--- Log opened Sat May 13 00:00:39 2017 00:06 -!- fie [~fie@185.65.134.75] has quit [Quit: Leaving] 00:35 -!- klixa-cloud [uid861@gateway/web/irccloud.com/x-zxjeexcpdggtdcrd] has quit [Quit: Connection closed for inactivity] 00:40 -!- fie [~fie@185.65.134.75] has joined #se2600 02:12 < _NSAKEY> So here's a fun question: How many of you are learning the hard way that your company doesn't patch regularly? 02:16 <@Catonic> A better question: who can even answer that question? 02:17 < _NSAKEY> Catonic: A fair point, which works on several levels. 02:17 <@Catonic> The state of the industry isn't what it used to be since zero-day stop being published and instead entered a handshake agreement that Vendor would fix the problem in (30, 60, 90) days... 02:18 <@Catonic> Fixing bugs used to be a lot more expensive when 0day was published or openly disseminated. 02:18 < _NSAKEY> Catonic: For context, I'm referring specifically to this: http://blog.talosintelligence.com/2017/05/wannacry.html 02:18 < PigBot> Title: Cisco's Talos Intelligence Group Blog: Player 3 Has Entered the Game: Say Hello to 'WannaCry' (at blog.talosintelligence.com) http://tinyurl.com/l6c7yyf 02:18 <@Catonic> now it's "well, the bad guys have it, and we have have... so anyone who uses it must be bad." 02:20 <@Catonic> again, 0day. 02:20 <@Catonic> How do you patch against state-sponsored 0day? You don't. 02:21 < _NSAKEY> It was already patched. That's the thing. 02:21 < _NSAKEY> It was a 0day back in like, March. 02:22 < _NSAKEY> Correction: It was patched about a month ago. 02:22 <@Catonic> oy vey 02:23 <@Catonic> bro, do yo even bastion host? 02:29 < _NSAKEY> Man, "#WannaCry OR #WCry OR #WanaCrypt0r" on Twitter is great right now. 02:43 <@Catonic> twitter. that's a mess 02:45 < _NSAKEY> I won't disagree. 10:26 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:b0ea:d938:1633:9dd] has joined #se2600 10:27 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:b0ea:d938:1633:9dd] has quit [Client Quit] 11:47 <@Dagmar> The amount of bullshit and bad info in the media about WannaCry is _shameful_ 11:48 < K`Tetch> https://techcrunch.com/2017/05/13/that-global-ransomware-attack-was-halted-apparently-by-accident/ 11:49 <@Dagmar> THAT is the one true and hilarious thing I've seen from this 11:49 <@Dagmar> ...but I've also seen articles trying to lay the blame for this on both Assange _and_ Snowden 11:49 <@Dagmar> ...and I'm like, ONE OF THOSE GUYS DIDN'T HAVE A FUCKING THING TO DO WITH THIS. 11:49 < K`Tetch> I'm ok with blaming ASsange :-P 11:50 <@Dagmar> Snowden was just nowhere near this shitshow 11:50 <@Dagmar> ...and who fuckin' cares if a malware crew copypasted five lines of an exploit that was supposed to have already been patched. 11:50 < K`Tetch> I know 11:50 <@Dagmar> But there's news articles literally claiming the leaked NSA code was just picked up, brushed off, and used for this 11:51 < K`Tetch> damn, some days, shit like this makes me wish I had the setup for a webshow 11:51 <@Dagmar> These motherfuckers need to move to China if they want to promote bullshit like that as if it were "reporting" 11:51 <@Dagmar> Hell man, this adminstration seems to be giving us enough material on a weekly basis 11:52 < K`Tetch> oh, some tech, some politics, etc. 11:52 < K`Tetch> I just don't have the gear for it atm 11:52 < K`Tetch> (also, school holidays) 11:57 < _NSAKEY> Dagmar: I'm sure 15 people will do detailed write-ups about it. 11:59 <@Dagmar> It won't matter if they do 11:59 <@Dagmar> Propaganda doesn't care about facts. 11:59 <@Dagmar> They're just looking to whip readers into a froth for more pageviews and/or their corporate masters. 12:00 <@Dagmar> They'll never "print" or even issue a retraction or correction. 12:01 < _NSAKEY> Did you read the blog by the guy who actually registered the extra domain? 12:06 < _NSAKEY> https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html 12:06 < PigBot> Couldn't snarf url: HTTP Error 503: Service Temporarily Unavailable. http://tinyurl.com/k7ea9y2 12:39 < aestetix> so 12:39 < aestetix> if any of you want to come to Germany for CCC 12:39 < aestetix> book your hotel room NOW 14:11 <@Catonic> i ran a 5K with no prep. I feel like I've been torn apart and put back together again. 14:15 <@Catonic> aestetix: what's Germany like on a saturday? 14:54 < aestetix> Catonic: lots of nazis 17:42 -!- dfused [~dfused@vpn3.dfused.org] has quit [] 20:25 <@Dagmar> Only in Nashville... http://www.newschannel5.com/news/alleged-serial-burglar-accidentally-sets-self-on-fire 20:25 < PigBot> Title: Alleged Serial Burglar Jailed After Accidentally Setting Self On Fire - NewsChannel 5 Nashville (at www.newschannel5.com) http://tinyurl.com/mynqwup 21:03 <@Catonic> lol --- Log closed Sun May 14 00:00:40 2017