« first day (3318 days earlier)      last day (1860 days later) » 

09:01
I'm not even out of bed yet and I'm already pissed off that .NET has no ready made function to test the primality of a number
@J.J That's why I'm learning how to cook. Sure, my creations taste mediocre at best, but every failed dish is a step forward to becoming better
Miller-Rabin is not that hard to code.
@MechMK1 Test primality have a lot of algorithm, you need one corresponding to your need, I think that's the reason they didn't do it
09:35
@MrHeliose You could say the same about sorting algorithms, yet every language has at least one built-in
By the way, I designed a new language!
I call it JebboScript, and it works as follows:
I guess there are more needs for sorting algorithms than for testing primality of number. Especially since the code depends on how the number is coded (array of bytes or big-integer library?)
The SHA-256 hash of the input is taken, and if it is all zeros or all one's, it prints whether P = NP or not. Else, it executes the input as if it were JavaScript
@A.Hersean I assumed BigInteger would have IsPrime(), given that it has IsOdd(), IsZero(), etc...
@MechMK1 quick-sort performance are the best in 99% usecase, I don't think it's that straight forward for primality
@MrHeliose You could still implement Miller-Rabin or similar and you will get alright performance. And even then, checking primality for "small" numbers (e.g. up to 64-bit) should be fine either case
If someone needs primality checks for big numbers, their use-case is specialized enough to know they need something specialized
Usually, BigInteger libs have a isPrime function. For example in Java: java.math.BigInteger.isProbablePrime()
09:44
Perhaps I just didn't find it in .NET
It appears it's missing in .NET. I agree it's odd.
Very strange...
Anyways, time to play Rimworld
I have a prisoner who's lungs I need to harvest because my grandfather has Asthma
 
2 hours later…
12:01
How much sleep do you get as pentesters btw? What's your daily schedule like?
 
2 hours later…
13:37
Pentesting should be a 9-5 (or your national equivalent job). It can be a mentally challenging activity, which is best approached when rested.
So getting a decent night's sleep is a good plan
Anonymous
14:27
@JohnZhau About 3 hours lul
Anonymous
@RoryAlsop The way that they were tweeting suggested that they were proud of not having them, which is just pathetic.
Anonymous
P.S - I don't disagree that CVEs mean anything.
Anonymous
I disagree with InfoSec Twitter begging for attention because they don't have a CVE.
Anonymous
It's pathetic.
Anonymous
Ignore trolls, done.
Anonymous
14:32
You don't need to start a fucking movement because one guy trolls someone on Twitter.
Anonymous
That is more childish than the troll.
@JohnZhau It's a regular 9-5
@RoryMcCune Lol I had to look up why your name was like this
Room Owner :D
14:48
wooo room owner \o/
I used to be an RO. Then I took a diamond to the hat.
lol
 
3 hours later…
18:07
@J.J ah, understood - I hadn't seen those ones
 
3 hours later…
21:02
Do we want a canonical Q&A post about the recent Microsoft crypto API exploit?
like we have for a number of other exploits?
I don't know what the current stance is on canonical exploit posts, so that's why I ask
@Nzall Can you come up with a draft?
21:22
@MechMK1 I'm keeping it short:
> **Note**: This is meant as the canonical FAQ about this exploit.

What is the recently patched and disclosed Windows 10 OS family exploit labeled ChainOfFools and/or Curveball? More precisely: what's the logic behind the exploit, how does it work technically to undermine Elliptic Curve cryptography and what can be done with it? And how can I defend against it beyond the usual "keep everything updated"?
I know we have other canonical Q&A posts, but I can't find any to get good examples.

« first day (3318 days earlier)      last day (1860 days later) »