« first day (1945 days earlier)      last day (3233 days later) » 
04:00 - 16:0016:00 - 22:00

04:04
@RoryAlsop Microsoft only rated their patches at important.
04:58
@StackExchange Heh. The right end there looks like my day job.
0_0
Someone said the same thing on root access
and my last job had something like that, only it was MS project
 
2 hours later…
06:54
morning
mods, should duplicates be migrated?
e.g. this was flagged for migration to crypto - and according to the comments, I think it should be closed. Yet, that must be a dupe over at crypto.
so migration might not be suitable
07:16
mornin'
hey:)
any thoughts on the above, as a RO and experienced user?;)
Morning
@SmokeDispenser so unfort. I am inexperienced in the ways of mod-hood... I guess telling the person that there's a dupe on crypto +closing would make the most sense to me, but the other option of migrate + close as dupe in crypto land would also be valid ...
MOrning
the question is a classic is OTP seucre
07:20
actually, my comment solves the question, I guess, @RоryMcCune
probably:
45
Q: Taking advantage of one-time pad key reuse?

ElliottSuppose Alice wants to send encryptions (under a one-time pad) of $m_1$ and $m_2$ to Bob over a public channel. Alice and Bob have a shared key $k$; however, both messages are the same length as the key $k$. Since Alice is extraordinary lazy (and doesn't know about stream ciphers), she decides ...

I can't close as dupe of crypto... too bad :)
@M'vy I didn't even search for a dupe because it's in the first fing paragraph of the wiki article.
obv
I'd like to close it as "here, I google'd it for you, it's in the comments"
but that's probably no good close reason
okay. I think this will work.
@CodesInChaos good morning.
07:28
moin even. northern germany that is?;)
@CodesInChaos up for some mod fun? ^
@SmokeDispenser no, I'm from Bavaria and live in Frankfurt.
shouldn't that be "sers" then?;)
I like "moin", so I use it.
I'm not sure if the question is actually off-topic on security.se.
I see. I always get confused when people all over the place use it as an replacement for "morgen"
@CodesInChaos Me neither. It would be typo on SO.
e.g. trivial solve
In addition the OP doesn't really make it clear if they're sending more than one message.
07:34
yeah. I read "random key" and "never shared"
e.g. no shared random keys between messages
While this is obviously not what OP means, it's clear. well. damn, those questions that do not make much sense.
I see no "never shared"
I'd tend to invoke the "don't migrate crap" rule here.
07:50
@SmokeDispenser I heard a lot of "moin" in Hessen. True, I heard a few Servus as well... and the "Guten Moo[z]en" was often left to older people...
@CodesInChaos +1
@bilbo_pingouin yeah, I know it is used that way, e.g. as a short "morgen", it's just strange as that's not how it works where it comes from;)
@SmokeDispenser I didn't know it had another meaning. But Frankfurt is the Northern place I've been living in Germany :)
08:07
it's a word from lower german, spoken in northern germany by only a few people. it means around the lines of "cheers" and "great"
As if learning High German wasn't difficult enough as it is
(Ich lerne Hochdeutsch und es ist schwer!)
(Ach, das bekommst Du schon hin - wärst ja nicht der Erste;))
high German?
also, there is no "high german", it's just "german" in english, despite it's "hochdeutsch" in german.
Ah. I called it that since that's what Wikipedia did, but that's probably just to make the difference more evident
08:21
right.
All my German was from living in Munich and working with Bavarians and Austrians
so zero at all then.
;)
I learned mine serving in the KatzenWaffen-MM
I learned it during the great wars against Lederhosen
we lost a lot of good cats back then
08:30
Hahahaha
Wow - didn't expect that post to get me 50 upvotes in one day! Way better than any of my posts here:
50
A: How to properly dispose of sensitive documents without a shredding machine?

Rory AlsopThe usual solution is to hire a professional disposal contractor to turn up with a shredding truck, and not only shred all the records while you watch if necessary, but provide a signed log evidencing that (which can be essential for certain types of documentation.) In an emergency your solution...

And it's just a common sense answer
@RoryAlsop yay for the rep lottery?
we just throw it in the fireplace here
:3
The only good cat is a dead/alive cat?
yay, new headphones are in
@JourneymanGeek - that is exactly what it is
also, I'm repcapping on SF two days in a row, from a question that was closed, and locked so, totally get that.
08:36
:D
Much like I didn't expect rep capping 3 days in a row when posting my first answer here.
actually? That's my top upvoted answer there.
@SmokeDispenser People love a good trainwreck, and I am very good at telling people they are up a creek of post consumer food without a suitable propulsion stick.
:D
actually, all my answers with >50 votes here are "you're doing it wrong" in one way or another:)
the ones that actually go into detail and are constructive are way below that.
Post consumer food
SOme of the questions on Workplace have great titles:
-2
Q: Got laid off, think its over fussball, should i mention that in interview?

tempoI am looking for work. And almost every interview revolves to a considerable extent about why I was laid off in my previous job. I was given some reasons but what I really suspect, is that a part of the reason was fussball. His reaction to being beaten worried me sometimes. And basically, yes...

08:40
isn't the right term foosball?
Both are discussed in the comments - this is the term used for what us Brits call table football, right?
08:43
(actually played tournament foosball when at university. and held courses and shit.)
I only guessed it was a big thing in Germany based on the characters in the community episode...
it's an even bigger thing in the US
it germany, there are tounaments, but you can not live from playing.
in the US, you can.
wow, well I guess people make a living playing starcraft, so why not foosball
yet, their table sucks;)
right :)
@SmokeDispenser have a look, @RоryMcCune
:)
who knew there are pro tournament in the UK!
08:54
:)
Adi
Adi
@RoryAlsop Yup. Very disappointing
@Adi did your HSM research yield any interesting results?
HSM? Hugging @Simon's Mom?
sounds like dangerous research
09:09
-1
Q: How does ransomware get on people's computers?

Tomáš ZatoI've noticed increased frequency of ransomware questions around Stack Exchange. Some of the people I remotely know had their devices recently infected as well. I'm starting to be concerned. When people ask me how to avoid viruses, I typically tell them things like not to download files from Russ...

where do the downvotes come from w/o commens? I can't actually see a problem with the question.
@SmokeDispenser they usually come if a) the downvoter thinks it is obvious that your answer is bad or misses the point of the question or b) if the downvoter is just a bad person in general or particularly dislikes you for whatever reason
it's a question :O
Then the likely reason is b) or c): The downvoter thinks it is obvious that the question is of poor quality and / or borderline close-worthy
it's not about my answer, @SEJPM
it's about the Q
and yeah, I know that, but in this case, I cannot see why it is of poor quality and/or close-worthy (except there is a dupe - then a dupe should be flagged)
and this question in particular appears to have some fluff / should have been answerable via google / is close to be too broad
because it basically asks: "How can I be infected with malware and how can I prevent it"
right, but that is not an easy solve for non-ITSec people.
so the question is spot on on topic and there seems to have been some research previously
not quite a fit for the question
@SmokeDispenser it is on-topic (that's why nobody VTC'ed yet) but it shows lack of research before asking which by itself is sometimes considered "worthy a downvote" on sec.se
at least not on the first page
5
Q: How to avoid ransomware

Alpha2kMalware files execute themselves after downloading them. Let's look at it from the point of view of a piece of ransomware like CryptoLocker, from Wikipedia: Crypyowall 3.0, uses a payload written in JavaScript as part of an email attachment, which downloads executables disguised as JPG ...

and, again, it seems like there has been research. I hate it if there has been no research, but in this case I don't feel being abused as a search engine.
That's again not all of the question.
09:19
12
Q: CryptoWall 3 - how to prevent and how to decrypt?

AkiraYamamotoMy father's computer is now infected with CryptoWall 3, according to the link below. http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information#CryptoWall Is there a way to decrypt the files? I will try to recover them but according to the link, the virus safe deletes the c...

also, not the same question
first three hits when I remove the limitation to sec.se
Note: I'm not saying one should downvote the question (though there are other cases where it would be appropriate), I'm just trying to explain the mindset I assume is normal on sec.se
10:00
its normal to have a mind on sec.se??
ah right, you said mind set, my bad. Not sure what that even means here... ;-)
10:13
@AviD SHUT TOP
:)
there ya go.
you're welcome.
Also, @SEJPM, I totally see your point (or rather, the point you're taking a stand for) and I agree often enough
*your
10:16
that's why I'm so stumped - I tend to be too harsh on such things myself and cannot find a reason.
@AviD wat?
*wurt
@SmokeDispenser "threaT model", not "thread model"
Do you want this question:
0
Q: What is a secure boot rom?

anonymousI started working with security in embedded devices and a term as secure boot, root of trust, root keys etc started coming in. The thing I don't understand how Boot ROM can be secured as People have been changing stock ROMS to custom ROMS.

Darn, ancient latin pr0n writer, what's wrong w/ you?;)
(thats something else altogether, and rather confusing)
@AviD thanks, good catch, typo. t and d are next to each other.
10:23
@CodesInChaos not sure if its too general, or too LMGFY
@SmokeDispenser so are u and i
but wait, no they're not
@AviD they are.
I meant t and d arent
both are
f and r are in the way
I meant t and d arent
A keyboard layout is any specific mechanical, visual, or functional arrangement of the keys, legends, or key-meaning associations (respectively) of a computer, typewriter, or other typographic keyboard. Mechanical layout The placements and keys of a keyboard. Visual layout The arrangement of the legends (labels, markings, engravings) that appear on the keys of a keyboard. Functional layout The arrangement of the key-meaning associations, determined in software, of all the keys of a keyboard. Most computer keyboards are designed to send scancodes to the operating system, rather than directly sending...
10:24
thats stupid
neo layer 1?
wot?
neo all layers
never heard of it
but yes, layer 1 is the default layout:)
optimized for german text writing and coding
keyboards should all be the same
everyone in the world should use the same layout that is only borderline sensible for 'murkans
you dont like our keyboards? go invent your own computers!
10:27
....
"your" computers are following von-neumann architecture.
shud top
rethink your argument;)
your face is an argument
saying what
WAT
@CodesInChaos I dont, but it might be a better fit here than over at crypto.
10:32
I've closed it on crypto. If the OP feels like it, they can ask it again on security.
This "answer" is just as bad as the question. — fdb 15 hours ago
gotta love sceptics.
@RoryAlsop, you've got their swag, don't you?
@SmokeDispenser ._.
@JourneymanGeek hm?
@SmokeDispenser I thought most modern systems used a Harvard architecture
Well a modified one with some features from von-neumann architectures...
@AviD My dream keyboard is US layout with an ISO enter key, cherry blues ;)
@SmokeDispenser he claims he does, but he has yet to prove it.
10:42
I tend to see it as a modified von-neumann architecture.
but that's probably hard to distinguish with all the mixing up.
@AviD he posted pics. did happen.
@AviD
Mar 29 at 9:26, by Rory Alsop
user image
@SmokeDispenser see thats the thing that is both cool, and incredibly aggravating about skeptics.se. Clear, logical evidence is not considered proof - only references to scientific articles.
I find this skeptical
@AviD it's the interwebs. the rules apply.
so until his pics are validated in a laboratorty or university research department, and written up in a peer-reviewed scientific journal, it still doesnt count
RP||GTFO
And even then, probably... :)
10:48
@SmokeDispenser WAIT, whaaaat? skeptics.se swag is a frikkin gopro??
and all we's got was a stupid torch / flashlight.
I think it's two different claims proven in one pic
He mentioned what's what around the pic in the transcript
Next time I come to Tel Aviv I'll wear all my swag at once, @AviD
Nah - the GoPro was from one of those competitions at conferences - the 'pop your business card in and accept loads of spam' competitions
Good reasons to post on beer.se (soon to be alldrinkies.se) - I'm still on page 2 and I'm dreaming of their graduation swag
11:07
@RoryAlsop lol I look forward
@RoryAlsop make sure you include a kilt in that getup
oh, the bear is gaining on me in the month race;)
@AviD nice typo there.
@RoryAlsop ahh okay. I always do that, never ever won anything. Wasnt sure they actually work.
@SmokeDispenser what typo?
"get up"
@SmokeDispenser "getup" n. outfit
> noun informal
noun: get-up; plural noun: get-ups; noun: getup; plural noun: getups
a style or arrangement of dress, especially an elaborate or unusual one.
"she looks ridiculous in that getup"
synonyms: outfit, clothes, costume, ensemble, suit, clothing, dress, attire, garments, garb;
oh, is that undocumented slang?
11:10
is it?
I was not aware of that and my dict didn't turn it up right away
hm. should be adding that to dict.cc then :)
well, back to my job for now :)
HAHAHHA
@AviD
you didn't mean my comment with the thread/threat thing?
you meant my answer :D
11:14
wut
thread/threat I did mean your comment
your typo post was about 20 seconds after a comment I wrote
well, that seems to be a common typo for me: security.stackexchange.com/review/suggested-edits/73699
@SmokeDispenser thats what I was referring to
right, I thought you were referring to an actual comment, not the answer
let me see if I can get it
I was referring to the comment
didnt see any answer
the comment is gone
probably deleted by author
(the corresponding Q)
11:20
huh
I think you edited that part out of your own comment.
dont remember which q it was on, bu nothing deleted recently
only thing I cant see is comment edits
@AviD of course kilt - it's a Jacobite outfit. What else could I wear with it?
I edited the comment
heh
but I cant find the comment in my activity tab
so I guess Q deleted
weird
11:24
Yes, was this one
RSS reader to the rescue.
@AviD, you were referring to my comment there?
ah yeah that
12:10
Congrats on 4K, @SmokeDispenser
Oh, I did get them while away?
thanks.
4k in 29 days.
that's bear-like:)
12:54
As a really general and non specific question ... how effective are typical IDSs in detecting attacks?
I can't seem to find any good data on it, are they like 70~% effective or 99~%?
@Crizly no
Helpful
Any idea just generally? typically? personal experience?
heh
you could say that they are around ~80% effective - for a very specfic subset of narrrowly defined attacks.
so it's pretty much all over the place if you consider a wide range of attacks?
well, if you consider "all possible attacks", you are down to fractionals.
13:01
They're totally useless against some kinds of attacks. Any which don't involve intrusion, for a start :-)
quite simply, they dont even try to handle custom attacks on bespoke applications, as an example.
plus what @Matthew said
or any type of malformed traffic
hmm
for example, even if it were able to detect applicative attacks (which its not), it would totally miss anything like CSRF (which only involves unintended but valid requests)
so, for a narrow subset of attacks, it can do a better-than-decent job of detecting them, as long as these attacks are defined well enough in the product, which they rarely are.
Gotta love security, no stats, no data and nothing works
4
but lots of snake oil
so that's ok
13:05
:p
A well configured IDS will halt a decent amount of malicious behaviour, but you can't put one in and say "that's it, we're safe now"
Same with a firewall. Same with VA scanning. Same with penetration testing. Same with virtually anything else!
I'm just simulating one at the moment, just need a rough idea about how well I can set the effectiveness of it to
13:17
@Crizly now you got it
@AviD, are you here?
I do have a feeling this will not work out.
@Matthew yeah - "security", "attacks", etc - there are all surprisingly vague and imprecise, which include a plethora of incredibly different topics.
so firewall does a good job of stopping the very specific thing it is supposed to stop. and not at all for everything else
@SmokeDispenser no
heh
@SmokeDispenser anyway let me know how it goes. that might actually be a clear enough signal.
my Antivirus just triggered while I was testing my script for automatic software backup certificate generation :/
13:25
nice, that did seem to work.
13:56
Had a good chat with Brent and reopened an edited:
-3
Q: How to isolate and identify a Trojan's machine code?

Brent KirkpatrickI believe that I have several USB memory sticks infected with trojan(s). The memory sticks are data drives (not bootable). They appear to be carrying the binary code of a trojan in its inactive, uninstalled, form. They were collected in the course of cleaning-up a major security incident. Mor...

oh, RLY?
read the transcript. @RoryAlsop! nice :)
You
You
Hello
It's me.

I now have your identity. MUAHAHAHA!!!
I'll ping the buffalo.
@You who are you?
@SmokeDispenser I'm pretty sure there's laws against that.
You
You
@JourneymanGeek I am You.
14:05
@JourneymanGeek, it's you.
Its you?
But who are you?
and for that matter who is you?
You
You
I am You, backwards of ouY, confusers of yous, and talker of Yoda.
You
You
Every time I enter a chatroom for the first time, someone references something. Or says "hi me", at the very least.
@SmokeDispenser awesome :-)
14:14
@AviD the second guy: not so much. but with the brent, it worked out fine.
@You so, now you were disappointed that the DMZ didn't care?
You
You
@SmokeDispenser No.
btw, @RoryAlsop: 10 reps to go for rep cap today. racing the bear who doesn't care works well. I bet I loose big time if he's actually around.
He was on holiday for a bit :-)
14:20
well... rep cap.
right
that's the only reason I'm leading the month's rep chart
and not him.
@You - we do have folks pop in with similar idioms. Generally mild tolerance ensues, while we wait to see whether it's a one trick pony or not :-)
(and he is despite being away close;))
You
You
:P
@SmokeDispenser Another reason is that sometimes my answers get migrated.
@Thomas - hopefully that doesn't annoy you. I assume most of your migrations are to Crypto anyway
14:24
@ThomasPornin well, no:) You being inactive gave room. migrations only happen when you're active (more or less)
(also, you seem to be hitting rep cap almost every day, migrations shouldn't be a problem, rep-wise;))
@RoryAlsop I have to pretend now and then that I care about rep points, so that it may spur some other people into writing good answers of their own.
Hahahaha - magical unicorn points
@RoryAlsop those.
You
You
Unicorns are delicious.
@RoryAlsop, did you read my "goodbye SE"-writeup or did you gather that expression elsewhere?
14:28
Firebox.com currently has a wonderful selection of unicorn gifts
@SmokeDispenser I think it's been around forever
I haven't seen your goodbye SE write up, as far as I know. Linky?
wait
@RoryAlsop linked you in the communcation method you hate.
@RoryAlsop, that was the day I got fed up with SO and went here.
81
Q: Why is backslash called BACK slash when arguably it points forward?

daniel.sedlacekThis is a backslash \. If you read the slash from left to right it starts at the top and goes down - hence it is a downslash. If you read the slash from top to bottom it starts on the left - which in our culture represents back direction - and continues to the right - which represents the forw...

haha.
14:49
@RoryAlsop Brent uses a lot of terms but I do not think he knows what they mean
always weird to see a hot network question which I answered in the CVR queue.
"well, I answered it. So... that means it's not too broad"
@schroeder that's what I think.
VCR queue?
@schroeder yeah - this is why I've spent so much time/effort to try and understand what he wants
I gave some feedback in that chat on wording...
@RoryAlsop I've spent hours with him on other questions
@RoryAlsop he won't back down on his use of terminology but shifts the discussion to a tangent - it is very difficult to get a linear discussion
14:52
He is a challenge - I'm sure that he is trying to learn, but the starting point is so difficult. There seems to be a strong resistance to providing clarity, and a stubborn resistance to the idea that what he is trying to do is not unique, but common
Also, he's using words wrong. that's a big one
he just doesn't understand he's using them wrong.
but yeah, the comment-thing on the HNQ went well with him today.
He's definintly improving.
15:13
@SomeGuy that's impressive
geez. just started kali linux. automatically configured the dual screen. yay
kali actually working right? UNPOSSIBLE!
@M'vy linux has a tendency to "just work" nowadays
(actually, its more a reflection of the skillset of the people on SU asking kali questions that annoy me)
15:20
:)
Menu > Useful applications > Empty
@SomeGuy omg wow. ssid command injection?
that's pathetic
Hahaha, right?!
Literally laughed out loud
The gist the article links to is pretty funny too
-10 points to Neo TV for sucking real hard
Do we have a live distro that sets up pentest exercises ?
15:24
like a CTF in a box?
LAMPSecurity is pretty good
@SomeGuy lmao @ expert programmer
@Ohnana yeah that would be it
ahahah I hacked the kali password.
well... default pasword....
well... guessed
so 1337
ok I'm off :)
"oh man i bet it's toor"
derp
:P
yeah that
15:43
@Iszi Boo
@Matthew Eh, you're still a glyph. i.e.: Newb.
...who somehow has 11k rep.
Mwhahahaha
04:00 - 16:0016:00 - 22:00

« first day (1945 days earlier)      last day (3233 days later) »