The DMZ

TildalWave

00:54

cheers @tylerl interesting point on those bolts that wasn't covered yet

Terry Chia

02:57

@AviD You obviously don't use Linux. ;)

So I see the star wall is fucked.

2

Adnan

05:56

@DavidFreitag I second Recuva as well. Fantastic product for about 95% of my data recovery.

However, when all fail, GetDataBack always works.

It's not cheap, but it's fantastic. It saved my ass last year (I made a big fuss about it chat.stackexchange.com/transcript/message/10113341#10113341 )

On another topic, I was presented with the following solve-and-get-hired riddle. A PHP-MySQL application with an SQL-injectable URL. The end result is:

SELECT [YOU_CONTROL_THIS], Username, Password FROM Users

and I was asked to simply insert a new user in the database. I spent about half an hour. I failed.

Any ideas? @Terry @RoryM @tylerl

Terry Chia

@Adnan SELECT [* FROM Users; INSERT (blah); SELECT Username], Username, Password FROM Users

Something like that?

Not particularly good at coming up with novel SQL injection attacks.

Adnan

@TerryChia Does MySQL (through PHP) support multiple queries delimited by ; ?

Because I tried something similar and it didn't work.

Terry Chia

@Adnan Hmm, not too sure actually. It's been a while since I last played with webapp stuff.

Got really bored of it.

Adnan

@TerryChia Yup, docs and Stackoverflow say that you can't do that.

aaand, the job was at McAfee

Terry Chia

@Adnan Why is a AV company testing potential hires for SQL injection? :O

Adnan

06:09

@TerryChia Fun fact, they also make intrusion prevention systems. To test them, they have a whole team that is dedicated to developing new attacks before the bad guys.

I don't know how effective that methodology is, though.

Terry Chia

@Adnan IPS protecting against sql injections doesn't seem very effective though.

Adnan

@TerryChia That made no sense.

Gilles

06:52

0

Q: Attackin on port 80 while 20 is open

There is a question bugging me a after reading on network security. Theoretical situation: there is a packet-filtering firewal which only accepts tcp / ip communication with destination port 22 on a protected private network. (The port on a machine outside this protected network is not specifie...

computer-networks

want?

Gilles

07:03

oh well, got. It's not a great question, but if it makes sense at all this is the place for it

tylerl

08:04

@Adnan If multiple statements is enabled, then this is trivial. Otherwise it'll probably have to be a multi-step exploit.

Lucas Kauffman

08:26

@kyhwana @troyhunt On plain text passwords... http://t.co/wNnzgUyzAk

Tweeted by VinLew on May 15, 2014 at 7:18 AM in reply to kyhwana

Adnan

08:37

@tylerl No possibility for multiple queries.

I think the best option would probably have been popping a shell, and from there getting the DB creds from some app config files, then connect to the DB and do the insert.

tylerl

@Adnan I'd go for information disclosure first, and then trade that for increased access, etc.

Is there escaping? Can you select a string of your choosing into a file at an arbitrary path?

Adnan

@tylerl No escaping, but no rights to write into files.

tylerl

Then again, working for for mcafee is its own punishment. Prolly safest to avoid the puzzle altogether.

Adnan

I had complete control over that portion of the query. It was appended as is

@tylerl I don't know, I was very impressed with them. Maybe their office in Finland in different.

tylerl

@Adnan I guess it's really Intel, though. Right?

They're pretty respectable.

Adnan

08:41

@tylerl Well, it's actually Stonesoft, which was purchased by McAfee

tylerl

which in turn is own by Intel

Adnan

(They're the dudes behind Evader/Predator)

They really got me with that project.. the idea that you can mangle any exploit you want and bypass IPSs is pretty neat.

Ladadadada

Some mates of mine had a fun time with Github yesterday. bookingbug.com/blog/2014/05/…

Adnan

It's completely independent from the nature of the attack, vulnerability, or exploit.

@Ladadadada Amazing stuff. It's on Hacker News by the way

tylerl

@Adnan Yeah. That's kinda the dirty little secret of well over 98% of today's security products. They're all about as effective as a "please stop" notice when faced with an attacker who's received the sort of thorough education in attack tactics that you would get from.... watching YouTube videos.

2

Adnan

08:46

:D

Ladadadada

@Adnan Sweet.

AviD

08:58

@TerryChia Like I said, I don't trust it.

@TerryChia Linux is only "free" if your time has no value.

Lucas Kauffman

@AviD You corporate swine, it's because you do not want to embrace the power of open source!

GNU Linux

AviD

oh not a all. It's just those damn Finnish programmers.

Terry Chia

@AviD You obviously have not used a modern distro. ;) It's about as easy to configure as any old Windows system.

AviD

@Adnan so you would think all you need to do to get hired is snort a line of coke and beat up some whores.

Terry Chia

@LucasKauffman Please don't go all RMS on us. :P

Lucas Kauffman

09:04

@TerryChia the ease of configuration doesn't matter, it's the support you need

Adnan

@AviD Heeeeeeey! Finnish programmers are alright

@AviD Too soon

AviD

@Adnan hehe, just poking

@Adnan SELECT ['Adnan', 'blabla' into Users --], Username, Password FROM Users

Adnan

@AviD It's not SQL Server!!

AviD

so? "SELECT xx INTO" is standard SQL.

Adnan

MySQL doesn't have SELECT INTO

AviD

09:07

@Adnan wat.

really??

d'oh.

Adnan

@AviD Nope, INSERT INTO SELECT is standard SQL

dev.mysql.com/doc/refman/5.0/en/…

AviD

meh, too lazy and indifferent to go check that up.

Adnan

@AviD :|

AviD

hang on, that link says you can select into a file.

Rory Alsop

> hey - I want an answer to a question. why don't I spam it to 5 stack exchange sites all at once? blimming port 80 port 20 (22) nonsense

AviD

09:14

and thats about all the interest I have, sorry.

hahaha

0

Q: I'd like to hack the NSA would you all help?

I'm not really a hacker but I can poke holes in anything. The NSA sent me this letter and they asked me to do some social engineering on my application with keywords. Would you all tell me the correct keywords and stuff or is that off topic? My question would be "What do I need to say able to get...

discussion support

Adnan

@AviD AGGGG!! You can do that with MySQL, but on that particular setup you can't.

AviD

@Adnan ahhhh okay.

1 min ago, by AviD

and thats about all the interest I have, sorry.

sorry, I'm just cranky this week.

too much training, too much accounting work.

Rory Alsop

@AviD yeah - it's that same individual who was...challenging

has bans on two sites

Adnan

@AviD When you were young, you had a way of escaping responsibility, didn't you?

Rory Alsop

@AviD = any accounting work

AviD

09:17

@Adnan not really. Quite the opposite in fact - I would gladly take on way too much. I'm only recently kicking the habit, and I am quite burnt out from it.

@RoryAlsop pretty much, yeah.

@RoryAlsop his ideas seem... interesting.

as in, less likely to result in employment at the NSA, but that doesn't mean he won't be on some of their lists.

Rory Alsop

@AviD :-)

I was tempted to say that, but I had a sip of coffee instead

and wrote nice, possibly helpful stuff

AviD

ooh yeah, I should go brew.

Terry Chia

@LucasKauffman There are companies offering paid support for Linux...

AviD

wait WAIT, since when do you drink coffee??

Rory Alsop

@AviD I said I don't like coffee. I drink loads of it

AviD

09:20

@RoryAlsop ahhh, yeah key difference.

could that just be because you drink crap coffee?

Rory Alsop

in the form of vanilla latte - the least healthy of all the coffees

AviD

@RoryAlsop whoa. The guy wanted to meet an SS agent on this site???

Rory Alsop

@AviD nope - I have been taken to the best coffee places (according to my beanophile friends) and still hated the taste

@AviD :-)

AviD

I call Godwin's!

@RoryAlsop ah. it is possible, I guess. On the other hand, I would love to go to that beanophile coffee place.

Terry Chia

@AviD Don't molest those poor beans!

Lucas Kauffman

09:31

@TerryChia Don't get me wrong, I like Linux, but I wouldn't use it at a company except maybe for Ubuntu and Red Hat because they offer commercial support. (I wouldn't consider Ubuntu actually because it's shit)

Terry Chia

@LucasKauffman Well, yeah. I was referring to them when I said "modern distro" :P

No one is suggesting people deploy Gentoo.

I'm in a rush to finish the next book, so the entire second half will be written from Hodor's perspective. http://t.co/6trvaOZHp0

Tweeted by _GRRM_ on April 17, 2014 at 3:58 PM

AviD

@TerryChia awesome. Now we will all get to know what it's like being @Simon.

Lucas Kauffman

@TerryChia I think Nasdaq or Wallstreet actually run on Gentoo

AviD

Hodor Hodor Hodor. — Simon 18 hours ago

deed02392

09:47

Chromebook pixel comes with 32 GB of memory? that better be RAM

Rory Alsop

10:03

@deed02392 as opposed to?

deed02392

@RoryAlsop It's actually storage. £1050 for a 30 gig hard drive.

and it only has 4 GB of RAM

appalling! that is Apple level debauchery

Rory Alsop

10:26

eh, wut. That doesn't count as memory in my mind

it's storage as you said

AviD

you and your ridiculously precise semantics

Rory Alsop

@AviD you smooth talker

AviD

my hero

deed02392

@RoryAlsop yeah and I expect most of the demographic interested in buying a Chromebook think the same way. but that's what it says on the google play store

AviD

@deed02392 most of the demographic interested in buying a Chromebook wouldn't know the difference.

then again they also probably wouldnt know the difference between a diskette and a SAN.

deed02392

10:34

@AviD dyou really think? It seemed to me geared towards nerds,

AviD

really? perhaps I didnt look too closely recently. I had the idea that it was more of a bottom-end, raw laptop aimed at people who wouldnt know better, but still want a good laptop. Like e.g. my dad.

who btw is happy with his gen 1 iPad.

Adnan

@AviD Whisky helps

ManishEarth

@AviD /me is too :)

Rory Alsop

10:47

@deed02392 I am a geek, rather than a nerd, but it certainly doesn't appeal to me. Terribly underspec-ed

deed02392

@RoryAlsop Yeah exactly, it's the poor spec of it that's most ridiculous

AviD

so, I'm not wrong.

Terry Chia

11:09

@deed02392 SSD. And the screen is beautiful.

Also, it's almost a year old at this point.

AviD

so, almost as old as you.

Terry Chia

@AviD Har har old man.

AviD

not old man, OLD man.

Lucas Kauffman

11:36

YAR HAR FIDDELITY

@RoryAlsop Can't go wrong with a good Thinkpad, it's ugly as hell, but it's like the Nokia 3310 of the laptops

Terry Chia

@LucasKauffman ^ drunk?

@LucasKauffman The newer Thinkpads actually looks pretty good.

AviD

laptops are dead. today it's a bad compromise between mobility (just get a tablet!) and workhorse (go for a real desktop!).

a better compromise is tablet + remote VM (for most situations, though not all).

Terry Chia

@AviD That won't really work for a student say.

AviD

au contraire. for most of what a student would need, a tablet is better.

Terry Chia

@AviD I can't write code on a tablet.

AviD

11:41

true. that's what the VM is for.

Terry Chia

@AviD My school wifi is shit and I'll burn through my data plan if I tether all day.

Not really practical.

AviD

@TerryChia ah, there you go. Not all situations - I did base my statement on the assumption of always-on internet access.

though RDP is very low bandwidth protocol, I doubt you'd use up that much. Then again I havent measured it against your data plan....

Terry Chia

And tbh, the 11" or 13" MBA isn't that much heavier than a 10" tablet.

Lucas Kauffman

@TerryChia ah they are making them look like the Y and Z series

Terry Chia

@LucasKauffman I love the X1 Carbon. Pretty sleek machine.

Lucas Kauffman

11:52

@TerryChia ooooh mama

that's a nice thinkpad

AviD

@TerryChia its not just weight....

Rory Alsop

@LucasKauffman agreed. The proper old laptop. Or alternatively, I still like the Dell D610.

I say like

I mean - it is a solid workhorse

@AviD no

AviD

@RoryAlsop but you mean "better than a hot poker up your arse"

Rory Alsop

you can't beat a 17"

weight was never an issue - even a big one doesn't weigh that much

Lucas Kauffman

@RoryAlsop I don't like 17"

2

I prefer 16"

2

or smaller

but still above 12"

2

AviD

12:00

@RoryAlsop meh. after living on a 17" for a few years, I have to tell you my productivity took a HUGE leap when switching to 27", proper keyboard, and much more powerful machine(s).

Lucas Kauffman

oh my god

Terry Chia

Heh.

Rory Alsop

@AviD oh, absolutely

AviD

@LucasKauffman wow. somebody went nuts with the euphemism starring there....

Rory Alsop

@AviD well, I did set em up

Terry Chia

12:01

@AviD Guilty.

Rory Alsop

On desktop I want multiple 27" screens and a proper keyboard

but when mobile, a 17" laptop is my ideal

phones - meh - they are for phoning ... and Ingress

tablets - meh - they are for IMDB, wikipedia, and quick googling while watching TV

AviD

@RoryAlsop and while it is far from mobile (though I will be dragging it upstairs next week for gaming :-) ), a tablet is much more mobile than a laptop.

Terry Chia

@AviD I'm going to hook up a MBA to my monitors and keyboard and stuff as my main machine when I get a new MBA.

So going mobile basically involves unplugging the machine.

AviD

@TerryChia well your MBA will probably cost more than my workstation.

Rory Alsop

@AviD much much more

Terry Chia

12:03

@AviD Probably. I do have a desktop that I'm going to convert to a headless server once I get a MBA though.

AviD

well... I did trick it out pretty well.

@RoryAlsop tablet + keyboard though....

Terry Chia

Oh hey, the moist crap is gone from the star wall.

4

Lucas Kauffman

macbook air

I prefer a macbook pro

AviD

Terry Chia

@LucasKauffman Toss up between the beautiful retina screen and being more mobile really.

@AviD Image not found.

Lucas Kauffman

12:08

@TerryChia I need to pack punch

I tend to run 2 - 3 VMs at the same time

AviD

bah. nevermind.

Rory Alsop

Lucas Kauffman

@RoryAlsop fancy

Rory Alsop

like that, @AviD?

Terry Chia

@LucasKauffman I figured 8GB of RAM is enough, anything else I can offload to my desktop/server.

Lucas Kauffman

12:09

@TerryChia true I'm actually thinking deploying desktops on my server

AviD

@RoryAlsop sure, why not

Lucas Kauffman

but I still need to replace one of my older machines with a new one

AviD

what is "powdered alcohol"??

Rory Alsop

@LucasKauffman it may be fancy, but it is still an iPad. The best bit about it is the case. Which has magnets everywhere

AviD

you sniff it, or just add water?

Rory Alsop

12:09

@AviD heh - wondered if you would spot that. Google it - just been banned in the US

Terry Chia

@LucasKauffman More hardware is always good. ;)

Rory Alsop

part of the initial marketing suggested it would be ideally suited to smuggling into football games and other venues where alcohol is not permitted

generally add water, but apparently you could sprinkle on food, or snort it!

Terry Chia

@RoryAlsop Whatever happened to getting drunk before?

Rory Alsop

@AviD do you like my Metaltech tablet stylus/pen?

AviD

@RoryAlsop okay, so instead get a good tablet.

Either Surface X, or something android based.

Rory Alsop

12:11

@AviD but they don't do a good 17" one with a nice keyboard...

Some day

AviD

@RoryAlsop ha, nice! almost didnt notice that.

Terry Chia

@RoryAlsop You can buy the Surface table thingy.

AviD

@RoryAlsop ah, no, screen size is still the drawback for that setup.

@TerryChia haha, not so very mobile though.

@RoryAlsop I also notice the Miley Cyrus article open.

you need to be more careful with screen scraping.

Rory Alsop

@AviD that isn't open. That is just the side bar on the powdered alcohol article

That said, my colleague went to see Miley Cyrus two nights ago. He is a grown man (but his girlfriend wanted to go) - he said it was the most bizarre, LSD-inspired thing he had ever seen

AviD

12:28

@RoryAlsop uh huh.

Rory Alsop

@AviD heh, you

deed02392

12:44

@TerryChia my Dell E6410 is better specced and was half the price 2 years ago

Terry Chia

@deed02392 I highly doubt your dell has a 2560×1700 screen.

Rоry McCune

@TerryChia new dell xps 15 has 3200 x 1800 IIRC?

deed02392

no but it has twice the RAM and 15x the storage

Terry Chia

@RоryMcCune Yeah, but he said his Dell was at least 2 years old.

deed02392

that given the price difference, i think my point remains

Rоry McCune

12:46

@TerryChia hey you're not expecting me to actually read up the transcript here are you

ain't nobody got time for that

Terry Chia

@deed02392 High res screens aren't cheap. And your Dell has a 480GB SSD for half the price of a Pixel 2 years ago? I highly doubt that.

deed02392

@TerryChia you are such a pedant

Terry Chia

What? You are arguing that SSDs cost the same as HDDs?

deed02392

lol.. you're so far off

Terry Chia

When the Pixel was released the only other machine with such a high res screen was the MBP.

Rоry McCune

12:50

@TerryChia but the pixel is a really odd idea

deed02392

you do realise 'better' is qualitative don't you?

AviD

@deed02392 well, he is an apple fanboiii afterall...

Terry Chia

@RоryMcCune It's a showcase of the Chromebook after all, I doubt Google is expecting to sell much.

deed02392

@AviD Oh. That explains it. I'll stop feeding then

Terry Chia

@AviD I'm defending a Google product in case you haven't noticed?

AviD

12:51

@deed02392 it's obvious really, he's talking about buying an MBA.

Rоry McCune

@TerryChia yeah to me it's weird to see such a nice system with smeg all local storage..

Terry Chia

@deed02392 Yes. And a higher res screen is qualitatively better than a lower res screen. A SSD is qualitatively better than a HDD.

AviD

@TerryChia a) no I haven't, and I can't bring myself to care. (b) that's besides the point, logic does not apply with fanboiiis.

deed02392

@RоryMcCune Exactly, it's not even a compromise, it's practically unusable. I've had a 30 GB SSD as my main drive before

Terry Chia

And in case you have not noticed, you aren't exactly running a full OS on a Chromebook Pixel.

@AviD So who's the troll now?

deed02392

12:53

so, weather's nice

AviD

exactly.

naptime.

deed02392

@TerryChia hopefully as you grow up you'll become less pernickety. your intelligence will be of greater value.

Terry Chia

@deed02392 See, you can't accept the fact that the Chromebook Pixel is a nice machine. It's not for everyone but it's a nice machine nonetheless. Then you resort to personal insults. Yay!

Scott Pack

13:16

It appears to be rather moist.

Terry Chia

@ScottPack TWSS

Eric G

Anyone have experience or know of something like BuddyBackup buddybackup.com ? I am looking to do peer-to-peer encrypted backups across PCs under my own or my family's control. Windows+OSX at a minimum would be great, and would like to avoid setting up SFTP servers on each computer. Any thoughts or suggestions appreciated.

Terry Chia

@EricG Crashplan looks pretty nice. Not sure if it's encrypted or not though.

Scott Pack

Crashplan is encrypted at the client prior to transmission.

Eric G

@TerryChia I've looked at the before. Concerns about vendor lock in and server issues if it goes bust, open source prefered

Scott Pack

13:27

The problem you have is looking at the wrong platform collection. Windows+OSX is going to be tricky for what you want.

Terry Chia

^

Scott Pack

OSX+Linux would be much easier since it would likely be based on existing tools, like ssh/sftp and rsync, which are available in both.

Eric G

Most of the family

's PC are Windows, only one mac

so I can manage two different solutions if that is going to be more efficent

Terry Chia

Can you get rsync on Windows somehow?

Scott Pack

You can.

Eric G

13:28

Just copying files though is inefficent, my understanding is that these backup programs can do deltas, versions, etc.

Scott Pack

Honestly, though, the best solution I've come across with that needs your requirements is Crashplan. Since it's fully cross platform and meets all your requirements.

Terry Chia

@EricG Rsync handles that nicely for you.

Scott Pack

@EricG rsync by design does deltas.

Terry Chia

@ScottPack Yeah, I'm definitely going with that soon. Still deciding if I should pay for their online service as an additional backup though.

Eric G

I've thought of just setting up the SSH servers and doing-> areca-backup.org/features.php

Simon

13:30

@AviD THAT AIN'T ME

Scott Pack

Rsync does what's called a "rolling window" to do many many md5 operations across the file so it can find only the blocks that changed.

Eric G

The problem with the regular backups is they are not real time

Scott Pack

@TerryChia I've been really happy with the cloud storage part. I had been doing site-to-site backups just using all boxes in my own environment. The cloudy stuff is cheap enough, at least on a single instance.

Eric G

so I guess if some of you have experience with Crashplan I'll give it a try, my feeling is that as long as I have the software I can always get the files and decrypt - do you know what information is exposed to the vendor - like is there a password on their server, that if someone knows they get your keys?

Simon

@ScottPack Are you feeling ok now that I almost never say anything creepy to you?

Terry Chia

13:33

@ScottPack Yeah, it's pretty damn cheap for unlimited storage.

Scott Pack

@EricG I've not done a full analysis of the solution but from what I recall the keys are never exposed, they're generated and tied to the installation.

Eric G

I'll look into it some more; I saw some short articles talking about how the future is to distribute this through a blockchain mechanism, but I don't think those techniques are prime time yet.

Terry Chia

@EricG I think "blockchain" is the cloud of 2014.

2

Eric G

@TerryChia yep, cloud is so 2012

Simon

Is anyone watching Silicon Valley?

Terry Chia

13:35

@Simon Planning to. Is it any good?

Rory Alsop

@Simon why - what is it doing? It hasn't vanished in a singularity has it?

Eric G

I'll just keep the important stuff in their own encrypted containers that I control

Simon

@TerryChia It's quite decent, I like it. A bunch of nerdy jokes.

@RoryAlsop It's a tv show!

Scott Pack

@EricG I've seen whitepapers describing their process, I'm trying to find them.

@Simon It never bothered me.

Terry Chia

@Simon Cool. Will watch after I finally get done with Breaking Bad.

Simon

13:36

@TerryChia Haha yeah, definitely watch BB first.

Rory Alsop

@Simon is it a documentary? :-P

Terry Chia

I can't watch more than 2-3 episodes of BB in one go though... Jesse, Skylar and Walter Jr annoy the fuck out of me.

Simon

@RoryAlsop Noooooooo tv show!

@TerryChia Which means they are good actors :P

Terry Chia

@Simon How is a documentary not a tv show?

Simon

tv show as in it has seasons

Terry Chia

13:39

Man, this is scary high memory usage. blog.mozilla.org/nnethercote/2014/05/14/…

Rory Alsop

@Simon David Attenborough documentaries on nature are typically seasonal

Simon

@RoryAlsop SINCE WHEN ARE YOU TROLLING THAT MUCH? I CAN'T HANDLE THIS

Terry Chia

@Simon Welcome to The DMZ.

Rory Alsop

@Simon Sorry - am working in a large spreadsheet an mercilessly using this as my comic relief.

Simon

@RoryAlsop Oh boy, keep on trollin' then.

Rory Alsop

13:40

(but you did make it easy for me :-)

Scott Pack

@Simon Deadliest Catch is a documentary tv show with seasons.

Simon

Series would be a better term then?

Terry Chia

@Simon I doubt there is a better term. We are just making fun of you.

Simon

Oh, it all makes sense now.

Scott Pack

I'm not sure what pedantry you're trying to accomplish.

Simon

13:44

deadmau5's new album's title: while (1 < 2)

Simon

13:56

Almost fell off my chair because I was too lazy to get closer to the trash can, I'm so fucking retarded.

6

Terry Chia

@Simon Starred for honesty. ;)

Simon

^_^

Terry Chia

@ManishEarth So this looks very interesting: wiki.mozilla.org/Security/Automation/WinterOfSecurity2014

I'd be applying if they had this last year.

ManishEarth

14:57

@TerryChia Nice :)

/me has no hope of getting selected for that

Terry Chia

@ManishEarth Why not?

Simon

@ManishEarth Where are your winter hats, sucker?

ManishEarth

15:08

@TerryChia Projects look pretty daunting, wouldn't know where to start

Terry Chia

@ManishEarth The compliance checking one looks easy enough.

And hey, that's what the mentors are for isn't it?

ManishEarth

@TerryChia Hm, it does, but what about the competition? :)

Terry Chia

@ManishEarth Not easy, but definitely interesting.

More interesting than 90% of uni projects I would guess.

ManishEarth

yep

Remember that I'm a physics student, with primary interest in physics. Different ball game, for me

Programming/Security are hobbies

Terry Chia

@ManishEarth Ah right, you aren't a CS student.

ManishEarth

15:11

(the fact that I'm actually earning from both is a completely different issue :P)

Simon

I feel like typing in caps "nurd" but I'll be nice for once.

Terry Chia

@Simon Turd

Simon

TURD

ManishEarth

@Simon DURT

Simon

DRUT

From now on, call me Drut.

Terry Chia

15:15

@ManishEarth Any thoughts on the fuss about Mozilla supporting DRM? ;)

ManishEarth

They sort of have to

it's going to be disabled by default

To me it's not so different from an addon that contains non open source stuff

Terry Chia

@ManishEarth I don't care. I just want the chance to call you a sellout! :P

ManishEarth

just that it ships with the ability to install the addon turned off

Simon

My D is disabled by default.

ManishEarth

@TerryChia me != mozilla :P

Terry Chia

15:16

The fuss on HN about it is really stupid.

ManishEarth

@Simon twss?

Terry Chia

@ManishEarth Well, you are the only Mozilla guy I know so...

ManishEarth

hah

Terry Chia

It's like how we all diss @JeffF about Facebook.

Simon

I wish he'd hire me as a janitor at FB.

Terry Chia

15:17

@Simon Their janitors probably know more about low level unix stuff than you.

2

Simon

That's true, I don't know shit about kernels.

Except that it's also a brand of popcorn.

ManishEarth

@TerryChia Reminds me, there's a treat in store for Jeff and his FB Security friends

Terry Chia

@ManishEarth Hmm?

Simon

I went to a talk where the guy is responsible of the caching at FB.

ManishEarth

@TerryChia I'll be writing a blog post when this gets committed, but till then, bugzilla.mozilla.org/show_bug.cgi?id=994134

Chromium has it too

845

Q: How does Facebook disable the browser's integrated Developer Tools?

So apparently because of the recent scams, the developer tools is exploited by people to post spam and even used to "hack" accounts. Facebook has blocked the developer tools, and I can't even use the console. How did they do that?? One Stack Overflow post claimed that it is not possible, but F...

javascript facebook google-chrome-devtools

^context

Terry Chia

15:22

@ManishEarth Ah that. I still have not changed my mind about the CSP thing you know... ;)

Although this approach definitely seems better.

ManishEarth

@TerryChia there is no CSP now :D

Simon

That's neat.

ManishEarth

@JeffF, around?

AviD

dammit, you girls talk a lot.

Scott Pack

15:42

@AviD So we've been getting a lot of rain lately.

It's making things all hot sticky and moist.

7

AviD

@ScottPack fascinating.

@ScottPack ah! there IS a point!

nicely done, btw.

Scott Pack

Thanks

I like how it turned out.

Plus it gave me a break from adding a single field to 137 entries in our CRM

AviD

@ScottPack yukk. not scriptable? or direct db access?

Terry Chia

@AviD or new CRM if it isn't scriptable.

Actually, sounds like @ScottPack needs an intern.

AviD

@TerryChia you're looking?

Terry Chia

15:47

@AviD Oh no. Most definitely not. ;)

I've done my time.

AviD

Moist definitely not...?

Terry Chia

This is getting out of hand.

AviD

TWSS!

Scott Pack

@AviD Hard to say. I don't have much experience with it.

AviD

Dammit, man! Stop feeding us those easy lines!

you have GOT to make it more of a challenge, I tell you!

Transcript for