« first day (858 days earlier)      last day (4320 days later) » 

02:07
I need help deciphering one pinging with an OP, if it's white or black hat script kiddie
@sorroshsaket - I'm getting this distinct feeling this is not white hat any more. Either that, or there's something lost in translation? Besides, if double quotes are escaped in some input parameter sanitization, there's actually a whole lot easier way to get around it by using parts of my examples. But as I said, I'm not sure this is within the ethical hacking limits. Are you trying to harden your own authentication process, or hacking your way into a website that isn't yours? Sec.SE does not support black hats! Please confirm. — TildalWave 4 mins ago
@TildalWave sounds like a skiddie to me
@MMavipc yup I was afraid of that... anyway, if he had half a brain he'd have an answer there in the /* ... */ LOL
What's with this metasploit activation bullshit, what happened to it just being download, install, and open console
@MMavipc Huh? It's compulsory now? It was there before, but you could skip it.
Oh completely new look too... I liked the previous one better TBH
02:26
@MMavipc Hmm? I usually just pull the git repo.
It's just a collection of ruby gems after all.
02:46
uhhh is metasploit broken on windows?
C:/metasploit/ruby/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:36:in `require': 193: %1 is not a valid Win32 app
lication.   - C:/metasploit/ruby/lib/ruby/1.9.1/i386-mingw32/digest/sha1.so (LoadError)
02:57
welp, the new metasploit is a completely unusable piece of shit, what was the last working version?
03:47
@MMavipc I don't have any issues with it, I usually download the 'pro version' and get a demo licence with it
The console always seems to work anyway
The cosnsole is the part specifically not working
@MMavipc Have you tried just pulling the files from the git repo?
I never bothered with the installer since it's the msfconsole I want.
@TerryChia I'll try that
04:38
That's it, I give up. metasploit on windows is impossible
 
1 hour later…
05:52
@MMavipc ololol
@D3C4FF That's 4.5, try 4.6
@D3C4FF I eventually went back to the last sane release, 3.7.2
06:08
Did you try 4.5?
06:34
All 3 of my machines are running 4.5
06:58
from your screenshot 4.5 still includes the shit console
it feels like I'm typing into a laggy ssh session
 
2 hours later…
08:30
I wrote up a blog entry on reversing hypercomputer-1 from the plaidctf reddit.com/r/ReverseEngineering/comments/1cuq8r/…
08:55
@MMavipc Nice :)
09:34
@RoryAlsop Do you want to un-private the CTF room as per SE's requirements?
09:46
Is that one complete now?
@RoryAlsop yes
@RoryAlsop Oh, do you have spare Ingress invite codes? My friend wants to play as well.
@terry - I don't right now. As a level 6 I do get some, but I'm not sure how often I get more. Will check and see. Get your friend to request one from ingress.com anyway and I'll see if I get a new invite before he gets his.
@RoryAlsop Ahh. Yeah it's pending. Just not sure how long it will take. It took about a month for me.
10:02
CTF room opened to the public
pre-afternoon all :]
@RoryAlsop looking forward to bsides?
Definitely! Not sure ill be forgiven - the real reason I am going to London is to take my wife away for a few days for her birthday... But she is happy to shop for a while :-)
Good day champs!
@RoryAlsop I'm sure a credit card and access to Oxford street makes up for a lot :)
10:24
Good day
@rorym - yes. Was hoping she'd go for the cheaper option of coming to bsides but apparently she already knows a sufficient number of security rories and doesn't need to meet more
:-)
@RoryAlsop haha, skills.
But I have suggested popping along to Infosec later for free drinks and swag can be fun
What parties are on the go? I am tempted by the MWR party...
Possibly meeting my occasional stunt bassist - he's returning from a symphony gig in Paris so will be up for a fair amount of partying.
10:59
heh, MWR party could be very fun :P
i have an script that say this is secure and i want to show them this is not secure any more i have access to source code becouse this is free and for example this site using this script paytakht-web.tk/back/login.php . — sorroshsaket 4 hours ago
Can anyone even open that website?
I only see how it's supposed to look like from here: bgp.he.net/dns/paytakht-web.tk#_website
@RoryAlsop - Linking to websites like that probably isn't acceptable? I mean, if what OP says is true, then it's easily exploitable. I refrained from posting exactly how tho, just to be on the safe side ;)
11:15
@RoryAlsop Wel one thing to look out for is that IOActive appear to be copying Portcullis facebook.com/events/515935548463728 and of course you could probably get into the Arms now your with a customer company :)
11:54
I consider this to be a beartrap security.stackexchange.com/questions/34677/…
Beertrap?
@ScottPack go home Scott, you're drunk.
2
@tildal - hmmm, yes. Bit dodgy.
@rorym - excellent
12:10
@lynks I just poured my first cup of coffee. :(
I am sad panda that I missed Plaid, but family duties called :(
That should make you feel better.
@ScottPack it helps thanks. plus i find it a nice metaphor for Enlightened and Resistance working together in harmony.
I did have our local L8 resistance member drop somewhere around 40 L1 and L4 bursters.
12:29
@ScottPack my area is so completely dominated by enlightened that I'm struggling to gain AP - i never have enough bursters to make a dent :(
It seems like there's maybe only another enlightened in the area. I think I'm highest level at 3. Then this guy who's 8 and another resistance at 1 or 2.
@ScottPack Did you make it Irish...?
@RoryAlsop Thanks for checking! :)
12:45
Episode 4 of GoT is rather interesting..
@TerryChia no spoilers!
@AviD I won't. But that ass @ScottPack will probably do it to spite you.
;)
13:02
166.249.76.132 - - [22/Apr/2013:09:05:04 +0200] "GET /tbxwrfkedgjrihjo.html HTTP/1.1" ref:"-" -> url:"/tbxwrfkedgjrihjo.html" agent:"Mozilla/5.0 (compatible; Googlebot/2.1; +google.com/bot.html)"; 404 219`
LOL Google lost it :)
@TerryChia I haven't seen it yet. That should happen tonight.
@TerryChia So far I've been surprised with the lack of sex.
3
@ScottPack What, that fourway with Tyrion's squire and the prostitutes wasn't enough?
@TerryChia @TildalWave and all the other CTF guys, congrats!
But this episode had zero sex.
76th out of nearly 900 is pretty good.
13:05
@TerryChia Considering that was the first instance over 3 episodes?
@ScottPack True. Perhaps they are toning it down a little.
The second season had quite a bit.
@Adnan well it could've been better but we were short on hands, so all in all a decent score
I think @Gilles grabbed most of the flags. Just like last time. :)
@TerryChia And even then, you saw a couple of naked ladies but not much else. Remember Littlefinger's monologue from season 1?
@TerryChia yup most thanks goes to him :)
13:08
heh.
is there any policy on adverts in user profiles? security.stackexchange.com/users/20436/sophie
Hahahahaha!
@TerryChia although you were also really helpful considering you didn't have much time for it either... we really need to get more hands on the next ones, this CTF was HUUUGEEE
@TildalWave That's what @Adnan said.
@TildalWave Way out of my league this one is :( Mostly RE challenges. The 2 guys from RE.SE did the most work I guess.
13:10
@ScottPack oh give him a a chance :P
@ScottPack Well played Mr. Pack, well played.
@TerryChia that's experience, but I agree with you that it was mostly RE... I wanted to that cat in a box challenge but only had a few hours time on Friday for it,... damn delay didn't help
heh, small world. Pretty sure I know that Anaximander guy that just posted the "changing crypto" question.
@Polynomial You didn't join. :(
@TerryChia join what?
CTF? been kinda busy recently :P
13:15
@Polynomial plaidctf. :P
@Polynomial hmmm that q sounds like a dupe to me :O didn't we already cover that?
between work, moving house, seeing fiancee, etc. it's been a bit difficult to get spare time!
If only we could tempt The Bear to join us with offerings of reputation.
@TildalWave he's asking specifically about encryption rather than hashing. I think previously we've only had questions about hashes.
@Polynomial you know you might be right :)
13:17
@TildalWave I often am :)
(I'm often not, too, but I beat the spread)
1
Q: How to use NMap to portscan a SonicWall that is blocking all attemtps?

kinuntIt seems that SonicWall is blocking attemtps to scan its ports. I know it has some ports open, like 443, because if I access using the browser I get a web site. But when I try to use NMap I can't see the port open. If I try to to a SYN scan against this port I get no-response: # nmap -sS -vvv -...

About this one - anyone has any thoughts on why?
@Polynomial you're often polynomial too :P
I have a feeling it's a pretty obvious one, although I can't think of any reason right now.
Would be interested to see the scans with the --packet-trace flag.
@TerryChia Hah! This is actually very interesting
@Polynomial btw did you ask your bro about that song?
13:22
@Adnan Any thoughts on the possible reasons?
@TildalWave Yes. He said "no fucking clue". Then again, he was wasted at the time.
@Polynomial oh :( well thanks for asking anyway ;) the search continues...
@TerryChia No idea! If it answers to a browser that wants to talk on 443, I don't see any reason not to talk to NMap
@Adnan Yeah, that's really interesting. That's why I requested to see a scan with the --packet-trace flags.
13:40
@TerryChia TBH I'd have to bet PEBKAC on that one. I guess it might be theoretically possible to tell the difference between a SYN from nmap and a SYN from the OS but massively unlikely. Also IIRC if you do -sT or run nmap as an unprivileged user it just uses the OS IP stack just like the browser would, so at that point there should be no difference in the packets
As you say --packet-trace + wireshark captures would be the only way to be sure
@RoryMcCune PEBKAC? Sorry not familiar with that acronym.
Problem Exists Between Keyboard And Chair :)
@RoryMcCune Ahhh gotcha. ;)
@TerryChia What he means to say is that you're an idiot. Except that he's British so he's being polite about it.
aka problem ID 10T
13:49
@ScottPack I thought he was a Scot? Going by Groundskeeper Willie, they are quite rude.
@TerryChia Right, which is exactly what makes him British.
@ScottPack Oy it wasn't @TerryChia I was calling an idiot :op
damn yanks ;o)
@RoryMcCune yeah, but he was calling you English. Snap.
@ScottPack It's actually a lot more complicated ;) No mention of crown dependencies
}} }} The Crown dependencies are self-governing possessions of the British Crown. They are distinct from the overseas territories of the United Kingdom. , three jurisdictions held this status: the Bailiwicks of Jersey and Guernsey in the English Channel and the Isle of Man in the Irish Sea. Being independently administered jurisdictions, none forms part of the United Kingdom, the Commonwealth of Nations, nor of the European Union. "The Crown" is defined differently in each Crown dependency. In Jersey, statements in the 21st century of the constitutional position by the Law Officers o...
13:57
@TildalWave sure it mentioned it, and then some. Did you watch it?
@AviD Oh, just now... sry (3:40 something)
brilliant, isnt it.
Damn! I really wish I could move to the Falkland Islands!
@TildalWave C.G.P. Grey is generally very thorough. He rarely leaves any detail out, and usually mentions it when he does (and sometimes even links to a "deleted scene" to cover it). I've got no clue how he manages to amass such knowledge as he covers, but it's nothing short of amazing.
@AviD Absolutely! The government system should be the next on the list lol
14:00
Only 3k people live there. Amazing climate, quite and peace.. (sigh)
@Iszi CGP is secretly @Thomas.
@TildalWave Have you not browsed his channel at all? He's done extensive coverage of elections, particularly the U.S. variety, and also a bit on the city of London.
@Iszi I meant next on my list... not that there's anything wrong with his list ;)
C.G.P. Grey covers "The (Secret) City of London" in two parts actually.
all that's in place to avoid accountability anyway
hehe while the mayor of London has to ... ride a bike :))) Boris Johnson whoohaaa
14:06
@AviD that would've been a sick burn but I'm not sure I see it
@Adnan you should ask @RoryAlsop about it, he lived there for a while IIRC
@RoryMcCune JESUS FUCKING CHRIST! :O Thank you thank you!
@Iszi the city of london one is fascinating, especially when you go there and you can see the signs of it around the place, when you look for them.
@Adnan They moved out sometime in the 80s. I'll leave determining exactly when as an exercise to the reader.
@ScottPack Yeah, sad times.
@Adnan also if you like the low population island style life, the Shetland Isles are closer and quite similar. Very quiet place, nice and calm (well apart from the horizontal rain :)
14:18
Wait what? EU citizens can run for the mayor of London if they were citizens for a year or more? So the next mayor of London could be... Polish? :O
BEAR POST GOT A DOWNVOTE!!!
-1
A: "Please Enter Nth Character" without HSM

Tom LeekSuppose that the question sent to the client can be about three characters: the server asks for (for instance) the 4th, 7th and 8th characters of the password. Freeze time! At that exact point, the server has asked the question above, and will be able to verify an answer from the client. This me...

@TerryChia what's a bear post?
9
A: The Memes of IT Security

Rory AlsopMeme: Bears Originator: @ThomasPornin, @ScottPack, @AviD Cultural Height: July 2011 Background: Our highest rep user, cryptographer Thomas Pornin created a couple of distinct accounts with bear avatars. With his rapid rep gain, the bear icon appeared regularly, so a winged bear with lasers...

@RoryMcCune Well.. the flag is an inverted Finnish flag. Interesting..
@Adnan shetland is interesting, it's british but the culture is probably more scandanavian than UK in terms of housing and things like Up Helly AA uphellyaa.org
we really like it, go up most years..
14:31
@TerryChia It happens occasionally.
Don't forget the ponies.
Maybe some of the downvotes are simple clicking mistakes; user wants to upvote, but clicks on the wrong button. It must happen sometimes.
Or the cat jumped on the keyboard / mouse / touchpad. That also happens.
My cat has already sent emails that way.
@ThomasPornin my better half recently had to disconnect the touch screen monitor she has due to multiple instances of cat tail induced changes on her computer...
@RoryMcCune Damn it! It sounds so great!
@Adnan if you like peace and quiet it's great. We've been on really nice walks for 4 hours and seen about 1 other person the whole time and that just tends to be the local farmer.. it's a little busier in summer but even then not really
14:34
@Adnan - yeah, the Falklands are lovely. There is even a Rory's Island, which is just about big enough for 20 sheep. Unlike Orkney, the Falkland Islands are definitely sheep country.
@RoryAlsop Rory's Island is big enough for 20 sheep? I just KNOW there is something there...
@Adnan also their approach to security is a bit different than mainland UK, when we rent cottages they just leave them unlocked most of the time and when I left a hire car at the airport they just said to leave the keys in the sun visor.
There is no wildlife - if you exclude some of the larger sea mammals with teeth, and all land and air based life has had so little experience with humans there is no built in fear reflex so you can walk up to most creatures.
Penguins will peck you viciously of course, but hat is just because they are bad tempered, flea ridden little things
@RoryMcCune drooling
@Terry - I just set em up. If you can't deliver from that, well, I'm disappointed in you.
14:37
@RoryAlsop Pinging for @AviD.
Hahahahaha
That's just lazy/cheating
@RoryAlsop @RoryMcCune In some moments I seriously think about moving there. Not just as a holiday or a short trip.
My main concern is means of life with my profession.
@TerryChia hehe, no, this one is all yours.
@ScottPack Have you seen their freaking powniis?!! :D
@Adnan There's this magical concept called "telecommute"
14:41
Rory gets an island, it can hold 20 sheep. The the other Rory wants an island that can hold 20 sheep too. Soon after, UK is formed.
@RoryAlsop I'm not nearly as experienced as he is. (That's what she said)
@ScottPack Ahaaa.. so that's what that is..
@Adnan we're thinking about it. Pen testing can largely be done remotely, only thing is to make sure we have a good Internet connection. Also have a plan to move the testing servers into the cloud meaning we would just need enough bandwidth for SSH/RDP
@thomasp - I can't believe I missed this quote. I love it- "Nothing would please them more than to, metaphorically, enter your house, empty your fridge, drink all your wine, molest your dog, and leave with your TV and your daughter." - from security.stackexchange.com/a/24933/485
@RoryMcCune Let me know how that move goes. Sounds like a interesting move to make.
14:48
@TerryChia well we're still planning at the moment. idea is to buy a house up there, rent it out then move up after a bit, so we're a ways off. Another good thing is that property is relatively cheap up on the isles...
@RoryMcCune I actually meant the testing servers into the cloud part. ;)
@TerryChia ahh heh. the cloud server idea I think has legs. with AWS/Azure you can spin things up just for the duration of the test which cuts costs
also they have the relevant physical/data centre security piece sorted
from a ToS point of view what we've seen so far looks ok
@RoryMcCune Ahh interesting. I'm surprised AWS is ok with it. Didn't they make a big fuss about their servers being used for cracking passwords a while back?
@TerryChia It's been more Azure that we've looked at so far, but I would think AWS wouldn't mind as long as they're informed (that's the position for testing servers in their cloud anyway)
@RoryMcCune Sounds really great. I think I'll discuss this with all of the involved parties.
Thank you guys for the nice conversation about it.
@RoryAlsop I don't know why, but for some reason I also saw this today.
14:55
@terrychia If you think about it as long as it's legitimate testing (i.e. authorised) it's just making connections to systems. So as long as they don't flag the traffic patterns as dodgy then should be ok
@RoryAlsop Was it some link posted here?
It got bumped back up as some spammer post some nonsense on it that I had to delete
So anyway, yes, an area the size of Wales, weather that is much better than Britain (ie less rain, more sun, higher temperatures - despite very cold sea) lovely mountains, empty spaces, stone runs (a unique form of river-like flow of huge boulders), beaches etc. with wrecks offshore, millions of penguins, a very peaceful lifestyle (if you exclude the neighbours who have been a bit warlike occasionally, so some minefields remain)
Internet bandwidth is not great... And it is expensive, as the main link is via satellite (although it is heavily subsidised)
@RoryAlsop Geostationary satellite ? This would imply some rather high latency.
Geostationary - yep. There is a huge dish next to government house.
15:12
Soon there will be an ISO standard for how to ask and answer questions about the ISO standards. Better get ready! ;-) — Warren P 4 hours ago
Look at the angle - quite low, isn't it
@RoryAlsop and looking here submarinecablemap.com it'll be a long time before they get a cable :( nothing south of uruguay
And it would be a target for the Argentinians anyway...
@RoryAlsop true true
shetland are hopefully going to be part of this thing that BT are doing for rural areas along with the rest of the highlands and islands
apparently going to be doing FTTC out that way
So are you telling me that even if you move to the most remote part of the UK you will still have much faster broadband than me?
5
15:16
@RoryAlsop That's just sad.
One nice advantage of living in Singapore. You get shitty latency but the bandwidth is pretty nice.
@RoryAlsop well .... yeah. they've already got a link up to the SHEFA-2 cable, it's just the local infrastructure that needs doing...
@RoryAlsop it's even a redundant connection the south leg got cut south of Orkney recently so the traffic just failed over to going via Faroe, latency would've hurt a bit more but still nice to see
@RoryAlsop
oops, @RoryAlsop how does the falklands get it's power?
@Tinned_Tuna Look at the size of the islands and their remoteness, I'm guessing they have power plants.
For more snarky fun: the same way almost everybody in the world does: power plants.
@JeffFerland It's no fun when you put the snarky parts last.
ehn, fair enough.
15:23
@Tinned - Port Stanley and Mount Pleasant have their own power plants. Each settlement has small generators, and single homes have their own generator
@ScottPack You still around?
bloody hell. must be expensive to live there..
@Travis como?
@RoryAlsop I started looking at overhead imagery to find power infrastructure and realized that there wasn't much of one to speak of.
@Tinned - not as bad as you think. It is on a major trade route, and now a regular flight service from the UK
15:25
Alternative view: The infrastructure is very decentralised; therefore, resilient ? :-p
But the West Store - the big shop in town - has everything from tinned tuna to tractors
@ScottPack Tengo Snort y tengo preguntas...yeah that's about all I got for Spanish. I keep seeing alerts for SSH port traffic to a NAS that is on the net. I've got it blocked at the firewall and the firewall doesn't show any logs of it even coming in. The firewall is on a different switch and I don't have it mirrored to my sniffer port but the NAS is on the same switch as the sniffer port. Why would it be triggering the alert though if the firewall should be blocking it?
Port Stanley looks like it was built in Sim City
Yeah, you couldn't knock out comms - everyone has 2 metre radio, and horses, and land rovers,
Fire house, police, hospital, town all... all next to each other.
15:26
@Jeff - aye. Mostly tin roofs on the older buildings. The new ones are all scandinavian
@Travis Because clearly it's seeing traffic. :) I would recommend you actually look at the rule and figure out exactly what it's looking for. The snort rule language isn't overly complex, mostly just learning keywords. Many of which are intuitively understandable.
It also has 1 pub per 130 people, or thereabouts
Which is nice
@RoryAlsop I think that's too high a person:pub ratio
Hahahaa - well, a couple of folks there didn't drink. Apparently
15:28
@ScottPack Crazy it's even showing up beyond the firewall... It's an Emerging Threats rule from their "compromised host" list. It's just alerting on the SRC IP address
@Travis What's the sid?
@ScottPack 2500010
@RoryAlsop According to my quick calculations, elevation for that dish should be about 30.842⁰
@Travis So that one's pretty simple, really. It looks for a packet with the SYN flag set coming from an address in that list to any host that fits within the $HOME_NET variable. Not just SSH. The port fields (both source and dest) are any.
You'd get the same elevation from a dish in London, actually.
15:32
@ScottPack Right. The problem is both the src and dest are blocked on the firewall lol. Shouldn't even be getting in. Just wanted to make sure it was an accurate report
@Travis Are you sure?
@ScottPack Yep, just verified that TCP 22 was blocked incoming and outgoing for all.
@Travis Was the alert on port 22? That rule doesn't limit itself.
Src Port Dst Port Seq Ack Off Res Flags Win Csum URP
36951 22
@Travis I mean, it would be kind of hard for the alert to fire unless it saw a packet that contained that matched.
15:38
@ScottPack That's why I was questioning.
@Travis How are you logging? Are you going straight into unified? Are you capturing pcaps as well?
straight to unified
So one of the options, instead of using unified2 as your output plugin, is to use both alert_unified2 and log_unified2.
@thomasp - sounds right. It is almost the same latitude. It looks more normal from the front, where you can see the focus is off-centre slightly, but in that view it looks far too close to horizontal
That will give you both the unified log you're accustomed to for barnyard, but also dump out the packet that triggered the alert in pcap format.
@Travis That way you can go back and actually view the original packet that caused problems.
15:53
@ScottPack Ok. I'll check make the change. Thanks
@Travis You can also use something like daemonlogger to just capture all of the traffic into a ringbuffer.
That'll let you do all kinds of yummy analysis
16:38
@Gilles Maybe, but we didn't even establish the hat's colour. ;) I didn't feel comfortable giving OP the exact exploit of the code he linked to,... it's really easy but I had reasons to believe it would be used for more than just demonstration purposes on OP's own setup. @RoryAlsop deleted some OP's comments, maybe you were missing the whole picture because of it
@TildalWave Often the difference between a black hat question and a white hat question is intent.
@ScottPack I just didn't feel comfortable any more, he linked to some Iranian webpage that's supposedly using that framework (riddled with holes like a Swiss cheese)
4
A: Should we allow questions/answers that appear to include or request exploit code?

Rory AlsopQuestions such as this one about exploiting Windows 7 remotely did appear to be a request for attack techniques, so after some comments, and seeing a vote to close and a mod request I closed it. And there was this question in meta around questions on making exploits or malware. Consensus seemed ...

I tend to agree with @RoryAlsop here, and that discrimination based on hat colour is beyond the point IMO
@TildalWave Real gruyère does not have holes.
@ThomasPornin then it didn't yet have the chance to meet me :) :P
16:48
Looks more like Maasdammer anyway ^
(which is ... Dutch I believe, short of Wiki-ing)
Maasdam cheese is a Dutch cheese in a Swiss-style. Made from cow's milk, it is aged for at least 4 weeks. It ripens faster than other Dutch cheeses. Maasdam has internal holes from the ripening process, and a smooth yellow rind. Sometimes it is waxed like Gouda. The cheese was created to compete with the popular Swiss Emmental by being less expensive and quicker to produce. In the process of making a cheese with the same general components as Swiss cheeses, the Dutch ended up with a cheese that is nutty and sweet, but softer than Emmental due to a higher moisture content. The style was i...
Emmentaler has holes, and is apparently of Swiss origin, but most of it nowadays comes from other countries, including France. And most French call it "gruyère" despite (and because of) the holes.
But when I say "Swiss Cheese" I usually mean Emmental ;) (oh ^ LOL)
17:37
I really enjoy a nice smoked gouda. I find that quite comforting.
@ScottPack If I convert the U2 file to a PCAP will that be the same thing as changing the .conf to output as PCAP also?
@ScottPack Or is there more info in the logged PCAPs?
I've never actually converted the unified logs to a pcap.
By the time I switched to using barnyard, instead of syslog directly, I already had daemonlogger up and running.
Oh, ok. I've done it and imported it into Wireshark. Just didn't see too much data in it than what I already knew
17:58
@TildalWave Personally I discriminate against DRM heads
@CodesInChaos Hehe I bet you do. How's with that CipherCloud thingy, you plan on fighting back? We've already been discussing ways to spoil their party on infosec :))
I don't see much point in going through legal hassle just to get the images back
I simply expanded my analysis and leave the foot shooting to themselves
Their current stance is "Our real crypto is much better than what we show the public. Sign a NDA and find out."
I love this comment on HN in response to their blog suffering from overload issues: news.ycombinator.com/item?id=5590149
> Due to a malicious denial of service attack, likely by our competitors, in which they leverage forum-promulgated references, which through human-mediated multiple hyper-text transfer protocol requests to our blog hosting infrastructure, attempt to access proprietary information about our strategic positioning viz a viz current nonpositive media attention, we are unable to provide this patent pending document at this time.
19:03
@CodesInChaos What a load of bull**** LOL If it's patent pending, then why fear disclosure? It would be in the patent application anyway, and any subsequent patent requests denied based on prior art they would hold claims to. Anyway, IANAL but this reads to me like there's no patent application at all, or it's not their IP to disclose on. It's also terribly funny reading technical jargon mixed with legal BS in same sentences. Where in hell is that Douglas Adams' Earth 2.0 rocket when you need one?
@TildalWave That last quote is a parody post
@CodesInChaos Oh darn I didn't open the link ROFLMAO :))) You know the most scary part is, that I was actually ready to believe the part that you quoted is indeed from CipherCloud's public announcement or something :)))
19:39
@TildalWave The real response isn't much better. They do say basically "we didn't show any of our real technology 'cause we're scared someone might steal it while the patents are pending." Which is of course, bogus. blog.ciphercloud.com.nyud.net/…
@Xander Ha! This "NIST validated cryptographic algorithms to store data in the cloud" and this "We also leverage our reverse proxy architecture... in-depth knowledge of cloud applications for in-line processing and transformation of data on-the-fly to support common operations on data including search and sort." are mutually exclusive.
The only way they could comply with both requirements is .... fanfares -- **tada** -- to do both! So they encrypt one copy and call it NIST compliant, while also retain a non-encrypted copy (or search index, which is more or less all contents anyway) on their reverse proxy. Wanna bet they have a Google box too?
Swiss Cheese? :))
What does IUT mean on FIPS 140-2 certification In Process List?
19:58
@TildalWave "Implementation Under Test (IUT)"
@ThomasPornin oh cheers!
bloody hell this reminds me of ISO certifications ... line after line of review documents and not a single line mentioning testing the darn product itself
20:31
@RoryMcCune Not sure what I think of that clickssl user. She posts a lot on several of the other sites. Nearly always answering SSL questions and mostly with fuzzy nonsense and FUD.
But not quite to the point where I definitely want to mark it as spam.
Occasionally even useful answers (sprinkled with suggestions that you should use clickssl to buy your certificate).
@Ladadadada she smells like the other 3 SSL dudes @Jefff
@RoryAlsop The other 3?
20:49
@Ladadadada a range of mostly spammy SSL folks
21:07
@RoryAlsop Yup. Newark New Jersey, AKA India.
@RoryAlsop chat.stackexchange.com/transcript/message/9100796#9100796 and followup. Basically treat them individually and ignore what's in the profile.... so bad answer == downvote.
21:24
@JeffFerland 404
@CodesInChaos Well, 403 but they're lying
@JeffFerland interesting
 
2 hours later…
23:15
Quick, before the superdelete hammer hits!
-1
Q: Andorid NOT working

ewdI hate Stack Exchange.This post DOES meet quality stanrads When i try to chat is asking for stupid reputation.I am going to spam this website with links to gop.com and wnbc.com UNTIL Stack Exchange idiots learn from this and disable repuation and let eveyone chat and have full control.Stack Exch...

Possibly the funniest post I've ever read on SE.
> I hate Stack Exchange.This post DOES meet quality stanrads When i try to chat is asking for stupid reputation.I am going to spam this website with links to gop.com and wnbc.com UNTIL Stack Exchange idiots learn from this and disable repuation and let eveyone chat and have full control.
> Stack Exchange CEO is in prison.YAY The title says for the rest. Stack Exchange CEO says = 1 + 1 = 333333333 Stack Exchange ceo is dumb! 5 tags only (pissing me off)!! Steve jobs says = 1 + 1 = 2! Correct! Stack Exchange was started by a terrosist group.
> And also iran,sirya and osama bin laden also found stack extange1
23:33
What's the most usable metasploit version, from installing random versions, I've found it to be 3.7.2
@Polynomial BWAHAHAHAHAHAHAHA
@MMavipc Did you try the version i showed ya?
@D3C4FF 4.5? I can't figure out how to generate shellcode with it
@D3C4FF and it includes the shitconsole
@Polynomial that's gold. Link?
23:50
@AviD it just got deleted
@Polynomial which site?
@Polynomial ROFLMAO!!! Disgruntled user huh? Brown trousers time funny *
@AviD Android
@AviD andorid.stackexchange.com
@Polynomial you spelled it wlong :P
@AviD did you resurrect your CPU then?
@TildalWave hmm? oh yeah.
it was fine in the morning. After I got some rest, I was able to realize that it was just Prime95 erroring out a thread or 3. Some extra voltage and all was right with the world.
now I'm reading up on GPU overclocking... when I next have time for it :-)

« first day (858 days earlier)      last day (4320 days later) »