The DMZ

Scott Pack

00:13

@DavidFreitag Double in what?

I ask because while I was pretty happy with my CS/Radio Broadcasting double major as well as a double minor in math and theatre...nobody cared.

All the artsy stuff has turned out to be nothing more than an interesting side note to conversations.

Ninefingers

06:52

@AviD Hello

Lighty

07:12

Gewd Murrrnin' dear world

deed02392

08:24

@ManishEarth I was just gonna pick your brains on the autocomplete=off change in FF

AviD

comments anyone?

-1

Q: Any free source of data for web security/database security issues for my thesis?

I'm still thinking of a topic for my bachelor's thesis. I'm thinking of something like machine learning application on web security/database security. Problem is, in machine learning I need to have data. So I thought I'll base my topic on what kind of data I would get. Example, I found data on we...

Lighty

hm, if you'd migrate it, it could be discussed as either opinion based/too broad, or even outside of scope on SEC.SE

not sure though :$

Terry Chia

@AviD Definitely a product recommendation question.

AviD

@TerryChia no no, I didnt mean about migrating it here, I already rejected that. I meant offer him some sources in comments.

yaknow, like the verizon data dump, whid, etc.

Terry Chia

@AviD Ah. I'm not signing up for an account there just to comment. :P

AviD

08:30

I'm going to start calling "data dumps" as "data poops" instead. I think it goes more to the overall quality of typical incident reports.

Verizon Incident Data Poop

2

Terry Chia

@AviD That's pure star bait.

AviD

@TerryChia you onhly think that because you have a scatological fetish.

Terry Chia

@AviD Have you written a webapp in EmoJS yet? ;)

AviD

hehe

no, but I will be in Seattle next week, so anything is possible.

I've heard that some of the best breweries AND best coffee shops are there, looking forward.

oh, and donuts. DEFINITELY the donuts.

Imma get so fat on donuts and beer I will need a 2nd seat on the flight back.

Lighty

@AviD 'Murica

AviD

08:45

@Lighty YEAH, MURICA!!

YOU!! ESS!! AAAAIII!

DONUTS!!!

Lighty

'MURICAAA, DEFEATIN' ALL DA TERRORISTS BY ROLLIN' OVER DEM WITH OUR DONUTZ! F*CK YEEEAAAAA!

background explosion for effect

Terry Chia

@AviD "back"?

AviD

@TerryChia yeah, you know when I leave Seattle to come back home?

I'm not moving there.

Terry Chia

@AviD Oh no of course not. I was trying to suggest you will already need a second seat on the way there.

AviD

Ohhh I see what you did there. rolls eyes

@TerryChia That makes no sense though, seeing as how I am now donutless and beer-free, resulting in an adonis-like svelte figure.

I kid you not.

hmm, svelte sounds a tad effeminate...

meh, screw it, I'm man enough to own that.

2

Arperum

08:51

@TerryChia I kinda really want ot see anything written in that. ANd I also so much do not want it.

ManishEarth

09:10

@deed02392 Ah, sure, fire away :)

Rory Alsop

09:59

@AviD beer free? This does not sound healthy.

AviD

@RoryAlsop free as in beer!

deed02392

@ManishEarth I reckon I'm all caught up on it now, basically webmasters were abusing autocomplete and being overzealous with it, making autocomplete features redundant, so browsers hit back by starting to ignore it by default. However it can act as a security feature for fields where data is sensitive eg credit card numbers etc. What's the mitigation now for preventing browsers auto completing fields with sensitive data in XSS attacks?

Lighty

free beer?!

where

AviD

@deed02392 "webmasters"? No, it was abused by developers, and corporations, but especially auditors and regulators.

and I'm pretty sure the mitigation is requiring human interaction.

"human"

Terry Chia

@AviD Isn't "webmaster" just a developer that got stuck with writing HTML? ;)

AviD

10:03

oo thass cold, man, ice cold.

Rory Alsop

@AviD like some beers :-)

Lighty

Isn't a webmaster someone who claims to be a Developer Wizard, but is only hired to drink coffee and press a restar button every month?

AviD

@RoryAlsop is there any other kind?

Lighty

@AviD water claiming to be beer coughLightBeercough

Rory Alsop

@AviD of course. Real Ale should not be cold/chilled

AviD

10:04

@RoryAlsop oh? Didnt know that.

Rory Alsop

The beer cellar should be a cool room, but not chilled at all

5

A: Why are breweries against freezing pint glasses

It depends on the beer style. Craft beers in general were not designed to be served at a near freezing (for water) temperature. Drink an IPA at 35 degrees and 45 degrees and you'll probably find the hop notes more pronounced at the higher temperature. Here is a general guideline: Very Cold: 35-...

AviD

It took me a couple of re-readings to understand that he is talking in fahrenheit temperatures.

Muricans.

Rory Alsop

@AviD aye - dem muricans :-)

Although - a beer at 35 degrees C

I may need to try that

just as an experiment, you realise

AviD

@RoryAlsop that is not very cold

you should try beer through a straw

Rory Alsop

@AviD correct. It sounds like it might be like a mulled wine, only mulled beer...without the mulling

@AviD done that many years ago :-)

Lighty

10:16

I personally prefer my drinks cold to ice-cold, even certain red Wines hat you should drink on room temperature taste better cold to me (even Rose wine, i really prefer those with ice, and really chilled)

AviD

@RoryAlsop you watched Cheers, eh?

Rory Alsop

@Lighty I like deeply chilling a Murfatlar red - as it is supposed to be, but no - most red#s only develop well at room temperature

@AviD not so much. This was well before Cheers :-)

Rоry McCune

10:35

@RoryAlsop what age did you start drinking at eh!

given cheers started in 1982

Lighty

@RоryMcCune i think 720 B.C.E.

Rоry McCune

@Lighty well Mr Alsop is not doing suppositions about his age much good at this point :)

Lighty

;P

Terry Chia

@RоryMcCune 1245 of the First Age.

Lighty

we're not calling @RoryAlsop old.... we're calling him ancient

Rory Alsop

10:42

@RоryMcCune before that :-)

Orkney is a small community

Things are accepted there before they may be accepted in larger communities

Drink is one of them

Terry Chia

@RoryAlsop Your mom put a little whisky in your milk to get you to sleep? ;)

Rory Alsop

@TerryChia nope. I just learned early on that cider was a good thing

As was vodka

And all of the other alcohols

Lighty

and White Wine? :o

Rory Alsop

of course

and even red

or rose

or sparkling/champagne/prosecco

Lighty

i had this really weird, Sparkling white wine in Naples, Italy

it wasnt dry, nor sweet, and the sparkling made it really good

ofcourse, it was really chilled too

i still feel bad for not bringing a bottle home

Rory Alsop

10:52

@Lighty of course :-)

Lighty

eh

0

Q: Sqlmap useragent scanning without permision

Does anyone have an idea how to stop sqlmap from scanning useragent when setting --level="5" ON?

web-application

i have no idea what to think of this

its really... err, thin?

Lighty

11:08

omg, there was a car driving by on the highway next to our office building

a Suzuki X90

which is a "offroader"

that is one ugly cookie-tin

i mean, just look at it

raz

@Lighty Why does that exist?

Lighty

@raz ask Suzuki what they were smoking

prolly more than tyres

Journeyman Geek

o0

Thats the second ugliest car I have ever seen

and the wierdest

raz

@JourneymanGeek What's the first?

Journeyman Geek

Nissan Juke

The Nissan Juke is a Mini Sport Utility Vehicle (SUV) produced by the Japanese automotive manufacturer Nissan since 2010. The production version made its debut at the 2010 Geneva Motor Show in March, and was introduced to North America at the 2010 New York International Auto Show. On 11 February 2009, Nissan announced that the model would go into production at the Nissan Motor Manufacturing (UK) Ltd (NMUK) plant in Washington, UK, during 2010 following its appearance as the Nissan Qazana concept car at the 2009 Geneva Motor Show. The Washington plant manufactures for the European market, while...

raz

11:27

@JourneymanGeek I prefer the Juke honestly

ManishEarth

@deed02392 It works fine for credit card numbers

We never killed autocomplete=off

We killed autocomplete=off for password fields

because browsers prompt about saving passwords anyway

So giving the website the power to turn off the password manager for the page didn't give any additional security

2 hours ago, by AviD

@deed02392 "webmasters"? No, it was abused by developers, and corporations, but especially auditors and regulators.

also, this

I believe that a lot of official recommendations by idiot auditors was to autocomplete=off all the things, including password fields

Rory Alsop

yay-got my 4th 10k site today!

Lighty

@RoryAlsop 10k site? :o

raz

@RoryAlsop Congratulations are in order

@RoryAlsop I'm pretty sure that's not sad or anything...

I guess when you've been around forever it was bound to happen :)

Rory Alsop

@Lighty aye - sites on SE where one has over 10k rep

Lighty

11:37

@RoryAlsop really now! congrats there :3

have a digital-ale

raz

@Lighty Oh man digital ales... we should invent those.

Rory Alsop

@raz no no no - they have been invented. Now just please make one :-)

(and send it to me)

Lighty

i opt-in for volunteer alpha-tests then :o

is posting p0rn allowed btw? before i send more digital ale to rory

raz

@RoryAlsop There is an app where you can buy people beer...

Rory Alsop

@Lighty sadly, no

Lighty

11:46

did you know, in the netherlands, people seem to enjoy more foam on their beer as anywhere else? as in, the foam ontop of a beer can reach to a whopping 2cm

raz

@Lighty When it comes to head on my beer, I go by the 2 finger rule.

Lighty

when it comes to my beer, i go with the 2 glasses rule

raz

@Lighty You only drink 2 glasses?

Lighty

2 glasses beer = one beer, which means if i can have a maximum of 10 beer in an evenin, i can drink more if it was 1 glass = 1 beer

Rory Alsop

In countries where a foam head is popular, glasses typically have space for it. In countries where it isn't, letting foam take the place of beer is a punishable offence

Lighty

11:48

flawless logiks

Terry Chia

Hmmm, looks like there's a new Windows RCE vuln. CVE-2014-4114.

Lighty

@TerryChia the one russia abused?

raz

@RoryAlsop I think it depends on the style of beer and if it's draft or pull.

Lighty

heh

reminds me of this weekend

i asked for a glass of water while working on an IP Cam in a bar

they guy walked to the tap/pull and held a glass under it

the tap said "Jupiler Beer"

literal water came out of the tap

well played xD

Rоry McCune

12:08

@TerryChia from isightpartners.com/2014/10/cve-2014-4114 looks like an OLE thing, so mainly office docs as an exploit vector...

Terry Chia

@RоryMcCune Yup, looks bad.

Stefan Esser just hinted at two vuln reveals tomorrow as well.

Looks like one of them may be a SSL vuln. Woohoo!

raz

@TerryChia Protocol vuln, or an implementation vuln?

Terry Chia

@raz How the hell would I know?

raz

@TerryChia He could have hinted at a technology

Rоry McCune

@TerryChia you've not hacked his e-mail...

get with the programme

Terry Chia

12:19

@RоryMcCune Hehe.

Rory Alsop

@RоryMcCune thanks for that link

Terry Chia

Someone leaked some Dropbox passwords today as well.

Rоry McCune

@TerryChia though dropbox say it's not from them, but other services trying account combos there...

Rory Alsop

@TerryChia i hadn't realised dropbox offers 2FA, until today

Terry Chia

@RоryMcCune Aye. Still fun though. :P

Rоry McCune

12:20

@RoryAlsop yeah so as long as you're happy with Condy and her friends reading your stuff, you're fine :P

Terry Chia

This year should make anyone in information security really happy. Job security ftw!

Urban myth: the Ruby developer who managed to download all the Gems they needed within a 24-hour hackathon.

Tweeted by iamdevloper on October 14, 2014 at 9:53 AM

@RоryMcCune @AviD You may appreciate this tweet. :)

Rory Alsop

@RоryMcCune meh - she gets a sneak preview of latest Metaltech tracks :-)

Rоry McCune

@TerryChia heh

Arperum

@TerryChia "You are all a bunch of useless twats. Why should I keep spending money on you, they keep hacking everything."

Rory Alsop

@Arperum there is that...

Terry Chia

12:22

@Arperum Because more things gets hacked if I'm not here? :P

Rоry McCune

@RoryAlsop see knew there had to be some benefit to having been a member of the Bush government!

Arperum

@TerryChia "HAh. Says you.Didn't stop them."

Rоry McCune

@Arperum then be a pen tester :) we don't get into trouble for that ..

Terry Chia

@RоryMcCune Aye, or a researcher. ;)

Rory Alsop

@Arperum And then we say - no, no - look at (bank X) over there. That might happen to us unless you increase security spend....

Terry Chia

12:23

No end to crappy software to find bugs in.

Arperum

I am part of the reason you guys get to keep your job. I just have to keep writing crappy code.

Rоry McCune

@TerryChia well once all software dev courses have even one module on security, I might start to think we'll see a more secure future!

Rory Alsop

Hi @Weda. Yes - this hotbed of scum and villainy probably can help you out with AES security questions

Terry Chia

@RоryMcCune So... in 2143 maybe?

Rоry McCune

@TerryChia optimist!

Rory Alsop

12:25

@TerryChia never happen

Terry Chia

@RоryMcCune Only @RoryAlsop will know.

Arperum

@TerryChia That's crazytalk.

WedaPashi

@RoryAlsop: Thanks Rory.

Terry Chia

@RoryAlsop Oi, @Adnan isn't here today.

Rory Alsop

@TerryChia I was trying to come up with something, but that was the first partial quote that popped into my head

Terry Chia

12:27

@RoryAlsop Hehe. It's pretty fitting actually.

Rory Alsop

so - is anyone going to pop a bit of an answer on this:

0

Q: Clarification about the post: Russian hackers use ‘zero-day’ to hack NATO, Ukraine in cyber-spy campaign

I have encountered the following article on Washington post: Russian hackers use ‘zero-day’ to hack NATO, Ukraine in cyber-spy campaign. As always in such kind of articles the publication sounds too scary, and there is almost no information to understand what are they talking about. Can anyon...

attacks zero-day cybersecurity media

WedaPashi

@Rory: I couldn't resist taking a look at the Display Picture first :P Trained Eyes

Rory Alsop

@WedaPashi I hadn't spotted that

but thankyou

Terry Chia

@matthew_d_green SSL3.0 bug is due to be released tomorrow. Let's hope logo and a brand are already done.

Tweeted by umbrquil on October 14, 2014 at 12:21 PM in reply to umbrquil

And a website of course.

Rory Alsop

I just want to see more of those Sandworm icons

I like Frank Herbert

Arperum

12:31

@TerryChia Oh goddammit. I was having cases of customers not wanting to use SSL already... Because confidential documents don't need that kind of security.

Terry Chia

@Arperum Well yeah they are right...

You should be using TLS instead. ;)

Arperum

@TerryChia They are going to use some terrible wordpress website. No special security issues taken.

Terry Chia

@Arperum Link to site? I like me some confidential documents. ;)

Arperum

@TerryChia Heh. 1) It currently contains a single pdf file with the content "test", live domain isn't even registered yet.

I think.

Nope, it isn't.

Rory Alsop

12:55

I'm thinking off topic, but if anyone has useful places to point this person, feel free to provide:

0

Q: owasp esapi php implementation for xxs attacks

I searched extensively for good materials for prevention of xxs attacks using OWASP ESAPI. But could not find any beginner material. I found a blog for basic security but not explicitly for XXS attacks. Can some one please give me an example how this works.

php owasp

(if it gets a couple of close votes I'll finish the job)

Rоry McCune

@RoryAlsop OWASP ESAPI is a security API for preventing XSS :)

raz

13:11

0

Q: Why the symmetric key is added to the message?

Yesterday in my class we learnt how to send a message from Alice to Bob with the achieved goals of confidentiality, integrity and authenticity. In order to have a better performance we use a hybrid method with a symmetric and an asymmetric key. Alice's and Bob's private Keys are signed by a Cert...

encryption cryptography certificates asymmetric

I feel like their lecturer is doing it wrong.

Terry Chia

@raz Or the more likely scenario that the guy has no idea what his lecturer is talking about?

raz

@TerryChia This is also possible

Terry Chia

In PGP the random symmetric key is encrypted with the private key and prepended to the start of the message.

raz

@TerryChia That's what I thought

Terry Chia

The Internet of Things is another way of saying "whatever crappy protocols we use today, we'll be stuck supporting in 2045".

Tweeted by matthew_d_green on October 14, 2014 at 1:20 PM

Rоry McCune

13:23

note to self... if you leave burp on 30 min auto-backups with a 300MB burp file, bad things will happen to your disk space

Terry Chia

@RоryMcCune Ouch...

VM I hope?

raz

@RоryMcCune If you french fried when you should have pizza'ed, you're gonna have a bad time.

Rоry McCune

@TerryChia yeah that's why it ran out. only had 40GB assigned

Journeyman Geek

Damn, now I'm hungry.

Terry Chia

@RоryMcCune At least it wasn't on the host. That would have been painful.

Xander

13:25

I'm having a hard time getting worked up about SSL v3 allegedly being vulnerable. It feels like I kinda knew that already.

Tweeted by addelindh on October 14, 2014 at 1:09 PM

Rоry McCune

@TerryChia true true

Terry Chia

@Xander "All crappy protocols are crappy, but some protocols are more crappy than others."

Thomas Pornin

13:42

@TerryChia git.openssl.org/gitweb/…

That's a patch to OpenSSL 4 days ago.

Apparently there is some problem with SSL 3.0 + RC4 encryption, and they are disabling it.

Terry Chia

@ThomasPornin Interesting...

Looks like a protocol flaw then?

Simon

That's a great way to patch stuff.

Thomas Pornin

@TerryChia Might be related to this: tools.ietf.org/html/rfc7366

a new TLS extension to use encrypt-then-MAC instead of MAC-then-encrypt

Terry Chia

@ThomasPornin That doesn't apply to SSL 3 though?

Thomas Pornin

@TerryChia Nothing prevents it. RFC don't talk about SSL 3.0 because that's an "historical, foreign protocol"

Terry Chia

13:46

@ThomasPornin I thought SSL 3 doesn't have extensions?

raz

@ThomasPornin Was there ever an RFC for SSL3?

Thomas Pornin

It has:
> Forward compatibility note: In the interests of forward
> compatibility, it is permitted for a client hello message to include
> extra data after the compression methods. This data must be included
> in the handshake hashes, but must otherwise be ignored.

Lighty

I seriously love Cortana on windows phone...
me: "Tell me about Halo"
she: "Halo rings are designed by the most advanced civilization ever, abd they're an awful lot of fun to blow up."

Terry Chia

@ThomasPornin Ahhh.

Thomas Pornin

@raz Published way after the fact: RFC 6101

Rory Alsop

13:48

@RоryMcCune exactly

Thomas Pornin

From the patch, it seems that OpenSSL gleefully accepted the encrypt-then-MAC extension with SSL 3.0 too (and for AEAD cipher suites in TLS 1.2, which already do the MAC properly), and for some reason they should not.

Rоry McCune

@RoryAlsop hmm, I was reading his question as he's looking for PHP ESAPI examples for preventing XSS, but I read your comment as "you're looking for exploits.."

Thomas Pornin

This probably has something to do with the fact that the SSL 3.0 MAC is not HMAC, only something that "looks like" HMAC (it was designed before HMAC was published).

Rory Alsop

@RоryMcCune Ahh - I read his question as looking for examples to learn defence, but your interpretation makes more sense

Thomas Pornin

I suppose that the attack setup is actually not very scary; maybe an exploit building on the known RC4 biases, or on length-extension attacks on MD5/SHA-1.

raz

13:53

@ThomasPornin So for some reason encrypt-then-MAC breaks SSL 3.0

Thomas Pornin

@raz That's what it looks like, based on a commit to OpenSSL source code made a few days ago without much explanations.

Terry Chia

@ThomasPornin I'm still hoping for something else though. I want SSL 3 to die completely. :)

raz

@TerryChia It bothers me that IE (at least up until IE 10) still supports SSL2

Thomas Pornin

The really good question is: how comes the vulnerability works with SSL 3.0 and not TLS 1.0 (which are very similar).

raz

@ThomasPornin That's what I'm curious about.

@ThomasPornin Also why is it RC4 is called out? if it was AES then it'd be fine?

Thomas Pornin

14:05

@raz From the patch, it seems to be a problem with stream ciphers in general, but that means RC4 since that is the only stream cipher in SSL 3.0.

When using a stream cipher, attackers can do surgical manipulations of the plaintext, since encryption is just a bitwise XOR.

raz

@ThomasPornin right

Thomas Pornin

In fact, it usually goes the other way round: when using a stream cipher, you MUST use a real MAC, and not simply appending a hash of the data and encrypting the whole lot (while if using CBC encryption you may survive).

raz

@ThomasPornin SSL3 doesn't spell out that implementations must first check the MAC then decrypt data does it?

Thomas Pornin

@raz In "normal" SSL 3.0, just like TLS 1.0, 1.1 and 1.2 (except AEAD cipher suites), MAC-then-encrypt is used; so you decrypt, then check the MAC.

RFC 7366 adds a new TLS extension that, if negotiated during the handshake, changes the encryption system to encrypt-then-MAC (so check the MAC then decrypt).

raz

@ThomasPornin Yeah that seems like it should effect things other than just SSL3 then.

CodesInChaos

14:29

I disagree with the migration of security.stackexchange.com/posts/70622/revisions

Lighty

@CodesInChaos i also disagree with 404's ):

CodesInChaos

I don't think people on superuser are the best to figure out if a malicious CD/DVD burner can rewrite data.

Thomas Pornin

@CodesInChaos physics.stackexchange.com would have been better, indeed.

Lighty

The Bear Has Spoken.

CodesInChaos

@ThomasPornin Not sure about that either. Physics is part of it. But if you find out that for example you can set bits from 0 to 1 but not the other way round, the implications are non trivial.

Thomas Pornin

14:34

@raz Ah, I was not reading the commit correctly. They disable encrypt-then-MAC for all of SSL 3.0, and also for RC4 on all protocol versions.

raz

@CodesInChaos I like how it was migrated, only to be closed

@ThomasPornin You know that had crossed my mind, but I wasn't sure what the SSL_RC4 macro implied.

CodesInChaos

CDs/DVDs employ checksums which make manipulation harder and error correction codes which have implications I don't understand.

raz

@CodesInChaos I bet the Internet understands

AJ Henderson

hey guys, be on the lookout on the suggested edit review queue. Seems we have a user that is doing a lot of poor addition of commas and bolding portions of questions that may not actually be the main part of the question the OP was asking while not altering much more significant grammatical errors

be sure to remember to look closely at edits before approving them

raz

@AJHenderson Lighty?

AJ Henderson

14:40

yeah

Simon

LOL

AJ Henderson

oh hey, he's in here, that makes life easier to just mention it to him too

raz

lol

awkward....

Lighty

whistles

in my poor defense, it's not called a review queue to click the accept button

AJ Henderson

that's actually good, you certainly seem like you are trying to help, and I do appreciate it, but be careful to make sure your edits are significant, complete and valid. For example, it is valid for their to not be a comma before an and

in some areas, it is actually preferable, though I believe that one is a US/UK difference

@Lighty yeah, honestly, the review queue was more my concern, but I'm glad I have a chance to offer feedback to you too

the whole point of the review queue is the idea that newer people on the site don't yet know what a good edit is :)

that's why it's there

raz

14:44

@AJHenderson That and we pronounce it 'erbs rather than herbs

Lighty

and i appriciate critisism and feedback all alike, because if i screw up and no-one tells me, how am i supposed to know im screwing up?

:18147336 in my defense stuffs donuts in simon's mouth

AJ Henderson

@Lighty exactly

and I don't mean to discourage you at all. Most of your retags are pretty good

and I'm glad you are putting in the effort

Simon

@AJHenderson Why on earth did you delete my message? There was absolutely nothing wrong with it.

AJ Henderson

@Simon it was rude

3

Simon

Because no one ever here was rude. SIgh.

AJ Henderson

14:47

I honestly almost gave you a short suspension for it. There's a big difference between joking around on casual matters and being harsh on an actual site issue

Simon

Have fun.

Rory Alsop

@Simon you know you could have just used another word in place of that one...

Thomas Pornin

@RoryAlsop And now you are teasing the non-blue people, who cannot read deleted messages.

raz

@ThomasPornin What he said

Lighty

grabs popcorn

Rory Alsop

14:50

@ThomasPornin I didn't actively remove that one. That was flagged, and deservedly so

@Simon - you knew that would get flagged. Why deliberately cause friction?

AJ Henderson

@Simon - just for the record, that wasn't me that flagged or validated that, I was going to let it go personally

Rоry McCune

@ThomasPornin blue and room owners :op

Thomas Pornin

@RoryAlsop I don't deny that. It was from @Simon so I can imagine it was not elaborate literature.

AJ Henderson

I agree it wasn't appropriate, but I also don't mind attacks on me personally if people are frustrated

Thomas Pornin

However, discussions about the word-that-should-not-be-named tend to be frustrating to bystanders.

tombull89

14:51

@RоryMcCune ...and those that saw the flag in the first place...

Thomas Pornin

If it was offensive then it deserves to be blasted and then forgotten.

Rоry McCune

@tombull89 yeah that too

Terry Chia

So I go watch a Youtube video in full screen for just a few minutes and the entire room blows up.

3

Lighty

@TerryChia welcome to the internet

Rory Alsop

Nah - it's a bit overblown. Sometimes this is why I just edit out an offending word from some folks - see the 5* quote in the star bar to the right :-)

tombull89

14:53

@TerryChia somewhere, in the stack exchange datacenter, a virtual machine explodes

Terry Chia

@tombull89 I don't think SE runs VMs? IIRC they just have IIS on a few servers.

Rory Alsop

As @Thomas said though - it's done, it was flagged, I validated the flag, that line was deleted - let's now move on

Rоry McCune

@RoryAlsop what and avoid drama...what sort of crazy Internet would that be!

Rory Alsop

AJ agreed it wouldn't necessarily have offended him, but it offended someone - as swear words often do

@RоryMcCune :-)

Terry Chia

@RоryMcCune brb pinging Linus.

Rоry McCune

14:56

@TerryChia yeah tell him, Richard Stallman and Theo De Raadt that the other two are here talking smack about them

Terry Chia

@RоryMcCune Hehe. I actually appreciate Linus' cussing but Theo is on another level entirely.

Lighty

poeple sometimes tend to say they don't mind swearing, like if you have a bad day, and curse at your PC, aslong as it isnt pointed to someone, or turns into a Call of Duty chatbox, it's fine

right?

AJ Henderson

anyway, back to the conversation I was having with Lighty. Keep up the effort, just try to be aware of what is a real grammatical issue vs a stylistic difference, try to make sure that if you are fixing grammatical issues, fix as many as you can and make sure to be very, very careful when adding emphasis when you don't know for sure which part was most important to a user. It isn't always the shortest or intro question, but may be that they actually want the details in their final statement

and if you ever have questions about something, feel free to ask in here about it too

all our joking and off topic discussion aside, the primary point of the room is still ostensibly IT Security and helping improve the site

Terry Chia

Lighty fixing grammatical issues... Hmm...

Thomas Pornin

@Lighty The whole point of swearing is that it is a transgression of normal in-society behavioural codes.

Transcript for