The DMZ - 2016-02-19 (page 1 of 3)

« first day (1891 days earlier) ← previous day next day → last day (3287 days later) »

David Freitag

00:05

Oh. Your. God.

@Simon @Ohnana I may have discovered the answer to life, everything, and the universe. Oh, and it isn't 42. It's cheesy sriracha sauce.

it also makes a huhuge fucking mess when put in a burrito.

Simon

@ThomasPornin Did you really just link a music video?

@DavidFreitag Cheesy? pls r u sure?!?

David Freitag

@Simon ( ͜ಠ ᴥ ͜ಠ )

Simon

00:20

@DavidFreitag dovid pls I found the meaning of life: play.google.com/music/m/…

The first track by The Glitch Mob.

David Freitag

@Simon meh

Simon

PLS DOVID

David Freitag

Glitch Mob is very mood-specific music

@Simon At least it's better than the original

Simon

I agree.

Rory Alsop

00:54

user image

tried to find out

was disappoint

yay - got me another constable badge :-)

that's a full set for me ;-p

Journeyman Geek

nice ;p

David Freitag

jalopnik.com/…

Ohnana

01:25

@DavidFreitag ...that sounds incredibly unappealing

@ThomasPornin best song ever

@RoryAlsop THIS WHOLE ALBUM IS SO GOOD. Pls.

David Freitag

@Ohnana It was disgustingly delicious

2 hours later…

deed02392

03:39

@Simon Breakfast's mix of derrezzed is my favourite

3 hours later…

deed02392

07:00

security.stackexchange.com/questions/115121/… so tempted to ask if their partner is being faithful

Rory Alsop

07:20

Thanks for pointing out that one @deed02392

deed02392

07:38

no dramaz

Arperum

08:09

Morning!

M'vy

08:21

@RoryAlsop remixes ? why? the originals are awesome already

well well well. That phone is marked "in repair". Hope they can do that quickly

Lighty

0

Q: How to create a application for ddos mitigation if website is not wordpress based?

I want to create a web application that should prevent ddos attacks . Is it possible using php or python ?

php ddos denial-of-service python

It's time for weekend

kalina

I just thought you should know how incredible I am in bed

5

I could stay here literally all da y

M'vy

I vote to promote double-entendre again.

kalina

I thought that was an assumed tag

M'vy

yeah, well. I like it.

kalina

08:34

do you know what I like? Bed.

M'vy

can't disagree on that

however I have none available now. I'll settle for some coffee then.

well now I have 241 Internet Points on crypto.se

Matthew

Morning

kalina

@M'vy crypto expert

Rory Alsop

08:50

Morning

Matthew

@M'vy I think you're onto a losing battle with the question @Lighty linked!

kalina

mmm sleeps

Rory Alsop

@kalina it was assumed :-)

M'vy

@Matthew I did my job to be kind to the newbie. Now off with it and VtC :)

@kalina ahah. Incidentally you should have some too now :)

Rory Alsop

09:05

@M'vy - you were too nice:-)

I think the OP has a fundamental problem in understanding :-)

TildalWave

bah, ninja'd

Have you considered anti-DDoS services or CDNs like CloudFlare? I don't want to sound disrespectful, but based on your question and reply you don't seem to be up to the very difficult task at hand. We'd be talking of mitigation techniques that go beyond the capability of typical hosted web applications, WAFs, distributed and/or load-balanced setups and alike. It has fairly little to do with your selection of server-side scripting language, or indeed web application itself, and not doing this right only makes it more likely that your service will end up being an even easier target. — TildalWave 44 secs ago

kalina

@RoryAlsop ARE YOU HITTING ON ME

TildalWave

took too long to write LOL

M'vy

@RoryAlsop yeah. I guess I'm in a good mood today

kalina

@TildalWave tl;dr

M'vy

09:07

@TildalWave 40 characters left?

kalina

@M'vy you guess?

Matthew

@kalina "Don't do that, you're a moron"

TildalWave

@M'vy 13

M'vy

@Matthew Ahah. I want that close reason: user is a moron

Rory Alsop

@kalina nah - opsec too hard

TildalWave

09:08

I've seen shorter answers

kalina

@Matthew I got as far as "I don't want to sound disrespectful" and concluded that everything that followed would be the filthiest least humane method of murdering somebody over the internet

M'vy

@kalina figure of speech

Matthew

@TildalWave I've written shorter answers

TildalWave

@Matthew actually I also have one here that's shorter, I forgot about that one... it was hard cc @kalina

kalina

don't make me read it or I'll be disappointed

you guys, constantly talking about your lengths

Rory Alsop

09:09

And how hard it is

1 min ago, by Rory Alsop

@kalina nah - opsec too hard

TildalWave

sorry for all the pings @Matthew

and good morning to all

Matthew

@TildalWave No problem. It makes me feel wanted!

kalina

helos

Matthew

I just read the star wall. Oh dear

TildalWave

oww :) day started good, now if only someone would fetch me an apricot ice cream

kalina

09:12

pls apricot ice cream

TildalWave

and it's Friday!!

kalina

and I'm not working this weekend

Matthew

security.stackexchange.com/questions/115131/…

I'm almost tempted to suggest it belongs on Worldbuilding.se...

Rоry McCune

mornin' all

kalina

it's not about infosec it's about pr

ain't nobody got time for pr

@RоryMcCune o/

Rоry McCune

09:15

@kalina \o

kalina

@RоryMcCune o//

Rоry McCune

@kalina eek aliens!

kalina

pitiful humans

Matthew

@RоryMcCune Cheerleader!

Rоry McCune

@Matthew alien cheerleaders!

Rory Alsop

09:17

@Matthew - I agree with you. We cannot post that much here. World building can speculate.

Matthew

Rory Alsop

Wit? How does that even exist?

Will see if it gets any more close votes

Matthew

There were multiple hits on "alien cheerleader" in Google images. I'm kind of glad I'm not on corporate network though... I don't advise doing that search

Journeyman Geek

o0

M'vy

@RoryAlsop talking of being too nice : chat.stackexchange.com/rooms/35959/…

Rory Alsop

09:21

@Matthew - lol. People are weird. (Am on corporate network today so can't check, but am imagining)

@M'vy - think I should have just shut down the chat at the start with "Too broad. Bye" ?

M'vy

@RoryAlsop no no. I just see I'm not the only one :)

Rory Alsop

@M'vy - how's this:

It is the answer. Closing as dupe. — Rory Alsop ♦ 34 secs ago

TildalWave

that is the point exactly, i only want to block application load attacks any sugesstions on that one — Chintan_sec 6 mins ago

I don't think he gets it

you don't block ... what he said ... where he said it

there, I was concise :))

M'vy

:)

TildalWave

@RoryAlsop hahaha cute

I think I voted as unclear

kalina

09:28

GUYZ I HAVE A QUESTION AND YOU ALREADY HAS A QUESTION THAT I'M ASKING BUT I DON'T THINK THAT IS THE ANSWER

3

o closed already

TildalWave

now explain why you don't think it's an answer, and we might reopen :P

Matthew

@kalina Open more questions asking the same!

kalina

because I don't understand the subject I'm asking about

Matthew

Ideally about SHA-512...

kalina

and I need the answer describing in super simple englishes

Rory Alsop

09:31

@kalina and I think they just want the kaodz

kalina

the kaodz?

THE CODEZ

OH

that makes sense

M'vy

le kaodz

kalina

I had to say that out loud for it to make sense

-.-

Rory Alsop

This is why 1337 haxx0rz always mumble to themselves

Even the French ones, obviously :-)

Le kaodz :-P

Matthew

Actually, thinking about an answer wrote earlier, is there any particular reason why malware authors haven't just nicked the truecrypt encryption routines and gone down the FDE route? Difficulty in reliably being able to boot the system to a sufficient point to enter decryption code?

TildalWave

09:40

@Matthew because you want them to be able to pay the ransom and most nitwits will want to do that with the very system that's been hacked?

Rory Alsop

Maybe concern that back doors exist?

Matthew

I suppose you could create a recovery OS based on damn small linux or something like that - web browser, basic network support...

StackExchange

Platonic solids for my real friends and real solids for my platonic friends!

TildalWave

09:58

regular size for my real friends and real size for my regular friends... wot?

Matthew

Coke Zero for my friends and Coke for zero friends?

Rory Alsop

Real tennis for my lovely friends. Love all for my real friends...

TildalWave

@Matthew coke light for my real friends and real coke for my light friends :)

Matthew

Ginger beer for my bottled friends, and bottled beer for my ginger friends

Rory Alsop

Bottled friends :-)

Matthew

10:04

@RoryAlsop I know people who live in Glasgow :-P

Rory Alsop

10:23

They could be ginger and bottled, and bottled by a bottle of ginger! #scottishjokesbestjokes

kalina

so much silly in here and I'm not even taking part

Matthew

Oh dear... businessinsider.com/…

TildalWave

3

A: Respondin to a coordinated attack against financial transaction systems

This is one of the scenarios countries practice, with joined up activity between government, financial services, telcos, utilities etc. These simulations happen reasonably frequently. Read up on Waking Shark 1 and 2 for some of the UK's simulations and for the information on it that has been mad...

in deep voice: Learn more in season two of Mr. Robot. On your network, soon!

kalina

I'm massively disappointed that you answered but didn't edit that title

Matthew

0

Q: Responding to a coordinated attack against financial transaction systems

Imagine a coordinated attack by a large and motivated hacking group, that results in a nation-level compromise of the financial systems we take for granted: credit card payments, accounts at the top banks, the ACH system etc. What remediation strategies could be employed after the public outcry,...

attacks incident-response trust financial

kalina

10:34

I'm massive' disappoint' that 'u answer' that quest' but didn' edit tha' title

@Matthew It's still not a question!

M'vy

damn I should have taken a day off.

kalina

How should I respond to a hypothetical attack against financial transaction systems?

Matthew

@kalina We have lots of non-questions on the site already - would be here for ages if I tried to fix them all...

kalina

How should I deal with the public relations disaster that would arise after an attack against financial transactions systems resulting in a full outage?

@Matthew yes, that's an excuse not to do it

Don't worry guys, we don't need to put any thought into this because "that's the way it's always been done"

There's no point patching this server because there are so many other servers that need patching

There's no point in being nice because there are so many other people who aren't nice

There's no point in trying because nobody else tries

M'vy

so true;

Journeyman Geek

10:38

@TildalWave Mr. Robot is one of the least cringeworthy depictions of hackings I've seen ;p

kalina

There's no point because nobody else points

Rоry McCune

@kalina point pls

AviD

Mr. Robot Parody

Journeyman Geek

Computers are inherently insecure, We should go back to writing chits in blood.

M'vy

@kalina shouldn't that be "there's no point pointing" ?

@JourneymanGeek pen & paper

Journeyman Geek

10:39

@M'vy blood.

AviD

youre right though ,that is about what most "hackers" do...

Journeyman Geek

Then we can verify using DNA

Matthew

I'm not convinced that the titles need to be questions in all cases. Doesn't always help, or leads to people answering the title, rather than the body of the question

M'vy

@JourneymanGeek some fountain pen would accept blood as ink

kalina

@M'vy because point point point

@JourneymanGeek DNA based authentication is my preferred method

M'vy

10:40

@kalina I'm not sure it's my point

kalina

@Matthew if the title is not a summary of the body of the question then that in itself is a problem

and since you're not meant to ask multiple questions per question...

your point is invalid

DENIED

Journeyman Geek

@M'vy when I ask a question I try to have enough in the title for someone to decide if they want to read the rest of it ;p

kalina

title: THIS QUESTION IS THE BEST QUESTION EVER - FREE CAKES FOR CLICKS

body: Help I cannot computer and I need help with this problem. Thanks in advance!

Journeyman Geek

-1

Q: Any secure backdoor for Windows 8?

I want to install a backdoor to my laptop with Windows 8 so that I can access it and stay hidden, just in case if someone will steal it. Most of remote access tools are not hidden and it is obvious if they are being used. Most of "hacker's" backdoors seems to be insecure and don't even require a ...

windows-8 security remote-control

M'vy

@JourneymanGeek indeed

kalina

10:44

@JourneymanGeek pls everybody knows the answer to this

"If somebody else has physical access to your computer, it's no longer your computer"

M'vy

:)

Matthew

Well, the only thing I didn't mention, that computer is often stolen by people living with me. — Arqwer 2 hours ago

Get new housemates!

M'vy

bear traps

oh boy these questions...

Journeyman Geek

Sounds more like borrowing without permission to me

Matthew

@JourneymanGeek TWOC

Journeyman Geek

10:55

O?

Matthew

Taking WithOut Consent. Don't know why the O is there... It just is...

Oh, ok. Taking Without Owner's Consent

kalina

look at me answering questions on super user

might as well go buy me some glasses and apply blotches all over my skin with makeup

Matthew

@kalina Just rub bacon on your face. Saves on the repeated cost of makeup

kalina

ew

there aren't many things in the world I'd want to do less than rub fatty greasy bacon all over my face

Matthew

@kalina Someone probably thinks it's a beauty treatment, somewhere...

Wow - the trust question got asked on WB

1

Q: How would society recover from the collapse of digital trust?

Imagine a coordinated attack by a large and motivated hacking group, that results in a nation-level compromise of the financial systems we take for granted: credit card payments, accounts at the top banks, the ACH system etc. Funds become frozen, and so do individuals and corporations, financial...

society security

kalina

11:10

that's an incredible title

much better

Gilles

11:24

@Matthew indeed, it's quite the opposite, questions often make bad titles

the title is a title for the thread, not just for the question

there's a post with good advice on the main meta

204

A: How do I write a good title?

1. Make the topic stand out. The purpose of a title is to attract people interested in your topic or who can give you an answer. People scan web pages quickly. Make it easy for them to notice your question. Some people read via the RSS feed (Stack Overflow example), so they don't see tags. 2. K...

Matthew

@RoryAlsop I went for the "nation level" bit and ran with it...

Rory Alsop

11:41

@Matthew I like it :-)

TildalWave

@RoryAlsop wanna nuke this joker? security.stackexchange.com/a/115147/20074

Matthew

@RoryAlsop Seemed like it would be a viable approach

M'vy

free flag \o/

Matthew

@M'vy That's a very funny shaped flag. I would have thought ⚑ was better...

M'vy

I was hurray-ing

kalina

11:48

@M'vy poser

Matthew

Hurray octopus: 🐙

kalina

literally one step away from <o>

<o/

\o>

M'vy

:)

TildalWave

12:01

-1

Q: Request to post sample token authentication program in sping security ??

Please help me to create the spring token based authentication on urgent requirement ?? Thanq.

authentication token

M'vy

already VtC-ed

TildalWave

the saddest part is that searching the web for "spring token based authentication" lands you on Stack Overflow with a nearly complete example

M'vy

close reason: lmgtfy

Matthew

close reason: user doesn't want to pay for a developer

TildalWave

close reason: we'd prefer someone competent holding your job position

Matthew

12:10

close reason: username is all obscure unicode characters

M'vy

I hope I get my phone back next week. Can't get my podcast, that's boring

Lighty

hmpf, I need an test acount for facebook for some general use-case testing, but the fckers want an phone number, cant skip, anyone here know of a different way?

Journeyman Geek

they do?

Simon

IT'S THE MOST

WONDERFUL TIME

Journeyman Geek

I have a friendface account sand phone number

Simon

12:21

OF THE WEEEEEEEK

LIGHTY SUX BOLLS AND I WON'T SEE HIM UNTIL MONDAAAAAYYYY

IT'S THE MOST

WONDERFUL TIME

OF THE WEEEEEEEEEEEEEEEEEEEEEK!!!!!

Lighty

I love you too @Simon

Matthew

@Lighty Test the use case of someone who doesn't want to enter their phone number in a Facebook page

Lighty

@Matthew no, to make an test account with facebook, I have to supply a valid phone number and validate it through SMS

that kinda BS xd

Simon

And you don't have a cellphone?

Lighty

@Simon Personal and Work need to be seperated

Matthew

12:25

@Lighty Put in business case for a work mobile

Ideally a really fancy one

Simon

@Lighty Ask anyone who has a work cellphone to give you the code?

Lighty

@Matthew you mean, get a general buisness mobie?

Matthew

And precedent for it to be replaced every six months, with the old one given to the user

Lighty

@Simon we, uh, dont have those

Simon

WTF

Lighty

12:26

shrugs

Simon

@Lighty tempophone.com

Matthew

@Lighty You say that, I say persuade work to give you a new phone every few months and permission to sell the old ones on ebay. Either works!

Lighty

@Simon eh, no

I think I have an idea

Simon

-.-

Lighty

old shitty android phone, and a €2 prepaid sim

Simon

12:28

IT'S A TEST ACCOUNT WHAT DO YOU CARE IF SOMEONE RECOVERS IT THROUGH THE NUMBER (IF THAT'S POSSIBLE) OR WHATEVS

Lighty

because info will be stored on there too, on the test accounts

Simon

-.-.-.-.-.-.-.-.-.-

Are you using the isolated test Facebook page or you're making a real account?

Journeyman Geek

@Lighty sounds like a perfect case for getting a burner phone actually

Lighty

@JourneymanGeek A burner phone for test accounts that will prolly be regulary used as standard testing stuff if it works? or do you have other suggestions?

Journeyman Geek

@Lighty yup, pretty much that

Lighty

12:32

@JourneymanGeek hm, thanks for the info, this'll help me x3

Journeyman Geek

and if you need to dump the number you don't need a new phone

M'vy

13:04

Anyone knows about zscaler?

Rоry McCune

it's one better than yscaler?

M'vy

it's a proxy-cloud related service I think.

since they put that in effect, we get so much latency on webpages load...

or maybe they just underscale the new internal proxy

Not sure where zscaler actually hooks into architectures. Maybe once for the PAC file, then when request are made to proxy

Rоry McCune

yeah unfortunately past the name I know nothing :(

M'vy

anyway. Glad I'm working on R&D and not IT here...

Caused I'd be ashame

JukEboX

Morning everyone

M'vy

13:15

Afternoon @JukEboX

M'vy

13:42

Afternoo too @Ohnana / @Xander (don't think I did not noticed you sneaking in)

Ohnana

:)

Xander

@M'vy Howdy!

M'vy

Howdy ho

Buying a dozen iPhones to test any physical extraction method would be a lot cheaper than everything about this affair, so one has to assume that the question is no longer about the San Bernardino case. — Thomas Pornin 20 hours ago

^ you bet

inevitably as a user you are easily outmatch

0

Q: Help with IP-adress trollers

Can someone please find whos IP adress this belongs to? "195.159.99.238" The person have been harassing me for weeks.

^^^^^^

Helpp I'm being bullied by an IP address

Rоry McCune

14:07

@M'vy webcache.googleusercontent.com/…

probably

well possibly

well perhaps

that doc. has a name and e-mail associated with that ip address

and the block belongs to some oil and gas co. in norway

M'vy

hmmm...

I don't get what the user complains about

Rоry McCune

@M'vy harrassing!

Matthew

Is user101867 really Greenpeace?

Rоry McCune

I have no idea what they mean

M'vy

just ban the IP

Rоry McCune

14:09

@M'vy my guess would be something like comments on a blog/forum from that IP address

M'vy

oh

1 min ago, by M'vy

just ban the IP

Rоry McCune

but the question is so vague that it could be anything really

M'vy

or maybe he should ask to

1 min ago, by M'vy

just ban the IP

Matthew

@RоryMcCune My vote is for a person dressed in a costume which forms that number chasing them around

Rоry McCune

@Matthew that would be a far more amusing option!

M'vy

14:10

@Matthew that'd be funny

Like Remi Gaillard as pacman chasing ghosts in supermarkets :)

Matthew

@M'vy Who is Remi Gaillard?

M'vy

@Matthew French guy, ex-soccer player,doing video on youtube. Usually stupid, like driving a kart in town dressed as Mario and throwing bananas on the road.

Matthew

@M'vy We had a discussion about a tech day out which suggested paint ball or kart racing. Then we realised that we should combine the two, but we couldn't find anywhere daft enough to offer that...

M'vy

I personally like the one where he made a automatic speed radar box out of carton boxes and went standing next to road to flash drivers :)

paint-kart :) I like it

Matthew

14:26

I did see a video of a bunch of people who made a real life Mario cart track using proximity sensors and wired carts to emulate the effects of bananas and oil slicks and so on

Xander

14:38

KANGAROO (REMI GAILLARD)

3

M'vy

:)))))))))))))))))))))

Lighty

@Xander Remi Gaillard, +1 star, always

M'vy

@Lighty yeah, what could go wrong

JukEboX

14:59

I do enjoy the ones when he plays soccer

« first day (1891 days earlier) ← previous day next day → last day (3287 days later) »

Transcript for

Feb '1619

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2025 Stack Exchange Inc; legal

mobile