The DMZ

Simon

19:00

I see.

Iszi

The problems with MD5 have nothing to do with salting. It's more that MD5 is ridiculously fast for a password hashing algorithm, and is known to be broken in the first place.

Rory Alsop

If he was in this country, and there was a significant number of customers, the ICO would want a strong word with him

Mark Hulkalo

I'm referring to the guy who thinks unsalted md5 hashes are fine.

or rather, I wouldn't evne use md5 with salt

even*

Side-channel attacks against a lot of algorithms are pretty common too

Iszi

@MarkHulkalo He's not saying unsalted MD5 is fine. Just that MD5 in general is okay.

Mark Hulkalo

I still don't think it is in general

Iszi

19:01

@MarkHulkalo And that's the point you should be driving at. Instead, the issue your comment addresses is salting - not MD5.

Simon

Of course it's not, it's fast as nobs.

Are there collisions too?

Mark Hulkalo

I can't change my comment now

It's been moved to chat!

Rory Alsop

@Simon should I ask how fast that is, ween-meister? ;-P

Mark Hulkalo

Oh wait.

Rory Alsop

@MarkHulkalo the chat is so the conversation can continue

Simon

19:02

@RoryAlsop Picture something fast in your head, it's that fast!

Rory Alsop

@Simon lol

Mark Hulkalo

He deleted his post anyway, so I deleted mine since it isn't relevant anymore

Simon

Oh yeah of course it is not collision resistant.

Mark Hulkalo

Or not... I need to pay attention

Simon

@MarkHulkalo That's good, it means that you've rekt him.

Nevermind, it was moved to the chat.

You need to learn how to SE Markus.

Ohnana

19:04

@TildalWave i don't think i get the joke

Simon

Grace Hopper - Nanoseconds

►

TildalWave

@Ohnana oh there's one great lecture of hers where she explains the size of one nanosecond

yeah that one

Ohnana

is she knitting?

Simon

Hahaha.

Ohnana

oh no it's a wire

i see. that's pretty great

Simon

19:07

You know what else is pretty great?

jrg

@Simon Knobs, apparently. If the star wall is any indication.

Ohnana

not your ween

Iszi

@TildalWave IIRC, she brought a microsecond and some picoseconds to show Letterman.

kalina

knobs are awesome

Rory Alsop

@Ohnana the distance light travels in a nanosecond. 11 inches

Iszi

19:08

@kalina Careful saying that around @Simon.

Oh, wait... @Simon is really back now?!?! When did this happen? Dude, welcome back!

kalina

don't encourage him

Simon

ty ex-one

Rory Alsop

@Iszi I figured he wouldn't shut up until I modded him back

Simon

LOL

kalina

speaking of sex toys

Iszi

19:09

@kalina Did you just call @Simon a sex toy?

Simon

wot

kalina

no of course not I was looking at the star list

Rory Alsop

@Iszi as you can see from my picture up there, you can press his buttons or swipe him

kalina

Simon is a contraceptive

7

jrg

I really should access The DMZ only when VPNed to something outside of the office...

Iszi

19:10

@RoryAlsop Swipe left. SWIPE LEFT!

Rory Alsop

@kalina you knew that would get a star!

@Iszi tinder?

kalina

@RoryAlsop one out of four attempts... losing my touch

Iszi

@RoryAlsop I think. I hope I got it right. 'Cause I don't use the app.

jrg

@Iszi Yeah, it's left.

Rory Alsop

@Iszi it was written waaaay too late for me

jrg

19:11

The amount of OpSec fails on there is sobering.

Rory Alsop

@jrg yeah...sigh

Simon

@kalina If only, if only.

jrg

I've thought about writing a blog post on how to stalk someone from their Tinder profile... but I think that'd cross a line.

Mark Hulkalo

@jrg The amount of OpSec fails on all social media is pretty sad.

jrg

But it'd be so easy.

Ohnana

19:12

@jrg that would cross many lines. write it from the opposite view -- how to prevent a stalker

jrg

Employer + school + first name.

Bam, I can probably find you.

@MarkHulkalo True.

Ohnana

@MarkHulkalo tbh my opsec motto is "i'm not ashamed of my personal life"

Mark Hulkalo

@jrg I once found someone online by their IP address. :/

Ohnana

keep work off the internet + a severe lack of fucks about personal stuff

Mark Hulkalo

Their ISP had a pretty insecure naming convention.

Rory Alsop

19:13

@jrg trying to remember who did the excellent Defcon/B-Sides presentation on social media abuse through location services

It was very scary

jrg

@RoryAlsop Yeah.

Iszi

@RoryAlsop Pretty sure that applies to anything written since Shakespeare.

Rory Alsop

one bit on fake evidence (for anyone who wanted an alibi), one bit on winning prizes, and then one bit on stalking

Iszi

(At least.)

jrg

@RoryAlsop Oh yeah... I think I do remember seeing something like that.

kalina

19:14

@Ohnana "now you see me..."

Rory Alsop

@jrg my google-fu is weak, I can't find it

Mark Hulkalo

One time a couple teenagers were bugging me on IRC. I literally googled their IP address and it brought up a church they went to because their church was storing locally-accessed analytic logs

@Ohnana My motto is don't share personal stuff online. :p

Rory Alsop

@MarkHulkalo mine is - understand what you want to share and what you don't. And stick to that.

Mark Hulkalo

That's pretty much what I do

Rory Alsop

A lot of what I share I am fine with, some I think long and hard about.

jrg

19:16

@RoryAlsop I remember seeing this before: lewis-mcchord.army.mil/des/OPSEC%20Training/…

Ohnana

@MarkHulkalo haha yeah if someone brings up my "deep dark secrets" i'm going to tell them more stories

because I have no fucks to give

Mark Hulkalo

rofl

Rоry McCune

meh

seems like copy/pasting images is getting weirder and weirder

the number of times it just don't fly any more...

jrg

I can't find it. :(

Ohnana

hey guys, speaking of OPSEC, could you guys do me a personal favor?

can you give me information on how to track down a redditor?

Rоry McCune

19:19

do it the slightly harder way and it works :)

Mark Hulkalo

I don't get it

jrg

^^

Ohnana

i think i'm watching someone commit suicide, and if I can send a message to the person's campus police I'd like to

Simon

QC? What does Québec have to do with any of this?

kalina

@Ohnana why, what do you want, why are you wanting it, who has attacked you, do they need to die, do you need an assassin?

Iszi

19:20

@RоryMcCune Zefuq? I don't get it.

Mark Hulkalo

@Ohnana Do it

Ohnana

i have no information!

jrg

@Ohnana Basically google is what I'd do.

Mark Hulkalo

Give me his/her reddit account

jrg

See if there is a twitter handle with the same username.

Ohnana

19:21

reddit.com/user/MetaMyriad

Rоry McCune

@Iszi In glasgow a tap can be one of many things. it could be "a tap" the thing you put on a sink, people also "tap someone for money" meaning to seek a loan, and also wear "Fitba Taps" which are "football tops" the joke is a pun based on that

Mark Hulkalo

Shit

Ohnana

yeppers. transwoman committing suicide on TDoR

Mark Hulkalo

@Ohnana Contact the mods. They should be able to get his/her IP?

Iszi

@RоryMcCune Still not sure I get it, but there's a translation I wouldn't have found on my own.

jrg

19:22

> I'm 19. I go to Cabrillo and do art and stuff.

Mark Hulkalo

Then do a geolocation lookup

jrg

reddit.com/r/actuallesbians/comments/322pnu/santa_cruz_raptors/…

Mark Hulkalo

And call the nearest police

Ohnana

@MarkHulkalo it'll be on the college subnet

useless

Mark Hulkalo

No, I've done this before

Ohnana

19:22

someone's already notified campus police, they don't have a name or anything

jrg

And photos of the student

reddit.com/r/actuallesbians/comments/322pnu/santa_cruz_raptors/… < last 2 imgur links in that comment.

Art, school of 14K people, and a photo. I hate to say it, but needle in a haystack. :\

Ohnana

i know, it's so frustrating

Mark Hulkalo

Skype is blocked, so I can't skype with them

:/

Ohnana

and imgur strips EXIF and metadata, so that's a bust

Mark Hulkalo

Check comment history

Ohnana

19:26

i saw.

Mark Hulkalo

Not a name, but a face

Ohnana

i've gone through it. there are so many people who post their suicide notes, i just want to help one

Rоry McCune

^not a lot of additional info but something

Ohnana

okcupid?

Mark Hulkalo

you could try facebook

people in Scotts Valley, CA that go to <university name>

that are 19

that are female

Ohnana

19:30

assuming this person is out on facebook

that's the thing, we have split identities

Rоry McCune

@Ohnana yep

Mark Hulkalo

Yeah

Rоry McCune

@Ohnana ok more information and another name tgchan.org/w/…

Ohnana

holy shit

Rоry McCune

I think idiom alpha on tgchan is the same person, that's consistent with the edit that went on their profile today

Simon

19:33

@Ohnana TDoR?

Ohnana

@Simon trans day of remembrance... when we remember everyone who died

Iszi

What's the equivalent for a rolled-up newspaper when it comes to developers?

Simon

Oh.

Iszi

in Discussion on question by anon: Hashing passwords and dealing with duplicates, 2 mins ago, by Niet the Dark Absol

Honestly... time constraints. It was easier to give read-access to the database than code a front-end interface for it.

Rоry McCune

@Ohnana you could try asking in here irc://irc.rizon.net/tgchan

tgchan IRC channel

I guess they may know more about Idiom Alpha/MetaMyriad

jrg

19:35

Argh. I'm not even coming up with anything, you're the ones finding everything. :\

Mark Hulkalo

:(

Sad seeing someone so unhappy

Ohnana

@RоryMcCune she posted a note there too

you found the same person

Rоry McCune

yah looked too close, oddly google image search was the best way to make that link.

Mark Hulkalo

Anyone got her IP address?

give it to me

Rоry McCune

@MarkHulkalo that's tougher to find

Mark Hulkalo

19:41

If she connected... ah, fuck, rizon automatically obfuscates

On IRC, unless you're using a VPN, and unless the server obfuscates your address to non-mods as... yeah, ask a mod

Find an IRCop

jrg

Ah, so you can't even look to see if anything matches to scotts valley, CA area.

Mark Hulkalo

Ask for that user's last-known IP address, link to the suicide thread

jrg

(OKCupid profile)

Ohnana

@MarkHulkalo i got a copy/paste

asked for the ban msg and scrollback pastes

Mark Hulkalo

Got any actual IP addresses?

Even a partial address

I can reconstruct the partial

but with some error

jrg

19:43

SHIT. I don't have my okcupid profile anymore She just moved to being online on there.

Ohnana

no one's scrollback is going that far back

Mark Hulkalo

@Ohnana What about saved logs?

They can search log files

Ohnana

*!*@Rizon-A89EEC2F.hsd1.ca.comcast.net on Fri Nov 20 12:17:01 2015 by [email protected] ?

Mark Hulkalo

I think most IRC clients log by default?

k

Ohnana

i think that's the ban message

Mark Hulkalo

19:47

One second

Scotts Valley Police Department: (831) 440-5670 - give them the picture of the person, and tell them that it's someone with a comcast IP address connected to irc.rizon.net on Friday November 20th @ 12:17:01

They can check that. They aren't supposed to tell you, but they can

Ohnana

... is that enough info? a subpoena would take forever

Mark Hulkalo

also, try to get that person's IP address from an IRCop

subpoenas aren't required in this case

I knew a guy online who tried to do that, and with a little tiny bit of information, I was able to get a hold of the police in his area

they found him

but I had part of his last name...

Honestly, local law enforcement can check these things, but you're not supposed to know

Give them the picture

Ohnana

fuck it I'll take it

Mark Hulkalo

If you find their OkCupid profile, they can get that too with the information they used to sign up

so give them that info too

Is that OkCupid? I don't know... I've never used it.

jrg

Yeah.

Mark Hulkalo

19:51

Ok, good. Then their real name is probably on it

Metamyriad on OkCupid. Tell them that

jrg

Mark Hulkalo

Ok, that's her

okcupid.com/help/contact-us

Can't visit this at work... any chat contact options?

Or phone numbers

jrg

Not that I'm seeing...

Rоry McCune

Mark Hulkalo

@Ohnana Don't forget to tell them about her OkCupid profile. They can get information on that handle

Santa Cruz?

sdflk

Rоry McCune

19:58

^^skype username

unless I miss my guess picture looks similar, came up on a search of IdiomAlpha

Mark Hulkalo

Ah, Scotts Valley is located in Santa Cruz

Rоry McCune

@MarkHulkalo indeed it is, weirdly it's the one part of the US I know well

Mark Hulkalo

That will help narrow it down

Ohnana

just got off the phone with the police...

Mark Hulkalo

Anything?

Did you mention the OkCupid profile?

Ohnana

20:02

yeah

Mark Hulkalo

anything?

Ohnana

they're looking into it

Mark Hulkalo

good

Ohnana

can someone post a link to the okcupid profile?

they're going to call me back with questions

Mark Hulkalo

google.com/…

Rоry McCune

20:04

@Ohnana in case you didn't see reckon I got the skype username too - IdiomAlpha

Mark Hulkalo

Frigging google url crappy thing

Rоry McCune

kind of predictably

Ohnana

@MarkHulkalo gracis

Mark Hulkalo

You might be able to find it in that thread. I can't visit it, so I can't confirm

JukEboX

Ok just had the weirdest thing happen

Ohnana

20:07

@MarkHulkalo i did, scooped the okcupid user id

Mark Hulkalo

Great

Ohnana

11:48] <Love_Drifter> If you start whining and threatening suicide in here ever again I am going to permanently ban you
[11:48] <Love_Drifter> Treating this whole channel like your support group is abusive, emotionally manipulative bullshit

wtf!

Simon

Lovely.

JukEboX

Accessing my firewall on my DC caused my GPMC to freeze

that isn't normal I guessing

Ohnana

thanks for the help yall

Rory Alsop

20:11

@Ohnana what the hell - wonder how they'd feel if this person did die. Any guilt, ya think?

Ohnana

@RoryAlsop i'm not sure... people who bandy about the "emotionally manipulative" line typically don't have the capacity for guilt

Rory Alsop

@Ohnana I mean, fair enough some people do want the support, but the fact they want it shouldn't mean you shout at them for it - instead, try to get them some help!

Ohnana

tbh, i understand in a sick way

there are so many people who post about suicide, it grinds on you after a while

if you feel for every single one and invest all that energy, you lose yourself as a person

Rory Alsop

@Ohnana but for each of them, it's their sole focus at that time

Simon

@Ohnana It sure does, especially if you've listened to the person talk about it many times.

Ohnana

20:14

@RoryAlsop i know, that's why i try so hard to be compassionate... but not everyone can deal with it like that

Simon

But it doesn't justify his reaction at all.

Rory Alsop

I think what you have done, trying to find a contact who can help is exactly the right thing

Simon

The proper answer would have been to call the police like you've done.

Yep.

Ohnana

ugh, I'm going afk for a bit to find some water, my stomach is in flip flops

Rory Alsop

@Ohnana I'm always astonished nurses can cope day in day out with people dying. I couldn't. But I try and be nice to the people I do meet each day, either in person or on t'web

's all you can do really

jrg

20:15

@RoryAlsop One of my friends is a nurse. Her coping mechanism is to spend at least 30 minutes talking with somebody who isn't in medical each day.

Rоry McCune

@RoryAlsop you're not doing well dispelling your Sensible/nice reputation today :)

Mark Hulkalo

@Ohnana A friend of mine has been threatening suicide for almost 15 years. I still listen to him.

jrg

It's tough. :\

Rory Alsop

@jrg I married a cardio-thoracic intensive care nurse... every day for her was more stressful than any day I have ever had. Except possibly for one or two days t'other Rory is probably aware of, but even those had no deaths

luckily she moved to manual handling - more pay, less deaths

Iszi

Anyone else just get their whole SE session dropped?

Rory Alsop

20:17

nope

Simon

@Iszi Nope, have you joined ovid in his pyramid?

Iszi

Weird. Oh, BTW: Is it just me or is MD5 Guy's site just a DMCA takedown waiting to happen?

Mark Hulkalo

@RoryAlsop My wife was thinking of becoming a nurse...

jrg

@RoryAlsop Wow. :\

Mark Hulkalo

I'm starting to think that isn't the best of ideas... she's such an innocent sweetheart.

So now she's learning to program instead. Hopes to work with me some day

Rory Alsop

20:20

@MarkHulkalo you need to have that kind of empathic nature. No-one does it for the money

I couldn't ever do it

Mark Hulkalo

Yeah, I'm just worried it would hurt her to see people dying everywhere

Rory Alsop

@MarkHulkalo Nurses do end up with a very black sense of humour, and a lust for life

Mark Hulkalo

In the U.S., most of 'em end up fat

60 hour shifts, poor nutritional content of their hospital food

Very little time to eat between shifts, so they'll take a protein bar or something.

Rory Alsop

@MarkHulkalo here most end up lean - opposite problem

Mark Hulkalo

I've seen a lot of morbidly obese nurses :/

It's the norm, not the exception

Ohnana

20:28

they're either rail skinny or really overweight

i guess it depends on whether you've got a nervous stomach or stress eating

JukEboX

InfoSec or ServerFualt ?

0

Q: Windows Firewall Blocks GPMC

Found out that my Server 2008 R2 machine is not running firewall as it should. When I enable the firewall and try to open GPMC it states that it is unable to access the GPMC or the Primary Domain Controller. I am doing all of this on the Primary Domain Controller. How is the DC unable to see itse...

Rоry McCune

@JukEboX ServerFualt

JukEboX

@RоryMcCune thanks

Rоry McCune

@JukEboX np

Lucas Kauffman

Evening gents

Mark Hulkalo

20:35

Evening, mon

Lucas Kauffman

What's up

Ohnana

good evening

Mark Hulkalo

Ohnana, she's still alive at least

Posting

Those pills probably take several hours to take effect

Ohnana

i saw

Mark Hulkalo

20:50

@RoryAlsop My recent flag (just now) might've been bad, so I removed the downvote.

Rоry McCune

skype has "badges" now....

I don't think that Gamification of chat clients is a winning strategy

what next ... "Hey you earned the Top-up badge for giving us more money"

Mark Hulkalo

Lol

Rоry McCune

"wow you got the drunk dial badge for the 3rd time this month"

Transcript for