open positions for data miners?
Adnan
Adnan
@kiBytes Well, I'm 2 years short on that one.
kiBytes
kiBytes
11:48
Interesting article about "perceptual hashing algorithm"
blog.iconfinder.com/detecting-duplicate-images-using-python
Adnan
Adnan
12:02
@kiBytes Nice read, and an interesting technique. However, I'd have went with using Google Search API to find dupes. The reverse image search is pretty neat and tolerates a lot of modifications.
Thomas Pornin
Thomas Pornin
12:52
@Iszi This looks like a very amateurish blackmail attempt. If you want to instil fear in the heart of your victim, then you should at least make some demonstration of your power.
Nobody would take Kim Jong-Un seriously if he did not actually detonate a nuclear warhead now and then.
2
Rоry McCune
Rоry McCune
13:20
it's so odd seeing a presentation video in another language when they drop into english for things like "application security"
Scott Pack
Scott Pack
@RоryMcCune I feel that way whenever I watch one of your presentations too.
Rоry McCune
Rоry McCune
@ScottPack nice one
Scott Pack
Scott Pack
Cheers.
Rоry McCune
Rоry McCune
I do need to sort that out though, need someone to chuck stuff at me when I go too fast..
Scott Pack
Scott Pack
It's a combination of speed and accent.
I'm sure one is more problematic here than there.
I tend to have trouble with accents anyway. I got mono in college and ever since then my hearing has been a bit jacked. The levels are fine but things tend to sound a little...fuzzy I guess.
Rоry McCune
Rоry McCune
13:28
well in a lot of cases conference audio for recording isn't the best
which doesn't help
Scott Pack
Scott Pack
It's a perfect storm.
Iszi
Iszi
@ScottPack Scot + Auctioneer + Cooties + Cheap Mic = Swedish Chef Audio?
Scott Pack
Scott Pack
@Iszi Pretty much.
AviD
AviD
@ThomasPornin does anybody take Kim Jong-Un seriously now?
M'vy
M'vy
13:46
heya
AviD
AviD
13:58
dammit, stupid frikkin gaddamn IRS audit. it's like getting an enema from a T-Rex.
Iszi
Iszi
@AviD I don't get it - how could the T-Rex possibly do that with those tiny arms and only two fingers?
AviD
AviD
what makes you think he uses his arms?
kiBytes
kiBytes
@Iszi The T-Rex uses its legs.
@AviD ouch, didn't read that xD
M'vy
M'vy
Nah. He's probably better at telekinesis
Xander
Xander
14:14
@tylerl +1
Rоry McCune
Rоry McCune
@AviD so is this the Israeli IRS (assuming they have one) or have you got US tax affairs?
AviD
AviD
@RоryMcCune US. the israeli version has a different name...
Rоry McCune
Rоry McCune
@AviD yeah all I've heard about the US IRS makes it sound painful (Not that I'm a great fan of the UK Equivalent tbh)
Xander
Xander
@RоryMcCune If you're a US citizen, (which I assume @AviD is since he was born here) you owe U.S. taxes for the rest of your life, so the IRS is a permanent parasite that will follow you around the globe and back again.
Rоry McCune
Rоry McCune
@Xander yeesh nasty!
AviD
AviD
14:20
@Xander exactly. And a very powerful parasite, with the ability to force banks all around the world to disclose all your private information.
AJ Henderson
AJ Henderson
15:07
@RоryMcCune there is actually a substantial list of people who have sworn away their US citizenship not because they didn't love the US, but simply because they weren't living in the US and it was far too much of a burden to deal with the taxes
Rоry McCune
Rоry McCune
@AJHenderson yeah it's bad enough handling all the hassle from one set of tax people, having two would be a right PITA
AJ Henderson
AJ Henderson
the laws designed to prevent rich people from doing tax shelter stuff end up really screwing US ex-patriots
@RоryMcCune yeah, but it is even worse than dealing with US taxes in the US
because you have to file US tax papers and papers for the US about your taxes from other countries
AviD
AviD
@AJHenderson yup. and, as it turns out, they dont actually trust those other countries papers. Maybe if they were in english....
AJ Henderson
AJ Henderson
in the US, it's actually relatively easy to do your taxes normally. I'm a small business owner and even my taxes aren't that bad to do, but I would fear having to deal with the international stuff
it's not unheard of for it to cost thousands of dollars a year just to have an accountant do the tax paperwork
AviD
AviD
@AJHenderson yeah, it is crazy complicated. Even besides the fact that I have no clue what the F I'm supposed to do.
@AJHenderson hmm, I wouldnt say it costs that much, but not much less either.
AJ Henderson
AJ Henderson
15:12
@AviD there are stories of people with more complex situations (like running a business in another country) where it would cost them $10,000 a year for getting their taxes done
AviD
AviD
@AJHenderson I kinda run a business in another country...
AJ Henderson
AJ Henderson
now granted, I'm sure I see the worst of it from the site I was reading about people actually giving up their citizenship over it
and they may have been in countries that were particularly incompatible
AviD
AviD
but Israel does have "tax treaty" with the US, so at least there is a recognized formal process for it...
Scott Pack
Scott Pack
15:55
So. I've been asked to write a brief document (like at most 1 page) that describes the security protections of our primary product. The intent is for the doc to be included in the sales/new-client document packet.
Do any of you people know what that would be called? I'm trying to find some examples so I can get a feel for what to focus on and how to phrase it.
deed02392
deed02392
@ScottPack It would be like an executive summary with a sale's spin on why your product has great security protections.
Scott Pack
Scott Pack
Well. That's something approaching helpful.
Adnan
Adnan
@ScottPack %Product%_Security_Architecture.pdf
@ScottPack %Product%_Security_Description.pdf
kiBytes
kiBytes
If it is for an executive summary as a part of the description I would use a more "sales" terminology using a "catching phrase" like: "Designed for security" or "Security Aware"
Adnan
Adnan
@ScottPack My all time favorite help.github.com/articles/github-security
kiBytes
kiBytes
16:09
If not I would go for the second option @adnan has given you
TildalWave
TildalWave
@LucasKauffman LOL you actually wrote a custom close reason for "too broad"?
This question appears to be off-topic because it is too broad. — Lucas Kauffman 1 min ago
kiBytes
kiBytes
You could also go with "security details" or "security features"
@ScottPack In fact I think "Security features" fits best
you can bullet all protections without discussing them too much, maybe with "description" (the second I like most) a more in depth approach is expected
CodesInChaos
CodesInChaos
16:27
> This question appears to be off-topic because it is off-topic.
FEichinger
FEichinger
@CodesInChaos Bad.
@TildalWave Also ... bad.
David Freitag
David Freitag
Steak, steak; the wonderful fruit. The more you eat the more your arteries fill with cholesterol.
TildalWave
TildalWave
16:45
@CodesInChaos both appears to be and is off-topic? man, that's badly off-topic then
I still like the most that "This question appears to be off-topic because WTF?"
Xander
Xander
0
Q: decrypt archived file with aes iv

user43399from the title you know that my info about security is ZERO !! .. this is true .. but i really need your help and i'm ready to learn from you guys .. it's all about (r0bf0rdsn0w) that tool made by ih8sn0w to bypass Activation Lock .. but he encrypted it with a very strong security and i'm not ev...

aes
I have no words.
Thomas Pornin
Thomas Pornin
17:02
@Xander Words are not needed; just click on the "close" button !
4
Xander
Xander
@ThomasPornin I'm waiting for it to appear in a review queue first. StackExchange only rewards me for that, not prompt initiative.
Jeff Ferland
Jeff Ferland
@Xander Thank you for helping to make the world a better place.
Xander
Xander
@JeffFerland :-)
AJ Henderson
AJ Henderson
@Xander just wow
@ThomasPornin but the close button has a word on it
Iszi
Iszi
@AJHenderson No, it's not even there anymore. Thanks @JeffFerland.
AJ Henderson
AJ Henderson
17:10
@Xander hmm, there really should be a badge for being the one to start close votes shouldn't there
have a gold badge, start the vote to close 500 posts with 75% of your votes to close resulting in closure
or something like that
super, I've apparently ended up on some time share marketer's list
Xander
Xander
@AJHenderson I dunno. I think that might create a perverse incentive. I actually think the system now it relatively good...I'm just perhaps slightly, just a touch over-competitive.
AJ Henderson
AJ Henderson
@Xander well that's why you have to have the % requirement that they be GOOD close votes
and not just using every close vote you have
Xander
Xander
@AJHenderson Yeah, but there's also the problem of auto-reviewers that just close everything once it shows up in queue. I don't know if that's an issue on smaller sites like sec.SE, but I imagine it would be on SO. I dunno. Maybe it would work better than I give it credit for.
AJ Henderson
AJ Henderson
@Xander true
TildalWave
TildalWave
17:58
Some of the space cadets among you sec boffins might find these talks interesting:
in The Pod Bay, 7 hours ago, by TildalWave
Audio recordings and transcripts (where available) for the UNIDIR (United Nations Institute for Disarmament Research) Conference on Space Security 2014: Implementation and Compliance, held 19–20 March 2014, Geneva, Switzerland are now available online: http://www.unidir.org/programmes/emerging-security-threats/space-security-2014-i‌​mplementation-and-compliance
They're not long I guess they just recorded the introductory speeches and not whole discussions, which is a bit of a shame, some of them seem really interesting
Rory Alsop
Rory Alsop
18:25
Very proud of my little one - so far she has raised over £500 and still 7 weeks to go before the big day! Looks like my employer will match up to a grand as well. Yay
Adnan
Adnan
@RoryAlsop Very impressive that you're teaching her these nice concepts at this young age.
Rory Alsop
Rory Alsop
We didn't really teach. I guess she just sees what we do:-)
Xander
Xander
@RoryAlsop Nice!
Iszi
Iszi
19:27
Don't you just love it when you're invited to a meeting - in fact, you and two other people from the IT Security group are invited and in attendance - and nearly the first thing that happens is the person who invites you logs in to a website over HTTP with a group username and short password?
That's my headdesk moment for the day.
Scott Pack
Scott Pack
Hey. Basic Auth base64 encodes the password before sending it.
tylerl
tylerl
19:45
@ScottPack This advanced authentication mechanism encrypts passwords using base64 reversible encryption...
2
Lucas Kauffman
Lucas Kauffman
"industry best practice"
tylerl
tylerl
"using military-grade base64-encoding..."
Scott Pack
Scott Pack
@tylerl Where's the quote for that?
Or are you just being funny?
tylerl
tylerl
@ScottPack just me being an ass
Scott Pack
Scott Pack
Aight
tylerl
tylerl
19:48
I imagine the only reason why basic auth b64's passwords is so that you don't have to use 7-bit ascii.
or rather, [A-Za-z0-9._-]
let's not forget _
TildalWave
TildalWave
20:10
@ScottPack so does rot(charspace) :P
Scott Pack
Scott Pack
@TildalWave rot(len(charspace)) n00b
tylerl
tylerl
On the phone with hosting company: "Provisioning is faster now; our sales office has moved across town, so the dc ops guys no longer have pretty girls to talk to."
4
TildalWave
TildalWave
20:27
@ScottPack rot(sizeOf(':P' >> 1))
Rory Alsop
Rory Alsop
Any thoughts on where this one should go?
0
Q: Online collaborative team, connecting to 1 or more servers

FFrewinI have a team of partners working from different locations in the world. We all are connecting to our own VPS, as well as to a bunch of customers websites via http and ftp to other shared or vps servers. In most of the above websites, there are ip filters restrictions. I am looking for a way for...

vpn
Xander
Xander
21:08
@RoryAlsop I'd say the best fit would be ServerFault, but I don't know if they'd want it.
It seems to me like an infrastructure question at heart.
Simon
Simon
@deed02392 Thank you sir.
Rory Alsop
Rory Alsop
@Xander thanks. Yeah - I think they would just ditch it, but I can't think of anywhere else it could go.
Xander
Xander
@RoryAlsop SuperUser possibly then? That seems to be where all the not-quite-ServerFault questions get directed.
Rory Alsop
Rory Alsop
@Xander I'll give it a shot.
Xander
Xander
I should probably actually visit some of these other SE sites, so I'll actually know what kind of questions they're good at answering.
Rory Alsop
Rory Alsop
21:18
@Xander hahahaha - I just look at the rejection stats...
 
2 hours later…
AJ Henderson
AJ Henderson
23:00
you know what's really awesome
when someone makes an update to a stored procedure that breaks the ORM generation for the build but doesn't actually run the ORM generation, that way when you try to make a change, it suddenly breaks everything and you get stuck at work 2 hours later than you should normally be there trying to fix something you had nothing to do with...
TildalWave
TildalWave
23:27
@AJHenderson How can a stored procedure break the generation of ORM? You mean its output (O/R model) is broken?
Unless that stored procedure is actually generating your ORM?

« first day (1204 days earlier)      last day (3974 days later) »