« first day (643 days earlier)      last day (4535 days later) » 

01:24
@Iszi A 1.7GB patch?!
02:10
@JeffFerland Sounds like OSX.
 
4 hours later…
wow, that's awesome ^
 
2 hours later…
08:34
@Polynomial wow. is there any end to it? my clicky finger is getting tired, but I dont want to miss anything.
bastard. he just kept on teasing us.
gorramit. didja figure out a url to view the whole thing without all the clicky bits?
 
1 hour later…
09:48
talking about webcomics, @JeffFerland is this you....? Or would you have us believe it is some other Jeff...?
10:07
@AviD I looked into it, there's a bit of JS that loads individual images as you scroll
at some point I'll work out the bounds and get the entire lot, but it is indeed huge
did you find the hidden underground spaceship and all the straw huts in the cave?
@Polynomial yeah, at some point I looked into that too. should be easy to script them all up - the naming convention is simple enough - but then pasting them together.... I couldnt be bothered.
@Polynomial yeah - so cool. not sure I got all of it, but I did reach one of the horizontal edges. dont know about the vertical.
must have taken him days.
10:29
heh, this is awesome: red-gate.com/error/404
 
1 hour later…
11:40
@Polynomial best.404.page.ever.
Yarrow!
Or rather yarr.
I think I saw a sharktopus in the ocean east of the bridges and the electrical station...
@AviD I'm downloading all of the images now :)
there's at least a 50x50 matrix of 2048x2048 PNGs
erm, 100x100 rather (-50 to 50 on each axis)
so that's 204800x204800
a rather big image :P
11:56
Not for an American
jrg
jrg
What happens for the second breach? Do I lose a leg?
@Polynomial oo, paste em all together and post it somewhere.
@jrg What did you do? >_<
jrg
jrg
@ScottPack Nothing. Thankfully.
@AviD Going to. I think there's 225 images in total actually :P
it's clever - the black and white areas are generated by 404s
jrg
jrg
12:01
Nothing has happened, I'm just curious.
if it gets a 404 on an image below the 0,0 mark it turns the square black, if it gets one on an image above it turns it white
We'll burn they bridge when we come to it.
@Polynomial hehe, cute. I take it you parsed the javascript, instead of looking at the traffic?
guess I'm just lazy that way. I like doing things efficiently.
12:03
I read through the js and then looked at the traffic to check how it all loads stuff
it's pretty clever
from Randall, I'd expect nothing less.
So is it a bunch of random pictures or are they telling a story?
it's a whole world
have you tried it?
haven't been on a computer yet.
It doesn't seem to do much on a touch screen.
jrg
jrg
his /var/log/apache2/error.log is probably really, really full right now.
12:11
you have to drag the image to see the rest of it.
@jrg haha, yeah
it reminds me of those little doodles in Mad magazine...
Love this, from the forums:
> I went to the left past the top of the building, and thought it was a cute idea. I got to the sailing ship, and realized just how awesome this strip is. I went further and got to the giant pit in the ground, and realized Randall's insane.
@Polynomial dont bother, someone else will get to it first :)
heh, even at 1bpp a bitmap would be 200MB
For those impacted by the MIcrosoft Internet Explorer 0-day vulnerability, please note that IE12 is bug-free at this time.
12:36
Wow. From @AviD's link: "the full picture is 165888x79872 pixels in size" "[with a scale of about 5 pixels/foot] the whole thing [is] about 5km across"
@Iszi I think we need to give Randall an honorary badge here, or something. Just for being so frakkin awesome.
2
Oh, ok, that's pretty cool. On a mobile screen the bottom panel was just blank. I didn't even see a starting picture.
@ScottPack Same for any hot-linked image, like the one that gets posted to the chat feed. You've actually gotta go to XKCD to see it.
Someone downloaded all the images, and says there's a total of 225 2048x2048 PNGs with a total size of 6.3 MB.
B&W compresses well.
That makes me think. So big storage does file or block level de-duplication. I should talk to our storage guys about doing bit level de-duplication. See how they react.
Someone posted a 1/8th scale copy of the whole shebang.
12:52
cool, they beat me to it
@Polynomial You can produce the full sized version.
Doing this on a track pad is....annoying.
tried. I can't actually encode images that large
even at 1bpp, the resulting bitmap is 2GB
and I don't have anything to encode such large bitmaps into pngs
Someone posted an HTML page that supposedly stitches it all together. Tried loading it in Firefox and my memory usage for Firefox alone shot to over 3 GB.
Do you have the stitched bitmap somewhere?
I must be doing my math wrong or something. For a 1bpp image, I'm getting a full size of just under 1 GB.
12:58
I'm fair positive I have a system that could do the conversion. I just need the file.
Given the image stats above, I went with (sqrt(225)*2048)^2. Something wrong with my math, there?
@Iszi ((2048 * 35) * (2048 * 100)) / 8
erm, s/\+/\*/
Of course, I suppose I did that the wrong way around anyway. Should just do (2048^2)*225.
you're only counting those images
there are gaps in between
Oh. That'll do it, I suppose.
13:00
so when you generate the full square image you need a lot more pixels
hey guys, could you give me a hand with understanding cryptsetup for LUKS on a rhel 6 system?
xkcd is trending on twitter :P
The guide i'm following says to do the following steps: load up dm_crypt with modprobe dm_crypt, use the command cryptsetup luksOpen to open the partition before mounting it.
This works fine for manual mounting, but how do i get it to mount automatically on boot using the fstab file?
@JeffFerland Sorry, what's this in reference to?
@Polynomial So going back to your hardware issues. Do you have all of the images pulled down and stitched, just awaiting conversion, or do you have them all pulled down with no way to convert and stitch them?
13:07
the latter
I can produce a 2GB image
but anyway, I'm at work, I should be working ;)
ttyl ^_^
Heard that. I'm just about to go head first into thesis work. Must. Get. This. Damn. Thing. Finished.
Know what's crazy? When I got to the tower at the left, I started scrolling up, thinking I was at the left edge of the image, and this was just some weird, tiered cliff face there. Didn't figure out that it wasn't until I reached the top of the tower. Also, I didn't realize the ground wasn't the bottom until I started reading the forum thread.
Interestingly, left was where I went first.
Wonder how long it'll be before someone threatens to sue Randall for giving them carpal tunnel.
That would be like someone suing Lucas because they were called a nerd while in costume at a convention.
13:23
@ScottPack We live in America. Would that honestly surprise you?
14:10
@Polynomial Funny. I haven't seen a single tweet, and most of the people I follow are the types of people who would enjoy XKCD.
They're probably still looking for Waldo.
14:44
@Iszi STO
@JeffFerland Oh, yeah. First-time download & patch is a bit of a bear.
15:12
I think I may have to run for the "biggest TL;DR of the year" award... security.stackexchange.com/questions/20371/…
2
@Polynomial Funny. I'm in the middle of editing that question, now.
@Polynomial all I can say is: I take my hat of to you good sir
half of it is an example of use-after-free and an explanation of how classes work at memory level, but it was fun to research :)
@JeffFerland Soldiers of the One?
@Polynomial Not bad, not bad. serverfault.com/a/49836/3356
@ScottPack Star Trek Online.
15:25
@Iszi So slightly different.
heh, that's pretty long
but it was 2009 ;)
so I still qualify for "biggest TL;DR of the year" ^_^
I wonder if there is an existing data query for size of post...
@Polynomial According to data.SE your longest post, as of June 26th, was 4001 characters. Mine is 5243 and Iszi's is 8941.
Granted, those are of all time.
@ScottPack Holy crap. Which one was that?
I have also remixed today's XKCD: http://i.imgur.com/oNdry.png
15:32
I lol'd at that
PXNIS!
Looks like my longest one from this year is 4597, Iszi's is 5138.
13
A: Wireless hardware with limited range?

IsziRegardless of what you do at the AP, I believe I can say with a fair amount of certainty that you will at some point find that your wireless data is being broadcast "outside the walls". First, you must understand that your AP is not the only wireless transmitter on your home network. All of you...

see, that don't look that long
but it's because it's all text
code and stuff tends to make it longer in terms of ze pixelz
yuppers
Similarly, my longest post from this year is: security.stackexchange.com/questions/16072/…
@ScottPack Care to share your search methods?
what was mine?
15:36
As soon as Zypher figures out how to use com-puters we'll get live data.SE feeds.
Then I just went down the list until I found one from this calendar year. It would be possible to modify that script to include date, and even to list everyone's posts sorted by length.
ahahaa, someone just said back to the PXNIS thing - "Quick, grab IE for the 'e'!"
I just didn't feel like it.
That's what she said.
I can't recall if LEN returns the number of characters or the number of bytes (or if the distinction actually matters).
my longest is only 4324 (not that I'm worried about length...)
15:39
@RoryAlsop It's not about the size of the wave it's about whether the wave touches the boat, amirite?
4
I'm not sure what that's an argument for.
increased localised flooding?
2
@RoryAlsop He's still young.
@ScottPack Wow. That one was in the past year? Feels older.
how do I find my UID again :3 ?
15:42
@LucasKauffman Go to your profile page. It's the number in the URL path, that's just before your username. It is site-specific also. Yours is 3339 on Sec.SE.
my longest is 3118 then
If you log into the data site it will also pre-populate your site ID into the field.
In other news. That picture would have been WAY easier on Windows. The snipping tool has ruined me.
@ScottPack interestingly, it doesn't for me - but not sure which of my plugins kills that :-)
15:45
This is somewhat interesting
hahahahaha - mebbes naw
any useful chunk sizes to go for?
Put in 1000 0_0
say @RoryAlsop what were the final scores/breakdown for the security.SE anniversary contest?
15:47
@ScottPack I had apps for that before the Snipping Tool came around. The apps had built-in hotkey functionality, which is sadly missing from Snipping Tool - you've gotta do a modification to the shortcut to get close to the same feature.
@LucasKauffman we are close on this - SE have the numbers for the low level prizes, but we are trying to assess a fair way to assign the level 2 and top prize (as no-one met the thresholds we initially set)
I didn't really notice a big jump in topic specific questions during the competition time. It did, however, seem like our activity did go up.
@RoryAlsop Scale down requirements on a log scale?
@Polynomial the interesting discussion is around how we assess the relative merit of 10 posts with a score of 1 or more, 5 posts with a score of 5 or more, 1 post with a score of 8 or more
@ScottPack I think that's because some of the topics were way too abstract and limited
15:50
and what happens if we scale them down
what is more score-worthy
@RoryAlsop You could take views into account.
@LucasKauffman yeah - in looking at the basic stats, the weeks we had a rare topic, we were hoping to attract interest on those topics, but we just got tumbleweeds. On the really popular topics, they got quite a bit of interest
@LucasKauffman I wouldn't go quite that far. I will say that only the first week's topics really interested me. That is only a single anecdotal data point.
but we didn't get many new folks on board, as far as I can tell. CRIME was leagues ahead on that :-)
Jeebus yes.
Have you noticed the blog stats since that spike?
15:52
@RoryAlsop Seems like on StackExchange, CRIME pays.
4
It looks like we definitely got a fair number of new regular readers.
@Iszi So... much... punnage :|
btw, I still need to write up my 44con blog posts
will do that over the next few days
Next anniversary we just need to find a giant security hole that could make the world stop as we know it and then just make that the topic of the week
rofl
"This week's competition topic will be P=NP, because we solved it. All asymmetric crypto is broken now, by the way."
That sounds NP-HARD.
15:55
"people with the best questions get a free Wifi pineapple as the world starts burning down"
@ScottPack That's what she said.
Seriously, who holds a conference called NYC and does it anywhere but NYC?
HEY EVERYONE
@Aarthi !
16:04
I belatedly announced more winners!
18
Q: Official Security Stack Exchange Anniversary Competition

Rory AlsopAs Security Stack Exchange has just passed its 1st anniversary of graduation, we are going to follow in the tradition of other sites and run a competition. With prizes! Cool ones! Obviously in order to deserve these prizes you'll need to put in some effort, but I know you will rise to the chall...

HI THERE @Aarthi
ONE OF YOU IS IN HERE NOW.
Morning @Aarthi.
More calmly, hello all!
16:04
I WON
YOU DID
Why is it always the Belgians?
It's their waffles.
/me wants waffles now
@Aarthi I shall send you those waffles and beer you requested
16:06
durr what
ow yes, we shall not speak of those bribery thingies
I mean, LOOK OVER THERE ._.
hahaha
@LucasKauffman What actually works with a toddler.
anyway, i'm really just here to troll @RoryAlsop
6
@ScottPack Have you been abusing your childrens' propensity towards ADD again?
('Cause if you aren't doing so at every opportunity, you're a bad parent.)
16:10
@Iszi I needed to reach something at the top of a cabinet and didn't want her to see me standing on a chair.
@Iszi I feel like Parenting would disagree with that.
@Aarthi Where's the fun in being a parent if you aren't allowed to exploit amusing childhood mental weaknesses?
@Aarthi LOL TROLOLOLOL
@ScottPack I used this technique to teach my kids to climb - LOOK, a new toy is at the top of that wall. It's yours...if you can get to it :-)
@RoryAlsop survival of the fittest?
@LucasKauffman We prefer to call it "culling".
16:16
:p
I think I actually missed the part where level 2 required at least 10 posts, not just a single post of 8 or better.
16:32
hmm
@ScottPack which is why we need to look at how we bring the thresholds down just a tad - fairly
:-)
@RoryAlsop Yeah. Looking more closely at the thresholds they look like they probably make sense at higher traffic sites.
I don't envy you guys having to figure it out.
I think the sad thing is there are some very good questions/answers, but that they don't score high because they are not accessible to everyone
 
3 hours later…
19:16
@ScottPack I just had my second phone screen culling of a sysadmin candidate this week. You sure you can't travel back to defend your thesis later? :)
@JeffFerland I can't tell you how much it hurts to say no. I know if I leave that I'll get too caught up with NewLife and won't actually finish.
@ScottPack whats ur thesis about?
@LucasKauffman Working title: 'A Method for Dynamic Use of Detection Routines in the Snort Intrusion Detection System'
In short, we wanted to be able to, on-demand or automatically, tweak our IDSes to do more thorough inspection of "suspicious hosts". So either an analyst gets a feeling that somebody isn't acting right but has no evidence they can flip the switch on that address. Or if an automated alert flags on some kind of indicator it can also add them to the list.
So this is building the system and some kind of statistical analysis of the output. Did we find something we wouldn't have normally, are we getting any value from it, etc.
19:36
@ScottPack ah very nice
We'll see. :)
if it works I would commericalise it
19:50
Probably not. My current thinking is by-nc-nd, though I have a while before I need to decide exactly how tightly I want it controlled.
20:07
3
Q: Anonymization of dataset preserving unique identities

The Unfun CatThe $k$-anonymization paradigm (and its refinements) means to create datasets where every tuple is identical with $k-1$ others. However I'm in a situation where people are in the dataset many times. And I want to follow their progress through the health care system, so I need to know who is who....

I think this question should stay on CS as it's rather on the side of theoretical modeling, but I encouraged the asker to come here for a practical view
20:22
Need interview questions to ask a security candiate in the next 10 minutes... goes to Big Bear's profile, sorts answers by rank
@JeffFerland LANMAN hashes, SNMP 1 and 2 vs 3 and what's CSRF
and then in all seriousness ask him to write down pseudocode to create RSA public and private keys
@JeffFerland Describe the order of volatility?
@JeffFerland Are these security questions for a sysadmin candidate or for an actual security job?
@JeffFerland If he can explain the CRIME attack, hire him.
@LucasKauffman why did you answer it if you want it closed?
@Gilles because I'm a rep whore
you'll lose any rep when the question is deleted anyway
@Gilles true
21:09
@RoryMcCune you have your tickets I hope, 'cause it's all sold out :o, btw you going doing any workshops?
21:23
@Gilles Unless it has more than 3 upboats and is some age, I think?
@ScottPack yes
Meaning there is also an age requirement or 3 upboats is sufficient?
@ScottPack IIRC it's score ≥ 3 and age ≥ 2 months
My memory is rather fuzzy on the second requirement, but that sounds somewhat reasonable.
21:39
guy makes a self portrait after taking different types of drugs : cultso.com/…
21:53
@LucasKauffman heh - that's very odd
 
1 hour later…
22:55
<3 90's music
<3 music :-)
23:16
@ScottPack Actual security
@RoryAlsop do you also like music like dubstep, drum and base, hardstyle?
@LucasKauffman erm...no, think I'm too old to understand it
Bah, patches ... Hammer vendors describe the world in terms of the size and shape of nails, but that doesn't mean it's so.
23:33
@RoryAlsop and what about the more accessible ones, for instance: youtube.com/watch?v=dD40VXFkusw
23:46
Lindsey Stirling dubstep... what could be better?
@JeffFerland a music video playing the song, BUT lindsey stirling is nude?
jezus my english is becoming even more jibberish than usual

« first day (643 days earlier)      last day (4535 days later) »