The DMZ

Lucas Kauffman

15:00

@ScottPack well that sux

Scott Pack

@LucasKauffman It really does. It's also worth noting that I don't think I've ever gotten higher than 15Mbps down. That was a good day.

AviD

@ScottPack whoa. I dont know what ClearAQM is, but unless it involves gilding your testicles I can't see how those prices make sense.

AJ Henderson

my home internet is $100 a month for 50mbps down/5mbps up

kalina

@ScottPack this is criminal

Lighty

the ISP's really are crazy in the US, arent they?

kalina

15:01

I pay less for 4G and get better speeds

Scott Pack

@AviD ClearQAM. It's digital, but unencrypted, television.

kalina

10 years from now we'll look back on this era and laugh... "internet speeds measured in mbps? hah!"

AJ Henderson

we already look back on 10 years ago and laugh

David Freitag

@kalina I still measure my internet speeds in kb/s at home :[

kalina

DIAL UP MODEMS ARE SO FUNNY

AJ Henderson

15:03

but we cry compared to how far it hasn't gone

Iszi

@AJHenderson Yeah, but we weren't still measuring in kbps back then either.

Lucas Kauffman

back in the day when you still had the familar PPHIHHIHIHIHHHHHHPPPPPPPPTTTTTTTTTSTPPRRRRTTTTSTSSSSSSSSSPTTTTTTTTTTTTTTSSSSSSQQ‌QQQQQQQQQQQQQSSHSHHHHHHHHHWIWI sound

Scott Pack

My Internet speeds were cheaper and more reliable 10 years ago, and not that much slower.

@LucasKauffman That sounds like 38.8.

AviD

@ScottPack see, now this is funny, now.

AJ Henderson

it is pretty sad that my phone gets faster upload than my home connection for $30 a month though

kalina

15:03

yeah

my fastest internet connection atm is my phone

AJ Henderson

if I upgraded to the S5, my phone would be faster than my home internet

Scott Pack

So it looks like with TimeWarner I can get 50/5 for $65/month for 12 months. It'll probably be $100+ after.

AJ Henderson

it is $100 a month after

(tis what I have)

Scott Pack

@AJHenderson I just got, in the mail, a few months ago what the new price list was. My prices will more than double.

David Freitag

SE should form it's own ISP

kalina

15:05

@ScottPack at my last house I had "up to 100" / "no commitment on upload speeds" for around the equivalent and got 75mbps down and 30mbps up

and that was a BT connection as well

Scott Pack

@kalina That's because you're not in the US. Here the predatory monopoly is the norm.

Thomas Pornin

Behold the power of 3G !

Simon

legit

Scott Pack

I'll have to speedtest when I get home. My office connection isn't that bad right now.

AJ Henderson

@ScottPack predatory legislatively enforced monopoly even

Scott Pack

15:08

@AJHenderson Troof.

AJ Henderson

in fairness, the US IS more spread out

AviD

@AJHenderson so is your mom

AJ Henderson

and lacks population density which should make it a LITTLE more expensive

David Freitag

AJ Henderson

but not to the levels we see

Scott Pack

15:09

@AJHenderson It is, but when I moved to a population center that has a couple of major datacenters I was expecting to get, you know, choice.

David Freitag

My work connection is miles better than my home connection and it still rates a D+

kalina

@DavidFreitag 11Mb/s being faster than 64% of the US says it all

Scott Pack

I was disappointed to learn that my choices are TW for cable, AT&T for DSL, and then satellite.

AviD

@ScottPack yeah, could make sense to have a difference between population centers and remote country bumpkins. but not this way....

David Freitag

@kalina Slower than

kalina

15:09

oic

that still means there are plenty slower

David Freitag

When i speedtest my home network it says something like 95%

Scott Pack

@AviD From what I've seen it's pretty much the same for everybody except in the handful of cities that have fiber to the home.

kalina

@DavidFreitag lol.

Scott Pack

@kalina It's nearly average, though.

David Freitag

@kalina It took two and a half months for WoW to fully download

AviD

15:11

a new isp is opening here soon, apparently they want to run internet to the home over the power cables.

AJ Henderson

@ScottPack problem is people would complain like you wouldn't believe if cities got it cheaper than rural

so they subsidize rural off of cities

AviD

that could be interesting, and if it works well there would be no excuse not to spread cheaply (relatively speaking) to any place there is power cables.

kalina

British ISPs just go "psh, rural? Your fault for living in a field"

David Freitag

Yeah, until Google walks up with WiFi baloons

AviD

@AJHenderson what? that makes no sense.

AJ Henderson

15:12

@AviD unless there has been a break through with that, there are traditionally a lot of problems with IP over power line

Scott Pack

@AJHenderson :%s/ if cities got it cheaper than rural// There, I fixed that for you.

Rоry McCune

@DavidFreitag well more BT than the ISPs but yeah, we're waiting for winter 2016 to get our promised FTTC upgrade

AviD

@AJHenderson I am curious to see how it plays out. This is a very respected company here - they revolutionized the cellular market...

Rоry McCune

by which time @TerryChia will probably have 10-Gig fibre

David Freitag

@AJHenderson It works well inside of a single building, but once you try to run it over a long distance there are huge issues. Especially when something that draws a ton of current is in the path

kalina

15:13

@RоryMcCune FTTC works really well

AviD

@AJHenderson also, its probably PPTP not IP....

Simon

@ScottPack I'll be using your extra room at your place probably in the week of July 21st, make sure that it's ready please.

AviD

dont know if that matters.

Rоry McCune

@kalina yeah had it back in livingston, but less good in rural areas 'cause the cabinets cover larger areas

David Freitag

@RоryMcCune I'm seriously thinking about moving to Kentucky.

kalina

15:13

I figured having a crappy copper line running the last half mile would kill it but I got really nice speeds out of mine

Scott Pack

@Simon Eh?

David Freitag

Fibre to the door and no one else will be using it.

Rоry McCune

I'd happily pay for FTTH if I could pay a couple of grand for install and a sane monthly price

but the monthly for that would likely be measured in thousands and I ain't got that kind of money

Terry Chia

@RоryMcCune Probably. :P

AJ Henderson

@DavidFreitag yeah, that was the last state I knew of it too

Rоry McCune

15:15

@DavidFreitag surely in the US it's a case of "where are google deploying " quick move there...

Scott Pack

@RоryMcCune My cousin is paying a few hundred a month to have a T1 run out to his house. Apparently it was either that or satellite and with both him and his wife working from home....

David Freitag

@AJHenderson Google has a list published. They are working on like fifteen cities but Kentucky is one of the only places that is up and running

Rоry McCune

@ScottPack I'd do that, heck I'm paying a couple of hundred in USD for 2 bonded ADSL lines ....

David Freitag

@RоryMcCune Not really. A lot of these places are in nowheresville. Mostly because the local politicians there won't get greedy and try to cockblock Google.

Scott Pack

@DavidFreitag Kentucky isn't even on the list at all

Rоry McCune

15:16

@DavidFreitag yeah but priorities, if you have gig internet you never need to leave the house to see that it's hicksville :)

Simon

@ScottPack I'll be visiting ya.

David Freitag

@ScottPack Woops Kansas not Kentucky

Scott Pack

@DavidFreitag Which kind of makes sense since there are no metro areas worth mentioning there.

AJ Henderson

@DavidFreitag I was talking about the power line thing

kalina

@DavidFreitag all the Ks

Scott Pack

15:17

You know you're in a bad way when Kansas City or Provo is more of a metro area than anything you've got going on.

AJ Henderson

or did you mean to reply to rory

Scott Pack

@Simon What do you plan on doing Stateside?

kalina

@ScottPack getting shot

in the face.

by men of the sea

Scott Pack

@kalina Let's be fair. I've never known anything who where actually shot.

Simon

@ScottPack I'll be hosting the biggest open house party at your place, is that ok?

David Freitag

15:17

@ScottPack Google has already walked out on several huge deals because local politicians made it a goal to make the process a pain in the ass. Now those areas will probably never see google fibre

@kalina hah

kalina

@ScottPack "anybody who has actually been shot", surely?

Scott Pack

@kalina Tomato...potato...

kalina

barely

more like tomato... pile of dung

Simon

You look like a dong.

Scott Pack

My head feels like it's stuffed full of cotton, and not in the good way.

kalina

15:19

your face looks like a dong

David Freitag

@kalina You don't like potatoes?

AJ Henderson

@ScottPack there's a good way for your head to be stuffed full of cotton?

kalina

I never said that

@AJHenderson mescaline.

David Freitag

You implied it

kalina

@DavidFreitag You assumed it

David Freitag

15:20

Boredom at work surely can't be a good thing.

kalina

Nothing to say, eh?

I wouldn't know, when I'm working my mind is incredibly focussed

like no power in the 'verse can stop me

David Freitag

I didn't want to get into an argument over semantics

kalina

unfortunately, reaching that state is a perilous and unpredictable ride

AviD

@DavidFreitag "didn't want to", or "don't want to"?

kalina

people literally DIE.

AviD

15:21

your statement implies that now you DO want to.

kalina

Well, not literally, but figuratively

well actually, not figuratively... in fact, not at all

David Freitag

@AviD Maybe I do, what's it to ya?

AviD

@DavidFreitag well, your statement was semantically ambiguous.

kalina

@DavidFreitag don't say that, he'll put on his mod hat, and he can't do that while I'm here because I drew a penis on it

5

David Freitag

@AviD No it wasn't.

Simon

15:22

You're all a bunch of dongs.

AviD

@kalina you draw that on everything.

kalina

@AviD no

AviD

hmm, that explains @Simon's face now.

kalina

I draw lots of things

AviD

no wait, no it doesnt.

kalina

15:23

most of them are upside down crucifixes

pentagrams

David Freitag

I love how the lady on the Google Fibre page is using a tablet. Like that has anything to do with a fibre connection

Simon

@kalina much rebel very anti-catholic w0w

kalina

schematics for detonators

I also draw pictures of @Simon's face

but I find it difficult to draw something that ugly

sometimes my pencils literally disintegrate while drawing @Simon's face

well, not literally, but figuratively

well... not figuratively... in fact, forget it

David Freitag

Cocaine is bad mkaaay.

Simon

^

AviD

15:26

why the hell do we have both audit AND security-audit tags??

kalina

because the users of info sec are dribbling morons and the bear

AviD

90 seconds to give me a reasonable answer before I nuke the 2nd one.

kalina

and I don't think the bear cares too much about tags

my answer was reasonable

Iszi

@AviD Because there's a chance that a question on this site might have something to do with a non-security audit?

kalina

it perfectly reflects your current situation

@Iszi OFF TOPIC

Iszi

15:27

</sarcasm>

AviD

@Iszi youre kinda making my case for me here.

kalina

maybe both tags were created to demonstrate that the moderators don't audit

AviD

@kalina hehe

kalina

I was being serious

you slacker

why don't you actually do something for a change?

Iszi

Oh, FFS guys....

AviD

15:28

@kalina we're not supposed to

kalina

I'm about to get banned, aren't I?

AviD

@kalina if by "banned" you mean "high", then yes probably.

kalina

sarcasm shares so many letters with orgasm

AviD

okay it is done.

@kalina sarcgasm?

David Freitag

@kalina That explains so many things

kalina

15:29

@AviD that's called "faking it"

AviD

cue link to sarcasmaholics

@kalina only if it was faked ironically.

though I would think it was the other way around.

kalina

@AviD ending up in the situation where you have to fake it is always ironic

AviD

hehehe, always brilliant

►

kalina

I might throw away today's track as well

really not liking the general direction

kalina

15:52

QOTW AUTHOR SELECTION

WOOOOOOOOOOOOOOOOOOOOOOOOOOOOoooooooooooooooooooooooooooo.......................‌............

Rоry McCune

@kalina yeah I'd go back to working on dotto

kalina

THE OVERWHELMING ENTHUSIASM IS SO FAR OFF THE CHARTS THAT IT HURTS

@RоryMcCune ...?

Rоry McCune

@kalina indeed

kalina

tread softly for you tread on my dreams

Terry Chia

16:22

I just noticed a very rare thing in Season 4 Episode 9 of GoT. There were zero boobs.

3

David Freitag

@TerryChia Nah, you just missed them. They were there.

Rоry McCune

7

Simon

lulz

David Freitag

@RоryMcCune That would be way more terrifying if those were black bears instead of brown bears.

Iszi

@TerryChia Yeah, my wife and I noted the strange absence of any mention of nudity or sexual content in the content notice ahead of the show.

TildalWave

16:44

@DavidFreitag racist! :)

David Freitag

@TildalWave Nah, it's just that deaths from brown bears are usually caused by territorial disputes, whereas the black bear usually kills because it's hunting you to eat you.

CodesInChaos

@TerryChia Microsoft published a javascript crypto lib. Download is 250 MB. Uncompressed 800. Almost all of it test vectors.

So cryptography.io has some room to grow

Terry Chia

@CodesInChaos Heh cool. :)

CodesInChaos

Literally 99.9% of the uncompressed size are testvectors

TildalWave

@DavidFreitag so you're saying brown bears are stupid?

FEichinger

16:52

Not literally.

CodesInChaos

@FEichinger why?

Terry Chia

@CodesInChaos I think ours is 14MB with 13MB of vectors last I checked.

David Freitag

@TildalWave huh? No, I'm saying black bears are terrifying. At least you can back away slowly from a territorial brown bear.

TildalWave

@DavidFreitag that's racist, and possibly homophobic too :P

@DavidFreitag you do realize I was joking, right?

David Freitag

@TildalWave Yeah :]

Terry Chia

16:55

#YoMammaData so big, she uses #MapReduce as a diet strategy!

Tweeted by SecurityHumor on June 17, 2014 at 4:54 PM

TildalWave

@DavidFreitag smartass!

Scott Pack

@TildalWave What's wrong with a little homophobic racism between friends?

Well, that's disheartening. When you do a google image search for "big black bear gay culture" you just get a bunch of white bears and beefy hairless black men.

3

TildalWave

@ScottPack single color double rainbow?

David Freitag

Filesystem redirection is so annoying.

Simon

You know what else is so annoying? Me.

David Freitag

17:05

You know what would fix that? A gun.

Simon

RIP me

David Freitag

At least then you would have a hobby

Simon

Death is a hobby?

David Freitag

For some.

Scott Pack

@TildalWave Whatever works best for you man.

FWIW this makes me happy.

FEichinger

17:09

@ScottPack No. The second one should be a colon.

David Freitag

@ScottPack NSFW bro

Scott Pack

@DavidFreitag It is?

Must suck to work for an accounting office.

David Freitag

@ScottPack It's not exactly something I want on my screen when the female coworkers walk by.

Scott Pack

One good thing about HipChat, there's a button beside every image to collapse it.

David Freitag

@ScottPack HipChat?

Scott Pack

17:16

hipchat.com

David Freitag

Oh, I thought it was some SE chat plugin or something.

Terry Chia

@ScottPack Using it for work I presume?

Scott Pack

We've been using it internally for a couple of months now. Nice setup.

@TerryChia Aye.

Terry Chia

Slack.com also looks pretty neat for that purpose.

Scott Pack

The biggest downside to HipChat is that you can't use multiple logins for the same app install.

One of our guys uses it here and for side work so he has to use the web interface for the consulting instance.

Terry Chia

17:28

Wait, did they change how the Hound died?

I seem to remember it being a little different in the books.

David Freitag

@TerryChia SPOILERS!

Not that I have any idea who that is.

Scott Pack

@TerryChia A bit. wired.com/2014/06/game-of-thrones-recap-ep-10

CodesInChaos

I don't even remember that he died

Scott Pack

SHUT YOUR SPOILERY FACE

Given how he split up the next two books I'm wondering how next season is going to work.

Terry Chia

@ScottPack A larger focus on Daenerys and Tyrion maybe?

Scott Pack

17:41

@TerryChia I'd almost rather they merge them back together and tell the story chronologically.

David Freitag

How many seasons of GoT are there now?

Terry Chia

@DavidFreitag 4 so far.

@ScottPack Actually Arya's arc should be interesting.

She always has been one of my favourite characters.

Scott Pack

@TerryChia Yeah, her's is interesting but not as detailed as many others. Tyrion's should be interesting. Watching him try to scramble his way back out of rock bottom.

Ohai! Kevin Hearne's new book was released today.

Rоry McCune

18:19

who makes desktop apps in Ember.js.....

Scott Pack

Assholes.

Lucas Kauffman

18:35

We won

yay

Adnan

19:10

@RоryMcCune Oh boy.

Are you gonna hate me now?

@RoryM Not exactly Ember.js, but a couple of months ago I made a desktop application with AngularJS and AppJS

@ton.yeung I do. I don't.

@ton.yeung Define "a test".

@ton.yeung If you want to assess the security of your router, then Metasploit isn't the answer for it.

@ton.yeung However, if you know what you want, the vulnerabilities you're trying to test for, and you know your router, then I guess you can do some tests in 30-60 minutes with about 30 minutes of preparation.

Rоry McCune

19:33

@Adnan Rly, how does it work, I was thinking it would be pretty limited in terms of desktop interaction, so if it's housed in a browser context for the JS execution engine, it seemed to me that things like native API access would be tricksy

@kalina @roryalsop I have no idea what this is but it seems like the kind of thing you musical types might like wavepot.com

Xander

@RоryMcCune If I'm not mistaken, that's what you get from AppJS, is an ability to run outside the browser context and access the Native APIs. In a loose sort of way, it's to desktop what PhoneGap is to mobile.

Rоry McCune

@Xander ah I C

Xander

@RоryMcCune At least that's what I gather.

Rоry McCune

@Xander would start to make more sense for cross-platform dev. then...

Xander

@RоryMcCune Yes, exactly.

kalina

19:47

I have a significant craving for skittles crush 'ems

David Freitag

20:03

I have a significant craving for vendors who don't think I know nothing because I'm 22.

kalina

ageism

AviD

@TerryChia dammit man! Spoilertalk must wait at least a couple weeks. Day after is just plain rude!

kalina

@AviD the hound dies

AviD

@kalina dammit!

yeah I got that, but now I dont want to watch that episode!

@RоryMcCune windows MUI apps can be written in JS, but you knew that...

kalina

I'm bored

AviD

20:10

whoa. BREAKING NEWS!!!

kalina

davos dies

AviD

EVERYBODY DIES.

just a question of when.

and how.

kalina

you'll die first

AviD

Valar dohaeris.

Scott Pack

20:33

@AviD Whom do you serve?

AviD

@ScottPack Life.

Scott Pack

Locheim!

AviD

:-)

tylerl

20:44

So websitedefender.com installs an "agent" on your site. It's a PHP file that contains a whole bunch of crap, but buried in there is this gem:

> echo handleRequest(file_get_contents('php://input'));
> ...
> function handleRequest($request) {
> $request = json_decode($request);
> ...
> $success = @eval('?>'.$request->params);
> ...
> }

There's some stuff in there about signing the payload etc which may protect against arbitrary code exec by random strangers...

AviD

PHP, because valar morghulis.

Tweeted by avidouglen on June 17, 2014 at 9:14 AM

tylerl

but that doesn't change the fact that the whole point to the script is arbitrary code exec by websitedefender.

Rory Alsop

21:00

@RоryMcCune cc @kalina - Yes! the 'got some 303' is lovely. Takes me back, it does :-)

FEichinger

21:14

@tylerl Lovely.

Rory Alsop

gah - more randoms trying to connect on LinkedIn. They don't seem to realise that if I have had no interaction with them, I will mark as either unknown (generally) or spam (if their profile has things like Hicki9 magazine in it)

that's 5 this week alone

tylerl

@RoryAlsop LinkedIn. /snicker

AviD

@RoryAlsop or ignore

@tylerl slow week? ;-)

Rory Alsop

@AviD that too

@tylerl pfffft

AviD

lemme guess, all of it recruiter spam?

Rory Alsop

21:16

@AviD nope. Only 1 recruiter this week

AviD

ah, so the others are just really random then

tylerl

@AviD I got recruiter spam FROM LinkedIn ON LinkedIn. Hows that for Irony.

Rory Alsop

yeah

@tylerl hahaha

AviD

@tylerl from linkedin?

as in, LI were trying to recruit you?

Rory Alsop

I do use LinkedIn a fair bit though - it helps me when recruiting, for certain events, for keeping in touch with colleagues etc

AviD

21:18

"... for recruiting" - Ha!

Rory Alsop

@RоryMcCune and you can donate through dogecoin :-)

tylerl

All this company has ever done is make me angry.

AviD

@tylerl ha, thats pretty cool. That's not spam, thats actual recruiting and an offer....

dammit, I really have to stop picking fights with random people on twitter.

havent quite figured that part out yet.

tylerl

@AviD Yeah... but I mean, it's LinkedIn. Nice offices, though. They're situated right between the Google offices in MountainView.

Not sure how they pulled THAT off.

AviD

heh. I guess I'm in the minority, but I actually like what they've done, as a company.

only social network (well, besides SE) that I actually find to not be an utter waste of electrons.

tylerl

21:25

@AviD I guess I never had a use for them. They were neutral to me until they accidentally leaked all my whole company structure to spammers. I still get fallout from that.

AviD

@tylerl how'd that happen?

tylerl

@AviD they got hacked

2012 LinkedIn hack

The social networking website LinkedIn was hacked on 5 June 2012, and passwords for nearly 6.5 million user accounts were stolen by Russian cybercriminals. Owners of the hacked accounts were no longer able to access their accounts, and the website repeatedly encouraged its users to change their passwords after the incident. Vicente Silveira, the director of LinkedIn, confirmed, on behalf of the company, that the website was hacked in its official blog. He also said that the holders of the compromised accounts would find their passwords were no longer valid on the website. The stolen pa...

AviD

ah well.

Sh*t happens, and @Simon is proof.

tylerl

Since then, I've gotten endless spam offers referencing my name and company position offering to sell me (wait for it) lists of executives at thousands of companies with their email address, phone number, role in the company, etc.

AviD

damn. so you know that they are selling yours, too...

tylerl

21:32

@AviD yep. goddam linkedin

Deadmau5 is selling his Nyan Cat Ferrari on Craigslist

> ... purrs like a nyancat. and can be fully factory restored (wrap removed) if you're a pussy.

David Freitag

22:05

Is there an easy way to download a subfolder for a repo on github?

AviD

@TerryChia am I going to regret eating while watching GoT?

Rory Alsop

22:20

@AviD - never

@tylerl - that car sounds nice as it goes past

tylerl

22:31

6

A: How to git-pull all but one folder

I don't think you can do partial pulling, but you can try and see what happen if you pull in a working tree which is not completely checked out. Since Git1.7, you can do a sparse checkout, as illustrated here, meaning your working tree would explicitly exclude that specific folder when populate ...

close.

David Freitag

22:45

'ArnoldC' lets you program your ass to Mars with Schwarzenegger's famous catchphrases

AviD

23:00

dang, GoT, even the calm quiet scenes are freakin' intense.

David Freitag

amazon.com/Gigabyte-P-P35Gv2-CF2-15-6-Inch-Laptop/dp/B00JPCJOWE/…

Gat dayum I can't wait for that to be released.

2 mSATA and 2 HDD. so unnecessary.

Transcript for