« first day (1825 days earlier)      last day (3353 days later) » 

00:00
Anyhoo, shooting an Explosive weapon into the water has the same effect. Thought it was pretty cool that they went for that.
00:15
hm?
what am I missing
@kalina A big sploosh!
It's pretty cool.
Anyway, nych'all.
are you leaving me here with these... these... these...
-3
A: Is there any disadvantage/risk when using a software licensed to someone else?

godseyeFalse !! ist not like Real Life.... In Reality you can be Tracked from a License or Software that is not Open source ! Every SOftware Communicates with Ports , these Communicates with DNS , Gateway and ISP and the most Dangerous Thing : Your Hardware and Mac Adress...so please do not think that t...

00:31
We do exploit code here, right?
Technically I suppose that's SO material, but I'm more hopeful of good answers here
1
Q: Environment variable and scripting for return-to-libc exploit

WhitekangFor school we have to perform a return-to-libc exploit. Doing this, we need to spawn a shell from /bin/xh which will print a message that we succeeded with our exploit. To do this exploit, I used this script to get in $(perl -e 'print "\x90" x (789) . "\x60\xb0\xe6\xb7" . "\xe0\xeb\xe5\xb7" . "...

it's too programmy for U&L
01:15
@Gilles I can't recall seeing many good answers to shellcode questions here in the past, but yes, it is on topic here.
@kalina Your new avatar freaks me out.
well if it would please you I can just vacate the area until the hats are gone
seems to be what everyone else wants
@kalina It's not the hat, it's the big eyes. But no, you don't need to vacate. It's my problem. I'll deal with it. In my own way.
Hats, by definition, are awesome.
it's fine, I'm going anyway
o/
@kalina \o
Me too. It's Monday, which means I've been up since 3:30am. That's not so good when you get to be my age.
So, I'm off to bed, soon.
01:38
@Gilles Of course
02:29
@RоryMcCune Looks like Scotland or something? youtube.com/watch?v=h2caT4q4Nbs
Also, awesome ad
afk cutting onions
@MarkBuffalo nurd
 
5 hours later…
08:17
@MarkBuffalo yarr that was a combination of Skye with, I think, a bit of Shetland
08:57
huh occurs to me that @m'vy hasn't been about in a while
wonder if he's off on holiday...
he got bored of your nonsense and left
@kalina phhhbt bored of my nonsense, I think not...
bored of this place turning into Arqade or sound design... perhaps :op
morning folks
@RoryAlsop watcha'
was looking at Ross Johnston's pics of a snowbound Aviemore - looks lovely. Then had a ping from my kids in Italy saying they are having to snowboard on artificial snow :-)
09:09
@RoryAlsop LOL
my rep train is moving full speed ahead I see
rep capped already
@kalina more fallout Q's ?
no, a single steam question
ya know I realised the other day that I've been on Sec.SE for 5 years now!
09:28
my account says 2 1/2 years but that's missing the first year
Having the flu sucks.
man flu'd?
poor you
Suppose to be sleeping. But can't even right now lol.
Which is why I am here lol.
being ill is the best time to sleep
for literally days at a time
Top Twip to avoid sickness... avoid all people!!
plague carriers the lot of them
09:36
I wish I could sleep. Meds kicking in soon... I hope. How's Fall Out?
@RоryMcCune I try so hard to avoid!
yeah they can be tricksy people, ending up forcing you to see them
try moving to a wilderness
Pretty sure my child got me sick. Well jokes on her she is sick during Christmas vacation so ha!
@CameronVerotti fallout 4 is great
@CameronVerotti ahhh there you go, basic error, you had children!
ew children
snivelling filthy little humans
burn them all
09:43
hey @kalina you know Escala - Clubbed to death ?
did they come up with that drum beat or did it come from somewhere else?
I know almost inevitably a stunningly newbie question
but I was just listening to it and thought "that drum beat sounds awfully familiar"
and then I thought "who would know where that came from"
well the entire track actually
the thing is Escala appears to be a legit group that are a string quartet
but that track is obviously from the soundtrack to the matrix
second one
where is likely how you'd have recognized the percussive arrangement
because it has a very distinctive build
ahh yeah that would make sense, I have it on spotify as being by Escala, but it would likely be from the soundtrack that I know it
maybe it's a cover
since the strings do sound real in the Escala version
09:53
yeah s'a nice track
the other one I like is this one
soundtrack to the matrix movies was pretty good
@kalina aye they had some good tunes, think I might load up that album as an accompaniment to the morning....
nothing like a good strings section to give you goosebumps
well that's the entire basis of euphoria in dance music
sure the strings may be synthesized
hell they may even be actual strings
or as the case is more often than not in my studio
sampled actual strings with post processing to make them sound synthesized
10:09
@kalina so deliberately synthetic sounding...
sometimes you just need to crank up the drive
one of my current tracks has this weird synergy where the open hat merges with the upper end of the track and just sounds like pulsing white noise
which is more appealing than it sounds
because it makes it non-obvious where each instrument ends and begins
I'll have to take your word for that one, not least 'cause I'm not entirely sure what all that meant :op
well basically without even really taking into consideration
sound is more appealing if it doesn't do something unnaturally unpredictable
which is why side chaining is so desirable in many genres
because an off beat bassline is quite an abrupt sound
10:27
@kalina side-chaining?
but if you side chain it is causes an artificial attack linked to the shape of the kick, resulting in the track pumping
side chaining is where you link the parameters of one sound or mixer bus to the wave output of another sound
so a sound looks like this:
and would effectively be automation on <some other parameter> you've linked to it
so that could be both the waveform for your kick drum and unsmoothed volume adjustments to your bassline
except you'd usually invert those two and smooth the output so as the kick comes in the bass goes out
but instead of it being the bass going out because the sound stopped
it will be the bass going out because the volume was reduced
so the sound was and is still there but has no volume
but the illusion caused by the ducking effect makes the sound more "natural sounding" in many instances
... and I'm lost. hey @RoryAlsop you're the musical rory, this would likely make sense to you!
because it's not two sounds triggering independently and overlapping
@kalina you really should answer questions in SoundDesign.SE
no
not being a programmer I think this is correct
but if you were to have fully inverse side chaining (ie: 100% on your source = 0% on your target) it would essentially this:
int kickVolume { get { return _kickVolume; } set { _kickVolume = value; bassVolume = (value * -1) }
but constantly, all the time, as the kick drum plays
and it doesn't have to be bass volume
10:32
@kalina what programming language is that?
it could be compression threshold or distortion level or filter level or whatever
c#
with an obviously missing ;
most methods of side chaining will literally take "Input * -1" as its formula
and it's nothing more complex than "applying one value to other parameters"
@kalina sure logically simple perhaps, but tricky to guage the effect without the correct domain knowledge :)
well even then it can be relatively annoying to get perfect and you can easily ruin a track with it
but thanks to side chaining you can also maximize your perceived loudness
by, for example, having your lead riff compressor threshold side chained into your kick peak volume to make the lead riff duck slightly when the kick comes in
since the kick is loud anyway you don't notice the riff ducking slightly but it makes just a little more room to allow you to turn the entire track up
or, in absence of de-essing tools you can bus your vocal to a muted channel, EQ everything that isn't the major sibilances you're targetting and then use that as a side chain source to apply automatic EQ to the main vocal channel and effectively de-ess the vocal without a dedicated plugin
effectively you're saying "this ESSS you keep making, well, every time you do that, turn it down slightly"
anyway fine I'll stop boring you
and revert back to 5 word sentences
10:42
@kalina I'm sure it's interesting, it's just so far out of my realm of knowledge that it might as well be said in swahili...
:)
well this is how I feel when you're talking about... whatever it is that gets talked about in here
@kalina phhbt how often do we have a actual genuine on-topic conversation in here :op
also you understand more of the techy stuff than you let on
so you think
"edit a closed question (that you did not participate in closing) that gets reopened after your edit"
booo
I participated in closing it -.-
so many tears
@kalina so close, is that one of the hidden hats?
no that's the batman hat
and I need a gold badge from somewhere
Adi
Adi
11:16
@RоryM Have you done API scans with Nessus?
I see a music ping :-)
@RoryAlsop read up @kalina had an interesting discussion on complex musical things
@Adi you mean scanning something like a web service? If so then not really, I wouldn't usually use Nessus for that, although it does have web app tests of course
Adi
Adi
@RоryMcCune Yeah, I'm trying to find those configs for that
I have a specific web service with defined API calls
11:29
@Adi and you're not allowed to use SoapUI/Burp?
Adi
Adi
@RоryMcCune Burp is out of the question because here they need fully automatic scan
I'd look under the web app tests section in the Nessus config, that's where you're likely to find any available options...
Adi
Adi
@RоryMcCune Does SoapUI do security scanning?
@Adi yeah for XML web services it has some stuff (although IIRC you might need the paid for version for some of it)
although worth a note of caution that it can do some "million laughs" style XML DoS stuff which you may need to avoid depending on the setup :)
Adi
Adi
@RоryM I seem to recall that you can somehow feed the service description (WSDL file) into Nessus
11:31
@Adi hmm don't recall that, but then I don't think I've ever tried it :)
@RоryMcCune nah. @kalina was talking about simple music production things. Side-chaining is essential and ubiquitous in recorded music. We have experimented with it live -which is fun
@RoryAlsop phhhbt simple if you know how :op
lol :)
I tried my best to explain it in simple terms :(
Adi
Adi
@RоryMcCune Yeah, it seems like it's gonna be painful to get Nessus to do that
11:58
@Adi yeah If I were you I'd be more inclined to look at scripting Burp or ZAP for that kind of thing
or perhaps something like arachni
@RоryMcCune really? If you woke up one day and realized you were Adi that would be what you did?
@kalina sure what else would I do
oh I don't know, freak out?
if I woke up one morning and I was @Adi I'd spend the entire morning freaking out and then the entire afternoon experimenting just to see what the big deal was
@kalina what the big deal is .. with living in Finland? well I can tell you there, it's like a lot of other places but a bit colder..
o pls
12:04
slp
lsp
(Lumpy Space Princess)
ooooooh - no I didn't see that
12:39
New montor's in
Now I need to finasse it into my desk space...
yay for new monitors
yay for technologies
yay for things
yay for stuff
Fluttershy casts YAY on DMZ: critical hit
12:58
Greetings all.
I see we're getting better at all simultaneously going quiet
10/10
@kalina Now if only my children could learn that skill...
13:14
rwerower23094lkasd!I!#O@#
oops, my password
Gee, I sure hope someone doesn't try to log into my [email protected] email address with that password
I can't even be bothered to see if they'll work
I usually get no requests on linkedin because I don't even have a picture on there but yesterday, I've received 2.
WHO DID THIS?
Knew it.
dammit kalina
One of them is a talent agent.
13:20
I screenshotted it in time
Obviously, someone is already recognizing my talent.
@Simon It's recruitment season. I got a couple contacts
1 company wants to meet up with me, and I'm like noes
@Simon everybody needs a tiny ween to laugh at
pls
you could do corporate events
it would be like a motivational team building exercise
13:21
Actually, I got 3... and this is after I disabled all of my profiles and my linkedin account
@kalina "At least your ween is not as tiny as mine"
"look at the ween" hahahaha "it's so tiny I can't even see it" "oh gosh I can't breathe I'm laughing too hard"
:O
I'm highly irritated by this post:
20 hours ago, by Lightness Races in Orbit
I'm only going to say this once: STOP FLAGGING NON-OFFENSIVE THINGS. Thank you.
"I'm only going to say this once"
That mong doesn't have any power.
don't go name calling
u wot m8
13:32
in The 2nd Monitor, Dec 8 at 13:03, by kalina
interesting anecdote, the flag button alerts lots of people who don't really care
13:53
@Simon I don't see any claim to power there. Just that they're only going to complain about the flagging once. So, be glad that they'll never bother us about it again.
can I ask a question about web services security in security.sE.... com
no
well, yes
well, possibly
if you provide sufficient information
@Iszi next time they come in we all need to be like WOAH YOU SAID ONCE
the thing is a comment like that would usually get a "and who the hell are you?" in response
so good job I wasn't here
@kalina it is about binding confugration and security mode + https
please don't use big words I find it considerably less effort to comprehend diminutive words
you could try asking it but if it's more about configuration then you might be better off on superuser
it can be migrated if that is the case though
Hm. What's up with the Everybody Gets A Hat thing? Is it counting hats from past WinterBash or something? 'Cause I'm not even out of the single-digits for hat unlocks this season.
14:03
@Iszi do you even read?
> own any hat while the entire site collectively has at least 20 distinct hats
@kalina That's not what it says on the Winter Bash page.
yes it is
where do you think I copied it from
superuser :| anything but superuser,

I was more like thinking about SO or SSE, but after your advise SO will be more suitable, thanks though :)
@kalina Oh, you actually have to click on the hat to get the full explanation of the mechanics.
14:28
I have a hat.
My hair is a cake, your argument is invalid
One year, they should make a hat that's a pancake. Then we all change our avatars to bunnies.
You mean guinea pigs?
@MarkBuffalo No, bunnies.
hm
Pretty sure its a bunny
14:31
I has a bunny
@Iszi blocked :<
Heh. Rule 34 that and I bet you'll end up with a different kind of bunny. Not doing that at work.
@MarkBuffalo FTFY?
That isn't a bunny
OMG I can see a picture
/passes out
@Iszi Works now
YRERHJTGKREGJSJFN WIKIPEDIA STOP ASKING ME FOR CASH DORRAHS
Wow, wikipedia is getting passive agressive with me. I close the thingy, and it pops up another thingy when I scroll down, but in all red and yellow. "GIVE US MONEY!!!!!!!!!!!"
14:36
Heh. Yeah. Checked on my phone. Threw in a certain keyword to find pictures like that which use the other kind of bunnies, and I got all of two relevant results. The rest had nothing to do with pancakes, and were definitely NSFW.
@MarkBuffalo That's not passive aggressive. That's just aggressive.
It's passive-aggressive when I scroll down, "if only we had a cup of coffee"
"it's fine, we'll just go offline"
What is a good christmas present for someone who is interested in computer security? Any ideas?
@essence A trojan
@essence WiFi Pineapple? Pwnie Express? Of course, this depends on what particular bit of security they're into.
14:40
Did you see that? There was a great disturbance in the farce.
I am suitably disturbed.
thanks for idea's so far :) wifi is a good topic i think
and I thought about the pineapple already
@essence It's even better if you hack them.
Better yet, don't let them know about it until years later
@MarkBuffalo we are allies, I won't hack him, I'm looking for a present ;)
I wish I could get hacked for christmas
14:45
*present in positive meaning
Thank you for the clafrification
ok, it's about time to hunker down and work
@MarkBuffalo whats your IP adress g ?
@essence 127.0.0.1~~~~~~~~~!
192.168.13.37
thats the part where I disconnect because I hacked myself ? :)
14:48
@essence Stick around. We could use more chatters
ok =)
@essence a pack of black tshirts
in all seriousness, ask them if there's any infosec books they've been coveting. give the gift of knowledge
@Ohnana good point
@essence Ask them what they want
I hate when I get pony paraphernalia for Christmas
lol
i'm getting a kitchenaid mixer so that's pretty neat
14:57
Not getting my wife or kids anything
And I'm not getting anyone anything
@MarkBuffalo I did ask, but got no real answer :)
<= doesn't do Christmas. I buy them lots of stuff year round, so it offsets.
@Iszi pls I'm sure that's not what he meant.
@Simon how is your car?
15:00
@Simon Did you take your vehicle to the hospital?
@JonathanMusso Stalled in the parking lot at work. My buddy will carry it to his place on a trailer and we'll fix it.
You must have a strong buddy.
@MarkBuffalo No, my friend and I are car doctors.
@Simon ah shitty man, well goodluck
@Simon I recommend chinese-style Vehicle hospital thingies
15:01
@JonathanMusso Thanks, it should be fine.
@MarkBuffalo That doesn't sound good at all.
mark I see you pinged me but I wasn't here. hello lol
@Simon For example, the doctors take their scooters to the hospital and drive them up / down stairs, or take them in the elevator. Then you get to the maternity ward, and they take blood from you, and pour it into a cup, contaminating it
@MarkBuffalo Not bad but I think I'll pass.
And then you see blood stains on the floor that dried up there... Like a woman gave birth on the cold floor and attacked the doctors for Coming near her
It could be an adventure when @kalina delivers your brood
pls don't lure her
15:04
heh, you just need to hit the engine a few times with a large spammer.
@JourneymanGeek That's what she said.
@MarkBuffalo incoming nuclear strike, level 7 devastation expected
@Ohnana It's okay, I'm a Legendary Super Mutant Master. I can take a few fat boys.
3
@MarkBuffalo you're calling @kalina a fat boy..... well been nice knowing you o/
15:21
@RоryMcCune N-n... No, dude. I'm not! I mean, the Fat Boy in Fallout is a nuclear weapon.
I can take a few nukes to the grill before keeling over
And now I'm on a list for talking about those. The feds will kick in my door in a botched swat raid.
Adi
Adi
15:51
@kalina If woke up as you, I'd do the exact same thing
It always seems like you guys have a lot more fun that we do
So it would be interesting to know
what does DMZ stand for btw? (this may be a stupid question)
@MarkBuffalo I thought it was Fat Man and Big Boy.
In computer security, a DMZ or demilitarized zone (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN); an external network node only has direct access to equipment in the DMZ, rather than any other part of the network. The name is derived from the term "demilitarized zone", an area between nation states in which military operation is...
Adi
Adi
@essence Dees Macho Zecurity experts
The "Z" stands for "drama".
15:53
edumacation
thanks :)
Actually should be (maybe is) Little Boy.
If they're going after the names of the bombs dropped on Hiroshima and Nagasaki, respectively.
@Iszi fat man is the only weapon. little boy is the IRL nuke
@Ohnana No, there's a Legendary variant of Fat Man. But I think it's actually called Big Boy. And Fat Man was an IRL nuke too.
Adi
Adi
Did I miss a flagging war last night?
15:54
@Iszi oh whoopsie lol
@Adi Not a war, but apparently a few grenades went off
@Ohnana Confirmed. They called it Big Boy. Really should have been Little Boy.
Adi
Adi
@DavidFreitag Who was involved?
@Adi No idea
Adi
Adi
­
15:55
@Adi i said "uck" and someone freaked out and flagged it
@Adi wat
then the mod invasion happened and they all got exaggerated
@Ohnana it's @Adi up to his Unicode shenanigans again
Also, correction: Apparently Little Boy hit Hiroshima and Fat Man hit Nagasaki.
Nice @Adi.
ok who the heck is flagging now!
would you please stop it
or tell us why you're flaggin
geez
Are you serious?
15:57
Well there is a new person in here
Adi
Adi
@RоryMcCune I like shenanigans and uncide
BETTER?!
Adi
Adi
@Simon God bless Hebrew keyboards
If someone flags, does he show up as active in the chat?
(If he was on idle)
@Simon yep some muppet flagged @Ohnana 's description of a historical event that would have made no sense without that word
15:57
@Adi Hehe.
ಠ_ಠ
Adi
Adi
@Simon Nope
@RоryMcCune Sigh.
@RоryMcCune Perhaps you should put something about the sort of language that is acceptable here in the room description
@Adi Damn it.
Adi
Adi
15:58
You can flag from the transcript
Can you flag if you're not logged in?
@DavidFreitag well theoretically general swearing isn't (although I think that's daft personally) but describing a historical event related to a swear word shouldn't be an issue
@Adi Great now someone is going to go through chat and flag every single swear from the beginning of time
If people keep this kind of nonsense up everyone's going to end up migrating to slack channels or similar
This is why we might end up doing what SF did.
Exactly roro.

« first day (1825 days earlier)      last day (3353 days later) »