Whenever I design a firewall, I design tests with hping to test the rules with fabricated traffic to verify the rules (from the outside in) - I just had the idea of creating a "packet grenade" to generate all kinds of traffic inside out - different destinations, different protocols, etc to test exfiltration (specifically to test during a temporary firewall change). Do any of you use somethign similar? Has someone else done this?

@schroeder I remember a product discussed on the Packet Pushers podcast that was along those lines. It's main purpose was for load-testing network traffic, but you create any kind of goofy traffic you wanted to see how your devices would handle it. I'll have to think what it was called.

@Xander hmmm - load balancing .....

No more sugar at the office... com'on

Happy diurnal isomorphism

@M'vy ouch

Morning all

tips hat

^^

@RоryMcCune Morning

Morning

Morning

Anyone know what the Summerfest festival in Milwaukee is like? Looks like we might get to play there 2016... just working out how much we should want to go :-)

Ahh - that's nice...Cyanogen update for my 1+1 waiting for me this morning

@RoryAlsop all I know about Milwaukee I learned from Alice Cooper

@RоryMcCune that was actually the exact line I used as a response as well :-)

@RoryAlsop heh

@RоryMcCune classic :-)

@RoryAlsop No breaking issues with it detected yet. I got the update yesterday.

@RoryAlsop what @Rоry said, or what @Alice said?

@AviD What Alice said :-)

but that would have been funnier, yes

@RoryAlsop excellent, you remembered that whole set of lines?

@AviD I have seen that film many many times

I don't know the lines as well as Top Gun, for example, but it's right up there

its been a few years for me... I think its time to watch with my kids

@AviD yup - we were discussing this a couple of weeks back - it's time for the kids to be Bill and Ted'ed and Wayne's World'ed

ah mine have seen Bill'n'Ted a few times already

"I'll just tell 'em what my daddy told me: you ain't never gonna amount to nuthin'"

(Faith no More)

they'd already about half the dialogue from me anyway... ;-)

@AviD My kids have not yet seen Monty Python, but know a lot of it from me too

we're all just a bunch of pathetic old fogies.

@AviD I can neither confirm nor deny that I just starred that.

And, I like Monty Python. It might be "old" but I'm not sure any of the "comedy" that was produced by BBC3 really holds a candle to it.

@Flyk clerks reference?

hey how did you suddenly become @Flyk

and not @kalina

@Flyk BTW Mornin'

:)

@RоryMcCune Linking a different account to chat.

The magic way of temporarily changing your name without having to wait a month to change it back.

@RоryMcCune did you not know kalina was flyk?

:-)

@RoryAlsop yar, but wasn't sure of the reason for the sudden name change :)

you're a sudden name change

Huh. So this is weird. @RоryMcCune my talk didnt get accepted to AppSecEU. Very surprising they decided to go another way.

@AviD lame! Mine did but Marions didn't :( I'm thinking mine hit the appropriate buzzwords and Marions (about ASP.NET) didn't

heh, buzzwords seems likely.

"Passwords" just isnt sexy enough.

@AviD Do a talk on buzzwords.

well, unless your password is actually "sexy", like a few thousands of others....

@AviD yeah maz' topic was good about the things that most people don't know about securing and testing ASP.NET , mine is about Node.JS and buzzwordy things

hahaha see there ya go

@AviD and at the end of the day there's waaay more ASP.NET apps out there than Node.JS

more that work, anyway

@AviD heh

hnnng

@RоryMcCune Yeah, but ASP.NET isn't webscale so they are gonna have to rewrite the apps in Node sooner or later anyway.

@TerryChia Thanks! It's not old news at all :D

@RоryMcCune kalina isn't chatting for a "month"

@Adnan-Adi so have you moved house?

I'm currently way too bored to not have something to do during the day

It's been a rough ride so far. Finally, I'm in a place where I feel I'll belong

@Flyk Ahh I C , so her alter Ego @Flyk is taking up the load

actually I wasn't going to chat at all

@RоryMcCune Yes I have. Now I live in the centre centre of Helsinki! Super cool

@Adnan-Adi nice better Internet?

and then the choice came between sleeping or chatting and I've already slept for 14 hours out of the last 24

@Flyk well you'll need to keep your energy up for the weekend gigs, it being Friday already

valentines Friday at that

@RоryMcCune Well, yeah, but the Internet I had in my previous city was very decent (10Mbps/10Mbps for free)

@Adnan-Adi yeah not too bad

@Flyk Is that you?

"yay", I get to entertain a bunch of overly loved up people for the weekend instead of celebrating my birthday

@Adnan-Adi I think so, yes

who were you expecting?

@Flyk although I'll wager that doesn't change the music much (I can't imagine lovey dovey happy/hard/jump - stlye/house )

@Flyk Another freak with a pony avatar

@Adnan-Adi :(

Dispatching ninjas to kill @Adnan-Adi

@RоryMcCune lots of vocal music this weekend

people like making out to lalas and rainbows and unicorns

@RоryM I feel now I actually live in Europe

save the hard beats until the early hours of the morning

@Adnan-Adi welcome to Europe, the best continent on the planet

Finland is almost not part of Europe

@Flyk I'd ask for an example but that'd be an OpSec breach so I won't :oP

The only European part is probably half of Helsinki

@RоryMcCune it wouldn't, but any example I gave you would still just sound like noise to you as you're not into the genre

A weird country

Now all I need is a sofa

@Flyk I like some of that kind of stuff, used to listen to dance music back in the day

I'm going to get a tshirt made with this on it, to reduce the number of misunderstandings I experience in real life:

@Flyk Or, you can just come to Finland. It's the population's motto

Finland is too cold for me

also: stop trying to get me within range.

When you're quiet, nobody will assume anything other than that you are quiet

@Adnan-Adi I wish everybody in life assumed that

I like the internet because I can chat shit for hours and it's just water under the bridge

@Flyk Finland is big

@Adnan-Adi not as large as the current distance between us

plus you'd have home advantage

@Flyk Fortunately

language advantage

@Flyk English?

no the language with all of the a and i abuse

@Flyk My Finnish isn't as good as you might think

Plus, what would the home "advantage" give me?

I guarantee it's better than mine

Oh, your username reminded me of Jysk. Good place to get the sofa

I don't know, this is just hypothetical nonsense

great, I'm glad I was of service to you this afternoon

get one in blue with a rainbow motif

I'm trying to find a black sofa

leather?

We already have a few in the office at my night job

leather sofas make hot and sticky awesomeness less awesome

remember that

by which I'm obviously talking about summer

Oh, god no. No summer activities on leather sofas

Always uncomfortable

But during summer when your leather sofa does get sticky, it's easy to clean…

Depending on your summer sport style, it can be quite easy to get friction burns on leather sofa

The floor is made of lava. So tends to be restricted to feet and hands

@Adnan-Adi yes

like I said, less awesome

oh and during winter they take forever to get warm and it's like you just sat on a sheet of ice

If you look for a sofa on the Canadian Jysk website, you'd naturally get this

Pretty normal

Now, if you go to the Finnish Jysk website and look for a sofa, the first results are these

I'll take the living room in the middle picture.

throws wallet at screen

That's the Finnish social approach

What "Hi I like you throws wallet at face"

@Adnan-Adi Those don't even remotely look comfy.

@Arperum They're comfy enough if nobody is gonna sit next to me :D

They look like chairs where someone threw curtain or some piece of cloth over them.

@Adnan-Adi I'd want a more comfy sofa, even when I'm alone.

I'm sorry, a sofa is a chair for a single person

single person = sofa

multiple people = sofa

more than multiple people = sofa + floor

it's like beds

@Arperum How can I be comfortable when there's a risk that someone might sit next to me?! HOW?!

for comfort these are good

amazon.co.uk/The-Mandalay-Recliner-Matching-Footstool/dp/…

160cm and weigh 50kg

massive bed that 10 of me could fit in

starfish in the middle of it

bed = taken

@Adnan-Adi See @RоryMcCune's picture, or just don't have random people in your house.

OR

take advantage of the size of the duvet

lay on top of the duvet, roll over repeatedly until duvet is re-purposed as a cocoon

@RоryMcCune Doesn't ship to Finland. Free UK delivery :(

re-position in the middle of the bed

@Adnan-Adi ahh shame

but hey, @RоryM According to my 5-year plan, I should be living in Scotland by 2019

@Adnan-Adi why does your five year plan have you moving to scotland?

my five year plan has me moving even further south

I suppose scotland is technically "south" for you

@Flyk the riviera?

@RоryMcCune actually I really like austrailia

@Flyk too many animals that kill you there for my liking

@Flyk I wanna live in an English-speaking country. I've always had a little crush on Scotland, and my last visit showed me how awesome of a place it is

it's one of the few places I've visited multiple times that I always feel bad leaving

and how awesome of a people the Scots are

Especially The McCunes

@Adnan-Adi heh Marions cooking does generally make a good impression :)

She's a magician when it comes to food

failing that... California

@Flyk Well, I'm glad Flyk turned up when kalina couldn't :-)

@RоryMcCune - did you see Drew McAdam's talk yesterday? About spotting liars?

I pinged him - turns out he's good mates with my lead singer. Of course :-)

@raz Don't you think that voting to close this meta question meta.security.stackexchange.com/questions/1716/… is a bit too meta? I mean, you'd close a question asking if something is too opinion based on grounds of being too opinion based? :D

@TildalWave Technically just to be internet nice, close the original with a passive-aggressive this is not a forum comment ;)

Sounds like voting on where we should vote…

hey @Flyk what have you done with our @Kalina?

@Nוnɛfוngɛrϛ or ... downvote and flag as low quality @RoryAlsop's answer because he didn't wait so we decide if that question is worthy of an answer :)

@TildalWave Plus a comment about modrators not setting an example and then rejecting our flag out of hand as invalid when it was valid and ZOMG FLAG WEIGHT HOW DARE YOU?

dooooooiiiiiiit

Followed by serial commenting on all SE links on HN about how SE is full of {X} where X is any valid permutation of "modrator", "nazi", "censorship", "evil", "probably the NSA".

@RoryAlsop well at least somebody cares

@Nוnɛfוngɛrϛ SE is full of many of these things

@TildalWave Flyk is the less kind version of kalina

also: my chat account is now associated with my Information Security account

I just accepted our new @Flyk overlords without question

rather than gaming

which is why the name change occurred

@Nוnɛfוngɛrϛ and requesting on [mse] we get a meta meta where you could ask about how to handle stuff on meta

what is HN anyway

and why [mse] shorthand doesn't work

@Flyk hacker news (news.ycombinator.com)

@TildalWave lol

@Nוnɛfוngɛrϛ right, that's why I don't know

@Flyk Best explained by this post: bradconte.com/files/misc/HackerNewsParodyThread

@Arperum That's amazing.

@Arperum funny there should be a link in the hot questions column next to it going: What is a German equivalent idiom of "the good, the bad and the ugly"?

I mean, it's definitely missing from the options there

@Nוnɛfוngɛrϛ looks too much like random internet comments

@Flyk I think that's the point

I see they added Meta Reviews to the list of review queues on the main site ... maybe that's why that question is getting close votes. Perhaps they should add a notification that you're now reviewing meta questions and they differ from main site reviews. Something like: "These are Information Security Meta review items. They're not the same as Information Security main site reviews in that we don't automatically close every new question and request OPs they repent and ask for forgiveness."

they've merged the queues between meta and main?

that seems like a terrible idea

it's just a link to meta queues

it might be a bit of a bad idea yes

I though Joel was well respected in the software industry and loved the user experience

that action is not the action of somebody who is given those merits

maybe it's just an experiment and they're all laughing their asses off reading our comments now?

nah it's a bit of a Lighty level mistake

but I don't care, I don't use SE

what I don't like is that clicking that link loads the meta site and if you do a few reviews there's no easy, single click way back to the main site... i.e. then the meta review queue should also have a link to main site review queues

once you get stuck in meta you remain stuck in meta

Hey @RоryMcCune, wanna feel sad? :)

@TerryChia uh oh

that's not generally an opening to something like cute kittens

@schroeder Here's the one I was thinking of: spirent.com/Ethernet_Testing/Software/Avalanche

I now have a silly amount of kit in my office. ... 2xadsl modem, 2x firewall, 1x24 port swtich, 1x wifi access point, 2x GSM network boosters, 1x desktop, 1x laptop, 1x NAS, 1x X64 server

I don't know what google chrome is installing when it updates, but it completes effes my nvidia module up.

This is the second update in the last 2 months that crashes my user session.

@TerryChia and it all runs on a network connection 30x slower than that

@RоryMcCune Heh. I'm not getting nearly that much in practical use though, powerline networking is really bad.

I get close to 90/90 to a server in my country now.

@TerryChia aww poor you :op under 100MBps

@RоryMcCune Heh.

Hmm wait, might be my switch limiting things a bit...

checks

no Gig switch.... tut tut

Yeah, my current switch is 10/100.

@TerryChia I got a nice 24 port Mikrotik managed gig switch

is cool

@RоryMcCune I have a lot of gear I want to buy but cannot justify buying. :P

@TerryChia yeah but if you can get 240Mbps down I think a gig switch would be in order...

@RоryMcCune I think the powerline is still the bottleneck though. Hmm.

@RоryMcCune Heh. I'm at 30/3 or something.

@JourneymanGeek Hey you. Any advice on powerline networking in a SG context?

I'm getting 98/18 at work.

Sure, no problem all, it's that easy to kill the chat.

@TerryChia: Avoid aztech, and that's about it.

I haven't tried the gigabit capable stuff, but I tplink or that korean brand are supposed to be better

then... get passthroughs.

@JourneymanGeek My 200mbps TP-link gives me about 60/60. My 500Mbps TP-link gives me closer to 90/90.

Oh

Is that the limit?

and get 500s or bettter

er... your tplink probably has a fast ethernet port

I'm actually getting faster speeds on wifi. :( Too bad it's too damn unstable around here to use.

yeah, that's the main reason I use homeplug between rooms

Ah well, 90/90 is still better than what @RоryMcCune is getting. ;)

I'm definitely gonna run ethernet ports to each and every room when I get a house.

nurd

@TerryChia: apparently newer flats have cat 5 already in place for phones

@JourneymanGeek I wanna go crazy with 10 Gigabit in each room. :P

@Arperum I'm at 3.2:1.6 now... stoppit you lot

@TerryChia 0_0

And I thought I was mad for wanting to experiment with teamed gig-e

@JourneymanGeek It'll probably be commonplace by the time I actually can afford a house.

heh

maybe

tho, there's not much that actually requires 10 gig

@JourneymanGeek A fast LAN can be useful.

@JourneymanGeek It's only for his e-peen.

@TerryChia: my backups take roughly 15 minutes.

At 10 gig-e my limitation would be my hard drive

@JourneymanGeek Heh. SSDs all the way down!

@TerryChia: they'd need to be pci-e or maybe sas

@JourneymanGeek True. :)

(work actually has 10gbe)

but we need it ;p

Yeah, 10gig-e is definitely crazy for home.

mechanical discs are so last millennium.

flyk fluk

You need expensive switches and cables.

(and its inside our server room, most other stuff is regular gig-e_

@TerryChia or know a good dumpster ;p

I'd settle for switching to myrepublic (tho, alas, I'd lose my ipv6, but I'd get static IP and MOAR SPEED), and having a decent cat 5e or cat 6 network backbone ;p

@JourneymanGeek M1 is getting pretty decent actually.

They even gave me an acceptable router now.

@TerryChia meh

I don't really need an ISP router

@JourneymanGeek It's a Asus RT-N56U.

XD

Pretty decent entry-level router actually.

Yeah, I have one of those

I also have a Dlink from starhub that's suprisingly decent.

I've not wanted to give it a viking funeral so far

The previous one they gave me was a shitty Huawei that I dumped in favor of a Linksys.

does need to reorganise his 2 routers and his switch

@TerryChia tempted to get a mikrotic.

@JourneymanGeek Me too.

price isn't too bad either

@TerryChia asus for life!

And sometimes when I get really crazy I get tempted to dump off-the-shelf routers for a custom x86 box running BSD.

@raz Really?

@TerryChia what?

@Simon For wireless anyway

@raz Oh. I guess I'll get an Asus router when I'll replace mine.

@Simon I've got the RT-N66U. Pretty badass

@Flyk 10 gig-e switches are pretty expensive.

And you need cat-6 cables.

@raz That thing is huge.

@Simon TWSS!

@Simon No its not

@TerryChia: I was experimenting with pfsense

it dosen't like my spare ethernet card tho

@TerryChia yeah, but if you can get everything configured properly it's awesome.

(the one that dosen't work well on anything)

@JourneymanGeek Yeah, pfsense is neat.

@JourneymanGeek Atheros chips ftw!

@TerryChia: pondering taking a chance on some reasonably priced, off brand intel based adaptors

@TerryChia I didn't mean to respond to you

nevermind, energy levels are failing me

@JourneymanGeek What did you install it on?

@JourneymanGeek Intel is pretty good, but IIRC some chips have iffy support.

Atheros is a safe bet for Linux.

BSD as well I think.

@TerryChia: Intels tend to be rock solid

@JourneymanGeek I've never had a problem with intel based adapters.

Even the cheaper ones have worked pretty good.

and some of the stuff I want to try out are intel specific

@raz: pfsense? old single core atom box, with a 100 mbps interface built in, and a dodgy realtek gigabit ethernet pci card

@JourneymanGeek I feel like realtek's nickname is "dodgy"

I've never had good experience with their cards.

their fast ethernet stuff worked for me

@TerryChia @Flyk Did you guys plan your date for Valentine's day yet?

@RоryMcCune Woah that's quite a lot of kit.

Double everything for redundancy?

@Simon Yeah, we'll be running you over with a truck.

Neat.

@raz I installed pfsense on one of the new alix boards. Works pretty well, but I use a local switch; not sure the actual pfsense would handle 1Gbps switching as they're realtek nics

pcengines.ch/apu.htm

Oh nifty

that looks pretty nice

When I say I use a local switch, I connect firewall to the switch, then everything off the switch

I can put 300Mbps through it, which is the speed limit on my connection

local network uses a netgear gig-e

@Simon heh, I don't have a date for valentines ;/

nor a date for my birthday ;/

nor will I even be available for either of those things ;/

^ COME ON @TerryChia

most of all, no birthday sex

o

woe is me

might as well just quit now

@JourneymanGeek It's pretty good. It doesn't have vga output either so you feel pretty rad with serial consoles and stuff

Or, if you're me, you like it mostly because it has no fans, so makes no noise.

Did you guys watch The Imitation Game?

@Simon not yet

It's great.

I need to find a place to see it in English though

Those are not common in France I assume?

@M'vy Le Joeux d'imitation

@Simon no they translate everything and the dubbing looks really bad

Montréal is pretty damn cool for that, it's very easy to watch a movie in either French or English.

Le jeu d'imitation. But in fact, they put : "Imitation Game" on the ads.

ffs I always say "see a movie".

@Simon I'll have to see it

@Flyk me neither - I'm gigging. Claire is staying at home with kids/dogs/babies