« first day (1629 days earlier)      last day (3549 days later) » 

01:40
What do you lads use to view apache access logs formatted properly?
Any analysis open-source software?
Splunk
I'll look it up, thanks.
I love Splunk
I use it at home, and deploy it at every place I work
02:02
@schroeder I assume you manage to stay under the cap for free use at home?
02:14
oh yeah - it's really easy to do
@schroeder You use the enterprise SKU, or the cloudy one?
Been thinking about it for awhile now, but just bought a NAS that can be a syslog server, so need to figure out what I want to do.
@Xander Enterprise
03:24
@Simon grep and lots of regex. ;)
 
1 hour later…
04:32
@TerryChia and a heck of a lot of testing ....
 
2 hours later…
06:54
@Simon joking? who was joking?
@CodesInChaos hey, that was a sample of @Simon's tastes, not mine.
50 Shades of @Simon.
@ThomasPornin Thanks, I assumed that as much. That said, I'm not sure this has an significant security implications?
Morning!
07:14
@AviD You dug it up. It's your fault.
@CodesInChaos I just hit google it on HIS words. that was like the 3rd link.
@AviD Excuses, excuses.
Looking forward to Infosec and B-Sides this week
Will be fun
Until Friday...
Need to meet regulators on Friday :-(
So - Infosec and B-Sides will be fun. Who's going?
07:51
Pffft
@CodesInChaos who told you it was his permissions? It could be the permissions of the one he spies on. In this case, it's pretty easy :P
(maybe not so stealthy though)
 
4 hours later…
11:34
@TerryChia Bleeeh, I'd rather get something more user friendly :p
@RoryAlsop oo fun fun! London?
I bought and set up a cert yesterday, anything else I should do than test with ssllabs.com to ensure that everything's working as expected?
@Simon for the sake of discussion, we will all assume you are talking about a cert for TLS on a webserver.
Yes.
also protect the private key, and mark it as non-exportable.
I'm pretty sure SSLLabs tests for everything else, so if you fix whatever they say I would guess "you're fine, until the bear shows up and lets us know what fools we've been".
which is pretty much the normal case.
11:42
Yeah, I got an A on there so I think I'm fine.
of course that is just about the TLS / cert bit.
My ciphersuites don't support IE8 and some other old browser, which is why I didn't get A+.
AKA I don't care about that support.
that sounds like a good thing.
Yeah.
I used the Mozilla guide anyway.
oh, so OF COURSE there is no support for IE
11:44
Haha.
No IE6/IE8
And Java is mad (og;dc)
I see a problem.
the domain name is stupid.
LOL
oo, is there a stupid.com?
Most-likely.
huh. there is, and it's pretty stupid.
11:45
I wanna bet that it's worth quite a lot too.
@Simon but yeah, solid A is solid. kudos.
Cheers.
you have chain issues.
goes well with your daddy issues.
wat
40
Q: ssltest: Chain issues - Contains anchor

Andrey BotalovI've run ssltest on web application and it found "Chain issues - Contains anchor" (section "Additional Certificates (if supplied)") What does it mean? Should it be fixed? Can it be exploited?

heh
11:49
Looks like it's not worth fixing.
But also, it takes a total of 30 seconds to fix.
do it! you could go for the A+!
Yay! I'll do it tonight.
you also have SNI issues.
I do see a bigger problem, though.
wot
why on EARTH are you worried about your TLS for a video of bunnies?
OMG! is that video really steganographied secret messages??
ARE YOU REALLY A SPY??
11:53
HAHAHAHA
is this @Simon persona just a fake, for plausible deniability? ARE YOU REALLY A SUPER SPY??
EVERYTHING I KNOW IS A LIE
although, that would explain so much.
@AviD therefore @Simon is a cake
pie.
I'll be pushing something on this server most-likely tonight, it'll be my resume kinda.
resume for rabbit raising?
11:55
No, donut raising.
rabbit donuts?
rabbit donuts raising?
4
Q: 3 year-old boy wants constant attention, hits and deliberately poops in underpants when he doesn't get it

iLikeDirtI have a nearly 3-year-old boy whose energy has become near-limitless, coupled with new neediness, aggression, and defiance. He wants to run around and be played with for the entire day. He is unable to sit still for more than about 10 seconds most of the time. We play with him and read him books...

lolololol
This calls for silly jokes, but I won't go there )
@M'vy hey dont make jokes, @Simon's parents are having a rough time.
pls
12:14
@AviD - yes, finally got here after some travel challenge
12:35
@RoryAlsop quick go and get some PTP socks!
You look like a pair of socks.
you look like a pair of ducks.
KWAK WAK
PenTest Partners are famous for giving out socks at Infosec, I'd bet a fair proportion of UK IT Sec people have at least one pair
hey @AviD here's an israeli company who sounds like they could use some AppSec help... torrentfreak.com/…
\o/ sec.se socks!
(so that we'll be able to make real sec.se sock puppets)
12:47
@M'vy that would be coool
unfort. IIRC Stack exchange aren't fond of unauthorised merchandise and I don't think they do official socks
WE STILL DON'T HAVE OUR NEW PROFILE, THEREFORE WE DON'T CARE ABOUT WHAT SE IS FOND OF AND NOT.
^ :)
@RоryMcCune heh, hola is ALSO israeli? damn, all the high visibility malware trojans seem to be from here lately.
hola, superfish, komodia...
Can we work on embedding a trojan in a picture of a donut?
@M'vy is that a funky hat?
13:05
@RоryMcCune I'll do that
@AviD hum no. Was ^ + :) as "what he just said" and :)
@M'vy I'm sure that he knows, he's just being a donut as usual.
Adi
Adi
@Codes @Thomas I've just implemented the encryption and decryption logic github.com/addy-sh/CCH-Enigma-IV/blob/master/cchenigmaiv.py
Now I'll write the brute-force. I'm first trying to find some cases to cut down the key size. For example, you cannot use the two faces of the same disk at the same time (for obvious reasons)
The heck are those constants?
13:13
Oh, cool.
But still, why would they design such almost-ordered dials?
Adi
Adi
What do you mean?
You're questioning the design of the machine itself?
@AviD yep they're based in Netanya hola.org/contact ... Does seem to be a theme doesn't it.. it's almost like there were a load of types who had experience of building advanced malware around, what a co-incidence :op
the letters on each dial are hardly a random permutation of the alphabet
Adi
Adi
@CodesInChaos Yeah, I'm almost sure that they're generated based on a pattern related to the number on the wheels
13:16
@RоryMcCune hahahha lol
also the typical israeli misunderstanding of what marketing is
Adi
Adi
Oh man, those Hola thing is becoming hilarious!
@AviD Perhaps archeologists misplaced Troy and it was actually in Israel, not Turkey.
@Adi The whole concept of unprepared users acting as exit nodes is horrible.
@CodesInChaos Troy was in Turkey? Not Greece?
@AviD The source of all truth, wikipedia, says so.
ah well then
13:23
@CodesInChaos and the new bit where the software can silently install additional code and disable running processes isn't good either...
@RоryMcCune well, that's just a typical self-update mechanism.
It is considered best practice, and we are approved by Microsoft, Google, Linux, and Apple.
@AviD "Furthermore, Vectra found that Hola contains a built-in console (“zconsole”) that is not only constantly active but also has powerful functions including the ability to kill running processes, download a file and run it whilst bypassing anti-virus software, plus read and write content to any IP address or device."
bypass running A-V isn't too usual I'd say
@RоryMcCune Of course the trojan part is bad. But it'd be a bad idea, even if it just worked as advertised.
Tor doesn't turn arbitrary users into exit nodes either.
@RоryMcCune okay, I think you missed my sarcasm. not snarky enough.
@CodesInChaos indeed, just seems like either it had some seriously ill-considered features, or it was actively bordering on malware
@AviD ahh whups I did, sorry :o/
@AviD you needed a winky
13:26
ac
@RоryMcCune that said I have seen numerous cases of instructions to disable the AV during installation.
@Simon dc
dayum
@RоryMcCune heh. but I wasnt done! read the follow up.
@RоryMcCune wow nice, he didnt give you much and you still pwned him.
@RоryMcCune @CodesInChaos unless actively evil, these are probably cases of just enough little bit of knowledge to do a great deal of harm.
@AviD yeah even I'd be surprised if this turns out to be deliberate malware
13:30
thats a lot of marbles to lose, even for @Simon
ovid
pls
13:47
any of you old enough to remember Bards Tale (well apart from @RoryAlsop of course who remembers real bards tales in the court of King Arthur)
Of course, the Bards Tale!
whistles
whoa, vaaaaguely familiar. I seem to remember this is a decades-early Borderlands pre-knockoff?
yadda yadda yadda. Was one of the first Dungeon Crawl games back in the day (mid-80's) I played it to death when I was a kid
kickstarter.com/projects/inxile/the-bards-tale-iv <-- Kickstarter for Bards Tale IV!
@RоryMcCune ha
OH MY GOD, A COMMUNITY REWARD FORUM BADGE?!?
13:51
@AviD the launch video is funny too in that it takes the rip out of young people :op
I seem to remember playing it only a bit - was barely able to run on my machine.
@AviD I played the demo on the ZX Spectrum soo long I could probably still navigate the map from memory
@RoryAlsop BTW that Bards Tale kickstarter video has scenes from Orkney!
14:06
7
Q: Can I visit Medina Mosques like a tourist independently?

Alina LedonI a muslim girl from Romania. How can get a visa for visit the Prophet's Mosque in Medina, Saudi Arabia?

Oh for fucks sake.
@Simon what do you have against muslims?
you racist.
ah. I see. you meant the answer.
and, I suppose, that answer is what you have.
I am absolutely racist against an individual who completely treats women as if they are a lower gender.
@Simon dammit. Now I have to retract something bad I said about you, since that is completely justified.
:p
I suppose you'll be wanting an apology, now.
14:15
I wouldn't dare to request a such thing.
They're definitely not Canadians, since they're overthinking this.
just go for it, right?
Sorry!
Exactly.
@Simon though that last panel does sound particularly canadian. "I am sorry for the quality of my apology."
14:20
I remember a few situations where, for example, you open the door and it hits someone because he was about to open it too, then he apologizes.
Like come on buddy, I hit you, I should be apologizing.
You donut.
like that scene in HIMYM
blog.benjojo.co.uk/post/auditing-github-users-keys <-- oh dear, devs with github accounts using keys generated with the debian weak keys bug present and also generating 256-bit SSH keys!
where @Robin walks into a Canadian bar, and knocks somebody down, just to see him apologize.
@AviD Damn it, I completely forgot about that scene, nooooo!
14:24
That's not HIMYM!
@Simon indeed that's some high quality canadian comedy for you!
^NSFW
but funny
and canadian
you into canadian comedy shows?
canadomedy
remember 4 on the Floor?
@AviD ooh don't know that one. Kids in the hall got run on UK television...
it was kinda like Not Necessarily the News, but a bit zanier.
@RоryMcCune just realized those actors are kinda famous now
@AviD yeah I knew one from a scrubs episode, had no idea he was the same dude as Kids in the hall!
14:32
You know what else is famous? My D.
@RоryMcCune the other one was in Lilo & Stitch
oh, and 70's Show
(Pastor Dave)
 
2 hours later…
16:05
@AviD @RoryAlsop You guys might wanna do something with this:
0
Q: Please Delete This Question

sdfPlease Delete This Question and stop putting the old text back.

I rollbacked it, but I'm expecting the dude to edit it again.
@Simon they should totally make you a mod
then if people annoy you, you could crush their heads
I know right?!?
16:31
Oh of course he edited it again.
Adi
Adi
@Codes @Thomas Cracked it. It was a lot easier than I feared. Thanks for the help
 
2 hours later…
18:14
@Simon 13 edits, and I think I saw two or three rollbacks to the same rev and one rollback that was to a previous rollback! Wow.
Yeah, the dude wants to get rid of his question big time.
18:26
@Simon do we know why?
@schroeder No, which means that we use default reason: because he's a donut.
roro pls embed
ty roro
@Simon Y U burn ppl tho'
cuz evil
19:10
@RоryMcCune Submit that to @YouHadOneJob on Twitter. They'll love it.
20:08
Death by snu-snu
They reduced international shipping by a whole bunch. FYI
 
2 hours later…
21:50
oh man @RоryMcCune, latest GoT. Dat 'sode. Man.
22:01
SPOLIERS!
@schroeder I DIDNT SAY ANY DETAILS
except that part when that guy did that thing with the thing to the other guy in the place
I mean, whoa!
22:30
@AviD NOOOOOOOOO!
oops, I gave it away that it was a guy
ooooorr did I.

« first day (1629 days earlier)      last day (3549 days later) »