« first day (3210 days earlier)      last day (1968 days later) » 

03:47
Is anyone playing PicoCTF?
@HamZa @J.J ?
 
4 hours later…
07:32
@VipulNair The entire blog sounds like a huge scam
The guy talks about "race hazard", and later uses the term "race condition", yet nothing in his entire "article" has anything to do with race conditions
07:53
@MechMK1 i read the same article in a dozen of news websites.I dont know if its true or not.
also on forbes
Still seems written way too clickbaity and not like a serious post-mortem
Even if it were legit, which it might be, it just looks like "Click here to find out how to hack any Instagram account instantly!"
The articles you linked to also don't mention any technical details, nor is there a concrete example of what the actual vulnerability was
It's all "lingo", so to speak
dont know man.Why would he write 30000$ for it.Thats crazy amount of money to mention
It surely is. However, that money may or may not be real.
I like to quote "Just because it's in the news doesn't mean it happened"
he is on facebook hall of fame
Then it may have been legit
I'm also not claiming it did not happen
Just it didn't seem legit at all, based on what was shown
84
Q: Has SHA256 been broken by Treadwell Stanton DuPont?

Gary RoweIn a recent press release issued by Treadwell Stanton DuPont, the claim is made that their research laboratories have successfully broken all 64 rounds of the SHA256 hashing algorithm. They further claim that they achieved this milestone a year ago (late 2018). "While we have successfully bro...

Also, good read
08:41
0
Q: Checkmate to RSA factorization

Alberico LeporeTo factorize N = p * q with p < q e (p-2) mod 9 = 0 It does so: N=209 solve: [(h+1)^2]*[(2*h+2)^2/2-1] = X*(209-4-2*n+2*(p-2)),(h+1)/3=(k+1)/6 ,p^2+n*p=209, h+1+k+1=(209-4-2*n+2*(p-2)),h,X,n,k -> h = (2 (-209 + 99 p + 2 p^2))/(3 p) solve: [(h+1)^2]*[(2*h+2)^2/2...

> I discovered that Matlab has a factorize call. RSA is DONE!
09:29
@MechMK1 I know it can be sometimes very very hard not to troll, but we are supposed to be nice to newcomers. Even though I personally like your comments and answers to this "question".
09:51
to be fair, even forgetting the topic and the broken RSA claims, I struggle to get what the question actually asked.
> For the moment, I do not release any other information.

The question is when will I be able to release information?
10:08
@A.Hersean I know. "Being nice" is one of the things I actively work on
Though I still personally prefer the "demonstrate the flaw in the argument" method
 
2 hours later…
11:57
@MechMK1 Yes, but this is as much an answer that the question is a question.
I'm not sure my previous post made much sense.
 
1 hour later…
13:05
@A.Hersean I interpreted the question as "How is RSA secure if I can simply ask MATLAB to calculate it for me?"
I'm not sure if it's actually MATLAB or what else. You can substitute it with "How is RSA secure if I could solve the necessary equations using a math solver?"
13:27
Can someone explain what the f**k is going on with the wave of moderator resignation over the wider network? I understand a moderator got demoted, but I don't get why? All the meta posts are very vague about what the core issue actually is. I am confused.
@Anders Because people are upset at SE because the CM's don't give a **** about the community as a whole
The whole CC BY SA 4.0 fiasco is just more salt in the wounds
People want to know why SE, Inc. can just relicense their content without explicit permission and SE, Inc. pretends like the issue doesn't exist
@MechMK1 I have to ask: what was the plain text you encrypted?
@MechMK1 The articles are very clickbate-y.
@VipulNair From what I have read previously (this is a bit of an old bug), I think it just boils down to the fact that instagram's brute force protection had some holes in it. They use a 6 digit passcode for resets, which is obviously a small search space. He used something like 1000 different IP addresses to bombard their unlock endpoint at high speed, and their brute force protection didn't block him.
As a result, he was able to iterate through all 1,000,000 possible codes very quickly, allowing him to reset the password on any account.
He says that it is a simple attack (and theoretically, it is), but it's definitely clickbate-y because if you told someone "Oh yeah, you can break into that Instagram account - you just have to orchestrate 1000 different processes simultaneously in a modern cloud-hosting environment to bruteforce the reset code at high speed" they would have no idea where to start
For an experienced Devops guy, it's very feasible. For anyone else, it would never happen.
97
Q: Stack Overflow Inc., sinat chinam, and the goat for Azazel

Monica CellioOn Friday, half an hour before Shabbat and two days before Rosh Hashana, Stack Overflow Inc. suddenly revoked my moderator status on all sites where I had it. I found this out while handling flags, when I suddenly got notifications for Marshal and Deputy badges (which moderators are ineligible t...

:(
13:44
mumble.... would anyone be offended if I starred the post above?
I think that it may be important for people to notice that.
I'd be very interested in the answer to this question: meta.stackexchange.com/questions/333967/…
But I guess I will get that, eventually.
It sounds like the inevitable has happened: stackoverflow has always been "corporate", but it was easy to miss that fact before. Now "corporate" is effectively strong-arming the community into the standards they have decided are best for their profitability.
14:01
Yeah, a lot of people seem surprised that a company is optimizing revenue.
I'm really not familiar enough with the goings-ons to opine intelligently, but I'm obviously not letting that stop me. I think stackoverflow has made itself a central part of the programming world, and done it in a way that leaves programmers feeling like they are in control. As a result it has always felt like "our" community. Of course, like any other business, it's not really - it has been "our" community only because the people who own/run felt it was in their best interests
to let the community do its thing. That has changed. For whatever reasons, the owner(s) have decided it's time for change, presumably for their own benefit (indeed, companies like to optimize revenue). The hammer is dropping. People that don't like it will leave. Likely, stackoverflow will continue along for a long time anyway. Whether or not these changes will actually make things "better" for newer developers is debatable and will likely never be answered.
14:36
@ConorMancone to be fair... I think they have a different problem there. It is not the sudden discovery that they need $$$ to run that is alienating the userbase.
Strangely enough, it is alienating the userbase that is alienating the userbase. Go figure.
14:50
then I must be alienating someone, since I too feel pretty uneasy with all the recent incidents.
I doubt you're alienating anyone at this point. Most like you're feeling alienated.
@Derpy My completely unfounded assumption is that they are increasing their attempts at monetization. I'm sure they have never had too much trouble being profitable, but there is a difference between being profitable and seeking to maximize profits. Over the past few years there have clearly been many attempts at creating new streams of revenue, and they have been much more vocal about the business itself and advertising for their new products.
Again, shooting from the hip here, but I suspect they are worried that stackoverflow gaining a reputation as being an "unfriendly" place will hamper their long-term business prospects, and they are trying to do something about it. Note that I don't say any of that to be negative: it makes perfect sense for a business to behave this way. I think they are just surprising many of their users. I'm interested to see how this all works out in the long run.
@ConorMancone I repeat what I said before. The community here was fine in carrying all the salt to the market to let SE survive. And they would have been fine with carrying a little more salt to let them actually grow too, I guess. But if now the donkey are beaten with a club while they try to carry the salt to the market... they will soon jump in the river, even if that will be their demise.
@ConorMancone That too I already said yep, we kinda agree there. The fear of damage because they could be marked as "unfriendly" by the evil Internet is something I see too in these action, to the point I sometime fear that the focus is more on the actions that on the results they want to obtain.
I'm not sure money is the only motivator for the resignations: literature.meta.stackexchange.com/questions/1195/…
Money is not the reason for resignation.
15:05
But I'm not a moderator, so I cannot see what's going on behind the curtains. And baseless speculation can only worsen the understanding of the situation.
Mods are volunteers giving their time to the communities.
By "money", I meant the policies driven by the thirst for money by the company.
Also, those actions seem a little odd, especially when no mater what angle you look at their action from, they still appear to use unfriendly ways to push friendliness. Yep, there is indeed a curtain somewhere, and I can't obviously see behind it.... but the output of this "black box" still feels pretty bad, despite the box content.
I mean, do I really need to know what the box content are if every time I look at it the box is on fire?
You do not only see the smoke coming out the box. The box is not isolated from the outside, it's in a feedback loop. I mostly see the fire spreading outside the box.
This does not mean nothing is going on in the box.
This whole situation is spreading FUD, and that might be far worse than the original issue.
15:24
spreading FUD? Naah, sorry if I gave that idea. I am just taking some time to appreciate the composure the dog manages to keep. Wonder if that works even here?
yep, it does
16:09
From the last resignation : "SE has announced and begun enforcing a new Code of Conduct which both censors and dictates beliefs."
I guess this explains the resignation from non puritan persons.
16:27
@ConorMancone "Congratulations on cracking RSA. Now write a whitepaper about it"
16:49
@ConorMancone all bug bounty articles i have read are click batey in one way or other.
if i got 30000$ i would think i was god himself :D
anyway it was an okay bug.I have seen the same attack done to hackerone and they gave him like 1000$ if i recall correctly
@MechMK1 It's all about the presentation. The question has migrated so I can't see the edit history, but from your link it seems his original question was "Checkmate to factorization". He also seems to have that, "This thing is stupid easy to solve, why is this considered okay?" attitude, compared to say, "I'm clearly missing something, what am I doing wrong?" which is a much more reasonable question for a self-proclaimed novice
So, yeah, mildly snarky responses seem perfectly reasonable to me
Anonymous
17:28
@daya I got like 2k points, haven't played much.
18:54
Seems the issue that triggered it all was pronouns christianity.meta.stackexchange.com/q/6718
@Anders Seems moderators (and eventually all users?) are required to refer to a user using their preferred pronoun. And not talking to that user to avoid the issue isn't acceptable.
Which feels a lot like compelled speech, and sounds impossible to moderate.
 
2 hours later…
20:46
Doesn't sound like an unreasonable policy.
Obviously, that doesn't mean any moderator who asks questions about it should be fired...
"Compelled speech" is only a problem between an individual and a state.
@Anders I know, that's why I said "feels like"
and I don't really have a problem with the idea in general
I think I tend to use singular they for the most part, but I don't mind too much if someone wants me to use a specific pronoun
@AndrolGenhald Good point. As usual, I am using my inalienable right to not read carefully enough.
21:01
I can see how some people might have an issue with it though, and the way it's being handled is ridiculous
Yeah, giving someone the boot without telling them first is never OK. And if it was just for asking questions about it or expressing some sceptisism, it's even worth.
Allright policy, terrible roll out.
And even though I don't really have an issue with it, I'm not sure I like it either. Depends how it ends up in practice. If someone can say I need to refer to them with a specific pronoun, whatever, but if I'd prefer to just stop talking to them telling me "No, you must talk to them and you must use that pronoun, anything else would be offensive" seems like it goes a bit far
In general, people should be free to talk or not to talk with anyone they want. But if you are doing volunteer work as the representative of a community? Systematically avoiding one group suddenly has a lot more consequences.
Yeah, and if all the mods on a site just wouldn't talk to a group of users that would certainly be a problem
so I can kind of understand it from that angle
but idk if that would even be an issue in practice anyway
and what I'd really like to know is if this is supposed to apply to all users or just mods
21:18
All users would be unrealistic! I mean sure, you could ban someone from saying "I'm not going to talkt to you because...", but you can't ban anyone for not replying to someones comment. How would that even work.
But I guess you could still write the rule down on paper...

« first day (3210 days earlier)      last day (1968 days later) »