The DMZ

Stack Exchange

05:09

Last-minute course change: Let's see if we can hit Steve's house.

Barry Carlyon

06:52

@adi they ran the pilot/first episode of Mr. Robot on Twitch on Saturday (irrc)

Also Morning all

AviD

07:37

hahaha @RoryAlsop got flaaaaaaged

M'vy

Morning!

@AviD Wut?

AviD

@M'vy somebody modflagged something @RoryAlsop wrote

I found it amusing

M'vy

yeah. but what for? spam? offensive? :P

AviD

nevermind, its modstuff ;-)

I think the person he was modcommenting to took it personally and was offended

M'vy

ahah

ok... targetted marketting should learn that after mother's day, I'm not very likely to buy flowers again

on the plus side, it makes my webpages very nice looking

Adi

07:46

@BarryCarlyon Seems like it's gonna be a pretty good show

Rory Alsop

@AviD oooh - need to go and check what that was - I missed it

AviD

@RoryAlsop oops sorry, dismissed it

Rory Alsop

was busy doing my cross-site modding. Back here now

@AviD was it valid?

:-)

AviD

it was frivolous and just opposed to moderation in general

@RoryAlsop security.stackexchange.com/admin/posts/89903/show-flags

speaking of which - I found that guy's series of homework questions to be borderline questionable...

wdyt?

Rory Alsop

@AviD yep - I raised the issue to shog - because of all the accounts with the same behaviour and the same IP address. No socking on our site (some suspicious on other sites) so no CM action likely

I think they are very questionable - I think 2 questions were ok

Did you see all their other accounts?

I left a warning for them - and think I annotated all the accounts

Adi

08:01

Jesus Christ! Did you guys hear about the Hola thing?

AviD

@RoryAlsop ah no, actually didnt look that closely

I think I missed it when it came in. now I just saw the series of android homework questions...

Adi

Easy-to-use RCE backdoor in 46 million users' machines

Rory Alsop

@Adi do you have a link - I haven't seen this yet

Adi

Oh, sorry adios-hola.org

Rory Alsop

I hadn't realised Hola was that popular

M'vy

08:15

They really called their product Luminati?

Journeyman Geek

I've never heard of hola till this thing broke ;p

Adi

@M'vy Exactly :D

@JourneymanGeek I used to use it at some point

Before getting a private VPN connection

Journeyman Geek

@Adi: I've been pondering tunnelbear for getting around geoblocks, but for anything a bit more serious, I'd rather run it myself

Rory Alsop

I have never had a use case for Hola

Rоry McCune

08:42

I've been considering using FreeDome for VPNy stuff, looks like it could be useful where access is via a dubious network

Steve DL

09:15

Is that a cheap version of Tor or what?

Rоry McCune

10:04

So 1st day of June and here it's..... 7C and raining, we have snow on our hills!

Rory Alsop

@RоryMcCune Wow - it's really summery this morning. Once the thunderstorms had passed yesterday the temp increased dramatically. Feels like about 14-15, although it's still about a force 4 wind

Rоry McCune

@RoryAlsop yeah not so nice today, was meant to be on the waverley going up to Iona this morning, but they cancelled due to the weather forecast....

Rory Alsop

@RоryMcCune not for a job, surely. Pleasure cruise, right?

Rоry McCune

@RoryAlsop yeah had a holiday today to go up on the paddle steamer Oban to Iona, but they sent us a mail friday saying it would be too windy today

looks like it'll be force 7 off Oban today, so that was likely a good call on their part...

Rory Alsop

pants - you get a refund?

Rоry McCune

10:17

@RoryAlsop oh yeah they'll refund the tickets, but is still a touch annoying as I took a day off for it.. but hey that's the weather for you!

Rory Alsop

10:36

do you get to pick up any work at short notice, or is today a paperwork/tax return/filing kind of day now

Was good to catch up on Friday btw

Rоry McCune

@RoryAlsop going to go update my home accounts and (don't tell the tigger) write some code in "Go"

Rory Alsop

heh heh heh

Rоry McCune

@RoryAlsop indeed ! was good, it's a good crew to go out with, lots of chat to be had..

M'vy

10:52

0

Q: How to identify an unknown IP in our network

I have a network containng 20 clients that I assigned IP range 10.0.0.1 to 10.0.0.20 to them. When I do an IP scanning I see someone using 10.0.0.123 in VMware. I wonder if is there any way to find out which one of those assigned IP's this unknown IP is bridged with? i.e How can I find out which...

OP posted it twice (Sec.se + SU)

Tinned_Tuna

11:15

@RоryMcCune Go Go gadget Go!

AviD

@RоryMcCune hahaha almost slipped by my, with no pinging....

and you would have gotten away with it, too - if it weren't for ~~those darn kids~~ @Tinned_Tuna

Rоry McCune

@AviD @Tinned_Tuna DAAAAMN you TUNA!

AviD

I think you mean TUUUNAAAAAAAAHHHHHH!!!

KHAAAAAAN!

►

hmmpph. best I could find.

surprised theres no clip of just that bit

hmm, thats better.

M'vy

KHAAAAAAAAAAAAAAAAAN

Simon

11:47

OH PLEASE @RoryAlsop or @AviD or both, is there a way we can see what got this arrogant prick suspended: security.stackexchange.com/users/45139/begueradj ?

AviD

@Simon yeah, we just got fed up with all your sockpuppets.

Simon

wat

If there's one thing that I'm not, I'd say it'd be arrogant.

AviD

@Simon you seem very proud of that claim.

Simon

lulz

Now show me what got that donut suspended pls

AviD

he insisted that "donut" is spelled wrong.

Simon

11:50

Oh what a bad boi.

AviD

12:10

Heh. Just saw somebody named Stella, and her last name really is Artois.

Simon

pls ovid

AviD

true story

goes well with the MS newsletter I got this morning.

All about the new editions of Visual Stupid 2015.

Simon

You have no idea how much I despise newsletters, imagine if that'd be a MS one omgawd.

AviD

I was thinking maybe thats what they use in Canaduh to write PHP.

Simon

wat no

AviD

12:13

true story bro

Simon

In CanadUH, we use Sublime Text.

AviD

@Simon ah, that must be the not-so-visual stupid.

Simon

wat

Are you hating on Sublime Text? 'Cause I don't think a lot of people would allow that.

AviD

no, on PHP.

but HOOOOOOOEEEELEEEEY CRAP

this 4GL stuff is the gift that keeps on kicking you in the vuln spot.

Simon

Oh no, he's back at it.

AviD

12:16

> The PARAMETERS element specifies the parameters to provide on the DVM command line. Each parameter is contained in its own PARAMETER element.

If allowed, parameters can also be set in the application URL. For example, /wa/r/myapp?Arg=val1&Arg=Val2 provides two parameters. To enable URL parameters for Web applications, set the AllowUrlParameters attribute in the EXECUTION tag to TRUE. The default is FALSE. If the DVM already has parameters set by the command line, the parameters in the URL are added to the end of the command line.

Journeyman Geek

heh

AviD

in short: there is a config switch that, when enabled, appends the URL parameters to the executable command line parameters.

Journeyman Geek

I've been mucking around with this github.com/richrd/suplemon

AviD

but its okay though:

Journeyman Geek

Its like a wierd cross between sublimetext and nano

AviD

12:17

> Important: This attribute is not supported and should be removed for Web services applications.

@JourneymanGeek guy doesnt know how to spell Superman. Fail.

or is he making a racist joke. bigger fail.

Journeyman Geek

@AviD: I totally don't get either ;p

Simon

@AviD Did you check my project on Github about a PHP masterclass? I'm sure that you'd love it!

AviD

oh, and of course, that COMPLETELY OPTIONAL and TOTALLY DOCUMENTED AS OBSELETE option is of course enabled. Sweet Mary Mother of Johnathan.

@JourneymanGeek the name of that repo...

Arperum

@AviD That name sounds a bit like some weird Pokemon.

AviD

hmm. well. I kinda need to correct myself, since that flag is only enabled on files desgnated as "devel". But still.

@Arperum or "superman" with a bad fake chinese accent.

I dont think @TerryChia will appreciate that very much.

heh, didja see what I did there? that's like a 3-way insult.

Arperum

12:23

@AviD I could see that one too.

AviD

oh, hehe, no no, I correct my earlier correction. All their code folders are marked "devel", because of course what else would you be doing with code.

Arperum

@AviD Good thing you can easily remove things in a textfile, if that was on paper it'll end up full of scratched of stuff.

AviD

@Arperum are you meaning my notes?

Arperum

@AviD Yes.

AviD

well, duh.

paper is for little kids and government offices.

Simon

12:29

True that, I always use paper.

Arperum

I remember doing a programming exam on paper...

Simon

Yup, I did that too.

AviD

12:44

I refuse to write proper code on paper, or on a whiteboard.

I am willing to go so far as shorthand pseudocode.

Simon

Well that's fine. When you're trying to figure out an algorithm, I don't see the point of not writing pseudocode.

I'd totally eat a donut this morning.

AviD

@Simon I meant, more in an exam / interview type setting.

It's a silly construct that gives no useful information in that context.

well, other than "this person can write useless code in an interview"

hey, real question. maybe more for @ThomasPornin, unless someone else knows....

Simon

Especially when you're juggling with multiple languages. Often, I rely on the intellisense to find the proper method because it's not always the same name.

AviD

can a Kerberos realm be blank? is that vulnerable? how?

it seems wrong to me, but I cant see how it could be exploited usefully.

@Simon yeah, exactly.

I always admit to being an intellisense cripple.

Simon

Yep, me too, unless it's PHP lulz.

soz ovid, soz

AviD

12:57

@Simon ofc, intellisense is a microsoft trademark. So I'm not sure what you're using in Sublime.

Simon

It does suggests function names though.

Very helpful.

Even variables.

TIL that VB6 doesn't give a crap if you divide by 0.

Rory Alsop

@AviD did you see my note in TL?

Thomas Pornin

@AviD I have not studied Kerberos internals yet...

I could do that today.

The day will probably be slow anyway, so I might as well learn a new protocol.

Simon

Tsk tsk, even I don't get slow days.

Thomas Pornin

We are installing a new root CA (with key ceremony and auditors) so there is a lot of waiting.

Simon

13:10

Ah, that's fair then.

Thomas Pornin

Also, I am regularly involved into debugging issues with certificates in an Active Directory world, so there's a lot of Kerberos to deal with.

138 pages... that's some RFC.

Simon

Lecture de chevet.

AviD

@RoryAlsop naw, havent been in there in ages.

Adi

@Ulkoma You're going to Ukraine?

AviD

@ThomasPornin ha! Sure, some nice afternoon reading.

Adi

13:18

@Ulkoma Or Syria?

AviD

@ThomasPornin I actually did, or rather a subset thereof. it's.... not a pretty sight.

@ThomasPornin you're gonna love all the negotiation parts.

@Simon that depends greatly on your On Error settings

Simon

@AviD I'm doing modifications in a project, I'm definitely not gonna play with those settings.

AviD

@Simon sounds like that VB project is swallowing more errors than your mom.

bazinga.

Simon

pls

fredley

13:44

So I just had a Wordpress blog hacked. Very interesting, can't work out how they did it.

In touch with host, as it could be their problem.

Simon

Let me take a wild guess: the Wordpress version was a highly vulnerable one.

Thomas Pornin

@Simon You mean that the Wordpress version was a Wordpress version ?

Simon

@ThomasPornin I know that it's hard to believe but: yes.

Thomas Pornin

@Simon I am flabbergasted.

durron597

hi all

Simon

13:52

@ThomasPornin Sorry to break it to you on this fine Monday morning.

durron597

I've noticed a sharp uptick in emails for accounts on various websites that I haven't registered

in the last few weeks

I use gmail with two step verification turned on

I checked and saw no unfamiliar devices registered to my email

I usually ignore the emails.

Adi

@durron597 That is called a raise in spam

durron597

Is this most likely: 1) someone trying to hack my email using some sort of information back door approach

2) these websites creating accounts for me as spam

Adi

It does in no way reflect on the security of your account

Simon

We have no way of finding out and it doesn't matter anyway.

Flag as spam, move on.

Adi

13:54

@fredley Sounds fun

fredley

@Adi Yup.

AviD

@fredley "wordpress"

fredley

@AviD Yeah. I really oughta move off of it.

AviD

@Adi the worst kind of raise there is.

durron597

I also got an email from best western asking me to review my stay at a hotel that I've never stayed at, at a hotel near an airport I do actually use

AviD

13:57

@fredley as shocking as it sounds, there ARE solid possiblities for using wordpress well.

its just a lot of work.

durron597

I'm just looking for someone to tell me that as long as I'm using two-step and there are no unfamiliar registered devices I'm almost certainly safe.

AviD

e.g. wpengine, they already do all that work for you.

fredley

@AviD I think the issue is having loads of old copies of it unupdated all over the place. Been using this server as a kind of dumping ground for test projects for years and years

It's got some very very old stuff on there

durron597

My twitter has been hacked in the past so, yeah.

AviD

@durron597 No one is safe. Ever.

That said, your account has most likely NOT been bruteforced.

Thomas Pornin

13:58

@durron597 In the long run we are all dead.

Therefore, such hacking does not ultimately matter.

durron597

@ThomasPornin Got it. Going to jump off the nearest tall building now, thanks!

Simon

wat

AviD

@durron597 that's silly.

fredley

@AviD Yeah, still had access to everything, so very unlikely accounts were compromised

Simon

Suicide jokes are wrong when we have no idea who you are.

fredley

13:59

Probably a code execution exploit

AviD

you may as well feed yourself to a hungry bear, at least that way you will bring some benefit.

@Simon very true.

and s/he no idea who we are.

Thomas Pornin

@durron597 In the mean time, when you get a lot of spam, some of it is bound to match some parts of your life. That's pure statistics.

durron597

@AviD So was his comment :)

Telling me that worrying about my account getting hacked doesn't matter because I'm going to die in the long run is also wrong

Thomas Pornin

Speaking of spam, I receive about 100 spams per day. Back in 2007 I was at more than 400 per day.

Arperum

@ThomasPornin You found and mauled 75% of the spam senders?

Thomas Pornin

14:03

@durron597 Ultimately. Don't forget the important word.

durron597

@ThomasPornin I've found that gmail's spam filter really is quite good. These emails look exactly like normal account registration emails. I'm sure they're exactly the same as the one's I would be getting if I had registered with these sites.

Thomas Pornin

@durron597 Darwin would have said that by improving spam filters, the natural outcome is that we breed more efficient spammers.

M'vy

oh @fredley here?

fredley

@M'vy yo

durron597

@ThomasPornin research.microsoft.com/apps/pubs/default.aspx?id=167713

M'vy

14:07

@fredley you fine?

durron597

(I'm sure that article is nothing new to this chatroom, but just in case it is)

Thomas Pornin

@durron597 It has already been cited here, yes, but it is a good article anyway.

fredley

@M'vy In what context? :-P

Simon

@fredley In the context: "Oh you so fine, @fredley".

fredley

I managed to put on a pair of trousers yesterday (though I couldn't sit down in them) yesterday, if that's what you mean!

M'vy

14:08

@fredley was a short for "how are you" in fact :P

fredley

@M'vy I'm ok!

durron597

Anyway, thanks for the reassurances all. Take it easy :)

Simon

I can't, I have too much work to do.

durron597

(and, in case anyone is still worrying, that was entirely a joke. perhaps in poor taste, but a joke nonetheless)

Rоry McCune

14:39

@durron597 FWIW I've had this with my Gmail account, which I think is someone registering <my_username>2 and then forgetting that that don't own <my_username>.

@durron597 every so often google send me a mail about linking a new address to my account and I reply "noo that's not one of my addresses" and it goes away for a while.

Thomas Pornin

@RоryMcCune I occasionally get emails on my gmail account, sent by someone who apparently organizes movie shoots in Thailand.

Simon

@ThomasPornin Sounds like a great opportunity to make a documentary about you.

Rоry McCune

@ThomasPornin well sounds like they're more intersting than the stuff I get!

M'vy

@RоryMcCune I once received a mail with picture and plan to organise hollidays during the summer

Rоry McCune

@M'vy perhaps someone was inviting you!

M'vy

14:44

with pictures* of the previous summer

@RоryMcCune Could be, but the age average did not fit :P

Rоry McCune

@M'vy heh

M'vy

I think most of them were already retired

Rory Alsop

@AviD - am about to remove 5 dodgy accounts. See in TL for Martijn's series of checks on their SO accounts

AviD

will do, ta

Rory Alsop

15:00

He's also notifying all the other sites they are doing the same on

they were the ones we had spotted, but didn't have enough data on (keeping under 5 upvotes etc)

AviD

crafty bastard

Simon

soz

Rory Alsop

lolpls

AviD

plslol

Simon

lsp

AviD

15:02

splyolo

I guess I win the stupid contest. That's a pretty dubious honor.

"stupid" in that sentence is a noun, not an adjective.

Rory Alsop

@AviD dratsab yftarc

sorry - was just continuing the reversing...

AviD

hehehe, you've been working on that one for a while, eh?

Rory Alsop

talking of reversing - feels like commute time

@AviD naw - was over on TL

and Pod Bay

Rоry McCune

@RoryAlsop Cab Drafts Tray

AviD

@RoryAlsop I should go visit once in while

Rory Alsop

15:06

@RоryMcCune oooh - clever

AviD

@RоryMcCune Cray Tab Drafts sounds like a nice beer

Rоry McCune

@RoryAlsop I'd like to claim more credit but Internet Anagram generators are a thing :) wordsmith.org/anagram/…

Simon

We all know that they haven't updated it since 1994.

deed02392

@Simon <?=date('Y');?> amirite

Simon

Yeeeep.

deed02392

15:20

blap blap

Rоry McCune

@deed02392 ? Is this a young person phrase?

Simon

This guy sounds like a huge donut:

Ulkoma, United Kingdom

2.2k 2 19 52

authentication tls hash physical biometrics network windows

He just asked this question in travel:

13

Q: Can I wear a bulletproof vest while traveling on British Airways from Heathrow?

I'll be wearing it all the time anyway once I arrive at my hostile destination but how about wearing it during the flight? It makes sense to wear it in case someone try to hijack the plane.

air-travel legal safety airport-security british-airways

M'vy

The world sounds like a huge donut to you @Simon

Simon

I feast on the world!

AviD

@Simon thats not the same user, that's user1298069

Rоry McCune

15:31

@AviD if you click on their user name it takes you to ulkomas profile it appears (which seems odd to me)

Simon

@AviD Are you really that much of a donut?

AviD

@RоryMcCune ccmmooooooon

Rоry McCune

@AviD no really it does you just need to click the link... a bit advanced I know but trust me it's true

I mean even @Simon has mastered link clicking

:op

AviD

though that question is completely legitimate, if a bit misguided. not sure why all the heat there.

on travel.se - it is a solid question.
if it were asked on sec.se - then we can do a solid risk analysis, and if the hijacker shoots out a window his bulletproof vest wont help.

Rоry McCune

@AviD for me the most cogent point is in the comment to the top answer, hijackers are likely to target anyone obviously wearing a bullet proof vest as they would assume that person is a law enforcement officer and therefore a threat

AviD

15:35

@RоryMcCune and the vest doesnt cover his face

though the seat in front of him likely covers more of his body

Rоry McCune

@AviD exactly so it likely won't protect you but will attract attention

AviD

just take a middle seat

Simon

Anyway, I just feel like the dude is seeking attention.

Rоry McCune

yeah best bet don't wear vest, do duck if someone aims a gun at you on a plane

Simon

And all this BS is made up.

AviD

15:36

@Simon you're made up

Simon

o

M'vy

@AviD hum. You chose the soft one there :P

AviD

I was implying he has all his make up, since he's all fancied up to go dancing tonite.

Simon

pls yves

M'vy

:)

AviD

15:39

I said dancing, not whatever you jumpstyle people call dancing

well, "jumping" I guess

also, make up.

Simon

do the pls dance

M'vy

@Simon That might actually be a thing

Simon

Yes it is and it is done like this:

does the pls dance

Tada.

AviD

PLS Dance Team

@PlsDance

xoxo sapphires

1 tweets, 33 followers, following 25 users

Simon

Oh lawd.

Should I be the lead PLSer?

AviD

15:43

PLS Dance Team

►

seriously, why do I bother with this crap?

I think thats @Simon in pink, 2nd from the left.

Simon

My secret.

AviD

actually the one in green looks more like you.

I dig your hat.

Simon

ty

AviD

I think their choreographer was drunk.

or @Simon.

Simon

The whole team was very happy with the choreography so pls.

AviD

15:46

lol

plsdance

is that really the type of music you listen to?

Simon

Hang on, I haven't clicked on it.

AviD

ahhhh

Simon

Holy crap.

NO IT'S NOT WHAT THE HELL?

AviD

@Simon JUST DISCOVERED A WHOLE NEW GENRE OF MUSIC

AND DANCE

Simon

DO DA PLS

AviD

15:48

AND SO MUCH BETTER THAN WHAT HE KNEW BEFORE

Simon

Let's go viral just like Harlem Shake.

"AND DO THE PLS"

dumdumdumdumdum

Simon

16:20

Yeah, thanks @AviD. You're joking and all with me and then all of a sudden, I become the donut chat killer.

Thomas Pornin

@AviD A blank realm name would break encoding of the "transited" field; see section 3.3.3.2 of RFC 4120.

CodesInChaos

17:24

@AviD Your tastes are ... unusual ...

3

David Freitag

17:40

40

Q: Do centaurs suckle from horse nipples or human nipples?

This has been puzzling me, because if the human half needs human nutrients, then suckling from the human nipples makes sense. But the horse half needs different nutrients, so which set of nipples makes most sense?

alternate-world mythical-creatures

CodesInChaos

@DavidFreitag Trying to one-up @Avid's taste?

David Freitag

@CodesInChaos Huh? No, I thought it was useful information that everyone here should know.

Simon

@DavidFreitag Look son, what you're doing outside of The DMZ stays outside of the DMZ.

David Freitag

@Simon That wasn't me, although I do have to admit my first reaction to reading that was, "Man, that's a great question..."

Simon

@DavidFreitag It wasn't you? Do I have to remind you that we are Charlie?

David Freitag

17:49

@Simon Wut?

Simon

WE ARE CHARLIE

David Freitag

@Simon Wat?

Simon

Nous sommes Charlie.

Rоry McCune

@DavidFreitag @Simon is indicating that he like biting peoples fingers

this is a bit weird, but then that's @Simon for you

Simon

CHARLIE BIT MEH

Rоry McCune

17:50

@DavidFreitag ^ see

David Freitag

@RоryMcCune Nope, still no idea.

Rоry McCune

@DavidFreitag seriously 822 million views

and you know nothing...

Charlie bit my finger - again !

►

Simon

David Snow.

David Freitag

THERE'S NO YOUTUBE AT THE BOTTOM OF THE SEA

Simon

Yes there is.

David Freitag

17:51

shhh...

Rоry McCune

poor kids though that video has ended up defining their lives to an extent

The Internetest safety video on the Internet

►

vis their appearance in this

Transcript for