05:53:24 *** loggy (loggy@5C4B2CE4.B8E60B3B.FD9B6484.IP) has joined #crytocc 05:53:24 Topic for #crytocc is: Cryto Coding Collective | THIS IS A PUBLICLY LOGGED CHANNEL. http://wire.cryto.net/logs | http://cryto.net/, http://forums.cryto.net/ | Rules: no Anonymous, no cracking, no drama | Online Flash IDE: http://wonderfl.net/about/ | Cryto Research: http://research.cryto.net/ | RIP Aaron Swartz 05:53:24 Users on #crytocc: loggy RuDy pzuraq lady-3jane ebola cr[a]tes mama evilworks xnite twitchyliquid64 tustkle wh1t3r4bb1t AppleJack jamesbt sila-jain joepie91 Chasenet ryan_ foolex Ishaq AnonForecast MK_FG Kamonra smithsonian IR601 Divinite truetravesty aHlTat shikat 07:09:33 *** zest (zest@cryto-67AF6B55.torservers.net) has joined #crytocc 08:00:04 *** RuDy has quit (Client exited) 08:36:17 so 08:36:21 stay away from Site5 as hosting 08:36:33 http://www.site5.com/blog/s5/security-and-social-engineering/20130307/comment-page-1/ 08:36:41 especially read the attempts at justification in the comments... 09:11:37 yes hello 09:11:48 here at srsvps we require that you send a gpg signed email to us to recover your accounts 09:18:46 AppleJack: the guy just responded with more drivel 09:18:54 basically the same corporate drivel as in the first post 09:19:38 of course entirely ignoring all points made 09:21:33 AppleJack: you have a screenshot of it? 09:21:35 they just rm'ed the thread 09:30:55 *** mama has quit (Ping timeout) 09:32:03 *** mama (me@8E0F8B62.46D254F1.23B09CBC.IP) has joined #crytocc 09:45:56 AppleJack: http://joepie91.wordpress.com/2013/03/08/site5-and-their-insecure-practices-and-questionable-business-ethics/ 09:52:54 *** mama_ (me@cryto-1088E1FE.dfri.se) has joined #crytocc 09:53:29 *** mama has quit (Ping timeout) 09:53:39 *** mama_ is now known as mama 09:56:45 *** mama has quit (Ping timeout) 10:00:55 *** BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc 10:03:00 *** pzuraq has quit (Input/output error) 10:07:08 hey, anyone know how to dl all txt files from a specific web page using wget or something similar ? 10:11:51 *** RuDy (RuDy@cryto-FF91214C.anon.is) has joined #crytocc 10:13:49 I'm actually not 100% sure on the exact syntax, zest 10:13:51 but it's possible 10:13:56 wget --help will probably give you more info 10:14:04 you're going to need the depth parameter and recursive parameter, and probably a few more 10:14:34 *** BLTGeno has quit (Client exited) 10:19:58 found one, ty 10:26:31 Heh, wow, I wonder how that Ben guy feels ;) 10:26:36 Ben? 10:26:48 From joepie's ragepost above 10:26:51 ahh 10:26:53 (and see comments there) 10:27:01 well, quite vindicated now that its viral 10:27:29 MK_FG: do you understand how the linux user system works? 10:27:45 I don't understand the word "vindicated" ;) 10:28:03 And what you mean by "linux user system" ;) 10:28:06 I understand how it works for a single machine, but dont underant how it works when you start using LDAP and the machine no longer relies on itself for user auth 10:28:14 Ah 10:28:16 ie: userid, users, logins, groups 10:28:30 vindicated = satisfied 10:28:32 basicaly 10:28:35 *basically 10:28:50 I think all LDAP, NIS and their ilk is just glorified rsync for /etc/{passwd,group,shadow} files 10:29:03 Hm, then you probably don't mean the same Ben 10:29:04 really? 10:29:24 I thought they worked through another interface 10:29:31 cause LDAP can only do single queries at a time 10:29:38 no download the entire user database 10:29:39 I'm just trying to imagine myself being in that position where you have to wiggle around the truth as hard as he does, yet keep doing that 10:29:51 Ben = Sales person? 10:29:52 I'd probably blow my brains out at that point, just to stop ;) 10:29:55 Yeah 10:29:57 oh 10:30:02 I thought he was customer 10:30:34 Yeah, wrt ldap and such - another interface, of course, nss 10:30:44 twitchyliquid64: Ben == someone from Site5 10:30:51 no idea about position/function 10:30:52 ahh 10:31:03 joepie91: he would be very low 10:31:07 almost definitely 10:31:14 not so sure... 10:31:17 But general idea is that when libc goes to nss to get "getpwuid()" result, it loads whatever is in your /etc/nsswitch.conf... 10:31:30 ...and you have some libnss_whatever.so there for e.g. "user" 10:31:30 twitchyliquid64: Site5 seems like a small place, organizationally speaking 10:31:44 And that lib connects to whatever and returns pw-struct 10:31:52 *** BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc 10:32:11 ah ok 10:32:39 So ldap, nis, they all are kinda simple replacement for reading /etc/passwd file directly 10:32:40 so nsswitch is configured by default to use the passwd etc files 10:32:46 And they all suck, I think ;) 10:32:55 Yeah 10:33:04 and instead the requests are routed through the LDAp as writte in nsswitch.conf? 10:33:28 Yes, I actually have "hosts: files nis dns" here on laptop 10:33:58 So that when I'm on local network with the home-servers, e.g. fraggod.net resolves to 192.168.0.11 through ypserv 10:34:05 I see 10:34:33 so what other 'databases' are there apart from shadow, passwd, dns, and group? 10:35:03 These names correspond directly to .so filename, I think 10:35:15 .so = shared object/library? 10:35:28 Do "locate libnss_" 10:35:44 Or "ls /lib/libnss_*" 10:36:00 And there you go - all available backends for you system ;) 10:36:21 (and nothing stops you from dropping your own lib there) 10:36:40 (...and using "hosts: mywhatever" 10:36:53 Yeah, about .so 10:37:27 why do they use .so for registering backends? 10:37:31 why not an actual interface? 10:37:35 ie: api 10:38:10 Why doesn't abi of the .so counts as the interface? 10:38:22 It's like plugins 10:39:03 And given that they are queried from libc, I'd say network api is out of question there 10:39:22 right 10:40:56 14:36 < MK_FG> (...and using "hosts: mywhatever" 10:41:06 can you do myhost: mywhatever? 10:41:26 Of course, if you have /lib/libnss_mywhatever.so ;) 10:41:33 Oh, "myhost" too 10:41:53 But "myhost" there will be some nss concept, not dns host 10:42:16 Like, "getent myhost something" will then query your libnss_mywhatever.so 10:42:19 is there a list of 'nss concepts'? 10:42:27 Mm... man 5 nss? 10:42:41 I bet there's a lot of docs 10:42:46 Or man nsswitch.conf 10:42:52 znc@research:~$ man 5 nss 10:42:52 No manual entry for nss in section 5 10:42:55 And by links from there... 10:43:05 https://encrypted.google.com/search?q=man+5+nss&ie=utf-8&oe=utf-8&aq=t&num=50&complete=0 10:43:14 (google works as shell, too!) 10:45:36 shit thats cool 10:46:17 I wish there was one page, that had everything about configuring and using linux/UNIX on it 10:46:21 so I could learn all this shit 10:46:23 in one go 10:51:24 MK_FG: so the NSS system is only related to the libc library? 10:53:17 Yes, I don't think anything else uses these modules 10:53:51 Also, about tech to upload all that stuff into brain, I heard they're already doing it with humans ;) 10:54:40 www.extremetech.com/extreme/149879-brown-university-creates-first-wireless-implanted-brain-computer-interface <-- there! 10:55:09 :DDD 11:03:44 *** mama (me@cryto-A266B332.microshaft.org) has joined #crytocc 11:28:21 *** BLTGeno has quit (Connection reset by peer) 11:28:26 *** BLTGeno (BLTGeno4@cryto-590FDA9.basl.cable.virginmedia.com) has joined #crytocc 11:55:12 *** mama has quit (Client exited) 11:56:04 *** mama (me@cryto-399FF2DF.ro1.torservers.net) has joined #crytocc 11:56:26 *** zest has quit (User quit: poweroff) 11:58:03 *** zest (zest@cryto-9A2AD82.vm.okeanos.grnet.gr) has joined #crytocc 12:05:02 *** eggtimer (eggtimer@cryto-454686D9.compute-1.amazonaws.com) has joined #crytocc 12:06:01 *** zest has quit (Client exited) 12:06:22 *** eggtimer has quit (User quit: Connection closed) 12:19:54 *** mama has quit (Ping timeout) 12:22:03 *** mama (me@cryto-84C88BCC.torservers.net) has joined #crytocc 12:39:20 *** mama has quit (Ping timeout) 12:39:57 *** mama (me@D29CF64.DA286F1B.29EB5131.IP) has joined #crytocc 12:46:44 *** evilworks has quit (Ping timeout) 12:47:15 *** evilworks (evilworks@cryto-1A29FEFC.dynamic.amis.hr) has joined #crytocc 13:21:32 *** mama has quit (Ping timeout) 13:30:47 *** HiveResearch (HiveResear@9071EA2B.9F32FB1E.57B9DF22.IP) has joined #crytocc 13:54:52 *** mama (me@cryto-59669E4A.ml-ext.ucar.edu) has joined #crytocc 14:35:14 *** evilworks has quit (Input/output error) 14:41:43 *** DrWhat (VGHJHBN@cryto-C0B73CE6.cable.virginmedia.com) has joined #crytocc 15:06:24 *** BLTGeno has quit (Client exited) 15:50:33 joepie91:) you have an ad on your blog :O 15:51:44 twitchyliquid64:) vindicated isn't satisfied, it's cleared of suspicion 15:56:05 god damnit I want to +1 menthix's comment on joe's blog 16:09:30 *** zxcvbnm (zxcvbnm@cryto-7B663E92.static.cloud-ips.com) has joined #crytocc 16:20:40 *** sila-jain has quit (Client exited) 16:32:11 An ad 16:32:20 HASHAHAHAHAHAHSHHVHZDGIS\NVZKJDFNKLCGNIOGSDJVCIOFKJVIKFHGIKANRC IFNXBSE.FCPJGEXICNF loggyMQJBNG3WQ90356TQ'.D;F.GA'W.V'L;XGFG.Zd:rh.c@/p@<./j.Nkb:v/YB,v,2£! Connecting to website & checking news... 16:32:29 • Can't get news, website is down at the moment 16:32:32 WTF 16:54:24 *** RuDy has quit (User quit: Leaving) 17:56:06 lady-3jane: what? 18:03:54 also, god, that Ben guy is either purposely ignoring what is being said, or just is not capable of understanding the responses 18:04:14 he's infinitely rehashing the same arguments that have been proven incorrect several times 18:09:17 *** Nox (Nox@91A49DF7.2ADB708C.B32B6C79.IP) has joined #crytocc 18:09:38 g'day erryone 18:11:15 ohai 18:11:16 Nox 18:11:19 have you read my latest rant post 18:11:44 link please 18:11:56 http://joepie91.wordpress.com/2013/03/08/site5-and-their-insecure-practices-and-questionable-business-ethics/ 18:12:54 lel 18:14:32 Nox: for bonus points 18:14:35 read the comments below 18:15:00 I am reading the picture. 18:15:05 Cracked a grin :P 18:15:50 " It basically came down to “you’re just repeating the same things over and over again, ignoring the points I am making”." 18:15:54 joepie91, I fucking hate when you say that. 18:16:14 I fucking hate when people do that. :| 18:16:19 touché 18:16:51 Wait, is that "ben" the one from the pic? 18:16:54 If so, YES. 18:17:59 joepie91, imho Ben isn't a complete idiot. He has a good point when responding to "Gustaf" 18:18:43 Also, email him and then post the email, stop trying to be a douche claiming you want transparency. 18:19:36 Nox: what good point would that be? 18:19:50 also, email him and post the email? and then get shit on for "breaching privacy"? no thanks 18:19:57 if he wants to talk, he can talk in public 18:20:00 Do you have hosting there? 18:20:09 where others can read what he says and he can't sneakily edit or remove things when he notices people might dislike them 18:20:16 no 18:20:18 Then there's nothing he can do to you if you publish his emails. 18:20:25 ... 18:20:31 The "how many hoops is too many hoops" point. 18:20:43 Nox: there are many methods that do not add extra hoops 18:20:46 but add significantly more security 18:20:52 simple example being SMS verification 18:21:05 joepie91, oh I completely understand that. 18:24:56 *** tustkle has quit (User quit: Konversation terminated!) 18:34:37 *** sazerac (sazerac@186A8A0A.AA517E7E.DB3C1458.IP) has joined #crytocc 18:44:45 so, for anyone that was wondering 18:44:51 about Bens position in Site5 18:44:53 he's the CEO and co-owner 18:44:53 http://www.site5.com/about/management/ 19:05:03 *** MRdjst0rm (MRdjst0rm@cryto-454686D9.compute-1.amazonaws.com) has joined #crytocc 19:06:26 *** MRdjst0rm has quit (User quit: Connection closed) 19:22:24 joepie91, nobody cares 19:31:48 well I kind of disagree, I care 19:32:00 This dude's whole mentality about security is "just get it out of the way" 19:32:15 Too many hoops is too many hoops 19:32:32 That's the whole point of security, is to slow down the rapid-fire click "yes" to anything mentality 19:35:39 more sadness: 19:35:45 Also, your "if this is a discussion on how not to teach people" thing... This isn't about not teaching people things, it is about making computers work *for* people, not people for computers. 19:35:45 People should not need to adjust what they do because we can't program a computer to aid them. 19:35:45 ... 19:36:12 context: "educating people is the wrong way to go, computers should be dumbified" 19:39:51 That's a bad attitude 19:40:27 exactly 19:40:45 it's the same learned helplessness thing again 19:40:56 assuming that you can't fix the cause anyway (without considering it) 19:41:01 so trying to treat the symptoms instead 19:41:04 pisses me off so much 19:42:18 I tend to agree 21:02:18 Hi joepie91 do you have any news on nick? about why he left? 21:16:39 ebola: still alive? <3 21:27:06 *** wh1t3r4bb1t has quit (Connection reset by peer) 21:53:20 drwhat faces 21:53:26 toss pot 21:53:37 you are a fycpkcolnafvlnsvn 21:54:39 *** cr[a]tes has quit (Input/output error) 21:55:56 *** cr[a]tes (crates@8C14DE12.E8AD8326.B3321389.IP) has joined #crytocc 21:58:15 olny 55 otua 100 pleope can atulacy raed tihs , as lnog as the fsrit and lsat lteter are in the cecorrt pcale it dnseot mtetar 22:03:07 *** DrWhat has quit (User quit: AnacønÐa · "When all else fails, follow instructions") 22:38:02 *** zxcvbnm has quit (User quit: Lost terminal) 22:41:16 *** monod (orsacchio@cryto-A03A24B0.retail.telecomitalia.it) has joined #crytocc 22:48:03 *** monod has quit (User quit: ) 23:11:21 *** wh1t3r4bb1t (antarctica@cryto-497FB66D.direcpc.com) has joined #crytocc 23:21:16 *** wh1t3r4bb1t has quit (Connection reset by peer) 23:23:00 *** wh1t3r4bb1t (antarctica@cryto-497FB66D.direcpc.com) has joined #crytocc