The DMZ

Simon

00:01

@TildalWave Also the user, please.

TildalWave

that's what I meant yes

it's probably a hacked account but whatever, there's not that much rep associated with it

Mark Buffalo

@TildalWave WTF

Reported to tips.fbi.gov

TildalWave

somehow I doubt this has much to do with FBI's jurisdiction

Mark Buffalo

I don't care. Still reported it

Anyone who even jokes about disgusting shit like that needs to be burninated off the planet

TildalWave

sure, can't hurt to report it

Mark Buffalo

00:17

The FBI does a lot of good work internationally with other authorities

TildalWave

true

mostly mopping up after the mess of other TLAs tho

there's a slight chance that if this is not a case of trolling / hacked account that it's related tho, you'd be surprised what all is confiscated at the borders now with the "immigrant crisis", and how many "goods" some tried to smuggle in to fund other illegal activities, including of ISIS

I was just watching a report on that a few hours ago

one tried to smuggle in a bag full of stolen thousand or more years old statues

there's pillaging going on there big time

Mark Buffalo

that really pisses me off

that post

TildalWave

yup

Your welcome my friend. To Victory! Life or Death! — LuckyAli 16 mins ago

David Freitag

00:37

How NOT to Cook a Can of Vienna Sausages

►

Ohnana

00:48

@TildalWave i really want to VTC as "user should die"

TildalWave

@Ohnana isn't that what custom close reasons are there for? Anyway, it's too late, it's been nuked

hahaha

8 hours ago, by Rory Alsop

@kalina sneakily plans modification to make mine turn purple

why isn't this pinned? this is gold

I mean, purple LOL

David Freitag

01:09

@TildalWave IIRC it was pinned

Henry WH Hack

03:49

All by myself

Mark Buffalo

04:01

wtf

it's 11 pm

Henry WH Hack

@MarkBuffalo bored!

Journeyman Geek

Take a walk, play a game, pet a dog, write the great american novel (especially if you arn't american)....

Henry WH Hack

@JourneymanGeek I am not american

Journeyman Geek

Bake a cake, tune a fish...

@HenryWHHack excellent!

Henry WH Hack

@JourneymanGeek learn programming that's good!

Journeyman Geek

04:07

good go do it.

Henry WH Hack

@JourneymanGeek I am already doing it.

Bob Ebert

05:07

hello

Henry WH Hack

yes

Bob Ebert

I was reading about the backdoor installed in vsftpd version 2.3.4 and how they managed to exploit it. After triggering the exploit with a username+:), they were able to connect to the service with netcat on the specific port.

Henry WH Hack

what is the question

Bob Ebert

Thing is, I do not understand why (in the book I am reading: kali linux network scanning cookbook) they use python to setup a python listener

root@KaliLinux:~# ./httprecv.py
Received connection from : 172.16.36.135
GET / HTTP/1.0
User-Agent: Wget/1.10.2
Accept: */*
Host: 172.16.36.224:8000
Connection: Keep-Alive

This is supposed to be our "answer to the exploit" or something similar

Henry WH Hack

I can't help you

because I don't know the answer!

Bob Ebert

05:13

they tried connecting to the remote ftp service with netcat, but it was rejected O.o

Thats the interesting part

like so: --04:18:19-- http://172.16.36.224:8000/
(try: 2) => `index.html'
Connecting to 172.16.36.224:8000... failed: Connection refused.

Bob Ebert

05:38

I think I will post a question on the forum about this.

Henry WH Hack

@BobEbert yeah

it is a q&a

Mark Buffalo

06:07

4

Q: How can I objectively evaluate trust in a person? (Systems Admin, or other)

When recruiting for positions that require a level of integrity and trust, I'm looking for objective ways of accessing that, either positively or negatively. Is there any any guidance one should use for accessing an individual's propensity for theft, or other unsavory acts w.r.t. Information Sec...

Henry WH Hack

how do you post images here html?

0xc0000142

Matt Clendenen

Is it possible to make infosec a career without a college degree? Say if I got my A+ and became a helpless. Then my Network+ CCNA and became a network admin. Then Security+ CISP to become protester. Does this career path sound possible?

Help desk*

Pentester*

Mark Buffalo

Yes, I have no degree.. well, I didn't finish it. And I'm a pentration tester / tinfoil hattist at my company

Matt Clendenen

Lol @ tinfoil

Mark Buffalo

CISP, CEH, PWK... I recommend these three. It's a bit overkill, but you'll raise some eyebrows.

Matt Clendenen

06:20

What position did you start as in IT or just straight into infosec

Mark Buffalo

I actually practiced on myself for a long time

Like 18 years or so

Matt Clendenen

Wowza

Henry WH Hack

wait you get to hack people legally what it is like to be a white hat hacker?

Mark Buffalo

I started out fixing computers

and breaking security for fun... always finding a way around something.

fixing computers / making websites

that was when I was a kid though

I strongly recommend getting a degree, though

Degrees help you with soft skills, such as social skills, writing, not being socially retarded, etc

Matt Clendenen

OK cool I'm taking my A+ next month to get a helpdesk job and start the path. I've been coding for like 2 years. Made a website I'm getting in to infosec now and I figure I'll keep document ation of my learning on a blog and github

Henry WH Hack

06:24

@MarkBuffalo are you a pro what age did you started

Mark Buffalo

It's good to be able to explain concepts to others. It's good to be able to give presentations, etc. If you already have that down, great... but you're more marketable with a degree.

A+ isn't gonna help much with an infosec job

You'll want to learn as much as you can

Put your tinfoil hat on, question everything... but don't let it consume you.

twitches

THE VOICES ARE TELLING ME TO GO TO BED

Matt Clendenen

@MarkBuffalo I get that but it will help me land a helodesk job and then continue from there

Mark Buffalo

Yep, for sure.

Matt Clendenen

Cool beans see ya later thanks

Bob Ebert

Thats interesting

Henry WH Hack

06:26

very interesting

Mark Buffalo

@BobEbert The voices in my head are interesting?

Henry WH Hack

what is the salary

Mark Buffalo

@MattClendenen Wait a sec. Let me find a video

Rory Alsop: Starting your Security Career - Where can you go?

►

Matt Clendenen

Alrighty

Mark Buffalo

advancedpersistenttraining.com

Matt Clendenen

06:28

Awesome wow I've seen Rory on the site before haha

Bob Ebert

120k in the US?

Thats what I heard

Mark Buffalo

@BobEbert Who are you talking to? Henry HW Hack? He's a troll/bot. Don't waste your time

Henry WH Hack

I am real

Bob Ebert

Wait, there is a bot in here?

Mark Buffalo

Yeah it's Henry HW Hack.

Henry WH Hack

06:29

I can prove it

Bob Ebert

hahahhaha I talked to him for like 30 min yesterday O.o

He was glad that he wasn't banned anymore

Mark Buffalo

Yeah... I caught rabies from him

Matt Clendenen

That's a pretty neat bot to pick up on the context or he has a predefined set of things to say in response to certain keywords like career

Mark Buffalo

-3

Q: Nuts And Mind Functions

Cogni Focus Go-to the gym, drive, work, or walk a cycle. No real matter what you need to do, exercise. Reports show that this raise lasts for some hours and that exercise helps Brain Booster. http://no2factoronline.com/cogni-focus/

tls

VTC

Downvote it! Flag for a moderator

Bob Ebert

I'm not sure about that though

Henry WH Hack

06:30

what is a bot hope it is not abotnet

Bob Ebert

Got it @MarkBuffalo

Mark Buffalo

Thanks homie

Bob Ebert

Do you still have a minute or you are heading to bed?

Mark Buffalo

I do

Henry WH Hack

please I am not a botnet

Mark Buffalo

06:32

@MattClendenen Yes, @RoryAlsop is amazing. He remembers the names of all the forgotten programming languages. He's even old enough to remember the names of all the forgotten false gods of old. He's old as hell, man.

Bob Ebert

Learning wise, I learned networking, protocols and computer in general

Mark Buffalo

Yeah, the more you know, the better

Bob Ebert

read a bunch of books about it and made scripts to emplement what I learned

Matt Clendenen

Flagged

Can't downvote yet

Henry WH Hack

@MattClendenen why

Bob Ebert

06:33

I was thinking about heading to learn pretty much all the web based languages

you need points to up/down vote

Matt Clendenen

Yup i'll get there

Bob Ebert

Would you think that the next step to learn security would be to learn the web languages, then make websites/databases and finally learn web sec?

Mark Buffalo

Sweet, the post is gone

@BobEbert Do what you like. There's a million different ways

Bob Ebert

But I am looking for something efficient

Mark Buffalo

My way is staggered, undisciplined

so don't ask me

I simply learned everything I could for years on end

in every aspect

Bob Ebert

06:35

I remember I thought hacking was about learning how to hack

Matt Clendenen

@MarkBuffalo thanks for the info see y'all later @BobEbert

Bob Ebert

then I learned that it's learning how it works and how to deface it :P

Cya @MattClendenen

Mark Buffalo

Yeah, learn how everything works

Then BREAK it

Learn how to secure it

THEN BREAK IT. CRUSH YOUR ENEMIES AND DEVOUR THEIR SOULS

Bob Ebert

I find so little information on real companies networking design and how they are setup

Mark Buffalo

Henry WH Hack

06:37

the first thing I learned was the firewall!

Bob Ebert

The network examples in books are often too simple compared to irl

Mark Buffalo

you gotta start somewhere

Bob Ebert

Do you use metasploit/nessus often at work?

Mark Buffalo

You can't become an international man of hacking mystery overnight. It takes careful planning, opsec, gentle caressing of your brainial region. Learning the intricates of the Foil. The Dark Side of the Foil is a passageway to abilities some may consider... unnatural.

Henry WH Hack

script kids or expert first?

Bob Ebert

06:42

Why aren't you guys kicking him lol

Henry WH Hack

@BobEbert I am not a bot!!!!

Bob Ebert

What was the topic we talked about yesterday?

Henry WH Hack

nmap

-A -V -sV

Bob Ebert

Yes, that is true lol -A (noisy version detection) -V nmap's version and -sV (version detection)

tylerl

07:09

sup

Henry WH Hack

sup

tylerl

Hows my homies?

looks like yall are still asleep

Asked Google what time it was at @Simon's house:

2

So much win.

TildalWave

hahaha cute

morning

Henry WH Hack

07:27

morning everyone

Colin Cassidy

08:04

Morning

Lighty

Morning

M'vy

Howdy

AviD

08:26

hey @Simon, you know the rules - no mocking me unless I am here to be insulted. Also, it seems that @Xander and @Mark are negotiating for my services? I got a job and lost a job all while I wasnt even here. Don't I get a say?

Journeyman Geek

@AviD No, you don't?

Lighty

08:37

I just read the news on the US of A thing with the votes and stuff bout Trump 'n such

GG WP

Why are there so much pictures of bears on the star wall

Arperum

Morning

@AviD So are you going to keep yourself to those same rules? No mocking @Simon unless he's here to take it?

AviD

@Arperum I will keep to those same rules, yes.

I will not mock myself unless I am here to take it.

However, this rule does not apply to mocking @Simon.

Arperum

@AviD Dammit you.

M'vy

:)

AviD

@Arperum lol

M'vy

08:47

oh I've reached the 7k mark

3 to go

Lighty

@M'vy claps

Rоry McCune

mornin' all

Lighty

Morning Rory 1

Matthew

morning

TildalWave

@AviD of course you get a say darling (puts on headphones and goes to 11)

is OWASP back up yet?

yay!

Rоry McCune

08:59

@TildalWave owasp was down?

TildalWave

@RоryMcCune yeah I was getting server error about an hour ago, seems fine now tho

Bob Ebert

09:20

@RоryMcCune Hey thats funny to see you here because I'm currently watching one of your talks!

Rоry McCune

@BobEbert heh, yeah I guess I've got a couple of them up on Youtube by now as most conferences tend to record their talks

TildalWave

@RоryMcCune speaking of which, are those securitay talks already uploaded anywhere?

Rоry McCune

@TildalWave I'm not really holding my breath on that one as last year's never actually got uploaded as far as I can see ...

they did record them though so hopefully it'll happen this time

TildalWave

yeah would be noice

because I'm a poor guy from a poor family, will you let me watch, will you let me watch...?

Matthew

0

Q: CSR with only public key with openssl

So I have been doing my research and haven't found anything specific enough to my problem. As the question title states, I want to make a CSR with only the public key. What I have been able to do is generate a CSR with the information of my choosing along with a new keypair. And then use somethi...

certificates public-key-infrastructure openssl rsa

I've read the penultimate sentence of that several times, and I still don't understand what they're trying to say...

M'vy

09:32

I Think he does not really understand what's going on

Matthew

@M'vy That's good. I was worried I wasn't understanding what was going on

TildalWave

...will you let me watch for free, for free, for freeeeeeeee ....

Rоry McCune

@TildalWave BTW I take it you know about Irongeeks video list?

Lighty

0

Q: Bluetooth Device Owner Security

I want to learn that, when my bluetooth is on, which data about me and my device provided by my bluetooth device to unpaired devices?

bluetooth

I dont engrish very good

Matthew

@Lighty I suggest VTC duplicate of security.stackexchange.com/questions/26356/…

TildalWave

09:34

@RоryMcCune yeah I've seen those

Rоry McCune

@TildalWave he does quite a few confs, and is always good at getting them on youtube

Matthew

0

Q: How does a company like CloudFlare block bot crawling and email harvesters?

I saw this on CloudFlares homepage: CloudFlare protects against a range of threats: cross site scripting, SQL injection, comment spam, excessive bot crawling, email harvesters, and more. How could a company like CloudFlare block crawler bots and email harvester? I asume they are smart enoug...

email bot

kalina

engels i ne ... sais pas wat

rubs eyes

why is it daytime already

TildalWave

@RоryMcCune yeah there's some new uploads from BSides youtube.com/user/irongeek/videos

Lighty

@kalina Goodmorning sunshine

Rоry McCune

09:37

@kalina I'll let one of the Space.SE types explain that one :op

kalina

eugh

TildalWave

was that a sip of yesterday's coffee?

M'vy

@kalina bonjour :)

Lighty

We're going for other languages now?

Goedemorgen

kalina

hoi

Matthew

09:41

Interesting article: randywestergren.com/…

Lighty

Hoe gaat het met U op deze prachtige morgen?

kalina

no plz this is an english speaking language place room on the interwebnets

Rоry McCune

@Matthew yeah tempted to start adding that to browsing to see what happens

kalina

and it's not beautiful, it's cold

Rоry McCune

all client-side so no concerns with server admins being funny about it

Lighty

09:43

Can you actually read that? or do you do the translate

kalina

I'm not answering that question

I'm going now

Rоry McCune

@kalina already

that was quick

M'vy

@Lighty nice try

but you have to do better

Lighty

Whats wrong with asking someone if they can read or speak a foreign language? xd

TildalWave

oh bugger @M'vy you ninja'ed me

M'vy

09:45

@Lighty you're not asking 'someone', you're asking @kalina.

TildalWave

I was just writing an answer to that question LOL

M'vy

@TildalWave hehe :)

@TildalWave feel free to add/improve/compete

TildalWave

OK I'll just procrastinate then :P

M'vy

@TildalWave I need to try to get 10k someday you know

TildalWave

neah I just upboated that's enough

@M'vy want me to torture OP to accept?

M'vy

09:47

@TildalWave nope. I'm good :)

TildalWave

shame :(

Lighty

@M'vy Still don't see the problem D:

M'vy

@Lighty you need to get used to this chat room and the specificity of their inhabitants I guess :)

Lighty

@M'vy Not even @AviD got used to this room

But I got the point I guess

kalina

@RоryMcCune that's what she said

@Lighty there is nothing wrong, just like there's nothing wrong with refusing to answer

well this is interesting

M'vy

10:01

what is?

Rоry McCune

@kalina alien landing? Gate to Valhalla opening in your kitchen? siren call of the outer gods audible in your bathroom?

kalina

as quickly as caffeine is waking me up, chat being inactive is sending me to sleep

how did I used to survive without caffeine

M'vy

Well, caffeine is not a requirement for me I guess. Tea goes as well

Rоry McCune

I've been cutting down on the caffeine

I cut it out a couple of weeks back and got a 3 day headache

which made me realise that less was a good idea

so now it's two cups a day, max

kalina

that's why you shouldn't quit

two cups a day!?

Rоry McCune

10:07

@kalina well before I was on like 5-6

so now I'm down to 2

kalina

I'm about to pour my second...

Rоry McCune

which should avoid the headache thing

M'vy

I cut down on coffee to. Arterial tension was too high

kalina

asleep > drink coffee

headache > smoke weed

Arperum

is happy to mostly drink water

Rоry McCune

10:08

@kalina that is the other option take different drugs to mitigate the side-effects of the first ones

@Arperum yeah straight water gets a bit bland after a while

kalina

@RоryMcCune why not, that's how the rest of society does it

M'vy

Water?? the thing you put into pastis?

Rоry McCune

fruit teas are replacing coffee's for me

kalina

tbh I don't get headaches off coffee

Rоry McCune

@kalina have you tried stopping?

kalina

10:10

but then, since going largely vegetarian/vegan with occasional bacon I noticed a whole load of things got... better

I'm also pretty much over bacon as well

Arperum

@RоryMcCune I don't mind the taste, I drink to not be super thirsty. If I drink sugared stuff in the same amounts I drink water I'd be constantly sugar rushing.

Rоry McCune

@Arperum oh I don't do sugary drinks

fruit squash/tea/coffee

kalina

I don't do sugary drinks except dr pepper

Rоry McCune

@kalina ya know I'm not sure I've ever had a Dr Pepper

Arperum

@RоryMcCune I found one that was super tasty a couple years back on Metaldays. I ended up drinking > 6l /day.

kalina

10:11

@RоryMcCune do you have an unnatural affection for irn bru?

Rоry McCune

@Arperum ouch

@kalina it is a great hangover cure

kalina

@RоryMcCune well my unnatural affection is for dr pepper

and it definitely could replace water in 99% of circumstances

Rоry McCune

I do like it but if I drink too much diet-fizzy I get sick, so I'm aff that and if I drank much full-sugar stuff I'd be hugely overweight

kalina

and sugar free dr pepper tastes nasty

Arperum

@RоryMcCune The drive home was interesting. The sudden extreme lack of sugar was not the best thing ever.

kalina

10:12

@RоryMcCune benefits of being young

Rоry McCune

@Arperum yeah I get hypo-glycemic if I take a lot of sugar without solid food, so I steer well clear of that stuff

@kalina this is true...

kalina

I am finding that prolonged abuse is a cumulative effect though

I don't know why I feel I need to test each category individually to work that out

Arperum

Last year I kept it to ~2l/day. Festivals use up a ton of energy enyway, so an increased sugar input is not the worst, overdoing it is.

Rоry McCune

@kalina yeah that's like me with diet-fizzy drinks, I'm fine for a while but if I drink em for a couple of weeks I start getting sick

it's like there's a build-up of something

kalina

well I did it with drugs until it nearly killed me

and then I tried working without sleeping until it fatigued me to sleep

Rоry McCune

10:17

well I guess now at least you know your limits :)

kalina

so rather than going out every weekend and getting smashed, staying up all night, doing the after party, turning up to the next day... I'm basically going out, fitting into a party while drinking water, leaving, having a salad and then sleeping in a proper bed

Rоry McCune

@kalina sounds like a sensible plan

and I guess really partys are work for you a lot of the time, so needs to be done in a sustainable way

kalina

well they are now yes

I've had to change my pass times

since a night out in the clubs is no longer a special event

and then you realize the rest of the world works during the week

so screw you guys I'll sit in starbucks by myself

Rоry McCune

lol

kalina

HMPF

Rоry McCune

10:20

yeah I guess it's like being on the night-shift

kalina

well yes, it's exactly like being on the night shift

M'vy

night club eeeek

lots of people, loud music, expensive drinks... there's nothing in it for me

Matthew

@M'vy That's because you don't own a nightclub. Buy one, and all the expensive drinks will contribute to your bank balance!

M'vy

@Matthew I'd prefer to open a stationery shop I guess

Unless I can get to manage the thing offsite. then why not

Matthew

10:35

@M'vy Time for the world's first nightclub/pen shop then. Sell pens and paper during the day, then at night become a themed nightclub, with giant scissors swinging through the air

M'vy

hmm...

kalina

@M'vy lots of people, loud music dampened with ear plugs, bottle of water you bought with you

M'vy

@kalina depending on the club they might not allow the water bottles. And if I have to get dampeners, why should I go in the first place :)

Anyway, that's a non question.

M'vy

10:51

The ads for job seeking website are weird sometimes

kalina

you see ads?

coffee number 3

ding

M'vy

Sometimes I do yeah :)

Transcript for