« first day (1693 days earlier)      last day (3485 days later) » 

18:00
You wouldn't say "Added new onramp to I-70 to provide Subaru support"
Are you saying that Subaru's AWD technology is not worth to be treated differently?
It is known to be one of the most effective you donut.
@etherealflux Thank you for being eloquent enough to expand on my point.
@Simon Not as effective as me with your donut
@etherealflux pls try again
brb descending back into your mom jokes
time to write a simple new feature that shouldn't take more than a few hours
see you guys in a week
18:02
@etherealflux good luck weary traveller
@Simon added my question to the sec.se meta feel free to down vote or make me look like an ass hat with a obvious answer
That happens a lot on some of the questions I see.
Why do you associate me to a downvoting asshole?
@Simon just does the pls dance
@etherealflux ^^^ Exhibit A. @Simon
1- It is not a question that is specific to InfoSec.SE meta so it shouldn't be here
2- It has be noted numerous times.
And it's my second day here so have to keep my defenses up still
18:06
96
Q: Lower the amount of reputation needed to comment

James McMahonThis question is a great example of people coming from Google and using answers as comments. I understand the reputation threshold is there to prevent spam, but Answers are just as prone to spam as comments and you can post them at reputation 1. Furthermore there are already flags in place as a ...

I had trouble with that as well
50 rep seemed like an insurmountable height, since I thought you only got one per upvote
pls
I don't quite get the requirement, though, since you can such spam in answers if you want to advertise your latest deals on luxury import purses
or whatever it is bots are flogging these days
Even a few upvotes on an answer will push you past 50
and if that fails, you can always turn to robbing banks
@etherealflux I agree because you have to have lik 25 or something to answer your own question or something like that. I don't remember what it was. I got kicked from SE at some point because someone didn't like me and hit my rep so bad I couldn't do anything. BS.
@Simon I am not attacking you cause I don't like you. Its that mac vs. PC thing we have going on :P
It's a bit difficult to get started, for sure
18:14
@etherealflux you need 15 rep just to upvote. Rep needs a overhaul because as n00b I am pretty frustrated with helping and getting help in different communities.
So it seems like you have people that are either are a n00b and can't do anything or your a regular donut with #####K rep with a judgemental attitude toward n00bs (@Simon not saying everyone is like that)
I got a total of 2.2k rep.
That is low as hell.
A better explanation of how to get going might help
@Simon I have a total of 161 and I have been here for a while
I spent a few days trying to do things and not succeeding at them
raz
raz
101 rep is generally all you really need to be an active member.
18:19
@JukEboX You've answered a total of 2 questions on InfoSec.Se, you can't expect to hit a rep train on both on them and be set for life.
@raz that's global rep
I was actually one of the noobs who got scared off by the rep limits
usually I'd want to ease in by first upvoting, then commenting, then answering, but the model is reversed with the limits
@Simon I am not saying that. I am saying if I want to offer help I need information and I can't do that by providing a fake answer when I can comment on the OP
@etherealflux True. And its even more discouraging when your question is down voted or flamed by over repped users
@JukEboX This is supposed to be a temporary situation. When you hit 300 rep on a site, you'll automatically get +100 on every single site, which means that you'll never ever face this situation again.
You don't see 300 as a lot?
18:23
No, my donut got to 300 in 2 evenings of answering.
That is probably a total of 2 hours spent on SE.
raz
raz
@JukEboX So? 101 gives you upvote, comment, suggest edits, bounty, and chat. That's all you need to be an active member in the community. If you want rep then you have to contribute more overall.
300 is manageable
I think the problem is that it looks high
on sites like Reddit, one upvote = one karma point
that's a natural assumption to make
shudders: reddit
raz
raz
@JukEboX Oh sorry, I thought you meant 161 on Infosec
@raz I have 140 to go.
raz
raz
18:26
Yeah it's tough to get started on sites, but really it's just about contributions. Contribute quality answers to start, and you'll get there.
There is an intro page, but I'll admit I only found it after noticing there was a badge for reading it
raz
raz
I had several answers downvoted initially, but then you learn how to write answers. 1 vote on 10 answers, boom
@raz The problem is that answering is scary for a newbie. You're unfamiliar with the site and its rules, so you don't want to start by diving onto a landmine of negative rep
raz
raz
You can't get less than 1 :)
There is a delete option on your answer so if you made a huuuuuge mistake and can't correct it, just delete it.
18:28
Comments are less "big" than answers, which would make them a nice way to start contributing
raz
raz
If you get scared off by essentially criticism then it might not be the site for you.
@etherealflux Agreed
raz
raz
it only takes a few bad answers to realize the goals of a site, and what kinds of answers are appropriate. If you don't learn from your mistakes, that's on you.
I ditched the site last winter because of that worry, but now I'm perfectly fine with it
18:29
@raz I care not for the "raz" if you will but I feel funny posting an "answer" when I know it's not he answer.
puns pls
@JukEboX wat
@etherealflux sorry that's who I am. Be prepared for more. But I know how you like to keep it "ethereal"
okay that wasn't a pun
prepare to be annihilated
sets shields to fun
raz
raz
18:30
@JukEboX Yeah I get that
speaking of Reddit
gonna go check on the quality posts over at r/dota2
As a security analyst I have a lot to learn so answers from me are few and far between. I am better at SuperUser being in computer repair for almost 15 years. So being able to comment for information on InfoSec is most helpful.
Reddit = tl:dr
@JukEboX Then get 300 rep on SU and you will be able to comment here.
@Simon lol the vicious circle continues
raz
raz
@JukEboX Maybe you should ask questions to rep up then rather than answer.
18:34
@raz When I come across one I will. This is SE. You have to have a "good", detailed, and unasked question.
Yep.
"how do i of hack fbi?"
'hi i am liking want to use php and mysql to delete fbi computer'
"why did the infosec chicken cross the road?"
500000 rep
9999999999999 rep
18:35
"because hitler"
-2 rep
excuse me that is offensive as i self-identify as rep
Do you also find your face offensive?
@Simon That's your face.
@Simon -rep no pertinent question and many people can take inferences on "your face"
18:39
party in the pls tonight
OH BTW! Guess what today is!
"Sphinx is an acronym which is officially decoded as SQL Phrase Index"
@JukEboX the day we all die
Oh how they've stretched that one.
ohnuhnuh pls
@Simon that acronym hurts me
18:42
@JukEboX shaddup
@Ohnana ^_^
Today is the day of eternal torment and infinite silence, as are all days
but at least MTV has some new stuff on
MTV is still alive?
@Simon yes its the channel for angsty teens to watch random not famous but now famous for being on MTV shows do stupid things with their families money and knocked up teenage sluts with about 10 minutes of music
believe it or not but 16 and pregnant actually discouraged people from getting pregnant
18:47
Are you thinking of TLC?
The acronym is tragic nowadays
no that was an mtv show
OMG this question has made my day
5
Q: How can I liquefy my enemies?

HDE 226868There is a surprisingly diverse range of handheld weapons for use in combat, beyond the typical gun-related firearms. I'm looking for a cooler way to destroy enemies, and though flamethrowers are interesting, I'd like to not incinerate people, but liquefy them. The requirements: The weapon mus...

grumble grumble that's not how acids work grumble grumble
even piranha solution won't dissolve somebody in a minute, nevermind an hour
(sulfuric acid and hydrogen peroxide)
lol wat
@etherealflux I am enjoying the fake grown trap and the blender one
18:51
omfg that's a real thing
@etherealflux also someone talked about using your spider venom
ALL The question in this section are AMAZING
If you want to liquefy someone, just use photoshop
lol
they just posted on the chemistry SE
-1
Q: How long would it take to dissolve someone using Fluoroantimonic Acid?

AifyHow long would it take to dissolve a human body using Fluoroantimonic Acid? I understand that since the human body isn't homogenous, it's a bit tough to get the exact calculation, but lets say we create a mannequin using the material in the human body that Fluoroantimonic acid takes the longest ...

no context
ahaha
worst evil genius ever
raz
raz
He'll probably end up dissolving himself, SCIENCE!
Or just giving himself a serious chemical burn
then inhaling vapors and ded
raz
raz
19:01
Inhaling the vapors passing out and then dumping acid on himself, dissolving himself.
And the Darwin Award goes to....
Then no one would know where he went
EVER!
well, the pile of jelliflied flesh on the floor would be a hint
tasty
@venidividicivicini well if they manage to hide the giant fucking antenna on it... maybe
@venidividicivicini realistically this attack starts with "infect internal system with malware" at that point the company is likely already in a bad place security-wise
The only vaguely practical use I could think of here is to retain access after the defenders have discovered the initial infection and kicked you out of their network
but that's real marginal
19:16
@venidividicivicini the exfiltration route is unique, but the underlying problem is not.
19:32
@venidividicivicini we were talking about that this morning
@venidividicivicini that's actually really cool tho
Also the amount of data transferred is very small because it's not a speedly link and possible to degredate
yeah but you can leave it there for a few weeks
maybe get a pdf or two
compression algorithms are your friend
@Ohnana exactly. And you though 56K was bad
i actually don't remember dialup
we got cable really early
19:39
But that is enough to get some pertinent information such as a location or a password. Just like they did with the dumb phone and your computer RAM
Horray only an hour and 15 minutes till I can go home.
@venidividicivicini "...broadcast invisible, inaudible signals for miles." <-- making any signal travel for miles requires a bit of engineering, and not all of it can be done in software, especially when your platform is a AVR running in a home appliance.
@tylerl plus you would need a pretty significant power source. Though the dryer or washing machine they used might be programmable it would need an antenna to boost the distance from that 220V plug in the wall.
or something like this gotenna.com/pages/features hacked
19:58
@Simon What is the difference between the Meta for IS and the IS?
A meta board is for talking about the board
so things like rules, tags, etc.
Well, if anybody cares, I'm on vacation for two weeks. Ciao.
@JeffFerland En Joy
@JeffFerland bon voyage
LOL worlds collide
^ Equals three covers the Jeep hack
20:14
@RоryMcCune took a fucking left turn into "OMG SO RANDOM" there
@Ohnana it is random. I've been watching =3 for yeeaars...
the fuck is this show
never thought I'd see hacking on it
@Ohnana SRSLY, do you even Youtube
it's like the longest running show on youtube evar
Can't see the video here. What sow is it?
has many many subscribers
20:15
@RоryMcCune it's making my insides shrivel
@JukEboX Equals three (Ray william Johnson)
@Ohnana heh
Never even heard of equals 3
And I'm a little bit geeky
whaat
channel has 10,804,318 subscribers • 2,967,912,513 views
What do they normally do? Is it outside my core interests?
that's right 3 billion views
@RoryAlsop review viral videos, a couple of times a week
20:16
I don't subscribe because of subscriber numbers. I subscribe because something is interesting to me
they do three at a time thus =3
Oh, yeah - I wouldn't be interested
@RоryMcCune so they're content bottom feeders
@RoryAlsop that was more an expression of surprise that no-one on here had heard of it ...
Never really got into viral videos. Guessing I'm immune
20:17
10Mil subscribers isn't big anymore
I pretty much only see the videos friends send me a link to, or that come up from a specific search
@JukEboX it's still top 30 all time high subscribers including the fake channels
@Ohnana meh I like it, the presenter is usually fairly funnny (this one's knew , still finding her feet) and they find stuff I've not seen elsewhere
There should be a go to top button on the bottom of all the questions especially those with multiple answers. I don't care about the "home" button. Many people don't know how to do that.
20:47
3
A: Anti-virus for Linux - Is Linux less vunerable than Windows?

Rоry McCuneThe reason for this tends to be historical. There is no reason why a modern desktop linux should be particularly more resistant to malware when compared to a modern windows desktop. However there have been many more viruses for windows than linux amongst desktop users, which is down to factors ...

^ I had a feeling that answer would attract a downvote or two :)
@RоryMcCune lol I saw that question. Wasn't quite sure how I wanted to word an answer.
@JukEboX saying anything other than "linux is more secure than windows" was going to attract downvotes, but I just don't think it's true
both have their strong and weak points
MS have done a lot of work on security over the years
and win10 is a lot better than older versions.
yeah, the main reason you see more win viruses is because there are more win users
You can argue that linux users are, on average, more technically competent, too
@RоryMcCune I concur
HORRAY I got my Teacher Badge!
@etherealflux i think that's a huge part of it. Plus, desktop Linux users are like unicorns
server malware? tons of fucking linux chatbots
20:52
just watch out for young children
it's a unix system
i know this
@etherealflux primarily that, yes, but there are other factors, such as the fact that downloading from a web page is the normal way to install software on Windows
and Windows updates are painful, so people look for ways to disable them (no, you cannot shut down your computer, you've only applied 7/42 updates, but after the update you only get the choice of reboot now or reboot in 1 hour, no retries)
@Gilles i haven't updated my computer in forever because when i do WPA2 enterprise breaks
i'm trying not to think of how many insecure packages I have rn :(
That bothers the F** out of me. I actively can't wait for windows updates cause I like my stuff up to date. And if you need to do them wait till night time and do them before going to bed. If it is still have a problem them you SERIOUSLY messed up your machine and need a sfc or a reformate
@Gilles this is indeed bad, and I'm guessing it's on the way out. On the linux side though it actually seems to be regressing with Curl|sh becoming more common e.g. curlpipesh.tumblr.com
@RоryMcCune yeah, curl|sh sucks. Having good package management is one of the main benefits of (most major distributions of) Linux over every other OS.
20:58
@Gilles exactly between curl|sh and repos with no validation/curation (e.g. npm, rubygems, pip, etc) it's a regressive step!
ohh this is brilliant. Wikipedia for the Scots!
Succinctly, ingineerin applees technical ken tae solve human problems. Mair specifically, ingineerin is a technological acteevity that uises professional imagination, juidgement, mense, an intellectual discipline in the application o science, technologie, mathematics, an practical skeel tae design, mak, an operate uissfu objects or processes that meets the needs an wisses o humanity. Ingineerin is the organization o technological tuils, acteevities, ken, an processes an aw. Professional practeetioners o ingineerin is cried ingineers....
3 points to anyone besides the Rories that can understand that at first reading
i could understand it
mostly from reading Team Fortress 2 fanfiction
@Gilles [runs 4 hour chkdsk before important project deadline]
@AviD it's just slightly misspelled English
@Ohnana ^^
21:03
@Gilles nae
@etherealflux or one I've witnessed many times: the race between finishing those updates and the plane taking off
you aren't reading it in the correct accent, then
fortunately, running Windows in a VM makes me immune to that one
@Gilles and then freezing after it claims it's done
@etherealflux seriously the fucking accents are out of controoool
21:04
@Ohnana g'day mate top o' the mornin' to ya' mate bloody hell mate you havin' a laugh mate
@etherealflux you sound like Dick van Dyke
@etherealflux ZIS IZ NOT MEDIZINE
god fucking dammit write english
EINS ZWEI TREI
oh dear, i zhink we id not bring enough bodybags
can't get the gratuitous accent into that one
If there's one meme in AppSec I wish would die it's "you can read the source" of libraries to get security assurance
no-one does it, no-one
@RоryMcCune RTFM taken to the extreme?
21:11
@Ohnana yeah read the fine source code... 'cause when you wanted to speed up development by using a 3rd party repo. what you really want to do is spend a couple of months reading the source first :)
21:51
please help
my coffee cup is empty
and I don't feel like moving
#firstworldproblems
@AviD I've been curious ALL day: what comment of mine got flagged??
all of them
you should feel bad
@schroeder oh hahaha, you should be ashamed
btw you can view flags history now...
@schroeder it was this one:
I'm sorry but this is a Q&A site. If you gain 20 rep, you can head over to the DMZ chat room where more free-form discussions are held. — schroeder ♦ 23 hours ago
OMG
HE SAID THAT?
THAT'S UNBELIEVABLE
we should set fire to him
@AviD Hahahahaha
22:01
burn him in front of the others as an example
no, HE said you need to gain 40 rep.
I edited into something family-friendly.
@AviD oh my
nice to see that becoming a moderator still consistently turns you into a monster
is it 40?
lol
@schroeder 20
@schroeder noob
points
ok - at least my facts were correct ....
@schroeder no no, you're all missing the point....
@schroeder you wrote it was 40, and someone flagged you with a fact check. That's it.
I had to go check too....
geez - I've been wracking my brain all day to figure what I could have said that someone would have objected to
22:04
hahahaha
and I didnt even plan it
@AviD isn't it actually 19?
I would have, if I'd thought of it...
@Gilles grammatically ambiguous.
@AviD that's a strange way of spelling TWSS
I mean, I'm ok with ppl not liking me, but I like to know what could set ppl off
@Gilles that's a level further than the vast majority of users reading the requirements would consider
22:06
@schroeder btw - pls. There will always be somebody that will object to anything you say. Or don't say.
@schroeder you shouldn't take anything I say as me not liking you
@AviD Of course not. Sometimes everybody will ignore you.
@Flyk right, just assume she hates you even before she says anything.
@Gilles .
I don't think I could actually care less if you upset randoms on some website
Flyk gets the "not about to be horribly murdered by me" award for using "could not care less" correctly
22:10
@etherealflux it's adorable that you think that the potential-murder-relationship you and @Flyk have goes in that direction.
2
I thought so too
@AviD Having issues over there?
@DavidFreitag no... I know, it was subtle.
Apparently.
22:18
better?
@AviD I speak from experience, especially [REDACTED]
23:21
hey @RoryAlsop, dya know if they still actually do conference swag packages?
I found the link that Aarthi posted waaaay back when, seems to still be live, but dont know if anyone be listening
THEY STILL HAVEN'T SENT ME MY T-SHIRT
GIMME MY T-SHIRT
why would you get a tshirt?
hmm... @RoryAlsop what about conference sponsorships, do they still do that?
just occurred to me that there is an SEI staff member that lives in the area. We could get him to man the SE sponsor table. That would be a little bit of awesome.
shuddup shoimen
MY T-SHIRT FOR BEING THE 8TH BEST FUTURE MOD
23:56
@schroeder I'm not gonna do it but I'm very tempted to flag this answer of yours: security.stackexchange.com/a/96027/24084
Come on dude.
@Simon what? It's an answer :)
If by answer you mean comment, sure.

« first day (1693 days earlier)      last day (3485 days later) »