The DMZ - 2014-08-31

« first day (1354 days earlier) ← previous day next day → last day (3514 days later) »

12:41 AM

@LucasKauffman on.fb.me/1u1Gq3U <-- this

6 hours later…

7:04 AM

@tylerl boooo

2 hours later…

8:34 AM

I have 7 Grammys. “@xandersherry: @SwiftOnSecurity If you can get people to formulate a rational threat model you should win a Nobel prize.”

Tweeted by SwiftOnSecurity on August 31, 2014 at 8:30 AM in reply to xandersherry

@Xander Heh.

2 hours later…

10:43 AM

Hi

I've moved my linux home into new directory..how can I recover back my home directory into it's original place?

Journeyman Geek

you just copy everything over and take ownership

but the directory I moved all the files into doesn't show me anything even with "ls -al"!!

now I can't connect to that server "AWS"

Journeyman Geek

did you copy it correctly?

That dosen't sound good.

I used mv */ new to move all the files in that directory including the Home dir

bear with me as I'm linux newbie

Journeyman Geek

....

lesson one. Use cp unless you're sure you want to move it.

and I'm pretty sure you just broke everything.

10:56 AM

that's what I scare I've committed :'(

how can I get things back as before....I have worked a lot on that machine

I'd appreciate the help buddy

Journeyman Geek

hmm

possibly not. It looks like */ goes one level down

@user1794499 That's almost impossible especially if you don't know what you are doing.

So I just kill that AWS instance ?

Journeyman Geek

Restore from a backup

You did back up, right?

I didn't

unless if AWS does by default

Journeyman Geek

10:59 AM

lesson zero

OMG

!!!!!!!!!!

Journeyman Geek

always backup before you do anything potentially silly

bottom line go to the starting line?

Journeyman Geek

yes

Okay :'( :'( :'(

11:03 AM

@JourneymanGeek Or do silly things in systems you don't mind breaking. :P

Thanks dude @JourneymanGeek

Journeyman Geek

11:16 AM

@TerryChia: and back em up anyway. I love snapshots for that

0

Journeyman Geek

AMI probably has tools for that, I just tend to do stuff on my own systems ;p

11:32 AM

@JourneymanGeek Nah, I usually don't bother snapshotting experimental stuff. My base VM is a one click rebuild anyway.

1 hour later…

12:52 PM

@TerryChia She has a point. 7 Grammys are a lot. A Nobel prize might be redundant.

@Xander It's actually amusing how often someone from this room shows up on my Twitter feed considering I follow none of you.

@TerryChia I am shocked and appalled. Appalled, I say.

@Xander Don't take it personally. It's just that none of you are nearly cool enough. ;)

@TerryChia Can't argue with that.

1:11 PM

@TerryChia well I won't argue it for myself, but I'm afraid that @roryalsop may be hurt by that statement ;op

@RоryMcCune I think the cool rating he gets from being a rock god is severely diminished by his day job as HR manager of $large_bank.

Also, I think @roryalsop is on friendster and not twitter?

@TerryChia but doesnt' whisky + fast cars +kilts get him some more points back.

@RоryMcCune I dunno, HR manager is a pretty big minus. :P

@TerryChia that is true...

@RоryMcCune How's the new job?

1:15 PM

@TerryChia good so far.. spent the week at head office getting my kit sorted (have fast laptop + VOIP desk phone which is handy). Interesting to work in a company where I'm by no means the geekiest person there

we have a LOT of testers. ~150 in the UK plus quite a few in the US and Australia.

@RоryMcCune Ah nice. You will be working remote right?

2']]
\\\

]\

+\p[

@TerryChia yeah that's the idea, I should be mostly remote, with the odd on-site. Amusingly (for me ) my first onsite is in the Shetland Isles (waaaay to the north of scotland) which is a place I've visited a lot but not somewhere a lot of testing gets done...

@RоryMcCune Shetland Isles. Hehehe.

1 hour later…

2:48 PM

@TerryChia I am. I've been spamming about AppSecIL for weeks.

@RоryMcCune ah, you started already? cool! Good luck, and enjoy.

heh, this made me laugh:

> I've built a system and have put a ton of work into making sure is super secure. .... the PHP code I've written

Derp.

0

Q: Server Security Through Constant Check-ins

I've built a system and have put a ton of work into making sure is super secure. But I have a (potentially irrational) fear that if someone were able to break into my server, they could just change the PHP code I've written and it'd be game over. No feature I could build could withstand someone...

> But I have a [...] fear that if someone were able to break into my server, they could just change the PHP code I've written and it'd be game over.

Welcome to reality.

Doesn't matter if it's PHP.

Any language has that flaw.

hearing lines like that always make me think of: "I've just built my first boat, and I've made very sure it is seaworthy. But I've never seen the sea, what does it look like?"

@FEichinger thats not the point. It's the utter cluelessness to the point of not realizing the fact that he is clueless.

I'm not disagreeing at all.

2 hours later…

4:30 PM

From bjorn.tipling.com/if-programming-languages-were-weapons - if programming languages were weapons

"PHP is a hose, you usually plug one end into a car exhaust, and the other you stick in through a window and then you sit in the car and turn the engine on."

Except the engine lacks fuel.

4:47 PM

hello everybody

@TerryChia incorrect. I am on the book of faces 3 times, twatter 3 times, and some other stuff like kiltr

@RoryAlsop Watcha'

@RоryMcCune awright dude!

trying to figure out how to put up a unicorn pic from last night here, but not in-line as some may find it NSFW...

@RoryAlsop heh I guess you could link to a hosted page where it wouldn't onebox?

yarr - might get a chance to do that later

5:50 PM

@RoryAlsop you can also type several words like: nsfw so take care and then add the link

wont one box then

6:35 PM

@RoryAlsop doooo eeeeet

@RoryAlsop "Kiltr"? Is that a real thing....? Please let that be a real thing.

2

@AviD It is.

I suggest you try getting to this: owasp.org/index.php/AppSec_Israel_2014 (which I am organizing, btw). Your errant pentesters are likely there, I will be glad to give them an earful, in person and with prejudice. :-) — AviD ♦ 52 mins ago

Is that too much conf-whoring?

Or actually that would be conf-spamming.

Since you are personally involved and have not disclosed it in the comment, and this is fundamentally commercial promotion ... Dats spam, dood.

6:54 PM

flags

bloody Borderlands each time I see a green led I wanna open the damn thing to check for goodies

still better than The Elder Scrolls tho, each time I was walking the dog outside I'd be tempted to pick interesting flowers and stuff for potions :)

@AviD not if you video the whole ordeal it isn't, that'd then be entertainment :)

7:32 PM

@RoryAlsop Why 3 times? You as Rory, you as Dr. Mayhem, and one more that's an age thing because you forgot your password for the first one?

@FEichinger I dont know what you mean, I wrote that I organized it.

track two: flogging

but that comment thread is very amusing to me, having guessed directly who this anonymous pentester is... Somebody please flag that thread to be cleaned up in two days

@TildalWave working on getting it all recorded, but it will still likely be mostly in Hebrew :-(

@AviD by the time you'll upload it I can probably learn to speak Hebrew anyway

@AviD You know chat keeps the pre-edit version, even if you try to change the message here, right? :P

7:37 PM

@TildalWave heh. naw, they will probably upload it within a couple days max, maybe another day or two for editing.

@FEichinger I still dont know what you're talking about

@AviD How difficult is to learn Hebrew actually?

@AviD We can all see the history, buddy. IT'S NEVER GOING AWAY.

heh.

@TildalWave depends. the structure is very different from romantic / latin-based languages, and even from germanic languages.

@FEichinger isn't that for 20k users? or is it 10k?

if you know e.g. Arabic, you'd have a decent chance of picking it up quickly.

7:39 PM

@TildalWave History? Completely public.

It's only hidden for deleted messages.

on the other hand you will find that there are a ton of words in common with common latin languages. many words and terms have gone both ways.

@AviD What bugs me the most when I'm learning new languages is actually their similarity to some others, then I always confuse one with the other. Being completely different than those I speak might be a good thing for me

@FEichinger not if he deletes it

also, common spoken hebrew (especially in IT) is very "soft" rules - e.g. we mix and merge terms words and languages.

then you have to either be a mod or a [some rep] chat user

not sure how much, IIRC 10k?

Nope.

7:41 PM

@TildalWave unlike English (and some other languages), Hebrew is a very logical language.

You can only see deleted rooms with higher rep.

Deleted messages are owner or mod only.

@AviD oh cool I already speak binary :)

@TildalWave heh. I meant that it is a rational rule-based language, unlike English which is an exception-based language. Or worse, a knowledge-based language (i.e. if you have knowledge of the word/phrase you're good, otherwise you cannot figure it out yourself).

@TildalWave Technically "binary" is not a language.

@FEichinger well that then, anyway he can always move them to a locked room and so on

7:43 PM

@TildalWave Which would also leave a trace. At which I would point and scream MOD ABUSE.

so, verbing words, and wording adjectively? That is legal and intended in Hebrew.

Because I can do that, too.

@FEichinger 101

@TildalWave that's the binary version of "#yolo", isnt it

@FEichinger funny thing is you can select multiple messages to move and it'll only leave a single trace, so you don't even know how many were moved, especially if you move the notification too, then delete at the destination

there are ways ;)

7:45 PM

It still leaves a trace.

A trace to point at and scream MOD ABUSE.

@FEichinger TWSS?

actually yeah, you're a she no?

I am not, no.

Why did then @Adnan and @Kisu say you are?

Why would you ask me that?

@FEichinger because you're here

also ... you're blue!!!

what?

7:48 PM

user image

interesting

so... yeah. That #AppSecIL event I've been blabbing about? iss gonn' be beeg

well over 650 have signed up /cc @RоryMcCune

AppSecIL is kicking AppSecEU's ass! ;-)

@AviD shit that's a lot

@TildalWave actually I consider 20-30% dont show, and then a few extra show up without registering.... so I calculate 25% less. Still, that is over 500 that will be there.

I wonder how many will come just to see who's the douche that closed their question here

7:50 PM

ha!

8:18 PM

@AviD wow, that is impressive! what are you charging for entry?

@RоryMcCune Free, including lunch

not so impressive NOW, is it ;-)

actually we didnt have enough budget for enough lunch for everybody

@AviD well it's perhaps a little bit easier to get people for free confs than for expensive ones :) But then 650 people is a load of people anyway, prob. bigger than B-Sides London!

@RоryMcCune truth is, if we had charged even 10$ it would have made a huge difference. but then, 60% of the people wouldnt have come...

@AviD just implement an YNFYL filter

@RоryMcCune YNFYL?

8:21 PM

@AviD "You're not Fast, You're Last"

AKA "You Snooze, You Lose"

heh, yeah

@TildalWave What the shit?! We never said that about @FEichinger

AKA "with Monica around, you either eat fast or you don't eat!"

@Adnan you did refer to him as "the german dude who fancies kalina" though :op

BTW I don't think he's german..

@RоryMcCune But @Tildal is claiming that I said he's a girl.

@RоryMcCune "in love with" not "fancies"

8:23 PM

@Adnan meh all the same for you young people isn't it..

so I was talking to coworker today , and this came up:

California Games

California Games is a 1987 Epyx sports video game for many home computers and video game consoles. Branching from their popular Summer Games and Winter Games series, this game consisted of some sports purportedly popular in California including skateboarding, freestyle footbag, surfing, roller skating, flying disc (frisbee) and BMX. The game sold very well, topping game selling charts for winter months. It also got very positive reaction from reviewers, many of whom consider California Games to be the last classic Epyx sports game, due to staff changes not long after its release. The game w...

BTW gist.github.com/joernchen/9dfa57017b4732c04bcc is a fun challenge. I won't pretend I got it worked out translate.google.co.uk/… is a walkthrough

who is old enough to remember that?

I feel old.

Daley Thompson's Decathlon

Daley Thompson's Decathlon is a computer game based on Konami's Track & Field, developed and released under license by Ocean Software in 1984. It was released in the wake of Daley Thompson's popularity following his gold medals in the decathlon at the 1980 and 1984 Olympic Games. == Gameplay == The player takes part in the ten events of the modern decathlon: Day 1: 100 metres, Long jump, Shot putt, High jump, 400 metres Day 2: 110 hurdles, Pole vault, Discus, Javelin, 1500 metres The player starts the game with three lives; failure to reach the minimum standard in an event results in the loss of...

don't know your one but that's the UK equivalent I think

I played that one a LOT

yeah I think we had that one too

well, the friend with the commodore64

8:27 PM

@Adnan LOL I just watched your challenge video again, you're right. I blame it on your accent :P

@TildalWave Thaaaa shit?! Which word confused you?

@Adnan "dude"

@TildalWave admit it, you werent paying any attention to him anyway, all your focus was on @Kisu.

@TildalWave And you thought it was...?

@AviD shuddup you and your truth!

8:28 PM

@AviD She even said my name! :]

haha

@Adnan "girl"

@DavidFreitag ooo you're speshull

@DavidFreitag She remembers you!! :D

@TildalWave What the shit, man?!

How is that my accent?

lol, all these foreigners arguing about whose accent is worse....

guys, to native English speakers, you all sound like a drunk donkey giving birth.

2

8:29 PM

@Adnan you say "dud" and you're swallowing words ... plus, @Kisu's there ... hard to focus on you then

"drunkey".

@AviD It's kind of difficult to asses his accent because he said damn nothing

@AviD +1 I can vouch

@AviD @David At least we can speak more than 0 languages

@Adnan he was going on and on, you just had a hard time picking out the words ;-)

8:30 PM

@AviD He had everything written down

Linguapussy

@DavidFreitag as in, you've actually had an actual conversation with an actual drunk donkey, while she was actually giving birth?

@AviD Dude you native English speakers need to learn how to pronounce English correctly, all we might be guilty of is a bit of accent, you're guilty of changing the meaning of words that aren't even yours to start with :P

heh.

@AviD Yeah, lets not talk about that.

And need I say how Amers pronounce words that have Latin origins? Abomination!

8:32 PM

I am an a-typical American, in that I am also a foreigner.

'murica, fuck yeah.

Actually aaaactually.. the most important part about our ALS videos is destroying some conspiracy theories

For example, now we all know that @Kisu is real

and that @Scott is actually a very cool guy

@Adnan you could have hired some random passerby, and given her lines

@Adnan You didn't know that before?

or threatened one of your hostages.

thats actually more likely....

8:33 PM

and we now know that @Kisu isn't my scockpuppet because I didn't have my hand inside her while she was talking

10

hehehe pervert

@Adnan At least not that we could see

@AviD Man, you need to control it

@DavidFreitag I can provide a... different angle

@Adnan Camera on your shoe?

sometimes I have a hard time telling when you are being subtle and when you are letting something slide.

8:36 PM

@AviD If I know what you mean? :D

@DavidFreitag shoecam? is that a thing?

@TildalWave Now it is

@RоryMcCune And you would be correct.

@TildalWave Ummm okay youtube.com/watch?v=AxHYPsvEvJw

@TildalWave Yes. A very fucked up thing. People walk around public places with cameras on their shoe and look for women in skirts.

8:37 PM

@FEichinger So you're also south-west Asian like @Kalina?

@Adnan not quite the same thing tho, that's just a cam shooting shoes

@Adnan Totes!

@DavidFreitag Umm... what?!

I don't need a shoecam to look up @Kisu's skirt

Lucky me!

@DavidFreitag why didn't I think of that when I was 14?!!

@FEichinger see if you had been German you'd have Said Genau and not totes :op

8:38 PM

@Adnan Yes, like I said. Fucked up.

@TildalWave Because cameras were the size of a small buick when you were 14?

@RоryMcCune Now that makes me look like an American. Eww!

@DavidFreitag just wanted to add yup

Hay guise, what's happening in this thr--

Oh lawd.

well I was inventive ... maybe mirror shoes then and you carry a zoom scope :D

@TildalWave Because you'd have had 14-year-old girls beat the living crap out of you

8:40 PM

@Kisunminttu I'd back slowly away from the chatroom if I was you (that or don't read the transcript...)

@Kisunminttu ...isn't that the idea?

@Kisunminttu that's only assuming I'd do anything like that, which I honestly wouldn't anyway

@TildalWave That's not what you were saying just a moment ago...

@TildalWave True. If anything, I'd think that @AviD would that

@RоryMcCune It's all fun and games :)

8:42 PM

@Kisunminttu heh. BTW Marion is planning her Ice Bucket challenge for tomorrow..

@Kisunminttu well I actually had a steady girlfriend back then, no need for any such gadgets

Hey, I'm curious to know: have any of you heard about a food that consists of macaroni boiled in milk + some butter and salt OR sugar?

@Adnan wat.

I'd be the one beating the crap out of him.

@TildalWave Steady girlfriend? Did you like fasten your blowup doll to something?

@Kisunminttu how bout cheese?

8:43 PM

@AviD You would literally hit someone until fecal matter sprayed from him?

@Adnan going steady damnit!

@DavidFreitag well, from someone.

were together for nearly 7 years, kinda all the crazy years till after graduation

@RоryMcCune I'm excited to see it! :)

@AviD Nope, that's too American

@Kisunminttu and butter isn't?

8:46 PM

@Kisunminttu Alfredo?

@Adnan no, butter is french.

@Kisunminttu btw nicely done on the bucket. Aaaand dumping a bucket on @Adnan. It's been a long time coming.

Fettuccine Alfredo

Fettuccine Alfredo is a pasta dish made from fettuccine tossed with Parmesan cheese and butter. As the cheese melts, it emulsifies the liquids to form a smooth and rich coating on the pasta. The term is a synonym for pasta with butter and Parmesan cheese (Italian: pasta al burro e parmigiano), one of the oldest and simplest ways to prepare pasta. The dish was named by Alfredo Di Lelio I, a restaurateur who opened and operated restaurants in Rome, Italy, throughout the early to mid 20th century. While the term "Fettuccine Alfredo" is especially popular in the United States, in Italy the dish is...

@Adnan Well, this is an old recipe, from the time when milk wasn't low fat and margarine was still decades away

@DavidFreitag thats cheese.

@AviD Yeah but you start with uncooked noodles and boil them in milk and butter.

8:47 PM

@DavidFreitag and cheese.

Then add cheese as it boils down

with the cheese.

@AviD I'm American! I'm doing the best I can!

@DavidFreitag The end result is macaroni "soup"...

hmm, I am considering the possiblitiy that I am hungry.

8:48 PM

@AviD I'm old enough to actually get the joke, not sure others did tho

@Kisunminttu No it dries up quite nicely. I actually love fettuccine alfredo.

@DavidFreitag who doesnt?

@DavidFreitag I do, too, but this is different :/

@AviD ...Good question...

my 2 eldest girls favorite restaurant food. and sometimes at home.

8:50 PM

@AviD People who are lactose intolerant or allergic to milk protein?

excuses.

@Kisunminttu #yolo

3

and maybe an epipen.

@DavidFreitag Simon, is that you?

@Kisunminttu I just had to :b

« first day (1354 days earlier) ← previous day next day → last day (3514 days later) »

Transcript for

Aug '1431

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile