The DMZ

« first day (863 days earlier) ← previous day next day → last day (4315 days later) »

Terry Chia

09:16

Food for thought.

Adnan

09:57

@TerryChia But zombies are the living dead, necrophiliacs aren't so big on that part.

I have something I want to admit.

On SO, whenever I see someone who accepted a very very shitty edit, I downvote their last 2 questions.

(Of course I try to be fair and I downvote their worst questions)

Rory Alsop

10:16

Hmmmm. Not really the way this should work - although if their questions deserve it anyway then fair enough :-)

Adnan

@RoryAlsop Because I feel that there should be some punishment to deter robo-reviewers.

Rory Alsop

10:43

I agree - hopefully the audits catch them

1 hour later…

Terry Chia

12:01

@timstrazz @osxreverser @rgov Apple is not following the Microsoft strategy to kill all security researchers by sponsoring alcohol

Tweeted by i0n1c on April 26, 2013 at 4:58 PM in reply to timstrazz

3 hours later…

Adnan

14:32

-3

A: How to lock a folder forever even if OS has been changed?

Or, you can use computrace Lojack, since encryption means nothing nowadays, It's only a matter of time for which a files are to be decrypted, and you have no way to stop it from trying. A method to remotely wipe the files / machines through internet upon theft would be a nice addition to your se...

Gilles

14:47

yeah, in 1.5 year later, it became 6 hours with the latest computer in "XXXX". It recall me that we once had a rule that our encryption is limited to 40bit DES — Antony Lee 1 hour ago

TildalWave

15:33

g'day all

Q: Odd user registered and strange behavior. Is it sinister?

I am running a number of web sites. They are all Drupal based, if that is relevant. Recently I have noticed something odd. All my sites have a user registered with the name "zctonglin". I presume that user is a spammer because of some initial behavior typical of a spammer. Based on that, this ...

I believe there was @Polynomial's answer with quite some research done before, now it's gone :O Probably because of this:

Q: Should we allow name-and-shame answers?

I am referring to this answer: http://security.stackexchange.com/a/34895/10211 Like @MDMoore313 mentioned in the comments, the person being mentioned in the answer probably isn't behind the attacks. I feel that we should not allow naming any particular person in this type of questions as it has...

discussion

My question is, shouldn't we just edit answers to remove any sensitive information, and not delete them?

Terry Chia

@TildalWave Poly didn't have an answer on it last I checked, only a comment.

TildalWave

@TerryChia It's possible my mind's playing tricks on me, I did have quite some beer last night LOL

Terry Chia

@TildalWave There WAS another answer on it, can't remember who it was from.

But I think @Hendrik nuked it.

TildalWave

@TerryChia It was an answer with quite some research on all the identifiable data in the question... not sure if it was @Poly tho, true.

Gilles

@TildalWave if there's sensitive information in a post, the procedure is to edit and delete the post ASAP, then ask SE staff to remove all revisions of the post containing the information to expunge (normally this is escalated by a mod), and finally undelete

TildalWave

15:38

@Gilles this is to remove any trails to previous edits, right? Then another question - you mods don't have an option to edit without showing edit trails?

Gilles

@TildalWave yes, and no, we don't

TildalWave

@Gilles Oh :( I think it would be a good idea to request that option, maybe to temporarily hide the post (done by one mod), edit and then approve by two mods?

Terry Chia

@TildalWave I think it's to prevent mod abuse.

TildalWave

@TerryChia that's why I was thinking to only enable such edits with two or more mods approving it

@TerryChia LOL @ that tweet... maybe Apple should consider sponsoring hard cider? Apple -> heavy press -> leave to ferment -> num num :)

Thomas Pornin

16:24

@TildalWave There was an answer from @Poly. It has been deleted, but we +10k users can still see it.

Adam McKissock

16:35

Hey all :)

DiAlex

16:48

hey guys

adam, are you there?

nevermind

Adam McKissock

@DiAlex Yup, whats up?

Gilles

I finally posted my CTF write-ups

A: Plaid CTF April 2013

Problem 12: three_eyed_fish [Binary] We have a Linux amd64 executable trying to do something mysterious. It doesn't want to be traced (ptrace(0,0,0,0)); an easy workaround is to patch the binary to replace ptrace by something inoccuous like read. Also, the program tries to open /dev/tty0; patch ...

A: ForbiddenBITS CTF 2013

Nazi War We can submit a name and get an encrypted password. A little experimentation shows that the password is always the same for a given name, and the encrypted password consists of 13 characters, the first two of which are always fb. Furthermore only the first 8 characters of the file name ...

Adam McKissock

17:04

@Gilles Interesting reads...

3 hours later…

TildalWave

20:24