The DMZ

Rоry McCune

16:00

@kalina who doesn't love Tenacious D!

kalina

I think I'm just going to stop saying "who" or "what" and just be silent whenever you bring something up like that

AviD

@RоryMcCune I thought that was tennille

Rоry McCune

@kalina seriously ... you don't know who tenacious D are?

writers of the greatest song of all time?

I don't have a link to the song itself

kalina

I feel like you're expecting me to know this person

Rоry McCune

but here's the tribute

►

AviD

16:02

@RоryMcCune which ones that then?

Simon

I can't believe how mean you guys are to me when you clearly know that I'm dying of this cold.

Rоry McCune

@AviD they tell you about it in the tribute

stars Dave Grohl as the devil

AviD

@kalina "person"

@RоryMcCune ahhh

Rоry McCune

@Simon also that's a YT link with decent quality

Simon

I'm glad that my taste of music has involved with time, unlike grandparents here.

@RоryMcCune 480p is decent quality for you? I dunno how I managed to not burst in laughter.

Rоry McCune

16:05

@Simon oh yeah

I assumed with it being VEVO

that they would've uploaded better quality

huh

AviD

heh. I got a coldcall marketer email today, wanting to sell some fraud detection to Stack Exchange.

Had trouble reading my linkedin profile, apparently - looks like he mixed up the titles and the companies.

Simon

Should have told him that you were very interested in his product.

kalina

hey guys, let's listen to music off youtube, recorded at 128kbps using a microphone capturing a source from across the street

PROPER CD QUALITY

AviD

not everyone can hear the difference

not everyone wasnt in artillery

kalina

not everybody can hear the difference

unfortunately

those people still want their opinion to be heard

if you can't hear the difference then surely you're ill fitted for commenting on the subject

EVER

AviD

16:17

@kalina not about sound clarity, no

kalina

no, I went off into a rant for no reason a tall

ignore me

Simon

@AviD You can easily hear the difference when you're listening to bad quality.

AviD

of course, that has little if anything to do with quality of content.

@Simon no, YOU can.

kalina

sure it does

high quality content recorded bad is bad quality content

AviD

it has to be very bad for me.

Simon

16:18

Properly done 192 kbps vs 320, now not everyone can hear the difference.

AviD

@kalina that makes no sense.

kalina

you can't show me a video of "the best thing ever", recorded at 32x32, and expect me to appreciate it

AviD

according to this, as long as he uses proper equipment, Justine Bieber is a superb artist.

Rоry McCune

@kalina "at all" BOOM :op

kalina

@RоryMcCune a spelling mistake is not the same as misuse of you're/your/you are

AviD

16:19

@kalina you are unable to ignore the trivial, and focus solely on the content?

Simon

@AviD It does make sense. I can convert a 128 kbps to 320 file, it won't make it sound better.

kalina

@AviD sometimes, if the quality is 90% and not lower

Rоry McCune

@kalina actually in that case it did, I was just about to edit the typo :op

AviD

thats like saying "This steak is disgusting because its on an ugly plate."

kalina

@AviD are you able to watch a rip of a blockbuster movie recorded with a camera phone?

could be the best movie ever

the recording you're showing me is terribad to the point where the movie isn't what I'm seeing

AviD

16:20

that would not be enjoyable, no.

kalina

if somebody says to me

"check this track out, it has an awesome bassline"

AviD

but if it was short enough, I would be able to stand it long enough to have an opinion on "is it the best movie ever"

kalina

and then links me to a youtube video with everything below 200hz missing

I wouldn't even listen to it, because it's a waste of my time

AviD

@kalina but noone here said that

kalina

@AviD the overall principle is the same, though

AviD

16:21

tenacious D is not about the clarity of sound, or the quality of bassline.

no, because youre missing the point.

kalina

oh noes, kalina in missing the point shocker

AviD

hehe

kalina

#careface

Simon

@AviD Oh yeah? It's not about the quality of the production? What is it about then?

I don't make any sense now that I'm dying of this cold /cc: @Iszi

Rоry McCune

@Simon that implies that you usually make sense....

Simon

16:27

I knew someone would say that, damn it.

Rоry McCune

@Simon it was the obvious shot

Simon

I guess the only thing I can reply to this is:

pls

AviD

you're an obvious shot.

Simon

10/10

kalina

@Simon you're not dying but the cold has allowed you a new perspective on how the rest of us see you it seems

must be a Point of View cold

David Freitag

16:32

I love it when clients have issues with my software that I can't reproduce

kalina

You can't reproduce

Rоry McCune

@kalina are you channelling simon today?

Simon

10/10

kalina

I've just tried to google whether it's s/can\'t/shouldn\'t/ or s/can't/shouldn't/

and then I realized: I don't care

David Freitag

It also doesn't help that they speak dutch and I don't

kalina

16:34

@DavidFreitag just "mijn nederlands is niet goed" and then "engels?"

David Freitag

@kalina Nope, just very broken google translated english

I hope I don't need to call these dudes.

kalina

@DavidFreitag well then follow up with ENGLISH mellow lover. DO YOU SPEAK IT?

followed by "say what again..."

David Freitag

@kalina Alas I am not a large angry black man. That won't really work out for me.

AviD

10/10

kalina

that's racist

AviD

16:36

@DavidFreitag "I am not a large angry black man, but I have one in my pants"

kalina

and my name isn't Alas

AviD

@DavidFreitag that is unacceptably crude

Ohnana

@AviD ?

David Freitag

@AviD I would say it's a bit early to be hammered, but it's probably like 8pm there right now.

kalina

McDonalds new advertising campaign: THE D: I'M LOVIN' IT

David Freitag

16:38

starbait

kalina

shameless

David Freitag

There is a very angry person posting in the Arduino developers mailing list asking about things he could get the answers to in minutes of googling.

TildalWave

@DavidFreitag Or ask on Arduino and have it googled by others

David Freitag

@TildalWave These are questions I (mostly) readily know the answer to.

TildalWave

Most are also readily googleable before they existed on SE

David Freitag

16:47

Also, he is asking about very specific implementation details. I doubt the people on Arduino.se would be able to answer just as the Arduino forum goers had no idea

kalina

I want to do <this extremely complex project> but I don't want to work out how this platform works - make it for me!

David Freitag

lol, nice @Rory

Rory Alsop

@kalina - fixed that for you :-)

@DavidFreitag thank you. I'm here all week.

Simon

wat

AviD

@DavidFreitag huh, what did @RoryAlsop do

kalina

16:49

@RoryAlsop psh

Simon

There's no edit history! Blasphemy!

David Freitag

@kalina No more like "How is USBCore implemented" or "Is there some doc available for this or that"

kalina

@AviD he successfully evaluated that calculating the mass of your mother is a futile task

TildalWave

@AviD chat.stackexchange.com/messages/19895238/history

AviD

ahh spotted it. how did @DavidFreitag?

David Freitag

16:50

@AviD Eagle eye. Also, editing it pinged me.

kalina

@AviD it would have pinged him

Simon

o

TildalWave

@AviD it was a reply to him?

AviD

@kalina hehe

kalina

what kind of moderator doesn't know how the system he's moderating works

AviD

16:50

OKAAAY I GOT IT

kalina

oh right, literally EVERY SINGLE SE MOD

4

Simon

@kalina LOL

AviD

jeez louise, you dont all need to jump on me

TildalWave

@AviD so we should jump one at a time?

Simon

Dibs!

kalina

16:51

@AviD I couldn't jump on you, you're so fat that I just can't jump that high

AviD

maybe I didnt actually BOTHER LOOKING WHO IT WAS A RESPONSE TO

@Simon lol

@Simon youre a dibs

Simon

0/10

AviD

@kalina thats not fat, babaay

TildalWave

what is a dibs?

kalina

@TildalWave calling shotgun for children

David Freitag

16:52

@TildalWave It's an imaginary candy. Kinda like unicorns.

AviD

Dibs

Calling "dibs" is the American English term, also known as "Bags" in the Australia and New Zealand, and as "Bagsies" in UK and Ireland, for an informal convention where one declares a first claim to something to which no one else has a clearly recognized right. Calling "dibs" or "Bagsies" is only possible when the caller wants the responsibility of the object. It is important to note that it is not possible to "undibs", if the caller wants to. Such a declaration is often recognized in certain cultures, or sub-cultures, as a means to avoid arguments over relatively trivial issues although can be...

TildalWave

wot?

David Freitag

I prefer to call chewey.

AviD

@DavidFreitag I prefer to call ghostbusters.

@TildalWave urbandictionary.com/define.php?term=dibs

Simon

If a donut's acting strange, who do you call?

kalina

16:53

@AviD poor scientists, and that's confirmed

David Freitag

Because apparently Chewbacca will tear your arms off and beat you to death with them before you get a chance to use your shotgun.

kalina

I am immune to all imaginary creatures, whether that's Chewbacca, the tooth fairy, or Jesus.

Simon

Or your mom.

TildalWave

@AviD syntax error: illegal call at line 1

kalina

my mom is not imaginary, I only wish she was

Simon

16:54

o

David Freitag

@Simon Or your face.

AviD

@kalina how about @Lighty's gf?

David Freitag

@AviD His hand is imaginary?

Simon

@AviD 10/10

kalina

@AviD that depends on whether @Lighty is @Simon or not

Simon

16:55

wat no

kalina

I'm almost convinced that @Simon might actually have a girlfriend

in which case, so would @Lighty

AviD

@kalina noice

Simon

wot

David Freitag

Pics or it never happened.

TildalWave

@AviD she imagined @Lighty just so someone would claim to date her?

Simon

16:55

I suspect that posting a picture of her in here would be a bad idea.

AviD

@TildalWave oo that would be a shyamalan twist

David Freitag

@Simon No, it would be a terrible idea.

TildalWave

@AviD wot?

AviD

. youtube.com/watch?v=hksKLHt9Kzg

Simon

pls

AviD

16:56

not nsfw, despite the pic

Simon

Some people are working here.

kalina

@Simon er

David Freitag

@AviD Yeah but the thumb makes it look suspicious, and that's all someone needs.

kalina

basically fatal violation of privacy tbh

Simon

@kalina wat

Rоry McCune

16:57

@kalina not if it was a picture that was already in the public domain

kalina

she should totally break up with you just for the fact you admitted there are pictures of her in existence and because you considered uploading them to the internet

Simon

^ (referring to unpingable)

kalina

you're clearly a weak link

AviD

@DavidFreitag hey I dont know what the thumbnail pic will be before I paste it

hows that?

David Freitag

If I didn't refuse to use facebook I might try to stalk you and her.

@AviD You didn't have to change it, but now I don't have to keep changing tabs

kalina

16:59

@RоryMcCune well, if the picture was already "out there", he'd still be guilty of adopting the position of PR without approval

TildalWave

@AviD when that dude said "look, your movies are based on twists..." I really thought he's gonna say "twitter"

Simon

@kalina I'm not you, people who love me aren't ashamed of it.

Rоry McCune

@kalina s'that a serious crime then?

kalina

@RоryMcCune sure is

AviD

@Simon OH SNAP

kalina

17:00

even the most innocent of person will make mistakes when confronted by the press

Rоry McCune

@kalina riight what if your proud of something your better half has done and then post it?

kalina

the press don't care about your rights, they care about pressuring you into making a mistake and then make a living off it

Rоry McCune

and it includes their image

kalina

@RоryMcCune still no

Rоry McCune

@kalina well just as well my missus doesn't see things that way, fairly sure I've posted videos of her on here

AviD

17:03

@RоryMcCune thast different. She is a public figure.

"public figure" == shes not embarrassed to go out in public.

Simon

^lol

@RоryMcCune But does she even lift?

Rоry McCune

@AviD heh but if someone posts a picture on a public site, then you could equally argue they're not worried about it being public.....

AviD

@RоryMcCune I wouldnt assume cognizance

Simon

That's a word? Cute.

David Freitag

@kalina Oh come on, it's not like we're a bunch of creepy internet people whom @Simon has never met.

AviD

17:08

@Simon @RоryMcCune see ^ ?

Simon

@AviD There are a lot of words that are missing to my vocabulary due to my Frenchness.

Rоry McCune

@AviD obviously it's context dependent, lack of knowledge of privacy features on facebook leading to a picture being publicly available is obv. different to posting your picture on your own blog.

AviD

@RоryMcCune no no, I didnt mean of context, or of how facebook works. I meant that for most people, I do not assume they are even aware of what they are doing.

Rоry McCune

@AviD pretty difficult to act based on an assumption that everyone posting info. on the 'net didn't really mean to do it...

2

raz

What's a fox say?

David Freitag

17:43

Ah, yes. Love me 'dat full belly.

Kisunminttu

@DavidFreitag That is indeed what a fox would say

David Freitag

@Kisunminttu With a british accent an a monacle.

Kisunminttu

5

David Freitag

:D

Rоry McCune

@Kisunminttu nice

Kisunminttu

17:45

... am I the only one who can't see the picture?

David Freitag

@Kisunminttu I can see it

Simon

@Kisunminttu Yep.

Kisunminttu

Interesting...

Rоry McCune

@Kisunminttu the shark one, I can definitely see that.

kalina

@RоryMcCune the problem is, I would be more "open" and "myself" around people I know weren't just going to blurt out whatever it is they know about me at the first opportunity

there are many things that others just don't need to know

words escape me

I wouldn't have an issue with somebody taking a picture of me rolling a j but I would have a rather large issue with most people seeing that picture

so it's easier for it to not exist in the first place, preferably

David Freitag

17:55

Sometimes it's nice living such a mundane life. There isn't really anything about me that I really feel the need to keep secret

Rоry McCune

@kalina indeed I was talking about images that you yourself had already made a conscious decision to make public. To me if it's unambiguously public (e.g. a security conference vid on youtube with your name against it) then reposting is just fine

Ohnana

@RоryMcCune that's a decent way to look at it. private is private, public is public

Simon

And c is for cookie.

schroeder

@DavidFreitag When there was a big concern about certain plastics leaking hormones into food, my wife and I decided to try to challenge ourselves for a month to only eat food that had never touched plastic (simply as an experiment to try to find alternatives) - it proved impossible. We found that we couldn't go a week without being forced to obtain food that at one point had touched plastic

Rоry McCune

@Simon and we all know D is for ... Doughnut

Simon

18:01

@RоryMcCune Donut*

schroeder

that revelation was shocking to know how much we didn't have a choice - the same is true, I find, for personal privacy

Rоry McCune

@Simon is the star there to indicate that that's the wrong spelling and you know it?

schroeder

it's not that I have a life I want to hide, it's that I can't have the choice

Simon

@RоryMcCune pls

David Freitag

@schroeder I think I subconsciously came to the same conclusion so now I live life as an open book

Simon

18:02

@schroeder You're a choice.

Ohnana

@schroeder I don't know, I think I've done a good job of separating private from public

aka: I don't put things on the internet I am ashamed of

schroeder

@Ohnana but it's not about "shame" - it's about having the choice

Simon

@Ohnana What do you put on the Internet other than Rihanna lyrics anyway?

David Freitag

Oh snap.

Ohnana

@schroeder but I do have a choice. if I don't want someone do not know something, I make the choice to not tell them. If I REALLY don't want someone to know, I choose to keep it to myself

then again it also helps that I couldn't give less of a fuck about what people know about me. hmm.

schroeder

18:05

@Ohnana but you don't always have the choice to make that distinction - some things are public regardless

Ohnana

@schroeder can you provide an example?

schroeder

Sure - this very chat. There is already the understanding that anything done on the "Internet" is public, but that understanding is very, very new. I cannot use the Internet for anything private, as you yourself assume. But every word I type I must consider to be broadcast to the world and I have no choice but to talk to you (someone I do not know personally) using a megaphone

Simon

You're very new.

Ohnana

@schroeder what about services like tor? or encrypted communication?

schroeder

Tor is fractionally public, and all encrypted communication is public, too, just in cypher text

Ohnana

18:12

i wouldn't say crypto is public. You can see its representation, but typically the meaning is hidden

Rоry McCune

@Simon PHP'er for you to educate security.stackexchange.com/questions/80887/…

schroeder

@Ohnana yes, but the fact I did communicate, and who I communicated with, along with a potentially reversible representation of the content is all public

meta-data can be just as intrusive as specific content

I'm not donning a tin foil hat here, I'm just highlighting how much actually is public and this level of "publicity" is new in society

we can choose not to care, and that's ok, but we also need to recognize what we are choosing not to care about

Ohnana

@schroeder no, I understand your point. I've heard the "it's just metadata" too many times

TildalWave

> However, the requested information from the tables is not shown. Why, and how make it return results?

not an infosec problem

Ohnana

I guess I just don't want people to forget that there are other things in the world besides the internet, like paper diaries and talking to yourself

David Freitag

18:20

@Ohnana Which can also be read and overheard.

Ohnana

@DavidFreitag very true. but it's not indexable by a search engine

schroeder

diaries and talking to yourself are all self-focussed - the thought that speaking to 1 other person is now "public" is a new idea

"back when I was a kid ..."

Ohnana

@schroeder depends on how big "public" is

for public =1, it is. for public > 1, that's new

kalina

DMZ in "actually talking about security" shocker

Ohnana

like I said, crypto is a good way to whittle down your potential audience

David Freitag

18:23

@Ohnana Yep, and so is @Simon's mom

Ohnana

@DavidFreitag hey, i'm still waiting for his mum to be read into buffer so i can hash her

kalina

oh burn

David Freitag

@Ohnana Giggity.

kalina

he's not even here to see it

but if he was, he'd be burnt

Ohnana

@simon hey, i'm still waiting for your mum to be read into buffer so i can hash her

delayed burn

Simon

18:26

@TildalWave I agree.

@Ohnana nurd

Ohnana

@Simon you're not denying it

Simon

Denying what?

I've been saying since the beginning of the day that I'm dying of this cold, I'm not denying it.

Ohnana

also is the statement " we cannot predict an output for all inputs to a program" related to the halting problem, or is that another axiom? I think my brain wires are crossing

Simon

cc: ex-dad

schroeder

Helping Grandpa to the urinal: security.stackexchange.com/questions/80887/…

Simon

18:36

Sigh.

raz

2

Q: How to encrypt in PHP, properly?

How do I encrypt data in PHP, properly, using symmetric-key encryption? I'm looking for a solution that uses cryptography properly without making of the usual mistake. I have a message M and a secret S. In particular, it should use authenticated encryption, choose IVs properly, and generate th...

I think the real solution here is to not use PHP to begin with.

Xander

@raz Unfortunately, for many applications, it is far too late for that.

Ohnana

@raz /cough Drupal

TildalWave

18:53

You weren't pleased with the base64 suggestion from SO? What a shame. — Simon 18 mins ago

schroeder

@TildalWave base64? seriously?

Xander

@TildalWave I was amused by the weird use of "salt" in that example.

-9

A: How do you Encrypt and Decrypt a PHP String?

Take two strings. One your appropriate salt value and second is your original string which has to be encrypted. Now explode your salt value in two parts and concate both parts to both ends of your original string and encode it with base64_encode. In the decryption function first decode it with ...

Ohnana

@Xander translation: If it's a sufficiently complex process, it must be encrypted

Xander

@schroeder And the only time I've seen Base64 "encryption" recommended. cryptofails.com/post/87697461507/…

Simon

At first, I wanted to post something like "I'm surprised no one at SO suggested ROT13" but then I scrolled down and saw the base64 gem.

TildalWave

18:59

heh another successful push into self-deletion :)

schroeder

"it's not fun and games until someone takes their ball and goes home"

Simon

19:14

You're not fun.

schroeder

no, no I'm not :(

FYI, we engaged Rapid7 to perform web application testing and the consultant we got was very, very good

I'd recommend

Rоry McCune

@schroeder they definitely have some cool people, didn't know they did much on the consultancy side (I know them more from tools side)

Xander

@schroeder My impression last time I checked was that Rapid7 was also quite expensive. Did you find that to be true, or not particularly?

TildalWave

@schroeder <spam>!!

:)

schroeder

@Xander Oh, very expensive - but frankly, worth it

TildalWave

19:20

more spam!!

cue Monty Python

schroeder

easy to work with, professional, the report was very clear - exactly what we needed the engagement to be

Xander

@schroeder Ok, good to know. Sounds like it hasn't changed much, but also good to know they provide value for it.

Rоry McCune

@TildalWave yeah I'd pimp xXxx and Xxxxxxx in the US but they're part of the same group I work for so that would be even more spam

but I do genuinely think they have some cool people

Xander

@RоryMcCune Matasano?

TildalWave

@RоryMcCune It's OK I'm not complaining, I love me some good ol' spam with spam spam spam and spam

if you don't like spam, s/spam/bacon :P

Rоry McCune

19:23

@Xander well Matasano are part of NCC Group :) They have some really good ruby people

and of course they do the crypto challenges

which are on my long list of "rainy day" projects to start

TildalWave

lord save us!

Rоry McCune

@TildalWave hey I didn't say it

till asked

Xander

@RоryMcCune I've done a bunch of them. They're good fun. They were the motivation I needed to start writing the cryptanalysis toolkit I'd been meaning to write forever.

Rоry McCune

@Xander yeah they look like what I need to solidify some of my fairly shaky understanding of crypto fundamentals. times like this lack of a CS/math degree trip you up a bit

Xander

@RоryMcCune Yes, I know exactly.

Simon

19:26

@Xander Did you really just do a contraction of "I had"?

SORCERY!

Xander

@Simon I am nothing if not an artist with this language o' mine.

TildalWave

@RоryMcCune Do tell when you do start that "rainy day" project tho

some of us might wanna build an arc :)

Rоry McCune

@TildalWave heh

Simon

heh

Look, I spelled "heh" backwards!

Rоry McCune

@RoryAlsop and potentially others. humblebundle.com/books <-- Humble bundle of eBooks includes some interesting ones

although I'd obv. recommend not paying too much to avoid JavaScript and Python stuff!

TildalWave

19:31

@Simon now type 434 in your pocket calculator and turn it upside down

or 707

Simon

@TildalWave OMG! IT SAYS "TERRORIST"!

EVERYONE, @TildalWave IS A donut!

I edited that in case someone thinks it's true.

TildalWave

ah thanks, yes I'd much rather be eaten than waterboarded by morons

1

Q: 3G modem security/vulnerability?

Many people use this kind of internet and not much is known about its security. I would like to know more about current(2015) security vulnerabilities of usb dongles for 3G mobile internet. First question is about locating. Presume that modem, prepaid card and credit are obtained anonymously. If...

mobile

> Our system has identified this post as possible spam; please review carefully

OK it's a crap question, but what about it triggered the spam alarm while many others that actually included shortened URLs over product names in a single paragraph answers didn't?

Lucas Kauffman

►

TildalWave

@LucasKauffman completely SFW I presume?

Lucas Kauffman

@TildalWave 75%

Simon

19:42

You know what else is 75% SFW?

TildalWave

@Simon 25% pure cocaine?

Simon

No, my D you donut.

Rоry McCune

@LucasKauffman I linked that a while back... some people complained

personally I think his stuff is v.funny

and the vid is actually more SFW than the original

Transcript for