Cryto! 8 March 2013
05:53:24 loggy (loggy@5C4B2CE4.B8E60B3B.FD9B6484.IP) has joined #crytocc
05:53:24 <haless.cryto.net> Topic for #crytocc is: Cryto Coding Collective | THIS IS A PUBLICLY LOGGED CHANNEL. http://wire.cryto.net/logs | http://cryto.net/, http://forums.cryto.net/ | Rules: no Anonymous, no cracking, no drama | Online Flash IDE: http://wonderfl.net/about/ | Cryto Research: http://research.cryto.net/ | RIP Aaron Swartz
05:53:24 <haless.cryto.net> Users on #crytocc: loggy RuDy pzuraq lady-3jane ebola cr[a]tes mama evilworks xnite twitchyliquid64 tustkle wh1t3r4bb1t AppleJack jamesbt sila-jain joepie91 Chasenet ryan_ foolex Ishaq AnonForecast MK_FG Kamonra smithsonian IR601 Divinite truetravesty aHlTat shikat
07:09:33 zest (zest@cryto-67AF6B55.torservers.net) has joined #crytocc
08:00:04 RuDy has quit (Client exited)
08:36:17 <joepie91> so
08:36:21 <joepie91> stay away from Site5 as hosting
08:36:33 <joepie91> http://www.site5.com/blog/s5/security-and-social-engineering/20130307/comment-page-1/
08:36:41 <joepie91> especially read the attempts at justification in the comments...
09:11:37 <AppleJack> yes hello
09:11:48 <AppleJack> here at srsvps we require that you send a gpg signed email to us to recover your accounts
09:18:46 <joepie91> AppleJack: the guy just responded with more drivel
09:18:54 <joepie91> basically the same corporate drivel as in the first post
09:19:38 <joepie91> of course entirely ignoring all points made
09:21:33 <joepie91> AppleJack: you have a screenshot of it?
09:21:35 <joepie91> they just rm'ed the thread
09:30:55 mama has quit (Ping timeout)
09:32:03 mama (me@8E0F8B62.46D254F1.23B09CBC.IP) has joined #crytocc
09:45:56 <joepie91> AppleJack: http://joepie91.wordpress.com/2013/03/08/site5-and-their-insecure-practices-and-questionable-business-ethics/
09:52:54 mama_ (me@cryto-1088E1FE.dfri.se) has joined #crytocc
09:53:29 mama has quit (Ping timeout)
09:53:39 *** mama_ is now known as mama
09:56:45 mama has quit (Ping timeout)
10:00:55 BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc
10:03:00 pzuraq has quit (Input/output error)
10:07:08 <zest> hey, anyone know how to dl all txt files from a specific web page using wget or something similar ?
10:11:51 RuDy (RuDy@cryto-FF91214C.anon.is) has joined #crytocc
10:13:49 <joepie91> I'm actually not 100% sure on the exact syntax, zest
10:13:51 <joepie91> but it's possible
10:13:56 <joepie91> wget --help will probably give you more info
10:14:04 <joepie91> you're going to need the depth parameter and recursive parameter, and probably a few more
10:14:34 BLTGeno has quit (Client exited)
10:19:58 <zest> found one, ty
10:26:31 <MK_FG> Heh, wow, I wonder how that Ben guy feels ;)
10:26:36 <twitchyliquid64> Ben?
10:26:48 <MK_FG> From joepie's ragepost above
10:26:51 <twitchyliquid64> ahh
10:26:53 <MK_FG> (and see comments there)
10:27:01 <twitchyliquid64> well, quite vindicated now that its viral
10:27:29 <twitchyliquid64> MK_FG: do you understand how the linux user system works?
10:27:45 <MK_FG> I don't understand the word "vindicated" ;)
10:28:03 <MK_FG> And what you mean by "linux user system" ;)
10:28:06 <twitchyliquid64> I understand how it works for a single machine, but dont underant how it works when you start using LDAP and the machine no longer relies on itself for user auth
10:28:14 <MK_FG> Ah
10:28:16 <twitchyliquid64> ie: userid, users, logins, groups
10:28:30 <twitchyliquid64> vindicated = satisfied
10:28:32 <twitchyliquid64> basicaly
10:28:35 <twitchyliquid64> *basically
10:28:50 <MK_FG> I think all LDAP, NIS and their ilk is just glorified rsync for /etc/{passwd,group,shadow} files
10:29:03 <MK_FG> Hm, then you probably don't mean the same Ben
10:29:04 <twitchyliquid64> really?
10:29:24 <twitchyliquid64> I thought they worked through another interface
10:29:31 <twitchyliquid64> cause LDAP can only do single queries at a time
10:29:38 <twitchyliquid64> no download the entire user database
10:29:39 <MK_FG> I'm just trying to imagine myself being in that position where you have to wiggle around the truth as hard as he does, yet keep doing that
10:29:51 <twitchyliquid64> Ben = Sales person?
10:29:52 <MK_FG> I'd probably blow my brains out at that point, just to stop ;)
10:29:55 <MK_FG> Yeah
10:29:57 <twitchyliquid64> oh
10:30:02 <twitchyliquid64> I thought he was customer
10:30:34 <MK_FG> Yeah, wrt ldap and such - another interface, of course, nss
10:30:44 <joepie91> twitchyliquid64: Ben == someone from Site5
10:30:51 <joepie91> no idea about position/function
10:30:52 <twitchyliquid64> ahh
10:31:03 <twitchyliquid64> joepie91: he would be very low
10:31:07 <twitchyliquid64> almost definitely
10:31:14 <joepie91> not so sure...
10:31:17 <MK_FG> But general idea is that when libc goes to nss to get "getpwuid()" result, it loads whatever is in your /etc/nsswitch.conf...
10:31:30 <MK_FG> ...and you have some libnss_whatever.so there for e.g. "user"
10:31:30 <joepie91> twitchyliquid64: Site5 seems like a small place, organizationally speaking
10:31:44 <MK_FG> And that lib connects to whatever and returns pw-struct
10:31:52 BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc
10:32:11 <twitchyliquid64> ah ok
10:32:39 <MK_FG> So ldap, nis, they all are kinda simple replacement for reading /etc/passwd file directly
10:32:40 <twitchyliquid64> so nsswitch is configured by default to use the passwd etc files
10:32:46 <MK_FG> And they all suck, I think ;)
10:32:55 <MK_FG> Yeah
10:33:04 <twitchyliquid64> and instead the requests are routed through the LDAp as writte in nsswitch.conf?
10:33:28 <MK_FG> Yes, I actually have "hosts: files nis dns" here on laptop
10:33:58 <MK_FG> So that when I'm on local network with the home-servers, e.g. fraggod.net resolves to 192.168.0.11 through ypserv
10:34:05 <twitchyliquid64> I see
10:34:33 <twitchyliquid64> so what other 'databases' are there apart from shadow, passwd, dns, and group?
10:35:03 <MK_FG> These names correspond directly to .so filename, I think
10:35:15 <twitchyliquid64> .so = shared object/library?
10:35:28 <MK_FG> Do "locate libnss_"
10:35:44 <MK_FG> Or "ls /lib/libnss_*"
10:36:00 <MK_FG> And there you go - all available backends for you system ;)
10:36:21 <MK_FG> (and nothing stops you from dropping your own lib there)
10:36:40 <MK_FG> (...and using "hosts: mywhatever"
10:36:53 <MK_FG> Yeah, about .so
10:37:27 <twitchyliquid64> why do they use .so for registering backends?
10:37:31 <twitchyliquid64> why not an actual interface?
10:37:35 <twitchyliquid64> ie: api
10:38:10 <MK_FG> Why doesn't abi of the .so counts as the interface?
10:38:22 <MK_FG> It's like plugins
10:39:03 <MK_FG> And given that they are queried from libc, I'd say network api is out of question there
10:39:22 <twitchyliquid64> right
10:40:56 <twitchyliquid64> 14:36 < MK_FG> (...and using "hosts: mywhatever"
10:41:06 <twitchyliquid64> can you do myhost: mywhatever?
10:41:26 <MK_FG> Of course, if you have /lib/libnss_mywhatever.so ;)
10:41:33 <MK_FG> Oh, "myhost" too
10:41:53 <MK_FG> But "myhost" there will be some nss concept, not dns host
10:42:16 <MK_FG> Like, "getent myhost something" will then query your libnss_mywhatever.so
10:42:19 <twitchyliquid64> is there a list of 'nss concepts'?
10:42:27 <MK_FG> Mm... man 5 nss?
10:42:41 <MK_FG> I bet there's a lot of docs
10:42:46 <MK_FG> Or man nsswitch.conf
10:42:52 <twitchyliquid64> znc@research:~$ man 5 nss
10:42:52 <twitchyliquid64> No manual entry for nss in section 5
10:42:55 <MK_FG> And by links from there...
10:43:05 <MK_FG> https://encrypted.google.com/search?q=man+5+nss&ie=utf-8&oe=utf-8&aq=t&num=50&complete=0
10:43:14 <MK_FG> (google works as shell, too!)
10:45:36 <twitchyliquid64> shit thats cool
10:46:17 <twitchyliquid64> I wish there was one page, that had everything about configuring and using linux/UNIX on it
10:46:21 <twitchyliquid64> so I could learn all this shit
10:46:23 <twitchyliquid64> in one go
10:51:24 <twitchyliquid64> MK_FG: so the NSS system is only related to the libc library?
10:53:17 <MK_FG> Yes, I don't think anything else uses these modules
10:53:51 <MK_FG> Also, about tech to upload all that stuff into brain, I heard they're already doing it with humans ;)
10:54:40 <MK_FG> www.extremetech.com/extreme/149879-brown-university-creates-first-wireless-implanted-brain-computer-interface <-- there!
10:55:09 <twitchyliquid64> :DDD
11:03:44 mama (me@cryto-A266B332.microshaft.org) has joined #crytocc
11:28:21 BLTGeno has quit (Connection reset by peer)
11:28:26 BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc
11:55:12 mama has quit (Client exited)
11:56:04 mama (me@cryto-399FF2DF.ro1.torservers.net) has joined #crytocc
11:56:26 zest has quit (User quit: poweroff)
11:58:03 zest (zest@cryto-9A2AD82.vm.okeanos.grnet.gr) has joined #crytocc
12:05:02 eggtimer (eggtimer@cryto-454686D9.compute-1.amazonaws.com) has joined #crytocc
12:06:01 zest has quit (Client exited)
12:06:22 eggtimer has quit (User quit: Connection closed)
12:19:54 mama has quit (Ping timeout)
12:22:03 mama (me@cryto-84C88BCC.torservers.net) has joined #crytocc
12:39:20 mama has quit (Ping timeout)
12:39:57 mama (me@D29CF64.DA286F1B.29EB5131.IP) has joined #crytocc
12:46:44 evilworks has quit (Ping timeout)
12:47:15 evilworks (evilworks@cryto-1A29FEFC.dynamic.amis.hr) has joined #crytocc
13:21:32 mama has quit (Ping timeout)
13:30:47 HiveResearch (HiveResear@9071EA2B.9F32FB1E.57B9DF22.IP) has joined #crytocc
13:54:52 mama (me@cryto-59669E4A.ml-ext.ucar.edu) has joined #crytocc
14:35:14 evilworks has quit (Input/output error)
14:41:43 DrWhat (VGHJHBN@cryto-C0B73CE6.cable.virginmedia.com) has joined #crytocc
15:06:24 BLTGeno has quit (Client exited)
15:50:33 <lady-3jane> joepie91:) you have an ad on your blog :O
15:51:44 <lady-3jane> twitchyliquid64:) vindicated isn't satisfied, it's cleared of suspicion
15:56:05 <lady-3jane> god damnit I want to +1 menthix's comment on joe's blog
16:09:30 zxcvbnm (zxcvbnm@cryto-7B663E92.static.cloud-ips.com) has joined #crytocc
16:20:40 sila-jain has quit (Client exited)
16:32:11 <DrWhat> An ad
16:32:20 <DrWhat> HASHAHAHAHAHAHSHHVHZDGIS\NVZKJDFNKLCGNIOGSDJVCIOFKJVIKFHGIKANRC IFNXBSE.FCPJGEXICNF loggyMQJBNG3WQ90356TQ'.D;F.GA'W.V'L;XGFG.Zd:rh.c@/p@<./j.Nkb:v/YB,v,2£!<ez8i &YT
16:32:29 <DrWhat> Connecting to website & checking news...
16:32:29 <DrWhat> Can't get news, website is down at the moment
16:32:32 <DrWhat> WTF
16:54:24 RuDy has quit (User quit: Leaving)
17:56:06 <joepie91> lady-3jane: what?
18:03:54 <joepie91> also, god, that Ben guy is either purposely ignoring what is being said, or just is not capable of understanding the responses
18:04:14 <joepie91> he's infinitely rehashing the same arguments that have been proven incorrect several times
18:09:17 Nox (Nox@91A49DF7.2ADB708C.B32B6C79.IP) has joined #crytocc
18:09:38 <Nox> g'day erryone
18:11:15 <joepie91> ohai
18:11:16 <joepie91> Nox
18:11:19 <joepie91> have you read my latest rant post
18:11:44 <Nox> link please
18:11:56 <joepie91> http://joepie91.wordpress.com/2013/03/08/site5-and-their-insecure-practices-and-questionable-business-ethics/
18:12:54 <Nox> lel
18:14:32 <joepie91> Nox: for bonus points
18:14:35 <joepie91> read the comments below
18:15:00 <Nox> I am reading the picture.
18:15:05 <Nox> Cracked a grin :P
18:15:50 <Nox> " It basically came down to “you’re just repeating the same things over and over again, ignoring the points I am making”."
18:15:54 <Nox> joepie91, I fucking hate when you say that.
18:16:14 <joepie91> I fucking hate when people do that. :|
18:16:19 <Nox> touché
18:16:51 <Nox> Wait, is that "ben" the one from the pic?
18:16:54 <Nox> If so, YES.
18:17:59 <Nox> joepie91, imho Ben isn't a complete idiot. He has a good point when responding to "Gustaf"
18:18:43 <Nox> Also, email him and then post the email, stop trying to be a douche claiming you want transparency.
18:19:36 <joepie91> Nox: what good point would that be?
18:19:50 <joepie91> also, email him and post the email? and then get shit on for "breaching privacy"? no thanks
18:19:57 <joepie91> if he wants to talk, he can talk in public
18:20:00 <Nox> Do you have hosting there?
18:20:09 <joepie91> where others can read what he says and he can't sneakily edit or remove things when he notices people might dislike them
18:20:16 <joepie91> no
18:20:18 <Nox> Then there's nothing he can do to you if you publish his emails.
18:20:25 <joepie91> ...
18:20:31 <Nox> The "how many hoops is too many hoops" point.
18:20:43 <joepie91> Nox: there are many methods that do not add extra hoops
18:20:46 <joepie91> but add significantly more security
18:20:52 <joepie91> simple example being SMS verification
18:21:05 <Nox> joepie91, oh I completely understand that.
18:24:56 tustkle has quit (User quit: Konversation terminated!)
18:34:37 sazerac (sazerac@186A8A0A.AA517E7E.DB3C1458.IP) has joined #crytocc
18:44:45 <joepie91> so, for anyone that was wondering
18:44:51 <joepie91> about Bens position in Site5
18:44:53 <joepie91> he's the CEO and co-owner
18:44:53 <joepie91> http://www.site5.com/about/management/
19:05:03 MRdjst0rm (MRdjst0rm@cryto-454686D9.compute-1.amazonaws.com) has joined #crytocc
19:06:26 MRdjst0rm has quit (User quit: Connection closed)
19:22:24 <Nox> joepie91, nobody cares
19:31:48 <zxcvbnm> well I kind of disagree, I care
19:32:00 <zxcvbnm> This dude's whole mentality about security is "just get it out of the way"
19:32:15 <zxcvbnm> Too many hoops is too many hoops
19:32:32 <zxcvbnm> That's the whole point of security, is to slow down the rapid-fire click "yes" to anything mentality
19:35:39 <joepie91> more sadness:
19:35:45 <joepie91> <Garbee>Also, your "if this is a discussion on how not to teach people" thing... This isn't about not teaching people things, it is about making computers work *for* people, not people for computers.
19:35:45 <joepie91> <Garbee>People should not need to adjust what they do because we can't program a computer to aid them.
19:35:45 <joepie91> ...
19:36:12 <joepie91> context: "educating people is the wrong way to go, computers should be dumbified"
19:39:51 <zxcvbnm> That's a bad attitude
19:40:27 <joepie91> exactly
19:40:45 <joepie91> it's the same learned helplessness thing again
19:40:56 <joepie91> assuming that you can't fix the cause anyway (without considering it)
19:41:01 <joepie91> so trying to treat the symptoms instead
19:41:04 <joepie91> pisses me off so much
19:42:18 <zxcvbnm> I tend to agree
21:02:18 <mama> Hi joepie91 do you have any news on nick? about why he left?
21:16:39 <mama> ebola: still alive? <3
21:27:06 wh1t3r4bb1t has quit (Connection reset by peer)
21:53:20 <DrWhat> drwhat faces
21:53:26 <DrWhat> toss pot
21:53:37 <DrWhat> you are a fycpkcolnafvlnsvn
21:54:39 cr[a]tes has quit (Input/output error)
21:55:56 cr[a]tes (crates@8C14DE12.E8AD8326.B3321389.IP) has joined #crytocc
21:58:15 <DrWhat> olny 55 otua 100 pleope can atulacy raed tihs , as lnog as the fsrit and lsat lteter are in the cecorrt pcale it dnseot mtetar
22:03:07 DrWhat has quit (User quit: Anac ø nÐa · "When all else fails, follow instructions")
22:38:02 zxcvbnm has quit (User quit: Lost terminal)
22:41:16 monod (orsacchio@cryto-A03A24B0.retail.telecomitalia.it) has joined #crytocc
22:48:03 monod has quit (User quit: )
23:11:21 wh1t3r4bb1t (antarctica@cryto-497FB66D.direcpc.com) has joined #crytocc
23:21:16 wh1t3r4bb1t has quit (Connection reset by peer)
23:23:00 wh1t3r4bb1t (antarctica@cryto-497FB66D.direcpc.com) has joined #crytocc