The DMZ - 2013-01-09 (page 1 of 2)

« first day (755 days earlier) ← previous day next day → last day (4423 days later) »

makerofthings7

01:41

In the edit review queue by anonymous "If your network is insecure you should talk to it in a softer tone. Say kind things to help it's self image."

3

Scott Pack

@makerofthings7 That.....that is fantastic.

makerofthings7

02:17

... here is a link for those who want to see the archive: security.stackexchange.com/review/suggested-edits/4192

Gilles

03:08

@makerofthings7 misspelled its. Instant rejection.

Scott Pack

@makerofthings7 So why didn't you reject it?

makerofthings7

04:04

@ScottPack I thought rejecting it would make it disappear.. I wanted to share it before doing that... (apparently it will never get deleted!)

1 hour later…

Stack Exchange

05:26

It IS about physics. It ALL is.

4 hours later…

Colin Cassidy

09:55

Morning all

AviD

13

A: The Memes of IT Security

Meme: Canonical Time Zone Originator: Unknown Cultural Height: Early 2011 Background: American hubris on the part of our East cost users resulted in blanket declarations that EDT/EST (UTC-4/5) would be considered the de facto timezone of The DMZ. This was brought upon by inconsistent time of d...

Colin Cassidy

10:15

of course, you realise that I'm going to continue this now, just out of spite :)

AviD

@ColinCassidy of course, you realise that as @ScottPack, the room owner, is emotionally invested in the CTZ, he might just choose to kick you from the room ;-)

Colin Cassidy

@AviD well I have at least 4-5 hours to enjoy this small act of rebellion

AviD

hehe

2 hours later…

Scott Pack

12:20

@ColinCassidy Lucky for you it was morning when you said that.

1 hour later…

Thomas Pornin

13:32

Hello people

What is the deal with the "Web of trust discussion room" ?

Scott Pack

Que?

Thomas Pornin

@ScottPack chat.stackexchange.com/rooms/6934

It is referenced from the main page of sec.SE, just below the DMZ.

CodesInChaos

Guess that guy who talked about WoT a few days ago made it

Scott Pack

Not exactly a lot of chatter in there.

CodesInChaos

I think it was a failed attempt to move the discussion out of DMZ

AviD

13:39

@CodesInChaos Pshaw. I think he didnt want to interrupt our intense discussions of baconkinis and zumba, with boring ol' security talk.

zumbaconkini! That's when you do zumba whilst wearing a baconkini.

2

Scott Pack

And, from what I hear, you'll have fully cooked bacon at the end of it. Brilliant!

CodesInChaos

I think the problem is that some here were a bit harsh, because it was slightly misguided

Scott Pack

Zumba?

AviD

@CodesInChaos "a bit harsh"? "slightly misguided"? Dang, we must be out of shape.

@ScottPack I think he might mean the wearable bacon.

Scott Pack

@AviD It would be awful greasy.

@AviD Want a fun few minutes? serverfault.com/q/464118/3356

Only one answer a a fistful of comments.

AviD

13:45

oh wow.

CodesInChaos

The actual question wasn't actually that bad

AviD

I like your snark.

Very subtle.

@CodesInChaos um, yeah it was. "I know its okay! Why do I need the webserver to tell me?"

Scott Pack

@CodesInChaos No, it wasn't, and Michael answered it quite well, I thought. It was the dude's attitude that made it.

@AviD His question was more about the format of the return values.

@AviD That is, why give both the status code and the short text that describes the status code?

AviD

@ScottPack the Code + description. I know. I think thats a stupid question.

CodesInChaos

Everybody knows that 200 is OK and 404 is file not found. So why those stupid strings?

AviD

13:47

@ScottPack Because people.

Engineers tend to forget that sometimes its a person using the computer.

CodesInChaos

But browser could generate error message

Scott Pack

@AviD I think that's exactly the kind of question somebody needs to ask when they're trying to learn the spec and/or how to design things.

AviD

@CodesInChaos besides, there are some ambiguous codes, that allow for custom texts.

CodesInChaos

And if you don't know http error codes by heart, why are you using a computer?

Thomas Pornin

@CodesInChaos It is... a good question, actually. The HTTP protocol itself is text-based so that it is easy to debug implementations with some telnet

Scott Pack

13:48

The answer is simple, but it's a good question.

AviD

@CodesInChaos heh, exactly.

CodesInChaos

still it's voted -6

Thomas Pornin

This "description" is meant for people who do not grasp the "200" or "404"

Scott Pack

If he had come up with the question himself it would have indicated the presence of thought for him to ask why as opposed to sticking to "how".

AviD

@CodesInChaos oh wait, -7.

Thomas Pornin

13:49

these people should not be debugging HTTP server implementations with a telnet

Scott Pack

@ThomasPornin That's why I use netcat.

AviD

@ThomasPornin right, its not a binary protocol. If you're worried about some "redundant" text for readable to humans, shut up and go back to the previous sentence.

CodesInChaos

Many servers won't work with telnet nowadays

they close the connection because you can't type fast enough

Thomas Pornin

I think the historical answer is that the "description" field was added for the error codes (so that a code "500" can be adorned with a more precise description or the error). Once the "description" was added in the syntax, it was simpler to add it "generically", i.e. for all return codes, not just those which need additional information.

AviD

@ThomasPornin okay, but do even you know aaalll the codes?

Thomas Pornin

13:51

@CodesInChaos Ah ! They close because you can't type fast enough !

AviD

better a consistent protocol, with some redundancy in some cases, than the alternative.

Thomas Pornin

@AviD It is not necessary to know the codes; it is sufficient to know where to look them up should the need arise (i.e. while debugging server and client implementations).

Scott Pack

@AviD I know all the status codes, it's easy.

List of HTTP status codes

The following is a list of Hypertext Transfer Protocol (HTTP) response status codes. This includes codes from IETF internet standards as well as other IETF RFCs, other specifications and some additional commonly used codes. The first digit of the status code specifies one of five classes of response; the bare minimum for an HTTP client is that it recognises these five classes. The phrases used are the standard examples, but any human-readable alternative can be provided. Unless otherwise stated, the status code is part of the HTTP/1.1 standard (RFC 2616). The Internet Assigned Numbers Au...

AviD

hey! no fair using extension brains!

@ThomasPornin well, of course, but thats not the point.

Scott Pack

This one is an abbreviated list, but may be more interesting to you, @AviD.

thinkgeek.com/product/6792

AviD

13:53

much like XML, HTTP is ostensibly "human-readable", whatever that means.

@ScottPack lol

Colin Cassidy

@AviD I believe it means the opposite

Scott Pack

@AviD FYI: Customer Actions Shots may be not work safe.

AviD

Status 413 all the time!!

Thomas Pornin

@AviD It is not human-readable, it is engineer-readable. That's different.

AviD

@ThomasPornin ah, but engineers dont need the descriptions...

Iszi

13:55

@ScottPack They should make 404 HTTP briefs as a gag gift.

Scott Pack

And it would be a stretch to identify engineers as human.

4

Thomas Pornin

@AviD ... which is why the question is actually (slightly) interesting.

Scott Pack

@Iszi Aw snap.

Thomas Pornin

@ScottPack Yep, why not give them the right to vote, or consider they have emotions, while you're at it ?

Scott Pack

@AviD Again, the reason the question is interesting is because it has nothing to do with technology as much as it has to do with understanding design decisions and considerations. It's a why, not a how.

CodesInChaos

13:57

Most interesting questions about technology are about the "why"

once you understand the "why", the "how" usually becomes trivial

Scott Pack

@ThomasPornin Condescension is singular, so they feel emotion, not emotions.

AviD

@ThomasPornin So, you're saying the question is, since Engineers know the meaning of all the codes by heart (or can easily find them), and Normal people have no use for the codes OR the description, who is the description for?

No good, you forget the protocol was designed by Engineers, who dont know anything about Normals (or recognize their relevance).

(Or existance).

Scott Pack

Any idiot can read an RFC and understand how it's supposed to work. It takes creative thought and breaking out of boxes to read an RFC and understand why the authors chose to do it that way.

Thomas Pornin

@ScottPack There are spite and bitterness, too. These are necessary for good engineering.

Scott Pack

@ThomasPornin Accepted.

Thomas Pornin

14:00

Snarkiness, though, is to be reserved for writing standards, where it deploys its full power.

Colin Cassidy

@ThomasPornin and a healthy dose of cynicism

Scott Pack

@ThomasPornin I wouldn't consider snark an emotion so much as a form of communication.

2

It's the third voice in English writing: 1) Active, 2) Passive, 3) Snark

4

AviD

Snark is the new star. Any time someone explicitly discusses the snark, it gets starred.

6

Terry Chia

@ScottPack Hey, reading an entire RFC isn't that easy. It's incredibly boring.

@AviD snark

Scott Pack

@TerryChia And look how many people have slogged through Twilight and 50 Shades of Grey.

AviD

14:03

@ScottPack well, as always, porn sells.

even softcore.

Thomas Pornin

14:20

I really like it: disk is full, hence database jobs fail -- including the job which deletes old objects: apparently, it cannot delete objects until I give him an extra 600 MBytes to play with.

For some reason, SQL Server Management Studio has a task called "shrink database" which finds 2 GB when I run it. Why doesn't it run automatically when the disk is full ? I suppose it is so that DBA keep on their job.

(Or, in my case, so that I can keep on complaining about the lack of any DBA in these parts.)

AviD

Either of those explanations is plausible.

It might, however, have to do with the fact that the database is unavailable during the time that it is being shrunk; this process might take a long time.

So I'm guessing the MS SQL dev team took a radical decision to prefer availability over cheap storage disks.

Thomas Pornin

@AviD Yeah, but when the disk is full, the database is not exactly "available" either...

AviD

Disks should never be full.

I dont even know what that means??

Thomas Pornin

I told that to my disk, but it turned a deaf ear on me.

AviD

how could a disk be full?

Thomas Pornin

14:30

This is a virtual machine which has been vastly underspecified by bean counters.

I have a 10 GB disk for my database.

AviD

should be enough, as long as you dont put a lot of data in it.

Thomas Pornin

Arguably, it was not obvious at first that storing the name and birth date of a user would use an average space of more than 300 kilobytes per user.

Iszi

This has got to be the coolest charity ever. Or, at least, the coolest one I've discovered recently.

user image

childsplaycharity.org

@AviD Just when I thought I'd gotten my mind off of baconkinis, I see this in the sidebar. Thanks. Ummm.... I'll BRB.

Rory Alsop

@AviD hahahaha

AviD

@ThomasPornin perhaps the user lives in Scotland. You know what the places are called there.

Thomas Pornin

14:37

@AviD Ah yes. Not like Wales, where village names are also very long, but they don't write the vowels, so it turns out all right.

Rory Alsop

@AviD dunno whit ye mean. We have short place names here, like "Ae" :-)

Thomas Pornin

@RoryAlsop Yeah, but what does it become when you try to pronounce it after having paid your respects to the gods of Scotch ?

Rory Alsop

@ThomasPornin "Smmmmmeeeergggghhhhhhhhhh"

Rory Alsop

15:07

woah - Workplace SE is a more depressing place than here...

6

Q: How should I deal with an employee sleeping with my wife?

I'm the owner of a small business consisting of about 30-40 employees. Recently I found out that one of the programmers I have working for me, have been having an affair with my wife. I feel very betrayed. My wife - we've been together for about 15 years, high school sweethearts, mother of my ...

work-environment

Scott Pack

coughs

Rory Alsop

@ScottPack heh

Scott Pack

I should point out that I was not directly involved.

Rory Alsop

@ScottPack thank goodness for that

Scott Pack

Tell me about it. Stud.

Rory Alsop

15:13

had an even more complicated one at a previous employer - but that would require being off the record to discuss.

and wasn't me! (just before you say anything :-)

Scott Pack

Understood.

AviD

@RoryAlsop okay, we're off the record.

We really want to hear about this.

Scott Pack

The continuously on-the-record aspect of this medium is a bit annoying.

Rory Alsop

@AviD hahahahahaha - I love that from online apps

@AviD beers/tel aviv/march

Scott Pack

Too bad we exist across at least 3 continents.

AviD

15:15

@RoryAlsop hahaha, excellent.

I see you're already planning to make that visit a tawdry one.

Rory Alsop

@AviD oh, sorry - were there alternatives :-)

AviD

haha, no, I guess not.

I'm not going to sleep with you, though.

Rory Alsop

@AviD fair enough

Terry Chia

@AviD hey don't speak so soon. you never know what might happen after a few drinks. ;)

4

AviD

hmm, too much boston legal, I think.

Rory Alsop

15:18

user image

this was a question in a survey from the police

the next question was 'Have you ever been caught speeding?'

I laughed so much

...sure its anonymous, honest

AviD

@RoryAlsop bzzzt. you've just been caught.

Terry Chia

@RoryAlsop anonymous survey?

Rory Alsop

it is funny when you answer 'Never' to this one and then 'Yes' to the next :-)

@TerryChia apparently - it's to get public opinion on speed cameras etc

Rory Alsop

15:30

Woah:

Mind - blown!

Iszi

@RoryAlsop Loving the Numberphile, eh?

Rory Alsop

definitely - therre are a couple which push my maths a bit far though

Iszi

@RoryAlsop Yeah. I've become rather useless at maths since high school. Learning up on the concepts presented in Numberphile has helped fix that some, but I still don't quite get stuff like i.

Rory Alsop

15:46

@Iszi i is very useful when doing Electronic Engineering - impedance only makes sense using i

Scott Pack

EE math really fucked with me.

I remember spending a couple of hours trying to get the math to work out on a reverse Fourier transform before being told, "Oh, you just drop the imaginary component. Don't worry about it."

Rory Alsop

@ScottPack hahahaha - brilliant

Fourier Transforms were always a struggle for me, as the actual concept is fine in my head, but the maths just never felt natural

makerofthings7

@Iszi That is a great charity idea! I love it!

Scott Pack

The Engineering school requires all graduate students to have so many hours of graduate work from outside of their area. So here I was taking Master's level Electrical Engineering courses with zero EE background and only shakey math.

Iszi

@makerofthings7 Found it via Arqade Community Ads.

Terry Chia

15:53

Anyone else getting error messages on the site?

Rory Alsop

@TerryChia yep - everywhere

Scott Pack

@TerryChia Devops.

Rory Alsop

reckon Marc Gravell killed it

Terry Chia

heh

Rory Alsop

user image

he had this post about internal .NET errors

Scott Pack

15:54

So there's an exception which resulted in displaying the exception generation page which resulted in an exception?

Rory Alsop

@ScottPack pretty good, huh

Terry Chia

@ScottPack exception-tion.

Iszi

@RoryAlsop I think I'd go so far as to call it exception-al.

Scott Pack

instantrimshot.com/index.php?sound=rimshot&play=true

Terry Chia

ahh it's back up.

AviD

16:05

@makerofthings7 @Iszi my wife used to work at a child development center (yknow, occupational therapy, speech therapy, etc.) One of the unique things they had there was a toy library - toys and games picked out (mostly for educational aspects), and the therapied kids could borrow the toys and games.

@TerryChia that's what she said!

Iszi

@AviD Heh. I was trying to put together a "little blue pill" related punch-line, but that is so much more effective. Don't know why I didn't think of it first.

Scott Pack

@Iszi Or fluffing.

AviD

always go first for the classic, dont worry about the fancy.

Iszi

@AviD That's what she said... never.

AviD

I dunno, conflating two memes? Hurts my head.

makerofthings7

16:11

@AviD Hopefully it was more fun than the educational games I saw at a CDC running on a TI-99/4A

AviD

@makerofthings7 oh absolutely. I wouldnt call them "educational games" (which are usually boring) but games with some educational value.

For example, I could imagine them having Operation (though I dont think they did), because it has value for kids that need to train their fine dexterity.

On the other hand, I dont think they had Settlers of Cattan, I'm not sure that would be useful.

we would borrow kids games all the time.

it was great - we only had the game for a couple weeks at a time, so the kids didnt get bored with it - then a few weeks later, brand new game!

Scott Pack

I've started introducing the kid to Carcassonne, but less as a competition and more as a collaborative tile-matching building game.

AviD

I have a friend who kinda collects board games.

we were introduced to quite a many different, unexpected games.

that said, I dont quite remember carcassone, but I've definitely played it.

Scott Pack

@AviD I had more fun with it than I did Settlers, though it was also fun.

Terry Chia

@AviD That really reminded me of that one TBBT episode.

Scott Pack

16:18

@AviD What age range was this CDC?

AviD

@TerryChia that one when they sit around playing games?

makerofthings7

I just scanned through the top 100 games ever and only recognize a few gamesradar.com/best-games-ever

Scott Pack

@AviD Because the one mine goes to is 6month-~5/6 years.

AviD

@ScottPack me no cdc, that was @maker

Terry Chia

@AviD yeah, it was sheldon, howard and raj. there were a lot of bad puns going around.

AviD

16:19

ah wait, just got what you were saying

Scott Pack

15 mins ago, by AviD

@makerofthings7 @Iszi my wife used to work at a child development center (yknow, occupational therapy, speech therapy, etc.) One of the unique things they had there was a toy library - toys and games picked out (mostly for educational aspects), and the therapied kids could borrow the toys and games.

AviD

I know they've had newborns there (days old), up to early teens.

@ScottPack umm, yeah, didnt catch CDC == child development center :$

a lot of these therapies are almost completely paid for by the medicare equivalent, up till age 9.

Scott Pack

@AviD Ah, ok. Ours is a curriculum based (using the Reggio Emilia approach) child care for 6 months up through pre-school, so they leave it and go to kindergarten.

@AviD Overloaded terms confused me.

AviD

was gonna say, I think we're talking about different things.

I'm talking about things like occupational therapy, speech therapy, etc.

semi-medical stuff.

Scott Pack

@AviD Most of the time when I see the phrase 'child development center' here it's used to describe a day-care equivalency that follows an educational model of some sort.

AviD

16:24

they aim to provide all the therapies a messed-up kid would need - including emotional and such.

they even had art therapy.

Iszi

Wow. Security FAIL

Scott Pack

@AviD I'm sure those exist, but I'm having trouble thinking of any off-hand so I could come up with equivalent language.

makerofthings7

The acronym CDC is quite overloaded. Glad no one confused that with the Canadian Dairy Commission acronyms.thefreedictionary.com/CDC

AviD

non-medical children's clinic?

user970533

anyone in the room can help me regarding controls and audits question?

pls echo me

Iszi

16:33

@user970533 Probably depends on what standards.

user970533

Iszi I appreciate your response I got the whole details here. Wait

Iszi

@makerofthings7 A good number of those are Flash games. Sort-of odd. Really happy to see the Mass Effect series made top 10.

user970533

0

Q: How to define audit controls responsibility? @ SIEM

I'm assigned to write procedural documentation for the SIEM use cases for the IT asset owners. For example, the procedures for selecting events indicating unauthorized access to user-mail box. I have researched the problem and found corresponding Events Id associated with this event. This is th...

compliance audit

Rory Alsop

@user970533 This one is an interesting question - based on most of the clients I work with, I would tend to agree with your position, but the one thing you can say for sure is: there are no hard and fast rules:-)

Scott Pack

@Iszi So it looks like I've heard of 38 of those games and played 22 of them. It made me happy to see some of my all times favorites so high on the list.

Iszi

16:39

@user970533 See my comment. Also, without any particular regulatory requirement, or at least a C-level approved/mandated standard, it's not likely you'll be able to get anything changed and whining about it just wouldn't look good.

Scott Pack

@RoryAlsop Indeed. So much of the responsibilities depends heavily on your own organizational structure and how each department is scoped/chartered/whatever.

user970533

@rory-alsop hey nice seeing you here. Usually you are fast replying to my threads I didn't knew you were busy here. I'm glad to get your opinion on the matter

I mean is it a best case for a soc analyst to take the task of ensuring system baseline configurations conformance?

Iszi

@ScottPack The 22 being a sub-set of the 38? I'm not sure what my count would be (didn't take time to read most details, let alone tally the count), but I was really happy to see some entries make it. (i.e.: Skyrim, Deus Ex, aforementioned Mass Effect). However, given the rules set forth in their introduction, I'm not quite clear on why Portal and Portal 2 got separate mentions.

Scott Pack

@Iszi Yes, I had heard of a total of 38 games on that list (counting titles not series) and had played 22 of those.

@Iszi Yeah, the gameplay for the two isn't really all that different. Portal was, from where I'm sitting, pretty revolutionary. Portal 2 did a great job of improving the model, and was a much funner and more enchanting game, but wasn't that grand a leap ahead.

Iszi

@ScottPack Though I've got to give them credit for multiplayer. They did a real good job on that, especially with enabling effective comms without voice/text.

Scott Pack

16:45

@Iszi I haven't played multiplayer on it yet.

Iszi

(And having Steam multiplayer be cross-platform is fairly awesome, too.)

@ScottPack We should do that sometime. Do I have you in my friends list on Steam?

Rory Alsop

@user970533 Generally accepted good practice is: Compliance/Reg team set their requirements; IT implement controls based on Sec guidance; Audit confirm those controls were implemented effectively

Scott Pack

I was completely drawn into the storyline of Portal 2. Very well done, I thought.

Rory Alsop

Business and reg decisions should not be held in IT

Scott Pack

@Iszi I'm not actually sure.

@Iszi I usually only play a couple of hours every few months.

Rory Alsop

16:46

@ScottPack dammit - you need to. I'll go through it with you

it is very clever - especially when you get to the millions of community levels as well

Iszi

@ScottPack That's two volunteers, now. No excuse not to.

Rory Alsop

@Iszi ^this

Scott Pack

Now we just need to set up dates.

Iszi

I'd defer the honor to @RoryAlsop if you want it done in the near future, though. Mass Effect has ownership of my gamer-soul for now.

Rory Alsop

@ScottPack smooth

@Iszi heh - although I did just install Brink, P2 is still my favourite here

Just checked - I have you both in my friends list

excellent

Iszi

16:48

@RoryAlsop Oh, I love the portal series. But I think Mass Effect is going to take the crown of all-time favorite for awhile.

Crap. I'm in the wrong career field.

#YouMightHaveACareerAsAJournalistIF … it is hard to get motivated unless and until you are up against a last-minute deadline.

Tweeted by briankrebs on January 9, 2013 at 4:43 PM

user970533

@Rory Alsop in such a case control monitoring (e.g for soc analyst) is what we usually do, but when it comes to enforcing those requirements like i want for a particular use case I expect to have the sys admin have the necessary auditing options enabled on their system (for e.g administrators should not be exempted from audit policy)

or i want to view particular event ID in case a particular user has access person x mail box. Should the compliance team or internal audit team provide me the necessary assurance that my requirements are meet and doesn't effect business.

Scott Pack

@Iszi @RoryAlsop Just checked, and I've got you both as well.

Rory Alsop

@user970533 100% agree - in fact they may need extra monitoring/logging controls, as they have admin powers

@user970533 either of those should do, yes - but as mentioned, organisations all seem to do this differently

:-)

Iszi

@ScottPack Spiffy. Give one of us a holler whenever you want to get started, then. I think my wife prefers watching me play Portal 2 to Mass Effect, anyway. Heck, she might just take the controller from me.

@RoryAlsop So, do you think we should close that question as NC or is it salvageable? Primary concern is the bit about it really being organization-dependent.

Scott Pack

@Iszi Oh sure. That's one of the things I like about Portal. It feels like I could enjoy watching it just as much as playing.

Rory Alsop

16:53

@ScottPack oooh - I can't watch it on any of the complex multi-fling levels, I'd get airsick. Need to play it

user970533

@Rory Alsop Hm thanks for agreeing:) but what about due diligence and due care does it not requires management to assign responsibility as per best practices and requirements. I mean would the external auditors seeing the lack of proper placement and assignment of job and duties as a probable cause misdemeanor.

Iszi

I will say there is one gesture (well, not just one - but one in particular) missing from Portal 2 multiplayer. Something to say "Hang on, I think I've got it!".

Scott Pack

Lunch time. Gentlemen. @Avi.

Iszi

@ScottPack Yay! I'm no longer excluded from the proper gender category!

Scott Pack

@Iszi As you might recall you, or your proxy, fulfilled my verification requirements.

user970533

16:57

@Rory Alsop how do you explain the term control owners is it the same as system owners? Lately i have found this terms as i was researching this topic

AviD

@ScottPack dang. I gotta wait till March.

Rory Alsop

@user970533 they don't care who has the responsibility, just that someone has it.

@user970533 control owners may be the same as system owners (which can be useful as they will understand the system), but I often see controls owned by department heads, business owners, divisional reps etc

@ScottPack mutual verification just sounds.... icky

@ScottPack only heard of 28, but played 25 of them :-)

still not convinced by the Grand Theft Auto games - had a shot with 1, 2, 3 and 4 and they I must be missing something. 4 had better graphics, sure, but gameplay is almost irrelevant - you drive around and crash through people, and nothing ever happens...

Iszi

@RoryAlsop Play San Andreas.

Rory Alsop

much different?

Iszi

Cops generally don't like it when they see you run over civilians.

user970533

17:08

@Rory Alsop owing doesn't let them escape from the responsibility of ensuring the best environment for their employees making it conducive enough to promote performance and reduce risk of errors/flaws.

Rory Alsop

@Iszi whereas in 4 they generally ignored me, or if they did actually chase me I'd lose them after 1 corner

user970533

do read my reply in the main article

Iszi

@RoryAlsop They can still be (relatively) easily lost in San Andreas. Just depends on how many civilians you run over, or what other havoc you've wreaked.

They get pretty hard to shake when they start calling in the military (e.g.: Tanks, Harriers, etc.)

Rory Alsop

@user970533 i agree with what you say in that comment. A SOC team should be responsible for carrying out the technical duties detailed in the role/contract correctly, but should not own the risk to the business

Scott Pack

17:47

Classy.

user image

user970533

lol

Iszi

@ScottPack Heh. Thing is, that could have been edited into something salvageable still. But, then it would have had to be migrated to MSO and even then probably closed as dupe.

Scott Pack

status-declined-too-useful

2

Iszi

@ScottPack Heh. I don't know if I like that one better 'cause of the snark, or your other one for its brutal honesty.

Scott Pack

Ideally it contains both.

1 hour later…

Iszi

18:58

Someone flagged this as spam/offensive. Not sure what they're talking about. ;-)

in The Bridge, 27 mins ago, by GnomeSlice

user image

1 hour later…

Rory Alsop

20:03

@Iszi Loving the conversation subsequent to that - with all the Venn diagrams

Iszi

@RoryAlsop Eh? I had to move on before the Venn diagrams came up.

Ah. Wholeheartedly agree with this.

in The Bridge, 55 mins ago, by Ben Brocka

Yellow text on a white background should get you banned

Lucas Kauffman

boobies with silicone :(

Scott Pack

20:23

@LucasKauffman I'm not sure those count as boobies anymore.

Rory Alsop

@ScottPack simulated in silicon just doesn't count

although from a philosophical perspective, if you can't touch then it's all just an image anyway...

Scott Pack

20:42

So Fedora 18 is due for release Tuesday of next week. I wonder if I would be putting myself in danger if I were to update to the beta now and rebase then. Or I could just wait, I suppose.

Sadaluk

@ScottPack I usually wait at least a week post release. That way any new killer bugs are dealt with.

Scott Pack

@Sadaluk WHAT?!?

Iszi

@ScottPack What does that have to do with boobs? Why are we changing topics?

Scott Pack

@Iszi I've yet to see any boobs worth discussing appear.

Sadaluk

@ScottPack I prefer not to have to rebuild my system too often, particularly as last October I had some not-so-fun with corrupting ext file systems.

Iszi

20:45

@ScottPack There are boobs that aren't worth discussing? That's like that one expression I don't get: "Useless as tits on a board." I contend that tits are not useless, anywhere.

Sadaluk

I reinstalled weekly for most of October.

Gilles

@Iszi I prefer my tits on a broad, not on a board

Lucas Kauffman

boobies you say

Iszi

@Gilles Agreed, but would you honestly reject the latter if offered alone?

Lucas Kauffman

not going to post

Scott Pack

20:49

@LucasKauffman Come on...

You can delete it immediately after.

Sadaluk

So the features of F18 don't look all that exciting. I don't have secure boot on my motherboard thankfully although I am booting UEFI.

Lucas Kauffman

user image

Scott Pack

@Sadaluk Better MATE support, which makes me happy.

Iszi

@LucasKauffman Dunno why you weren't going to post. I see nothing wrong there at all.

Scott Pack

That generally looks pretty worksafe to me.

Lucas Kauffman

20:55

I kept it decent

user image

Iszi

@LucasKauffman That's pushing it pretty close.

Lucas Kauffman

still think she's the hottest chick ever.

@Iszi close but over!

Iszi

@LucasKauffman Up there for sure. Tops, I dunno. Pretty close, at least. For future reference, might be safer to just post a link instead of letting it Onebox.

Sadaluk

@ScottPack Fair enough. I imagine a few things in the list will be good for some, but I'm not overly fussed about being bleeding edge any more... it's not like I use all that bleeding edgeness ever.

Lucas Kauffman

It is an offering to the @Rory

Scott Pack

20:58

@LucasKauffman I'm a big Johansson and Hatheway fan.

@Sadaluk The concept of better AD integration sounds nice.

Sadaluk

@ScottPack Yeah, I agree. I won't use it at home and at current work, but it does make the idea of putting fedora on work boxes much more compelling.

« first day (755 days earlier) ← previous day next day → last day (4423 days later) »

Transcript for

Jan '139

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2025 Stack Exchange Inc; legal

mobile