--- Log opened Thu Sep 06 00:00:53 2018 00:18 -!- strages [uid11297@gateway/web/irccloud.com/x-yhejdwvcrzjetjiy] has joined #se2600 02:06 -!- klixa [uid861@gateway/web/irccloud.com/x-guabwguxfxcjnoaf] has quit [Quit: Connection closed for inactivity] 06:27 <@Dolemite> mr0ning, be0tches and h0ez! 06:39 * aestetix hugs Dolemite 09:56 <@ezelkow1> uggh, fuckin osx 09:57 <@ezelkow1> click a mailto link, it opens the mail app, cant use the mail app because of security policies, but the only way to change the default email preferences in osx is inside the actual mail app, not any system wide preferences setting 09:58 <@ezelkow1> god forbid you set a system wide setting...................in a systems setting area instead of a fucking application 10:01 * Corydon76 rages at Trustwave. 10:02 <@Corydon76> Someone there (and probably multiple people) are utterly incompetent, and yet... we're trusting them to test for PCI compliance 10:04 <@Corydon76> CVE-2017-8923 is what they're citing as a PCI compliance issue. Okay, it's a vulnerability, and it should be fixed. Fine. But their recommended action is to upgrade to PHP 7.1.5, which is not only vulnerable, because they misread the report, but all versions of PHP 7 are vulnerable, because the PHP project hasn't fixed it yet. 10:06 <@Corydon76> Red Hat went to the additional trouble to find out that the vulnerability couldn't be triggered remotely and was likely just a crash bug. Even if a particular application could be triggered to crash, it's at worst a DoS attack, not a compromise of payment information. 10:16 <@Mirage> Corydon76: is the person you're working with named Tony Donelson? 10:17 <@Corydon76> Who the problem person is isn't determined. I get a report with their scan and suggestions. 10:50 <@Mirage> Just wondering if it was the same TRD (his initials) we had to deal with at VU doing security scans and misinterpreting the shit out of them. Zero common sense..zero technical capability (that we could tell). 10:54 <@Corydon76> They've had some fair criticisms, like the fact that we didn't set the HttpOnly or Secure flags on our session cookies. But a number of their "vulnerabilities" have been string detections for software versions, not detections for actual problems. 10:54 <@Mirage> On a separate note..I'm replacing all the RG6 in the house this weekend with quad-shielded cables. I'm not liking that if I connect a tone generator to a drop in one room, I get tone from cables that simply run near it and are not connected to any splitters or anything. While I'm at it I'll also go ahead and pull cat6 and cat5e to all the same places for phone/ethernet as well. 10:55 <@Corydon76> I understand Ethernet, but why are you running cable for POTS lines? 10:56 <@Mirage> TRD used to flag every RHEL application just about based on the rpm major/minor versions and completely ignoring the patch level. He also acted confused about RHEL backporting security patches every single time we had to dispute his findings for remediation. 10:57 <@Mirage> By every time I mean if he scanned 4 new LAMP servers we would have to argue with him about each one, even though they all had the same versions of rpms installed and had almost exactly the same vulnerability report generated. 10:58 <@Mirage> That was a combination of QUALYS being dumb and him being dumber 10:59 <@Corydon76> I think we're lucky in that we've gotten them to exclude all but one site for the purpose of PCI compliance 11:00 <@Corydon76> Also, interestingly, even when we've failed to address some of their "issues", we've yet to have seen a penalty or threat of a penalty for it. 11:01 <@Corydon76> But we're not directly handling any payment information. It's all outsourced to another site. 11:02 <@Corydon76> Oh, and it's kind of ironic that Trustwave's portal is running on Flash. 11:21 -!- K`Tetch_ [~no@47.39.211.239] has joined #se2600 11:25 -!- K`Tetch [~no@unaffiliated/ktetch] has quit [Ping timeout: 272 seconds] 11:32 -!- jilt [jilt@failure.org] has joined #se2600 11:35 < jilt> hello fine folks 11:39 <@Mirage> you in the wrong channel? 11:39 <@Mirage> I know you can't be talking to us 11:44 <@Corydon76> Relax, Mirage, he's just hitting on you. 11:52 <@shapr> hello jilt, you coming to phreaknic? 12:21 < ZeroBorg> getting spiritual. 12:21 < ZeroBorg> https://www.youtube.com/watch?v=fyc-OTa9xpY 12:21 < PigBot> deadmau5 dared me to circuit bend a bible (at www.youtube.com) http://tinyurl.com/yb76br76 12:27 < xray> That is pretty cool. 12:28 < xray> I just heard about circuit bending. Have it on my list of things to read up on. 12:28 < ZeroBorg> lol, yea i saw a video on it forever ago. thought it was cool. last couple weeks been searching for what it was called 12:28 < ZeroBorg> Found it in a random arduino book. 12:29 < ZeroBorg> Been watching videos on it since yesterday about it...I may have went and bought some kids toys at goodwill this morning to give it a try.. 12:32 < ZeroBorg> He also has this......thing.....https://www.youtube.com/watch?v=GYLBjScgb7o 12:32 < PigBot> THE FURBY ORGAN, A MUSICAL INSTRUMENT MADE FROM FURBIES (at www.youtube.com) http://tinyurl.com/ydyu5z5f 12:38 < ZeroBorg> If you end up doing any circuit bending i wanna see it. 12:41 < xray> The Furby organ is awesome. I built a synth from scratch as my senior project in electronic design (in the early 70's). 12:41 < xray> I'm also planning on doing some things with SonicPi. I have some questions about it though that so far don't have answers. 12:42 < xray> I got side tracked on some other projects so it is on hold for the moment. 12:45 < ZeroBorg> never heard of sonicpi...looks awesome 12:48 < xray> If you get into it let me know we can share 12:49 < ZeroBorg> I think it would be cool to have it working with one of those 'group code' websites...i've seen it before 12:50 < xray> One thing I noticed (and not solved) is that songs I play online do not sound the same when played locally. As far as I know the local version should be using the same samples so they should sound the same. I'm trying to figure out why they sound different. 12:50 < ZeroBorg> Like where people can just all go there and all program at the same time. Everyone can change every piece of code. Like live coding but with multiple people 12:50 < xray> I ran across one digital music group code site. I'll have to check if I have a link to ti. 12:50 < ZeroBorg> and it is playing the music live 12:50 < xray> exactly 12:51 < xray> And it sounded pretty good 12:51 < xray> SonicPi intrigued me in that you can program music live 12:52 < xray> as opposed to composing a song and playing it via midi 12:52 < xray> Although you can also to that with SonicPi 12:53 < ZeroBorg> Yea, you could even program code snips and then copy and paste to change it live. So you could do it quickly and a little thought out. 12:53 < xray> I wonder if it can use macros for that and keyboard hot keys. Hmmm. . . No I have to get back on task. 13:04 -!- Mirage [~mirage@raw.thehippo.net] has quit [Ping timeout: 252 seconds] 13:13 < jilt> [12:46] (@shapr) hello jilt, you coming to phreaknic? 13:13 < jilt> probably not 13:13 < jilt> we sent a delegation from georgia 1 year, late 90s. 13:13 < jilt> now i live in nashville 13:14 < jilt> i think 1 of my buddies streaked it, if that refreshes anyone's memory! 13:14 < jilt> "FooDStamP" 13:17 -!- K`Tetch_ [~no@47.39.211.239] has quit [Quit: ( www.nnscript.com :: NoNameScript 4.22 :: www.esnation.com )] 13:17 -!- K`Tetch [~no@47.39.211.239] has joined #se2600 13:17 -!- K`Tetch [~no@47.39.211.239] has quit [Changing host] 13:17 -!- K`Tetch [~no@unaffiliated/ktetch] has joined #se2600 13:27 -!- vaneck [~vaneck@section9.vaneckzero.com] has joined #se2600 13:27 -!- mode/#se2600 [+o vaneck] by ChanServ 13:29 <@shapr> jilt: are you a former freeside member? 13:31 -!- K`Tetch_ [~no@47.39.211.239] has joined #se2600 13:35 -!- K`Tetch [~no@unaffiliated/ktetch] has quit [Ping timeout: 245 seconds] 13:51 -!- K`Tetch [~no@47.39.211.239] has joined #se2600 13:51 -!- K`Tetch [~no@47.39.211.239] has quit [Changing host] 13:51 -!- K`Tetch [~no@unaffiliated/ktetch] has joined #se2600 13:53 -!- Mirage [~mirage@ra.thehippo.net] has joined #se2600 13:53 -!- mode/#se2600 [+o Mirage] by ChanServ 13:54 -!- K`Tetch_ [~no@47.39.211.239] has quit [Ping timeout: 246 seconds] 13:56 -!- jilt [jilt@failure.org] has quit [Quit: EPIC5-1.1.10[1781] - amnesiac : Nothing like alien anal and cheap american beer] 14:07 -!- jilt [jilt@failure.org] has joined #se2600 14:07 < jilt> [14:23] (@shapr) jilt: are you a former freeside member? 14:07 < jilt> no 14:07 < jilt> but i know eater who founded it really well 14:07 < jilt> and some other founding folks 14:07 < jilt> are you? 14:30 <@Evilpig> time to watch smokey and the bandit 14:30 <@shapr> jilt: I'm a current member, but haven't visited in months 14:36 -!- K`Tetch_ [~no@47.39.211.239] has joined #se2600 14:39 -!- K`Tetch [~no@unaffiliated/ktetch] has quit [Ping timeout: 246 seconds] 15:03 -!- K`Tetch [~no@47.39.211.239] has joined #se2600 15:03 -!- K`Tetch [~no@47.39.211.239] has quit [Changing host] 15:03 -!- K`Tetch [~no@unaffiliated/ktetch] has joined #se2600 15:05 < jilt> shapr gotcha, i dont think i know anyone there anymore.. everyone ended up moving to CA 15:07 -!- K`Tetch_ [~no@47.39.211.239] has quit [Ping timeout: 246 seconds] 16:00 -!- K`Tetch_ [~no@47.39.211.239] has joined #se2600 16:03 -!- K`Tetch [~no@unaffiliated/ktetch] has quit [Ping timeout: 245 seconds] 16:37 <@Corydon76> If anybody in Nashville wants a free used managed Gigabit switch, there's a giveaway at Watkins currently running on the NLUG list. 16:43 < xray> I would love one but I'm in ATL. 16:45 -!- Mirage [~mirage@ra.thehippo.net] has quit [Ping timeout: 240 seconds] 16:47 -!- Mirage [~mirage@raw.thehippo.net] has joined #se2600 16:47 -!- mode/#se2600 [+o Mirage] by ChanServ 17:31 -!- K`Tetch_ [~no@47.39.211.239] has quit [Quit: ( www.nnscript.com :: NoNameScript 4.22 :: www.esnation.com )] 17:32 -!- K`Tetch [~no@unaffiliated/ktetch] has joined #se2600 18:05 <@Mirage> I think I may have finally gotten my packet loss issue resolved. took the powered "zero loss splitter" mounted in the attic out of the equation by adding a splitter just before it on the input and sticking the cable modem run on it. haven't seen any loss since. earlier my script was showing a spike in packet loss about every 8-10 minutes 19:18 -!- strages [uid11297@gateway/web/irccloud.com/x-yhejdwvcrzjetjiy] has quit [Quit: Connection closed for inactivity] 19:44 < aestetix> Man, I hope outrage culture stops soon. 19:47 -!- TheDukh [~thedukh@66-38-50-21.pool.dsl.duo-county.com] has quit [Read error: Connection reset by peer] 19:48 -!- TheDukh [~thedukh@66-38-50-21.pool.dsl.duo-county.com] has joined #se2600 20:30 -!- Warcop [~josh@mobile-166-170-54-119.mycingular.net] has joined #se2600 --- Log closed Fri Sep 07 00:00:54 2018