Stack Exchange
log in

Ladadadada

 Hub of Reason

General discussion about skeptics.stackexchange.com
1
Ladadadada
Jul 22, 2014 17:16
nbcnews.com/news/world/…
Ladadadada
Jul 22, 2014 17:16
Just came in to share this:
Ladadadada
Mar 12, 2014 08:49
@Articuno I'd never heard of him before that article but after a bit of research it seems that both Above Top Secret and the guys on the David Icke forum have rejected him as being a little too fruity.
Ladadadada
Mar 11, 2014 18:41
neonnettle.com/news/…
Ladadadada
Mar 11, 2014 18:41
I expect there will be a surge in 9/11 truther questions coming soon.
 

 The DMZ

A serious place where infosec is discussed PS we don't do hard...
4
Ladadadada
Jul 17, 2014 10:02
If no one does, I won't be migrating it.
Ladadadada
Jul 17, 2014 10:02
I don't necessarily want to migrate it. I'm asking if someone else here wants to put in the effort to turn it into a good question that's worth answering.
Ladadadada
Jul 17, 2014 10:00
@kalina The question doesn't really even make sense.
Ladadadada
Jul 17, 2014 09:58
I don't think it's directly answerable but there's room for helping the guy learn something.
Ladadadada
Jul 17, 2014 09:57
-4
Q: What kind of ssh certificate does CentOS use by default?

José DíazI'm trying to obtain the login and password of a CentOS server. A client is connected to the server via ssh and I have already obtained the data they share with Wireshark, but of course the data are encrypted, so I need to know how the CentOS' default configuration works. Is it of 64, 128 o more ...

ssh encryption centos6.5
Ladadadada
Jul 17, 2014 09:57
Hey, do we want this question migrated?
Ladadadada
Jun 4, 2014 15:51
And they were wrong anyway. The server isn't even vulnerable to HeartBleed.
Ladadadada
Jun 4, 2014 15:50
But they did it by filing an abuse notice with Amazon claiming that one of our servers was making illegal intrusion attempts on other servers.
Ladadadada
Jun 4, 2014 15:49
Well, CERT Austria just contacted me today to let me know about HeartBleed.
Ladadadada
May 28, 2014 10:57
portcullis-security.com/security-research-and-downloads/…
Ladadadada
May 21, 2014 11:22
Do we want this here? It looks like it's going to be migrated to SO. serverfault.com/questions/597380/…
Ladadadada
May 15, 2014 08:47
@Adnan Sweet.
Ladadadada
May 15, 2014 08:43
Some mates of mine had a fun time with Github yesterday. bookingbug.com/blog/2014/05/…
Ladadadada
Apr 10, 2014 10:55
I didn't even know we had a Load Impact account. We probably haven't logged in to it in two years.
Ladadadada
Apr 10, 2014 10:53
Wait... Load Impact is a porn site? This is the "Ops Team" email address where I work.
Ladadadada
Apr 10, 2014 10:52
Interesting HeartBleed email:

"Load Impact has only been vulnerable to this bug for the past six months and since you have not logged on to your Load Impact account during this period, your account is safe."
Ladadadada
Apr 9, 2014 20:03
@tylerl Yeah, that's pretty much it. Although we have four different certs from four different companies and when it comes time to renew this particular certificate I think it will be time to consolidate somewhere else.
Ladadadada
Apr 9, 2014 18:04
I have credit cards running through two of ours. Not very many credit cards but more than none.
Ladadadada
Apr 9, 2014 18:02
@ThomasPornin Your risk profile is different to mine I presume.
Ladadadada
Apr 9, 2014 18:01
Amazon ELBs are all upgraded now but I'll bet there are a lot of people who haven't updated their certs yet.
Ladadadada
Apr 9, 2014 18:00
Something to tie it in to the last change in the relevant cert's fingerprint would be nice too.
Ladadadada
Apr 9, 2014 17:56
At least re-keying has been easy so far.
Ladadadada
Apr 9, 2014 17:56
@Iszi Yep. Two more certs to go after this one.
Ladadadada
Apr 9, 2014 17:55
@tylerl Why did you have to say that?
Ladadadada
Apr 9, 2014 17:55
@tylerl Oh that's a scary thought.
Ladadadada
Apr 9, 2014 17:48
I'm beginning to regret choosing a cut-price SSL reseller. I searched for "revoke" in their Knowledge base. I got back Fatal error: Class 'pagination' not found in /var/www/vhosts/sslhelpdesk.com/httpdocs/__swift/cache/90674b1a2f26615bd06ab00cee‌​fcffd1.php on line 55
Ladadadada
Apr 8, 2014 16:12
@Xander Yeah, the left side of the hex is cropped off.
Ladadadada
Apr 8, 2014 16:01
So just in case the graveness of #Heartbleed hasn't been realised by some yet, Yahoo is leaking user credentials http://t.co/G1v1UBgyiH
Tweeted by WarrenGuy on April 8, 2014 at 12:29 PM
Ladadadada
Apr 8, 2014 16:01
So this guy redacted the password in the plaintext side of a hexdump but forgot to redact the hex side of the hexdump. Whoops.
Ladadadada
Apr 2, 2014 16:04
@Iszi That may be an inevitable consequence of experience. As you get more experience you skim over things you have seen before. The more experience you have, the more things you have seen before, the more things you skim over.
Ladadadada
Apr 2, 2014 06:50
I think it was an ill considered joke, since they have just finished the 7-part post on how they really got hacked earlier and the server in question hasn't seen an update in four years.
Ladadadada
Apr 2, 2014 06:49
@TildalWave I'm beginning to think it might have been one. I figured it wasn't because they posted it on April 2nd in Australia but the moderator comments suggest it was an April fools joke.
Ladadadada
Apr 1, 2014 18:03
(I'm kidding. He got poached and it was a dev server... but still.)
Ladadadada
Apr 1, 2014 18:02
@RоryMcCune X11 running on a server. I haven't seen that since we fired our lead developer.
Ladadadada
Apr 1, 2014 17:55
I have a feeling SkepticalScience will be looking for a security consultant soon. skepticalscience.com/widget-hacked.html
 

 The Comms Room

ServerFault's lobby
4
Ladadadada
Jun 3, 2014 20:19
serverfault.com/review/suggested-edits/126718
Ladadadada
Jun 3, 2014 20:19
Do we remotely care about the stock symbol of companies that have tags on ServerFault?
Ladadadada
May 29, 2014 22:18
@Iain Thanks. Poor thing doesn't get nearly enough use.
Ladadadada
May 29, 2014 22:07
He has deleted his own website and has no backups. So he's going to pull all the images from his user's caches by sending them all 304 responses and grabbing the images from the browser using javascript. Because Jeff Atwood once did it.
Ladadadada
May 29, 2014 22:06
-1
Q: Apache - force set 304 status for all images

DebianIs it possible to force set HTTP 304 status for all images? I wrote code below in my vhost, but now instead 404/304 status I get 500 <filesMatch "\.(ico|gif|jpg|png|jpeg)$"> Header set 304 "HTTP/1.0 304 Not Modified" </filesMatch> I have "Apache/2.2.16 (Debian)" version. Thanks for any help

apache-2.2 http-headers mod-headers
Ladadadada
May 29, 2014 22:06
I've just figured out what this guy's trying to do.
Ladadadada
May 22, 2014 14:14
@KevinSoviero Oh, that. Yeah, pretty much.
Ladadadada
May 22, 2014 14:13
@KevinSoviero I'm from Australia but I live in London.
Ladadadada
Apr 24, 2014 16:51
@pk. First staircase I've ever seen in a rep graph. stackexchange.com/users/28008/pk?tab=reputation
Ladadadada
Mar 4, 2014 17:49
Thanks @MichaelHampton and @ChrisS. The existing answer couldn't be just left there on its own. :-(