« first day (1673 days earlier)      last day (3218 days later) » 
00:00 - 16:0016:00 - 00:00

12:00 AM
how about a room lined with Helmholtz resonant absorbers tuned to your mother in law's voice pitch? :D
 
I don't have a mother in law
Or even a girlfriend for that matter
 
well you get the idea ... you'd hear anyone else but whoever they're tuned to
 
I'm not sure there is anyone I wouldn't want to hear from. Perhaps Jimmy Fallon.
 
 
5 hours later…
4:59 AM
Update on the password hashing customer. They've stopped storing plaintext passwords in their database now.
They have switched to base64-encoding their plaintext passwords before storing them.
baby steps, I guess.
 
5:58 AM
@tylerl Don't you work for Google?
They do consulting?
@tylerl You should try slapping them in the face with a wet fish
 
@DavidFreitag @TildalWave this may be able to do something similar
 
@RoryAlsop oooh that's cool
Buuuuut not for $180
 
Adi
@RoryAlsop Man. That's sooo futuristic sh*t
 
Adi
6:47 AM
Man, this Greece thing is sooo funny at this point.
They voted for a government that refused austerity.
They had a referendum and they refused the bailout
Now they're accepting the bailout and approved more austerity
 
@RoryAlsop active noise cancellation?
 
Hell there ! :)
 
again? can't be a coincidence
 
@TildalWave very active - choose which noises you want to cancel. Or boost. Turn up the bass at a gig - in your own head!
or remove the bass altogether if your bass player is out of tune :-)
 
@RoryAlsop well yes you just play with timing and get all that
 
7:00 AM
@TildalWave yeah that one was on purpose. Cause now I find it funny :)
 
funny they'd be called Doppler Labs :) because that's how it would work
@M'vy hell to you too then :)
 
^^
 
55 Gallons of Lube? Customers Complain That Amazon #PrimeDay Sales Are Terrible http://thr.cm/Lvk91O #PrimeDayFail http://t.co/1EPKL3kGja
 
Adi
Oh no, don't bring back the DMZ Lubegate again!
 
I was told this was recommended by zookeepers. My uncle in Botswana needs some lube for his elephants. How much lube will he need per mating?

A: Tell your Uncle a little foreplay goes a long way. Perhaps if he rubs the elephants belly or kisses her neck, he won't need the lube
2
 
7:25 AM
@LucasKauffman HAHAHAHAHAHA
 
@AviD erm...wut?
 
@RoryAlsop yeah.
Nothing needs to be said about this photo. In fact nothing needs to be said at all, ever again.
 
that's very disturbing
 
7:43 AM
I know - it should be a long horn
On it's head
to be a proper pantsicorn
 
@Adi yeah I know it is super odd, if they'd just taken that approach 6 months ago, they would've save themselves a massive amount of money/hardship!
 
@AviD move closer and farther with your eyes to the screen and tell me that you also see those pants move, please!
 
oh, they're moving alright. nothing to do with my eyes.
Apparently elephant lube and unicorns go well together.
^ a sentence I never thought would ever make sense.
 
@AviD or ever be said/written
 
@RoryAlsop oh no, I fully expected to say something of that sort at some point.
 
7:52 AM
@AviD hahahaha
 
 
1 hour later…
9:01 AM
I wonder what people who read my election submission think who have no clue about who llamas with hats are
 
9:19 AM
I am having trouble parsing that sentence
 
@LucasKauffman I'm just happy you corrected the spelling
 
@M'vy He wonders what people who read his election submission think who have no clue about who llamas with hats are :)
 
9:36 AM
argh argh
punctuation!
people (who read his election submission) -> think who have ???
 
@M'vy English is a wonderful language
 
is it "What people think" ? and people who read and have no clue about <...> ?
 
of those people who read it, some have no clue about llamas. Lucas wonders what that subset think
 
Adi
9:51 AM
Man, I fully regret being excited about Arabic.SE (and subsequently signing up).
I completely forgot that there will be a high number of cross-user-base with Islam.SE
That shit backfired soo bad that I had to leave the community after less than 12 hours of it being in private beta (even after made about 10 posts)
 
@Adi you mean it's lost beyond recovery ?
 
@Adi woah - that bad?
 
Adi
I was explaining a well-established and well-researched translation practice used to translate "untranslatable" stuff from Arabic to English. I used an example from the Qura'an (given my good knowledge of the Qura'an and its literary structure).
A user called Ulkoma remembered me from a question on Travel.SE
He had asked me on Travel.SE if I were a Muslim, and I said no
He was so offended by me being an ex-Muslim that he went on a downvote rampage
 
@Adi that is also the guy with all the bulletproof gold bazookas.
 
Adi
@AviD Yes
 
9:56 AM
and he lurks here once in a while
 
Adi
He was extremely disrespectful in the chat, while I was trying to be respectful to him
 
trolls gonna troll
 
@Adi oh thats sweet
 
Adi
@M'vy He wasn't rolling
 
@M'vy @Adi yeah man, just shake it off
 
Adi
9:57 AM
In fact, an Islam.SE mod tried to end the situation but he still implicitly took the guy's side
I tried to reason with him, but nooope chat.stackexchange.com/transcript/message/22802886#22802886
 
@Adi the arabic.se has no dedicated mods?
 
@Adi wait, was this rampage on Islam.se or Arabic.se? or Travel.se?
 
Adi
@M'vy Not yet, I don't think so.
 
@M'vy those usually get appointed after moving to public beta. They are in their first day of private beta...
 
Adi
@AviD It started on Travel.SE when he asked me about my religious beliefs a few days ago.
@AviD Then he continued on Arabic.SE
(I'm not a member of Islam.SE)
 
9:59 AM
@Adi is that relevant to travel?
 
Adi
@M'vy Well, he explicitly included that in his question. He even started it with "I'm a Muslim"
His problem, as many Muslims I know, is that he was threatened by the possibility of this non-Muslim knowing shit more than him.
Ugghh
 
:)
 
Adi
I spent some time explaining to him my credentials, the sources of my knowledge, and how I've come to know about these topics
 
@Adi isnt that just the fundamentalist Muslims?
 
Adi
Nooooope
@AviD To be honest, bring an Atheist to any church in the world and get him in a discussion with a Christian who doesn't know too much about Christianity and see how it will go
 
10:02 AM
@Adi heh true
 
Adi
The problem with here is that people confuse membership with knowledge
Muslim and Christian isn't the same as doctor and engineer
 
indeed
 
Adi
You can't be a member of the doctor community without the knowledge, otherwise you're not a doctor
(barring some exceptions)
While you can just happen to be born Jewish, Muslim, or Christian, and become one
with zero knowledge
 
@Adi ah , youre thinking of the heurmentutics site.
or... however thats spelled.
 
Adi
I spent nearly 11 summers doing nothing but studying the Qura'an (one of the reasons I later became an atheist)
but, according to many people, the very fact that I became an atheist is an indication to my poor knowledge
Which is exactly what that member has said
 
10:05 AM
@Adi had I time, I'd research and read about religions.
 
@Adi so kinda like PHP developer?
 
Adi
and that's, exactly, is the reason for the issue I had there at Arabic.SE
@RоryMcCune :D
 
@RоryMcCune heh, I was about to say something like that about some pentesters...
 
Adi
@M'vy I was young, and I grew up in a Muslim family. Plus, it was a tradition to go to an Islamic "school" in the summer
 
@AviD hey hey hey, knowing the switches on nmap and nessus is tricky!
 
Adi
10:06 AM
I'm soooo glad that my parents sent me
 
@Adi Well, most people are raised in a religious family.
 
Adi
Otherwise, I'd probably be that Ulkoma dude
 
:)
 
Adi
This actually reminds me of something funny happened when I saw one of my brothers a while ago
After we got into a religious discussion, I said to him
> You know, we grew up in the same family, read the same books, had the same traditions, and yet ended up very very different people when it comes to this. What do you think happened?
 
@Adi a while back when they started judaism.se, there was discussion of a similar split as between Islam.se and arabic.se - split between the religion and the language. Turns out there are even more aspects - culture? food? living in specific countries? government? etc etc - and they decided to wrap it all up in one site.
 
Adi
10:10 AM
He said
> Well, one of us read, understood, and learned. The other, just read without learning.
I was so surprised by his level of self-awareness
 
luckily, from what I can see at least, the few fundamentalists there are pretty well contained, and everybody else is very pleasant and welcoming, at least.
 
Adi
I almost had a tear in my eye
Then he said "and you should have learned more to understand more like me"
:D
The asshole!
 
@Adi lol, was gonna say
 
Adi
@AviD This is indeed how splits usually go. They find a way to widen to many areas
@AviD In all honesty, I do think that this is what will happen to Arabic.SE eventually
I just don't want to be part of that process
I have enough stress already
 
I think there is less of a cohesiveness between the language and religion, as with Judaism and Hebrew. Then again, I could be wrong.
Take Turkey, for example - mostly Muslim, but not Arabs. Then take Sudan (I think?) - mostly Arabs, but not Muslims.
@Adi fair enough, makes sense.
any community that has that level of toxicity isnt worth the effort of being in.
 
Adi
10:16 AM
@AviD Indeed
 
@Adi It looked like the mod was more on your side, which is good. That travel meta post got weirder with the addition of his books...
I am baffled why he plans to a) meet me and b) ask me for a CISSP reference
 
Adi
@RoryAlsop Perhaps I misread the mod's action
 
WHen all of our interactions make me very unlikely to do either
 
Adi
but I didn't like that he specifically chose the "don't serve it" part
 
@Adi yeah - could have been a bit more robust
 
Adi
10:27 AM
Again, could be completely benign and I misread it due to the hostility of the situation in general.
@RoryAlsop Wait, what?
He wants a CISSP reference from you? On what basis?
Do you know him outside SE?
 
@Adi On the comment chain one one of his posts he pointed out he couldn't be a troll as he had passed CISSP from the stuff he learned in here so was going to ask me for a ref.
@Adi nope
@Adi And on his travel meta post with the books picture he has stated he really wants to meet me
disconcerting.,..
 
Adi
@RoryAlsop Oh yeah, I saw that one
He was trying to prove he's not a troll by showing pictures of the Qura'an
Solid logic
:D
 
Even I have a copy of the Qura'an
It lives next to my St. James Bible
 
Adi
@RoryAlsop That's 100% proof you're both Muslim and Christian
 
Or 100% proof that I am an atheist but like to annoy friends of mine who are religious by pointing out their fallacies when they try to justify things by saying their holy book told them to do it :-)
 
10:37 AM
@Adi or 100% proof that he is a lapsed Jew/Hindu/Buddhist.
 
Adi
@AviD Clearly! :D
 
(to be clear that "/" is designating "OR" not some strange merging of all 3...)
 
We at @mozilla are looking for a Sec Engineer to help implement TLS 1.3 for Gecko and work on other crypto features: https://hire.jobvite.com/Jobvite/Job.aspx?b=nnKZMrwO&j=oJ1p1fwU
hear ye hear ye
thar be jobs
 
@ManishEarth seriously why do companies still use jobvite? it is so horrid.
@ManishEarth also, was 1.3 finished being specified?
 
@AviD Mozilla's hiring story isn't great; they're working on improving it though
In other news, I can work for Microsoft (India) next year if I choose to, got an offer :D
cc @Xander
 
10:41 AM
@ManishEarth Mozilla is a funny company. As a company, they are highly respected and very interesting. But none of their products can say the same.
@ManishEarth woot! good for you!
 
Sadly despite having citizenship I can't transfer that offer to one of the Redmond teams; that's where all the stuff I'm interested in is :P
@AviD Yeah, but most of their products compete with an army and still come out pretty decently
i.e. firefox
 
@ManishEarth how so? I dont see that the case at all. E.g. take firefox.
 
@AviD hey, some of us like Firefox!
 
Last year at Portland, we had all skilled employees (incl non-programmers), as well as volunteers like me, and that was 1.1k people. That's all of Mozilla
 
@RоryMcCune hehehehehe, good one
 
10:43 AM
It has a wider community, of course, but paid employees are quite few
 
@AviD it's my main browser of choice on all platforms it's offered on
 
Contrast that to Microsoft where probably three floors of the building I'm in would add up to that number
The Firefox team is pretty small compared to what IE probably has.Same with chrome
 
@ManishEarth hmm true, so that would explain it.
but isnt FF mostly developed by the community?
 
They're respected because they're usually the underdog and fight for the user/openness. A lot of their funds go into totally nonprofit things like promoting the web or teaching or other things.
@AviD Ish. Community is huge. Volume of contributions is large, but not that large
Major features are still worked upon by core employees
I mean, contributors can work on major stuff
just that it's very rare for that to happen
In Servo we've got it a bit different, contributors regularly work on large things
Though "large" for Servo is a different size than "large" for firefox
 
I love your election noms btw
 
10:51 AM
@AviD I can't read Hebrew. I would like to learn, but feel it may take too long
 
@RoryAlsop it has a very different format and structure from most (european) languages, so it would probably be difficult, unless you already know a similar language (like Arabic).
 
@RоryMcCune is it now less bloaty/memory hogging? Might give it a try again
@AviD Sadly no - English, German and Spanish is all I have
 
that said, after the first hurdles, you get how logical the structure is, and makes it easier to learn the rest.
 
@ManishEarth you like all of them?
 
@RoryAlsop well all the browsers are a bit bloaty TBH but I've not found FFox particularly bad in that regard..
 
10:54 AM
@RoryAlsop RTL is the first big difference :-)
 
@RoryAlsop no, just the funny ones and the llama ones
 
and the language rules are a lot more solid.
 
heh - you missed @Iszi's one. Oh, and @Jefff's
 
@ManishEarth so, most of them.
 
@AviD and the character set -
 
10:55 AM
@RoryAlsop yeah that too :-)
 
@AviD My kids are getting a year of Mandarin at school - and I am no help to them :-(
 
e.g. in English there are a whole lot of unconnected rules, For any given rule, there are any number of arbitrary exceptions, in various types - that you have to just know.
 
@RoryAlsop just give them a satsuma :)
 
in hebrew, the rules are connected, and even the exceptions have rules to follow.
@RoryAlsop ha, thats a tough one. Start by getting them a lot of rings.
(^ Iron Man reference....)
 
10:57 AM
@RoryAlsop you're a dad, dad jokes are expected of you :)
 
@RoryAlsop aaahhhh! site is offline!
 
@AviD lol
 
oh wait
 
@AviD oh - that's no good
 
ftfy
also, site needs updating to remove flash :-(
 
11:09 AM
@RоryMcCune WOW I am slow. Just got that now.
 
guess I was too hung up on MY dad joke
 
11:32 AM
@ManishEarth Ah, you work for Microsoft now?
 
@TerryChia Currently an intern
 
@ManishEarth Cool.
 
Back to college on Monday though
 
12:29 PM
@AviD a 2nd College Humor channel........ thank you for that blow to my productivity
 
hehe
 
12:48 PM
heh. This show is getting strange,
 
@JourneymanGeek Mr. Robot, I'm guessing?
 
yup
The hackery stuff still dosen't annoy. THe rest of it is totally surreal ;p
 
so, you're about 6 minutes in.
and it gets more so.
@JourneymanGeek the fact that the hackery stuff doesnt annoy IS surreal.
 
Oh, i'm 36 min in ;p
@AviD like the raspberry pi references? ;p
 
all of them. It's like the showrunners have actually seen a computer. Shocking.
unlike the other cyber shows around now...
Scorpion and CSI:Cyber.
 
12:55 PM
I'm still unsure if mr robot is real tho
lol
didn't even watch those ;p
 
the one thing that does bother me about the hackery stuff - the guy's main hacking trick is brute forcing passwords, but everybody considers him to be some elite super hacker.
Still, that actually is just like in real life.
 
and guessing
he does mention a LOT of social engineering
 
@JourneymanGeek except that he doesnt really do it, he just thinks he does it
again, much like real life
 
oh, EVERYTHING in the show might be a drug addled dream
Even the dog
 
@JourneymanGeek might not
we dont know yet
 
12:57 PM
That's the beauty of it
 
I'm also unsure about the hacker chick
not the one in the headscarf.
 
@Adi Yup. In fact, the referendum was not about deciding about austerity or not; it was a trick used by Tsipras to retake control of his own political base.
 
@ThomasPornin and a way to say "you chose it yourself" if the vote had ended in a yes
@AviD What's his cyber level?
 
@LucasKauffman OVER 9000!!
 
1:09 PM
@AviD I didn't get it - probably as I don't really know Iron Man
 
@AviD they had some technical advice from someone who knows at least something about the field twitter.com/inteltechniques
 
one of his main bad guys is The Mandarin
 
@AviD ahh - ok
 
The Mandarin is a fictional supervillain that appears in comic books published by Marvel Comics. He is the archenemy of Iron Man. The character was created by Stan Lee and designed by Don Heck, first appearing in Tales of Suspense #50 (February 1964). The character is described as being born in China before the Communist revolution, to a wealthy Chinese father and an English aristocratic mother, both of whom died when he was very young. He is characterised as a megalomaniac, attempting to conquer the world on several occasions, yet also possessing a strong sense of honor. The Mandarin is portrayed...
@RоryMcCune so did Black Hat (the movie) - apparently didnt help
 
Back in those days I didn't read comics so much - I had a subscription to New Scientist and National Geographic #confirmingmygeekstatus
 
1:12 PM
@RoryAlsop national geographic wasnt geeky then
and we all know you only subscribed for the pictures of native girls - the ones where they dont wear clothes
@RоryMcCune that sounds like an awesome job.
 
@AviD ahhhh - those were the days
 
@AviD advising TV/Movie types yeah that would be fun, I imagine the first req. for that kind of gig is "Live in LA"
 
@RоryMcCune hmm ya think?
 
raz
@AviD I think Christian Slater's character is all in his head. Fight Club type shit.
 
@AviD well that's where a lot of TV is run out of and I'd imagine that it's easier for them to use locals rather than fly someone in
 
1:15 PM
Quick question people: is any of you aware of a recent IE 11 update (on Windows 8.1) that changes the User-Agent string, in particular with regards to "compatibility view" settings ?
 
raz
I don't use IE, didn't notice any updates recently
 
@ThomasPornin I am not.
 
@ThomasPornin I'm not, there's obv. the MS Edge stuff, but that should be (IMO) Win10 only.. that said I have various win 8.1/IE11 boxes so could check..
 
looking at it now - I dont think it looks any different
but then I dont really often compare my UA strings...
 
@AviD I managed to set off my works IDS by fuzzing my UA strings
 
raz
1:17 PM
@RоryMcCune Hopefully your job is to find bad things.
 
my UA string is now: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko
depedning on how recent the update
@RоryMcCune heh thats some wonky IDS then
 
@raz yarr I was testing a website and interested to see if it reacted differently to differing UAs
 
especially for a PT company!
 
@AviD I see that one, and the problem is that I still see it when I enable the "compatibility view" settings for the target Web site.
 
@AviD nah one of the UAs in Burps standard payload set is equal to known malware
so a sensible detection
 
1:19 PM
hmm, except that it should be expected that the pentesters would, you know, pentest.
 
Adi
@ThomasPornin What about it?
 
I could understand greylisting it though.
 
@AviD yeah and I'm sure that'll go on a list of known FPs now but I must've been the first one to trip that particular rule
 
@ThomasPornin is that supposed to send different UA strings? I thought it was just using a different rendering engine.
 
@Adi Up to a few days/weeks ago, when activating the compatibility view settings for a target domain, the User-Agent would mimic that of an old IE
in particular it would include "MSIE"
 
1:20 PM
@RоryMcCune even worse, what has everybody been doing till now??
 
It still does for an up to date IE11 on WIndows 7
 
@ThomasPornin ah interesting
 
@AviD could be using different UA fuzzing lists, I'd guess. Plus UA fuzzing frankly is quite low return in most cases
"If the user chooses to render a site in Compatibility View (click Tools > Compatibility View Settings) then IE will send a User-Agent string that mimics Internet Explorer 7’s UA string:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Trident/7.0; .NET4.0E; .NET4.0C)

By default, sites in the Intranet Zone render in Compatibility view, so this is the User-Agent string they’ll see."
 
@RоryMcCune yeah, thats true
 
Adi
1:22 PM
@ThomasPornin Yes
Disabled: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Enabled: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
@ThomasPornin So your browser isn't mimicking the older version's UA string?
 
@ThomasPornin @Adi Yes, I still see that on mine too. (MSIE 7.0 in my case) Win 8.1 with all updates.
 
@Adi Actually not my browser, but yes.
I have apparently two cases in distinct customers.
I cannot reproduce it with a local IE 11 + Win8.1
With development tools (F12) I can change the User-Agent by hand, but this is non-permanent.
 
@ThomasPornin could there be a difference between desktop IE and "Modern" IE?
 
2:05 PM
Ok, I think I found the reason
The affected Windows 8.1 is an "home premium" version
The compatibility view has apparently become an "enterprise" feature
But it is still possible to activate IE enterprise mode
The relevant tools (e.g. gpedit.msc) are missing, but one can still edit the registry.
 
ahh I'd heard something about windows 10 only having "legacy" IE stuff in Pro/Enterprise, didn't realise it would go back to 8.1 as well
 
@Gilles Nice to know my nomination is actually still desired! :-)
@Adi Am I forgetting something, or did I just miss it?
 
2:29 PM
Thanks to all for your help. I now have a method to unblock clients.
 
3:05 PM
@Gilles Didn't know you were a pescephile.
 
Re: our election ^
 
@JeffFerland well we do have some serious candidatures... which is nice
 
@RоryMcCune With one more candidate we will have a primary election, which will bring down the number of candidates back to 10.
Which will be fun, because while the final election is about who we love most, the primary would be about who we hate most.
 
3:21 PM
@ThomasPornin Ah, so that's how we knock out @Simon early!
I thought someone mod-pinned an election site link?
 
@Iszi From the main site page, click on the link on the right (it is even in red)
 
^ Someone super-pin that, please?
And isn't there a way to view previous elections?
 
@Iszi change /3 to /2, /1, etc: security.stackexchange.com/election/2
 
Wow. 3 years since the last election already? Hard to believe the place has been around that long.
 
3:26 PM
@Iszi pls
 
Time moves fast when you have a time travel machine. Our slow. Or backwards...
 
@RoryAlsop I knew it! You're the Doctor! That's the only explanation for your age!
 
Time does not slow, or speed up, nor goes backwards :)
well, not as far as time travel is concerned ?
you go back in time, but time does not rewind
 
That's not what we used to say on Gallifrey, @M'vy
Timey wimey...
It's a bit wibbly wobbly
 
yeah
depends on your point of view
your time may slow/speed up/jump backwards for others observing you I guess
 
3:36 PM
I wonder if being "gender-verified by @ScottPack" counts as a qualification worthy of mentioning in a moderator nomination?
 
@Iszi not sure. However, it's T-Shirt material :)
Hell I'm bad with typos these days
 
3:51 PM
why do the daftest questions get onto the "hot topics" list
 
@RоryMcCune Because they're the questions that can be understood by, and interacted with, by the broadest audience.
 
@Xander yeah guess that makes sense... so rep hunting == answer the daft questions...
 
raz
@RоryMcCune Which question did you see?
 
5
Q: Is this idea for a password manager secure? If so, why doesn't anybody use it?

user54609I've been thinking of a problem with usual password managers: although they do provide better security than manually using passwords, there's a central database that can get lost, get compromised, etc. For example, malware could use a keylogger to get your master password and then compromise all ...

 
raz
Ah, yeah if you want rep answer the daft questions. More likely to get eyetraffic
 
3:59 PM
just realised it'll be Sec.SE's 5th Anniversary in November'ish time this year
 
00:00 - 16:0016:00 - 00:00

« first day (1673 days earlier)      last day (3218 days later) »