@asadz I'm sorry that you can't easily see that YouTube video I sent you earlier, but it does handily sum up the nature of how you're acting in the room lately. It is a problem. You act in a manner that assumes a great degree of familiarity with our culture, but you end up filling up our chat with a long string of non-sequitors. I'm not sure what more I can say to effect a change in your behavior when so many have spoken to you in one regard or another.
@asadz I am running out of time as I'm watching everybody else's patience wear thin. This is not new today, this is a month of increasing issues.
@asadz You are not being profiled. You are being spoken to directly about your behavior without connection to any other profile. I think perhaps you're mis-using the term. Perhaps you mean targeted?
like he called me 12 years old? but i never said anything bad to him.? second i totally missed the encryption and age response i apologize to @AJHenderson about that
@asadz It seems to me that your typical response to hearing something you don't like is to claim racism or profiling. It is a rather unfortunate instinct.
You keep making responses that leave you open. I honestly have no problem with you asadz and I hope I didn't offend you, but even as someone new to this chat, the nature of your responses left it very open to response.
well @JeffFerland first when i try to be nice like apologizing to @AJHenderson i know now that perhaps i do it over much like I'm trying to find balance. But one the other side i also like people to not start with what others have said about me.
Check through the starred posts mentioning myself or @ScottPack - you'll find many of them are quite deprecating. We all participate and partake in a good bit of friendly jabbing around here.
@asadz I started in on the age thing because you kept bringing it up. I honestly missed the original comment, but look back through the log at how much you mentioned it
@Xander depends on the source, but it wouldn't be IT related, no... I'm a bit passed that, I should be the one giving grants side by now but that sadly didn't quite happen yet LOL
@asadz Nobody called you a 12 years old. I (not @Adnan) said that you write like a 12 years old. Whether what you write matches your own person and what you want to show to the World is entirely up to you. But if your goal is not to look like a 12 years old, then, well, let's say that your success so far is limited.
@asadz Since you're not following what I'm trying to say, I'm going to set a ban and hope that you'll take this time away for what I'm saying to set in. I've run out of patience for my time and for the effect that this is having here.
@asadz assume that jokes about each other are just that. Jokes. With no intent of harm and just let them go and you'll be much happier here. That's the culture of this room
Yes but you mentioned it again which is what Jeff is trying to say. Argue argue argue. We know. We can read the history. We don't care about the age joke.
@TildalWave So my thought would be if you're already chasing grants and running into obstacles getting them, the webinar might be useful. If not, this probably isn't the first step.
@jeffferland does it seem like I'm understanding the issue the same as you are? I know I'm fairly new so wanted to make sure my fairly outsider view isn't off.
@Xander My thoughts exactly, and no it wouldn't be the first step, I'm knees deep into it by now with some years of grease on my elbows, but I find its description slightly overly optimistic knowing it's neigh impossible to attract much corporate attention for such causes, if there isn't any direct benefit to them associated with it
@TildalWave Yeah, absolutely. The hardest part is finding donors interested in funding the specific areas you're looking to study. If you don't have those, then nothing's going to help.
Also, if users are a problem in chat, there are a) ignore options and b) chat flags. Sufficient chat flags will auto ban a user without moderator intervention.
Or rather, a sufficient number of validated flags will.
Feels like, while I may have been present, I somehow missed at least half of the bit of log that started this whole mess. I would say warrant for the ban (and demonstration of @ThomasPornin's point, for that matter) was sufficiently demonstrated in the attitude of his reaction alone, though. Shame about that.
@Xander We've managed to win some government grants before, and are largely sponsored by individuals, but I have yet to glimpse a hint of an approval from corporate sources. They are after exposure and we can't nor want to provide that. It kinda beats the purpose and we don't have human resources to kiss butts. I'd be still interested to hear it from other perspectives tho, so I might apply nonetheless. Just for the kicks of it :)
The problem is this: you walk into a bar full of talking people, introduce yourself, then take offence, debate and/or argue with multiple points, not allowing the conversation to move onto other topics. That's the point. It's a relaxed atmosphere - if you don't like it, there are always other bars.
Thing is that I think from his perspective he is responding to us but from our perspective we are making semiammused commentary about his replies which begets more replies...
Would be very interested in hearing the results of your experiment, though it's already changed. Simply by passing @Jeff's answer (which was the main purpose I had there), I've seen the pattern change.
I was reading this interesting question:
Is my developer's home-brew password security right or wrong, and why?
It shows a weak home-brew algorithm developed by "Dave", and the answers discuss why this is a bad idea. (Actually hashing algorithm rather than encryption, but my question applie...
to be fair, I think he's probably pretty good in the one or two areas he has expertise in. The problem always comes back to a lack of perspective, how those areas fit in with the rest of security.
> I've recently managed to isolate and archive a few files that managed to wreak havoc on one of my client's systems. So I was wondering what software and techniques make the best sandbox for isolating the code and digging into it to find out how it works. > Usually, up to this point in time I would just fire up a new VMWare or QEMU instance and dig away, but I am well aware that some well-written malware can break out of a VM relatively easily. So I am looking for techniques (Like using a VM with a different emulated CPU architecture for example.) and software (Maybe a sandbox suite of the…
(from the reverse engineering private beta)
is there anything on the topic on Sec.SE?
(also: pondering whether to close that question as NC)
I realize this question may be quite broad (and hopefully not a violation of the FAQs), but I'm interested in hearing how many of you handle a computer infected with Malware.
In a small-to-medium business (heck, even large businesses like the New York Times), acquiring malware seems like an inev...
Is it safe to install malware in virtual machines? I would like to investigate malware, but I don't want to infect my own computer.
Can I install the malware in a VMWare VM, maybe even without network access, without risking the integrity of my host system?
I was reading this CompTIA Security+ SYO-201 book, and the author Prowse claims that
Whichever VM you select, the VM cannot cross the software boundaries set in
place. For example, a virus might infect a computer when executed and spread to
other files in the OS. However, a virus executed in a ...
My solution was: Weigh 1-6 vs. 7-12, split the heavier set and weigh the halves against each other, take heavier half and weigh two of the balls. Either one of the two last balls weighed will be it, or they will balance and the odd one is it.
But again, that presumes we know the difference in the one we're trying to find is that it's heavier. Same process can be used if we know it is lighter (selecting the lighter sets to be weighed instead). But if we don't know which it is, it can't be guaranteed to work.
For example security.stackexchange.com/questions/23452/… is about known malware (where you already have some idea of what it does, and you can sort out the potentially really unsafe ones), that's different from unknown malware
@Iszi continuing on my hint: there are 24 possible configurations. Each test has 3 possible outcomes. 3 tests let you discriminate up to 27 configurations. If you let the first test have only 2 possible outcomes, you won't be able to distinguish more than 18 configurations
About 12 years ago, a friend and me worked out the general case: you are allowed w weighs, and you have n balls. What is the highest possible n and corresponding algorithm ?
Say we have $N$ [$3 \le N \le 100,000$] spheres indexed as $1,2,3,\cdots N$,all of them have identical weight apart from one.We have to determine which sphere it is (index) by using only the pair of scales.
We could solve this problem by weighing repeatedly,but I am obviously interested weighing...
@Gilles Oh yeah, the references give the solution. With three weighs, you can process 12 balls; and you can do 13 if you are given a 14th ball which is guaranteed "normal".
The problem I solved (and in the video) presumes a knowledge of whether the weight difference in the fake will be heavier or lighter. The MindCipher omits that knowledge.
@Iszi There are two kinds of lion/tiger cross-bred, depending on whether the male is the lion (leading to a liger) or the tiger (in which case you get a tiglon).
@ThomasPornin ...and yet you're totally dodging the question. Very interesting. So, what do you & @AviD call your offspring, then? How old is it? Care to share family photos?
Here is the case, we have successfully configured SSH keys (and hence password-less SFTP connection) between ProdServer-A to ProdServer-B. It works, or so I thought still yesterday. Yesterday ProdServer-B failed over to DisasterServer-B. When it did, the SSH connection failed.
In ProdServer-A we...
@JeffFerland I just caught up. Happy you banned... Also how awesome are the people here who have the patience to deal with that stuff. Its commendable Every professional needs to know that taking facts (criticism) is what makes them better
... (not reopening a discussion, just appreciating the DMZ crowd)
Now off to think about what this means: "run a proof using homomorphic encryption and solve for shrodingers cat" - Thanks @AJHenderson
I was reading this interesting question:
Is my developer's home-brew password security right or wrong, and why?
It shows a weak home-brew algorithm developed by "Dave", and the answers discuss why this is a bad idea. (Actually hashing algorithm rather than encryption, but my question applie...
Is it safe to install malware in virtual machines? I would like to investigate malware, but I don't want to infect my own computer.
Can I install the malware in a VMWare VM, maybe even without network access, without risking the integrity of my host system?
