The DMZ

Thomas Pornin

18:05

@DavidFreitag News sites say no

And the NIST Web site is still down.

David Freitag

@ThomasPornin Interesting. I wonder how long they're going to drag this out

Scott Pack

@ThomasPornin Tell me about it.

kalina

I'm going to do something terrible to you now, and star this room so I auto join it

Scott Pack

I'm shoulder deep in 800-18 right now. Finding relevant documents from NIST has been exciting the past few days.

David Freitag

@kalina horrifying

Thomas Pornin

18:07

@DavidFreitag They will probably do something before October 17th to avoid bankruptcy.

David Freitag

@ThomasPornin I certainly hope so.

CodesInChaos

@ThomasPornin Only thing I notice of USA going crazy is NIST being down

Thomas Pornin

Although they may go bankrupt just to spite the Chinese. They are sometimes snarky that way.

Scott Pack

@CodesInChaos I'm a public employee and can agree with that.

David Freitag

What do you guys use the NIST site for, documentation?

Scott Pack

18:09

Exclusively for the 800 series from the Special Publications.

David Freitag

I'm guessing that would be security-related papers and such?

Thomas Pornin

@DavidFreitag For references. If I want to know how ECDSA works, I look at my own code, not at the standard; but when I write formal papers I must use formal references.

Adnan

@kalina See? This is what I mean by sub-20.

@Simon Dude, I'm officially seeing doubles. So now I have more of you to love.

kalina

@Adnan ...

oh you wanted dating advice?

David Freitag

@ThomasPornin I see. Well, theres always the way back machine to pull references from. Just extract the original link from the archive link.

Adnan

18:12

@kalina You're right, it's unfair of me to leave it without an explanation.

kalina

yes it was

Adnan

You see, many people (including people in this chat room) have great careers and happy relationships.

kalina

maybe being precise in your communication is your actual problem

David Freitag

@Adnan Only doubles? Moar alcohol! Triples is where it's at.

Scott Pack

@DavidFreitag Standards, yeah. 800-18 talks about security plan documentation, 800-53 is all about running a security program. Those are the big ones.

Adnan

18:13

Take @RoryM, @Poly, @Lucas, etc.

@kalina So what you said really comes from a great lack of experience in life.

David Freitag

@ScottPack I see. I can imagine why not having these documents handy could become an issue :]

Adnan

@kalina Which led my to saying the "sub-20" thing.

kalina

@Adnan you see it as a lack of experience, sure, you've probably got many years of an advantage over me in that department, I see it as a different perspective.

(yes I did just call you old)

David Freitag

Awww sheet.

Rory McCune

@Adnan you rang?

well beeped

ManishEarth

18:15

@kalina wait till @RoryAlsop comes on, then you'll know what old is

Adnan

@kalina While I don't disagree with you, I'd say that this difference in perspective comes with years. You'll eventually reach similar conclusions.

kalina

@RoryMcCune he said you're old, successful, married and enjoying life, and he's jealous somewhat

Scott Pack

@DavidFreitag Pretty much, yeah. Thankfully, since they're all created by the federal govt they're public. So gobs of places have the popular ones locally hosted.

Rory McCune

oh wait this is another I'm old thing isn't it :)

kalina

@ManishEarth older than Sterno?

Rory McCune

18:15

well I'll enjoy it massively more once I get house moved :)

ManishEarth

older than everything

Rory McCune

moving is stressful

I could say bad things about legal processes

Adnan

@kalina I'm not, I'm in a happy relationship of the kind with which I'm satisfied.

kalina

@Adnan my conclusions will always be different from yours. It's a fact of life.

David Freitag

@ScottPack Although it does make me wonder why you haven't setup a mirror at your workplace... unless that would be a massive undertaking

Scott Pack

18:16

Adnan

I'm just saying you can have a career with a satisfying relationship.

kalina

@Adnan sure, guys can

Scott Pack

@DavidFreitag There's nearly 200 documents, the vahst majority of which aren't all that useful.

Rory McCune

@ScottPack ok try being 3 days from moving and the lawyer can't decide whether we have a legal right of access to the property so the mortgage company can't release our funds, but we've already booked moving stuff + very expensive internet connections + packed everything we own :)

Scott Pack

@DavidFreitag I just had a project dropped on me last week that's based off one of the standards I haven't used before.

David Freitag

18:17

@ScottPack I guess it all depends on how large each document is, but i suspect they are quite large..

Rory McCune

@ScottPack and you do keep a library of gifs for moments like this don't you...

Adnan

@kalina Oh, I even forgot @AviD and @RoryA

Scott Pack

@DavidFreitag They can be. This one, for example, is 800-18 "Guide for Developing Security Plans for Information Technology Systems" which is 101 pages.

Rory McCune

@Adnan dud you're talking about old people and forgot @RoryAlsop ....

Simon

@Adnan More of me? How is that possible?

ManishEarth

18:18

3 mins ago, by ManishEarth

@kalina wait till @RoryAlsop comes on, then you'll know what old is

David Freitag

@kalina To say that only men can have both awesome careers and a satisfying relationship while women cant is a completely ignorant statement.

Adnan

@RoryMcCune Sorry, won't happen again.

Rory McCune

@kalina heh old --> yep, successful --> debatable, married --> undeniable, enjoying life --> maybe next week

kalina

@DavidFreitag not completely. The whole pregnancy and related time off gets in the way

Scott Pack

@DavidFreitag The big important one, 800-53, is a big honkin list of security controls categorized by what they apply to. I have that pdf offline, but the tricky thing is browsing the control catalog in a reasonable fashion.

kalina

18:19

@RoryMcCune what happens next week?

Rory McCune

@kalina I will hopefully have moved house :)

Scott Pack

@RoryMcCune Some I've saved in my imgur account, most I just google on demand.

David Freitag

@kalina Just because you have a rewarding relationship doesn't mean you need to have kids.

kalina

@RoryMcCune bigger house? better area?

@DavidFreitag Oh certainly not, but that factor certainly gets in the way of major career progression

I'm just justifying my position on my original statement

Rory McCune

@kalina coutryside rural scotland google.co.uk/maps/…

Scott Pack

18:20

@RoryMcCune You mean, as in, there is no public access road, or private with right-of-way, that gets you to the property?

kalina

@RoryMcCune you would openly give out locations of where you live like that to people you've just met?

David Freitag

And even then @kalina if you do decide to have kids there is the option to get a nanny. That frees both parents to strive for a great career, of course at the expense of their family.

kalina

that does look very scenic

Rory McCune

@ScottPack the access road is owned by the forestry commission, the previous owners lawyers should have sorted it but don't seem to have completely...

David Freitag

@kalina He packs some serious heat.

Rory McCune

18:21

@kalina that's not the precise location :)

@kalina + I have a domain name + company + IP addresses so my address is pretty much public knowledge :)

David Freitag

@RoryMcCune Wait, you mean you didn't bring a sleeping bag so put up shop in the middle of the street? Dang..

Rory McCune

@kalina 'tis v.nice (or hopefully will be when I get moved...)

Scott Pack

@RoryMcCune Oh, ick. From what I understand of US law there is no way to forbid access to a property. In order to carve out a parcel that's off a public right-of-way you must have a right-of-way to the parcel declared.

ManishEarth

@kalina My location is pretty easily available. It depends on how concerned for your privacy you are

Scott Pack

@RoryMcCune Sometimes that road might not be the one you want but there is required to be one. I think.

Rory McCune

18:22

@ScottPack yeah there's no real argument that we have access but the bits of paper have to be precisely right or mortgage company might not play ball....

Scott Pack

@ManishEarth As a property owner in the US my address is public information, as is my deed, purchase price, etc, etc.

ManishEarth

yeah

As a student who openly advertises his univ, the same applies to me

David Freitag

I live in a cardboard box underneath the freeway. Route 84 to be exact.

kalina

I'm pretty private about everything tbh

Scott Pack

@RoryMcCune Oh sure. What I mean is that from what I understand over here there wouldn't be a question over here because those pieces of paper would have been sorted when the parcel was created.

Rory McCune

18:24

@ScottPack indeed that's meant to happen here to, no way you'd get permission to build in recent times without it, but someone somewhere has dropped a ball

Scott Pack

@RoryMcCune (Ass|Arse)holes.

Rory McCune

@ScottPack and unfortunately it's not getting picked up quickly enough to avoid us running into our move date... worst of it is that the existing owner is 88 and has a moving company paid for and booked for that date...

<fingers crossed> it will get sorted tomorrow....

Scott Pack

With any luck.

Simon

@kalina Me too, hence why there's a picture of me with an elephant g-string on the Internet.

Adnan

Has anybody seen that dude @Griffin?

Scott Pack

18:30

@Simon Wut?

Simon

@ScottPack Nothing.

ManishEarth

@Adnan Nope, not recently

Simon

@Adnan On Saturday or Sunday, he was here briefly.

Adnan

@Simon Oh, okay. Good. I was a bit worried about him. I was gonna ask @Manish to super-ping him

David Freitag

@Adnan super ping?

Adnan

18:33

@DavidFreitag I think it a chat ping that transcends all regular ping restrictions.

Like your activity on the chat, site, or even the fact that you ever visit certain chat room.

David Freitag

@Adnan so like a bat signal?

Adnan

@DavidFreitag Pretty much yes.

Simon

@DavidFreitag Exactly like a bat signal.

Nerd.

Adnan

It was invented by the SE team as a way to summon @Thomas.

David Freitag

It should transcend all physical limitations. Thump him over the head a few times

ManishEarth

18:35

it lets moderators segfault your brain so you immediately come running

Adnan

Luckily we haven't needed for that yet.

David Freitag

@ManishEarth Ah, i hate segfaults..

ManishEarth

What happens if I segfault Thomas?

Let's try

David Freitag

@ManishEarth The internets will die!

ManishEarth

@thomaspornin xkcd.com/371

There, done

David Freitag

18:37

hears sirens blaring

ManishEarth

The internets seems to still work

Hmm, sec.se seems unperturbed

Though I don't see Thomas onli..AAAH HE'S AT MY DOOR RUN!!!!

Simon

It loaded 1 second slower for me, I think it's starting.

ManishEarth

@DavidFreitag This may be a good time to say "Good news everyone!"

Simon

I suck this afternoon.

Scott Pack

:%s/ this afternoon\././

ManishEarth

18:40

There seem to be multiple csrf questions today

Adnan

@DavidFreitag Duuuuuuuude! I've just took your advice and tried that lube you recommended. WTF happened to my penis?!!

David Freitag

Good news everyone, the internets is indeed fine! As it turns out, @ThomasPornin has segfault protection built-in. He detected the attack and traced it back to @ManishEarth.

ManishEarth

ALL MINE

David Freitag

@Adnan numb as a stump right?

Just remember, apply beforehand, otherwise she will be just as numb as you.

Adnan

@DavidFreitag I can't feel a thing!!! NOOOO!!!

SHE IS!!!!

David Freitag

18:41

@Adnan The feeling will come back, i promise

Adnan

Now my penis is like a tranquilizer gun.

@David Great! Now everybody here hates you!

ManishEarth

@DavidFreitag The Bear! He comes! The center cannot hold it is too late!

David Freitag

@Adnan Are you upset that i inadvertently made your penis numb?

Adnan

@David How long does it take to return to normal?

David Freitag

@Adnan depends on how much you used... i would expect less than 5 minutes or so you start to get feeling back

You probably won't have full sensitivity for a half hour or so though

Adnan

18:44

@DavidFreitag I used the same amount I usually use with a normal lube

Rory Alsop

@Kalina I had already employed people before you were born... :-)

Adnan

Oh no! It feels like mixing the dentist appointment with the urologist.

David Freitag

@Adnan That doesn't mean much to me... RTFM, man!

Rory Alsop

@Simon what does that mean?

Simon

@RoryAlsop Age/Sex/Location

ManishEarth

18:46

Oy, guys, a reminder

22 hours ago, by AviD

Just... keep it in good taste, okay boys?

Simon

Haha.

David Freitag

@ManishEarth I'm trying! I promise.

Adnan

sigh

David Freitag

@Adnan The stuff i use says to use a small amount, rub it in like lotion, then use it like you normally would.

Rory Alsop

@ScottPack Hadn't looked at mine before...that's just people coming to look at the profile, right?

@Simon ahhh - when I was dating there wasn't an internet, so we used whole words

Simon

18:49

@RoryAlsop It was probably better that way.

Rory Alsop

@Gilles that's true actually. A bit of mild banter, but generally it's focused discussion on the topics up the top right

Scott Pack

@RoryAlsop Affirmative.

Rory Alsop

@RoryMcCune moving would be brilliant if it wasn't for the lawyers

(can you tell I'm slowly moving through the transcript:-)

Simon

Not at all.

Scott Pack

@RoryAlsop I'm slowly working through the 800-53 control catalog. CA-01 baby.

Rory Alsop

18:53

@ManishEarth And as a fairly public person myself, anyone could get my info from Companies House, or figure it out from my Ingress tracks, or any number of thiings

@ScottPack hahahaha - you win

David Freitag

I pretty much told the world where i live, go to school, and work in my profile. I'm a very private person.

Rory Alsop

@ManishEarth why, what happened

David Freitag

He segfaulted @Thomas

ManishEarth

@RoryAlsop I got mauled by ThomasPornin

Rory Alsop

@ManishEarth hahahahahaha - okay

Thomas Pornin

18:55

@ManishEarth Uh ? I did not notice.

ManishEarth

18 mins ago, by ManishEarth

@thomaspornin http://xkcd.com/371/

^ that was a superping

15 mins ago, by David Freitag

Good news everyone, the internets is indeed fine! As it turns out, @ThomasPornin has segfault protection built-in. He detected the attack and traced it back to @ManishEarth.

Scott Pack

@RoryAlsop I wouldn't say that exactly

ManishEarth

@RoryAlsop Also, David's avatar is Professor Farnsworth.

David Freitag

@ManishEarth Is the link to that xkcd important? Or just arbitrary?

ManishEarth

well, it's segfault related. I thought that if I was going to ping the bear, might as well ping him with something

Rory Alsop

18:56

Oh - this will be the most fun gig ever:

David Freitag

@ManishEarth ah

Rory McCune

@RoryAlsop yes.. yes it would. The mortgage people were actually very helpful, it's just the law piece that's stressing us out...

David Freitag

Mmm I've been quite obsessed with this song lately. Not sure why.

►

Rory Alsop

@DavidFreitag I LOVE the start of that song!

David Freitag

@RoryAlsop i... just... can't get enough of it...

Rory Alsop

19:05

Can't go wrong with Lacuna

David Freitag

It pisses me off that google all access says this song isn't available in your region though. Makes me want to wring someone at Google's neck.

Simon

@DavidFreitag That's what they usually say about me.

David Freitag

@Simon Yes, but the voices in your head don't count I'm afraid.

Simon

@DavidFreitag They do.

Simon

19:26

REALLY?

Even @ScottPack is reviewing first posts today?

David Freitag

You'll just have to be faster next time.

Simon

Sigh.

David Freitag

19:39

Ohman. Only 14 SQL errors left. I might just have to go get a six pack when I'm done.

Scott Pack

@Simon What's up sweetness?

Simon

@ScottPack I wanna pass Terry :(

Scott Pack

I'll bet you would.

Simon

19:55

I'd do a lot of stuff these days.

Rory Alsop

I can't see an on-topic question here:

1

Q: TextSecure protocol

Is anyone aware of an analysis of the TextSecure protocol? https://whispersystems.org/blog/simplifying-otr-deniability/ https://github.com/WhisperSystems/TextSecure/wiki/Protocol It is a simplification of the OTR protocol. Instead of signing the ephemeral key, it uses DH over an ephemeral key ...

Anyone, anyone, Bueller?

Scott Pack

Xander

@RoryAlsop To me, it looks similar to that question that ended up getting us the DMCA takedown notice for one of the answers.

@RoryAlsop But I think it might be more on-topic in Crypto than here.

Lucas Kauffman

20:30

@kalina depends what clubs you go to for one, slut is also to be defined and I find you to be a bit judgemental. But hey that's just my opinion :)

Simon

Lucas' coming in to drop da bomb.

Lucas Kauffman

@kalina and @Adnan is quite correct, I have a good relationship and I'm quite happy in regards to my job

@Adnan Succesful is to be determined in the coming years ;)

just visited the Eiffel tower, the restaurant is a tad too expensive

Scott Pack

"Tad"?

Lucas Kauffman

@ScottPack To a small degree; somewhat: acting a tad silly; a tad uncomfortable

@ScottPack 310 Euro per person

for the basic menu

Simon

Crazy Frenchies.

Scott Pack

20:39

@LucasKauffman Tad.

Simon

And he found his new favorite word.

I do agree that it's a good favorite word.

Scott Pack

Where I come from we use the word "skosch".

Rory McCune

@LucasKauffman that is a tad pricey

Gilles

@LucasKauffman is that 1€/m/person?

Lucas Kauffman

@Gilles m ?

Gilles

20:47

Metre

The metre (International spelling as used by the International Bureau of Weights and Measures) or meter (American spelling), (SI unit symbol: m; SI dimension symbol: L), is the fundamental unit of length in the International System of Units (SI). Originally intended to be one ten-millionth of the distance from the Earth's equator to the North Pole (at sea level), its definition has been periodically refined to reflect growing knowledge of metrology. Since 1983, it has been defined as "the length of the path travelled by light in vacuum during a time interval of of a second." Histor...

Lucas Kauffman

@Gilles 12 euro discount

Gilles

@LucasKauffman actually, no, there's no restaurant on the third floor, is there?

Lucas Kauffman

@Gilles only the first and the second

Thomas Pornin

@Gilles On the third floor, there is a radio emitter. If you crank it to full power you might be able to roast one or two pigeons, but I don't think that counts as restaurant.

2

Lucas Kauffman

there is a cheaper one on the first floor which only has sight on the south side (150e per person) and then you have the Jules Verne which has view on 3 sides and which is significantly more expensive

I must say that I really enjoy La Defense

it's a nice business center

Simon

21:58

@ScottPack Do you understand what these Europeans are babbling about?

makerofthings7

22:41

Is it on topic to ask how a Drivers license can be used to verify a checking account ?

Amazon is prompting me for this info

Scott Pack

@Simon Don't really care. It sounds French.

Simon

23:00

@ScottPack I still don't understand how some people can speak that language.

Gilles

23:21

@e-sushi The close reason is

> Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.

crypto.stackexchange.com/questions/10848/… isn't asking us to break the system, it clearly identifies a specific problem and the asker looks capable of understanding the answer

so the close reason would not apply

e-sushi

@Gilles First up - hi there. (first time I'm seeing the chat, this is nice!)

@Gilles The problem I saw is that OP didn't even know HEX-format from raw bytes... so I suspected a script-kid asking.

Gilles

23:42

@e-sushi no, it's homework, the asker is open about that

e-sushi

@gilles Didn't see the "homework" indication, just that "someone" asked OP to crack passwords. Oh well, In case of doubt - it's always better to have a question too much at SE than a lack of questions. ;)

Transcript for