00:00:52 *** AnonForecast_ has quit (Connection reset by peer) 00:01:19 *** AnonForecast_ (AnonForeca@cryto-999D5D74.dhcp.insightbb.com) has joined #crytocc 00:10:56 *** AnonForecast_ has quit (Connection reset by peer) 00:11:23 *** AnonForecast_ (AnonForeca@cryto-999D5D74.dhcp.insightbb.com) has joined #crytocc 01:03:26 *** AnonyOps (AnonyOps@AnonyOps.php) has joined #crytocc 01:12:01 *** AnonForecast_ has quit (Connection reset by peer) 01:12:24 *** AnonForecast_ (AnonForeca@cryto-999D5D74.dhcp.insightbb.com) has joined #crytocc 01:37:16 *** AnonyOps has quit (Connection reset by peer) 02:04:47 *** Ishaq has quit (Ping timeout) 02:06:26 *** AnonForecast_ has quit (Write error: Connection reset by peer) 02:11:16 *** Ishaq (Ishaq@cryto-6C73979.rf.usr.sh) has joined #crytocc 02:20:43 *** ElectRo` has quit (Client exited) 02:30:09 *** pzuraq has quit (Input/output error) 03:08:04 *** HiveResearch (HiveResear@developers.developers.developers) has joined #crytocc 03:10:17 *** foolex has quit (Ping timeout) 03:13:35 don't watch We Are Legion - it brings massive sad 03:16:13 *** LastOneStanding has quit (User quit: you guys, I'm going home.) 03:20:28 *** foolex (foolex@AD356075.7DC890E0.CEC56216.IP) has joined #crytocc 03:31:37 *** foolex has quit (Ping timeout) 03:39:25 *** foolex (foolex@AD356075.7DC890E0.CEC56216.IP) has joined #crytocc 04:27:01 *** HiveResearch has quit (Ping timeout) 04:58:03 *** Ari has quit (Connection reset by peer) 04:58:15 *** Ari (Ari@Ari.users.cryto) has joined #crytocc 05:05:02 *** S1renide (S1renide@cryto-4293BCB0.compute-1.amazonaws.com) has joined #crytocc 05:06:24 *** S1renide has quit (User quit: Connection closed) 05:09:08 *** Ari has quit (User quit: KBAI <3) 05:40:06 *** HiveResearch (HiveResear@developers.developers.developers) has joined #crytocc 06:20:55 hey 06:21:05 I spoke about 06:21:08 how linode wasn't too secure 06:21:40 and since they refused to go with out deal of non-disclosure http://blog.linode.com/2013/04/12/security-notice-linode-manager-password-reset/ 06:22:15 more in HTP5 06:24:13 careers kill skills 06:37:36 time for bed 06:37:47 I read some john locke and accidentally shat 1100 words 06:38:13 tomorrow morning will be a rewrite and expansion to the desired page count 06:38:16 lawlz 06:38:36 (2 pages, single spaced) 06:38:41 nothing fancy 06:38:47 just need about another half page I think 06:39:00 which won't be hard, some of my things need clarifying, but it's too late to do that 06:39:37 * lady-3jane pops to bed 07:05:47 *** HiveResearch has quit (User quit: ) 07:41:32 *** Xeross|AFK is now known as Xeross 08:05:00 *** Xeross is now known as Xeross|AFK 08:22:58 *** Kamonra has quit (Ping timeout) 08:24:18 *** Kamonra (kamonra@cryto-348E1525.hostedby.us) has joined #crytocc 08:55:27 *** devslashrnd (devslashrn@cryto-AC70B974.dip.t-dialin.net) has joined #crytocc 09:07:18 .bitcoin 09:07:19 1 BTC = $91.00, 1 BTC = €70.00 10:41:58 Did anyone heard anything bad or good about Abine Inc.? 10:42:37 I was surprised to find that a number of (fairly known) privacy addons for ff seem to have migrated under that umbrella - https://addons.mozilla.org/en-US/firefox/search/?q=abine&appver=19.0&platform=linux 10:43:17 Iirc GoogleSharing was by moxie marlinspike at the beginning, yet now it's Abine's... 10:44:26 Sounds fishy 10:50:30 havent heard of any of those plugins. have a look on collusion, its not only blockin trackers, its drawin a nice graph of how they are connected to each other. sometimes a way to show the "whatever-guys" something bout their privacy 10:51:20 https://addons.mozilla.org/en-US/firefox/addon/collusion/?src=ss 10:52:44 Yeah, I heard about it, though using Ghostery myself, dunno how they compare wrt lists of stuff they block 10:55:28 im usin ghostery also, some are catched by the one but not by the other and vice-versa 10:57:52 thers also "disconnect" same blockin like collusion but no fancy graph, from the same guy 10:58:43 but it additionally checks for https version of sites when u r connected trough wifi 11:03:27 Hm, have you tried profiling these vs each other wrt firefox performance and/or ram leaks? 11:04:11 I didn't check for status of gecko profiler for a while, but iirc it was almost-useable in 17, maybe works on linux now... 11:05:04 im usin the plugins in chromium and i dont care about performance as long as it feels smooth 11:05:40 Ah, yeah, they're probably better isolated there, running in each tab's pid 11:07:27 switched from firefox cause of constant freezes during ram cleanses 11:08:08 It shouldn't have that much stuff to gc in the first place! 11:24:09 *** obbyt (obbyt@obbyt.users.cryto) has joined #crytocc 11:25:26 *** obbyt has parted #crytocc (None) 12:20:20 *** dirtyhary has quit (Client exited) 12:36:53 *** dirtyhary (dirtyhary@B9F148D.6F361041.5AB15294.IP) has joined #crytocc 12:41:53 *** AnonForecast_ (AnonForeca@cryto-999D5D74.dhcp.insightbb.com) has joined #crytocc 12:50:44 *** eighter has quit (User quit: Konversation terminated!) 12:56:24 *** utishik (utishik@73FE0495.AA517E7E.DB3C1458.IP) has joined #crytocc 13:09:03 *** Cryto285 (Cryto285@cryto-176A22C2.privacyfoundation.dk) has joined #crytocc 13:10:10 *** Cryto285 has quit (User quit: Page closed) 13:42:51 *** Cryto147 (Cryto147@502766FE.84483B1B.BC940A52.IP) has joined #crytocc 13:47:35 do you think anonymous will have any influence in the korean hostilities? 13:53:54 *** Cryto147 has quit (Ping timeout) 14:04:26 *** In (input@cryto-2BCBC290.cwqh3.cht.bigpond.net.au) has joined #crytocc 14:04:32 *** In has quit (User quit: In) 14:09:36 Damn these existential problems! 14:10:20 * MK_FG managed to create distinct DoesNotExist error alongside DoesNotExists 14:21:45 *** Amnesthesia has quit (Ping timeout) 14:22:02 *** Cryto144 (Cryto144@8F196848.ABF38260.12F80A29.IP) has joined #crytocc 14:22:30 *** Cryto144 has parted #crytocc () 15:18:16 the week just started and a friend of mine came along and whined about a virus infection, "bka-trojan", he got that for the 2nd time. now he expects that i take care, again. ive always told him " why didnt u use just linux, ur only usin ur pc for watchin porn, the os doesnt matter" but he wont listen 15:26:14 *** devslashrnd has quit (Ping timeout) 15:27:41 *** HiveResearch (HiveResear@developers.developers.developers) has joined #crytocc 15:58:14 *** zxcvbnm (zxcvbnm@zxcvbnm.users.cryto) has joined #crytocc 16:19:54 *** devslashrnd (devslashrn@cryto-AC70B974.dip.t-dialin.net) has joined #crytocc 16:22:12 devslashrnd: there is more chance of catching malware from visiting 'normal' sites than there is from visiting porn sites 16:22:13 fyi 16:22:39 MK_FG: pretty sure that "DoesNotExists" is not valid English 16:22:40 :P 16:23:16 also, MK_FG: I'm using DNT plus from Abine 16:23:17 it works quite well 16:23:45 maybe, but thats his usecase^^, oh and facebook and sometimes wikipedia. and he often googles "google" 16:24:08 devslashrnd: and he is running Windows, right? 16:24:13 what AV is he running? 16:24:16 of course 16:24:41 devslashrnd: what AV? 16:24:44 uh, that dudes with the firewall, aehm 16:25:10 if it's anything that is not Avast, tell him to install Avast 16:25:19 it's quite effective against PEBKACs 16:25:24 as well as malware 16:25:37 joepie91, Wat! 16:25:42 MK_FG: ? 16:25:50 joepie91, "it (does not) exists", I've googled it! 16:25:55 lol 16:26:25 You don't know english even more than I do! 16:26:49 zonealarm it was 16:28:33 I have always liked zonealarm 16:28:34 rofl 16:28:42 devslashrnd: right, tell him to install Avast 16:28:43 good consumer level fw 16:28:51 if ZoneAlarm is all he has, it's no wonder he's getting fucked 16:29:12 also, tell him to install avast free 16:29:17 not the paid version 16:29:22 the free one is more than enough 16:29:27 No-Script for your browser is a good idea too. 16:29:34 no-script is mostly pointless 16:29:38 no its not 16:29:38 just enable click-to-play 16:29:40 in your browser 16:29:41 yes, it is 16:29:46 no it's not.. 16:30:12 zxcvbnm: the only things noscript can do is block plugins (which click to play also does without needing extensions) and blocking javascript (which is fucking useless) 16:30:27 i will do, he will ask me to fix it when im visiting him nexttime 16:30:27 blocking javascript is useless? 16:30:30 zxcvbnm: yes 16:30:35 what. 16:30:51 why is blocking javascript useless? 16:30:52 zxcvbnm: I can count the amount of javascript-related exploits in the past 5 years on one hand 16:31:03 javascript is an effectively harmless clientside scripting language 16:31:10 it cannot access anything on your machine 16:31:13 cannot run any processes 16:31:17 cannot destroy anything 16:31:30 and a lot of sites did not work without js 16:31:35 the most disasterous recent bit of javascript was a failed implementation of localstorage in a few browsers that led to the ability to fill up someones HDD with random data 16:31:51 because localstorage storage limits weren't calculated properly 16:31:58 Ok hold on... 16:32:10 inb4 comes up with the "use java from within javascript in firefox" thing 16:32:13 which is blocked when you use click to play 16:32:33 and doesn't work outside firefox _at all_ 16:33:04 Ok, so you are just describing an alternative solution to a similar problem 16:33:07 Just with a little bit different specificity 16:33:18 .... no 16:33:25 look 16:33:34 click to play is a cork that plugs a potential hole 16:33:49 noscript is a duct tape factory, massive overkill 16:33:54 with potentially undesirable side effects 16:34:10 in fact, click to play is already a standard part of firefox 16:34:14 and to a degree, of chrome 16:35:11 I get these "you should use noscript" discussions every other week 16:35:22 usually the motivation is "to prevent someone grabbing your IP, bypassing a proxy" 16:35:25 which makes even less sense 16:35:51 because any method of making any connection in Javascript is proxied through the exact same proxy as the rest of your traffic 16:36:12 then you have the people that say "YES BUT JAVA FROM WITHIN JAVASCRIPT" which is firefox-specific and does not work if you block java applets 16:36:23 and the people that confuse java with javascript 16:36:25 etc etc etc 16:36:38 tl;dr almost noone ACTUALLY understands what Javascript is, how it works, and what potential issues it can or cannot cause 16:37:19 rant over 16:39:23 Right, well, you're a strong coder and I can respect your opinion of this. I'm not a marching no-script soldier.. if one solution is better than another, that's fine, I like innovation 16:40:01 *** Xeross|AFK is now known as Xeross 16:40:57 Now, I don't completely agree with the pointless part, because we know some of the world's most popular exploit kits (albeit maybe you can count them on your hand) use JavaScript AND Java, among other things 16:41:21 But that really doesnt' have anything to do with no script vs click to play 16:41:34 To say that javascript is harmless is a pretty sweeping statement 16:41:36 zxcvbnm: 16:41:37 https://en.wikipedia.org/wiki/Blackhole_exploit_kit 16:41:46 This landing page contains obfuscated JavaScript that determines what is on the victim's computers and loads all exploits to which this computer is vulnerable [...] 16:41:50 the only mention of javascript 16:42:00 oh i know 16:42:02 I was already on that page 16:42:04 afaik the blackhole kit is effectively one of the most professional kits 16:42:13 no mention of actually using JS for the exploits 16:42:16 most professional *known kits 16:42:17 just as feature detection 16:43:09 http://nakedsecurity.sophos.com/exploring-the-blackhole-exploit-kit-7/ 16:43:14 no JS used for exploits themselves 16:43:29 yes, they use JS 16:43:34 no, the JS in there is not harmful 16:43:38 it's just bootstrapping code 16:43:41 to selectively apply exploits 16:44:01 To say that javascript is harmless is a pretty sweeping statement 16:44:11 the point is that this is what javascript was *designed* to be 16:44:27 javascript isn't something like flash or java that runs effectively as a stand-alone (sandboxed) binary 16:44:45 it's a scripting language that is effectively *made* to not allow access to anything outside the browser page 16:45:00 the attack vectors that are used in exploit kits simply aren't there 16:45:06 and can't be 16:45:27 the only reasonably possibility of exploiting a browser via JS alone, is by finding flaws in the JS engine implementation and causing overflows or similar tricks 16:45:32 reasonable * 16:45:57 Ok, yes. so we agree that it is a vehicle to exploitation? 16:47:50 This is interesting for me by the way, I appreciate knowledge 16:48:19 I don't need to be right, I don't have an agenda 16:48:28 (imaginin joepie91 bangin his head on the keyboard) 16:48:48 Ok, yes. so we agree that it is a vehicle to exploitation? 16:48:57 not any more than HTML is 16:49:21 in fact, you can apply most of the flash and java exploits just fine *without* javascript 16:49:24 it'd just be a bit noisier 16:49:30 because you cannot selectively apply them 16:49:39 Huh? I thought people used NoScript vs XSS and tracking 16:49:45 maybe we should block HTML! 16:49:52 :P 16:50:01 MK_FG: people use it for various reasons, very few of them are valid 16:50:10 you can do it without them, yes, that'd be the exploit of Flash or Java 16:50:14 and afaik the XSS reason stopped being valid after, afaik, firefox now also has native XSS protection 16:50:16 but having a quiet way to do it, like you pointed out, is critical 16:50:18 just like Chrome has had for quite a while 16:50:26 zxcvbnm: not really 16:50:32 doing it noisily is just a cost of business 16:50:38 it's nice if you can get rid of the noise, but it's not crucial 16:51:03 well, that's sort of a 2 fold part 16:51:08 how noisy is noisy to a computer uesr? 16:51:08 user* 16:51:14 and how noisy can you be and still be successful? 16:51:22 how much more successful can you be if you minimize the noise? 16:51:36 anyway, MK_FG, turn on click to play, install ghostery or DNT+ or w/e, install adblock, and update to the latest version of chrome or firefox 16:51:41 chance of infection is nearly zero 16:51:50 and no adverse side-effects like sites breaking 16:52:09 zxcvbnm: if I recall correct, the average detection time for a new exploit kit is somewhere in the region of a few hours 16:52:16 MK_FG: joepie91 told me earlier that if you dont' wanna bother with click to play, no-script is effectively synonymous 16:52:25 :D 16:52:27 wat 16:52:29 lol 16:52:29 no, it's not 16:52:31 kidding. 16:53:02 Nah, click to play is the best thing since sliced bread, why'd you not want it? 16:53:04 the bka-trojan i talked about earlier is a blackmail virus, it doesnt matter if its noisy cause it will say " here i am gief moneez" after success 16:53:13 Implementation of it kinda sucks though 16:53:28 FlashBlock looked nicer! 16:53:33 I never said I don't want it, I suggested no-script and then joepie91 started 16:54:13 devslashrnd: ah, is it the german ransom one? 16:54:20 jepp 16:54:37 it also comes in an Anonymous flavor! 16:54:39 (not kidding) 16:55:00 Dunno about any anti-XSS stuff done in ff, doing whitelisting seem to be generic solution, wonder how ff might do it otherwise... 16:55:26 they ve arrested a bunch of people a few weeks ago, now its back 16:56:11 MK_FG: chrome includes XSS detection - if it finds any of the request parameters in the body anywhere and it looks like a script, it'll block execution 16:56:15 Oh, I see XHR XSS, that's fair, this is being done for a while, yeah... 16:56:30 Hmm 16:56:31 it works remarkably well 16:56:44 afaik FF recently implemented something similar 17:00:02 Hm, actually, about xss things, do you guys know a way to stop sites from rebinding firefox keys from JS? 17:00:34 Sites seem to aggrivate me with this more and more lately... 17:00:55 And iirc googling for it brought me no luck in the past 17:02:04 Lacking better solutions, guess I'll start patching that crap out of firefox sources one day 17:04:18 joepie91: I tried blocking HTML like you said, but now people in our office are saying the internet is "down" 17:07:04 MK_FG: Twitter is one of the worst offenders with that 17:07:09 they actually hijack the F5 key 17:07:14 to mean 'retweet' on a tweet lookup page 17:07:17 VERY annoying 17:07:21 zxcvbnm: lol 17:07:31 :P 17:07:33 Yeah, people who thought of that should be shot 18:04:57 *** HiveResearch has quit (Connection reset by peer) 19:16:12 *** Cryto351 (Cryto351@C24C5766.5D60F8E5.5BC7D217.IP) has joined #crytocc 19:17:21 any one have any web sites regarding FEMA camps? 19:22:13 *** foolex has quit (Ping timeout) 19:22:15 *** Cryto351 has quit (User quit: Page closed) 19:24:21 *** MK_FG has quit (Ping timeout) 19:27:09 *** foolex (foolex@AD356075.7DC890E0.CEC56216.IP) has joined #crytocc 19:34:54 *** MK_FG (MK_FG@MKFG-91968.users.cryto) has joined #crytocc 19:54:07 *** Gatsby has quit (Ping timeout) 19:55:28 *** Gatsby (Gatsby@207E556E.4D8F9F70.15D792E2.IP) has joined #crytocc 20:07:25 *** Ari (Ari@Ari.users.cryto) has joined #crytocc 20:29:10 *** HiveResearch (HiveResear@developers.developers.developers) has joined #crytocc 20:34:09 *** Ari has quit (Ping timeout) 20:39:57 *** devslashrnd has quit (User quit: KVIrc 4.1.3 Equilibrium http://www.kvirc.net/) 20:46:29 *** Ari (Ari@Ari.users.cryto) has joined #crytocc 20:53:24 *** Ari has quit (Ping timeout) 20:55:21 *** AnonyOps[m] (anony_ops@cryto-5167D786.woh.res.rr.com) has joined #crytocc 20:59:50 *** Ari (Ari@Ari.users.cryto) has joined #crytocc 21:04:42 *** crates has quit (Input/output error) 21:07:52 *** crates (crates@cryto-B98FADA2.boingboing.net) has joined #crytocc 21:10:09 Thought's on this boston stuff? 21:10:34 I'm thinking home grown explosives, disturbed individuals, I don't think this was terrorists... 21:12:54 Is it confirmed yet that it wasn't just an accident? 21:14:37 oh 21:14:43 third explosion at JFK library.. 21:14:58 probably not an accident. 21:15:24 yeah 21:15:35 No idea if they're related though 21:15:36 that's not been confirmed 21:15:38 right 21:15:53 Raw video of second explosion btw https://www.youtube.com/watch?feature=player_embedded&v=7jMYObtjToU 21:16:03 i'd agree with you on initial assessment. doesn't scream foreign terrorism 21:16:22 no, it would have been much larger if it was imo 21:16:29 This just speaks domestic to me 21:16:32 jesus christ. 21:16:34 that is fucking loud 21:16:38 yeah 21:16:53 look how far away they are from it 21:16:55 yeah 21:17:15 wondering if it was a suicide bomber though... 21:17:32 Apparantly they saw a guy with a number of back packs walking around the area 21:17:38 caught him on video 21:17:46 is that was this BBC CCTV stuff is ? 21:18:31 wtf 21:18:44 I got sent to a bbc cctv footage of boston marathon.. but it was actually north korea video stuff 21:20:05 heh 21:22:11 odd though. 21:22:17 the whole thing. 21:24:59 *** pzuraq (pzuraq@cryto-F9B1C1C6.ucsc.edu) has joined #crytocc 21:37:13 homegrown lol 21:40:39 *** AnonyOps[m] has quit (Ping timeout) 22:18:23 *** Xeross is now known as Xeross|AFK 22:29:23 *** AnonyOps[m] (anony_ops@cryto-5167D786.woh.res.rr.com) has joined #crytocc 22:37:33 lol foreign 22:37:58 we have many more domestic terrorists than foreign these days, even with our horrid foreign policy 22:38:46 *** AnonyOps[m] has quit (Ping timeout) 22:41:17 lady-3jane: you mean those guys in the white house? 22:43:20 I was gonna say the tea party 22:43:42 I'm not sure the guys in the white house count as terrorists 22:44:11 people using violence against civilians to elicit a political change 22:44:18 does that fit? 22:44:42 It may soon, I don't think it does yet though 22:45:04 oh my god 22:45:12 anderson cooper is covering the explosions in boston 22:45:14 of course he is 22:45:21 that motherfucker just doesn't quit 23:05:04 *** tmbucky (tmbucky@cryto-4293BCB0.compute-1.amazonaws.com) has joined #crytocc 23:06:25 *** tmbucky has quit (User quit: Connection closed) 23:09:02 *** AnonyOps[m] (anony_ops@cryto-5167D786.woh.res.rr.com) has joined #crytocc 23:11:18 *** zxcvbnm has quit (User quit: leaving) 23:21:47 *** AnonyOps[m] has quit (Connection reset by peer) 23:21:47 *** AnonForecast_ has quit (Connection reset by peer) 23:22:01 *** AnonForecast_ (AnonForeca@cryto-999D5D74.dhcp.insightbb.com) has joined #crytocc 23:23:02 joepie91, please talk some sense into the world 23:23:09 if you dont, who will? 23:24:01 hopefully, someone else 23:24:13 it would be slightly worrying if I were the only person on earth attempting to talk sense into people 23:24:40 the only one that "can" 23:24:47 many attempt, nearly all fail. 23:25:09 You are the one, Neo 23:25:14 I mean Jeo* 23:25:32 * AnonForecast_ slow motion bullet dodges something 23:41:33 *** x (foobar@C5729E2F.43D2C6FB.5D12EECE.IP) has joined #crytocc 23:43:39 * lady-3jane laughs 23:58:26 * twitchyliquid64 grins 23:58:42 http://ciphersink.net/projects-1 23:58:43 thoughts? 23:59:27 *** x_ (foobar@C5729E2F.43D2C6FB.5D12EECE.IP) has joined #crytocc 23:59:28 *** x has quit (Connection reset by peer)