posts from 2009

  1. #code2009 perl, javascript, python, java, sh—who’m I kidding? English mostly, a buncha memes, some broken glass, and lotsa rattle-can black.

  2. My 500 Days of Summer alternate ending credit roll theme choice: Kid Koala — Moon River.

    https://www.youtube.com/watch?v=dSsErpzoqr0

    Great film, constant riffing.

  3. My 500 Days of Summer alternate ending credit roll theme choice: Kid Koala — Moon River. https://www.youtube.com/watch?v=dSsErpzoqr0 Great film, constant riffing.

  4. Happy birthday!

  5. Happy Birthday, Grant! Welcome to the really fun 30s decade, haha. Anyways, have a great birthday!

  6. Happy Birthday Grant! Hope you’re having an awesome day 😉

  7. Happy Birthday! It was great to see you on Christmas.

  8. Happy Birthday!! 😄 Have a great day!

  9. Happy Birthday!

  10. Happy birthday old man.

  11. Happy birthday cousin!

  12. Happy Birthday!!!

  13. Happy Birthday!!!

  14. Happy Birthday Mr. Stavely! Welcome to 30! Having just left that decade myself, I’m excited for all that it may hold for you. Have an awesome day!

  15. Happy Birthday Grant!

  16. @jeson @slp22 thanks!

  17. Happy early birthday to youuuuuuuuuuuuuuuuuuuuuuuuuuuuuu!!!

  18. I’m really hoping I get a cordless razor and some perfume from one of you thoughtful people this season. Maybe tickets to a romantic comedy?

  19. Calling you from Canada… 403-832-3792 so you might just answer:) pretty please

  20. @ddeighton important selinux commands to remember: semange, sesetbool, chcon, restorecon, chmod 777, and bangheadondesk -Z

  21. Happy Solstice ☼.

    It’s getting brighter all the time (it can’t get no darker).

  22. My first of three grades for the semester just posted: an A.

    Now considering a January web-only macro economics—3 credits in 3 weeks. Eek.

  23. Please refrain from eating the menu.

  24. Let there be Light. Let ANSI Blue be 102,187,255, because 0,187,0 on a black background is insane. Let there be firmament in the midst…

  25. RT @CrucialCarl: Wife. Hospital. Pregnant. Labor. 6cm. Admitted. Fun. She said if we wrap this up before noon, @Charmsec is a possibility.

  26. @CrucialCarl congratulations!

  27. Let there be Light.

    Let ANSI Blue be 102,187,255, because 0,0,187 on a black background is insane.

    Let there be firmament in the midst…

  28. The 20th @CharmSec is tonight at @SlaintePub in Fells Point, at 7PM, sharp. Don’t trust the valet, he isn’t a valet. We waive all responsib-

  29. @jjthomas driving in excess of the posted speed limit within a radar-monitored temporary tax-collection zone.

  30. Nothing says “Hey, I’m middle class, can’t we just settle this with cash?” like a conservative suit and tie in traffic court.

  31. @GoldbergLawDC congratulations!

  32. @dionthegod congratulations!

  33. Http://twitpic.com/t7bc9 -

  34. Http://twitpic.com/t7bc9 -

  35. Relaxing & having a home brew I made in 2007–-aging made it drinkable. No, I wouldn’t have cellared it if it wasn’t terrible at first.

  36. Wood stove, Philip Glass’s Heroes Symphony, Melville, Scotch, Santa-crawl tomorrow. This cliché kicks your cliché’s ass, bring on 30.

  37. Relaxing & having a home brew I made in 2007–-aging made it drinkable. No, I wouldn’t have cellared it if it wasn’t terrible at first.

  38. Many of my passwords have backspaces in them.

  39. @alexhutton well I guess I’m done then.

    rimshot

  40. @alexhutton d, e, o, and n? I’m in #sansids the next two days and don’t have time to go further than pdf → photoshop → OCR → ASCII.

    ☹

  41. Dear Prudence, Steel and Glass, Dig a Pony, Scared, Working Class Hero, I Want You (She’s So Heavy), Instant Karma, Imagine, John Sinclair.

  42. Editing a group project for school, just found that one member’s last-minute contribution is entirely plagiarized from Wikipedia.

  43. Reading some godam Salinger I’ve been meaning to get to. Don’t get me started, Christ. I mean just /look/ at this.

  44. dnssnarf

    Domain Name System (DNS) traffic is inherently timely. Responses from DNS servers are expected to change from one minute to the next. So many important application layer protocols leverage DNS, and it is so pervasively necessary for even basic Internet access, and it is such a simple behavior indicator, that it only makes sense to log the crap out of it. In minutiae.

    Yet, it seems like DNS logging is still one of those everyone-rolls-their-own efforts. And fewer still log DNS from a sniffing sensor, instead trusting their DNS servers. I hate rolling my own, and I don’t trust DNS servers.

    I’ve borrowed a healthy dozen or more security monitoring ideas from Sean Wilkerson, so while he was still on stage after a talk at DojoSec, I re-raised my DNS Logging plight. I’d hoped he knew of a tool, or could use the microphone, video stream, and audience to ask that someone create one. Actually, I didn’t hope, I specifically said “And hey, if anyone is listening, this needs to exist. If you can create, you are obligated.” or something along those lines.

    I wasn’t looking for an analysis tool, or a log parser, or an IDS signature. I just wanted the equivalent of the many snarf programs in Dug Song’s dsniff package. It had to be lightweight, reliably parse all application traffic of the DNS protocol, and simply log it. Dsniff already does that for HTTP, NFS, SMTP, IRC, and many instant messenger protocols, and it can spoof DNS, but has nothing for passive DNS monitoring.

    It worked! Sort of.

    Christopher McBee was in the audience, and he knew that Python and Scapy would probably be capable. In twenty minutes, he had a working DNS logger. Awesome.

    It didn’t log minutiae, but that wasn’t Scapy’s fault. It didn’t log TCP, and that is still Scapy’s fault.

    Spurred by Christopher’s work, I dove into Python and finished it to my original spec, mostly.

    > dnssnarf --help
    usage:
      dnssnarf [options]
    
    Log DNS messages with Python and Scapy
    
    options:
      --version show program version number and exit
      -h, --help show this help message and exit
      -s, --syslog write to syslog
      -f FACILITY, --facility=FACILITY Syslog facility. Defaults: 'user'
      -p PRIORITY, --priority=PRIORITY Syslog priority. Defaults: 'info'
      -i INTERFACE, --interface=INTERFACE listen on INTERFACE
      -q, --quiet quiet output
      -b BPF, --bpf=BPF BPF to apply to scapy sniffer. Default: 'port 53 and udp'
      -n, --named named query log format
      -d, --debug Print additional debugging information

    It doesn’t understand TCP DNS, because Scapy doesn’t, and I am not smart enough to fix that.

    Output looks like this by default:

    Fri Dec 4 06:24:56 2009 UDP session: 44167 client: 192.168.1.1:59634 server: 69.63.185.11:53 query: login.facebook.com. class: IN type: A recurse: no
    Fri Dec 4 06:24:56 2009 UDP session: 44167 client: 69.63.185.11:53 server: 192.168.1.1:59634 query: login.facebook.com. class: IN type: A recurse: no
    Fri Dec 4 06:24:56 2009 UDP session: 44167 server: 69.63.185.11:53 client: 192.168.1.1:59634 response: 69.63.181.22 ok type: A ttl: 30L len: 4

    So then I’m validating it against tcpdump. tcpdump already does what I want. And it isn’t Python. It’s fast. Silly us.

    Here’s tcpdump with me running ‘host grantstavely.com’ in another window.

    grantstavely:~ grant$ sudo tcpdump -i en1 -nn -tttt port 53
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on en1, link-type EN10MB (Ethernet), capture size 65535 bytes 2009-12-04 06:32:32.368184 IP 192.168.1.25.61686 > 192.168.1.4.53: 50950+ A? grantstavely.com. (34)
    2009-12-04 06:32:32.373623 IP 192.168.1.4.53 > 192.168.1.25.61686: 50950 1/0/0 A 75.101.142.201 (50)
    2009-12-04 06:32:32.374358 IP 192.168.1.25.64909 > 192.168.1.4.53: 44029+ AAAA? grantstavely.com. (34) 2009-12-04 06:32:32.376867 IP 192.168.1.4.53 > 192.168.1.25.64909: 44029 0/0/0 (34)
    2009-12-04 06:32:32.377112 IP 192.168.1.25.57526 > 192.168.1.4.53: 55171+ MX? grantstavely.com. (34)
    2009-12-04 06:32:32.394888 IP 192.168.1.4.53 > 192.168.1.25.57526: 55171 8/0/0 MX smtp7.grantstavely.com. 10, MX smtp4.grantstavely.com. 10, MX smtp6.grantstavely.com. 10, MX smtp.grantstavely.com. 0, MX smtp8.grantstavely.com. 10, MX smtp2.grantstavely.com. 5, MX smtp3.grantstavely.com. 5, MX smtp5.grantstavely.com. 10 (209)

    Under my nose!

    Actually, tcpdump isn’t showing us ~transaction ID numbers~, TTLs, or LENs, which is a bummer. So dnssnarf still has it’s uses after all.

  45. Snow is pouring, the wood stove is whirring, The Boy is purring, & coffee’s pouring, as I gaze out this winter morn.

    Blasting Mogwai.

    ⁂

  46. Businessman’s Cant™ is similar to Legalese, but of course like all cants, BC speakers are trying to conceal meaning from outsiders.

  47. Of all the low-bandwidth induced patois, the pidgin of phone conferencese and Businessman’s Cant is the most infuriating to outsiders.

  48. Here’s to my sweet Satan: Just did about a mile of my solo walk home from Fells backwards. Great comments from bar patrons!

  49. Here’s to my sweet Satan: Just did about a mile of my solo walk home from Fells backwards. Great comments from bar patrons!

  50. To Dulles ✈ for an @ians_security roundtable. Going only for the scenic beltway → tollroad commute that I miss oh, so much.

  51. And on the third day, @philip_daigle said: “I want a tab labeled Remedial Options.”

  52. OH, two guys leaving the bar last night in expensive hip leather jackets, “It’s a little too professional in here.”

  53. Spot me in #4 RT @vurtyou: @baltimoreMD Pics from last night’s splendid HH @yellowdogtavern (Mayor Dixon visited too!) http://bit.ly/64c9Ni

  54. ★★★★★ DJ Z-Trip and DJ P – Uneasy Listening
    (http://j.mp/A1ZT) rock, cut, sample, & 90s hip-hop mix extraordinaire

    (tyvm @crucialcarl)

  55. I help run @charmsec for over a year, it rocks. @vurtyou tries one in our neighborhood and the Mayor of Bmore comes. I bought her a glass.

  56. University life-hack: The Snort-Sigs mailing list is a great resource for those pesky homework problems. Professors don’t know about it!

  57. A graphic design spec-work equivalent of an @attritionorg Postal: https://27bslash6.com/p2p.html

  58. GAIN: 11
    VOLUME: 11
    LOW: 11
    MID: 0
    HIGH: 11

    (glissando)

  59. Taking a cue from @censey, I’m attending @taosecurity’s SANS Incident Detection Summit as the Senior Vice President and Chairman, @CharmSec

  60. Hey @cmarczewski, find or start a local CitySec. Meet and learn from diverse local community, network, sponge from pros. Cost: free.

  61. Just painted a 3’x3’ canvas I disliked rattle-can black. The orig. oil painting texture is still showing. I’m a havenooiln’toolazytosandist.

  62. Just painted a 3’x3’ canvas I disliked rattle-can black. The orig. oil painting texture is still showing. I’m a havenooiln’toolazytosandist.

  63. Of course ctl-v won’t work, right click, X-Mouse, duh.

    And it’s alt-space-e-p on that console, middle-click there, and ⌘-v there!

    Move!

  64. @ebertchicago *Jake smacks Evelyn around a bit with a large trout

  65. Oh I like that Baby. I put on my robe and sysadmin hat.

  66. DNS sniffing with Python+Scapy: syslog output, command line options, bind querylog, & more data logged. @linuxgeek247

    http://j.mp/51DTPI

  67. DNS sniffing with Python+Scapy: syslog output, command line options, bind querylog, & more data logged. @linuxgeek247 http://j.mp/51DTPI

  68. Hmmmm, i thought you recommended that i don’t liksten to npr once after reporting a listner’s comment that i posted on FB, but now you are a fan 😃

  69. So Heathcliff, Garfield, Hobbes, Sylvester, Dinah, Tom, Figaro, Jonesy, Azrael, Snowball V, and Lion-O are listening to Coltrane, when sudd–

  70. I frequently don’t recommend CSPAN call-in hours with ‘democrat lines’ and ‘republican lines’ and ‘independent lines’.

    Sausage and laws.

  71. I just reserved our usual tables at @slaintepub for @CharmSec tonight. I’m expecting a lighter crowd, given the whole 19 thing.

  72. VirusTotal added NIST NSRL lookups in March. I just noticed. Oops. http://j.mp/1Qxb9e http://j.mp/wwxqf

  73. Unraveling the mystery behind @CharmSec 19 is tricky but I think I’m on to something: http://j.mp/35mrfw (leaving off 2 and /1/ of course)

  74. Http://translate.google.com/ doesn’t speak Latin either. Hoc est ars per occultum scripturam animi sui voluntatem absentibus aperiendi certa

  75. Unraveling the mystery behind @CharmSec 19 is tricky but I think I’m on to something: http://j.mp/35mrfw (leaving off 2 and /1/ of course)

  76. Http://translate.google.com/ doesn’t speak Latin either. Hoc est ars per occultum scripturam animi sui voluntatem absentibus aperiendi certa

  77. @adamshostack @oneraindrop excellent advise, elsewhere¹ called Conway’s Law²

    ¹ Tufte, http://j.mp/Ynqz7
    ² Conway, http://j.mp/AZ0Oo

  78. I’m re-enjoying @DCoffeen’s Rhetoric lectures. Lecture 16 will improve your writing if even only one point penetrates. http://j.mp/3GlK1Y

  79. @ecogordo @jjthomas thanks, only have the the crappy edger my knives came with. It sounds like I should just get a table sharpener instead

  80. Dear Baltimore: Where do you get your knives sharpened?

    Literally.

    No, the chef, paring, and utility kind.

  81. Hey Grant!!

  82. Dear Baltimore: Where do you get your knives sharpened? Literally. No, the chef, paring, and utility kind.

  83. Chicago, I don’t know how you make one block smell like sewer gas and the next like fresh brownies, but you should license that shit.

  84. Chicago, I don’t know how you make one block smell like sewer gas and the next like fresh brownies, but you should license that shit.

  85. Belief in false superstitions is very bad luck.

  86. In Chicago – a friend presented http://j.mp/SBXOC (pdf) at an ACM workshop (http://j.mp/Dlvhf) and invited @vurtyou and I for the weekend.

  87. Second City, Art Institute, Sears Tower, Live Music, Food

    30 8 13 11 5 Fly to Chicago for the weekend > /dev/null 2>&1

  88. @oneeyedcarmen nice work on that shake down flatfoot. How’d you get the hooey on that grifter’s rap? http://j.mp/ERdzQ

  89. @shmausen AT&T is having problems in Baltimore, it’s not you, it’s them. As usual.

  90. @vurtyou @saysaylobbyist tell him to bring candy canes for the kids http://j.mp/434xXv ( Gratuitous belly shot!: http://j.mp/jaqAX )

  91. @saysaylobbyist b’more Santacrawl is typically men-only but a dozen girls from http://j.mp/3qjkyb showed up last year and no one complained.

  92. You can take that Magic Quadrant™ and cram it in your magic ✿ quadrant, buddy.

  93. Disgruntled Star Editor Takes Constructive Revenge

    https://dailyhive.com/page/torontoist

  94. Ars technica syntax highlighting blocks match ars technia branding. https://arstechnica.com/information-technology/2009/11/go-new-open-source-programming-language-from-google/

  95. @stevewerby thanks, feared that conversation had dropped to DMs. Surely Linux & Unix are in that cohort as well?@StrongwaterSec similar exp?

  96. @GoldbergLawDC @danphilpott great points. Beware those who condemn as failures to holistically solve problems all stepwise improvements.

  97. @dionthegod @sdwilkerson Thusrday the 19th works for me, but I’ll have to miss the Valient Thorr show at Sonar so you guys better ROCK \m/.

  98. @frednecksec FBI: Businesses pull the impact-to-business card

    …

    60 min: ??

    FBI: I’m going to have to use my ongoing-investigation card

  99. @dionthegod let me know if you find anyone, all of my pet projects have stagnated thanks to school and work and it’s very frustrating.

  100. @cyberhiker I just walked five blocks, bought 2 boxes #4 filters, and returned home to find my coffee can empty too. Madly using half-decaf.

  101. Dvorák Sympony No. 9: appropriately dramatic music for a Sunday morning without a single coffee filter in the house.

  102. Knock, Knock
    Who’s There?
    KK
    WT?
    kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt?
    …

    …kk?, wt, kk?, wt

    Philip Glass
    http://j.mp/4eghoI

  103. Knock, Knock Who’s There? KK WT? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? … …kk?, wt, kk?, wt Philip Glass http://j.mp/4eghoI

  104. Http://twitpic.com/oirrz -

  105. @ssoper yup, @vurtyou is in San Diego, she just sent me a beach shot: http://twitpic.com/oirrz

  106. @marcusjcarey D’oh! See you tomorrow regardless.

  107. Considering blue team CTF at @dojocon w/ @electricfork and @crucialcarl, need fourth. Prefer someone that has done one before. We haven’t.

  108. Enjoyed Titus last night: http://j.mp/WLIwK, http://j.mp/4Dv6Ey

    @ebertchicago rightly considers it Scream 1593.

    Bear thou my hand indeed.

  109. Circular reasoning works because circular reasoning works because circular reasoning works because circular reasoning works because

  110. @wrayjustin haha, MacPorts has been a nightmare. I’ve ended up port -f uninstall all, clean all, retrying now. Are you taking the course?

  111. !! > @ebertchicago Bruce Lee plays ping pong, lights matches with nunchuks, and other footage of finite interest. http://j.mp/AO7A7

  112. If solutions aren’t available, I’d be willing to consider services but NOT products.

  113. I’m looking for some turn-key solutions that meet my needs, with a good ROI, and absolutely no headaches.

    Compliancy a plus!

    #lazyweb

  114. !! > @ebertchicago Bruce Lee plays ping pong, lights matches with nunchuks, and other footage of finite interest. http://j.mp/AO7A7

  115. My back tells me that VIRCO doesn’t dogfood back at HQ.

    After I graduate, I’m going to Samir a 9000 Classic Tablet Arm with power tools.

  116. My back tells me that VIRCO doesn’t dogfood back at HQ. After I graduate, I’m going to Samir a 9000 Classic Tablet Arm with power tools.

  117. Sneaking Some 2-Hearted Ale With a Straw

  118. Blowing kisses

  119. The menu is not the meal.

  120. The menu is not the meal.

  121. @sdwilkerson Brasserie Beck is now on the to-do list. It’ll be great knowing so many faces from @charmsec, looks like most are going.

  122. Shmoocon barcode printed. See you at The Wardman, Harry’s, Murphy’s, Tono sushi, Pizza Paradiso, Brickskellar, and etc in February!

  123. @gattaca I found the link and got a ticket at the bottom the same way I won 7 rounds of rochambeau at ShmooCon '07: sheer luck.

  124. I just reserved my @shmoocon ticket. Liking the process.

  125. Watching Jimmy Swaggart explore The Truth instead of going to church this morning. $150 bibles! full of Truth! Give them for Christmas!

  126. ♫ The Nuggitz - Stales From The Crypt: http://j.mp/4lXxwe ♫

  127. The barber at Super Hot Cuts in Reisterstown remarked more than once about the cowlicks on my head, never mentioned the GIANT SCAR. Love it.

  128. Tom Waits. Brawlers. Loud.

    About to walk to Cinghale w/ @vurtyou and a few solos of stout.

    Need a boom box so that I can take Tom w/ us.

  129. What is your favorite Windows-Server-2008-compatible event-log-to-remote-syslog-daemon service? #kickme

  130. What is the typically prescribed penance for recommending ESR to someone? Six XP installs and an Act of OSX Repair Permissions?

  131. .@ssoper I haven’t seen a good Open Source is a Religion, not a Solution rant since the late 90s. Someone buy @chriswilsondc ESR’s tCatB.

  132. ♫ On a boat -> “@djcheeba check this mix from DJ Moneyshot… nautical theme for the DOP show on friday! Skills! http://j.mp/3v2qL3”

  133. “This machine adopts memes second wave, champions them, becomes disillusioned, then resents people still following them.”

    • Woody Guthrie
  134. ♫ On a boat -> “@djcheeba check this mix from DJ Moneyshot… nautical theme for the DOP show on friday! Skills! http://j.mp/3v2qL3”

  135. ‘Y’know?’ is best abused by Apollo astronauts. Duke: “The doc said my heart rate was 144 at lift-off. John’s was 70.” https://www.imdb.com/title/tt0925248/

  136. ‘Y’know?’ is best abused by Apollo astronauts. Duke: “The doc said my heart rate was 144 at lift-off. John’s was 70.” https://www.imdb.com/title/tt0925248/

  137. Anyone going to the Snoop, Method Man, Redman and Devin the Dude show tomorrow in B’more? Is it sold out? I’d skip class to go.

  138. @codinghorror I never considered needing an EICAR/GTUBE equivalent for credit card numbers, looks like there are a few http://j.mp/2wSk1B

  139. @aaronbarnett “…like the expletives that are complicating your search for God.” http://bit.ly/1FGs7V

  140. The use of emoticons http://j.mp/24j8Ma on Gerty in Moon is brilliant ☺. https://www.imdb.com/title/tt1182345/ Among film’s biblical names, is his from Hamlet?

  141. Primer: The Perils and Paradoxes of Restricted Time Travel
    Narration. Fabula vs. Syuzhet: https://www.nobleworld.biz/images/Gendler.pdf (pdf)

  142. There’s only one guy in a Star Trek (Spock, TOS, go figure) necktie at this NIST workshop. I demand a full refund.

  143. Marshall Abrams SHALL have the extraordinary ability to stay engaging while effectively discussing NIST SP 800-53 for over 60 minutes. Check

  144. Scientists propose frantic powerpoint slide transcribers, leatherette notepads, business card swapers, to power meetings of the future.

  145. Thieves broke into the house across the street last night. The one for sale. The one that has been entirely empty for years. So it goes.

  146. Thieves broke into the house across the street last night. The one for sale. The one that has been entirely empty for years. So it goes.

  147. If I worked HCI for an app (hire me, please), my goal would be to write myself out of a job with magic, not to produce meaningful errors.

  148. @wrayjustin and I’m guilty. But when I paste 20k items into a field and it says “ERROR” it’s a piece of shit, not a :%s/\n/, /g opportunity.

  149. @wrayjustin I’m convinced that modern unix types are in love with solving small problems with small tools. It’s navel-gazing.

  150. Just told an analyst that the ability to rapidly convert line feeds to arbitrary delimiters is a life skill. Help, need to get out more.

  151. I was born just past the “Who Shot J.R.?” ring. http://j.mp/1eTjBd My parents are at the I Love Lucy ring. My grandparents are off the map.

  152. Previous link to scale, thanks Will. Why did Contact get it so wrong? >@will_torres @grantstavely Reminds me of this: http://bit.ly/6xWJG

  153. I forgot how amazing this was (forgiving the wildly inaccurate visual vs. radio scale) > @iA Intro to “Contact”: https://www.youtube.com/watch?v=kNAUR7NQCLA&feature=player_embedded

  154. I was born just past the “Who Shot J.R.?” ring. http://j.mp/1eTjBd My parents are at the I Love Lucy ring. My grandparents are off the map.

  155. Previous link to scale, thanks Will. Why did Contact get it so wrong? >@will_torres @grantstavely Reminds me of this: http://bit.ly/6xWJG

  156. I forgot how amazing this was (forgiving the wildly inaccurate visual vs. radio scale) > @iA Intro to “Contact”: https://www.youtube.com/watch?v=kNAUR7NQCLA&feature=player_embedded

  157. @oneeyedcarmen I’m dragging the usual suspects plus two to @dojocon, is anyone putting together plans for Friday evening yet?

  158. Oh, you like to let your software updates bake in at less important customers for 6 months? Can I talk to someone not in sales?

  159. @oneeyedcarmen @electricfork I ‘gave’ all my shmooballs to my cats at about 30 mph. They start too much of an arms race for the office.

  160. .@SpaceManAndy sure, for a spacer. NASA should have control subjects with them to validate that kind of claim. I’d volunteer.

  161. @SpaceManAndy “Returning to Terra Firma is like: A) walking after skating B) Jumping off a trampoline C) A total bummer D) All of the above”

  162. The same parallels could be drawn between [chem|mech|civ] Engineering courses and Ethics chapters vs Systems Architecture glossary entries.

  163. In my Accounting class, fraud discussion constitutes most of chapter 5. In my Systems Architecture class, security isn’t in the glossary.

  164. The same parallels could be drawn between [chem|mech|civ] Engineering courses and Ethics chapters vs Systems Architecture glossary entries.

  165. In my Accounting class, fraud discussion constitutes most of chapter 5. In my Systems Architecture class, security isn’t in the glossary.

  166. @marcusjcarey I’ma start calling you Holden Caulfield.

  167. Apparently @Scheierblog has a slightly larger readership than mine. http://j.mp/iOfil

  168. @ilya_burdman: “Come on, you guys would tell me if I pissed you off right? Ok, well I know @grantstavely would. But the rest of you?”

  169. @gattaca apathy is the new privacy, but my resume and house listings (were I selling) are things I’d want to be easily discoverable

  170. @grecs CharmSec 18 isn’t until the 29th

  171. ♫ Get Down Make Love ♫ makes me regret not keeping a Strat and Pignose at my desk at work.

  172. FIRST PULL UP ☝ THEN PULL DOWN ☟

  173. The biggest thing I miss about consulting is completing audit engagements thinking I made the world a better place w/ a deliverable.

  174. Forgot my wedding ring at the house this morning. Remembered to complain about school on twitter. Priorities!

  175. “What video output device is used on most computers and tvs?” (The answer is ‘CRT’ for those of you not in college, he replied smugly)

  176. @shrdlu relevant Ron Paulism: “The ADA should have never been passed… it is an intrusion into private property rights.” http://j.mp/1aif7o

  177. There is a toy with dead batteries surreally looping Fur Elise somewhere (a trashcan?) in my alley. The pitches are all winding-down wrong.

  178. There is a toy with dead batteries surreally looping Fur Elise somewhere (a trashcan?) in my alley. The pitches are all winding-down wrong.

  179. Hober Mallow trading as I fell asleep, The Mule whining when I awoke. http://j.mp/QaoKg

  180. Thanks @charmsec and @slaintepub for the Guinness spoon – made a Black and Tan w/ 60 minute IPA and home brew stout. Yum. (it didn’t layer)

  181. Thanks @charmsec and @slaintepub for the Guinness spoon – made a Black and Tan w/ 60 minute IPA and home brew stout. Yum. (it didn’t layer)

  182. @CrucialCarl buy in bulk, it isn’t perishable and you don’t teetotal. Packaged goods stores in the city are open Sundays. http://j.mp/45rrbj

  183. Real life needs more L cuts, dolly zooms, and more bombing cities with foot long hotdogs from helicopters, then eaten. (https://www.imdb.com/title/tt0303348/)

  184. Infrastructure gaffes like this make my stomach turn like pictures of ledges make my hands sweat. Oof, empathy. https://www.engadget.com/2009-10-10-t-mobile-we-probably-lost-all-your-sidekick-data.html

  185. Real life needs more L cuts, dolly zooms, and more bombing cities with foot long hotdogs from helicopters, then eaten. (https://www.imdb.com/title/tt0303348/)

  186. Infrastructure gaffes like this make my stomach turn like pictures of ledges make my hands sweat. Oof, empathy. https://www.engadget.com/2009-10-10-t-mobile-we-probably-lost-all-your-sidekick-data.html

  187. The women cheering at passing marathoners out front are actually praising my work on this term paper.

    Woo!

    Way to go guy!

  188. @dionthegod mystery is ¾ exposition, ¼ vicarious crime & punishment. Better pictures and strings (The Wire) than bad dialog (Law & Order).

  189. Now, I’ve got to give an INTERESTING old lady a manicure, but I’ll be back before you’re done.

    (la lala la lah)

    dynamite explodes

  190. I’m inviting the industrial designer of my 90s era digital thermostat over for dinner. What kind of stew should I make of his/her children?

  191. Coffee’s for closers.

  192. Coffee’s for closers.

  193. Prisoner’s Dilemma sales: “I’m in on travel to see one of your competitors, but I don’t want you to miss this great opportunity!”

  194. If an app is signed in a way that includes LSUIPresentationMode, changes invalidate the signature. http://j.mp/iFrVp

    codesign -vvv sad.app

  195. “Keychain returned: -25293”.

    I’m breaking app signing, so their keychain access is breaking. How to resolve?

  196. Why does LSUIPresentationMode (via @eternalstorms’s PresentYourApps, ♥) intermittently break? Keychain? Mail, @adium accounts fail login.

  197. If an app is signed in a way that includes LSUIPresentationMode, changes invalidate the signature. http://j.mp/iFrVp codesign -vvv sad.app

  198. “Keychain returned: -25293”. I’m breaking app signing, so their keychain access is breaking. How to resolve?

  199. Why does LSUIPresentationMode (via @eternalstorms’s PresentYourApps, ♥) intermittently break? Keychain? Mail, @adium accounts fail login.

  200. YAY. >@tqbf There is now @ebertchicago. THAT IS ALL.

  201. YAY. >@tqbf There is now @ebertchicago. THAT IS ALL.

  202. Every list of password tips should have a 0th entry apologizing for how terrible it is that we have to rely on passwords to use these things

  203. Every list of password tips should have a 0th entry apologizing for how terrible it is that we have to rely on passwords to use these things

  204. .@thnetos’s nsm-console (http://j.mp/ee5oT) looks awesome, looking forward to playing with it, (and maybe porting http://j.mp/1RMacm to it)

  205. Is @adium’s name server suffering an attack or just moving? I’m getting ID mismatches and/or no response. http://74.63.12.192/ is sketchy.

  206. SIC TRANSIT GLORIA MUNDI

  207. .@Adium’s facebook captcha UI is so un-adium I had to check the source code. http://j.mp/2cAWk Upgrading to 1.4: http://j.mp/1eH5WL

  208. “and thus (the work) cannot be performed since one cannot perform that which does not exist”

    – Schoenberg, re: Verklärte Nacht, Op. 4

  209. That you continue to call level one folks ‘monkeys’ is a tell.

  210. The week C-levels ask for bug’s-eye-views of IR metrics is always the week the incidents and investigations have funny, inappropriate names.

  211. They got back together for another tour. it was crazy to see them live last night, i never thought i would get the chacnce

  212. I don’t get it.

  213. Dr. @alexhutton, Dr. @hypatiadocta, welcome to Jurassic Park: <meta name=“GENERATOR” content="Mozilla/4.76 [en] (Windows NT 5…

  214. I don’t get it.

  215. @dionthegod @danphilpott I’ll be at @dojosec. @philip_daigle will be there. I haven’t heard from anyone else.

  216. Dr. @alexhutton, Dr. @hypatiadocta, welcome to Jurassic Park: <meta name=“GENERATOR” content="Mozilla/4.76 [en] (Windows NT 5…

  217. @frednecksec @CrucialCarl The obscurity argument is boring, it just doesn’t reduce risk enough to bother. Port knock or VPN instead?

  218. @mcsweeneys A Literal-Minded Corporate Executive Gives the Opening Address at his Company’s Sales Conference: http://j.mp/WcPgb

  219. The 1975 Signet paperback of Harlan Ellison’s ‘Dangerous Visions’ collection I ordered last week for $5 just arrived. It smells amazing.

  220. >@mcsweeneys A Literal-Minded Corporate Executive Gives the Opening Address at his Company’s Sales Conference: http://j.mp/WcPgb

  221. @stevewerby it’s the new /part, /nick, /join in moderated channels. Block them and it all goes away, until they come back with another name.

  222. @danphilpott great paper. 550 code error leaks are nasty, breaking SMTP is nastier. Outsource the MX and ignore RFCs on MTA 550s.

  223. …and the new Kid Koala release he’s touring, The Slew, is a free download: http://j.mp/Be054 I’ll definitely be at the Silver Spring set.

  224. Kid Koala: Six Turntables Meets the Ex-Wolfmother Rhythm Section. Silver Spring – Oct. 16 at the Gallery in Silver Spring. http://j.mp/QoH9d

  225. @SpaceManAndy turn ‘show hidden characters’ off. http://j.mp/5Lgrz

  226. @electricfork I see a colored Joy Division album, a sweet drop shadow, poor axis labels, unexplained 20s fading, weird 90s gaps, no context

  227. So a well-heeled life coach, a lifestyle products party magnate, a homeopathy advocate MBE, and a wealthy feng shui consultant walk into a–

  228. Http://twitpic.com/jk8kv - The homebrew stout is a great success, now to enjoy the first pint

  229. Http://twitpic.com/jk8kv - The homebrew stout is a great success, now to enjoy the first pint

  230. @linuxgeek247 oops, just realized I forgot the o-scope. It is apparently your albatross. Bring it to @dojosec?

  231. Set aside an hour to watch @tqbf, @miketracy, and @nate_mcfeters’s talk, ‘Indie Software Security: A ~12 Step Program’ http://j.mp/y5WRm

  232. @jjthomas, of course not silly, it isn’t out yet!

    (@mikenealis you sure ‘booted’ that one!)

  233. I’m pouring wine at the Canton Wine and Jazz thing 3:30 to 7:30, then hosting a Windows 7 house party at my place. Stop by either.

  234. #7: You a Yankee fan?
    #5: No, Baltimore.
    #7: Baltimore? That’s like being hit in the head with a crow bar once a day.

    – 12 Angry Men

  235. #7: You a Yankee fan? #5: No, Baltimore. #7: Baltimore? That’s like being hit in the head with a crow bar once a day. – 12 Angry Men

  236. There are few things more tiresome than listening to geeks verbally fuzz forensics laws with juris doctorates as if laws were protocol RFCs.

  237. @censey @omniweb for life. Nothing compares.

  238. trst.us

    Over the summer two friends and I brainstormed some ideas for a value-add URL
    shortener. I know, I know.

    It was going to do a bunch of security checks against URLs it was asked to
    shorten, and when Chris had the original idea, nobody
    else was doing anything like it. Aaron quickly scraped
    together something that could shorten urls, and 301 them when they came in,
    and call out to various security checks along the way. Meanwhile we wiki’d
    together a huge list of features we wanted. Features current url shorteners
    still lack.

    We kinda lacked a revenue model though, or time to work on the project, or
    funding.

    Oh well.

    I did make a logo for it, with Chris’s help.

    trst.us
    Figure 1. trst.us.

    I think doing it again I’d leave off the entire ‘us’ bit in the logo, it
    throws the balance too much.

  239. “Hi, Dad, it’s me, I wired it wrong.”

    “It’s probably just the safety switch on the door, put the door back on.”

    “Oh, right. Thanks.”

  240. @oneeyedcarmen if you ever see me dancing with @philip_daigle, take my keys.

  241. I can’t stop watching Windows 7 House Party videos. Why did they edit out the dance-offs!?! http://j.mp/3fyLeI (stay for 1:20)

  242. My Day

    • HVAC inside fan motor died, I can fix it myself
    • The officer ticketed me at only 29 MPH over
    • @CharmSec tonight!

  243. @dionthegod I see GETS like that in the wild all the time, nice to see I’m not completely foolish for not figuring out what the strings are

  244. @electricfork I think @censey was looking for the Melville (played by Bob Uecker) character. I haven’t read far enough to say yet.

  245. Taylor reads Moby Dick for Lynn, the Indians are the Pequod, pitching is harpooning, Cleveland is Nantucket, Mrs. Phelps is is the…

  246. I shouldn’t have watched Major League before reading Moby Dick. I Can’t un-see it.

    Queequeg is Cerrano.

    Yojo is Jobu.

    Ishmael is Vaughn?

  247. @dionthegod nice! If I had more time I’d ping my step-dad @LieutenantBill for stuff but he’s over an hour drive away. http://j.mp/bGSW1

  248. This should be interesting: >@dionthegod @charmsec I’ll be there – Anyone coming to charmsec have locks and picks (and know-how)?

  249. @dionthegod http://deviating.net/lockpicking and a lot of patience. I don’t know anyone with bump picks, spare lock sets, etc. Would be fun!

    Lockpicking and Access Control - by Deviant Ollamdeviating.net (opens in a new tab)
  250. @censey I buy concert tickets last.fm tells me about, because it knows what I like (http://j.mp/QGKd3). Facebook and twitter, not so much.

  251. My assertion: Discoverable, simple guest wifi socially engineers guests away from wired corporate networks. (NB, not a control) T/F?

  252. This should be interesting: >@dionthegod @charmsec I’ll be there – Anyone coming to charmsec have locks and picks (and know-how)?

  253. Malware kit devs, clean up your UX, your default values are leaking. re: “Your Image File Name Here without a path” http://j.mp/3SOI4a

  254. @danphilpott managerial finance, financial econometrics, frustrated anarcho-syndics, anarcho-capitalists, and executives.

  255. @oneeyedcarmen are das boots take-home? What’s on them? I mIght stop by, I need a way to drink a six pack without the hassle of refilling.

  256. Experiment: Play Steven Reich’s Music for 18 Musicians for three cats, one man.

    Hypothesis: ¾ subjects to maintain blunted affect, stripes.

  257. Trying Mekong Delta for lunch at noon. It’s been too long since I’ve seen the bottom of a bowl of Phở bò tái. http://j.mp/159ivy

  258. Dan Brown’s success https://www.telegraph.co.uk/culture/books/booknews/6194031/The-Lost-Symbol-and-The-Da-Vinci-Code-author-Dan-Browns-20-worst-sentences.html validates Smith^H^H^H^HEbert’s ‘invisible hand of the marketing dollar spent’. http://j.mp/QjT0f

  259. Enjoying a STROH 80 (Austrian 160 proof rum) & Mexican Coca-cola after a Mt. bike ride. Tastes like butterscotch and Chuck Taylor hi-tops.

  260. Neat. Network fs locks don’t impact interactivity, system feels fine: up 683 days, 18:39, 2 users, load average: 1012.70, 628.23, 508.93

  261. What I expect inside inside files with underscores in the name instead of spaces...

    Dear Grant: If my calculations are correct, you will receive this file
    immediately after you saw the DeLorean struck by lightning. First, let me
    assure you that I’m allive and well. I’ve been living happily these past eight
    months in the year 1995…

    Great Scott! 1995!

  262. Since I started attending @DojoSec, I last longer, my teeth are whiter, and it’s made in Germany. You know the Germans make good stuff.

  263. Internet Detective work is a social faux pas, but we had to find out why Phơ Hương Mới closed: not enough business.

    http://j.mp/1S7IEO

  264. Watching the socratic method break down in undergrad night classes contains NO quinine.

  265. Watching the socratic method break down in undergrad night classes contains NO quinine.

  266. ¹ Developer Wings™ are made of tar and feather. Buy a set today! Use as directed.

  267. Every time a multi-step navigation process is sent instead of a hot link because the web app can’t hot link, a developer gets his wings¹.

  268. For complete messages, run ’

  269. I’m all faklempt. Talk amongst yourselves, I’ll give you a topic:

    SELinux is neither Security nor is it Enhanced. Discuss.

  270. Jean shorts aren’t bought, they’re earned.

  271. Packing for @electricfork’s 30th & Oktoberfest

    • Soft pretzels, from scratch
    • Camera
    • Growlers, 2-♥'d Batch home brew
    • 8oz NC Moonshine

  272. The kids, little India Pale Ale and baby Stout are all tucked in (IPA kegged, Stout burping primary).

    IPA made a mess in his fermenter ☹

  273. Man, I don’t need that shit, I’m high on a cold. I’ve been dizzy for days with very little paranoia, no cravings, and hey, it’s natural! ✌

  274. Man, I don’t need that shit, I’m high on a cold. I’ve been dizzy for days with very little paranoia, no cravings, and hey, it’s natural! ✌

  275. Kick ass. (neat Wire cameo too!) >@djcheeba Video mix is now online http://www.ninjatune.net/solidsteel http://www.vimeo.com/6489862

  276. @IBMFedCyber "Or, imagine, being able to be magically whisked away to… Delaware.

    Hi. I’m in Delaware."

  277. Kick ass. (neat Wire cameo too!) >@djcheeba Video mix is now online
    http://www.ninjatune.net/solidsteel
    http://www.vimeo.com/6489862

  278. I thought CSPAN was doing an Orson Wellesish radio drama. Eerie lack of ✈ in the sky that night as @vurtyou gave blood a the + station. ✌

  279. I’m brewing a stout batch so that I can feel like I’ve accomplished /something/ on my second day home sick, but I can’t smell a damn thing.

  280. @linuxgeek247 I’m going to guess you just added tab autocomplete to your ircish twitter client? Gimme ops.

  281. @linuxgeek247 ditto – I’m not into any particular OSs (or licenses) enough, but the presentations are usually quality.

  282. @ddeighton I keep forgetting about CALUG, joining their oops. hold on, gotta take this “YEAH, HELLO? YEAH, RUBBISH, YEAH” mailman list.

  283. School-night cocktails 101

    THE DIRTY TONIC

    Pile olives in a rocks glass, top with ice, brim with tonic water. Wink at closed Gin bottle.

  284. Which are skipped more? Intro skits, Ringo, Daltry, Roger Taylor, or Roger Waters tunes, Stones albums, post-Clash Strummer bands, or Rush?

  285. @alexhutton The Dan. Too many discount them as disco.

    Nobody disrespects Moon’s drumming, Townshend’s windmill, or Daltry’s uh, stuttering.

  286. I just upgraded to @textpattern 4.2. http://j.mp/4UwxX

  287. Red teaming with EICAR

    Testing antivirus software with EICAR[^eicar] deletions one virus at a time is effective but one dimensional. Successful deletion of a single EICAR string validates antivirus software for a given system, in a given directory, at the rate of one virus per unit of time. But single EICAR string deletions do nothing to stress secondary system alerting capabilities, validate rate limiting rules, enumerate directory level exclusions, validate reactive policy changes, and so on.

    That later group all seem like fun, useful-to-have validation capabilities, so with them in mind, I wrote eicar based malware for a red team drill, leveraging EICAR to enumerate directory level antivirus exclusions.

    The attack I wrote for the drill skipped system compromise.

    The components of this attack were designed to replicate real world attacker techniques, while avoiding real world obfuscation techniques that would turn this drill into a receive alert & down the host drill.

    A few simple subroutines

    1. DNS command and control – Every few minutes, interrogate a public internet DNS server for an A record. This hostname was under my control, and returned a resource record pointing to 127.0.0.1. If this changes to anything else, proceed to…
    2. EICAR antivirus directory level exclusion enumeration – start at the root of C:\ and interrogate every listing found. If it is a directory, drop an EICAR file in it. Immediately interrogate the EICAR file. If it still exists, push the directory name into the findings array.
    3. After enumerating all of the directory level exclusions, choose one at random and download more reconnaissance tools from internet servers.

    Why drill like this?

    Each subroutine increases the time-to-response requirements. The DNS subroutine could run for days, the EICAR test will interrogate a full system in minutes, tools can be downloaded in seconds.

    Each subroutine highlights disparate detection technologies, placement, logging, and so on. EICAR throws incident responder assumptions because it is very much an infrastructure testing tool and not malware.

    spray-eicar

    I’ve ripped out all the command and control and tool downloads. Sorry, it was rubbish anyway and you can do better.

    But you can have the perl that can be compiled with perl2exe sort of tools, I’ve posted it on github as spray-eicar.

    Weaponizing EICAR?

    OK, maybe it isn’t actually weaponizing EICAR. What else could be done with this trick?

    • Enumerate file level antivirus exclusions: Find .exe file -> determine if it is an active process -> move it to $filename.bak -> drop EICAR -> undo.
    • DDOS secondary alerting systems: Execute spray-eicar enterprise wide on all desktops. Ouch. Can your antivirus product whitelist EICAR even if you want it to?
    • Stop at the first finding. Pull and run tools. Obviously.
    • Stop at the first subroutine and then propagate to enumerate policy homogeneity.

    And so on.

  288. Mt. Dew GAME FUEL tastes like wine cooler & looks like an Idiocracy commercial. I pine for the 70s sugar water logos & hillbilly reputation.

  289. ./spray-eicar.pl -h
    Udage: spray-eicar.pl [-vd] [-p path] [-f file]
    Enumerate directory level antivirus exclusions.

    http://is.gd/2TcYY

  290. Pay no attention to @philip_daigle, we purposely trained him wrong… as a joke.

  291. I can’t get over how solid @apollosuns’s “Shall Noise Upon” is, straight through. Brilliant.

  292. I can’t get over how solid @apollosuns’s “Shall Noise Upon” is, straight through. Brilliant.

  293. Really dug the Ade CD you guys picked up for me. I didn’t expect it to be so experimental. Not sure why - I had it in my head that the trio would be more “Bears-y.” At any rate, I really liked it. Sounded somewhere between recent Crim & the ProjeKcts with a lot of looping thrown in. Thanks again!!!

  294. Is this a pole legitimate use of packed javascript (see version 2.4)? https://lesterchan.net/portfolio/programming/php/ Is there such a thing? I don’t consider it an FP.

  295. ¹ In better tellings of Chicken Little, Foxy Woxy eats Chicken Little and his entire the-sky-is-falling posse. Acorns, dummy. Acorns.

  296. Knocking on the door says “I’m here, let’s go”.

    Honking from the car says “WAKE UP EVERYBODY! WAKE UP! THE SKY IS FALLING! WE GOTTA GO!” ¹

  297. @zrlram check out Munin, it trivial to install and extend; any number you can compute on the shell can be graphed. http://is.gd/2M6XF

  298. @IANS_Security pie charts are an anathema to data representation, your data deserves better. http://www.edwardtufte.com/notes-sketches/?msg_id=00018S&topic_id=1 http://www.edwardtufte.com/books/

  299. @jjthomas @censey Uh-oh, I’m both an unabashed hater hater AND hater hater hater. Oh, the self-loathing.

  300. Don’t hesitate? Feel free? If I have any questions? More than happy, eh?

    I won’t, I always do, I don’t, and gee whiz that’s swell.

  301. At the Adrian Belew Trio show in Annapolis, 20 feet from the stage. Holycrapsoexcitedfapfapfap

  302. I cringe when the syllabus reads like a rock star rider. No cheating, OK. No laptops in class? Cell phone ring tone rules? Are we not men?

  303. Oh, I am serious. Look, this is my serious face.

  304. .@REGISTER_COM, renewal and transfer depts. talk much?, I shouldn’t have to renew a domain w/ you to transfer it away, before it expires.

  305. @jjthomas This is Jack Burton in the Pork Chop Express, and I’m talkin’ to whoever’s listenin’ out there. (https://twitter.com/will_torres/status/3600955168)

  306. Rattle-can black revitalizes old veneer speakers, blueish-purple rubber bins, jeans, patios, fingertips, thumbs, and lungs. Use as directed.

  307. @electricfork You know what ol’ Jack Burton always says…

  308. Fact: Any modal jazz tunes with synonyms for gypsy or the name of a non-U.S. city in the title will be above average.

  309. Ha, @vurtyou is living the tabs vs. spaces nightmare over an MS Word letter the Army is sending to the government. Not just for coders!

  310. Dear Register,

    I have found a registrar that I think the world of. He’s younger, and a hard upseller, but he undersells you by 75%.

    Bye.

  311. I’m excited about @CharmSec tonight; lots of first-timers to meet. We’ll be at Max’s early (~6:30) for pint night glasses, then Sláinte by 7

  312. @censey the unibody MacBook seems unscathed - my knuckles took the fall on that hand. https://farm1.static.flickr.com/37/105254454_86bd834b85.jpg /bicycle/staircase/gi

  313. I smashed a pint glass in my fist last night, protecting my macbook pro from the same fate while tripping up stairs. I’m stigmatic.

  314. Fresh corny kegs of @DogfishBeer 60 minute IPA always have an interesting flavor that mellows out after a few pints; yeast? Carb process?

  315. Don Norman - “When Security Gets in the Way”. Usability is /the/ elephant in the room. Hard problems. http://is.gd/2x9DG

  316. @aaronbarnett Do those glasses make everything look like it’s under construction, and thus make you forgiving of faults? I want a pair.

  317. @electricfork Feynman “on why”: very good an understatement, ♥d it. I was more digging his difficulty answering questions as posed initially

  318. Fresh corny kegs of @DogfishBeer 60 minute IPA always have an interesting flavor that mellows out after a few pints; yeast? Carb process?

  319. Don Norman - “When Security Gets in the Way”. Usability is /the/ elephant in the room. Hard problems. http://is.gd/2x9DG

  320. Going to TechnoForensics? Sneak over to the NIST Museum, it is just around corner and down the hall. http://is.gd/2wUeg

  321. @marcusjcarey Director of Innovation: nice title.

  322. 24h Simplepedia stats: 160 users read 191 articles in 12 languages.

    August: 2589 users, 3908 arcticles, 27 languages.

    http://is.gd/2wrxk

    Dance Partyis.gd (opens in a new tab)
  323. ITunes should lemme tag what side of an album a given track was on on the original album or tape or whatever. I’m in a flipside mood.

  324. …or, did you actually want to talk about DNS kiting, iframes, botnets, vulnerabilities, local admins, etc.?

    What’s DNS, you say?

  325. E.g. We spent $x because criminals in their continued gaming of our tit-for-tat altruism selfishly repurposed your information system.

  326. Feynman on ‘Why?’ reminds me of writing executive summaries in post mortems: https://www.youtube.com/watch?v=wMFPe-DwULM&feature=related (watching series thanks to @gadievron)

  327. @oneeyedcarmen stop, you’ll become my dad, spontaneously grow a mustache and get a buzz cut. Blublockers are slippery slopes.

  328. Vendor just had a fire alarm during our support call. I need that .wav file, brilliant. GO×TTA G×O, SORR×Y. NO, YE×AH, WE’R×E EV×ACUA×TING!

  329. FML >@sobojosie: JFX NB remains closed…I feel bad for all my tweeps stuck in the gridlock (crash with fuel spill was EARLY this morning)

  330. @vurtyou see if they’ll let you run a tab.

  331. @dionthegod J Roddy Walston and the Business was great! The new material is interesting, hopefully the A&R/VPs present felt the same way.

  332. FML >@sobojosie: JFX NB remains closed…I feel bad for all my tweeps stuck in the gridlock (crash with fuel spill was EARLY this morning)

  333. Look, I’m going to ignore your arbitrary capability limitations & try to turn whatever you made into a hammer anyway, just give me a hammer.

  334. It’s twoo! It’s twoo! (going) >@BaltSunArts Few Baltimore bands rock quite as hard as J-Roddy Walston & the Business http://bit.ly/DSQMV

  335. @ssoper surprising of Hitchens to qualify prevention of idolatry as ‘rather admirable’. I prefer his 2006 article https://slate.com/news-and-politics/2006/02/stand-up-for-denmark.html

  336. It’s twoo! It’s twoo! (going) >@BaltSunArts Few Baltimore bands rock quite as hard as J-Roddy Walston & the Business http://bit.ly/DSQMV

  337. Http://twitpic.com/eaoom - Accepting Wile E Coyote schemes to rid absebtee neighbor of lit rooftop palm.

  338. Http://twitpic.com/eaoom - Accepting Wile E Coyote schemes to rid absebtee neighbor of lit rooftop palm.

  339. @shrdlu PGP Desktop → Left tabs → PGP Messaging, bottom right, Edit Policies; stay in that sandbox, ignore Outlook 2007 & bang head on desk

  340. For sale: baby shoes, never worn.

  341. Les Paul: Now don’t say it that way, that’s our stock and trade, the Les Paulverizer.
    Mary: Yes, but we’ve got to eat you know.

  342. Now that I’ve stopped subvocalizing security events as I read them I get impatient, grumpy, and depressed even earlier in the morning.

  343. Mr. Sandwich was murdered by me, in the lunch sack, with a 12 ounce can of Sunkist. #lunchClue

  344. Brewed a final Batch! Pale tonight (for a while) w/ magnum, fuggles, cascade, and centennial aroma hops. Stout recipe hunting for next time.

  345. Brewed a final Batch! Pale tonight (for a while) w/ magnum, fuggles, cascade, and centennial aroma hops. Stout recipe hunting for next time.

  346. How much do you redact information shared with LEOs?

    • none, I’m a Aries/Sagittarius
    • black fax
    • ●org●●●info●●●
    • BEGIN PGP
    • Don’t share

  347. #Baltimore, I have an extra ticket to see Clutch at Sonar tomorrow night – for sale for $20. http://is.gd/26VrR

  348. Rebuilding our Incident Handling DB+forms one pixel at a time, this wheel I’ve invented sure is rounder than the old one! http://is.gd/26T4j

  349. Commuting to work doesn’t.

  350. Administrator and root RDP & SSH ‘lost connection’ errors : remote system reboots :: Helios running west in fear : the sun rising

  351. If you what to listen for, you can hear “oh well, fuck it, who cares” precede the phrase “we’ll use VNC”.

  352. Wheels @ BWI, lovely Cfa moderate climate, & humidity, want to kiss the ground. G Mark & SFire goons were on my flight. 60 min keg, cya soon

  353. Wheels @ BWI, lovely Cfa moderate climate, & humidity, want to kiss the ground. G Mark & SFire goons were on my flight. 60 min keg, cya soon

  354. Check the WarVOX project and slides from @hdmoore, great graphics, small multiples, gnuplot freq. analysis, etc. And Pat Fleet

  355. @George_Saylor I didn’t learn anything, some stuff misrepresented, valid concerns, but awfully vague and short

  356. In the Turbo track for Tony Flick’s upcoming Hacking The Smart Grid talk, of course, and playing Spot The Energy Sector Security Analyst

  357. Las Vegas says WE HAVE NO GOOD BEER in 72 point Trajan (and thinks Trajan is classy)

  358. @George_Saylor en route to M. Bay for sushi right now, coming back to check out the pool party at the Riv after. You? Welcome to join

  359. The line for Kaminsky’s talk is almost as long as the badge lines were. Leaving for sushi immediately after, then pool party

  360. Las Vegas says WE HAVE NO GOOD BEER in 72 point Trajan (and thinks Trajan is classy)

  361. The line for Kaminsky’s talk is almost as long as the badge lines were. Leaving for sushi immediately after, then pool party

  362. .@vurtyou a few folks got owned (or is it rm’d now?) at the Wardman’s ATMs at Shmoo this year. ATM trust is transitive to the environment

  363. Up and rested for Friday at defcon, must find myself coffee and something called ‘breakfast food’ for @vurtyou at or near the Riv

  364. @cyberhiker tonight at the Riv 9-4, $30 per

  365. @cyberhiker I absent-mindedly just left Caesar’s without stopping into see the SecTwits. Going to the EFF fund raiser?

  366. @George_Saylor definitely up for that, we have no firm plans

  367. In Las Vegas for defcon, waiting for a gate to free up to deplane & still feeling last night’s @CharmSec. Staying at the Riv with @vurtyou

  368. @oneeyedcarmen @censey I expect the usual @charmsec folks, and it looks like thunderstorms are a sure thing tonight, so I might be on time

  369. @bkdelong I land early Thursday, first time to DEFCON and Las Vegas, and bringing @vurtyou along for the fun.

  370. To: $TEAM CC: $USER <- Should not be cc’d Subject: FWD: Analysis FWD: Alert 5 demerits for $USER. Nastygram his boss please. $ANALYSIS

  371. @dwplanit
    • if the statements complete introductory clause
    • are free standing sentences
    • a judgement call
    • Usually: Maybe

    • Natch
  372. To: $TEAM
    CC: $USER <- Should not be cc’d
    Subject: FWD: Analysis FWD: Alert
    5 demerits for $USER. Nastygram his boss please.
    $ANALYSIS

  373. I’ll be late and sandier than usual at @CharmSec tomorrow: beach volleyball at Rash Field from 6 to 8:15. https://www.panoramio.com/ Sorry!

    Panoramio is no longer available panoramio.com (opens in a new tab)
  374. RT @justin_fenton Stay inside, East Baltimoreans: 9 people have been shot in the past 90 minutes, about a mile apart

  375. RT @justin_fenton Stay inside, East Baltimoreans: 9 people have been shot in the past 90 minutes, about a mile apart

  376. Enlightenment -> @shrdlu: New bloggage: Nao and Zen: Security Koans for Everybody. http://layer8.itsecuritygeek.com/layer8/nao-and-zen-security-koans-for-everybody/

  377. Ode to the Small Lump of Failed Backup Jobs Over the Last Six Months I Found This Midsummer Morning: To Thee I Cron, Shared Key, Rsnapshot!

  378. Enlightenment -> @shrdlu: New bloggage: Nao and Zen: Security Koans for Everybody. http://layer8.itsecuritygeek.com/layer8/nao-and-zen-security-koans-for-everybody/

  379. @AmyWoo Blue Hill Tavern: Adams Morgany, LOUD, excellent bartending, great food, beautiful space, weird walled balcony, no wait, high hopes

  380. Why can’t I resist adding “Beep.” to scripted mail alert templates and robots.txt files and other bot auto-responses?

    Beep.

  381. I have an open security analyst position on my small nsm/csirt/forensics team in Baltimore. Contact me. http://is.gd/1Jdja

  382. FRT @DataLossDB http://bit.ly/16yniy
    HSBC Actuaries - HSBC Actuaries used a floppy disk in 2009

  383. .@ddeighton any sufficiently advanced field of inquiry is indistinguishable from abstract collections of jargon https://topex.ucsd.edu/es10/lectures/lecture11/lecture11.html

  384. Why have an ASCII pot leaf in your MOTD, or an ASCII skull and crossbones, or ASCII porn, when you can have all three?

  385. Remediate and mitigate are big words often used incorrectly in place of reduce, shift, or accept because they sound fancier to fools.

  386. Esse est percipi. To be is to be perceived.

    Corollary: To be late is to be late. Acknowledgment of perception is not required.

  387. 2 <3’d Ale, back in fermenter for double fermentation. 2 wks cold & pressure knocked particulates out. Tasty now, wonder what’ll happen?

  388. 2 ❤️’d Ale, back in fermenter for double fermentation. 2 wks cold & pressure knocked particulates out. Tasty now, wonder what’ll happen?

  389. I would like to nominate the hacks Wikipedia uses to show soccer team uniform designs for a position in the DSM V. http://is.gd/1GBL7

    Dance Partyis.gd (opens in a new tab)
  390. I just bought tickets to see the Adrian Belew Power Trio in Annapolis, MD 8/30 - http://is.gd/1GsZz, https://adrianbelew.net/?option=com_content&view=category&layout=blog&id=34&Itemid=56

  391. @Ryanatmghwom did Jazzy Jeff free up a seat for you by getting thrown off the plane by Uncle Phil? https://www.youtube.com/watch?v=iFekulMv7EQ

  392. Excellent use of ‘whom’, incorrect ‘its’, multiple lower case a styles, mixed case, and ‘hot, steamy shit’ on Fait Ave. http://is.gd/1DjbU

  393. I don’t like hate use editing because the ego something something in a boat omg #useless #for #effect .>RT@ (via @grantstavely)

  394. Any bots for localities? Use broken replies to use, so’s I can spam balm’rins that @vurtyou & I are trying Blue Hill, by replying @to-a-bot

  395. I don’t like hate use editing because the ego something something in a boat omg #useless #for #effect .>RT@ (via @grantstavely)

  396. Any bots for localities? Use broken replies to use, so’s I can spam balm’rins that @vurtyou & I are trying Blue Hill, by replying @to-a-bot

  397. I’m taking @vurtyou to Philadelphia this Sunday night to see Reeves Gabrels & His Imaginary Friends at Johnny Brenda’s. Anyone want to join?

  398. Fill what’s empty. Empty what’s full. Script where it itches.

  399. He had the same obsequious manner
    That was the reason I had him killed
    So to calm my nerves I sang this song
    To him, over the phone

  400. Simplepedia can now switch languages on the fly, has a favicon, improved preference handling, and more Helvetica. http://is.gd/1CaaK

    Dance Partyis.gd (opens in a new tab)
  401. @jalvani I am sitting in Pho Hong Moi, in Security Mall, right now. It isn’t in the city but the Pho is excellent! http://myloc.me/aK8b

  402. Http://is.gd/1zLGL > @Will_Torres DJ Cheeba will mix and spin your face off. This guy rules. Check out SolidSteel podcast 82 and 99.

  403. .@Fred0828 the ceteris peribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  404. .@Fred0828 the certeris peribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  405. @stevewerby long > complex passwords given Lanman hasing specifically and rainbow table size generally. Passwords are inhumane, suck, etc

  406. @wrayjustin congrats on witnessing a shuttle launch! I’m very jealous!

  407. Might have to rewind King Megatrip’s Groove-Jitsu mix to replay ♫ Rhythm Heritage’s Theme From S.W.A.T. ♫ one more time https://forumer.com/

  408. Http://is.gd/1zLGL > @Will_Torres DJ Cheeba will mix and spin your face off. This guy rules. Check out SolidSteel podcast 82 and 99.

  409. .@Fred0828 the ceteris paribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  410. .@bjg oops, thanks! A typo away from credibility, lots of experience away from truth (and just barely above sneaking a typo into this tweet)

  411. Reminder: You should not give @TechCrunch page views, @arrington & co. are selfish trolls running a lame geek-tabloid https://www.theguardian.com/media/pda/2009/jul/15/twitter-hacked-techcrunch-defends

  412. .@vurtyou is working on cover letter for plant engineer gig at ice cream factory, help me convince her to add ‘and I really like ice cream’

  413. .@vurtyou is working on cover letter for plant engineer gig at ice cream factory, help me convince her to add ‘and I really like ice cream’

  414. I have an open senior security analyst position on my team in Baltimore. NSM/CSIRT skills required.

  415. A man at the Little Havana bar is reading an ST TNG EU paperback and enjoying a 22 ounce lite beer, alone. Cheers to you sir!

  416. Oh, Antisec. ¶'s 5 and 6 are the zanniest >@wrayjustin RT @rvdh Imageshack is hacked. All images are replaced with this: http://is.gd/1udkU

  417. @stevewerby their glassware is nice too. I’ve only ever had it at Pizza Paradiso’s Georgetown Birreria, and the Brickskellar. Tough find.

  418. @wrayjustin Parkville is the land of craft beer: Beltway https://www.wineaccess.com/store/ (http://is.gd/1uaSq) and Racers http://www.racerscafe.com/

  419. .@quine nothing in an Ayinger glass can do you wrong. http://is.gd/1u7Iz

  420. Oh, Antisec. ¶'s 5 and 6 are the zanniest >@wrayjustin RT @rvdh Imageshack is hacked. All images are replaced with this: http://is.gd/1udkU

  421. .@quine nothing in an Ayinger glass can do you wrong. http://is.gd/1u7Iz

  422. The power of chicken noodle soup with cayenne compels you! The power of chicken noodle soup with cayenne compels you!

    blows nose

  423. Explanations relying on analogies, narratives, ignored gaps, and secondhand facts are mental models or at best hypotheses, not truth.

  424. So side effects do happen? I’m on day 2, dose 3 of Alkaseltzer Cold and Sinus and randomly have a bloody nose. Common cold: 1, Science -1.

  425. @cyberhiker = IR with a Wiki = {{{ Tried it, didn’t work for me. The markup is too --cumbersome-- much of a hassle for the value-add. }}}

  426. @censey @oneyedcarmen people know I’m an ASS and I don’t need a cert to prove it. You guys are so paper.

  427. @sckain Dinosaur Jr - Farm. I have a feeling Beyond will be next.

  428. @mikenealis I want a carafe with I’m-empty whistles or bells. Yelling when I find it empty seems to just encourage /them/.

  429. Carving botnet commands out of HTTP 200’s that use Content-Type application/octet-stream instead of text/plain. Guessing it isn’t ‘data’

  430. Every time this rule hits, a web developer should get security training: alert tcp $RFC1918 any -> $INTERNETS $HTTP (content:“&pass”…

  431. A majority of scientists doubt the existence of man made global warming jokes on cold days that aren’t sad cries for science education.

  432. Every time this rule hits, a web developer should get security training: alert tcp $RFC1918 any -> $INTERNETS $HTTP (content:“&pass”…

  433. @ssoper makes great meat grenades. Congrats again on the fallout shelter w/ Moscow hotline. Pour some Aventinus out for Christie tonight.

  434. @dionthegod Try @sckain, he’s a roller derby ref. I hear they meet up at @bad_decisions a lot after games. https://charmcityrollergirls.com/

  435. Holy crap @Michael_Jackson is at the Hippo. Hope he does karaoke!

  436. Holy crap @Michael_Jackson is at the Hippo. Hope he does karaoke!

  437. .@AmyWoo historians will mark invention of Excedrin as dawn of a new age. 1960: Excedrin Extra Stregnth formulated. 1969: Moon landing.

  438. A lesson in PsyOps, from @mcsweeneys, Saddam’s Interrogation Logs http://is.gd/1mp39 Master these techniques and something something…

  439. @sxs3200 if you don’t get the President of the Unites States on that phone… You’re going to have to answer to the Coca-Cola Company.

  440. Attempting to resuscitate this Bells Two ❤️’d IPA clone with another shot of ale yeast this evening. Or should I get champagne yeast?

  441. @Ryanatmghwom that link is tainted with Ron Paul voodoo – I wish all three of us understood economics better, /they/ don’t want you to, etc.

  442. Attempting to resuscitate this Bells Two <3’d IPA clone with another shot of ale yeast this evening. Or should I get champagne yeast?

  443. Booo, both of my kegs are kicked and the last homebrew was a disaster! Going flatline! /_/_|.__________

  444. EXT. @ELECTRICFORK CYBER COMMAND - EVENING
    Throngs of black t-shirted villagers are chanting…
    ECU VILLAGER
    You said cyber! You said cyber!

  445. Great url > @mubix DEFCON PreQual CTF walk-through’s posted: http://shallweplayaga.me - Learn a lot, even if you weren’t involved.

  446. Great url > @mubix DEFCON PreQual CTF walk-through’s posted: http://shallweplayaga.me - Learn a lot, even if you weren’t involved.

  447. My slightly tweaked version of dnssnarf, by @linuxgeek247 : http://is.gd/1jsEC Timestamps, more record data, and both queries and responses

  448. Ratio of budget and FTE’s dedicated to availability monitoring NOC, physical security monitoring SOC, and NSMing CSIRT? Ideal? Actual?

  449. .@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!

  450. .@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!

  451. Our DUKW tour of Baltimore yesterday was captained by Captain Crunch. http://is.gd/1i3SI

  452. @MissMktr @AmyWoo Thanks for hosting the #ducks tour, @vurtyou and I had a blast!

  453. Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.

  454. Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.

  455. At the Baltimore Women’s Classic 5K to support @vurtyou from Little Havanah. She runs faster, longer when I’m drinking Mohitos.

  456. CONTAINS QUININE.

  457. CONTAINS QUININE.

  458. Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us

  459. @aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura

  460. Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us

  461. >@aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura

  462. @censey any time that happens, rent a car, boom!, I mean, a 7 or 8 hour drive, you’re a mile high! It’s one of those things, you know?

  463. Max’s has 9 Hitachino beers on tap for pint night, all 7.0% or higher abv, nice take-home half-pint glassware

  464. @shmausen @commonwombat So @vurtyou just talked to BGE: The estimated time to restore of services is ‘by 10PM’.

  465. Heading home for a pint of home brew with @philip_daigle before CharmSec, then Max’s for a pint night glass ~6:30, then CharmSec at Slainte

  466. Excellent semiotic homophone: http://is.gd/1cadJ

    Unrelated: I’m looking for a trap set to goof with.

  467. .@vurtyou I promise not to blast you into space…until such time as I deem it necessary.

  468. Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful

  469. I am Zeldar. I’m from planet Beldar. My leader is Zeldar. And we shop at Wal-mart. https://www.last.fm/music/Devin the Dude/_/Zeldar

  470. Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful

  471. Spirit’s “Fresh Garbage” (1968) is a cover of Tay Zonday’s “Chocolate Rain” (2007). It’s a fact.

  472. I have seen the fnords in this configuration file.

  473. Look, a Unix system monitoring tool! Will the configuration file use mindfuck, lolcode, perl, or a delimited and whitespace-sensitive 4GL?

  474. @bjg there is great money in it, many of those tools are OTS and all C&C is over egress-ACL-likely ports. #thistweetneedsmoreacronyms

  475. .@linuxgeek247 happy to have ya. @philip_daigle promises to have the new blinkenlights sign too.

  476. \m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk

  477. Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump

  478. Holy crap, very sad. > @cnnbrk: Metro spokeswoman confirms at least two fatalities in DC Metro train collision https://www.cnn.com/2009/US/06/22/washington.subway.crash/index.html

  479. \m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk

  480. Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump

  481. Gnostic quizes, ineffective cause support, fans of stuff, flash memes: It was the year when they finally immanentized the Eschaton.

  482. What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?

  483. Francis, G: “I’ve got some zero days in the table-top exercise I’m working up for you guys, and some tomorrows too, man.” Yikes! Mommy!

  484. Hey, I found out why there’s a Local Settings directory in Application Data, and an Application Data directory in Local Settings. It’s becau

  485. Cheeva Investigates… The Case of The Missing Records. Solid Steel. 90s-heavy, excellent Friday music. http://mixedbizness.co.uk/cheeba/ (mp3 top right)

    mixedbizness.co.ukThis domain may be for sale!mixedbizness.co.uk (opens in a new tab)
  486. What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?

  487. I wish we hadn’t blasted all the telephone sanitizers off world on B-Ark, my keyboard and mouse are filthy.

  488. Strange that until now I’ve never handled and incident on a machine logging DD/MM/YYYY. Newb.

  489. @censey a bunch of us are heading to Luna Del Sea for drinks, how is parking over by metro?

  490. Heading back to the city and in the mood for a beer. Any takers?

  491. @linuxgeek247 I get back to the city around 8:30, probably too late?

  492. Wow, I feel like an eight year old. I HATE MATH WAAAAAAAAAHHHHHHH!!! tempter-tantrum

  493. @ssoper tried that, it doesn’t work. I am pleased to note that nothing I’ve written since then contained the word. http://is.gd/15nC6

  494. @attritionorg any kids could have done that, if you are going to knock the BSA, try the theism, homophobia, or sculpture https://en.wikipedia.org/wiki/File:Boy_Scout_Monument.jpg

  495. @censey @oneeyedcarmen @linuxgeek247 Changed plans: I’m going to defcon, making travel arrangements now. Hotel preference? Never been to LV.

  496. I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community

  497. @vurtyou really? organic hangover patches? I have a shark repellant to sell you. Buy now and get these magnetic anti-elephant bracelets!

  498. I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community

  499. .@linuxgeek247 whoa! I’ll test this AM. I have some ideas for what to keep of the response using a DOM parser - regex may be too trusting?

  500. Unfortunate url shortener breach @cligs. http://bit.ly/AS6Yp Why disclose the source IP? Also, ironic: http://is.gd/13obQ

  501. The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.

  502. .@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)

  503. The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.

  504. .@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)

  505. .@mubix I use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.

  506. .@mubix I’m use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.

  507. .@electricfork & @will_torres are drafting procedures around Scytale and toilet paper for out-of-band IR messaging. https://en.wikipedia.org/wiki/Scytale Help.

  508. Didn’t make it the Hilton to put up fliers at SANSFire, relying on twitter and word-of-mouth already seems sufficient for @CharmSec

  509. Expecting a lot of 8:15ish SANSFire folks at @CharmSec after the evening talk. The rest of us will be at Pickles around 7PM tonight.

  510. Two-❤️’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar

  511. Two-<3’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar

  512. Brewing a Bell’s Two-hearted clone this afternoon: http://is.gd/10OEM It’s Centennial hops all the way down! https://en.wikipedia.org/wiki/Turtles_all_the_way_down

  513. |
    Ceci n’est pas une pipe

  514. Silly Putty sticks to Silly Putty really well. Better even than it sticks to the rings of a slinky. #insightfriday

  515. $VENDOR on antivirus exclusion: …failing to do so will result in very poor performance ultimately leading to your disgust for the product.

  516. So @philip_daigle returns to cube land and says, “Wow, I just tried to use my badge against the light switch to exit the bathroom”. Dude.

  517. Mission after pho lunch: Create a scapy daemon (or at least script) to log all iframes from a stream.

  518. @MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions

  519. Man, the parking lot at work always smells like burned rubber and clutch when I get to work in the morning. What’s that all about?

  520. > @MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions

  521. Search ‘is.gd’, 1st hit: marketing, 2nd: marketing, 3rd:, opportunistic ‘hey is.gd is down, check out our marketing’. http://tr.im/o0L2

    tr.imThis domain may be for sale!tr.im (opens in a new tab)
  522. Is.gd’s server seems to be gone gone. Anyone else have a route past 81.29.89.108 or know of other affected sites?

  523. ♫ It’s getting better all the time / (It can’t get no worse) ♫

  524. ♫ It’s getting better all the time / (It can’t get no worse) ♫

  525. @ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q

    tr.imThis domain may be for sale!tr.im (opens in a new tab)
  526. If unsubscribe links were 72pt, bold, and at the top of marketing e-mail, it would probably slow me down by at least a half second.

  527. > @ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q

    tr.imThis domain may be for sale!tr.im (opens in a new tab)
  528. The Beatles Rock Band cinematic intro is excellent https://www.rockband4.com/ (@electricfork: note inclusion of Day Tripper https://en.wikipedia.org/wiki/The_Beatles:_Rock_Band)

  529. @censey holy crap that pizza looks amazing, where are you? (as I heat up a Tony’s for a school-night late meal)

  530. The Beatles Rock Band cinematic intro is excellent https://www.rockband4.com/ (@electricfork: note inclusion of Day Tripper https://en.wikipedia.org/wiki/The_Beatles:_Rock_Band)

  531. @shmausen @commonwombat – 1-800-567-6789 Verizon residential high speed internet support.

  532. Begged question answer: I just got lawn seats to see Stone Temple Pilots at Merriweather, 7/19. http://is.gd/S7IN

  533. Surely there are music business excusses for the failure that is Ticketmaster arbitrary fee transparency? Lie to me better you bastards!

  534. XL newish craigslist clothes dryer installed, old shrieking box of fire-breathing doom in the alley for pickup. SCREEE! EEEIK! RYIEECK! #%@!

  535. I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.

  536. Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9

  537. Dear application team: Plz leave honeypot work to me, & pretend /your/ stuff is in production and shouldn’t have Everyone granted All perms.

  538. Argh, $52 parking ticket for being too close (questionably) to a fire hydrant.

  539. I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.

  540. Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9

  541. Driving home from #dojosec on 4 ounces of Big Red… This is bat country!

  542. Driving home from #dojosec on 4 ounces of Big Red… This is bat country!

  543. The shortened url straw men of doom

    Bastardizing the Drake
    equation
    , if only a fraction of
    the people using twitter used it to send urls to each other, and only a
    fraction of those urls were artificially shortened by a url shortener, and
    only a fraction of those shortened urls were actually hyperlinks to Rick
    Astley’s Never Gonna Give You Up, and only a fraction of those Rick Astley
    hyperlinks were in fact not to Rick Astley videos, but instead phishing attack
    hyperlinks to Mills On The Hill Fish and Tackle Shop in New Market, MD,
    hosted on a RedHat 5 server at a local Mom and Pop ISP compromised and
    hardened by multiple attackers over the years but now serving free embedded
    javascript with every page inserting iframes from choose-your-own-nationalist-
    conspiracy-theory-ok-chinese-attackers, and only a fraction of the twitter
    users likely to find such links by searching for hashtags actually click on
    them, the Internet as we know it would come to a screetching halt, please
    can’t someone do something about these urls shorteners?

    Still with me?

    The Scarecrow
    Figure 1. The Scarecrow.

    Some of these arguments are very good, and thorough. Or at least thorough. Oops, I mean thorough. Most are echos of As Web communication shrinks, so do links, by Rachel Metz at the AP.

    Sorry, skip the foolish advertising business model of free dull razor blades,
    with every cut sponsored by Punch The Monkey and jump to the existing url
    shortening sites that are trying to reduce the risk posed by our straw man.

    Preview images sound cute, I’ve never used them. I could preview a thumbnailed
    malicous pdf for you, would that help?

    Auto-unshorteners sound neat too and I’ve seen twitter clients that use their
    API’s to some success, but they are just that – secondary services that some
    clients have.

    New shorteners like safe.mn do more, but how much more? I
    was able to validate that safe.mn refused to shorten an old link in my spam
    quarantine, but not a new one.

    How safe is safe enough? Does our straw man actually have a brain? How much
    protection does the culture of associative trust so prevalent on twitter
    reduce the risk that a given shortened url will actually be evil?

    It won’t be the next link you get from a new follow consistent with their
    posting history about that-thing-for-which-you-followed-them that gets you. It
    will be the next #amazonfail meme. It will be thousands of opportunistic spam
    accounts bubbling up a Trending Topic
    with helpful links. Or it will be innocent meme followers, linking to their
    blog hosted on the same server as Mills On The Hill Fish and Tackle Shop,
    or, etc.

    Hyperlinks never had any trustworthiness. URL shorteners seem like a great
    opportunity to add trustworthiness. Is anyone going that direction?
    Safe.mn seems to be heading in the right direction, but
    they make some bold claims.

  544. Class got out early! Off to #dojosec after all.

  545. @oneeyedcarmen f5 f5 f5 f5

  546. @alexhutton thanks!

  547. .@dionthegod @quine assuming you aren’t talking about returning door-to-door Jehovah’s Witnesses, Good luck on that ‘good news’ thing.

  548. @alexhutton switching costs masked as failed opportunities - http://is.gd/O5T6 - love that the unsubscribe link still works.

  549. DestroyTwitter on a mac w/ a synergy provided white mac keyboard hosted on a windows PC == confusion whether ‘command’ is actually esc. ugh

  550. Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO

  551. Had to see how I stacked up to Ryan.

  552. Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO

  553. @CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%

    tr.imThis domain may be for sale!tr.im (opens in a new tab)
  554. @ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn

  555. Starting with Kid A onward, Radiohead has just been a Battletoads soundtrack cover band, Thom sings the vocals the NES coulnd’t reproduce.

  556. > @CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%

    tr.imThis domain may be for sale!tr.im (opens in a new tab)
  557. > @ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn

  558. Finally started McCarthy’s Blood Meridian (https://en.wikipedia.org/wiki/Blood_Meridian). I want to write an incident post mortem in this style.

  559. Finally started McCarthy’s Blood Meridian (https://en.wikipedia.org/wiki/Blood_Meridian). I want to write an incident post mortem in this style.

  560. Missing tonights Bacon & Beer Happy Hour at @bad_decisions, and Thursday’s @dojosec because of my damned night class. $#!^&#!!

  561. Does anyone know the brain.conf option to turn off sloppy focus? This thing seems to just do whatever the heck it wants.

  562. @marcusjcarey any introduction that begins with an honorific that doesn’t concern life, death, rank, or responsibility is silly.

  563. @marcusjcarey any introduction that begins with an honorific or that doesn’t have power over life, death, rank, or responsibility is silly.

  564. Outlook Zen behavior: 1. Select multiple messages to act upon 2. Receive a new message in the same folder. 3: Outlook undoes the selection.

  565. A whisper in your ear: memento mori, memento mori. http://is.gd/KUMp

  566. .@jeson, @vurtyou, and @slp22 are trying to starve me Lunch promises ’ real soon now’ started around 11:30, it is now 15:00. Send help.

  567. Eating outside at Three. Heroin users: stay inside please. Live-tweet it? Stop trying to break into that Car. No $ in the BSun box?

  568. Eating outside at Three. Heroin users: stay inside please. Live-tweet it? Stop trying to break into that Car. No $ in the BSun box?

  569. Brewing a pale ale before going to the Polish Festival at Patterson Park.

  570. @electricfork @vurtyou polka, polka, polka, one o’clock at my place, we’ll walk over (away from the smell of dead fish. Ugh.)

  571. Hey, Friday afternoon, when nobody is looking I’m going to beat the everloving crap out of you. It’s been 3:45 for at least six hours now.

  572. Obama also said ‘ATM Machine’. We elected this guy? And what is it with airline food anymore? I mean you ask for a bag of peanuts and…

  573. I don’t get the dislike of/bias against users of the word & prefix cyber. See: def. of hacker, pronounciation of nuclear, etc. Get over it.

  574. .@censey I disagree w/ the characterization too. I’m using it as a blind man’s cane to determine where I want to keep the real tools.

  575. I was just accused of weaponizing eicar. This will be a fun drill.

  576. @insidecharmcity: RT @wjznews Stray Bullets Hit MD Nuclear Power Plant https://www.cbsnews.com/baltimore/

  577. My math textbook for this semester has a Chapter 0.

  578. Print “\a\a\a\a\a\a\a I just got a ticket to see Clutch at Sonar! \a\a\a\a\a\a\a\a”;

  579. @AWS0807 …unless your singer is a green lizard named Sarsippius

  580. .@oneeyedcarmen I expect there will be ad hoc lunches and meetups, and folks from out of town that need to know where to enjoy their eveings

  581. .@philip_daigle: “Never heard of this Linux distro” after finding a MINIX 3.0 cd in our stack. Thinking about asking for his geek card.

  582. > @insidecharmcity: RT @wjznews Stray Bullets Hit MD Nuclear Power Plant https://www.cbsnews.com/baltimore/

  583. Stopping by Max’s pre-@charmsec? I am - pint night is Apocalypse Great White.

  584. .@danphilpott the spectators are strangely the same year after year, maybe Bradbury’s /The Crowd/ was prescient https://www.yahoo.com/

  585. @alexhutton /.You forgot the closing / and . on that style tag http://is.gd/H9IH /.

  586. Enumerating AV exclusions by spraying eicar all over the file system. Hackish, slow, & noisy, but many don’t alert their IR team for eicar.

  587. Comments, cliches, commentary, controversy, chatter, chit-chat, chit-chat, chit-chat, Conversation, contradiction, criticism, @charmsec 13

  588. @johnemcintyre: Accept no substitutes: Grant Barrett’s book on unofficial English is free for the asking. http://johnemcintyre.blogspot.com/2009/05/free-book.html

  589. Abandoned amature hour: trying simultaneous 5GHz (prod) and 2GHz (guest) wireless networks, and dnsmasq w/ opendns. Airtunes so far so good.

  590. SETTING: media on a mac mini smb share, itunes on an mbp streaming to an airport express ECU: Operator screaming, itunes & express failing

  591. > @johnemcintyre: Accept no substitutes: Grant Barrett’s book on unofficial English is free for the asking. http://johnemcintyre.blogspot.com/2009/05/free-book.html

  592. Hop pellets in a dry martini, shaken: visually apealing green peppering, nose improved, does nothing for the flavor. I need hop-infused gin.

  593. Hop pellets in a dry martini, shaken: visually apealing green peppering, nose improved, does nothing for the flavor. I need hop-infused gin.

  594. .@marcusjcarey sushi lunch was fun & I like your HLSC vlog post.

  595. Just got home from a 2-night primitive camping trip with @jeson, @slp22, @vurtyou, @philip_daigle, K, E, and e.

  596. .@philip_daigle and I are headed to Security Lunch Meetup at Baltimore Inner Harbor, Edo Sushi noon, see everyone there #charmsec #sectwits

  597. Capturing images of blade systems over port replicator dongles is fun, pause, not.

  598. .@censey cork the kitchen, ebony LR (or througout), halogen under the counters, nix track lighting, new cabinet hardware, flowers & plants

  599. @marcusjcarey any luck with your lunch plans tomorrow? A few of us would be up for it, time permitting. What restaurant / meet time?

  600. Brown sugar and fish sauce! It’s twoo! It’s twoo!

  601. @Fred0828 you are all over that! Congrats to all of GURU! Four years ago: Mock: http://is.gd/BGVO http://is.gd/BGZZ Real: http://is.gd/BH2X

  602. Crushed both finals, Spring '09 semester: adios! Summer semesters start Tuesday. #umbc

  603. @philip_daigle dude, you could stack a lot of horses something something, http://is.gd/BEbl

  604. @helvetireader I use a build script for Simplepedia to inline css, GM API & about:config to config http://is.gd/jiaW O & GKit can tweak js

    Dance Partyis.gd (opens in a new tab)
  605. Please suggest papers/presos on responsible compromise notification. i.e. “Hi, you are owned.”, not “Hi, you are vulnerable.” abuse@? Still?

  606. .@dionthegod ha - that’s like saying “the closest I got to playing freeze tag was when I was starting running back for my hs football team”

  607. .@dionthegod I always got sidetracked transposing sheet music to QBasic PLAY w/ amp AUX leads soldered to the motherboard speaker terminals

  608. Outlook Zen Koan: Uknown Error.

  609. Baltimore and other delmarva locals: oceancity.org is currently serving pdf/swf malware: DO NOT VISIT (apologies to site admins)

  610. I can’t stress the importance of coding style enough, as other criminals will have to deploy your work. http://is.gd/BjG3

  611. Definsible, if wildly biased/innacurate? Insightful regardless? http://bit.ly/zo5Vs

  612. Definsible, if wildly biased/innacurate? Insightful regardless? http://bit.ly/zo5Vs

  613. Outlook Zen Koan: Extra line breaks in this message were removed. / This message has extra line breaks.

  614. .@alexhutton infosec zombie meme: fix-it-with-encapsulation (usually crypto). Stupidest are ‘disk wipe count’ and password policy myths

  615. Planning our sixth annual memorial weekend camping trip to Greenridge Forest, hoping the weather clears up for us! http://is.gd/B0ab

  616. This lumber is from 1915. When I make decorative cat scratching posts with the remainders, somewhere, a lumberjack will roll in his grave.

  617. I’ve been playing carpenter with nothing but a circular saw, a hammer, a chisel, and a pile of OD rough hewn hickory all afternoon.

  618. Jeff Beck’s at Ronnie Scott’s is on Palladium. Tal Wilkinson is ridiculously talented, and El Becko is a fine wine.

  619. Jeff Beck’s at Ronnie Scott’s is on Palladium. Tal Wilkinson is ridiculously talented, and El Becko is a fine wine.

  620. Tufte forums on visualizing risk: http://www.edwardtufte.com/notes-sketches/?msg_id=0000Xy&topic_id=1 As Ricker points out: You can’t present that which you have not computed.

  621. .@will_torres please stay until ~3:30AM, then go to 1745 Kalorama and play very loud music into the windows of the basement unit. Thanks!

  622. .@electricfork your dunkelweizen smells amazing. Hallertaus are still floating, will be tricky to siphon. Shoulda used the muslin bag!

  623. Batch! Ale #2 is kegged. Amazing stuff! Brewing another tomorrow, and tweaking the hop schedule to be more Lagunitas IPA, less SNPA.

  624. Scenario: Attack account, change username, create new account, squat username & abuse. I need to use a stronger password on twitter.

  625. Twitter seems to fatal error on new passwords with spaces, then logs you out. Logged back in using the new password with spaces. Confused.

  626. Oops, I polluted @electricfork’s facebook status. I assumed all those apps used RSS or API calls, not page scrapes. clicks ‘like’ in fb

  627. Note only 14605171 is the real @grantstavely. All others are impostors. Philip K Dick you are missed. Fast flux-able?

  628. Scenario: Attack account, change username, create new account, squat attacked username, grief. I need to use a stronger password on twitter.

  629. .@shrdlu usernames are not static. I’ll let you use mine if I can use yours. wink twitter.com/urls change and everything.

  630. I never kept handles long, and used them for fpss, not hacking. ph8 was my favorite, then hobart. writequit was just the last one I used.

  631. OK @electricfork, I’m going to switch to @writequit again, then you switch to @electricfork, then I’ll be @grantstavely again. 1,2,3,go

  632. Squatting @electricfork’s handle, griefing his followers with nasty dms, as usually #whyitweet #fixreplies

  633. I just crossed streams with @electricfork, er, I mean, @grantstavely. Who ever heard of usernames not being primary keys?

  634. Try to imagine all life as you know it stopping instantaneously and every molecule in your body exploding at the speed of light.

  635. @oneeyedcarmen he can’t hanlde advice without being insulted? http://is.gd/zT5s immediate and direct feedback is always easier to take

  636. .@aaronbarnett if there were windows in my office, I’d have jumped out already. #google

  637. @sxs3200 that’s not effective seasoning, you’ll need to host a BBQ to protect that investment effectively.

  638. @SemanticV: Press release for live website and demos - http://bit.ly/11IB3H

  639. Yeah, @will_torres CSNhd keeps keeps losing signal on me and going to silent/pixels during plays, might have to go to a bar tonight.

  640. > @SemanticV: Press release for live website and demos - http://bit.ly/11IB3H

  641. Happy Anniversary! Thanks for lending me your wife for a few days:)

  642. > @alexsotirov: “Hahaha: http://twitter.com/XploitSweatshop”

  643. @censey the complainee. Apathy, silence, & dismissal, are all easier. NB: Attacks are not complaints.

  644. Complaints are compliments.

  645. @electricfork @will_torres, it is easier than that: go Neverending Story on them, let the sadness hit 'em. #probablymissingasportsreference

  646. @yahoo what are your tactics for keeping criminals from SEOing malware? Opportunistic attacks make it into you top ten frequently.

  647. @oneeyedcarmen is there anywhere in the city I can get a C02 tank refilled or traded south of Racers? I need to keg a batch, limited time.

  648. What zany things would happen if example.com|net|org suddenly had a valid A and MX records? Interresting dns cache poison for a honeypot.

  649. Most grow out of this risk evaluation, yet keep applying equivalent silliness to externals: “I haven’t died yet, therefor I’m immortal!”

  650. Outlook Zen Koan: The function cannot be performed because the message has been changed. http://is.gd/jqh4

  651. @GratefulGooner why did you have to remind me of that nightmare #radiohead Nissan Pavilion show? Utter disaster. The venue is dead to me.

  652. @linuxgeek247 no fair if you go to CC campus before the next #dojosec, and I love that you called it marco. What pool did you test it in?

  653. Making shrimp tacos with @vurtyou, @jeson, and @slp22, wishing the rain would stop so that we could enjoy the roof deck.

  654. @censey my grandfather bumps me on page 4 of google for ‘grant stavely’. An unrelated ‘grant stavely’ in the UK is on page 5. Poor guy.

  655. Next #dojosec, I’m asking about world peace > @linuxgeek247: #dojosec dnssnarf in 6 lines of python… http://bit.ly/bJbol

  656. Catching the Caps game with @vurtyou, @satie45, and Weeds at a bar in Canton. (My vote is for Growlers/The Tap House)

  657. @linuxgeek247 @sdwilkerson abandoned BIND format somewhat, added query id and responses, using it now: http://is.gd/xS2u (my first python)

  658. @tombihn so it was a bad batch of YKK buckles? Tough luck? I’ve replaced the bag already with an @goincase messenger - love it.

  659. @vurtyou \m/. .\m/ http://phohuongmoi.com/ noonish.

  660. Next #dojosec, I’m asking about world peace > @linuxgeek247: #dojosec dnssnarf in 6 lines of python… http://bit.ly/bJbol

  661. @wrayjustin we stopped to try to control the projector. I think we walked past you heading for the far lot as you were driving looking! =/

  662. Http://twitpic.com/4rb6r - We found a frog to tailgate with at @dojosec.

  663. I’m not kidding about @dojosec tailgating. Find me.

  664. Want to test IPv6 and teredo detection on your network without deplying it? Invite $big_company pro services over for a meeting. @dojosec

  665. I don’t want to spoil @sdwilkerson’s @dojosec talk, so I’ll stay off Panasonic Display1 for now. http://is.gd/xBT8

  666. The @dojosec projector is awfully quiet on its own ad hoc network. Defaults: http://www.google.com/search?hl=en&q=wireless "panasonic display1"&btnG=Search thought it transmitted on assoc: just myself

  667. @dionthegod btw @philip_daigle asks if he has a girlfriend in the future #dojosec

  668. @dionthegod holy crap are you posting from the future!? I’m @dojosec and @sdwilkerson isn’t talking yet. Do they have flying cars? Jetpacks?

  669. @dojosec w/ @philip_daigle watching @danphilpott’s talk on FISMA. I’ve never worked .gov. And people complain about http://is.gd/xBw2 ?

  670. Http://twitpic.com/4rb6r - We found a frog to tailgate with at @dojosec.

  671. I’m not kidding about @dojosec tailgating. Find me.

  672. Want to test IPv6 and teredo detection on your network without deplying it? Invite $big_company pro services over for a meeting. @dojosec

  673. I don’t want to spoil @sdwilkerson’s @dojosec talk, so I’ll stay off Panasonic Display1 for now. http://is.gd/xBT8

  674. The @dojosec projector is awfully quiet on its own ad hoc network. Defaults: http://www.google.com/search?hl=en&q=wireless "panasonic display1"&btnG=Search thought it transmitted on assoc: just myself

  675. Griefers experiments prove trust exists, news at 11 > @joshgans Journalists relying on Wikipedia caught out with hoax. http://short.to/7z41

  676. @electricfork how many times have I spoken to you about your guestures Spaulding?

  677. I’m automating analysis of domains and IP addresses in logs using surbl and google/safebrowsing. What other similar services have open APIs?

  678. I can’t un-visualize this one: @will_torres on XTC’s Skylarking: “Is that kermit singing?”

  679. This toot of a blog post of an executive summary of key findings of the overview of the details is so easy to read, skip the data altogether

  680. Style tip: Underestimating? Deriding? Citing ‘lame’ without reading source material? /.Surround it in Slashdots!/. (+5 Nash Equilibrium)

  681. @AWS0807 a sweep would have been boring! Enjoy the Caps’ C-league goal and look forward to games 4 and 5!

  682. Griefers experiments prove trust exists, news at 11 > @joshgans Journalists relying on Wikipedia caught out with hoax. http://short.to/7z41

  683. @will_torres go caps! C A P S! (I am surrrounded by penn fans)

  684. Corporate web filtering drives users to the black market. When the latest American Idol clips are banned, only criminals will have the la…

  685. The file system ‘name’ metadata exclusivity is v. 1970s, ignores superior solutions in MacOS, BeOS, file hints, etc.text.tweet.html.exe

  686. You know wha’ they say: See a broad to get that bodiac lay’er down an’ smack 'em yack 'em!

  687. @sckain I ran osx86 on my HP laptop for a while (10.4.8-ish?), macbook now. Dogfood at work, I would frown on other hackintoshes on our LAN

  688. Second bankrupcy of the week: XP on the desktop. Returning to FreeBSD asap, as OSX is sady not an option.

  689. Every time virustotal says ‘-’, I think of Dark Helmet’s thoughts on the triumph of evil over good.

  690. Eschatologists have caclulated the # of collective pronounces and -ly words that will bring end times, but not which conference room

  691. Remoting three+ levels into varying resolution GUI systems should be covered under article 3 of the geneva conventions.

  692. The closed class door and lights off jogged my memory that class is canceled tonight, rushing through leftovers or driving to UMBC didn’t.

  693. VM bankruptcy declared. My greeting now requests that you e-mail me or call my cell phone, then it hangs up on you. VM is dead tech to me.

  694. @LazerFlip how’s your heel flip? I can’t do either half of a lazer flip, need somoene to teach me. https://www.youtube.com/watch?v=JxJyZ8Bi-2k

  695. By popular demand: four photos of the almost finished basement. http://is.gd/wAmb (I’m accepting tap handle donations for the home-brew tap)

  696. Asked Sfwy meat counter for 4 oz bacon for a ragu, one piece was 8 oz, he couldn’t ring such a small amount, so I got it free. Free bacon!

  697. @tombihn I have a medium cafe bag and both of the clips on the plastic buckle broke off, so it doesn’t latch closed.

  698. Http://twitpic.com/4f25t - We dry hopped @electricfork’s dunkel with the hallertau’s I got at the 2008 GABF.

  699. @commonwombat yup, should be right up our street! #baltimore #kinetic

  700. Http://twitpic.com/4erh5 - We’re all gonna have so much fucking fun we’ll need plastic surgeory to remove our godamn smiles.

  701. Http://twitpic.com/4enum - TOS Enterprise NCC1701 entering the water in the Baltimore Kinetic Sculpture Race

  702. @electricfork want to come early? The Kinetic Sculpture Race is going to go right past my house. Bring something to grill. At waterfront now

  703. Many shortened urls last forever. Anyone ever rainbow table them? What percentage of the urls point to darknets? Contain auth creds?

  704. @pearsontowers: Awesome Moneyshot / Johnny Rotten set http://is.gd/vN6G <- great setlist and a cool bit of history!

  705. @dionthegod ‘we were’ got lost in editing, became ‘were’ and implied ‘they were’. My ego is already a lumbering Stay Puft, be careful.

  706. Going to Artful Gourmet to avoid the snarling traffic downtown, then open for the weekend w/ @vurtyou out of town.

  707. @XSSExploits http://is.gd/vWfD played like a pentest to me.

  708. @XSSExploits that was an excellent play in three acts. I’m not normally into tragedies but with writing like that, who wouldn’t be?

  709. @censey I bought a year of trst.us, have a dev, going for sushi. http://trst.us/

  710. @sdwilkerson @dionthegod mentioned #vzdbir, I said ‘oh it was nothing’, everyone agreed, and were all humbled by his pdf exploit earnings

  711. @sdwilkerson I bought your last Guinness @charmsec with my “CONGRATS ON CRACKING THE CODE” Amex card.

  712. @censey let’s do it. We can partner with http://www.stopbadware.org/ - do you have a name in mind? (slightly serious)

  713. @StrongwaterSec Just commands? Grab everything! Tweak something like http://is.gd/vRvi to be trusted, maybe throw it at a serial device?

  714. There is this weird small computer on my desk – has keys 0-9, *, and #, and I don’t know how to make the red blinking light on it stop.

  715. > @pearsontowers: Awesome Moneyshot / Johnny Rotten set http://is.gd/vN6G <- great setlist and a cool bit of history!

  716. 2009 Great American Beer Festival: 9/24-26, Denver, CO. I had a lot of fun last year who wants to go this year? http://is.gd/vJue

  717. It looks like userscripts.org needs an @attritionorg style Going Postal section: http://is.gd/vJoi

    Dance Partyis.gd (opens in a new tab)
  718. Http://is.gd/vf3f Kirk: ipod shuffle. Khan: kindle. Aaaaannnnnd… scene.

  719. 2009 Great American Beer Festival: 9/24-26, Denver, CO. I had a lot of fun last year who wants to go this year? http://is.gd/vJue

  720. @SemanticV: A new Stingray Explorer demo is online. Browse Enron’s email using concepts - http://semanticv.com/stingray/

  721. Simplepedia: fluid.app, ssl-aware, front page tweaks, and self-updating. ♥ing the ideas & support submitted by users. http://is.gd/jiaW

    Dance Partyis.gd (opens in a new tab)
  722. Argus has a daemon flag and no netflow listener while ra has a netflow listener and no daemon flag because real sysops daemonize with &. 😦

  723. > @SemanticV: A new Stingray Explorer demo is online. Browse Enron’s email using concepts - http://semanticv.com/stingray/

  724. Phơ Hương Mới, noonish, http://is.gd/7xCG

  725. If I owe you a link re: and open discussion @charmsec, please remind me. http://is.gd/vAiq

  726. I tried to explain https://en.wikipedia.org/wiki/Rainbows_End and https://en.wikipedia.org/wiki/The_Singularity_Is_Near last night @charmsec re: future of mobile OS. Tough to distill.

    Rainbow's End - Wikipediaen.wikipedia.org (opens in a new tab)
  727. WikipediA on the front page is now WIKIPEDIA. Why? BookendS > SOLID imo.

  728. Rage, then The Running Man, and now The Stand? Someone has to stop Stephen King. (@nprnews’s WHO Phase 5 declaration is freaking me out)

  729. Rocking @will_torres’s face off with The Oxes in preparation for @charmsec to combat his new Lionell Ritchie “Hello” replacement ‘ygm’ sound

  730. Also: If you don’t hate e-mail like we do, sign up for the CharmSec list so’s we can sell your info for beer money: http://is.gd/vqG9

  731. @oneeyedcarmen yes sir! 7PM @ Slainte. I’ll go ahead and RT it from @charmsec

  732. WikipediA on the front page is now WIKIPEDIA. Why? BookendS > SOLID imo.

  733. @satie45 & @electricfork captured some pics of why your Baltimore commute sucked today: http://twitpic.com/45lb6 http://twitpic.com/45k73

  734. @s_crawford, @chriseng, @dionthegod, @IBMFedCyber, @Fred0828, @ryanaraine, & @geekgrrl thanks for the ★! Aw, shucks, etc. =)

  735. How I Decoded the Verizon 2009 DBIR Cover

    I was the first to solve the Verizon 2009 Data Breach Investigations Report cover. Chris Eng’s similar write-up is excellent and perhaps more in the spirit of defeating a challenge of the sort.

    That wasn’t how I solved it though.

    2009 Verizon DBIR cover
    Figure 1. 2009 Verizon DBIR cover.

    Below lie spoilers. You’ve been warned.

    I have no idea what I’m doing when approaching a cryptographic challenge. My
    background is in art.

    I approached the challenge naively unaware it even was a challenge. A
    designer had been asked to put 1s and 0s on the cover of the report
    because hey, it’s about computer stuff right? That’s what I thought at least.
    I’ve been asked to do that sort of thing, and copy and pasting finger-mashed
    1s and 0s is boring. I always made an effort to make my gibberish mean
    something
    . At the least, I’d find Cicero’s lorem ipsum dolor sit amet et cetera ad nauseum.

    I assumed something amusing would be there but didn’t bother much with it. It
    was 5:30AM and the report made better coffee reading than the cover. When I
    reached the end though, I found the major clue.

    So I tweeted about it.

    Verizon Breach Report, page 48: Notice it? It’s 2 searches away from
    WikipediA. Common cipher lore? Neat regardless! https://www.verizon.com/business/products/security/

    Cybersecurity Solutions: Network Security & Data ProtectionProtect your data with Verizon's advanced cybersecurity solutions. Explore managed security services, SASE, DDoS protection, and mobile device management to secure your network and endpoints.Verizon Business (opens in a new tab)

    By two searches away from WikipediA, I meant, as others have noted that it was a one-hit google search at the time, for a geocaching clue.

    Handy. Even handier is the ‘decrypt’ link on the geocaching site, yielding the
    original text, le chiffre indéchiffrable. Seems like an obvious clue! As I
    related in my tweet, that led me straight to the WikipediA article on the
    Vigenère cipher.

    So then I read up on Vigenère. I’m kind of into just hopping through WikipediA. I read up on Caesar ciphers, of which rot-13 is one. I joked about it on twitter and went back to syndicated feeds and twitter, then drove to work.

    What is The Verizon Breach Report cover binary text? http://is.gd/hafb please be Clutch lyrics, please be Clutch lyrics, please be Clutch l-

    At the office, I asked a few co-workers if they had noticed the clue on page
    48, and showed them that the cover text was probably something. I had no
    idea what, but hey presto, let’s give it a spin.

    I threw the source 1s and 0s into Vim and got rid of all the newlines.
    Nothing useful. Then I tossed the single long line into TextMate to play with
    wrap points.

    While shifting it around in Textmate I noticed a pattern.

    A pattern emerges… http://is.gd/sz5k #vzbdir

    screen shot
    Figure 2. screen shot.

    Neat columns, but what does it mean? I didn’t know. I was getting tired of
    moving the source text around though, and knew it was copy and pasted a few
    times, because I was still going on the naive ‘it is nothing or it is funny’
    approach. I selected the first line and searched-all in TextMate. Four hits on
    lines 101, 201, etc… I did the same for the second and third lines. Sure
    enough, only the first 100 lines were unique. Oh well that proves nothing,
    back to work.

    Only the first 100 lines matter. Off to blue team, will have to resume
    after lunch. Argh, obviously a Vigenère. http://is.gd/sz5k #vzbdir

    After my morning meetings, I decided to keep at it through lunch. After
    talking to my friend Ben, we agreed I should just
    script out ascii one letter at a time whether that was what I was looking at
    or not. All the easy to find online ascii-binary converters wouldn’t accept
    it. I read up on perl’s pack() and threw this together.

    #!/usr/bin/perl -w
    # bin-to-ascii
    my $binary_text = shift;
    open (BINARY, $binary_text) or
        die "Can't open input file: $!";
    foreach my $line () {
        my $length = length($line);
        my $hex = pack("B$length", $line);
        print "$hex ";
    }

    Simple enough, what does that yield?

    evntxigyimwsneheiefotxbscwyhrqmwguzabvycbbfreyfbvedkevmfri
    fngfnrbfgvksfpnbufzjgceeewakhpxebtzjczowgtbsqgtmiaydpydriryetkcjrpyhepwkuoa
    eknvtvzhsmznttivikmmrysnuiakbrkqmstycgccrlrriirefgytjubuxheysgleyrvhiyxdeyzcj
    kvtosoixjehoxevmwjbnzmtkwzefofcnbwncuwmyfiuvbkwnpwtyoeyqtirryrcmnvfvlrsbn
    tpwpaoczpekhlfceerrvwvuybvjpuvpoaymikqqnswzghzkdgylaegwpkesgcyzfvjdmepq
    ksslnvsvpuvvrvyerhdtutyymqgevwrmqszfnpnrjiggwajnnjlkoeqhnetrpuqydfzwczkvje xlm
    ckcsiftctsutldrrmikqtninpgrpqqxptzdpaiotceuazfewdqllpzrhxlxqgslrjtblzrirvisnzi
    wl mvyadvohfevnakkgorrxsygxpumvgbomrjlcrefcmrqvxtmiymjjvhxnbtszmtjefkfgkurfl
    nhxpkcwlexmiylgynnrwaksewthpkgzkkxgazellutayciekwishundkekwargbyzfgkepkqg
    zzsrimflgkarturainsngeeumexrveelzxtisuwvzkoyltpbhzweoqwnxnpxpkssxjhpancvfpr
    yadrlroewebqewhzrgatzdguceklfyhzjnnzijrgnzrvbocauyezgkpsjxjiasmvftdwfxbidhqz
    eykdrtdrioppkjrpisskmczjfztbvbjugeyanjigjtdcptzdeogutlzpekhtnihtggumvgbomrjlcr
    efswfzocroheau
    

    Whoa! Letters! Chris Eng got this far immediately with a shell one-liner: sick fu!.

    I had no idea how to attack the Vigenère but given the clue on page 48, that’s
    where I had to start. I read up on brute forcing Vigenère. Yikes. If it’s possible, I can probably find a tool to do it. I found lots, but the first hit was enough.

    I asked Munsee and Leech’s java applet to find 5 keys. The first one
    looked like a winner.

    crangingdefaultcrrdsntialschangingdlfeultfredentials

    A few typo’s but that’s obviously English. I fixed the typos and used the key
    and Munsee and Leech’s java applet again to decrypt the text.

    changingdefaultcredentialschangingdefaultcredentials

    By the time lunch was over, I’d discovered the source text, found out it was actually a contest, and submitted my answer.

    @alexhutton I just submitted my cipher
    text solution. Never done any code breaking before, was a lot of fun!
    #vzdbir (now back to work!)

    I got a call an hour later.

    I was the first to submit! I’d won!

    Congratulate me at CharmSec this Wednesday, and I’ll
    buy you a beer.

    Update

    I just used this old ascii <-> hex <->binary converter
    I keep handy and noticed it would have converted the binary for me. I use it
    for hex so much I forgot it handled binary. I didn’t need that perl script
    after all. Doh.

  736. Why does my macbook pro feel like a candidate for an anarchist’s cookbook recipe? Oh, just some crashed shells. http://is.gd/uX6X

  737. @alexhutton awesome, @charmsec is a fun group of talent with an infosec problem.

  738. How I decoded the 2009 Verizon DBIR cover and won the challenge: http://is.gd/uWLU #vzdbir #databreach #security #crypto #infosec

  739. @electricfork could be. I think @McNasty99’s 90’s cover band White Ford Bronco has the power to actually warp time. But only to the 90s.

  740. With my new cornelius keg homebrew rig, I have the power to force-carbonate five gallons of any liquid. World: you are on notice.

  741. Http://twitpic.com/4222i - Hop schedule: 60 min. magnum, 30 min. perle, 10 min. cascades & moss, cascades at flame-out. Mmmmhm.

  742. Bottling or kegging my Batch! Pale today, then brewing another pale ale and a dunkleweizen with @electricfork

  743. Spring: GFY, bring summer. Instead: I got a https://www.imdb.com/title/tt0480669/ recursive time travel movie so I could travel in time while I travel in time.

  744. Spring: GFY, bring summer. Instead: I got a https://www.imdb.com/title/tt0480669/ recursive time travel movie so I could travel in time while I travel in time.

  745. Hopefully grilling and relaxing w/ @vurtyou on our roof deck this evening w/ torches + tunes, practicing for tomorrow’s beer festival

  746. Watching @philip_daigle try to ctrl-c to the end of an infinite bash for loop I wrote for him is making Friday afternoon sail.

  747. @satie45 Make him say “Hello,” on mouse over. shiver “is it me you’re looking for?” http://is.gd/uiVR double-shiver

  748. Anyone have contacts at Yahoo to restore sites from say, 1996? https://www.yahoo.com/ (I’m normally very good about archiving http://is.gd/uhOg)

  749. @censey that’s sad. My first website was in a GeoCities neighborhood.

  750. Bounced between dd and xxd, identified the HFS volume I’m trying to recover, kicked off full dd, realized the drive is click o’deathed. Ugh.

  751. Celebrating a night of no insanity with dinner at Peter’s Inn w/ @vurtyou

  752. Celebrating a night of no insanity with dinner at Peter’s Inn w/ @vurtyou

  753. @oneeyedcarmen I’ll be at @city_paper’s Brew Fest with @vurtyou and a few others. Hey @satie45 - get tickets!

  754. Really Twanalyst? Coherent? More dentist’s agree: I am not coherent. Mphmmmgaaaa Nnnmmhhhhh phrkghx!

  755. My Twitter personality: likeable inquisitive cautious My style: chatty coherent WRITER http://twanalyst.com/grantstavely

  756. @bkdelong nice, I really dig the badware project and nomenclature and I didn’t even know I was benefiting from it!

  757. To save you all the trouble, I put in a ticket to get Yahoo.com reimaged. You’re welcome.

  758. Does the amount of malware people find through Yahoo search say something about Yahoo or about people that use Yahoo search? I say former.

  759. Outlook Zen Behavior: The message notification growl alters any multi-selection group in the message list to the most recent one only.

  760. I’m sorry you’ll need to resubmit all of these GMT, AD time values to UTC, CE values. Sobchak, Preferred nomenclature, etc.

  761. Dear three color, 9 bullet point, executive e-mail signature: You are the lambo-doored, buick-ported 1994 Type-R Celica of e-mail.

  762. The existence of yellow whiteboard markers are proof that there is no God and that reality is a strange, strange place to be.

  763. 14 hours, 4 ZUPDOG, 12 hours, 6 ZUPDOG, staring over now. Even I’m not sure what that means but four people will probably chuckle.

  764. Tired infosec engineers WILL disco dance if the music is loud enough. Anyone else consider soundboards invaluable for SIRT sanity?

  765. Learned from following @BaltimorePolice: Baltimore: The city that walks into area hospitals with gunshot wounds.

  766. Tired infosec engineers WILL disco dance if the music is loud enough. Anyone else consider soundboards invaluable for SIRT sanity?

  767. Learned from following @BaltimorePolice: Baltimore: The city that walks into area hospitals with gunshot wounds.

  768. @SteveS86 fucntion? At hour 26 I grabbed a 4 hour nap, I feel like a million bucks! Where am I? What’s going on?

  769. I’d forgotten all about that fourth wind that comes with 24 hours personal uptime. Suddenly I’m awake again.

  770. Cell phone radio chatter on conference calls is-OMG SPEAKERPHONE FEEDBACKZKWEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

  771. @will_torres yeah, but they left already. About to get out of PA myself and head back to Baltimore.

  772. Having great vocabulary didn’t save the THESAURUS from extinction / eradication / extirpation http://is.gd/tinC

  773. @wadebaker I skated a park for the first time last night and didn’t break anything. You’ll live!

  774. @ddeighton I prefer denyhosts for simple ssh Rumpelstiltskin defense http://is.gd/3Ijv, as it’s KISS enough for me.

  775. @marcusjcarey No match for “EVERYTHINGELSEIDO.COM”.>>> Last update of whois database: Sat, 18 Apr 2009 09:48:45 EDT <<< Do it!

  776. Only annoyance of migration to the new MacBook Pro - my keychain, which I’ve moved from mac to mac for six years, seems to be busted?

  777. @jennrenwick nice to see you tweeting more - gotta do something about that default o_O picture next!

  778. @censey saving that story for the next @charmsec at the request of the Verizon folks. Short version: perl and google: took 30 minutes

  779. @Fred0828 Nice! We should hit a park old-school: you on a plastic Hobie and me on a Chris Miller mini.

  780. Http://twitpic.com/3hult - @electricfork & Max: so, the sofa is just in the background on this one, but it still counts!

  781. Kicking unattended 13 year olds out of a skate park looks like a thankless job!

  782. Wikipedia

    Simplepedia is a
    greasemonkey userscript that
    gives mediawiki sites a modern and clean design.

    Wikipedia’s design and style is tiring and cluttered. There’s just too much
    going on!

    Wikipedia front page
    Figure 1. Wikipedia front page.
    Wikipedia main page
    Figure 2. Wikipedia main page.

    Without the entire left bar, banner ads, footers, and tiny sans serif type,
    wikipedia is much more inviting.

    Wikipedia front page
    Figure 3. Wikipedia front page.
    Wikipedia main page
    Figure 4. Wikipedia main page.

    Visit your about:config to chose the heading and body fonts
    you’d like Simplepedia to use. You can change the link colors too.

    Wikipedia as an editor
    Figure 5. Wikipedia as an editor.

    Try it in Helvetica. Wikipedia in Helvetica

    Or Wikipedia’s logotype, Hoefler Text. Wikipedia in Hoefler Text

    And you can optionally display a drop down selection box to jump to the same
    article in other languages, hide edit and logon text, and more.

    The script generically applies to any site built with the standard MediaWiki
    engine using the default theme, but works best on WikipediA.

    This was inspired by Jon Hick’s excellent
    Helvetireader user script for Google Reader.

    Change Log

    • Version .991 July 17, 2009
      • Added a W favicon for wikipedia only
      • Cleaned preference handling a bit, please reset and reload to use
      • Fixed display of international language selection to use a localized title
      • Darkened the darks a bit
      • Misc. css tweaking
      • Updated wikipedia discovery to regex better
    • Version .99 July 15, 2009
      • Fixed the alternate language select drop-down and made it an option
    • Version .983 July 10, 2009
      • Miscelaneous small css fixes adapting to changes made at Wikipedia
      • Simplified front page further
      • Made en.wikipedia closer resemble artile pages
      • Embracing helvetica, possibly renaming to helvetipedia soon
    • Version .982 June 22, 2009
      • Tweaked thumbnail picture padding to correct a hover issue (thanks sdfghrr)
      • Tweaked Encyclopedia Dramatica again
    • Version .98 June 2, 2009
      • Added a new about:config / cookie option to make customizing link colors more discoverable
    • Version .97 June 2, 2009
      • Resolved issues with preference handling in webkit
      • Added disabled preference to dynamically create jump-list of all alternate language versions of a given document on wikipedia (still under construction)
    • Version .96 May 21, 2009
      • Improved generic wiki support (including wikia.com wikis)
    • Version .95 May 18, 2009
      • Improved font selection changes and examples
      • Updated namespace
      • Fixed Auto-updating menu selection controls
    • Version .94 May 16, 2009
      • Reset font selection to allow greater user control
      • Tweaked javascript style, thanks iandalton
      • Updated css for multiple fixes
    • Version .93 May 14, 2009
      • Added checks to leave user configured items alone, thanks iandalton
      • Updated css for multiple fixes
    • Version .92 May 10, 2009 (Complete rewrite)
    • Version .9.1 April 30, 2009
      • Fixed front page WikipediA logo (wikipedia moved it)
      • Dumped firefox specific auto-updater in favor of pure js version by Jarett (http://userscripts.org/scripts/show/20145)
      • Fixed http/https mixup when browsing secure sites, simplepedia will now also use https to grab external css
      • Updated front page bookshelves to link to random pages because it makes more sense to me
    • Version .9 April 29, 2009
    • Version .8.1.51 April 13, 2009
      • Added support for http://.intelink.gov/wiki/, just in case
    • Version .8.2 April 11, 2009
      • Added a simple wikipedia graphic anchor for the main page next to the search bar
      • Swapped the same out on wikipedia.org/
      • Added support for http://wiki.greasespot.net/*
      • Improved user/editor display option
    • Version .8 April 5, 2009
    • Version .7.5 March 30, 2009
      • Reintroduced edit links, page and user login tabs, ++
    • Version .7.2.1 March 25, 2009
      • Added helper functions, basic error checking
    • Version .7.2 March 18, 2009
      • Added basic support for wikileaks.org
      • Added support for secure wikimedia sites
    • Version .7.1 March 17, 2009
      • Fixed front page form elements in Firefox
      • Added default language links to the front page
    • Version .7 March 17, 2009
      • Added ‘I’m feeling lucky’ and ‘Search’ buttons to the front portal
      • Reintroduced .noprint content for the main pages
      • Fixed center td border display
  783. Http://twitpic.com/3hult - @electricfork & Max: so, the sofa is just in the background on this one, but it still counts!

  784. Kicking unattended 13 year olds out of a skate park looks like a thankless job!

  785. Holy crap, Alvin and the Chipmunks have parts in Michael Jackson’s P.Y.T - jump to the 3:30 mark.

  786. Blasting Michael Jackson’s PYT hoping to drive two geeks jabbering about hardware away. I hate hardware. They hate PYT: took 25 seconds.

  787. Amazing lo-fi sci-fi book covers. Is my Ringworld memory fuzzy? I would have gone a much more literal direction with it https://www.creativereview.co.uk/low-fi-sci-fi/

  788. Hitting CharmCitySkatePark tonight to see @LazerFlip and @aaronbarnett out-skate me. Never skated a park, injury likely. http://is.gd/sYM1

  789. Was about to whine that it’s so cute when domains don’t point their A record at their www but check out spamhaus’s SOA: need.to.know.only.

  790. @oneeyedcarmen I already got a warning ticket for speeding in the new Ft. McHenry Tunnel lane - too spoiled by the Dulles Toll Road.

  791. Looking for a urlsnarf style dnssnarf I can daemonize. Should I give up and throw pcaps at tshark? I want to keep months of data for NSM.

  792. @sdwilkerson a https://en.wikipedia.org/wiki/Corna - thanks for the @charmsec support, I’m looking forward to it too

  793. Jib, cut, like > @mubix: Penetration Testing isn’t dead, it’s the 2009 version of the CISSP.

  794. Jib, cut, like > @mubix: Penetration Testing isn’t dead, it’s the 2009 version of the CISSP.

  795. Slainte wins for the next @charmsec, will update the site soon

  796. Slainte wins for the next @charmsec, will update the site soon

  797. The Mad Tea Party

    There was a table set out under a tree in front of the house, and a Democrat
    and a Republican were having tea at it: the Economy was sitting between them,
    fast asleep, and the other two were using it as a cushion, resting their
    elbows on it, and talking over its head. ‘Very uncomfortable for the Economy,’
    thought Alice; ‘only, as it’s asleep, I suppose it doesn’t mind.’

    The table was a large one, but the three were all crowded together at one
    corner of it: ‘No room! No room!’ they cried out when they saw Alice coming.
    ‘There’s PLENTY of room!’ said Alice indignantly, and she sat down in a
    large arm-chair at one end of the table.

    ‘Have some wine,’ the Democrat said in an encouraging tone.

    Alice looked all round the table, but there was nothing on it but tea. ‘I
    don’t see any wine,’ she remarked.

    ‘There isn’t any,’ said the Democrat.

    ‘Then it wasn’t very civil of you to offer it,’ said Alice angrily.

    ‘It wasn’t very civil of you to sit down without being invited,’ said the
    Democrat.

    ‘I didn’t know it was YOUR table,’ said Alice; ‘it’s laid for a great many
    more than three.’

    ‘Your hair wants cutting,’ said the Republican. He had been looking at Alice
    for some time with great curiosity, and this was his first speech.

    ‘You should learn not to make personal remarks,’ Alice said with some
    severity; ‘it’s very rude.’

    The Republican opened his eyes very wide on hearing this; but all he SAID
    was, ‘Why is a raven like a writing-desk?’

    ‘Come, we shall have some fun now!’ thought Alice. ‘I’m glad they’ve begun
    asking riddles.–I believe I can guess that,’ she added aloud.

    ‘Do you mean that you think you can find out the answer to it?’ said the
    Democrat.

    ‘Exactly so,’ said Alice.

    ‘Then you should say what you mean,’ the Democrat went on.

    ‘I do,’ Alice hastily replied; ‘at least–at least I mean what I say–that’s
    the same thing, you know.’

    ‘Not the same thing a bit!’ said the Republican. ‘You might just as well say
    that “I see what I eat” is the same thing as “I eat what I see”!’

    ‘You might just as well say,’ added the Democrat, ‘that “I like what I get” is
    the same thing as “I get what I like”!’

    ‘You might just as well say,’ added the Economy, who seemed to be talking in
    its sleep, ‘that “I breathe when I sleep” is the same thing as “I sleep when I
    breathe”!’

    ‘It IS the same thing with you,’ said the Republican, and here the
    conversation dropped, and the party sat silent for a minute, while Alice
    thought over all she could remember about ravens and writing-desks, which
    wasn’t much.

    The Republican was the first to break the silence. ‘What day of the month is
    it?’ he said, turning to Alice: he had taken his watch out of his pocket, and
    was looking at it uneasily, shaking it every now and then, and holding it to
    his ear.

    Alice considered a little, and then said ‘The fourth.’

    ‘Two days wrong!’ sighed the Republican. ‘I told you butter wouldn’t suit the
    works!’ he added looking angrily at the Democrat.

    ‘It was the BEST butter,’ the Democrat meekly replied.

    ‘Yes, but some crumbs must have got in as well,’ the Republican grumbled: ‘you
    shouldn’t have put it in with the bread-knife.’

    The Democrat took the watch and looked at it gloomily: then he dipped it into
    his cup of tea, and looked at it again: but he could think of nothing better
    to say than his first remark, ‘It was the BEST butter, you know.’

    Alice had been looking over his shoulder with some curiosity. ‘What a funny
    watch!’ she remarked. ‘It tells the day of the month, and doesn’t tell what
    o’clock it is!’

    ‘Why should it?’ muttered the Republican. ‘Does YOUR watch tell you what
    year it is?’

    ‘Of course not,’ Alice replied very readily: ‘but that’s because it stays the
    same year for such a long time together.’

    ‘Which is just the case with MINE,’ said the Republican.

    Alice felt dreadfully puzzled. The Republican’s remark seemed to have no sort
    of meaning in it, and yet it was certainly English. ‘I don’t quite understand
    you,’ she said, as politely as she could.

    ‘The Economy is asleep again,’ said the Republican, and he poured a little hot
    tea upon its nose.

    The Economy shook its head impatiently, and said, without opening its eyes,
    ‘Of course, of course; just what I was going to remark myself.’

    ‘Have you guessed the riddle yet?’ the Republican said, turning to Alice
    again.

    ‘No, I give it up,’ Alice replied: ‘what’s the answer?’

    ‘I haven’t the slightest idea,’ said the Republican.

    ‘Nor I,’ said the Democrat.

    Alice sighed wearily. ‘I think you might do something better with the time,’
    she said, ‘than waste it in asking riddles that have no answers.’

    ‘If you knew Time as well as I do,’ said the Republican, ‘you wouldn’t talk
    about wasting IT. It’s HIM.’

    ‘I don’t know what you mean,’ said Alice.

    ‘Of course you don’t!’ the Republican said, tossing his head contemptuously.
    ‘I dare say you never even spoke to Time!’

    ‘Perhaps not,’ Alice cautiously replied: ‘but I know I have to beat time when
    I learn music.’

    ‘Ah! that accounts for it,’ said the Republican. ‘He won’t stand beating. Now,
    if you only kept on good terms with him, he’d do almost anything you liked
    with the clock. For instance, suppose it were nine o’clock in the morning,
    just time to begin lessons: you’d only have to whisper a hint to Time, and
    round goes the clock in a twinkling! Half-past one, time for dinner!’

    (‘I only wish it was,’ the Democrat said to itself in a whisper.)

    ‘That would be grand, certainly,’ said Alice thoughtfully: ‘but then–I
    shouldn’t be hungry for it, you know.’

    ‘Not at first, perhaps,’ said the Republican: ‘but you could keep it to half-
    past one as long as you liked.’

    ‘Is that the way YOU manage?’ Alice asked.

    The Republican shook his head mournfully. ‘Not I!’ he replied. ‘We quarrelled
    last November–just before HE went mad, you know–’ (pointing with his tea
    spoon at the Democrat,) '–it was at the great concert given by the Queen of
    Hearts, and I had to sing

    “Twinkle, twinkle, little bat!
    How I wonder what you’re at!”

    You know the song, perhaps?’

    ‘I’ve heard something like it,’ said Alice.

    ‘It goes on, you know,’ the Republican continued, 'in this way:–

    “Up above the world you fly,
    Like a tea-tray in the sky.
    Twinkle, twinkle–”’

    Here the Economy shook itself, and began singing in its sleep ‘Twinkle,
    twinkle, twinkle, twinkle–’ and went on so long that they had to pinch it to
    make it stop.

    ‘Well, I’d hardly finished the first verse,’ said the Republican, ‘when the
    Queen jumped up and bawled out, “He’s murdering the time! Off with his head!”’

    ‘How dreadfully savage!’ exclaimed Alice.

    ‘And ever since that,’ the Republican went on in a mournful tone, ‘he won’t do
    a thing I ask! It’s always six o’clock now.’

    A bright idea came into Alice’s head. ‘Is that the reason so many tea-things
    are put out here?’ she asked.

    ‘Yes, that’s it,’ said the Republican with a sigh: ‘it’s always tea-time, and
    we’ve no time to wash the things between whiles.’

    ‘Then you keep moving round, I suppose?’ said Alice.

    ‘Exactly so,’ said the Republican: ‘as the things get used up.’

    ‘But what happens when you come to the beginning again?’ Alice ventured to
    ask.

    ‘Suppose we change the subject,’ the Democrat interrupted, yawning. ‘I’m
    getting tired of this. I vote the young lady tells us a story.’

    ‘I’m afraid I don’t know one,’ said Alice, rather alarmed at the proposal.

    ‘Then the Economy shall!’ they both cried. ‘Wake up, Economy!’ And they
    pinched it on both sides at once.

    The Economy slowly opened his eyes. ‘I wasn’t asleep,’ he said in a hoarse,
    feeble voice: ‘I heard every word you fellows were saying.’

    ‘Tell us a story!’ said the Democrat.

    ‘Yes, please do!’ pleaded Alice.

    ‘And be quick about it,’ added the Republican, ‘or you’ll be asleep again
    before it’s done.’

    ‘Once upon a time there were three little sisters,’ the Economy began in a
    great hurry; ‘and their names were Elsie, Lacie, and Tillie; and they lived at
    the bottom of a well–’

    ‘What did they live on?’ said Alice, who always took a great interest in
    questions of eating and drinking.

    ‘They lived on treacle,’ said the Economy, after thinking a minute or two.

    ‘They couldn’t have done that, you know,’ Alice gently remarked; ‘they’d have
    been ill.’

    ‘So they were,’ said the Economy; ‘VERY ill.’

    Alice tried to fancy to herself what such an extraordinary ways of living
    would be like, but it puzzled her too much, so she went on: ‘But why did they
    live at the bottom of a well?’

    ‘Take some more tea,’ the Democrat said to Alice, very earnestly.

    ‘I’ve had nothing yet,’ Alice replied in an offended tone, ‘so I can’t take
    more.’

    ‘You mean you can’t take LESS,’ said the Republican: ‘it’s very easy to take
    MORE than nothing.’

    ‘Nobody asked YOUR opinion,’ said Alice.

    ‘Who’s making personal remarks now?’ the Republican asked triumphantly.

    Alice did not quite know what to say to this: so she helped herself to some
    tea and bread-and-butter, and then turned to the Economy, and repeated her
    question. ‘Why did they live at the bottom of a well?’

    The Economy again took a minute or two to think about it, and then said, ‘It
    was a treacle-well.’

    ‘There’s no such thing!’ Alice was beginning very angrily, but the Republican
    and the Democrat went ‘Sh! sh!’ and the Economy sulkily remarked, ‘If you
    can’t be civil, you’d better finish the story for yourself.’

    ‘No, please go on!’ Alice said very humbly; ‘I won’t interrupt again. I dare
    say there may be ONE.’

    ‘One, indeed!’ said the Economy indignantly. However, he consented to go on.
    ‘And so these three little sisters–they were learning to draw, you know–’

    ‘What did they draw?’ said Alice, quite forgetting her promise.

    ‘Treacle,’ said the Economy, without considering at all this time.

    ‘I want a clean cup,’ interrupted the Republican: ‘let’s all move one place
    on.’

    He moved on as he spoke, and the Economy followed him: the Democrat moved into
    the Economy’s place, and Alice rather unwillingly took the place of the
    Democrat. The Republican was the only one who got any advantage from the
    change: and Alice was a good deal worse off than before, as the Democrat had
    just upset the milk-jug into his plate.

    Alice did not wish to offend the Economy again, so she began very cautiously:
    ‘But I don’t understand. Where did they draw the treacle from?’

    ‘You can draw water out of a water-well,’ said the Republican; ‘so I should
    think you could draw treacle out of a treacle-well–eh, stupid?’

    ‘But they were IN the well,’ Alice said to the Economy, not choosing to notice
    this last remark.

    ‘Of course they were’, said the Economy; ‘–well in.’

    This answer so confused poor Alice, that she let the Economy go on for some
    time without interrupting it.

    ‘They were learning to draw,’ the Economy went on, yawning and rubbing its
    eyes, for it was getting very sleepy; ‘and they drew all manner of things–
    everything that begins with an W–’

    ‘Why with an W?’ said Alice.

    ‘Why not?’ said the Democrat.

    Alice was silent.

    The Economy had closed its eyes by this time, and was going off into a doze;
    but, on being pinched by the Republican, it woke up again with a little
    shriek, and went on: ‘–that begins with an W, such as war, and wealth, and
    weasle, and whiners-- you know you say things are “war of wealth”–did you
    ever see such a thing as a drawing of a wealth?’

    ‘Really, now you ask me,’ said Alice, very much confused, ‘I don’t think–’

    ‘Then you shouldn’t talk,’ said the Republican.

    This piece of rudeness was more than Alice could bear: she got up in great
    disgust, and walked off; the Economy fell asleep instantly, and neither of the
    others took the least notice of her going, though she looked back once or
    twice, half hoping that they would call after her: the last time she saw them,
    they were trying to put the Economy into the teapot.

    ‘At any rate I’ll never go THERE again!’ said Alice as she picked her way
    through the wood. ‘It’s the stupidest tea-party I ever was at in all my life!’

    Just as she said this, she noticed that one of the trees had a door leading
    right into it. ‘That’s very curious!’ she thought. ‘But everything’s curious
    today. I think I may as well go in at once.’ And in she went.

    Once more she found herself in the long hall, and close to the little glass
    table. ‘Now, I’ll manage better this time,’ she said to herself, and began by
    taking the little golden key, and unlocking the door that led into the garden.
    Then she went to work nibbling at the mushroom (she had kept a piece of it in
    her pocket) till she was about a foot high: then she walked down the little
    passage: and THEN–she found herself at last in the beautiful garden, among
    the bright flower-beds and the cool fountains.

  798. Heading to meet @highburygoon at Slainte, then maybe Max’s, then somewhere in Fells for cheap good eats w/ @vurtyou & @satie45

  799. @macsec indeed! #security #vzdbir #databreach

  800. @alexhutton I just submitted my cipher text solution. Never done any code breaking before, was a lot of fun! #vzdbir (now back to work!)

  801. Only the first 100 lines matter. Off to blue team, will have to resume after lunch. Argh, obviously a Vigenère. http://is.gd/sz5k #vzbdir

  802. A pattern emerges… http://is.gd/sz5k #vzbdir

  803. ∴ Θ - τ + δ = something that makes sense.

  804. Given A tweet, Θ, at least one out of place word from a previous revision τ will be present, and/or a word that should be there, δ, won’t be

  805. @electricfork (← thar be spoilers) I know, I googled it, I trying to not give it away though.

  806. What is The Verizon Breach Report cover binary text? http://is.gd/hafb please be Clutch lyrics, please be Clutch lyrics, please be Clutch l-

  807. @sans_isc 1500+ g-reader full-text subscribers, and you $html =~ s/<.+>/<br>/i;? Why? http://is.gd/stWw I want to help! Experience matters!

  808. @mubix @Jeffers0n classic consulting ship of theseus: Great last year becomes “their new guys” next year. Process > Talent

  809. I like beer. I like bacon. I can walk to @bad_decisions. I have an exam tonight. One of these things sucks.

  810. Banning hugely popular websites because ‘they might be attack vectors!’ fear creates a black market. See: drug war

  811. Noticed an uptick in yahoo.com GET malware vectors? Were one of their advertisers compromised? Vetting prob? goforuniq.evil + adtrgt.evil

  812. @sansforensics RegRipper rocks! Registry analysis tools are critical for incident responders and forensics analysts. http://is.gd/shqp

  813. Simplepedia “Jackass Flats” v.8.1.51: first version to support www.intelink.gov/wiki/, http://is.gd/jiaW, in honor of https://www.latimes.com/entertainment/la-mag-april052009-backstory-sl-storylink.html

    Dance Partyis.gd (opens in a new tab)
  814. @grecs plug for NSM practitioners using ringbuffer captures that are dealing with data overload: https://code.google.com/archive/p/nsm-capture (comments appreciated)

    Google Code Archive - Long-term storage for Google Code Project Hosting.code.google.com (opens in a new tab)
  815. Simplepedia “Jackass Flats” v.8.1.51: first version to support www.intelink.gov/wiki/, http://is.gd/jiaW, in honor of https://www.latimes.com/entertainment/la-mag-april052009-backstory-sl-storylink.html

    Dance Partyis.gd (opens in a new tab)
  816. Innaction in the face of expected interruption because of a fear of task-switching is a terrible design pattern. Stop procrastinating.

  817. Pirate walks into a bar, bartender notices he has a ship’s wheel attached to his belt buckle.

    Bartender says “What’s that for?”

    “Vundo!”

  818. Batch! Pale Ale FG: a cloudy 1.010, OG was 1.078 pre-pitch. That’s a 9% ABV! I question my OG reading – tastes great, but tastes 5%ish

  819. Pharoah’s charrioteers are to Moses as contractors on the Death Star are to Lando.

  820. Pharoah’s charrioteers are to Moses as contractors on the Death Star are to Lando.

  821. At a baptism tonight, didn’t realize it’s done at a full Easter vigil mass. Will be in the front row atheisting, whatever that is, for 2.5h

  822. @oneeyedcarmen good eye, you probably know all the local coolers. I haven’t found anywhere besides Racers that is closer to home.

  823. Http://twitpic.com/35rx8 - I found all the best easter eggs, now to decide if I want a green one or a purple one.

  824. Simplepedia updates: a bunch of other wikis supported, user/editor toggle, Helvetica/Serif toggle, and a graphic http://is.gd/jiaW

    Dance Partyis.gd (opens in a new tab)
  825. OSX needs /dev/loop virtual block devices, wouldn’t have needed the VMware Fusion install that just crashed all over my system. Carving dd.

  826. OSX needs /dev/loop virtual block devices, wouldn’t have needed the VMware Fusion install that just crashed all over my system. Carving dd.

  827. City Paper Brew Fest: http://is.gd/rPtG

    Loved it last year, just got tickets for this year. $30.

  828. @electricfork anything we can do to help?

  829. Via @srfstn – Peter Funch shot the same location, then reassembled collections of people in a variety of themes http://is.gd/kmH0

  830. Would give my right arm if I knew I had a chance of eliminating that blue gradient, four type faces, & dozens of colors. PS get Nessus 4.

  831. I’m not one to rage on post-it passwords but @philip_daigle just picked one off a public area table with IP, username, and password.

  832. Http://twitpic.com/32df0 - How to tell if I was on conference calls today: books now color-sorted!

  833. Understanding through metaphors inevitably leads to misunderstanding through the inappropriate extension of said metaphors.

  834. Dear new hire that drinks even more coffee than I do and always has a fresh pot made: You complete me. I wish I knew how to quit you, etc.

  835. Interesting things only happen when @electricfork is on vacation. @electricfork must project an attacker distortion perimeter field.

  836. Making javascript gibberish to de-obsfucate itself. No skills required: http://is.gd/rqW3

    Found spreading pdf exploits.

  837. @will_torres is submitting some ugly we found to ISC. I’m not versed in de-obfuscating javascript: http://is.gd/rqhe #pdf #swf #iframe #cn

  838. @shmausen Yup. Wouldn’t SEOUL PLAZA be the perfect set for a Scooby Doo episode?

  839. I’m in the mood for Phơ Hương Mới for lunch http://is.gd/rpyo, say noonish.

  840. Plane text pdf/swf iframes are elite on some planet, but the weak link is: this is Earth Wimp Lo: Oh yeah? Try my nuts to your fist style!

  841. Plain text pdf/swf iframes are elite on some planet, but the weak link is: this is Earth
    Wimp Lo: Oh yeah? Try my nuts to your fist style!

  842. Courses this summer and fall: tech writing, finite math, hardware/software concepts, accounting. Can I handle a 9 credit-hour load + work?

  843. @aaronbarnett (re: http://bit.ly/pv9jH) they are all so stern. Came for the the NIN – the future as predicted by Vinge – stayed for Devo.

  844. @dionthegod details unless it’s mine. Wait I just script, can’t be mine. Details!

  845. @ssoper - reminds me of https://en.wikipedia.org/wiki/Why_We_Fight_(2005_film) Ratio of U.S. jet fighter programs to number of enemies with modern air forces? http://is.gd/r4s0

  846. @sckain hashtag collision w/ https://wiki.gnome.org/Empathy #empathy

  847. @sckain that bounced off my team one person at a time and we are still giving patient-zero crap for it. My sore throat lasted 2 days. gl.

  848. How do I submit this to virustotal? “Client states the his computer mouse is infected. When he touches the mouse, ants come crawling out!”

  849. @cyberhiker tyvm - I couldn’t agree w/ @robcorddry more re: ‘after the jump’ and unnecessary UX difficulty of basic tasks

  850. @dionthegod just an SNPA clone. Wort is chilled, will pitch after I clean my brew pot. First time using this thing: http://is.gd/qU0U

  851. .5oz Magnum into the boil, timer set for 60 minutes and hoping the gravity goes up a smidge. Started at 1.048 after steeping 1lb Crystal 60

  852. @sdwilkerson your advice at @charmsec to daemonize dsniff and urlsnarf has payed off already in reducing time to find root cause, tyvm!

  853. Simplepedia updates: user/editor toggle, many more mediawikis, refactored css, dom walking, error checking, still a hack, http://is.gd/jiaW

    Dance Partyis.gd (opens in a new tab)
  854. @dionthegod Pizza Port rules, only been there once & sampled what they had at the '08 GABF. Ayers Maharaja, and Erie Railbender Ale now mmmm

  855. @marcusjcarey vim rules. Have you built up a dotfile you like? I’ve been abusing q and :! lately (and own writequit.com)

  856. Enjoying a cask White Marsh Octopus Pajamas at Mahaffey’s with @vurtyou

  857. @slp22 & @jeson, we would love Paradiso but the 45 mile walk is a bit much tonight.

  858. Walking to get @vurtyou Italian Ice in Fells, then open schedule for the evening & no idea what to do.

  859. @bsdunlap extract or grain? I just picked up extract ingredients for an SNPA clone I’m brewing tomorrow. Boring, but easy.

  860. Enjoying a cask White Marsh Octopus Pajamas at Mahaffey’s with @vurtyou

  861. Walking to get @vurtyou Italian Ice in Fells, then open schedule for the evening & no idea what to do.

  862. San Francisco vacation photos: http://is.gd/qJil At the rate I silly flower photos I should break down and get a macro lens.

  863. MBP out of the box color temp seems a bit hot. Am I crazy?

  864. San Francisco vacation photos:
    http://is.gd/qJil

    At the rate I take silly flower photos I should break down and get a macro lens.

  865. The Migration Assistant transfer to the new mbp took 9 hours over gigabit. Now onto darwinports and app licensing cleanup.

  866. Amanda’s cat felt it crucial to let everyone know that it is raining outside and

  867. > @wrayjustin Great time @DojoSec. Thanks @marcusjcarey for a great lineup. #dojosec

  868. Joseph McCray is cracking me up re: pen testing, if you aren’t watching the stream, make time to watch later! #dojosec

  869. @wrayjustin Great time @DojoSec. Thanks @marcusjcarey for a great lineup. #dojosec

  870. Joseph McCray is cracking me up re: pen testing, if you aren’t watching the stream, make time to watch later! #dojosec

  871. Watching Tech Tips with Matt Rothman http://is.gd/qmIG

  872. @dionthegod seems like @dojosec will fill the auditorium, @philip_daigle and I will be there

  873. I would buy a loaf of all heels.

  874. You know the story… Same old, same old, it is what it is…

  875. TRULY GROUNDBREAKING
    MARKETING RESEARCH:
    UNDERSTANDING
    TWITTER

    http://is.gd/pV0n

  876. Jeeze, here it is, #conficker already and I’m still writing RBN on all my checks!

  877. My attention span is only up for some z-trip & Chiba Solid Steel #82 today http://is.gd/q6mL HELLO! Hello? (hello) HELL-O h-e-l-o etc.

  878. Hype like conficker is why I have this old d i g i t a l poster for y2k pro-services poster up in my cube. http://is.gd/q64H

  879. Anyone up for tossing me a Tcl primer? It’s for a friend.

  880. Outlook populates the “You replied on…” status line of a message before you send the reply.

  881. The names conficker and downadup both scream telephone game.

  882. Miller Lite adds hops three times during the brew process! Just like every other beer you’ve ever bought! Ever! All of them!

  883. @marcusjcarey I tried Toastmasters and didn’t care for the ritual stuff, + I’m hopelessly shy. Hope you like it!

  884. The names conficker and downadup both scream telephone game.

  885. Miller Lite adds hops three times during the brew process! Just like every other beer you’ve ever bought! Ever! All of them!

  886. This Thursday evening: @dojosec Talks: http://www.dojosec.com/?p=76 Directions to Capitol College: http://is.gd/pJV4 (where Infragard meets too)

  887. I wish scs.exe understood CIDR. Still very handy!

  888. Ordered: A 2.4Ghz unibody MacBook Pro refurb, should be here by the end of the week.

  889. Walking to Slainte with the in-laws to check it out as a prospective @charmsec spot (and to get lunch)

  890. XM Radio & their customers got screwed by whoever sold and implemented their CRM. The web-enabled side is dumb and predatory.

  891. @mcsweeneys THE RULES: TIME-TESTED SECRETS FOR GETTING AND KEEPING A JOB IN THIS ECONOMY: http://is.gd/pkS3

  892. @explodingdog …clean(ing) out my warehouse. So, for a limited time get a Signed Book for $10 http://bit.ly/xiluf

  893. Sharepoint urls are doing%20it%20wrong?Source=http%3A%2F%2Ftwitter%wEcom%2Fgrantstavely%2Fstatus%2F1345311260

  894. Reason #51231 that I’m a lucky guy: @vurtyou drove home, picked up the empty dfh60min keg and is meeting me at Beltway. Beer-less no more!

  895. Http://is.gd/p7hF working links help!

  896. Http://is.gd/p7fn + daemonlogger. It’s like having a time machine. In need of a code review. #lazy http://is.gd/jSIq

  897. Great comment last night @charmsec from Mike “Who pays for browsers!?” I did: Opera on Linux, Omniweb on the mac.

  898. I just printed the art for @philip_daigle’s insane @charmsec sign. It has das blinkenlightzen. That’s so Daigle!

  899. @city_paper A gem of a missed connection on Craigslist. This happened about 50 paces from our office… http://ow.ly/1puu

  900. How I know this cold is licked: The wood stove had the room up to 80F, I was still wearing a sweatshirt, and I noticed it was ‘a bit warm’

  901. A table for tomorrow’s @charmsec is reserved at Max’s http://is.gd/gRjs

  902. @SemanticV The website is live after six months in private beta http://semanticv.com/. Register to try Wikipedia Explorer.

  903. How are you feeling? Did you go to work today?

  904. @electricfork don’t forget to call Max’s to reserve the table for @charmsec Wednesday night - 7PM

  905. OSX mounting network shares in /Volumes with afp and/or smb, appending -1 to the end of mounts with the same name: stupid or stupidest?

  906. Yay - @vurtyou just picked up a Cherner style chair for $99 at Oakenshawe in Hampden – it needs some TLC, but I love it. http://is.gd/orWU

  907. Stuck in the house with a cold. What a waste of time.

  908. Troubleshooting an http redirect loop at the apple store when trying to access edu pricing pages. 301 -> 301 ouroboros. #lazy

  909. Sis & 'Laina are in town, pushing a stroller to misc. shops in Fells Point for an afternoon shopping.

  910. Weekend sysadmin: automagic GFFS rsnapshots from Amazon EC2 host

  911. DJ Yoda Goes To The Movies is simply incredible. http://is.gd/obMA ( youtube teaser: https://www.youtube.com/watch?v=c4FEG-EwMiI )

  912. Probably getting a 15" mbp tonight in Towson, but what to do in the area for dinner? Maybe Thai One On?

  913. Re: powerbook: http://is.gd/o4c0, new-ish battery too

  914. Buy my 17" Powerbook: 1.67 GHz G4, 2GB memory, 120GB drive, matte screen. $500?

  915. “So you watch all the websites I go to?” “Not specifically, but alarms go off every time you talk about your ex-boyfriend.” Ex-bf’s name?

  916. Doh. Keg kicked.

  917. Outlook Zen Koan: Extra line breaks in this message were removed.

  918. Oh clipboard, what can I do to win your heart back?

  919. Haven’t recovered from how relaxing my SF vacation was to attack the inbox, but 1000+ is ridiculous. Pressing Z or R twice rest of the day.

  920. Orange Crush smells funny.

  921. Watching the remake of The Day The Earth Stood Still: complete train wreck.

  922. RT @rockyd http://twitpic.com/252rd - From Tampa FL, (150 Miles away) during launch of STS-119 at time of Booster Seperation.

  923. Google Reader handles comments now: http://is.gd/ntuB (and why did I say ‘threaded’? I hate threaded. e.g. /. cesspool)

  924. Twitpic kicks ass but were I able, I would http://is.gd/5P1 and http://is.gd/nq7P

  925. Tufte’s Presenting Data and Information course is back in town April. GO if you haven’t already. He is an amazing lecturer. http://www.edwardtufte.com/online-course/

  926. The latest @omniweb sneakypeek has Safari 4’s webkit. It’s like Safari 4, only stable and with a better UI. https://www.omnigroup.com/download/

  927. Watching paint dry is like watching grass grow. Wait, I meant e-discovery.

  928. CapSec DC is 4/25 (the same night as CharmSec) @ Stetsons on U Street. http://is.gd/naWh

  929. Staged crucifixions are the only kind. (they are also the only time you’ll ever write a word ending in -xions)

  930. Stewart v Cramer seems awfully one sided for Stewart, but Cramer brought his sleeves-rolled-up-shit, so I guess it’s nine-tenth’s sided

  931. Drinks with @vurtyou in Blue Sea, dinner TBD

  932. If I had a Kindle, could I have it replace ‘leche’, ‘milk’, and ‘obsenity’ in For Whom The Bell Tolls with real obsenities? Que va Bendejo.

  933. SIG{INT} handling in perl is harder than it should be. My new favorite bash documentation re: ‘exit 2’: “Seldom seen”. Helpful!

  934. ⌘-C: sort of a mnemonic for ‘copy’. ⌘-V: sort of a mnemonic for ‘next to copy and not in the way of print’ ⌘-C, ⌘-V: http://is.gd/n08i

  935. I will be at the Columbia LUG meeting tonight - haven’t been to a LUG meeting in 4+ years. Any @charmsec folks attending?

  936. ♪ Hands ♪ ♪ Touching Hands ♪ ♪ Reaching Out ♪ ♪ Touching Me ♪ ♪ Touching Youuuu ♪

  937. Researching visiting the Kennedy Space Center for a shuttle launch this year: $400 seems to be the ballpark. I have lots of questions.

  938. Function scp() { echo $2 | grep -e 😒 if [ “${?}” ne “0” ] ; then echo “Idiot.” else scp $1 $2 fi

  939. I’m dumb for not going to SOURCE Boston. I qualify for the student rate, which is @shmoocon pricing. facepalm

  940. Base '09 mac mini ordered to replace the XBMC, and the NLSU2. Would anyone like my NLSU2? http://is.gd/mR41 It needs an OS and HD

  941. Tomorrow’s Columbia Area LUG meeting looks like a network security monitoring with linux chat: https://lists.unknownlamer.org/pipermail/calug/2009-March/000556.html Awesome! I’m going!

    [CALUG] Which Python Book? lists.unknownlamer.org (opens in a new tab)
  942. Http://is.gd/lXtX Always ask ‘Have you ever hacked anything?’ Always.

  943. Hates midterms

  944. Modern (networked) GUI experiences are shining examples of transitive trust at layer 8.

  945. I only read on planes. To & From SF: @mcsweeneys #30 and Raskin’s “The Humane Interface” https://en.wikipedia.org/wiki/The_Humane_Interface UI and InfoSec are intertwined

  946. Http://twitpic.com/1y5yx - At The Stinking Rose in North Beach, San Francisco - apologies in advance to anyone that flies home with us t …

  947. Http://twitpic.com/1x4oi - Everything here is beautiful

  948. Http://twitpic.com/1wvke - At Bodega Beach, CA taking pictures of dew covered wild irises

  949. Http://twitpic.com/1w2yu - Touring Cline Winery in Sonoma, CA with @vurtyou and @johnconstable

  950. Cabbie: OMG you’re from Baltimore? I LOVE John Waters, I would die to be in one of his movies! Do you know him?

  951. Does @philip_daigle still have his moustache? That’s so Daigle!

  952. I’m amazed at the fascination San Franciscans and Chinese have with miniature liscence plates and street signs with their names on them.

  953. Http://twitpic.com/1viau - The sipper shot tastes like brandy, the Mai Thai tastes like a day of agony

  954. Http://twitpic.com/1vgy9 - Mai Thais and beers at LIPI Cocktails in Chinatown, and shots of chinese liquor on the house

  955. Alcatras vist done, heading to Fisherman’s Wharf for lunch. Why are there so many more European tourists here than DC?

  956. My Out of Office Message is on. If only I could configure it to blast the SCADA-Sec list, so that I could feel like I was contributing

  957. RT @shmoocon Most speaker presos are online - videos to follow soon. We have a badge contest winner.

  958. On a flight heading to San Francisco to see @johnconstable for five days. Bbl Baltimore.

  959. Http://twitpic.com/1ugyq - House fire in Canton, almost out now, hope now one was hurt!

  960. Watching MJR and Bejtlich debate 15 topics at once in a 20 person round table: Like a tennis match

  961. Maybe I’m cynical but I a sophisticated attacker targeting specific assets is undetectable until the loss is realized. Duh.

  962. Anti-debugger tech is not 5 years old DOD tech, it’s much older. IDS and IPS are critical NSM components, not even close to a distraction

  963. I am at the front right table, j, c, and l are at second row second from right, both have empty seats

  964. The intro talk is about vulnerability scanning Zzzz

  965. Wow. I didn’t look at todays schedule, so I left at 6:15, but left late at 6:45 :p I just walked in, BK just got here, no worries

  966. Innapropriate to the ask Mu Dynamics sales reps if he’ss still beating his wife? Or does he probably get that a lot?

  967. A vendor at IANS just called SMTP a legacy protocol: keeper.

  968. Psyched for the IANS Forum tomorrow in DC w/ @electricfork and @jeson. Not psyched about 5AM alarm to make it down from Bawlmer.

  969. My Wikipedia userscript is coming along nicely http://is.gd/luKO will release tonight and sync fixes w/ Simplepedia. I need a name for it!

  970. Grabbing Pho with @vurtyou in Sec-that-wierd-empty-asian-upstairs-urity Mall’s SEOUL PLAZA.

  971. Earthless and Witch kicked my ass last night. My ears will probably be ringing all day. I definitely need to take ear plugs to shows now.

  972. Hey @vurtyou, let’s make some pho http://is.gd/ldv7 I assume the broth freezes OK? Need to hit an asian market for some of those ingredients

    is.gd - Shortened URLShortened URLis.gd (opens in a new tab)
  973. I’m going to see Witch tomorrow night at the Ottobar with @vurtyou. Tickets are probably still available https://www.last.fm/event/870548+Witch+at+Ottobar+on+28+February+2009 .\m/

  974. Why I, lover of all things pub-crawl, won’t be going on any snuggie pub-crawls http://is.gd/l9m3 (shit, look at question i. shitshithshit)

  975. I love finding out I was cargo-culting something out of ignorance. I am a walking, mumbling, fumbling knowledge gap.

  976. Heading to Max’s for @CharmSec soonish & bringing a pile of spare 2009 Sourcefire calendars to give out, and a few 2009 ShmooCon schedules

  977. Bob Edwards interviewed planet hunting astronomer Allan Boss(sp?) this morning on XMPR. Interesting planet forming theories!

  978. CAPS LOCK is the appendix of the keyboard. When will yours burst?

  979. I would love a terminal.app that used the Safari 4 beta tabs. While dreaming, it should bind ⌘-# shortcuts to tabs, not windows!!@#^%!#

  980. Did mail.google go dark because of an attack? Sorbs.net listed their outbound mail servers as ‘currently sending spam’ last night.

  981. The rear USB ports on HP Monitors are a rogue HP industrial designer’s cruel joke.

  982. I must have corrupted omnioutliner.app: Opened econ notes, they auto-imported as a very large tree diagram in omnigraffle, head a’sploded

  983. Does SimplepediA need a new name? Could it confuse simple.wikipedia.org users?

  984. My ground-level condo is being carried away on the backs tiny ants.

  985. Let’s appropriate a poster for CharmSec 10. I propose http://is.gd/kpsV More Not Working than Networking

  986. NB: The previous track was Miles Davis’ 23 minute Bitches Brew, so there was definitely some tension before the Vangelis came on

  987. Blasting the Esper Edition of Vangelis’ Blade Runner soundtrack: @vurtyou just ran upstairs “CAN I HAVE SOMETHING A LITTLE LESS CREEPY!?”

  988. I’m watching Return To Oz for the first time. Yikes, this is creepy.

  989. Whoa! People still like U2? https://techcrunch.com/2009/02/20/did-lastfm-just-hand-over-user-listening-data-to-the-riaa/

  990. It’s a crime that the closest bar to the office has @Dogfishbeer 90 minute IPA on tap and is a 45 minute drive from home.

  991. On writing procedures: removing all articles (a, the, some, etc) does not technical writing make.

  992. Am I alone in thinking that continuous partial attention is a generation-gap issue and not a problem? http://is.gd/kfgA Am I just selfish?

  993. Going dumpster diving for old lumber, wish us luck

  994. Grabbing a burger at JD’s in Canton w/ @vurtyou and Kathryn and K’s friends

  995. What are the legalities of pilfering some amazing O.D. aged 2 x 8 lumber, er trash, from a roll away dumpster in Canton?

  996. Toying with extending simplepedia global support for major language editions; In russia, css tables joke–oh nevermind http://is.gd/k9cT

  997. Please use a chain of custody form when sending a hard disk inter-office naked in manilla envelopes, so we know who to blame when it clicks

  998. Http://twitpic.com/1khgg - Looks like a philips head to me, off to see a man about a plug!

  999. Http://twitpic.com/1kh7v - I like changing flats in the rain! Yay!

  1000. Dreaming about brewing beer is surely a sign that I should continue not making time to do it right? I need to break in the basement.

  1001. Enjoying Asimov’s /It’s Been A Good Life/, but disagree w/ him that The Last Question is the best SF short story ever, it is merely the 2nd

  1002. capture - a script for analysts and incident handlers

    Frequently, security analysts kick off tcpdump full packet captures on unix servers with tapped interfaces at trust zone perimeters which they leave running in the background. Often this is done in a hurry in order to catch something before it disappears, and just as often, the capture is left running for a few days, weeks, or even months at a time.

    Unfortunately, this leaves dozens of tcpdump capture files strewn about home directories, all of them poorly named and all too often left running and forgotten. Which ones are junk? Which can be archived or deleted? What a mess!

    And this is even more problematic for those of you practicing network security monitoring with daemonlogger or a similar rolling full packet capture daemon.

    How can an analyst dig through hundreds of large pcap files for just the traffic they want? Whether it is 50Gb of accumulated network traffic that left a T1 connection over the past week, or that left an OC3 connection in the past 15 hours, it is too much to pull a file at a time, even with a guess where to start. These nsm daemons can easily generate a Gb of data every minute! Neither tcpdump -r nor daemonlogger -r accept wild cards. Hunting for an event one file at a time? No thanks.

    Who wants to mess with ps, grep, and kill, much less the oft repeated -nn -s 1516 -i interface during incident handling?

    A solution

    I created a perl script to manage starting, monitoring, and stopping all packet captures - live or from active daemonlogger pcap files. I retrained all my analysts to use it. I updated my sensor monitoring scripts to start using it too.

    I think this would be useful at ISP’s, .edu’s, and enterprise organizations so I refactored what my team and I have been using for the past year to make it significantly better. Time to release it!

    capture

    > capture
    Usage: capture [-h?lsmv] [r|R] [-a analyst -d 'quoted description' -e 'quoted expression'] [-f filter]

    Starting captures

    Script the repetitive stuff, force the informative and useful stuff, and prevent mistakes.

    > sudo capture -a grant -d 'traffic to grantstavely.com' -e 'host 205.134.166.178'
    Password:
    Started: grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.22.UTC_1234902022_.pcap

    Monitoring captures

    > sudo capture -l
    grant Tue Feb 17 15:20:22 2009 traffic to grantstavely com
    will Tue Feb 17 15:24:05 2009 irc traffic
    philip Tue Feb 17 15:24:41 2009 strange malware on 8081

    Too many, I’m checking on my own captures only!

    > sudo capture -lf grant
    grant Tue Feb 17 15:20:22 2009 traffic to grantstavely com

    Need more detail?

    > sudo capture -lv
    Analyst: grant
    Size (bytes): 720.00 KB
    Started: Tue Feb 17 15:20:56 2009
    Last Modified: Tue Feb 17 15:21:31 2009
    Last Accessed: Tue Feb 17 15:20:56 2009
    Last Changed: Tue Feb 17 15:21:31 2009
    Description: traffic to grantstavely com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap

    Stopping Captures

    > sudo capture -svf grant
    Analyst: grant
    Size (bytes): 720.00 KB
    Started: Tue Feb 17 15:20:56 2009
    Last Modified: Tue Feb 17 15:21:31 2009
    Last Accessed: Tue Feb 17 15:20:56 2009
    Last Changed: Tue Feb 17 15:21:31 2009
    Description: traffic to grantstavely com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap
    
    Capture file info:
    File name: grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap
    File type: Wireshark/tcpdump/... - libpcap
    File encapsulation: Ethernet
    Number of packets: 2778
    File size: 1869006 bytes
    Data size: 1824534 bytes
    Capture duration: 12.070557 seconds
    Start time: Tue Feb 17 15:48:22 2009
    End time: Tue Feb 17 15:48:34 2009
    Data rate: 151155.74 bytes/s
    Data rate: 1209245.95 bits/s
    Average packet size: 656.78 bytes

    Daemonlogger Data

    If you have a directory of daemonlogger pcaps, point capture at them with the same standard syntax and it will run through each file, gradually merging only the data you want into a single manageable pcap.

    Note that capture maintains a soft link to the currently merged temp file using the name of the final target file so that you can start performing analysis right away.

    > capture -ra grant -d 'historical traffic to gs.com' -e 'host 75.101.142.201'
    Generating grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap
    Currently Processing: Tue Feb 17 05:23:45 2009

    Or do both - start a new live capture and grab the same data from daemonlogger archived pcaps.

    > capture -Ra grant -d 'historical traffic to gs.com' -e 'host 75.101.142.201'
    Started: grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.pcap
    Generating grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap
    Currently Processing: Tue Feb 17 05:23:45 2009

    While running, the ‘Currently Processing’ line will maintain a listing of how far through daemonlogger data the process is. From another console, the same is available to other analysts

    > capture -lv
    Analyst: will
    Size (bytes): 60.00 KB
    Started: Tue Feb 17 16:21:02 2009
    Last Modified: Tue Feb 17 16:21:15 2009
    Last Accessed: Tue Feb 17 16:21:03 2009
    Last Changed: Tue Feb 17 16:21:15 2009
    Description: dns traffic
    Expression: port 53
    Capture File: /Users/grant/captures/will_dns.traffic_Tue.Feb17.2009-21.21.02.UTC_1234905662_.pcap
    
    Analyst: grant
    Size (bytes): 0 Bytes
    Progress: Tue Feb 17 10:03:01 2009
    Description: historical traffic to gs com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant.processing.4958.1234882981_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap

    Additional uses

    capture takes full advantage of syslog, so that you can validate what analysts did what, and when.

    You could schedule regular e-mail to management to validate what captures are running, or were run, per user, per day, and so on.

    If short on disk space, leave only individual long running captures going against specific hosts, add them to start with init.

    capture has support for hashing completed capture files, use the hashes later to validate your data.

    Use shell aliasing to create a quick start cap $1 $2 $3 alias which defaults to one of the operations cap normally requires -a, -d, and -e to perform

    Requirements

    You must have: perl, a few perl modules, and tcpdump. You also need capinfos and mergecap, both of which are part of most wireshark and tshark distributions.

    I suggest that analysts run capture on systems using sudo.

    capture has been tested and run successfully on linux, bsd, and MacOSX systems. You should review the source to configure the handful of options available before testing.

    Future plans

    • Run through a directory of pcaps w/ mergecap
    • Integrate daemonlogger
    • Better privilege seperation
    • Built in man page
    • Functional option combinations and errors
    • FreeBSD and OSX support
    • More useful verbose output
    • More user testing
    • A ‘speed start’ no-flag syntax for starting captures rapidly
    • Proper SIGNAL handling to stop --read jobs
    • /etc/ file usage to replace script header configuration
    • Assumption defaults (friendly handler name interpreting, auto descriptions using bpf, etc)
    • Suggested alternate resources; web links, dns information, argus queries, ids urls, extensible whatever
    • A web front end
    • Just kidding about the web front end
    • Specific script targeted output
    • Capture monitor and alerting
    • Better facilitation of metrics
    • Threading to improve speed of daemonlogger filtering

    Download

    Capture is hosted on google code.

    This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.

    Enjoy!

  1003. “What happens when you die?” “I don’t know, google it” “It says you respawn at the last save point with no power-ups” http://is.gd/4Hd8

  1004. was a brand. kraftfoods/* Make today delicious …is boring type with bad ideas after and below it. http://is.gd/jXdM

  1005. I’ve updated my nsm/ir laziness script ‘capture’ to run through daemonlogger pcaps http://is.gd/jSIq Ew perl, right?

  1006. Best Practices < Design patterns. BP: “We got a IPS-firewall! Prob solved!” DP: “We are applying Least Priv. and NSM! Still expect loss!”

  1007. Best Practices > Design patterns. BP: “We got a IPS-firewall! Prob solved!” DP: “We are applying Least Priv. and NSM! Still expect loss!”

  1008. Google reader ‘share with note’ needs a threaded reply feature.

  1009. I am Kitty Genovese. Nobody told me my release was a big fail in the 99% of users demographic. Webkit > Gecko http://is.gd/jB4i Fixed!

    Dance Partyis.gd (opens in a new tab)
  1010. THE BANSHEE WAIL OF DATACENTERS IS DESIGNED TO KEEP GEEKS FRO-WHAT?! I CAN’T HEA-$@%PHONE BRB-“YEAH, I’M IN THE DATACENTER IT’S SO-WHAT? I-”

  1011. I haven’t had to mess with Simplepedia in a while so I put it on userscripts.org http://is.gd/jiaW

    Dance Partyis.gd (opens in a new tab)
  1012. Using perl to serially process a few hundred 500MB pcaps instead of using threads because I’m too stupid and lazy to grok threads or fork()

  1013. Unix epoch time 1234567890 is this Friday at 6:31PM EST. If your technical team has been looking for an excuse to have a happy hour…

  1014. What’s w/ people in the New Testament buried in tombs w/ rolling stones for doors? Didn’t want to dig in sand? Resurrection convenience?

  1015. 2AM, drunk: @electricfork How’s the fall of the military industrial complex ging? Marine Lt.Col: Quite the contrary I think. Me: Really?

  1016. Ever get the feeling that the conversation you just had was all exposition? It’s fun to treat everything that happens like it’s in a novel.

  1017. Glen /forgot/ to eat lunch. Somewhere out there, there is a big bald dude named Nelg that’s been grumpy all afternoon https://en.wikipedia.org/wiki/Tomax_and_Xamot

    List of Cobra (G.I. Joe) characters - Wikipediaen.wikipedia.org (opens in a new tab)
  1018. Excellent talk: Brewmaster at Brooklyn Brewery explains beer. http://is.gd/j5yl I think I’m too techy to be a CAMRA/Slow foodie. Almost tho

  1019. I asked @will_torres if coaches used biz terms the way biz leaders use sports terms. He says no, they just use other sports’s terms.

  1020. Outlook Zen Koan: Opening a lot of items could take some time. Are you sure you want to open these items? Yes/No?

  1021. Confirming that 2 Amy’s is still second place to Pizza Paradiso with a Dales Pale Ale, wishing I had a spare stomach.

  1022. I just played a Theremin at the Hacker Arcade at Shmoocon: Jimmy Page emulation near complete. I need a dragon suit.

  1023. Dead Additc’s talk on security and the false trade-off at the sake of usability and design is excllent.

  1024. At The Reef in Adams Morgan

  1025. The UMBC bookstore had the textbook for my Java class finally. Yay! Now going directly to Shmoocon.

  1026. Have a brilliant Shmoocon barcode presentation idea, 24 hours to execute, and no budget to acquire the dozens of misdirections needed. Shit.

  1027. Yea!! I like your profile pic! You are almost not making a stupid face 8)

  1028. Https://www.imdb.com/title/tt0060153/quotes the riddles abound. Batman: [reading a riddle] What has yellow skin and writes? Robin: A ball-point banana! Precisely!

  1029. Every time I use a site with password complexity requirements I use the ‘Forgot Password’ function, log in, change it, & forget it. UX FAIL.

  1030. I just passed a lone tire mounted on a steel wheel rolling along in the slow lane on 83N, no 3 wheeled cars in sight. Gonna be a wierd day.

  1031. UMBC must have seen through the whole 90’s Aeron chair thing. These VIRCO MARTEST one-piece plastic and formica units are awesome.

  1032. Dear Random Things Meme, ♫, #ff0, ♂, III, ☺, , $, 21224, ., gonk, gs.com, cheers, ~, ♥A, ( | ), ≠†, 29, meh, derp, CEG, the boy, \m/.

  1033. My Airport Express randomly decides that some songs should be played in the spirit of 4’33". Too artsy for me.

  1034. No turn signals? Know riding the bus.

  1035. On adverbs: Any word that ends in -ly should be removed from formal procedures. @electricfork says: Like Stavely?

  1036. Non@Shmoocon DC to-eat&drink list for this weekend: Pho, Regent Thai, Big Hunt, sushi (suggestions?), Pizza Paradiso, Shmoo party, 2 Amy’s

  1037. I named @vurtyou’s chili contest entry yesterday after the sounds that cows, pigs, and beans make.

  1038. And Friday are now friends.

  1039. How do you keep an analyst in suspense? python volatility ident -f /4GBddImage.dump http://is.gd/hPiF

  1040. LGS Senior slipped on ice and broke his femur, surgery tomorrow, home enjoying a Keystone Light w/ ice cubes in it by Monday I hope.

  1041. What’s worse? http or self-signed SSL https Citrix logins? LoginType=Explicit&user=Scroob&password=12345&domain=SPACEBALLS1

  1042. Guardian angel bots are even more flattering than cute vanity name bots e.g. @Laura9238, with neither posting, what is their raison d’etre?

  1043. Twitter spam bot: $0, bot follows thousands: $0 Obvious, gets blocked. Alternative: Guardian Angel Bots: one per person e.g. @satie45

  1044. Nice 😃 be careful

  1045. Had to abort Cave Rd hill climb midway up, all-wheel-slide, Garrison Forest doesn’t look plowed either. Main roads ftw.

  1046. Commuting to work in crap weather to sit in cubes and e-mail and IM each other is so 20th century it hurts. But we can have meetings!

  1047. Driving through the inner harbor because my EZPass says INVALID TAG: totally beat.

  1048. Considering a zeitgeist of google searches found in referers to malware fast-flux sites, worried it follows the heavy side of the 80/20 rule

  1049. #myfirstjob was 14. Xmas tree farm tree-shaper. In August. 100°, jeans, sweatshirts, hand clipper, wasps. Lasted 3 days, wrecked work truck.

  1050. Hello my childhood friend…it’s been a loooooong time. How are you doing? I know my mom still keeps in touch with your mom. I heard about Katie’s baby and congrats on getting married! How’s life treating you??

  1051. A very special episode: Leaving in-laws in Mt. Airy to go see my Uncle’s band play @ Griffs in Frederick.

  1052. TinyTwitter is an excellent TwitterBerry alternative (nicer UI, icon, & sync settings) but it fails to count characters per tweet? Fail?

  1053. The left lane of 83N is coned off from Fayette to 695 because the International Brotherhood of Cone Layers needed some overtime

  1054. Dear QuartzWM, What power over window z-index order does exposé have that clicking on the window lacks? Glitchtastic.

  1055. Corporate Brand Mash-up DIY Rebellion

    From the Wall Street Journal via Dark Visitor:

    A property developer in Nanjing, hoping to lure business and buzz, set up storefront facades with logos such as “Haagon-Bozs,” “Pizza Huh,” “Bucksstar Coffee,” “KFG” and “McDnoald’s.” Images of what became known as “Shanzhai Street” spread rapidly online.

    Once a term used to suggest something cheap or inferior, shanzhai now suggests to many a certain Chinese cleverness and ingenuity. Shanzhai culture “is from the grass roots and for the grass roots,” says Han Haoyue, a media critic in Beijing, who sees it as a means of self-expression. “It gives people another choice and the possibility of resisting dominant cultural values.”

    I love that they are using the scrambled letter approach – wonder if they got the idea from silly forwarded email. This has expanded from brick and mortar space to websites that mash brands like google, yahoo, and baidu into one logo / search site.

    Brilliant co-opting!

    Applying some McLuhan reasoning, I wonder how this changes customers perception of Shanzhai products.

    In single blind taste tests, people told they are having their favorite brand name product may fail to notice discrepancies, or notice them and shrug them off (I lack a source for this). When all appropriate visual clues are included – a Strabuks cup with logo, band, and top for example, could Maxwell House drip coffee be passed off as a new flavor?

    Cleo McDowell: Look… me and the McDonald’s people got this little misunderstanding. See, they’re McDonald’s… I’m McDowell’s. They got the Golden Arches, mine is the Golden Arcs. They got the Big Mac, I got the Big Mick. We both got two all-beef patties, special sauce, lettuce, cheese, pickles and onions, but their buns have sesame seeds. My buns have no seeds.

    Certainly.

  1056. Enjoying a Green Flash Hop Head Red at Frisco Grille in Columbia, MD. Strange that this place doesn’t do coasters.

  1057. Re: Boyd, Ike, etc… Why We Fight https://www.sonyclassics.com/whywefight/ Boyd: https://en.wikipedia.org/wiki/John_Boyd_(military_strategist) and OODA (which I mentioned @charmsec): https://en.wikipedia.org/wiki/OODA_Loop

    Why We Fight - A Film By Eugene Jareckisonyclassics.com (opens in a new tab)
  1058. Bob Edwards interviewee on XMPR on /Military Industrial Complex/ is rapping about John Boyd, very interesting

  1059. Ugh, I have to take the 17" PowerBook apart this weekend and clean the coke that splashed under the trackpad button. clshk clmf CLACK

  1060. Dude you are totally slacking on Twitter/Facebook posts… Very dissapointed.

  1061. Manda, Sandra, Taf, and I were about where my cursor is pointing in this pic for Obama’s Inauguration http://is.gd/gEwI (note shadows - AM)

  1062. I think I’d rather have bad wide angle and telephoto zoom lenses than the kit glass I’m stuck with. The bottom of a building? 3’s a crowd?

  1063. I need to run kegerator lines up to the bathtub.

  1064. 95 north stinks like tour bus exhaust.

  1065. Tons of volunteers in red hats are posted saying “Welcome! We are glad you are here! Have a good day!”; feels like a Vonnegut novel.

  1066. Twitter and AT&T both get huge presence fails @ the inauguration. Wool socks, a crappy hot dog, and no snow were all wins.

  1067. Just made it back to Adams Morgan; walking route was insanity with most northern mall exits blocked because of the parade

  1068. Http://twitpic.com/158ke - The cold isn’t so bad.

  1069. The crowds are not bad at all, and the PA and Video systems are great. Walking to the center of the mall now

  1070. Having morning coffee in Adams Morgan, then we’ll be layering up for the walk down to the mall for the inauguration of Barack Obama

  1071. IMG_4837

  1072. IMG_4784

  1073. I’m totally updating my linkedin to say I’m a corporate quarterback with skills, awards, and hobbies. And experience. Senior Lead Manager!

  1074. Click here for details on the totally gross stomach bug that @vurtyou caught last night. Ask me about where our bathroom trash can is!

  1075. Had a post-Obama half-n-half at James Joyce, cab back to the house, now for a wood stove fire and gumbo

  1076. Http://twitpic.com/13znl - We arer about 100 yards back, center of the crowd, Obama speaking

  1077. Http://twitpic.com/13yjz - Waiting for Obama to speak in Baltimore, listening to Morgan’s Choir

  1078. Walking through the police and nat’l guard maze to get to the line to get to see Obama in downtown Baltimore

  1079. Getting a gumbo roux started, seafood gumbo will rock after seeing Obama in Baltimore (brrrr), (soundtrack: dj mixes from pearsontowers.com)

  1080. What is the Sat. morning hashtag for #hangover? #tags should auto-sub authors to identical #tag tweets for 1 hour, and not go to followers

  1081. Pizza, you are a cruel mistress: $9 for 7oz of imported mozzarella di buffalo, plus San Marzano tomatoes, and 00 flour!? And toppings?!?

  1082. I’ve seen web servers push some silly file extensions, but .txt? http://www.thesttammanynews.com/articles/2009/01/14/news/doc496df022da317117181188.txt What is the reasoning behind that?

  1083. Have you seen it’s 11 degrees outside!? Whooo are the Ad-wizards that came up with /this/ one!?

  1084. I learned camera on film so I only take 35 pictures per week to save on film, and I use only ISO400 & manual focus. Each shot counts more!

  1085. Http://is.gd/g0cA Mayor announces legislation addressing the city’s blunt shortage; democrats hope to increase blunts per capita five-fold

  1086. Hey I think I might take you up on the offer to hopefully fix the HD. I’m waiting on a write up from my hubby on what actually happened to it. Don’t sweat shipping, the post office on base is just like mailing something from inside the states so shouldn’t be bad at all. How much do you charge?? 😃

  1087. I have seen the fnords. Look for two (or more) spaces after periods in electronic documents and read between them. See!? /they/ are everywh-

  1088. My old row home’s lack of insulation starts to be annoying when its 20°F outside. https://www.coloradoenergy.org/procorner/stuff/r-values.htm Brick is nearly worthless.

    ColoradoENERGY.org - R-Value Table coloradoenergy.org (opens in a new tab)
  1089. Help! Trapped at Safeway by @vurtyou’s selection paralysis! Send nat’l guard! Surely they’ll know the /right/ snacks, or have a sniper.

  1090. I’m not sure who on @will_torres’s whiteboard threat list scares me more: Brainy Smurf, Alex Trebek, or writequit (me, 2002)

  1091. Dj cheeba’s mix for solidsteel #82 is bangin! http://is.gd/fInj (Playlist: http://is.gd/fInO | Direct to the mp3: http://is.gd/fIoS)

  1092. Dear self: “nothing” was not the correct “what’s the worse that can happen?” answer. You owe me a 9V DC brick. Stop terminating hot wires!

  1093. Http://twitpic.com/120rh - Hung the 4" spiral duct I’m using as conduit & snaked wires though it, with trick IR blaster mounted in the d …

  1094. Roadhouse on A&E, edited for TV: Constant T+A and fist-fights, but bleeps a character saying ‘Jesus Christ’? This country is nuts.

  1095. Use the car horn to say “I’m here!!” to future passengers “I’M HERE!!” still in their “I’M!” home? “HERE”? Die in a "IMHEREIMHEREIM-"fire.

  1096. I’m contributing my free CPU cycles to the Sharepoint Document Library Explorer View - hopefully it’ll find the cure for… something…

  1097. I get three scoops of raisin’s in my raisin brain.

  1098. Like, whoa: @philip_daigle: “I’m in the packets”

  1099. RT @charmsec Charmsec 9 is set for the 21st. We’re doing it at Max’s this time. 7PM. DM for more info. http://electricfork.com/charmsec

  1100. Tech facilitation of time-shifting human interaction is and will continue to change how we live and work. Time is a luxury. Be selfish.

  1101. Http://is.gd/eN9Q THERE IS PROBABLY NO GOD, NOW STOP WORRYING AND ENJOY YOUR LIFE. How would this go over in the U.S.?

  1102. 101 wpm (http://is.gd/eJeW): Much faster on the powerbook http://is.gd/7Yae

  1103. On my white mac keyboard: http://is.gd/eIT5 Any challengers? I’m pretty sure I’d be faster on my powerbook or an IBM 104e springboard

  1104. I must not have read a new mmpb in a while, this thing just feels wrong in my hand, and I thought I was losing my mind https://www.findarticles.com/news/

  1105. I’ll be at the Caps game Friday & staying late for @will_torres’s; his beer-league team has the ice @VerizonCenter for a second game

  1106. Making a list of things to pack for inauguration day walk from Adams Morgan to the Mall the morning of + day hangout. Any do’s or don’ts?

  1107. UMBC is rubbing my night-school return in by sending me “you should apply for graduation” e-mail every few weeks for the next 2.5 years

  1108. Watching @vurtyou install some of my open source on her windows laptop (no innuendo), DS_Store folders are very tacky

  1109. Another step closer to becoming my dad: I’ve got the wood stove chasing us out of the living room (HVAC thermostat reads 80 degrees)

  1110. Don Eduardo is so busy making amazing Añejo that they still have a crappy print-design website and no wikipedia entry http://is.gd/ewPI

  1111. Grades are in from my prof that uses Blackboard - aced my final paper (100) and the class (94), now just waiting on the other prof

Pizza Slow (high quality)

© 2026 gravely