The DMZ

« first day (128 days earlier) ← previous day next day → last day (5050 days later) »

nealmcb

04:02

Trivia question: which IT Security whiz has their memory turning into cheese mold?

(Or should I ask "how many of us..." :)

6 hours later…

Rory Alsop

09:34

@nealmcb Heh - I did like Thomas' comment :-) But yeah, I'm in that boat too!

@Iszi You want to see some decent Nerf? Some of the selection my kids have:

moblog.net/view/936680/nerf

@Scott - I must have a photo of the belt fed one somewhere...

2 hours later…

Scott Pack

11:41

@RoryAlsop I like it!

I think I need to get some nerf for home.

Rory Alsop

@ScottPack You can never have too much nerf!

Scott Pack

One of my buddies has an obscenely large arsenal. I think he would agree.

Rory Alsop

12:00

here we go:

picasaweb.google.com/lh/photo/…

not real nerf - but better build quality and range!

Scott Pack

So we're trying back to the old homestead this morning. I see that there's a weather advisory on my route. .5" hail and 60mph winds.

Should be exciting

I've not played with one of those, but I did have some fun with the drum fed gattling gun.

Problem is loading those things.

Rory Alsop

@ScottPack he has younger siblings - they load a new belt for him :-)

Scott Pack

Your youngest is what..4?

Rory Alsop

nearly 5 yep

Scott Pack

How old was she when she started getting interested in them?

I'm a little nervous about the idea of giving a dart gun to my 2 year old, but sometimes I wonder whether that's justified or just lack of experience.

Have a great day, guys

Rory Alsop

12:13

She's actually not bothered one way or the other, but all kids that age will play along with anything

and nerf is pretty safe unless they point it in their eyes or something

:-)

@Scott was much more concerned with this one over on parenting.se

Q: What is a good type of starter firearm for children?

What is a good type of firearm to start children ages 6-12 on for target practice and gun-safety education? Is it best to start with pellet, airsoft, or bebe guns, or go straight to a real firearm? Should you start with rifles or handguns? Update: I should have been more clear originally. I wasn...

Rory Alsop

12:25

@AviD - you're in the lead again :-)

1 hour later…

nhnb

13:33

Hey, we are not "worrying" in any category on area51.stackexchange.com/proposals/8431/it-security anymore.

4 hours later…

nealmcb

17:03

@ThomasPornin Can you respond to the rest of the comments at security.stackexchange.com/questions/2051/…

And see also the comment at security.stackexchange.com/questions/2131//2133#2133 To my knowledge, FIPS has not approved any method for password storage. FIPS 800-3 defines secure hashing, but basically just says "use SHA1 or SHA2". As far as the government is concerned, bcrypt and scrypt are just academic. – Justin Morgan

@ThomasPornin Folks really want something using only FIPS-approved primatives, and the PBKDF2 RFC does talk about passwords so it seems the most likely answer out there. Or what else might fit the bill?

2 hours later…

Rory Alsop

19:31

@nhnb yay!

Iszi

20:12

Urgh... This really doesn't look on-topic. More like "Google this article for me please?"

Q: Economy of Security: top 10 most devastating security breaches in modern history or why security is important

When someone says "why do we need to spend so much money and effort on security, we need to focus on market share first and once someone finds a problem we will fix it", I would like to have a list of top 10 most devastating security breaches which involved severe financial or reputation loss. I...

cryptography web-application smartcard

Graham Lee

hello

My I assume that the entire world has now read this?

forums.aws.amazon.com/thread.jspa?threadID=65649&tstart=0

Iszi

@GrahamLee OMFG... really?

Graham Lee

@Iszi yeah, definitely a drive-by LMGTFY. I've put a warning in the comments, if the question isn't edited soon then I suppose I'll close it.

@Iszi YA RLY

Iszi

Dunno about that hospital, but in my environment that would not at all pass muster for a high-criticality security plan.

(Or at least, I should hope it wouldn't. Never can tell what the System Owner is willing to approve these days.)

Graham Lee

@Iszi ROFL

I'm not sure I've ever worked in an environment where that would be sensible for high-availability life-critical systems.

I have worked on software that could bathe users in the most powerful X-ray beams in the world: that had quite a few (physical and software) checks IN THE SAME ROOM

Scott Pack

21:02

@RoryAlsop Wow, that sure reminds me of home! Also reminds me of home. Crouching by the window so that I can get that 1 bar from the neighbor.

On the plus side, at least now I know I can get internet access now