So, chat got really fucking weird again.

Potato

That is all.

'morning

@TerryChia "again" seems odd in that context.

@TildalWave Catching up - I crashed out rapidly last night after band practice. Looooong weekend. 12 hours driving, 9 hours playing guitar in total, 5 hours...erm...schmoozing :-)

Is there a specific reason why we can't vote for a question to be migrated to serverfault ?

@RoryAlsop fun! how was the show?

this one: security.stackexchange.com/questions/66509/… is typically answered by redirecting to serverfault.com/questions/218005/…

@AviD Your face seems odd in any context.

so, all this buzz going around about celebrity photos being stolen.... My money is on @Simon actually invading their bedrooms and taking the pictures himself.

@Stephane Limited number of options in the UI. Ping a mod to migrate.

@TerryChia k. Done. Tks

@AviD Nah, it's just the usual "The cloud is secure, right? Like, it's only for me, nobody else can ever see that?"

my money is still on #simon.

The beauty of advertising and buzzwords.

actually the popular theory now is that some skeezy hacker had collected these, and his stash got popped. So, again, #Simon.

well, except for "hacker". @Simon is more of a "script kiddie".

@AviD I don't think #Simon qualifies as a hacker.

I'm still hoping for the day that someone sues Big Data companies for misrepresenting the cloud.

@TerryChia inb4 ;-)

@FEichinger and what about Cloud Companies for misrepresenting Big Data?

Just line them all up for the firing squad.

bullets are too good for them.

now everybody shush, I have to finish my preso / conf plan / client report.

@AviD You have no idea. The show itself was the debut for our new confetti cannons - much more power and range, and much more mess! And the crowd was quite special

There is a good rock scene in Nottingham

@RoryAlsop I hope "confetti cannons" is not a euphemism.

@TerryChia hahahahaha. Well, I did see the ones that Monty Python used for their recent stage show. Not sure we'd get away with them. Two ball shaped wheels...a kind of ribbed cannon...I don't think I need to go on

@RoryAlsop very cool!

@TerryChia it is now. #Simon.

@TerryChia Actually, after we fired them, the scantily-clad, tank-girl-ish girls along the front row had a lot of sparkly confetti covering them. After the gig, one of them did mention she felt like we had attacked her with unicorn j*zz. Which led to many of the unicorn pictures...

which I have not yet posted online

I've done a bit of cleanup in the cybersecurity tag. Only 4 non-closed questions left. I retagged the questions where the tag was used randomly, and the rest isn't stellar either.

@Gilles Thanks Gilles - I'll get a check through later.

@RoryAlsop That makes me think about the shows from Space Unicorn On Fire that I've seen. First time they threw a shitton of condoms into the public, they were apparently sponsored by a sexshop. The second time there was this girl with rainbow colored hair in a bridal outfit with a fake horn on her head.

@Arperum The two things we fire at the crowd are confetti, glowsticks and condoms. Three things. The three things we fire at the audience are confetti, glowsticks, condoms and silly string. Wait. Amongst the things we fire at the audience are: confetti, glowsticks, condoms, silly string, bubbles and fire

But we make it fair - we get them to fire stuff at us too

o0

do you fire fire bubbles?

@JourneymanGeek yep :-)

If you look on our youtube channel I'm sure there is video of Erik with bubble guns somewhere

www.youtube.com/Metaltechtheband

@RoryAlsop Do you provide the projectiles, or do you just hope the thrown beer isn't horrible? Or do you ask for underwear?

@RoryAlsop You know a band called "Avatar" ?

@Arperum we provide small projectiles, yes, and our fans bring stuff...

We give the front row things like party poppers and small confetti cannons

@Stephane Not yet, but I'm happy to google at lunchtime

@RoryAlsop You'll need to be specific with your queries or you'll end up drowned in overgrown smurfs

This gig was along with System:FX, who we really like (a London Industrial rock band) and a new guy called Tapewyrm. He does 'Noisecore' - which is not really my thing, but apparently he is very good

@Stephane hahahahaha

@RoryAlsop If you guys ever do a show in Belgium, make sure to tell me. If I have time, I'll come along.

@RоryMcCune get on IRC!

quick, I need Genius - aka apple fanboi

how does one take a screenshot on #ShinyMac?

@RoryAlsop I am waiting to see these.

@AviD bit.ly/1qTWe5q

@TerryChia SMARTASS

wat.

yes, Mac is soooo much more intuitive.

@AviD You are lucky I didn't run it through 5 URL shorteners. :)

he does have a point tho

Yes, obviously press Command (⌘)-Shift-4, press the Space bar, move the camera pointer over the window to highlight it, and then click.

Hmm, I should write a script for that.

I kinda love the windows 8 full screen screenshot option

Why on earth would someone press "Print Screen" when they want to print their screen?

@AviD: clearly, because Saint Steve (may he live forever in our hearts) said so.

@AviD It's just commands-shift-3.

judas priest. Now how do I save and edit this damn shot.

crap, what. nevermind.

> In Mac OS X v10.6 and later, the screenshots are saved as PNG files on the desktop. They're automatically named "Screen shot (date and time).png." You can open these screenshots with Preview or other image editing apps.

because of course.

NO NO ITS NOT THERE

WOW THAT IS SO INTUITIVE IT IS OBVIOUS

I would find this hillarious but this is EXACTLY what would happen to me with a mac

@JourneymanGeek That doesn't make it any less hilarious.

@Arperum If anything, it makes it more hilarious.

anybody have the link to that post @Manish had a while ago about FF's password saving feature?

that's "Firefox", not "Fantastic Four"

@Arperum: The first time I sat in front of an OS X machine, I stared it for a full minute, and decided the sun/cde systems in the lab were probably more user friendly ;p

I FEEL HIS PAIN

@JourneymanGeek I think OSX is actually very user friendly. For very specific values of "user".

@AviD: I don't wear a black turtleneck

thats racist

@deed02392 I am on IRC :) your mission should you choose to accept it is to work out my username

@RоryMcCune raisin?

@TerryChia heh, something like that

@AviD I can't give you the article, but can tell you that you can easily display all saved passwords. Same goes for Chrome.

@Arperum Not IE, though. but thats not the point.

@AviD Yea, it's a bad sign when IE does something better then the rest.

@Arperum sure. welcome to 2004.

@Arperum yeah that is shocking. Especially when that applies to almost every single area of functionality, today.

@AviD I wasn't really working with developing things yet in 2004. I'm still a rookie.

@AviD I might tweet them from my Doktor Mayhem account... Or maybe facebook them from my Metaltech account

hmm, is 75 slides too much for a 45 minute talk? Including Q&A. and oh yeah plus a demo.

Imma talka fasta

@AviD lemme think...

yes

:-)

heh

us HR folks prefer 1 slide every 2 minutes or so

well some of them are "throwaway" slides - as in I flash them up for only a few seconds

works decently

@RoryAlsop and packed with lots of bullet points

if they are just headline slides, it could work

@JourneymanGeek 10-20-30 rule

10 slides, 20 minutes, 30 point font

@AviD: that could work too

@JourneymanGeek well... I aim for that. this time it didnt work out.

too many bullets :-(

I never expect anyone to read my slides anyway

@JourneymanGeek right, thats usually my point

but this time I actually have some mathy stuff on there, that I will need to visually walk through.

blah, I need more clamps

@JourneymanGeek sfunny, thats what @Adnan said last night - in bed

@AviD ideally 6 or less

@RoryAlsop SIX CLAMPS???

@AviD one for each nipple...

one... No, I dont want to know

Google Vendetta Vain, Poodle Parlour. NSFW, but quite funny

It's a silly burlesque show

@RoryAlsop that used to be my rule, with occasional small exceptions. Now I try to aim for a single "headline", with maaaaybe a subtitle

but this time its too detail-oriented

@AviD Yeah - sometimes you just have to

So I'm actually covering only 2 small topics. Password selection and password storage. With a preface on Entropy and the need for a proper risk model for passwords.

shouldnt take more than 6-7 minutes, tops.

@AviD sfunny, thats what @Adnan said last night - in bed

@AviD how can you reply to your own message?

MAGICK

@AviD fairy nuff

that happens whenever I activate the unicorn confetti cannon

@RoryAlsop no no, not fairy muff, unicorn confetti!

i have the SE chat chrome plugin that allows me to reply by ":" + up

@AviD ooh. I have the plugin that lets me use up to edit my last posts, but hadn't spotted this one

hmm. I like the 3rd half of my preso better. Probably because I prepared it first.

okay, I do need to practice it, and time the demos, but it looks like it will fit with plenty of time for Q&A.

I meant "Q&A" of course. There is always time for T&A.

@RoryAlsop What do you mean?

@Adnan I don't get it.

@RoryAlsop AFAIK you don't actually need a plugin for that?

@Arperum no, you would just need to copy the messageid - but thats a pain in the #Simon.

@AviD Just drag the link for the little popoup menu on the left of your message to the textbox, then remove everything but the last numbers, and replace by a ":". I was actually talking about his "plugin" for editing older messages by pressing up.

That functionality is default.

@Arperum yes, that is what I was talking about - a pain in the #Simon.

and the point of his plugin is because @RoryAlsop doesn't have a mouse, he only uses a keyboard.

@AviD Hmm? I thought he uses butterflies.

@TerryChia no no, he compiled the universe with the right constants.

@AviD He clearly did not get the constants right because yolo is still a thing.

@TerryChia #Yolo is a backdoor in the laws of the universe.

@AviD Sounds like we need to modify reality to fix it. Where did you put the Infinity Gauntlet?

@TerryChia huh. I was thinking about blowing up the universe and rebooting it again with the Tardis.

Geronimo.

Jeebus. What is it about "The registration will close on Sunday", "Sunday is the last day to register", "Register right now, or lose out", "SERIOUSLY YOU WONT BE ABLE TO REGISTER TOMORROW", that is confusing people?

I have had close to 2 dozen people write to me today. As if 700 people registered is not enough.

@AviD "registration", "close" and "Sunday" personally.

I think I need to start looking for a bigger venue for next year.

@TerryChia heh.

@AviD I thought that was "You NEVER have enough clamps"

@JourneymanGeek I think @Adnan owns the clamp shop.

@TerryChia: In which case....

This is pretty cool.

Anybody knows what to use to exclude a surface from silicon sealant?

I'm applying silicon sealant on a surface and I don't want it to stick on a one particular spot. There's no way but to apply it over that spot, but I don't want to stick, and I want to be able to remove it once everything dries.

myheap.com/chapter-8-silicone-caulk-molds.html apparently vegitable oil, or petroleum jelly.

and generally you can cut and peel off sealant

@Arperum wow - so, today I learned you could drag things into this box!

@AviD self-selection is a thing :-)

@Adnan why would you want to exclude a surface? Those are the best tablets out today!

not covered in sealant they arn't!

I dont know what you hip young kids are using nowadays

@AviD blog.scotsts.com/2014/08/31/surface-pro-3-review

there's Marions review..

@Adnan plasterer's tape or similar works. Just run a blade along the edge before peeling so it doesn't rip the edge up. Possibly asked already over on DIY.SE

@RоryMcCune heh. When did the headline change to include (and Surfaces)

@RoryAlsop heh, ya know I'm not sure, but I'm also not surprised that it has !

@AviD BTW was in an Airport on Friday and noticed that the techshop in there had Surface 3's so looks like there's quite a good stock of them around already

@RоryMcCune - I'm not getting the images on that page. I'll check at home in case it's just settings here

@RoryAlsop yeah if you could, I'll let Maz know in case there's a prob..

@RоryMcCune heh. nice seque. will read later.

@RоryMcCune so whats wrong with style over substance??

Better to be pretty than fat. Amirite?

@AviD sure as long as you have the needed functionality :)

@RоryMcCune oh I've got the "needed functionality" right here.

@AviD ...

Free spam flags!

@Adnan nice - by the time I got to it it had a total of 2 spam flags and 4 other flags :-)

quick work

Was having another look at the Unanswered Questions tab ( security.stackexchange.com/unanswered ) - and I think I will ask the SE devs if we can do a wee competition later in the month. I'll need you folks to help me work out what we can measure that would give us a win for the site on reducing our unanswered total by giving good answers (ie a score of 5 or more etc)

I have some prizes I can throw in (one being a very geeky magic 8-ball we designed a few years back - I still have 2 left from my original stock)

I'm a bit busy this week prepping for big gig next weekend on top of the day job and t'wife going away on holiday, but will try and make time to make a meta post on it

@RoryAlsop Is this the orkney gig you're prepping for?

@RоryMcCune Yarr

As we're headlining, we want to get everything right

Upgraded weaponry, more choreography, rearranged songs, more songs...

@RоryMcCune You got one of the 8-balls. D'ya reckon it's an appropriate prize?

@Adnan well who doesnt?

I hate this song

and at the same time I like it

@Adnan what song is it?

@RoryAlsop Lana Del Rey - West Coast

The first 60 seconds are great

I never ever heard in my 20+ years dev career that using prepared statements would cause something to run slower. Does anyone more versed in PHP have any clue what this one is describing? security.stackexchange.com/questions/66490/…

It's describing bullshit is what it's describing.

that's what I thought, cheers

"it's really slow" needs to be backed up with data.

It's either confirmation bias, or really messy code.

yup, especially since he/she says they're mostly one-off queries

And on top of that, handling a UTF8 string in PHP is not going to work.

Seriously, half the time, you'll mess something up royally.

@Adnan Well considering he/she claims faster run time for additional input sanitisation, I'm pretty sure there's some nice error in his/her code to exploit. At least it might be easier to DoS the shit out of it.

@TildalWave I'm also pretty sure that his code can exploited

but as a security "expert", I'm still interested to see what you guys, security experts, can do to exploit itl

dunno for that sanitisation, I don't really care about PHP so much ... plus I'm not an expert :P

@TildalWave Look, man. There's no need for this

You cared enough to comment

and you claimed you have 20+ years dev career

so let's drop the poop and actually address this like non-self-deprecating adults

@Adnan Need for what? Where's your snark detector today man?

It's a very interesting security matter

it is?

Yes

Exploiting what we've been saying is exploitable for years

but never really saw an exploit for it

But that's not what my point was. I don't care for PHP input sanitisation, not the least bit. What caught my attention in that question is his/her claim that prepared statements make things run slower.

I only read it because I was reviewing an answer to it anyway

@TildalWave and that's why:

OP posted this

OK you go ahead, I'm dev so I'm busy developing a headache each time I see PHP code

@RoryAlsop magic 8-ball says... sounds good to me :)

any new ALS ice bucket challenge videos posted?

@TildalWave Well, you asked to see something about them being slower. Actually, you started this discussion with that

Check the link

It actually provides some interesting results

@Adnan That MySQL sucks? That's interesting?

@TildalWave Comparing prepared statements vs. normal queries

@Adnan Yes, I know, but my only guess as to why this would be happening is that MySQL engine fucks it up somewhere, possibly during SQL parsing and parameterized queries aren't privy to some optimisations that non-parameterized are. Then again, like I said, MySQL is POS and best avoided. Use a proper RDBMS, perhaps some that PHP devs wouldn't rely on so eagerly. It's all about the company you keep ...

anyone in here know why VirusTotal shows 'packers identified' PEiD value as 'Armadillo v1.71' when a PE file is compiled in MS Visual C++ 6.0?

I noticed silicon realms website (armadillo packer writers) now forwards to digitalriver

Hey all

hey

boobies

@LucasKauffman have you been looking at leaked naughty pictures... tut tut

@RоryMcCune oooh that reminds me!

@LucasKauffman to write a blog post reminding people not to look at that kind of thing?

@RоryMcCune yes, yes indeed. Common decency and all that. I would never look at them!

except of course for research purposes in function of the blog post

@LucasKauffman ...

@RоryMcCune to confirm the story

@RоryMcCune The flesh is weak.

@LucasKauffman tut tut tut

@RоryMcCune :3

@TerryChia Yeah dude, was looking for your SSL tester :) the one a colleague was using seemed to be crap and I remembered you were doing one that looked good

Is there a naughty pictures thing? @lucas