« first day (1828 days earlier)      last day (3350 days later) » 

00:00
@DavidFreitag something something @Simon's mom
2
see, you dont even need to be specific, thats just always funny
@AviD Too specific and you need a target audience, otherwise it's just funny to everyone.
I really enjoy blasting some Knife Party while I'm alone at work
some wot?
Or the ever popular BBBBBBBONFIRE
woe where has this been all my life
Right where the great flightless manicotti left it
00:13
@DavidFreitag No, but I just farted. Is that okay?
@MarkBuffalo If a little flatulence wasn't ok I'd be in prison for life
@DavidFreitag I'd be executed in 52 countries at least.
lifehacker did "how to get away with farting in public"
It's hysterical because they approach it completely seriously and factually with a total poker face.
I already am an expert at getting away with it
I let out these little squeezes
Nah, I just fart. If someone notices I just stare them dead in the eye
My personal favorite knife party song
00:20
You go to... knife parties?
do you bring a gun?
No, I bring a glow stick
Abandon Ship is definitely my favorite knife party album
@MarkBuffalo he got his glow stick cut off?
@AviD He's basically going, "That's cute."
00:26
because he got his glow stick cut off.
@AviD I've never seen an episode of that show
@DavidFreitag You should watch it. Ramsay Bolton is one of the best characters of the show.
@MarkBuffalo one of the worst
@MarkBuffalo Meh, it's not on nertflerx and I can't be bothered to torrent it.
well, close to worst, but not quite
ah yeah, Ramsay is.
its funny, as horrible as he is, as much as they get you to hate him, they then get you to feel bad for him, for what Ramsay did to him.
00:28
Ramsay is the embodiment of murica and gitmo.
@MarkBuffalo RAMSAY FOR PRESIDENT
Although there are quite a lot of boobies in that show...
Might be worth it.
user image
4
If I have another daughter, I'm naming her Irena.
01:00
@MarkBuffalo i made a shitty kiddie comic about her for my religion class once
she was badass yo
@Ohnana Nice! I didn't realize you were a religious fanatic.
@Ohnana Joking. But yeah, she's hardcore
@MarkBuffalo hue
1
Q: Phone call to try and gain access

Eddie StuderAbout a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was "downloaded" which was getting ready to start in a few minutes. I played along and they walked me to the e...

lol i love these guys
"i run linux"
"OOOHHH no your windows is broken you have virus, please log in and i can check"
01:19
-4
A: Can forensic investigators find my webmail emails in my laptop?

LvBYes, they can. But so can anyone with physical access to: Your account Your Laptop Your Hard disks Your Memory Your processor You as to whether this is an issue consider the following. in your question you state When I send an email using Yahoo Mail or GMail to a friend. this means you al...

"
Your processor
You"
lmfao @ your processor
"your ram"
I'll give him the benefit of doubt for that
here's why... I have thunderbird open right now, and my memory scanning program is bringing up my emails =D
But if he means your physical ram, then... dafork
You can't take out your ram and put it in another computer and be like, "LAWLS IVE GOT YOUR BUFFALOS"
01:37
Howdy
I just realized I haven't eaten anything in 24 hours
And that when I had dinner last night I left the tequila and the ketchup out
@MarkBuffalo Unless you keep the ram sticks powered
@DavidFreitag True
@MarkBuffalo speaking of which you still haven't put that on bitbucket
@DavidFreitag Been really lazy as of late
is Python preferred over Ruby for scripting in the security field?
01:52
I dunno? Use whatever gets the jorb done?
3
Q: Ysoserial and Jenkins commons collection exploit - what can you do?

user16655I have read about the Jenkins exploit of the Commons Collections vulnerability. I've tested this (legitimately) on a system, but I'm not very good at this, so I can't seem to achieve much. What is the worst case scenario if someone takes advantage of this vulnerability? What is possible to do?

@MarkBuffalo dude really
@DavidFreitag Past few days my back has been murdering me. I don't wanna do anything
I pulled a muscle doing heavy lifting :]
@MarkBuffalo Sex with the wife again eh? :b
She's about 100lbs, no worries
Try the 300+ I've been lifting
01:57
@MarkBuffalo Oh, must be the mistress
rofl
@CameronVerotti Nice post. security.stackexchange.com/a/108443/87119
Have an upvote.
@MarkBuffalo Yeah but he probably could have said that in a comment
@DavidFreitag I agree, but it's just really useful for analyzing packets.
 
3 hours later…
 
2 hours later…
07:06
with whole-disk encryption, I have a new backup disk and I'm about to encrypt it then almost fill it. Am I right to believe that a quick format, do backup, then write random data to free space will have the same effect as a write-every-block format in terms of filling the disk with "random" values? TrueCrypt was very keen on the slow format so it wasn't obvious how much data was on the disk.
But I'm looking at 10 hours for the format then 10+ hours for the backup and I'm impatient. This seems like a valid shortcut to me. But I fear I may have missed something subtle.
07:18
Why would you want to then write random data to the free space at this stage?
So, sat here at the station. At 0715 the announcement came over telling us the train now arriving at the platform is for Edinburgh. Still no sign of a train...
07:53
@RoryAlsop Mornin' Mr A
it's well seeing that @TerryChia isn't participating in hatbash this year
08:08
also amusing to see just by how far @kalina is ahead on the arqade leaderboard...
08:44
such a stalker
@kalina wrong rory :op
nuh uh you just said
I was just wondering if you had that over 9000 hat so I could ask you how to get it :)
there isn't an over 9000 hat
'cause it's cool but also a secret one
@kalina care for a wager on that?
08:45
no because I'm not taking part in hats
@kalina say the person with like 20 hats on arqade
that's what me not participating looks like
^^ that dude has the over 9000 hat!
allbeit he got it on superuser, so that doesn't really count...
made a post with over 9000 views
must be that
@kalina good theory
hmm well that stupid sequential thing I answered has almost 6k so I guess I might get 9...
09:23
Ping it out on twatter
That could do it
@RoryAlsop yeah I'll just say it's a question about Juniper backdoors or researchers pwning facebook and I'll get the views in no time!
both the question and the answer
there is also a deleted answer by the original poster that is nearly identical to the other answer too
so there is probably some sock puppeting going on also
09:49
"I bumped my car parking at the department store" "Marks and Sparks?" "No, just a bit of a dent"
you guys saw the release Juniper did?
@LucasKauffman yeah we need a sweepstake on which .gov did it
@RоryMcCune I'll go for U.S.
@LucasKauffman well the easy bet is them or China
@RоryMcCune the backbone of the bankingsystem is running those things I think
09:54
@LucasKauffman from what I've read it's ScreenOS rather than JunOS
so not quite as bad as it could've been
@RоryMcCune yes and no, IIRC all SWIFT connectivity occurs through VPN boxes delivered by Juniper, I'm not sure these are JunOS or ScreenOS
Heya
@RоryMcCune get access to SWIFT and you have a full view on all transactions in the world or other messages being sent between banks
imagine what money you could earn on it if you had that insight
you have transaction information even before it's processed
@LucasKauffman yeah from what I've seen of SWIFT, they take their security fairly seriously, but yeah I imagine there's some scrambling today by people trying to confirm where they have ScreenOS deployed and get patching before someone reverse engineers the details of that backdoor
Yeah, it's only screenos. I'm not worrying
Thankfully
Did do some rapid checking though...
10:03
@RоryMcCune yep, I actually worked for them (can disclose it, cause I was allowed to add it to my Linkedin :p), in terms of security I've never seen anything like it, they're really top notch. My laptop couldn't even access the internet, all browsers were sandboxed.
They're using different pentest boutiques and pentest everything, including physical badge readers and the likes.
and it's the only place where you get challenged when your badge isn't visible
@Lucas I should chat with you sometime about how they were historically...
@LucasKauffman yeah in most places that doesn't happen but $large_bank actually did it quite well
@RoryAlsop heh
@kalina LOL
@RoryAlsop sure I've heard it used to be a bit less security focused :p
@kalina I should now call Mac OSX Lion "Pimp Bone Lion" all the time
10:05
@kalina wut?
ikr
10:20
I was enjoying sleep so much today, I feel kinda lethargic now I'm awake
might go back to bed for a bit, busy weekend coming up
@kalina well it's party season!
pls it's always party season
@kalina sure but I thought it got busier around x-mas and therefore you could charge more :)
you have the islands during european summer, you have act/qld during european winter and there are plenty of opportunities between
@Gilles can you add chat.stackexchange.com/users/182409/floris497 to the CTF room ?
@Floris497 The CTF room is here http://chat.stackexchange.com/rooms/7384/security-se-ctf-team
But I don't think you have access yet
10:24
@RоryMcCune It's been a while since I did anything for $large_bank, I think they changed it to channel 1 now
@HamZa I requested access 😊
@Floris497 oh nice
oh no there are new ppls
I'm not new ._.
I've been here before you
probably
10:27
ok, I've not been active here. I give up :-)
I wasn't even going to say that
no worries
I don't worry, I'm too tired to worry
also worrying causes ageing
and I'm allergic to that
@kalina you are t3h oldz
@kalina hehehe
10:31
@kalina you might as well start playing classical music now
that's how old you are
swag swag swag
y so mean 2 me
@kalina your music is as old school as Bonzai anthology
@kalina you're probably so old you've never sampled John Cena on one of your tracks :op
a wrestler?
(I had to Google who he was)
nope
probably didn't make it through my bullshit filter
@kalina it's actually one of the funnier memes of the year, better than "What are those!" anyway
there's more to life than internet memes
@kalina ... you are getting old :op
says one of the room's resident coffin dodgers
10:37
@kalina age is a state of mind
how on earth does @AviD still have 30k more messages than me in here
that just isn't possible
it's not even like he's really active
and well... I am constantly hitting the enter key to the point where the writing has wore off the key
although that may have been scraped off because I have a habit of scratching away at the keyboard markings while waiting for progress bars
@kalina he's not too active at the moment true, but he's been around a while. I wonder what percentage of that 30k is inappropriate suggestions relating to simon's family
such a bad habit, so much nail damage
what I'm trying to say is once I have 30k more messages I will be the most active person in here
bwahahaha. etc.
by number of lines, anyway, rather than substance perhaps
@kalina well it's good to have a goal I guess :)
well it's not really a goal, it will happen automatically just because I chat more than @AviD
assuming I stick around, anyway
like obviously if I'm not here then the internet statistics will not be incrementing
10:42
@kalina this is true
@RоryMcCune Yeah I got bored. :P
It's near impossible to top sec.se leaderboard without being a mod anyway.
@TerryChia that'll happen. Anyway it gives others a chance at the top spot..
@TerryChia being bored is basically one of the reasons anything happens in my life
being bored, being curious
@RоryMcCune Lol 9 hats. That's like a day 1 thing last year?
Did they make the requirements much higher?
@TerryChia I'm topping Arqade without even being all that active
10:45
@TerryChia hey hey no.1 is no.1
no, 9 hats is casual level
@TerryChia nah, no one's really taking it that seriously this year
you could get 9 hats in a day
@kalina s/casual/filthy casual/
in fact
10:45
@RоryMcCune Yeah, I only see you, @RoryAlsop, @schroeder.
All the serial gamers (@LucasKauffman, @Adi, etc) aren't in there.
@TerryChia "serial gamer"
@TerryChia and there's not really been any shennanigans to get hats (well apart from the batman one)
@LucasKauffman Remember swapping bounties? ;)
@TerryChia ah yes :p
I want to be batman :o
heh
sec.se is being unfairly treated anyway
10:47
@LucasKauffman I'm guessing the desire to be batman is what fueled the number of people with that hat
jon ericson has no posts on sec.se
just so you feel bad
I have more hats on superuser than I do on sec.se
@kalina pls superluser, you should feel bad not us :op
nope
I feel bad for you
@kalina \/\/
being relegated to 3rd and being replaced by SU
might as well just give up and rename to lifehacks
10:56
@kalina are you saying you're off to hang out in the SU chatroom?
"pls mah windows doesn't work"
@RоryMcCune HELOS I WANT TO METASPLOIT TELL ME HOW 2
not sure what your point was
@kalina s'still one step up on SU
Windows 10 is spyware!!!!!11111eleven
all this just shows you have poor taste in Q&A sites
well I thought that was obviously, it's how I ended up here
10:58
@kalina in the Dance Music Zone?
please this can't be the dance music zone
basically nobody in here even understands the basics
@kalina I wouldn't be that harsh on yourself
you must know something about it
woooooooooooooow
@kalina hey you said it, not me
well we can't all be information security experts and pop stars
11:00
@kalina there's pop stars in here?
screw you guys, now I'm going to write a song about how people on the internet hate me
@kalina aww, remember I've never actually heard one of your tracks
so a touch hard to judge
I KNEW YOU'D BE TROUBLE WHEN I WALKED IN
SO SHAME ON ME RIGHT NOW
FLEW ME TO PLACES I'VE NEVER BEEN
'TIL YOU PUT ME DOWN (OH)
is this Taylor Swift ?
probably
11:02
@HamZa @Floris497 done
why does info sec have a capture the flag room
@kalina it's where all the 1337 h4xx0r5 go
also ya kind of need a private room for that 'cause otherwise all your intel about ongoing competitions leaks
@kalina well, no, but for everything you say, I have to respond
at least once
@RоryMcCune LOL
11:18
no you don't
in fact, I'd prefer it if you didn't
like ever
what you're really saying is that for everything I say you have to antagonize me by responding
@kalina well
@kalina so
@kalina I dunno
@kalina not really
@AviD interesting
@AviD interesting
@AviD interesting
@AviD lies
hehehe
truce?
hehehe
nope?
@kalina "And it was all lies, a pack of lies"
11:22
"can I get one pack of lies please?"
@Gilles Thank you :D
"oh and this bottle of water"
@kalina my one was song lyrics :) from a song I'll wager you've never heard
@kalina "I need to see some id, please."
"or superego, I guess."
@AviD oh but pls I don't have any id on me supercutesmile
11:25
@kalina just a smile?
sure, you can go.
and with a flutter of the eyelids the sale was made
my eldest works in the local supermarket, it always amuses her when she has to card someone.
@AviD why?
and isn't your eldest like basically my age
@kalina why does it amuse her, or why does she have to do it?
11:27
former
@kalina not quite, she cant legally buy alcohol even though she sells it
@kalina well, this^
there are parts of the world I can't legally buy alcohol
probably
and when she refuses to sell to older kids
@kalina sure, Saudi Arabia
@kalina nah I don't think there's any as high as 24
@RоryMcCune she didnt say just age
11:29
@RоryMcCune well your assumption not mine
but yes there are places that require you to be 24
@kalina I know :)
and places where it's straight up illegal
@RоryMcCune also, dont you mean "as high as 48" ?
;-)
India is 18-25 by state
@AviD ah no the truckers only 43 this year
11:30
@RоryMcCune ah my bad
@AviD well sometimes it's hard to keep up with all the personas
@kalina i did not know that
plenty of places are 20 or 21 as well
@kalina well yah notably the USA (poor @Ohnana )
21 to buy alcohol
18 to buy a gun
MURICA
@kalina careful with that you may attract gun nuts again
11:33
well, sure, you dont want kids to get drunk with all these guns around.
true
@RоryMcCune "again"?
wouldn't want to have another stupid conversation about how guns aren't the problem in guncrime
@AviD did you not see yesterday?
pls don't
he'll put the room in timeout for no reason
11:33
@RоryMcCune I think I missed most of it
@AviD basically two of the room participants are very pro gun in the face of any logical debate
@RоryMcCune do I want to know who?
my guess is @MarkBuffalo and @DavidFreitag?
@AviD right on one t'other was AJ
its dumb enough for @Simon, but he's canadian...
@RоryMcCune ah
buffalo was way more OTT with it tho'
11:36
AJ? Really? He's usually rather sensible though.
@AviD it surprises me how people who are in other ways quite sensible have a real blind spot in that regard...
there are about 12 SW puns there, listen carefully :-)
@AviD now that... is well done!
guys...
spoiler alert
but in the new star wars movie
the force awakens
I WILL KICK YOU
11:39
I dare you to
I'm not kidding, I will come to your house and kick your pony
either bring the heat or ... don't
Adi
Adi
@TerryChia I think I only actively play one game
@Gilles thanks
@Adi poppin' boxes and pwnin' n00bs?
12:04
WHAT
first message 2010-12-15
you mean the DMZ just turned 5 and nobody gave a damn?
that's disgraceful
you should all be ashamed of yourself
Adi
Adi
12:25
@kalina Just like when I turned 5
@kalina you have so many hats I couldn't read the name next to the message
wow you DO have a damn lot of hats
@RoraΖ the quantity of hats I posses has nothing to do with the issue you experienced
12:48
@kalina hat nurd
wtf ovid
That's slightly NSFW.
is it?
I think its NSF People.
@AviD WTF
I guess I need to ban myself for a while. Apologies to all.
hey I've seen the video, so won't shock me but yeah... probably not public chat room material :op
And the fact that I did the exact move this morning with my morning ween does not make it SFW.
12:53
@Simon I'm presuming you weren't at work at the time
wat
@RоryMcCune Correct.
am tired lads
Fortunately, today is my last day of work of the year.
@Simon me too!
yay
2 week off then 2 days of work then $employer_con
I'll be reconfiguring my work laptop at home but I don't mind at all since I'm kind of a nurd.
@RоryMcCune Neat.
@Simon yeah I've got talk prep and exam prep to do but I enjoy that kind of thing anyway
12:59
Mhm.
playing with Docker configs and pentest tools

« first day (1828 days earlier)      last day (3350 days later) »