The DMZ

Ohnana

20:00

@MarkBuffalo ugh that bull

Mark Buffalo

Seems dishonest

David Freitag

wut

Matthew

@MarkBuffalo Isn't that where you buy a house with your second-home allowance?

David Freitag

Is it something to do with butter?

Ohnana

seriously, if there's two things you don't want to balance precariously, it's your bed and your finances

Mark Buffalo

20:01

@Matthew reddit.com/r/churning

David Freitag

@Ohnana Yeah, if you balance precariously on your bed you could break your bone

And that's, like, game over, man

Ohnana

@DavidFreitag i am secretly grateful i do not have to worry about this

Mark Buffalo

@DavidFreitag ...experience...?

David Freitag

@Ohnana It's a real issue. You can dislocate it too.

@MarkBuffalo Maybe

etherealflux

@Ohnana and your nuclear weapons

David Freitag

20:03

For future reference, don't stand near an open window whilst naked

etherealflux

not that I possess any nuclear weapons

kalina

@MarkBuffalo banks are dishonest

Ohnana

@DavidFreitag screams

Mark Buffalo

@etherealflux rip, 3 degrees of separation watchlisted now

@kalina Maybe some, but they provide very useful services in general... and I'm happy to pay for those services.

David Freitag

@MarkBuffalo Are you talking about prostitution or banks?

Mark Buffalo

20:04

@DavidFreitag banks

David Freitag

@MarkBuffalo Well did you wear a condom at least?

silverpenguin

@DavidFreitag what ever is going i suppose

Mark Buffalo

How are you going to pay for the infrastructure to protect your cashola? And the employees who work at the bank?

etherealflux

@DavidFreitag There's a political cartoon to be had here

David Freitag

@etherealflux ( ͡◉ ͜ ʖ ͡◉)

Iszi

20:05

@Ohnana I dunno, the former sounds kinda kinky. I could see some people being into that. Just don't forget the "RA" part of "RACK".

David Freitag

@Iszi wut

Ohnana

@Iszi RACK is all fun and games until the cops show up and awkwardly avoid asking questions

Iszi

Well, the "C" is essential too.

David Freitag

So those drugs you're on, is there enough for the whole class?

@Ohnana Repulsive Anatomically Correct Kangaroo?

Ohnana

@DavidFreitag risk aware consensual kink

Iszi

20:08

Risk-aware consensual kink

Risk-aware consensual kink (RACK, also risk-accepted consensual kink) is an acronym used by some of the BDSM community to describe a philosophical view that is generally permissive of certain risky sexual behaviors, as long as the participants are fully aware of the risks. This is often viewed in contrast to safe, sane, and consensual which generally holds that only activities that are considered safe, sane, and consensual are permitted. == Philosophy == RACK's tenets are best described by a deconstruction of the acronym: Risk-aware: Both or all partners are well-informed of the risks involved...

Ohnana

aka, accept the risks of things you're doing, please do them with consent of all involved

David Freitag

@Ohnana That's a lot easier to manage if you're alone

2

Iszi

^ Didn't even get a disambiguation page when I all-caps-ed that.

Ohnana

@DavidFreitag quite. but where's the fun in that

David Freitag

@Ohnana Exactly (ಥ﹏ಥ)

Ohnana

20:09

@Iszi hmm, never heard CCC or PRICK before

Simon

wadafuk happened here

Matthew

Of course, RACK can involve a rack, but rarely rack-mounts...

SEJPM

@ThomasPornin do you feel confident enough to explain the iMessage break the before official announcement?

Ohnana

@Matthew risk aware consensual kludging

:U

Iszi

@Ohnana Heard of PRICK before. Didn't know CCC until I went looking recently. And of course I've heard of SSC.

Mark Buffalo

20:10

@Ohnana Usually I don't do that when I'm alone because... well, I have multiple personalities.

Ohnana

@Iszi old-guard, amirite

Simon

@RоryMcCune Nice story, son.

Mark Buffalo

So sometimes I do not consent to myself

Rоry McCune

@Simon thanks :)

David Freitag

@Ohnana Is that like Rite-Guard?

Mark Buffalo

20:10

ok, that's not funny. afk

David Freitag

@MarkBuffalo Yeah especially if you sit on your arm until it falls asleep

Mark Buffalo

Was about to ask how sitting on your arm helped it fall asleep

Iszi

@Ohnana Me? No. Just reasonably well-versed on that particular aspect. A local dungeon has a regularly-repeating 101 class.

David Freitag

Why hello there stranger ( ͡◉ ͜ ʖ ͡◉)

Ohnana

@Iszi haha no i was just poking fun at the fogeys in the community

David Freitag

20:12

@Iszi I still can't believe you do that sort of thing with your DnD group

Mark Buffalo

@Iszi So you do BDSM with your local DnD group...?

2

Matthew

@MarkBuffalo Makes sense. Both like dungeons and big weapons, and running round in skimpy clothing

Mark Buffalo

@RоryMcCune Wait. But you're a tester, right?

And you also have CISSP?

David Freitag

Counting down the clock until go time

Hopefully I don't pass out driving home

Rоry McCune

@MarkBuffalo yarr I was in InfoSec before I got into testing :) once you get the CISSP you just need to do some CPE hours every year to maintain it

TBH I think about dumping it every year, but it could be handy

and it would be a PITA to have to re-take it

Mark Buffalo

20:27

hmm, good point

etherealflux

@RоryMcCune So like CPR, but with more computers

Rоry McCune

@etherealflux well or more vendor presentations to go get bored by :) luckily I usually attend enough conf's each year to easily hit the number...

Mark Buffalo

think I'll need ocsp/cissp to get past the hr wall

Rоry McCune

@MarkBuffalo depends on the company, smaller boutiques are far more likely to play the person not the cert, large co's are far more likely to need the bits of paper...

Mark Buffalo

that's true

Thomas Pornin

20:36

@SEJPM I am on my phone, travelling and a bit sick. I'll look up what iMessage is tomorrow.

David Freitag

@ThomasPornin You're feeling sick? That's crap man. Sorry for the snow we sent your way :[

Mark Buffalo

@Simon has completely infected me

Every time I see questions on secse, "What is an example of arithmetic and buffer overflows in a php application?", I'll think "You're an example of arithmetic and buffer overflows in a php application."

Matthew

@MarkBuffalo Internalised @Simon. Scary

David Freitag

Nineteen minutes

etherealflux

but do you pls

David Freitag

20:41

brb gonna shotgun two red bulls

etherealflux

that's dangerously irresponsible. shotgun three

David Freitag

Well I already took some excedrin tension headache which has 60mg of caffeine

But that won't kick in for a while

Mark Buffalo

@DavidFreitag I hope your headache heals nicely.

schroeder

I'm ALIVE!

Mark Buffalo

@Matthew Terrifying

@schroeder WELCOME BACK TO THE INTERNET

I got to RE another PHP script while you were gone

David Freitag

20:44

@MarkBuffalo Yeah here's hoping for no other issues

Mark Buffalo

Also, a piece of javascript. Because RE.SE doesn't want them either

David Freitag

RE.SE's pieces

Mark Buffalo

-2

Q: Is the password FFFFFggggg&&&&&22222 safe?

It is 20 characters long, mixes alphanumeric and special symbols. It is one among ** 20.

passwords

LMFAO

David Freitag

@MarkBuffalo Hahahaha what the hell

Mark Buffalo

I downvoted it, but also favorited

because I am still laughing

David Freitag

20:49

I don't have anything favorited on SE

On any of the sites

schroeder

@MarkBuffalo be nice

Adi

@RоryMcCune OSCP is a little hardcore and deeply technical (0 infosec theory).

Unless you're willing to dive into pentesting, it's usually easy to give up

Mark Buffalo

@schroeder sorry :p

Adi

However, it's fun a fuuuuuck

Just ask @Simon

He's probably having such a great time in the labs

etherealflux

It's a pretty lousy question, but it does illustrate some misconceptions about passwords

AstroDan

20:55

Hey guys, is there a flag for too narrow? security.stackexchange.com/questions/118155/…

etherealflux

so it's still useful in that sense (:

AstroDan

@MarkBuffalo

@MarkBuffalo I saw that as well. I have no idea what to flag it as.

Mark Buffalo

@AstroDan Unclear what you're smoking? lol

AstroDan

@MarkBuffalo I didn't see that as an option. Maybe we need a "Too Narrow" flag, IE the question is only useful to you.

Mark Buffalo

I retracted it because @schroeder asked me to be nice

Ohnana

20:58

@etherealflux upboats for you for mentioning entropy

etherealflux

I should've gone off on a tangent about thermodynamics

Ohnana

@AstroDan that one usually gets the canned response of "help center off-topic"

schroeder

@Adi yeah - OSCP labs rock

TildalWave

@AstroDan we used to have that, along with not a real question but SE has decided to remove those

Mark Buffalo

@schroeder Did you complete it?

AstroDan

21:01

Sadness, any bad question deserves to know exactly why it was killed.

TildalWave

I would say close it as a dupe of some good how to choose a password thread

schroeder

@MarkBuffalo I was really close the first time, then was as sick as a dog the second attempt, and haven't tried again. I want to nail that one, though.

etherealflux

I'd respin it as a question about why it's a bad password. I can see why a layperson would get confused when told this is crappy

It has 20 characters, it has alphanumerics and symbols

Iszi

@MarkBuffalo Considering my local DnD group is a total sausage-fest, not unlike this crowd,I'd rather not.

Mark Buffalo

@schroeder My biggest issue right now is time.

etherealflux

21:02

I mean, you'd get confused if I told you it's impractical to do Sn2 on a primary alkyl halide

(gawd you should know that)

wait, bollocks, Sn1. I'm asleeeep

schroeder

@MarkBuffalo part of the problem is that I have a sleep disorder that makes it difficult to work full-out for longer than 12 hours, so I need to get good enough to pass it very quickly.

Mark Buffalo

@schroeder aw, man. that sux

schroeder

I've heard of people doing the exam in a couple hours

Mark Buffalo

I might fly my mom out here to watch the kids and give my wife a break so I can do it

TildalWave

would be kinda funny to close it as a dupe of this one:

6

Q: Password: ham,ham,ham,bacon,bacon,ham

Why do we bother with dice ware? Is rolling dice and looking up in a printed book (or using a digital analogue) a string of N random words any more secure than simply repeating a word or two N times? According to one online entropy calculator, at one hundred trillion guesses per second, it'd ta...

passwords entropy

Mark Buffalo

21:04

yea, it really depends on how much experience you have

schroeder

@MarkBuffalo just the class and labs is worth it

etherealflux

@TildalWave ah yep, there we go

see, I'd say "meme meat" instead of "bacon". Throws the hackers off every time.

Mark Buffalo

@schroeder Wait. You mean they teach you?

schroeder

@MarkBuffalo yes - offensive-security.com/information-security-training/…

Mark Buffalo

ah

I bought a couple of pentesting books for python so I could learn python

etherealflux

21:06

I need to re-read those. Good stuff, but it slips from memory quickly if not applied

Mark Buffalo

and closed the books after it suggested some super stupid things

etherealflux

lol

they didn't remind you to get some glasses from The Matrix?

Mark Buffalo

For example: "encrypt this application's contents with base64 encryption"

> wat.jpg

etherealflux

lol

so more like obfuscate

Mark Buffalo

They literally call it encryption

To decode base64, I just run it through my anti-base64 program

Yeah, obfuscate

etherealflux

21:08

fortunately, victims running 32-bit machines will be unable to decrypt base64

and thus you will be able to pwn their boxorz

Matthew

@etherealflux No, they can decrypt it - 6 times 4 is 24, which is less than 32, so it's fine. They're doomed with base66 though

etherealflux

@Matthew you fool, base66 turns your computer into a bomb

6+6 = 12; 12 / 2 = 6. 666

Matthew

@etherealflux Why do you think they're doomed!

Mark Buffalo

@schroeder been trying to get my wife into python/pentesting. so if they actually teach you, then that's great. I want her to learn this stuff so we can team up

etherealflux

:28415683

pls keyboard

Mark Buffalo

21:17

@etherealflux zhong guo de?

etherealflux

@MarkBuffalo burrito

Mark Buffalo

my bad

etherealflux

no problemo

gawd, I'm trying to learn to use WinBUGS for computational psychology. The syntax is what happens when you beat R with a socket wrench until it throws up

Mark Buffalo

@Adi Now that I'm home. You're half right, but:

while ((CurrentLine == r.ReadLine() != null)
{
if (CurrentLine.Contains("you-know-what-im-talking-about") && bcrypt.ValidateHash(CurrentLine.Split(' ')[1], hash)) { Console.Log("Found valid password: " + CurrentLine.Split(' ')[1]; }
}

There are a few typos. Can't paste it here.

Adi

21:38

@schroeder I don't buy it

Impossible

Two hours, 5 completely new machines, plus carefully taking notes in order to write the report.

Nope

David Freitag

mmm, yummy Azithromycin

etherealflux

@Adi "It's a computer and I think it has an operating system. Maybe it has viruses?"

Mark Buffalo

@DavidFreitag I love zpacks.

etherealflux

"synergy cloud logistics"

bam, you've got your cert

Mark Buffalo

@Adi Wait. I thought you did it in a few hours?

David Freitag

21:44

@MarkBuffalo wut

Mark Buffalo

@DavidFreitag We call them Zpacks. Well, my doctor did.

David Freitag

@MarkBuffalo 1000mg

Down the hatch

Also got an inhaler (finally)

Mark Buffalo

Damn

David Freitag

Was $50 even with insurance

Damn, past me hit the star wall with a vengeance. Way to go past me.

Mark Buffalo

Yeah, that's worth it.

$50 is usually all you'll end up paying

David Freitag

21:46

I paid $4 for the Azithromycin, lol

Mark Buffalo

So you seem to have the same insurance as me

David Freitag

You have connecticare?

Mark Buffalo

No... lol

David Freitag

...right...

Mark Buffalo

I meant same kind of copays and stuff.

I have the best we can get in this country, apparently.

David Freitag

21:48

I have a $10 copay for doctor's visits

Mark Buffalo

...that you have to pay for.

David Freitag

Scans of any kind past $200 are free

Mark Buffalo

On the rez, I had cutting edge health care for damn nothing.

It was a lot better than what I have now...

David Freitag

I need to stop being a pansy and finish dark souls already

Mark Buffalo

Man. I don't get it. On the rez, people get free education. They frigging get paid to go to college (I did), but many would rather spend it all on BS/drugs and not go to school

David Freitag

21:49

DSIII is out soon

@MarkBuffalo Why do work when you can get a free ride to get hammered?

Mark Buffalo

@DavidFreitag :/

David Freitag

22:01

Holy Cripe Dark Souls 3 is $85?!?!?!?!

kalina

gosh "holy cripe" ?

David Freitag

"gosh"

Rоry McCune

sh

kalina

gosh

David Freitag

OH, no sorry, that's the deluxe edition.

My bad

kalina

22:03

silly

Matthew

@DavidFreitag Golly gosh! You could get simply floods of lemonade for that!

kalina

easy mistake

David Freitag

@kalina Especially with this little sleep

kalina

well that's self inflicted you won't get sleep deprivation sympathy from me

David Freitag

It's not self-inflicted

kalina

22:04

why did you stay up all night then?

Mark Buffalo

@DavidFreitag That must be a... a collector's edition?

David Freitag

2 mins ago, by David Freitag

OH, no sorry, that's the deluxe edition.

@kalina I had no say in the matter

kalina

why not

David Freitag

Even if I laid down now my brain wouldn't let me sleep

kalina

why not

David Freitag

22:06

Because it's an ass

kalina

why

David Freitag

Me: "Ok brain, it's time to sleep.", brain: "No we're going to contemplate the meaning of life instead."

kalina

smoke weed

David Freitag

Smoking in the building is an instant-eviction

kalina

you're in america, surely you can get yourself some diazepam

etherealflux

22:08

@DavidFreitag It's an ass, and we won't be working with it again

David Freitag

They don't fuck around here

etherealflux

just use more memes and you'll be fine

David Freitag

@kalina I got infuriated one time and took half a bottle of sleeping pills

Mark Buffalo

no.......don't.... don't do that

kalina

well that's a bit silly, you want to wake up again

David Freitag

22:10

Got stoned off my ass and still didn't sleep

Mark Buffalo

This kills the Dovid.

David Freitag

I'm just going to buy a bottle of chloroform

etherealflux

chloroform isn't a very good anesthetic

David Freitag

You can get that at a corner store, right?

etherealflux

try ether

or an XL bag of doritos

kalina

22:11

@DavidFreitag nope

don't be so silly

David Freitag

Since Friday I have slept a grand total of 9 hours

Because then I get a sore crotch and a sore arm and I'm sat there bored again

> This album was released on May 2, 2006. 10,000 days later is September 17, 2033. There you have the release date for the next Tool album.

lol

Shit, what's my favorite candy?

Does bacon count?

Gilles

The Bear has been summoned

David Freitag

@Gilles ERROR: Summon timeout. Reason: Sick bear

2

etherealflux

do we have an RFC for medicine-over-HTTP?

David Freitag

@etherealflux Yes, HTTP 418

kalina

22:20

@DavidFreitag the bear is sick?

schroeder

@Adi I'm not sure I buy it either, or what qualifying statements would be necessary, but I have heard it from a handful of people

David Freitag

2 hours ago, by Thomas Pornin

@SEJPM I am on my phone, travelling and a bit sick. I'll look up what iMessage is tomorrow.

Salt water taffy is definitely my favorite candy.

etherealflux

can we try power cycling the bear?

warning: do not attempt to power cycle an actual bear

David Freitag

Herringbone Cat

I like how @SEJPM probably knows the answer to this but is asking to farm rep since it's a salient new vulnerability :)

David Freitag

22:23

@etherealflux That only happens once a year, the bear goes down for regular maintenance a few months out of every year.

Just had another kid stare up in wonder & shout, "Spider-Man!" upon seeing my hoodie. It's goddamned adorable. ^_^ https://t.co/YDsCiLDPls

Tweeted by MANvsGAME on March 15, 2016 at 4:40 PM

cc:\ @Simon

Rory Alsop

@DavidFreitag that isn't a food. It's a thing to catch flies

kalina

the pinned story is excellent

David Freitag

@kalina Yes, nice job @RоryMcCune, always classy :D

I wish I could add a filter to Twitter to block all apple-related crap

Rory Alsop

22:40

I think that functionality is called unfollow

David Freitag

Not when it's literally everyone swooning over it

Happy birthday Twitter! Here's to another decade of cutting off your loyal API developers without notice, warning or premise. #lovetwitter

Tweeted by internetofshit on March 21, 2016 at 7:04 AM

Herringbone Cat

@DavidFreitag the movement away from standards defined by IETF and putting API and control into hands of private enterprise is a shitty direction the internet has moved in the last decade

There's probably at this point far more people making their livelihoods implementing the facebook API, than let's say, implementing RFCs for DNS servers

etherealflux

Oh my god, the other tweets on that account

Bad NY times.

Bad. Go to your room.

David Freitag

@etherealflux Dude internetofshit is fucking great :]

Herringbone Cat

@etherealflux and i thought david pogue was a moron, that is just assenine

kalina

22:54

see

@ThomasPornin is here

David Freitag

Yeah, under duress I bet.

Transcript for