The DMZ

Scott Pack

00:36

1 downside of this town: Last evening during dinner, we saw an incredible amount of beer walk past the restaurant. We figured that it must be a 'Fest' weekend'. So afterwards, while taking a stroll, we saw a good sized group of kids picking a completely limp girl up and placing her into the backseat of a car.

Iszi

01:09

@ScottPack I'm sure a week or so from now, she'll be talking about how awesome of a night that was, and how she has a bunch of great friends for making sure she got home. ;-)

nealmcb

02:42

@Iszi Hmm - seems unlikely to me - doesn't sound fun. Hope she got some savvy care: wikihow.com/Take-Care-of-a-Drunk-Person

Iszi

05:19

Ooh! It looks like The Bridge has an XKCD feed - could we get one?

in The Bridge, 1 hour ago, by Feeds

Scott Pack

11:28

@nealmcb We have the unfortunate distinction of being a pretty hardcore party school (although the number of Fulbright scholars implies that we're doing something right). As such our medical community has quite a bit of practice.

Rory Alsop

12:35

Hay all - looks like we only need 21 more avid users to get 3 Excellents on Area51, and our visits per day and questions are still going the right way. All good:-)

p.s. Hope everyone had a nice weekend?

And congrats to @Thomas - 2nd in the rep league and closing on @Avid

:-)

Iszi

13:01

I'll be honest. This is a TL;DR for me at the moment. But, whenever I see multiple points in a question, I wonder if it's really appropriate for an SE. At the very least, should it probably be broken up?

0

Q: How to best defend against Targeted Attacks?

We have seen this attack method grow as part of Advanced Persistent Threats (operation Aurora against Google or the G20 French Finance ministry attacks come to mind) but I have no doubt that even smaller scale attacks may employ this methodology if there is a lot to gain. Our case is: high value ...

Rory Alsop

@Iszi - was just thinking about this one. It's really not an APT or targeted attack question. It's really a defence in depth question, plus some specific questions

Scott Pack

@RoryAlsop Do you know how they define avid users?

Technically, we only have one.

Rory Alsop

200 rep

@ScottPack heh

Scott Pack

200 or 2000?

Rory Alsop

There can be only one!

Christopher Lambert's best role

Scott Pack

13:04

I'm not Spanish! I'm EGYPTIAN!

@RoryAlsop As much as I enjoy that movie, that's not a glowing endorsement....

Rory Alsop

maybe avid was the wrong word - we need 150 people with over 200 rep, and we have 129

Iszi

@ScottPack I've said it before... I really wish they'd put a link to the stats on our homepage.

Rory Alsop

@ScottPack I agree. But Sean's Spanish accent was equally as good as his Russian in the Hunt for Red October

Iszi

Oh, wait! It's there!

Rory Alsop

@Iszi is it?

Scott Pack

13:05

The problem, for me, isn't so much finding the stats, but assigning meaning to them.

Iszi

Apparently, it's labeled "Area 51" though - so it's not really apparent that it's specifically for our site.

Rory Alsop

Really wanted that app to work showing growth of the various stats over time

I'm a very graphically oriented person

Scott Pack

@RoryAlsop I'm willing to allow the The Old Man's pure manlieness to override his lack of ability to mimic accents.

So your browsing history says.

Rory Alsop

@ScottPack Quite right too! Sean is a star - the best 007 ever!

@ScottPack Meep!

Scott Pack

Although, Craig is doing a bangup job.

Iszi

13:07

@RoryAlsop Under the Site Stats image, the link called "Area 51".

Rory Alsop

@ScottPack true - he is getting back to 'gritty' as Fleming intended.

@Iszi ahhh - small and inconspicuous. Cheers

Iszi

BTW: Who is this "Jeff Williams" guy that supposedly proposed the site? I don't think I've ever noticed him on.

Rory Alsop

@Iszi He has been on occasionally, and was active a lot in the early days

Scott Pack

@RoryAlsop About 3 years ago I finally started reading some of Fleming's books. I was blown away at just how...sociopathic Bond is.

Iszi

@RoryAlsop About on par for StackExchange's attention to usability for the more interesting features.

Scott Pack

13:08

Was that when it was just appsec and not IS?

Rory Alsop

@ScottPack - just like Archer :-)

Scott Pack

@RoryAlsop I need to add that to my viewing list.

Rory Alsop

@Iszi Yeah - all the good stuff I find is under stackapps.com

Scott Pack

@RoryAlsop The problem with stackapps is the same problem as all the other sites. The only way to find something is painfully intense searching, or lucking into finding it brand new.

Iszi

@RoryAlsop wind=find?

AviD

13:10

all allo

allo allo

Scott Pack

Speaking of avid users.

AviD

@Iszi Jeff Williams? The founder of OWASP?

@ScottPack heh. I was complaining about that the other day...

Ormis

So i just read the "How to best defend against Targeted Attacks?" question.... is it even really a question?

AviD

how y'all doin?

Ormis

he already answered it in his question

good, and you AviD

?

Iszi

13:12

@AviD Dunno. Not familiar with OWASP, and I don't think SE does any sort of ID validation.

AviD

@Ormis all well

@Iszi heh, you think its not him?

Scott Pack

@AviD Over the weekend I took my laptop and a g&t our on the porch. I was completely inundated with songbirds and the smell of lilac. I've had worse :)

AviD

@Iszi I was wondering who the other one was.

Iszi

@AviD I don't think it's not him. I'm just saying there's no proof that it is, even if that is whom the account is intending to purport itself to be.

Ormis

btw iszi, i meant to talk to you about pen testing over the weekend, but i ended up being pretty busy, sorry about that

AviD

13:13

@Iszi sfunny, I was thinking of emailing him, to get OWASP to push more for the site.

what you think @RoryAlsop? Is that misuse of diamondpowers?

Scott Pack

@AviD You would think that someone on this site (in this room?) might have a better contact mechanism with someone affiliated that highly with OWASP.

Rory Alsop

@Iszi obviously :-)

@ScottPack Yeah - not anywhere near as intuitive as it needs to be

@AviD allo

Iszi

@RoryAlsop You diamond mods and your long-term chat editing powers...

AviD

@ScottPack why whats wrong with email?? :$

Rory Alsop

@AviD I have sat down with the London OWASP leader to do it, so now - I think it's a grand use of diamondpower!

AviD

13:16

dilbert.com/strips/comic/2011-05-07

@RoryAlsop consider it done.

"Oi! get yo' yankee a** in here, and raise some ruckus!"

Rory Alsop

@AviD Hahahaha

AviD

@RoryAlsop not anymore ;)

Scott Pack

@AviD Nothing is wrong with email per-say, however identity branding being what it is.... We do, however, have other people on the site that are affiliated enough with OWASP that one would think they might be able to do an out-of-band proofing.

AviD

@ScottPack I could probably do that... Just seems long way 'round, is all. Innocent until proven guilty, and whatnot?

Rory Alsop

@AviD Cheers :_)

Scott Pack

13:18

@AviD You socialist bastard!

AviD

@RoryAlsop figure @ThomasPornin will by gliding past both of us in a day or two, anyhow....

("... or two", only cuz he's away for a few days....)

@ScottPack heh, right, I forgot about the patriot act. "Terrorist until proven... proven... nah, Once a terrorist, always a terrorist.".

@ScottPack does that still stand, now that they caught the Osama impersonator?

osampernator?

Scott Pack

@AviD We like to keep it nice and easy to remember, none of this wishy washy stuff.

Rory Alsop

@AviD Quick - it's sock puppet time :-)

Scott Pack

Are you a WASP born and raised in 'merica? If yes, then -> Patriot. else -> terrorist

AviD

@ScottPack right, right.... "You're either with us, or against us!"

or, ala Anakin, "If you're not with me, you're my enemy"

Scott Pack

13:22

@AviD I'm sorry, I don't remember any quotes like that from Vader. Must have been a fanfic

Rory Alsop

@Iszi actually, maybe I'm thinking of Jeff Ferland... hmmmm

AviD

@ScottPack lol! saw that one coming....

Scott Pack

@AviD Oo...here's another from John: pizzagoon.com/uncategorized/morel-and-spring-garlic-top-pizza

AviD

@RoryAlsop yeah, jeff williams was not around a lot.

planetlevel, Maryland

230 4

appsec penetration-test web-application php code-review attacks owasp-top-ten

@ScottPack whos john?

@ScottPack nevermind, that looks yum!

what are morels?

Rory Alsop

morels - either really nice fungi, or intelligent brain parasites

AviD

13:26

Morchella

Morchella, the true morels, is a genus of edible mushrooms closely related to anatomically simpler cup fungi. These distinctive mushrooms appear honeycomb-like in that the upper portion is composed of a network of ridges with pits between them. These ascocarps are prized by gourmet cooks, particularly for French cuisine. Commercial value aside, morels are hunted by thousands of people every year simply for their taste and the joy of the hunt. The American state of Minnesota has adopted the morel as its state mushroom. Morels have been called by many local names; some of the more colo...

Rory Alsop

depending on whether you live in the real world or a brian aldiss novel

(hothouse, I think)

AviD

@RoryAlsop lol. remind me NOT to read those books...

do you guys think that this:

5

Q: How to persuade people that security measures matters?

If people could be fooled in life so easily ( http://www.bbc.co.uk/realhustle/ ) then in computing.... So what are the best tips, to persuade a regular user to pay a little more attention to security: e.g.: use HTTPS where available, up-to-date softwares, don't log in@a netcafe, don't click on l...

people-management social-engineering

Rory Alsop

@AviD brianaldiss.org/hothouse.html

AviD

is not a duplicate of this:

13

Q: I see entry level security skills as a problem for industry - what can we do about it?

Okay, so we push corporates to improve security, and provide training to IT staff and awareness presentations to CEO's etc, but each year a new batch of graduates are brought in to companies as others leave, and they typically have one of two perspectives: security? security Nazi! One of the ...

education academia

Rory Alsop

They come at the issue from two totally different directions, but there is a good chunk of overlap, yes

AviD

13:29

@RoryAlsop but are they different questions?

the dupe just didnt seem like a strong question, to me... maybe it just needs a lil edit.

Rory Alsop

.....I think they are effectively the same question, so could be merged, but it got some good new answers - which is definitely a value add

maybe you are right and an edit is all that it needs

AviD

@RoryAlsop well, a merge would still preserve the answers...

smbc-comics.com/index.php?db=comics&id=2237

for chuckles....

Rory Alsop

:-) what a pity it doesn't onebox

AviD

@RoryAlsop I need to ask - is that mushroom really benevolent, or is it using the poor green Gren for it's own nefarious (and probably delicious) means?

Rory Alsop

Well, the latter, but it requires Gren to be alive and healthy so for the majority of the book it appears benevolent

AviD

13:35

@RoryAlsop wow, that book really has a twist ending, doesnt it. </deadpan> ;)

@RoryAlsop doesnt matter, I cant read books about things growing in people. I got creeped out enough by DaisyHead Maisy...

Rory Alsop

heh - it does have a slight twist, but isn't meant to be too complex on that side of things

@AviD oh yeah - disturbia!

AviD

@Iszi re xkcd feed - thats up to the room owner, he can add any feed he likes. That said, I would be hesitant to add any feed - no matter how fantastic it is - that isnt directly pertinent to this room... But why not just subscribe yourself?

I might have considered something like OWASP's moderated feed, but that's too high traffic for my tastes...

@ScottPack re your sidebarred comment:

2 days ago, by Scott Pack

Come on man, just leave the panda alone and let them go extinct. The way nature intended.

dont knock the pandas. They keep the world safe.

They know KUNG FUUUUUUUUUU!!

you guys think this is a security question?

4

Q: extract from pcap all protocols found

I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark I think tshark is able to do it, but i couldn't find how. any idea?

network tools protocols sniffer

I thought we had discussed on meta long ago, simple howto questions even on security tools, and decided they were offtopic... but I couldnt find that meta post.

Rory Alsop

It doesn't seem very on topic to me

Iszi

@AviD Could subscribe myself, but I figured we might like to share the joy.

AviD

I liked this quote:
"In God I trust. For everyone else I keep log files."

Iszi

13:46

@AviD Similar, and often heard in my office: "In God we trust, all others get audited."

AviD

@Iszi heh, yeah, pretty much the same.

But of course, that brings up another question: How do you prove God's identity?

Scott Pack

So questions regarding security tools are off-topic?

AviD

What, like does he have to perform a miracle or something?

Iszi

@Ormis Just confirmed with my boss this morning that such information gathering is definitely out of scope for this exercise. It's starting to sound a lot more like a vulnerability scan from outside, than an actual "pentest".

@AviD With his public key, of course.

AviD

@ScottPack it just didnt seem to be regarding the tool, it felt like the tool happened to be there. It wasnt a security question, it was more like "what button do I push".

"I have a pile of data, How do I parse it?"

Scott Pack

13:50

Ah, yeah, in that I would see as a NARQ pretty much anywhere. Too open to be reasonably answered.

AviD

@Iszi heh. Yeah, but who would sign it??

Scott Pack

As primarily a technical kind of guy the thought of tools being off-topic was a bit off-putting :)

AviD

@ScottPack hehe. no, not the tools, but the non-security parts of using them.

Scott Pack

Ok, good. I can live with that.

AviD

If someone had trouble installing burp suite, would that be ontopic?

Scott Pack

13:51

Drink more soda

Rory Alsop

The upside - the answers are actually quite practical

@AviD no

AviD

@RoryAlsop true nuff..... It was more about the guidelines, for future reference.

@ScottPack actually just about to pop a redbull....

Scott Pack

Mmm....cough syrup.

AviD

hehe. to each his own...

Scott Pack

Speaking of which...over the weekend the lady and I went out. She got a mint julip. As native Kentuckians I feel a bit odd saying this, but it sucked.

AviD

13:53

I find it gives me a few minutes of much needed clarity....

Scott Pack

@AviD I found that slightly disturbing sense of clarify from a glass of yerba mate

AviD

(I actually prefer a non-redbull redbull, ie. similar copies over the original. But I still call them all generically redbull...)

Iszi

@AviD Would definitely be self-signed, as a "Trusted Root CA".

Rory Alsop

@AviD Mmmmm - Redbull + Vodka + Berocca = Win!

AviD

@Iszi hehe

@RoryAlsop wots berocca?

nvermind

Berocca

Berocca is a tablet containing a combination of B group vitamins and Vitamin C. Berocca is available in Argentina, Colombia, Ecuador, Finland, Uruguay, Peru, the European Union, Norway, Russia, Switzerland, Ukraine, Vietnam, Hong Kong, Indonesia, Malaysia, Singapore, Philippines, South Africa, Taiwan, Thailand, Australia, Mexico, South Korea and New Zealand. Berocca was originally manufactured by Roche Pharmaceuticals, but is now manufactured by Bayer after Bayer's global acquisition of Roche Consumer Health in January 2005. Varieties Berocca Performance is a formulation of B grou...

Rory Alsop

13:56

Berocca

Berocca is a tablet containing a combination of B group vitamins and Vitamin C. Berocca is available in Argentina, Colombia, Ecuador, Finland, Uruguay, Peru, the European Union, Norway, Russia, Switzerland, Ukraine, Vietnam, Hong Kong, Indonesia, Malaysia, Singapore, Philippines, South Africa, Taiwan, Thailand, Australia, Mexico, South Korea and New Zealand. Berocca was originally manufactured by Roche Pharmaceuticals, but is now manufactured by Bayer after Bayer's global acquisition of Roche Consumer Health in January 2005. Varieties Berocca Performance is a formulation of B grou...

vitamins

:-)

Iszi

@RoryAlsop @AviD LOL

Rory Alsop

snap

And that's how you play Google Snap, folks

AviD

@RoryAlsop wait, vitamins??

Scott Pack

You kids these days

Rory Alsop

apparently they're good things

chemicals and stuff

in fizzy form

AviD

13:57

really? wouldnt want that in my body....

Scott Pack

Whatever happened to Manhattans, and Rob Roys, and G&T?

Rory Alsop

But look at the list of stuff: Citric acid, sodium hydrogen carbonate, vitamin C, magnesium sulphate, mannitol, calcium carbonate, magnesium carbonate,flavouring, colours (beetroot red, beta carotene), sodium carbonate, niacin(Nicotinamide), sweeteners (aspartame, acesulfame K), sodium chloride, zinc citrate, pantothenic acid, riboflavin, thiamin, vitamin B12, vitamin B6, anti-foaming agent (polysorbate 60), folacin (folic acid), biotin.

lots of long words, so it must be good

AviD

@RoryAlsop was just looking at some stats... Curious, wrt your cross-site stat machine, I wonder if other sites' traffic line up as well with the work week.

Rory Alsop

well, except for the Aspartame and Acesulfame K

AviD

@RoryAlsop half those things are probably poison!!

Rory Alsop

13:59

@AviD cross-site stat machine???

@AviD Heh - so is alcohol

AviD

@RoryAlsop naw, thats healthy stuff. Humean ebings nedd thass stoff

Rory Alsop

So where do I find stat machine?

AviD

@RoryAlsop dunno, thought you were building one ;)

but did you notice the massive dips over weekends??

Rory Alsop

@AviD no, I found one that sort of worked 5 months ago and was trying to see whether owner wanted to update it

as I would like to spot what @JeffAtwood calls the 'turning points'

Which stats are you seeing?

Scott Pack

@RoryAlsop Do you remember where that one is?

Rory Alsop

14:02

@ScottPack yep:

13

Q: Popularity Contest

Yes, I know it's too late to get in for the prizes ('sif this would win anything anyway) but hey, for the betterment of the community :) Screenshot / Code Snippet About I've (and others) been bugging about getting some stats so we can track our Stack Exchange sites against the others, so I...

app website statistics

AviD

for those of you who dont have them, our traffic looks kinda like this:
_ _
/ \ / \
_/ \__/ \___

Rory Alsop

But with more whitespace, right?

:-)

AviD

dang, it didnt come out right... basically, rising mountains, and close to no traffic valleys over the weekends....

@RoryAlsop ayup :$

Scott Pack

The weekend drop is pretty normal, and seen across most of the professional sites

Rory Alsop

@ScottPack yeah. As long as the trend is up we're good

Scott Pack

14:04

@RoryAlsop Quite. I figure that 30 days is about the shortest length of time that makes sense to watch.

AviD

@RoryAlsop and it is... the peaks are getting larger. but that app dont seem to work...

Iszi

@AviD Probably for most real "professional" sites, but not so much for stuff like B&CG, RPG, or Gaming.

Rory Alsop

@AviD Yeah - it has issues. The writer said he'd update - I don't want to chase too rudely, but it would be nice to see

I'm sure the SE team have a nice view - would be good to have it available

AviD

@RoryAlsop agreed.

@RoryAlsop I've seen farseeker in the lounge now and again. You could try pinging him there...

Scott Pack

They do have nice views, we've seen them in blog posts before.

And yes, Farseeker is a nice guy to talk to.

He's currently a diamond mod in both SF and WebMasters

AviD

14:09

@ScottPack ayup

Scott Pack

He uses different nicks on different sites, so it's gets a little weird.

Rory Alsop

I think we only officially get a stats view once out of Beta, but I think it is very valuable in the beta period to see what effect various things have on growth

@ScottPack So do I :-)

AviD

@RoryAlsop thats why the gravatar is important...

my tigger is recognizable!

Rory Alsop

yup - that it is. Maybe I should have my gravatar as my Dr Mayhem face......:-)

AviD

@RoryAlsop heh. Been thinking about changning my gravatar out for a real pic... well, it took me a couple years on linkedin, but I probably should...

hoo hoo hooo HOOOO!

and on that note, the redbull in my bloodstream has reached the critical point, where it is beckoning me to dig down and do some real work. Have a tricky bit of code to sort... laters dudes! and @Iszi ;)

Rory Alsop

14:15

l8r

Scott Pack

@AviD Good luck

Iszi

16:45

@AviD I concur with you on this one. Migrate to SU. Its on-topic-ness there is still a little fuzzy, but it's definitely more relevant to SU than it is here.

1

Q: What is meant by channel id > 100 in 802.11?

I was sniffing the in air with my Alfa card. I captured few packets with channel ids > 100. I did not get time to look at the packets. But is it possible to have channel id > 100. What I know is channel id is in between 1-14. How it can be 100+ ? Is it possible?

wifi wireless sniffer

Iszi