« first day (271 days earlier)      last day (4607 days later) » 

1:29 AM
Can you clarify what you mean by "one solid bonus"? And what was "moxie's point" about problems with DNSSEC?
(I'm just getting around to reading posts from when I was away....)
 
1:51 AM
@nealmcb one solid bonus of convergence versus the simple ca system; Moxie pointed out that we can expect China to mess with keys in .cn at will.
 
@JeffFerland Ahh - you didn't mention any specifics like "convergence" - it helps to know that's what you're comparing DNSSEC to
If folks don't trust .cn, they could just choose another tld
but at least they don't have to trust them all....
 
2:18 AM
@nealmcb other possible downsides:
 
@JeffFerland Hmmm? This is a downside of the lack of DNSSEC, not of using it....
 
@nealmcb Hacking the registrar would compromise DNSSEC for their clients...
@nealmcb Well, in fairness that was a bad article to link to... but in that particular case, it turned out the compromise was the registrar, so the records fed to the TLD were changed and would have been signed.
 
@JeffFerland But again, the essence of the win for DNSSEC is that you only have to trust one registrar, not all of them.
And couldn't the same "convergence" sorts of approaches work for keys in dnssec?
 
@nealmcb Very true, and I do think is a great thing. Convergence should be another layer on top of that for those who feel they need to confirm with others.
 
 
11 hours later…
1:49 PM
Just occurred to me, should this get migrated here?
4
A: hackers have added content to my PHP files

IncognitoThe exploit is based around a POST request with a variable prgetxr being set. If it isn't set (and likely, in normal use of the site, it won't be) it it cycles through that IP hash-map mynetsxx and if it finds that the requesting IP is in the network that matches this (to understand "network" yo...

 
2:00 PM
@Incognito It could, however it already has answers, one of which is accepted. That usually makes it slightly more effort to migrate.
I like your answer to it anyway:-)
@JeffFerland - if you can do a post on this one for Friday, I think it has good mileage across various interest groups:
2
A: Vote for your QoTW #10

Jeff FerlandCarrying out a professional IT audit procedure Also like this one. I can pen a good "high level goals, then low-level needs to match them" paper.

My answer there was a wee bit flippant - as there is an awful lot of information a newbie might need in this field, but it is a valid question
 
@RoryAlsop Thanks. I'm not sure if this site's suitable for specific exploits like that or if we're after general Qs here.
 
2:26 PM
it can be - I think general consensus is that if we can provide learning that will be of use, then it is on topic. That q is quite localised, however your answer to it is very well laid out and informative
 
3:09 PM
@RoryAlsop On it.
 
3:30 PM
@JeffFerland :-)
 
On the project list for the day: CYA email.
 
3:54 PM
LOL.
In other news, our referrer stats keep improving: getting more from reddit, slashdot and twitter and less from internal
also, what happened yesterday. Greatest number of new visits ever!
and 2nd greatest number of new users
 
nice
 
interesting post
1
Q: Sending encrypted data vs sending data in encrypted tunnel

TerryI am looking at different VPN protocol. [1] L2TP does not provide encryption so require IPSec to encrypt the data [2] IPSec tunnel provide encryption to the tunnel What is the difference in terms of the packet that get sent through the link? Would the packets look similar? Thanks so much.

 
4:19 PM
@RoryAlsop It'd be really nice to know the top few links for any given day... I have no clue where on Reddit or Slashdot we'd be mentioned except where I've stuck links myself.
 
4:35 PM
I decided on my Shmoocon presentation proposal. I took the list of starred comments in chat and kept all the ones that I can make a slide on. It's kind of like the random thesis generator, but way more fun for me.
 
 
2 hours later…
6:27 PM
It seems that, according to FedEx, the shortest path from Memphis (Tennessee) to Québec City (Québec) goes through Calgary (Alberta). Google Maps challenges this assertion.
 
@ThomasPornin Distribution hub? Customs?
 
Possibly.
Although I have already seen FedEx packages follow the more logical Memphis -> Montreal -> Québec path.
 
7:14 PM
@JeffFerland It doesn't give mods that sort of granularity, unfortunately
 
 
2 hours later…
8:49 PM
Mod elections are underway - security.stackexchange.com/election
2
Get your nominations and votes in
 
@RoryAlsop I hope you're nominating yourself, yes?
 
So is this to replace our current crop or to augment?
 
I have nominated mysefl, yes, and this is to elect proper mods. We were just pro-tem mods asked to do it as we appeared to be active from the start
 
That's what I thought.
 
In the nomination phase, any community member in good standing with more than 300 reputation may nominate themselves to be a community moderator.

Nominees are required to construct a small, freely editable introduction to describe why they might make a good community moderator. Comments are active during the length of the nomination phase – please comment freely, particularly if there is any way a nominee introduction can be improved or refined to be more clear.

All nominees are displayed in most recently nominated first order.
there's the blurb
 
8:58 PM
Have you heard if Avi and Graham are going to be putting themselves up?
 
Dunno - the thing only just opened
 
What about the hive mind?
 
it's quantum
we could know, but not if we said it out loud
:-)
 
9:43 PM
user image
3
 
10:02 PM
How many mods are elected?
 
@HendrikBrummermann 3 according to the page thing
 
Ah, the there box a box at the far bottom.
@Ninefingers Thanks
 
11:02 PM
The procedures very clearly spell out how SO focused things are.
"After 8 days, the top 30 nominees, ordered by reputation, advance to the primary phase. "
 
@ScottPack yep, however: "if there are 10 candidates or less, we skip directly to the election phase."
 
hahahaha - although we already have more than 3 which seems more than expected for such a small site
 
So, I saw that some dude added me on G+. The name looked completely unfamiliar, but luckily you linked off your sec.se account, @Ninefingers.
I greatly enjoy your bragging rights :)
@RoryAlsop Tell me about it. I was considering running, but after seeing the line up I'm not sure I want to muddy the pool.
 
@ScottPack If you would like to, I see no reason why you shouldn't. In your nomination blurb you just state the reasons why you would be a good mod, and let the community decide.
There is an app which should help people see what sort of activity people have had - it isn't ready yet, II have asked the owner if he can update it.
0
Q: Information on the moderator candidates

Rory AlsopYi Jiang has put together a nice site that use the Stack Overflow API to display information on the moderator candidates. Click here to see all the information. The information presented is: The nominees election Answers/Questions on the main site and it's meta Up-vote/down-vote ratio Average...

 
@ScottPack well, I couldn't think of anything sensible I could actually "brag" about, so I went for that instead.
 
11:11 PM
@RoryAlsop I remember that for the SF election. Great stuff.
 
once it has sec.SE on its list I'll highlight it
 
Well this is sad. A high school girl was hit by a bus while on a campus visit.
 
night all - sleepy teim
 
Sweet dreams
 
I agree with @RoryAlsop - time to go to sleep.
 

« first day (271 days earlier)      last day (4607 days later) »