The DMZ

Andrew Smith

13:05

vignesh sure it is

facebook is full of holes

viruses, trojans and freaks

Polynomial

data.stackexchange.com/stackoverflow/query/78522/…

^ query for top voted days.

works for SO, doesn't seem to work for Sec.SE

takes rep limit into account

AviD

@Polynomial not bad

Polynomial

it's ugly as hell, and very slow

but it works

AviD

but doesnt take into account bounties. or suggested edits. or my own downvotes (i.e. -1 for downvoting somebody).

Polynomial

yup

wait, your own downvotes?

ah, yes

AviD

13:19

I'm sure there are others... dang rep calc is complicated.

Polynomial

indeed

minus the bounties it's pretty accurate.

AviD

so, it does give a very good indication, even without being perfectly accurate.

shite, no.

upvotes on questions?

Polynomial

?

oh, shit, yeah

forgot about those!

Gilles

@Polynomial you can get actual reputation data from the API

AviD

could be a sizable discrepancy, if someone asks a lot of good questions.

@Gilles no no, this is more fun!

Polynomial

13:21

@Gilles probably. it was just a quick SQL thing

Gilles

@Polynomial but you don't have all the data

AviD

let's rebuild SE rep calculator from scratch!

Polynomial

@AviD I'll work it in later.

Gilles

@Polynomial make that a quick $favorite_scripting_language thing instead

AviD

what happens if you get upvoted while you're banned?

does the repgain accrue on the day you get unbanned?

Gilles

13:22

@AviD same thing as if you weren't banned

Polynomial

I guess?

AviD

what if you pop the repcap on that day?

Polynomial

I'd imagine you still get them the same day

AviD

@Gilles if you're banned you're locked to 1 rep.

Gilles

your rep is set to 1 while banned, but the computation goes on behind the scenes

Polynomial

13:22

you just can't post

AviD

@Gilles okay, thats what I was thinking, but wasnt sure.

Gilles

rep = suspended ? 1 : running_total

AviD

isnt there also rep loss for being flagged often?

Gilles

@AviD that's part of the running total

and it's not being flagged often, it's -100 for each spam/offensive flag that removes a post

Polynomial

yeah. there are a lot of vote event types.

Gilles

13:24

post deleted by 6 spam/offensive flags from non-mods → -100

AviD

@Gilles oo. so that could play some serious screwy with @Poly's calc.

Gilles

post deleted by a mod spam/offensive flag → -100

Polynomial

yep. but it's only an indicator.

Gilles

post deleted by the ordinary delete button → no -100, even if there were spam/offensive flags

AviD

@Polynomial of course, and a decent one at that, for the typical non-abusive user.

but its even less accurate than I thought.

Gilles

13:25

marking a spam/offensive flag as valid doesn't in itself delete the post or cause the penalty

Polynomial

@AviD yeah. the question votes part is the important bit.

AviD

@Gilles hmm, so I should start modflagging to close, instead of just closing? Fun.

Gilles

The penalties are actually pretty rare, most users who would get the penalty have 1 rep anyway

AviD

@RoryAlsop @Hendrik @Jeff ^^ did you know that?

@Gilles a certain chessbird comes to mind. though not so much recently.

@Gilles actually, I assume this does not apply to comments?

Gilles

@AviD it doesn't. Comments never involve rep

the flag reason on comments is purely indicative

AviD

13:27

right, right.

Terry Chia

0

Q: Neural networks & anomaly detection

Neural networks with their ability to learn behavioural patterns from arbitrary data seem like a natural way to deal with intrusion detection. There are many academic papers on the topic which report good performance and an even better potential. The question is, are there any real-life implement...

Is this NaRQ?

or offtopic?

AviD

@TerryChia Misogynism!!

Gilles

@TerryChia on-topic, absolutely. But I could go along NC or NaRQ

0

Q: Any safety with private IP addresses?

Private IP addresses (172., 192. etc.) are not routable addresses, and not visible to the outside world due to NATing. Even if some incoming traffic for these private IPs does hit a border router, I guess most commercial routers would be configured to not route the traffic. So, does this, in an...

routing

dupe, surely

AviD

@Gilles I agree ontopic, but its not Narq. I could see the NC - its almost a shopping question - but not quite.

Polynomial

@Gilles look for questions on NAT. probably a dupe there

Terry Chia

13:31

@Gilles dupe for sure. just need to find the question.

2

Q: Scanning A Subnet Externaly

Scenario: I have a router with a public IP address provided by the ISP and two hosts behind the router with a private IP (192.168.x.x). Is it possible to perform a port or vulnerability scan of a private subnet behind public IP address?

network

Gilles

@Polynomial yeah, a search for nat is promising. Here are 4 candidates:

4

Q: How can someone hack my PC if I am connecting to the internet through NAT?

If I own a private IP address, 192.168.2.1 for the sake of it, and I am physically connected to my router, which it's internal interface is 192.168.2.254 and it's external interface is some public IP address which it got from my ISP's DHCP server. Obviously my IP is being translated over NAT so ...

network attacks

5

Q: How important is NAT as a security layer?

I've signed on to help a department move buildings and upgrade their dated infrastructure. This department has about 40 employees, 25 desktops, an old Novell server, and a handful of laboratory processing machines with attached systems. At the old location, this department had two networks - a LA...

firewalls

4

Q: What kind of attacks against home router's NAT do exist?

I always thought NAT was some kind of a security feature and I still think it is, because if it didn't existed the internet, respectively the clients behind NATs, would be even more insecure, since for example port 445 would be directly open to everyone scanning clients etc. But there seem to be...

network attacks attack-prevention firewalls exploit

3

Q: Why do I need a firewall on my router?

I just bought a new router, and as usual the router manufacturer make a big deal out of the firewall. I have never understood why the firewall is needed, sure, stopping dos attacks (such as syn-floods) is great, but that's the only useful thing I can think of. As long as the services I expose...

network firewalls routing

Polynomial

first one is the best for a dupe flag

Gilles

looking if some of these should be closed as dupes too

AviD

I'm not really here, so you guys sort it out - I'll be back in a few to hammer your flags. Thanks.

in the meantime, quick explanation of cell division:

o

0

8

oo

3

Gilles

@Polynomial I agree that it has the most relevant answers

but should security.stackexchange.com/questions/11840/… be closed as a dupe of security.stackexchange.com/questions/7911/… ?

oh well, I'm treating security.stackexchange.com/questions/11840/… as the canonical question

Iszi

13:41

@AviD What the frack was that supposed to be about? Mitosis? This isn't Biology.

Hehe. I love this. It seems a doctor (Ph.D.) complains about being re-directed as if they were a doctor (M.D.) 'cause they made the particular point of saying they were a "Doctor" when asked for their name. faildesk.net/2012/08/30/a-doctor-by-any-other-name-2

I really still don't get that. Do people with Master's degrees go around saying "I'm Master..."?

Gilles

@Iszi it depends on the culture

in France, “doctor” is MD, not PhD

in the US or the UK, it's not that uncommon for PhD's to be addressed as doctors

in Germany, people are addressed as “Herr Doktor Ingenieur” and the like

Iszi

@Gilles See, I'm in the U.S. and I think that's how it should be. And, I'm only 1/4 French-Canadian by blood.

adric

Oops. Someone let me know if I was trolling for IPv6 there and I'll clean it up a bit ...

approved an edit to take out my smiley, sure.

Terry Chia

@adric Actually, many IPv6 networks do use NAT. It isn't technically necessary but IPv6 HAS private address space.

Contrary to popular belief, IPv6 won't provide for a truly end-to-end internet.

adric

Yes, IPv6 has NAT and it may even be a good idea rather than exposing IP addresses that contain your MAC address to the Internet.

Terry Chia

13:56

@adric si6networks.com/presentations/hip2012/…

I find that link to be a great introduction to IPv6.

adric

agreeing ... was it completely off topic for the Q asked?

Terry Chia

Naw - just wanted to point the fact out. Your answer is fine.

adric

Anything I can do to complicate and improve peoples understanding of the stuff that hits their routers .. was my thinking.

Okay, thanks for the links :)

Terry Chia

On that topic - I would say that NAT is an almost necessary feature now, even with IPv6 - mainly for security reasons.

adric

sigh Probably but I just hate admitting NAT has security positive effects. Like VLANs. It does (both can) but I'm wary of the 'buy a $firewall and your problems are solved' mentality that plagues the business.

Home users (say) want to believe what their ISPs tell them, that NAT on the gateway protects them from 'the Internet' ... anyway /soapbox

Iszi

14:04

@adric The main problem with VLANs isn't so much that people assume it's a panacea for security - it's that VLANs can just very easily be done wrong.

I think we've got a question around here discussing that somewhere.

adric

++

AviD

@Iszi eh, somebody sent it to me, and it amused me.

adric

Er, ++Iszi . s/VLANS/NAT #or most any other such thing.

It's crap, trying to give simple answers to complex problems. The woman asked me to write us some tips about safe web use for the family ... and I couldn't come up with much that will sell.

She's watched me click NoScript 10 times to buy movie tickets enough times to not really want my advice anyway, I think :)

VLANS are faith-based, like MAC filtering, and many other L2 type things ...

Terry Chia

I'd argue that VLAN isn't so much for security as it is for sensible network design.

NAT on the other hand, has a tangible benefit in hiding your private addressing space from the rest of the internet.

adric

I'm trying not to just be argumentative about that. I'd agree that split DNS does that and has positive security impact. Maybe NAT does too..

But we are mostly talking in both cases about reconn resistance and general opsec, I think and not resistance to attacks. Certainly not resistance to common attacks now.

Kids these days would just pop the router and fix the NAT rules first snort.

Terry Chia

14:17

Heh. There is a big difference when considering individual homes vs large enterprise networks.

AviD

@Iszi I agree with that - also, non-MD and non-PHD can also claim doctor - e.g. some kinds of holistic crap. like Chiropractors.

adric

Hehe. Yeah, there a fewer users in my home so I might be able to protect that network :D

Terry Chia

@AviD Chiropractors huh. Reminds me of Two and a half men. I should go rewatch that soon.

Iszi

@TerryChia Good to know I'm not the only one.

Wait... is that the second or third time I've said that to you? And I'm over a decade older? I wonder if I should worry about that?

AviD

not that its necessarily bad, in some situations - one helped my brother a lot, and my father has in the past used one a lot - but it's not medical treatment, and shouldnt be called "Doctor".

@Iszi should we start calling in the puppet squad...?

Iszi

14:21

@AviD So, how about Psychologists?

Polynomial

psychologists are real doctors.

well, kinda. they're more like researchers.

psychiatrists are mind-doctors.

AviD

@Iszi I think another aspect of issue with VLANs - its' only the network.

icky stuff, that.

Polynomial

psychologists are people who study the field of psychology.

AviD

@Polynomial actually, it seems to me they are more technicians of the psyche.

Terry Chia

@AviD says the appsec guy. :P

AviD

14:23

not that I've ever had the occasion to use one.

@TerryChia exactly.

for @ScottPack's benefit.

Scott Pack

heard my name

@TerryChia VLANs can be used as a valuable tool for achieving network segmentation, which may or may not be as a result of a security recommendation.

AviD

you. networks. icky.

Scott Pack

/me is trying to decide if that's hedgy enough to be Scott appropriate

Polynomial

►

^ that's pure genius.

Dara O'Brian is epic.

the end part is the best

Scott Pack

@Gilles @Iszi In the US and UK the 'officially' (or traditionally accepted, I don't know if that's regulated by anybody) recognized title for PhD is Doctor as in "Doctor of Philosophy". It just so happens that most of them aren't studied in philosophy.

Similarly, anybody who has graduated from law school could also legitimately be referred to as doctor since the granted degree is a J.D. (Juris Doctorate)

Iszi

14:47

Oh, this is interesting. I wonder if/how this will affect cases like Patco v. Ocean Bank? computerworld.com/s/article/9230730/… (CC: @JeffFerland)

Gilles

@ScottPack I know, it's philosophy under the long-obsolete sense of secular studies (as opposed to theology). More or less what we'd call science now (in a very broad sense encompassing not only social sciences but also humanities)

Rory Alsop

@TerryChia If you have a look at the other QoTW posts, they vary from my very light ones about the question and its answers - to some with in depth commentary. Feel free to align yours towards either end of that scale :-)

Gilles

@RoryAlsop but not in the middle?

Scott Pack

@Gilles Pretty much. I still do find it amazing how long some of the academic traditions have stuck around.

adric

I got my phd the honest if cheap way. It was about $25 USD from ULC.

Rory Alsop

14:55

@AviD I did not know that

@Gilles hahahaha

so - missed you guys today. Just caught up on the infernal...and...I'm back in the room

Gilles

@adric wow, mine cost a lot more

Iszi

@RoryAlsop Any response on your post to BackTrack? Did you give us the link? I didn't see it.

AviD

15:44

@Polynomial lol, the bear part?

@Thomas has a second career waiting.

Surgical Bear.

Polynomial

@AviD yeah

Doctor Bear to theatre 3, Doctor Bear to theatre 3... RAAAAAAAAAGGH, RAAAAWR, RAAAAAWWWR... scrub scrub scrub... RAWWWRRGH, RAAAARGH.

AviD

lovely.

Of course I pictured that in Sacred Heart hospital.

Polynomial

^ same.

Scott Pack

Where else would it be?

AviD

hehe, glad it's unanimously obvious.

I'm sure @TerryChia doesnt know though, he was probably in day care when that was on ;-)

Scott Pack

15:57

If he had been born yet at all.

Iszi

@AviD Haha. Nice.

Terry Chia

Ya sure. Old Fogeys.

Iszi

@ScottPack Princeton Plainsboro?

Scott Pack

@Iszi I am vaguely aware of the origins of such references but am not, however, privy to the information contained therein.

AviD

@ScottPack its not as often mentioned, but it is the place where a certain brilliant, cranky gimp medical diagnostician practices.

Iszi

15:59

@ScottPack What, you need them spelled out? Sacred Heart is from Scrubs. Princeton Plainsboro is in House.

Scott Pack

@Iszi Let me use less fun words. I have never seen House.

AviD

@Iszi aww, its more fun to keep it vague. so the kids dont know what we're talking about.

@ScottPack its worth watching a few. I cant watch entire seasons of it, but a couple hits my snark hankering just perfectly.

Iszi

@ScottPack Think... Law & Order meets ER. Haven't seen ER, but it seems about right.

AviD

no no, think BOfH meets Monk in a hospital room.

Rory Alsop

@Iszi no response yet - I emailed muts at backtrack, as he seems to be the coordinator

Iszi

16:01

@AviD Oh-ho! Nice one!

Scott Pack

@RoryAlsop Email. That explains why I couldn't find the forum post.

Iszi

I think Monk takes it a bit too far to neat-and-needy though.

AviD

@Iszi one thing I admired about that show, watching made you feel like youre incredibly OCD too.

Iszi

Hehe... @RoryAlsop @RoryMcCune - You guys are in the vicinity, so I'm sure you can tell us if this is about right:

Great letter in the IT: American tourist to Irish child: “Does it ever stop raining here?” Child replies: “I don’t know, I’m only eight.”

Tweeted by psneeze on August 29, 2012 at 11:29 PM

AviD

@Iszi LOL

like that old time classic joke:
"Have you lived here your whole life?"
"Not yet."

Iszi

16:05

Oh, forgot to tag Lady McCune... Keep forgetting her name.

Ah. @MarionMcCune, see above.

For that matter, @RoryMcCune @MarionMcCune: Is @AshleyMcCune any relation to you?

Ashley Mccune

1

Scott Pack

Probably not, her name isn't Rory so she can't be Scottish.

Iszi

Seems she's only got an account on Sec.SE, and no activity yet.

Heh. Random thought: What if Morpheus was Scottish? "D'ye think that's air ye be breathin' there, laddie?"

Rory Alsop

@Iszi hahahahaha

I read that in Sean Connery's voice

Rory McCune

@Iszi @ScottPack not as far as I'm aware, there are quite a few McCunes in the US though, there's even a town called McCune

@Iszi and as to the rain, it feels like it!

Scott Pack

@RoryAlsop Are there other Scottish voices?

Iszi

16:14

@RoryAlsop Even better! I love it! My initial thought was whomever that was who played Scotty in the new Star Trek, but that's even better!

Marion McCune

There is a Marion McCune who was a famous nurse in WW1 - rather sad that my lame linkedin profile has nearly as many hits as she has

Iszi

@ScottPack This guy has a pretty good one.

Simon Pegg

Simon Pegg (born Simon John Beckingham; 14 February 1970) is an English actor, comedian, writer, film producer, and director. He is best known for having co-written and starred in various Edgar Wright features, mainly Shaun of the Dead, Hot Fuzz, and the comedy series Spaced. He also portrayed Montgomery "Scotty" Scott in the 2009 Star Trek film, Benji Dunn in ' and its sequel ', and Thompson in The Adventures of Tintin. Much of his major work has been in collaboration with some combination of Wright, Nick Frost, Jessica Hynes, and Dylan Moran. He also starred in and co-wrote Paul (wi...

Rory McCune

@ScottPack @iszi there's at least 4 scottish accents per the pub landlord youtube.com/watch?v=rkDYo-78rqA

BTW NSFW

on that link

Rory Alsop

@Iszi but he's English!

Rory McCune

I'd forgotten how he explains the different accents

Iszi

16:16

@RoryAlsop He does Scotty so well, though.

Marion McCune

English, Scottish - all the same

Go to Glasgow and say that at 11pm on a Saturday night

Gilles

@MarionMcCune safer to wait until 2am

Scott Pack

@MarionMcCune Through the magic of public education I have the phrase "English Empire" burned into my memory. I was not having a good day when that slipped out in front of one of your people.

Marion McCune

oh dear - guaranteed to cause offence

Rory McCune

@ScottPack Marion's actually a bit of a hybrid, born in scotland but grew up south of the border and sounds like she's from Cambridge...

Marion McCune

16:20

Glasgow 'second city of the empire' and all that

Rory Alsop

@RoryMcCune I see your hybrid, and I raise you Orkney, Warwickshire, Australia, Germany and the Falkland Islands :-)

Scott Pack

Show off

Marion McCune

We are not going to beat that in a hurry

Rory Alsop

:-)

Marion McCune

On the subject of nationality - the well known American corporate I used to work for moved its data centre to Dublin under the impression that it was part of UK

Iszi

16:23

@MarionMcCune Okay... where's that video...

►

Marion McCune

lol

Rory McCune

hey peeps with lots of rep, what's the score with the little blue pop ups about potentially offensive messages?

Rory Alsop

@Iszi always been one of my favourites to explain the Empire

@RoryMcCune do you get a lot of those?

:-)

Rory McCune

Just started

about threads in the "the brige"

Rory Alsop

Generally, they should be for mods and higher rep users, and generally only for rooms you are in

Gilles

16:25

@RoryMcCune it's a flag on a chat message

Rory Alsop

the bridge often has offensive messages :-)

Gilles

ignore these unless it's in a room you're familiar with

Rory McCune

ah I see just surprised as I've never had them before

Rory Alsop

@Gilles they seem to change from hiding them to publishing to all

Gilles

or if the flag remains for more than a minute or so, but that only happens at 3am on Christmas day

Iszi

16:35

Wow. I'm gonna have to start following C.G.P. Grey.

►

Marion McCune

He is mega-funny

Iszi

Why does it seem all the great YouTubers are over in the U.K., or similar vicinity?

Numberphile and friends being particular examples, aside from the aforementioned.

Marion McCune

Because we are uber-cool perhaps??

Iszi

@MarionMcCune I think it's 'cause your accents are awesome!

Ah, redemption! VSauce is in the U.S.!

Marion McCune

lol - you want to hear my east coast one - "The number you have called is not free of charge outside the US....." that used to crack my colleagues over there big time

Iszi

16:44

Looks like Minute Physics is in Canada, too.

Scott Pack

@RoryMcCune You start seeing the chat flags when you hit 10k chat rep.

Rory McCune

There's chat rep?

Iszi

@RoryMcCune Seems to be. I always thought it was your aggregate SE network rep, but last I checked the numbers don't quite add up.

Rory McCune

ahh I see that'd explain it looks like I'm at 10.5K

Scott Pack

From my understanding it's something very nearly, but not quite, SEI combined network rep.

<purespeculation>It could have something to do with SO being on it's own chat server</purespectulation>

Rory McCune

16:48

hmm my Sec.SE is 8.2k and I've got some bits and bobs on other ones, so my chat rep seems like combined + a bit...

actually adding up all my network accounts that's pretty much 10.5k so for me at least it is accumulated rep across all sites

Iszi

My chat rep is "24.8k". Overall network rep adds up to 24,947. 128 of that is on SO. So, if only SO is taken out of the counting (putting me at 24,819), that makes sense. However, if you also remove MSO, then I'm down to 23,356.

And is it just a little geeky that I'd rather have Excel.exe do the math for me on that, than Calc.exe?

Rory McCune

ahh I used calc, but that's my accountancy background showing, got very used to using the numeric keypad for adding stuff

Scott Pack

@Iszi Depends on the input.

Iszi

Or is it totally non-geeky that I had to have the computer do it at all?

@ScottPack Manual.

Scott Pack

Calc is faster, but Excel gives you more opportunity for error checking and post processing.

Iszi

16:55

@ScottPack Bingo.

Gilles

17:24

in Mos Eisley, 14 secs ago, by Gilles

@Slytherincess how many calories are there in a real bear?

(and this isn't even particularly out-of-context)

Scott Pack

I suppose it depends on the size and general health of the bear...

Gilles

@ScottPack funny you should say that...

in Mos Eisley, 46 secs ago, by Gilles

@JackBNimble black. North American. Not including any carried coconut.

Scott Pack

That gummy bear makes me feel sick to my stomach just to think about.

Jeff Ferland

17:45

@Iszi An appeals court overturned the original ruling in July and put it on the bank. bankinfosecurity.com/patco-ach-fraud-ruling-reversed-a-4919

Aarthi

19:26

Fine... I'll change my picture to something that isn't my actual face so the page won't be so ugly. Tough crowd. — Jeff Ferland 57 mins ago

@JeffFerland lulz

Iszi

@JeffFerland Yeah, but I recall there were still some open questions.

Upon a quick re-perusal of the judge's ruling on Patco v. Ocean Bank though, it seems the issue of whether contractual agreements overrode federal or state law was not something that was raised - or at least not something that is left open.

adric

Does it change whether breaking the MySpace ToS is a federal crime? That's the interpretation most people are concerned about

Iszi

19:47

We don't have a dupe of this already?

3

Q: Is it okay to just secure (using SSL) the login page, but not the rest of the site?

I'm creating a custom PHP/MySQL CMS for a client (because Wordpress is overkill for this client's particular needs). Now, I know this client uses a public wi-fi location quite a bit, so here's the question. Say the CMS is located at http://customcms123.com and the login page is located at http:/...

ssl certificates

Andrew Smith

yes

IMGO my SSL works very fast, I have no problem with using it for the full pages

cashing, compression, performance, keep alive, everything works ok thru NginX edge reverse proxy

Also I run frontend and other modules separately with different cookies

so if you steal one cookie, you wont gain full access

Iszi

@AndrewSmith There is a duplicate? Where?

Andrew Smith

one sec I am handling some flood

hrh one of my mail servers is down

cant find really exact diuplicate

there are just facebook and http to https questions

so I guess this one is fine even it really looks as a dupe

@lszi but I can post duplicate myself now :P

@Iszi shall I post dupe then?

Iszi

20:10

@AndrewSmith Post a link to the ones you think are dupe, in here. If they are, some of the 3k+ rep users in here (or a diamond) can vote to close.

Andrew Smith

OK I see

I have better idea for a site like stackexchange

So you can develop answer to certain questions over time

because here one question is asked, then silly answers given, and then any dupes are removed, while the question in question remains inactive

this is a major issue that the process of improvement doesnt work, but it serves rather something like experts exchange

but the rules are made like it was not experts exchange, hence the issue and the idea

I would expand on this idea but dont have time now

I have framework to do it.

I have designed, implemented and launched over 100 portals since 2005, with the design as stackexchage (multi-portal, multi-tenant)

So I have everything in place, and it's accelerated so it's even faster

at low-cost - all software - no crappy expensive big ip etc

AviD

20:33

@Iszi just think "Madam Librarian".

@ScottPack William Wallace. And his big fat ginger buddy.

Iszi

@AviD Is that what we're gonna call her instead?

(/me is really starting to wish we could create aliases)

AviD

@Iszi hehe, yeah. That, and "Nexus Fairy".

@Iszi oo, that should be our easter egg. Identity and all that.

@MarionMcCune Is that Microsoft, then?

I was always amused that the Israel office was attached to the Dublin datacentre...

@Iszi "quick perusal" is contradiction in terms.

"perusal" means intense study.

@Iszi hang on, I've answered one like that...

here we go, that was actually easy:

24

Q: What are the pros and cons of site wide SSL (https)?

What are the pros and cons of encrypting all HTTP traffic for the whole site through SSL, as opposed to SSL on just the login page?

web-application ssl webserver

Andrew Smith

There are no cons to be honest

if setup and done very well

with keep-alive tuned well etc

AviD

4

Q: Where to get malware for testing?

I wish to analyze the changes made by a virus like Win32.Sality. Where can I get the sample of this or other malware for testing?

malware virus

whoops, that one

Andrew Smith

oh that's another identical dupe!

OH I see

;-)

AviD

20:48

again, a NarQ malware q... Anyone have idea how to fix that up, before it gets hammered?

@RoryMcCune lol, you English Bastard!

He... doesnt like Englishmen much, eh?

Rory McCune

@AviD the pub landlord, heh he does reckon scots dislike the english a bit. if you catch the rest of his act it's the stereotypical english pub landlord ..

AviD

ah, so he's projecting. Will listen to some of his other clips...

sent that on to my scottish buddies, of course

Rory McCune

yeah his shtick is the typical english pub landlord, so that's his view of scots, here's some more on geordies and scousers youtube.com/…

AviD

@RoryMcCune lol, I've met geordies, didnt know what they were called!

Rory McCune

yeah I was guessing you'd get it from the accent after your trip to Newcastle :)

AviD

21:03

oh yeah

left an impression

Gilles

21:27

I have a connection from an IP address whose reverse DNS is nondescript

How can I know whether it's a TOR exit node?

AviD

22:00

so here is a baeutitful easter egg we can sneak into the site by ourselves....

obviously, you cannot create a tag synonym to itself. That's just silly.

However, it seems that certain combinations of tag existing synonyms and tag merges, can actually result in a tag synonym to itself!

it's get better...

if we cause this to, say dos to point to itself, trying to go into the tag page will cause an infinite redirect... which will result in temporary ban from the SE network!

4

jrg

@AviD DO EIIIIT

AviD

hehe

@jrg I am sorely tempted.

jrg

@AviD I'd do that on my own site, but then I can't point fingers.

AviD

@jrg what tag would you use?

or just do it for trollbait...

so, you're just trying to get me into trouble...

Andrew Smith

22:21

Have u seen @xce?

Iszi

@AviD I get the feeling maybe this is something that should be posted to MSO under bug? Or, reported via contact e-mail?

Other'n' that... cool! You tested this?

AviD

@Iszi somebody else did, on another site, accidentally. I'm the one that got DoS'ed :S

Iszi

@AndrewSmith We believe he had his account deleted.

AviD

'course this could only be done by a mod, since it requires tag merging.... but still.

Andrew Smith

oh I see

AviD

22:25

the other mod is reporting it as bug.

Andrew Smith

he became anonymous, right

Iszi

@AndrewSmith Hardly. Let me look up the rule number...

Ah, right.

> Law #9: Absolute anonymity isn't practical, in real life or on the Web.

jrg

@AviD not sure, i'd do bug.

we get way too many bug reports on our site.

AviD

@jrg isnt that Canonical's doing?

jrg

@AviD we're not a bug tracker. ;P

Gilles

22:31

@AviD hey, don't go Gilles on jrg

3

AviD

oy. taking a look at some of our tags, and the situation is a mess.

couple weeks from now we're gonna have a tag cleanup gala.

Yes, a Gala. Cuz a regular celebration just aint enough.

Jeff Ferland

@AviD I'll wear my best hazmat suit.

AviD

@JeffFerland oo I'm gunning for you, first.

eyes-only?

never mind, it will keep.

Andrew Smith

guys I have job from tommorow

Jeff Ferland

@AviD Haha. I figured we'd seen a few that fits and more will come.

AviD

22:43

@JeffFerland yes, but wouldnt that just fit better in confidentiality?

Jeff Ferland

@AviD I think eyes-only is its own paranoid sub culture

Andrew Smith

I will be building a prototype of skynet - that's what they have agreed to do so

Jeff Ferland

... and also related specifically to distribution whereas confidentiality assumes distribution is controlled.

Andrew Smith

And I got role of DevOps, it's a smart cross functional role, hence I said, it will be that smart, it will be self-sentinent

AviD

it is a bit orthogonal, yes.

I guess eyes only also has aspects of authorization

Andrew Smith

22:49

Self-sentiment, as in the global network, hence the DevOps cloud is very big, and this includes the servers in China :P Tripe IDS :D

Transcript for