« first day (626 days earlier)      last day (4552 days later) » 

01:57
Hohoho. Got my fanatic badge.
 
5 hours later…
06:36
security.stackexchange.com/questions/19632/… Is a "send me teh codez" question. Not appropriate, right?
07:13
@tylerl Yeah, already flagged it.
 
3 hours later…
10:00
-1
Q: Decode a java script page generated tokken

Waqas Ahmedbefore my question first see this website url. because my question is related to this page. http://sso-wss.telenor.com.pk/SSO/auth/forgotpassword.jsp Basically this paga is for recover my forgot password. when u open this page see its view page source. when you are in viewpage source. there is...

flagged as TL, but NARQ and OT could probably work too.
10:11
@Polynomial ta - I agree with you. There actually isn't a security question in there, once you decode the waffle.
 
2 hours later…
12:30
Mmm...waffles
So. Spelt grain doughnuts are good on Day 1. By Day 2 they're a litttle stiff.
13:17
@ScottPack I BREAKFAST ON LOST HOPES AND THE TEARS OF THE DAMNED. THEY LAST... FOREVER.
@TomLeek but they taste really bad
Not with apple butter.
 
1 hour later…
14:40
@RoryMcCune They're waffly versatile!
 
1 hour later…
15:41
yaaaaaaaaaaawn
@Polynomial TOO QUIET HERE FOR YOUR TASTE ?
Too quiet everywhere!
Also, I'm really really tired.
lolwat. why do Google need adverts?
NEXT MONDAY IS LABOUR DAY IN NORTH AMERICA (WELL, "LABOR DAY", TECHNICALLY). MANY PEOPLE HAVE GONE ON HOLIDAY (WITH NO INTERNET ACCESS).
@TomLeek CAPS LOCK IS CRUISE CONTROL FOR COOL.
@Polynomial I DON'T USE CAPS LOCK. I HAVE SHIFT KEYS AND I KNOW HOW TO USE THEM.
15:44
@TomLeek NOT SO USEFUL WHEN YOU WANT TO SPECIFY A PHONE NUMBER: )*))"*"(£)
That's the UK Sexual Health Advice Hotline, by the way.
every kid knows that one, it's great to troll.
@Polynomial TRY A &*($^&*$#^( FRENCH OR CZECH KEYBOARD, THEY REQUIRE SHIFT FOR DIGITS
O_o
I have no idea.
7894678436?
I'm guessing 3 on the second to last number, because UK keyboards have #/~ as its own key.
1234567890 maps to !"£$%^&*()
@Polynomial what, &*($^&*$#^(? No, that wasn't digits with the shift key, that was keyboard profanity
I'm typing with a US layout anyway
lol
fair enough.
butts butts butts butts butts
on a French keyboard, you'd get 1µ5£ 1µ 5 with shifting state toggled (µ is Shift+*, £ is Shift+$, and # and ^ require AltGr)
the selection of characters on French keyboards is a bit crazy
15:55
@Gilles ON THE FIRST MINITEL PROTOTYPE, LETTERS WERE ORDERED AS A B C D E ... ON THE FIRST ROW, AND SO ON. IN OTHER WORDS: REJOICE, IT COULD HAVE BEEN MUCH WORSE.
I tried to use a French keyboard once, in Paris. Borrowed the hotel reception's computer to log into Gmail, tried typing in my password and got incredibly confused.
"oh, wait, it's not qwerty? wow. what the fuck."
@Polynomial another advantage of using alphabetic passphrases: fewer characters that move around on foreign keyboards
not that I'd type my password on a hotel computer
see, that's the thing. it was qwerty, but not normal qwerty.
it had random actual letter keys moved around
like j and k weren't in the right place
we call this azerty
yeah, one of them I think.
15:57
@Polynomial ??? That is not a French keyboard
it was strange.
the only letters that move are aqmwz
maybe it was something else. I don't think the guy using it was actually french.
it may have been something eastern european.
@Polynomial GERMAN KEYBOARD ARE QWERTZ, NOT QWERTY.
the only layouts that I know of for latin languages are qwerty (most common), qwertz (German), azerty (french), and dvorak
15:59
@TomLeek I'm aware of that one :]
Despite the name, the Dvorak keyboard is not central/eastern European
heh
I'd call it Djerpak
pronounced in a "european" way, the j becomes a y, and it's basically derp-ak.
16:10
@Polynomial someone's discussing OS security in the AU room (or attempting to, I don't know his competence)
in Ask Ubuntu General Room, 1 min ago, by NlightNFotis
I came up with a fantastic idea for an exploit I would like to test on my vms.
not much
Interesting.
oh yeah, that's the same trick as the Windows task scheduler one.
the at vulnerability.
@Polynomial What at vulnerability?
You mean (some version of) Windows got this wrong? It's completely elementary to get right
16:32
lol
so basically on XP the task scheduler ran at SYSTEM
and ran all tasks as SYSTEM
if you use at, you can create a scheduled task (even as a limited user!)
and it runs as SYSTEM.
say does anyone have a good x platform password vault?
@LucasKauffman what about web-based stuff?
pretty sure LastPass runs on almost everything.
and it has web-based storage.
@Polynomial I want something I can carry around on a pendrive
hmm
not sure, then. it'd be interesting to make a .NET storage system based on Mono, though.
no idea if OS X has Mono support though. I'd guess it does.
@LucasKauffman truecrypt
or gpg
16:36
TC is actually a great idea.
just a txt file in a TC volume :D
alternatively, a mobile phone
does truecrypt work on linux?
TRUECRYPT IT IS!
scroll down, it's the 3rd option
16:37
0
A: How should I manage my passwords?

Tom LeekWhat I do is the following: I write the passwords down. Many people will cringe and scream and curse me and say that this is wrong and should never be done, but this is too simplistic an assertion. Details matter. Here are the details: I keep the passwords in a text file. When I get out of ...

@TomLeek YOU GOT IT RIGHT
well, I use an encfs filesystem, but it's the same principle
@LucasKauffman not to gainsay the others but if you've got mobile devices that you want to use the passwords on you could look at Password Safe. there's clients for windows/linux/OSX/iOS/Android, so it makes password access easish. I put mine on dropbox for synching with a suitably long passphrase to protect it.
I prefer encfs because it's cheaper to synchronize
though given the volume of the password file, it's not really a concern
@RoryMcCune KeePass has an Android app. I'd guess there's an iOS app too.
and I recently had a look at the design of encfs, and I'm unimpressed
design: what design? Looks like it's only a bunch of source files, and a too-terse manual
16:41
TC > encfs by a long shot.
@TomLeek Why did you tag this question with [encryption]?
36
Q: RSA vs. DSA for SSH authentication keys

jrdiokoWhen generating SSH authentication keys on a Unix/Linux system with ssh-keygen, you're given the choice of creating a RSA or DSA key pair (using -t type). What is the difference between RSA and DSA keys? What would lead someone to choose one over the other?

@Polynomial yeah KeePass is another good option. I started with password safe and now I have all my stuff in there, I've tended to go with it. It's been quite consistently ok tho'
@CodesInChaos I don't see the problem. Looks encryption-related.
It's about authentication, not encryption
@CodesInChaos MAINLY BECAUSE BIG BEAR'S ANSWER ALSO COVERS ENCRYPTION (BECAUSE OF PFS).
16:42
DSA can't even encrypt
Keyboard layouts are fun. I'm using the american layout, but the keys are labeled with the German layout.
And whenever I use a real German keyboard, I need to search where that character might be
And the french shift for digits is great. Extra handicap for french starcraft players, because they now need to use capslock for hotkeys^^
17:34
@RoryMcCune Any word on whether we're getting any Sec.SE t-shirts to 44con?
I really wanna get one ^^
17:47
@Polynomial yep I've got one along with some sharpies that Mr Alsop passed over to me
win win win
so abesnt me forgetting to pack it tomorrow all good
@RoryMcCune For sale, for winning in a compo, or for free distribution?
@Polynomial hmm he didn't say so I'll guess free distribution :)
:D
awesome, make sure to save me one! ^^^
right, off to watch Code Geass with the fiance.
laters .o/~
18:49
I also use keepass with dropbox. Gives me Windows, Mac, Android support. There is also an iOS app, though I don't use it.
 
2 hours later…
20:54
0
Q: What method to use to detect crime or datacentre breach incident via web cam?

Andrew SmithI have webcams, and I want to detect the crime performed, including the IT security and other breaches occuring on the webcam This is very difficult problem and I can code the routines for each frame (temporal and spatial - still and moving picture processing), however I dont know what exactly m...

flagged as off topic, but could also be NaRQ due to the overly broad nature of it.
please!
Maybe somebody has experience with such systems ....
I'm gonna get -3 and it's gonna become grey
I had many ppl looking for it thru google, I have recorded address
@AndrewSmith It's completely off topic for Sec.SE
I have checked other forums and it doesnt fit anywhere else better, but it would be fine to move it maybe to stackoverflow?
if you're asking what image processing mechanisms need to be used, it's off topic. if you're asking for a product recommendation, it's not constructive (we don't allow shopping questions)
as I said, I've flagged it as off topic.
when a mod gets online, they can choose to migrate.
but it's up to that site's mods as to whether they want to accept your question or not. I'm guessing they'll just close it as NaRQ, because it's way too broad.
I hope it will survive 1h
20:58
you're asking about roughly 5 or 6 different topics.
from facial recognition to central security alerting and incident reporting
I searched I saw some posts with outsourcing this kind of work too
Nono, just image/audio processing, the rest is the generic stuff
yes, but you're still asking about them.
and even the image/audio stuff is incredibly broad
the main thing is how to pull the information from the video and the audio, e.g. what stuff is used to do it?
that's still not on topic here.
and an incredibly broad question regardless.
I have no idea about this part, and I hoped somebody can enlighten me, as it would be very useful for me to negotiate this
it's a policeman
21:01
it's the security equivalent of "how do I secure a webapp?" - what kind of webapp? what are you securing against? what're you storing? etc, etc, etc...
Yeah, it seems like you either want SO or a shopping list of products
Picture => Tracking
either way, it's not right here.
It's simple at the basic principle u know
so just suck it up and wait.
21:02
true
anyway, I'm off to bed.
I'll repost eventually to SO
/me sleeping already
@AndrewSmith No. We'll move the post when a mod gets online.
and it'll be up to SO's mods to decide what to do with it.
21:03
I thought it's gonna get deleted, then I can repost
so I copy paste it to the clipboard
:D
either way, SO can deal with you
but dont repost
if you repost, SO will likely tempban you.
due to your previous record.
anyway
bedtime for me.
good night then
さよăȘら
21:04
Sweet dreams kiddo
I got -2 already :(
one more and I am grayed - I repost to SO in a modified way
This is also social security on-topic
Picture => Tracking
I hoped that this was a good idea
Social system must have face recognition and tracking
I have to get some jobs, and I need some good proposals, in security one can make serious stuff, and the social automation is really cool for this
21:43
@Polynomial evening squire
22:02
a
u know phalanger - you can run php from .net on windows - hence it's same as cshap
it runs on linux as mono too
under IIS one can run safe php code with even more improvements, and one can recompile into c# if he really wants, there is surely no problem running it in java too
He's, allegedly, already gone to bed. Seems a bit early.
and I have seen version compiling to c++ too - hence PHP is the mos universal language around here
ha, 22:00 is time you know for a deep penetration testing
he's still online, hence thru if we hijack his camera, we can actually see him out ;-)
ps. I have got today a javascript shellcode got from nowhere to my browser, which runs from separate account, but has access to camera
and actually thru <embed> or <object> it is possible to gain the webcam in 5 different ways
depends on the installed plugins, operating system type and version, but it's doable on everything, and sometimes you can use hardware video encoder, so it's really fast and gives hq picture
I would secure webcams properly by disabling them in the manager
22:25
Actually I have seen even a pirate webdesigner, actually doing this using just plain html and a bit of javascript, and the flash webcam, and it displays just a player, on which you click and then it records the cam
22:57
I'll check this page with youtube

« first day (626 days earlier)      last day (4552 days later) »