The DMZ

Rоry McCune

10:00

aaand now I want to rewatch mallrats

silverpenguin

@Arperum its a joke refering back a few years ago when they used annoying bolt sizes and layered their engines in such a way it was difficult to do anything... even on a 2002 car when changing the clutch I had to remove the near side wish bone!? i mean wtf D:

Rory Alsop

Whichever one was on sky recently - we watched it (had never watched it together) and laughed all over again at the childish jokes

Rоry McCune

btw @DavidFreitag I did a quick benchmark on my new graphics card last night, looks like it's at least 3x the speed of the old one (GTX760) which is nice! that EVGA power supply seems good and quiet too :)

silverpenguin

@RоryMcCune I got the 760 ...kind of having buyers remorse

Arperum

@silverpenguin I didn't even know a car had a wish bone.

Rory Alsop

10:04

@Rоry - I got the 1kW PSU with my 980ti and along with the awesomely quiet CPU cooler, the whole thing is quieter than the hum from my electric toothbrush charger. (Except when I run Black Ops, maybe...)

@Arperum part of suspension/steering

silverpenguin

@Arperum neither did i untill i had to change the clutch as im too cheap to pay for someone to do it

Rory Alsop

@silverpenguin - in my car you need to lift the engine out to change it

And mine isn't even French

Rоry McCune

@RoryAlsop yeah it's nice how you can get powerful kit that doesn't sound like an aircraft taking off!

Arperum

I have to get my oil changed, and can't even do it myself... And I'm too lazy to figure it out myself.

Rоry McCune

@silverpenguin 760 was fine for most stuff TBH but high-res gaming did cause it to strain...

silverpenguin

10:06

@RoryAlsop you have to do that with all cars :P I had mine suspended by rope...lots of rope...

Rory Alsop

Rope...????

My first Audi you could do all that from the pit

@silverpenguin - if you do like doing your own car maintenance, you could join mechanics.stackexchange.com - it may appeal to you

silverpenguin

@RоryMcCune I bought and AMD 6 core, 8 gig ram, gtx760... in november... I will probably upgrade to an intel oct core 16gbs ram and a new graphics card next year... I cheaped out this year as I just wanted it to hold me over for a year... 600 quid on this set up 2G on the next one i think

SmokeDispenser

@silverpenguin, I built a i7 32gig ram hackintosh last year. Now it just idles in my private office

silverpenguin

@RoryAlsop man D: im horrible at it... Im the worst person with bolts and screws :< oh look a screw annnnddddd its lost never to be found again

SmokeDispenser

what a waste of time

silverpenguin

10:11

@SmokeDispenser gimme why you buy and why you no use

SmokeDispenser

@silverpenguin, I thouht I wanted to play more video games. Then, no time.

priorities shifted to rather have more <euphemism here> time.

silverpenguin

@SmokeDispenser did you go and get your self a special friend... thats why I plan to be alone for ever

SmokeDispenser

@silverpenguin, I had a girlfriend change that made it an actual option to rather 'spend quality time with her' than gaming.

like, always an option.

so yeah, the machine sits there, idleing.

silverpenguin

@SmokeDispenser as in you have no option ?do it or else? I normally get GFs who like the video games and refer to it as time together :P

chat is being weird for me

had to refersh the page trying to tell me i was logged out :<

SmokeDispenser

@silverpenguin, nah, I have had other options. But tbh, I prefer physical interaction over video games until I'm too exhausted to move.

silverpenguin

10:29

@SmokeDispenser thats cool! each man does what he needs! to bad on the emotional strings though ;) haha!

SmokeDispenser

@silverpenguin, well. she left me in november and since I have found a perfect arrangement.

no emotional strings attached:D

silverpenguin

@SmokeDispenser smart man! :D

SmokeDispenser

it was the most ridiculous reason from here I ever heard. 'you are the perfect bf for a serious relationship, but i'm not in the place for that at the moment and I cannot offer you what you deserve'. I was like 'wat'?

silverpenguin

@SmokeDispenser man I get the whole, you are the perfect guy, and I want someone like you...but not you hahahaha xD

SmokeDispenser

@silverpenguin, yeah like.. well, f off then;)

@silverpenguin, quote from the new arrangement: 'your ex was unbelievably stupid to leave you'.

silverpenguin

10:37

@SmokeDispenser dont ruin the good thing you have going now! :P keep smarting all of your smarts

@SmokeDispenser this new girl makes your ego feel big haha :L

SmokeDispenser

@silverpenguin, sure. will be moving to another city soon anyways, so, whatever;)

silverpenguin

@SmokeDispenser what country are you from? s

SmokeDispenser

@silverpenguin, germany

silverpenguin

@SmokeDispenser ahhh i want to visit germany... i dont know what i would do while i was there... but i should visit it

SmokeDispenser

@silverpenguin, want some suggestions?

I'll go smoke, think of some and get back :)

Lighty

10:57

@silverpenguin Visit Venlo! (dutch city a few steps away from german broder) and I'll buy you a pint

offer goes for anyone here btw

silverpenguin

@SmokeDispenser that sounds good

Lighty

wait

0

Q: Why does telegram not use end to end encryption?

Signal and Telegram are both mobile applications that "try" to ensure secure chats. Signal uses end-to-end encryption, Telegram does this as well (in 'secret chats') but it does not use end-to-end encryption in group chats. How come? Is it difficult to implement?

silverpenguin

@Lighty this is also good!

Lighty

I thought Telegram dis fully end-to-end

including group chats

silverpenguin

i went to amsterdamn for a 3 hours (3 hours = free time I spent must of my time in schipol) about 5 weeks ago

Lighty

11:00

@silverpenguin Only went there, like, 3 times

once with work

SmokeDispenser

@silverpenguin what do you fancy? cities or landscape?

Lighty

2 times because of an acedemic hospital, only hospital that could fix my face

silverpenguin

@SmokeDispenser landscape ! and night life

Lighty

@silverpenguin and red lights

SmokeDispenser

@silverpenguin, that is a bad combo;)

@silverpenguin, for night life, berlin is great

silverpenguin

11:02

@Lighty what happened to your face? and I went to because i work with aircraft so I needed to visit schipol

SmokeDispenser

@silverpenguin, also, munich and hamburg

@silverpenguin for hamburg, you do have the sea close by and for munich the alps.

@silverpenguin, I personally dislike hamburg, but it has a lot to offer tourist-wise.

Lighty

@silverpenguin an extremely rare infection to my face, a "Non-tubercolosis bacterial infection) of some sorts, causing deadly imfammatory problems to my lymph glands

Rory Alsop

Lol - so impressed at how fast spammers are dealt with here nowadays! He was gone in 39 seconds!

Lighty

with deadly, I mean deadly.

silverpenguin

@Lighty fuck that sounds shit man :<

Lighty

11:04

they surgically removed every single one of them in my face before it could spread, and used every info they got from it for future studies, the disease has no name, and only has been found a few times

the second surgery was further cleaning and a bit of face correction due to the muscles being damaged from the inflamed bullshit

silverpenguin

@SmokeDispenser I hate tourist places.. lol

SmokeDispenser

@Lighty, that sounds horribly 'lucky'

Lighty

@SmokeDispenser you have no idea how lucky I was

SmokeDispenser

@silverpenguin, well, you do need a big city for night life;)

silverpenguin

this was a picture i took in japan... after leaving tokyo for a little bit :P

man the quality looks awful wtf

SmokeDispenser

11:07

@silverpenguin, I personally like munich. If you'd rather have the sea try hamburg

Rory Alsop

I really really like Munich. Lived there for a bit. Frankfurt I know less. And never been to Hamburg yet - although we hope to play Reeperbahnfest sometime

silverpenguin

when i go traveling again...eventually... im finding you all for free food...erm i mean social...

SmokeDispenser

@silverpenguin, that'd be Kiel for now, Bonn soon for me.

@RoryAlsop, hamburg I personally dislike, but I do not drink and am not into hookers. so not much to offer. but the hafencity is beautiful.

silverpenguin

I wanted to travel through europe to china once but no one wanted to do it with me :(

SmokeDispenser

@silverpenguin, get your double negatives straight;)

silverpenguin

11:12

@SmokeDispenser just my brain getting confused lol

SmokeDispenser

:)

@silverpenguin, where are you from then?

silverpenguin

@SmokeDispenser good ol england

SmokeDispenser

@silverpenguin then northern germany might be lame for you. basically the same.

at least weather-wise;)

silverpenguin

@SmokeDispenser weather is fine as long as the people are not english but want my english money so work hard for it

mwahahaha

SmokeDispenser

@silverpenguin haha

@silverpenguin, actually, they most likely do not want your literal english money;)

@silverpenguin, you'll have to offer them the colorful european money instead. In hamburg there is a street where women work hard for that;)

silverpenguin

11:19

@SmokeDispenser your favourite street eh!?

SmokeDispenser

@silverpenguin, not at all, actually

silverpenguin

@SmokeDispenser we only see what you want us to see ;) but i know your secrets

SmokeDispenser

@silverpenguin, oh, you wish.

is this on topic here?

Rоry McCune

@SmokeDispenser that's a matter of some debate :)

SmokeDispenser

I remember having read somewhere that exploiting is ot.

Rоry McCune

11:29

some would argue that questions relating to the use of security tools are best sat here as the audience is most likely to know them

SmokeDispenser

right.

Rоry McCune

others would argue that it's software use not security, so belongs on superuser/serverfault

SmokeDispenser

If the exploiting part is no concern, I'd say it's okay to be here as per the 'tools' part

TildalWave

Adi

Seems like a good reason to reject an edit

TildalWave

11:33

bah it doesn't look good with or without background

@Adi what suggested edit was that? :O

kalina

@Arperum because French cars are terrible

the one French car I've owned got written off by a jeep deciding it didn't exist and driving into the side of it

Matthew

@kalina Hence adverts pretending they are from other countries...

kalina

he hit the front wheel as he turned right into the car, bending the rim and deflating the tires before continuing down teh side of the car

Rоry McCune

@kalina almost as bad as italian! (well for non-supercar brands anyway)

kalina

once our cars had unmated, I went into an uncontrolled spin into the metal barriers

the speed of the impact was about 60kph

when I came to a stop, the airbags hadn't gone off, the car was completely mangled and the jeep was undamaged

I opened the door, the electrics shorted, the airbags went off throwing me back into my seat

the injuries I gained from that accident occurred after the car had come to a halt, caused by the "safety features"

silverpenguin

11:40

@kalina I had a head on collision with another french car... it was a complete car wreck ...

Telkitty

@ShadowWizard you don't, but I am the real one ... do you want to take a leap of faith? :p

kalina

also an airbag going off in your face hurts

not to mention the gearbox in that car was the shittiest gearbox I've ever had the misfortune of using

silverpenguin

@kalina I cant actually remember my air bag going off... I have about 30-45 seconds of memory missing .. I remember hitting the car... bumping off... and then being out of the car

Telkitty

@TildalWave pancakes or meat fillets?

kalina

the best of it was the fuckwit that hit me decided to drive off until he saw the flash from my camera catching his number plate

"I was just moving" he said

SmokeDispenser

11:43

@kalina :D

kalina

wrong - you're a dickhead who just ruined my day and now you're trying to escape

silverpenguin

@kalina he obviously didnt drive fast enough

SmokeDispenser

@kalina inorite?;)

Rоry McCune

@kalina well only a couple of weeks before Tesla model 3 reservations open...

kalina

@RоryMcCune we've had this discussion, I want an electric car so bad but I can't justify it due to limited range

Matthew

11:44

@kalina Once got hit by someone who, after being aggressive to us, was told that the police were on the way, and then drove off. The police were not impressed with him...

kalina

until you can charge an electric car in 90 seconds or get an electric car with a range in four digits they're inappropriate for the task

Rоry McCune

@kalina model 3 may help though :) although I kind of doubt it'll have a better range than the s/x

kalina

current electric cars would be useful exclusively for getting me to my nearest airport and back if I'm lucky

"they're a fantastic car for driving to my other cars"

SmokeDispenser

:D

Rоry McCune

@kalina well with a 200 mile range you could charge it back up while doing your "set"

silverpenguin

11:46

I would prefer this to an electric car

kalina

@RоryMcCune an hour of charging isn't going to change everything

TildalWave

@Telkitty bacon obviously :P

kalina

not to mention "I only DJ at clubs with suitable electric car charging" will limit my scope somewhat

Matthew

@silverpenguin Oh, a Smart car forone

SmokeDispenser

@kalina that info by the way does not help to conceal your location;)

Rоry McCune

11:46

@silverpenguin you know the Tesla has a 0-60 considerably better than your current car...

@kalina meh people expect creatives to have weird riders :)

SmokeDispenser

@silverpenguin one of those has actually been built to drive on the roads.

silverpenguin

@RoryAlsop your song is making the office debut

Simon

@silverpenguin Have you driven one?

TildalWave

@SmokeDispenser I don't think the question is clear, he doesn't mention what server is he trying to attack and for all we know might be hitting server's defenses, getting something other than HTTP 200 as a response once he hits certain request limit

kalina

@SmokeDispenser "within 150 miles of an airport" doesn't really narrow anything down

Simon

11:48

The day you'll realize you get 100% torque instantly, you'll realize that they're quite cool.

silverpenguin

@Simon an electric car?

kalina

it's obvious he's talking about electric cars even though he replied to your message about toy cars

Simon

@silverpenguin Yes.

SmokeDispenser

@kalina for most of europe, 'only a airport w/in 150 miles' does.

silverpenguin

@kalina I cant tell with simon he might have been making a funny

Matthew

11:50

I've driven an electric minibus before...

SmokeDispenser

hah! my boss just went to get fast food.

Simon

I drove an i3 and was pleasantly surprised.

SmokeDispenser

what a joy.

kalina

@silverpenguin it's safe to assume that @Simon is never funny

Rory Alsop

@silverpenguin yay! Which one are you playing

Arperum

11:50

@kalina Damn :(

Simon

wadafuk

silverpenguin

@Simon no. lol I have not... the reason i dont car for them though is nothing to do with performance just that the their existence in the current world is kind of pointless and more of a hinderence ...so i dislike them out of principle

Simon

Yet you drive a BMW you jerk.

silverpenguin

@Simon I drive a BMW I can do what i want

Simon

I can judge you all I want too.

fkin_judged

kalina

11:52

rekt_judged

Simon

So you dislike the principle of an electric car?

Or cars in general?

kalina

I dislike the principle of people who dislike electric cars

or, in shorthand

your face is a principle

Simon

The only thing I'll miss from an electric car is the noise of the engine.

kalina

I don't mind missing engine noise

makes music sound better

Simon

I like having the option to listen to my engine as music.

silverpenguin

11:53

@Simon most sense you have ever made

kalina

yes but the look of tunercar/supercar owners when you leave their little baby at the line

so sleeper you can't even hear it

SmokeDispenser

@kalina :D

Matthew

@kalina But I can do that with my Skoda Citigo! I would love an electric Citigo...

SmokeDispenser

@kalina, the torque is intruiging, indeed.

kalina

I doubt you could leave anything at the line in a skoda

not without leaving part of the skoda behind at the line with it

Simon

11:55

skowat

You Europeans and your weird cars.

kalina

@Simon basically a VW

Simon

o

kalina

and pls American

SmokeDispenser

@kalina, there is a RS version of the octavia that is quite good.

kalina

masters of building cars that don't corner

Simon

11:56

lulz

Matthew

@kalina You'd be surprised - they're essentially VWs with the wrong badges

Arperum

@kalina A Lada probably :p

SmokeDispenser

@kalina, the new mustang has no longer pre-car cornering tech.

silverpenguin

@RoryAlsop burn your fucking planet... though i feel like people in the room would have prefered sex on the dance floor

SmokeDispenser

As of 2015 - bad enough it did stick for so long.

kalina

11:57

everybody prefers sex on the dancefloor

Simon

@silverpenguin If you haven't, make sure to watch last season of Top Gear where they reviewed the McLaren P1 and Porsche 918: both are hybrid supercars that have an electric motor working alongside of a petrol engine.

kalina

sometimes that even happens

especially in germany

Simon

It's really, really efficient and amazing.

SmokeDispenser

@kalina, pics or didn't happen.

kalina

me providing pics doesn't change whether it happened or not

SmokeDispenser

11:58

rules. of. the. interwebs.

:)

Simon

@SmokeDispenser Go back in the 90s when people discovered E in Berlin, you'll get plenty of material.

Matthew

/me reads too fast, and thinks that @Simon is claiming sex on the dancefloor is really efficient and amazing

Simon

wot

kalina

@SmokeDispenser all I'm going to say on the matter is "berghain"

Simon

Don't go to the weird rooms in Berghain if you're a weakling.

I WANNA GO FFS

Not to the weird rooms, I don't think I'd dare to explore the place.

SmokeDispenser

12:03

@kalina :D

kalina

well gz on killing the chat

Adi

@TildalWave Somebody changing "They" to "He"

kalina

#chatkiller

@Adi link

he was asking for a link!

Adi

@kalina security.stackexchange.com/review/suggested-edits/71921

kalina

I find that edit offensive

Simon

12:13

@Adi About OSCP: "You must schedule the challenge within 90 days of the expiration of your lab time."

StackExchange

I looked up "insanity" in like 10 different dictionaries and none of them said anything like that. Neither did the DSM-4. But I'll keep looking. Maybe it's in the DSM-5!

Adi

@Simon Jaa?

Simon

My lab access does not even last 90 days, does that mean I had to register even before I registered to the course?

Adi

@Simon "the expiration date"

Simon

WITHIN

I CAN'T READ

FUCK ME

Thanks.

Adi

12:14

@Simon I guess you're used to hearing this, so "No"

Simon

:( but pls

Adi

:D

@Simon and if you want to book it even later, you can just get 15 days of lab access

they come with an exam attempt

0

Q: How can I bypass the XSS filter in Google Chrome?

I have a script that steals cookies using XSS vulnerability when it is opened in in the browser. I tested it on Firefox and it worked perfectly but it didn't work well on Google Chrome My HTML code that I use to steal cookie is: <form style="display:none" action="http://www.xtatar-sa.com/login"...

xss google chrome html

Somebody's trying to hack the Arabic version of Travian

silverpenguin

@Adi I found chrome is weaker to get XSS than to post XSS

Adi

@silverpenguin What does that mean?

silverpenguin

@Adi XSS attacks in the URL rather than to form data essentially

Adi

12:20

@silverpenguin I understood what you mean by POST and GET

but what does "I found chrome is weaker to" mean?

What does that mean? Weaker?

Empirically

Mark Buffalo

I recently did an SQL injection attack on a major, major eCommerce website

in the billions

I called them up on the phone and warned them about it

Adi

@MarkBuffalo Bad idea

Mark Buffalo

Naw

silverpenguin

@Adi Oh sorry my misunderstanding, basically their seems to be a built in JS script in google chrome which detects XSS in the POST data which stopped me injecting the code in a form. i knew the weakness was there because it worked on iceweasel... but I managed to get arround the security in chrome by implementing a URL formed attack

Mark Buffalo

They were quite thankful. I did not drop anything.

Adi

12:22

@Mark Did you get monies for it?

silverpenguin

@MarkBuffalo how are you not being sued for this? you did an illegal pen test on their system :< ??

Adi

@silverpenguin I often find it's also the other way around

Mark Buffalo

Actually, see, it was an accident

for shits and giggles, I typed in the 1=1 stuff

and it dumped their entire db

Adi

@silverpenguin For example, injecting HREF in <math> tag

Simon

@Adi OK cool, I'll see how the course goes and will decide accordingly.

Adi

12:24

Works in Firefox but not Chrome

silverpenguin

@MarkBuffalo ouch

Mark Buffalo

did not expect it to work

Rоry McCune

@MarkBuffalo bear in mind that weev went to jail for not doing a lot more than that...

Mark Buffalo

so I quickly called them

I did it as a joke. "Yeah, this won't work"

"....wtf"

Rоry McCune

@MarkBuffalo sure but lulz isn't a court recognized defence :op

Mark Buffalo

12:25

lol

silverpenguin

@Adi see by looking at the code I was the GET was posted directly into the front end code in some ref tags... closed off the ref tags in the URL and had lots of fun I could run anything... URL attacks are more juciey anyway :3 easier for an attacker to spread the love

Mark Buffalo

better I find that before some malicious person does

Simon

Better get sued than letting a malicious person get sued.

Adi

9 mins ago, by Mark Buffalo

for shits and giggles, I typed in the 1=1 stuff

9 mins ago, by Mark Buffalo

and it dumped their entire db

Mmmmmokay

@AviD @RoryA Please check the flag queue about that XSS question. This might have some legal consequences. The idiot just disclosed a vuln in a live system.

Rоry McCune

@Adi IIRC it's @AviD 's day off not sure if @schroeder or @JeffFerland are about...

@Adi also what a muppet, screenshot of the site and everything

Benoit Esnard

12:38

@Adi: do you know which website he is trying to exploit? security.stackexchange.com/questions/117870/…

I guess it isn't his personal website, right? :(

Adi

@BenoitEsnard It's in his "PoC" xtatar-sa.com

Benoit Esnard

Oh right, didn't even read the code

Adi

Benoit Esnard's is interesting

I didn't know that Chrome filters XSS automatically

Benoit Esnard

Actually IE8 does the same

blogs.msdn.microsoft.com/ie/2008/07/02/…

I learnt while reporting vulnerabilities: webmasters using Chrome didn't understand what was the problem because XSS were filtered

So now I always tell them to open the page in Firefox

Adi

Yep. I've just checked Chromium source code. It seems to be enabled by default

Rоry McCune

12:47

7

Q: Is chrome completely secure against Reflected XSS?

I notice that Chrome does not execute scrips that are part of the web request, http://vulnerable_site?pageTitle=<script>alert('xss')</script> With such links since the script is as part of the web request, Chrome does not execute the script. Does that prevent all kinds of Reflected XSS attacks ...

xss chrome

^there are some possible weaknesses although IIRC it gets updated with new tricks so that list may no longer work

Benoit Esnard

Yeah I've read articles explaining very smart exploits about that filter

But as far as I know they are all fixed now

Well, all public ones are fixed :P

I've restored my answer, I guess the question will be deleted soon

silverpenguin

@HamZa we are CTF saturday right?

Adi

@BenoitEsnard Can you make some edit on it?

Anything

Mark Buffalo

@Adi *Table. Was in a hurry

Also, everything joined

And that isn't the full syntax

silverpenguin

@MarkBuffalo did you literally just type 1=1 ... im sure you had to atleast try and close their syntax

Mark Buffalo

12:58

No, I didn't literally type only 1=1

You know what I mean by that.

Transcript for