The DMZ

5:50 AM

@Adnan hehe. Watch out for Bears!

lynks

@Gilles best score we've managed :P

lynks

6:18 AM

im just adding more freehand circles to my bin100 writeup

@lynks Oh good. Finally someone is doing it here.

I have been bugging @Adnan forever to add freehand circles to his answers.

Adnan

Uggh! The pain!

@TerryChia So far I'm doing pretty well with bolding and wiki-style links

@Terry Also, how's your lockpicking going?

lynks

6:44 AM

4 freehand circles in one writeup meta.security.stackexchange.com/a/1288/9377

Adnan

7:09 AM

@lynks That is actually pretty neat. I enjoyed reading it.

1 hour later…

8:37 AM

@Adnan No time to do it sadly. :(

@lynks Nice, that last part sure is tricky!

2 hours later…

Rory McCune

10:28 AM

@iszi to solve a mystery for you roddybug is a friend of ours and we must've given him your referrer link instead of one of ours, thus the free cubes :)

11:13 AM

Man, the electorate badge takes work....

11:31 AM

@TerryChia I'm a fair deal past that one already, they should start thinking about diamond badges ;)

@TildalWave Heh. I'll be happy if they make fanatic a repeatable badge.

@TerryChia hehe only you in the weekly voters page and with all 40 votes used... nice, you'll be there in no time ;)

3 hours later…

Adnan

2:06 PM

@TerryChia What the hell?! This is the first time I know it's called Fanatic! I've always thought it's called Fantastic.

@Terry Oh yeah. I looked really hard for the news article and the studies. I couldn't find anything in English or Finnish. I even went around Google Scholar, I'm sure that one of the studies is in English. I guess it would make sense that they're not easily available since they were government-order evaluations. The national one was done by the university of Helsinki, I searched their website and couldn't find anything.

@Adnan hehe

@Adnan oh well, that's too bad. it's alright! :)

Q: Website URL to point users to in order to "make a point" about security

2:54 PM

It is 'common knowledge' that unpatched, older browsers and operating systems are dangerous, but when I tell people that they should not do their online banking in IE 6 on a pirated XP service pack 0, nobody listens. Is there a website URL that I could point people to which will demonstrate an 'a...

web-browser

Seriously.....

AviD

3:20 PM

@TerryChia IMO you are pretty far off base here.

the point about it being a 3rd party site is a fair one, but ultimately pointless.

true, the question could be phrased better....

it should be more like "how can I prove to my users ..." or "a way to demonstrate..." as opposed to "giv meh teh sitez".

commented to that effect.

in other news, my HSM criteria q got a great answer, NOT from @ThomasPornin... ;-)

A: Criteria for Selecting an HSM

Some technical factors that may be relevant: Performance - across whatever matters for your application (if any): encryption/decryption/key generation/signing, symmetric, asymmetric, EC, ... Scale - is there a limit to the number of keys it supports, and could that limit be a problem? Redundanc...

(I can repwhore, because its not for me... :-) )

@ThomasPornin if you have anything to add to that answer, I would greatly appreciate it!

3:44 PM

Yo yo yo!

Anyone here know what's the maximum size that a TCP socket can send before it is flagged as spam by a router?

3:59 PM

Anyone here?

4:11 PM

@coding_corgi not sure your question is actually answerable

@coding_corgi do you mean maximum packet size? If so, routers will not flag it as spam

4:24 PM

@RoryAlsop Mine seems to... It has a setting called: Packet Flood (SYN/UDP/ICMP/Other) or maybe this:

Invalid TCP Flag Attacks (NULL/XMAS/Other)

@RoryAlsop Networking is kindave a spot that I need to improve one for me, so if I seem stupid, I am sorry, ;]

@coding_corgi A SYN Flood is not about size of packets, it's about sending a large number of SYN packets to initiate connections, but then not complete them...en.wikipedia.org/wiki/SYN_flood

@coding_corgi And the invalid flags is another kind of attack also unrelated to packet size

the XMAS attack means turning on all the flags - which is not valid, but historically has broken a lot of TCP stacks

@RoryAlsop So I allowed to send large amounts of data say 10MB, 100MB, etc., at a time with TCP, and not get flagged?

these days most devices should not be vulnerable to an XMAS attack, and most can filter flooding

@coding_corgi The amount of data you send is entirely unrelated to these

@RoryAlsop Oh, but in general for a firewall?

@coding_corgi The question makes no sense. A firewall will not filter on volumes, with the possible exception of QoS and ISP throttling

If you are sending spam, it may get flagged, but that is unrelated to TCP

mail providers can make reasonable assumptions as to whether what you are sending is spam based on content of emails, number of recipients etc

4:33 PM

@RoryAlsop Ok, thanks!

@coding_corgi what is it you are trying to send? that might help me give a more helpful answer

@RoryAlsop BIG DATA! Thanks! You gave me all the info I needed!

Lucas Kauffman

5:25 PM

hello :)

@LucasKauffman evening!

Rory McCune

5:49 PM

Evenin' All

1 hour later…

7:05 PM

@RoryMcCune Awright dude - I need to get that cake box back to you at some point :-)

@RoryAlsop SPAM!

also, migration request

Rory McCune

@RoryAlsop no worries, out cakemaking activities are somewhat few and far between so no rush :)

@Gilles oop - will check my flags

Q: Recover Server 2008 R2 Domain Admin Password

So I did the ultimate silly thing: I lost my domain admin password for my Server 2008 R2 box. Sure, I could just re-install but that's going to be a huge pain. I tried rebooting with the Windows Install DVD and replacing utilman.exe with cmd.exe, but switching to C: displayed no files. I can s...

passwords windows

Not sure about this one

@Adnan It's been established time and again on meta that blackhatness is not a close reason.

OTOH I'm not convinced this is on-topic

where's the security content?

this is a how-to question

shouldn't it be on SU or SF?

7:42 PM

@Gilles it's flagged 4 times, all with different reasons... I think I flagged it as not constructive

@TildalWave ITYM voted to close

I don't see how NC could apply, this is a by-the-book “practical problem to solve”

I ended up voting DNC. It's borderline, but since it's here, let it stay.

@Gilles I stand corrected, you're right... reading Haswell docs now... is it just me, or it's less than impressive again... tick-tock tick-tock tick-tock ZZZZzzzzzz

8:36 PM

What kind of stupid password field in a web form disables pasting? Why is this even a feature?

8:51 PM

@Gilles Sounds to me like a new question for the site. Did you check if the password field supports dragging and dropping some file in it? It could be one of those "drag you password icon here" fields... tho those are pretty lame anyway and the only protection they give is against some keyloggers, if they also disable all clipboard operations on the field.

9:16 PM

@TildalWave I've closed the page now, but from memory it was something like <input onpaste="nopaste()" …>

and I have no idea what you mean by “drag you password icon here”

I'm glad Chrome has a built-in DOM editor. I removed the onpaste attribute

@Gilles if it takes a filename as means of password input... it's pretty lame scheme, I'm not sure I know all about it. I'd have to dig around for documentation how to implement that, but since I know it's worthless, I'll only do that if you really really insist... like send a 6-pack or something along those lines :)

I can't find anything on the new Haswell RNG (AVX2) from current reviews... any of you have some link for me?

9:40 PM

@TildalWave a filename as means of password input???

no, it was an ordinary “type your password here” field

1 hour later…