The DMZ

Terry Chia

01:49

God, that Apple question is still a mess. blunders is just trolling, and curiousguy ain't helping either.

Iszi

02:13

@TerryChia I'm inclined to agree, especially considering he's now posted his own answer, half of which is just a response to comments. While the original question may actually be a legitimate one which could be of interest, @blunders does not appear to be handling it in a way which is fit for SE.

Terry Chia

The question itself is excellent. The way the three parties (blunders, curiousguy, everett) are handling the question is the problem.

Iszi

The really frustrating part of it is that @blunders seems to have a valid point, that Apple could be handling SMS more securely. But then, that opens up the discussion to the question of "Well, is anyone else actually doing it?" and even then all this is getting lost among the noise there.

Wait a sec... @RoryAlsop has already done a comment cleanup on this one?

I couldn't even tell!

Terry Chia

Hah. It was about the same length before he cleaned it up.

Terry Chia

04:04

lol, Motorola is suing Apple. Patent wars are so amusing.

Stack Exchange

BUT WHAT IF I REASSURE MYSELF WITH A JOKE AND THEN DON'T WORRY ABOUT THE RASH AND IT TURNS OUT TO BE DEATH MITES AND I COULD HAVE CAUGHT IT

AviD

06:16

@RoryAlsop @Gilles and others - the problem is that everybody is talking about a different consensus.

so far there isnt really one - general guidelines, yes, but it breaks down on the specifics.

thats why the FAW is still screwed.

Terry Chia

Morning, @AviD

AviD

@TerryChia diurnal watsisism

Terry Chia

Get yo lazy ass over to that SMS question and clean up the comments. :P

AviD

@Iszi yeah, he's mass-erased the 20-ish that were left after I selectively dropped a few here and there.

@Iszi I think that is a much better question than the one about apple.

mentioning apple (except perhaps as an outlier example) just leads to, well, what we have now.

without that, its a fantastic question on the state of a very common technology, that does not have enough attention.

hmm, maybe I will try to edit it in that direction when I get back from meetings.

g'day, all.

Terry Chia

@AviD Hendrik edited the question to remove the mention of Apple already.

Oh, Apple is still mentioned. But with a far better context now.

Luke Sheppard

06:41

New here. But for the record, thank you for not simply using irc. Pretty tired of that.

Rory Alsop

08:03

So - we're in week 2 of the competition. The Topic for this week:

[tag:shellcode], [tag:dep], [tag:aslr], [tag:buffer-overflow], [tag:safeseh]

@AviD yes - broad agreement of the core, but with a periphery that differs slightly

@AviD there is a lock reason which includes too many offtopic comments. Could do that.

Terry Chia

Sweet, i'll post my question.

wtf is safeseh

Rory Alsop

I dunno

summat to do wi that clever code stuff

Terry Chia

lol

Terry Chia

08:49

@RoryAlsop I have submitted a blog post about the CIA triad for review. Mind looking through it? ;)

Rory Alsop

08:59

@TerryChia Looks good - just a couple of thoughts: In each section you could link to one or two questions (eg in Confidentiality you could link to a PCIDSS question or to the PCIDSS tag) and also do you want to mention that while C.I.A. drive the majority of controls, there are others such as Non Repudiation which can be essential in payments

I have added a couple of tags to it for you as well

and saved it back as draft

Terry Chia

@RoryAlsop alright. i'll do some changes in awhile :)

Rory Alsop

I think it works well, it's more just to help a reader who maybe doesn't fully understand have some examples

(and always good to have links to the site from the blog too)

Terry Chia

09:16

@RoryAlsop Made a few changes and submitted it for review again. ;)

0

Q: The inner workings of iMessage security?

I found this article via Hackernews: Dear Apple: Please set iMessage free Clues about iMessage so far: Use of TLS Apple is its own Certification Authority(?) Interesting, IMHO, questions: What other security technologies are used? Where is iOS Device Encryption involved? How are user cert...

Interesting question. I see it attracting plenty of haters and fanboys though..

Rory Alsop

09:33

@TerryChia Looks good (I added in a quick bracket to list the 6 Parkerian Hexad items)

We could publish that today if you like - and I'll chat to @Poly re the QoTW for Friday

Terry Chia

That'll be fine. :)

Rory Alsop

@TerryChia scheduled for 1200 UTC

Polynomial

09:56

I heard my name.

Terry Chia

@Polynomial Weirdo

Polynomial

o_o;

Terry Chia

@Polynomial Heh, busy lately? Not many tl;dr answers recently.

Rory Alsop

@Polynomial Mornin' - I saw you had pinged back regarding the QoTW. You want further input?

Oh - can't remember if I posted this - sounds interesting:

turingfestival.com/security-freedom

Polynomial

Yeah, would be good. I'll hop on chat to sort out the details at ~1900 BST if you'll still be around.

@TerryChia Yeah, had some stuff going off. What with getting engaged and all, real life is rearing its ugly head again!

Terry Chia

10:00

@Polynomial Real life? Is that some sort of animal you can eat?

Rory Alsop

@Polynomial should be - kids are having an early night as they start back at school tomorrow

@TerryChia Ask @AviD :-)

Polynomial

@TerryChia It's more like a Tamagotchi. Every so often it beeps at you, requiring you to do some small task. The beeps are sometimes frequent, sometimes infrequent. If you avoid it for too long, shit starts to pile up.

All I know is there's no way to pull out the battery.

Fortunately I get to escape from real life for a bit in a couple of weeks. I've got tickets for 44Con :)

Rory Alsop

@Polynomial apparently so: bbc.co.uk/news/health-19249680

Polynomial

motherfucker!

excuse my language.

damnit, I really hoped he'd win that case.

@RoryAlsop You're coming to 44con, right?

Rory Alsop

@Polynomial me too

@Polynomial It isn't looking good

:-(

Polynomial

10:08

bah :(

who was it on here that definitely had tickets?

Rory Alsop

@Polynomial I think @RoryM was one maybe.

Polynomial

ah yes, I think he did have one.

Terry Chia

Get yer asses to singapore sometime. ;)

Rory Alsop

@TerryChia definitely! Think it's been 23 years since I was last over there

Terry Chia

@RoryAlsop damn, that's longer than i have been alive..

Rory Alsop

10:22

@TerryChia :-) This is why @Scott and @Iszi call me gramps

Think I went via Kuala Lumpur on my way out to Australia and Singapore on my way back

Terry Chia

@RoryAlsop heh. you don't look THAT old on your linkedin profile though. :P

Rory Alsop

didn't get much time in KL or Singapore, but had nice stopovers

@TerryChia It's the rock music and motor racing that keep me young

Terry Chia

@RoryAlsop try coming to one of the security conferences here in sg ;)

syscan for example

Terry Chia

10:40

6

Q: Should SMS systems warn users of possible spoofing attacks?

The author of this blog post Never trust SMS: iOS text spoofing says that: The sender of an SMS message may provide arbitrary sender information using low level protocol features. Furthermore the sender may set a header, to indicate, that replies should be sent to a third number. Apple comments:...

authentication sms

Do you want to clean up the comments again?

I think you should make it clear that discussions should be done in chat, not comments.

Rory McCune

11:34

@RoryAlsop indeed although booo on the you not making it front !

M'vy

@Terry I think the lock message is clear enough

This post has been locked due to the high amount of off-topic comments generated. For extended discussions, please use chat.

Terry Chia

@M'vy It wasn't locked when i asked. ;)

M'vy

Argh... the rorys did strike again then.

Rory McCune

not me guv. I don't have that kind of power :O)

Iszi

@RoryMcCune We're all Rorys in here, especially the Mods. You should know that.

M'vy

11:54

Beware the Rorys with a diamond pick

Stack Exchange

Stack Exchange Security Blog: Confidentiality, Integrity, Availability: The three components of the CIA Triad

Terry Chia on August 20, 2012

In this post, I shall be exploring one of the fundamental concepts of security that should be familiar with most security professionals and students: the CIA triad.

What is the CIA triad? No, CIA in this case is not referring to the Central Intelligence Agency. CIA refers to Confidentiality, Integrity and Availability. Confidentiality of information, integrity of information and availability of information. Many security measures are designed to protect one or more facets of the CIA triad. I shall be exploring some of them in this post. …

M'vy

Damn linkedin is bothering me again about unverified address

Hum love it: your email is confirmed message, but still not verified address.. I give up

Rory Alsop

13:01

hmmm - looks like my hosting provider is down. My sites and the secure login timeout. Even a netcraft check times out... :-(

M'vy

hm

Rory Alsop

Oh - and I see you have nominated yourself as well. I had thought that no one else had, as it was still at 6 nominees. Hadn't realised one dropped out. Good selection of nominees.

Terry Chia

@RoryAlsop Oh, the Sunny dude dropped out.

Rory Alsop

:-)

probably for the best

(ahem)

blunders

@Rory security.stackexchange.com/questions/18860/…

Rory Alsop

13:10

@blunders Hi there

blunders

What's the deal with comments on this question?

Rory Alsop

that one does seem to have got everyone commenting at great length - almost turning into a flame war. Even the auto-community account has flagged it a couple of times

A few comments are fine, and if the useful bits can be rolled up into answers, all the better, but when individuals start using it to be rude, or for a full conversation, the recommendation is to use Chat instead

in fact, where I say recommendation, it is a very strong recommendation from SEI that it moves to chat :-)

Afternoon @ScottPack

Scott Pack

@RoryAlsop True statement. Sex, drugs, rock, and roll do a fantastic job of keeping your youthful appearance. Just look at Keith Richards. He's like 175!

Rory Alsop

@ScottPack :-)

blunders

Is there a way to inject a chat link into comments?

Scott Pack

13:14

copy paste?

Polynomial

or the "I suggest we take this to chat" button.

:P

blunders

Meaning setup a chat room just for the question, and get a link for it.

Terry Chia

@ScottPack Keith who-now?

Rory Alsop

@blunders what @Poly said

Scott Pack

>_<

Polynomial

13:15

@TerryChia You what? :|

Rory Alsop

@Scott - doesn't @Terry get to call you gramps?

lol

Scott Pack

I'm surprised SEI doesn't call it "getting a room"

3

blunders

Right, I know the "I suggest we take this to chat" button -- but it's normally injected after comments reach the point of being already to long

Polynomial

The Keith Richards.

Scott Pack

@RoryAlsop Wow. I just realized that I'm almost double @Terry's age. Not. Cool.

blunders

13:16

@ScottPack Too funny

Terry Chia

@ScottPack Hah.

Polynomial

I'm the mean of the two, then.

blunders

Anyway... nevermind -- I hate dislike chatting on "issues" and it would not have made the party in question address the facts.

Scott Pack

From what I did see, before it imploded into a moderation, it was feeling more and more like the kind of bickering one sees in the Letters to the Editors section of a small town newspaper.

Polynomial

skeeter voice ... "We dun't take kindly to dem hate dislike types around here."

2

Scott Pack

13:19

Amusing for the first few editions, but quickly degrades into something unproductive .

Terry Chia

@blunders I don't see the problem. Both answers to your question have their merits. What you think is a fact might not actually be true.

Scott Pack

@Polynomial Shush you.

Polynomial

;)

I always imagined Jon Skeet to talk like Skeeter from South Park.

Scott Pack

@Polynomial Don't all Readonians sound like that?

Terry Chia

God my fedora installation is taking forever. Why did i download the network installation version..

Scott Pack

13:22

I always use the Fedora network installer. Of course, I've got 1 Gbps throughput from my workstation straight to several of the mirrors. I2 FTW!

Polynomial

@ScottPack Possibly.

blunders

@TerryChia For example, it's been deleted, but main claim for one answer was "Apple is accepting liability for the issue if they fix they issue." -- which meant they should never fix the issue.

The basis for this claim was that auto didn't install seat belts until they were required to do so. This was proven to be a false claim, meaning that the there were no facts presented to support "Apple is accepting liability for the issue if they fix they issue."

Terry Chia

@blunders I agree with what @ScottPack said about that issue just yesterday.

Scott Pack

I think I spent most of yesterday high on caulk fumes. Care to summarize?

4

Rory Alsop

@blunders - I agree with you on things like that. The problem was just that people were starting to bring in all sorts of arguments that either were irrelevant, or weren't really helping the viewpoint. They were more hearsay and bickering

I think both answers should stand, and be voted on

Terry Chia

13:26

1) Vendors should not be blamed for conforming to a standard. 2) Vendors should be applauded if they take steps to address the shortcomings for a standard without breaking compatibility. 3) Vendors should be blamed if they break compatibility with a standard.

Iszi

When did this become one of those noisy rooms? What did we do to deserve this?

Rory Alsop

If it gets to the level of arguments in comments it doesn't help anyone

Scott Pack

Oh, right, yeah, that.

Rory Alsop

@Iszi hey Iz!

Scott Pack

@Iszi Go back to The Comms Room. It's quieter.

Iszi

13:27

@TerryChia I'm Iszi, and I approve this message.

Terry Chia

Bottom line - Apple has no incentives to address the shortcomings of the SMS standard, especially since no one else is doing it.

blunders

@TerryChia Why don't you post that as an answer?

Rory Alsop

I was going to say maybe @Hendrik was right - the competition would increase low quality traffic. But actually the noise in here is many of the usual suspects :-)

Terry Chia

@ScottPack lol

Rory Alsop

@Iszi I'm Iszi, and so's my wife

Scott Pack

13:28

Pack's Law of Standards. I'm liking it.

3

Polynomial

@RoryAlsop No finger pointing I hope.

Iszi

@RoryAlsop More specifically, the noise in here is many of the new usual suspects.

Rory Alsop

@Polynomial no :-)

Terry Chia

@Polynomial @AviD would be pointed at long before you. :P

Rory Alsop

@Iszi safety in numbers

@TerryChia (and me, probably)

Terry Chia

13:30

@blunders I think Everett's answer covers it pretty well.

@ScottPack RFC 99999 maybe?

Scott Pack

@TerryChia Not as succinctly as Pack's Law of Standards, but reasonably, yeah.

Polynomial

@TerryChia I prefer TIME-WAIT Assassination Hazards in TCP.

Terry Chia

@Polynomial woah, brilliant.

blunders

@TerryChia Okay.

Polynomial

@ScottPack Is it a fudge-based standard? ;)

Rory Alsop

13:36

@Polynomial oh dear, the punnage!

it burns

Polynomial

B-dum-pun-tshh!

Terry Chia

@Polynomial Sounds like a drum set falling of a flight of stairs.

Polynomial

Maybe not a flight. More like 4 steps.

Terry Chia

@Polynomial It's a short flight of stairs. Live with it.

Polynomial

Pack's Law of Standards states that there's at least 6 steps in a flight.

4

Terry Chia

13:40

@Polynomial Not since the 6th amendment.

Polynomial

Mornington Crescent.

Rory Alsop

►

Polynomial

and if @RoryAlsop doesn't get that reference, I shall be supremely disappointed.

Terry Chia

@Polynomial Educated guess, Monty Python?

Polynomial

No.

Terry Chia

13:42

Darn. Need. More. Education.

Polynomial

It's a British radio show.

I'm Sorry I Haven't A Clue.

(ISIHAC)

Terry Chia

Heh. Can't blame me for not hearing about it. :P

Rory Alsop

@Polynomial I also like some spinoff versions on the internet since

Polynomial

Mornington Crescent (game)

Mornington Crescent is an improvisational game, featured in the BBC Radio 4 comedy panel show I'm Sorry I Haven't a Clue, which satirises complicated panel games. The game consists of each panellist in turn announcing a landmark or street, most often a tube station on the London Underground system. The apparent and both the naming of stations and the specification of "rules" are based on stream-of-consciousness association and improvisation. Thus the game is intentionally incomprehensible. Origins Mornington Crescent first appeared in the opening episode of the sixth series of I'm Sor...

@RoryAlsop It works well as a Turing test for people in a particular industry.

have a conversation consisting entirely of bullshit, and see how long it takes for them to notice.

Obligatory xkcd

Terry Chia

@Polynomial That's gold.

Reminds me of an old Simpsons episode where Kent said "Unemployment isn't just for literature majors anymore" or something along those lines.

Polynomial

13:46

It's true, too. I'm still sat here talking about security, and nobody has caught on yet!

M'vy

^^

Terry Chia

Since when was The DMZ for security talk? I'm under the impression it was solely for bullshit. :P

I have no clue what you are talking about btw.

Polynomial

Wanna see something fun?

Check it out; I've had sex with someone who's had sex with someone who's written a paper with Paul ErdÅs!

Go to the comic, and click next.

Then look at the comic numer.

Terry Chia

heh, it skipped 404

M'vy

of course

Polynomial

13:48

xkcd.com/404

M'vy

404 is not found. always.

Polynomial

bash.org/?127148

Terry Chia

cracked.com/…

Great article, you guys should check it out.

Rory Alsop

@TerryChia blocked at work, so will check this evening

Terry Chia

@RoryAlsop your workplace sure blocks a lot of sites.

Polynomial

13:54

Heh, #1 is pretty funny.

Rory Alsop

@TerryChia yeah - most image hosting sites, most chat type sites, anything a bit scurrilous

etc etc etc

Terry Chia

@Polynomial #1? Do you mean #5? Cus you sure read fast if you are at #1.

Polynomial

I read fast.

Terry Chia

@RoryAlsop It's a wonder you are allowed on here.

Rory Alsop

@TerryChia Here I am continuing my mentoring and community education and outreach initiative (tm)

which is supported as long as I don't take the ****

Terry Chia

13:56

@RoryAlsop On the main site maybe. Here in chat? No you aren't. :P

Rory Alsop

@TerryChia are you saying I'm not being helpful and informative? ;-P

Terry Chia

@RoryAlsop You tell me. Heh.

Rory McCune

Rory's are always helpful and informative, it's in the brief :)

3

Scott Pack

Well actually, Randall considers 404 an actual comic. He also feels as though it may be too avant-garde for his typical audience to accept.

3

Lucas Kauffman

14:30

Does anyone know this: I did an nmap scan of a Cisco device, nmap seems to be able to give me the uptime of the device, I'm wondering where it is getting the uptime information from

Polynomial

snmp, probably.

Terry Chia

@Polynomial yeah this

Polynomial

You'd be surprised how much info is leaked by stuff via SNMP.

Rory McCune

Could also be TCP timestamp

Polynomial

that too.

Ran a discovery probe over the network at my old place, so much shit running open SNMP daemons. Even the photocopier.

Terry Chia

14:33

I love nmap. One of my favourite tools to use.

Polynomial

And on the photocopier I could see all the jobs that were being printed, and cancel them / get the first 255 bytes of the document.

Scott Pack

@RoryMcCune My first thought was ICMP, but that's actually a real timestamp, but yeah, TCP is probably more likely.

Lucas Kauffman

@Polynomial I thought it was SNMP too, but it's version 3 that's running and I'm not aware of any default credentials

Rory Alsop

5 hours left in mod election nomination phase.....

Scott Pack

I imagine Cisco uses a well known IV.

Lucas Kauffman

14:34

ok so tcp timestamp?

Polynomial

@LucasKauffman v3 usually allows downgrade to v2

It could be ICMP finger.

Terry Chia

@LucasKauffman I think nmap bruteforces SNMP credentials depending on what options you use as well.

Lent my nmap book to a friend so i don't have it with me to check.

Scott Pack

@LucasKauffman Try doing an snmpwalk using public as the community string

Don't forget to try 2c and 1 as the versions.

On a completely unrelated note, I just saw this in my RSS feed.

Rory McCune

@terrychia IIRC nmap checks for public as the community string, dont think it does a range of them by default... I tend to just use onesixtyone for that

Scott Pack

As it happens, 'Another One Bites the Dust' was playing.

Rory Alsop

14:36

@ScottPack brilliant!

Polynomial

@ScottPack Legendary.

Terry Chia

@RoryMcCune nmap bruteforces snmp community strings if you specify the use of nmap scripting engine iirc

Scott Pack

I might need to adjust my will.

Terry Chia

@ScottPack very nice

Rory Alsop

I'm kinda going on the side of Muse's "Last thoughts of a dying atheist"

Polynomial

14:36

mine would be "This Cocaine Makes Me Feel Like I'm On This Song" by SoaD.

Rory Alsop

but would really want to have 'Closer' by Nine Inch Nails - as we didn't get to have it as our first song at our wedding

Scott Pack

@RoryAlsop Lookatyou, Mr. IndyMusic.

Terry Chia

I have Green Day Oh, Love playing right now. Hmm.

Polynomial

@RoryAlsop Previous track was Reptilian - NIN... probably not the best track to have at a funeral either.

Scott Pack

@RoryAlsop We went with some Ben Folds.

Polynomial

14:38

we've actually already decided our first song

Rory Alsop

@ScottPack We ended up with teh St Bernard's Waltz

Polynomial

Shinedown - I'll Follow You.

Rory Alsop

not quite the same

Scott Pack

Not so much, no.

Rory Alsop

@Polynomial Don't know them - any spotify link?

Polynomial

14:39

You don't know Shinedown? :o

they roxx0r.

no idea on Spotify.

Rory Alsop

Will search this eve

who are they like?

Polynomial

open.spotify.com/track/0ILR5GMSzBRp2LrI8GX1Si

^ spotify.

Rory Alsop

I tend to get into new stuff through spotify, kerrang, recommendations from friends

as I don't do radio

at all

Lucas Kauffman

thanks guys btw :)

Polynomial

imagine a mixture of Disturbed and Nickelback (except good)

it's kinda difficult to explain what they sound like. they're just awesome.

they did the theme song to Expendables, if you've seen it.

Terry Chia

14:41

I have Adam's Song on right now. I actually would love to hear that playing at a funeral. :P

Scott Pack

@Polynomial I've had that problem with this one band called MetalTech. I keep recommending it, but very hard to describe.

Polynomial

they range from quite heavy stuff to ballads and really relaxed stuff.

Rory Alsop

@Polynomial ahhhhhh - that works for me. I do like the Disturbed a lot, and Nickelback a bit

@ScottPack hahahahahahahaha

Scott Pack

/me likes more Nickel Creek and less Nickelback

Polynomial

@ScottPack Wow. Erm. They're like if Kryten from Red Dwarf snorted a few lines with the guys from Lordi.

Rory Alsop

14:43

@ScottPack I liked a handful of Nickelback's songs, but then they went a bit, well, crap

Polynomial

@RoryAlsop Same. The older stuff is better.

Rory Alsop

@Polynomial Ahh - Lordi...I loved that performance on Eurovision. :-)

Polynomial

yeah, they rocked. bought their album too :P

Scott Pack

@RoryAlsop TBH, I only really have one of their albums. And looking at my ratings I'm about 50% hit rate on it, which isn't really bad for a whole album.

I definitely like The Duhks a lot better.

Polynomial

HARD. ROCK. HALLELUJAH.

Terry Chia

14:44

I find it sad I never heard of half the bands you guys are talking about.

Rory Alsop

@ScottPack dammit - adding this to my list as well... :-)

Polynomial

If you're going for crazy space-mutant metal though, it has to be GWAR.

Rory Alsop

@Polynomial Went to see them for my birthday last year

Polynomial

Ahahahahaa... I can imagine they rock so hard live.

Where'd you see them?

Rory Alsop

they were particularly amusing - musically, I'm not sure - I was laughing too much at the blood and gore

Glasgow SECC, supported by Clutch

Polynomial

14:46

awww man, Clutch and GWAR in one place? so much win.

Scott Pack

@RoryAlsop Of the three of their albums I have, it looks like I like their self-titled the best, followed by 'Fast Paced World'.

Rory Alsop

Clutch - look boring, but pretty good live. GWAR - utterly awesome. I stayed back at the bar to avoid getting covered in blood. My singer ended up pink - and spent an hour after the gig chatting with Oderous Urungous

Polynomial

@RoryAlsop Their lyrics crack me up. Completely ridiculous music. "Your womb is a sewer, I grunt at the grate. Your womb is a membrane, I must penetrate. Your womb is a sewer. Your womb is manure."

Rory Alsop

@TerryChia Muse - quite a popular UK rock band. A bit prog, a bit Queen-ish. Pretty awesome live. Disturbed - heavy, shouty, but good melodies and the lead singer has a great voice. System of a Down - Armenian influenced rock. Nickelback - Canadian easy listening rock. Metaltech - the best live act ever to come out of Orkney :-)

Polynomial

SoaD are Armenian, btw.

Rory Alsop

14:48

@Polynomial I knew that, but couldn't remember - so I just guessed

Terry Chia

@RoryAlsop Muse and Nickelback yes i have heard them before. SoaD, heard of them but haven heard their music. Disturbed not at all. Metaltech - well I have heard FAR too much here ;)

Rory Alsop

well, actually Amercian

@TerryChia lol

Polynomial

yeah they're Armenian-American.

@TerryChia SoaD and Disturbed have a lot of political lyrics. SoaD's are mainly about the Armenian genocide and drugs. Disturbed's lyrics are mainly about US politics and war.

but in both cases you can apply the lyrics to a lot of other things.

Terry Chia

I'm still at an age where i enjoy pop punk a lot. Too heavy stuff for me ;)

Polynomial

favourite thing to come out of SoaD is Needles. Nothing quite like hearing a guy scream "pull the tapeworm out of your ass! (hey!)" repeatedly.

Rory Alsop

14:50

@Polynomial I got into them through Shout2000 - generally I hear the guitar lines, and miss out on a lot of political lyrics (I know my place)

Polynomial

heh. Deify is ridiculously political.

Shout2000 was pretty good.

nothing beats Down with the Sickness though.

OOOH-AH-AH-AH-AH

the version by Richard Cheese is amazing.

►

Rory Alsop

@Polynomial Yeah - I'm slightly upset I can't have piercings like their lead singer

work get upset enough about my earring

and tattoos

Polynomial

His lip-fangs? Yeah, they rock.

I like Kerry King's tattoos.

he's got a tribal piece on his back, comes up his neck and turns into two forks on the top of his head

then Kat Von D did him and his wife matching tattoos on their fingers

when Kerry puts his index fingers together, it says "When I am God, everyone will die."

and his missus's says "Even the world is not enough".

can't get much more metal than that.

killed the conversation

Rory Alsop

Luckily my lead singer is also the family tattooist

so my last few have been by him, and we are hard at work planning the expansion of my Mayan back piece

Polynomial

I've got a tribal/biomech half sleeve

the biomech is kinda Alien-inspired.

Rory Alsop

14:59

@Polynomial ooh - cool

Polynomial

my tattoo artist is massively into sci-fi. she tattoo'ed Bobba Fett on her own leg, then met that dude that played him at a comic festival

so he signed it, and she tattoo'ed over the signature.

Transcript for