The DMZ

Jeff Ferland

2:02 PM

Hey, I want to run for US Senate because Feinstein and Boxer. Give me your monies. :P

Thomas Pornin

Stupid rep train.

TildalWave

@ThomasPornin Which question?

Thomas Pornin

The ATM one

Third day in a row that Bear #2 hits the rep cap on this answer alone.

Antony Vennard

@ThomasPornin I almost answered that q. Wish I did now!

TildalWave

@ThomasPornin Heh reminds me of that pic @Iszi posted on Sec.SE design announcement (or was it 404 page ideas?) on meta, that should do as an answer, i.e. because they usually don't come like this?

Adnan

2:08 PM

@ThomasPornin Oh the humanity! You must be feeling so bad! :D

@JeffFerland Asadz was giving us 10m or something like that yesterday, you missed it.

TildalWave

That "stealing an ATM with a bulldozer" news (somewhere in UK) was funny, too. But that Breaking Bad ATM Scene was a bit grotesque... still, would serve the purpose of mentioning it in a "what makes a safe safe" type of a question

Jeff Ferland

@Adnan Man, I wish I were more on my game when I saw that yesterday. That's the answer! I'd buy a senator.

Thomas Pornin

@TildalWave There was an even funnier a few years ago; I don't remember where it actually happened (Canada or USA, probably). Two thieves tied an outdoor ATM to the rear bumper of their truck with a heavy chain; then they accelerated -- resulting in tearing their bumper off. They flew, leaving the bumper on the premises with the truck license plate.

Rory Alsop

@ThomasPornin lovely

TildalWave

2:23 PM

@ThomasPornin Yeah well... can't buy reason. That's actually nearly identical to the one in Sussex, UK I was thinking of. Half of the building torn off and then their truck refused to start :)

Any word on how much ATMs would usually carry? I need ~ $100k ...

Thomas Pornin

@TildalWave I have once heard that it was around $30k on average.

Right now, in Cyprus, this is closer to $0k.

Adnan

@ThomasPornin About 10 years ago in California

TildalWave

@ThomasPornin LOL

Adnan

I remember reading about it a couple of years ago

AviD

@ThomasPornin That's actually one of the mitigations, holding a relatively small amount of cash (relative to what would be available if the crooks actually broke into the bank, or the vault). Some banks also reduce the amount before closing for the night, or before weekends and holidays (though then they need processes in place to have someone come check it doesnt run out, if its more than a day or two... )

@RoryAlsop re your latest comment on LinkedIn: Is this what you had in mind? ;-)

Jeff Ferland

2:39 PM

@TildalWave or forking the ATM

Thomas Pornin

0

Q: LUG war games — suggested strategies?

My LUG on campus once in awhile holds a mock wargames on a VM. I'm trying to figure a way to get root access and make everyone else not be able to have root (king of he hill). I have a few ideas, but people on these sites always seem to have ideas far better than mine.

Rory Alsop

@AviD ah hahahahahaha

TildalWave

@JeffFerland success! where can i rent a forklift? :)))

Adnan

@ThomasPornin I really want to hear his ideas

Jeff Ferland

@TildalWave Rent? Are you going to ask for your deposit back afterwards too?

AviD

2:44 PM

@ThomasPornin excellent use of mild snark. Closing.

TildalWave

@JeffFerland that was the butt of the joke yup ;)

Iszi

Wow. Ingress has 100 questions on Arqade. Shame it's not available on WP8.

I wonder if there's a site dedicated to AR games/apps for phones?

TildalWave

@Adnan wouldn't that be a perfect case for use of that hardware keylogger you were posting links to not too long ago?

AviD

@Iszi Are you watching Arrow? I find it amusing how prominent the product placements are, especially W8 and WP8 (specifically, Lumia for all the rich people).

Adnan

@TildalWave I posted links to hardware keylogger? ha! I don't remember anything like that

TildalWave

2:54 PM

@Adnan dunno could be it was someone else or you were in a conversation about it

Adnan

@TildalWave Or it could've been me, and afterwards I might have said something to embarrass myself so to save itself from the trauma, my brain erased many events of that day.

TildalWave

@Adnan that's what she said!

Adnan

@TildalWave That's what they all say to me :(

TildalWave

@Adnan that would imply they actually remember it, you cheeky geezer!

AviD

@TildalWave shouldnt that be "geeky cheezer"?

TildalWave

2:59 PM

@AviD ROFLMAOTSETUNG

Adnan

@TildalWave Apparently, it was that bad.

AviD

TSETUNG?

TildalWave

Mao Zedong

}} |honorific-prefix = Chairman |image = Mao.jpg |caption = Official 1960–1966 portrait of Mao Zedong |nationality = Chinese |order = 1st Chairman of the Central Committee of the Communist Party of China |1blankname = |1namedata = Liu ShaoqiLin BiaoZhou EnlaiHua Guofeng |term = June 19, 1945 – September 9, 1976 |predecessor= Himself (as Central Politburo Chairman) |successor = Hua Guofeng |order1 = 1st Chairman of the Central Politburo of the Communist Party of China |term1 = March 20, 1943 – April 24, 1969 |predecessor1= Zhang Wentian(as Central Committee General Secretary...

AviD

so, just like, a meaningless associative suffix?

TildalWave

@AviD that's what she said!

AviD

3:01 PM

that makes no sense.

TildalWave

@AviD that's what she said!

AviD

heh, there ya go!

Adnan

@AviD That's what she never said

2

AviD

"your face" and "yo momma" are also acceptable substitutes.

Adnan

What the hell?! Star attack!!

4

TildalWave

3:07 PM

Where's @LucasKauffman gone? I'll be drinking La Chouffe tonight :)

Didn't get the small bottles but the place I ordered at managed to get me 0.75l ones instead

Iszi

@AviD I'm behind on it. I know what you're talking about. Like Cisco & Sprint on 24.

Is "that's what she said" our new automatic star trigger, now?

Adnan

@TildalWave As for me, I'll be drinking Le Coq

3

They shouldn't name beers like that

Iszi

@TildalWave Reminds me of another app I'm waiting for on WP8: Untappd. Good thing I'm not transitioning from another smartphone platform (or another smartphone, for that matter) or I'm sure I'd really feel like I'm missing out on this stuff.

TildalWave

@Adnan I thought that's a name for all French people? Dunno but @ThomasPornin can shed some light on that. :)

Rory Alsop

@AviD although the Lumia is good hardware, I specifically detest the interface. Currently I'm on Galaxy S3 as it makes me most comfortable

Thomas Pornin

3:15 PM

@TildalWave There's an old confusion between "gallus" for "Gaul" (i.e. geographical France, Belgians notwithstanding) and "gallus" as the biological genus for chickens (or roosters). It dates back to Middle Age.

TildalWave

@ThomasPornin Yup I was just teasing... actually, if you translate my family name into French, I'd also be "gallus" but the meaning of it is somewhat lost... it could as well be I have French ancestry as there isn't any real explanation for the other interpretation except that I've been called "le Coq" many times before (in English). :))

Thomas Pornin

An amusing illustration is when Gallium was discovered by French chemist Emile Lecoq, he called it after himself, but other people thought it was a nationalist jab; so when German chemist Clemens Winkler found another element 12 years later, he called it Germanium.

Adnan

@TildalWave It's actually an Estonian beer, I don't know where the name came from

TildalWave

@Adnan which one? le coq? i can think of a few versions why Estonians would name a beer like that

Adnan

@TildalWave Yes, the full name is A. Le Coq

TildalWave

3:24 PM

@ThomasPornin One of my grand grand grand .... ancestors was Jacobus Gallus and I always used that Gallium example when I was teased for the meaning of it, along with the guys name as a proof. Never really worked cuz the only thing bullies are after is you being offended and if you feel the need to explain yourself, they've kinda already won.

The learning of English in primary school didn't help either with my name being translated to it as it can be. I've been correcting them that's it's actually meant as a rooster, not a cock, but most preferred remaining ignorant :))

Good that I'm a tall guy so if there wasn't any other way to persuade them, I'd unleash the rooster in me on them :)

Iszi

@TildalWave So, if the bullies didn't back down you'd show them your cock?

TildalWave

@Iszi hehe good one, i like where this is going lol

Terry Chia

This looks like an appropriate article for this room: cracked.com/quick-fixes/…

Iszi

@TerryChia Loving the snark, there.

> However, throughout the years the Catholic church has made some bizarre exceptions to this rule to allow its followers to skip the whole "personal sacrifice" thing (which is the entire point of Lent) and eat the meat of certain animals guilt-free, leaving them plenty of room to feel guilty about everything else (which is the entire point of Catholicism).

Rory Alsop

heh - alligators: Locals are therefore free to delight in the deep-frying of a formerly endangered species because a man with no scientific background reclassified alligators in an email he sent one afternoon.

Iszi

3:40 PM

Anyone else not surprised that #1 on The 4 Worst Things People Are Making With 3D Printers is dicks?

Terry Chia

@Iszi Nope not at all.

TildalWave

4:04 PM

@Iszi hate to be anal, but that last one out of four is technically not a dildo

Iszi

@TildalWave Funny you should use the word "anal" in that particular sentence, considering what that "last one out of four" actually is.

TildalWave

@Iszi And you thought I talk random bollocks!?! :P

Iszi

@TildalWave I don't think this necessarily disproves that.

TildalWave

@Iszi you do realize what the word analyzing begins with?

Adnan

@TerryChia Yummy! I once ate an alligator

Iszi

4:26 PM

@TildalWave Same four letters as analogy?

TildalWave

@Iszi I thought it might not be obvious to analphabets! :P

Xander

Since we were talking about VMWare Workstation the other day...If anybody's looking to buy or update, I just got an email that it's 15% off today, until 11:59 PM Pacific time tonight.

David

5:03 PM

Morning!

Adnan

@David Morning!

David

@Adnan morning

and also UGH, its apparently staff photo day

kill me now

Adnan

@David Best day :D

Rory Alsop

@David (wear a mask!)

David

lol

Adnan

5:20 PM

@David But you know, it's a day where you can freeze your creativity.

CodesInChaos

NIST is killing TLS. Everybody PANIC!!!!!!!!!!!!

Iszi

@CodesInChaos DAFUQ?

Adnan

This is a little long (7 lines) so I posted it to pastebin to keep things uncluttered here. I was extremely impressed and I had to share it with you guys (IT security-related) pastebin.com/Ay8iQgnw

I don't know how practically possible it is, but it sounds pretty plausible to me.

I was impressed mainly because it was in a TV series

TildalWave

You guys know this page drivemeinsane.com ?

CodesInChaos

5:42 PM

0

Q: Is NIST pulling the rug from under TLS?

Any idea why NIST Special Publication 800-52 Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations was retired without superceeding it with an appropiate document? What was so egregious in this document that required its demise? Is NIST getting ready to pull the r...

ssl protocols nist

Scott Pack

Finally got my Ingress code

David

@ScottPack I've had one forever, but waiting on iOS app

Scott Pack

@David Jerkface

David

@ScottPack Google is the jerkface for not having an iOS app still/yet

Scott Pack

I'm more cranky about Reader.

David

5:50 PM

I don't use Reader at all

never have

Scott Pack

Not my problem you have poor taste.

David

@ScottPack what do you actually use it for?

Scott Pack

It's an RSS reader.

David

I use iGoogle (also going away) as my homepage: i.imgur.com/jfuFiWj.jpg

TildalWave

@ScottPack I thought it's a RSS aggregator?

Scott Pack

5:54 PM

@TildalWave If I can read the feeds within the application does it matteR?

TildalWave

@ScottPack probably does to tons of websites that would much rather see you on their pages than to have Google adverts in place of theirs on their content.

Scott Pack

@TildalWave Some sites put the ads within their feed, so they still show up. Others just provide a link and maybe an article summary.

David

Can read the iGoogle stuff too, but I just skim the titles, then click through to the site if I want to read

TildalWave

@ScottPack Well, I would like to be asked first if it was my contents. Otherwise I could make up any bloody thing I wanted to and make Google be responsible for it too. But of course, they wouldn't want to hear of that... It's just one giant proxy, that's what they are, and I don't always agree it's to our benefit. I like choice, call me crazy LOL

Scott Pack

@TildalWave That's true. It's also your choice to use it, which means if you don't like it then you're not out anything.

Putting in a requirement that the content providers approve use in Google Reader is pretty silly, though. The content providers are the ones publishing the RSS feed. They have the ability to define how their content is viewed.

If they want to require that users visit their sites directly, no problem. Publish the story as a title and link.

TildalWave

6:02 PM

@ScottPack Yup, but in an admin role, I was never asked by Google if it's OK with me that they effectively enable content theft via their service. I don't really have any contents I would personally mind they find their way elsewhere, but if I did, I would like to be asked first. It is actually also against my TOS (which is short, and pretty generic) but Google still runs its Reader on my site.

Scott Pack

I'm not sure I understand how they run their service on your site

Rory Alsop

I also use Reader, as none of the other RSS aggregators come close.

TildalWave

@ScottPack Because they don't just use RSS feeds. If you use data type meta tags on your HTML so Google knows what it is, they'll collect that too. I've seen it in my logs many times. Not sure who would benefit from that considering I barely have any contents, but they most certainly are there sniffing around

Rory Alsop

I use iGoogle, but for my RSS feeds I use a Reader widget

David

whats the diff between the two

Scott Pack

6:05 PM

@TildalWave They do respect robots files.

David

they both allow you to RSS and read the RSS

Scott Pack

@David Presentation mostly.

@David iGoogle won't really scale up that well to the 123 feeds that I have.

David

e

h

TildalWave

@ScottPack That's only partially true actually. I didn't have Reader specifically in it, and it was still crawling even though I had all not explicitly allowed as not allowed.

David

it has a sidebar

if you want it to

Scott Pack

6:08 PM

@TildalWave Sounds like any other web crawler to me, in which case it's no different than Bing or Ask.

@TildalWave They're not going to be scraping, stealing, and redistributing your information. What it's probably doing is indexing it as a subscribable feed for end users to subscribe to (or not).

TildalWave

@ScottPack OK but that then makes robots.txt pretty much obsolete, and at the same time you have a parser for it in Webmaster Tools that clearly shows they're supposed to care about what's there. Nothing about Reader though, just Mobile, Mediapartners, Ads, and Image bots

Scott Pack

I understand all the words you used, I just don't have enough background in those regions to comprehend what they mean.

TildalWave

That they seem to respect robots.txt for some of their crawlers, and not for the others

Scott Pack

I blame the developers

2

TildalWave

@CodesInChaos The question is crap, but IMO you could write an answer from what you put in the comments as it's most reasonable to expect it is indeed just a retraction to be replaced by an updated paper. Anyway, they're required to move from TLS1.0 to TLS1.1 or TLS1.2 and that was announced in August 2012.

@CodesInChaos Yeah, PANIC!!!!!!! LOL (OMG the TLS requirement paper was retracted, bring on the end of the world banners) :)))

Adam McKissock

6:27 PM

siiigh

TildalWave

David

OUCH

but then only HOT

Adam McKissock

does anyone know about a working exploit for server 2003 rdp?

Scott Pack

@AdamMcKissock MS12-020?

Adam McKissock

@ScottPack As from what I can see 12_020 just DOS's the machine, I need something with a remote payload

TildalWave

6:37 PM

that's March 2012 and is patched support.microsoft.com/kb/2671387

Scott Pack

@TildalWave He didn't say it needed to currently be unpatched.

Assuming patches are applied to the target.

Which is a pretty unsafe assumption.

TildalWave

true true

and true

Scott Pack

If patched vulnerabilities were patched we would all have an easier (or harder) job.

Adam McKissock

Its vulnerable to 12_020

TildalWave

i'm in the former bucket but to each their own ;)

Adam McKissock

6:38 PM

so definatelly not patched

Scott Pack

@TildalWave As a defender and vulnerability management kind of guy then yes, it would make my job easier. People like Rory[1] might be less than excited, though.

Rory McCune

@AdamMcKissock 12_020 is DoS only, if you see something promising RCE watch out as there are some bad pieces of code out their that claim they're RCE exploits but actually trash your system

Off the top of my head I'm not aware of any Remote code execution exploits for RDP

Adam McKissock

@RoryMcCune Yeah, running in a VM but still. The only other things I can find that are open on the machine are 110 (MSPOP3) and 80(IIS 6.0 - just a default page)

Rory McCune

@AdamMcKissock well you could DirBuster/Nikto the port 80 in the hope that there's something there but hidden

only other options that spring to mind would be brute forcing the RDP

David

Anyone like sushi (rolls) in here?

Jeff Ferland

6:51 PM

@David Deja vu

Adam McKissock

@David /me loves sushi

David

Any idea what "inari" is, inside of a roll?

Adam McKissock

@David fried tofu

David

it says "(Spicy Tuna, cream cheese) then deep fried, avo, inari, sp. mayo, teri sauce, masago, green onion"

Adam McKissock

7:13 PM

hmmm

it seems to be running frontpage

Thomas Pornin

@TerryChia I am outraged. Alligators are not dinosaurs. They are archosaurs, which is a superset of dinsoaurs. (On the other hand, the puffin is a dinosaur.)

TildalWave

7:46 PM

@David You have rice cooker?

David

@TildalWave yes

but not making my own sushi

TildalWave

nice :) good that I just ate hehe

Iszi

@ThomasPornin Odd. Never thought we literally had any "living dinosaurs" anymore. Except @RoryAlsop of course.

5

David

@TildalWave im still hungry =(

sushi is too expensive to be filling

TildalWave

inari is pretty simple and you can make all kinds of combinations for their filling

fast made also

Thomas Pornin

8:18 PM

@Iszi It's part of cladistics. We now group species in clades, where a clade is "one animal and all its descendants". As opposed to older (18th century) terminology which was descriptive only (based on how the animal looks like, not on its ancestry).

Since birds come from a dinosaur ancestor (a theropod from early Jurassic), they are all dinosaurs

but crocodilians (alligators & co) are not dinosaurs.

TildalWave

8:38 PM

crocosaurus :)

one of the worst rated movies on IMDB, go figure

It's so bad it doesn't even fall into the "so bad it's good" category.

►

jeebus almighty of the planet piss

Iszi

9:57 PM

@AviD @RoryAlsop @JeffFerland Would one of y'allz mind bumping this to SU?

-1

Q: Data recovery on FDE with information

A colleague of mine has a HDD which has been "corrupted" or more specifically "the truecrypt configuration" has been corrupted. The key pass for truecrypt is still known. What would be the best process for data recovery from such a device? Please migrate if you think this question is out of s...

encryption

Gilles

10:11 PM

@TildalWave tvtropes.org/pmwiki/pmwiki.php/DarthWiki/SoBadItsHorrible

Xander

11:12 PM

Disabling the lock screen on Samsung phones. Makes me glad (temporarily) that I have an HTC. :-)

youtube.com/watch?feature=player_embedded&v=YEsdHs0-W-Y

Transcript for