@AviD 7e0f5618564616ae06980184343b6fa4 - assuming first letter capitalized for proper noun.
Rainbow tables at the ready people!
I also didn't know until recently that Washington D.C. was in D.C. OK wait! Stop Laughing! What I mean is it is in the District of Columbia which is NOT a US state and so has no senators with a voice in the senate (although it has like fake ones however that works). So the irony of living in the capital is that you have no voice in government!
@AviD It's not an area I'm hugely familiar with, but I believe the idea of zero knowledge is that, as the verifier, you should not know the secret information - that is as the verifier I'm supposed to be able to prove an assertion to you, but not the secret data on which that assumption relies.
Because, as it stands, you could also prove knowledge of the secret information to others following the exact same scheme
@AviD I thought that was well placed sarcasm ;) I'm not entirely sure what it's called when both people know the secret and just want to verify they have it correct
There's probably a whole field of literature on it, but for this I must seek spiritual guidance from the bear.
@AviD Hey I got the CA one too! I've never been to the capital either but I wasn't very old when I went therefore super curious and somehow this fact has stuck with me.
@AviD It is to me - I always just assumed you were from Israel and grew up there. Hold on I'll check your wikipedia page...
@LvB I may have helped a citizen of the internet understand the workings of stackexchange, or, I may have prompted another angry rant about MODRATORZ ON STARKEXCHANGE and how comparatively we are 200% more evil than Dr Evil.
@schroeder indeed.. anecdotally I heard from a guy from a chinese company that they've had a pen test co. bail out on them already because of Wassenar problems..
@schroeder well the US have now defined their legislation to implement wassenar and it has a broad definition of the treaty element on "cyber" weapons
what I found interesting about the US changes, is that it applies to security software intended to hide from security monitoring software (anti-malware, etc.) which provides a large loop-hole
so, it appears that metasploit would be fine, as long as you aren't crafting a payload to bypass AV
@schroeder yeah there's some people taking it to be exploits mainly, and then there's this A-V angle but from what I've read it mentions "exploits" as a phrase and that catches a lot of things potentiall
@RoryAlsop yeah back in yesterday, conf. was good met various people, met up with Adi/Avi talk seemed to go ok (although not sure Devs in the room were too happy with the message...)
@schroeder oh indeed I'm not necessarily against it but if they're going to require licenses for moving pen test tools over a border they're going to have to get the regime in place sharpish to avoid really causing problems for the industry...
@AviD You're a father... did you ever celebrate n-th "how, what, why" question? Or don't you think that it's really your good answers that should be celebrated?
@SteveDL Possible problems: bug in gdb, stack is clobbered and gdb can't sensibly work it out, very early termination of the program. One thing you could do is get the program itself to do it: stackoverflow.com/a/77336/257111 if using glibc
I'm going to guess the stack has been clobbered, since you've got an invalid memory signal.
Another thing to do is to print the stack starting from esp/rsp and see what's around
check if you see things that look like pointers backwards. If you see them, try printing those pointer values asking for symbol resolution.
I hate memory corruption bugs.
@RоryMcCune as a dev I am happy with your message.
I regularly wget and exec random bash scripts from the interwebs.
But it's ok because the website they're on says "trust me this script is totally legit just run it as root there's no problem!"
