The DMZ

Lighty

07:20

-1

A: How should I tell school that they are vulnerable when I wasn't given permission to check?

Just type up summary of vulnerability, add name of school, city, country, etc.. and put text file on pastebin. Then tweet url @LizardLands

what the actual fuck

M'vy

Morning

Rоry McCune

mornin'

Lighty

Morningz

HamZa

07:58

morning

jeetZ

09:34

Hello

Can any body help me with this question "image is not visible in Created Multi-Sheet Excel Workbook from Apex"

Rоry McCune

Hi @jeetZ so this room is nominally related to security stack exchange

your question sounds more like a server fault or maybe stack overflow question...

jeetZ

Its related to generation of excel using apex and Vf

Rоry McCune

hmm perhaps Super User

that's likely best for Excel things

so you'll likely do best by asking in their chat room...

jeetZ

yes

ok thanks

Lighty

11:43

0

A: How much faster does a GPU or FPGA crack an RSA key compared to a CPU?

The question is odd, as in easy why ask it. I think that's why people are confused. A single 4u server with a FPGA back plane can replace an entire datacenter of CPU's. Somewhere around 10,000 - 1. Start looking at openCL and the password haze project. That combined with clustered resources is ju...

flagged ths awnser, but maybe its an idea to close the question itself off with a repcap of 10 or such to prevent bullshitty awnsers

bilbo_pingouin

@Lighty the OP is quite snappy as well... when, IMHO, their question is way too broad as it stands

I might miss be missing the point entirely, but bad questions and bad answers... :-/

AviD

12:09

really? I think the question is very clear and specific.

not sure why the answerers keep missing the point.

though yeah, the OP is pretty snappish.

SmokeDispenser

hey @AviD

AviD

hola

SmokeDispenser

sup, dude? any brent new news?;)

Oh, and while we're at it...

AviD

@SmokeDispenser pfft not really tracking... avoiding, if anything

bilbo_pingouin

@AviD clear yes, specific? I mean there are many types of FPGA, GPU and CPU on the market... either you'll get many partial answer, or a book.

SmokeDispenser

12:15

@AviD, any idea what I could've done differently here

?

AviD

@bilbo_pingouin sure, many types, but so what? the q made it clear they're not looking for a specific number.

e.g. compare the same question but with "SHA" instead of "RSA".

straightforward answer, even without a specific number.

bilbo_pingouin

@AviD then a question starting with "how much" is probably not a good idea.

SmokeDispenser

@AviD can you move this discussion to chat?

AviD

@bilbo_pingouin thats a good point, but a small edit could fix that witout changing the intent of the question.

SmokeDispenser

wow, I am getting fed up with comments being used as a forum.

what's wrong?

@SmokeDispenser nevermind, avid. that'll be roomba'd soon anyways.

AviD

12:20

@SmokeDispenser not sure what jas is referring to, but what do you mean about done differently?

seems a good answer, but then I"m not a cryptobear.

SmokeDispenser

I mean my maybe too snappish reply. I'm always upset when comments are used to ask new questions.

Also, WTF does op ask if he knows the answer? -.-

people, sometimes.

bilbo_pingouin

@SmokeDispenser jas isn't the OP...

SmokeDispenser

I know

still, he's posting a follow up question in the comments.

bilbo_pingouin

I don't see it...

SmokeDispenser

well, I was unclear there. potential OP.

not Op of the Q that I answered, the OP of the Q that should be asked as a Q, not in comments.

bilbo_pingouin

12:25

ah... you mean jas as potential OP is asking a question in the comment to which they know the answer?

SmokeDispenser

right

bilbo_pingouin

ok... rhetorical question?

SmokeDispenser

stupid one.

with no point to it - iff he actually knows the answer

bilbo_pingouin

they often are

jas point is that the hash of random isn't sufficient, and therefore some people take the long way of implementing an RFC to make really good passwords

basically they (jas) know that some people spend a lot of time designing password generators, and although isn't 100% sure to be able to explain the reason in a comment, is convinced that those are not just wasting their time for the sake of it... and that there has to be a reason for it.

SmokeDispenser

12:47

well, for one, he's confusing key and password, naming PBKDF.

bilbo_pingouin

I don't say he's right, I'm just explaining the argumentation :)

SmokeDispenser

well, I get that - yet, if he is confused, I'm happy to explain it in an answer to that Q, not in comments:)

AviD

@SmokeDispenser I dont think you were too snappish, but that commenter was not the OP.

@SmokeDispenser no he wasnt, he was askign a rhetorical question, as a form of proof.

just that his point was misplaced.

SmokeDispenser

26 mins ago, by SmokeDispenser

not Op of the Q that I answered, the OP of the Q that should be asked as a Q, not in comments.

AviD

hehe, now I see @bilbo_pingouin already said what I just did.

SmokeDispenser

12:51

yeah

AviD

@SmokeDispenser he doesnt know he's confused

@SmokeDispenser and the whole point of pbkdf is to conflate between password and key.

SmokeDispenser

exactly

AviD

p.s. @SmokeDispenser one other important (yet often forgotten) aspect of secure passwords is the human side - ie. memorable. (password managers are used to cover this lack, and actually remove the "something you know" part).

SmokeDispenser

@AviD, that's why I linked the XKCD Q

AviD

I know :-)

but you didnt actually say it :P

SmokeDispenser

12:57

yeah, all right. editing...

Rory Alsop

Afternoon all

RoraΖ

Morning

Rоry McCune

13:12

@RoryAlsop watcha

Iszi

@AviD They don't remove the "something you know". They just shift it. Arguably though, they also become "something you have" in the process.

Too damn early in the morning to be typing.

AviD

@Iszi yes, that would be more accurate. and yes, agree about the something you have.... ish. strictly speaking, you and I can both "have" the something at the same time - so uhh no, I dont agree. just about the shift known something.

@Iszi yes, this.

also, running out to owasp meet and beer now.

SmokeDispenser

didn't want to start a fire here -,-

hey @RoryAlsop. LVL 4 :)

first portal killed yesterday:)

Rory Alsop

@Smoke - nice. See how it gets easier with each level doubling your firepower

SmokeDispenser

Yeah.

Also, the glyph hacking brings way more XP than regular hacking

Rory Alsop

13:34

I didn't know that

Iszi

13:47

Hm. I'm voting "unclear" on this:

-1

Q: HELP UNDER ATTACK..unknown

MY PHONE IS under attack by HACKER,MITM, IMPERSONATION..I don't know. No ANTI-VIRUS APP works. SOMEBODY HELP ME. Everything is FAKE BOGUS For 2YEARS!! I have a straight talk PHONE. I'm phone and computer illiterate. Recently deceased pscho boyfriend stole phone and the next 7 or had access. I'm l...

attacks

^ Ping @RoryAlsop @AviD

SmokeDispenser

14:21

0

Q: Decrypt and Forward

I have a Ubuntu machine running SSH, I need to forward the incoming traffic to another machine over a secondary Ethernet adapter (IE eth1) after it has been properly encrypted: something similar to the solution provided here: http://serverfault.com/questions/638272/dnat-packet-after-decryption-...

encryption snort iptables

VTC'd

Iszi

16:31

@RoryAlsop @AviD @JeffFerland @schroeder You might wanna check the edit history, to see if rolling back the Question would be useful. Otherwise this looks like it needs to go straight to the bin.

0

Q: Disregard this post

Answer found, thank you everyone!

encryption veracrypt

schroeder

@Iszi it was a cross-post

deleted

does this come across as too "face palmy" ? security.stackexchange.com/a/120268/6253

Iszi

More like too S&M.

@schroeder Heh. I think he needs to quit playing with his tools and get back to studying.

Oh, Google Images... Please tell me what the hell this has to do with "interrobang"?

schroeder

16:48

@Iszi you see, when two people love each other very much ....

David Freitag

17:11

@Iszi Dude so not SFW

Ohnana

17:34

@Iszi is that on a building somewhere?

David Freitag

@Ohnana In india iirc

Iszi

17:53

@Ohnana IDK. Just showed up near the end of my search results when I was looking for an "interrobang" image.

Rory Alsop

18:46

Oh - I really like the Chemistry.SE logo

46

Q: Chemistry site design

I’m Kurtis, senior product designer at Stack Exchange. First, I wanted to congratulate you because this site is now starting the process of moving out of beta to become a fully-graduated site! Well done! Graduation and Your Site Design Graduation comes with a few perks. We have already started ...

discussion design

M'vy

nice shirt

they got badges ?!

Rory Alsop

19:29

@M'vy usual setup is T-shirt, stickers plus a 3rd option

On music we are currently coming up with ideas for the 3rd option

9

Q: What Swag should Music.SE have?

Our site design is being finalised, as described here but there is a follow on question around swag. As @Hynes pointed out, T-shirts and stickers are standard swag, but a third can be suggested by the community, so why not get your thinking caps on and pop some ideas. (disclaimer, as a guitari...

discussion featured

M'vy

@RoryAlsop Kazoo

Rory Alsop

@M'vy yup - that is an option. Not heavily upvoted yet though :-)

how about this:

-2

Q: Has my guitar been switched?

There seems to be a total balance and tension, beverage no no thank you sir. Like i was saying, sorry now I am being interrupted by a melody, being careful here..... Well F5 it is...... The ? Ahhh, it doesn't make sense just like they said. Anyway I phrase it it won't make sense. The gauge of the...

consonance-and-dissonance resonance

SmokeDispenser

Alright, hey DMZ :)

Rory Alsop

Hey @Smoke

M'vy

@RoryAlsop wh......at?

Rory Alsop

19:43

hahahahaha - inorite!

this was his original question on MusicFans

-3

Q: The Bridge - which part, and intonation's harmonic anomolies in post modern 15 characterville

The guitar does not have 15 strings, however... in addition to this I am encountering for not the first but perhaps second, maybe third time a unending quest to get it centered and balanced (The Intonation). From what I recall the Fifth fret comparisons all check out but then the overall guitar i...

sound

M'vy

20:27

the Bridge. hmmm...

SmokeDispenser

20:47

good night DMZ.

SEJPM

21:26

Do we have anything (serious) on badlock yet?

Rory Alsop

21:45

@Adi - you were saying it was not serious, right?

David Freitag

@RoryAlsop The CVE's are rated 6.4/10

So no, not serious

Rory Alsop

@DavidFreitag (disclaimer - I have not looked at anything on it this evening. Been far too busy)

David Freitag

@RoryAlsop It's a DoS + MiTM vuln

Rory Alsop

@DavidFreitag but only local, right?

David Freitag

With the way they were hyping it, you'd think there'd be at least one RCE

@RoryAlsop AFAIK

Rory Alsop

21:50

yeah - so I'm not really worried about it for work

Transcript for