The DMZ

AviD

15:00

so? storage is cheap. What, you're trying to load it onto a floppy disk? ;-)

2

Terry Chia

@AviD Agreed. Get more storage. Simple solution.

Polynomial

I have the entire archives of about ~300 anime series.

AviD

@Polynomial in your case, more storage wont help. But I can recommend a mental health professional.

3

Polynomial

hahaha

Even on my 8TB array, that's a large chunk of it gone.

Terry Chia

@AviD Get both.

Polynomial

15:01

I'm working on more storage though.

Terry Chia

@Polynomial Hah. Do you use RAID? I'll cry if that amount of data was lost due to a hard disk crash.

Polynomial

the 8TB array is actually 8x2TB disks in stripe+mirror.

I need to get round to configuring my new RAID controller actually.

Terry Chia

Why not RAID 5?

AviD

oof, hate dealing with these things.

Polynomial

RAID5 would take ~48 hours to rebuild a single lost disk.

Terry Chia

15:04

My 1TB disk is only half filled.

AviD

if I just go ahead and install the full megacodecpack, am I not going to regret it?

Polynomial

@AviD Should be OK, but I don't think I've used megacodec myself.

Terry Chia

I really need to get me a GPU.

Scott Pack

@Polynomial That and the whole read failure thing.

Polynomial

indeed

AviD

15:04

normally I dont give a flying penguin, but I'm planning for my kids to be able to watch some movies during vacay.

Polynomial

new RAID controller has an awesome feature - you can stripe two SSDs together, with a single mechanical disk for mirror.

Terry Chia

@Polynomial SSDs are gonna be so fucking expensive considering the storage you need.

Polynomial

I know, but I'm using SSDs for my OS drive.

Terry Chia

Thomas really gave a kickass answer to your kickass question.

Polynomial

I've got two 64GB drives in stripe.

Terry Chia

15:06

I need to get me an SSD + a GPU. Too bad i'm outta $$.

Polynomial

wow, he did. that rocks.

Terry Chia

I would love a HD7970 in my computer.

AviD

@Polynomial didja read about ex-hotmail's new JBOD - RAID-replacement?

Terry Chia

I wonder what compelled me to opt for i7-3770 + integrated GPU over an i5 cpu and a good graphics card...

Polynomial

yeah, Just a Bunch of Drives

we were looking into that at my old place for mass storage solutions

AviD

15:09

@Polynomial was a very interesting read.

Thomas Pornin

@TerryChia Nuclear weapons are a kind of hobby to me.

6

Polynomial

If Thomas doesn't win some sort of prize for that answer, there is no justice in this world.

2

@ThomasPornin You build them in your spare time? ;)

2

Thomas Pornin

►

(in French only; not really translatable)

Polynomial

heh, I don't speak any French, sadly.

Dennoch, mein Deutsch ist OK.

My German is actually pretty terrible, but I know enough to get around.

Damnit, I hate that I can't revert my close vote and change it to a different reason. Just clicked "off topic" when I meant to close as "not constructive".

Karrax

Holy shit.. the nuclear-bomb question got 4 answers while I was writing mine. I knew I shouldn't have taken time for dinner :P

Polynomial

15:16

Did you read Thomas' answer? :D

I do love that everyone's explaining Faraday Cages to me, though. I am amused.

Clearly nobody's noticed I have a profile over at electronics.SE

Karrax

LOL :D No I havent read it yet

had to rage first :p

Scott Pack

@Polynomial Remember, they're not only explaining to you but to every person who might someday read it.

Polynomial

I know. I was joking ;)

It's the reason I ask questions I know the answer to.

Usually it's "hmm, that's an interesting subject, bet a lot of people don't know that!" and then I write a question.

Scott Pack

2

Polynomial

Yeah, I need one of those.

AviD

15:22

hmm. @Polynomial re nuclear-bomb tag - we are missing some other tag, but I'm having trouble placing it.

Polynomial

hmmm... EMP?

AviD

for example, there must be some tag that would include your q, and this one:

45

Q: What would one need to do in order to hijack a satellite?

I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites. What would be required to hack a satellite (in general terms, any hack really)? Are they all basically connected in the same way, or would I need different equipment, sof...

it simply does not make sense for those to not have some connection.

Terry Chia

How about insanity?

Polynomial

hmmm... yup, that's a good one!

how about james-bond?

AviD

hehe.

Terry Chia

15:24

How do you do the tag thingy in chat?

Polynomial

[tag:tagname]

Terry Chia

insanity

ah cool

AviD

I'm actually leaning more towards something like [cyber-war|terror|etc]

Polynomial

military might be a useful one, or global-infrastructure

AviD

but those tend to be overused and misused.

Polynomial

15:25

I think military covers it, the security / cyber-attack part is implied.

AviD

@Polynomial I was thinking that too. but it's not clear that these are all military...

Polynomial

the attacks would almost certainly be military, though.

AviD

satellites are mostly not, and even the "global infrastructure" part, is mostly non-military.

Polynomial

whether the resources are governmental or not.

AviD

@Polynomial ah, but what about the terrorists?

Polynomial

15:27

my point is that military should encompass military operations.

are terrorists not military?

they're certainly militant.

AviD

@Polynomial not really, no.

@Polynomial yes, that.

Polynomial

> The word militant is both an adjective and a noun, and is usually used to mean vigorously active, combative and aggressive, especially in support of a cause, as in 'militant reformers'

Maybe create militant as a tag, and point military at it.

AviD

@Polynomial ooh, combat?

or we can fall back on apt.

Scott Pack

@AviD Roll for initiative?

Polynomial

combat doesn't really fit here - it seems to have more directly physical (i.e. fighting) connotations.

AviD

15:29

ah! thats the one. we already have it!

> APT Stands for "Advanced Persistent Threat". It is usually used in reference to a threat posed by a group with the capability and intent to persistently and effectively carry out cyber attacks against specific entities. APT has been used to refer to either the perpetrators, or the actual hack

Polynomial

sadly, APT is overused.

though I suppose it would apply in this cas.e

it's not specific to military or militant operations though.

AviD

I agree, with both those statements.

all three.

I would say about half the q's in that tag are not appropriate.

Polynomial

I don't think there's anything more advanced, persistent or threatening than a government using nuclear weapons to create EMP.

haha

I lol'd at this: security.stackexchange.com/questions/18615/…

Terry Chia

Typical Andrew.

Polynomial

I'm fed up of being polite to him now.

Terry Chia

15:37

My brain has an Andrew Smith filter now.

Patented tech. I'll sue you if you copy me.

Polynomial

My brain is seriously warped. I just noticed that your name is an anagram of Itchy Rear.

Though, if it helps, it's also an anagram for Rather Icy.

Terry Chia

How many rounds of bcrypt is recommended now?

Thomas Pornin

@TerryChia As many as is tolerable on your server. It depends on your CPU budget.

Polynomial

entirely depends on the hardware. I usually pick a work factor of at least 8.

Terry Chia

Bare minimum to be considered secure?

Thomas Pornin

15:43

E.g. if you have 50 clients per second and can devote half your CPU to bcrypt, adjust the work factor so that bcrypt takes 0.01s on your machine.

@TerryChia This has no absolute sense.

bcrypt slows down, both you and the attacker.

The attacker wins if he can muster much more CPU than you, enough to explore the space of possible passwords to a non-negligible extent.

The bcrypt factor does not fight the attacker, it fights Moore's law.

The only answer to "how many rounds" is "as many as possible". If this does not suffice, then buy a bigger server.

Rory Alsop

so.many.words!

Polynomial

A wild @RoryAlsop appears!

Terry Chia

Typical Thomas. lol

Rory Alsop

I go to just a couple of short meetings and ^this!

glad to see i.am.a.nidiot has come back...

Thomas Pornin

@Polynomial I suggest warfare. If I wrote a treaty on the geostrategy of space, I'd call it "Orbital warfare".

Polynomial

15:47

That's a good choice.

@AviD are you in agreement?

Rory Alsop

@ThomasPornin If I wrote an album which sounded like the lovechild of Rammstein and Tangerine Dream, I'd call it Orbital Warfare!

2

ahhhhh - train time - later all!

Polynomial

lat0rz.

Terry Chia

We should have a l33t sp3ak day in chat.

Polynomial

@RoryAlsop Some kind of Slayer/Dido hybrid could be interesting. "And Iiiiiii want to thank you, for climbing into the gas chambers..."

HackToHell

Damn there is not enough question here to edit :/

Terry Chia

15:53

@Polynomial Have you seen Andrew's new comment on your nuclear bomb question?

"Obviously you do not listen as you keep asking basic questions."

Gold.

Polynomial

yes, I just responded to it.

Ladadadada

I want to point out to him that "Amazon AWS services" is kind of redundant... but I can't help but think this would end up being a bad idea.

Terry Chia

lol

Scott Pack

I'll bet he pays for the Amazon AWS services by way of an automated ATM machine and secures it with his personal PIN number.

5

Polynomial

haha

have you read the conversation going off between us?

Scott Pack

16:00

I skimmed it. Looks like some pieces may have been deleted.

Terry Chia

Stackexchange's one big flaw. No way for mods to ban idiots like him.

Polynomial

No, they can actually ban them.

Scott Pack

Banning is whackamole

Polynomial

@ScottPack Sadly, there's no deletions. Andrew's random jabbering just makes it look discontinuous.

Scott Pack

wow

AviD

16:02

@Polynomial no this one is funnier: security.stackexchange.com/questions/18615/…

Polynomial

@AviD I actually snorted my drink when I read that.

Scott Pack

Is that the real reason you snorted your coke?

AviD

@Polynomial @RoryAlsop I think its time to consider some timeout period... thoughts?

Polynomial

huzzah!

How about a timeout until the heat-death of the universe?

Terry Chia

I don't know... flagging him is really bringing me very close to the deputy badge.

Polynomial

16:04

haha

right, imma go home now. I'll check up on this when I get home.

laters :]

AviD

@Polynomial no. sorry, but some of it is still not war-specific. e.g. terrorism

your fearless leader's nonsensical "war on terror" notwithstanding.

(okay, not yours)

@TerryChia please lord no.

Polynomial

furrymuff.

ttyl ~~

Thomas Pornin

@Polynomial It is done: got a "nice answer" medal.

AviD

haha, @Polynomial stop flagging ALL of his comments!

Terry Chia

@AviD Hey, go mark my flags as helpful. I'm only 10 away from deputy. :P

AviD

16:10

@TerryChia ohh, those are your piles of flags??

Terry Chia

Only 3. :P

Terry Chia

16:24

Hah, Andrew is really turning hostile towards @Polynomial.

Standard DNS is not resilient to nuclear strike. Please do not just say random words and spread mis-information. GeoIP awarness is not part of DNS RFC. Go and make one with Route 53 so you will learn something up to date. Also DNS is not enough to do it, Route 53 barely enables creating usable nuclear strike resilient system with it's services. Also please dont assert you know question in detail as you oppose the most up to date and decent solution, it's in opposite.# — Andrew Smith 12 mins ago

This comment is funny yet sad.

Rory Alsop

@AviD - yes timeout for consistent low quality. 7 days. Please do it! Otherwise I will when I get home

Iszi

17:01

@Polynomial What answer? Hard to find context with all the noise in this room!

Lucas Kauffman

17:24

afternoon friends

Thomas Pornin

Hello

Polynomial

Hahaha, w00t! twitter.com/stacksecurity/status/235025972473253888

I've got a bone to pick with you, @AviD.

I don't see the nuclear-bomb tag on my question any more! :'(

Iszi

@Polynomial Looks like one to go on the next round of our business cards.

@Polynomial Funny, I thought it should at least have something along the lines of contingency-planning and/or disaster-recovery

Polynomial

hehe.

I like disaster recovery. Shall tag.

Polynomial Solutions - "Protecting critical state infrastructure from the aftermath of a nuclear blast."

I want to register a limited company at Corporations Warehouse just so I can use that tagline.

AviD

18:02

@RoryAlsop urggh, just done it.

ecchh, I hate having to suspend users. And I've done it twice today.

@ScottPack you're next.

@Polynomial oops!

heehee, you said bone

Scott Pack

@AviD Hey now. He's the one picking your bone!

AviD

@Polynomial I cleaned up most of that random comments thread. I left one of yours, that seemed mostly pertinent even out of the idiocyflow - thought?

Iszi

Interesting, if mildly disturbing, quote: "Courtrooms are reality distortion fields shaped by the evidence admitted and testimony allowed."

AviD

@Iszi yet not really surprising.

Rory Alsop

18:25

@AviD -ooh, who else was there?

was it 1-direction again?

AviD

@RoryAlsop our favorite friend this past few weeks, in another guise from amongst the 100s he's stolen.

Polynomial

@AviD Yeah that's fine :)

Rory Alsop

at least I wouldn't feel bad about him - just merge and purge :-)

Iszi

@AviD Past few weeks, now? Oooh. Sounds like he's been causing all kinds of fun!

Rory Alsop

and on the 12th of Sept, extend his suspension to infinity I reckon (I just did 30 days for a first one)

Iszi

18:27

@RoryAlsop That sounds... kinky... or nasty... or both. I can't quite figure which.

Rory Alsop

@Iszi ewwww - sounds like what happens at one of those health farms

erm...probably

Polynomial

How many users is it now?

Andrew, i am a hacker, wasn't there another one today with an Indian-sounding name?

the one asking about malware / DDoS

AviD

@Polynomial 3 or 4. I wouldnt worry though, he has at least another 96 more.

Rory Alsop

I am a hacker is, what, 5 now? I merged 3 of his into 1

Polynomial

Hahaha, oh yeah, forgot about that.

AviD

18:28

@Polynomial yeah, thats him. same guy.

Rory Alsop

did you get 2 AviD?

Polynomial

He's clearly not much of a hacker.

2

AviD

@RoryAlsop you did 4? I thought only 2. yeah, I had 2.

Rory Alsop

I think it was 4 total from my side

2 straight away, then 2 more staggered

Polynomial

w00t, I'm on 10 silver badges now :)

Rory Alsop

18:29

or was it 3 - hang on - will go and find out

Iszi

Funny. He's got an account on SU that's not suspended.

Thomas Pornin

@Polynomial Impressive ! I have only 64.

Iszi

No activity there either, though.

Rory Alsop

@ThomasPornin hahahahaha - said with deadpan, I hope, and a small cigar

Iszi

Blah. 12 silver, 49 bronze here.

AviD

18:32

@ThomasPornin aww I only have 33 :(

@Iszi ah, but how many gold?

Rory Alsop

Thanks for the flag @Iszi

Iszi

@RoryAlsop YW

@AviD None here, yet. Come to think, I wonder if I have any at all?

Polynomial

One gold.

Ten silver.

Scott Pack

Looks like Hack2Hell is going to approved edit his way to 2k

Polynomial

28 bronze.

Iszi

18:33

Two, on Arqade.

Polynomial

I could open my own olympics at this rate.

Iszi

And those two are duplicate - I have two "Famous Questions" there.

Rory Alsop

@Polynomial what, you have a jessie j?

Iszi

7

Q: How can I find or recall my horse?

Lately, I've been finding my horse to be more of an annoyance to use than an asset to have. But, maybe I'm missing something that could resolve this - or maybe it's the game that's missing this. I'm hoping someone here can help. First, there's the bit about not being able to fight while on hor...

skyrim ps3

13

Q: Where are the best house locations in Skyrim?

I'm looking for the best house location, for two different types of characters. Craftsman: The house must be very near to, or include: Alchemy Lab Arcane Enchanter Forge and/or Anvil Grindstone Workbench Smelter Tanning Rack For the Craftsman, the house in Whiterun is great except it lacks ...

skyrim

Polynomial

though Thomas would be like Usain Bolt and Michael Phelps rolled into one ;)

@RoryAlsop Jessie whatnow?

Iszi

18:35

Shame that each has >10,000 views, but <15 votes.

AviD

Polynomial

twitter.com/edent/status/234937974154989568 <- clown security!

2

Iszi

Oh wow. I can't believe I'm just now getting this idea. I just got an e-mail newsletter that has a whole lot of talk about the new Mars rover, and various talks and events regarding it. After seeing its name so many times in one page, it just now occurred to me that someone needs to Photoshop together an image of the rover maiming a feline.

And now, to Google, to see if it's been done...

None quite like what I'm looking for. But here's a few:

Gilles

@AviD I didn't get a chance to see it, but judging by the title, probably not

Rory Alsop

@Iszi I did see one about 15 minutes after the landing was confirmed - was very good. Will try and find it. Was probably on B3ta.com

Iszi

18:46

One step further: Mashup of "Curiosity killed the cat." and "Schrodinger's Cat".

So, "Curiosity killed the cat... or did it?".

Polynomial

Curiosity killed Danny John Jules.

OH GOD NO

I just heard THE NOISE.

you shall know the horror of the noise, when I tell you that it is a click-clunk, and it is emitted by a mechanical hard disk.

Scott Pack

Time to replace that Maxtor.

Rory Alsop

BACK UP ALL THE THINGS!

Sorry - memegenerator appears to be 403'ed

Polynomial

haha, as if I'd go with Maxtor. they fail so hard.

Scott Pack

@RoryAlsop Please. This isn't a PCI-DSS question.

2

Polynomial

18:55

I think I know which drive it is anway

I got a delayed write failure the other day from it

figured if I got another one, I'd replace the drive. clicking seems to verify.

Lucas Kauffman

@RoryMcCune see you at brucon, I asked if I was allowed to go, apparently the whole security team is going :p

Polynomial

I'm still waiting on my CFP response for BruCon :(

can't afford to pay for myself to get there.

well, I can, but not with the ticket too.

Iszi

19:11

@LucasKauffman So, who's minding the mint then?

Lucas Kauffman

@Iszi we only do external consulting

Iszi

Ah. BTW: Don't ask why I know of that movie. I'm not even sure myself.

Lucas Kauffman

@RoryAlsop Eric still remembered you and was surprised I knew you

Scott Pack

@LucasKauffman Still have your job?

Lucas Kauffman

19:42

@ScottPack still have it, loving it

Thomas Pornin

Does anybody knows of an email client which 1. is a Java applet (no installation on desktop systems, except JVM), and 2. supports S/MIME (using the private keys from the desktop, i.e. CryptoAPI/CNG on Windows) ?

It is a kind of shopping-list question, hence I ask here, not on sec.SE proper.

Rory McCune

20:01

@LucasKauffman cool :)

Rory Alsop

@LucasKauffman :-)

oh - did you guys see Sec>SE has over 10,000 users (nearly 8000 have a rep of over 1, meaning they have done something :-)

Polynomial

:)

Gilles

20:17

@RoryAlsop people who have 101 rep may have done nothing but create an account

Rory Alsop

@Gilles right - I need to go and count them out, dammit (cheers)

Gilles

@RoryAlsop I suspect 101-reppers are the majority

you won't easily be able to tell which ones have ever voted, I think

you can get that from SEDE

Rory Alsop

that works out at more like 3000 then - I was allimpressed for a moment there

Polynomial

lol

aww :[

Rory McCune

still 3000 particpants in an IT security community has got to be one of the largest out there!

so not a bad thing really.. although we need to bump the number by about 6001 as soon as possible

so we can use youtube.com/watch?v=SiMHTK15Pik

Lucas Kauffman

20:38

@RoryMcCune if that happens I vote that @RoryAlsop changes the hair of his mask to bright blond hair that's standing up

Rory McCune

@LucasKauffman @RoryAlsop absolutely!!

Rory Alsop

@RoryMcCune excellent!

@LucasKauffman what's wrong with bright orange standing up?

or flailing?

Lucas Kauffman

@RoryAlsop It's not super sayan yellow, but it'l do :p

Rory Alsop

hahahahaha - true

Lucas Kauffman

btw

there's only one problem with my job at E&Y

apparently I have to learn how to use Lotus Notes :o

I heard there are little hate communities around lotus notes

Rory Alsop

20:53

Well, I have to admit I prefer Notes to Outlook (which is handy as PwC also use Notes)

my preference would be to use neither, as they bork the majority of things I want to use them for

including basic email sending :-)

Polynomial

Lotus Notes is like sex with Kobe Bryant. You can kick and scream all you want, and it's gonna hurt like hell, but eventually you have to accept that it's going to happen.

3

s/Kobe Bryant/any famous rapist/

Rory Alsop

@Polynomial and Outlook is worse!

Transcript for