« first day (1938 days earlier)      last day (3240 days later) » 

16:01
@M'vy yesss
@MarkBuffalo OMFG.
welp i'm not hungry any more. also i'm going to strategically place myself near a trash can
Dude, I was supposed to rent a house from a guy named Travis.
He wanted me to meet him somewhere. It was so weird
@Ohnana yeah just wtf times a billion
Sovereign citizen? Ffs
All of that shit
16:21
One does not get to pick and choose laws like one is buying eggplant...
Agreed. But there's crazies who actually believe that you can
view from my office window
I'm Free I'm Free!
@RоryMcCune
@RоryMcCune For a second there, I thought the deer was wearing a kilt
Nice picture, man.
@JukEboX heh
16:35
^_^
We had a lot of deer back home
@JourneymanGeek I got the ability to ask questions again.
@MarkBuffalo yeah they start coming from the hill around this time of year and eating stuff in the garden. I wouldn't mind but they drop ticks which the cats then get on them
The only deer I see these days are on the side of the road :/
@RоryMcCune Yeah the ticks are horrid. Oh how I hate those
@MarkBuffalo yeah we put frontline on the cats so any that bite them die, but unfortunately there ain't no frontline for humans
16:38
I don't know if ticks are the same in Scotland, but here they cause Lyme Disease
awwww yuss
@RоryMcCune That would be great
Airgas brought chicken parm and sausage for lunch
@MarkBuffalo in some places but AFAIK there haven't been any cases round here, so I'm hopeful it's not in this area
I also hope not. I hope ticks become extinct, along with Mosquitos
16:42
@RоryMcCune Get your shotgun, you can have bambi for dinner
It's going to be veal tonight! Only 300 more hooves for Nessingwary's Ivory plated hunting rifle!
I'll ivory plate your hunting rifle, if you know what I mean.
@MarkBuffalo Don't try to be like you don't enjoy it.
Fucking network deives keep disconnecting
Annoying as shit
@DavidFreitag Sounds Suspicious
16:56
@MarkBuffalo No, our network is fucking shit
@RоryMcCune //cc: @schroeder (Since we were talking about this last week)
God I am soooo bad at VBA :P
@Xander yeah - I saw that and updated the question
@DavidFreitag Sounds... uhm... gross?
@schroeder Too bad, though given who ran it, I can't say I'm surprised.
17:04
@Xander What happened?
@DavidFreitag OSVDB was permanently shut down by its maintainers.
@Xander Why did they do that? Something happen?
@DavidFreitag Apparently it was "the industry's" fault for not "supporting" (funding) them enough.
Adi
Adi
@DavidFreitag Fuckers in the community
@Xander wat
17:08
@Adi psssst - we ARE the community .....
:)
Adi
Adi
No, really. OSVDB tried to be better than MITRE
I really appreciate the team behind it
To be honest, it's partly our fault as well
We have huge boners for CVEs
2
@DavidFreitag @Adi The goal was always to monetize it, AFAICT. it was open-source in name only, with a few exceptions. So, it looks like they've finally decided that nobody really wants to pay them to maintain it, and they've shut it off.
@Adi They never really wanted the community's help. They wanted the community's money.
Well did they provide a valuable service?
Adi
Adi
@Xander Well of course they need the money
@schroeder poke
17:14
i've never heard of OSVDB
@Ohnana Me either
Me neither
Adi
Adi
Ever used Nikto to scan web applications?
I use, ahem other things.
@Adi I've never scanned a web application.
Adi
Adi
17:15
Web servers
web applications
Those either
Adi
Adi
@MarkBuffalo Of course you do
and they're under NDA
@Simon CC
Anyway, that's how I heard of OSVDB
@DavidFreitag IMO, yes, there was value in what they did. Not enough though.
@Adi i used nikto like twice
Adi
Adi
Nikto reports some findings referenced in OSVDB
17:16
and then switched to other tools
Adi
Adi
Like what?
nikto is really useful, in that it can find some good stuff and isn't a big overhead to run
Adi
Adi
Nikto is fantastic to find default directories and files, too much HTTP methods, basic headers
@Adi huh?
Adi
Adi
nikto -h something.com
and leave it in the background while you do some other stuff
@RоryMcCune +1
17:18
@Adi yeah - it's great
@Adi I often run it as the first pass on a site
for me the challenge with OSVDB is the name strongly implies "Open Source" but it doesn't seem to be (no access to data), so they probably shouldn't have used that name
but if they're not getting paid (and even if they are really) it's down to them whether they wish to continue or not and if they don't they can shut down...
@RоryMcCune Yup.
Adi
Adi
@schroeder I do the same as well. It's really good to get an idea what's up.
@schroeder @RоryMcCune Heard of Sparta?
It takes care of the grunt work
Runs nmap. Finds 80? Runs Nikto
Finds 21, checks for anon and runs a basic wordlist
Finds 22, checks the banner
Pretty neat little piece of software
@RоryMcCune Correct. Would have been nice if they had offered what where there either up to the public domain, or at least called for new maintainers, but I have the feeling they didn't want anyone to get to continue using it if they weren't going to get paid.
17:21
@Adi yeah I've seen quite a few pen. test automation tools, only heard of sparta never used it. If I did a load of externals I might use something like that, but I tend to just run my own scripts :) did an external last couple of weeks and ended up updating 3 or 4 scripts and writing a new one during the test
Adi
Adi
The cool thing about Sparta is that it uses the tools we already know and use
We run nmap and run nikto and dirbuster anyway
I learned about it while doing OSCP
@Adi surprised we've not seen a new dirbuster clone, it's not been maintained in quite a while...
Adi
Adi
Started using it in customer assignments afterwards
There's dirb
Slightly less outdated
Oh, looks like Dirb is already bundled with Kali
I want one! (da puppy :3)
@DavidFreitag aww that's a cool idea
@Adi Oh yeah? I'll give it a go, cheers.
> 44 Cores. 88 Threads. Marty, where we’re going, we don’t need roads.
I freaking love BOXX
@DavidFreitag tehe
Although the boxxtech site takes foreeeeever to load
hnnng
that looks like a mac from 5 years ago
hnnng is inappropriate
@Ohnana That's a CAD model
> Basic Configuration

Intel® Xeon® E5-2650v4Turbo Mode up to 3.6 GHz Turbo
12 cores 2.2 GHz 24 Total Cores
32GB DDR4-2400
1 NVIDIA Quadro M5000
240GB SSD
20X Dual Layer DVD RW
Windows 7 Professional
> Configurable with up to two Intel® Xeon® processors for a total of 36 cores (72 threads) and up to five dual-width GPUs and a sixth single-width GPU, APEXX 5 is the world's most powerful workstation, ripping through rendering and simulation tasks with ease.
oh i see
The fucking base model has 24 cores
18:08
rip chat
I see you guys are sharing pictures of my computer
0
Q: Android Malware Dataset

Vaibhavi KalgutkarI am working on a project to identify the author of the malicious apk. To test my results I need dataset of malicious apks along with their authors. Currently I am working on a dataset which is very small. Could anyone please suggest some resources so that I can have a good amount of malicious ap...

18:26
@MarkBuffalo your new linkedin photo is cheesy as fuck. +1
Thanks...
Last one wasn't very professional. This one is supposed to be. Disagree?
I don't like the filter
no warm tones
it's great that it's full face and smiling
but it looks cold
Cold?
Hmm, we'll it's cold here.
@MarkBuffalo Yeah it's definitely professional, but it looks like it was taken with one of those petrolium jelly porn filters
Lmfaooooooo don't do this to me at work I'm suffocating from trying not to laugh
Well I'm sorry. I didn't mean to look like a pornfessional.
18:35
@MarkBuffalo (◕ᴥ◕)
@schroeder So warm it up?
@MarkBuffalo yep
@schroeder Is it anything that could hurt if I just leave it there?
As it is
@MarkBuffalo yeah, actually, I'm not sure if I have the evidence on hand, but your photo is "overlookable"
you want a full colour photo with warm tones
18:50
Eevenin' guys
@schroeder Okay, that's just awful. Will do
Im setting up a small mail server for dad on his NAS, and quick question, POP3 or IMAP, and with SMTP, SSL, TLS or both?
@Lighty watcha' well IMAP is generally more flexible than POP3 and TLS/SSL is a good plan in general. However if you're using it for Internet mail be aware that a lot of the big boys don't always play friendly with home-run SMTP servers and you may have problems getting them to take mail from you without marking it as spam...
@RоryMcCune Alright, sounds fair
its basically used as small buisness mails server
@Lighty you can set things like DKIM up to make them more likely to talk to you
18:54
he used to run one for 15 years-ish on a older windows server, never had problems to be honest
alright, took a note of that, gonna google what that is though xd
@Lighty another thing to google is SPF
noted... also, SSL, TLS or both for the SMTP setting?
whilst I've by no manner read it all this doc. skrilnetz.net/setup-your-own-mailserver seems to cover a lot of the stuff
aahh
wait
SPF
got a line here in the DNS of my test domain: "v=spf1 mx include:zoho.com"
fastmail.com/help/technical/ssltlsstarttls.html <-- that seems to cover you on that
I've not set an SMTP server up for a veeerrry long time, so I just know about some of the problems, not how to solve them :)
18:58
Im on a Synology NAS here, so getting it to work is half the poroblem
the SPF is easy to set up according to that lovely tutorial of yours
setting up the DKIM on the Synology is prolly the hardest thing for now I beleve
Thanks for the help @RоryMcCune :3
+1 pint for you
@Lighty no probs, good luck with the mail server :)
@Lighty I read this as, "I'll pray for you"
@RоryMcCune I read this as, "I'll pray for you"
@MarkBuffalo hey marrrkkkkk
do you like pina coladas?
and getting caught in the rain ?
No. Don't drink alcohol
19:06
wow :<
I'm sorry I missed this question before it got upvoted
17
Q: Which topics should a security training for non-IT persons contain?

hamena314(I am not sure, if this question fits the security.stackexchange-board, but the list of askable topics does not exclude this question imho and there are some examples) I've worked for several different companies of which some had outsourced their IT-department. This means that the people at the ...

Why? You can provide a better answer
@MarkBuffalo it needs to be rewritten - it's WAY too broad
0
Q: Is it easy to protect against SSI injection?

user328950SSI injection is, to the best of my understanding, the process of injecting commands into user input fields, e.g. "<!--#exec cmd="ls" -->" to get the files in the current directory. However, while seemingly powerful, it also seems incredibly easy to prevent by simply validating input fields. F...

wtf is this
this person has done 0 research
Social Security Income injection?
@schroeder Indeed
19:20
@schroeder heh
I like the fact that my code has survived 4 months of testing so far
19:47
Just scarfed down 4 hamburgers. One burger per mouthful
Oh yeaaa
@RоryMcCune You know how I was saying that I didn't generally get stressed during IR work? Can I retract that please...
@Matthew step 1: breathe
@Matthew oh dear :( yes you can retract that and join the club of "stressed by IR" people...
@Matthew step 2: read the messages
@Matthew step 3: actually read the messages this time
@Matthew Incidence Response?
19:49
One of these days, I need to build a laptop dock that wraps around all the vents and has a fan with an exhaust pipe that runs to the outside of the house. Damn thing's like a space heater!
When we have asked for specific information for 2 days, and it has not been provided, then client gets arsy about us not telling them things about this information, I get somewhat annoyed
@MarkBuffalo Yes
@Iszi yeah and laptop fans are always small, so noisy too
@RоryMcCune Noisy at the "laptop fan" level I can usually deal with. They're certainly quieter than a number of desktops I've had. Though they do have the disadvantage of needing to be much closer to you - i.e.: you can't stuff it in a corner where you won't hear it so much. It's not like the laptop itself gets too hot, either. Maybe a little warm in some spots. But the issue is that it just generates so much heat, and all that heat just gets vented into the room.
@Iszi ahh see my desktop is likely quieter than my laptop as it's got much larger fans which spin slower, the laptop on the other hand I can hear when it spins up (which is alot). The heat problem is easily solved though, move to Scotland, it's nice and cool here, so computer heat is welcome :)
I think my big issue right now is that I do all my teleworking in a VM. And that tends to kick the heat generators up a bit.
Doing the same things without a VM, the fans would probably be sleeping.
20:00
Use a laptop cooler. I needed it in Vegas, and also in Southern China. They go underneath the laptop and really help.
@Iszi yeah running my testing VM is what generally kicks in the fans for me, which is pretty much all of the time.
@MarkBuffalo How's that really help? The laptop doesn't generate any less heat, the cooler just moves the heat away faster. And, ultimately, that heat still ends up reaching ambient air. It's the increase in ambient temperature that's annoying me.
@RоryMcCune I consider myself fairly chill-resistant for a Floridian, but this is probably how I'd be in Scotland:
@Iszi ah, right. Gotcha.
@MarkBuffalo Hence "exhaust pipe that runs to the outside of the house". Like some houses have for laundry dryers and such.
@RоryMcCune have three VMs running 24/7 sometimes in the desktop. Maybe that's the cause of my electrical bill
@Iszi You're in Florida?
Or just from there
20:05
@MarkBuffalo Both.
Can we be friends then?
@MarkBuffalo yeah my desktop runs vms without me even really noticing, laptop is a different game
@Iszi heh, well we're not quite @Simon temperatures here...
@MarkBuffalo Hm? I thought you were out west somewhere?
@Iszi not anymore
I'm in Detroit
@MarkBuffalo I'm in Florida. That's still "out west", relatively speaking.
Ok, @RоryMcCune. Now you've got me frustrated. You had me thinking of Cool Runnings and I still can't find the scene I really wanted to post.
> [Sanka reveals a hot water bottle nestled under his shirt]

Derice Bannock: I can't believe you're still cold, mon.

Sanka Coffie: Cold? I'm freezing my royal Rastafarian nay-nays off!
20:17
@Iszi Envy
20:29
OMFG... $1000 for a cable
well fools and their money I guess
@RоryMcCune Maybe I should buy some on ebay for 50p each, spray them gold, then sell them for £50, as "budget high-end"
@RоryMcCune You had that one recommended on YouTube too?
@Matthew that'll work
@Iszi yeah :)
@silverpenguin Great one. Actually, straight to the pub.
'evening :)
what can we do about this? I just did a rollback because OP edited "[solved]' in the question's title.
It's the "how secure is" antipattern. does that warrant a cv?
20:46
well, it doesn't really have a specific scenario attached to it
i would close it
@SmokeDispenser I VtC'd as too broad. But feel free to pick unclear or opinion-based.
@Gilles, have you clicked? no answer.
just edited to "solved" after a link in comments
(that is no exact dupe)
@Iszi I did follow that
@SmokeDispenser ah, ok, then I don't think there's a help article for that
right, I left this comment.
@LesleyTYap, this is not a forum. If your question has been answered, please either flag it as a duplicate, delete it or write an answer yourself, do not edit the title to "[solved]". — SmokeDispenser 9 mins ago
20:50
but you can still link to that and explain that we don't edit the title, we mark an answer as accepted, and that can only be done if there is an answer, and if he solved the problem by himself then please post an answer
is [self-answer] a shortcut in comments?
well, that probably applies then.
260
A: Add data.SE style "magic links" to comments

balphaMost of these now work. My comment below has the following markdown source: On [main], you are expected to write proper English (as advertised on [english.se]), but here on [meta.se] it's more important to have freehand circles, so please [edit] your post, otherwise I'll have to flag you (see...

no
Wow Tilda blocked me on twitter.
and there's no delay for self-answers anymore, I'd forgotten about that
.@dvdfreitag Would you stop helping that SE chief hick spreading lies about me? Wanna know what happened behind closed doors? FA happened!
20:54
@DavidFreitag what'd you do?
.@dvdfreitag There was no "misinformation" that I was spreading. Session invalidation doesn't work for reasons I explained, Shog knows it.
@SmokeDispenser I think he means "Fuck All happened"
@SmokeDispenser F**K all is the usual meaning in idiomatic english
that makes way more sense
20:58
I really wish he would've given me a chance to DM him before he blocked me
But oh well, classic Tilda flying off the handle
@DavidFreitag Yes you did.
@Iszi No, I didn't.
People asked why Tilda got kickedbanned for a week
So I told them what happened
@DavidFreitag That's not what I'm talking about.
And Tilda calls that "spreading lies"
@Iszi Then what are you talking about?
@DavidFreitag <--- This
21:02
@Iszi Please stop, I'm already upset about this.
@DavidFreitag, you get easily upset by drama or banning?
@SmokeDispenser I'm not easily upset. I'm upset because Tilda accused me publicly of telling lies. I told it as I saw it.
Then, after accusing me, he blocked me so now I can't even have a discussion about it with him.
@DavidFreitag Seriously, when did you first notice that we could edit messages to "reply" to things that were said after the message was originally posted?
@Iszi The day I started using chat?
Early 2013 if memory serves
@DavidFreitag Are you calling me slow?
21:05
@Iszi Well I certainly implied it loudly
@DavidFreitag yeah, that is kinda frustrating.
I would at least like to have a chance to clear the air.
Just let it go ;/
btw, dang, that tweet did not lead me to rep cap today
@DavidFreitag Can confirm. He isn't easily upset
21:06
I told the folks about it at Sex.SE and linked them to chat to let them draw their own conclusions.
@DavidFreitag Sorry. Taco Bell for lunch.
so it'll have to wait till tomorrow that my sec.SE profile overtakes my SO profile:-)
@Iszi I'm really not in the mood for this.
@DavidFreitag Hey, I'm just trying to lighten it up.
@SmokeDispenser Oh, come on. It's no fun if you drop the veil of euphemism altogether.
@DavidFreitag there actually is a sex.se motion on area51.
21:08
Better. Thanks.
@DavidFreitag Wait a tick... we still have a Sex.SE? I thought that got shitcanned?
@SmokeDispenser @Iszi Sex.SE = Space Exploration
@Iszi nope, not currently. but there is a motion for it on area51.
@DavidFreitag Ah. Please use caps or something to remove ambiguity next time. Like SEx.SE or S-Ex.SE or something?
@Iszi No, Space Exploration is the OG Sex.SE
@SmokeDispenser No, I'm fairly confident it got as far as private beta already, and then they quashed it.
@DavidFreitag I'm fine with "the OG Sex.SE" or "OG Sex.SE" too. Unless OG is "Old Grandma". Then that just gets weird.
21:11
@Iszi yes, two times.
@Iszi now, another one.
@SmokeDispenser Wow. Same founders re-trying, or is it a different group every time?
I don't know.
@SmokeDispenser Are all three still on A51?
@DavidFreitag @schroeder Better? I updated it with "warm" colors. Tldr: got rid of the filter
21:16
@SmokeDispenser So, it looks like SE has had Sex twice, with different people each time, and they're going for a third round with someone new. In short, SE is a slut.
oh, if three makes it a slut...
.. am I some kind of slut squared?
;)
@SmokeDispenser Well, the first two times involved over 200 people each.
@Iszi professionals, too.
@SmokeDispenser Fair point. That's not slut. That's desperate.
21:21
Oh look
Le sigh. Apparently I suck at starbaiting today. And threadjacking.
Sorry @DavidFreitag. I tried.
please stahp
drop it
@MarkBuffalo that.
any ideas on the linked comment?
@SmokeDispenser BTW: I disagree with the assessment in the top definition there. FA most certainly can be a "fetish". Perhaps not according to the DSM, but it most certainly fits within the common vernacular.
Oh, hey. Apparently DSM-5 would cover that.
well, DSM is kinda strict with the definition.
as long as there is no negative feelings about it, it's not considered actually covered
(or do I mix up stuff there?)
21:32
Ah, it looks like DSM-5 would not consider FA (in any form) as a fetish. If anything, it could fit into the realm of paraphilia. Probably categorized under Morphophilia.
BTW: I think it's safe to say that the List of paraphilias page on Wikipedia is not for the squeamish.
Joy of joys...the car may have decided to give up the ghost. Good big puff of smoke and now it won't go more than 200 yards without the temp gauge redlining
So I'm sat here for the next 50 minutes waiting for the rescue truck....
@RoryAlsop Well, we've just come across some interesting reading material if you're bored. ;-)
Oh?
I haven't yet scrolled back through the transcript
@RoryAlsop You don't have to go far. It's immediately before your first post just now.
@RoryAlsop Well that and Tilda + Shog dragging me into an argument on Twitter.
21:36
Also, apparently Firefox's spellcheck doesn't like "paraphilia".
@RoryAlsop Please feel free to delete all of that twitter mess above, I keep dragging drama in here.
@RoryAlsop Is "give up the ghost" a common expression in Scotland?
That's very Old English right there.
@MarkBuffalo Dunno what you're talking about. I've heard it a good number of times on this side of the pond.
I haven't heard that in over 10 years.
It's so rare
It's not extremely common, but I wouldn't call it obscure.
21:39
It's incredibly obscure
:)
@MarkBuffalo I dunno about Scotland, but I hear it a lot in England when I'm there.
I like it.
Eh, @DavidFreitag, what's all this Twitter crap?
@Shog9 I have no idea. Tilda decided to rant, I'm not going to reply to him.
Apparently me letting his friends over at Sex.SE know not to expect his return is recognized as spreading lies.
Huh. Couldn't figure out what set him off.
21:53
@Shog9 I'm not entirely sure, he is a titch unpredictable. Presumably he is un-kickbanned and read the transcript revealing that I reiterated what you said.
I tried to link anyone who asked to the the chat so that the could draw their own conclusions, but I guess I failed at that.
sssssssssssssssssssssssssssssssssssssssssiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii‌​iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii
@DavidFreitag I'm not sure banning actually prevents you from reading the transcript - it's public after all. But even then I think you can still read it when logged into the SE UI.
alright
I think I've had my fill
@diagprov Well, at any rate he feels betrayed about what I had to say.

« first day (1938 days earlier)      last day (3240 days later) »