The DMZ

12:00 AM

@ScottPack wanna take this one? Difference between Trusted CA (root) and self-signed... I'm short for words to describe it LOL

Ladadadada

12:50 AM

Slightly tempted to think this is a troll: security.stackexchange.com/questions/36169/…

Or a victim of a troll.

HamZa DzCyberDeV

Guys, I found a "sophisticated" paypal scamming website, where can I report it ?

Ladadadada

phishtank.com

Once you have, paste the phishtank verify URL here and I'll verify it.

HamZa DzCyberDeV

@Ladadadada argh need to sign-up

TildalWave

blimey I went to write an answer to that question up ... double awkward because I drank a few beers too many and have problems expressing myself for basic stuff, let alone describe how CAs are supposedly more trusted LOL

Ladadadada

Also with Google: google.com/safebrowsing/report_phish

TildalWave

12:57 AM

@HamZaDzCyberDeV wow link please

HamZa DzCyberDeV

@Ladadadada aight thanks

Ladadadada

Just thought I'd search for more. Apparently the Netcraft one has the best record. toolbar.netcraft.com/report_url

HamZa DzCyberDeV

Actually I'm searching the (facebook) group of the link, but now I found several websites which has the same template, so it's not sophisticated at all ...
http://paypallogin.funpic.org/paypal/

Ladadadada

So many of the phishing pages I see on Phishtank are targeting Paypal.

TildalWave

what's the intended difference between rigorously and vigorously? Is it OK to say CA's test EV applicants more rigorously?? Or is that beer talk and I'm spontaneously slightly aggressive? LOLZ

HamZa DzCyberDeV

1:02 AM

@Ladadadada Because paypal is easy, you only need username+password

Ladadadada

I'm considering switching my efforts to the Netcraft one. The prizes are better. :-)

TildalWave

@HamZaDzCyberDeV Chrome says it's a phishing site already

HamZa DzCyberDeV

Well the links are here, every post with "Detected ?" is a phishing paypal site ...
https://www.facebook.com/groups/dzspam/

TildalWave

@Ladadadada you're supposed to speak English English ... that q of mine up... rigorously or vigorously? or it doesn't matter?

Ladadadada

Vigorously means "with energy". Rigorously means "thoroughly and with attention to detail". I would go with rigorously in this case.

►

TildalWave

1:11 AM

@Ladadadada cool thanks

@Ladadadada hehehe goes down well with my beer cheers!

HamZa DzCyberDeV

@TildalWave ah finally found it
http://www.samlik.com

D3C4FF

'scarnin on?

TildalWave

@HamZaDzCyberDeV hosted on ThePlanet.com Internet Services, Inc. but no whois info for the website ... Google never crawled it,... must be completely new

HamZa DzCyberDeV

@TildalWave Yeah, but I thing the template is the same ...

TildalWave

@HamZaDzCyberDeV it looks like login scrapper, the other links are legit just the login is posting to their own address

HamZa DzCyberDeV

1:22 AM

tried to mess around, and I found out that the check procedure, if you fill it, you'll get a link like this file.php?close=looooooooong code
Where longcode = base64_encode(yourinformation + your ip) ...

coding_corgi

@all Yo yo yo!

HamZa DzCyberDeV

@coding_corgi hello

coding_corgi

@HamZaDzCyberDeV Yo!

Is anyone here really good at networking?

HamZa DzCyberDeV

<<< NO

coding_corgi

@HamZaDzCyberDeV Kind of good?

HamZa DzCyberDeV

1:36 AM

@coding_corgi What's the question ?
I don't know what's "good" for you ...

coding_corgi

@HamZaDzCyberDeV Better than me!

TildalWave

I can make a CAT4 cable out of CAT5 one :)

HamZa DzCyberDeV

@TildalWave take out 6 cables ? xD

coding_corgi

@HamZaDzCyberDeV I would like to know what 'method' I should use for a ping to an address and a port, so something like: 192.168.1.1:80, what would something like that be called?

@TildalWave Have no idea what that is....

TildalWave

@HamZaDzCyberDeV or throw one cat out of 5 out

HamZa DzCyberDeV

1:39 AM

You likely have CAT5 or CAT5e ...
Or wireless lol

@coding_corgi You can't "ping" a port, you'll have to scan it ...

coding_corgi

@HamZaDzCyberDeV You mean an ethernet cable?

TildalWave

@coding_corgi just an internal networking joke, similar to this one goes to 11

i had a few beers too many, don't mind me I'll sit at the corner

2

HamZa DzCyberDeV

@coding_corgi yeah ...

coding_corgi

@HamZaDzCyberDeV POJO! (let's apply that to networking just for now) ;)

HamZa DzCyberDeV

@coding_corgi use a network scanning tool to know which ports are open
there is nmap

coding_corgi

1:42 AM

@HamZaDzCyberDeV Dude, I know about that, but what I am trying to see if a port is connectable, like a socket, but is there another way?

HamZa DzCyberDeV

@coding_corgi What do you mean "connectable" ?

coding_corgi

@HamZaDzCyberDeV You either connect or you don't connect, right?

TildalWave

you mean how could you establish what service is listening on some port? nmap can do that too with proper flags

coding_corgi

@TildalWave I would like to know what a kind of method like that would be NAMED, just the name, that's all I am asking for, does something like that exist?

D3C4FF

@coding_corgi Use putty, enter IP and port number, select RAW mode. AWay you go

HamZa DzCyberDeV

1:45 AM

@coding_corgi if the port is open then you're connectable IMO
The problem is, if you're allowed to, there wil be an authentication ...

coding_corgi

@HamZaDzCyberDeV Like?

HamZa DzCyberDeV

I've though
nmap -p 80 127.0.0.1
:p

@coding_corgi SSH ?

TildalWave

@coding_corgi ICMP scan?

coding_corgi

@TildalWave I am thinking of something like: ping 192.168.1.1:80

@TildalWave Just a quick boolean, just like ICMP

HamZa DzCyberDeV

@coding_corgi you would do that with:
nmap -p 80 192.168.1.1

coding_corgi

1:48 AM

@HamZaDzCyberDeV Please forget about nmap for the moment, please....

HamZa DzCyberDeV

@coding_corgi also look at this

92

Q: Ping a Specific Port

Just a quick sanity check here. Can you ping a specific port of a machine, and if so, can you provide an example? I'm looking for something like ping ip address portNum.

ping

"You can't ping ports, as Ping is using ICMP which doesn't have the concept of ports"

coding_corgi

@HamZaDzCyberDeV I am trying to do this programmatically, with Java, I will be using raw raw raw stuff

TildalWave

@coding_corgi so SOCKS?

coding_corgi

@TildalWave I guess...

HamZa DzCyberDeV

Stackoverfloooooow
http://stackoverflow.com/questions/8871191/

coding_corgi

1:51 AM

@TildalWave But my program needs: need for speed

Something very important...

TildalWave

@coding_corgi has to be Java? LOL

coding_corgi

@TildalWave Yes, JAWA!!!!

HamZa DzCyberDeV

Something that needs speed needs some raw assembly bro ...

TildalWave

Honestly, I have no idea what kind of socket support would you have in Java, since it's supposed to be cross-platform and most of these goodies are platform dependent

D3C4FF

Lol Java /= speed

Just pipe your commands back to Nmap

:D

coding_corgi

1:53 AM

@HamZaDzCyberDeV Please get away from me, ASM is currently haunting me...

D3C4FF

(You're currently on SEC.se, Nmap is the default answer to all networking questions)

3

coding_corgi

@D3C4FF No thanks, so I just use Java sockets?

HamZa DzCyberDeV

final Socket sock = new Socket();
final int timeOut = (int)TimeUnit.SECONDS.toMillis(5); // 5 sec wait period
sock.connect(new InetSocketAddress("host", 80), timeOut);

TildalWave

@coding_corgi docs.oracle.com/javase/7/docs/api/java/net/Socket.html

HamZa DzCyberDeV

My google-FU is unbeatable :D

coding_corgi

1:55 AM

@HamZaDzCyberDeV WTF?! WTF?! WTF?! Are you kidding me?! I am going to give myself a really BIG facepalm, the connect void has a time out?!

@HamZaDzCyberDeV What is the VERY min. that will take a sock to connect?

HamZa DzCyberDeV

@coding_corgi Welcome to StackOverflow :P

@coding_corgi I've no idea, I'm a php dev...

TildalWave

question is, how low level is this supposed to be ... probably not at all, not in Java... but you'd need fine grain control to control these sockets more precisely ... and gowd only knows what timeouts you'll be dealing here on dead hosts, so prolly best to initialize many threads in parallel (as many as the host will handle)

D3C4FF

@coding_corgi Did you read @TildalWave reccomendation? docs.oracle.com/javase/7/docs/api/java/net/Socket.html

TildalWave

@D3C4FF My recommendation?? My recommendation would be - don't do this in Java. It's just not low level enough and you don't want some platform-agnostic API calls with this

coding_corgi

@D3C4FF Yes

TildalWave

1:59 AM

@ManishEarth you've ever done sockets in Java?

ManishEarth

@TildalWave hm? nope

HamZa DzCyberDeV

@TildalWave I think that "speed" isn't really a matter here ... I mean it won't take 1mn to connect xD

coding_corgi

@HamZaDzCyberDeV Speed matters, will it take 3ms or 300ms?

HamZa DzCyberDeV

@coding_corgi lol like I told you I'm a php developer ...

coding_corgi

@HamZaDzCyberDeV I just saying usually, for all runtimes, etc.

TildalWave

2:02 AM

@coding_corgi you can have live hosts on some IP:port that won't respond in 300ms but might in 3s ... so how will you know they are live or dead if you don't know their TTL?

if you want speed with sockets, you'll have to parallelize this somehow up till as many concurrent connections as your host will handle... then you can talk about speed, but not per IP per port

coding_corgi

@TildalWave TTL?

TildalWave

time to live

coding_corgi

@TildalWave The socket?

TildalWave

@coding_corgi well kinda, dunno how that's actually called with sockets, it's been a while since my theory years LOL... but your sink (target) might be saturated and you won't know then with your ping if it's alive or dead... it just won't respond if you keep your timeout too short

so you need to listen for long enough

of course... question is, what's long enough

if you don't know, then your timeout will be quite long... meaning you'll be slow... and the only way to speed things up with scanning is then to parallelize such requests

coding_corgi

@TildalWave parallelize?

TildalWave

2:09 AM

@coding_corgi you don't wait for the first request's response before moving to make another one... so you set your sockets into blocking mode and read responses in separate threads

D3C4FF

@TildalWave Java. Now 100% Endorsed by @TildalWave For Speed and Efficiency!

2

HamZa DzCyberDeV

in sec.SE "parallelize" means spamming the host with several requests :p

coding_corgi

@TildalWave Ok, could you give me an example

?

TildalWave

@coding_corgi for Java? No idea, but I can Google ... LOL ... actually, that link I posted earlier mentions somewhere illegal blocking mode exception, indicating blocking and non-blocking modes are supported with socket(). So you should be able to do this without threads, just set open sockets to blocking (not waiting) and then somehow (no idea for Java) handle responses in socket() events (whichever those are)

@D3C4FF Shut it! :)) j/k

Honestly, this is totally something you'd want to handle in C, not in Java... it might have everything you need, but if it does - consider yourself lucky. I wouldn't bet on it tho

coding_corgi

@TildalWave ok, thanks! see ya!

TildalWave

2:19 AM

@coding_corgi sure, take care ;)

coding_corgi

@TildalWave Bye!

TildalWave

I think I sobered up ... Java does that to people

2

right, I'm opening another can of lager

D3C4FF

Haha

later @TildalWave

TildalWave

@D3C4FF I'll be unconscious later but yeah... see you ;) t/c

HamZa DzCyberDeV

lol

Terry Chia

3:25 AM

@HamZaDzCyberDeV Regarding your comment here: security.stackexchange.com/questions/36168/…

See @Scott's answer: security.stackexchange.com/questions/16918/…

Terry Chia

3:57 AM

I vote the comments on this answer to be the most patient ever.

124

A: Why use a database instead of just saving your data to disk?

You can query data in a database (ask it questions). You can look up data from a database relatively rapidly. You can relate data from two different tables together using JOINs. You can create meaningful reports from data in a database. Your data has a built-in structure to it. Information of a ...

If it was me I'd have thrown the person out of the window a long time ago.

D3C4FF

Can anyone explain why my ADSL2+ line just peaked to 20 MegaBYTES per second... for about 5 minutes?!?!!?

Since i thought the max speed over ADSL2+ was 24 MegaBITS???

Terry Chia

@D3C4FF Unicorns.

3

D3C4FF

@TerryChia INSUFFICIENT RESPONSE RECEIVED

Terry Chia

4:21 AM

@D3C4FF Two unicorns.

3

D3C4FF

@TerryChia Error: RESPONSE CONTAINS MYTHICAL BEAST

Terry Chia

6:13 AM

-6

Q: What's my dogs name?

I suddenly can't get any browsers to Facebook. It says I might need to configure my network to Facebook. I asked a friend to go to my Facebook from their PC and they had no problem. This just started. I am using a public internet connection from my hotel. Help?

network

THIS IS HILARIOUS!

AviD

@TerryChia fantastic. Upvoted, and hope it goes supercollider.

@TerryChia agree, but I add @TildalWave's previous conversation to that list.

seriously @TildalWave, thats not something you see very often - a PHP coder in Java. And yes, I am using that pejoratively.

Terry Chia

@AviD shudders

@AviD True. @TildalWave would actually make a good mod.

AviD

and just throwing my 2$ in - in this case, Java's performance problems are irrelevant, compared to the network latency. Memory consumption might be an issue, but that could be tuned well enough. Actually doing this in ASM would be a very bad choice - you want the network to be abstracted.

@TerryChia sure, if he wasnt so ugly ;-)

That guy's startup probably just got a huge VC funding to develop some next generation network scanner. Now he's trying to figure out how to develop a network scanner.

I mean, the guy obviously knows very little about programming, and nothing about networking. He would be best served by being sent to wikipedia to learn the basic concepts.

Terry Chia

6:31 AM

@AviD Starred for meanness. :)

AviD

@TerryChia heh. But cmon, you know I'm right.

Terry Chia

@AviD Oh, sure.

Lucas Kauffman

@poly hadn't read that question thoroughly, didn't see he asked if there was a another sim in it

AviD

6:49 AM

@TerryChia Working in a lair does not make one a supervillian, and being a supervillian does not imply creepiness. Look at Dr.Evil vs. Austin Powers.

AND! My office is NOT a lair!

@ScottPack all the cool kids are living in the previous decade....?

Terry Chia

@AviD @Scott is probably the guy who uses tcpdump and grep.

AviD

@TerryChia @Scott ehh, why dont ya go stick to backtrack, ya queer!

Terry Chia

So I'm gonna have to compile the kernel headers for my current kernel version before compiling the wireless driver. Damn Fedora...

Lucas Kauffman

@TerryChia have you tried out mint?

Terry Chia

7:06 AM

@LucasKauffman Heh. Yes I have. But this is on the raspberry pi and it's a requirement i use fedora instead of raspbian.

Lucas Kauffman

@TerryChia aaaw :(

compiling on a pi

guess you'll be busy the coming two hours ^^

Terry Chia

@LucasKauffman :(

Terry Chia

8:29 AM

drool

Lucas Kauffman

@TerryChia nexus 4?

Terry Chia

@LucasKauffman Looks like ipad mini.

Is it christmas? I just got new toys... DISCLAIMER: this is not a fuzzfarm :-P http://t.co/lw3zP8JPQn

Tweeted by i0n1c on May 19, 2013 at 8:25 AM

Terry Chia

8:47 AM

We are getting a bunch of really crappy questions recently.

Rory Alsop

@TerryChia yes - it usually goes along with an upswing in new users and activity, but we always get this blip of really poor questions - they last until either the users that ask them stop coming back or they learn how to ask good questions...

HamZa DzCyberDeV

9:42 AM

@TerryChia Thanks !

AviD

10:24 AM

@RoryAlsop ... or we get drunk enough to not know the difference.

ManishEarth

11:10 AM

@TerryChia But..but..I forgot my dog's name!

AviD

@ManishEarth That reminds me of an old, bad joke...

why did Helen Keller's dog commit suicide...?

ManishEarth

oh i know that one :P

AviD

you would too, if your name was BLEEURGHGHEBBELEEURGH

@ManishEarth you should be ashamed.

ManishEarth

There's a plunger one as well that is really bad

AviD

11:28 AM

@ManishEarth despicable.

ManishEarth

exactly

Terry Chia

11:48 AM

@ManishEarth You should be ashamed sir!

@AviD Is it a good or bad thing that I never heard that one before?

ManishEarth

in The h Bar, 6 hours ago, by ManishEarth

-4

Q: What's my dogs name?

I suddenly can't get any browsers to Facebook. It says I might need to configure my network to Facebook. I asked a friend to go to my Facebook from their PC and they had no problem. This just started. I am using a public internet connection from my hotel. Help?

network

AviD

@TerryChia you're really better off.

Terry Chia

@AviD hahaha!

AviD

@TerryChia ebaumsworld.com/jokes/read/1030988

there are WAY too many sites dedicated to helen keller jokes. I find it highly inappropriate.

And funny.

Terry Chia

@AviD That's really sad.

AviD

11:52 AM

The worst part is that it seems I know a few that arent on any of these sites (at least, not the 2 I looked at).

Terry Chia

Well I'm happy. After 5 hours I finally figured out how to compile the driver.

Can't believe it's so simple. headdesk

ManishEarth

Is it bad that I have enough rep to vote on the SF election but not enough on Math, when I'm supposed to know more math than servers? (And this is indeed the case, I do know a lot more math than server crap)

Terry Chia

@ManishEarth Is it bad you forgot your dog's name?

ManishEarth

I don't have a dog, but yes :P

AviD

@ManishEarth arent you the mod on math?

ManishEarth

11:57 AM

What? Hell no.

Physics and Chem

AviD

@ManishEarth there's a difference? ;-)

Terry Chia

@AviD One starts with a P, the other starts with a M.

ManishEarth

While it would fit in with my plan to become the overlord of science sites on SE:

in Tavern on the Meta on Meta Stack Overflow Chat, Dec 13 '12 at 15:18, by Popular Demand

By the way, congrats on making progress in your plan to be supreme overlord of the pure science Stack Exchanges.

I don't really like the environment on math

or, for that matter, on SO

Plus math mods resign by the dozen

45

Q: Change of moderators - I resign as well

As mentioned in Zev's post, an election will be coming up for Math Stack Exchange, so I will take the opportunity to resign as well. The answers on the main site can be fascinating and enlightening, and I have always enjoyed this aspect of Math Stack Exchange. Some very strong people post excel...

discussion moderators

Terry Chia

@ManishEarth Holy crap that's drama.

ManishEarth

xactly

Terry Chia

12:09 PM

Makes me glad our community is still quite small and close by that standards.

Besides @ScottPack's face of course.

2

Rory Alsop

And the snark is fun and constructive...mostly

3

AviD

@ManishEarth damn mathematicians. Bunch of drama queens.

2

Terry Chia

Anyone here experienced enough with compiling kernel modules on linux? I need to pick your brain!

ManishEarth

@TerryChia sudo rm -rf / <name of file to compile>

Right everyone?

Terry Chia

@ManishEarth heh

I think I need @Antony!

AviD

12:24 PM

@TerryChia I am experienced in mocking kernel compiling. Will that be helpful?

Terry Chia

@AviD Sadly no. You are useless.

:)

D3C4FF

G'day all

AviD

@TerryChia is that another anti-windows rant...?

Terry Chia

@D3C4FF hello!

@AviD nah, it's more personal. :)

AviD

heh

D3C4FF

12:31 PM

@TerryChia Whats going on? :D

Terry Chia

12:43 PM

@D3C4FF Nothing much. A lazy sunday compiling wireless drivers. :P

ManishEarth

@TerryChia What's wrong with using apt-get like a normal linux use--oh right, normal linux users compile

4

Terry Chia

@ManishEarth Hahaha! I would if the damn distro just provided the driver.

ManishEarth

What's the distro?

Terry Chia

@ManishEarth Fedora 17 Remix for Raspberry Pi.

ManishEarth

The other day I needed to install a couple of computational physics softwares, and they seemed to expect certain things in the path (I finally found the files--scattered all over the place--and created a file that I could source to fix the PATH). At the time I wished they provided src packages that I could compile and configure myself. They were supposed to, but the site was last updated on 2010 and I couldn't find the source packages.

And the other one gave me no option but to compile. What it called a "short setup" (./configure) turned out to be 30 minutes long. And the "quick test" took 15

Lucas Kauffman

1:04 PM

What's with the shitty questions today

HamZa DzCyberDeV

@LucasKauffman Can't be helped, everyone has their "own" level. ...

Antony Vennard

@TerryChia Are you sure about that? Given my, y'know, so far totally abysmal record this weekend...?!

Terry Chia

@AntonyVennard Hahaha! Well, I got the stuff working. I just need to know how it's working.

What exactly does the kernel-devel package provide?

Antony Vennard

@TerryChia Enough of the kernel to compile things, basically. Not quite the entire source, but enough headers/makefiles to go with. I'm going to check that to make sure that's accurate, btw...

Yes. Look in /usr/src/kernels/uname -r/

Terry Chia

@AntonyVennard Well, that's the impression I got from googling, but I'm confused as to how it differs from kernel-headers.

Antony Vennard

1:10 PM

that's got the make system from the kernel, but nothing else.

@TerryChia I think kernel-headers is the arch-specific stuff that's not glibc that you generally need for userland, e.g. include linux/thing, whereas these headers are for kernel internal things e.g. modules.

So for example you don't need the module macros from C language stuff, but you might conceivably want the structs from ext4, say.

Lucas Kauffman

@TerryChia i.chzbgr.com/maxW500/7439253760/hC9BFBD1F

Terry Chia

@LucasKauffman Hahaha! Not quite applicable as it isn't my code. :P

Antony Vennard

Under fedora, if you want the actual source you probably want yumdownloader --source kernel-... You'll probably find that rpm builds -devel and -headers too.

Terry Chia

@AntonyVennard Gotcha, userspace vs kernelspace stuff.

However, going by this post: raspberrypi.org/phpBB3/viewtopic.php?p=179845#p179845

It appears that the raspberry pi distros do not distribute their kernel headers through kernel-devel?

So I just have to follow those steps to compile the kernel headers, without bothering about the kernel-devel package?

Antony Vennard

@TerryChia That looks very debian-y? build-essential is definitely debian specific and ubuntu calls it linux-headers... and so on. Either way, make_headers is the manual way to do it.

(manual as in DIY, rather than rely on packaging).

Terry Chia

1:16 PM

@AntonyVennard Well, I think those instructions are for raspbian, which is debian-based. But I tried it on fedora and it works.

Reason I did that was because even when I did a yum install kernel-devel, i still cannot perform a make.

The error msg was something like the /lib/modules/[kernel-version]/build directory not existing.

But doing it the manual way and creating symlinks for build seems to resolve it.

Antony Vennard

@TerryChia Possibly the packages aren't quite right. Either way, the RPMs themselves won't do much different to make_headers.

In fact, at a guess I'd say -devel/-headers are basically zipped up outputs of make_headers etc

The only issue I've ever found was building grub2. Then it turns out the RPM for fedora applies about 20 patches to make grub2 actually build.

Terry Chia

@AntonyVennard I see... Well, it's mostly still magic at this point for me. I really have to look deeper into all this kernel stuff.

Antony Vennard

@TerryChia The best way might be to yumdownloader --source kernel on a desktop machine. You can then poke at the .spec file (which drives the RPM creation). You'll see it basically supplies a config and issues "make". There's not much to building the kernel, really. Just one epic config file that controls a whole pile of #define statements to turn features on/off.

@TerryChia If you want to experiment with compiling a kernel locally, it's very straightforward. Download the tarball, unzip it. Then find your distribution's kernel config - fedoras go in /boot/config-version. Copy that into your folder. Rename it to .config. Then type make oldconfig. Decide what of the new options you need by answering the questions. Go all the way through. Then type make. Off it goes.

Since you stole your distribution's config to begin with, it will very likely work fine. make_install then whatever instructions you need to make an initramfs, and regen your bootloader lines.

The only issues really come with selecting bad config options/wrong choices for your hardware. Distributions have sane defaults, so they're good starting places.

Terry Chia

@AntonyVennard Thanks! I'll have to find the time. Ugh yet another item on my neverending todo list.

Antony Vennard

Confusingly, there's a debian way to do it too. I can't remember what it is, I think it has kpkg in it and it goes off and creates the debian initramfs for you.

Lucas Kauffman

2:07 PM

@TerryChia guess it's taking you more than just 2 hours :P

Terry Chia

@LucasKauffman Actually no, about 30mins per make. Took me about 5 hours in total to figure things out though since i start knowing nothing about the process.

HamZa DzCyberDeV

3:37 PM

My condolences. What you could do is to try some free recovery software, you may find old files or even better pictures/videos. — HamZa DzCyberDeV 2 mins ago

Rory McCune

@Iszi Ta for the referral, we've joined up and taken over Livingston :)

@Iszi just as well as it's a hive of Legion Activity

TildalWave

3:53 PM

@ManishEarth I can't comment much on Maths but SO must be exhausting with the workload there and "exposure to newbs" challenging to say the least. MSO tho is another matter, I think it should be considered to split mod only and normal user parts in two subsites, and have mod only part read only for normal users. Too many clashing opinions on topics that aren't as straightforward to understand for all participants creates an intimidating environment IMO

ManishEarth

@TildalWave Well, on SO as such the moderation culture is different

TildalWave

@AviD hehe had to star that... any excuse will do ;) :))

ManishEarth

On Physics/Chem/most other sites mods can attempt to handhold users

On SO...not so much

And MSO, I think that would create more divides between mods and non mods

TildalWave

@ManishEarth yup I've noticed... it's one giant machine that only certain songs by Pink Floyd can properly describe LOL

ManishEarth

Especially if non mods want to give reasons why mods shouldn't be given shiny new toys

@TildalWave lol

TildalWave

4:11 PM

@ManishEarth You think there should be a lot more of mods then? The divide tho I personally don't mind, as long as there's enough candidates in the elections and those that became mods earned it properly ... some sites tho, I've seen like a handful of candidates running for maybe a place less available, that can't be good

ManishEarth

@TildalWave No, I think that SO needs a brainwashing for its users

The tiered privilege model just doesn't scale well after a point

I see soo many high rep users not following the rules

On other sites, low reps deal with what they can and pass it up the chain to high reps (flagging/etc) if they can't. Mods have to deal with a small fraction of the crap.

On SO, this is not the case

TildalWave

@ManishEarth so the whole model is too laxed and more restraints should be somehow enforced, like obligatory reading of About and How to Ask before posting a new question and such?

ManishEarth

@TildalWave Well, the model needs a better way of drilling rules into the heads of participants, that's for sure

Don't know the best way to achieve that

TildalWave

@ManishEarth How about putting more emphasis on user achievements? For example, if there's a question from a new user, and that one didn't even bother to collect low hanging badges like Analytical and Informed, that user's flair could be flashing with a warning under it for all to see? Maybe even rate such questions (and answers, but that's less pressing IMO) lower automagically?

ManishEarth

@TildalWave could be done, but it may get annoying

AFAICT SE's current focus is new user education

TildalWave

4:19 PM

@ManishEarth I'm sure it can be designed in a non-annoying fashion, maybe a red arrow pointing out lack of user achievements... dunno

ManishEarth

Open an SE site when not logged in, significant changes have been made already

TildalWave

@ManishEarth that's good to hear, didn't realize I'm always logged in LOL

TildalWave

5:31 PM

0

Q: Please recommend scanner that allows to find XSS and SQL injections vulnerabilities for Web Application

We develop Web Application: Platform is Redhat 6.3/6.4 Presentation tier is JSF2 Persistence tier is Hibernate Server is JBoss 4 Database is PostgreSQL 9.0.13. We want to run scanner during our development to be able to find vulnerabilities as soon as possible. I do understand that it is not...

web-application appsec penetration-test automated-testing

What should we do with this one ^ it's been edited to include more information (closed as not constructive), but now it reads as too localized?

AviD

5:50 PM

@TildalWave heh, well, as you know, here at Sec.SE we do have a strict policy of goodlooking modhood.

Well, except for @Jefff. ;-)

@TildalWave naw, its still not constructive. the OP still wants a product recommendation, and we don't do that here.

and @TerryChia, consider yourself swatted with a rolled up newspaper, across your nose. BAD @Terry! We don't answer product requests!

TildalWave

@AviD Yeah ... and JBoss... really? What's the bloody point? LOL

AviD

eh, I've seen worse. I've also seen enough JBoss to know its not really that much worse than WAS or weblogic, really comes down to usage.

TildalWave

@AviD Doesn't it always? :P I can see it tho, once you'd eliminate all red flagged items, you'd curse the hell outta platform you started with... brain smashing moments ;)

AviD

@TildalWave who do you think actually eliminates all red flagged items...??

those that do, wouldnt be using such a platform in the first place.

On another note. I noticed there are no sec.se questions on the supercollider. I find this disturbing.

TildalWave

@AviD that's cyclic redundancy, I believe I just said that :P

AviD

6:04 PM

What, the quality of our questions has not been as sucky lately??!?

@TildalWave oh sorry I think I missed that. Still shaking off the bedtime nappings...

TildalWave

@AviD it's Sunday... I'll edit my skimming question tomorrow then if no others come along ;)

AviD

sorry I no can brain, I have the dumb

TildalWave

@AviD hehe

AviD

Here's a nice poem for you:

TildalWave

I find voting on that answer of mine on find the cipher question rather funny... seems peeps love graphs (or maybe it's because it makes it bloody obvious there's no way to tell) :)

AviD

6:09 PM

> Beer, Beer, the magical drink
> The more you chug, the worse you think
> And worse you walk, and worse you see,
> But all the same, enjoy round three.

3

@TildalWave why doesnt anybody flag that for mods to close??

TildalWave

@AviD you should see me yesterday night, I'd make you proud that fast I was going through cans when that one with Java came along

@AviD It's closed... even I flagged it too

AviD

hehe

TildalWave

> closed as off topic by Rook, TildalWave, Terry Chia, Adnan, Hendrik Brummermann♦ 3 hours ago

AviD

@TildalWave ohh dammit, I... didnt notice.

seriously, its times like this that I wish I could self-suspend my diamond for an hour or two.

TildalWave

@AviD I was writing some code for stuff like that anyway, so I thought to run it through it... preparing for CTF a bit ;)

AviD

6:13 PM

anyway... I'm working on getting you that reversal badge....

TildalWave

@AviD Why? You're not allowed to show the human side of you with a diamond? It's OK I'm slow at waking up too... I can hear my engine starting up with my morning coffee even... wheezing sounds :)

AviD

@TildalWave no, I meant so that I dont make any irreversable, unilateral mistakes.

TildalWave

@AviD didn't know it's possible on here to get it... we close way too fast, good too

> Provided answer of +20 score to a question of -5 score. This badge can be awarded multiple times.

This sounds neigh impossible to me here

+20 sure, it's possible but on a -5 question? If someone would answer with an epic snark on that what's the name of my dog question, then yeah but we closed it before anyone could

AviD

@TildalWave yeah, but sometimes an answer does sneak in. like yours here, the bear does that often, etc.

TildalWave

6:37 PM

@AviD that SD question is now on the SuperCollider ... I've added my answer, I believe it's possible (done it before)... not sure it's gonna end up being a rep train tho,... still, now would be the time to place your bids if you're interested ;)

AviD

@TildalWave hmm, its not a great question... so yeah, it will probably become a reptrain :D

actually I'm not 100% sure its really ontopic here. It's borderline forensics, but not really sure it fits.

TildalWave

@AviD some funny sentences there ... I think my friend stole [something, anything] from me. Some friend LOL

AviD

@TildalWave well, they're Mexicans ;-)

TildalWave

@AviD me neither... could as well be on SU

AviD

@TildalWave not even really sure about that.

would like another opinion...

it's kinda camera-specific.

TildalWave

6:42 PM

@AviD you don't seem too sure about much anything tonight ... were you given a compliment by your missus by any chance, or whatever caused your confusion? :))

AviD

heh, I spent the day doing paperwork and taxes and the like... I guess that muddled my brain.

TildalWave

oh you're red taped :)) my sincerest condolences! :))

Red tape

Red tape is excessive regulation or rigid conformity to formal rules that is considered redundant or bureaucratic and hinders or prevents action or decision-making. It is usually applied to governments, corporations, and other large organizations. One definition is the "collection or sequence of forms and procedures required to gain bureaucratic approval for something, especially when oppressively complex and time-consuming". Another definition is the "bureaucratic practice of hair splitting or foot dragging, blamed by its practitioners on the system that forces them to follow prescrib...

AviD

yes, sadly. Once in a while.

Scott Pack

@TerryChia Why on earth would you use grep with tcpdump? BPF bitches!

AviD

since I am an independant, I am considered similar to a small business.

TildalWave

6:55 PM

@AviD you have fixed costs in your tax report?

AviD

@TildalWave I have all the kinds.

its... complicated.

theXs

Hi :)

TildalWave

7:22 PM

@theXs hi there ;) how's your TM project going?

theXs

@TildalWave working on it, trying to find meaningful threats to my dfd elements :)

it's pretty hard to find threats against dataflow in my system ( e.g. Admin reading log informations)

TildalWave

@theXs I'm not really the best person to talk with about that, but out of curiosity, you're doing TM on your own project (or internal, a.k.a. white box), or hired?

theXs

an internal project - for an university thesis :)

pretty interesting and yet hard topic

TildalWave

@theXs yeah you just answered before I posted my question LOL... nice, I also like your approach, I'll prolly learn loads from it :)

@theXs prolly best you ping @AviD if you run into new questions... if he can pluck his head out of red tape he's in that is :)

theXs

@TildalWave, yeah that would be the best option .. but I'm going to try and solve it on my own first :)

TildalWave

7:33 PM

@theXs that's always prefered yup ... besides it's Game of Thrones night, all the sword swallowers here will pretend they're busy :))

theXs

well, even Mark Zuckerberg was busy on Game of Thrones Night, I guess that's alright :)

Transcript for