The DMZ

AviD

07:42

hmm, has somebody recently linked to that old-time XKCD question? I've had a big bump in upvotes on that in the past couple of days. much more than usual.

not that I'm complaining, ofc...

M'vy

horse stapple?

AviD

08:00

yeah that one

SmokeDispenser

@AviD that was me

@AviD, I linked that in my HNQ Poker answer.

AviD

ahhh hehehe thanks

link?

SmokeDispenser

81

A: Internet courtship: Why would a hacker buy me poker chips?

I interpret your question as What's the motivation for someone to use an alien facebook account to play poker and stock it with chips? It's not that strange if you think about it this way: As poker is a game where knowledge about the dealt cards gives you a significant edge in the game, yo...

AviD

oh you updated that answer

nice!

SmokeDispenser

right, it was suggested in the comments to add password managers, I did that and linked battery horse

Also, I did take on this challenge:

AviD

08:06

nicely done ;-)

SmokeDispenser

in The Ministry of Silly Hats on Stack Overflow Chat, 22 hours ago, by Kyll

@SmokeDispenser Here's a game. In your next HNQ answer, the word "cucumber" must be present in the first revision. You only have the right to use this word once, in only one answer, so make it count!

AviD

you might also want to reference this one:

It'll be hilarious the first few times this happens.

SmokeDispenser

@AviD: security.stackexchange.com/a/120555/92273

Oh, randall finally has https?

AviD

pls

SmokeDispenser

@AviD, edited in.

AviD

08:08

heh

SmokeDispenser

@AviD, I doubt it's getting hot though.

it's not borderline off topic enough for that.

M'vy

09:57

8k :)

2 to go.

SmokeDispenser

@M'vy: n1

grats and such. I'm still <5

Matthew

10:17

Someone was accusing me of being a newbie yesterday

Then they looked at the rep counter...

SmokeDispenser

hahaha

you newb, knowing nothing about anything

:D

Matthew

I know! I know nothing! I come from Barcelona!

SmokeDispenser

oh, waaaait, that's a 10ker.

:D

what's with that teckraf guy btw? he keeps making edits but didn't go over 1k since I am here.

And I went from 101 to 4k in 30 days.

Matthew

Not sure. They're usually good edits too. Maybe they don't like writing much

SmokeDispenser

right, they are.

I think I only rejected one.

Matthew

10:21

I think I rejected one that slightly changed the meaning of the answer, but I agreed that it was grammatically better

SmokeDispenser

I think I lost the cucumber challenge.

M'vy

10:41

Too bad

I think I need more newbie questions. So I can rep train to 10k

SmokeDispenser

@M'vy: take my lead.

pic the Qs from the review queues.

preferably from the CV-queue. borderline closeworthy.

M'vy

The less I make effort the more I get rep.

SmokeDispenser

right. you just need to review close votes and pick questions that are borderline

(and preferably low level)

look at my answers: the good ones are low-rep, the KISS-principle ones are riding the rep train

so if you cut the "writing good answers" part and just do the rep-training, you'll be >10k in 30 days.

maybe less.

M'vy

I think people only up vote when they know about. Hence, the expert answers don't get that much view and votes. Unless you're @ThomasPornin

SmokeDispenser

oh, for maximum efficiency, only post one post per day

because of rep cap

(the poker question for example only brought me 300 unicorn points with > 80 upvotes)

M'vy

10:48

Yeah rep cap is kinda stupid.

You should rep cap on question, not on day.

SmokeDispenser

also, if your post it HNQ, do not post at all

you'll rep cap either way

but tbh, unicorn-point whoring is pretty much bad for the community, so you should answer good questions as well - even preferably those.

bilbo_pingouin

I haven't been around SecSE that long to judge, but from other sites I have that experience, that if your question gets on the HNQ list, you'll get to rep cap... but essentially if your post is short and witty/snappy/fun... regardless of its actual merits

M'vy

Yeah that too.

Has to do with count view.

SmokeDispenser

@bilbo_pingouin, borderline closeworthy Qs get more views

bilbo_pingouin

the theory I have, is that HNQ brings unregular members... who are usually less knowledgeable, are looking to consume: so fast, fun, forgotten

SmokeDispenser

10:55

especially if they have a good answer

bilbo_pingouin

@SmokeDispenser yep... especially if they have a clickbait title

SmokeDispenser

well. lunch now d)

M'vy

But it's intrinsically broken.

diagprov

@SmokeDispenser Actually it might be more efficient to answer multiple Qs. Accepted answer +15 score does not count towards the repcap, nor do bounty awards.

For this reason Jon Skeet continually exceeds the repcap on SO: stackoverflow.com/users/22656/…

according to the graph the max he has earned in a single day is 871

Matthew

My best is 255 on a single day, and I did have a 3 day run of more than 200

SmokeDispenser

12:06

@diagprov, @M'vy was searching for the sweet spot between max rep for min input

side note, @M'vy, I repcapped during lunch. How about you?;)

M'vy

+184 today

+215 yesterady

SmokeDispenser

"no" that is then;) but you have a HNQ, too, don't you?

O GAWD

M'vy

I don't think so

SmokeDispenser

@M'vy you're below the Brent in the rep league stackexchange.com/leagues/66/month/security/2016-04-01/…

hahaha

M'vy

well...

not for long

SmokeDispenser

12:16

well

you're resorting to reptraining su?

M'vy

I already got 400 worth of rep in 2 days. but the last one has yet to be added to the network

SmokeDispenser

this you could've flagged.

M'vy

290 month reputation

@SmokeDispenser I could have yeah. Probably better on SU

SmokeDispenser

yeah

M'vy

Damn my proposal is stuck at 40 persons.

SmokeDispenser

12:20

which one?

M'vy

Penmanship

Maybe I should advertise more aggressively :)

whatever

SmokeDispenser

that's probably not for me :)

my handwriting sucks big time

M'vy

the title should be changed to

it's more for Q&A on pens, paper, ink, technics and so on

not just writing

SmokeDispenser

Oh, yeah, the title should be changed

pnp? pens and papers?

M'vy

So far I did have a good one in my head

SmokeDispenser

12:23

there you go.

modflag

M'vy

Oh I do have HNQ

SmokeDispenser

yeah, didn't you believe me?

M'vy

It was not on my list last time

SmokeDispenser

:)

M'vy

perhaps lack of refresh idk

SmokeDispenser

12:30

you know they cycle, right?

M'vy

ah

SmokeDispenser

if you're not using stackexchange.com/questions?tab=hot, the HNQ on the side cycle through the whole list at random

M'vy

can't I get 10k already and be done with it ? ahahahahaha

I need to edit more...

SmokeDispenser

wat?

M'vy

#stats

SmokeDispenser

12:32

we could found a voting syndicate and get ourselfes banned;)

M'vy

I wonder if we could get a learning machine to create a voting syndicate that does not get you banned.

SmokeDispenser

well, probably

M'vy

ohohohohohohohohoh we could set up a botnet :)

SmokeDispenser

but since shog's watching us closely anyways and with the low traffic here, we're fucked now.

M'vy

steals your SE cookie and vote for someone ahahah

SmokeDispenser

12:34

hahaha

Sam

anyone here know anything about wifi?

SmokeDispenser

let's make it a wormbot and call it WotUVoted

M'vy

I iz in your Stackz voting for peoplez

@Sam it's the 802.11 norm?

you should ask a specific question I guess

Sam

whats an 802.11?

M'vy

I'm just toying with you cause you ask if anyone knew anything about Wi-Fi. So I answer with a random fact about Wi-Fi.

But go on, feel free to ask your question. We'll be happy to help (if we can)

Sam

12:38

oh.. its just that my wifi is connecting really badly, but I have no idea why.. it used to be fine, is there anything I should check?

M'vy

Individual home?

Sam

its my home wifi router, there are several devices though

M'vy

I mean, it is a building, or a single individual house? (in other word, do you have very close neighbours who can have wifi too)

Matthew

Check if your neighbours have new routers - it could be getting congested. Look at moving to a less busy channel on the router

Sam

it is semi detatched and neighbours networks are found by my pc

how do i change channel...?

M'vy

12:44

@Sam depends of your router. I should have a parameter in the settings.

Matthew

Depends on the router - should be a setting in the admin section

Sam

admin section..?

Matthew

Of your router config. Usually the one you access through an address like 192.168.1.254 or 192.168.1.1 - if you're not sure, don't go looking though, as you can potentially lock yourself out of the network

Sam

i think mine is 192.168.0.1

i have been here before trying to fix it in the past

its a router sign in page

SmokeDispenser

so, sign in then.

Sam

12:52

imgur.com/djCAjGt

ok done that

SmokeDispenser

@Sam, you realize we are the chat room for information security, not the chat room for super user, yes?;)

anyhow, hit the wifi settings.

@Matthew rly? are home routers checking for that?

StackExchange

I figured that now that society has collapsed, I wouldn't need to wear clothes anymore, but apparently that violates some weird rule of quantum gravity.

Sam

ok i am in there, and i am just looking for people that know about networks

Matthew

@SmokeDispenser Mine does. Admittedly, I have a non-standard router for my connection...

SmokeDispenser

well, you seem to have a configuration issue with your wifi router - I guess that'd be a perfect question for SU.

@Matthew, mine doesn't. And I don't think most do.

I can scan all the things on my home network;)

Sam

12:58

imgur.com/BeaHOw6 what do i do now...?

RoraΖ

Doesn't StackExchange know that we're a security chatroom?

Matthew

@SmokeDispenser Depends how paranoid you are...

SmokeDispenser

> PHP BLENC extension security concern

the answer is yes.

:DDDD

Matthew

@Sam Change that thing that says "Channel: Auto" to a less congested channel. It doesn't look like it has a helpful graph of them for you though

SmokeDispenser

@RoraΖ sure. why?

Also, change your passphrase.

sigh

.... there and everywhere else you use that password.

... and your WPS pin

Sam

13:01

i changed my wireless band to 5GHz what will that do?

SmokeDispenser

lower the range you will get connections, probably increase your bandwidth

did you change your password?

Sam

why does the password matter?

SmokeDispenser

because you posted it online

Sam

but my wifi is miles away from anyone

SmokeDispenser

in an information security channel.

Sam

13:05

probably

Matt Clendenen

@Sam you just showed everyone and it's not that great anyways

SmokeDispenser

sigh

Matthew

Might also mean some devices can't connect anymore - most phones are OK, but some consoles or similar don't handle 5GHz wifi

SmokeDispenser

@Sam, as it's crap anyway, you probably use it somewhere else.

and it's all on the interwebs now. change it everywhere, now.

@Matthew my ps3 is fine. what ancient consoles cant handle 5ghz?

Henry White Hat Hacker

Hello Everyone.

Matthew

13:07

@SmokeDispenser Don't think Wii can... It can't handle some channels at all. Didn't update properly on some of them. Not sure how they managed that

Sam

For consoles that can handle both 2.4GHz and 5GHz which is better to use?

Journeyman Geek

If you can use 5ghz reliably, that

it has shorter range but less interference possible

else 2.4

I run my APs with both, and have distinct SSIDs for each

Sam

is Ethernet better than wifi for a pc?

Henry White Hat Hacker

@Sam It's faster.

Thomas Pornin

@Sam With Ethernet you have an actual wire. Apart from that, it is better than WiFi in all other respects.

SmokeDispenser

13:10

@Sam it's less volatile and offers a smaller attack surface.

@ThomasPornin How is a wire "worse than WiFi"? It's great physical access control.

M'vy

well you need a cable

SmokeDispenser

well, yeah, but you need a cable (to get into the network)

Thomas Pornin

@SmokeDispenser A wire incurs the risk of tripping on it and breaking your leg or something.

SmokeDispenser

@ThomasPornin My wires are on the walls. seldomly walk there.

Thomas Pornin

For some setups (e.g. fixed PC) a wire is no issue.

Henry White Hat Hacker

13:13

You can still have a MITM ATTACK on a wired connection.

Thomas Pornin

For others (e.g. laptop PC) mobility can be an important factor.

And wireless increases physical mobility.

SmokeDispenser

@HenryWhiteHatHacker, the attack surface is significantly smaller.

Sam

i have a fixed pc and a 40 meter Ethernet cable but it doesn't have the plugs on each end

SmokeDispenser

sigh

I'm out of the trolling. see you later.

Henry White Hat Hacker

test

Can someone please connect to my http server here is the ip address:0.0.0.0

Arperum

13:19

...

M'vy

...

Matt Clendenen

I see Henry changed his name

Henry White Hat Hacker

@MattClendenen It's the full version of Henry WH Hack.

Arperum

@MattClendenen Nah, it's a different account.

Henry White Hat Hacker

@Arperum Correct +1!

Matt Clendenen

13:22

@Arperum are they ever here at the same time?

Arperum

@MattClendenen I don't know, I have the other one ignored. That's how I noticed that there was a second account in play.

Matt Clendenen

I don't think they are bots. Just an elaborate hoax by one really super bored guy.

Henry White Hat Hacker

@MattClendenen I am not a bot.

What hoax?

Bob Ebert

Hi, can we say that SQL injection is decreasing and will, soonly, be almost non existant in well designed websites?

By well designed website: I mean "not the one programmer that knows nothing about web security"

Xander

@BobEbert The problem with that, is that the proportion of "well-designed websites" to "WordPress sites and sites built with YOLO PHP CMSes" is, and will remain the foreseeable future, quite small.

Really, the percentage of websites that are built with WordPress is pretty staggering. It's a substantial portion of the World Wide Web.

M'vy

13:34

lol I got a guru badge on that HQN @SmokeDispenser

Arperum

@BobEbert SQL injection does not exist in well designed websites. But as @Xander said: there is a lot of terribly designed stuff out there, and there are new sql-injection prone website every day.

Bob Ebert

What about overflows? (stack, heap, etc)

SmokeDispenser

@M'vy grats

Thomas Pornin

Most modern programming languages are efficient at reducing the consequences of overflows.

SmokeDispenser

@M'vy I only got one of those.

Thomas Pornin

13:42

Not a lot of people are developing Web sites in C, assembly or Forth these days.

SmokeDispenser

@M'vy my poker question is 1 upvote short of a gold badge for great answer, though.

Terry Chia

@ThomasPornin Shame.

SmokeDispenser

... and should be a guru as well when accepted.

@ThomasPornin I'm using Haskell. that compiles to LLVM in between. does that count?;)

M'vy

Oh I scored +1, I think I just repcapped

SmokeDispenser

:D

there you go, ridin' the rep train like a bear, @M'vy

M'vy

13:56

yeah... well the bear has 5x my rep of this month :)

SmokeDispenser

there we go, great answer.

first "real" gold;) "populist" does not count, apparently;)

M'vy

I still don't have any gold here

Thomas Pornin

@M'vy "Electorate" is easy to obtain. Just click 40 times a day, on 15 days.

CodesInChaos

or the addiction badge, where all you need to visit daily.

Thomas Pornin

@CodesInChaos I found that one quite harder to obtain. It turned out that I really have a life.

Xander

14:10

@CodesInChaos @ThomasPornin The first time I tried to get fanatic, I didn't realize that you needed to visit more than just the home page. That ended my streak one busy day, after I had managed to visit for 75 consecutive days, and I had to start over.

CodesInChaos

I never really tried, but there was a time where I was addicted enough to visit all the time.

M'vy

Well qw could probably just setup a refresh bot

Xander

14:26

@CodesInChaos It became an addiction for me after that. It became such a part of my daily routine, that once I did get fanatic, I continued until I'd visited for over 500 consecutive days. I forced myself to take a day off at that point. I didn't want to be like one of the SO people who hit 1337 consecutive days.

CodesInChaos

14:36

I have a bunch of vacation-shaped holes in my attendance.

AstroDan

14:58

Ah yes, that wonderful feeling when you kill a memory leak. My day has been made.

CodesInChaos

Don't use global variables. Done.

2

schroeder

15:14

1

Q: How hard is it to hack into a webmail account with a strong 8-digit password?

Assume the hacker starts with only your email address and he has high incentive to gain access.

AstroDan

@CodesInChaos Right. Now deal with one in a third party library (which they will not fix) via direct memory access and pointers.

RoraΖ

15:43

But static global variables are awesome and cool!

I don't have to allocate any memory for them :D

Transcript for