The DMZ

David Freitag

18:00

@Simon You forgot the eh, eh.

Simon

@DavidFreitag It was meant to be a Brit/Canaduhian hybrid!

user122738

I puke

Ohnana

chat's awfully bitchy today

are we having a case of the mondays?

David-

@simon red, red, blue, green, red, yellow, yellow

UsuallyNot

18:16

Hey everyone

Is anyone willing to help me with a vigenere cipher I'm stuck with? can't figure out how to progress.

Herringbone_Cat

Might have better luck asking the math/crypto folks about that cipher issue

user122738

Crypto website :) @Herringbone_Cat

David-

@usuallynot what are you needing help with?

UsuallyNot

Well, I have got a ciphertext I suppose to be encrypted with vigenere because of recurring characters (in the same order) through the text.

I've done calculating the average IC to get the key length => img4web.com/view/B42R1B

David Freitag

@UsuallyNot You should be pinging @ThomasPornin for cipher issues.

David-

18:21

what is the ciphertext?

UsuallyNot

Afterwards I computed the values for a chi-square statistic to get the single letters. Here's my problem: there are 1-4 possible letters for some key characters which lead to a great amount of possible keys

just a sec, I'll paste it

MDAwMDAwMDogMWY4YiAwODAwIGMxZmMgNzc1NSAwMDAzIDUzODggMjcwMiA3MGU5ICAuLi4uLi53
VS4uUy4nLnAuCjAwMDAwMTA6IDJiMDQgZjg0NCAyOTE0IGE3ZTYgYTUyOCAyNDJhIGY4YTYgMTYx
NyAgKy4uRCkuLi4uKCQqLi4uLgowMDAwMDIwOiAyN2E2IGE3MmEgOTQ2NyA5NjY0IDI4MzggODcy
OSAyNDAyIDQ1NGIgICcuLiouZy5kKDguKSQuRUsKMDAwMDAzMDogMzI1MiAxNTYyIGI4NmEgMTQ4
MiA1MjhiIDBiZjIgZjM5MiA1Mzc1ICAyUi5iLmouLlIuLi4uLlN1CjAwMDAwNDA6IDlkZjMgNTM1
MiBhZDE0IDhjMGQgOGQ4ZCBjZDc1IDNkMTIgMjMyMiAgLi5TUi4uLi4uLi51PS4jIgowMDAwMDUw
OiAyMmYyIDhiMTQgNGFmMiAxNTgwIGEwODYgMmI0NiAyMWIxIDM0MjUgICIuLi5KLi4uLi4rRiEu

that's it

SEJPM

@DavidFreitag this may not be an issue suited for the bear, as this is more classical stuff which may not be the bear's field

Ohnana

someone has a sec question? quickly ping the competent users

David Freitag

@SEJPM Not in @ThomasPornin's field? He's the crypto god.

2

UsuallyNot

will have to get to know those names

David Freitag

18:24

@Ohnana Heh, can't help but notice how nobody pinged you. :b

SEJPM

@DavidFreitag fix the typo pls

Ohnana

@DavidFreitag and for good reason

user122738

@UsuallyNot I suggest you to post your question on Crypto website where Pornin is also a member

SEJPM

@Begueradj this question will get rejected

it's "analysis of a chunk of data"

we hate such questions at Crypto.SE

user122738

@SEJPM why do you think so?

user122738

18:25

ah, ok.

David Freitag

@SEJPM If it didn't get starred I wasn't planning on fixing it.

UsuallyNot

Well, I just was told I should print the cipher here instead of using questions for that.

SEJPM

@DavidFreitag I can't star a message with a typo. Chicken-Egg-Problem :P

user122738

I guess you're active member on Crypto website @SEJPM :)

David Freitag

@UsuallyNot Have you tried asking in the Crypto chat room (that I presume exists and is well-trafficked...)?

SEJPM

18:28

@DavidFreitag last message is 24 hours old

does this say enough?

David Freitag

@SEJPM No, the last message in the Observatory is 6 days old

SEJPM

@DavidFreitag Crypto's chat is the side-channel

David Freitag

The longest spree being 17 days.

SEJPM

The Side Channel

Mostly randomly generated noise. – crypto.stackexchange.com

David Freitag

The point being is that if he posts there, someone will see it and could help.

SEJPM

18:29

@Begueradj Crypto.SE is my main site in the SE network :)

@DavidFreitag our mods will there's always one in the chat

UsuallyNot

ah, alright, have searched but found nothing with "crypto" in name

Ohnana

they have something from oct 2 pinned

whaaaat

user122738

Yes, I saw that on your profile @SEJPM

David Freitag

@Ohnana The observatory has something starred from Dec 30, 2014

SEJPM

@UsuallyNot traditionally chat rooms never use the name of their parent site directly or otherwise this wouldn't be the DMZ

Ohnana

18:30

@DavidFreitag oh fook

David Freitag

@Ohnana It's where we store our tumbleweeds.

SEJPM

@DavidFreitag I actually see a double starred message from februar '13 there D:

David Freitag

@SEJPM Actually there is a 5 star on in there from October of 2013

@SEJPM And that's not Feb '13, that's Feb 13, 2015

SEJPM

@DavidFreitag damn SE format...

@DavidFreitag it's 6 starred as of now...

David Freitag

@Ohnana Correction: The oldest starred message in the observatory is on Oct 15, 2013.

@SEJPM lol

Ohnana

18:36

oh lawd

David Freitag

@SEJPM There's one with 6 from Oct 11, 2013 and one with 5 from Oct 15, 2013

SEJPM

@DavidFreitag I've got one from oct 11, '13

@DavidFreitag so you meant a different one, which I didn't see due to my mlg 1366x768 screen resolution...

David Freitag

@SEJPM That is after the pro-tempore election just after the site went into closed beta IIRC

@SEJPM Indeed.

The resolution of my two screens is a very oddball 1680x1050

SEJPM

@DavidFreitag so what is the resolution of a single one of them?

David Freitag

@SEJPM They are both 1680x1050, both are 3360x1050 together

SEJPM

18:41

@DavidFreitag what format is this!? 16:10!?

David Freitag

@SEJPM 16.8:10.5

SEJPM

@DavidFreitag this looks so random...

David Freitag

@SEJPM I get an extra 150 pixels in height and an extra 80 pixels in width over a 16:9 display. I'm not complaining.

David-

@usuallynot are you sure its a vigenere cipher

Simon

So, @Begueradj flagged my post.

You're such a lovely individual.

David Freitag

18:51

@Simon wat

Oooh someone validated it too. Bummer.

UsuallyNot

@David- not 100%, I just suppose it to be because of the recurring cipher characters in the same order => next period

I couldn't figure out what else it should be

I don't know other ciphers which have this recurring pattern.

(besides the variants of vigenere)

Rоry McCune

19:13

@Simon wat, which post is that?

Simon

@RоryMcCune The one where I replied to him in French.

SEJPM

@Simon why would you do that!?

Rоry McCune

@Simon were you rude in french by any chance?

did you channel the merovingian

Simon

@RоryMcCune I pretty much told him to be careful if he didn't want me to be on his case.

There was no swearing involved.

@SEJPM I don't know!!!!

user122738

@RоryMcCune It's highly disrespectful and that I do not want to translate to any member here.

Simon

19:16

Excuse me?

Ohnana

was it in chat or on the sec.se site?

SEJPM

@Ohnana i think it was a comment on a real question / answer

Simon

@Ohnana Chat.

@ThomasPornin Would you consider the sentence "Prends ton trou si tu veux pas que je sois sur ton cas" highly disrespectful?

SEJPM

@Simon we're not allowed to talk french in the DMZ!?

Ohnana

i hear neopets has a great chat filter. you should check it out

Simon

19:17

@SEJPM omgawd @@@

Thomas Pornin

@Simon It looks highly Québecois more than highly disrespectful.

Simon

Indeed.

Ohnana

what's the translation of "trou" you're going for up there?

Thomas Pornin

For a French, the folklorique trumps the disrespect.

Simon

@Ohnana Hole.

Ohnana

19:19

and "prends?"

Simon

Which is not related to the a-type of hole in any way.

Take.

SEJPM

@Simon not sure if everybody knows this nuance I guess...?

Simon

@ThomasPornin So once again, he has acted when he didn't understand what was going on? Classic him.

user122738

@Ohnana it was a very rude insult you can hear only from a certain category of people. It was written in French and in a way that Google translate or similar can not translate its real meaning.

Simon

@Begueradj Looks like even you can't understand it.

Ohnana

19:21

@Begueradj i'm pretty sure he told you to shut your mouth

SEJPM

@Begueradj why would you trust google translator!?

Simon

@Ohnana Very damn close.

Ohnana

judging by the tantrum I'm guessing he's a little justified

user122738

Few days ago I flagged (@kalina may remember) offensive words (in English) that I do not want to reproduce here

user122738

of him

user122738

19:22

coming from him

David-

@UsuallyNot the only thing I seem to be able to get out of that is this, but not sure what exactly it is a part of:

0000000: 1f8b 0800 c1fc 7755 0003 5388 2702 70e9 ......wU..S.'.p.
0000010: 2b04 f844 2914 a7e6 a528 242a f8a6 1617 +..D)....($*....
0000020: 27a6 a72a 9467 9664 2838 8729 2402 454b '..*.g.d(8.)$.EK
0000030: 3252 1562 b86a 1482 528b 0bf2 f392 5375 2R.b.j..R.....Su
0000040: 9df3 5352 ad14 8c0d 8d8d cd75 3d12 2322 ..SR.......u=.#"
0000050: 22f2 8b14 4af2 1580 a086 2b46 21b1 3425 "...J.....+F!.4%
0000060: b3c4 2129 b138 5537 3931 b740 2f39 5901 ..!).8U791.@/9Y.
0000070: 1de8 7329 e812 01b8 60ea 6380 382e 3e3e ..s)....`.c.8.>>

Thomas Pornin

@Ohnana I speak French (I am French) and I recognize that sentence as being both a thinly veiled threat, and also a colloquial expression I am not familiar with, meaning that it could be a good-humoured quote of something.

user122738

end of discussion about this

Ohnana

oh my goodness gracious you're the fine upstanding gentleman who's been flagging our stuff

Simon

@Begueradj Guess what? We've been doing fine without flags here.

If you're not happy about the language here, you're free to leave.

Ohnana

19:23

@ThomasPornin fair enough

SEJPM

The DMZ needs no flags. No flag can stop @Simon.

4

Simon

@SEJPM Am I some sort of Chuck Norris?

SEJPM

@Simon you're the chuck norris of saying stupid things?

Simon

@SEJPM Aaawww <3

Thomas Pornin

@Simon It depends. Does George W. Bush enjoy watching your adventures ?

UsuallyNot

19:24

@David- @David- Well, I also tried this one, but the output is even more confusing than the cipher itself.

oh, well.. double quote

David-

@UsuallyNot where exactly did that come from?

Simon

@ThomasPornin I don't think so but I also think that's more than fine.

UsuallyNot

@David- I've got it from an instructor, to which I shall respond when I'm finished.

Simon

I wouldn't want this pesky Mr. Bush watching me live.

OH MY GOD I USED THE TERM PESKY

OFFFFFFFENSIVEEEEEEEE

2

Rоry McCune

I've just realised, neither @kalina nor @AviD are about....

this means I can muck about with the title and tags again :)

Simon

19:27

@RоryMcCune Is it possible that... they're the same person?

Rоry McCune

\o/ silver lining

Ohnana

lmao

Rоry McCune

@Simon that would be such a head smeg if they were

I've met @AviD

if that turned out to be true I would hand in my "Internet Smartarse" card, 'cause there would be no challenging that entity

SEJPM

@RоryMcCune how?

David-

@UsuallyNot It looks like what you would see in a binary file opened in a hex editor.

Rоry McCune

19:29

@SEJPM I'm a room owner, so I'm technicallly allowed to modify the room title and tags

Ohnana

@SEJPM he's a mod and likes dicking around when the srs people aren't about

Simon

@Ohnana DICKING?!?!?

Rоry McCune

but the grinch crew (aka @kalina and @AviD) objected to some of my more... outre suggestions

SEJPM

@Simon OFFENSIVE!?

Ohnana

@Simon i'm sorry penising

Simon

19:29

OH MY GOD OHNUHNUH DON'T OFFEND ME THIS MUCH, I WANNA GET A GOOD NIGHT OF SLEEP TONIGHT

@Ohnana Phew.

Ohnana

@Simon CONSENTUAL SEX IN THE MISSIONARY POSITION AAAAAHHHHH

3

Rоry McCune

@Ohnana and why not :)

SEJPM

@RоryMcCune you're the owner of the DMZ!?

Rоry McCune

@SEJPM I'm not THE owner, just A owner

UsuallyNot

@David- I'm aware of that, but how does this help me? The chars on the right are nonsense?

Rоry McCune

19:30

but then the other two are AWOL

Simon

@Ohnana overloads

Rоry McCune

so I may be defacto owner :)

Thomas Pornin

@UsuallyNot The hex dump shows the data by blocks of 16 bits, and then again when interpreting the bytes as individual characters.

SEJPM

@RоryMcCune so you're the founder of the DMZ!? Wow, such a famous person!

Rоry McCune

@SEJPM heh, nono that honour goes to @ScottPack should he be around

TildalWave

19:31

@Ohnana you're on a missionary? :oo

Ohnana

@TildalWave ask your mum

Simon

rekt

Rоry McCune

@SEJPM but he added me as a room owner, for reasons I forget

Thomas Pornin

Amusingly, it is big-endian 16-bit encoding, which is rather rare nowadays.

TildalWave

@Ohnana I literally read that as ask your nun at first LOL

UsuallyNot

19:33

@ThomasPornin Yep, but that's what I mean - the Interpretation doesn't make sense to me.

Thomas Pornin

@UsuallyNot Ah, I knew that "1F8B" was something I had already encountered.

It's gzipped data.

Convert the data into bytes (from the hex dump) and try uncompressing it.

UsuallyNot

@ThomasPornin interesting... that shows how less I know yet. Gonna try that, thanks!

David-

@ThomasPornin great though. I'm not familiar with that kind of file structure but something was egging me on that this was a file.

or at least a part of one

Thomas Pornin

Yup, pure gzip. That's not cryptography at all.

UsuallyNot

Another topic I'll want to dive into.

Simon

19:40

Make sure to bring your bathing suit this time.

I'll show myself out.

Thomas Pornin

@David- One day, I told myself that I wanted to understand how compression works. So I took the RFC (1950, 1951 and 1952) and implemented my own compression/decompression library.

Simon

@ThomasPornin Did you start a company in Silicon Valley called Pied Piper?

David-

haha

@UsuallyNot  ____________________________________
/ PLZ send a Message with CV and the \
| Responce-Code: 31337-HaXXXor to    |
\ [email protected]                 /
 ------------------------------------
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

Ohnana

@David- that cowsay got mangled

UsuallyNot

that's an application form?

lol

TildalWave

19:43

FTFY

Ohnana

@TildalWave nice

David-

@UsuallyNot looks like it

Simon

@Begueradj And that's karma for you, sir.

Ohnana

tämä draama on herkullinen

David-

@ThomasPornin good thing you did. I didn't see any recognizable header so I was thinking it was just part of a file.

UsuallyNot

19:45

great thanks @David- @ThomasPornin I already got a job, but now I know more

TildalWave

@Ohnana This drama is delicious?

Ohnana

@TildalWave quite

TildalWave

translate: tämä draama on herkullinen

David-

@UsuallyNot I guess if it looks like binary it is, lol

TildalWave

(from Finnish) This drama is a delicious

ooo it works

Ohnana

19:46

whoa

translate: puta

:(

TildalWave

LOL no no it only works for mods

Ohnana

whaaaaat

TildalWave

so we know what the puta you're talking about

Ohnana

....

what the bitch am i talking about?

TildalWave

no idea

Thomas Pornin

19:47

@Simon They put their photos on their Web site and I do not recognize my own head. So no.

SEJPM

@ThomasPornin this ain't no real company without a bear.

UsuallyNot

@David- I know how binary looks, but I wouldn't have seen that in the hex

David-

@UsuallyNot Some of it was actually extra characters to hint at the fact it was binary.

1f8b 0800 c1fc 7755 0003 5388 2702 70e9
2b04 f844 2914 a7e6 a528 242a f8a6 1617
27a6 a72a 9467 9664 2838 8729 2402 454b
3252 1562 b86a 1482 528b 0bf2 f392 5375
9df3 5352 ad14 8c0d 8d8d cd75 3d12 2322
22f2 8b14 4af2 1580 a086 2b46 21b1 3425
b3c4 2129 b138 5537 3931 b740 2f39 5901
1de8 7329 e812 01b8 60ea 6380 382e 3e3e
0e2e 0012 d1c8 cfd7 8c81 7902 d974 8df8
78cd 1828 5b33 463f 0645 12ec ca1a 90e9
e540 d762 ca40 292e 00c0 208d e33c 0100
00

That is the only part that is real data

the rest was to give you a hint that it was binary

If you have ever used a hex editor it was a big hint I guess

UsuallyNot

@David- the data part was known to me, but I just didn't knew the rest should point me to binary data

I did, but thats long ago

David-

I just didn't know what it was, but @thomas recognized it was a gzip

UsuallyNot

19:57

valuable information, yep.

Simon

20:25

@ThomasPornin That's funny; it's a TV show if you didn't know.

Thomas Pornin

@Simon I don't watch a lot of TV. I must say that the Web site really looks like the kind of abomination that startups tend to put online nowadays.

Simon

@ThomasPornin You should give the show a go, it's quite entertaining.

And usually well-received.

Rory Alsop

21:02

@ThomasPornin ^ that just appeared on my Facebook

Herringbone_Cat

Do all security people have Facebook now

I'm still a conscientious objector, but lately it has been seeming like I am the last holdout.

That said I did have one of the first facebook accounts (still have it, never did anything/sent messages/added any friends) from back when it was thefacebook.com and they only allowed certain .edu's to register

Rоry McCune

@Herringbone_Cat for me it's all about controlling what you put on it and how you use it

I don't use any facebook mobile app

and I have a separate firefox profile for "social" stuff

and only use it for that

Rory Alsop

Facebook annoys me intensely, but it is my only useful communication medium with too many folks :-(

And its useful for the band

@kalina - what? Nooo! Don't go just because of Tigger! Put him on mute - that's all.

Herringbone_Cat

Yes, i'm starting to get "DIdn't you get the invite to this event? It went up on Facebook!" a lot

At the same time, I loathe the tracking/surveillance of Facebook, their corporate ethic "privacy is dead" ... and the clustermess of social networking feeds

I guess it's like Chomsky said..it has to be compellingly useful for them to manufacture consent

Rоry McCune

see @kalina you should do what the Elder Rory say, Elder Rories are always right *

did anyone see the extra outcut from the new Star Wars trailer....

Eddie Izzard- Death Star Canteen

►

apparently they're trying out Eddie Izzard as a writer

Simon

21:21

Would you like to see a fruit bat eating a banana lads?

i.imgur.com/boDhoVu.gifv

You're welcome.

Rоry McCune

@Simon where ever could you have found such content :op

Simon

@RоryMcCune Ssssshhhhhhhh.

Rоry McCune

it is very cute though

TildalWave

21:42

@RоryMcCune hahaha haven't seen this one before it's great

Rory Alsop

Eddie Izzard rocks

Thomas Pornin

21:59

@Herringbone_Cat I do not have a Facebook account.

Also, Facebook does not have a bear account.

Herringbone_Cat

@ThomasPornin Do you find your social life has been inconvenienced at all because of it?

Thomas Pornin

@Herringbone_Cat I am reasonably happy with my social life.

Though of course, having only one life at a time, I lack a control group to make a proper assessment.

Herringbone_Cat

@ThomasPornin Well do you miss any events/updates/etc as a result? Not a question about overall happiness, as a narrow question about facebook being potentially useful.

Thomas Pornin

@Herringbone_Cat My close acquaintances are not on Facebook or do not use it to maintain contact.

Herringbone_Cat

@ThomasPornin Ah. That makes it easier. When I try to give people a phone number instead of my name for facebook, they seem to be like, what..a number!?

UsuallyNot

22:39

@ThomasPornin Could you tell me how you saved the binary sequence into a .gz which can be opened correctly? I tried it on my own, but just writing the binary sequence to a file does not let me open it up with an archive manager.

I think I would need to get the compression back onto the file without just putting it in another archive. However, I couldn't find a way to accomplish this through java for example.

rather just "recreating" the file as it's already compressed I think...

David Freitag

23:17

@Herringbone_Cat I'm not security people, but I also do not have a Facebook.

Herringbone_Cat

23:28

@DavidFreitag Do you get the same issues when people try to be Facebook friends with you? :)

David Freitag

@Herringbone_Cat As far as I know, no one has ever tried.

Herringbone_Cat

@DavidFreitag I take ityou don't go to many parties/conferences/etc? :)

David Freitag

@Herringbone_Cat Nope, I live at the bottom of the sea.

Xander

@Herringbone_Cat I have solved that problem, by having a Facebook that I accept friends on, but never otherwise use.

Herringbone_Cat

@Xander That's an interesting option. How does that help with receiving invites etc?

The Side Channel

Transcript for