The DMZ

Terry Chia

12:20 AM

@DavidFreitag That's about it.

Of course do the whole git branch thing.

David Freitag

@TerryChia Aight thanks.

Terry Chia

@KnightOfNi We have XKCD posted in this chatroom every day. What do you think?

@AviD Can't you get your hipster employers to do it? ;)

KnightOfNi

@TerryChia Eh, some people aren't fans. It's like Monty Python... I never understand WHY some people don't like it, but they just don't...

Terry Chia

I mean, if they can raise 1.6mil to hire you surely they can afford food?

AviD

to be fair, most of that is going towards the indoor shark pool.

and the sharks, of course.

David Freitag

12:24 AM

@AviD Tell me they sprang for the lasers

Cause a shark tank full of sharks without lasers on their heads is just cruel.

4

AviD

gonna get me some interns to build them.

@DavidFreitag right, even sharks deserve a warm meal.

Terry Chia

@AviD You need to get some American spies to feed them.

AviD

or French ones.

the sharks have expensive taste.

KnightOfNi

@AviD The people version of veal???

Yum, babies!

Terry Chia

12:52 AM

ayrx@division ~ ➜ yum babies
Loaded plugins: langpacks, refresh-packagekit
No such command: babies. Please use /usr/bin/yum --help

KnightOfNi

@TerryChia Proof that *NIX has a spark of goodness in its heart.

Hey, @ScottPack, where did "The first breach costs you an arm..." come from?

TildalWave

1:09 AM

necessity?

2

KnightOfNi

@TildalWave You obviously have kids ;)

Iszi

2:57 AM

@AviD Mostly just the size, I guess. And getting used to the touch response being more like on a computer than a mobile device (e.g.: dragging your finger acts like click+drag instead of scrolling the screen).

Adnan

8:32 AM

@KnightOfNi I don't think it's referencing that one.

Rory Alsop

8:54 AM

morning all

Terry Chia

@RoryAlsop Morning. How's it going?

Lucas Kauffman

@RoryAlsop morning, it's almost 11

Arperum

@RoryAlsop Morning!

Lucas Kauffman

@RoryAlsop but good morning ;)

Rоry McCune

@Adnan No worries, I was just concerned about you crazy finnish types and Ice water :)

AviD

9:01 AM

@RоryMcCune they will probably have a party if any parts turn blue

Rоry McCune

@RoryAlsop Mornin' :)

@AviD ....

Terry Chia

@RоryMcCune Hahaha!

Rory Alsop

The day is good. There is blue sky and sunshine and there was ice on my car this morning. Temperatures are below 5 degrees, so I am happy

AviD

@RoryAlsop temperatures dipped below 35C? thats great!

Rоry McCune

@RoryAlsop yoinks, so quite a bit colder ooop north than down here in the soft south

Rory Alsop

9:06 AM

@AviD no no no - we have sensible temperatures here in Scotland. Mostly single digit temps :-)

AviD

ahhh, so that's NOT a typo...? ;-)

actually "sensible" would be about halfway in between.,

Lucas Kauffman

@RoryA and @RoryM what are your stances actually towards Scottish independance?

Rоry McCune

@LucasKauffman ooh dangerous topic of convo :op

AviD

> MY EYEBROWS ARE VERY VERY CROSS!

@RоryMcCune ^ should now be your response any time it comes up

Rоry McCune

@AviD good call

AviD

9:08 AM

> I AM SCOTTISH SO NOW I CAN COMPLAIN ABOUT THINGS

FEichinger

They're independently cross.

Rоry McCune

@AviD so you were a fan of new doctor who then.. I thought it was quite a good first episode for him...

AviD

yes. the 1st episode after regeneration is always a bit awkward, but I thought they handled it well

he will be fun

and he is getting a bit more meta on himself, which always amuses

FEichinger

The references were amazing.

And it all came together quite nicely.

Rory Alsop

9:24 AM

The kids were a bit confused at first, wondering why the Doctor has list his memory/mind, but it all came together OK. I've always liked Peter Capaldi - looks like being a good doctor

And yes, my eyebrows are very, very cross

AviD

16 mins ago, by FEichinger

They're independently cross.

Gilles

Well a long time ago there was a crazy magician named Andripho. Andripho was ruthless and killed many innocent people (about 4000 years ago) in the Chinese province of Ho-lee-fuk. Now at one point a brave Chinese soldier named Dum Gai, managed to entrap Andripho into a lamp. And so he became a Djin. It is believed that Steve Jobs spent his whole life finding the lamp and succeeded. When he released Andripho he was killed by the Djin and the Djin moved into the iPhone of Steve. It is said that it spreads undeletable anonymous text messages. Only way to break the spell is to burn your phone — Lucas Kauffman 2 hours ago

Lucas Kauffman

►

How to be a hacker

@Gilles I should have posted it as an answer instead?

Stack Exchange

Are Your Teens Practicing Amplexus? Learn These Six Telltale Signs!

Rory Alsop

Butterfly ballot? Lahar? Amplexus?

they mean nothing to me

(Oh Vienna)

Stephane

9:33 AM

The google search term stats will look funny today

Gilles

Amplexus

Amplexus (Latin "embrace") is a form of pseudocopulation found chiefly in amphibians and horseshoe crabs in which a male grasps a female with his front legs as part of the mating process. At the same time or with some time delay, he fertilizes the female eggs with fluid containing sperm. Fossil evidence also suggests that a certain Cambrian form of euthycarcinoid (an extinct arthropod) may also have mated by amplexus. == Amphibians == === Anurans === Amplexus chiefly occurs aquatically, but some more terrestrial anurans like the disc-tongued frogs (Discoglossidae) perform amplexus on la...

Lahar

A lahar /ˈlɑːhɑr/ is a type of mudflow or debris flow composed of a slurry of pyroclastic material, rocky debris, and water. The material flows down from a volcano, typically along a river valley. Lahars are extremely destructive: they can flow tens of metres per second, be 140 metres (460 ft) deep, and destroy any structures in their path. Notable lahars include those at Mount Pinatubo and Nevado del Ruiz, the latter of which killed thousands of people. == Description == "Lahar" is a Javanese word that describes volcanic mudflows or debris flows. Lahars have the consistency, viscosity an...

I think “butterfly ballot” was coined by some guy called Chad

Stephane

Don't spoil it!

Rory Alsop

@Gilles the hanging dude, yes?

Stephane

Lahar if for next year and we've got 10 before amplexus!

Rory Alsop

@Gilles well, yes, Wikipedia is available here, but what I meant was I have not heard any of these phrases in the news.

(Disclaimer - I don't watch or read the news)

:-)

Gilles

9:36 AM

@RoryAlsop yeah, something about deciding the outcome of an election by not counting ballots

@RoryAlsop you've got to watch the 2016/2027 news

Adnan

Supermax?

Rory Alsop

@Gilles lol

That's why I included Amplexus in my list

Adnan

Butterfly ballot?

Rory Alsop

@Adnan not sure what that is either, but figured it's a kind of cinema?

Gilles

@Stephane stats.grok.se/en/latest/Amplexus stats.grok.se/en/latest/Lahar stats.grok.se/en/latest/Butterfly_ballot

Adnan

9:38 AM

@RoryAlsop Like iMax?

@Adnan yeah

Not yet :P

Also, goo.gl/RyWB

> DNA evidence shows that Al-Qaeda is using the World Wide Web to radicalize militia movements in order to create a Tsunami of viral metadata. Amplexus.

4

Journeyman Geek

0_0

FEichinger

9:48 AM

I don't even want to know how Amplexus gainst public attention ...

Rоry McCune

@RoryAlsop @Adnan except more prisony (if it's the definition of supermax I know anyway)

Rory Alsop

9:59 AM

@RоryMcCune prisons with large cinema screens - cool :-)

FEichinger

They do have large screens, yes.

Usually composed of multiple screens.

Fed by CCTV.

Lucas Kauffman

10:32 AM

@Adnan Bet they have oil too.

Rory Alsop

11:43 AM

So...got myself a Oneplusone phone. Too soon to know if they are any good, but glad I'm on EE - they are the only provider that can use a Oneplusone on 4G in the UK

Lucas Kauffman

@RoryAlsop It's cool marketing though

Rory Alsop

@LucasKauffman yeah. Nice and cheap for the spec

Lucas Kauffman

@RoryAlsop yea indeed, and they look good too

Rоry McCune

12:00 PM

@RoryAlsop looks shiney, is that a Google play device or are they doing their own AppStore..

Terry Chia

@RoryAlsop What exactly is a oneplusone phone?

Lucas Kauffman

oneplus.net

Rory Alsop

oneplus.net/uk

oh - you beat me to it Lucas

Terry Chia

@LucasKauffman Oooh. Anything special I should take note about?

Lucas Kauffman

@TerryChia they're generally built to be the "best"

they want to provide a very good UX but also provide functionality (long battery life)

Rory Alsop

12:10 PM

@TerryChia runs Cyanogen by design

Lucas Kauffman

@TerryChia See it as the iphone of the android devices

Rory Alsop

with some advanced functions not yet in wider cyanogen release

@LucasKauffman damn you! don't ruin this for me

Terry Chia

@RoryAlsop Ah, that's interesting.

Is it a Google Play device? (What @RоryMcCune was asking.)

Rory Alsop

@TerryChia I don't really know what the question means

Terry Chia

@RoryAlsop Does it come with the Google Play Store or does it have its own appstore ala Amazon?

Rоry McCune

12:12 PM

@RoryAlsop <ninja'd>

Rory Alsop

If you mean do you get your apps from Google Play, then yes. It is just android

AviD

seems to be more "just android" than samsung

Terry Chia

@RoryAlsop Cool.

Rоry McCune

@RoryAlsop the diff is that straight AOSP devices (so only Open source android) can't do google play as it's a proprietary google component...

Rory Alsop

@AviD Well, My Samsung S4 and S3 worked brilliantly when I wiped them and installed Cyanogen :-)

Terry Chia

12:13 PM

Xiaomi is pretty reasonably priced over here and the build quality is solid.

AviD

exactly

Rory Alsop

@RоryMcCune Nah - this is Cyanogen, which is core google

AviD

this actually looks like the first android phone I might be happy with

Rory Alsop

(on my S3 I needed to add gapps, but that was easy - took a couple of clicks)

AviD

are they usually locked to a specific telco?

Rory Alsop

12:14 PM

@AviD not locked to any telco

thing to check is the radio bands.

AviD

cool cool. I might get this for my kid.

Rоry McCune

IIRC putting google play onto Cyanogen is actually a hack (ie not directly authorised by google) wiki.cyanogenmod.org/w/Google_Apps

AviD

it is long delayed.

Rory Alsop

The other providers in the UK can't use these, as only EE has the correct band

Terry Chia

@RоryMcCune I think Cyanogen can't distribute the App Store in the binary?

Rory Alsop

12:15 PM

@AviD Well - it's invite only. So as soon as I get my invites I'll send one to you if you want

Terry Chia

If a manufacturer loads it should be fine?

Rory Alsop

@TerryChia But you just install gapps on those that can't ship it

@TerryChia think so

Terry Chia

@AviD No WP8 for the kids? :P

Rоry McCune

@TerryChia yeah they're not licensed to, I'm not sure how legit the aftermartket add the app path is

AviD

@TerryChia heh. their choice...

@RoryAlsop cool, we'll see

Rоry McCune

12:16 PM

I.e. google may block it in the future...

AviD

first tell me if you love it

Terry Chia

@RоryMcCune Google has no reason to though. It's in their benefit for more devices to come with the Play Store.

Rory Alsop

@AviD Give me a bit of time to bash it about a bit

AviD

@RoryAlsop hmm, for 3G those are standard bands. not much LTE here yet

Rory Alsop

For me it needs battery life (should be great), signal strength, slick and quick interface, accurate touchscreen

Not so fussed about sound or camera, but apparently those are good too

Terry Chia

12:18 PM

@RoryAlsop Sounds like you want an iPhone. ;)

Rory Alsop

@TerryChia No, it fails on 3 of those

AviD

@TerryChia macboi

Terry Chia

@AviD Shuddup. #shinymac

AviD

@RoryAlsop only 3?

Rory Alsop

My S4 has way better signal strength in all areas, a much better interface, and the touchscreen on an iphone just sucks sooooo badly

Terry Chia

12:19 PM

@RoryAlsop Dude, the iPhone's touchscreen objectively has excellent response time.

Rory Alsop

@TerryChia .... not accurate enough for my old fingers

AviD

@TerryChia how quickly does it go from you touching it, to a good UI?

Rory Alsop

and too damn slow at everything

for a company that majors on UI, I am always astonished at how much it sucks compared to a wide range of smaller offerings from niche vendors

Terry Chia

@RoryAlsop Dude, the A7 processor in the iPhone is the fastest in the market.

Rory Alsop

@TerryChia doesn't matter if the phone itself is slow

Opening and closing apps

Moving from one app to another

it doesn't even have a blimming back button!

;-P

AviD

12:21 PM

@TerryChia #macboi

@RoryAlsop I heard rumours that you can get a list of open apps (ala alt+tab) by holding down the home button for a ridiculously long time.

Rоry McCune

@TerryChia heh well apart from the fact (IIRC) that they're charging device manufacturers for shipping with it enabled...

Terry Chia

You may not like a locked down OS or the UI and that's fine. But saying things like the iPhone being slow or having a bad touchscreen is a sign of your bias because they objectively excel in those areas.

@RоryMcCune Really? I was under the impressions that they only had to not ship any other Android variants.

Rоry McCune

@TerryChia seekingalpha.com/news/…

Terry Chia

Wasn't there the whole thing about MS making more money from Android than Google?

AviD

@TerryChia your use of the word "objective" seems to be pretty subjective

Terry Chia

12:25 PM

@RоryMcCune Ahh interesting.

Rоry McCune

it's inevitable that google will start trying to extract money from the ecosystem now they have a huge market share advantage

Terry Chia

@AviD You clearly don't read reviews from sites like anandtech.

@RоryMcCune I'd think they are doing it for the data.

@RоryMcCune Look at the last update on that link.

AviD

@TerryChia you clearly have no concept of the meaning of "perception of speed"

Terry Chia

@AviD "Perception". That's subjective.

AviD

@TerryChia EXACTLY

Terry Chia

12:27 PM

@AviD Anandtech has objective benchmarks.

Rоry McCune

@TerryChia possibly, google do love data, but I'd imagine they're pretty keen to improve their ROI on Android too... and they've got a lock on the market now, so charging even $1/device for app access would be a large revenue stream

AviD

@TerryChia which are pointless and irrelevant to this conversation.

FEichinger

If it feels slow, it doesn't matter that it's faster.

Lucas Kauffman

@RoryAlsop I'm with Terry on this one, of all the smartphones I've had in my hands I still honestly believe the iPhone is still the best.

Rory Alsop

@TerryChia When I tap or swipe or whatever, I expect a UI to move/open/do something quickly. iPhone doesn't do this at a speed I expect. S4 with Cyanogen does. S3 with Cyanogen nearly does

Terry Chia

12:28 PM

@AviD You are clearly trolling again so i'm gonna stop replying now.

AviD

@TerryChia huh? no, not at all. This time.

36 secs ago, by Rory Alsop

@TerryChia When I tap or swipe or whatever, I expect a UI to move/open/do something quickly. iPhone doesn't do this at a speed I expect. S4 with Cyanogen does. S3 with Cyanogen nearly does

Rory Alsop

@LucasKauffman I have tried. But no apple product impresses me once I have touched it. I like the way they look (shiny and light) but they work contrary to how I need

AviD

it doesnt matter how fast the CPU is processing, what matters is how it feels.

Rory Alsop

@AviD yarr

Lucas Kauffman

but to be fair I think the latest iOS sucks on the iPhone 4S

AviD

12:29 PM

and saying it is objectively faster, is a silly subjective statement.

Lucas Kauffman

it does work a lot better on the 5S

AviD

@RoryAlsop because they expect you to adapt the way you work, to the way they want.

Terry Chia

@LucasKauffman 7.1 is pretty ok. The 7.0 release was horrible on the 4.

Lucas Kauffman

@TerryChia battery life got horrible though

Rory Alsop

@AviD not gonna happen. I am set in my ways. The way a glacier is set in its valleys, bowls and aretes

Lucas Kauffman

12:30 PM

I still want to try Windows Phone

Terry Chia

@LucasKauffman Yep.

Polynomial

@LucasKauffman I've tried it. I'm a Windows fanboy and all I can say is... meh.

Lucas Kauffman

@RoryAlsop MELTING AWAY

Rory Alsop

@LucasKauffman And I have a few folks here at work with the 5S, and they have let me play with their devices. For what they use them for, and the way they use them, probably fine. I'm really not trolling

@LucasKauffman you and your global warming myths :-)

Rоry McCune

@LucasKauffman nice but I'd wait for new handsets designed for 8.1 if you're interested. My 520 seems to be suffering a bit in the battery life dept after the upgrade...

AviD

12:31 PM

@RoryAlsop exactly.

Terry Chia

@AviD Right, and your bias against Apple devices are clearly affecting your perception, even if it's just a little. Android feels horribly sluggish for me.

AviD

@RoryAlsop but we dont want to hear about your bowels

Rory Alsop

24

A: Will melting icecaps and glaciers cause the ocean to rise?

Antarctica contains 70% of the world's ice and the vast majority of this is on land, so there is no displacement confusion - if it melts it will pour off the land into the sea, thus raising the sea level. The thickness of ice on the Antarctic continent (from this paper at RD Springer) averaged 2...

AviD

@TerryChia by definition it is subjective, because it is all about how you expect it to work.

Terry Chia

Heck, WP8 is so much smoother than Android.

AviD

12:32 PM

The "mental model", if you will.

which is why Mac users love their UI, and everybody else thinks it's clunky.

and they're both right.

Rory Alsop

@TerryChia that may be true (I don't know) but iPhones are not 'smooth' by any stretch of the imagination!

AviD

@TerryChia no argument from me ;-)

Lucas Kauffman

@RoryAlsop Watch out or I'll send the powerful Andriphone Djin after you!

0

Q: Central Server Authentication

I develop a project and I want to make it's database more secure in this project there are some users can log in the project and can access some information from the Central Server but this is not secure. For example an hacker can attack the Central Server in order to prevent this I want that t...

Rory Alsop

@LucasKauffman I love that comment

It obviously got flagged, but as the question is closed I'm in no hurry...

Lucas Kauffman

@RoryAlsop as what did it get flagged?

Rory Alsop

12:39 PM

@LucasKauffman not constructive

which is correct

:-)

but then, neither was the question

deed02392

@TerryChia nice, I miss that meme!

Terry Chia

@deed02392 That... was 7 days ago.

deed02392

@TerryChia my bad, too many tabs open clearly

AviD

@TerryChia your face was 7 days ago

Terry Chia

@deed02392 Heh.

@AviD Yes, my face looked just like it did a week ago. Thanks.

deed02392

12:48 PM

@TerryChia I think he's saying your face is a TimeDelta of -7 days

Terry Chia

1:01 PM

PHP is like peeing in the sea. Everyone did when they were younger, but you wouldn’t want everyone to find out now.

Tweeted by iamdevloper on August 27, 2014 at 12:45 PM

AviD

hey @TerryChia. you have much experience with Hashcat / oclHashcat?

Terry Chia

@AviD Not really, no.

AviD

oh. @Who here has used Hashcat / oclHashcat? need some tips.

Terry Chia

Ping the consultants? @RоryMcCune @LucasKauffman.

Rоry McCune

@AviD I have in the past but not for years, they're more than a bit finicky.. (BTW why are you password cracking, that doesn't sound very hipster dev)

Terry Chia

1:09 PM

@RоryMcCune Maybe he wants to rewrite Hashcat in Kotlin?

Rоry McCune

@AviD have you locked yourself out of your #Shineymac?

@TerryChia good call

AviD

@RоryMcCune dincha see my AppSecIL talk? owasp.org/index.php/…

@TerryChia Kotlin? Googling....

Rоry McCune

@AviD Ah I C

AviD

wanna demo a bit

Scott Pack

@KnightOfNi My adorable little brain.

Lucas Kauffman

1:10 PM

@AviD oclHashcat sucks

I hate it

Terry Chia

@AviD Dude! Keep up! You will lose your hipster creds at this rate.

Lucas Kauffman

well it doesn't suck

2

but it's a pain to make it work

Rоry McCune

@AviD if you want an easy password cracking in windows I'd recommend cain

Scott Pack

TWSS

AviD

@TerryChia heh. Go read my bio.

Lucas Kauffman

1:11 PM

@RоryMcCune or rcracki

AviD

@LucasKauffman have alternative?

Lucas Kauffman

@AviD for windows I've been using rcracki

AviD

@RоryMcCune cain is nowhere near fast enough, needs teh GPU cracking

@LucasKauffman GPU?

Rоry McCune

@AviD for a demo...

Lucas Kauffman

@AviD yea

Terry Chia

1:11 PM

@LucasKauffman Is there anything better (from a speed standpoint?)

Always interested in new tools.

AviD

@RоryMcCune demoing the damn speed

Lucas Kauffman

@TerryChia I've not found anything else, but it's just SUCH a pain to set up

Rоry McCune

@AviD just speed up the video (surely you won't be daft enough for live demos...)

AviD

@LucasKauffman is it? didnt seem to be an issue.

but I've only been running the samples.

ha

Lucas Kauffman

@AviD pure bruteforcing is

Terry Chia

1:12 PM

@RоryMcCune Maybe he wants to do live demos THAT REQUIRES INTERNET!

AviD

@TerryChia we've had that...

Rоry McCune

@LucasKauffman I thought rcracki was a rainbow table thing rather than GPU assisted craacking..?

Lucas Kauffman

@RоryMcCune it's rainbowtable based, but it can run on GPU for the precomputations

Terry Chia

Btw, you have you seen that really neat tool for command line demos? It allows you to record and play back what you type.

Rоry McCune

@LucasKauffman ah for making tables?

AviD

1:13 PM

@LucasKauffman no no, that won't do, that won't do at all.

Terry Chia

Can't remember what it's called.

Lucas Kauffman

@RоryMcCune no for the lookups

@RоryMcCune I'm not entirely sure how it works

AviD

@LucasKauffman wat.

that makes no sense

Rоry McCune

@LucasKauffman fairy snuff, I wouldn't have thought that would need a GPU

AviD

@LucasKauffman obviously

Lucas Kauffman

1:14 PM

@AviD There's also this tool called hashcatui to generate hashcat rule

AviD

@LucasKauffman saw that, looks out of date.

no wait, that was hashcatgui

maybe @Thomas will give me some pointers on de hashcat.

Terry Chia

@AviD The Bear doesn't need hashcat. He cracks passwords in his mind.

3

AviD

@thomaspornin! Hey @Thomas! If you happen to be around, can you spare me a few of your cells, for some direction on ocl/hashcat?

@TerryChia heh

Rоry McCune

@LucasKauffman @AviD so it looks like rcracki uses GPUs if available for pre-calculating to set-up the values to look for in the table... freerainbowtables.com/articles/…

AviD

part of my point is that the whole risk model around rainbow tables is mistaken.

thats what leads to recommendations of salted-sha1.

Rоry McCune

1:19 PM

@avid what about golubev.com/igprs

Terry Chia

@AviD The 90s want their rainbow tables back.

AviD

@TerryChia I liek that

Terry Chia

I was gonna say 00s, but that doesn't sound as good.

Rоry McCune

@AviD cracking iPhone backups should be apppropriately hipster for you

AviD

@RоryMcCune wasnt really looking for more tools, but I'll take a look. thanks.

Terry Chia

1:20 PM

@RоryMcCune 4 digit pin, not that hard. :P

Rоry McCune

@TerryChia nah this is the backup password alphanumeric as set by the user

PIN never leaves the device so not susceptible to offline attack

Terry Chia

@RоryMcCune Ah, you mean the backups iTunes has for example?

AviD

@RоryMcCune ahh no, I'm talking about straight password files.

Rоry McCune

@TerryChia yeah they're a huge source of vulnerability for iOS corporate deployments

Terry Chia

@RоryMcCune Aye, I can see that.

Rоry McCune

1:22 PM

@AviD when you say "straight password files" are you talking about things like /etc/shadow?

AviD

@RоryMcCune I'm talking about in the context of a stolen db of pwds.

Rоry McCune

@TerryChia the amusing part is that MDM software can make users set a password but can't enforce strength and any time you want to sync music to the device (e.g. from a home PC) it'll put a backup on there...

AviD

and running oclhc on billions of pwd hashes a second

Rоry McCune

@AviD I'd recommend John the ripper then :) has GPU support IIRC and is relatively well documented.

Terry Chia

@AviD Spin up some shiny Amazon GPU instances?

AviD

1:23 PM

@RоryMcCune NOT FAST ENOUGH

@TerryChia jeez you guys are useless

Rоry McCune

@AviD ... how do you know?

Lucas Kauffman

@AviD 4 x R9 290X

AviD

the internets

Terry Chia

Hmm, download the databases of passwords from the LinkedIn hack, spin up some Amazon GPU instances on the spot and crack. Damn cool demo.

AviD

@TerryChia sure. cuz nothing can go wrong with doing that live. not to mention the 3.6 days it would take.

Lucas Kauffman

1:25 PM

I wonder how Stackexchange stores their passwords

AviD

@LucasKauffman I blieve its bcrypt.

or maybe PBKDF2.

Lucas Kauffman

@AviD Well if you don't want anything go wrong, the last thing I would think about is live password cracking

Terry Chia

@AviD Not crack them all obviously. But show the % that got cracked in 5 minutes. Obviously a huge risk though. :P

Lucas Kauffman

@AviD you could just write a script and emulate the cracking

Steve Gibson style.

AviD

@LucasKauffman dont really know much about optimized GPU programming...

@LucasKauffman ha, gee thanks

Terry Chia

1:26 PM

Actually, begin the talk by running the crack then go on and talk for 30 minutes. Then end by showing the % of passwords recovered. :P

Rоry McCune

@AviD if you want an example of the potential complexity of oclhashcat/john running try here blog.thireus.com/…

AviD

@TerryChia sure. except that whole bit on cracking is about 4-5 minutes of the talk.

Rory Alsop

> he is a downright cranky neckbeard

hahahaha

AviD

:-)

did you catch the "yo momma" crack in there? it was subtle.

Rory Alsop

@AviD yup :-)

Terry Chia

1:33 PM

So let me get this straight. @AviD is a hip Silicon Valley neckbeard that writes Perl and Kotlin on his #shinymac?

4

AviD

ha!

> STOP.PISSING.ME.OFFAFFA!!!

> IIIIII KEEEEEEEL YOOOOUUUUU

Rory Alsop

@AviD SILENCE!

AviD

I need a skeleton doll to take with me on stage. I feel it will help my persona.

Simon

So yesterday, I was adjusting my A/C belt and my tensioner broke :(

Rory Alsop

@AviD I've got a Unicorn that's coming on stage with me at the weekend. That might amuse Aarthi

Simon

1:38 PM

Came out as an A/C delete, QQ

Rory Alsop

@Simon sounds sore

Simon

It sucks donuts.

AviD

oo I would suck a donut. And then chew it.

Terry Chia

@AviD Maybe bring a donut on stage?

AviD

@TerryChia cant talk with my mouth full!

also cant really get good donuts here :(

except frozen

which sucks donuts

Terry Chia

1:41 PM

@AviD TWSS! Or didn't say.

Simon

@AviD Ew. I got mine straight from Tim Horton's for the video.

AviD

Oh you Canadians and your fascination with royalty- Tim Horton had to go and buy Burger King.

Tweeted by jack_daniel on August 26, 2014 at 1:10 PM

Simon

Wait, Burger King bought Tim Horton's.

AviD

no, I think you Canerdians have the meaning of "buy" backwards.

wat

1:49 PM

RIP HIMYM

2:04 PM

> When Simon asked us to consider this code from his predecessor's custom-built PHP CMS, we weren't terribly impressed:

thedailywtf.com/Articles/The-Database-Gazes-Also-Into-You.aspx

@Simon is that you?

Simon

My lawyer told me to not answer any question regarding this.

4

Simon

2:24 PM

I upgrade LAMP stacks without taking snapshots #yolo #aintafraidofanything

Rоry McCune

2:34 PM

Big respect to people who wrote C in the early days. Imagine compiling your code and having to dodge a T-Rex simultaneously.

Tweeted by iamdevloper on August 27, 2014 at 12:50 PM

cough cough @RoryAlsop cough

AviD

@TerryChia shuddup, I just came up with "Canerdians". That is my big achievement of the week.

Terry Chia

@AviD What a sad week.

AviD

@TerryChia shuddup, you Canerdian.

Terry Chia

@AviD I'm deeply insulted so I'm going to throw my donut at you.

AviD

heh, nicely done.

Terry Chia

2:40 PM

@RоryMcCune I would think @RoryAlsop will kill the T-Rex and have BBQ while waiting for the code to compile.

Iszi

2:55 PM

Wow. No wonder Java is such a piece of crap. They can't even write their installer properly.

Install failed because one of the files to be updated did not match what the installer expected. The installer showed an appropriate error, but then proceeded to jump to the "Installation Successful" screen.

Add/Remove programs said I had 7u67, but when I actually ran the uninstaller it reported that I was still on the old version.

AviD

@Iszi It must be Windows' fault. Java is perfection.

Iszi

@AviD With a little cream and sugar, yeah. But it doesn't belong in a computer.

Simon

Creamy donut with sugar

OM NOM NOM

AviD

> Saying that Java is better because it runs on any computer, is like saying that anal sex is better because it works on any gender.

6

Transcript for