The DMZ

schroeder

19:04

in some places f**k is highly offensive - I understand the edit

David Freitag

An African or a European pigeon? — Mark Adler 6 hours ago

Hehehehehe

Thomas Pornin

19:23

@DavidFreitag Oh, that is the Mark Adler. The author of Deflate / gzip.

David Freitag

19:36

@ThomasPornin Also a pretty funny guy, apparently.

AviD

@ElephantsonParade depending on your currently existing products and infrastructure, actually not very complicated to do securely, if you pay attention.

@ElephantsonParade doesnt need to be complicated.... especially with current VM technology.

AviD

19:58

@ElephantsonParade for example.... I already have my whole system(s) set up as VMs on HyperV, in a Windows 2012 domain. Also already have DD-WRT on my router.
So, I hooked my router up with dyndns, set up a RD Gateway server, and had my router direct all incoming RDP *only* to the RD gateway. There, I enforced strong encryption and restricted access to authenticated users (me), who all have super strong passwords. I put on the RDG a set of policies to restrict and direct access only to the servers I wanted to allow, which are of course defined by name which are registered in my local, locke…

Secure? yes: strong TLS; strong passwords; restricted access; FW open only the RDP port, and only to the RDG; etc etc.
Completely safe? no, of course not, I just opened my servers to the internet.

I mitigated that by completely backing up everything before opening it, checking the logs after. and as I said only opening the specific systems I need, which are of course relatively locked down.

@RоryMcCune that cheeky nandos thread is a larf.

is it bad that I understand almost all of it?

w00t, I repcapped again today :-)

Simon

20:14

@AviD Shush with your RDP.

AviD

@Simon well, he wanted secure.

Simon

I'm kidding, I gotta admit that I've never had any problems with RDP.

AviD

@Simon the RD Gateway service is the balls.

right cheeky, innit

@RоryMcCune did I get that right?

Simon

You know what else is the balls?

AviD

@Simon your mom?

Simon

20:17

lps

David Freitag

@RоryMcCune Congratulations, you just caused my brain to deform and trickle out of my nose.

@Simon launch processing system?

Simon

No, lala papa sisi

AviD

@DavidFreitag Are you doing your #simon impression?

David Freitag

@AviD u wot m8?

Simon

all pls am a backend dev now

Elephants on Parade

20:20

@AviD, can you recommend a router + firmware version for doing DD-WRT? I've been looking into that this afternoon, but the number of choices (hardware + firmware version) is staggering. I have a Linksys E4200, which sounds like it might work? dd-wrt.com/wiki/index.php?title=Linksys_E4200

AviD

no no, it's "pls
all
wut
donut"

@Simon that's true. cue the PHP mocking.

Simon

@AviD What a donut, you spelled it backwards.

It's "PHP".

David Freitag

I have a buffalo AC extreme router which has a really good stock DD-WRT implementation on it.

AviD

@ElephantsonParade oo, I dunno. I bought it a couple years back, based on recommendations here from better experts than I.

@Simon lol

@ElephantsonParade I think that is similar to the one I have, slight different model.

at the end, it doesnt matter for this, get the router that best fits your needs.

David Freitag

This one:

amazon.com/BUFFALO-AirStation-Simultaneous-Wireless-WZR-1750DHP/…

It's fandamtastical

AviD

20:23

I needed strong wifi signal, got one that matched that.

once you put on dd-wrt, only the hardware makes a difference anyway.

Simon

The force is strong with this one.

David Freitag

It's 5GHz gives me equal speeds to the ethernet, but only has about a 10 meter range

AviD

and just take the latest stable version...

Elephants on Parade

haha, I wrote that one off because it has 3.5 stars on Amazon. Hey gotta narrow down the options somehow!

AviD

@DavidFreitag 10 meter range? can you walk around with it?

Elephants on Parade

20:24

Man, downloading these random bin files scares me. Am I alone in that?

David Freitag

@ElephantsonParade Silly, you check the rating on Newegg not Amazon. Amazon shoppers are largely useless.

AviD

that miiight cover my office, if I plug it in the middle.

@ElephantsonParade not at all, it's a sign of maturity.

David Freitag

@AviD Since that's about how large my apartment is, it works beautifully. I should say, the range drops off drastically once I get outside. I'm sure the range is much greater than 10 meters in an open space.

Simon

@AviD What? I just downloaded all of them.

AviD

@DavidFreitag ah. I have a lot of concrete and metal walls around my house.

David Freitag

20:25

I have tested, just at my door I will get 3 bars, and just outside I get 1 bar and very spotty

Simon

@AviD I totally didn't know that pyramids had metal in them now.

David Freitag

@AviD The 2.4 is still very fast (90Mb/s as opposed to 115Mb/s) and I can get it down the street.

AviD

@Simon hehe lol

@DavidFreitag ahh okay then. not bad at all

David Freitag

But I rarely use the 2.4 since there are 30 AP's in my apartment complex

AviD

not a huge difference either.

David Freitag

20:27

And they are all jamming each other because they all largely run on the same channel

@AviD If you had range issues there are hacks around that add external antennae to the router for better range. But you need a decent soldering iron for that.

AviD

actually, it's pretty fine now. might be a tad spotty in the far reaches, but I don't need to worry about fast internet in the upstairs closet.

Rоry McCune

@AviD you're a ledge mate

bantasaurus rex, innit

AviD

@RоryMcCune thats top

Rоry McCune

@DavidFreitag I just ordered one of these linitx.com/product/…

8-port Gig managed switch + access Points + router == £100

David Freitag

@RоryMcCune lol "MikroTik Butt Router Switch"

@RоryMcCune But does it have dual-band AC 1750?

Rоry McCune

20:30

@DavidFreitag you're surfing with s/cloud/butt/g ?

David Freitag

@RоryMcCune Yes, I have that extension installed

Rоry McCune

@DavidFreitag nah, but I have no AC devices

so not a huge issue :)

David Freitag

@RоryMcCune What phone do you have?

Rоry McCune

@DavidFreitag ahh actually just got an iPhone 6+, so I guess that might be AC

but TBH not sure I will ever need to transfer data to my phone at over 100Mbps

David Freitag

Everything I use is AC and 5GHz, except for my chromecast. The awesome thing about this dual band Buffalo is that devices on the 2.4 can talk to device on the 5 network

Usually cheaper devices don't allow that

Rоry McCune

20:32

@DavidFreitag handy. How do you find the propagation on 5GHz?

we've already got 2 APs one at either end of the house to get coverage, and that's on 2.4GHz

David Freitag

@RоryMcCune It's less about transfer speed and more about bandwidth. Also the fact that there are 30 2.4GHz AP's where I live and only my 5GHz AP

Rоry McCune

@DavidFreitag err I may be being daft but what do you use bandwidth for except transferring things at speed?

David Freitag

I wish I took a screencap of the analysis I did with my tablet. Literally 27 of the 30 AP's were broadcasting on the same channel

Rоry McCune

@DavidFreitag yeah that's a good reason for 5GHz

ahh I see what you mean about bandwidth

not in the sense of AC using more

David Freitag

@RоryMcCune Three sometimes four people streaming netflix, youtube, music, etc 24/7

Rоry McCune

20:35

but of it being less congested

David Freitag

all in HD

Rоry McCune

@DavidFreitag shutupshutupshutupshutupshutupshutupshutupshutupshutupshutupshutupshutup

I got 9Mbps on my line today and was really happy with that

David Freitag

And the only device that chokes is the chromecast, but that's because it's on 2.4

Simon

@RоryMcCune That's pretty much what I get at home.

David Freitag

@RоryMcCune I have 105Mb/s service and depending on the time of day I can peak at 150Mb/s

Simon

20:36

@DavidFreitag You suck.

Rоry McCune

52 secs ago, by Rоry McCune

@DavidFreitag shutupshutupshutupshutupshutupshutupshutupshutupshutupshutupshutupshutup

David Freitag

And I pay... wait for it... $49/mo

Simon

@DavidFreitag I pay 45$.

David Freitag

And because Comcast screwed up my automatic payments the first two months in a row they just sent me a $50 prepaid visa card.

Simon

Is your bandwidth unlimited?

Rоry McCune

20:37

I pay $300

Elephants on Parade

@DavidFreitag you said the Buffalo has DD-WRT firmware stock? Do you update it regularly or just leave it alone?

Simon

@RоryMcCune What the.

David Freitag

@Simon AFAICT, I transferred 2.4TB last month

AviD

@DavidFreitag well, not as much as I'd expect, but still.

Simon

@DavidFreitag -.-

I get 125 GB/month.

Rоry McCune

20:38

@Simon bonded lines, business grade service, ain't cheap. The service is REALLY good though

David Freitag

@ElephantsonParade I have not upgraded it or done anything apart from unboxing it and plugging it in.

Simon

@RоryMcCune Dayum.

David Freitag

The main reason my service is so cheap is that it's internet only

AviD

I pay about 10$ for my ISP, and another ~20$ for the infrastructure

David Freitag

The same net package with tv costs $180/mo

AviD

20:39

@Simon wait, you're data is capped? so weird.

David Freitag

@AviD Apparently that's not uncommon lately.

Simon

@AviD Well, I gotta pay more if I use more.

AviD

@DavidFreitag I thought I saw some places making it illegal.

Rоry McCune

@AviD well I'm guessing if it's like the UK yours is too, it's just they don't tell you the cap till you use it

AviD

my cellular internet is capped, but home line is not

Rоry McCune

20:40

ISPs have never been able to sell truly unlimited services, the backhaul could never cope if people used the capacity at 100%

Simon

I get 1 GB/month on my phone.

David Freitag

@AviD They have been trying in the USA to convert it into a utility like power consumption, and one group is trying to make it limit-able (aka ISP's) and one group is trying to keep it unlimited (aka everyone else)

Simon

52$ per month.

Rоry McCune

so they bank on people not using it, so they can lie and say it's unlimited

AviD

@RоryMcCune possible. dont think I average at multi-TB, but definitely more than 125 GB...

David Freitag

20:40

@Simon I get 512MB per month with my phone

Simon

@DavidFreitag Really?

David Freitag

$39/mo

Simon

Not much of a difference.

David Freitag

@Simon It is very rare that I am not in front of a workstation or in an area with decent wifi

AviD

@RоryMcCune but only a small percentage of people would use it at capacity.

David Freitag

20:41

And my 64GB internal storage is mostly full with music, so no need to stream.

Rоry McCune

@AviD that's what they hope, and why they're generally scared of things like netflix which massively increase the usage on the network

goes right back to dial-up days when they had one port for every 20 connections sold, on the basis that only 5% of their userbase would want online at once

David Freitag

@RоryMcCune A friend of mine did a test on this (he has 150Mb/s service) and he was able to transfer a total of 140TB over the span of a month

AviD

@DavidFreitag 6GB on my phone, 10$. unlimited calls/SMS.

Rоry McCune

@DavidFreitag that's... alot of data

Simon

Canaduh sucks.

David Freitag

20:42

@AviD I never call and I use hangouts to text

AviD

if I want the full package - >20GB on phone, unlimited international calling, international roaming, etc etc etc - it would cost me about 25$

@RоryMcCune s/data/porn/

Simon

I wonder if I should celebrate tonight with a donut.

Rоry McCune

wow, if anyone likes Minecraft this is pretty cool

Minecraft Hololens demo at E3 2015 (amazing!)

►

David Freitag

@Simon I wonder how your donut would feel if you were fraternizing with other donuts.

Simon

She doesn't mind as long as she can fraternize with them too.

David Freitag

20:46

You really did lose out on a great joke opportunity by not saying "celebrate by eating a donut tonight"

Simon

I don't believe that what I do every night is a joke.

David Freitag

@Simon That's not what she said.

Simon

o

AviD

@RоryMcCune this explains what we saw @Simon doing all day.

David Freitag

The worst thing anyone could ever hear. "Ok, make your own bacon then."

(outside of "There's no bacon left")

Simon

20:50

My donut usually cooks bacon for me.

WAIT SHE DIDN'T DO IT THIS WEEKEND!

o she made pancakes

All good lads.

AviD

okay guys. Important question, this is crunch time. Dont disappoint me.

David Freitag

I cooked bacon over an open fire this weekend

AviD

Anyone have a solution / counter-hack for cryptolocker?

David Freitag

and, yes, before you ask: bacon s'mores are the bee's knees.

AviD

pretty sure my parents caught it.

Simon

20:52

dovid, we weren't planning to ask.

David Freitag

@AviD I think a hammer or some thermite would work

AviD

thats right, I will be spending the rest of the week on tech support.

oo oo bbc.com/news/technology-28661463

hmm. maybe I will actually have to go take a look at it.

Simon

HAHAHAHAHA

ovid!

This suggested edit shows how much of a donut you are:

security.stackexchange.com/review/suggested-edits/53114

Rоry McCune

@AviD AFAIK some crypto locker implementations are weak and it's possible to recover files, other ones, not so much

AviD

@Simon hahahah I claim the Spanish Inquisition.

-4

A: How was this token decoded?

i duuno BUUUUUUUUUUUUUUUT I NNEEEEED HELP

Simon

20:57

Yeah I flagged that one.

AviD

its funny!

David Freitag

Vanilla minecraft is almost unplayable for me now.

I need IC2 at the very least for some fun

Iszi

@DavidFreitag Kinda how I feel about KSP and MechJeb. But Squad is doing really well at integrating features from the most popular community mods into the main game.

David Freitag

Granted, for the most part, I play alone which doesn't help.

Simon

@Iszi What do your kids think about how much of a nurd you are?

Do they go like "My dad is stronger than yours... In Skyrim!"?

David Freitag

21:12

@Iszi At least the KSP mod authors keep the mods up to date, if I want to play any of my favorite mods I need to downgrade significantly.

AviD

22:16

OHEMMGEE I HATE GOT SO MUCH

I DID NOT SEE THAT COMING

I AM NOT HAPPY

NOW WE HAVE TO WAIT ANOTHER YEAR TILL NEXT SEASON

@RоryMcCune so, the finale - was that all in the books? Or are they going a different direction?

Rory Alsop

@RоryMcCune - I had TalkTalk call me up earlier. I may have been a bit spaced/hard of heading after a long weekend of ROCK but I'm pretty certain she ended up agreeing with me that a downgrade was my best plan. They couldn't give me any faster service and as I don't use a land line I should lower my monthly charge by £15

@DavidFreitag - what is IC2

Is that like terminology cop shows use when chasing perps and radioing the description back to control

David Freitag

@RoryAlsop Industrial Craft 2 ftbwiki.org/IndustrialCraft_2 (that wiki is likely outdated, but you get the gist)

amccormack

@RoryAlsop @AviD mentioned in this post that you'd be the one to talk to in regards to putting together some "getting started" pages on the security blog

Rory Alsop

Ah - seems like hard work. On the server I play on everyone has their role. Others do architecture, gardens, pillars, stuff...

I do running around at night stabbing

@amccormack I'm catching up after a bit of time in a field - lemme read it. But yes, that sounds like an excellent idea

amccormack

22:31

great. I'll be sticky around chat for a bit, just @ me when you want to chat

David Freitag

@RoryAlsop That mod adds tons of complexity to Minecraft, I love it. Tons of new mineables, plus machines and stuff. Endgame is pretty much massive nuclear reactors to power all of your creations.

Rory Alsop

22:54

Endgame? This the dragon place where you live for 1 second if lucky?

It annoyed me so much the first eight or so times I went there I decided that nighttime runny stabby was my goal

AviD

@RoryAlsop oh, I thought you meant "nighttime runny stabby" was some kind of particularly unpleasant incontinence.

Rory Alsop

@amccormack - yep, I think that could really work. And if you could do it as a series, you could add a whole load of links to questions in each area

David Freitag

@AviD Somehow you have managed to imply that there is a form of incontinence that is not unpleasant.

Rory Alsop

Have you registered on the blog? I think you need to do that first, then we can upgrade privs to contributor level

@AviD that wouldn't be a goal. It would surely be a symptom

AviD

@DavidFreitag particularly unpleasant

30 mins ago, by Rory Alsop

I do running around at night stabbing

I didnt realize it was a goal

David Freitag

22:59

@RoryAlsop No endgame as in what you are building up to.

@RoryAlsop Well were you wearing diamond armor... If not there's your problem.

Rory Alsop

Always wearing diamond. And diamond weapons/tools

AviD

@RoryAlsop night out on the town, eh?

Rory Alsop

Hahaha hahahaha

David Freitag

@RoryAlsop You bring any potions with you?

They are also kinda a necessity..

AviD

@DavidFreitag "potions"... I think he'll pick those up at the pub.

David Freitag

23:04

@AviD Is it illegal to leave the pub with the potions though? It is here.

Because good luck persuading the dragon into the pub.

AviD

uhh.... "dragon", is that like the fuzz?

David Freitag

@AviD I believe it's in reference to the angry girlfriend from shaun of the dead.

AviD

ah.

Rory Alsop

Potions? Emmm, no. Don't know them

Oh, did I tell you I visited a few Shaun of the dead film locations the other day?

I think I did actually...

amccormack

@RoryAlsop I agree, I think a series would be wise. A general overview with followed by posts about different focus areas / professions

I've been looking for questions along the "getting started" area. looking for questions asking about books, tutorials, certs, etc. Very few are that helpful, most get closed

Transcript for