The DMZ

David Freitag

00:00

@Adi Well it's going to depend on your position relative to the transmitter. Ideally you need to be directly inline. It's also going to depend on how large your antenna is.

etherealflux

anyways brb, I need to use some encryption software to reboot into linux

Adi

@DavidFreitag My setup was pretty much this

With this contraption being my "antenna"

Mark Buffalo

@Adi lmfao

David Freitag

@Adi Yeah that was necessary because presumably you couldn't get directly inline with the main ground transmitter

Mark Buffalo

@Adi not encrypted...? Where you are?

Adi

00:02

@DavidFreitag You blew my mind with the idea that you can use a regular antenna

David Freitag

@Adi Yeah check out that Motherboard link

Adi

@MarkBuffalo :D

Mark Buffalo

Also, how are you only getting porn streams? I thought satellites beamed the entire channel list down all at one time.

Adi

@MarkBuffalo Internet traffic

David Freitag

They used last year's DefCon badge to do passive satellite sniffing

Mark Buffalo

00:03

Ooooooh

Adi

Satellite Internet traffic is not encrypted on the link level

Mark Buffalo

I thought you meant satellite TV

David Freitag

@MarkBuffalo eprint.iacr.org/2012/051.pdf

Read that ^

TildalWave

@DavidFreitag yeah OK I get it why "MiTM" might have been a bad choice of words, but I was trying to point out the difference between fingerprinting between endpoints (Panopticlick) and eavesdropping on an encrypted connection (what was discussed before) and that doesn't actually change a thing despite our disagreements on the definition of "MiTM" (which is entirely irrelevant detour from what has been discussed)

David Freitag

> With just the rad1o badge and onboard PCB antenna, you can collect 22 percent of all the packets you can receive with a proper Iridium antenna

Adi

00:05

@DavidFreitag 22% is like 100x more than what I'd have expected

David Freitag

@TildalWave Yeah like I said it's not the mechanics by which the data is collected, it's the way the data is being aggregated and used as a fingerprinting mechanism

@Adi And that's with just a measly little bit of copper on a PCB

Adi

@DavidFreitag Imagine all the porn you can catch with a proper antenna!

David Freitag

A proper Yogi antenna should be more than sufficient to capture all of dat pron

Iridium Hacking ... please don't sue us [cccamp15]

►

Adi

When I was doing that in my teenage years, it blew my mind that there's a website where you submit a link and it adds on a queue. If you wait a couple of hours, eventually you'll grab the file over your satellite sniffing setup

David Freitag

Video demo/talk ^^

Adi

00:08

At the time when I only had dialup, the download speed from the fucking space blew my mind

You give them a link and they send the file to you FROM SPACE!

David Freitag

I would also recommend this talk:

The rad1o - Listen to all the things [cccamp15]

►

Adi

FROM SPACE!

David Freitag

> RF is black magic

So fucking true

Thomas Pornin

@Adi As the joke goes, TCP/IP can tolerate the latency of an Earth-Moon communication, but uucp could work with magnetic tapes transported with a caravan of camels.

TildalWave

@DavidFreitag SDR FTW!

Thomas Pornin

00:19

Unicode defines U+1F473 MAN WITH TURBAN and specifies that it "may be shown with or without a beard".

Apple decided that Xcode needed an update. Let's go for a 4.87 GB download.

David Freitag

@ThomasPornin ԅ( ಠ ‸ ಠ )╮

Simon

00:43

@ThomasPornin This happens constantly, I ended up getting rid of it.

Which crushed my dreams of becoming an iOS dev (fkin_lol)

Mark Buffalo

00:58

@DavidFreitag Neat. I used to be heavily into satellite stuff as a kid

i.imgur.com/LHCvGPA.webm

wtf?

Henry WH Hack

01:43

What just happened?

Adi

07:33

Hahaha

They're not selling stolen PayPal accounts to make profit. They're doing it because they're such nice people who want to make the world a better place

Arperum

07:59

@Adi Not just for te profit, so they are doing it for the profit, and to make their customers happy.

SmokeDispenser

08:16

morning

Lighty

theguardian.com/world/live/2016/mar/22/…

Rоry McCune

mornin' all

Lighty

Belgian airport Brussel got a rather explosive gift this morning

Rоry McCune

yeah I saw the newsflash, does not look particularly good :o/

Arperum

Reports range from 1-11 death

SmokeDispenser

08:20

nah, that's a shitty way to start a day

Lighty

Dutch airports and ROtterdam Central and Amsterdam central are getting military backup too, I think everyone is getting cold feet o.o

understandable though :/

SmokeDispenser

:/

Arperum

Shitty birthday start indeed.

SmokeDispenser

Oh

@Arperum, happy release day!

(try to make the best of it, despite the terror. that's how terror is defeated;))

Lighty

@Arperum oh, well, happy birthday bro, remind me to buy you a pint sometime

and a bomb just went off in a metro station in brussels minutes ago o.o

Arperum

08:25

@Lighty No thank you. I'd take a glass of something non-alcoholic :)

Lighty

@Arperum How bout some refreshing Lipton then? :P

SmokeDispenser

@Arperum, no alcohol?

coffee then.

Arperum

@SmokeDispenser Nope.

SmokeDispenser

or, if you can get your hands on it, "Mischmasch".

Arperum

@Lighty I would survive a cup of tea :)

SmokeDispenser

08:26

@Arperum, me neither:)

Lighty

@Arperum We have some great tea here... Russian Earl Grey, which is earl grey tea with a little bit of lemon, and lavender

SmokeDispenser

mischmasch. Best soft drink ever.

Rory Alsop

Morning all

And happy birthday @Arperum

Have some cake

Lighty

or home-made sushi, best sushi! :3

SmokeDispenser

Hey Rory :)

Matthew

08:38

Morning

Rory Alsop

08:50

Oh dear, now a Metro station in Brussels as well

SmokeDispenser

yeah :/

diagprov

Evening

M'vy

Morning

Lighty

@RoryAlsop 4 of em

and schootings at brussel international o.o

i hope its the police shooting...

SmokeDispenser

@Lighty, the shots were fired before the explosion, weren't they? or are that new shots?

Lighty

09:01

@SmokeDispenser new one, shots before explosion werent confirmed yet

M'vy

Airport and metro now. wow

Lighty

then again, its a huge shitstorm atm

Matthew

it would be really nice if people would stop blowing places up...

M'vy

^

Lighty

rome has level 4 (highest), belgium went from level 4 (highest) to "defcon 5" (SHITSHITSHITSHITSHITSHITSHIT), and the netherlands went from 3 to... 3 and a half?

germany is still sleeping

bilbo_pingouin

09:03

@Lighty well they reinforced security in Frankfurt... if that counts as woken up...

Lighty

the netherlands just reinforced security, by actively enrolling the full Guard and Elite Guard, aling with Marchause (military police elitists) and setting reservists on "standby"

people are shitting themselfs everywhere o.o

M'vy

dammit why the toast for firefox keeps appearing on the right screen ...

bilbo_pingouin

@Lighty to some extend it's a QA thing... if they don't and something happens they'll get blamed. If they do and nothing happens, at worst, they'll be smiled at.

M'vy

ah ok.. primary screen. nvm

SmokeDispenser

@Lighty wow.

Arperum

09:18

@Lighty We went to 4, which is the highest

SmokeDispenser

@Lighty as far as I'm concerned, putting armed forces everywhere is security theatre. I'm fine with the german government not freaking out.

Arperum

@SmokeDispenser More people to blow up... And you're not blowing up random people, you're blowing up those that actually do what you are fighting.

bilbo_pingouin

@Arperum it's actually less effective...

at least in terms of bringing terror actions

Arperum

@bilbo_pingouin I know. But at least you'd be blowing up the "right" people.

bilbo_pingouin

09:34

@Arperum well the metro attack could be an attempt at that...

SmokeDispenser

@Arperum, that is not how terror works. The 'right' people are those which when harm strike fear to the public. If security guards are harms, that is less striking than when people 'like you and I' are harmed.

Arperum

@bilbo_pingouin How? That's also aimed at random people, not at military.

SmokeDispenser

*harmed

bilbo_pingouin

@Arperum a metro in the European Institution area... so aiming at European Officials... at least symbolically

Arperum

@SmokeDispenser I know. I understand the whole fearmongering thing.

@SmokeDispenser You know you can edit your posts? If you are on mobile: press on the post and then press the edit button.

SmokeDispenser

09:41

I know

I usually do, but that was faster; I was on the go, kinda.

SmokeDispenser

10:15

So... everyone is busy today?:)

Matthew

@SmokeDispenser Do you consider "chasing client for access" as busy?

SmokeDispenser

@Matthew, nah.

but usually, the chat explodes with euphemisms by now. just wondering.

Rоry McCune

looks like we have fewer people floating about today

but then yesterday was super busy

SmokeDispenser

yeah

Rоry McCune

I'd stopped trying to keep up with the transcript

SmokeDispenser

10:20

I bailed out in between

It was just too much BDSM;)

Rоry McCune

lolz yeah the conversation got a bit out there yesterday, but hey there were mods here and participating so it can't have gone over any lines :)

that's my theory anyway...

SmokeDispenser

I didn't want to kill my mood for the session I had planned in the evening. But my sub got a screenshot of the transcript in between and had fun reading it, too;)

right.

I realized this morning that because mods are so casual over here, we might tend to not take them seriously. But then again, most mods here do not mod-close questions but vtc, so they tend to participate as users, not mods.

Rоry McCune

yeah the mods here are pretty relaxed, although they do have limits, it's just less likely that people will test them

Lighty

@SmokeDispenser It may sound weird, but the users in this room know when to take a mod seriously, and when it's just "The DMZ"

SmokeDispenser

@Lighty, I know.

Lighty

10:24

except @AviD, no-one takes him seriously

SmokeDispenser

We had such a instance with Brent yesterday

bilbo_pingouin

@SmokeDispenser not sure what you mean there... mods' VTC is always binding... so unless they vote last, they can hardly participate as normal users

Matthew

@SmokeDispenser He was on here?

SmokeDispenser

@bilbo_pingouin, I've seen a few closures by blues that didn't bind... wait, I'll go check. Maybe I was mistaken

AviD

@RоryMcCune well, as some have pointed out, several of our mods tend to drift over the line from time to time, eventually catching themselves and pulling everyone back in.

I'm looking at you ^, @RoryAlsop ;-)

SmokeDispenser

10:26

@Matthew, no. But the blues have stopped the discussion.

It was @AviD: chat.stackexchange.com/transcript/151?m=28403956#28403956

:D

Matthew

Anyone want to VTC: security.stackexchange.com/questions/118222/…

AviD

not me, I'm busy buying alchohol.

Rоry McCune

@Matthew just did :) as well as pointing out that it's their site and if they want to block him they can ...

Matthew

@RоryMcCune Yeah, did you see the response to that?

i dont want a stupid answer. answer my question or be quiet. — Crypt 1 min ago

SmokeDispenser

@Matthew, cannot, just yet.

Rоry McCune

10:29

@Matthew ohh nice :)

SmokeDispenser

But am making progress towards the 3k:)

Lighty

@Matthew what a rude ass

SmokeDispenser

haha

edited

he has a point with the edit, though.

Matthew

really nobody needs smart asses who dont have a clue. i want to protect my privacy... somehow my identity is not protected when a website is able to identifiy me. — Crypt 2 mins ago

SmokeDispenser

But deleting cookies is not what I'll suggest. He shall not pass;)

yeah. I flagged as rude.

Rоry McCune

10:31

@Matthew I managed to restrain myself from answering suggesting that he ask for a refund from Sec.SE for his subscription fee.

SmokeDispenser

@RоryMcCune :D

btw, I realized I sent a cv-pls here yesterday.

... I guess we are not supposed to?

Rоry McCune

@SmokeDispenser I missed that, you talking about hiring and stuff?

SmokeDispenser

ah, no.

on SO, there's a room dedicated to clean up the mess

Rоry McCune

hey @AviD can you ban our friend with the website question he's just randomly swearing at people now. security.stackexchange.com/questions/118222/…

SmokeDispenser

they have a chat convention to send a message like this... wait, I'm generating one for my Q

cv-pls Example reason why this should be closed How to spare file server data from being held hostage by client ransomware? - SmokeDispenser - 2016-03-16 16:51:49Z

Matthew

10:36

@RоryMcCune He seems lovely. I think I'd avoid supporting him too...

AviD

@RоryMcCune alcohol first!

done now though. They will deliver thursday afternoon.

I love this site.

Rоry McCune

@SmokeDispenser ahh I see, I don't think we have such a convention, but I'm not sure if that's cause it's not been needed or we avoid it...

SmokeDispenser

If a questions should be closed. There's a user script to send that when flagging - I did check the box by being used to.

but I guess we do not need that

Rоry McCune

yeah we're quite a quiet little site when compared with SO...

SmokeDispenser

on SO, it's a way to fast track cvs past the 8k Qs in the queue

but that's probably not neccessary here:)

Rоry McCune

10:38

I've always wondered why they don't try to split SO up, perhaps along language lines

it seems that it must be really unwieldy

SmokeDispenser

it is

also, it's pretty frustrating

look at my rep. Or reach, compared to SO

diagprov

@RоryMcCune I don't disagree, but I can see that being difficult sometimes, e.g. languages that run on .net, languages that run on the jvm

You'd probaly start a war about whether C++ is a superset of C or not...

SmokeDispenser

I thought maybe closing SO down completely might be useful.

diagprov

but it would certainly help if moderation could be filtered by areas a bit

SmokeDispenser

because most things are covered elsewhere in the network now.

Also, they have a bad mod/shit ratio.

Journeyman Geek

10:41

@RоryMcCune would be messy...

Rоry McCune

@diagprov yeah there's not a clean split but it seems like that would be the best option of a bad bunch, then they could leave the remaining questions on the "legacy" site...

SmokeDispenser

there are always flags to handle, I hear:)

Journeyman Geek

like what happened with MSE

Rоry McCune

@JourneymanGeek oh undoubtedly, which is why I guess they don't do it, but I can't imagine what trying to be a mod. on SO must be like..

Journeyman Geek

SU occationally has people flagging on topic questions for migration

I typically reject those.

SmokeDispenser

10:42

all right. I'm off for lunch

see you later:)

Rоry McCune

o/

SmokeDispenser

(I'm trying not to set the checkbox in the future. It's a habbit still. Will get better:-))

diagprov

@RоryMcCune probably it is a lot of hard work

SmokeDispenser

@diagprov, so I hear.

diagprov

they have all sorts of stuff to deal with, sockpuppets, voting rings, all kinds of stuff

SmokeDispenser

10:44

off now :)

Journeyman Geek

@RоryMcCune the flag queue is pretty huge I am told.

SU... something like 20 flags is a busy day

This is a rediculous movie. Fight scenes are awesome tho

Matthew

@JourneymanGeek Shoot Em Up?

Adi

Oh for fuck's sake! Not fucking again!

I hope you Belgian guys are all safe

Journeyman Geek

Chocolate (2008 film)

Chocolate (Thai: ช็อคโกแลต; rtgs: Chǫkkōlæt), also known as Zen, Warrior Within, is a 2008 Thai martial arts film starring Yanin "Jeeja" Vismistananda in her debut film performance. It is directed by Prachya Pinkaew, with martial arts choreography by Panna Rittikrai. It also stars Hiroshi Abe and Pongpat Wachirabunjong. == Plot == Zin is the Thai lover of Yakuza boss Masashi. Zin was previously the girlfriend of Thai gangster No. 8, who was jealous of her relationship with rival gangster Masashi. After Zin chooses Masashi, he shoots his own toe as a symbolic gesture and forbids Zin from ever seeing...

Arperum

@Adi I am, and I think all people I know in Brussels are too. Including friends and my sister.

My concentration is a disaster though.

Adi

10:52

@bilbo_pingouin No!

It's a clear and straightforward attack on civilians

Any attempt to make it sound like it was a military action is 100% retarded

Journeyman Geek

@Adi by people who just want to fuck it up for the poor folks who actually want to lead quiet productive lives

bilbo_pingouin

@Adi either you are mising the context... or missing perspective. I never wrote it was a military action. However, terrorists actions sometimes aim at special and symbolic targets.

Adi

> Any attempt to make it sound like it was a military

Even slightly remotely

Which is what you're trying to do

bilbo_pingouin

In Paris, they attacked a concert place, restaurants and a sport place. That was symbolic.

Journeyman Geek

@bilbo_pingouin they try to hurt as many people as possible and go for soft targets

AviD

10:56

jeebus what you guys talking about

Arperum

It was also just places where a shitton of people were gathered together.

Adi

@bilbo_pingouin Ha? How is that symbolic? That's simple pragmatism to achieve the highest number of casualties and maximum fear impact.

Arperum

@AviD Three explosions with 20+ death in Brussels.

Journeyman Geek

cause they're cowardly shits whose mothers should be ashamed they spent 9 months to poop em out.

bilbo_pingouin

I don't know Brussel, but an explosion in a metro station within the European zone, close to the parliament...

Arperum

10:56

@bilbo_pingouin In the middle of the bloody peak hours.

bilbo_pingouin

@Adi no it isn't.

Arperum

@bilbo_pingouin It is.

AviD

@Arperum why is @Adi saying that was a military operation??

bilbo_pingouin

Nope.

Arperum

@AviD He is saying it absolutely wasn't.

bilbo_pingouin

10:57

Get your facts right.

AviD

@Arperum why is he saying that?

as in, why does it need to be said?

isnt it painfully obvious to anyone?

Arperum

@AviD Because @bilbo_pingouin is saying that it was targetting at symbolic things.

Not just wherever most people were gathered consistently.

AviD

@Arperum hmm, dont see why that is contradictory.

terror is terror.

terrorism isnt always about the maximum number of deaths, it is most kills in the most visible, terrifying way possible.

bilbo_pingouin

If they only aimed at random place to maximise the number of victims, they suck at it. But do continue to live a nice dream.

Transcript for