The DMZ

M'vy

07:55

@RoryAlsop oh f yeah! Good one

Morning all!#

Rory Alsop

08:11

Morning

Rоry McCune

Mornin' All

@RoryAlsop you back ooop north, or being a glutton for punishment on day 3 of InfoSec?

Rory Alsop

Infosec was Tues. B-Sides Wed; today t'office; tomorrow t'regulator :-(

Rоry McCune

@RoryAlsop blech regulators :(

AviD

08:53

ha, this, from the School of @Simon

You don't like my questions the reson is i opened your asshole and you feel shame,then why do you always delete my Great Questions, I know they are great Questions — raven Dec 12 '14 at 6:30

how did it last so long

Rоry McCune

@AviD I'd guess the Mods are lazy

:op

AviD

@RоryMcCune heh. seeing it is my a**hole he was referring to, I can honestly say I hadn't seen that message before.

I know it was me, because I am the one on record that closed the Great Question

does that make me a Great Leader?

Great Mod?

Rоry McCune

@AviD ahh well it'll likely be those pesky illuminati again then

Journeyman Geek

@AviD I find his lack of spellcheck, and last weeks saladcase quite disturbing.

AviD

09:09

@JourneymanGeek THAT is what you find disturbing?

@RоryMcCune so I just heard that Coverity is buying Quotium.

Journeyman Geek

I try not to think about the rest.

AviD

or rather, Coverity's parent company is buying Quotium's main security product, but not the parent company.

gawd its like a hillbilly family gathering, trading partners and offspring and mating with your own cousin.

Rоry McCune

@AviD yeah that's a weird acquisition just buying the product and not the company

I wonder how they split that out from a staffing perspective...

Journeyman Geek

who happens to be your grandmother, aunt, and great grand daughter.

Rоry McCune

@JourneymanGeek this is sounding like the @AviD / @Simon relationship now

AviD

09:12

@RоryMcCune it was already a seperate "company" - it's the Seeker company that Quotium bought, after they (Seeker) split off from Hacticks that was bought by EY.

M'vy

@AviD wow

Rоry McCune

@AviD ahh I C, well that makes more sense, although that's a pretty convoluted path they've got there!

AviD

@RоryMcCune "more sense"??? Did you not read what I just wrote???

@RоryMcCune damn straight, convoluted.

Rоry McCune

@AviD yeah well if it's already kind of separate it makes more sense that they could sell the product without selling the co.

AviD

thats the hillbilly family part I was referring to...

@RоryMcCune and I'd just talked Coverity into sponsoring AppSecIL - but Quotium is already a sponsor, via Seeker.

so this affects me directly.

Rоry McCune

09:14

@AviD argh! that's a pain

AviD

interestingly, I'd just happened to see about it this morning. Then I get a marketing email from Coverity after visiting them at AppSecEU, with a note about this...

I do have to say that Coverity has been looking better of late, especially after the Eric Lippert acquisition, and other improvements.

Rоry McCune

@AviD IIRC where they one of the companies that came more from a software quality background covering C typed languages?

it's been quite a while since I looked at their stuff

not sure if they have wider language support now

AviD

@RоryMcCune yeah. they spent a few years being a Fortify wannabe. now they are IMO starting to actually build a real security product.

not too familiar with it lately, but it is looking better.

should probably take some time to see where they really are at now.

Rоry McCune

yeah looks like it's Java and c/C++ from coverity.com/security

@AviD so as there's no Go/Kotlin/TypeScript support, it likely won't be too useful to you :op

AviD

@RоryMcCune hahaha, yeah I dont think ANYbody supports those.

and even if they did, people who use those langs dont really care...

Rоry McCune

09:23

@AviD TypeScript is, I'd guess a possible if they do JavaScript, but the others not so much

@AviD dunno the Docker team seem to be taking security quite seriously lately, and they write in Go

AviD

@RоryMcCune wait, really? Docker is written in Go?

Rоry McCune

@AviD yarr github.com/docker/docker/tree/master/docker

hey it's a hipster tool what did you expect :op

AviD

hipster tools arent used to build useful things, not even other hipster tools

hipster tools are there for playing, not building

Rоry McCune

@AviD there's quite a bit of stuff coming along in Go at the moment, which is kind of why I starting learning it..

AviD

@RоryMcCune I should take a look at that.

Rоry McCune

09:26

it's actually not too painful a language to learn (and that's coming from an amateur who only knows ruby)

AviD

I should take a year off to learn all the things.

then another year to learn all the things that came out during my year off.

Rоry McCune

@AviD gobyexample.com if you like learning by typing/looking at code this is good for the basics

@AviD yeah never ending cycle really these days

AviD

@RоryMcCune you're gonna laugh... but I was asked to give a secure coding class on node.js...

Rоry McCune

@AviD oh man, that'd be interesting. First Don't use NPM :)

AviD

second, dont use node.js

Rоry McCune

09:28

or "review all the code you get from NPM before use, and then maintain an internal repo"

AviD

third, avoid javascript, esp. on the server

Rоry McCune

@AviD aye, although ES6 sounds like it'll fix some stuff

but backwards compatibility will hamstring JavaScript for EVAR

AviD

yeah no, its just a standard "here are the principles, this is how you do it in your stupid language". Not gonna fix the way they work, just improve their broken code...

oh yay, there is MongoDB too

maybe I'll start the session by playing the Webscale video

Steve DL

09:58

Gotta admire security researchers in high-profile companies publicly discussing the vulnerabilities of a security product used by millions on an archived mailing list and a public bug tracker...

Rоry McCune

@SteveDL Google project zero people by any chance?

Steve DL

10:10

nope

Rоry McCune

@SteveDL ahh was thinking that was a possible as they've been pretty cavalier about dropping 0-days in the past..

Steve DL

It's people from 3 organisations, 2 maintainers of said software and a third-party

i'll give more details when they've cleaned up their mess or stated they don't care

Simon

11:30

@AviD pls i spel guder then dat men

Steve DL

12:10

WOW SECURITY IS OFFLINE FOR MAINTENANCE

IS IT THE PROFILES UPDATE!??!?!?

Simon

HOLY PONIES

I WAS GONNA SAY THE SAME

Steve DL

drools like a donut

Simon

OMGAWD A DROOLING DONUT?

Rory Alsop

nah - it's all of stack exchange

Steve DL

cries

Simon

12:10

Oh come on, you god damn party pooper.

Rory Alsop

I noticed as I tried to vote on a post about exploding meteors

not exploding doughnuts

Simon

Exploding meteors would create tiny meteors.

Not good, everybody knows that, tsk.

Rory Alsop

tiny meteors burn faster

Rоry McCune

@Simon would exploding Doughnuts create doughnut bits?

Rory Alsop

mmm, sparkly

Simon

12:11

And we're back, without new profile.

AviD

@RoryAlsop so do fat people

Simon

That's it, I'm quitting my job and raiding the SE office until we get the new profile.

Rory Alsop

@AviD lol

AviD

oh crap, you see what happens when I go around editing @Simon's posts? I absorb his innate simonness.

Rоry McCune

@AviD "release your inner Simon"

AviD

12:21

@Simon oh! you have to purge your browsers cache. even a hard refresh doesnt do it.

sweet!

Rоry McCune

@AviD oh yeah there it is now!

AviD

cool, right?

Rоry McCune

looks like I've reached 5318008 people!

3

AviD

ooh, almost half as many as the bear!

Steve DL

THat's not funny :-(

AviD

12:26

heeheehee, yes yes it is

@RоryMcCune we got one! :-)

Rоry McCune

\o/

AviD

I was actually aiming for #simon, but we'll take what we can get

.. ___
o/......~

hmm. stupid markdown.

does that look ANYthing like a guy catching a fish?

Rоry McCune

nope that doesn't work

Steve DL

So

Number of people reached for the two of you: 1

that's 0.5 per person

congratulations.

Rory Alsop

lol

I reckon you can extrapolate using data from other sites: me on Music: rep 20k, reached 1m, Parenting rep 13k, reached 820k, Outdoors 12k, reached 237k, Mechanics rep 10k, reached 885k... here rep 43k....reached maybe 1.5m??

I dunno

Simon

13:01

@AviD pls stop

Rory Alsop

@RоryMcCune that takes me back :-)

Rоry McCune

@RoryAlsop I have a feeling you were the only one to get it...

AviD

@RoryAlsop heh, d'oh - I missed that number before. just noticed it....

Simon

o noes someone is pulling a Simon and flagging old posts.

Rory Alsop

@Simon but who would be Simoning like that

Simon

13:03

@MRS1367 Son, you're gonna break the chat if you join that many rooms at the same time.

@RoryAlsop A fearless individual.

Rory Alsop

@RоryMcCune do kids these days have actual calculators?

as opposed to a tablet or phone with an actual font

Rоry McCune

@RoryAlsop probably not (apart from US science students who IIRC have to have specific models of TI calculator for exams...)

Simon

@RоryMcCune Hey, I got it, I just didn't read it until now.

Rоry McCune

@Simon you googled it, didn't you :op

Simon

nooooo

We used to do 513505, which is "soleil" (sun in French).

WAIT THAT'S WRONG

Ah whatevs, cba.

Rory Alsop

13:12

713705

Simon

Yeah, that. Sigh.

It's one of those days.

And I just choked on water.

Yup, one of those days.

Rory Alsop

:-(

AviD

@RoryAlsop still stupid, though - whats the fun in spelling sun?

silly canadians.

Simon

Isn't it ironic how when we choke on water, we just drink more water?

OH I JUST CAN'T SPELL

AviD

I'm not sure you know what ironic means. Ironically enough.

Simon

13:15

-.-

Can someone mod flag kalinuh?

Rоry McCune

@Simon why would they do that?

AviD

@Simon Imma modflag yo face

Rory Alsop

@Simon yeah - where and why?

Simon

Because one does not simply leave da DMZ.

Rory Alsop

hahahaha

you miss her, eh?

Simon

13:18

Well, I wouldn't say miss.

AviD

@Simon leave her alone, she's busy with @Adi.

Rоry McCune

@Simon AFAIK she who must not be pinged has left SE not just the DMZ

AviD

or did he go back home to @Kisunminttu?

Simon

@RоryMcCune Again?

AviD

@RоryMcCune Again?

Rоry McCune

13:18

@AviD aren't they the same person?

Simon

@RоryMcCune wat

Rоry McCune

@Simon yeah it's a whole sock puppet thing, with multiple personalities

Simon

Cute.

Rory Alsop

@RоryMcCune Adi is Kalina? Ok...

Rоry McCune

anyway @Adi is your man for all things "she who must not be pinged" related

Rory Alsop

13:22

@RоryMcCune well, her latest tour has been very popular - taylorswift.com/events

Rоry McCune

@RoryAlsop good lord that's a lot of concerts!

Simon

That much touring can't be healthy.

AviD

@RоryMcCune she works hard, in between all the tweeting.

Simon

I'm sure she loves the money and the feedback from the crowd but still, that just can't be healthy.

AviD

which is her REAL job.

Simon

13:23

OH MY GOD SHE'LL BE IN MONTREAL

Rory Alsop

@RоryMcCune nah - that's generally 3 or 4 a week

pah

@AviD and the zero-day analysis

AviD

@RoryAlsop and the robot armageddon planning.

Rory Alsop

@RоryMcCune starred just in case you needed it in the star wall...

Rоry McCune

@RoryAlsop loong time on the road

Simon

Also, where are @Ohnana (ohnuhnuh), @raz, @Rhino?

Where are our regular donuts?!?

Rory Alsop

13:26

@Simon is it not about holiday season in the northern hemisphere?

Simon

Yeah, summer...

Rоry McCune

@Simon @Rhino has been about @raz too (IIRC) @Ohnana not seen in a while..

@RoryAlsop yeah midges started turning up this week :o/

Rory Alsop

@RоryMcCune nooooooo. It's like I've been trying to tell everyone: demons exist and proliferate in this world. They are just very very small...

Simon

Kids?

Rory Alsop

midges

kids are bigger, and have more powers than demons

Rоry McCune

13:29

@RoryAlsop yeah, we've got the midge machines running, so hopefully will get the numbers down around our house anyway!

Rory Alsop

the power of destruction especially

@RоryMcCune yay

Simon

There's nothing more demoniac than a crying kid in a restaurant right next to your table.

Rory Alsop

projectile vomit while 360 spinning the head - yup

Simon

Makes me want to throw a shoe at them.

Rory Alsop

@Simon but then how will you run when they come for you

Simon

13:31

@RoryAlsop Sounds like a god damn nightmare!

Rory Alsop

ah, but they're also cute

Simon

Just like in Monsters INC, don't let them touch you!

Rory Alsop

SOCK!!!!

Simon

:D

Rоry McCune

Shootdown Sequence (Voice-over Edition)

►

@RoryAlsop ^ this is what we need for Midges

frickin' lasers

Simon

13:38

Hit me with those laser beams

Rory Alsop

brilliant!

CodesInChaos

14:11

Eee han timing. 25 minutes of silence, then three answers within 20 seconds. Encrypting using AES-256, can I use 256 bits IV?

AviD

@CodesInChaos interestingly only one completely wrong.

well, considering who wrote the other two... but still.

Terry Chia

“Tendr Is Tinder For Finding Your Next Equity Crowdfunding Investment.” My industry is just trolling me now, I think

Tweeted by Pinboard on June 4, 2015 at 2:09 PM

Simon

3 donuts 1 question

And wow, da bear is bashing on my favorite language in his answer, what a donut.

Thomas Pornin

@Simon I am allowed.

Simon

But it's my favorite language!

Thomas Pornin

14:18

But, honestly, PHP is quite self-bashing.

4

Simon

o

Rory Alsop

@ThomasPornin that's a euphemism, right?

Simon

poor php

But it allows me to call a function directly from a string containing the name of the function, how amazing is that?!?!?

CodesInChaos

Php has a few nice features. The php 5.5 password hashing API is pretty good.

Simon

@CodesInChaos That I don't think anyone can complain about.

It does make everything much simpler.

And as far as I know, it is implemented properly.

@CodesInChaos How dare you to ask a question in a comment below da bear's answer to question his knowledge?!?

AviD

14:24

OW OW OW OW

Simon

shush ovid

AviD

as bad as I thought 4GL was... well, I was right - but now I see how they do the crypto in 4GL.

Human eyes were never intended to see 4GL Crypto.

Simon

Look mom, I'm passing a variable by reference in PHP.

I'm a big boy now!

Did you guys see everything you can do in PHP?!?!?

AviD

@Simon Oh. Oh wow. The craziest part is how he might actually be right, in correcting @ThomasPornin.

Simon

@AviD Dayum.

AviD

14:27

kinda like how it is impossible to ever beat Chuck Norris. Except for Bruce Lee.

is that it, @CodesInChaos? Are you @ThomasPornin's Bruce Lee to his Chuck Norris?

Simon

Maybe you should ping them once more.

CodesInChaos

@AviD I don't think either of us is a php expert.

Simon

Yeah, I'm obviously the reference here.

AviD

@CodesInChaos this is crypto we're talking about here.

@CodesInChaos besides, @ThomasPornin just needs to spend 7 minutes with PHP to be an expert.

Simon

ovid pls don't be too snarky

AviD

14:29

is this where I should say something about being an expert on @Simon's mom?

Simon

ovid, all, pls

M'vy

@AviD 7 minutes if he's hibernating.

Simon

ALL

pls

AviD

@M'vy time for a sandwich, of course

M'vy

:)

Simon

14:32

The bear obviously always eats a salad during lunch.

AviD

a salad sandwich

with strips of bacon instead of lettuce

and chunks of chicken instead of other vegetables

Simon

He's not a member of Epic Meal Time.

AviD

@Simon YOU don't know

Simon

He weighs like 63 pounds.

AviD

okay, that is pretty epic.

just had to google that...

Rоry McCune

14:39

Windows Vista Speech Recognition Tested - Perl Scripting

►

oldie but goodie

Simon

Someone recorded a video with a toaster again.

Thomas Pornin

15:19

@AviD In fact, no, we are not talking about crypto, but about whatever went through the minds of the PHP designers when they believed that they were doing crypto.

AviD

@ThomasPornin hehe, fair enough. so... perverted crypto?

CodesInChaos

PHP stands for Perverted Hypertext Preprocessor.

AviD

@CodesInChaos Perverted Heretical Perversion.

Simon

all

Leave the snark to the Stark.

2

Thomas Pornin

Well, that's disappointing.

I have been granted Canadian superpowers; it turns out that flying is not one of them.

Simon

15:28

wat

CodesInChaos

@ThomasPornin As long as you didn't learn that the hard way.

Thomas Pornin

@CodesInChaos The way is hard only at the bottom. Most of it is straightforward.

When they sell Superman outfits, they now include a notice that the costume does not allow flying -- apparently, there has been some overenthusiast customers, and subsequent suing.

CodesInChaos

Or just some overly paranoid corporate lawyers.

Simon

Just like that dude who sued the car company because the cruise control doesn't follow the road.

AviD

@Simon a buddy of yours?

all pls

Simon

15:35

ovid

AviD

heh

shymeen

Simon

I still can't believe that I'm 24 fucking y/o.

How do you lads not feel old?!?

AviD

@Simon neither do we.

Rоry McCune

@Simon ahh that's one of the magical bits of getting older, you don't really feel it (mentally) most of the time

Simon

YOU'VE REACHED THE 40s OVID? GOD DAMN MAN

Rоry McCune

15:42

I still think I'm in my 20's

AviD

If You're Only 20-Something, Stop Saying You're Old

►

@Simon uh nope, not quite

Simon

@RоryMcCune Yeah, that'll definitely happen to me too I wanna say.

donut 4eva

@AviD I AM OLD!

AviD

@Simon at least you're not a frikkin idiot. Oh wait...

Simon

That escalated quickly.

Rоry McCune

@AviD yeah it's almost like it was genetical

The Secret to a Perfect Body - Genetics

►

^I know weak segue into the vid but it's all @AviD 's fault

Simon

15:47

She's cute.

AviD

heh, nice

@RоryMcCune here @Simon this might help you:

Retarded Tests

►

Simon

y u replying to roro?

AviD

@Simon to continue the weak segue thread.

Simon

Do you guys think @AviD would be a Slytherin?

AviD

@Simon hell no, I'd be the crazy foreign dude that comes to visit for competitions and bangs all the chicks.

Simon

15:54

dayum

AviD

@Simon you'd be one of Hagrid's "pets".

Simon

No, I'd be harry potteur

AviD

you wish

Simon

Fine, I'd be Neville.

AviD

you wouldnt be the boy that lived - because even if you survived the evil wizard's attack, every one else would be lining up to fix that

@Simon see, now that I might believe

Rоry McCune

15:56

The Ultimate Game of Thrones Recap

►

Simon

lulz

AviD

really though, you would be one of the nameless faces in the background

Who Would You Be On Game Of Thrones? (With James Corden)

►

Simon

nct, I don't want spoilers.

I haven't even watched the first season completely.

Rоry McCune

@Simon SPOILER - people die

also.... bewbs

AviD

@RоryMcCune they ALL do

Simon

16:01

Especially jon snow

Because he knows nothing.

AviD

@RоryMcCune didja see the honest trailers for that?

Rоry McCune

@AviD thus the bewbs comment

AviD

ah true

that is what reminded me

M'vy

16:12

@RоryMcCune that is not really a spoiler if you ever watched the first scene of the first episode of the first season.

Rоry McCune

16:23

@M'vy yeah that was more by way of getting @Simon to watch the show (which is good) by appealing to his baser instincts..

M'vy

ahah

schroeder

17:52

playing around with Rapid7's UserInsight - very, very cool

Stack Exchange

23:26

Blog - Stack Exchange: Stack Overflow in Portuguese: now with less beta!

Gabe Koscky on June 04, 2015

Há mais ou menos 2 anos nós fizemos uma descoberta avassaladora: nós percebemos que a maioria das pessoas do mundo não fala Inglês. E, se isso é verdade, significa que existem programadores que, pasmém, não conhecem o Stack Overflow. O choque inicial foi grande, mas depois de um copo de água com açucar nós decidimos fazer algo a respeito disso: abrir novos sites sobre programação!

Criar novas comunidades onde mesmo quem não fala Inglês possa se expressar em sua própria língua, à sua própria maneira. Afinal, ter a resposta para todo tipo de pergunta sobre programação é só metade do que faz do St …

Transcript for