The DMZ

Mark Hulkalo

18:00

Weirdoes

Ohnana

24

Q: How to dress if there is no dress code?

I started working 2 months ago and my company doesn't have a dress code. Most of my colleagues come to work dressed in a very casual way. Just jeans and t-shirts, in some cases t-shirts with funny messages or images. I have tried to dress in more professional way. But eventually I stopped as it...

dress-code

i hate workplace culture with a passion

Mark Hulkalo

Why?

It's mainly a test to see if you'll do what you're told

Ohnana

exactly

Mark Hulkalo

Though I'm not gonna lie, I enjoyed wearing a t-shirt and shorts to work.

So comfy.

Ohnana

it's bullshit. "we're going to tell you that it doesn't matter, but fuck you if you don't just magically know what the right thing to do is"

Simon

18:01

I'm always in casualmode.jpg at work.

Mark Hulkalo

Now I'm dressed up like a stiff-assed brit. Still cool, though. My wife thinks I look smart and professional. :p

Simon

With my half sleeve out #yolo

Rory Alsop

@RоryMcCune oh yes indeed

Simon

@MarkHulkalo She says that because she wants you to not get all dem gurlz at work.

CodesInChaos

@RоryMcCune 1.x billion is far too low. I think we're at about 7.3 billion dumb people now.

Mark Hulkalo

18:06

@Simon She doesn't have to worry about that. At a previous company, a supervisor tried that. I shut her down faster than Edward Snowden hitting the power button after detecting an intrusion attempt.

Ohnana

66

Q: What is a relieving letter? What are the consequences of not having one?

There have been a few questions about relieving letters here and based on the context of those question the idea of being required to have relieving letter seems quite foreign to many of us that are not from India. So this question is for those of us not from India that may not understand the cu...

india relieving-letter

hwat

Simon

@Ohnana "In India it is illegal for a person to have more than one job at a time"

What the.

Ohnana

yeah really

and your employer can hold you hostage

Simon

Yeah just read that.

Mark Hulkalo

Wow that's messed up...

Simon

18:08

India looks fun!

Mark Hulkalo

Yeah, that happens in the UAE, and in China.

Simon

SEE CHINA IS DUMB

DUMB DUMB DUMB

Mark Hulkalo

If you're a foreigner in China, you can't legally work for more than one company in most cases. And you need a letter from them to get another job somewhere else.

Ohnana

who wrote that law, looked at it, and went "now this is a good law."

Simon

@Ohnana Hitler, probably.

Mark Hulkalo

18:09

Literally Hitler.

Simon

OHNUHNUH WANNA LISTEN TO FORT MINOR'S NEWEST COMEBACK TRACK?

Ohnana

omg yes

Simon

Fort Minor - Welcome [360 Version] (Official Video)

►

That 360 version is pretty cool.

TildalWave

how's that new?

Ohnana

oh lawd my internet ded

TildalWave

18:11

it was posted here before

Simon

BECAUSE I'M LISTENING TO IT AND WANTED TO SHOW IT TO OHNUHNUH

SHUSH TILDOL

Mike Shinoda haters, begone.

I'd marry the man.

Ohnana

it's as emo as i remember

Simon

Hahaha.

TildalWave

@Simon I ain't hatin him, I just hatin u

Simon

That's fine then.

Mark Hulkalo

18:18

@Ohnana "To find the goodies, they need 1) your documentation, 2) physical access, 3) you to be 'pining for the fjords'."

lol @ #3

Ohnana

@MarkHulkalo i don't want to talk about OP dying okay

das rude

David Freitag

That was a crazy weekend

Mark Hulkalo

@DavidFreitag What happened?

David Freitag

@MarkHulkalo Nothing noteworthy in particular, just a lot all at once

Mark Hulkalo

Yeah, I watched a bunch of people get hurt / kill themselves last week

Dozens of cars upside down in the ditch... going off the road and rolling over, flipping over. People in Colorado drive like idiots. :/

David Freitag

18:29

@MarkHulkalo Wat

Mark Hulkalo

Roads were really icy

David Freitag

Your face is real icy

Simon

rekt

Mark Hulkalo

Owned

Ohnana

PWNT

Mark Hulkalo

18:32

@DavidFreitag So you're doing hardware, now I have a question of sorts

David Freitag

@MarkHulkalo I do not own humans.

@MarkHulkalo I do all kinds of hard wares.

Mark Hulkalo

You can design hardware, correctamundo?

David Freitag

@MarkHulkalo That's my job.

Mark Hulkalo

Like, say, I give you a concept... you can make it a reality?

David Freitag

Depends

TildalWave

18:33

@MarkHulkalo he can't make @Simon's ween bigger

Mark Hulkalo

See, I have this ghetto piece of hardware that I've worked on, and it's horrible. It's just an Ardunio thingmabob.

Not anywhere near where I need it to be

David Freitag

@TildalWave Well anyone can do that, just observing it causes it to turn from a wave into a particle.

Mark Hulkalo

I'd like to talk about it later if you've got some time.

Simon

No.

David Freitag

@MarkHulkalo I can definitely do something like that. My limit is in the CPU/DDR/NAND arena

Mark Hulkalo

18:34

You mean you only do CPU/DDR/NAND, or you don't?

David Freitag

@MarkHulkalo I've always got time

@MarkHulkalo I do everything up to that

Mark Hulkalo

Great, you won't need that stuff anyway.

David Freitag

I have done a few layouts, but never a physical board

Simon

dovid pls can you design a chip that switches a light when whenever I say "BAKUHFDSFJHDKGHDSFSKJHA"?

David Freitag

But I have done countless arduino style boards

Mark Hulkalo

18:35

Yeah, hardware isn't really my domain, but I'd like it to be

David Freitag

Well I can go over everything I do every step of the way if you'd like

Mark Hulkalo

My hardware limit is essentially building PCs/networking devices/whatever, with ready-made components, and Raspberry Pi / Arduino

Yea

JukEboX

Horray +30 rep for me on SuperUser :)

Saladin

hi

JukEboX

@Saladin hi

David Freitag

18:43

Mmmm Dr. Pooper and a chicken salad sammich

Simon

dovid pls it's pepper

Mark Hulkalo

I love Dr. Pepper

Simon

Of course you do, you're American.

Therefore, everything that has a massive amount of sugar in it tastes good to you.

David Freitag

Actually Dr. Pooper has less sugar than most other soda

Simon

@DavidFreitag I still wouldn't dare to drink more than a can per week.

Which is what I do now.

David Freitag

18:46

That's because your frail canadian body would reject the pure liquid american badass that is Dr. Pooper.

4

Simon

pls

It's pretty much the only soft drink that I drink now.

David Freitag

I like my beverages hard

Mark Hulkalo

@DavidFreitag I only drink imitation Diet Dr. Pepper, or the 10 calorie variant.

Simon

@MarkHulkalo How dare you?

Mark Hulkalo

@Simon It's helped me lose a lot of weight. :)

Simon

18:49

As if that is a good reason.

David Freitag

@MarkHulkalo Heresy.

Mark Hulkalo

Mr. Pibb

David Freitag

Aside from Canada Dry, Dr. Plopper is the only soda I drink

Simon

How many nicknames does that drink have?

Mark Hulkalo

I refuse to drink sugary things.

I'll get the beetus if I do

Saladin

18:56

lost weight? try green teas

David Freitag

I used to drink a 2L of mountain dew a day when I was in high school

Saladin

mountain dew bad bad bad

Mark Hulkalo

That's why you're an obese clown.

Simon

dayum

David Freitag

@MarkHulkalo No I was obese before that

In fact, as far as I can tell it had no effect on my size

Mark Hulkalo

18:58

@DavidFreitag Oh, okay. That's why you were still an obese clown.

David Freitag

@MarkHulkalo Apart from an occasional soda, I don't drink any more. Mostly all I eat is veggies and chicken now.

Mark Hulkalo

Fat creeps up on you, like a thief on the roof of a Detroit building trying to scavenge cement.

That's good. I'm internetically proud of you.

David Freitag

Scavenge cement?

You know you're in a bad way when you're scavenging cement to feed your family

Mark Hulkalo

He might be scavenging it to build fort kickass, where @Simon's authority is not recognized.

Damn. I'm not funny. It sucks.

Simon

wat

David Freitag

19:02

Woo my new GPU is here

Mark Hulkalo

I wish I bought that GPU you linked

Instead, I bought my wife enough yarn to shut up for 6 months

David Freitag

The GTX 960 SSC was down to $140 on Friday

So I bought one.

Mark Hulkalo

Link? It might still be down there

And I might still buy it

David Freitag

Nope, back at $209 newegg.com/Product/Product.aspx?Item=N82E16814487091

Albeit with a rebate card

Mark Hulkalo

Exclusive savings for subscribers...

Simon

19:04

Yeah, do we look like subscribers to you dovid?

Mark Hulkalo

I blocked NewEgg years ago and refused to buy anything from them anymore

All they did was spam me with "shocking" 10% deals

David Freitag

@MarkHulkalo @Simon Huhwha?

Mark Hulkalo

And one Black Friday was the straw that broke the hulk's back, when the deals were like 10-20% off

David Freitag

#AdBlock

Mark Hulkalo

No, by email.

I was too lazy to click "unsubscribe."

David Freitag

19:06

Then it's your fault you tool

Simon

@MarkHulkalo 'MERICA

Mark Hulkalo

@Simon VAT.

Dafuq. Newegg is not letting me view their website

David Freitag

@MarkHulkalo Good, you don't deserve it.

Simon

rekt

Mark Hulkalo

No, Newegg doesn't deserve my cashbiscuits.

David Freitag

19:08

Hahahahaha

jalopnik.com/…

Those fucking comments

Ohnana

that is a fugly piece of shit

Simon

pls dovid is not fugly

David Freitag

So it turns out when you try to load PAE-only Ubuntu 15.04 on to a computer with a CPU that doesn't support PAE, it boot loops then falls back to a busybox shell.

Mark Hulkalo

the website only works on internet exploder

Ohnana

@Simon that car is. and someone tried comparing it to kate moss

Mark Hulkalo

19:11

@newegg.com doesn't work on firefox for me. Nice :)

David Freitag

Are you using a dell?

Ohnana

that is a fugly car not a pretty lady

David Freitag

@Ohnana L2TYPE FUUUUUU

Ohnana

stfu i'm not pinging you

David Freitag

Come at me bro

Simon

19:13

all pls don't make me put the room on time out

Ohnana

lolololol simon thinks he's a mod

adorable

Simon

sets the room in ovid mode

SIXTY

David Freitag

Simon

FIFTY-NINE

David Freitag

@Simon bring it

I think this hard drive might've had it... lol

Lots of reallocation failures in ubuntu

Mark Hulkalo

19:17

You're a reallocation failure

David Freitag

Hahaha that's actually a good joke

Rоry McCune

that was weird

I was cut off from chat.se for a while

all the machines on my network wouldn't route traffic to it

all other sites ok, chat.SE not

David Freitag

@RоryMcCune You connecting using https?

Rоry McCune

@Ohnana you're saying I should make simon a room owner... right?

@DavidFreitag tried both

Simon

o pls

Rоry McCune

19:19

on different browsers

and different machines

David Freitag

@RоryMcCune Weird.

Simon

I'd turn into an italic Simon.

Ohnana

@RоryMcCune isp derped

Rоry McCune

yeah looked to be a routing issue

Simon

Would that make me Italian?

Ohnana

19:19

happens to me all the time

Rоry McCune

weird tho'

Mark Hulkalo

@RоryMcCune National Security Agency

Or the GCHQ

Rоry McCune

@Ohnana first time I've seen something like that

Mark Hulkalo

Or the Kiltmen.

David Freitag

@Simon I read that as "turn into an italic salmon"

Ohnana

19:20

@RоryMcCune congrats your isp isn't crap

Rоry McCune

@MarkHulkalo more likely to be THSE, looking to have me stop wasting time on Chat.SE

@Ohnana they're generally very good, properly techy, run an IRC room where you can get the techs easily, know what they're doing when you phone

@Ohnana downside is that they ain't cheap!

Iszi

@RоryMcCune THSE? Is that like SWMBO?

Ohnana

@RоryMcCune oh my gooood that sounds like geek nirvana

Rоry McCune

@Iszi yeah.. "The Missus Security Agency"

@Ohnana yeah they're proper network geeks, reallly really hate NAT and love all things IPv6

Iszi

@RоryMcCune How TF does that translate to "THSE"?

Rоry McCune

19:21

@Iszi 'cause I messed it up...?

Mark Hulkalo

WHAT?

ISP Techs that use IRC???

Rоry McCune

hmm now I need to ret-con somehing that makes sense with THSE

Mark Hulkalo

I feel so deprived.

Rоry McCune

@MarkHulkalo aye and the people who answer the phone know what they're doing too

Iszi

@RоryMcCune You have to say "shibboleet" or something though, right?

Mark Hulkalo

19:24

I'm definitely deprived. I call comcast customer service and it's like. "How may we ravish you today? With or without lube? Without? Okay, great! You will be charged a $75 fee for this."

Ohnana

i live across the street from my ISP

David Freitag

@MarkHulkalo Comcast sent me a $75 visa card because my service was delayed a day when I first moved in.

And the one time I had to call them for something I ended up flirting with the girl that picked up.

Mark Hulkalo

Desperation, deprivation and despair will be floating through the halls of my house if we have to call Comcast.

Comcast has never done such a nice thing for me. And if I tried flirting, they'd send Bubba the Broadband Brute after me.

AviD

Take advantage of USD$200 discount (Code: OWBR0316) for #BHASIA 2016, March 29-April 1 in Singapore. Register now: http://ow.ly/UJanR

Tweeted by owasp on November 30, 2015 at 3:06 PM

fyi @TerryChia @LucasKauffman ^

Rоry McCune

motherboard.vice.com/read/… <-- d'ya think we can start doing "Think of the children" scaremongering with security now

might actually start having an effect on people

Mark Hulkalo

19:31

WTF?

Rоry McCune

Toy maker stores pictures of kids + chat with parents (for no good reason), toy maker gets hacked

data gets stolen

Simon

How did they take pics?

Rоry McCune

@Simon I think the kid tablet product has a camera

Mark Hulkalo

We we just about to buy that product for our daughter.

Rоry McCune

it's like a kid tablet thing

Simon

19:32

oooooooooooooo

Fucking creepy.

Rоry McCune

then there's a smartphone app. for the parent to chat to the kid

Iszi

Wow. Reading an(other) article about how the attacks in Paris reignited talks of government needing back-doors in encryption. They said the attacks were "the greatest assault on French soil [since] the end of World War II". While perhaps technically true, is it really appropriate and fair to be comparing the terrorist strikes to D-Day?

Rоry McCune

@Iszi the ironic thing about the calls for back-doors in encryption is that the attackers didn't use any

they did it all in the open with real names/ and IDs and SMS messages

all of which the security services already had access to

Mark Hulkalo

@RоryMcCune Exactly.

Rоry McCune

seems to me the security services are swimming in seas of data and the last thing they need is more of it

Mark Hulkalo

19:35

If there are backdoors in encryption, there will be backdoors in critical infrastructure. Bad guys will find out and exploit them.

And if critical infrastructure has it's own special encryption without backdoors, someone will find that, and use it.

David Freitag

@MarkHulkalo I'll find a back door in your critical infrastructure.

Mark Hulkalo

I'll just bet you would.

Iszi

@MarkHulkalo And you'll like it.

Mark Hulkalo

@RоryMcCune Regarding this vtech hack, they're disgustingly incompetent.

Iszi

@MarkHulkalo Ah, yeah. That's ugly.

Mark Hulkalo

19:38

@RоryMcCune This is like back on WebTV when you could check your cache and find all of your chat logs... and it gets worse... you could replace your userid with someone else's, so you could view their own chat logs, etc.

Your chat logs were stored online in a specific URL

And you could modify a few variables to get anyone else's logs.

like hxxp://server.webtv.com/user_chat_logs/id=username&datefrom=10/1998&dateto=10/19‌99, or something stupid like that.

Rоry McCune

This is why, unfortunately, what's needed is legislation, saying if you make IT products, you have certain minimum security obligations, and if you breach them you get a large penalty

Mark Hulkalo

I agree wholeheartedly.

Iszi

@MarkHulkalo Wow. Hadn't heard that bit yet.

David Freitag

I'd like a large penalty.

Mark Hulkalo

@Iszi It was so long ago, I don't remember the url format, so I'm making it up now. but it was a lot like that.

Simon

19:41

I did a remote class for a College where they would send us messages through an internal messaging feature. You could do exactly the same: change the ID and get another student's message.

The worst was that they initially sent every single password to every single user in plain.

Mark Hulkalo

/facepalm

David Freitag

Good 'ol saucy salamander.

Simon

They did patch some stuff after we told them but I'm sure there are plenty of other vulnerabilities.

Mark Hulkalo

I applied to a government contractor several months ago, and found out how to hack their application form. They were looking for a "security expert," and I showed them how it could be done. Didn't get a response, got the FBI after me instead. :D

tldr: plaintext passwords, incremental pins and passwords, so you could easily log in as someone else

David Freitag

@MarkHulkalo Yeah... but did you hack their AOL CD?

Iszi

19:44

@MarkHulkalo I mean, I hadn't heard anything comparable coming from the VTech hack. Sure, their lack of cryptography (or proper cryptography, where there was any) is miserably incompetent. But you're talking about something a good bit different.

Mark Hulkalo

No, I didn't deface that. I don't have enough hacker powers.

The incremental pins and passwords went like this: properparrot. improperparrot... 5999, 6000, 6001

So you could easily log in as someone else by changing the digits/words around

Iszi

@MarkHulkalo Hadn't seen that. Whose report?

Mark Hulkalo

@Iszi It was for a government contractor I applied to for an IT security position. Their online application form was a massive security risk.

Early this year

Iszi

@MarkHulkalo I'm confused. I thought we were talking about VTech?

Simon

Ex-one, pls.

Mark Hulkalo

19:46

@Iszi, referring to this: chat.stackexchange.com/transcript/message/25794479#25794479

I didn't touch anything, but still. I showed how easy and horrible it was

Thomas Pornin

@Iszi They are more comparing it with the Germans. Still outrageous, but not as weird as claiming that D-Day was a terrorist attack (though the German occupation troops did say that all rebel activity was "terrorism").

Mark Hulkalo

The only reason I figured that out was I messed up on the app, and had to restart it. And it just continually increments the values from the previous...

AviD

@Iszi client side sql injection, apparently...

Mark Hulkalo

@AviD Huh? The WebTV thing? I'm talking about 3 different things.

There's the V-Tech thing, I was comparing it to the WebTV thing, and to something I encountered recently.

AviD

@MarkHulkalo no, vtech, what @Iszi was talking about

or rather, standard trivial sqli, with client side sql strings.

apparently.

also, since when do i get proper news before i hear it in the dmz??

Mark Hulkalo

19:51

@AviD No, it appears you can just change a few values and link them

Iszi

@MarkHulkalo That's just it. I'm not getting the WebTV comparison.

Mark Hulkalo

“I can get a random Kid Connect account, look through the dump, link them to their circle of friends, and the parent who registered at Learning Lodge [VTech’s app store],” the hacker told Motherboard.

AviD

that too.

Iszi

@AviD Dunno 'bout you, but I found out on Saturday right alongside the Planned Parenthood shootings in CO.

Mark Hulkalo

@Iszi WebTV allowed you to link to specific usernames to get their information. It looks like VTech did this too. It might be a wording issue here.

Iszi

19:53

@MarkHulkalo Yeah, not sure that's it. Far as I've heard it's just SQLi.

Mark Hulkalo

Link?

AviD

@Iszi omg, you think theyre connected?? mind blown

JukEboX

Superuser chatroom is BORING

Iszi

@AviD Go ahead and make that stretch. I dare you to try. Oh, and what's the number for emergency services in your area?

AviD

@Iszi does it mattwr? with sq'i you can still get anyones detials...

@Iszi jeez man, i wouldnt do that.

although, if bad guys had the vtech datadump, it could be similar and yet hells worse.

Mark Hulkalo

19:56

I find it creepy that Vtech is storing that kind of information... pictures of kids chatting with their parents, recording their voices, etc....

Iszi

@AviD Method of exploit is completely different though. Changes the discussion almost entirely.

@AviD Fortunately the guy that figured it out supposedly has "no plans" to do anything with it.

Simon

Sure, you have no plans and then suddenly you sell the dump.

AviD

@Iszi hmm, but the thing is you can use sqli to just change your account id, and it is effectively the same, with not much different effort

Mark Hulkalo

With SQL inections, if your database has write access, you're fudged

you can insert a record with plaintext code to execute on the server side

Simon

Son, we understand how SQLi works.

Mark Hulkalo

19:59

There's a lot you can do with it

AviD

@MarkHulkalo that is rarely possible, even in horrendous code

Transcript for