« first day (235 days earlier)      last day (4943 days later) » 

06:55
I'm a bit late to the discussion on this one....
4
Q: Truecrypt hidden partition deleted original drive data

calccryptoHelp! I created a hidden partition within a harddrive encrypted using truecrypt, and instead of creating a second partition, it seems to have deleted all of my data instead. what did i do wrong? I simply followed the instructions on creating a hidden partition. my only mistake was using the same ...

there seemed to be quite a few agreeing with the opinion that it should go to Super User, but the final diamonddecision was to leave it, @RoryAlsop?
as @pepe said: "why did it happen" may relate to security, "how do I recover" does not.
I really dont like this next question, but I guess I get why we accept them...
5
Q: Facebook account keeps getting hacked, can't seem to figure out why or how?

Mooktakim AhmedOne of my mate, she has a lot of friends on Facebook, uses it for marketing. Her account keeps getting broken into. Her password gets reset and/or gets locked for changing resetting password too many times. So basically, what happens is this one user/virus/trojan whatever somehow manages to req...

and, on a different point, "One of my mates" - at first I assumed that was the Aussie colloquial for "friend" or "buddy", now I'm thinking it might be "one of my harem". 'Course, that just makes me jealous ;)
Q: What is the punishment for taking multiple wives?
A: Multiple mothers-in-law.
07:40
@AviD How do I recover could imply forensics, doesn't it?
@AviD Haha :P
 
2 hours later…
09:17
@AviD I concur
@AviD LOL
@Mvy Morning
Hi @RoryAlsop!
any luck you know how to run the java console?
ooh - on which operating system
windows 7
on Windows: Locate Java icon from the System tray on lower right hand side of screen.
Right click on Java icon
Select Open Console.
or
Problem is: no icon :P
09:20
Click Start
Select Settings
Select Control Panel.
Double click the Java icon.
Click the Advance tab.
Click on the sign
Select Show Console and click Apply.
Already done
hmmmmm
one of those should work
I don't know any otehr way to get at it in windows
I thought so XD
and those methods are the only ones I find online as well
Can't figure out what program add this notification icon...
And firefox menu for java console is not working anymore it seems/
09:22
maybe ... a reboot? :-/
hm
Well I guess I have to try to be sure.
Brb
09:36
Hum, I got the console by running an applet.
But GreaseMonkey is not logging into it argh, I'm gonna work on my thesis.
At least I can handle LaTeX better :P
 
1 hour later…
10:52
gmorning all
@RoryAlsop concur, it should go to Super User, or concur we should leave it here?
or concur that there were quite a few agreeing with the opinion that it should go to Super User, but the final diamonddecision was to leave it....?
0
Q: What is a safe browser add-on for downloading FLV videos?

MarneauHaving learned a bit more about what add-ons/extensions can do in Firefox, I want to minimize my risk and use some safer mechanism to download videos for later viewing. Is there any open source browser add-on that I can use for this purpose, where I can examine the code myself and it's not 100,00...

shopping list? closeworthy? not to mention low level and not "pro" type question...
11:19
Hey @AviD did you see the title of the page have a 'malware' included ?
The question itself does not have this word in it, but a tag
And I think the question should be improve, but can definitely be on-topic.
@AviD I'm not entirely sure you should be jealous. One wife is quite sufficient. The very idea of more is terrifying.
@AviD After refactoring of the question, I'm not so sure anymore...
hehe
my wife always says she'd love to have a wife.
I have an idea to make it more sec.se
but it will change the question
@AviD Giggity
11:29
@ScottPack ha! no, more of the taking-care-of-you nature...
Did we ever come to a consensus about how we define "professional" here. It is just "pros" talking to "pros", or "people" talking to "pros"
@Mvy yes, the title includes the "most siginificant" tag that is not already in the title, for SEO.
@Mvy the tags on that question arent really.... apt.
@Mvy then, if it's a different question, its not edit-worthy. I'll close it as it is now, and you can ask the new question....
@ScottPack while we should be aiming for more "pros to pros", we are also plenty open to "people to pros".
dont want to go the same way as Theoretical Computer Science...
I think it could be something like this :
How can I assess the trust worthiness of a browser add-on?
==========================

Having learned a bit more about what add-ons/extensions can do in Firefox, I want to minimize my risk and use some safer mechanism to download videos (FLV in particular) for later viewing.

Considering the question http://security.stackexchange.com/q/5875/665, is there any way to trust an (open source?) browser add-on? I can examine the code myself if it's not 100,000 lines of illegible gunk.

The most popular video-downloader add-ons are closed source AFAIK.
@Mvy that could be an interesting question....
@AviD Conceivably, this question is in the "people to pros" camp. I just don't find it a very interesting question.
11:32
i dont even think its a "... to pros" question.
really? what video player to use, thats a question you take to your security pro?
/dev/random to /dev/urandom Q&A site :P
and I'll go ask my dentist if the mint-flavored floss is better than the plain.
@AviD @Mvy framed it the better way to make it applicable.
@ScottPack absolutely...
I mean, if you really read the question, he's not really asking for a video player.
11:34
but dont you think its too different?
hmm...
Did he even change the question body?
quite a bit, actually.
@Mvy I say go for it. thats a good question there.
What shall I do edit then? Or you still want to close it first?
@AviD Barely :)
@ScottPack "Is there any open source browser add-on that I can use for this purpose" -> "is there any way to trust an (open source?) browser add-on?"
you're right, not a lot, but key.
@Mvy naw, dont wanna close it anymore :)
11:36
right
Edited.
You shall have to approve it :P
I don't really see a difference between the question that the kid posted, versus the question that @Mvy edited it into. More than anything else, I see the new edit as having clarified and explicitly stated the Real(tm) question as asked.
The real problem is : 1st you are not sure about what problem he is talking about (Have asked it myself in comment, hence the added link), 2nd Is there any open source browser add-on makes the question open to listing all the possible addons of FireFox.
It's a water fall process
1) Is the question suitable to the site scopishly and culturally?
2) Is the question suitable to a SE site.
Now then, time to go to the office.
12:20
1) -ish
2) now it is, after @Mvy's edit.
thanks, approved.
you welcome. Thanks.
So I notice that the blog link has disappeared from the top bar.
@AviD leave it I think, some good stuff there
@ScottPack mo diggity
Yo. Or, as I think you have to say to get anywhere in infosec these days, "j0".
@GrahamLee j00 h4x0rz
I think Jimi said it best with "Hey j0"
12:34
5UP L4/\/\3RZ
I'm going to stop that now before I become unable to live with myself.
flashback to the late 90-s
:-)
@GrahamLee â–²1
this is IRC, right?
WHOIS GrahamLee
hm
PING GrahamLee
12:36
@GrahamLee I bet this is not :P
Some folks were working on an IRC interface to chat
Hm... the all point of SE chat is to NOT be IRC
\001ACTION boggles at the notion\001
@GrahamLee Nooooooo
12:41
CTCP FTW
@ScottPack The link is still in the bottom of the page
Interesting. That used to link off to blog.stackoverflow.com, whereas on Saturday we had a link on the top bar that went to security.blogoverflow
I'm not sure, but I guess the link only appears when a new post is made
-OR-
They broke it during maintenance
I think it was mentioned that the link at the top would appear for 24 hours on the publishing of a new post.
12:59
@RoryAlsop That seems....odd
@ScottPack I could be wrong - I was trawling a long log, and was really preparing for gig, but that's what I thought it said
@RoryAlsop I'm not doubting you, no matter how unreliable you might be. It seems sufficiently odd and inconsistent so that I can totally believe the SEI devs came up with it :)
@ScottPack why odd and inconsistent?
I assume you're talking about the blog notification, and not @RoryAlsop.
shopping list q?
2
Q: Is there a viable open source antivirus for OS/X?

instantcoffeeI am interested in finding an antivirus program for the Mac, but not one from Symantec, because I don't trust them. I wonder if perhaps there is an open source solution for antivirus for OS/X? Or how about just an open source program that can monitor the system looking for suspicious behavior,...

good answer there, but it kind of is a good shopping list...
hm
13:17
yes, a bit shopping'y - but I like @Scott's answer
I think if we take it in the spirit of "I want to secure my Mac, please guide me" type of question it sort of works
@RoryAlsop That's more along the lines of how I read it. Plus, even if you take it as a shopping list, the list is awfully dang short :)
Oh, @RoryAlsop, car came out fine?
true that
13:32
@ScottPack yes - all fixed. Ended up totalling £2300 though :-(
it did very well on the drive back from our gig on Saturday - what should have been a 3 hour drive became a 5 hour drive through major flooding
@RoryAlsop I was afraid of something like that. Like I said before, the word "headgasket" sounds an awful lot like the sound of an adding machine to me.
with half a ton of amps and cabs, 6 guitars, costumes, merchandise and my wee roadie with me
But no engine rebuild. Yay!
@ScottPack ended up being radiator hose, gasket plus entirely new radiator core
By "wee roadie' you mean your oldest?
13:34
but no engine rebuild
so, Yay! - sort of
:-)
@ScottPack yup
What kind of car is it?
he had a blast
@ScottPack Subaru Forester STi - slightly non-standard:-)
japanese import and then heavily modified for UK
which is why any repairs get expensive really fast
I've only ever replaced one radiator, it was fairly easy but took a long time.
It ended up being about $200 in parts, but took me 3-4 hours.
total labour on this was just under 12 hours. A chunk of that was because the gasket is not standard so they had to do a fair bit of skimming and heat testing
The gasket is the big killer.
4 cyl turbo?
13:37
yup - currently 390 bhp
0-60 time is 4.1 seconds
although not with half a ton of amps and cabs in it
Without ever seeing the engine compartment, I imagine it's pretty tight.
Probably not that easy to get the head on and off either.
yeah, you have to first remove intercooler and a fair amount of pipes
She's probably a little snappier now :)
and running about 10 degrees cooler, which is nice too
Hey @Jeff
you decompressed yet?
Good morning. I'm on the two hour long bus ride home from the airport.
13:42
@TheEvilPhoenix Granting root privileges to a user reduces the risk that this user compromises the physical integrity of a machine in a screwdriver-powered attempt to gain said root privileges.
So, not really started on that yet
@ThomasPornin :-)
@JeffFerland sounds like it was a really good one this year. Gutted I couldn't make it
I've never done more than 3 days before... it was a real trial on me.
@ThomasPornin Good call
13:54
Most people I talked to know stackoverflow, but don't know the stackexchange domain. the cross-marketing isn't really working there
@JeffFerland that is something I think the SEI folks need to work on.
activities like this help, but it needs to get bigger
Also, the size of the writing on the stickers and shirt I got was very small. Definitely needed a bigger font.
@RoryAlsop I ran into the ISACA Atlanta guy... I think it was ISACA anyway...
@JeffFerland there are a lot of good ISACA sec folks - meeting more and more these days.
and the upcoming cobit 5.0 is a decent, practical framework - should appeal to a lot of organisations
14:10
I guess the question now comes to interviews and where I may end up moving. Good year for networking.
@JeffFerland definitely a good market. Best of luck - make the most of the networking!
Going to shut down and try to nap part of the ride home.
gnight then
14:28
Sweet Dreams
are these two not dupes:
3
Q: How do researchers "gain control of an attacking PC" and not themselves be considered attackers / criminals?

WesleyDavidIn reference to this Network Computing Report article titled "'Operation Shady Rat' Perpetrated Five Years Of Long-Term Attacks On Government, Enterprises" The Cliff's Notes to the article is thus: it has been discovered that many countries and large corporations have been the target of long-ter...

7
Q: How did McAfee access the Shady RAT command-and-control server?

blundersWondering if anyone is aware of how McAfee was able to access a command-and-control server used by the Shady RAT -- or to be more clear, if this access was an authorized action, or if they engaged in an unauthorized offensive play. The following is a references McAfee gaining access to the server...

Hum I agree
The 1st you linked seems better that the oldest one though
@JeffFerland night!
And BTW I find Hendrick answer better than the two other
@Mvy yes - the new one should be merged in as a dupe.
14:36
That is the normal order yes...
@AviD - can you do that? am on con call and would be bound to click the wrong button:-)
Anyway, my preference goes to the newest over the oldest.
merging a dupe in will keep all the answers, so we don't lose the good ones
Other thing: how about making a book from @ThomasPornin answers?
@Mvy - you hear that @Thomas :-) worth speaking to SEI to see whether or not you could co-publish a book on crypto Q&A from Sec.SE
14:45
@RoryAlsop But we do, in effect, lose one of the questions.
true - but to be fair, the earlier one is the more general case, and the new one is a specific point in time one. I wonder if it is worth keeping them separate until the breaking news aspect of it dies down and then merge
@RoryAlsop I wrote a book once; it implied a surprisingly high amount of work
@RoryAlsop When you say "earlier/later" do you mean the order in which Avi posted, or the order in which they were asked?
Because he posted them in reverse time order.
ooohh - good point, I assumed they were listed chronologically by @AviD
in which case I am a moron
XD
14:50
@ThomasPornin - yeah, I keep looking at it. Collecting chapters each year, from my talks, work, etc., but that whole 'collate and write up' bit looks like a long job!
@Mvy i agree...
While they are both talking, very specifically, about the same event, I do find Wesley's the much better question.
Full disclosure, I converse with him frequently :)
@ScottPack I do too. And that is what I meant to say before. It's probably my age...Alzheimers or some....
or because I was on a con call
@RoryAlsop I hear these things happen with more frequency after one's 30s.
@RoryAlsop Especially the reviewing sessions -- when you finally get it all together, and the editor sends it to someone else to look for typographical errors
14:51
You've used the phrase "con call" twice now. I understand all of those words separately, but not necessarily in context.
yeah - I heard it was after 18 years old
and they return with a bunch of complaints
@RoryAlsop the other way round! the earlier one is specifically about shady rat
@ScottPack conference call
@AviD yep - I have been made very aware:-)
@RoryAlsop We call it "conf'call" here (in French in the text)
14:52
oops sorry, reading slowly....
@RoryAlsop That makes more sense. I tend to hear "con" as a short form for "convention" more than conference.
@ScottPack also known as "conf call" to americaners.
will remember that
conf call it is
(but I'm still not going to change the proper way to spell aluminium)
okay, now I'm confused, probably cuz of the timelag....
As far as words are concerned: It takes a @Rory to teach the community, but it takes a community to teach @Rory :P
14:54
those C&C questions should be merged, with the specific one merging into the general, later question?
tl;dr - I'm a moron, but everyone has corrected me and they are supportive of my feeble failings that come with age
@Mvy LOL
@AviD sounds good to me
there are good answers on both
I'm a bit hesitant... the scoring implies differently.
whatevs.... done!
We need a backlink too I guess
from the merged one the original. (For answers references)
backlink shouldnt be needed - all the answers get ported over onto the new one
and the merged q just points to the new one
hm
14:58
the answers are all still relevant
as both questions were on the same event
one was just a more general question
It's just that one question was written much better than the other.
right
worst case, we can edit an answer if it seems to require referencing something specific
and, only a day apart.
I tried copying over any missing text from the original q, but turns out it was all pretty much covered.
15:01
Did someone looked at that question
3
Q: What tools exist for Open Source Intelligence (OSINT)?

Ben HollandI'm starting to do some research in the area of open source intelligence (OSINT). I'd like to compile a list of tools/resources (software/web based/libraries/etc) that can be used to profile, social engineer, crawl social media and public databases, etc. Please skim this wiki page before postin...

VMWare strikes again
I've suggested CW for this.
ooops wrong one
Better
If not CW, should be closed as Off-topic I guess
yeah, seen the flag... needed to find a few minutes to peruse it, since I'm not really up on that field.
but, looking at it now, I definitely agree.
done!
nice flag weight there.... ;)
gtg, dinner time!
gni?
TTFN is an initialism for a colloquial valediction, 'ta ta for now', based on , an informal 'goodbye', approximately equivalent to 'bye bye', or . The expression came to prominence, in the UK, during the Second World War. TTFN is still used occasionally in ham radio as an ending to a transmission but was brought into popular use in the UK in 1941 in the weekly radio comedy ITMA by the character Mrs Mopp. From 1939, initialisms, previously rarely used except by the military, were heard more frequently by the British public. ITMA satirized them by coining TTFN, a "pointless" initialism (...
?
You really have weird things in the UK :P
15:11
@Mvy That has been said a lot
I think it is why we exist
invaders always got confused
^^
anyway, ten years in Big-4 consultancy has taught me many useless TLAs that need to be used:-)
(TLA - three letter acronym)
And "FLA" apparently :P
heh
time for me to go - later all
See ya
15:28
0
A: Why do sites implement locking after 3 failed password attempts?

Because three is the magic number: http://www.youtube.com/watch?v=rUXtUD81G-g

seriously?
15:54
Anyone heard anything about these? Kinda been sitting undone for awhile.
7
Q: IT Security SE Logo Wallpaper

IsziJust wanted to post here, to officially request something that was mentioned in chat: An IT Security StackExchange wallpaper. I think the main site's "banner logo" (including: lion, shield, starburst, wings, "Tron lines", banner) would look great against its current backdrop color, as a full-s...

nope
Ok, heading home.
see you
16:13
Oh, hey @Mvy. Hardly recognized you with the new avatar and all.
Afternoon, @Iszi
17:01
hehe. Hi @Iszi
17:13
@Mvy You should have seen them when I changed my name. The fact that the gravatar didn't change is about the only way they recovered.
Hehe
 
1 hour later…
18:38
While this is, admittedly a horribly asked question, do you thinks think it is worth migrating and taking a shot at?
0
Q: Security logs on Linux, Solaris and Windows

daveCouragoWe are a security departments and we get the question from our sysadm what they shall log for SIEM (Security Incidnet and Event Management). Is there someone who has or knows a smart document we could hand out to our colleagues so they need not interprete some high fly quidelines?

I have just enough reasonable doubt that I cancelled my close vote at the last moment.
@ScottPack Yes. A) They are security professionals with a work related question B) Detection of compromise, breach, and loss of integrity is relevent C) Helping others to be more secure is a valuable security activity
Yeah, for the most part it seemed like a bit of a no brainer. I just had some concerns about the answerability of the question as asked.
Just because there is no good answer (now) shouldn't disqualify it from being asked.
No, but the standard advice, "Don't Migrate Crap" still applies.
I smell a good reasonable question down in there, the open question to my mind was how easy would be it be to suss it out versus starting fresh.
Well, I flagged it for migration, but it looks like it was closed as a NARQ instead
What about asking the right question for them and notifying them of the good question?
19:23
@thisjosh Migrate the question, edit the question, post a comment below the question explaining the edit. I think that's the best way.
Is it possible to migrate a closed question?
Yes. They might have to reopen and migrate, but a mod can do it one way or another.
20:04
Important fact. I greatly dislike reading code. That is all.
Oh, good. That question got migrated
20:28
Morse code?
20:48
Pretty much any code, really. In this case PHP
@ScottPack The only code I enjoy reading is my own.

« first day (235 days earlier)      last day (4943 days later) »