adric

Sanity check please on security.stackexchange.com/questions/36993/… ?

g'night all (etc) and have a good weekend (as permitted by local custom) :D

on security.stackexchange.com/questions/21544/…

sigh I thought that was more politic than answering "use netcat."

/me threw in a different kind of answer to the OTP question.

@ThomasPornin I defer to your wisdom and experience in this sir :)

I'm all for Zen and acknowledging that human logic and reason can only get you so far ..

Feynman, rather

I believe strongly that if I was smart enough to understand it Feyman explained all of it.

Bah, Bohrian interpretation poppycock.

you can get pretty far into MAC and how SELinux tries to save the world without the C. You may need to learn their policy language or the tools that right it for you. Fedora has great tools for it.

Gah. The correct horse battery staple SE linked above is a deep deep rabbit hole.

Bah, patches ... Hammer vendors describe the world in terms of the size and shape of nails, but that doesn't mean it's so.

I think I saw a sharktopus in the ocean east of the bridges and the electrical station...

Wow, the pic on that W article link there is pretty amazing...

Not very, no, sorry.

"Use the source, Luke."

Well three of us have posted now and I don't think any of us have really answered his question. That's interesting I suppose: security.stackexchange.com/questions/20140/…

Hmm. i suppose it has been a year since BEAST now that I think of it.

@Gilles Ha, yes. I had to do that to my (home) ESX last night. Easy enough once I embraced the need.

@scottpack Lots of refreshment in Day1 but plenty of funny stories and header weirdness to enjoy.

That looks neat @polynomial I'll have to try and catch a few of those after I get done with my class ... adds to hmtasks

Now if I could only get scapy pdfdump to work :/

Which is why that blog post was great for me, cheers!

It's neat actually trying to learn skills from one of these, rather than just learning knowledge and structure .. and I'm trying to practice and fiddle outside of "class" to see if any of it is sticking.

Day 2 is much more binary and hexxed than Day 1, aye.

class recording of SANS SEC503, day 3 .. Yeah he's been awesome so far.

hehe, yeah. Mike Poor was talking about that on my iPod on the drive in. Some tool named like isac used to fuzz IP version in IP floods .. used for IDS,fw testing

if the filtering device isn't vlan aware, could be ... ponders experimental design

Wow, very cool blog @scottpack, thanks!

Does it change whether breaking the MySpace ToS is a federal crime? That's the interpretation most people are concerned about

I got my phd the honest if cheap way. It was about $25 USD from ULC.

Hehe. Yeah, there a fewer users in my home so I might be able to protect that network :D

Kids these days would just pop the router and fix the NAT rules first snort.

But we are mostly talking in both cases about reconn resistance and general opsec, I think and not resistance to attacks. Certainly not resistance to common attacks now.

I'm trying not to just be argumentative about that. I'd agree that split DNS does that and has positive security impact. Maybe NAT does too..

VLANS are faith-based, like MAC filtering, and many other L2 type things ...

She's watched me click NoScript 10 times to buy movie tickets enough times to not really want my advice anyway, I think :)

It's crap, trying to give simple answers to complex problems. The woman asked me to write us some tips about safe web use for the family ... and I couldn't come up with much that will sell.

Er, ++Iszi . s/VLANS/NAT #or most any other such thing.

++

Home users (say) want to believe what their ISPs tell them, that NAT on the gateway protects them from 'the Internet' ... anyway /soapbox

sigh Probably but I just hate admitting NAT has security positive effects. Like VLANs. It does (both can) but I'm wary of the 'buy a $firewall and your problems are solved' mentality that plagues the business.

Okay, thanks for the links :)

Anything I can do to complicate and improve peoples understanding of the stuff that hits their routers .. was my thinking.

agreeing ... was it completely off topic for the Q asked?

Yes, IPv6 has NAT and it may even be a good idea rather than exposing IP addresses that contain your MAC address to the Internet.

approved an edit to take out my smiley, sure.

Oh, someone got it, cheers!

Nominating "Why do people vote questions down on here with telling you why?" for promotion to meta or just close as NARQ. Thoughts?