The DMZ

tylerl

01:25

screw this for a lark. I'm going to go play video games.

Terry Chia

06:16

@ThomasPornin I like the name of your password hashing function. :)

And it has a very interesting set of capabilities.

ack__

08:16

Hi all !

Nick

@ack__ hello

Anyone knows a good command to test firewalls.... mine seems ot allow ping through

Terry Chia

@Nick nping?

scapy?

Nick

@TerryChia "No command nping found"?

Terry Chia

@Nick Download it obviously...

Rоry McCune

@Nick it's part of nmap

Nick

08:20

@RоryMcCune ah thanks :P

yup nmap works

ack__

does anyone have experience with cyber-intelligence vendors (as a service, not looking for products) ?

Terry Chia

08:35

AviD

09:34

hmm, it's that time of month again...

3

I have to pick a new coffee to order.

Terry Chia

@AviD TWSS

AviD

s/have to/get to/

@TerryChia oh damn, I should have seen that.

ooh, I think I get a free bag this time.

Coffee tastes even better when it's free.

should I be a piggy and order the 40$ bag...?

@Kisunminttu @Xander @ScottPack any specific suggestions, coffee regions you think I should look for?

Terry Chia

09:55

@AviD Coffee snob. :P

AviD

@TerryChia hehe, yeah, my wife and kids keep calling me that. And then they ask me to make them some...

@TerryChia I'm not going to order that expensive bag, though, that's ridiculous. Even for me.

Terry Chia

@AviD Hehe.

I'm assuming the bag lasts an entire month?

AviD

@TerryChia actually slightly less now, the AeroPress I've started using seems to take more of it. I would say 2-3 weeks...

Terry Chia

@AviD Ahh. Tbh I think $40 isn't that much if it's good I guess?

AviD

@TerryChia the bags are 200 grams....

I usually pay between 12-15$, and yes it is damn good.

Terry Chia

09:59

Well, you pay for what you get. :)

AviD

so it is a bit on the pricey side, but not horribly so. Just barely more than those nespresso pods, and so much better.

@TerryChia heh, I guess, supposedly that 40$ bag is of an extremely rare bean. But I'm not that much of a coffeesnob.

Lucas Kauffman

@ack__ yea, we do that, intelligence as well as vulnerability monitoring

Nick

Im randomly getting 408s on stackexchange... what is going on

AviD

okay then, Imma going for Ethiopian. looks good, and I did particularly like a different ethiopian I've had.

> Ethiopia Harrar Longberry
Bold and edgy, with an unmistakable wild berry, and deep dark chocolatey undertone. Our Harrar coffee has a very interesting dry edge to it and a surprisingly pleasant, slightly fermented lingering finish.

see, now that's some snobberry :-)

Rory Alsop

It all makes no sense to me. If I could have caffeine that just tasted of bacon then I'd be delighted, but the taste of coffee is the only thing about coffee I really dislike

AviD

10:12

@RoryAlsop oooo bacon flavored coffee. I'll get my guy on that right away.

no, never mind, they dont do flavored coffee.

@RoryAlsop so some of these coffees I really like, some are just okay, there was one or two that I wouldn't order again. But then there are some so delicious I would just drink all day long if it wouldnt have any side effects...

and yes, there really is a big difference between them. Like wines....

Terry Chia

About the only coffee I really dislike is the piss they serve you in mcdonalds.

AviD

@TerryChia you actually drank that? You are either very brave, or a mutant.

Terry Chia

@AviD Or a poor student.

AviD

ah, so they paid you to drink it for experiments?

Terry Chia

@AviD Heh, not quite.

Terry Chia

10:39

I'm curious, what fonts do you guys use for your code editors/terminals?

AviD

@TerryChia Wingdings. I like a challenge.

Terry Chia

@AviD Hehe.

First look at the set of Star Wars http://t.co/m9VuiXMxPH

Tweeted by DepressedDarth on May 22, 2014 at 9:49 PM

AviD

heh, it took me a few moments and a couple refreshes to get that.

Terry Chia

@AviD Moar coffee!

Rory Alsop

10:59

That's very good, @Terry. Is it a sad indictment on my family life that all my kids got it instantly, even the 7 year old.

Terry Chia

@RoryAlsop I don't see the sad part. :)

AviD

12:30

@deed02392 was it you that was asking @Adnan for dating tips? You could try this one...

I don't have sex until the last date. #UndateableBecause @midnight

Tweeted by bigmacher on May 21, 2014 at 3:51 AM

deed02392

lmao

Terry Chia

12:43

@AviD He has @Kisunminttu though.

Either he is doing something very right or something is very wrong with her.

AviD

I wouldnt rule out both.

anyway, I never said that was @Adnan's way...

Nick

12:59

My current VPS provider uses passworded root, ssh on default port and no extra security... simply leave or make a security lecture to support... hmm

Terry Chia

@Nick If it's a VPS... configure it yourself?

Nick

@TerryChia their control panel uses root account over ssh changing the authentication method means breaking the panel

Terry Chia

@Nick Ouch, that's nasty.

Nick

@TerryChia And worse... the ssh ftp etc passwords are the same AND cant be changed over the panel AND are generated by what it seems to be a list of random words.

Terry Chia

Meh, just get a new provider.

DO is cheap enough, and Linode is excellent.

Nick

13:04

Yup thats what I though

AviD

@Nick "are generated by what it seems to be a list of random words." well at least they're doing something right.

Nick

@AviD well its a list tho not a random string as it should

Rоry McCune

hey mods...

-1

Q: The newest Trojan like Sub7

Where can i find newest Configurable Trojans like "Sub7".

now I'm not usually an advocate of closing things

but that Q combined with the comment that A-V finds sub7 doesn't make me comfortable that he's just doing academic research on malware...

AviD

ha, nice VtC - dont worry about the ethics, we dont recommend ANY software, malware or otherwise. :-)

boom, and then he deleted. interesting.

Nick

@AviD he deleted it or you did? :P

AviD

13:14

he

Adnan

13:28

@TerryChia @AviD Oh, I'm doing the very wrong things in the very right way

That's the secret to a happy relationship, I figured

AviD

It really was not a request for details.

Actually, @TerryChia may have been requesting.

I'd request you not. Only partly because we like @Kisunminttu.

Terry Chia

Adnan

We actually have just finished

cooking some food

AviD

pathetic

Huh. Can't believe I forgot my towel.

Luckily I am never far from one.

Towel Day

Towel Day is celebrated every year on 25 May as a tribute to the author Douglas Adams by his fans. On this day, fans carry a towel with them, as described in Adams' The Hitchhiker's Guide to the Galaxy, to demonstrate their appreciation for the books and the author. The commemoration was first held in 2001, two weeks after Adams' death on 11 May 2001. Origin The original quotation that explained the importance of towels is found in Chapter 3 of Adams' work The Hitchhiker's Guide to the Galaxy. The emphasis on towels is a reference to Hitch-hiker's Guide to Europe by Ken Welsh, which ...

and shame on @RoryAlsop for not mentioning it.

Adnan

Happy Towel Day everybody

What a coincidence! @Kisu and I are wearing just towels right now.

Pics?

AviD

13:40

dude, seriously!

and why arent you at work?

oh damn, its sunday. nevermind.

Adnan

@AviD It's Sunday

Terry Chia

@AviD Heh, that's what happens when you freelance eh.

AviD

It feels like Tuesday... dunno, its been a long week so far.

Adnan

@AviD and, alright alright, I'll post the pics. Jeee!

AviD

@TerryChia hehe. Yes, although Sunday is a regular work day here. but it would be the case anyway, so you're not wrong.

Adnan

13:42

@AviD I had some problem when I moved from Syria

Sunday is a regular work day there as well

This reminds me of this

►

> You don't eat pork, we don't eat pork; let's not eat pork together.

Skip to 2:30 for the song

AviD

now you tell me

his face bugs me

Adnan

@AviD I don't like his face or his hair

However, he's sort of funny and knows how to play the piano very well

Also, I seem to have gotten the lyrics completely wrong

AviD

close enough

Rоry McCune

@AviD well we don't have a close reason for "dodgy" :op

AviD

14:38

Hmm. So after publishing details of the next OWASP IL chapter meeting (this is usually a small gathering, 3 talks at most, starting in the evening), late Thursday afternoon (and remember that Friday is not a work day here), just about 100 have already registered by today.

unfortunately thats already more than our host has room for....

anyway, this does bode well for our upcoming yearly conference (/cc @RоryMcCune) :-)

Terry Chia

@AviD Nice, happy problem to have. :)

AviD

@TerryChia oh definitely.

Terry Chia

How often are the chapter meetings?

AviD

It's a pretty awesome chapter, if I say so myself - always a big crowd, I get to pick from the best talks so we get great content...

@TerryChia as often as I get off my arse :-)

we've been aiming for quarterly, but thats not accurate either...

Terry Chia

@AviD Hehe, I must say the IL chapter is definitely way more active than the SG one.

AviD

14:43

so we've had 2 so far this year, next month is the 3rd, then big conference in Sept/Oct. Maaaybe another meeting in Nov-Dec.

@TerryChia that is only partly due to my efforts. Dont forget we have a relatively large market here, lots of vendors here, tons of research going on...

but yeah, we are one of the more active ones, but nothing like NYC, DC, or some others.

Rory Alsop

14:57

@AviD - I mentioned towel day only a couple of days ago. What, d'you guys need handholding? :-p

AviD

you are not accounting for our innate forgetfulness.

Terry Chia

@AviD He probably forgot about it.

AviD

about what?

Terry Chia

@AviD Your innate forgetfulness.

AviD

@TerryChia yeah?

what about it?

Terry Chia

15:00

@AviD I'm just saying he forgot about it.

AviD

@TerryChia who forgot about what?

Terry Chia

@AviD Heh.. you are doing this on purpose aren't you? :P

AviD

hehe, wanted to see how long it would go.

you caught it almost as quickly as my kids. So there's that.

the sad thing is, it often happens for real, and my wife can't tell when I've seriously lost the thread.

Senior moment.

►

Rory Alsop

15:36

Happy Towel Day!

OKay - It's a small towel, but it's a Stack Exchange towel - which is obviously cool

was that okay @AviD?

AviD

haha

excellent

stack exchange towel + SE mod hat, so doubley awesome

Rory Alsop

@AviD And NIN t-shirt= triply?

AviD

@RoryAlsop absolutely. Though a Sec.SE shirt would also be valued.

unless you have your NIN shirt signed by the band....

Rory Alsop

@AviD I should have thought of that, and then been drinking out of a bicycles.SE water bottle

Terry Chia

@AviD Or a Stackoverflow shirt signed by Jeff Atwood. I hear that's the geek equivalent.

AviD

15:47

@RoryAlsop hahah

Rory Alsop

@AviD I'm such an SE geek

this one feels a lot like - read me the hydra man page:

0

Q: Bruteforcing website login with captcha - Homework assignment

So I need to bruteforce a website login, there is no username, the password can be 4 letters long, a-z and 0-9, the captcha solution can be from 1-20. I tried using Hydra in Kali but always failed. Command I did was 'hydra -L pass.txt -P captcha.txt (root of website) http-get-form "/(thepage.php)...

passwords brute-force cracking captcha

Or is it a good question? I think not

AviD

@RoryAlsop no, its crap RTFM q like you said.

but on the other hand - cracking tag? really?

and with 55 freekin questions??

what the WTF, sec.se??

Rоry McCune

18:06

@AviD impressive!

@AviD you have an idea on dates yet?

Iszi

18:30

Hey, can someone (preferably US) check this for me? Go to earth.google.com and click the download link. For some reason I keep getting every language except "English (US)" and it won't let me fix it.

Rоry McCune

@Iszi going via the telport US proxy I get google.com.prx.us.teleport.to/earth/download/ge/agree.html which doesn't seem to specify language, do you get it there or after you download?

Iszi

I've had Portugese in Firefox & Turkish in Chrome, and my wife got German in Firefox on hers.

Gilles

@Iszi from France (Chrome/Linux), I get French by default. If I switch to English (US), I still get French. If I switch to English (UK), I'm redirected to the same page on google.co.uk, in English.

Iszi

@RоryMcCune That's not at all what the page is supposed to look like, in any language.

@Gilles So that's it. Google hates America.

FEichinger

From Germany - Get Turkish.

Rоry McCune

18:36

@Iszi well if I direct browse (firefox/UK) I get the same page more or less....

Gilles

@Iszi Google is very aggressive in speaking the language of the country it thinks you're in. Which sucks if you're in a country where you don't speak the language.

Iszi

@Gilles But I'm not in Turkey, Portugal, or Germany.

Gilles

I guess it's a ploy to get you to log in so you can apply your account's language preferences

FEichinger

@Gilles Nope. I am logged in, didn't help.

Iszi

@FEichinger Same

FEichinger

18:38

Oh, and I get Italian on some pages.

Rоry McCune

@Iszi going via a SOCKS proxy in Azure gets me the same page too...

Gilles

@FEichinger Huh. Then Google sucks at web programming. Whodathunkit.

FEichinger

Turkish, Italian, Croatian

Iszi

Just did a sanity check on What's My IP and I'm definitely showing up as American.

FEichinger

Okay, found how to fix it, methinks.

google.com/intl/us/earth/download/ge/agree.html

Xander

18:45

@AviD I'm a big fan of Ethiopian (think I've mentioned that before) and you should also, if you haven't already, look for a nice Hawaiian Kona.

Iszi

18:59

@FEichinger That works. Thanks.

Gilles

19:43

@RoryAlsop Don't migrate crap

Rory Alsop

@Gilles damn -was it? Sorry.

I had a few reads through it and it made enough sense to me I thought it might be fine

Gilles

@RoryAlsop the question is a scan of an exam question

Rory Alsop

Oh, hang on - no

I didn't think I had migrated

I remember making the comment to him

and then thought I had just closed it

mistake

Gilles

np

tylerl

20:54

@Gilles that's awesome. A new low in homework; don't even bother to type up the question, just scan it and post the pics. DO MY HOMEWORK, INTERNET.

Gilles

@tylerl not new... Common enough on Computer Science that we have a specific policy to close them regardless of the merits of the content (not that there often is merit to the content but some would be answerable).

tylerl

@Gilles clearly you're going about this wrong.

you need a new policy of answering homework questions incorrectly but convincingly

like you'd see on code golf

Gilles

@tylerl that would be really nasty towards innocent readers

tylerl

@Gilles :D

So you're starting to see the advantages, then?

Rоry McCune

21:18

@Gilles @tylerl sounds like a requirement for a bit of conditional logic, one answer for people logged in as the questioner and one for everyone else !

tylerl

21:30

@RоryMcCune I see a feature request.

Transcript for