The DMZ

9:08 AM

Morning All

Some quality weasel words here kb.vmware.com/selfservice/microsites/…

"err yes we support weak SSL ciphers but, that's not our problem honest"

9:36 AM

@tylerl "And nobody will make you write PHP code." Definitely a huge plus to the googlers :-p

Also, I find it amusing how the top two starred comments at the mo. are light-heartedly abusing @RoryAlsop

@Tinned_Tuna this may be because I'm one of the 3 people (that I know of) who can pin stuff and lightheartedly abusing Mr Alsop is a hobby :op

Lighty

Morning

morning

Morning

Each time I see TOTP I still read it at first as "Top Of The Pops" :)

10:11 AM

@TildalWave that's what it is, obviously :-)

@RоryMcCune Heh

@RoryAlsop Or, considering some of the questions here asking about it, it could also mean "Time Off The Pill"

@RоryMcCune Any blue people and @ScottPack and you can pin messages onto the star wall. So your ability to pin is not so scary as, say, that @AJHenderson can pin them too :)

@TildalWave so, if I hold my breath for long enough, I'll be allowed to pin? Cool!

2

@Tinned_Tuna you nailed it :)

Xander

Happy birthday security.SE!!! 4 years ago today, this site was launched into private beta.

11

Q: What is the difference between antivirus and firewalls

10:31 AM

2

I need a brief explanation about the differences between antiviruses and firewalls

this one needs protection please

(and two accounts /posts nuked)

-2

Q: Why is Connrat's YouTube channel so bad?

Why is Connrat's YouTube channel so bad? [Channel] why, just why? I don't even..

internet

@RoryAlsop You here? What's two nukes among friends? :)

Saladin

1

Q: How do I predict future root cause analysis in the presence of double unknowns (unk-unks)?

Using following concept is it possible to define or layout future risk or in security terms future root-causes that are critical for organization operations and businesses. Those concepts are:- 4 entities known bad known good unknown good unknown bad zachman framework system conce...

risk-management risk-analysis

So, I'm new to reviewing, and I'm looking at a question in the First Post queue. If a question is not on-topic (i.e. requesting support for a specific product), do I simply flag it? Or is some other action appropriate?

@Tinned_Tuna Close as off-topic / belongs on a different site / Super User

if that applies of course

if it doesn't then just off-topic / not within scope

@TildalWave I don't see that under "flag", am I looking in the wrong place?

@Saladin That's just a RFC question ... not what we do here. OP should specify a specific question that can be addressed in answers of reasonable length. We don't "discuss" things here.

@Tinned_Tuna use the close button

it's a big red button top right

10:42 AM

@TildalWave I might not have earned the right to close questions yet, I've only got ~500 rep. I think the closest "right action" in this case would be a down-vote and maybe a comment.

or flag for moderator attention

@Tinned_Tuna vote, and a flag then to close ... not the mod attention flag but a flag that suggests to the system that the question should be placed in an appropriate review queue

Saladin

@TildalWave what about constructive feedback to new theme or ideas? this site is not fit to provide such....

@Saladin it's too broad

or "unclear what you're asking"

same thing here ... doesn't identify a specific question

Saladin

@TildalWave did you saw the prezi preso?

@Saladin No, I don't have to, because I read the question and I can't see what the question is. We don't do thesis analysis or alike here, we're a Q&A, simple as.

10:46 AM

@TildalWave The question in at hand is security.stackexchange.com/q/72714/7954 I was going to flag it "closed for another reason, off topic". Does that sound right to you?

@Tinned_Tuna I guess, I forgot what you have available without access to vote to close ... I voted as "off topic / product recommendation"

anyway, it has 3 votes to close already, it'll be closed pretty soon anyway

@TildalWave thanks :-)

ManishEarth

Uh, so I've self-assigned the task of integrating simple cert validation in Servo. Yay me

I'll probably start of with a very simple thing that checks against a cert whitelist (yay security) and then switch to pkix/certverifier or NSS. (Any other recommendations?)

@ManishEarth how high's your pain threshold?

ManishEarth

@Tinned_Tuna I dunno :p

why?

I'm integrating an existing library

11:09 AM

@TildalWave thanks for those - I nuked 'em :-)

@RoryAlsop Yey! Thanks! Since you're spending nukes, could you also obliterate this one security.stackexchange.com/a/72696/20074 ? It seems it could be a related account.

Both threads started with "What is the difference between ..." and the answers are/were just some gibberish ... could be some script kiddie that just discovered how to script POST requests

@TildalWave yes - how annoying

thanks for calling them out

my modhammer is warming up nicely today

no problem ;) where IPs related?

Q: HTTP attack taking down PHP-FPM

@TildalWave not sure - once you destroy spammers, it takes out a lot of info. CM's can see it, but mods can't

Anyone reckon this now has enough info to be reopened?

1

Someone started attacking my site a few minutes ago and its caused PHP-FPM to max out all cores (4) on my vps and NGINX is now serving 502 to all users. I'm seeing a bunch of these requests with tons of different agents xx.xxx.xx.xx - - [10/Nov/2014:5:14:35 -0500] "POST / HTTP/1.1" 502 574 "...

php denial-of-service wordpress nginx

@RoryAlsop Do you know of any good example thread on Video Production (or elsewhere) that uses embeded YouTube videos? I wanna answer one of the meta questions in space to enable embeded videos and I think it would be useful, but am looking now for one or two good examples of how that works on SE

11:24 AM

@TildalWave Definitely a few over on Music.SE. Hang on

@RoryAlsop Not really. I voted to leave closed. He doesn't add any debug info that we could use or changes in request rate. He just adds that "something happened" and that "he hasn't a clue how to extract relevant info"

It could as well be SQLi on one of his pages that others are trying to open and causing the clients to process some JS that POSTs invalid requests and his server trying too hard to make sense of them.

It's still not clear that it's a DDoS and while it obviously is a DoS, the cause of it can't be established by info he posted.

Also - OVH. That's like what you need to be protected from, not where you host your server and aren't protected from attacks from within the OVH network.

That network hosts like 3/4 of all illegal requests I get on my sites. It's usually the first to get its own blacklist policy.

CodesInChaos

12:17 PM

4

Q: Trusting new IT personnel

I work in a small software house. We are all developers and we do servers/network management required for our software (many servers per customer). We are expanding with more customers; and the overhead of server management is increasing and now we plan to hire server(s) administrator. Normall...

hiring-process new-hires

CodesInChaos

12:29 PM

@RоryMcCune As long as you don't prioritize them over stronger suites, I wouldn't care too much.

@CodesInChaos indeed unlikely to be a real-world problem, but to me they're trying to get out of the obvious fix of "disable support for weak ciphers on the server"

@CodesInChaos eh. I answered that

12:57 PM

> make sure they have the access they need and no more

well that rules out the beer fridge then :)

Note to self: Make sure that the company policy includes refilling the beer fridge and locking it for security purposes. Conveniently forget to include a key issuing and revocation policy as old employees leave and new ones join the corporation.

1:15 PM

All I see in here is a bunch of donuts.

@Simon any particular reason, or just general Doughnutry?

@RоryMcCune Yeah, it just struck me.

@Simon but are doughnuts good or bad?

@RоryMcCune Well you see, that's the thing, they're vicious. Tasty as nobs but if you eat too much, you'll become as fat as everyone's mom on the Internet.

@Simon hmm so you're saying the DMZ is good in small doses but don't be on here too much or you'll end up a lardass

raz

1:20 PM

@Simon Your mom's as fast as the internet

@TildalWave Clearly. One needs careful use of alcohol to ensure that we have a ballmer peak ;p

@RоryMcCune What do you think happened to @AviD? He just became too fat to even press the power button on his PC.

And I was very carefully trying not to say principle of least privilege;p

@raz Hey, thanks!

3

1:23 PM

@RоryMcCune @Simon - Doughnuts are bad mmkay: metro.co.uk/2014/11/10/…

"... after a doughnut giveaway turned sour."

Genius.

However, I think I'm gonna write an email to this person to let him know that he misspelled "donut".

@RoryAlsop heh that's those livi northers, uncivilised

@RоryMcCune that's exactly what I said to the team here

(one of them came in with a box of them yesterday - he took that train :-)

What a train tooker.

raz

@Simon No problem! I love a good morning insult.

1:29 PM

@CodesInChaos @JourneymanGeek - I had to answer as well

2:08 PM

@JourneymanGeek We don't have the Ballmer Peak in the UK. It's called the Turing Peak and it's fueled by correctly-brewed tea.

@Tinned_Tuna: Its not just for programming though

There's a reason your tanks have a boiler for tea built in