The DMZ - 2011-09-18

« first day (276 days earlier) ← previous day next day → last day (4596 days later) »

12:32 AM

@HendrikBrummermann I agree with that synonym, but I can't vote on it.

You know, it's funny. When I read the question, it sounded like he was just talking about the review phase of an incident response procedure.

Did you go to the linked site, @Hendrik?

It looks like he's putting out the call for someone to actually perform a pentest against his application.

No wonder you're confused :)

4 hours later…

4:18 AM

This one smells black hat

2

Q: what is the fastest and cheapest way to crack this kind of hash - md5(md5($password) + salt))?

I'm looking for a program that can use any GPU (ATI\NVIDIA) and can brute force a vBulletin hash - md5(md5($password) + salt)). I have the salt and hash. the password contains the symbols - a-zA-z0-9 the, length is of 7-8 charcters. I'm going to run it on a windows platform (would like to use ...

encryption passwords hash

'I'm an owner of a big forum' unconnected to the incident, 'he can't do anything about it - for sure' This is almost certainly a lie.

4:37 AM

Yeah, I don't like the smell of it either.

Its the attempt to assure us that he's a good guy that really rings my bell.

But I wasn't sure anyone else would agree with me.

I'm not sure what to do about it, because there is nothing specifically wrong with the question. I think most people would agree it is pointless to attempt to supress attack techniques and methods. Better that we should lean about them so we are better equiped to prevent and handle new and evolving attacks.

4 hours later…

Hendrik Brummermann

8:19 AM

@thisjosh He does have a nice story. There are quite a number of questions which started with a criminal background but were rewritten to the defenders point of view.

2 hours later…

10:48 AM

@thisjosh yeah - in reading it through I think you are right. Something a bit dodgy, but the question and answers have definite practical usage.

3 hours later…

1:56 PM

Hum is is possible to save a site certificate from a browser?

Oh wait, I can via openssl

nvm

2:57 PM

g'day ever'one

ssshhhh!! (its weekend...)

yeah

heya @Mvy

heya @AviD

how are you?

@Mvy alls good, thanks. and yourself?

fine fine.

2:59 PM

still tired... trying to catch up from the past couple weeks, been swamped leading up to the owasp conf.

btw, didnt get to tell you guys about the box of awesome swag the lovely folk at SEI sent over to give out at the conference.

oh!

shirts, stickers, lanyards - was great!

lanyards?

unfortunately, the moderator business cards showed up a day late... :(

Goggled it :P

oh too bad

3:00 PM

@Mvy yknow, the straps you wear around your neck to hold the badge....

@Mvy :)

@Mvy was funny... the delivery company called me while I was at the conf, to schedule a day to deliver.... :D

hum

"-Well how can I tell you that... errr... you're too late :P"

no biggie, I'll use 'em next chance... actually really nice...

"- BUt thanks for trying"

heh, yeah... tried getting them to run them over to the conf, but that was just too complicated.

well I guess

3:02 PM

actually there werent a lot of lanyards, just enough for the speakers and organizers... actually less, because a lot of people grabbed 'em

but the shirts were great!

so they had success?

looked fantastic, very popular, lots of people wearing them.... heard a lot of positive comments on it.

@Mvy oh yeah.

yeah

@RebeccaChernoff @gracenote @jin - thanks bunches for the swag! was a big hit! and the conference itself was also top notch - one of the best I've been at, if I may say so myself....

I would say the stickers were a bit more.... "lukewarm", beautiful, but i guess not as useful...

Should we go back to pin's ?

3:06 PM

shirts are gorgeous. I was hoping to have a few left over, but they went like hotcakes in the winter....

really got people talking about the site, now lets see if there is influx over the next few days...

@AviD we can still hope to get one as top-users

was funny, a lot of people thought it was my site, because I keep publicizing it.... :$

They did it once for Gaming

@AviD LOL

@Mvy what, sent out shirts?

@AviD yes + other things like pencils etc..

3:08 PM

@Mvy yeah, somebody said to me "you did a great job designing your site!"

@Mvy cool

32

Q: Gaming Stack Exchange swag for top users

As a thank you for being awesome, if you are on page 1 or page 2 of … http://gaming.stackexchange.com/users?tab=reputation&filter=all … we'll be sending you a little care package shortly: Gaming Stack Exchange t-shirt in your size Gaming Stack Exchange die-cut, vinyl sticker...

discussion swag

no use for pencils, but I'm always game for free stuff...

as calvin said, I want to be a walking advertisement

anyway, I at least have the one shirt I was wearing....

btw @RoryAlsop I'll be submitting my blog post on the conf in the next few days....

it's loooong....

what? blog posting?

or the article?

@Mvy what article?

Idk, was asking about "What is looooong"

BTW @AviD you know there is mod election ongoing?

3:14 PM

ah, the blog post. is why its gonna take a few days....

yes, well, trying to catch up... I missed it when it came out.

well it's nomination phase

have to decide if i'll stand for it.... assuming yes I'll need to find time to write up my nomination....

I am also considering it.

excellent!

the more the merrier :)

^^

3:29 PM

/me sighs

So it's coming on on fall, the nights are getting chilly, we hard to break our the down comforters.

And while the girls are out at the grocery, I turned on the furnace to burn off all the dust. Not quite cold enough for heat yet, but I wanted to get it aired out.

Jimminy. In 8 minutes of run-time the house got 2 degrees F warmer.

3:58 PM

@AviD @Mvy If you guys do want to stand, then you had best write up quickly. RebeccaChernoff is currently scheduling a TownHall for the last half of this week.

Yep I know.

Good. I didn't want you to end up getting left out in the cold, so to speak. Or get involved too late and not be able to attend :)

Morning, @Jin.

Morning

@AviD glad you had fun at the conference! Sorry the cards didn't get to you in time

@ScottPack ya I know...

@Jin no worries! thanks anyway.

btw @Jin the cards are really gorgeous. nicer than my regular ones....

the shirts were a big hit, anyway...

4:14 PM

Oh good to hear!

'course, giving free stuff to israelis is not a big trick ;-) ... "if it's free - I'll take two!" :D

haha

@AviD I take offense at your cultural insensitivity!

but many switched into them right away, and ever'body luvved 'em. Lots were talking about the site, so that part worked...

@ScottPack what, you're saying its not just israelis...? ;-)

Whoa that's great.

Isn't there another security conference coming up?

4:16 PM

@AviD Oh, what's that I hear? The ladies are back from shopping. I must go assist. :)

Educause Security Professionals is coming up in October, but I don't know of anyone here attending.

@Jin which one?

My office is scheduled to run our yearly regional conference at the same time. Whoops.

Wait, the one you went to was OWASP isreal right?

@Jin yes.

ok nm. That's the one I was thinking

4:18 PM

cool

btw for the t-shirt, make sure you wash it inside out, don't use bleach and hot water

we had 2 reports from the gaming community that the design faded after the 1st wash(which wasn't normal). My gaming T is fine after many washes

So I suspect it was the way they washed them

@Jin ooo thanks for the tip

too late to tell everbody else, though... :)

does it say it on the label....?

It probably does, but not everyone reads it

oh cmon, lets be realistic - noone reads it ;)

So when we send out swag package to our top users, we specically mention it in the letter too

4:26 PM

anyway, most of my tshirts wind up inside out anyway....

I'm designing another security T. The ones we made for conference purpose are running low

We need to re-order for the top user swag packages. So I'm making a new design. Well not totally new, but a more refined logo.

Ohh

The conf Ts were made even before the site was launched :) because we had to rush the Ts to make sure they'd be delivered on time for the conf

^^ remember this

so it will be the "conference edition, one time print"

it may go for $millions on ebay one day.. :)

4:32 PM

Too bad, I can't attend to the hack.lu conf next week.

@Jin you're sure about that?

@Mvy no... but I'd like to dream that someone thing i made are worth $millions...

it's worth billions for us.

Security.se is one of my fav designs

But unfortunately for you, it would never been affordable at that price

@AviD I read it....that way I can have a leg to stand on when the ole lady yells at me for screwing up something in the wash....

4:36 PM

BTW @jin, did you ever ask Stack team to host your election tool?

@Mvy no? i normally am not involved with our dev process

oh btw @AviD maybe you can contribute some design ideas on meta.judaism.stackexchange.com/questions/384/…

@Jin will the t-shirts (new ones) be available on the stackexchange store at some point?

4:58 PM

@Ninefingers eventually. but we'll send them to our top users in the near future for free

we send swag packages to the top users on the first 2 pages of /users page, sorted by rep, "all"

But the Security.se site is still fairly new since graduation, and the lower bound of the 2 top pages is only 598. so we may wait a bit for that number to go up some

5:19 PM

@Jin ok that's awesome. That said, I'd still be happy paying for a lion t-shirt on store.stackexchange.com.

@Ninefingers or you can get some rep up on security site 'n get it for free! :)

5:37 PM

@Jin I'm working on it! data.stackexchange.com/it%20security/s/95/…

2 hours later…

Hendrik Brummermann

7:45 PM

@Ninefingers, don't get too excited. They promised swags on gamedev, collected all the real names and post addresses. That was 3 month ago, still waiting...

Aww, I missed @Jin?

@Jin Sweet! Looks like I'm in line for one!

2 hours later…

9:35 PM

@AviD Running out of time:-)

Let me know when your blog post is up and |'ll get review in asap

@AviD They're grand ain't they:-)

@Jin Ooooh - liking the sound of this:-)

« first day (276 days earlier) ← previous day next day → last day (4596 days later) »

Transcript for

Sep '1118

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile