« first day (1873 days earlier)      last day (3305 days later) » 

00:01
What's up, plotter?
Not much..sitting refreshing a page over and over waiting for something to change
the more i sit refreshing the more obsessed I become
weirdly, when I start refreshing the page it was only out slight interest
Whats up with you @MarkBuffalo?
nothing, just coding
struggling with regex for different languages :D
sounds like a fine way to spend a Sunday evening
I am doing CISSP studying as well....but the more I hear about it, the less worth while it feels.
00:07
Why?
Dunno..I get the impression its not really viewed with high regard any more (if I ever)
my boss in keen on me getting it, so ill just plod on
it is at such a high level though.
Is your boss paying for it?
If my company would pay for PWK/CTP/CISSP/etc, I would be very happy :b
My boss isnt paying for it no...its not like a formal requirement. Never know, he may pay for the exam, but not at the moment.
we are hoping for some SANS training from him though
PWK...im going to go for that next
writing a language-agnostic search engine isn't as easy as I thought it was
It doesnt sound like something that would be very easy
00:20
I'm almost done though
What is you are searching, something in house?
or the internet?
no, I'm making a database with multiple tables in multiple languages
ahh okay
the idea is that I can find a pattern between all databases and search no matter what language you put in
And as always the idea is way less complicated than the implementation
00:22
but right now, it is not searching for some reason
it's actually not that difficult. it's pretty simple
so for example you want to search for 'potato' you can search the english word 'potato' or the Bulgarian word 'картоф' and get the same results?
basic concept: matches english in regex? perform english search. matches chinese? perform Chinese search
well it's a bible database in different languages
ahh yeah I get ya
easiest way to test this
@TheJulyPlot Yes. As long as it's found in the database
Sounds like an excellent learning exercise if nothing else
00:25
and I'm doing it in the language I hate the most
PHP
im but an amateur with basic, JavaScript and Python skills, so i cannot pass comment
@MarkBuffalo PHP is by far and away not the worst language to be working with. That being said, though, it's still pretty damn bad
@DavidFreitag I made a massive update on both projects
the next update is gonna be pretty big too
and yeah, php is pretty bad :(
@MarkBuffalo Which projects?
hangouts
also increased the ETL injection speed by 100,000%... literally.
00:30
ETL?
extract, transform, and load
hangouts....the google chat app?
Right...
extract text into appropriate data structure -> transform to SQL -> load (insert) into database
takes like 40 seconds instead of 40 hours
right im of to hit the books for another 30 minutes and the call and end to today
Laters! :)
00:33
peacenuggetry
arsdfgtkdflgkl
it works
00:55
@kalina i'm sorry. but you introduced me to the bridge so turn-about is fair play
What is teh bridges
@MarkBuffalo A bad, terrible place.
chat room for arquade
@DavidFreitag it's not that bad now
@Ohnana Riiight...
ah, nice
I'm happy with the DMZ anyway
01:00
@DavidFreitag i mean, it's more focused and calm
I was in there the other day attempting to promote my faces extension
That was an interesting experience.
:O
Did they descend on you like locusts?
Pfft, I wish
01:50
and it's done
...sort of
That was a really fruitful weekend
02:03
what fruit did you have?
I created a language-agnostic search engine
finished it, actually
...sort of. Improvements can always be made
oh, I just had a banana :)
Nice
@TildalWave Wanna connect?
on LinkedIn.
I already know who you are :b
And now you can know who I am!
sure, link me in
or ...
yeah
it's not really difficult to find me actually
my stuff is pretty barebones. I don't have everything listed
I know. Me neither :b
02:09
I don't really maintain my LinkedIn at all
it's ... ancient
me neither
then why are we all even using it? LOL
just in case. and networking with colleagues is good, too
without giving them my facebook or whatever, which I don't even have anyway... lol
I recently nuked most of my connections that weren't people from DMZ because they were jsut annoying me
I actually deleted my previous linkedin account
recruiters were hounding me constantly
02:11
That's a vert good problem to have sometimes
Indeed
@TildalWave Danke
02:29
yeah so I went to start updating my profile some but I don't really see the point, the more I'll add the more spam I'll get
ya, I deleted a lot of stuff
> Children born to obese women with diabetes are more than four times as likely to be diagnosed with autism spectrum disorder than children of healthy weight mothers without diabetes, new Johns Hopkins Bloomberg School of Public Health research suggests.
Pretty controversial view, but I suspect "Autism Spectrum Disorder" is a overbroad, somewhat abused 'disorder'. Its a bit like how any mook who couldn't be bothered to learn to spell has dyslexia.
(I'm a dyslexic. And its much more than spelling!)
mmmm popsicle fiiiiiinallly
heh. My octocat yubikey's finally shipping
@JourneymanGeek What's your color?
02:41
dosen't say
(I ordered in october, and got around to asking them what happened)
02:53
@JourneymanGeek Is that the github special yubikey?
Wow damn i got mine months ago
There were multiple fuckups ;p
Yeah apparently
(the order page crashed. I emailed them. They said they'd handle it.)
ANd well
it was a bit of a low priority until....
"Oh wait"
02:55
Yeah pretty sure their site got DoS'd by all that traffic
I don't even remember what I wanted it for ;p
Presumably because it was $9 with free shipping
That's why I got mine
I have a policy of not buying anything I don't need, ever
02:56
Well I could be using mine, I just haven't set anything up to use it
I have a serious lack of personal space until my brother vacates the other room
I have too much personal space
I have a desk, a small wooden shelf and a bed
2 of those things are overfull
I have a huge two bedroom apartment all to myself
we have a 2 bedroom apartment. kind of huge
we don't even use the 2nd bedroom
babies sleep in the big master bedroom with us
03:20
basically when I was overseas my brother took over the proper bedroom
I live in the spare room, which is cluttered with other people's stuff ;p
03:49
time to duel
 
2 hours later…
 
3 hours later…
08:31
@SteveDL You need M2 and N to be co-prime to get M1^e mod n.
You can't recover M1 at all, that'd be a full break against RSA.
Guten tag herr Codes
08:58
Mornin' All
morning
@RоryMcCune 't is already 5 afternoon!
@LucasKauffman pls, UTC == Canonical Timezone :op
whatever hokey timezone you're in now doesn't count
Adi
Adi
Awwwwh :(
I've just noticed I'm no longer in the top 10
@Adi Woohoo! I'm number 5!
Adi
Adi
09:09
@Matthew Umm.. no?
@RоryMcCune according to your timezone I have been working since 2 AM this morning :P
Adi
Adi
Top 10:
@Adi gotta work harder :op there's some slackers in the top 10 at the moment, so you could get back up there for sure
@LucasKauffman you should get your bosses to give you a raise for that kind of dedication
@Adi For this month, I am. Which is admittedly a less impressive feat
@Matthew gotta start somewhere :)
09:13
@RоryMcCune Actually, for this quarter too! Did the quarter start at midnight?
do or do not
there is no try
@Matthew hmm I think the quarter is Jan-->March so I guess for now month == quarter
until people start scoring in Feb
Adi
Adi
@RоryMcCune Yeah. I haven't posted anything for a long time. I feel like a shithead
@RоryMcCune I just checked the year charts. Still number 5!
@Adi meh I've been v. erratic lately too, the odd burst
09:43
Morning
@Matthew - yeah, year is currently the same as quarter and month. It's calendar, rather than rolling
Adi
Adi
Mewrning
Mewrning sounds like the word for the way cats wake you up :-)
09:58
nytimes.com/2016/02/01/technology/… <-- This could be interesting if they don't come up with something soon...
@Ohnana I did?
I don't think so
I would never do such a thing
10:15
@CodesInChaos thanks. basically we have this hypothetical scenario with a function that can break some ciphers but not all, and our students are asked to come up with a method to systematise the attack. What I can't get is whether the second message you use for multiplying has to have any specific coprime property. I just don't remember how inverses are calculated, that's too many years ago for me
@kalina yeah I mean who would inflict that on someone!
10:32
@RоryMcCune there seems to be a cycle in this thread
also hi
@RоryMcCune yes - is of some interest to me...
@kalina such a terrible thing to do... Can't remember who first made me go and look at the bridge... Maybe @ScottPack
@RoryAlsop yeah I can imagine that anyone using cloud services (AKA just about every large co. on the planet) is going to have an ... interesting... time if this isn't sorted quickly
of course they're just exposing the complete joke that was safe harbour
10:59
Which we did all know (at tech level)
@RoryAlsop aye unfortunately as the politicians ignored it for a decade it's become a very intractable problem. Rolling back all that free passage of data will be extremely difficult
11:29
Panicking person of the day:
0
Q: how to secure my internet and router?

doeydha1) i need network intrusion sysytem to see what data is going in and out. how do i install which softwares? Let's sat some malicious force has access to my ISP and monitoring my router. i wish to see what data is going in and out at the command line level? Active attacks are being conducted on m...

11:45
@SteveDL I'm not sure that edit helped massively - I'd have cut the bit about a bunch of ways to do active attacks!
@Matthew I just got offended at the tags.
Then I downvoted and closevoted.
@SteveDL I was more offended by the "I'm being attacked, don't ask how I know, but there is data coming into my system when browser isn't open, arrrrrgh" bit
But I also close voted
Oh the whole question is nonsensical yes :D
but then again this is how people who aren't trained understand our field. It's complex enough that I understand why this poor Arch user is confused
I'm kind of impressed that he got Arch running acceptably. I've always found it massively confusing, but I've a Debian and Red Hat background
I have never grasped pacman for installing things. And I don't trust Blinky
I kind of stick to debian derivatives these days having wandered through the whole RedHat/Gentoo/Suse alternatives in the past
11:55
I wish to make my PC is unhackable
at the moment my favourite of that bunch is xubuntu
I'm a former Xub dev running Arch... it isn't exactly confusing, it's more that you need to do a lot more stuff manually, and they change bits of the system more often. I do prefer systemd and the /usr/ organisation of Arch in hindsight, but they way they make you update from one thing to another is disastrous and criminal
they just break your system and blame you for not going to read their website and print out update instructions before your daily package update.
@RоryMcCune here have an Internet cookie.
@Matthew pacman is confusing, yeah. Why on earth would you use words like "install" or "show" when you can use cryptic letters. Then again, apt-get, apt-cache, apt-oh-i-bet-you-forgot-that-one...
@SteveDL que?
Seriously, the whole concept of distros make me die a little bit inside. It's just like they want to make sure that everyone gets at least one thing wrong and all Linux users have to suffer the cognitive overload of dealing with poor choices and differences
@RоryMcCune for using XUbuntu.
@SteveDL I can't count the number of times I've attempted to run apt-get search
12:03
@Matthew this is the kind of situation that infuriates me as someone with an understanding of usability research. You know full one that I meant to search. You know only one apt-* tool accepts search. Why on earth would you dare tell me the command is incorrect!?
I like gdb in that respect. gdb attach, works. gdb att, works. gdb attack, works. It all attaches because it's obvious I made a typo.
apt-get search < maybe you wanted apt-get install search :)
:(
apt-cache search
/me throws a cactus at @M'vy
@M'vy unhackable? sure. Walk over to the plug and switch it off
@SteveDL I run fedora and ubuntu and windows at the moment
@JourneymanGeek I have a hatchet here that says otherwise
12:08
and I don't trust any OS too hipster to have an installer
@Matthew true, cut the cord and encase it in concrete?
@SteveDL ahahah
@JourneymanGeek Yeah, if it's thick enough, that should be fine
@SteveDL distros couldn't really exist in any other OS ;p
Propriatory OSes have SKUs designed for market segmentation
the BSDs had full blown forks
(maybe solaris. But solaris is wierd)
Android has distros, for some insane reason
Android has skins
12:13
My point is **** the distros. So much waste for such little difference. I understand the difference between stable / unstable / rolling but it doesn't need to go any further. I don't give a crap whether you prefer /sbin or /usr/sbin or /usr/lib/name_of_your_stepmom_s_deceased_weasel/sexybin
And phones don't have a standard
@SteveDL I like having options tho
I run fedora on bare metal, and ubuntu on KVM on top of that
What are the dependancies for name_of_your_stepmom_s_deceased_weasel out of interest?
@BarryCarlyon what concerns me is there's a sexybin
@BarryCarlyon first you need to install stepmom, and also stepmom-weasel-compat
@JourneymanGeek hehe
12:15
then you need to wait until weasel's maintainer forgets to update its glibc dep
@SteveDL hmm I don't thin I have stepmom-weasel-compat availble to me…
@SteveDL when was the last time you had to worry about dependancies tho?
then weasel becomes obsolescent
Your package manager handles that
@JourneymanGeek I run Arch and build packages for Ubuntu for a study
12:15
Now... there's your problem
"I run Arch"
you have no idea how much time I waste dealing with (1) silly ubuntu packages and (2) having to rewrite some code because of distro differences and (3) having to rewrite my build chains
I remember attemping to install Gentoo on a 486
I installed gentoo on a c2d
@JourneymanGeek arch is much, MUCH cleaner and close to the standards than debian
Or it might have been a relatively early Pentium
12:16
gave up in disgust when I had to rebuild my kernel for X...
Either way, I gave up after a couple of days of installing
and I'm saying this as someone who used to dev for Xubuntu. No hatred meant, the amount of overhead they have is just ridiculous
@SteveDL designed for and by hipsters ;p
Arch isn't for hipsters... it's for people who hold too high an opinion of themselves :')
2
Now back to grading my students' format string vuln coursework....
I eagerly await the first Linux distro designed by and for hamsters
2
12:20
that would be a little nuts.
@JourneymanGeek Don't be silly. Little Nuts is the squirrel distro
Ah, lucky you are guys that I'm here, there seems to be a nurd overload happening right now.
@Matthew and truck nuts is the texan automobile spin off of that?
@SteveDL Meaning they've learned about string formatting vulnerabilities, or they introduced those because they suck?
@MarkBuffalo they have to write a PoC vuln string exploit for a given function, but for some reason they have to write it on paper. Ugh. I can't read what they're writing.
ewwwwwwwwwwwww @ on paper
13:12
hey paper is a valid medium
i use fountain pens
@Ohnana #Hipster
@RоryMcCune i am not a hipster
having unique hobbies and enjoying nice things does not make you a hipster, it makes you well-rounded
@Ohnana pls what conceivable reason could there be to use a fountain pen apart from hipsterism
fountain pens were replaced for a reason
@RоryMcCune i got sick of constantly dealing with ball-points, fountain pens are easier to write with, i like the colors of ink, and the pens will last me forever
@Ohnana I dont write anymore. Problem solved.
13:16
@SteveDL ;-;
@Ohnana I bet you're right-handed
@RоryMcCune yes, but lefties can write with fountain pens too. you just turn your paper and use quick-dry inks + heavy grain paper
@RоryMcCune Are you part of the evil left-handed?
@Ohnana soo much easier than that nasty inconvenient ballpoint that doesn't require a specific angle of paper, type of ink, and specific class of paper
@Simon #Left-Handed == Best-Handed
o lawd
13:18
Four legged good, two legged better.
@RоryMcCune i mean, i'm not trying to evangelize here
i like thing. you do not like thing. that's okay
@Ohnana enough with your freedom of choice. Back to the fields or we'll banish you like Napoleon.
@SteveDL I'd suggest they're likely too young to get the reference
@Ohnana No, everyone has to like thing that I like.
@RоryMcCune I READ ANIMAL FARM YOU DOLT
13:20
fkin rekt
@Ohnana yeah that's 'cause you're a hipster
@RоryMcCune because I grade MSc students doesn't mean I'm a fossil either :p
@SteveDL but you're older than @Simon or @Ohnana by a decent margin I'll wager
@RоryMcCune lol there you go
Ok, age disclosure time.
I'm 26.
13:21
wtf steve
@SteveDL If you have e, n, (m1m2)^e mod n and m2, you can compute m2^e mod n, and recover m1^e mod n provided that m2 is coprime with n (if m2 is not coprime with n, then congratulations, you have just factored n). You won't obtain m1 because that would mean breaking RSA.
Did you shop for your coffin yet?
@Simon I carved it out of your ancestor's bones when I was 11.
Good <insert time of day here> Everyone
13:22
With my bare teeth
@SteveDL yeah like I said, I mean @Ohnana 's like under 20 and @Simon is 12
4ever12
@RоryMcCune i am 20
ohnuhnuh pls you're 17
@Ohnana oh dear, slippy slope to you're a #Fogey now
13:23
@ThomasPornin thanks that what I needed to know. Agreed on not getting m1, this is a specific exercise where we have an imaginary function that can break some but not all ciphers, thus using multiplicative properties we want to extend the attack onto other ciphers.
@RоryMcCune i want to find your keyboard and stab out the octothorpe key
@ThomasPornin anyway I know what I needed to know :-) Any divergence from reality beyond what you told me is somewhat irrelevant, this is just a thought exercise. Cheers.
@RоryMcCune oh fair enough. My bad. Do we allow minors in here?
@Ohnana OMG you call Hash Octothorpe... could you be any more #Hipster :op
fkin rekt
incoherent screaming
13:24
@SteveDL actually I don't think there's any lower age limit...
2
Q: Did I just get hacked?

vaidOk, so this will sound weird. I am developing a consumer product, and it is supposed to be connected to the internet, so as expected, it is connected to the internet so that I can properly develop it. I went away for an hour or two hours, and when I came back to my office I noticed some strange...

Pretty ow. Also I wonder what this device is so I can avoid it ;p
@RоryMcCune Octohipster ?
@ThomasPornin nice... hey @Ohnana we now have a specific term for you ... you're an #Octohipster
If I were ohnuhnuh, I'd feel bad about myself right now.
13:29
@Ohnana If you ever decide to dump the default gravatar....
i dunno i like it
@Simon You should anyway.
You wanna wrestle silly dog?
hey @JourneymanGeek not sure I'd call strong passwords and/or no root SSH logins "security by obscurity"
they're security by good security
@RoryAlsop not using the root account and a non standard port is tho
13:34
@JourneymanGeek sure non-standard port is, but not allowing root remotely isn't (I'd suggest)
it's just a good idea
(I got hacked before so other than the port, most of these are things I do ;p)
the point of no root ssh isn't (IMHO) to remove a well known account, it's to enforce people not to run as root for full connections. People should run as a low-priv user for login sessions and then su/sudo to root for specific activities
ahh
I suggested that cause typically they try a known list of accounts
yeah it has that effect too, but AFAIK that's not the main drive of it in the case of root
You're a main drive.
13:43
heh. Updated. Doubt the OP's savvy enough for it to make a difference tho
ugh. Its so wierd that 'pure' systems/hardware types are expected to at least know some programming, when coders are clueless of the basics of stuff outside their realm sometimes :(
@JourneymanGeek no, he put a linux box on the Internet with an open SSH port and likely a default or easily guessable password... that does not speak to a high level of security understanding
morning, nerds
@RоryMcCune I don't know... He could have used Telnet...
@RоryMcCune Don't a lot of distros come with this crap preinstalled?
I know back in the day a default Linux distro of say, OpenSUSE, Mandrake, RedHat, etc., would come with default SSH passwords and stuff. You just had to log in and go nuts :/
nowadays you have to set a root password during installation
13:50
@MarkBuffalo you typically set a username and password on most distros
@JourneymanGeek lulz. A hacker who can't purge ~/.bash_history
and root accounts are optional
and it warns you if you pick a dumb one
@MarkBuffalo these are automated and remote
so you have to deliberately try to fuck up
13:51
@Ohnana I'm glad nowadays are different than thenadays.
Most linux installers are reasonably plainless to set up proper security on. Of course you'll need to configure ssh the right way...
Once upon a time, I had to phone up a hosting provider and point out that they had set up a new box with a default password, and it was now controlled by someone else. And that we weren't willing to pay for this...
@Matthew lol. That's sad...
@MarkBuffalo I wouldn't expect a mainstream distro to ship with a default root, but if he's using some embedded/niche thing, it's possible
IIRC last time I looked at raspbian it had a default user/password
That is nasty

« first day (1873 days earlier)      last day (3305 days later) »