@JeffFerland It's one of those odd things where it's troubleshooting a product which is primarily used for security, but it may not technically be a "security" issue.
Here's the story: I'm still recovering from the rebuild I did of my personal laptop (shows how much I really use it, I guess) that I did a few weeks ago...
...part of that process is setting up my mail client with my PGP keys.
Thing is, I'm missing one of my e-mail addresses among the public/private key pairs I could dig up.
It's possible that I may have used the same key as I used on another e-mail address, and the backup of that key just didn't have that detail.
@JeffFerland Yeah, I actually just now got lucky. Found an e-mail where I'd sent my public key and got the key ID there. What's this about from the signature though? I didn't see where the key ID was there.
For those who have wordpress blogs: is it cheaper to register a domain name with them or register it with someone else and map the domain name to the blog?
@LucasKauffman How much does it cost per year/month? Not sure why I need my own hosting solution atm but could be fun to play around with if it doesn't cost too much. :P
@TerryChia well, I've got 2 at the moment, one is 17 euro / month (single core, 4GB memory and 1 TB HD, 100 mbit and no bandwith) and the other is 34 euro a month for 2 units, but I share it with a few mates of mine
@CodesInChaos indeed that's my main concern
I just installed a WAF, OSSEC and then a plugin that detects malicious requests on my wordpress written by @MichaelHampton
@TerryChia if you just want a blog, then you can better get WP hosting, if you want to administer a server then you should get a VPS
@TerryChia registration isnt so much of a big deal, I tend to go with godaddy <shudder> just because we're used to them, and have like 200 domains registered on the same account.
@RoryMcCune it seems to be an attempt to raise the bar (not necessarily particularly high) for each EU nation, particularly given that each nation will need to set up their own CERT. personally (and professionaly) I like that they have included critical infrastructure in there
Somewhere in the middle of the night I found that six years ago I emaild my coworker when he worked at a company that didn't hire me 9 months ago and we now both work at the same company. How odd.
@ScottPack You now have to wear that visor to work.
I've noticed that recently many websites are slow to display their text. Usually, the background, images and so on are going to be loaded, but no text. After some time the text starts appearing here and there (not always all of it at the same time).
It basically works the opposite as it used to,...
@CodesInChaos GTFO. That's like 1960's era common sense defense. Nobody does that shit anymore. We don't put roofs over our datacenters, they're in the cloud! Air-gaps are for spark gap radios!
So I thought of trying to implement unreadable gpg private keys with selinux, but then I realized I'd have to neuter gpg itself to kill the export keys function, and even then it could still be passed the names of the keyfiles as input data to encrypt. Boo. I need a proper OpenPGP smartcard. They seem to only sell them (in retail) in Europe.
Good. I would feel remiss to recommend the wheel of time series to anyone at this point. It's freaking 14 books, 11916 pages (hardcover printing). The original author died after putting out the 11th book, and the dude who replaced him is so much better writer.
@ScottPack I like reading books that were unfinished because the author died. Kafka's 'The Castle' actually ends mid-sentence in a really eerie way that always fascinated me.
@RoryAlsop well depends, if I have time to explain it then yes, when I get introduced to people as "here's Rory he's here to do some penetration testing" perhaps not so much..
@ScottPack I remember back at university I was trying to work out how to insert pictures into LaTeX documents. I spent a long time "Alta Vista"-ing that.
I am designing a system composed of several services. Some can be hit only from inside our network and a few can be hit externally. One of these services is a "login" or "authentication" service.
My thought is that a user will log in with a username/password to be sent to the authentication ser...
The product manager of Notes has now written a book about how to be a great product manager! That is like the captain of the Costa Concordia is writing a book on “Safe boating in Italy”.
@ColinCassidy The actual tradition is that the captain should leave the ship last. A captain who goes down with the ship is a captain who is too ashamed to admit that he cannot swim.
She rejected the idea of Server Fault because "it's a fairly specialized audience" and Cryptography because it's beta. The last reason makes sense, at least.
@CodesInChaos I wrote the code in C#. But here they do only VB, so I must translate it into VB
The "And" operator performs complete evaluation, you must use the "AndAlso" operator to get the lazy evaluation which you have with "&&" in C# (and C and Java)
@LucasKauffman Dunno which 0day they're talking about. But regardless, there's something inherently wrong (or, at least, its implications) with that tweet as it is.
@ThomasPornin I didn't mean the capitalization, or a correction of you. I've always been bothered that call things things Dim(ension). Seems dim-witted.
Anyway, @LucasKauffman, my point about the VUPEN tweet is that it seems to be implying that a patch will make you immune to exploitation of a zero-day exploit. An actual zero-day, by its very nature, will not have had a patch available yet.
After looking at the stats, we enabled user-driven migrations to Super User and Stack Overflow.
Cryptography is unfortunately right out since it is still in beta and beta sites aren't eligible to be included in default migration paths.
We're also holding back on enabling user-driven migrations ...
"I can confirm that they are indeed privacy glass as I pretended to get off with myself on the back seat and I had a fellow work colleague confirm that they could not see me."#
heh, now after looking out that weird Al polka video I'm on a looking at weird al videos thing.. including this classic youtube.com/watch?v=FklUAoZ6KxY
@AviD My only fear is that bear #2 got more upvotes than me because I mentioned Chesney Hawkes. That was probably a mistake.
But I think trying to get an 80s band, particularly one with either awful hair or that sings power ballads into every answer I write is my new personal goal.
I think your answer does bring up an actually interesting point, I think the only thing of any interest on that whole thread: Harvard vs Von Neumann atchitectures, and how these affect security.
as solid as some of the answers were (including @bear's), they were just kinda worthless - a decent answer to a stupid question is still answering a stupid question.
@AviD I think it might (partially) be the basis behind this lightbluetouchpaper.org/2013/01/02/… although I don't know as I know nothing about the work. But if you were going to start again at the CPU level, it would make sense to carefully review your architecture.
@AviD As you'd expect an early linux distro to be - rough around the edges but the VM components are well integrated into the overall Windows manager - so you really do get different coloured vms for different things you wish to do, etc.
I'd like to take a more technical look, as it's been a while since I installed any Xen stuff, so that's what I will do maybe next weekend.
@AviD That's top notch. They haven't written a whole hypervisor from scratch - they used Xen and its components, so it's as good as you can expect say XenServer to be.
The UI for managing VMs they've added was good in the release I tried.
and it does indeed integrate individual apps into the parent desktop.
This guy... he asks a question, shows where he looked for it, tells why doesn't understand it. Then he politely thanks me for my answer so far, asks for a clarification, and thanks me again at the end in addition to upvoting and marking selected.
Problem
I do not know what a "NOP" is in Metasploit Framework or otherwise.
What I do know
MS Unleashed says, "Nops keep the payload sizes consistent."
A few question posts mention buffer overflows.
What I would like to know
Why do Nops keep payload sizes consistent?
What do Nops keep payloa...
@AviD Yep. As I say, virtualbox does the same thing provided you don't ask too much of it (like dual monitors). Qubes is more seamless than that - I ran it dual screen with no issues whatsoever. Unless you knew you were running VMs underneath you might not realise you were using VMs.
Wow, a user was angry because I'd closed his question, starting flagging and complaining in chat on his way to meta… and after a short conversation where I wasn't particularly accommodating, agreed with my position and went away happy
@AviD It's based on Fedora 14, so not bad, but as I understand it there's no update servers yet, so you get what comes on the disk and that's about it. No, is the answer to that - I don't think I'd do my day to day computing on it just yet.
eventually, I will VM or dualboot a linux to have, so a lot of the time (to get more comfortable) and mostly for specific tasks/projects, but not regular day to day computing.
@AviD I'd say if you're prepared to muck around, go for it. I got it up and running without any real headache - I don't think it's any harder to work with than any other linux distro out there.
Ok ok give it its due, sometimes Fedora's edginess means they break things. Like totally stuffing up yum database updates. But by and large, it's ok.
Also, I did used to use Ubuntu. It's not so bad either - I don't like unity (whereas I do like gnome 3) and I have also used Debian. They're not so bad.
@Polynomial It's a bit of a shift. There are parts of gnome 3 I'd... not do if it was me, but on the whole I like it quite a lot. Gnome 2 wasn't bad, and I still use it sometimes (vms, no 3d accel) but I think they did need to do something radical to it.
I am designing a system composed of several services. Some can be hit only from inside our network and a few can be hit externally. One of these services is a "login" or "authentication" service.
My thought is that a user will log in with a username/password to be sent to the authentication ser...
After looking at the stats, we enabled user-driven migrations to Super User and Stack Overflow.
Cryptography is unfortunately right out since it is still in beta and beta sites aren't eligible to be included in default migration paths.
We're also holding back on enabling user-driven migrations ...
Problem
I do not know what a "NOP" is in Metasploit Framework or otherwise.
What I do know
MS Unleashed says, "Nops keep the payload sizes consistent."
A few question posts mention buffer overflows.
What I would like to know
Why do Nops keep payload sizes consistent?
What do Nops keep payloa...
