The DMZ

Terry Chia

01:42

@Xander Elixir may fit the bill. :)

Terry Chia

04:04

Welcome to my presentation, "InfoSec: Why Everything Is Broken, Security Is Impossible, Your Job Is Pointless and Everyone Hates You."

Tweeted by SwiftOnSecurity on March 7, 2015 at 4:01 AM

Adi

08:28

I just got an email from somebody linking me this. Some website owned by a Dutch company claiming to be "The world most private search engine" has plagiarized one of my answers on Sec.SE and used it in their support pages.

What should I do?

ooor, should I do anything?

Terry Chia

08:46

Goddamn I realize I did not save my old Windows 8.1 license key anywhere and I have lost my access to Dreamsparks because I am no longer a student...

Journeyman Geek

@TerryChia is the system with it still running?

Terry Chia

@JourneymanGeek On my brother's computer, yes.

Journeyman Geek

Also, iirc you have access to dreamspark for 2 years after you graduate

Terry Chia

@JourneymanGeek My account is locked though.

Journeyman Geek

Try a key recovery?

Terry Chia

08:47

The keys are perpetual, but only if you write them down.

Journeyman Geek

Ya. I email myself mine :p

Terry Chia

@JourneymanGeek Any concrete steps you can point me towards?

Journeyman Geek

Er. Will check

Mine's on 8.1 so I have no clue if the key is the same

Rоry McCune

09:47

@TerryChia have you tried nirsoft.net/utils/product_cd_key_viewer.html

Journeyman Geek

heh

Rоry McCune

if what you're looking to do is recover the product key used, something like that should do the job...

Journeyman Geek

I was trying that but can't find my current keys

I can't remember if upgrading to 8.1 changes the install key

Rоry McCune

@Adi FWIW I think SE sites get copied quite a lot, not too sure if they bother going after the copiers...

@JourneymanGeek I wouldn't think it would (as you can install 8 then upgrade to 8.1 for free) but it might I guess

Journeyman Geek

Yeah

Terry Chia

09:54

@RоryMcCune Oooh handy.

I'll give it a go.

Rоry McCune

@TerryChia nirsoft actually have quite a wide range of handy little utils...

Terry Chia

@RоryMcCune I wouldn't know. I have not run Windows in a long time. :P

Rоry McCune

@TerryChia heh

Terry Chia

If it's not for my gaming itch I wouldn't still.

Journeyman Geek

They do

Adi

10:03

@RоryMcCune I tweeted them. Let's see what they'll say. Probably nothing, but I still wanna know

@RоryMcCune I used it once to recover my Windows 7 key. Works like a charm

Terry Chia

10:17

This is very disappointing: greenbot.com/article/2893013/…

Journeyman Geek

10:34

That went well

Terry Chia

11:09

Mark

16.5k 4 41 68

I have not paid attention to this user. Nice rep gain in a year!

ManishEarth

blog.ndrix.com/2015/03/security-toddler-vs-phone-lock.html

lol

Adi

@TerryChia Whoa! 2nd after Thomas this year

Impressive

THE ASSOLE!!

Terry Chia

@Adi Have you seen his name much in the review queue? That's an area of the site I don't visit much anymore.

Adi

@TerryChia I don't remember. I've had only like 40 reviews this year

but I have seen very annoying reviewers recently

Rоry McCune

11:28

@TerryChia LOL android

Terry Chia

@RоryMcCune My first reaction.

Terry Chia

12:15

Can people with rep upvote this synonym? security.stackexchange.com/tags/random/synonyms

Flyk

@Adi scream loudly until a moderator reports it to SE?

Adi

@TerryChia You got it

Journeyman Geek

12:36

@Flyk naw, we get issued earplugs for that

Flyk

earplugs don't work against floods of text based whining

Journeyman Geek

See, that's what they want you to....

Oh carry on

@Adi: hm, has the scraper followed proper attribution?

Flyk

no

no attribution at all

they're using one of his posts in their FAQ pages

Adi

@JourneymanGeek Not a scrapper

Flyk

this isn't "normal" scraping

Journeyman Geek

12:38

Ahh

Adi

@Flyk yup

Terry Chia

Back on Windows. This feels weird.

Flyk

best os

Journeyman Geek

Windows 8? Yeah

Terry Chia

Is there a way to configure a local password for authentication now? I don't really want to type my email password every time.

Journeyman Geek

12:40

its odd till you get used to it

Flyk

@TerryChia you've always been able to do this

Journeyman Geek

@TerryChia: You can just set up a local account

Terry Chia

@Flyk @JourneymanGeek Ah cool.

Journeyman Geek

or convert a MS account to local

Terry Chia

@JourneymanGeek How? :P

Flyk

12:41

You'd think a linux user wouldn't complain about an option only being two screens deep, especially since you spend most of your time buried in config files.

Journeyman Geek

(tho, my MS account uses my gmail email address and a different password)

Terry Chia

@Flyk I'm not complaining. I literally forgot how to navigate Windows.

Flyk

so you bring up charms

click change pc settings

Journeyman Geek

lmgfy....

winsupersite.com/windows-8/…

Flyk

go to accounts

click other accounts

click add an account

click "non microsoft account"

fill in stuff

click some buttons

Terry Chia

12:42

^ See, this is why I don't bother Googling.

Adi

@Flyk He wants to convert his current account

Flyk

pull some levers

make me a coffee

and then done!

Journeyman Geek

@TerryChia: heh, I had a wierd bug with my stream which needed me to go from a MS account to local and back

Adi

I should really become a coffee drinker

Journeyman Geek

Now, If I could work out what to do with 25 dollars in MS store credit...

Adi

12:44

I see how all my coworkers enjoying the coffee made by our super expensive coffee machine

Journeyman Geek

lol

@Adi: our coffee is made with 2 metal cans, one with holes.

BEST COFFEE

Flyk

@Adi well that's basically the same process except instead of clicking add an account you click disconnect

what I really want to know is why this new usb 3 external hard disk I bought is so slow

actually I don't, I'm going to go out and it will be slightly more complete when I get back

Terry Chia

@JourneymanGeek @RоryMcCune Btw, 8.1 keys don't work on 8.0 ISOs.

Journeyman Geek

@TerryChia ugh

Rоry McCune

@TerryChia interesting

@Adi even if you don't actually like the taste of coffee you can still like coffee just add stuff to it till you like the taste :)

Journeyman Geek

12:50

Granted

I think by the time I do my next full build, it'll be windows 10 or the one after that

this PC's only 2 years old (kinda)

Adi

@Flyk How are your drones going?

Terry Chia

@RоryMcCune Do you install everything with chocolatey?

Rоry McCune

@TerryChia Personally I don't use it, not a big fan of the untrusted repo concept... I use ninite for some apps

Terry Chia

13:05

@RоryMcCune Mmm ok.

Terry Chia

13:23

Now to start the long tedious process of copying data.

Journeyman Geek

@TerryChia: heh, I tend to just have that in one place and share them over smb/windows file shares

Terry Chia

@JourneymanGeek I sadly don't have a machine I can use as a file server atm.

Journeyman Geek

@TerryChia: My current primary file server is my gaming rig, tho I have a copy of my music on my brix

Terry Chia

@JourneymanGeek I literally only have one machine that isn't dog slow at the moment.

Journeyman Geek

The brix also hold stuff I just downloaded and may not keep

Terry Chia

13:34

New hardware isn't my priority at the moment.

Journeyman Geek

@TerryChia: Fileserves don't need to be dreadfully fast ;p

Terry Chia

@JourneymanGeek They need sizable disks though.

Journeyman Geek

@TerryChia: hm. I guess

My last file server had a 250gb and a 320gb disk, a 1.6 ghz single core atom and various spare parts from all over ;p

Terry Chia

Plus I don't have anything with a PCIe slot I can stick a HDD into besides my desktop.

Journeyman Geek

boo

Terry Chia

13:36

@JourneymanGeek That won't work. My movies and TV show collection is a little over 1.5TB atm.

Journeyman Geek

(Just saying moving files is ... not always the best option)

Terry Chia

Oooh, switching back to Windows means I can use foobar2000 again.

Journeyman Geek

BEST MUSIC PLAYER

(and I mean this unironically)

Terry Chia

@JourneymanGeek Exactly.

Journeyman Geek

(I use it with wasapi and an external sound card)

Terry Chia

13:38

It was honestly the one thing I missed when switching to Linux a few years ago.

Journeyman Geek

lol

Its the one thing that kept me on windows other than gaming

Terry Chia

You'd expect Linux to have a music player as configurable as foobar2000 but no.

Journeyman Geek

(granted, i currently have two systems)

eh

closest thing I could find was deadbeef

but its not quite there yet

Terry Chia

@JourneymanGeek Aye.

Journeyman Geek

runs a pretty stock instance of foobar, just autoscrobbing and ASIO or wasapi support

Terry Chia

13:43

@JourneymanGeek I go all out with tedgo.deviantart.com/art/DarkOne-v3-1-187628705

Journeyman Geek

@TerryChia: I tend to have it running in the background anyway ;p

Terry Chia

@JourneymanGeek I dunno, I have a weakness for pretty music players. :P

Journeyman Geek

I might get a new dac at some point

I'm more concerned with how it sounds than how it looks ;p

Terry Chia

@JourneymanGeek Both is good.

Journeyman Geek

I suppose ;p

Flyk

14:02

@Adi I broke it, lost interest, and at one point in the future I will either fix it or replace it

Adi

14:16

Whoa! The Euro will soon be valued at one US dollar.

Journeyman Geek

is that good or bad?

Adi

For the Yankees, it's good

For us on this side of the Atlantic, not so good

About 6 months ago, I was paying for an eBay order. It was about $50, and I paid something like 37 euros

Now, for the same order, I'd pay around 47

not cool

Journeyman Geek

ahh, ok

I've rarely thought about that

(by which I mean, I very rarely buy stuff, and usually by the time I decide to, I really want the thing)

TildalWave

15:32

@Adi but it also means we can be more competitive on export markets

Scott Pack

This is exactly why I've been pushing for the admittance of more sketchy countries into the EU. Yes, it makes our exports less attractive but it makes it much harder to travel.

This issue is also why I was hoping for Scottish independence. Their economy would likely have tanked for a few years until they were eligible to apply for EU entrance. Family Vacation Time!

TildalWave

Frankly Euro has been way overvalued for way too long and it killed a good part of the industry here, I'm for one glad to see it fall in price

@ScottPack That doesn't make much sense tho, you lose a great deal of sovereignty by not having your own money and having to barter with the other nations over it

We'd do a lot better without Euro, in fact we did a lot better without it. It all went downhill since its introduction.

That's what happens when the "big" players control its value and intentionally keep it overvalued.

And introduce legislation that makes absolutely no sense in your area because it was instituted before you even entered the zone, and even when you're in it you don't have much influence over it.

Scott Pack

15:50

@TildalWave Which part? There are at least 3 things you could be disagreeing with in that message.

TildalWave

@ScottPack heh, that Scotland should be independent (fine, I kinda wanted that too) and then enter Euro zone (that I disagree it makes sense)

there's other, better ways to enable your industry on foreign markets

Scott Pack

@TildalWave I was thinking purely from a selfish economic standpoint. Once they separated ties from the UK they would have (at least) 3 years of trying to make it on their own without collapsing in on themselves.

So they would have a minimum of 3 years of a completely independent fledgling economy.

TildalWave

@ScottPack They wouldn't collapse. UK needs them a lot more than they need UK.

Scott Pack

That's kind of my point. Once independence was declared we'd be looking at a 3 year clock.

Within that time they would A) Rock it on all on their lonesome. B) Beg for re-admittance into the UK so they could both survive. C) Join the EU and rely on that to prop them up.

TildalWave

@ScottPack Dunno what a three year clock is, that's something Scottish? :)

Because you only drink Scotch that's aged in multiples of three years?

Scott Pack

15:56

The EU requires an economy to be at least 3 years old before applying for admittance. If the Independent Scottish economy wasn't kicking ass within 3 years they'd be silly not to join up and help use that to keep things going.

Terry Chia

@TildalWave Sounds hipster. Sounds like something @AviD will do.

Scott Pack

In any event, things would be a little shaky for a while they convinced everyone else in the world that they were awesome which would make Scottish goods (and currency) cheaper. Which would make exchange rates with the USD good. Which would make it easier for me to travel there with the family.

TildalWave

@ScottPack Ah I didn't know that. I thought it's just a club that it is.

Scott Pack

So, in the end, my entire interest in the Scottish economy was how long it would be untrustworthy so I could know how to plan a cheap vacation with the fam.

@TildalWave The idea is that they don't want countries to join up that are already in economic ruin so it won't kill everyone else. A country who just yesterday sprang into existence is, effectively, already in economic ruin. They just actually have a likely path out.

TildalWave

@ScottPack You mean they can't rob them into ruins if they're already in ruins?

Scott Pack

15:59

Now you understand why I totally admit that my interest in Scottish independence was completely selfish. :)

TildalWave

aren't all interests selfish?

Scott Pack

@TildalWave Yes, that's true, but it's also worse. Let's say you personally have assets valued at 100 and debt at 50. Now you get married and your new lady (and/or man) friend has assets valued at 100 and debt at 150.

You now have a combined total of 200 in assets and 250 in debt. So your debt is now 125% of your total value instead of 50%. That's bad.

You can always steal more from them because, hell, they have 100 in things! But is it worth it?

TildalWave

@ScottPack erm no, 200/200

Scott Pack

Fuck. Bad math. Need moar coffee.

TildalWave

hehe

Scott Pack

16:02

I also changed those numbers 3 times whilst typing.

In any event, you're not at a wash instead of ahead.

TildalWave

Well my country is so small that even if we were in complete disaster with debts (we weren't) it would just be a tiny fart for the rest of EU. Sadly, it was a fart, but a big EU one and it now hangs over this same small country.

Scott Pack

Now let's assume you meet some hot young college co-ed. They don't really own anything but they have 150 debt. However, they're a double major in acting and Electrical Engineering. They both have the same debt but which one is more attractive?

TildalWave

Example. I live relatively close to a big paper mill. It had a good business and was even expanding. It was never an ecological problem. I ate fish from the same river downstream of it and I'm pretty picky with where fish are from. Then we went into EU.

Scott Pack

@TildalWave Sometime I'd like to sit down and really do a comparison of the US vs. EU in philosophy and structure. I have a suspicion that the EU is more in line with what the US was intended to be.

TildalWave

Loads of new environmental protection legislation (which we already had pretty strict one anyway) made the company nearly go bankrupt. So they had to comply, bought all the new (fking German!) equipment to filter stuff they already did before, lost on value and then another (fking German) came and bought the place cheap.

That, my friends, is daylight robbery through bureaucracy and pointless legislation.

Scott Pack

16:09

Let's start with point 1. So were the environmental protection laws more strict or covering different things?

TildalWave

And it's not the only case, it's just one I know really well.

@ScottPack didn't make sense

not for my country

Scott Pack

Sure, but it's an interesting use case to learn from.

TildalWave

we were and still are what these same f*king Germans call "the lungs of Europe"

Scott Pack

Tasty in a pie?

TildalWave

LOL

yeah, I guess so

we also have ONE nuclear plant, and it's built completely safe, just like the new ones in US that you're now building ... same design

and Austria constantly wants it shut down

why?

because they found new influence now since we're in EU

do they have a solution? no

so f* them

Scott Pack

16:14

Let's go back to the paper mill. So some of the protections didn't make since for your country. But was that because there were protections covering new things or they were differently covering the same items as before?

TildalWave

All the filters were in place since long, they might already have worked better than the new ones, but they were not doing that "in the approved way" (read: they were not built in Germany)

guess whose industry had more time to lobby legislators?

So all the legislation we had to abide to all of a sudden just to join that funky club of theirs nearly killed us.

Oh, one more funny anecdote. EU nearly sued Slovenia for not having enough pathways. That's ludicrous. We probably have the most in the world. But here's a catch. They probably didn't measure it right, because when I looked at a German map of my city, many pathways were marked as two way streets (because that's how they look like from the air, there's the pedestrians and the cyclists lanes)

And you probably won't find a nation that likes to walk in the nature more than people here.

EU is just retarded, sorry to say

They even made a law that all cucumbers should be straight. They must have been using them wrong or something.

Scott Pack

Non straight cucumbers can become stuck.

Terry Chia

Scott Pack

Fucking closed minded cis-cucumbers.

TildalWave

16:32

It's this "we're bigger than you so we know better" attitude. They know fuck all, they can't see the wood for the trees.

Gilles

18:50

4

Q: Linux Server Hacked

I received e-mails from Google saying that my websites are hacked. This is the e-mail. Dear site owner or webmaster of serenakern.com, We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information suc...

linux centos php plesk

Information Security still doesn't have a canonical “you need to reinstall” thread, does it?

(And no, “how do I explain to management” is not that)

Ah, yes

44

Q: How do I deal with a compromised server?

I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism: What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I pr...

system-compromise

AviD

20:50

@RоryMcCune wut? WTH is this craaaap?

and, a pin? someone hacked the pins.

the nerve, and ending it with a winky.

Rоry McCune

@AviD well you will go taking Friday off :)

@AviD it was pinned by popular request

AviD

heh

reading that now

its a shame, though, we'd finally perfected our groupthink work of art.

Rоry McCune

@AviD well it's still in the history

the wonders of the Internet, nothing is anything ever deleted

AviD

hehe funny transcript. @Simon tries to DoS a server antivirus, winds up DoSing his own.

typical scriptkiddie.

think there were a few apt infosecreactions for that.

Rоry McCune

@AviD I think there must be infosecreactions for most things by now!

AviD

21:01

@schroeder if you havent found the solution yet - check to see if there is some kind if system SP for that. I know in MSSQL (which has a lot in common with postgres) there is a system SP - and the logging / trace mechanism is hardcoded to NOT log the command if that SP is called in it.

thats a great way of avoiding logging on your attacks...

Rоry McCune

@AviD BTW have you tried OneNote On some of the other platforms (OSX/iOS/Android)?

It's really pretty cool

AviD

nope

Rоry McCune

the writing recognition stuff works quite well

AviD

hmm, might have had it once on mac.

Rоry McCune

and it's a good way to share info over different platforms

AviD

21:03

yeah onenote is awesome, just dont have much need for it usually

Rоry McCune

@AviD ah well you'd need to look again as they've just released Office 2015 beta for mac

@AviD we had a very geeky/nerdy use for it today which was doing handouts for our DnD (well pathfinder) game

AviD

heh

Rоry McCune

@ScottPack OneNote worth trying for sharing DM Notes/Handouts

@AviD easiest way to get data quickly from a Surface Pro 3 to some iPads

AviD

The math on why all hipsters look the same http://blogs.discovermagazine.com/d-brief/2015/03/04/math-hipsters-all-look-same

Tweeted by Sci_Phile on March 6, 2015 at 7:50 PM

@Gilles and a random tweet linking for @Gilles:

How is it we are closer to getting Skynet than we are to getting audio working in Linux?

Tweeted by kellabyte on March 7, 2015 at 7:08 AM

TildalWave

21:28

because only Skynet can make it work

Scott Pack

22:14

@RоryMcCune For sharing? I have no idea. I tried to get into using for my own notes and prep

@RоryMcCune I think all the features are there to be awesome but I had trouble figuring out exactly what workflow to use with it. In the past I used Evernote for all that stuff. Each Notebook was a section of the adventure, then a note for each night.

Rоry McCune

@ScottPack yeah instead of DM dictating more complex handouts, just copy/pasted from a word doc to a OneNote we all have access to

Scott Pack

Were you telling me it's worth it or asking?

Rоry McCune

@ScottPack I was more letting you know that it had worked for us, so if you're looking for ideas (especially for your remote group) could be worth looking at :)

Scott Pack

@RоryMcCune I had to just cancel it. I couldn't get enough reliable commitment. I only had 1 guy I could actually rely on to show up.

Rоry McCune

@ScottPack ahh yeah tricky one.. that tends to be the tough part as time goes by

Scott Pack

22:18

@RоryMcCune I did everything as Google events so I could get RSVPs but one guy never responded, one guy was a no-show half the time he said yes, one guy always responded reliably. Rest were hit/miss.

Since August we only actually had 4 sessions so I killed it a couple of weeks ago.

Rоry McCune

@ScottPack yeah tricky to try and run a campaign on that basis, there's just 4 of us but we've been playing regularly for like 20 years now (lord that's a long time when I type it out!)

Scott Pack

I wanted to get some of my previous groups involved but only one signed up and shortly after we started he killed his legal practice and moved 2500 miles to become a programmer.

What with having 2 kids under 5 it killed his ability to participate for the unforeseeable future.

Rоry McCune

@ScottPack yeah, life stuff like that definitely gets in the way of trying to get a regular game going!

Scott Pack

Stupid life.

Gilles

22:35

0

Q: CentOs LINUX Server CPU usage 100%

I have linux centos server and few days before it was working fine. But now my server is not responding. I logged into my server by SSH access and after analyzing the server I found a command which is running continues and writing commands automatically and as I terminate the current command afte...

linux shell-script centos linux-kernel

that's malware, isn't it?

I don't get what it's trying to do in /usr/bin

I thought it might be trying to rewrite itself in case its executable was deleted, but why put the executable in /usr/bin?

if it has root access, why not hide itself in the kernel?

Rory Alsop

22:48

@JeffFerland - is there anything at all in that question that is on topic?

Transcript for