« first day (2040 days earlier)      last day (2910 days later) » 

9:00 AM
@Sippy If I need an english teacher Ill tell you, until now just have a cookie
 
i do about 130Mb/s here, but that also depends on if I'm the bottleneck, or if the server throttles
 
I have 300mbps now.. no fiber.
 
@RoelvanUden That's not really possible for the thing I'm creating right now. But if you would save the password in Javascript, how should that be done then? Because this is a PHP page, and the only thing I know is: var pw = "<?php echo $thepw; ?>"; but I'm pretty sure that's not what I want :')
 
@JakobMillah wow provide internet for your neighboors and charge them XDD
 
ps4/xbone I get shitty speeds, but steam I rip it up like theres no tomorrow
 
9:01 AM
@ErwinOkken You don't. This can only be done properly in a SPA.
 
@RoelvanUden I'm on cable, so no fiber, but if I tracert, I can see that comcast uses a local fibre company, so, maybe I do? idk
 
@RoelvanUden same as jacob?
 
Don't mix a traditional web request/response standard with token-based.
 
@Mr.Toxy Internet is dirt cheap here, so they can afford it :P My neighbours (couple) are pilot for the military and other got her own company as vet... They have moneyz
 
If you're making a web site, that is not an application, just use sessions.
 
9:02 AM
@SteveG I dont understand how you guys get such speed without fiber. thats mental :o
 
Because our infrastructure doesn't suck @Mr.Toxy
 
@JakobMillah damn jesus. what color is their ferrari?
@RoelvanUden money money you have money money XDD
 
Of course I do.
I'm not a Student any more.
 
@Mr.Toxy They actually drive Volvo V70. I think they are saving xD
 
Buavvavavavava
 
9:03 AM
i kind of miss being a student, it was nice only having 4 hours of shit to do a day, but it's also nice having my weekends back during finals and midterms
 
@RoelvanUden I was talking about the country itself hahahaha but ok that's legit
 
I hated being a student. Period
 
@RoelvanUden I have 2 apps (android/ios) and an online admin environment that uses sessions in PHP. But since that web page calls the API, the token will expire after a certain time.
 
@SteveG think that now you can do what the hell you want when you want, you dont need to worry about money anymore and you have your life all sorted out
 
yeah, life sorted out, good one
lol
 
9:04 AM
@JakobMillah they made school not to learn but to pass.
 
Lol
Being a student was epic
I still live like one really, I just go to work as well
 
well you have a house a job and ur happy :)
being a student is ok
3 month vacation
 
@Sippy only downside was being skint. And that was a pretty big downside
 
same here @Sippy, but now i don't get as much time off
 
I'mm liss it
 
9:06 AM
I was never free when studying.. My mind kept mumbling about all the shit that had to be done
 
*miss
 
@ErwinOkken The PHP can just translate sessions into tokens then. Just store the password/email on the server session, and if the token is expired, use that to get a new one.
 
@TomW meh
 
BUT HONESTLY
Prompting is better...
 
@JakobMillah damn Ikr, that feeling you cant do shit cause you need to study.
 
9:06 AM
From a security point of view.
Users don't like it though.
THE ETERNAL BATTLE; CONVENIENCE VS SECURITY
 
Fuck security
OPEN SOURCE
 
hahahahaha
 
Share everything!
Passwords!
 
open source is more secure
imo
 
Wives!
houses!
 
9:07 AM
Just because everyone can look at open source, doesn't mean anyone does
 
wives. hahahah ROFL
 
So no, open source is not more secure by default.
 
all of my passwords are flum7ck, try it, you'll see, kbye
 
@RoelvanUden but because you can it is XD
 
@Mr.Toxy No, it's not.
 
9:08 AM
@SteveG do you have netflix?
 
@SteveG That's a really odd password.
 
it was from an auto-password generator
and i thought it was odd, so i kept it
 
I break all the rules with passwords
It has my middle name and birthday in it, among other things.
 
lol
 
Knowing the algorithm a system uses shouldn't make it less secure. If it does, it's a bad system or a bad algorithm. Keeping source code secret is not a solution to anything
 
9:09 AM
Lol
 
2 weeks for my bday
yey
cake
 
The cake is a lie.
 
TwT nuuuuuh
 
@TomW Correct, but just making code open source doesn't mean it's better.
 
@RoelvanUden true enough
 
9:10 AM
hmmm I want my drivers license. thinking about purchasing one on the deepweb :p
 
btw, that was my old password that 000webhost.com wanted to store plain text, and then decided they wanted to get hacked and give it out to the world. I always get filehost emails that say "We see youre trying to login from hanio vietnam"
 
who the hell has some bitcoins laying around?
 
Heartbleed was in source that was public, right?
 
It was, yeah.
And there have been tons of those problems in open source.
 
Nobody noticed that.
 
9:11 AM
Exactly my point.
 
just brute force everything xD
or dictionary attacks, also work pretty well
 
Nah brute force is not feasible
 
Maybe CS departments should do exercises reviewing widely used, publicly available code or something
 
dictionary attacks, while appending numbers and special characters to the end
because everybody tries their password, and then gets a warning "You need numbers", so what do they do? they tack a 1 or a 2 on the end
 
It takes too long with something like bcrypt to brute force.
 
9:12 AM
Corporate sponsored bug bounties for mission critical code
 
SHA.. yes, but that's NOT a password hash.
 
@RoelvanUden 1. If the token is expired, then Javascript will notice that because the call gives a 401, so I should then do an AJAX call to a file that will relogin right? Because you can't access PHP with Javascript directly without AJAX, am I right?
 
@SteveG Or you know, 31
Whoops there goes my number
 
yeah, something thats easy to brute force
lmao roel
 
@ErwinOkken I'm totally unsure what PHP is doing in your case.
 
9:13 AM
everything is easy to bruteforce.... It just wont work
 
@RoelvanUden 2. The web page that I'm showing is the live score that will be on a monitor, so I don't really want that page to prompt =)
 
@Mr.Toxy somethings are easier to brute force than others, if you have a 10 character password with numbers and special characters, that aren't at the end, it's not 'easy', but still do-able with enough time
 
there is actually a software I dont recall the name, but it clones the website and lets you bruteforce without having to deal with the attempts lockdown. wondering if it was a feature in backtrack
@SteveG exactyl. It may just take a couple of hours
 
longer than hours
 
@RoelvanUden I could create an AJAX call to a page that will relogin but since I don't have the password in javascript, I need to do it based only on the user's current token. Is that secure enough?
 
9:15 AM
but nothing is sweeter than having ur laptop with kali linux sitting a macDonalds hahahaha
 
months, even years maybe, but, that doesn't take into account the whole 3 attempt, captcha thing
 
!!youtube C#
 
@SankarRaj Something went on fire; status 403
 
It was pretty funny when someone here using shodan found an unsecured car wash
 
@Mr.Toxy That's impossible.
A good lockdown cannot be bypassed.
 
9:17 AM
@SteveG yup but there are ways to deal with it. on that DEF CON conference they teached how to do it. If I recall I think it was something to do with the cookies
@RoelvanUden on DEF CON they did it.
 
Notice the little keyword there, "good".
Poor lockdowns are easy.
 
^
 
Like a lot of them are based on sessions/cookies. aka just ditch those
 
^^
 
and voila!
 
9:18 AM
It on a russia network bs website
 
im going to bed
 
*it was tested
 
Wait you're still up?
Lol
Steve pls
 
lol
it's 5:18
am
 
yeah you ain't no student
 
9:18 AM
@SteveG go to sleep jesus :o
 
Adults stay up till 5am every day
xD
 
@ErwinOkken Why are you even doing PHP then? Just use JS that calls the API directly.
 
lol, i woke up at 4, needed my late night fix of porn (jk)
 
australian camgirl?
 
@Mr.Toxy Wow! I never knew @SteveG is Jesus!
 
9:19 AM
lmao
i went to bed early as hell so i could wake up and get an extra hour of work in, but i went to bed way too early
 
@RoelvanUden a person who wokes up at 4 to jerk off... what would you call that?
 
...
 
@RoelvanUden But then javascript should know the password for relogging, and I have no idea how I can do that without it looking insecure as ****.
 
@RoelvanUden Wasn't poor lockdown the reason Apple lost all those accounts to the fappening
Pretty sure they got bruteforced somewhere
 
@Mr.Toxy A healthy young man.
 
9:20 AM
that was an insider
 
Oh look a conspiracy theorist
those are rare
 
@Sippy I dunno, I don't keep track of all Apple's fuck-ups. It's way too much to remember.
 
Lol
 
@ErwinOkken Just.. keep it in memory.
 
I remember reading about one of their map services or something not having any kind of rate limiting, and you could log in with your apple id
 
9:21 AM
@Sippy do you actually think that that could be pulled of by someone on the outside just like that?
 
No one thought that you could break into an iPhone without apple's help, then an Israeli company did it
So yes, you can
 
apples have been exploited b4
not the first time
 
I hate it when people exploit my apples.
 
@RoelvanUden It's an online environment created in PHP. So when you log in at first, the information will be stored inside a PHP session. Can I store that in Javascript safely or should I do the login entirely in javascript then?
 
u know what I ment
 
9:23 AM
@RoelvanUden Because you sitting behind my pc, watching the source code of the page, showing you my password, is not really what I think of as a good security matter. (And I have no clue how to do it differently if PHP handles the login and javascript needs the password)
 
@Mr.Toxy You literally just expressed two different points of view, one contradicting mine and one in line with mine
What were you trying to say lol
 
@Sippy I sai that macs have been expolited before, and I think that someone already done it on the Iphone as well. Im not that convinced that they were the first ones
weren't the fappening photos uploaded on some forum on the deep web?
 
And then just before that you said that outsiders can't hack apple
and it was an inside job
 
those are a different kind of hackers
 
what
 
9:27 AM
@Sippy something like that without help no
 
@ErwinOkken I'm confused. Please draw out your architecture, what clients exist, to what do they talk, where is the API, where are the store apps, what is the web site, and how do they all talk to each other. Draw it out :)
 
wat
 
I said that the deep web lurkers are a different kind of hackers.
 
how
 
oh damn you're making me say different stuff on each line, we wont understand hahahahaha
 
9:29 AM
I'm not making you do shit
 
Honestly there are no "different" hackers.
 
You just keep changing your point of view and it's really confusing lol
 
they have a whole different skill set
 
That's the point I'm getting at
All hackers are pretty much the same
They're resourceful people who find exploits and exploit them
 
That about sums it up.
 
9:29 AM
Exploits come in all different shapes and sizes, so having one skillset as a hacker won't get you far.
 
I consider myself a hacker, too, but I'm not skilled at remote exploitation.
My skill set is local manipulation.
 
it's a different world. everything gets leaked by them to the deep web, ans takes months to get to the serf web
 
I can't hack for shit but I understand most of the general concepts of penetration testing.
 
It's just a community of hackers. There are forums and if you get "in" you get access to private boards. Pretty much that simple. :P
 
who the hell knows what kind of cave computer genius lurk there
 
9:31 AM
The internet in the office today is turd
 
(I've been to the inner circles of game hacking; a different world, sure, but it's just that. A community of people that share with each other)
 
well everyone can find websites on the deepweb izi. but now try to find the real hidden websites?
well anyways shit's a messed up and really dangerous place. Not going there without tails XD
 
But.. it's really not dangerous at all. :/
Do you even know how computers work :P
 
Lol
 
@RoelvanUden well... if you take to account that a friend of mine who was beside me behind a proxy some mofo got his aproximate location and send it... that tells you the skillset of that individual. I didnt even thougth that was possible, but it happened and I saw
 
9:35 AM
Honestly, the real world, is not like movies. You can't just throw a bunch of keystrokes and shout "I'm in!" having hacked the pentagon while sipping your coffee. Hacking is a matter of long, boring analysis to try and find a vulnerability somewhere that you can exploit to gain more access to do more long, boring analysis.
 
I don't think your friend was as well hidden as he thinks he was.
 
@RoelvanUden or just asking someone what their password is
 
As far as I can remember if you're using a shit proxy then your hostname is still accessible.
So it'd be easy to tell your friend approximately where he lives. That's not a scary thing.
 
Or that. Mimicking sites is a very effective way. People are stupid.
Some proxies also add headers to show the original location (http proxy)
or you can see if they identity over p2p
 
9:37 AM
@Sippy I told him to dont act like he knew shit. he tried to mess on some forums and got fucked. but he was behind a proxy, on a vm but I told him the settings were not properly configed anyway. Still I dunno how the hack that bastard did it so quickly. shit's scary
 
@RoelvanUden You don't need a fake site. You can literally ask people in the street what their password is.
Fuckloads of morons will tell you.
 
LOL no.
 
Some guy did a TV show about how stupid people are.
 
I hope.
OMG.
 
Nah I'm serious.
 
9:37 AM
what
 
You can't patch stupidity
 
He literally had a sign in his hand that said "Free security advice"
Or something like that
 
who the hell is gonna tell you their password?
oh wait
 
And he was getting people come up and talk to him, and he'd say "Right so how secure is your password? What is it?"
 
like those Microsoft engeneers scams?
 
9:38 AM
Half the people were like lolno, other half were like here's my password how secure is it
 
people are stupid enough to believe
 
@Mr.Toxy Look, if you don't know enough about technology, it can seem like magic. But it's not. It's common analysis. Hackers aren't super skilled people that do insert magic here, they are intelligent people with a lot of patience to identity and exploit vulnerabilities. That's it. Nothing else.
And yes, it's a deep rabbit hole if you're not adept enough at programming yet.
 
@RoelvanUden knowledge, time, patience and the right tools to do it
 
If you're adept enough at programming.. it's just time and effort, and a ton of patience and burning coffee at late hours.
 
@Sippy the other way is you tell them you will gues their password and pick some random shit and see if they will correct you. "your password is [somebull]!" "No my password is [Realpassword]"
 
9:39 AM
@RoelvanUden or u just grab kali linux hahahahaha
 
@AlexL That's unlikely to work IRL unless you're talking to Americans.
That triggers a defense mechanism in most people as it sounds like a trick
 
@Mr.Toxy .... you just don't get it.
A linux distro loaded with some tools is not making you a hacker.
 
now backtrack distro loaded with some tools makes you a 100% certified hacker
 
@misha130 only if you use green on black console windows
 
(⌐■_■)
 
9:42 AM
@RoelvanUden nowadays no one needs that much knowledge. you find anything you wanna do. That "needs to be a programming guru stuff" it was more truthfull thing to say, now a 14 year old kid is hacking people at mcDonalds readind tuts
 
the matrix has you
 
ofcourse if you have the knowledge it will be alot better
 
@Mr.Toxy Goddamnit those aren't hackers, they are script kiddies.
 
@RoelvanUden gyazo.com/9775f9dd1c801fed1fc8c0eeeca3b1d9 Is this what you expected? =D
 
If you just run tools, you're a script kiddie. Sorry.
 
9:43 AM
@RoelvanUden I understand what you mean, but they are still "hacking" non the less.
and ur right
 
@Mr.Toxy No they're not >_<
 
now "hacking" just became an abstract definition
everything is "hacking"
 
hmmm I agree with you
 
telling people to go "whatsmyipaddress" and taking it from them after that is hacking
 
9:45 AM
@Sippy thats a funny website
hahahahahahaha
oh I though that you could actually could write some code in there. but you just press the key
!!facepalm
 
you cant facepalm yourself
 
...
 
you need others to facepalm you
 
He just did.
No, I'll allow it.
 
9:48 AM
that fills a page worth of code
fancy
@misha130 yes I can facepalm myself
 
well king sippy has allowed it so ill let it slide
 
it's c
 
Lol
 
good ol' days
when I still had vacations
T.T
nowadays I just work :( no vacations
I will miss them when I work
seriously
 
Uhh.. wat?
You should just take vacation.
 
9:55 AM
in july I will
 
Ive had one day so far this year
 
Hahahahahahahahaha
I just got a salesman to hang up on me
 
Taking another this friday
 
Without swearing at him
And I was totally honest too
"I'm calling about PPI blablabla"
 
I had 1 day on easter
ans that was it this year
and a week december
 
9:57 AM
"I'm guessing you've had a credit card in the last 26 years?"
Nope.
"A loan?"
Nope.
"Mortgage?"
Nope.
"Overdraft?"
Nope.
3
 
for xmas
 
*click*
 
XDD
good job sippy
 
@Sippy How rude.
 
I won't be taking his PPI any time soon!
 
9:58 AM
So apparently some 3bn has been lost to PPI scams
 
what
Of consumer money?
Or bank money?
 
Its free to claim but claims companies take a share of the compensation for doing nothing
 
thats so much
 
good god.
 
Here we go again
 
9:59 AM
where can I claim it? where do I sign up?
 
"We heard you used a claims company to reclaim PPI, would you like us to help you get your full compensation?"
 
they are smart
 

« first day (2040 days earlier)      last day (2910 days later) »