The DMZ

Iszi

16:02

Numberphile fans: Live video stream of Brady having a chat with James Grime.

youtube.com/user/numberphile?v=8IOaoK2MMoI

Lucas Kauffman

@AviD EY

AviD

@LucasKauffman eh, was close. turned them down regardless.

btw, if you're at EY, do you ever work with the Hactics ASC?

the israeli team...

Rory Alsop

@AviD - big-4 can be right at the right time in your life. Definitely good fun, and helps grow your connections, but it can get very tiring, and it tends to make you cynical:-)

AviD

@RoryAlsop eh, I'm already there. I think I've passed that right time a long time ago.

I could barely bring myself to consider tech corporates. going back into corporate consulting - why bother? I've got that now, and I get to work from home, set my own hours, choose my own projects/clients...

as you said - its great at the right time.

Lucas Kauffman

@AviD No :(, but I'm going to ask to go meet them at blackhat

asadz

16:10

can the SE admin not assign the ownership of a certain question to a user?

merging doesn't solve my problem

Lucas Kauffman

@AviD iirc that's Tall Mozes his team right?

I havent met any of those guys yet, but they are considered very pro at what they do

@AviD maybe you should apply there?

M'vy

Hiya

Lucas Kauffman

sup @M'vy

M'vy

^^

I have less time for doing thing after my Ph.D defence than before... isn't that weird?

Haven't been here since... too long

Lucas Kauffman

@M'vy how was your PHD defence?

M'vy

16:20

Well, it went ok

45 min presentation was just fine (I just talk about what I've done in 4 years, so no pb, I master that)

they hold me 1h30 for questions after that

:S

but I think I got that right :P

Thomas Pornin

@M'vy That's the usual case; it is part of the work of the PhD advisor: never let the student defend his thesis unless everything is fine.

Some people say that it is like marriage.

M'vy

^^

Thomas Pornin

Just before the altar, the girl can still theoretically say "no", but normally this case has been dealt with in the previous months.

M'vy

:P

Love the analogy

Now I'm busy doing master degree lessons, writing my resume in English, finishing a paper, grading students, and looking for a postdoc position

as well as finish the corrections on the paper for the library :S

AviD

@LucasKauffman yeah, there's some really good folks there.

I should know, I trained a bunch of them ;-)

@LucasKauffman heh, nooo... not looking for another consulting gig - if I wanted that, the one I've got is a pretty sweet deal :)

@M'vy congrats!

M'vy

16:27

@AviD Thanks

Thomas Pornin

@M'vy So they must call you "doctor" now ?

M'vy

If by they, you mean family and the other persons who had to support me during my thesis, then yes :P

Iszi

@RoryAlsop But we'd have to shut off our XKCD feed, too! Totally not worth it.

Rory Alsop

@M'vy hello there

makerofthings7

16:44

Most amazing AD Analogy I've ever heard: (by Microsoft)

Imagine that Active Directory is just a big room. You don't actually know what is in the room, but you do know that if you pass something into the room through a slot in the locked door you will get something returned to you that you could use. When you change the Domain or Forest Functional Level, what you can pass in through that slot does not change, and what is returned to you will continue to be what you expect to see.

Perhaps some new slots added to the door through which you pass in different things, and get back different things, but that is the extent of any change. How Active Directory actually processes the stuff you pass in to produce the stuff you get back, what happens behind that locked door, really isn't relevant to you.

Source: blogs.technet.com/b/askds/archive/2011/06/14/…

AviD

seems like just a typical "black box" non-explanation.

makerofthings7

Yes. It's surprises me that it's by MSFT and how zen it is. Funny.

CodesInChaos

18:21

send to security.SE?

4

Q: Does iPad On Disk Encryption affect only one application or whole system

I need my native iPad application to store its data (say .DOC documents downloaded via HTTPS) in an encrypted form. Those .DOC files are to be opened in 3rd party apps on the iPad. I need to know whether there is a way that data of both my application and those of 3rd party apps can be encrypte...

Thomas Pornin

About this:

0

Q: How to protect files (cron files) frome being executed by everyone?

I wonder what read / write permissions should I set on my cron files (php files) so they can be executed only by our server. We're using CentOS 5.9 - 64bit and cPanel / WHM + Apache. Thanks!

apache permissions

People are really executing cron scripts written in PHP ? Civilization has lowered that deep ?

Ladadadada

@ThomasPornin I have daemons written in PHP running on some of my servers.

Thomas Pornin

Oh well. I guess this is one of these cases where you are socially expected to turn a blind eye, as long as it happens between consenting adults.

Ladadadada

Yeah. I have to upgrade one of the EC2 instances because it's running out of memory... and the PHP daemons are using > 100MB each.

Thankfully none of them are public-facing.

Iszi

18:53

@CodesInChaos Sounds like an Ask Different question.

Scott Pack

@Ladadadada m0n0wall is, if I recall, proud of the fact that their entire system is based on a php backend. Startup scripts and all. I think they just use those ugly C binaries because rewriting iptables in php sounded poor, even to them.

@M'vy So have you been hooded yet?

Iszi

Wow. I don't think I've ever seen a question balanced out with so many votes in each direction. This one has score zero, with 10 votes each way.

0

Q: How big is the Matrix?

Does it contain the whole universe (whether obeying physics laws as we know it or not)? Or, is it just limited to solar system & fake EM radiations coming from outside? I was just wondering how machines would manage to process detailed simulations of infinite astronomical bodies (which loo...

the-matrix

(Interestingly, this still translates to +30 rep for the asker.)

Gilles

@M'vy most people feel that way: after the defense is when the real trouble begins

congratulations

don't forget to take a break

@Iszi data.stackexchange.com/stackoverflow/query/95656/…

even on SF&F we have a +10/-14 and a +14/-11 and a +11/-11

CodesInChaos

19:35

low rep accs are so annoying. Can't even vote-split

Adnan

@CodesInChaos so mean

CodesInChaos

why?

I just think it's frustrating

Adnan

Agreed. Some times It's annoying

Sometimes I create accounts on SE sites just to down-vote some answer or question

Gilles

@CodesInChaos I think there's a userscript for that, try looking on the site with no chat shorthand

Adnan

Then I have to participate until I get 125 to down vote

CodesInChaos

19:40

I don't care much about downvoting. The two big privs are vote-split and viewing deleted posts

Adnan

@Gilles :O So the limitation is completely client side?

CodesInChaos

@Adnan No, AFAIK it fetches the data from the dump

Gilles

@Adnan no, it's server-side. But there's a separate way of getting the info, through the API

it's not like, say, pending close votes, which require 3k to view and aren't exposed in the API

CodesInChaos

Not being able to view deleted posts on meta.SO annoys me quite a bit

since for some reason they delete half the meta posts once they're "done"

Adnan

Oh okay

Gilles

19:45

there was a backdoor to see deleted posts at 2k

I don't know if it's still there

IIRC at 2k you could start to edit a post, and you'd get the last revision

but it's been fixed

Lucas Kauffman

hello gentlemen

@AviD there are all sorts of rumors about the team in Israel, especially regarding some of the members being ex-mossad

AviD

@LucasKauffman haha, dont know any of those.

I know several that definitely are not.

however, a large group of them ARE from one of the secret computer units in Israel Army Intelligence.

Lucas Kauffman

20:04

@AviD I'm just reading up on the mossad and their achievements, you guys don't joke about huh?

Mossad

The Mossad (, ; , '; literally meaning "the Institute"), short for ' (, meaning "Institute for Intelligence and Special Operations"; '), is the national intelligence agency of Israel. The Mossad is responsible for intelligence collection, covert operations, and counterterrorism, as well as bringing Jews to Israel from countries where official Aliyah agencies are forbidden, and protecting Jewish communities worldwide. It is one of the main entities in the Israeli Intelligence Community, along with Aman (military intelligence) and Shin Bet (internal security), but its director reports...

AviD

heh

Lucas Kauffman

@AviD well on the taking out people you don't like part :p

AviD

@LucasKauffman hey, that's only "alleged".

Lucas Kauffman

Mossad is actually being suspected of a recent killing here as well unofficially

AviD

@LucasKauffman heh, reading that now

@LucasKauffman do you watch Covert Affairs?

Lucas Kauffman

20:08

@AviD no what is it?

Thomas Pornin

Mossad are reputed to be well trained, as daring as could be expected for secret services of a country which is technically at war (and believes itself to be), but also somewhat "messy".

AviD

@LucasKauffman imdb.com/title/tt1495708

CIA operative, yadda yadda. There is a suave, sterotypical israeli mossad agent there.

makes me giggle.

@ThomasPornin of course they're messy. They're Israeli.

Lucas Kauffman

@AviD the best mossad agent is Ziva David

AviD

same thing could be said about Israeli tech workers (programmers + security consultants): knowledgable, even sometimes brilliant, bring great work, but dammit they dont follow process!

@LucasKauffman who dat?

ahhh, NCIS, of course.

Lucas Kauffman

@AviD It's a fictional character, she works for NCIS and is supposed to be the daughter of the mossad director

Thomas Pornin

20:12

@LucasKauffman which... does not make sense

AviD

@ThomasPornin ... because fictional characters cant work for intelligence agencies?

or is this another one of your misogynistic comments...

;-)

Lucas Kauffman

@ThomasPornin It's fiction

Thomas Pornin

In any decent intelligence agency, people who have links (in particular familial) with people in other countries are rejected, because they could suffer from pressure from that country

Especially when the foreign family member is himself a member of a foreign intelligence agency !

@LucasKauffman Yeah, but being fiction is no excuse for being bad fiction.

AviD

I liked the guest spot of ex-mossad hitwoman on one episode of Leverage.

@ThomasPornin what if that was intended? to use her to steal info from her father...

Thomas Pornin

@AviD Then the father himself should be a bit more suspicious. He is the director of Mossad, dammit ! These guys are usually competent.

AviD

20:16

@ThomasPornin awwww but it daddy's widdle giwl...!

Lucas Kauffman

@ThomasPornin He actually uses his daughter on a few occasions

blind sql injection is slooooow

CodesInChaos

22:11

oh goodness

0

Q: is it a good/clever idea trick a hacker into thinking an encryption is md5, when it is not?

` $clear_text = "hello"; $salt_ = sha1("758hF4H7gJi98U6o"); $salt = substr($salt_, 0, 12); $hash = substr(hash("sha512", $clear_text), 0, 20).$salt; ` as you can see, $hash generates a 32 character long string, making it look identical to md5. So a hacker will be trying to decrpyt this md5...

encryption

Lucas Kauffman

@CodesInChaos are you going to put an answer on that? (don't want to "steal" it from you )

Jeff Ferland

4

Lucas Kauffman

@JeffFerland I lolled very hard

CodesInChaos

No, won't post an answer

AviD

dd-wrt vs. Tomato - anyone have an opinion?

or rather, what are the main benefits of each...?

jrg

22:26

they all suck differently.

Gilles

I put tomato on mine years ago, but if I had more of a reason than “first I tried” I've long forgotten it

Adam McKissock

Howdy y'all!

AviD

@jrg have a different suggestion?

@AdamMcKissock howdy

jrg

@AviD i have no specific experience in the area, my friends are all in the dd-wrt camp though.

Adam McKissock

I need somewhere to procrastinate

jrg

22:27

@AdamMcKissock sounds like you found the place then.

AviD

@AdamMcKissock heh. go clean this up

jrg

wat. you guys are gunning for a 100% answer rate in no time.

Adam McKissock

@AviD The idea with procrastination is to do LESS work, not more...

AviD

@AdamMcKissock wrong. its to do the wrong work.

Gilles

My home router has been running tomato for, er, at least 4 years, and I haven't felt the need to change that

Adam McKissock

22:29

@AviD I reject your reality and substitute my own!

AviD

otherwise, its just being lazy.

Lucas Kauffman

damn I love this eurodance mix:

AviD

@Gilles so... I guess you're happy with it.

Lucas Kauffman

►

AviD

doesnt get in the way... not much else youd need, i guess

Gilles

22:30

@AviD I did change the stock firmware 5 minutes after switching it on

it lacked some feature that I needed, something to do with dyndns IIRC

Lucas Kauffman

@AviD If you want to spend money on a new router I can recommend mikrotic

Gilles

I don't do anything really complicated though

AviD

@Gilles really? most stock routers seem to support dyndns.

@LucasKauffman got the router, now I have to choose the firmware.

Adam McKissock

What do you guys think about these yubikey thingeys?

jrg

i <3 the concept, don't have time to make it work with everything just right now, but i tried to destroy mine and can't.

Adam McKissock

22:35

Im thinking about getting one, but It seems to be a fair bit of cash for what it is

AviD

@AdamMcKissock no real opinion

Lucas Kauffman

LET ME HEAR YOU SAY YEAH

...

right, I guess no 2 unlimited fans in here :<

Jeff Ferland

Give me an A!

Give me another A!

jrg

see if you can get one on sale or something.

AviD

@jrg an A?

Jeff Ferland

22:37

Give me yet another A!

What's that spell? AAAaaaaahhhh

jrg

@AviD yes, an "A". No, a YubiKey.

Adam McKissock

@jrg Yeah, might check good old ebay

jrg

@AdamMcKissock ew, used security products.

Adam McKissock

@jrg It wouldnt be bad for me, just for the previous dude :P

jrg

i guess you could, but don't keep the details of your money laundering operation secure behind it, because you never know where that thing has been. ;)

Adam McKissock

22:39

If I had a money laundering OP, I wouldn't be needing to get one on the cheap.

jrg

so yeah, i guess, you can. i wouldn't.

AviD

@AdamMcKissock ahh, but what if that was just part of your cover, eh?

jrg

Oh, the more experienced detective in the room has a point.

Adam McKissock

@AviD Then I would think of a better, cooler cover.

Like the son of a billionaire or something.

jrg

And now we have the evasive answer. The plot is building, the suspense is killing.

AviD

22:41

@AdamMcKissock ahah, but a better cooler cover would arouse suspicion.

Adam McKissock

@AviD Perhaps....

@AviD hums the james bond song

jrg

@AviD but if he was a cleric, then he'd be a spy.

AviD

@AdamMcKissock @jrg and now he's being ambiguous. Book 'em, danno!

jrg

according to Napoleon, if you can get the village priest to work for you, you have already won. So, therefore, he can't be a cleric as his cover.

Adam McKissock

@AviD Ambiguous? Me?!

Gilles

22:44

@jrg but Napoleon lost

jrg

@AviD hey, i got that reference. It's some old, old TV show, from before Remington Steele, I think.

@Gilles For other reasons.

AviD

@jrg CSI, I believe.

Adam McKissock

@AviD Napoleon lost because of CSI?

jrg

@AviD The googles think it's from Hawaii Five-O. en.wikipedia.org/wiki/Hawaii_Five-O

AviD

@jrg cole slaw.

jrg

22:46

and I do not get that reference.

man, i really dislike being the youngest person in the room sometimes. So much goes over my head.

Lucas Kauffman

@jrg ur 16?

ezus

*jezus

Adam McKissock

@LucasKauffman 16?! I thought I was young....

jrg

@LucasKauffman yessir.

Lucas Kauffman

@jrg You're ... young

AviD

@LucasKauffman so's your face

Lucas Kauffman

22:57

@AviD yours isn't.

AviD

was gonna go with a your mom joke, but your mom is SO OLD, her birth certificate says "Expired".

Lucas Kauffman

@AviD Your momma so fat all european airports had to be closed when she was cremated.

Adam McKissock

@LucasKauffman Damn, dude.

AviD

@LucasKauffman heh, good one.

your momma so fat, she puts mayonnaise on her aspirin.

Gilles

your momma is so FAT, Microsoft has a patent on her

4

Lucas Kauffman

23:04

@AviD Your momma so fat, she has her own postal code.

AviD

your momma so old, she waited tables at the last supper.

your momma so ugly, when she was born, the doctor slapped her parents.

your momma so short, you can see her feet on her driver's license.

your momma so ugly, the last time she heard a whistle, was when she got hit by a train.

your momma so fat, her blood type is Ragu.

your momma so dumb, she failed a survey.

your momma so dumb, she installed javascript on her server.

Lucas Kauffman

Yo momma so fat, she don't wear a veil, she wears a curtain.

AviD

your momma so fat, her shadow weighs 100 pounds.

Thomas Pornin

@Gilles Napoleon did NOT lose. He just became a legend.

Gilles

your momma so fat, Napoleon couldn't conquer her

Rory Alsop

23:16

@ScottPack That just made me think of a Neal Asher novel...

@Gilles didn't realise you could do that in chat markdown - very nice :-)

AviD

Yo momma so fat, scotsmen want to take her to their "special" cliff.

oh dang, that should be sheep, not cows. dammit, I messed up :-(

Rory Alsop

@LucasKauffman hahaha - that brings back some great memories of that fun time after I graduated but before I got a proper job

@AviD no - it's Horse - everyone knows dat

Rory Alsop

23:32

Oh - congratulations to @drjimbob on reaching 10k!

That's 12 people with 10k already - more folks with mod-like powers

Lucas Kauffman

@RoryAlsop I only need 500 more

I'll be number 13

Rory Alsop

@LucasKauffman @Tylerl is close too, as is @nealmcb :-)

Lucas Kauffman

Does that imply Sec.SE is unlucky to give me modpowers?

Rory Alsop

the race is on

@LucasKauffman only if you are actually triskaidekaphobic

Lucas Kauffman

That salted question is not getting nearly as much attention as I hoped on SO.

Shows that most devops don't care about security!

►

Thomas Pornin

23:39

@RoryAlsop He. You've counted Bear #2 as "people".

Lucas Kauffman

mmm I need to get up in 5 hours and still need to work at least 1 and go home

Transcript for