The DMZ

Thomas Pornin

00:24

@SteveDL Try running it in valgrind. It may give you more information.

Otherwise, set breakpoints at different places (or printf() calls) to try to pinpoint the moment at which the crash occurs.

bjb568

00:42

@TildalWave Whyyyyy?

Thomas Pornin

@TildalWave Good answers are celebrated by reading them.

Steve DL

06:27

@ThomasPornin I suspect the crash occurs before ptrace is set because I've modified my libc. I need to find out how to check which symbols in my custom libc are mismatching my kernel API, I suspect

M'vy

07:12

Morning!

Rоry McCune

Morning All

AviD

@RоryMcCune well I would say it is inscope, though right now its just conjecture (the heinous laws havent been passed yet), but more interestingly would be how to deal with those laws. e.g. a safe way (beyond the q of what is legal) to transport your metsploit, and sensitive data in general, over borders.

in fact I think there was a question like that not long ago... some great answers too.

@Adi ditto. and on top of that @RоryMcCune bailed on the preconf drinks... I had to go stag!

I had to introduce myself to strangers! the horror!

Doooooo you know Avi?

2

@TildalWave asking a good question is often 90% of the work.

and having the courage to ask the question, is often all the effort .

so yes, I do celebrate them asking the questions, and I at least try to celebrate them persisting when I give them a half-assed answer.

Rory Alsop

07:47

mo'nin'

Lucas Kauffman

07:58

smorning

Rоry McCune

08:14

forum.bugcrowd.com/t/how-do-you-approach-a-target/293 - Interesting thread on how bug bounty hunters approach their targets

some good collatoral for InfoSec people telling management not to ignore the obscure ancilliary sites...

LvB

10:19

1

A: Is Google Chrome Extension access to SSL certificate validation output possible?

No, and it doesn't seem likely to be added as a feature. See https://code.google.com/p/chromium/issues/detail?id=107793#c20 I'm just deeply concerned about the code complexity cost here, which increases the opportunity for both performance and security bugs. - [email protected]

Is that a good awnser? or not? It does give the a short motivation on why but it is very short... any ideas?

Lucas Kauffman

AviD

10:44

-1

Q: Is the stereotype correct that hackers are more prone to viruses?

It is said that you have to take an equal recoil force to yourself(or there are many other examples) before firing. It is almost a stereotype that hackers can be infected more easily, because they keep viruses themselves and use unsafe connections that can transmit them. Someone(my computer teach...

WOW

and if a boy kisses a girl she gets preggers and he gets AIDS.

I dont even know where to start

screw that, listen to this instead (NSFW, audio only)

The Oatmeal on Dogs, Nazis, and Horses

►

Steve DL

@Rhino thanks, will try that. Pretty sure my libc is kaput though.

Rory Alsop

theregister.co.uk/2015/05/26/…

Interesting attack on physical location via unprotected accelerometer data

Rory Alsop

11:24

and ...wut?:

4

Q: How can I remove ants from my laptop keyboard?

There are ants in my laptop keyboard again. It's happened before and ended up killing my productivity occasionally as the little critters suddenly show up from within the gaps of the keyboard. I had to bring it over to my uncle and he got rid of the ants, somehow, but I forgot to ask how he did i...

technology appliances pest-control

M'vy

@RoryAlsop he means the java building system? oh... wait

Rory Alsop

I had to answer it

M'vy

@RoryAlsop here, have an upvote on me

Rory Alsop

@M'vy :-) thanks

M'vy

8

Q: How to dry out a wet phone?

I unfortunately dropped my aunt's phone in water. I didn't tried anything yet (I'm afraid of a short circuit). Is there a quick and cheap way to completely dry out the internals of this mobile phone so it will not fail when I turn it on? Phone: Samsung metro duos Condition: Dropped in 2 ft of...

technology water phone

^ that one is a classic too :P

AviD

11:31

Rory Alsop

@M'vy I have a feeling Lifehacker may be a wee timesink this lunchtime

@AviD very nice

Terry Chia

Developer Accused Of Unreadable Code Refuses To Comment

Tweeted by HackerNewsOnion on May 21, 2015 at 7:30 PM

M'vy

38

Q: How can I not hurt my fingers when using a hammer

Whenever I have to hammer a nail into something (the wall for a picture mount, a piece of wood for a project, etc.), I hurt my fingers when I slam the hammer against the nail. Even when I don't hit my fingers, I'm scared that I will. I've tried being more careful by not slamming as hard and not ...

safety hardware

^ ahah

AviD

@M'vy see, he's confused - he is hammering fingernails instead of construction nails.

M'vy

@TerryChia twitter author should be banned for using such font case.

@M'vy or HN author if applicable

Rory Alsop

11:42

@M'vy How on earth do these people survive? I think they don't need lifehacker.SE;

they need to learn where their body parts are

@AviD heh - I thought it was funny that line was starred...then I realised I starred it ;-/

AviD

hehehe

who's been going around starring my lines?

M'vy

@RoryAlsop future candidates to Darwin awards?

AviD

@M'vy oooo that should be a badge here.

Rory Alsop

@AviD or on Electronics.SE - there were a few questions there that received answer posts that could easily prove fatal

AviD

we should propose that to SEI as a custom badge for sites where relevant. perhaps awarded manually by moderators...

dang it all. was just about to publish the agenda for the next owaspil chapter meeting, and one of the speakers cancelled on me.

M'vy

11:47

@AviD the mod-part seems really non SE-wise. But the idea is still a good one ;P

AviD

not finding a last minute replacement.... anybody interested in giving a talk?

@M'vy well how else would it get awarded

M'vy

@AviD still thinking

AviD

@M'vy or perhaps X downvotes + Y favorites. that is a decent metric....

M'vy

If wanting to go deeper, there could be a manual award per user. If you reach enough, you get the badge

but that would probably be abused

AviD

nah, that doesnt sound healthy.

2

AviD

12:17

oh crap, is @RоryMcCune making a pinstory again?

Lucas Kauffman

13:11

afternoon gents

Rоry McCune

13:26

@AviD who.. me, would I do that... actually doesn't read too badly without pinning :op

@LucasKauffman watcha' see you missed your opportunity to school @AviD and @Adi on the finer points of Belgian beer

Lucas Kauffman

@RоryMcCune :(

Rоry McCune

@LucasKauffman I'm sure there will be other opportunities...

Lucas Kauffman

@RоryMcCune you didn't end up drinking heineken I hope :/

AviD

@RоryMcCune true, true

the preconf drinks were in a lovely bar, but seems they didnt have a great selection.

Rоry McCune

@LucasKauffman I had a duval when out with @Adi was the closest they had to decent beer..

Lucas Kauffman

13:27

@RоryMcCune Duvel is pretty good

AviD

I asked for something dark on tap, they had nothing. only local one they had on tap was a very blonde, which was okaay (but not great)

Lucas Kauffman

although a bit dangerous

AviD

same with bottles

Lucas Kauffman

@AviD normally they should have Chimay or Westmalle in most dutch bars

AviD

after the 2nd, I fell back to murphys... (only stout/dark ale they had to offer :-( )

@LucasKauffman why dangerous?

Lucas Kauffman

13:29

@AviD tastes like regular beer, drinks like regular and then it bites you in the ass

AviD

@LucasKauffman dont know about the westmalle, but no chimay. like I said, "blonde this" and "blonde that"

Lucas Kauffman

It's my beer of choice when drinking with Americans hehehehe

AviD

you would have like that

@LucasKauffman i.e. very strong?

Lucas Kauffman

@AviD yea it is very strong

AviD

they may have had that then, they offered me something "extra strong"

Rory Alsop

13:30

@AviD in principle, yes, however... location...

AviD

@RoryAlsop oh come now, it's no big deal, really

Rory Alsop

@AviD expenses

AviD

it's not like the moroccan authorities will keep you hostage for 9 hours so you miss half the competition

Lucas Kauffman

@AviD I still have some barley wines at home as well, if you like really sweet dark beers they're a must (18.5% abv tho)

Rоry McCune

@LucasKauffman when I had duvel we had one of @Adi 's friends with us and precisely one of them seemed to render him drunk

Rory Alsop

13:31

@LucasKauffman is Duvel strong? scottishrealales.com/vmchk/scottish-ales-and-beers/…

Lucas Kauffman

@RoryAlsop think it's 8.5% ABV, but it drinks like regular beer, so you tend to drink a lot

Rory Alsop

@LucasKauffman mmmmmmm

I do quite like it

but I do drink it like I drink Stella Artois

Like it's a soft drink

Lucas Kauffman

@RoryAlsop that's exactly the problem, oyu drink 6 of those

Rory Alsop

@LucasKauffman Ahh - the solution is to only drink a couple and then switch to proper cocktails

Lucas Kauffman

@RoryAlsop that seems like going from bad to worse :P

Rоry McCune

13:39

@RoryAlsop of whisky!

Rory Alsop

nahh - cocktails are always a good idea

@RоryMcCune I told you about the "Full Scottish Breakfast" cocktail I had on Sunday, yes?

Rоry McCune

@RoryAlsop I don't think so... did it involve whisky perchance?

Lucas Kauffman

Whisky mixed with the dripping fat of haggis?

Rory Alsop

Glenmorangie, Ardbeg, grapefruit juice, orange bitters, fresh lemon, sugar, egg white, BACON DUST, served with toast and marmalade

It was delicious

Lucas Kauffman

@RoryAlsop you had me at bacon dust

Rory Alsop

13:43

Inorite

@AviD -blog.erratasec.com/2015/05/this-is-how-we-get-ants.html

Lucas Kauffman

@RoryAlsop ever heard about the sourtoe cocktail?

Rory Alsop

After drinking that I was on a mission - and found Bacon Popcorn

@LucasKauffman yes....

I don't see the point - I drink cocktails that taste nice

Lucas Kauffman

doesn't tat look delicious?

Rory Alsop

.... nope

AviD

@RoryAlsop ah ah, you caught me

Rory Alsop

13:47

Oh, and had my first ever Vesper Dry Martini

Was nicer than expected

Lucas Kauffman

@RoryAlsop I keep it single, jackdaniels with freshly pressed limejuice poured in a frozen glass

for the summer that is

AviD

oh good point. I need to order beans for coldbrewing again.

aint nuthin like a frosty mug of coldbrewed coffee on a hot summer day for working despite the heat

Lucas Kauffman

@AviD how does coldbrewing work?

it seems to imply the coffee is never heated

AviD

@LucasKauffman indeed

Lucas Kauffman

@AviD do you need special beans?

AviD

14:01

soaks for much longer. in my case, I use a french press (full jug) for this, not the aeropress.

@LucasKauffman not really. because I'm using the french press, I do need a coarser grind. good idea to do a little bit extra coarse, if you have fine control.

my coffee guy does put out a nice mix of several kinds of beans, very summery, but not neccessary.

here's my recipe, if you want to try it:

> Use a large French Press carafe (1 liter) put 10 Tablespoons coarse-ground coffee, fill with cold water, let brew overnight in refrigerator. After about 12 hours, depress plunger and store coffee in clean pitcher. When ready to enjoy, pour 1/2 glass coffee concentrate over ice, then fill the rest with milk.

Lucas Kauffman

I need to get a french press

AviD

I usually still go black, though sometimes I will mix it with some whipped milk - or even a large dollop of vanilla icecream, for funsies.

comes out super smooth, full of flavor. lots of caffeine, but not bitter.

Rory Alsop

@AviD but it probably tastes of coffee, right?

AviD

@LucasKauffman you could just aeropress over ice cubes, use less hot water. I only have the frenchpress because I got it before the aeropress.

@RoryAlsop yeah, delicious coffee!

Lucas Kauffman

@AviD do I need to leave the aeropress overnight? Could do it if I do a reverse press

AviD

14:06

@LucasKauffman hmm. never tried it.

you should ask on Coffee!

Rory Alsop

my barista here has been trying to convert me - bringing me samples of lots of different beans as espresso when I come in early.

AviD

or experiment, and let us all know.

@LucasKauffman perhaps @Xander or @ScottPack know this.

@RoryAlsop oooo she must like you

Baristas are the Ultimate Male Fantasy

►

Rоry McCune

@AviD where's my "ban the mod" button :op

AviD

lol

cmon, you know he was asking for it

Terry Chia

@AviD Once you go black you never go back!

AviD

14:09

@TerryChia very true.

unless the black tastes awful and you still need the caff anyway.

Terry Chia

Goddammit no stars? @Flyk isn't around I see.

Lucas Kauffman

@TerryChia btw I saw something very disturbing the other day, I was looking to find the blogging tool you were using so I googled your name to find your blog and github

So I google your name and this is the second link:

I'm looking for a Girlfriend !

►

4

Terry Chia

@LucasKauffman Lmao.

Rory Alsop

@AviD I'm not sure that's how he feels about me

AviD

@LucasKauffman oh. oh wow. oh my goodness. @TerryChia did you lose a bet with @Simon?

or did you just take relationship advice from @Simon?

Lucas Kauffman

14:11

(that's not Terry btw)

Terry Chia

@AviD I don't think so, no.

AviD

@LucasKauffman of course it is.

Tinned_Tuna

Oh wow. That's something to behold.

AviD

although apparently it worked. @TerryChia did get a date out of that.

@TerryChia let us know how it goes?

Terry Chia

@AviD >< I hate you.

AviD

14:13

@TerryChia lol. of course you do.

hey, dont hate me, it was @LucasKauffman that dug it up.

Terry Chia

@LucasKauffman I'm using Jekyll btw.

Lucas Kauffman

@TerryChia Yea, I did find that out :P

AviD

besides, its not like your secret is that you were singing Canadian pop.

@LucasKauffman he mentions it near the end of the video.

Terry Chia

@AviD There's only one canadian pop song I know.

AviD

@TerryChia two.

Lucas Kauffman

14:15

which is?

Terry Chia

Robin Sparkles-Let's Go To The Mall' (full version).

►

Lucas Kauffman

what the

Terry Chia

@AviD Ah yes, two.

AviD

Let's go to the mall, and Sandcastles in the sand

dont forget the robot

Lucas Kauffman

I hate UDP scans

AviD

14:16

heehee, still makes me larf

Rory Alsop

I have no idea what these songs are that you are talking about

Terry Chia

Also, anyone all caught up on GoT?

Lucas Kauffman

@RoryAlsop you were already old by then proboably

Rory Alsop

Canadian pop is surely only Bryan Adams

AviD

@TerryChia NO NO SPOILERS

a couple weeks behind

Lucas Kauffman

14:16

@TerryChia NO

Rоry McCune

@TerryChia not this weeks, so no spoilers!

Terry Chia

I'm up to episode 4 only. Much less boobies than the previous seasons.

Rory Alsop

@TerryChia no- only seen episode 1 of this series

Lucas Kauffman

@TerryChia yea I know right, I was disapointed too

Rory Alsop

Less boobies? Hmmm - may stop watching...

4

Rоry McCune

14:17

@LucasKauffman --max-retries 2 --max-rtt-timeout 250ms --max-scan-delay 10ms --host-timeout 30m

Rory Alsop

How's the deaths score

Terry Chia

@RoryAlsop Not too bad, you get to see a flayed body or two.

Rory Alsop

Meh - my wife's a nurse. She has medical textbooks!

Lucas Kauffman

@RоryMcCune mmm I think my host-timeout may be too high

@RoryAlsop "I'm just reading up on"

Rory Alsop

GoT has nothing in the same league

Rоry McCune

14:19

@LucasKauffman host timeout is a really agressive thing to set TBH but I have done it with large ranges especially where there's a load of dead hosts

now I don't know what "it" was!

Lucas Kauffman

@RоryMcCune +1

Rory Alsop

@AviD - I don't know either

AviD

@RоryMcCune meh, I figgured better to not lower the level of conversation

again

Rory Alsop

lol

Lucas Kauffman

also I watched Mad Max yesterday, my conclusion is: don't bother

Rory Alsop

14:20

pls

yolo

AviD

lol

Lucas Kauffman

donut

Rory Alsop

Where is the @Simon?

raz

Probably eating a donut

Lucas Kauffman

dipped in maple syrup

AviD

14:22

@RoryAlsop surprisingly, close to 30% of the pls's in this room were NOT by @Simon

raz

@AviD Wait really?

pls

Rory Alsop

@AviD srsly?

AviD

~700 total, only around ~500 by @Simon

crazy, right?

M'vy

what do you mean?

Lucas Kauffman

@M'vy c'est fou, non?

M'vy

14:27

"were not by"?

ahhhhh ok

of the 'pls'

I instinctively converted that to "people"

damn you brain

Lucas Kauffman

@M'vy sacre blue

M'vy

@LucasKauffman sacrebleu

Lucas Kauffman

omelette du fromage

AviD

@M'vy @LucasKauffman's are always bleu

raz

@AviD How do you get this stats? I want to play

Lucas Kauffman

14:32

mmm I once indexed the whole dmz into elasticsearch

AviD

chat.stackexchange.com/search?q=pls&room=151 and compare to chat.stackexchange.com/search?q=pls&user=79519&room=151

M'vy

@raz do you now NoSQL?

Lucas Kauffman

maybe I should open source the script/database

AviD

@M'vy nowSQL

M'vy

@AviD yeah or this.

Rhino

14:32

whatSQL?

M'vy

Because you don't need it

BTW, does it qualify as a meme ?

raz

@AviD Haha, I can learn it

Adi

@RоryMcCune In all fairness, he was already pretty high when we met him

Rоry McCune

@Adi ahh, I was thinking that getting drunk on one Duvel was a touch extreme even for young people..

Lucas Kauffman

ah, so you tried Dutch herbs next to the Belgian beer I see ;)

Rhino

14:43

@AviD pls pls pls pls pls pls pls pls pls pls pls pls pls pls pls pls

Now it's 31%

AviD

@Rhino nah, still counts as one

Rhino

@M'vy In here, definitely. WhoSQLAnyway?

M'vy

@Rhino nap. Only one per line

Rhino

Well this is no fun.

AviD

@Rhino DoctorSQL

M'vy

14:45

@Rhino and I was thinking of "pls" more that the SQL one :)

AviD

@RоryMcCune I see you have a nice starstory going there.

Rhino

@M'vy I think it's become a meme, yes.

Possibly by stockholm syndrome as much as anything.

Rоry McCune

@AviD your right that works out pretty well!

Rhino

@AviD TardisSQL. Your data literally jumps around in time. It fits on a I2C flash chip on your mobo, but is big data inside.

PinocchioSQL. I'm a real database! Every time you query it and it can't find the answer, it adds a table.

Simon

pls all

AviD

14:57

lol @Rhino

Rhino

So does anyone actually know what pls means?

M'vy

please?

Rhino

This is what I thought, but I'm not sure.

Rоry McCune

@Rhino it's an epithet denoting an impreciation indicating that the user is scornful of the statements from the person or persons to whom the epithet is directed

AviD

@Rhino Person of Lesser intereSt

@RоryMcCune oh! is that really the way he meant it??

I assumed he was asking for more attention, even the negative kind. Obviously.

Rоry McCune

15:08

@AviD totally, I'm sure that's the exact sentiment that @Simon was thinking of when he said "pls"

AviD

right?

Simon

"pls" is a state of mind

Rhino

@Simon Yes but is it a deep and meaningful proclamation or is it just not remembering please has other letters?

Simon

@Rhino That is totally up to you.

AviD

@Rhino ah, you missed his phase of misspelling even the 3 he did use.

Simon

15:15

You may also pronounce it "please" or the characters one by one.

@AviD That was... something.

AviD

@Simon "something", indeed. You weren't even drunk.

@Rhino is sitting there staring at the screen, trying to decide if I'm serious or we're just having him on.

Simon

Yeah, I was at drunk.

I might have been PHP drunk though.

AviD

@Rhino: I was serious.

Rhino

@AviD I'm going to go with letter confusion then on possibly caused of by exposure to PHP.

Simon

Woohoo!

AviD

15:18

@Rhino because you are not willing to believe that level of incompetence, even from @Simon? ;-)

Simon

pls

god damn it

Rhino

@AviD I said possibly. I'm not sure how much PHP exposure there has been or what Simon's pre-PHP state was. It's impossible to deduce anything from so little information.

AviD

lol

that was on purpose

M'vy

Now you're famous:

0

A: The Memes of Information Security

Meme: pls Originator: @Simon Cultural Height: actual (from: Nov 14 '13 8:25 PM / to: present) Note: The real start date is a bit vague, but the first mention of 'pls' alone by @Simon has been registered on November the 14 in 2013. Background: 'pls' has been used extensively (in the DMZ chat r...

Do improve the redaction, I'm not that good at explaining properly in English :)

Rhino

Of course it could also simply be that @Simon was excited to find out that "please" is just one word in English as opposed to like two hundred in French (s'il vous plaît - literally if it pleases you)

Simon

15:24

@M'vy pls, ty

@Rhino You're blowing my mind, I never actually realized that it meant that...

Rhino

Well it gets better. French formal letter endings look like "je vous prie d'agréer, monsieur, madame, l'expression de mes sentiments distinguées" which translated is "I pray that you find agreeable, sir/madam, the expression of my distinguished sentiments". In English we just go for "Yours sincerely". So, thank you Microsoft for copy/paste.

AviD

OH MI GERRHHD PLS STAHP

youre making me laugh too hard

M'vy

@Rhino That one reads badly in English

Rhino

@M'vy I know. Plus I always feel like I'm ending my letters with an essay that takes up half a page.

M'vy

@Rhino well yeah that too

AviD

15:29

like the legal disclaimers all the corps love

and the "green" notices

Rhino

@AviD Oh man I detest those

AviD

both equally stupid

Rhino

In fact I think if you added up all the characters required to render those messages and assumed every person on earth sent 2 emails a day on average with that ending, you'd work out we are wasting a few gigs a day in storage.

HOW is that green?

AviD

right??

and extraneous contact details....

Declaration of Email Signatures

►

Rhino

My email signature is now only "A"

Simon

15:32

Which obviously means "ARhino".

Rhino

@Simon excactly

@AviD Brilliant

@AviD they missed out disclaimers though

AviD

heh yeah

actually was looking for a different video, of a guy returning an email that he received by mistake and asking their lawyers to let this one slide.

couldnt find that one, though

M'vy

yeah these clauses are total BS

Rhino

Any bad consequences from receiving this email including but not limited to the extermination of the human race, thermonuclear war, global warming, that disease thing from 28 days later and conquest by Voldemort are not our fault. This email is only meant for the intended recipient even when we cc'd in the wrong people - use your psychic powers. Oh and the info in it is like super secret so if you share it we will employ liam neeson to find you.

M'vy

:)

Liam Neeson :P

Rhino

15:42

Also this email has been scanned by an airport scanner so does not contain liquids over 100ml and there is nothing in its shoes (those under 100ml are stored in a clear plastic mime part). This email was packed itself.

Simon

You're a mime.

Kisunminttu

@AviD thanks for the coldpress recipe. Definitely going to enjoy that one. Maybe I'll try adding some agave nectar for sweetness

@Simon if you had to describe yourself as a donut, what kind would you be?

Simon

@Kisunminttu Honey glazed. Simple, yet effective.

AviD

16:01

@Kisunminttu "had to"? he chooses to.

@Kisunminttu welcome!

@Simon isnt that the Ol' King Cole? ;-)

oh no wait, that's with maple syrup.

you sickh bastaard.

Simon

ovid pls

Rhino

16:29

If you had to describe your donut as a donut, which donut would you describe your donut as?

Simon

@Rhino A rare donut that even though a lot of people wanted to eat, I managed to get my hands on.

Tinned_Tuna

a deep-fried toroidal piece of dough

Rory Alsop

@Simon oh - that reminds me of a photographer's gallery I saw today. His models were dressed in ... honey. It's a bit NSFW. I'll maybe find the link later

Simon

@RoryAlsop Nice!

Rory Alsop

16:48

@Simon here's a SFW pic from that gallery: blakelittle.com/lindsey-2013

Simon

@RoryAlsop That's kind of disgusting actually.

Rory Alsop

@Simon Hmmm - I think the opposite... however I agree I couldn't like all that honey off by myself

Rhino

@RoryAlsop ...

I'm not going to ask how you found out about this.

Transcript for