The DMZ

Thomas

17:00

@kalina: Thanks for that link. Would it make sense to ask for any updates to that same question? (Given that they recently went public)

kalina

@TildalWave don't tell him that

@Thomas If the post needs updates then sure

TildalWave

@kalina your secret is safe with me ... and anyone that can read deleted messages

kalina

by the looks of that answer it answers the same set of USPs detailed on their about page

Mark Buffalo

@kalina :O

Thomas

I didn't see the deleted message

kalina

17:02

good

I just dropped a pen drive by accident and then broke it into several pieces when I rolled my chair over it while looking for it -.-

Thomas

At one point there was something called Hushmail. What is the story with that?

(How does Protonmail compare?)

kalina

@Thomas another group of people misunderstanding the word "secure"

Thomas

So maybe my question is: How does Protonmail compare? (Would that be on-topic?)

kalina

what is your goal?

are you unable to parse both of their about pages and make a comparison?

Jacco

@Thomas, what is it you would like to learn about protonmail?

kalina

17:06

do you only want hushmail and protonmail or would you like SCRYPTmail adding into the mix as well

Thomas

I don't have a goal (maybe that is a problem). I had read recently about Protonmail and I was wondering how revolutionary it actually is. I am wondering partly because of he thing with Hushmail (Canada?) and there was something about that not working very well after all. So it is just pure interest,

I guess I am just wondering how trusted it is. Is it trusted like Truecrypt is (was)?

I hadn't heard about SCRYPTmail.

kalina

well you can answer the "how revolutionary is it" question like this: "Does it still rely on a protocol for communications that existed before the internet was called the internet?" -> YES, no it's not revolutionary

Thomas

I had heard that the "new" thing is that it makes GPG (PGP) easy.

kalina

and you'll find that to be universal among all email providers

the "new" thing was making something really old easier to use?

Thomas

But I am wondering if there are any compromises.

kalina

17:08

well stop the press

Thomas

Yes, the new thing was (is) that it makes PGP easy to use. That is, the encryption is done in the browser and the keys are stored locally (I think).

kalina

am I a bad person for using the same message for all my Facebook birthday notifications

SmokeDispenser

haha.

first time i have to use a auto comment here :)

kalina

a auto comment?

Rоry McCune

@kalina probably depends on what it is...

SmokeDispenser

17:22

@kalina, a script that adds commets one uses over and over by gui

kalina

@RоryMcCune I don't understand

@SmokeDispenser well it's not really "auto" if you have to take action to make it happen

SmokeDispenser

@kalina, it's the name of the plugin. ask the author;)

Jacco

how can this user: security.stackexchange.com/users/104162/brent-kirkpatrick have "almost three decades of experience in computing and advanced degrees" ? (emphasis mine)

He looks barely 20 years old..

kalina

@Jacco so are you jealous or inquisitive?

SmokeDispenser

@Jacco, are you judging by the pic alone?

Gilles

17:24

@Jacco based on my picture, how old am I?

kalina

I think based on the content he's posted so far it's irrelevant what he says about himself

Jacco

His picture and his website + academic cv (earliest mentioned date: 2001).

SmokeDispenser

@Gilles, I see you could not leave the lunatic man with it's hand alone with his biohazard :D

kalina

@Jacco well that is "nearly three decades"

SmokeDispenser

@Gilles, I don't even know what to answer anymore :)

kalina

17:26

if your math is bad

Jacco

:-)

kalina

@SmokeDispenser I find the easiest way is to not waste your time answering him

SmokeDispenser

@kalina, that's what I decided and used an autocomment :)

kalina

@SmokeDispenser lol

oh what, Google are selling boston dynamics?

SmokeDispenser

wait, why?

it did work out pretty well lately

kalina

17:30

apparently Google don't want to be associated with humanoid robots

obviously hiding their SkyNet like nature for a bit longer

Rory Alsop

@SmokeDispenser no short to medium return on investment likely

kalina

that and they have two robotics teams

one based at the main Google campus in the X division and boston dynamics based in boston

SmokeDispenser

@RoryAlsop, I thought they were having a big deal with the us military

kalina

@SmokeDispenser the robots were too loud

SmokeDispenser

Oh, I see

kalina

17:33

Atlas, The Next Generation

►

also, the dude that keeps beating on the robot, moving the box and pushing the robot over

that guy is definitely first blood during the robot revolution

Rory Alsop

@SmokeDispenser I think they needed commercial success too

SmokeDispenser

@kalina :DDDD

Jacco

funny how everybody I know who saw that video feels bad for a piece of machinery because some human does thing to the machine.

kalina

@Jacco obviously it's different, but that video doesn't look too different to videos of racial or gender based violence when he starts pushing it over

Jacco

or your average bully on the playground

Rory Alsop

17:36

@kalina facebook.com/1648527885432652/videos/1699055350379905/?fref=nf

I know it's on facebook - sorry. Can't find it elsewhere

kalina

do I need to see this?

Jacco

but, the interesting question is: what triggers our primitive human brain to feel empathy to a machine?

Rory Alsop

@kalina a gameshow called what's under my kilt

doesn't show anything

kalina

@RoryAlsop I can't think of anything I'd rather do than walk around blindfolded touching things hanging under kilts

Rory Alsop

@kalina ...

kalina

17:39

@RoryAlsop what

Rory Alsop

@kalina my ellipsis indicated I had no words :-)

kalina

that wasn't an ellipsis

Rory Alsop

typing

my bad

kalina

OH now I know what you mean

silverpenguin

has anyone needed to change fast food places because they start to know to much about you ?

kalina

17:42

if you eat fast food that frequently you need to re-evaluate your diet

silverpenguin

@kalina only once a day dont worry

kalina

"only"

Rory Alsop

@silverpenguin no

Rоry McCune

@silverpenguin we have precisely 0 fast food places that deliver here, so no :)

silverpenguin

@RoryAlsop oh ok :( im almost done with the local fast food places around my house... they all know my regular order and one even started sharing his personal issues with me ...

@RоryMcCune are you in hell ?

kalina

17:44

Scotland is basically hell

Rory Alsop

@silverpenguin I've just not been a fan of fast food...ever

Rоry McCune

@silverpenguin not at all fast food is generally a bad idea

@kalina pls

kalina

you're right, too cold

Matthew

@silverpenguin My local coffee shop knows my normal order...

silverpenguin

@Matthew that is almost as bad and makes me feel a bitr better

@RоryMcCune it is a bad idea and i regret every bite

Rоry McCune

17:45

@silverpenguin you should probably cut down then :)

silverpenguin

@RоryMcCune you are right! it will be my 2017 resolution stuffs more KFC into mouth

Rоry McCune

eww KFC

kalina

KFC is basically fried rat

silverpenguin

@kalina meat is meat

kalina

some serious issues even calling KFC food

silverpenguin

17:47

@RоryMcCune </3 man KFC why you ew it

kalina

52 secs ago, by kalina

KFC is basically fried rat

silverpenguin

@kalina it makes my belly full and doesnt kill me instantly, food :D

Rоry McCune

@silverpenguin I agree with @kalina KFC is not nice stuff

Matthew

@RоryMcCune I agree with the rat crowd on this one

silverpenguin

well fine! more rats for me :<

Rоry McCune

17:48

Things like Pizza are ok on occasion along with a good takeway curry or chinese, but things like KFC/Mcdonalds/Burger king... eww

Xander

How do you manage to ask a question, and then post a long, rambling answer that DOESN'T EVEN ATTEMPT to answer the question YOU asked!?

Rоry McCune

@Xander drugs?

kalina

@Xander easy, it all starts by creating your Stack Exchange account

silverpenguin

@RоryMcCune what about subway?

Rоry McCune

@silverpenguin well it's possible to create a relativley healthy subway sandwich so if you do that it's not too bad

Matthew

17:49

@Xander Brent?

Xander

@Matthew Yes.

Matthew

@RоryMcCune Although the bread is overly sweet...

kalina

@silverpenguin subway is not good but not bad

Xander

Perhaps.

-3

A: What is the nastiest software attack one can dream up?

A lot of people debate the ethics of penetration testing, but I will discuss the computational theory behind why we do not want to do penetration testing. This theory is the core of the reason for why I cannot and will not participate in penetration testing. Please recall that an algorithm is d...

silverpenguin

@kalina I actually agree with this statment

Xander

17:50

Q: What is the nastiest attack you can think up?"

silverpenguin

though when ever i get subway i get: pulled pork, peperoni, salami. meatballs, double cheese, black peper and bbq sauce :D nomomnomnom

Xander

A: "I don't believe in penetration testing."

Matthew

@Xander I think it worked out as "I refuse to think of any

Rоry McCune

@Xander good lord, I'd either suggest two people using the one account or someone with multiple personalities!

Xander

@Matthew You figured more out than I.

Matthew

17:52

@Xander Did you spot the objection to closing as opinion based, because it had references?

Xander

@Matthew Ha, no.

SmokeDispenser

Oh.

Xander

@Matthew I do like Deer Hunter's request.

Matthew

"Forgive me, but references to the news, to public records, and to computer science research is not purely opinion."

SmokeDispenser

Isn't that the person with 30 years xp?;)

Matthew

17:53

Well, no, but the question you asked using those was only going to generate opinions...

Bah!

Xander

I'm still leaning towards troll.

SmokeDispenser

@Xander, I like you comment :)

Matthew

Oh dear... I followed the link to his homepage...

SmokeDispenser

also: I guess someone impersonates the dr.

The profile description hints at that, where the user is talking in third person about the user.

Matthew

I see that the homepage follows the refusal to participate in any form of security work. Such as using HTTPS for login data, or keeping Apache up-to-date...

SmokeDispenser

17:57

@Matthew :D

Xander

linkedin.com/in/bonnie-kirkpatrick-1851121b

Rory Alsop

blocked from asking questions...oh well

:-)

Matthew

@RoryAlsop Are you?

Rory Alsop

@Matthew no - the one who posted the 'nastiest attack' question

SmokeDispenser

Oh, and I got my downvote back;)

Matthew

17:59

@RoryAlsop Have they been posting lots of questions then?

Rory Alsop

@Matthew only 3 badly received ones

maybe only 2 actually

kalina

@silverpenguin you seem surprised

SmokeDispenser

He answered a lot, too.

Xander

@RoryAlsop Hey comment police, did my comment on this question get deleted? security.stackexchange.com/q/117394/12

Or am I just delusional in thinking that I left a comment there in the first place?

kalina

@Xander yes I flagged it as offensive

sorry

Xander

18:01

@kalina Figures.

kalina

so can somebody explain something to me

because my brain won't compute it

SmokeDispenser

@kalina 7

kalina

the deadpool movie is a restricted movie right

silverpenguin

@kalina the answer is 2

kalina

so why are so many parents taking their children to see it promptly before stamping their feet about how adult it is

Xander

18:03

@kalina Because they are idiots.

silverpenguin

@kalina because people are thick

kalina

those parents should get like 7 days in prison or something

Jacco

the question basically equates to: why are people stupid?

Xander

Speaking of:

Deadpool. https://t.co/1rpQJDg3QZ

Tweeted by AmznMovieRevws on March 19, 2016 at 5:52 PM

silverpenguin

@kalina for taking them to see the movie or for being dumb?

kalina

18:03

@silverpenguin both

enjoy 7 days in prison for being a retard, you're spending 7 days in there because we don't want to see the faces of people that stupid

nobody to look after your kids? Well it wasn't like you were looking after them anyway

SmokeDispenser

@Xander that.

Xander

@kalina But then someone has to take care of their kids for a week, and who wants that job?

silverpenguin

@kalina ehh! my parents used to let me watch 18s when i was younger than 10! and look at me i turned out fine stuffs more rats into mouth

SmokeDispenser

@kalina :DD

kalina

@silverpenguin did they then used to bitch and whine on social media about it?

@Xander these parents have demonstrated they're unfit to be parents, take the kids off them

Xander

18:05

@kalina Social media didn't exist back then. Wait...Did it?

kalina

this is like grand theft auto all over again

THIRTEEN YEAR OLD SHOOTS UP SCHOOL

must be gta

woah, why is gta getting the blame, shouldn't the person who bought it get all of the blame?

individual mother directly responsible for shoot up at school

silverpenguin

@kalina of course not! 1, they accepted I was smart enough to know its just a movie 2, they are not dumb 3, contradicting 2 they cant even turn on a PC let alone sign up to social media or know of its exsistence

GTA was an awesome game

just because i ran over hookers to get my money doesnt mean il do it in real life

Matthew

@kalina I suggest that potentially "letting everyone have guns" is a more direct cause...

kalina

supplying rated materials to a minor should be treated exactly the same as supplying drugs and alcohol to a minor

silverpenguin

I treat hookers with respect

kalina

18:10

I just think maybe if parents were punished for their failures that everything would be better

SmokeDispenser

@RоryMcCune, are you drinking beer in the pentests should die video while the questions are being asked?

kalina

yes he is

Rоry McCune

@SmokeDispenser not that time IIRC it was Club mate (but this was like 6 years ago) I did do a talk at B-Sides where I gave out beer for good questions and had one to drink myself :) that was the next year IIRC

kalina

he has to bribe his audience to not fall asleep

SmokeDispenser

:D

TildalWave

18:14

this has been discussed before...

Apr 19 '13 at 10:28, by TildalWave

kalina

also I can't get over hold young he looks

SmokeDispenser

@TildalWave, yeah, I'm new here;) didn't read the transcript;)

Rоry McCune

@kalina well you know about how rories age slowly :)

SmokeDispenser

how old is he? at the talk, about earld thirties?

kalina

@RоryMcCune yes but you looked early 20s in that video iirc

SmokeDispenser

18:16

@RоryMcCune?

TildalWave

@SmokeDispenser it's just 820,832 posts, shouldn't take too long :)

Matthew

@kalina In his official work photo, about 70...

kalina

@TildalWave if you remove all of the "your mom", "pls", and everything I've said, it's only 72,000 posts

Rоry McCune

@SmokeDispenser so 2009, I would've been 35 ...

@kalina thanks :)

TildalWave

@kalina and it still wouldn't be much more on-topic

SmokeDispenser

18:17

@RоryMcCune, good guess then. It''s the beard, I guess

w/o it, I look like 17 still. You have none :)

kalina

@TildalWave well that's not true, because out of the remaining 72,000 posts 60,000 are absolute quality from the porninleek

TildalWave

I think when I first came here it took about a week for the first infosec related topic to popup

SmokeDispenser

:D

kalina

I think that when I first came in here it was because of @Simon flagging and it took weeks for it to become apparent what was discussed here

3

TildalWave

IIRC we were discussing something with @ThomasPornin about nuclear weapons, actually the whole room was

I think it started with @AviD and @ThomasPornin

Xander

18:19

@kalina That's because it's very deep and intellectual.

kalina

@Xander no

while I'm convinced that many people in here are quite deep and intellectual, the quality of conversation usually doesn't peak beyond juvenile playground tormenting

TildalWave

sometimes it also looks like that and it actually isn't

kalina

you can't convince me otherwise

TildalWave

sometimes it takes quite some knowledge of particle physics to come up with a decent reply, especially when we're discussing size, length and moisture

kalina

you don't need knowledge of particle physics to discuss size or length

TildalWave

18:27

not if it's measured in larger units than Planck length at least

SmokeDispenser

@RоryMcCune, could you send me an invite to keybase?

Rоry McCune

@SmokeDispenser sure, what e-mail address would you like it sent to?

SmokeDispenser

@RоryMcCune can you invite me to a private room? I'd rather not have it in transcript;)

Rоry McCune

let me know when you've got that and I'll delete my message :)

silverpenguin

@RоryMcCune got it thanks

SmokeDispenser

18:37

copied

silverpenguin

xD

Rоry McCune

@silverpenguin it's not really super secret

silverpenguin

@RоryMcCune I know i have you on linkedin anyway! haha I was just trying to be funny :<

im hilarious

SmokeDispenser

@RоryMcCune, sent.

Rоry McCune

@SmokeDispenser invite sent :)

which reminds me I need to try out keybase FS which sounds really cool

SmokeDispenser

18:40

@RоryMcCune, thanks

silverpenguin

does anyone wana give me a job in info sec? I am house trained ....

everyone in DMZ turns off their lights awww :<

SmokeDispenser

haha

@silverpenguin, I'm happy enough, I got one :D

still a lot of cheering going on here.

Rory Alsop

@Xander 6 comments deleted on that post - looks like all obsolete after update/edit. Not from @kalina flagging as offensive :-)

Xander

18:57

@RoryAlsop Ha ha, yeah, I figured that much. :-) Ok, good to know I'm not completely losing it.

I don't think mine was obsolete, but one of the answers covered it anyway, so no harm done.

@RoryAlsop Thanks for looking into it for me.

TildalWave

@Xander did you suggest that it needs a good logo?

Rory Alsop

@Xander - oh. The one pointing the OP at Full Disclosure/Bugtraq? Actually probably shouldn't have been culled with the others.

erm - my apologies. I went through those flags and my quick check agreed all obsolete. Depends on timing maybe

I like this comment, but I am going to have to uphold the flag on it, sadly :-)

On second thought, you may qualify for a Darwin award. An inflammation, sepsis, and amputation are acute risks to your security. — Deer Hunter 4 hours ago

Bob Ebert

what are the most important programming languages to learn for web pentesting? (php, pdo, mysql, html, js, asp, xml) is that all?

TildalWave

@RoryAlsop, Thanks for the suggestion. I have re-read these. Can you please enlighten me as to which points my question fails to respect? Interestingly, the question is clearly asked and answered: "should we be running competitions like these?" is answered below very specifically. Bear in mind that the answer was not an opinion. It extensively referenced existing technical literature, i.e. research papers, books, and a body of mathematical proofs. — Brent Kirkpatrick 48 mins ago

this one doesn't quite get it, does he?

@RoryAlsop should that post be locked and rolled back to when it was still a question, so it doesn't look like our Q&A is the place to post blogs?

gosh I read a couple of paragraphs of it, I really wish I didn't

SmokeDispenser

19:14

@RоryMcCune, thanks again for the invite, mate.

silverpenguin

@SmokeDispenser gimme one

SmokeDispenser

@silverpenguin, get it yourself;)

Rоry McCune

@SmokeDispenser no worries, I really like the idea of Keybase, makes PGP a bit more usuable, I was kind of hoping they would do an e-mail client, but apparently that's not on the roadmap...

silverpenguin

@SmokeDispenser im trying but the people im asking are being difficult (you

SmokeDispenser

@silverpenguin, for me, appliing at my country's CERT worked fine.

silverpenguin

19:17

@SmokeDispenser ???

SmokeDispenser

damnit

applying.

silverpenguin

@SmokeDispenser nope im still lost

SmokeDispenser

@silverpenguin, I sent a job application to the agency that is the equivalent to the IT part of NIST for my country.

silverpenguin

its so hard looking for info sec jobs, I dont know how much i am worth

TildalWave

@silverpenguin about how old are you?

I'm asking because you might wanna consider internship and see where you stack up and learn things before you're expected to already know them

SmokeDispenser

19:33

@silverpenguin, that's a good point, maybe.

Brent Kirkpatrick has resorted to commenting;)

Neil Smithline

I think "chatting" is a better word

SmokeDispenser

@Ferrybig, lo, you here?;)

Ferrybig

@SmokeDispenser Yes, this room has interesting conversations

SmokeDispenser

what a condescending jerk. bets on how long he'll be around?

Neil Smithline

19:50

That's not nearly as condescending as his meta posting‌. There he calls the entire community ignorant.

silverpenguin

@TildalWave im 24 :( im basically dead

SmokeDispenser

@ThomasPornin, ninja'd me :)

@silverpenguin, that's pretty young. A internship might be fine.

oh no, now he's thanking me without voting. Damnit. I kind of do not like that guy.

silverpenguin

@SmokeDispenser internship ? :< but id have to take a massive pay dive for that surely? im on 26k PA at the mo

SmokeDispenser

@silverpenguin, probably.

@silverpenguin, what currency is that, btw?

Neil Smithline

@SmokeDispenser You could always try to write a better answer than him :D

SmokeDispenser

19:59

because that seems really, really low to me.

Transcript for