The DMZ - 2012-08-08 (page 3 of 3)

« first day (601 days earlier) ← previous day next day → last day (4284 days later) »

6:01 PM

I have only made minor edits - a bit of spelling and grammar - and I love that post. I wasn't aware of the exactly what the issue was with the Diebold one, so have opened that link now to have a look. Might need to chat with the lads at MWR to see if they can clue me in on the chip and pin one :-)

if you are happy with my edits I will schedule for Friday (you'll see I have set the next QoTW for the following Friday)

thats perfect for me

@RoryAlsop It is, but expensive, and not suited for non-enterprise use. And since the PGP plugin for Outlook is so fucking terrible you're stuck with using Universal in your mail stream.

@ScottPack yep - totally agree

Which, honestly, scares me.

@ScottPack I really prefer TLS between large orgs - that way it's all encrypted between them

6:16 PM

@RoryAlsop Oh, uncontested.

The trick is actually having enough systems supporting it such that it's possible.

@ScottPack and currently, it really is just large corporates, and a few forward thinking other organisations

Pretty much.

I have made a slight update to the competition scoring as per comments earlier around what was actually scriptable to measure the outcome. So that one now looks for a user gaining the revival badge, rather than the original wording which was just around highest score on unanswered questions.

Revival badge: Answered more than 30 days later as first answer scoring 2 or more. This badge can be awarded multiple times.

this also has the nice side effect of pushing activity onto more old questions...

So you're encouraging earning said Revival badge?

coolio

turns out the required script to do the other one was maybe possible, but in any event really ugly

6:23 PM

Assuming we have more than 3 or 4 old questions with zero answers :)

@ScottPack or any number of answers scoring 1 or less

Stupid English language parsing.

heh

Search terms aren't granular enough for that. Could probably whip something together on data

Revival is also a good one to get newbs aware of the wonders of badges :-)

6:53 PM

Blog - Stack Exchange: Stack Exchange is not a forum: the role of “niceness” on a Q&A site

Shog9 on August 08, 2012

It’s been a few weeks now since Joel kicked off our “summer of love”. There’ve been some excellent discussions in the blog comments and on Meta, and we’ve tried to present some hard data on how objectively “nice” we are. But it’s high time to talk about what place “niceness” really has on Stack Exchange. And to do that, we need to start by talking about you:

You, sir, are a jackass.

And that’s ok.

Stack Overflow wasn’t created to be some utopian ideal of peace and love. When Jeff & Joel set out to create this system, they knew full well the sort of problems that face online commun …

7:18 PM

really love this mix:

soundcloud.com/skyvemusic/skyve-presents-islamabad

3

Q: How to ask big list like questions?

There are some big list-style questions. Some examples of questions where top-voted answers are list of recommendations: one, two, three, four. Most of answers to such questions are just list of books, without any explanations why this book is considered good. Thus such answers are useless as the...

discussion asking-questions questions

7:38 PM

hey guys. Does anyone know of a site that provides a lot of known locations of application passwords stored locally? For example it contains the path of where Filezilla stores rememberd passwords or where in registry X application stores it.

8:07 PM

Can someone back me up on this or correct me:

0

Q: Are SQL injection scans considered illegal?

I know that this thread mentions that Essentially, if you are seen to be someone who knows what you are doing, then even typing in a single-quote to a web form has been enough to be arrested and charged over in the past. But lets say i'm writing a pen test tool that will be doing sqli ...

penetration-test legal

good question and topic for discussion

Not really interesting

It's legal thing. Nothing technical.

It's just someone thinking he can outsmart the legal system and not thinking about the fact that a lot of legal decissions are left up to judges to decide

Clearly, he does not read any thing related to security breaches and researcher

It's well know that security has great problem with legal system

And number of researchers have been suited for doing their job and revealing security breaches

Is that a global problem or is it simply very prevalent in the US?

8:21 PM

I'd say global

As I commented, the simple fact of trying to access a system when you're not authorized is legally punishable

in France

I think in india they hired a magician to check if a crying statue was spirit or a science and they arrested him when he proved it was science

@xce I remember the case, but I was thinking it was someone significantly more credentialed than a magician.

crazy indians

those practices remind me of the inquisition

8:37 PM

@Lucas I'm pretty confident this question could be flag for closing

Cause it's either too localized or overly broad

@M'vy First, let me say that question is intended to handle a grey area I had in my head. I wasn't being difficult, I was simply playing devil advocate for the purpose of defining a well purposed answer. As for "Reading anything related to security breaches and researcher".. You "Dont seem to have read anything on etiquette on the internet"..

true

Yeah, sorry about that

@M'vy Also, Is it too specific or too broad? ..seems like you don't know where you stand on this. I don't think you understand what being TOO SPECIFIC or being TOO BROAD even means..

@Lucas's answer is spot on - some folks have got away with it, some haven't. In the UK it is illegal - very definitely - but you mileage may vary, so I think I agree it is likely to be offtopic here as it is legal advice, so I expect close votes

@DigitalFire We actually have seen a few questions which depending on interpretation could be either

8:40 PM

is there really no where good to talk about internet law stuff?

Not like a forum or Q&A yet, no

think there is an Area51 proposal

oh cool, I'm going to commit to it

Isn't there a "Legal" purposed on Area51?

and there is outlaw.com by Pinsent Mason which does try to clarify various areas of law - sometimes Internet law

And sorry @DigitalFire, I did not intended to be so harsh on you.

8:42 PM

* http://area51.stackexchange.com/proposals/40687/rules-and-laws-for-it
* http://area51.stackexchange.com/proposals/41369/law-government

@DigitalFire aye - see my comment above yours :-)

^ tY =D

hrmf

yay - got my edit privs over on Sports SE at last

it wants an email address for me to commit

8:45 PM

@RoryAlsop I always get happy too when I get added privs on the boards. ;]

@DigitalFire well it makes life easier when someone is wrong on the internet

user image

LMAO!

@RoryAlsop I think you meant to do this....

What do you want me to do? LEAVE? Then they'll keep being wrong!

G'night all!

night

Sweet dreams.

9:05 PM

Night :)

9:36 PM

@Iszi - can't see the difference on my phone. What have you done?

10:23 PM

@RoryAlsop ones a link to stackimgur and the other is a straight link to xkcd

« first day (601 days earlier) ← previous day next day → last day (4284 days later) »

Transcript for

Aug '128

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile