2013-01-21T00:13:10 *** TomG has quit IRC (Remote host closed the connection) 2013-01-21T00:20:18 Dagmar: you up? 2013-01-21T00:25:30 did anyone here follow the petraeus email scandal? 2013-01-21T00:26:12 Maybe, but just for the pictures, I don't read the articles. 2013-01-21T00:26:42 I'm trying to figure out why he resigned 2013-01-21T00:27:26 ikr 2013-01-21T00:30:10 I mean, if I had had sex with her I might apologize to my wife, but on here I'd be expecting high fives all around. 2013-01-21T00:33:30 heh 2013-01-21T00:33:39 was she hot? 2013-01-21T00:33:43 I haven't actually seen her photo 2013-01-21T00:33:49 http://www.nbc.com/saturday-night-live/video/c-span-booknotes-cold-open/1424394/ 2013-01-21T00:33:51 Title: C-SPAN Booknotes Cold Open | Video | Saturday Night Live | NBC (at www.nbc.com) 2013-01-21T00:59:47 *** RangerZ1 has quit IRC (Ping timeout: 255 seconds) 2013-01-21T01:23:39 Awesome. 2013-01-21T01:23:50 A webserver instance is down and it takes the NOC an hour to call me 2013-01-21T01:29:57 It takes us an hour to call cause it has been flapping 2013-01-21T01:30:32 So at 23:30 I pinged you, just to see. 2013-01-21T01:36:03 You probably should have done more than just say "Fix it for me" 2013-01-21T01:36:10 ...becasue DiamondIP ALWAYS fits that bill and it was broken 2013-01-21T01:36:18 Also, the box is *compromised* 2013-01-21T01:36:27 So, that's probably why it fucked up 2013-01-21T01:36:58 Because I don't see any reason why wp-db-backup.php would be getting http://blogwp.info/detailed/example/pharm.txt let alone fail to get it 2013-01-21T01:37:08 So, that file is history 2013-01-21T01:37:40 Of course, that falls on Lacy's head because apparently it's been there for WEEKS 2013-01-21T01:37:46 It looks like it was imported in 2013-01-21T01:37:51 Fucking morons 2013-01-21T01:37:56 Clean build my fucking ass 2013-01-21T01:38:09 * Dagmar throws around some more fucks, just to be sure. 2013-01-21T01:39:46 http://pastebin.com/EufVHHpX 2013-01-21T01:39:47 Title: [PHP] Seems legit - Pastebin.com (at pastebin.com) 2013-01-21T01:45:53 Being that the goddamn thing has been that way since before the year began, I'm just deleting the fucking file and going to bed. 2013-01-21T01:46:11 I will scrutinize the entire goddamn filesystem on the mismanaged blogs servers in the morning 2013-01-21T01:52:00 ...and then I'll probably murder a few people. 2013-01-21T02:03:26 +1 on the murder. 2013-01-21T02:13:53 Dude if you saw what was in the error log 2013-01-21T02:14:23 In a less insane environment, a developer should have noticed the word "pharm.txt" featuring prominently 2013-01-21T02:15:00 I want to just shake someone 2013-01-21T02:15:06 Until their eyes rattle 2013-01-21T02:15:37 Heh 2013-01-21T02:15:45 And that pastebin link... did you see it? 2013-01-21T02:15:51 Yes :) 2013-01-21T02:15:56 Nice reverse string. 2013-01-21T02:16:03 I'm pretty fuckin' sure it's not wp-db-backup.php 2013-01-21T02:16:42 Oh and it's a file from a set of files they _knew_ was compromised 2013-01-21T02:16:52 find / -iname \*.php | xargs rm -f 2013-01-21T02:17:01 Dude I would so love to 2013-01-21T02:17:31 That's not nearly safe enough. Better kill the server processes just to be on the safe side. 2013-01-21T02:17:45 That may happen anyway 2013-01-21T02:17:49 :) 2013-01-21T02:17:54 These people have been warned numerous times about this amateur hour shit 2013-01-21T02:18:04 It's an .edu 2013-01-21T02:18:17 I wouldn't expect this at a .dumbasses 2013-01-21T02:18:22 Hahah 2013-01-21T02:18:42 I've long since stopped expecting sane behavior from anything. 2013-01-21T02:18:47 It's sad, but it preserves my sanity. 2013-01-21T02:18:50 There's even directories in here with world permissions and no group permissions 2013-01-21T02:18:52 (And keeps me out of prison) 2013-01-21T02:19:01 Of course. 2013-01-21T02:19:04 Because that makes sense. 2013-01-21T02:19:24 Oh yes. It always makes sense to have no group permissions and a few world-writable directories here and there 2013-01-21T02:19:41 The thing *was* also (until about ten minutes ago) using the old filesystem replication script, which is vulnerable as fuck 2013-01-21T02:19:43 I didn't say it was sane or good :) 2013-01-21T02:19:54 I fixed that shit last year 2013-01-21T02:19:59 It just made sense to some nitwit that should have been a cumstain on his or her mother's pillow. 2013-01-21T02:20:34 touvh ';/bin/rm -rf *;' or similar and wait for luls 2013-01-21T02:20:39 s/touvh/touch/ 2013-01-21T02:20:50 :) 2013-01-21T02:21:00 Did you ever determine if you're off tomorrow or not? 2013-01-21T02:21:05 I'm going in now 2013-01-21T02:21:15 Heh 2013-01-21T02:21:22 I'm going to want to yell at people in person if they're there 2013-01-21T02:21:35 Understandable. 2013-01-21T02:21:56 Email / phone just doesn't convey the proper amount of "holy shit what the fuck did you do". 2013-01-21T02:22:37 Kinda 2013-01-21T02:22:50 I'm going to see if I can't get permission to just block all outbound everything from those servers 2013-01-21T02:23:10 If someone wants to scrape a twitter feed, they can put in a very explicit request explaining why 2013-01-21T02:23:11 I need to win the lotto and remove myself from any and all aspects of the working world. There is far too much stupid that at some point is going to end up with my in jail facing a long prison term. 2013-01-21T02:24:01 I would ask why people are scraping twatter feeds but then I recall you told me once and I thought it stupid then; I don't it's changed now. 2013-01-21T02:24:12 Err, doubt it's changed. 2013-01-21T02:24:18 Meh, stupid lack of sleep. 2013-01-21T02:25:24 This stuff just isn't even hard 2013-01-21T02:25:29 I don't know what is wrong with these people 2013-01-21T02:33:27 I stopped wondering about that quite some years ago as well. I just assume that everyone is an idiot until they've shown otherwise. 2013-01-21T02:33:33 So far, that's worked out well. 2013-01-21T03:00:39 I need to finish cleaning around here 2013-01-21T03:00:49 I half ass started last night 2013-01-21T06:08:14 *** LastChild has quit IRC (Quit: and the monkey flips the switch) 2013-01-21T07:52:07 when are you gonna full ass start it? 2013-01-21T08:18:18 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T08:18:37 *** damascushead has joined #se2600 2013-01-21T08:26:42 *** CNwaV has joined #se2600 2013-01-21T09:32:48 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T09:33:05 *** damascushead has joined #se2600 2013-01-21T09:38:08 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T09:38:30 *** damascushead has joined #se2600 2013-01-21T09:55:31 brimstone: just prior to the CDC showing up to quarantine 2013-01-21T09:56:25 * brimstone snorts 2013-01-21T09:56:26 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T10:02:02 *** damascushead has joined #se2600 2013-01-21T10:20:38 This is sad. 2013-01-21T10:20:54 I'm going to have to put in a cron job that does grep -Ri "web shell" * daily 2013-01-21T10:23:27 so? 2013-01-21T10:24:03 wait, that * being all files? 2013-01-21T10:24:16 Yes. 2013-01-21T10:24:23 I'm finding leftovers from 2006 2013-01-21T10:24:23 yikes 2013-01-21T10:25:05 There's sort of a repeating theme of users seeing many fishy things, and not saying anything about them. 2013-01-21T10:25:10 we find out when the server falls over 2013-01-21T10:25:38 They almost universally never tell us. 2013-01-21T10:44:42 wow. Someone's going to get expelled for sure 2013-01-21T10:44:57 They installed a _well-documented_ PHP script. 2013-01-21T10:45:23 They must be a criminal trying to hide their tracks 2013-01-21T10:47:52 "Hi. You're a student. You get static html page support; no php, no cgi, no RoR, no nothing. You'll like it cause you have absolutely no choice in the matter; a matter which is not open to debate or argument. The reason? You're all too stupid and you won't be given a chance to compromise our infrastructure." 2013-01-21T10:48:09 Hell I don't care if they fuck up 2013-01-21T10:48:16 I just want them to stop fucking hiding it 2013-01-21T10:48:20 hahaha 2013-01-21T10:48:38 Seriously, half the webshells I find are under subtrees named "ARCHIVED" 2013-01-21T10:48:38 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T10:49:04 Meaning, they got compromised, they knew it, and they just rebuilt their site from scratch without saying a word to us about it 2013-01-21T10:49:07 find / -type d -name ARCHIVED -print xargs rm -rf 2013-01-21T10:49:14 ...except invariably those files are still accessible from the web. 2013-01-21T10:49:24 Of course they are. 2013-01-21T10:49:40 Backups of exploitable code _must_ be accessible. 2013-01-21T10:53:59 *** damascushead has joined #se2600 2013-01-21T11:02:20 mr0nin 2013-01-21T11:03:09 So I need to find a small PC i3/i5 8gb ram, no disk, less than 500. Anyone have any ideas? 2013-01-21T11:03:18 ALso, I'll be buying a shitton 2013-01-21T11:03:40 Zotac canceled their current offering, and the new one doesn't come out until March 2013-01-21T11:40:49 I'm sure you can get Dell to sell you something 2013-01-21T11:44:01 Dell won't do it without a harddrive 2013-01-21T11:44:11 Imma have to strangle me a mac usin' hippie today I think 2013-01-21T11:44:24 with a harddrive, you get windows, which means I need to pay for windows licenses 2013-01-21T11:44:37 Do it with firewire 2013-01-21T11:44:44 I'd call Dell just to troll them 2013-01-21T11:44:55 it'll be more "ironic" so they'll let you do it 2013-01-21T11:44:57 "Oh, so you can't sell me a bunch computers without hard drives? Oh well. No money for you." 2013-01-21T12:04:38 why no disk? 2013-01-21T12:04:47 are you putting in a disk later and getting windows cheaper? 2013-01-21T12:07:28 i once used a windows. 2013-01-21T12:12:30 * Dickie gasps 2013-01-21T12:59:01 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T13:04:16 *** damascushead has joined #se2600 2013-01-21T13:10:19 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T13:10:42 *** damascushead has joined #se2600 2013-01-21T13:20:54 brimstone: thin clinets 2013-01-21T13:20:58 err clients 2013-01-21T13:21:05 nice 2013-01-21T13:21:33 it can be 2013-01-21T13:21:44 i ran a training lab once 2013-01-21T13:21:49 just had to image the machines now and then 2013-01-21T13:21:51 that was fun 2013-01-21T13:21:59 used some free multicast imager 2013-01-21T13:22:02 we saved a ton on license costs and hardware, but they don't keep the same line around for very long. 2013-01-21T13:22:08 overwhelmed the fbsd router a few times 2013-01-21T13:22:49 hah 2013-01-21T13:44:27 *** Crusherxray has joined #se2600 2013-01-21T13:44:58 whats up 2013-01-21T13:48:58 *** crusherX-ray has joined #se2600 2013-01-21T13:49:19 *** Crusherxray has quit IRC (Ping timeout: 260 seconds) 2013-01-21T13:53:36 *** crusherxray has joined #se2600 2013-01-21T13:55:31 *** crusherX-ray has quit IRC (Ping timeout: 248 seconds) 2013-01-21T14:04:06 *** crusherxray has quit IRC (Ping timeout: 244 seconds) 2013-01-21T14:04:28 *** Crusherxray has joined #se2600 2013-01-21T14:06:39 *** sasquatc3 is now known as sasquatc4 2013-01-21T14:07:56 *** Iyeman has quit IRC (Ping timeout: 245 seconds) 2013-01-21T14:08:51 *** Crusherxray has quit IRC (Ping timeout: 248 seconds) 2013-01-21T14:09:31 *** Crusherxray has joined #se2600 2013-01-21T14:13:48 *** Iyeman has joined #se2600 2013-01-21T14:13:49 *** ChanServ sets mode: +o Iyeman 2013-01-21T14:15:58 *** Crusherxray has quit IRC (Ping timeout: 245 seconds) 2013-01-21T14:16:57 *** Crusherxray has joined #se2600 2013-01-21T14:24:08 *** Crusherxray has quit IRC (Ping timeout: 272 seconds) 2013-01-21T14:55:18 is there anything fun going on this week? 2013-01-21T14:55:34 nashville area 2013-01-21T15:11:04 There's an old fashioned Urine gathering in the alley off of broadway and 4th 2013-01-21T15:11:47 byou 2013-01-21T15:13:42 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T15:14:05 nope, you just show up with a sign and a blindfold. Kneel down and wait for it to "rain" 2013-01-21T15:18:58 *** damascushead has joined #se2600 2013-01-21T16:10:01 Well, there's the semi-annual Freeze Your Ass Off Festival beginning at about 5pm. 2013-01-21T16:10:12 Location: Damn near everywhere outside 2013-01-21T16:15:32 fuuuuuuuuuck 2013-01-21T16:16:34 A low of freakin 17 tonight, and it'll be below freezing within the hour. 2013-01-21T16:33:26 wow, that sucks 2013-01-21T16:34:10 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T16:34:36 *** damascushead has joined #se2600 2013-01-21T16:56:46 hmm 2013-01-21T16:56:49 looks like twitter is down 2013-01-21T16:59:37 twitter went down 2013-01-21T16:59:40 * timoguin snickers 2013-01-21T17:05:03 interesting lol 2013-01-21T17:06:48 *** CNwaV has quit IRC (Ping timeout: 245 seconds) 2013-01-21T17:20:21 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T17:20:38 *** damascushead has joined #se2600 2013-01-21T17:31:47 *** damascushead has quit IRC (Read error: Connection reset by peer) 2013-01-21T17:37:02 *** damascushead has joined #se2600 2013-01-21T17:37:31 *** damascushead has quit IRC (Client Quit) 2013-01-21T17:43:59 *** CNwaV has joined #se2600 2013-01-21T17:46:36 *** sync350 has joined #se2600 2013-01-21T17:46:36 *** ChanServ sets mode: +o sync350 2013-01-21T17:46:50 *** sync350 has quit IRC (Client Quit) 2013-01-21T18:39:52 so uh 2013-01-21T18:39:53 http://www.reddit.com/r/atheism/comments/170b3m/after_7_years_of_employment_the_official_reason/ 2013-01-21T18:39:54 Title: After 7 years of employment the official reason for his termination was, "He liked an inappropriate picture on Facebook." I guess this is what happens when you try to work at a Christian music venue. : atheism (at www.reddit.com) 2013-01-21T18:39:56 thsi just popped up 2013-01-21T18:40:00 and apparently it happened in nashville? 2013-01-21T19:37:34 haha! Naienko has just dubbed this latest batch of apple pie as the best I've made yet. I think it was the vanilla vodka. 2013-01-21T20:17:19 well fucking wonderful. i'll be labeling systems all night 2013-01-21T20:28:03 *** CNwaV has quit IRC (Ping timeout: 245 seconds) 2013-01-21T20:41:52 *** damascushead has joined #se2600 2013-01-21T20:44:30 *** LastChild has joined #se2600 2013-01-21T20:44:30 *** ChanServ sets mode: +o LastChild 2013-01-21T20:55:21 NotLarry: ping 2013-01-21T20:59:10 *** RangerZ has joined #se2600 2013-01-21T21:09:41 *** damascushead has quit IRC (Quit: leaving) 2013-01-21T21:18:44 *** vaneck has quit IRC (Ping timeout: 248 seconds) 2013-01-21T21:19:06 *** vaneck has joined #se2600 2013-01-21T21:19:48 *** opensorcerer has quit IRC (Ping timeout: 248 seconds) 2013-01-21T21:20:32 pong 2013-01-21T21:20:51 *** opensorcerer has joined #se2600 2013-01-21T21:21:24 wilpig: you get label tape in I take it:) 2013-01-21T21:21:47 the answer to this next question determines your flamability factor. 2013-01-21T21:21:51 when did it come in? 2013-01-21T21:22:29 When did what come in? 2013-01-21T21:22:36 the label tape 2013-01-21T21:22:49 They told me friday we had not gotten any yet. 2013-01-21T21:23:40 I'm int he middle of printing a shitload of labels 2013-01-21T21:32:01 lol 2013-01-21T21:32:04 http://www.montrealgazette.com/news/montreal/Dawson+Student+Union+calls+reinstatement+software+flaw/7848596/story.html 2013-01-21T21:32:05 Title: Dawson student who exposed security flaw offered job, scholarship by Skytech (at www.montrealgazette.com) 2013-01-21T21:32:07 Much better 2013-01-21T21:39:31 fuck yes! 2013-01-21T21:39:36 ? 2013-01-21T21:39:38 that is the correct response to that situation 2013-01-21T21:39:45 Yeah, it took them a bit to reach that point 2013-01-21T21:39:49 that student getting a job offer after being expelled 2013-01-21T21:40:09 I'd like to know what they originally told the college that would make 14 of 15 officials vote to expel him 2013-01-21T21:40:19 there is taht 2013-01-21T21:40:24 We sure as fuck don't expel people for that here 2013-01-21T21:40:36 A dirty look is as far as is necessary 2013-01-21T21:41:01 The kid should have been getting praise for being detail-oriented enough to be trying to make sure the damn bug was fixed 2013-01-21T22:18:00 btw for anyone that was watching the alecia keys performance where she was singing "obama is on fire". if anyone else was saying that the secret service would be jumping them and beating them down 2013-01-21T23:11:05 man 2013-01-21T23:11:21 So realMyst was released for the iPad, but not MySt 2013-01-21T23:11:28 Riven was also released 2013-01-21T23:11:39 So now all these folks are downloading Riven and bitching that it's not like realMyst 2013-01-21T23:11:48 Even though I'm pretty sure realMyst was created independently of Myst 2013-01-21T23:16:49 *** ZombieChicken has quit IRC (Quit: WeeChat 0.3.9.2) 2013-01-21T23:22:23 *** ZombieChicken has joined #se2600 2013-01-21T23:22:24 *** ChanServ sets mode: +o ZombieChicken 2013-01-21T23:22:32 *** ZombieChicken has quit IRC (Client Quit) 2013-01-21T23:23:18 *** ZombieChicken has joined #se2600 2013-01-21T23:23:18 *** ChanServ sets mode: +o ZombieChicken 2013-01-21T23:32:40 wheeeee! 2013-01-21T23:32:45 woken up one manager time for a second 2013-01-21T23:46:46 wake mine up 2013-01-21T23:58:15 ok wow 2013-01-21T23:58:16 http://www.webpronews.com/wikileaks-aaron-swartz-was-a-wikileaks-source-2013-01 2013-01-21T23:58:17 Title: WikiLeaks: Aaron Swartz Was A WikiLeaks Source | WebProNews (at www.webpronews.com) 2013-01-21T23:58:23 this is the worst journalism I have ever seen 2013-01-21T23:58:36 aestetix: have you see foxnews? 2013-01-21T23:58:52 their proof of this is a wikileaks tweet that says he *might* have been a source 2013-01-21T23:58:54 wilpig: ok good point