« first day (1677 days earlier)      last day (3501 days later) » 

Adi
Adi
14:00
@Iszi Uggh.. oookay. I'll nominate myself.. jeesaas! /CC @ThomasP
> includes sensitive internal data stolen from Avid Life Media
I swear I had nothing to do with it
Adi
Adi
@AviD Sure. Let's see what the wife will say about that
think I could sue them for defamation? Or maybe trademark infringement?
Adi
Adi
@AviD I think you got the first one covered :D
hahaha
oh this part is brilliant
> “Full Delete netted ALM $1.7mm in revenue in 2014. It’s also a complete lie,” the hacking group wrote. “Users almost always pay with credit card; their purchase details are not removed as promised, and include real name and address, which is of course the most important information the users want removed.”
We know you want to remove your name, so we saved your name while you delete your name so you can delete your name while deleting your name
2
now, if you want your Full Delete payment details removed, that will cost you 199$.
Adi
Adi
14:03
Jepp. We really don't want that information becoming public
@Adi specifically the part of keeping details for all those that paid to have their details removed.
I was disappointed that they didnt open with "your security is important to us"
which as everyone knows is code for "we done did the stoopid and got ourselves hacked".
@AviD AFF?
@RoryAlsop Adult Friend Finder
@AviD No, instead they went with the "we're just one of many - there's no way we could have avoided this" approach.
@AviD $1.7mm? millimillions?
14:08
@Iszi how about NOT keep the data people paid you to remove?
@AviD That's just salt on the wound. Getting hacked like this would have hurt regardless of whether or not Full Delete actually worked as advertised.
@AviD Never heard of it, but then I can't imagine it would have cropped up in anything I do
@TildalWave yeah, wow - thats 90K people that paid to have their names removed.
Good thing we kept track of all those people that paid to have their names removed.
the PHC winner will be announced later today
@ThomasPornin Looking forward to it? :)
Adi
Adi
@AviD Is it like some place to get mellon?
14:10
@RoryAlsop actually mentioned in this article. They were popped a few weeks ago, shortly after the OPM.
@TildalWave So, $1,700?
names, emails, sexual preferences and fetishes... but dont worry, no passwords!
also, some emails from interesting companies, gov't offices...
Over 30M users' data compromised. Creepy thought - 1 in 10 people I see every day could be an AM customer.
@AviD that's under the assumption you don't use your fetishes as passwords too
@M'vy no one can spell that... erm...
14:12
@RoryAlsop :)
@TerryChia @CodesInChaos this keeping you busy?
can you leak any insider info? We're thinking of taking bets...
@AviD I was rather lazy concerning phc :(
@CodesInChaos that's no excuse for not helping us cheat on the bets.
I'm building an email to the CEO of another company telling her how their engineers screwed everything up. It's a lot like loading a gun
Adi
Adi
@DavidFreitag Building an email?
14:25
@Adi so are someone you know's details in there ... for research purposes of course
@Adi Yes, I elected for the granite and chisel option. You know, to show how serious I am.
I'm still pretty sad that I my best score is on that question : security.stackexchange.com/questions/81228/…
Adi
Adi
@DavidFreitag Umm..
@RоryMcCune :D
@Iszi that's what I was thinking yes
@M'vy Sorry. I chuckled like a middle school boy when I saw that the current score is 69.
14:27
@Iszi bad boy :)
@Adi Really what I mean is that it is full of information that I need to make sure is correct since I'm pretty sure someone is losing their job over this shitstorm.
@Adi Other candidates say that they will be good mods, which is boring. You promised neo-fascist dictatorship and mayhem, which looks a lot more entertaining.
@ThomasPornin To be fair I did not promise I would be a good mod. I simply said I want this place to be something I could be proud of. I'm pretty sure some Austrians were quite proud of their genetic purity escapades.
@TerryChia I already know the result, it was sent to submitters on Friday.
@M'vy I feel like you should have included an ocelot, or at least a bobcat.
14:33
@AviD too boost the score even more ? ahah :)
1
A: What could be the scope of ISO 27000 standards?

M'vyThe ISO 2700X series is about certifying the security management of a company. You are certified on the 27001 by the way. The scope is to be defined by the company. To do so, you implement the requirements of the norm (chapters 4 to 8) without exception. Chapter 4 revolves around the Deming c...

@M'vy this bit:
> Moreover, my locker does not care what's inside it. It could be your glass, it could be flowers or it could be empty.
"... or it could be a bobcat. "
@AviD or a tigger
just realized we were polluting the elections room. @M'vy bring the useless chitchat back where it belongs.
@ThomasPornin awww, so no gloating means you only came in 2nd. :-(
@AviD well it was kindof relevant
@M'vy sure, but still...
14:36
Funny that question has two bear answers : security.stackexchange.com/questions/43557/…
(same bear)
@AviD and now we have a bobcat in it. Was worth it.
@AviD Oh, was I too late in mentioning that? Can't you pull those messages over?
@Iszi meh.
as @M'vy said, it was kinda relevant.
@AviD I'm not sure exactly how.
@AviD BTW: Thanks for the gold.
@ThomasPornin Didn't you say that already?
@ScottPack Yeah, and I'm pretty sure I didn't promise anything about my moderatorship except that I'd like to do honor to the existing team. There's plenty of ways I could honor them without being a good mod - and some of them may even involve being a bad mod.
@AviD Wow. Time sequence preserved and everything? Cool.
@AviD you been reading oglaf again?
@RоryMcCune no, thats pure xkcd
Whelp, 15 minutes until a job interview. Here's hoping dude is actually reasonable.
@ScottPack good luck!
@AviD look at this weeks oglaf, very ocelot related (and as per normal for oglaf NSFW)
14:43
whats the job this time?
@AviD Wrong side. I'm trying to get myself a Video Engineer on staff.
@RоryMcCune @ScottPack ohhh yeah I did see that
but the ocelot was actually Archer related
@ScottPack ah! ofc.
Jul 15 at 17:46, by Thomas Pornin
Most candidates promise that they will be good mods and fair and benevolent, but you promised neo-fascist dictatorship, which looks a lot less boring.
@Iszi he might be senile, but at least he's consistent
@AviD With @RoryAlsop in the room, I don't think anyone else has the right to use the "senile" excuse.
14:50
@Iszi oh oops, I usually use that line about myself. I was a bit... confused
15:09
@AviD I am reliable. When people ask for secrecy, I provide secrecy.
is that a metaphor....?
@Iszi Yes, but apparently @Adi had not noticed, hence the repeat.
The DMZ got quite chatty with the elections. As if some candidates had something to prove.
@ThomasPornin Heh I noticed that too.
@ThomasPornin ha!
@ThomasPornin if they felt they had something to prove, they should be less chatty for a change.
@ThomasPornin Politicians gonna politick.
15:12
I also noticed that @Simon did the exact opposite. Perhaps he has something to hide.
@ThomasPornin I bring the Mayhem!
Well, non-candidate have been asking more questions as well.
@AviD Just be patient and wait 2h.
@DavidFreitag It's too late for that, we've already seen his personality.
@RoryAlsop Damn. So, I guess I'll just go get some queso?
15:15
@CodesInChaos patient?? Pfft.
that wont help me win bets.
@CodesInChaos You don't know Tiggers very well.
@AviD so there are bets :)
Who is betting?
@CodesInChaos Everyone?
@Iszi actually this one has been told that sometimes I have too much patience. Not sure how that works.
15:16
@TildalWave I still have yet to have one of those.
@AviD I believe they call that laziness.
heh. Inner calm.
or maybe I just can't be arsed to care.
cuz I'm dead inside.
hey @AviD have you had experience of using Checkmarx for Node.JS?
@Iszi Mayhem and Queso!
I know it's a bit "behind the curve" for you , but guessed you might have looked at it back when it was cool
15:19
@RoryAlsop Sounds kinky.
@RоryMcCune not too much. I actually did run it once on a small, test-ish project, for yknow, test-ish stuff.
@RoryAlsop that would be a great cartoon or webcomic.
@RoryAlsop And salsa?
@AviD any good? My v. limited exp. with ruby/rails was that it didn't do too well with dynamic langs.
@RоryMcCune yeah but they're improving it a lot.
@AviD it is a very hard problem to solve
15:21
@RоryMcCune TWSS.
most any static analysis will have trouble with dynamic langs, but at least Cx does expose you easy hooks to plugin some specific overrrides, if you know them.
there is still - and always will be - the question/problem of locality. but the base assumption/constraint is, they will test what is in front of them.
GIGO, in other words.
btw for Cx there is not really a difference between node and "regular" js, and they are def. improving on the client js.
I would call it "decent plus" for that right now for what it does, and of course you have the option of expanding that as much as you want (as much effort as you want to invest...)
@RоryMcCune something specific, or just in general?
@AviD nah had someone on an internal list asking about static analysis of Node.JS , so I thought "who do I know, who knows about static analysis and is likely to have used it on hipster languages....."
heh
actually I did do a bit more on Ruby.
saw marked improvements between versions, but a lot of that was from fine-tuning of the queries.
which, IMO, is one of the coolest parts of Cx's approach.
@AviD yeah I have a feeling that these things work best on longer engagements, unfort. 3rd party consultants often get called in for "one time" "code reviews" which aren't well suited to time spent customization tools for the job...
@RоryMcCune true. there is room to invest in "company queries", but not for one-offs...
still, even out of the box, it is likely to be one of the better options.
15:31
@DavidFreitag I was on vacation last week.
Yes, I asked for vacation after 7 days at my new job.
@Simon That's not a very clever excuse.
Fine, I was high on cocaine all week long.
4
Is that a better one?
Much
Sounds like a politician to me
Indeed.
@Simon for the elections?
15:33
@AviD Haha, the timing was quite interesting, yeah.
Are there any requirements to be able to vote apart from being a member of the site?
well you're back now. Go make yourself useful and upvote my quarterly answer.
There's a rep requirement I believe.
Oh welp I guess that makes the decision on who to vote for really easy for me then
> Any community member with 150 reputation may vote in the election.
15:34
@AviD Is that site-wide rep or just on Sec.SE?
@DavidFreitag sec.se
wait you dont even have that?
cmon even @Simon has that.
Quick someone share 49 rep with me
Edit 25 questions.
you get 100 for associating. answer 2 questions on the front page you'll have that in no time.
@Simon or this...
@AviD No, if I answer 2 questions on the front page I'll get downvoted to oblivion
@AviD I was really enjoying my 101 rep though. Guess I'll have to.
I misread this title, and got very upset.
-5
Q: Can someone explain how to remove a tagger?

user81407Can someone explain how to remove a person who is following my IP? A person followed me from one site where my user name was z11 to a different site where i was called newuser. They said hello to me uding my z11 name on the new site.

@AviD heh heh heh
@RoryAlsop THE TIGGER IS HERE TO STAY
@AviD I think:
> The Tigger Abides
2
Would be more cromulent
15:50
indeed!
well since no sane person will click that link...
> Used in an ironical sense to mean legitimate, and therefore, in reality, spurious and not at all legitimate. Assumes common knowledge of the inherent Simpsons reference.
@AviD I clicked it. Then laughed.
I was not aware of the ironical sense.
I was not aware that ironical was a word
Yay my edit got approved, my existence is validated!
@DavidFreitag ironical is quite the cromulent word.
@DavidFreitag good. now go work on my repcap.
11
A: Should I implement incorrect password delay in a website or a webservice?

AviDI assume that your intention with the failure delay is to prevent brute force attacks: if an attacker is trying to guess a user's password, she will first fail many times; if we can make those failures take a substantial amount of time longer, then it will make the attack an order of magnitude ha...

heh. Good man.
hope you read it first.
@AviD I have to admit, I updooted then read it
16:02
shame on you.
@AviD she ? again ?
wink wink
@M'vy same she as this morning
@AviD yeah yeah, I guessed that
You sexist mod :D
@Simon Looks rather nice for your competition, in the chat logs and on the star wall.
(I'm still laughing at this thing, ppl are seriously screwed :P)
16:04
@AviD Why shame? All of the answers that you have posted and I have read I have starred because they deserved it. I knew before reading a single word that this would be the case, so I starred it, then read it.
@DavidFreitag aww shucks, you guise
shame because we call that "Bear Protocol" here. as in, should only apply to the bear.
actually there was this one time that I didn't like an answer by the bear.
turns out I was wrong.
@Iszi Looks good to me too.
@DavidFreitag What do you need the rep for? Link a worthy answer, and someone might drop a bounty for you.
@AviD does it have it's meme page ?
@Iszi A: I have no answers on this site. B: To vote.
16:09
@Iszi he didnt have any, and wants to vote.
Oh, you mean in the election? Well then, I'm staying away from that. Don't need no scandal around here.
@AviD How many times are you going to use that?
@Iszi no no, we've already recorded you trying to bribe constituents for their vote.
unsuccesfully, I might add.
If you're going to bribe somebody, at least do it right.
@AviD Hey, I said "someone might" - not "I will".
16:10
@Iszi heh. s'fun!
@Iszi yeah, subtle, reeeeeaaaal subtle.
> election begins in 3 hours
whoooo!
@AviD Chances are he'd (ab)use the power to vote up donut-head over there anyway.
wat
oh no, candidate bashing
oh the drama
candidrama
let the mudslinging begin
note that I am NOT referring there to @Simon's mom
@AviD That's not mud.
pls
16:17
@DavidFreitag Ew.
@AviD hmm ya know someone said something about not being nasty about candidates during the election ... who could that have been :op
@RоryMcCune I very specifically said I wasn't talking about his mum.
all
@AviD uh huh, does that kind of logic work when your kids try it on you :op
huh @RoryA @Avi is it normal that a question would get locked after it was first migrated then closed as unclear on the target site?
what I find odd is that I can't vote on the question, and it says that it's locked, but I could on the two answers it got
16:32
@Xander I could've sworn you're already a mod somewhere - knew it wasn't here, but don't you have a diamond on another site?
@Iszi His name isn't in blue in the chat you donut.
@Simon For all we know that just means he hacked the chat to hide his moderatorship.
@Iszi Craft beer perhaps?
@DavidFreitag Beer is hardly out of Area 51, and we have a Craft Beer site?
@Iszi I dunno. I was thinking perhaps he was a pro tempore mod on a beta site that went glub glub
16:37
Ok. Correction: Beer has actually been around for over a year! Hard to believe.
@Iszi you really think he's gonna tell you where he keeps his diamonds? :)
@Iszi ewww 0.8 questions per day
I need a drink
So... nobody wants to give Sec.SE its first primary elections ever?
(Not that it matters much - around 30% of the current candidate pool are joke noms. 40% if you count @Simon.)
@Iszi Wut?
pls
@DavidFreitag We only have 10 candidates. Need 11 to hold a primary.
Otherwise it goes straight to finals.
16:41
What is wrong with that?
@DavidFreitag Nothing wrong with it. It was sorta cool that we were actually going to have primaries for awhile though.
@DavidFreitag With an election we have one winner and nine not-winners. With the primary we also would have one loser.
@ThomasPornin One or more losers... depends on how many new noms we get in the next 3 hours.
@ThomasPornin I would volunteer to be the loser, but I don't have the required 300 rep, and I can't do that many edits in 3 hours.
@DavidFreitag It only requires 300 rep to nom? That explains some things. They should fix that.
16:44
@Iszi Well if they raised the bar, many people would starve to death.
Should be 3,000 (minimum to have experience with close/reopen queue on this site).
@Iszi I think that would make much more sense, yes.
Why can I see closed questions on Sec.SE?
Must be because of my network-wide rep..
Why couldn't you?
@DavidFreitag Anyone can see closed questions. Takes 10k+ to see deleted questions.
16:52
Hmm, interesting.
@DavidFreitag Closed questions are like corpses hanging at the gate. Tells people "don't be like this guy".
It's actually surprisingly difficult to edit 25 questions on this site..
@DavidFreitag Yep.
@Simon And yet you suggested it to me?
@DavidFreitag Still is the easiest way to get rep if you don't want to answer/ask questions.
16:57
@Simon I never said I did not want to answer questions
17:16
@DavidFreitag Kind-of implied when you suggested you'd be down-voted into oblivion if you did.
@Iszi No that means I don't want to get downbooped into oblivion, not that I don't want to answer.
@DavidFreitag And given that you assume you'll get downblooped into oblivion if you answer, and you don't want to get downblooped into oblivion, the net result is you don't want to answer.
You can't want to answer and not want to get downblooped into oblivion, if the latter is assumed to result from the former.
@Iszi Nope, I've never been a mod anywhere on SE.
@DavidFreitag Why 25? You have 107 rep on sec.se. So (300 - 107) / 2 = 96.5... you'd have to edit 97 posts and have those edits approved to get to 300
@TildalWave Only 150 to vote. I'm not actually nominating myself, silly.
17:31
oh
well if you can rep cap in 2 hours, you have my vote
No, I'd rather not, thanks.
you're letting us all down :(
Well it's your fault for getting your hopes up anyway.
17:50
@Iszi Oh yes he can. I entirely understand that he wants to answer and also wants to evade consequences. But wanting is not the same as happening.
@TildalWave Pretty sure that's The Bear's exclusive territory around here.
Honestly, to get downvoted to oblivion on sec.SE, you must write something which is both abysmally stupid and utterly boring at the same time.
6
0
A: How to make sure that the cryptographic hardware accelerator is being used in am335x?

David FreitagThere is a TI wiki page for the Crypto hardware on the AM335x here. On that page there is a tutorial on how to compare the performance of the hardware accelerator versus the pure software implementation. After the modules are installed, OpenSSL commands may be executed which take advantage of...

Shameless self-promotion.
@ThomasPornin Abysmally stupid and unpopular will also do it. Like if you post an answer strongly promoting something from Steve Gibson's body of work.
@Xander No, I think the suckers that actually believe GRC might balance that out.
17:58
@DavidFreitag It is a nice answer.
@ThomasPornin Probably the most perfect question for me specifically on this site.
@DavidFreitag you should say "if you want my vote, you'll upvote this"
@TildalWave Heh, I thought about it. Really I only need 5 updoots. Presumably I should get one from the OP at least
@ThomasPornin That's just it, he writes really good answers. Also on space. Should answer more questions
@TildalWave The main reason for this is I spend lots of time cherry picking questions that I know I can answer. Then I agonize over what I have written for some unnecessary amount of time.
18:06
@DavidFreitag that's how I started too, but you do get better at it and it's a skill that comes really handy
@DavidFreitag You win!
shame it's an old question so we can't reptrain it
true what Lemonte says in the comment
@Simon I even did it before the election period started!
@DavidFreitag Like a baws.
@DavidFreitag you have 1 hour and 54 minutes to get 14 more upboats or 12 and an accept and you can even nominate yourself
18:09
@TildalWave I would rather lick a ghost chili.
@DavidFreitag TWSS!
@DavidFreitag You say that like it's a bad thing to do.
@Iszi No, it is not bad, it is just not for me.
Oooooh you touch my ghost chili
Or do you mean the ghost chili? It would be incredibly painful mostly since I have almost no tolerance to spicy.
18:13
Spicy is love, spicy is life.
No, I'm not suicidal.
Hehe I got a necromancer badge for answering that question.
I hope the author comes back and reads the answer (if he hasn't already found a solution)
@Simon Wimp. I've probably done it a half-dozen times already.
Well then I have no idea why we didn't do it together when you still were my dad.
18:15
@Iszi That did not look like a grenade the first time I looked at that.
@DavidFreitag I'm not going to ask what you thought it was.
Guessing the confusion comes from the pic showing it still in the wrapper.
@Iszi That's because you already knew I thought it was a large black marital aid.
Sweet edit, son.
@Simon It's a great euphemism to use in public, because most people don't get it and those that do enjoy a laugh with me.
I would like a few of those.
Bear protocol... too strong
18:34
heh so out of band MS patch today with no W2K3
many many pentest reports will now get to say "unsupported operating system missing critical security patches"
@AviD So how did your bets go?
@CodesInChaos The election hasn't begun yet, silly.
Also, that timer is off, if it's supposed to start at 4:00 EST, considering it's only 2:36 EST
I think that the 1 hour left thing means 1 hour and whatever minutes.
raz
raz
@Simon I haven't seen you campaigning
I love donuts, so should you #yolo.
@raz How does that look?
raz
raz
18:40
@Simon Looks fine to me, but you gotta get your message out there!
Posters
@DavidFreitag Almost followed link, but then remembered subject matter immediately preceding. SFW?
I mean, it is NewEgg, but you never know.
@Iszi Very SFW.
@Iszi The newegg marketplace has some weird shit, man.
@DavidFreitag Rule 34 in action, huh?
@DavidFreitag hey hey that's really NSFW
Where W is my wallet :op
user image
2
@raz ?!?
18:42
@RоryMcCune The 400GB one isn't bad, $390
And DUUUUDE 2400MB/s read 1200MB/s write is INSAAAAAAAANE
@DavidFreitag yeah that's not too bad really
@DavidFreitag I think I just heard you nerdgasm.
Granted the 400GB one is only 2200/900, but still.
I've got a samsung SM951 already tho' so prob. can't justify another SSD :)
@Iszi That's impressive, I wonder if you also have kleenex.
raz
raz
18:45
@Simon Perfect!
@Simon Who is Simon? I only know who @Simon is.
@DavidFreitag Damn it!

« first day (1677 days earlier)      last day (3501 days later) »