The DMZ

Thomas Pornin

00:11

@TildalWave polyarctos. Ye do not mix latin and greek roots.

AviD

@ThomasPornin I dunno, it seems that the Scientific name IS ursus arctos

Thomas Pornin

@AviD Scientists cannot be trusted not to make a mess of things.

AviD

heh.

Thomas Pornin

Still, within a single word, a latin-greek mix is considered bad style.

AviD

I guess all those polymaths are not really.... polyglots, right?

TildalWave

00:19

@ThomasPornin Sure we do, perilune, periapsis,... are such examples, and there's plenty of English words with Latin prefix slapped onto it, like prepay et al.

Thomas Pornin

Polymathy is a disappearing skill; as time passes, people tend to specialize.

AviD

@ThomasPornin whereas bears tend to specialize in polymathism.

Thomas Pornin

@TildalWave "English", by definition, is already a mix of every word that they could get their hands on. The British have always been quite fond of pressganging.

TildalWave

@ThomasPornin And Latin isn't? Or indeed any other language that we know of. It's all mixed man, erm, your ursiness

OK, maybe not Klingon

Thomas Pornin

@TildalWave There are... levels. Some languages import words more easily than others.

TildalWave

00:25

funny how this Ye do not mix Latin and Greek roots often comes up on Space Exploration

Thomas Pornin

In the case of English, they got invaded sufficiently many times to be almost forced to import several complete dialects.

TildalWave

even funnier how it's mostly me discussing it LOL

space.stackexchange.com/a/6641/49 or space.stackexchange.com/a/10042/49 for example

@ThomasPornin whereas in the North they were stuck with interjections? :))

David Freitag

00:58

mmmm steamed broccoli is delicious

Jonathan Musso

01:09

:D

TildalWave

nope, doesn't seem like it needs more broccoli :P

David Freitag

@TildalWave wat is that...

TildalWave

cheeseburger crust pizza :)

David Freitag

I have to say, my dinner tonight was very healthy

Gilles

01:42

> The problem with defending the purity of the English language is that English is about as pure as a cribhouse whore. We don't just borrow words; on occasion, English has pursued other languages down alleyways to beat them unconscious and riffle their pockets for new vocabulary. (James Nicoll)

@ThomasPornin it's the television level of culture

M'vy

07:16

Morning!

Rory Alsop

Morning

AviD

07:36

morning?

@TildalWave daaaaamn but that does look good

even despite the weird red/green/yellow things on it that have no place on pizza

Journeyman Geek

@AviD: That's a arguement I often have with my parents ;p

Pizza to me should have tomatos, cheese, and maybe basil. Nothing else. Certainly not bell peppers...

and Pineapple on pizza is a sure sign of a diseased mind.

AviD

actually while I agree about the diseased mind, pineapple is not that bad, and kinda interesting as an occasional change.

Journeyman Geek

(I'm slightly allergic to pineapple)

AviD

also onions and mushrooms belong perfectly well on pizza, but peppers? that cant possibly work.

my son likes putting potato chips (crisps) on pizza. I know.

Journeyman Geek

meh, throw a tomato on the mushrooms, add some salt and pepper, wrap it...

throw it in the oven and its perfect

@AviD: I'm sorry but you clearly did a horrible job bringing him up. Chips on Pizza? I'm shocked good sir. SHOCKED.

AviD

07:50

@JourneymanGeek WE ENCOURAGE DIVERSITY IN ALL ITS FORMS

it does do a nice job of upgrading mediocre pizza, though. I dont think he puts it on the good pizza.

Journeyman Geek

@AviD: SOME THINGS ARE AN OBOMINATION ONTO THE PERFECT ROUND!

Oh, then its fine.

Speaking of pizza and abominations...

Not a great photo but that's a 'pizza' on a prata base. Jarred tomato sauce of some sort, sundried tomatos, mix of mozerlla and cheddar (had leftover cheddar)

Rоry McCune

Mornin'

Arperum

Morning.

AviD

08:11

Here's some tools that will let you run and develop COBOL on modern systems, you sick bastard. http://buff.ly/1k54rbk

Tweeted by TheDailyWTF on October 19, 2015 at 7:13 PM

I think he meant @RoryAlsop ^.

Celeritas

08:41

Hello.

Rоry McCune

Hi

Celeritas

I came across a test where the instructions were to circle all of the correct answers. A question asked "what is an example of two-factor authentication" and the possible answers were "password and PIN", "password and private key", "private key and face recognition" etc.

My understanding is two-factor authentication really depends on having different "types" of ways of authenticating e.g. something you know, something you possess, some you are etc.

So would "password and private key" be 2-factor, assuming "private key" is a file on some media?

Rоry McCune

@Celeritas I would say that is an example of "Something you know" (the password) and "something you have" (the key file) so would fit the traditional definition of 2-factor authentication

Celeritas

Is the definition of 2-factor authentication more of an art than a science, in the sense there's no hard fast rules?

Rоry McCune

@Celeritas well the definition that I learned was it was two of "Something you know", "Something you have" and "Something you are"

Some people add things like "The location you are in" as a factor

but that's a bit non-traditional

Adi

09:00

@RоryM Did you send your title and the talk's title to Pekka?

We need something to put on the schedule

Rоry McCune

@Adi good morning Adnan, lovely weather we're having isn't it, I'm well thanks, I hadn't but I can do that now

Adi

Oh.. come on! Why is everybody giving me a hard time about not saying good morning? :(

Rоry McCune

@Adi most people tend to observe some level of social pleasantry to wrap the specific reason for the conversation :)

I was just finding it amusing that you don't :)

Adi

I mean.. you know me enough to know that.. for example, I don't hate you, I generally like you, etc. so I really don't see the purpose of social pleasantry here at all

Why do I need to hide the reason for the conversation and pretend like I need to be extra nice or something?

Rоry McCune

sure in a purely rationalist world what you're saying would make sense

Adi

09:05

Germany

Finland

Norway

Rоry McCune

are all countries

Adi

and exchanging social pleasantry to wrap a practical necessity makes no sense there

Well.. I guess Finland has ruined me a bit :(

Rоry McCune

@Adi well the finns do have a bit of a reputation for direct-ness (and knifes)

Arperum

@RоryMcCune Also alcohol. And a preferred personal space of about 10km

Rоry McCune

Adi

09:11

@RоryM Since you didn't send a title, you good with "Managing Consultant, NCC Group"?

Rоry McCune

@Adi yeah that's my usual job title

ohh do you need a bio too?

I can get one of those

Adi

No no

Just a title

To put on the schedule

Rоry McCune

yeah managing consultant is fine

the bio could just be "Rory is old, but not as old as the other rory"

AviD

@RоryMcCune thats not a factor, thats an attribute

Rоry McCune

@AviD not necessarily, if you can establish location accurately, then you could say "you can only log in from this location"

which would improve the security of the authentication model

AviD

09:14

@Celeritas @RоryMcCune NIST has some pretty specific defintions for that.

@RоryMcCune but exactly.

So location isn't PROVING your identity, it's a limiting ~~factor~~ attribute.

dammit. overridden words sucks.

Rоry McCune

@AviD possession of a file isn't really proving your identity either

but it's generally considered one of the standard factors

AviD

my point is factors should be additive (or maybe multiplicative?), not subtractive (i.e. a filter).

Rоry McCune

@AviD sure but I'm saying that for overall security, password + must be in this location, could well be better security than password + possession of this file

AviD

@RоryMcCune oh indubitably.

or rather, such scenarios may be possible.

2 factors of authN are not the end-all-be-all of security.

Rоry McCune

you're seeing it with mobile devices now that have GPS, so they can unlock in a "trusted location", now that obviously falls to high-end attackers, but for low end attacks that may not be a bad filter

AviD

09:17

it is just higher assurance of identity.

@RоryMcCune "filter" is the operative word there.

and I agree.

just like I agree that SMS - and sometimes even email - CAN be a substantial improvement for supporting authN, even if neither is a proper 2nd factor.

but I am rather cranky right now.

I am 3 different kinds of shocked, actually.

Adi

Anybody been watching Rick and Morty?

(look at me making an effort to engaging in a social conversation)

AviD

just called a pm at my client ($BIGBANK) to explain WTF is up the borked code they sent me. I was actually polite and nice... barely got past introduction and a question and half, and he starts SCREAMING at me. Despite my best efforts at calming him down, this ended with HIM hanging up on me.

but DAMN I was close to hanging up on him first.

@Adi one of those is the new canadian pm, right?

Adi

@AviD Check it out youtube.com/watch?v=szzVlQ653as

AviD

ahhh okay

Adi

Not as cartoonish as you might think, though youtube.com/watch?v=E_qvy82U4RE

AviD

09:24

@Adi that.... that is freaky.

M'vy

Argh seriously Twitter!

UX fail!!

Double fail even

search does not pop up the keyboard for a search until you click the field

and if I type Avi I get @AviD account, but other results are inserted before it after a delay

resulting in me clicking everytime on something I don't want to see.

Celeritas

bunch of late nighters

AviD

@M'vy ack, youtube does that too.

M'vy

@Celeritas Who's a late nighter?

Adi

@M'vy You see, that's where your fail is. You're trying to check @AviD on Twitter

AviD

09:27

you do a search, go to click the first hit, boom its an ad.

Celeritas

@M'vy everyone online at this hour

Rоry McCune

@Celeritas lolz, we're in a combination of Europe and Israel

M'vy

@AviD it's not even a stupid ad here, it's a stupid (other) account

Adi

@Celeritas Because the world only consists of Canada

Rоry McCune

here it is not late night

AviD

09:28

@Celeritas late night?? Dude it's noon.

M'vy

^ +1

Rоry McCune

@Adi well we do seem to have a large percentage of Canadians in here

there's the bears and @Simon and @schroeder

Adi

@RоryMcCune Really? French Canadians don't count, though

AviD

@RоryMcCune sure, if you count the bears by intellect. Or even character.

actually @Simon might even out the average a bit.

Rоry McCune

@Adi I was just thinking if we average country population to DMZ participation , canada is "punching above it's weight" as the UK phrase goes

AviD

09:34

@RоryMcCune assuming thats a euphemism, you're basically saying all of Canada is doing @Simon's mom?

DAMMIT TIGGER

2

Rоry McCune

10:55

"Yo mama's so fat she can't save files larger than 4gB"

Tweeted by KarstenAichholz on October 20, 2015 at 9:11 AM

cc(@AviD )

AviD

@RоryMcCune oh nice, I had to do a mental double take.

Ohnana

11:20

good job canada, you elected someone who's not a raging ball-face

AviD

@Ohnana is that a gay slur?

Ohnana

@AviD no, it just means the person's face looks like a wrinkly ball

AviD

cuz, yknow, that's uncool

@Ohnana ahh okay, sorry, I thought you meant the other way around

Ohnana

np

having a gay pm isn't a bad thing

AviD

so you're basically saying he's pretty?

@Ohnana never said it was

could probably go a long way in fixing a lot of the problems

Ohnana

11:22

do you want to look like a wrinkly scrotum?

AviD

many of which stem from lack of diversity and tolerance

@Ohnana not my face

Simon

11:41

Even though I didn't vote Liberal, I'm happy that Trudeau rekt Harper.

AviD

@Simon because you like the pretty boys.

NOT that there is anything wrong with that.

Simon

I don't think he's THAT good looking.

But yes, Harper is fugly as F.

@ThomasPornin Did you win your "érection"?

AviD

@Simon please, he is the prettiest dude in Canada.

I know, that's not saying much, but still.

Simon

We're due for a new security threat propaganda like Heartbleed.

AviD

yay!

I hope they hire @TildalWave to do their logo this time.

Simon

11:51

@AviD Why wouldn't they hire me instead? The logo would be loaded with freehand circles.

AviD

@Simon Because The logo would be loaded with freehand circles.

Simon

As if that's a good reason to not hire me.

AviD

but really, do they really need a reason?

Simon

I really want to get a job interview for a designer job and show them a portfolio of the most horrible drawings they have ever seen.

#lifeGoals

Rory Alsop

You'd need to wear a hidden camera - YouTube the reactions

Simon

11:54

@RoryAlsop I was absolutely thinking about that.

AviD

but only do it to the hiring companies that are already clueless and treat their employees / candidates like crap.

otherwise, it's just not nice.

Simon

I feel like I'd get a into a bunch of lawsuits because I'd be recording inside of a company.

AviD

I doubt they would have a legal leg to stand on.

Simon

What about a legal foot?

AviD

thats not to say they wouldnt try to sue you, especially if we're already talking about clueless corps...

Rоry McCune

12:04

github.com/PowerShell/Win32-OpenSSH <-- Hell cooling off today, as MS release draft OpenSSH server/client

Journeyman Geek

@RoryAlsop: looks like its cygwin based ;p

and borrowing a ton of code from nomachine?

Rоry McCune

@JourneymanGeek nomachine are their partners for the development

Journeyman Geek

Makes sense really

since they use it a ton in their current software product.

Rоry McCune

yeah that + a decent shell will go a loooong way to making certain groups of people happier with the platform, I reckon

Thomas Pornin

@Simon I wasn't candidate.

Simon

12:11

@ThomasPornin I thought you were the leader of the InfoSec party!

I meant did whoever you vote for win?

Thomas Pornin

@Simon This is tantamount to asking me who I voted for, which is technically illegal in Canada.

Simon

Sigh.

Once, I asked my mom who she voted for and I went to jail for 20 years.

Thomas Pornin

@Simon Even in Canada, "your room" is not synonymous with "jail".

Simon

Hehe.

AviD

12:56

@ThomasPornin thought the jails in Canada are probably quite a bit nicer than his room.

Simon

13:41

@AviD "The Canadian jails are so nice and welcoming that they've encouraged me to commit crimes"

0

A: Why is the 2nd step in multi-factor authentication not a single click?

Because: I do not have an Android app. I'm not using an Android app. I do not like Android apps.

What kind of answer is that?

Rоry McCune

@Simon not one, you should flag it

Thomas Pornin

@RоryMcCune In fact there is an answer in that, but it is quite oblique.

About as much as the question.

Rоry McCune

@ThomasPornin well yeah the question isn't much cop either

Thomas Pornin

Basically, @Begueradj says (implicitly) that there are reasons why he, as the user/customer, does not want or cannot use a specialized app, thereby inducing Google to provide an app-less mechanism.

Simon

I understood that. However, he should learn to comment.

user122738

13:54

@Simon I commented you saying I misunderstood: the title and the content of the question are confusing (at least to me).

Simon

@Begueradj The fact that you misunderstand the question is another reason to not post an answer.

user122738

@Simon I guessed I misunderstood before you commented me (the OP commented me and read again his question).

user122738

14:09

@ThomasPornin By the way, I thank You sincerely for all the accurate, clear and rich contributions you have given on this website. I actually recommended 2 of my friends to google using your full name as an additional keyword to cryptography issues. Je ne vous jette pas des fleurs, je n'en ai aucun intérêt, mais je tiens à vous remercier sincèrement.

Simon

I almost puked.

David-

hola all

Rоry McCune

14:25

@David- ola

David-

@RоryMcCune Morning @Rоry

Rоry McCune

@David- pls here it is afternoon :) I am texting you from THE FUTURE!

Simon

@David- How many times do I have to tell you that his name is roro?

Rоry McCune

@Simon pls somon

Simon

:OOOO

Rоry McCune

14:29

@Simon is your Donut not joining us today?

or did she get her fill of #DaysOfOurDMZ yesterday?

Simon

No, she's at work.

AviD

@Simon well, "crimes"... this is canada, so we're talking playing loud music after 9pm, riding your moose backwards, and mixing your poutine with maple syrup.

Rоry McCune

@Simon so are you :op

Simon

@RоryMcCune Yes but she doesn't work on a computer.

Rоry McCune

@Simon woah, people do work that's not on computers ?!?!?

Simon

14:30

@RоryMcCune Yeeeeeep.

AviD

@Simon so, y'mean, like selling bagels and pizza and stuff? cool!

Simon

@AviD Or a job where she actually gets paid more than me.

fkin rekt

David-

@roro, lol

Simon

@David- Well done sir, well done.

David-

:D

AviD

14:36

@Simon ah, so like selling ice cream. Cool cool.

Simon

lsp

@AviD Do you realize that you've made kalinuh run away and never come back?

AviD

sure, it was me. riiiiiight.

Sorry, my ego is neither so inflated nor so pathetic that I would be convinced that she cared enough about me to change anything at all in her lifestyle or habits.

Simon

Her last message was about you, son.

AviD

@Simon dont think I've seen it.

Simon

23 hours ago, by kalina

turning up 5 minutes after the conversation has stopped entirely and putting the room into a 2 minute cooldown is nothing less than acting like a complete prick for no reason

AviD

14:41

nope, not her last message

anyway, she was complaining about something she herself said, but getting upset at me for it. It's called "transference".

Simon

The last message was not worth mentioning without this one.

Thomas Pornin

There was drama ?

AviD

how would you feel if your parents said that about you and your elder siblings?

Thomas Pornin

Was it good, or was it regular drama ?

AviD

@ThomasPornin meh, barely counts.

Simon

14:43

@ThomasPornin I wanna say that it was somewhat entertaining.

AviD

@Simon something I missed?

Simon

pls you were in it

AviD

pfftt

Arperum

1 min ago, by Arperum

@AviD Wouldn't be the first time she abandoned a chatroom because of a particular individual.

AviD

10 mins ago, by AviD

Sorry, my ego is neither so inflated nor so pathetic that I would be convinced that she cared enough about me to change anything at all in her lifestyle or habits.

Rоry McCune

14:50

pfft you lot and your pussyfooting around

hey @kalina are you about or just off being busy?

AviD

@Arperum whoa. That's meta, dude.

Simon

@AviD IS THAT EVEN LEGAL?!?

Arperum

@AviD Heh. Quotestacking in a single massage is a fun trick to know.

AviD

@Simon apparently. or did we all just smoek some bad batch of shrooms??

Simon

SHROOOOOOOOOOOOMS

Rоry McCune

14:53

@Simon phhbt just 'cause you've got a new modern Prime minister who will probably legalise all the things

AviD

2 mins ago, by AviD

44 secs ago, by AviD

38 secs ago, by AviD

33 secs ago, by AviD

29 secs ago, by AviD

24 secs ago, by AviD

18 secs ago, by AviD

SHROOOOOOOOOOOOMS

Rоry McCune

M.O.D. A.B.U.S.E!

AviD

THAT IS SOME CRAZY CANADIAN GRADE-PM MINDBENDING RIGHT THERE!!

Simon

That's an evil trick.

Arperum

in Sandbox, Sep 1 at 10:00, by Arperum

1 min ago, by Arperum

22 secs ago, by Arperum

17 secs ago, by Arperum

6 secs ago, by Arperum

test

I figured that trick out months ago.

TildalWave

14:57

What trick? Ain't I supposed to be entertained?

AviD

@Arperum oh well goody for you

Arperum

@TildalWave You might notice that each and every link in the message a couple above your links to itself.

That, or my sarcasm meter is broken again.

TildalWave

@Arperum yeah I have noticed but that's like an ancient trick, it has novelty factor of like 0

at least there's shrooms at the end of @AviD's

AviD

@TildalWave I tend to pick up on trends rather late.

Arperum

@TildalWave Clearly most people were not aware. You are clearly way too hipster for this room though.

TildalWave

15:00

eeewww I just realized what I said LOL

AviD

hehehe

Simon

o lawd

Rоry McCune

ahh JQuery getScript FTW, so handy for XSS payloads

Rоry McCune

15:39

hmm XSS kills room, interesting observation

Simon

If that popped something on your screen, stop using Netscape.

Rоry McCune

@Simon pls, I was all up in the HTML5 XSS with <video><source onerror="alert(1)">

Simon

Yeah you better edit that out before I call you out.

user122738

use a number instead of a string in alert() for that purpose (XSS)

Rоry McCune

@Simon wat?

@Begueradj I did :)

Simon

15:43

@RоryMcCune da alert1(); you donut.

user122738

cool :D

Rоry McCune

@Simon no idea what you're saying guv :op

Simon

!!!!!!!!!!!!!!

Rоry McCune

as I say though what's a lot cooler than alert(anything) is loading an external beef hook with $.getScript

Simon

@RоryMcCune What's the injection vector though?

Rоry McCune

15:49

@Simon in this case it's kind of cool, create content on a social network, that then gets sucked into a third party app that doesn't fully sanitize it

user122738

@Simon I visited your website

Simon

@RоryMcCune Neat.

@Begueradj Wanna do the same with Andrew Smith on the same IP now, please?

user122738

I do not understand why you keep insisting I am Andrew Smith just because I asked mods to explain me why they suspended him for such a very long time :) Do not worry, if it is me then mods would certainly detect it :) @Simon

Journeyman Geek

o0

Simon

@Begueradj At least you're using a decent OS.

Rоry McCune

15:55

@Simon Vista, Amirite?

Simon

lulz

user122738

There are two meanings of your statement, but I feel you refer to the second one: when I stated bad things about Windows :) Take it easy :D @Simon

Simon

I don't own any computer with Windows.

Rоry McCune

@Simon Not even in a VM?

Simon

@RоryMcCune Well, I do have a W7 VM that I boot every now and then.

user122738

15:58

Did you code some stuff on your website for this purpose (OS)? You can only know I am using a Debian stuff anyway:) @Simon But seriously, why you gather such info via your personal website?

Rоry McCune

@Simon b.b.b.usted

Simon

@Begueradj Those are default info logged by Apache.

user122738

@Simon yes and you retrieve them into a personalized GUI

Simon

@Begueradj I grep the log file.

Rоry McCune

@Begueradj tail /var/log/messages (or /var/log/syslog)

Simon

16:01

In this case, I didn't actually need to grep.

user122738

ok ok

user122738

I just upvoted the answer of this user. He looks like Charles Sobhraj.

kalina

16:38

@RоryMcCune after considering whether to even tell you, I figured it would save you querying... I'm going to go with option C, which means bye

since you claimed to worry last time and you should know that's not something I wish for

ciao

Rоry McCune

@kalina nooooes, hey you can't save me from querying by saying you're using an option C) from a list that I don't know what A), B) or C) are !

what were the three options again?

Thomas Pornin

@RоryMcCune As I read it, "A)" is "I am lurking nearby", "B)" is "I am not currently lurking nearby because I am busy", and "C)" is "You are all schizoid infectious monkeys and I won't ever come back here".

So @kalina is announcing that she is leaving and won't be back.

Rоry McCune

@ThomasPornin and so unfair, it's not like we're all schizoid infectious monkeys, I mean some of us aren't infectious at all!

Thomas Pornin

(Though of course, announcing that you won't be back kind of defeats the purpose. When people really leave any place for good, the usually don't say anything at all.)

Rоry McCune

@ThomasPornin well it's possible that @kalina was being considerate as last time she did go without warning and some of us were concerned that something untoward had happened to her.

so better to have an announcement than not, (of course better not to vanish of at all, where else am I going to get quality info about music production!)

TildalWave

17:23

@RоryMcCune chat.stackexchange.com/users/40979/kalina?tab=recent this might help (or not)

I don't get it :(

David-

Seems like she wants to have security discussions and they were not happening

Simon

@David- DOVID DASH THERE IS NO APOSTROPHE IN THE WORD "WANT" EVER.

David-

It's my computer doing it @simon autocorrect. I will try to explain it to the computer.

Simon

@David- You have autocorrect on a computer? Are you suicidal?

David-

Actually I'm just going to disable the damn thing. A co-worker used my computer to work on one of my programs while I was out and it was on here one day. I just never did anything, but it is more then annoying at times.

Simon

17:29

Did it also autocorrect "than" to "then"?

TildalWave

@Simon want can be a noun

Simon

#SCHOOL'DBYAFRENCH

@TildalWave pls

David-

nope, I did that by myself.

I'm not so good with human grammar. I'm far better at machine grammar. That is why I only fully know one human language and about a dozen machine languages.

David Freitag

17:51

@David- Effing autocucumber

My 5X arrives thursday. I'm so excited

Simon

I'm not.

Adi

Soooo.. it's happening again?

Simon

wot

r u tolking aboot kalinuh son

Adi

@RоryMcCune Yeah, I agree with that as well. Last time @kalina disappeared I was quite worried. Just a lovely gal most of the time

David-

@DavidFreitag lol

David Freitag

17:58

kotaku.com/…

Interesting insight into Destiny

Transcript for