pizza slow (high quality)

posts from 2009

  1. #code2009 perl, javascript, python, java, sh—who’m I kidding? English mostly, a buncha memes, some broken glass, and lotsa rattle-can black.

  2. My 500 Days of Summer alternate ending credit roll theme choice: Kid Koala — Moon River.

    https://www.youtube.com/watch?v=dSsErpzoqr0

    Kid Koala Moon RiverKid Koala reinterpreating Moon River at Picnic Electronik in MontrealYouTube

    Great film, constant riffing.

  3. My 500 Days of Summer alternate ending credit roll theme choice: Kid Koala — Moon River. https://www.youtube.com/watch?v=dSsErpzoqr0 Great film, constant riffing.

    Kid Koala Moon RiverKid Koala reinterpreating Moon River at Picnic Electronik in MontrealYouTube
  4. Happy birthday!

  5. Happy Birthday, Grant! Welcome to the really fun 30s decade, haha. Anyways, have a great birthday!

  6. Happy Birthday Grant! Hope you’re having an awesome day 😉

  7. Happy Birthday! It was great to see you on Christmas.

  8. Happy Birthday!! 😄 Have a great day!

  9. Happy Birthday!

  10. Happy birthday old man.

  11. Happy birthday cousin!

  12. Happy Birthday!!!

  13. Happy Birthday!!!

  14. Happy Birthday Mr. Stavely! Welcome to 30! Having just left that decade myself, I’m excited for all that it may hold for you. Have an awesome day!

  15. Happy Birthday Grant!

  16. @jeson @slp22 thanks!

  17. Happy early birthday to youuuuuuuuuuuuuuuuuuuuuuuuuuuuuu!!!

  18. I’m really hoping I get a cordless razor and some perfume from one of you thoughtful people this season. Maybe tickets to a romantic comedy?

  19. Calling you from Canada… 403-832-3792 so you might just answer:) pretty please

  20. @ddeighton important selinux commands to remember: semange, sesetbool, chcon, restorecon, chmod 777, and bangheadondesk -Z

  21. Happy Solstice ☼.

    It’s getting brighter all the time (it can’t get no darker).

  22. My first of three grades for the semester just posted: an A.

    Now considering a January web-only macro economics—3 credits in 3 weeks. Eek.

  23. Please refrain from eating the menu.

  24. Let there be Light. Let ANSI Blue be 102,187,255, because 0,187,0 on a black background is insane. Let there be firmament in the midst…

  25. RT @CrucialCarl: Wife. Hospital. Pregnant. Labor. 6cm. Admitted. Fun. She said if we wrap this up before noon, @Charmsec is a possibility.

  26. @CrucialCarl congratulations!

  27. Let there be Light.

    Let ANSI Blue be 102,187,255, because 0,0,187 on a black background is insane.

    Let there be firmament in the midst…

  28. The 20th @CharmSec is tonight at @SlaintePub in Fells Point, at 7PM, sharp. Don’t trust the valet, he isn’t a valet. We waive all responsib-

  29. @jjthomas driving in excess of the posted speed limit within a radar-monitored temporary tax-collection zone.

  30. Nothing says “Hey, I’m middle class, can’t we just settle this with cash?” like a conservative suit and tie in traffic court.

  31. @GoldbergLawDC congratulations!

  32. @dionthegod congratulations!

  33. Http://twitpic.com/t7bc9 -

    TwitpicTwitpictwitpic.com
  34. Http://twitpic.com/t7bc9 -

    TwitpicTwitpictwitpic.com
  35. Relaxing & having a home brew I made in 2007–-aging made it drinkable. No, I wouldn’t have cellared it if it wasn’t terrible at first.

  36. Wood stove, Philip Glass’s Heroes Symphony, Melville, Scotch, Santa-crawl tomorrow. This cliché kicks your cliché’s ass, bring on 30.

  37. Relaxing & having a home brew I made in 2007–-aging made it drinkable. No, I wouldn’t have cellared it if it wasn’t terrible at first.

  38. Many of my passwords have backspaces in them.

  39. @alexhutton well I guess I’m done then.

    rimshot

  40. @alexhutton d, e, o, and n? I’m in #sansids the next two days and don’t have time to go further than pdf → photoshop → OCR → ASCII.

  41. Dear Prudence, Steel and Glass, Dig a Pony, Scared, Working Class Hero, I Want You (She’s So Heavy), Instant Karma, Imagine, John Sinclair.

  42. Editing a group project for school, just found that one member’s last-minute contribution is entirely plagiarized from Wikipedia.

  43. Reading some godam Salinger I’ve been meaning to get to. Don’t get me started, Christ. I mean just /look/ at this.

  44. dnssnarf

    Domain Name System (DNS) traffic is inherently timely. Responses from DNS servers are expected to change from one minute to the next. So many important application layer protocols leverage DNS, and it is so pervasively necessary for even basic Internet access, and it is such a simple behavior indicator, that it only makes sense to log the crap out of it. In minutiae.

    Yet, it seems like DNS logging is still one of those everyone-rolls-their-own efforts. And fewer still log DNS from a sniffing sensor, instead trusting their DNS servers. I hate rolling my own, and I don’t trust DNS servers.

    I’ve borrowed a healthy dozen or more security monitoring ideas from Sean Wilkerson, so while he was still on stage after a talk at DojoSec, I re-raised my DNS Logging plight. I’d hoped he knew of a tool, or could use the microphone, video stream, and audience to ask that someone create one. Actually, I didn’t hope, I specifically said “And hey, if anyone is listening, this needs to exist. If you can create, you are obligated.” or something along those lines.

    I wasn’t looking for an analysis tool, or a log parser, or an IDS signature. I just wanted the equivalent of the many snarf programs in Dug Song’s dsniff package. It had to be lightweight, reliably parse all application traffic of the DNS protocol, and simply log it. Dsniff already does that for HTTP, NFS, SMTP, IRC, and many instant messenger protocols, and it can spoof DNS, but has nothing for passive DNS monitoring.

    It worked! Sort of.

    Christopher McBee was in the audience, and he knew that Python and Scapy would probably be capable. In twenty minutes, he had a working DNS logger. Awesome.

    It didn’t log minutiae, but that wasn’t Scapy’s fault. It didn’t log TCP, and that is still Scapy’s fault.

    Spurred by Christopher’s work, I dove into Python and finished it to my original spec, mostly.

    > dnssnarf --help
    usage:
      dnssnarf [options]
    
    Log DNS messages with Python and Scapy
    
    options:
      --version show program version number and exit
      -h, --help show this help message and exit
      -s, --syslog write to syslog
      -f FACILITY, --facility=FACILITY Syslog facility. Defaults: 'user'
      -p PRIORITY, --priority=PRIORITY Syslog priority. Defaults: 'info'
      -i INTERFACE, --interface=INTERFACE listen on INTERFACE
      -q, --quiet quiet output
      -b BPF, --bpf=BPF BPF to apply to scapy sniffer. Default: 'port 53 and udp'
      -n, --named named query log format
      -d, --debug Print additional debugging information

    It doesn’t understand TCP DNS, because Scapy doesn’t, and I am not smart enough to fix that.

    Output looks like this by default:

    Fri Dec 4 06:24:56 2009 UDP session: 44167 client: 192.168.1.1:59634 server: 69.63.185.11:53 query: login.facebook.com. class: IN type: A recurse: no
    Fri Dec 4 06:24:56 2009 UDP session: 44167 client: 69.63.185.11:53 server: 192.168.1.1:59634 query: login.facebook.com. class: IN type: A recurse: no
    Fri Dec 4 06:24:56 2009 UDP session: 44167 server: 69.63.185.11:53 client: 192.168.1.1:59634 response: 69.63.181.22 ok type: A ttl: 30L len: 4

    So then I’m validating it against tcpdump. tcpdump already does what I want. And it isn’t Python. It’s fast. Silly us.

    Here’s tcpdump with me running ‘host grantstavely.com’ in another window.

    grantstavely:~ grant$ sudo tcpdump -i en1 -nn -tttt port 53
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on en1, link-type EN10MB (Ethernet), capture size 65535 bytes 2009-12-04 06:32:32.368184 IP 192.168.1.25.61686 > 192.168.1.4.53: 50950+ A? grantstavely.com. (34)
    2009-12-04 06:32:32.373623 IP 192.168.1.4.53 > 192.168.1.25.61686: 50950 1/0/0 A 75.101.142.201 (50)
    2009-12-04 06:32:32.374358 IP 192.168.1.25.64909 > 192.168.1.4.53: 44029+ AAAA? grantstavely.com. (34) 2009-12-04 06:32:32.376867 IP 192.168.1.4.53 > 192.168.1.25.64909: 44029 0/0/0 (34)
    2009-12-04 06:32:32.377112 IP 192.168.1.25.57526 > 192.168.1.4.53: 55171+ MX? grantstavely.com. (34)
    2009-12-04 06:32:32.394888 IP 192.168.1.4.53 > 192.168.1.25.57526: 55171 8/0/0 MX smtp7.grantstavely.com. 10, MX smtp4.grantstavely.com. 10, MX smtp6.grantstavely.com. 10, MX smtp.grantstavely.com. 0, MX smtp8.grantstavely.com. 10, MX smtp2.grantstavely.com. 5, MX smtp3.grantstavely.com. 5, MX smtp5.grantstavely.com. 10 (209)

    Under my nose!

    Actually, tcpdump isn’t showing us ~transaction ID numbers~, TTLs, or LENs, which is a bummer. So dnssnarf still has it’s uses after all.

  45. Snow is pouring, the wood stove is whirring, The Boy is purring, & coffee’s pouring, as I gaze out this winter morn.

    Blasting Mogwai.

  46. Businessman’s Cant™ is similar to Legalese, but of course like all cants, BC speakers are trying to conceal meaning from outsiders.

  47. Of all the low-bandwidth induced patois, the pidgin of phone conferencese and Businessman’s Cant is the most infuriating to outsiders.

  48. Here’s to my sweet Satan: Just did about a mile of my solo walk home from Fells backwards. Great comments from bar patrons!

  49. Here’s to my sweet Satan: Just did about a mile of my solo walk home from Fells backwards. Great comments from bar patrons!

  50. To Dulles ✈ for an @ians_security roundtable. Going only for the scenic beltway → tollroad commute that I miss oh, so much.

  51. And on the third day, @philip_daigle said: “I want a tab labeled Remedial Options.”

  52. OH, two guys leaving the bar last night in expensive hip leather jackets, “It’s a little too professional in here.”

  53. Spot me in #4 RT @vurtyou: @baltimoreMD Pics from last night’s splendid HH @yellowdogtavern (Mayor Dixon visited too!) http://bit.ly/64c9Ni

  54. ★★★★ DJ Z-Trip and DJ P – Uneasy Listening
    (http://j.mp/A1ZT) rock, cut, sample, & 90s hip-hop mix extraordinaire

    (tyvm @crucialcarl)

  55. I help run @charmsec for over a year, it rocks. @vurtyou tries one in our neighborhood and the Mayor of Bmore comes. I bought her a glass.

  56. University life-hack: The Snort-Sigs mailing list is a great resource for those pesky homework problems. Professors don’t know about it!

  57. A graphic design spec-work equivalent of an @attritionorg Postal: https://27bslash6.com/p2p.html

  58. GAIN: 11
    VOLUME: 11
    LOW: 11
    MID: 0
    HIGH: 11

    (glissando)

  59. Taking a cue from @censey, I’m attending @taosecurity’s SANS Incident Detection Summit as the Senior Vice President and Chairman, @CharmSec

  60. Hey @cmarczewski, find or start a local CitySec. Meet and learn from diverse local community, network, sponge from pros. Cost: free.

  61. Just painted a 3’x3’ canvas I disliked rattle-can black. The orig. oil painting texture is still showing. I’m a havenooiln’toolazytosandist.

  62. Just painted a 3’x3’ canvas I disliked rattle-can black. The orig. oil painting texture is still showing. I’m a havenooiln’toolazytosandist.

  63. Of course ctl-v won’t work, right click, X-Mouse, duh.

    And it’s alt-space-e-p on that console, middle-click there, and ⌘-v there!

    Move!

  64. @ebertchicago *Jake smacks Evelyn around a bit with a large trout

  65. Oh I like that Baby. I put on my robe and sysadmin hat.

  66. DNS sniffing with Python+Scapy: syslog output, command line options, bind querylog, & more data logged. @linuxgeek247

    http://j.mp/51DTPI

  67. DNS sniffing with Python+Scapy: syslog output, command line options, bind querylog, & more data logged. @linuxgeek247 http://j.mp/51DTPI

  68. Hmmmm, i thought you recommended that i don’t liksten to npr once after reporting a listner’s comment that i posted on FB, but now you are a fan 😃

  69. So Heathcliff, Garfield, Hobbes, Sylvester, Dinah, Tom, Figaro, Jonesy, Azrael, Snowball V, and Lion-O are listening to Coltrane, when sudd–

  70. I frequently don’t recommend CSPAN call-in hours with ‘democrat lines’ and ‘republican lines’ and ‘independent lines’.

    Sausage and laws.

  71. I just reserved our usual tables at @slaintepub for @CharmSec tonight. I’m expecting a lighter crowd, given the whole 19 thing.

  72. VirusTotal added NIST NSRL lookups in March. I just noticed. Oops. http://j.mp/1Qxb9e http://j.mp/wwxqf

  73. Unraveling the mystery behind @CharmSec 19 is tricky but I think I’m on to something: http://j.mp/35mrfw (leaving off 2 and /1/ of course)

  74. Http://translate.google.com/ doesn’t speak Latin either. Hoc est ars per occultum scripturam animi sui voluntatem absentibus aperiendi certa

    Google TranslateGoogle's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.translate.google.com
  75. Unraveling the mystery behind @CharmSec 19 is tricky but I think I’m on to something: http://j.mp/35mrfw (leaving off 2 and /1/ of course)

  76. Http://translate.google.com/ doesn’t speak Latin either. Hoc est ars per occultum scripturam animi sui voluntatem absentibus aperiendi certa

    Google TranslateGoogle's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.translate.google.com
  77. @adamshostack @oneraindrop excellent advise, elsewhere¹ called Conway’s Law²

    ¹ Tufte, http://j.mp/Ynqz7
    ² Conway, http://j.mp/AZ0Oo

  78. I’m re-enjoying @DCoffeen’s Rhetoric lectures. Lecture 16 will improve your writing if even only one point penetrates. http://j.mp/3GlK1Y

  79. @ecogordo @jjthomas thanks, only have the the crappy edger my knives came with. It sounds like I should just get a table sharpener instead

  80. Dear Baltimore: Where do you get your knives sharpened?

    Literally.

    No, the chef, paring, and utility kind.

  81. Hey Grant!!

  82. Dear Baltimore: Where do you get your knives sharpened? Literally. No, the chef, paring, and utility kind.

  83. Chicago, I don’t know how you make one block smell like sewer gas and the next like fresh brownies, but you should license that shit.

  84. Chicago, I don’t know how you make one block smell like sewer gas and the next like fresh brownies, but you should license that shit.

  85. Belief in false superstitions is very bad luck.

  86. In Chicago – a friend presented http://j.mp/SBXOC (pdf) at an ACM workshop (http://j.mp/Dlvhf) and invited @vurtyou and I for the weekend.

  87. Second City, Art Institute, Sears Tower, Live Music, Food

    30 8 13 11 5 Fly to Chicago for the weekend > /dev/null 2>&1

  88. @oneeyedcarmen nice work on that shake down flatfoot. How’d you get the hooey on that grifter’s rap? http://j.mp/ERdzQ

  89. @shmausen AT&T is having problems in Baltimore, it’s not you, it’s them. As usual.

  90. @vurtyou @saysaylobbyist tell him to bring candy canes for the kids http://j.mp/434xXv ( Gratuitous belly shot!: http://j.mp/jaqAX )

  91. @saysaylobbyist b’more Santacrawl is typically men-only but a dozen girls from http://j.mp/3qjkyb showed up last year and no one complained.

  92. You can take that Magic Quadrant™ and cram it in your magic ✿ quadrant, buddy.

  93. @stevewerby thanks, feared that conversation had dropped to DMs. Surely Linux & Unix are in that cohort as well?@StrongwaterSec similar exp?

  94. @GoldbergLawDC @danphilpott great points. Beware those who condemn as failures to holistically solve problems all stepwise improvements.

  95. @dionthegod @sdwilkerson Thusrday the 19th works for me, but I’ll have to miss the Valient Thorr show at Sonar so you guys better ROCK \m/.

  96. @frednecksec FBI: Businesses pull the impact-to-business card

    60 min: ??

    FBI: I’m going to have to use my ongoing-investigation card

  97. @dionthegod let me know if you find anyone, all of my pet projects have stagnated thanks to school and work and it’s very frustrating.

  98. @cyberhiker I just walked five blocks, bought 2 boxes #4 filters, and returned home to find my coffee can empty too. Madly using half-decaf.

  99. Dvorák Sympony No. 9: appropriately dramatic music for a Sunday morning without a single coffee filter in the house.

  100. Knock, Knock
    Who’s There?
    KK
    WT?
    kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt?

    …kk?, wt, kk?, wt

    Philip Glass
    http://j.mp/4eghoI

  101. Knock, Knock Who’s There? KK WT? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? kk, wt? … …kk?, wt, kk?, wt Philip Glass http://j.mp/4eghoI

  102. Http://twitpic.com/oirrz -

    TwitpicTwitpictwitpic.com
  103. @ssoper yup, @vurtyou is in San Diego, she just sent me a beach shot: http://twitpic.com/oirrz

    TwitpicTwitpictwitpic.com
  104. @marcusjcarey D’oh! See you tomorrow regardless.

  105. Considering blue team CTF at @dojocon w/ @electricfork and @crucialcarl, need fourth. Prefer someone that has done one before. We haven’t.

  106. Enjoyed Titus last night: http://j.mp/WLIwK, http://j.mp/4Dv6Ey

    @ebertchicago rightly considers it Scream 1593.

    Bear thou my hand indeed.

  107. Circular reasoning works because circular reasoning works because circular reasoning works because circular reasoning works because

  108. @wrayjustin haha, MacPorts has been a nightmare. I’ve ended up port -f uninstall all, clean all, retrying now. Are you taking the course?

  109. !! > @ebertchicago Bruce Lee plays ping pong, lights matches with nunchuks, and other footage of finite interest. http://j.mp/AO7A7

  110. If solutions aren’t available, I’d be willing to consider services but NOT products.

  111. I’m looking for some turn-key solutions that meet my needs, with a good ROI, and absolutely no headaches.

    Compliancy a plus!

    #lazyweb

  112. !! > @ebertchicago Bruce Lee plays ping pong, lights matches with nunchuks, and other footage of finite interest. http://j.mp/AO7A7

  113. My back tells me that VIRCO doesn’t dogfood back at HQ.

    After I graduate, I’m going to Samir a 9000 Classic Tablet Arm with power tools.

  114. My back tells me that VIRCO doesn’t dogfood back at HQ. After I graduate, I’m going to Samir a 9000 Classic Tablet Arm with power tools.

  115. Sneaking Some 2-Hearted Ale With a Straw

  116. Blowing kisses

  117. The menu is not the meal.

  118. The menu is not the meal.

  119. @sdwilkerson Brasserie Beck is now on the to-do list. It’ll be great knowing so many faces from @charmsec, looks like most are going.

  120. Shmoocon barcode printed. See you at The Wardman, Harry’s, Murphy’s, Tono sushi, Pizza Paradiso, Brickskellar, and etc in February!

  121. @gattaca I found the link and got a ticket at the bottom the same way I won 7 rounds of rochambeau at ShmooCon '07: sheer luck.

  122. I just reserved my @shmoocon ticket. Liking the process.

  123. Watching Jimmy Swaggart explore The Truth instead of going to church this morning. $150 bibles! full of Truth! Give them for Christmas!

  124. The Nuggitz - Stales From The Crypt: http://j.mp/4lXxwe

  125. The barber at Super Hot Cuts in Reisterstown remarked more than once about the cowlicks on my head, never mentioned the GIANT SCAR. Love it.

  126. Tom Waits. Brawlers. Loud.

    About to walk to Cinghale w/ @vurtyou and a few solos of stout.

    Need a boom box so that I can take Tom w/ us.

  127. What is your favorite Windows-Server-2008-compatible event-log-to-remote-syslog-daemon service? #kickme

  128. What is the typically prescribed penance for recommending ESR to someone? Six XP installs and an Act of OSX Repair Permissions?

  129. .@ssoper I haven’t seen a good Open Source is a Religion, not a Solution rant since the late 90s. Someone buy @chriswilsondc ESR’s tCatB.

  130. On a boat -> “@djcheeba check this mix from DJ Moneyshot… nautical theme for the DOP show on friday! Skills! http://j.mp/3v2qL3

  131. This machine adopts memes second wave, champions them, becomes disillusioned, then resents people still following them.”

    • Woody Guthrie
  132. On a boat -> “@djcheeba check this mix from DJ Moneyshot… nautical theme for the DOP show on friday! Skills! http://j.mp/3v2qL3

  133. Y’know?’ is best abused by Apollo astronauts. Duke: “The doc said my heart rate was 144 at lift-off. John’s was 70.” https://www.imdb.com/title/tt0925248/

  134. Y’know?’ is best abused by Apollo astronauts. Duke: “The doc said my heart rate was 144 at lift-off. John’s was 70.” https://www.imdb.com/title/tt0925248/

  135. Anyone going to the Snoop, Method Man, Redman and Devin the Dude show tomorrow in B’more? Is it sold out? I’d skip class to go.

  136. @codinghorror I never considered needing an EICAR/GTUBE equivalent for credit card numbers, looks like there are a few http://j.mp/2wSk1B

  137. @aaronbarnett “…like the expletives that are complicating your search for God.” http://bit.ly/1FGs7V

  138. The use of emoticons http://j.mp/24j8Ma on Gerty in Moon is brilliant ☺. https://www.imdb.com/title/tt1182345/ Among film’s biblical names, is his from Hamlet?

  139. Primer: The Perils and Paradoxes of Restricted Time Travel
    Narration. Fabula vs. Syuzhet: https://www.nobleworld.biz/images/Gendler.pdf (pdf)

  140. There’s only one guy in a Star Trek (Spock, TOS, go figure) necktie at this NIST workshop. I demand a full refund.

  141. Marshall Abrams SHALL have the extraordinary ability to stay engaging while effectively discussing NIST SP 800-53 for over 60 minutes. Check

  142. Scientists propose frantic powerpoint slide transcribers, leatherette notepads, business card swapers, to power meetings of the future.

  143. Thieves broke into the house across the street last night. The one for sale. The one that has been entirely empty for years. So it goes.

  144. Thieves broke into the house across the street last night. The one for sale. The one that has been entirely empty for years. So it goes.

  145. If I worked HCI for an app (hire me, please), my goal would be to write myself out of a job with magic, not to produce meaningful errors.

  146. @wrayjustin and I’m guilty. But when I paste 20k items into a field and it says “ERROR” it’s a piece of shit, not a :%s/\n/, /g opportunity.

  147. @wrayjustin I’m convinced that modern unix types are in love with solving small problems with small tools. It’s navel-gazing.

  148. Just told an analyst that the ability to rapidly convert line feeds to arbitrary delimiters is a life skill. Help, need to get out more.

  149. I was born just past the “Who Shot J.R.?” ring. http://j.mp/1eTjBd My parents are at the I Love Lucy ring. My grandparents are off the map.

  150. Previous link to scale, thanks Will. Why did Contact get it so wrong? >@will_torres @grantstavely Reminds me of this: http://bit.ly/6xWJG

  151. I forgot how amazing this was (forgiving the wildly inaccurate visual vs. radio scale) > @iA Intro to “Contact”: https://www.youtube.com/watch?v=kNAUR7NQCLA&feature=player_embedded

    Contact IntroGreat clip from the movie Contact wich gives us a glimpse of where we actually live.YouTube
  152. I was born just past the “Who Shot J.R.?” ring. http://j.mp/1eTjBd My parents are at the I Love Lucy ring. My grandparents are off the map.

  153. Previous link to scale, thanks Will. Why did Contact get it so wrong? >@will_torres @grantstavely Reminds me of this: http://bit.ly/6xWJG

  154. I forgot how amazing this was (forgiving the wildly inaccurate visual vs. radio scale) > @iA Intro to “Contact”: https://www.youtube.com/watch?v=kNAUR7NQCLA&feature=player_embedded

    Contact IntroGreat clip from the movie Contact wich gives us a glimpse of where we actually live.YouTube
  155. @oneeyedcarmen I’m dragging the usual suspects plus two to @dojocon, is anyone putting together plans for Friday evening yet?

  156. Oh, you like to let your software updates bake in at less important customers for 6 months? Can I talk to someone not in sales?

  157. @oneeyedcarmen @electricfork I ‘gave’ all my shmooballs to my cats at about 30 mph. They start too much of an arms race for the office.

  158. .@SpaceManAndy sure, for a spacer. NASA should have control subjects with them to validate that kind of claim. I’d volunteer.

  159. @SpaceManAndy “Returning to Terra Firma is like: A) walking after skating B) Jumping off a trampoline C) A total bummer D) All of the above”

  160. The same parallels could be drawn between [chem|mech|civ] Engineering courses and Ethics chapters vs Systems Architecture glossary entries.

  161. In my Accounting class, fraud discussion constitutes most of chapter 5. In my Systems Architecture class, security isn’t in the glossary.

  162. The same parallels could be drawn between [chem|mech|civ] Engineering courses and Ethics chapters vs Systems Architecture glossary entries.

  163. In my Accounting class, fraud discussion constitutes most of chapter 5. In my Systems Architecture class, security isn’t in the glossary.

  164. @marcusjcarey I’ma start calling you Holden Caulfield.

  165. Apparently @Scheierblog has a slightly larger readership than mine. http://j.mp/iOfil

  166. @ilya_burdman: “Come on, you guys would tell me if I pissed you off right? Ok, well I know @grantstavely would. But the rest of you?”

  167. @gattaca apathy is the new privacy, but my resume and house listings (were I selling) are things I’d want to be easily discoverable

  168. @grecs CharmSec 18 isn’t until the 29th

  169. Get Down Make Love ♫ makes me regret not keeping a Strat and Pignose at my desk at work.

  170. FIRST PULL UP ☝ THEN PULL DOWN ☟

  171. The biggest thing I miss about consulting is completing audit engagements thinking I made the world a better place w/ a deliverable.

  172. Forgot my wedding ring at the house this morning. Remembered to complain about school on twitter. Priorities!

  173. What video output device is used on most computers and tvs?” (The answer is ‘CRT’ for those of you not in college, he replied smugly)

  174. @shrdlu relevant Ron Paulism: “The ADA should have never been passed… it is an intrusion into private property rights.” http://j.mp/1aif7o

  175. There is a toy with dead batteries surreally looping Fur Elise somewhere (a trashcan?) in my alley. The pitches are all winding-down wrong.

  176. There is a toy with dead batteries surreally looping Fur Elise somewhere (a trashcan?) in my alley. The pitches are all winding-down wrong.

  177. Hober Mallow trading as I fell asleep, The Mule whining when I awoke. http://j.mp/QaoKg

  178. Thanks @charmsec and @slaintepub for the Guinness spoon – made a Black and Tan w/ 60 minute IPA and home brew stout. Yum. (it didn’t layer)

  179. Thanks @charmsec and @slaintepub for the Guinness spoon – made a Black and Tan w/ 60 minute IPA and home brew stout. Yum. (it didn’t layer)

  180. @CrucialCarl buy in bulk, it isn’t perishable and you don’t teetotal. Packaged goods stores in the city are open Sundays. http://j.mp/45rrbj

  181. Real life needs more L cuts, dolly zooms, and more bombing cities with foot long hotdogs from helicopters, then eaten. (https://www.imdb.com/title/tt0303348/)

  182. Real life needs more L cuts, dolly zooms, and more bombing cities with foot long hotdogs from helicopters, then eaten. (https://www.imdb.com/title/tt0303348/)

  183. The women cheering at passing marathoners out front are actually praising my work on this term paper.

    Woo!

    Way to go guy!

  184. @dionthegod mystery is ¾ exposition, ¼ vicarious crime & punishment. Better pictures and strings (The Wire) than bad dialog (Law & Order).

  185. Now, I’ve got to give an INTERESTING old lady a manicure, but I’ll be back before you’re done.

    (la lala la lah)

    dynamite explodes

  186. I’m inviting the industrial designer of my 90s era digital thermostat over for dinner. What kind of stew should I make of his/her children?

  187. Coffee’s for closers.

  188. Coffee’s for closers.

  189. Prisoner’s Dilemma sales: “I’m in on travel to see one of your competitors, but I don’t want you to miss this great opportunity!”

  190. If an app is signed in a way that includes LSUIPresentationMode, changes invalidate the signature. http://j.mp/iFrVp

    codesign -vvv sad.app

  191. Keychain returned: -25293”.

    I’m breaking app signing, so their keychain access is breaking. How to resolve?

  192. Why does LSUIPresentationMode (via @eternalstorms’s PresentYourApps, ♥) intermittently break? Keychain? Mail, @adium accounts fail login.

  193. If an app is signed in a way that includes LSUIPresentationMode, changes invalidate the signature. http://j.mp/iFrVp codesign -vvv sad.app

  194. Keychain returned: -25293”. I’m breaking app signing, so their keychain access is breaking. How to resolve?

  195. Why does LSUIPresentationMode (via @eternalstorms’s PresentYourApps, ♥) intermittently break? Keychain? Mail, @adium accounts fail login.

  196. YAY. >@tqbf There is now @ebertchicago. THAT IS ALL.

  197. YAY. >@tqbf There is now @ebertchicago. THAT IS ALL.

  198. Every list of password tips should have a 0th entry apologizing for how terrible it is that we have to rely on passwords to use these things

  199. Every list of password tips should have a 0th entry apologizing for how terrible it is that we have to rely on passwords to use these things

  200. .@thnetos’s nsm-console (http://j.mp/ee5oT) looks awesome, looking forward to playing with it, (and maybe porting http://j.mp/1RMacm to it)

  201. Is @adium’s name server suffering an attack or just moving? I’m getting ID mismatches and/or no response. http://74.63.12.192/ is sketchy.

  202. SIC TRANSIT GLORIA MUNDI

  203. .@Adium’s facebook captcha UI is so un-adium I had to check the source code. http://j.mp/2cAWk Upgrading to 1.4: http://j.mp/1eH5WL

  204. and thus (the work) cannot be performed since one cannot perform that which does not exist”

    – Schoenberg, re: Verklärte Nacht, Op. 4

  205. That you continue to call level one folks ‘monkeys’ is a tell.

  206. The week C-levels ask for bug’s-eye-views of IR metrics is always the week the incidents and investigations have funny, inappropriate names.

  207. They got back together for another tour. it was crazy to see them live last night, i never thought i would get the chacnce

  208. I don’t get it.

  209. Dr. @alexhutton, Dr. @hypatiadocta, welcome to Jurassic Park: <meta name=“GENERATOR” content="Mozilla/4.76 [en] (Windows NT 5…

  210. I don’t get it.

  211. @dionthegod @danphilpott I’ll be at @dojosec. @philip_daigle will be there. I haven’t heard from anyone else.

  212. Dr. @alexhutton, Dr. @hypatiadocta, welcome to Jurassic Park: <meta name=“GENERATOR” content="Mozilla/4.76 [en] (Windows NT 5…

  213. @frednecksec @CrucialCarl The obscurity argument is boring, it just doesn’t reduce risk enough to bother. Port knock or VPN instead?

  214. @mcsweeneys A Literal-Minded Corporate Executive Gives the Opening Address at his Company’s Sales Conference: http://j.mp/WcPgb

  215. The 1975 Signet paperback of Harlan Ellison’s ‘Dangerous Visions’ collection I ordered last week for $5 just arrived. It smells amazing.

  216. >@mcsweeneys A Literal-Minded Corporate Executive Gives the Opening Address at his Company’s Sales Conference: http://j.mp/WcPgb

  217. @stevewerby it’s the new /part, /nick, /join in moderated channels. Block them and it all goes away, until they come back with another name.

  218. @danphilpott great paper. 550 code error leaks are nasty, breaking SMTP is nastier. Outsource the MX and ignore RFCs on MTA 550s.

  219. and the new Kid Koala release he’s touring, The Slew, is a free download: http://j.mp/Be054 I’ll definitely be at the Silver Spring set.

  220. Kid Koala: Six Turntables Meets the Ex-Wolfmother Rhythm Section. Silver Spring – Oct. 16 at the Gallery in Silver Spring. http://j.mp/QoH9d

  221. @SpaceManAndy turn ‘show hidden characters’ off. http://j.mp/5Lgrz

  222. @electricfork I see a colored Joy Division album, a sweet drop shadow, poor axis labels, unexplained 20s fading, weird 90s gaps, no context

  223. So a well-heeled life coach, a lifestyle products party magnate, a homeopathy advocate MBE, and a wealthy feng shui consultant walk into a–

  224. @linuxgeek247 oops, just realized I forgot the o-scope. It is apparently your albatross. Bring it to @dojosec?

  225. Set aside an hour to watch @tqbf, @miketracy, and @nate_mcfeters’s talk, ‘Indie Software Security: A ~12 Step Program’ http://j.mp/y5WRm

  226. @jjthomas, of course not silly, it isn’t out yet!

    (@mikenealis you sure ‘booted’ that one!)

  227. I’m pouring wine at the Canton Wine and Jazz thing 3:30 to 7:30, then hosting a Windows 7 house party at my place. Stop by either.

  228. #7: You a Yankee fan?
    #5: No, Baltimore.
    #7: Baltimore? That’s like being hit in the head with a crow bar once a day.

    – 12 Angry Men

  229. #7: You a Yankee fan? #5: No, Baltimore. #7: Baltimore? That’s like being hit in the head with a crow bar once a day. – 12 Angry Men

  230. There are few things more tiresome than listening to geeks verbally fuzz forensics laws with juris doctorates as if laws were protocol RFCs.

  231. @censey @omniweb for life. Nothing compares.

  232. trst.us

    Over the summer two friends and I brainstormed some ideas for a value-add URL
    shortener. I know, I know.

    It was going to do a bunch of security checks against URLs it was asked to
    shorten, and when Chris had the original idea, nobody
    else was doing anything like it. Aaron quickly scraped
    together something that could shorten urls, and 301 them when they came in,
    and call out to various security checks along the way. Meanwhile we wiki’d
    together a huge list of features we wanted. Features current url shorteners
    still lack.

    We kinda lacked a revenue model though, or time to work on the project, or
    funding.

    Oh well.

    I did make a logo for it, with Chris’s help.

    trst.us
    Figure 1. trst.us.

    I think doing it again I’d leave off the entire ‘us’ bit in the logo, it
    throws the balance too much.

  233. Hi, Dad, it’s me, I wired it wrong.”

    “It’s probably just the safety switch on the door, put the door back on.”

    “Oh, right. Thanks.”

  234. @oneeyedcarmen if you ever see me dancing with @philip_daigle, take my keys.

  235. I can’t stop watching Windows 7 House Party videos. Why did they edit out the dance-offs!?! http://j.mp/3fyLeI (stay for 1:20)

  236. My Day

    • HVAC inside fan motor died, I can fix it myself
    • The officer ticketed me at only 29 MPH over
    • @CharmSec tonight!

  237. @dionthegod I see GETS like that in the wild all the time, nice to see I’m not completely foolish for not figuring out what the strings are

  238. @electricfork I think @censey was looking for the Melville (played by Bob Uecker) character. I haven’t read far enough to say yet.

  239. Taylor reads Moby Dick for Lynn, the Indians are the Pequod, pitching is harpooning, Cleveland is Nantucket, Mrs. Phelps is is the…

  240. I shouldn’t have watched Major League before reading Moby Dick. I Can’t un-see it.

    Queequeg is Cerrano.

    Yojo is Jobu.

    Ishmael is Vaughn?

  241. @dionthegod nice! If I had more time I’d ping my step-dad @LieutenantBill for stuff but he’s over an hour drive away. http://j.mp/bGSW1

  242. This should be interesting: >@dionthegod @charmsec I’ll be there – Anyone coming to charmsec have locks and picks (and know-how)?

  243. @dionthegod http://deviating.net/lockpicking and a lot of patience. I don’t know anyone with bump picks, spare lock sets, etc. Would be fun!

    Lockpicking and Access Control - by Deviant Ollamdeviating.net
  244. @censey I buy concert tickets last.fm tells me about, because it knows what I like (http://j.mp/QGKd3). Facebook and twitter, not so much.

  245. My assertion: Discoverable, simple guest wifi socially engineers guests away from wired corporate networks. (NB, not a control) T/F?

  246. This should be interesting: >@dionthegod @charmsec I’ll be there – Anyone coming to charmsec have locks and picks (and know-how)?

  247. Malware kit devs, clean up your UX, your default values are leaking. re: “Your Image File Name Here without a path” http://j.mp/3SOI4a

  248. @danphilpott managerial finance, financial econometrics, frustrated anarcho-syndics, anarcho-capitalists, and executives.

  249. @oneeyedcarmen are das boots take-home? What’s on them? I mIght stop by, I need a way to drink a six pack without the hassle of refilling.

  250. Experiment: Play Steven Reich’s Music for 18 Musicians for three cats, one man.

    Hypothesis: ¾ subjects to maintain blunted affect, stripes.

  251. Trying Mekong Delta for lunch at noon. It’s been too long since I’ve seen the bottom of a bowl of Phở bò tái. http://j.mp/159ivy

  252. Enjoying a STROH 80 (Austrian 160 proof rum) & Mexican Coca-cola after a Mt. bike ride. Tastes like butterscotch and Chuck Taylor hi-tops.

  253. Neat. Network fs locks don’t impact interactivity, system feels fine: up 683 days, 18:39, 2 users, load average: 1012.70, 628.23, 508.93

  254. What I expect inside inside files with underscores in the name instead of spaces...

    Dear Grant: If my calculations are correct, you will receive this file
    immediately after you saw the DeLorean struck by lightning. First, let me
    assure you that I’m allive and well. I’ve been living happily these past eight
    months in the year 1995…

    Great Scott! 1995!

  255. Since I started attending @DojoSec, I last longer, my teeth are whiter, and it’s made in Germany. You know the Germans make good stuff.

  256. Internet Detective work is a social faux pas, but we had to find out why Phơ Hương Mới closed: not enough business.

    http://j.mp/1S7IEO

  257. Watching the socratic method break down in undergrad night classes contains NO quinine.

  258. Watching the socratic method break down in undergrad night classes contains NO quinine.

  259. ¹ Developer Wings™ are made of tar and feather. Buy a set today! Use as directed.

  260. Every time a multi-step navigation process is sent instead of a hot link because the web app can’t hot link, a developer gets his wings¹.

  261. For complete messages, run ’

  262. I’m all faklempt. Talk amongst yourselves, I’ll give you a topic:

    SELinux is neither Security nor is it Enhanced. Discuss.

  263. Jean shorts aren’t bought, they’re earned.

  264. Packing for @electricfork’s 30th & Oktoberfest

    • Soft pretzels, from scratch
    • Camera
    • Growlers, 2-♥'d Batch home brew
    • 8oz NC Moonshine

  265. The kids, little India Pale Ale and baby Stout are all tucked in (IPA kegged, Stout burping primary).

    IPA made a mess in his fermenter ☹

  266. Man, I don’t need that shit, I’m high on a cold. I’ve been dizzy for days with very little paranoia, no cravings, and hey, it’s natural! ✌

  267. Man, I don’t need that shit, I’m high on a cold. I’ve been dizzy for days with very little paranoia, no cravings, and hey, it’s natural! ✌

  268. Kick ass. (neat Wire cameo too!) >@djcheeba Video mix is now online http://www.ninjatune.net/solidsteel http://www.vimeo.com/6489862

  269. @IBMFedCyber "Or, imagine, being able to be magically whisked away to… Delaware.

    Hi. I’m in Delaware."

  270. Kick ass. (neat Wire cameo too!) >@djcheeba Video mix is now online
    http://www.ninjatune.net/solidsteel
    http://www.vimeo.com/6489862

  271. I thought CSPAN was doing an Orson Wellesish radio drama. Eerie lack of ✈ in the sky that night as @vurtyou gave blood a the + station. ✌

  272. I’m brewing a stout batch so that I can feel like I’ve accomplished /something/ on my second day home sick, but I can’t smell a damn thing.

  273. @linuxgeek247 I’m going to guess you just added tab autocomplete to your ircish twitter client? Gimme ops.

  274. @linuxgeek247 ditto – I’m not into any particular OSs (or licenses) enough, but the presentations are usually quality.

  275. @ddeighton I keep forgetting about CALUG, joining their oops. hold on, gotta take this “YEAH, HELLO? YEAH, RUBBISH, YEAH” mailman list.

  276. School-night cocktails 101

    THE DIRTY TONIC

    Pile olives in a rocks glass, top with ice, brim with tonic water. Wink at closed Gin bottle.

  277. I’m so happy when you are near me / I’m so sad when you’re away ♫

    http://www.shaggs.com/album_potw.html

    My Pal Foot-Foot: _Philosophy of the World_ infoshaggs.com
  278. Which are skipped more? Intro skits, Ringo, Daltry, Roger Taylor, or Roger Waters tunes, Stones albums, post-Clash Strummer bands, or Rush?

  279. @alexhutton The Dan. Too many discount them as disco.

    Nobody disrespects Moon’s drumming, Townshend’s windmill, or Daltry’s uh, stuttering.

  280. I just upgraded to @textpattern 4.2. http://j.mp/4UwxX

  281. Red teaming with EICAR

    Testing antivirus software with EICAR[^eicar] deletions one virus at a time is effective but one dimensional. Successful deletion of a single EICAR string validates antivirus software for a given system, in a given directory, at the rate of one virus per unit of time. But single EICAR string deletions do nothing to stress secondary system alerting capabilities, validate rate limiting rules, enumerate directory level exclusions, validate reactive policy changes, and so on.

    That later group all seem like fun, useful-to-have validation capabilities, so with them in mind, I wrote eicar based malware for a red team drill, leveraging EICAR to enumerate directory level antivirus exclusions.

    The attack I wrote for the drill skipped system compromise.

    The components of this attack were designed to replicate real world attacker techniques, while avoiding real world obfuscation techniques that would turn this drill into a receive alert & down the host drill.

    A few simple subroutines

    1. DNS command and control – Every few minutes, interrogate a public internet DNS server for an A record. This hostname was under my control, and returned a resource record pointing to 127.0.0.1. If this changes to anything else, proceed to…
    2. EICAR antivirus directory level exclusion enumeration – start at the root of C:\ and interrogate every listing found. If it is a directory, drop an EICAR file in it. Immediately interrogate the EICAR file. If it still exists, push the directory name into the findings array.
    3. After enumerating all of the directory level exclusions, choose one at random and download more reconnaissance tools from internet servers.

    Why drill like this?

    Each subroutine increases the time-to-response requirements. The DNS subroutine could run for days, the EICAR test will interrogate a full system in minutes, tools can be downloaded in seconds.

    Each subroutine highlights disparate detection technologies, placement, logging, and so on. EICAR throws incident responder assumptions because it is very much an infrastructure testing tool and not malware.

    spray-eicar

    I’ve ripped out all the command and control and tool downloads. Sorry, it was rubbish anyway and you can do better.

    But you can have the perl that can be compiled with perl2exe sort of tools, I’ve posted it on github as spray-eicar.

    Weaponizing EICAR?

    OK, maybe it isn’t actually weaponizing EICAR. What else could be done with this trick?

    • Enumerate file level antivirus exclusions: Find .exe file -> determine if it is an active process -> move it to $filename.bak -> drop EICAR -> undo.
    • DDOS secondary alerting systems: Execute spray-eicar enterprise wide on all desktops. Ouch. Can your antivirus product whitelist EICAR even if you want it to?
    • Stop at the first finding. Pull and run tools. Obviously.
    • Stop at the first subroutine and then propagate to enumerate policy homogeneity.

    And so on.

  282. Mt. Dew GAME FUEL tastes like wine cooler & looks like an Idiocracy commercial. I pine for the 70s sugar water logos & hillbilly reputation.

  283. ./spray-eicar.pl -h
    Udage: spray-eicar.pl [-vd] [-p path] [-f file]
    Enumerate directory level antivirus exclusions.

    http://is.gd/2TcYY

  284. Pay no attention to @philip_daigle, we purposely trained him wrong… as a joke.

  285. I can’t get over how solid @apollosuns’s “Shall Noise Upon” is, straight through. Brilliant.

  286. I can’t get over how solid @apollosuns’s “Shall Noise Upon” is, straight through. Brilliant.

  287. Really dug the Ade CD you guys picked up for me. I didn’t expect it to be so experimental. Not sure why - I had it in my head that the trio would be more “Bears-y.” At any rate, I really liked it. Sounded somewhere between recent Crim & the ProjeKcts with a lot of looping thrown in. Thanks again!!!

  288. ¹ In better tellings of Chicken Little, Foxy Woxy eats Chicken Little and his entire the-sky-is-falling posse. Acorns, dummy. Acorns.

  289. Knocking on the door says “I’m here, let’s go”.

    Honking from the car says “WAKE UP EVERYBODY! WAKE UP! THE SKY IS FALLING! WE GOTTA GO!” ¹

  290. @zrlram check out Munin, it trivial to install and extend; any number you can compute on the shell can be graphed. http://is.gd/2M6XF

  291. @jjthomas @censey Uh-oh, I’m both an unabashed hater hater AND hater hater hater. Oh, the self-loathing.

  292. Don’t hesitate? Feel free? If I have any questions? More than happy, eh?

    I won’t, I always do, I don’t, and gee whiz that’s swell.

  293. At the Adrian Belew Trio show in Annapolis, 20 feet from the stage. Holycrapsoexcitedfapfapfap

  294. I cringe when the syllabus reads like a rock star rider. No cheating, OK. No laptops in class? Cell phone ring tone rules? Are we not men?

  295. Oh, I am serious. Look, this is my serious face.

  296. .@REGISTER_COM, renewal and transfer depts. talk much?, I shouldn’t have to renew a domain w/ you to transfer it away, before it expires.

  297. Rattle-can black revitalizes old veneer speakers, blueish-purple rubber bins, jeans, patios, fingertips, thumbs, and lungs. Use as directed.

  298. @electricfork You know what ol’ Jack Burton always says…

  299. Fact: Any modal jazz tunes with synonyms for gypsy or the name of a non-U.S. city in the title will be above average.

  300. Ha, @vurtyou is living the tabs vs. spaces nightmare over an MS Word letter the Army is sending to the government. Not just for coders!

  301. Dear Register,

    I have found a registrar that I think the world of. He’s younger, and a hard upseller, but he undersells you by 75%.

    Bye.

  302. I’m excited about @CharmSec tonight; lots of first-timers to meet. We’ll be at Max’s early (~6:30) for pint night glasses, then Sláinte by 7

  303. @censey the unibody MacBook seems unscathed - my knuckles took the fall on that hand. https://farm1.static.flickr.com/37/105254454_86bd834b85.jpg /bicycle/staircase/gi

  304. I smashed a pint glass in my fist last night, protecting my macbook pro from the same fate while tripping up stairs. I’m stigmatic.

  305. Fresh corny kegs of @DogfishBeer 60 minute IPA always have an interesting flavor that mellows out after a few pints; yeast? Carb process?

  306. Don Norman - “When Security Gets in the Way”. Usability is /the/ elephant in the room. Hard problems. http://is.gd/2x9DG

  307. @aaronbarnett Do those glasses make everything look like it’s under construction, and thus make you forgiving of faults? I want a pair.

  308. @electricfork Feynman “on why”: very good an understatement, ♥d it. I was more digging his difficulty answering questions as posed initially

  309. Fresh corny kegs of @DogfishBeer 60 minute IPA always have an interesting flavor that mellows out after a few pints; yeast? Carb process?

  310. Don Norman - “When Security Gets in the Way”. Usability is /the/ elephant in the room. Hard problems. http://is.gd/2x9DG

  311. Going to TechnoForensics? Sneak over to the NIST Museum, it is just around corner and down the hall. http://is.gd/2wUeg

  312. @marcusjcarey Director of Innovation: nice title.

  313. 24h Simplepedia stats: 160 users read 191 articles in 12 languages.

    August: 2589 users, 3908 arcticles, 27 languages.

    http://is.gd/2wrxk

    Dance Partyis.gd
  314. ITunes should lemme tag what side of an album a given track was on on the original album or tape or whatever. I’m in a flipside mood.

  315. or, did you actually want to talk about DNS kiting, iframes, botnets, vulnerabilities, local admins, etc.?

    What’s DNS, you say?

  316. E.g. We spent $x because criminals in their continued gaming of our tit-for-tat altruism selfishly repurposed your information system.

  317. @oneeyedcarmen stop, you’ll become my dad, spontaneously grow a mustache and get a buzz cut. Blublockers are slippery slopes.

  318. Vendor just had a fire alarm during our support call. I need that .wav file, brilliant. GO×TTA G×O, SORR×Y. NO, YE×AH, WE’R×E EV×ACUA×TING!

  319. FML >@sobojosie: JFX NB remains closed…I feel bad for all my tweeps stuck in the gridlock (crash with fuel spill was EARLY this morning)

  320. @vurtyou see if they’ll let you run a tab.

  321. @dionthegod J Roddy Walston and the Business was great! The new material is interesting, hopefully the A&R/VPs present felt the same way.

  322. FML >@sobojosie: JFX NB remains closed…I feel bad for all my tweeps stuck in the gridlock (crash with fuel spill was EARLY this morning)

  323. Look, I’m going to ignore your arbitrary capability limitations & try to turn whatever you made into a hammer anyway, just give me a hammer.

  324. It’s twoo! It’s twoo! (going) >@BaltSunArts Few Baltimore bands rock quite as hard as J-Roddy Walston & the Business http://bit.ly/DSQMV

  325. It’s twoo! It’s twoo! (going) >@BaltSunArts Few Baltimore bands rock quite as hard as J-Roddy Walston & the Business http://bit.ly/DSQMV

  326. @shrdlu PGP Desktop → Left tabs → PGP Messaging, bottom right, Edit Policies; stay in that sandbox, ignore Outlook 2007 & bang head on desk

  327. For sale: baby shoes, never worn.

  328. Les Paul: Now don’t say it that way, that’s our stock and trade, the Les Paulverizer.
    Mary: Yes, but we’ve got to eat you know.

  329. Now that I’ve stopped subvocalizing security events as I read them I get impatient, grumpy, and depressed even earlier in the morning.

  330. Mr. Sandwich was murdered by me, in the lunch sack, with a 12 ounce can of Sunkist. #lunchClue

  331. Brewed a final Batch! Pale tonight (for a while) w/ magnum, fuggles, cascade, and centennial aroma hops. Stout recipe hunting for next time.

  332. Brewed a final Batch! Pale tonight (for a while) w/ magnum, fuggles, cascade, and centennial aroma hops. Stout recipe hunting for next time.

  333. How much do you redact information shared with LEOs?

    • none, I’m a Aries/Sagittarius
    • black fax
    • ●org●●●info●●●
    • BEGIN PGP
    • Don’t share

  334. #Baltimore, I have an extra ticket to see Clutch at Sonar tomorrow night – for sale for $20. http://is.gd/26VrR

  335. Rebuilding our Incident Handling DB+forms one pixel at a time, this wheel I’ve invented sure is rounder than the old one! http://is.gd/26T4j

  336. Commuting to work doesn’t.

  337. Administrator and root RDP & SSH ‘lost connection’ errors : remote system reboots :: Helios running west in fear : the sun rising

  338. If you what to listen for, you can hear “oh well, fuck it, who cares” precede the phrase “we’ll use VNC”.

  339. Wheels @ BWI, lovely Cfa moderate climate, & humidity, want to kiss the ground. G Mark & SFire goons were on my flight. 60 min keg, cya soon

  340. Wheels @ BWI, lovely Cfa moderate climate, & humidity, want to kiss the ground. G Mark & SFire goons were on my flight. 60 min keg, cya soon

  341. Check the WarVOX project and slides from @hdmoore, great graphics, small multiples, gnuplot freq. analysis, etc. And Pat Fleet

  342. @George_Saylor I didn’t learn anything, some stuff misrepresented, valid concerns, but awfully vague and short

  343. In the Turbo track for Tony Flick’s upcoming Hacking The Smart Grid talk, of course, and playing Spot The Energy Sector Security Analyst

  344. Las Vegas says WE HAVE NO GOOD BEER in 72 point Trajan (and thinks Trajan is classy)

  345. @George_Saylor en route to M. Bay for sushi right now, coming back to check out the pool party at the Riv after. You? Welcome to join

  346. The line for Kaminsky’s talk is almost as long as the badge lines were. Leaving for sushi immediately after, then pool party

  347. Las Vegas says WE HAVE NO GOOD BEER in 72 point Trajan (and thinks Trajan is classy)

  348. The line for Kaminsky’s talk is almost as long as the badge lines were. Leaving for sushi immediately after, then pool party

  349. .@vurtyou a few folks got owned (or is it rm’d now?) at the Wardman’s ATMs at Shmoo this year. ATM trust is transitive to the environment

  350. Up and rested for Friday at defcon, must find myself coffee and something called ‘breakfast food’ for @vurtyou at or near the Riv

  351. @cyberhiker tonight at the Riv 9-4, $30 per

  352. @cyberhiker I absent-mindedly just left Caesar’s without stopping into see the SecTwits. Going to the EFF fund raiser?

  353. @George_Saylor definitely up for that, we have no firm plans

  354. In Las Vegas for defcon, waiting for a gate to free up to deplane & still feeling last night’s @CharmSec. Staying at the Riv with @vurtyou

  355. @oneeyedcarmen @censey I expect the usual @charmsec folks, and it looks like thunderstorms are a sure thing tonight, so I might be on time

  356. @bkdelong I land early Thursday, first time to DEFCON and Las Vegas, and bringing @vurtyou along for the fun.

  357. To: $TEAM CC: $USER <- Should not be cc’d Subject: FWD: Analysis FWD: Alert 5 demerits for $USER. Nastygram his boss please. $ANALYSIS

  358. @dwplanit
    • if the statements complete introductory clause
    • are free standing sentences
    • a judgement call
    • Usually: Maybe

    • Natch
  359. To: $TEAM
    CC: $USER <- Should not be cc’d
    Subject: FWD: Analysis FWD: Alert
    5 demerits for $USER. Nastygram his boss please.
    $ANALYSIS

  360. I’ll be late and sandier than usual at @CharmSec tomorrow: beach volleyball at Rash Field from 6 to 8:15. https://www.panoramio.com/ Sorry!

    Panoramio is no longer available panoramio.com
  361. RT @justin_fenton Stay inside, East Baltimoreans: 9 people have been shot in the past 90 minutes, about a mile apart

  362. RT @justin_fenton Stay inside, East Baltimoreans: 9 people have been shot in the past 90 minutes, about a mile apart

  363. Enlightenment -> @shrdlu: New bloggage: Nao and Zen: Security Koans for Everybody. http://layer8.itsecuritygeek.com/layer8/nao-and-zen-security-koans-for-everybody/

  364. Ode to the Small Lump of Failed Backup Jobs Over the Last Six Months I Found This Midsummer Morning: To Thee I Cron, Shared Key, Rsnapshot!

  365. Enlightenment -> @shrdlu: New bloggage: Nao and Zen: Security Koans for Everybody. http://layer8.itsecuritygeek.com/layer8/nao-and-zen-security-koans-for-everybody/

  366. @AmyWoo Blue Hill Tavern: Adams Morgany, LOUD, excellent bartending, great food, beautiful space, weird walled balcony, no wait, high hopes

  367. Why can’t I resist adding “Beep.” to scripted mail alert templates and robots.txt files and other bot auto-responses?

    Beep.

  368. I have an open security analyst position on my small nsm/csirt/forensics team in Baltimore. Contact me. http://is.gd/1Jdja

  369. FRT @DataLossDB http://bit.ly/16yniy
    HSBC Actuaries - HSBC Actuaries used a floppy disk in 2009

  370. .@ddeighton any sufficiently advanced field of inquiry is indistinguishable from abstract collections of jargon https://topex.ucsd.edu/es10/lectures/lecture11/lecture11.html

    ES 10 Lecture 11 - Global SeismologyES 10 Lecture 11 - Global Seismologytopex.ucsd.edu
  371. Why have an ASCII pot leaf in your MOTD, or an ASCII skull and crossbones, or ASCII porn, when you can have all three?

  372. Remediate and mitigate are big words often used incorrectly in place of reduce, shift, or accept because they sound fancier to fools.

  373. Esse est percipi. To be is to be perceived.

    Corollary: To be late is to be late. Acknowledgment of perception is not required.

  374. 2 <3’d Ale, back in fermenter for double fermentation. 2 wks cold & pressure knocked particulates out. Tasty now, wonder what’ll happen?

  375. 2 ❤️’d Ale, back in fermenter for double fermentation. 2 wks cold & pressure knocked particulates out. Tasty now, wonder what’ll happen?

  376. I would like to nominate the hacks Wikipedia uses to show soccer team uniform designs for a position in the DSM V. http://is.gd/1GBL7

    Dance Partyis.gd
  377. Excellent use of ‘whom’, incorrect ‘its’, multiple lower case a styles, mixed case, and ‘hot, steamy shit’ on Fait Ave. http://is.gd/1DjbU

  378. I don’t like hate use editing because the ego something something in a boat omg #useless #for #effect .>RT@ (via @grantstavely)

  379. Any bots for localities? Use broken replies to use, so’s I can spam balm’rins that @vurtyou & I are trying Blue Hill, by replying @to-a-bot

  380. I don’t like hate use editing because the ego something something in a boat omg #useless #for #effect .>RT@ (via @grantstavely)

  381. Any bots for localities? Use broken replies to use, so’s I can spam balm’rins that @vurtyou & I are trying Blue Hill, by replying @to-a-bot

  382. I’m taking @vurtyou to Philadelphia this Sunday night to see Reeves Gabrels & His Imaginary Friends at Johnny Brenda’s. Anyone want to join?

  383. Fill what’s empty. Empty what’s full. Script where it itches.

  384. He had the same obsequious manner
    That was the reason I had him killed
    So to calm my nerves I sang this song
    To him, over the phone

  385. Simplepedia can now switch languages on the fly, has a favicon, improved preference handling, and more Helvetica. http://is.gd/1CaaK

    Dance Partyis.gd
  386. @jalvani I am sitting in Pho Hong Moi, in Security Mall, right now. It isn’t in the city but the Pho is excellent! http://myloc.me/aK8b

  387. Http://is.gd/1zLGL > @Will_Torres DJ Cheeba will mix and spin your face off. This guy rules. Check out SolidSteel podcast 82 and 99.

  388. .@Fred0828 the ceteris peribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  389. .@Fred0828 the certeris peribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  390. @stevewerby long > complex passwords given Lanman hasing specifically and rainbow table size generally. Passwords are inhumane, suck, etc

  391. @wrayjustin congrats on witnessing a shuttle launch! I’m very jealous!

  392. Might have to rewind King Megatrip’s Groove-Jitsu mix to replay ♫ Rhythm Heritage’s Theme From S.W.A.T. ♫ one more time https://forumer.com/

    Forums by Forumer - Where forums are done rightThe latest information on personal and commercial forumsForums by Forumer
  393. Http://is.gd/1zLGL > @Will_Torres DJ Cheeba will mix and spin your face off. This guy rules. Check out SolidSteel podcast 82 and 99.

  394. .@Fred0828 the ceteris paribus falsely implied by freedom and championed by social darwinists is the great plight of modern conservatism.

  395. .@bjg oops, thanks! A typo away from credibility, lots of experience away from truth (and just barely above sneaking a typo into this tweet)

  396. .@vurtyou is working on cover letter for plant engineer gig at ice cream factory, help me convince her to add ‘and I really like ice cream’

  397. .@vurtyou is working on cover letter for plant engineer gig at ice cream factory, help me convince her to add ‘and I really like ice cream’

  398. I have an open senior security analyst position on my team in Baltimore. NSM/CSIRT skills required.

  399. A man at the Little Havana bar is reading an ST TNG EU paperback and enjoying a 22 ounce lite beer, alone. Cheers to you sir!

  400. Oh, Antisec. ¶'s 5 and 6 are the zanniest >@wrayjustin RT @rvdh Imageshack is hacked. All images are replaced with this: http://is.gd/1udkU

  401. @stevewerby their glassware is nice too. I’ve only ever had it at Pizza Paradiso’s Georgetown Birreria, and the Brickskellar. Tough find.

  402. .@quine nothing in an Ayinger glass can do you wrong. http://is.gd/1u7Iz

  403. Oh, Antisec. ¶'s 5 and 6 are the zanniest >@wrayjustin RT @rvdh Imageshack is hacked. All images are replaced with this: http://is.gd/1udkU

  404. .@quine nothing in an Ayinger glass can do you wrong. http://is.gd/1u7Iz

  405. The power of chicken noodle soup with cayenne compels you! The power of chicken noodle soup with cayenne compels you!

    blows nose

  406. Explanations relying on analogies, narratives, ignored gaps, and secondhand facts are mental models or at best hypotheses, not truth.

  407. So side effects do happen? I’m on day 2, dose 3 of Alkaseltzer Cold and Sinus and randomly have a bloody nose. Common cold: 1, Science -1.

  408. @cyberhiker = IR with a Wiki = {{{ Tried it, didn’t work for me. The markup is too --cumbersome-- much of a hassle for the value-add. }}}

  409. @censey @oneyedcarmen people know I’m an ASS and I don’t need a cert to prove it. You guys are so paper.

  410. @sckain Dinosaur Jr - Farm. I have a feeling Beyond will be next.

  411. @mikenealis I want a carafe with I’m-empty whistles or bells. Yelling when I find it empty seems to just encourage /them/.

  412. Carving botnet commands out of HTTP 200’s that use Content-Type application/octet-stream instead of text/plain. Guessing it isn’t ‘data’

  413. Every time this rule hits, a web developer should get security training: alert tcp $RFC1918 any -> $INTERNETS $HTTP (content:“&pass”…

  414. A majority of scientists doubt the existence of man made global warming jokes on cold days that aren’t sad cries for science education.

  415. Every time this rule hits, a web developer should get security training: alert tcp $RFC1918 any -> $INTERNETS $HTTP (content:“&pass”…

  416. @ssoper makes great meat grenades. Congrats again on the fallout shelter w/ Moscow hotline. Pour some Aventinus out for Christie tonight.

  417. @dionthegod Try @sckain, he’s a roller derby ref. I hear they meet up at @bad_decisions a lot after games. https://charmcityrollergirls.com/

    charmcityrollergirls.com – Just another WordPress sitecharmcityrollergirls.com
  418. Holy crap @Michael_Jackson is at the Hippo. Hope he does karaoke!

  419. Holy crap @Michael_Jackson is at the Hippo. Hope he does karaoke!

  420. .@AmyWoo historians will mark invention of Excedrin as dawn of a new age. 1960: Excedrin Extra Stregnth formulated. 1969: Moon landing.

  421. A lesson in PsyOps, from @mcsweeneys, Saddam’s Interrogation Logs http://is.gd/1mp39 Master these techniques and something something…

  422. @sxs3200 if you don’t get the President of the Unites States on that phone… You’re going to have to answer to the Coca-Cola Company.

  423. Attempting to resuscitate this Bells Two ❤️’d IPA clone with another shot of ale yeast this evening. Or should I get champagne yeast?

  424. @Ryanatmghwom that link is tainted with Ron Paul voodoo – I wish all three of us understood economics better, /they/ don’t want you to, etc.

  425. Attempting to resuscitate this Bells Two <3’d IPA clone with another shot of ale yeast this evening. Or should I get champagne yeast?

  426. Booo, both of my kegs are kicked and the last homebrew was a disaster! Going flatline! /_/_|.__________

  427. EXT. @ELECTRICFORK CYBER COMMAND - EVENING
    Throngs of black t-shirted villagers are chanting…
    ECU VILLAGER
    You said cyber! You said cyber!

  428. Great url > @mubix DEFCON PreQual CTF walk-through’s posted: http://shallweplayaga.me - Learn a lot, even if you weren’t involved.

  429. Great url > @mubix DEFCON PreQual CTF walk-through’s posted: http://shallweplayaga.me - Learn a lot, even if you weren’t involved.

  430. My slightly tweaked version of dnssnarf, by @linuxgeek247 : http://is.gd/1jsEC Timestamps, more record data, and both queries and responses

  431. Ratio of budget and FTE’s dedicated to availability monitoring NOC, physical security monitoring SOC, and NSMing CSIRT? Ideal? Actual?

  432. .@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!

  433. .@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!

  434. Our DUKW tour of Baltimore yesterday was captained by Captain Crunch. http://is.gd/1i3SI

  435. @MissMktr @AmyWoo Thanks for hosting the #ducks tour, @vurtyou and I had a blast!

  436. Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.

  437. Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.

  438. At the Baltimore Women’s Classic 5K to support @vurtyou from Little Havanah. She runs faster, longer when I’m drinking Mohitos.

  439. CONTAINS QUININE.

  440. CONTAINS QUININE.

  441. Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us

  442. @aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura

  443. Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us

  444. >@aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura

  445. @censey any time that happens, rent a car, boom!, I mean, a 7 or 8 hour drive, you’re a mile high! It’s one of those things, you know?

  446. Max’s has 9 Hitachino beers on tap for pint night, all 7.0% or higher abv, nice take-home half-pint glassware

  447. @shmausen @commonwombat So @vurtyou just talked to BGE: The estimated time to restore of services is ‘by 10PM’.

  448. Heading home for a pint of home brew with @philip_daigle before CharmSec, then Max’s for a pint night glass ~6:30, then CharmSec at Slainte

  449. Excellent semiotic homophone: http://is.gd/1cadJ

    Unrelated: I’m looking for a trap set to goof with.

  450. .@vurtyou I promise not to blast you into space…until such time as I deem it necessary.

  451. Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful

  452. I am Zeldar. I’m from planet Beldar. My leader is Zeldar. And we shop at Wal-mart. https://www.last.fm/music/Devin the Dude/_/Zeldar

  453. Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful

  454. Spirit’s “Fresh Garbage” (1968) is a cover of Tay Zonday’s “Chocolate Rain” (2007). It’s a fact.

  455. I have seen the fnords in this configuration file.

  456. Look, a Unix system monitoring tool! Will the configuration file use mindfuck, lolcode, perl, or a delimited and whitespace-sensitive 4GL?

  457. @bjg there is great money in it, many of those tools are OTS and all C&C is over egress-ACL-likely ports. #thistweetneedsmoreacronyms

  458. .@linuxgeek247 happy to have ya. @philip_daigle promises to have the new blinkenlights sign too.

  459. \m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk

  460. Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump

  461. \m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk

  462. Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump

  463. Gnostic quizes, ineffective cause support, fans of stuff, flash memes: It was the year when they finally immanentized the Eschaton.

  464. What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?

  465. Francis, G: “I’ve got some zero days in the table-top exercise I’m working up for you guys, and some tomorrows too, man.” Yikes! Mommy!

  466. Hey, I found out why there’s a Local Settings directory in Application Data, and an Application Data directory in Local Settings. It’s becau

  467. Cheeva Investigates… The Case of The Missing Records. Solid Steel. 90s-heavy, excellent Friday music. http://mixedbizness.co.uk/cheeba/ (mp3 top right)

    mixedbizness.co.ukThis domain may be for sale!mixedbizness.co.uk
  468. What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?

  469. I wish we hadn’t blasted all the telephone sanitizers off world on B-Ark, my keyboard and mouse are filthy.

  470. Strange that until now I’ve never handled and incident on a machine logging DD/MM/YYYY. Newb.

  471. @censey a bunch of us are heading to Luna Del Sea for drinks, how is parking over by metro?

  472. Heading back to the city and in the mood for a beer. Any takers?

  473. @linuxgeek247 I get back to the city around 8:30, probably too late?

  474. Wow, I feel like an eight year old. I HATE MATH WAAAAAAAAAHHHHHHH!!! tempter-tantrum

  475. @ssoper tried that, it doesn’t work. I am pleased to note that nothing I’ve written since then contained the word. http://is.gd/15nC6

  476. @attritionorg any kids could have done that, if you are going to knock the BSA, try the theism, homophobia, or sculpture https://en.wikipedia.org/wiki/File:Boy_Scout_Monument.jpg

  477. @censey @oneeyedcarmen @linuxgeek247 Changed plans: I’m going to defcon, making travel arrangements now. Hotel preference? Never been to LV.

  478. I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community

  479. @vurtyou really? organic hangover patches? I have a shark repellant to sell you. Buy now and get these magnetic anti-elephant bracelets!

  480. I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community

  481. .@linuxgeek247 whoa! I’ll test this AM. I have some ideas for what to keep of the response using a DOM parser - regex may be too trusting?

  482. Unfortunate url shortener breach @cligs. http://bit.ly/AS6Yp Why disclose the source IP? Also, ironic: http://is.gd/13obQ

  483. The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.

  484. .@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)

  485. The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.

  486. .@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)

  487. .@mubix I use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.

  488. .@mubix I’m use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.

  489. .@electricfork & @will_torres are drafting procedures around Scytale and toilet paper for out-of-band IR messaging. https://en.wikipedia.org/wiki/Scytale Help.

    Scytale - Wikipediaen.wikipedia.org
  490. Didn’t make it the Hilton to put up fliers at SANSFire, relying on twitter and word-of-mouth already seems sufficient for @CharmSec

  491. Expecting a lot of 8:15ish SANSFire folks at @CharmSec after the evening talk. The rest of us will be at Pickles around 7PM tonight.

  492. Two-❤️’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar

  493. Two-<3’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar

  494. Brewing a Bell’s Two-hearted clone this afternoon: http://is.gd/10OEM It’s Centennial hops all the way down! https://en.wikipedia.org/wiki/Turtles_all_the_way_down

    Turtles all the way down - Wikipediaen.wikipedia.org
  495. |
    Ceci n’est pas une pipe

  496. Silly Putty sticks to Silly Putty really well. Better even than it sticks to the rings of a slinky. #insightfriday

  497. $VENDOR on antivirus exclusion: …failing to do so will result in very poor performance ultimately leading to your disgust for the product.

  498. So @philip_daigle returns to cube land and says, “Wow, I just tried to use my badge against the light switch to exit the bathroom”. Dude.

  499. Mission after pho lunch: Create a scapy daemon (or at least script) to log all iframes from a stream.

  500. @MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions

  501. Man, the parking lot at work always smells like burned rubber and clutch when I get to work in the morning. What’s that all about?

  502. > @MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions

  503. Search ‘is.gd’, 1st hit: marketing, 2nd: marketing, 3rd:, opportunistic ‘hey is.gd is down, check out our marketing’. http://tr.im/o0L2

    tr.imThis domain may be for sale!tr.im
  504. Is.gd’s server seems to be gone gone. Anyone else have a route past 81.29.89.108 or know of other affected sites?

  505. It’s getting better all the time / (It can’t get no worse) ♫

  506. It’s getting better all the time / (It can’t get no worse) ♫

  507. @ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q

    tr.imThis domain may be for sale!tr.im
  508. If unsubscribe links were 72pt, bold, and at the top of marketing e-mail, it would probably slow me down by at least a half second.

  509. > @ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q

    tr.imThis domain may be for sale!tr.im
  510. @censey holy crap that pizza looks amazing, where are you? (as I heat up a Tony’s for a school-night late meal)

  511. @shmausen @commonwombat – 1-800-567-6789 Verizon residential high speed internet support.

  512. Begged question answer: I just got lawn seats to see Stone Temple Pilots at Merriweather, 7/19. http://is.gd/S7IN

  513. Surely there are music business excusses for the failure that is Ticketmaster arbitrary fee transparency? Lie to me better you bastards!

  514. XL newish craigslist clothes dryer installed, old shrieking box of fire-breathing doom in the alley for pickup. SCREEE! EEEIK! RYIEECK! #%@!

  515. Yes http://twtvite.com/o8rk9m #twtvite #ducks

  516. I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.

  517. Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9

  518. Dear application team: Plz leave honeypot work to me, & pretend /your/ stuff is in production and shouldn’t have Everyone granted All perms.

  519. Yes http://twtvite.com/o8rk9m #twtvite #ducks

  520. Argh, $52 parking ticket for being too close (questionably) to a fire hydrant.

  521. I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.

  522. Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9

  523. Driving home from #dojosec on 4 ounces of Big Red… This is bat country!

  524. Driving home from #dojosec on 4 ounces of Big Red… This is bat country!

  525. The shortened url straw men of doom

    Bastardizing the Drake
    equation
    , if only a fraction of
    the people using twitter used it to send urls to each other, and only a
    fraction of those urls were artificially shortened by a url shortener, and
    only a fraction of those shortened urls were actually hyperlinks to Rick
    Astley’s Never Gonna Give You Up, and only a fraction of those Rick Astley
    hyperlinks were in fact not to Rick Astley videos, but instead phishing attack
    hyperlinks to Mills On The Hill Fish and Tackle Shop in New Market, MD,
    hosted on a RedHat 5 server at a local Mom and Pop ISP compromised and
    hardened by multiple attackers over the years but now serving free embedded
    javascript with every page inserting iframes from choose-your-own-nationalist-
    conspiracy-theory-ok-chinese-attackers, and only a fraction of the twitter
    users likely to find such links by searching for hashtags actually click on
    them, the Internet as we know it would come to a screetching halt, please
    can’t someone do something about these urls shorteners?

    Still with me?

    The Scarecrow
    Figure 1. The Scarecrow.

    Some of these arguments are very good, and thorough. Or at least thorough. Oops, I mean thorough. Most are echos of As Web communication shrinks, so do links, by Rachel Metz at the AP.

    Sorry, skip the foolish advertising business model of free dull razor blades,
    with every cut sponsored by Punch The Monkey and jump to the existing url
    shortening sites that are trying to reduce the risk posed by our straw man.

    Preview images sound cute, I’ve never used them. I could preview a thumbnailed
    malicous pdf for you, would that help?

    Auto-unshorteners sound neat too and I’ve seen twitter clients that use their
    API’s to some success, but they are just that – secondary services that some
    clients have.

    New shorteners like safe.mn do more, but how much more? I
    was able to validate that safe.mn refused to shorten an old link in my spam
    quarantine, but not a new one.

    How safe is safe enough? Does our straw man actually have a brain? How much
    protection does the culture of associative trust so prevalent on twitter
    reduce the risk that a given shortened url will actually be evil?

    It won’t be the next link you get from a new follow consistent with their
    posting history about that-thing-for-which-you-followed-them that gets you. It
    will be the next #amazonfail meme. It will be thousands of opportunistic spam
    accounts bubbling up a Trending Topic
    with helpful links. Or it will be innocent meme followers, linking to their
    blog hosted on the same server as Mills On The Hill Fish and Tackle Shop,
    or, etc.

    Hyperlinks never had any trustworthiness. URL shorteners seem like a great
    opportunity to add trustworthiness. Is anyone going that direction?
    Safe.mn seems to be heading in the right direction, but
    they make some bold claims.

  526. Class got out early! Off to #dojosec after all.

  527. @oneeyedcarmen f5 f5 f5 f5

  528. @alexhutton thanks!

  529. .@dionthegod @quine assuming you aren’t talking about returning door-to-door Jehovah’s Witnesses, Good luck on that ‘good news’ thing.

  530. @alexhutton switching costs masked as failed opportunities - http://is.gd/O5T6 - love that the unsubscribe link still works.

  531. DestroyTwitter on a mac w/ a synergy provided white mac keyboard hosted on a windows PC == confusion whether ‘command’ is actually esc. ugh

  532. Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO

  533. Had to see how I stacked up to Ryan.

  534. Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO

  535. @CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%

    tr.imThis domain may be for sale!tr.im
  536. @ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn

  537. Starting with Kid A onward, Radiohead has just been a Battletoads soundtrack cover band, Thom sings the vocals the NES coulnd’t reproduce.

  538. > @CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%

    tr.imThis domain may be for sale!tr.im
  539. > @ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn

  540. Finally started McCarthy’s Blood Meridian (https://en.wikipedia.org/wiki/Blood_Meridian). I want to write an incident post mortem in this style.

    Blood Meridian - Wikipediaen.wikipedia.org
  541. Finally started McCarthy’s Blood Meridian (https://en.wikipedia.org/wiki/Blood_Meridian). I want to write an incident post mortem in this style.

    Blood Meridian - Wikipediaen.wikipedia.org
  542. Missing tonights Bacon & Beer Happy Hour at @bad_decisions, and Thursday’s @dojosec because of my damned night class. $#!^&#!!

  543. Does anyone know the brain.conf option to turn off sloppy focus? This thing seems to just do whatever the heck it wants.

  544. @marcusjcarey any introduction that begins with an honorific that doesn’t concern life, death, rank, or responsibility is silly.

  545. @marcusjcarey any introduction that begins with an honorific or that doesn’t have power over life, death, rank, or responsibility is silly.

  546. Outlook Zen behavior: 1. Select multiple messages to act upon 2. Receive a new message in the same folder. 3: Outlook undoes the selection.

  547. A whisper in your ear: memento mori, memento mori. http://is.gd/KUMp

  548. .@jeson, @vurtyou, and @slp22 are trying to starve me Lunch promises ’ real soon now’ started around 11:30, it is now 15:00. Send help.

  549. Eating outside at Three. Heroin users: stay inside please. Live-tweet it? Stop trying to break into that Car. No $ in the BSun box?

  550. Eating outside at Three. Heroin users: stay inside please. Live-tweet it? Stop trying to break into that Car. No $ in the BSun box?

  551. Brewing a pale ale before going to the Polish Festival at Patterson Park.

  552. @electricfork @vurtyou polka, polka, polka, one o’clock at my place, we’ll walk over (away from the smell of dead fish. Ugh.)

  553. Hey, Friday afternoon, when nobody is looking I’m going to beat the everloving crap out of you. It’s been 3:45 for at least six hours now.

  554. Obama also said ‘ATM Machine’. We elected this guy? And what is it with airline food anymore? I mean you ask for a bag of peanuts and…

  555. I don’t get the dislike of/bias against users of the word & prefix cyber. See: def. of hacker, pronounciation of nuclear, etc. Get over it.

  556. .@censey I disagree w/ the characterization too. I’m using it as a blind man’s cane to determine where I want to keep the real tools.

  557. I was just accused of weaponizing eicar. This will be a fun drill.

  558. @insidecharmcity: RT @wjznews Stray Bullets Hit MD Nuclear Power Plant https://www.cbsnews.com/baltimore/

  559. My math textbook for this semester has a Chapter 0.

  560. Print “\a\a\a\a\a\a\a I just got a ticket to see Clutch at Sonar! \a\a\a\a\a\a\a\a”;

  561. @AWS0807 …unless your singer is a green lizard named Sarsippius

  562. .@oneeyedcarmen I expect there will be ad hoc lunches and meetups, and folks from out of town that need to know where to enjoy their eveings

  563. .@philip_daigle: “Never heard of this Linux distro” after finding a MINIX 3.0 cd in our stack. Thinking about asking for his geek card.

  564. > @insidecharmcity: RT @wjznews Stray Bullets Hit MD Nuclear Power Plant https://www.cbsnews.com/baltimore/

  565. Stopping by Max’s pre-@charmsec? I am - pint night is Apocalypse Great White.

  566. @alexhutton /.You forgot the closing / and . on that style tag http://is.gd/H9IH /.

  567. Enumerating AV exclusions by spraying eicar all over the file system. Hackish, slow, & noisy, but many don’t alert their IR team for eicar.

  568. Comments, cliches, commentary, controversy, chatter, chit-chat, chit-chat, chit-chat, Conversation, contradiction, criticism, @charmsec 13

  569. Abandoned amature hour: trying simultaneous 5GHz (prod) and 2GHz (guest) wireless networks, and dnsmasq w/ opendns. Airtunes so far so good.

  570. SETTING: media on a mac mini smb share, itunes on an mbp streaming to an airport express ECU: Operator screaming, itunes & express failing

  571. Hop pellets in a dry martini, shaken: visually apealing green peppering, nose improved, does nothing for the flavor. I need hop-infused gin.

  572. Hop pellets in a dry martini, shaken: visually apealing green peppering, nose improved, does nothing for the flavor. I need hop-infused gin.

  573. .@marcusjcarey sushi lunch was fun & I like your HLSC vlog post.

  574. Just got home from a 2-night primitive camping trip with @jeson, @slp22, @vurtyou, @philip_daigle, K, E, and e.

  575. .@philip_daigle and I are headed to Security Lunch Meetup at Baltimore Inner Harbor, Edo Sushi noon, see everyone there #charmsec #sectwits

  576. Capturing images of blade systems over port replicator dongles is fun, pause, not.

  577. .@censey cork the kitchen, ebony LR (or througout), halogen under the counters, nix track lighting, new cabinet hardware, flowers & plants

  578. @marcusjcarey any luck with your lunch plans tomorrow? A few of us would be up for it, time permitting. What restaurant / meet time?

  579. Brown sugar and fish sauce! It’s twoo! It’s twoo!

  580. @Fred0828 you are all over that! Congrats to all of GURU! Four years ago: Mock: http://is.gd/BGVO http://is.gd/BGZZ Real: http://is.gd/BH2X

  581. Crushed both finals, Spring '09 semester: adios! Summer semesters start Tuesday. #umbc

  582. @philip_daigle dude, you could stack a lot of horses something something, http://is.gd/BEbl

  583. @helvetireader I use a build script for Simplepedia to inline css, GM API & about:config to config http://is.gd/jiaW O & GKit can tweak js

    Dance Partyis.gd
  584. Please suggest papers/presos on responsible compromise notification. i.e. “Hi, you are owned.”, not “Hi, you are vulnerable.” abuse@? Still?

  585. .@dionthegod ha - that’s like saying “the closest I got to playing freeze tag was when I was starting running back for my hs football team”

  586. .@dionthegod I always got sidetracked transposing sheet music to QBasic PLAY w/ amp AUX leads soldered to the motherboard speaker terminals

  587. Outlook Zen Koan: Uknown Error.

  588. Baltimore and other delmarva locals: oceancity.org is currently serving pdf/swf malware: DO NOT VISIT (apologies to site admins)

  589. I can’t stress the importance of coding style enough, as other criminals will have to deploy your work. http://is.gd/BjG3

  590. Definsible, if wildly biased/innacurate? Insightful regardless? http://bit.ly/zo5Vs

  591. Definsible, if wildly biased/innacurate? Insightful regardless? http://bit.ly/zo5Vs

  592. Outlook Zen Koan: Extra line breaks in this message were removed. / This message has extra line breaks.

  593. .@alexhutton infosec zombie meme: fix-it-with-encapsulation (usually crypto). Stupidest are ‘disk wipe count’ and password policy myths

  594. Planning our sixth annual memorial weekend camping trip to Greenridge Forest, hoping the weather clears up for us! http://is.gd/B0ab

  595. This lumber is from 1915. When I make decorative cat scratching posts with the remainders, somewhere, a lumberjack will roll in his grave.

  596. I’ve been playing carpenter with nothing but a circular saw, a hammer, a chisel, and a pile of OD rough hewn hickory all afternoon.

  597. Jeff Beck’s at Ronnie Scott’s is on Palladium. Tal Wilkinson is ridiculously talented, and El Becko is a fine wine.

  598. Jeff Beck’s at Ronnie Scott’s is on Palladium. Tal Wilkinson is ridiculously talented, and El Becko is a fine wine.

  599. .@will_torres please stay until ~3:30AM, then go to 1745 Kalorama and play very loud music into the windows of the basement unit. Thanks!

  600. .@electricfork your dunkelweizen smells amazing. Hallertaus are still floating, will be tricky to siphon. Shoulda used the muslin bag!

  601. Batch! Ale #2 is kegged. Amazing stuff! Brewing another tomorrow, and tweaking the hop schedule to be more Lagunitas IPA, less SNPA.

  602. Scenario: Attack account, change username, create new account, squat username & abuse. I need to use a stronger password on twitter.

  603. Twitter seems to fatal error on new passwords with spaces, then logs you out. Logged back in using the new password with spaces. Confused.

  604. Oops, I polluted @electricfork’s facebook status. I assumed all those apps used RSS or API calls, not page scrapes. clicks ‘like’ in fb

  605. Note only 14605171 is the real @grantstavely. All others are impostors. Philip K Dick you are missed. Fast flux-able?

  606. Scenario: Attack account, change username, create new account, squat attacked username, grief. I need to use a stronger password on twitter.

  607. .@shrdlu usernames are not static. I’ll let you use mine if I can use yours. wink twitter.com/urls change and everything.

  608. I never kept handles long, and used them for fpss, not hacking. ph8 was my favorite, then hobart. writequit was just the last one I used.

  609. OK @electricfork, I’m going to switch to @writequit again, then you switch to @electricfork, then I’ll be @grantstavely again. 1,2,3,go

  610. Squatting @electricfork’s handle, griefing his followers with nasty dms, as usually #whyitweet #fixreplies

  611. I just crossed streams with @electricfork, er, I mean, @grantstavely. Who ever heard of usernames not being primary keys?

  612. Try to imagine all life as you know it stopping instantaneously and every molecule in your body exploding at the speed of light.

  613. @oneeyedcarmen he can’t hanlde advice without being insulted? http://is.gd/zT5s immediate and direct feedback is always easier to take

  614. .@aaronbarnett if there were windows in my office, I’d have jumped out already. #google

  615. @sxs3200 that’s not effective seasoning, you’ll need to host a BBQ to protect that investment effectively.

  616. @SemanticV: Press release for live website and demos - http://bit.ly/11IB3H

  617. Yeah, @will_torres CSNhd keeps keeps losing signal on me and going to silent/pixels during plays, might have to go to a bar tonight.

  618. > @SemanticV: Press release for live website and demos - http://bit.ly/11IB3H

  619. Happy Anniversary! Thanks for lending me your wife for a few days:)

  620. > @alexsotirov: “Hahaha: http://twitter.com/XploitSweatshop

  621. @censey the complainee. Apathy, silence, & dismissal, are all easier. NB: Attacks are not complaints.

  622. Complaints are compliments.

  623. @electricfork @will_torres, it is easier than that: go Neverending Story on them, let the sadness hit 'em. #probablymissingasportsreference

  624. @yahoo what are your tactics for keeping criminals from SEOing malware? Opportunistic attacks make it into you top ten frequently.

  625. @oneeyedcarmen is there anywhere in the city I can get a C02 tank refilled or traded south of Racers? I need to keg a batch, limited time.

  626. What zany things would happen if example.com|net|org suddenly had a valid A and MX records? Interresting dns cache poison for a honeypot.

  627. Most grow out of this risk evaluation, yet keep applying equivalent silliness to externals: “I haven’t died yet, therefor I’m immortal!”

  628. Outlook Zen Koan: The function cannot be performed because the message has been changed. http://is.gd/jqh4

  629. @GratefulGooner why did you have to remind me of that nightmare #radiohead Nissan Pavilion show? Utter disaster. The venue is dead to me.

  630. @linuxgeek247 no fair if you go to CC campus before the next #dojosec, and I love that you called it marco. What pool did you test it in?

  631. Making shrimp tacos with @vurtyou, @jeson, and @slp22, wishing the rain would stop so that we could enjoy the roof deck.

  632. @censey my grandfather bumps me on page 4 of google for ‘grant stavely’. An unrelated ‘grant stavely’ in the UK is on page 5. Poor guy.

  633. Next #dojosec, I’m asking about world peace > @linuxgeek247: #dojosec dnssnarf in 6 lines of python… http://bit.ly/bJbol

  634. Catching the Caps game with @vurtyou, @satie45, and Weeds at a bar in Canton. (My vote is for Growlers/The Tap House)

  635. @linuxgeek247 @sdwilkerson abandoned BIND format somewhat, added query id and responses, using it now: http://is.gd/xS2u (my first python)

  636. @tombihn so it was a bad batch of YKK buckles? Tough luck? I’ve replaced the bag already with an @goincase messenger - love it.

  637. @vurtyou \m/. .\m/ http://phohuongmoi.com/ noonish.

  638. Next #dojosec, I’m asking about world peace > @linuxgeek247: #dojosec dnssnarf in 6 lines of python… http://bit.ly/bJbol

  639. @wrayjustin we stopped to try to control the projector. I think we walked past you heading for the far lot as you were driving looking! =/

  640. Http://twitpic.com/4rb6r - We found a frog to tailgate with at @dojosec.

    We found a frog to tailgate with at @dojosec.We found a frog to tailgate with at @dojosec.twitpic.com
  641. I’m not kidding about @dojosec tailgating. Find me.

  642. Want to test IPv6 and teredo detection on your network without deplying it? Invite $big_company pro services over for a meeting. @dojosec

  643. I don’t want to spoil @sdwilkerson’s @dojosec talk, so I’ll stay off Panasonic Display1 for now. http://is.gd/xBT8

  644. The @dojosec projector is awfully quiet on its own ad hoc network. Defaults: http://www.google.com/search?hl=en&q=wireless "panasonic display1"&btnG=Search thought it transmitted on assoc: just myself

  645. @dionthegod btw @philip_daigle asks if he has a girlfriend in the future #dojosec

  646. @dionthegod holy crap are you posting from the future!? I’m @dojosec and @sdwilkerson isn’t talking yet. Do they have flying cars? Jetpacks?

  647. @dojosec w/ @philip_daigle watching @danphilpott’s talk on FISMA. I’ve never worked .gov. And people complain about http://is.gd/xBw2 ?

  648. Http://twitpic.com/4rb6r - We found a frog to tailgate with at @dojosec.

    We found a frog to tailgate with at @dojosec.We found a frog to tailgate with at @dojosec.twitpic.com
  649. I’m not kidding about @dojosec tailgating. Find me.

  650. Want to test IPv6 and teredo detection on your network without deplying it? Invite $big_company pro services over for a meeting. @dojosec

  651. I don’t want to spoil @sdwilkerson’s @dojosec talk, so I’ll stay off Panasonic Display1 for now. http://is.gd/xBT8

  652. The @dojosec projector is awfully quiet on its own ad hoc network. Defaults: http://www.google.com/search?hl=en&q=wireless "panasonic display1"&btnG=Search thought it transmitted on assoc: just myself

  653. Griefers experiments prove trust exists, news at 11 > @joshgans Journalists relying on Wikipedia caught out with hoax. http://short.to/7z41

  654. @electricfork how many times have I spoken to you about your guestures Spaulding?

  655. I’m automating analysis of domains and IP addresses in logs using surbl and google/safebrowsing. What other similar services have open APIs?

  656. I can’t un-visualize this one: @will_torres on XTC’s Skylarking: “Is that kermit singing?”

  657. This toot of a blog post of an executive summary of key findings of the overview of the details is so easy to read, skip the data altogether

  658. Style tip: Underestimating? Deriding? Citing ‘lame’ without reading source material? /.Surround it in Slashdots!/. (+5 Nash Equilibrium)

  659. @AWS0807 a sweep would have been boring! Enjoy the Caps’ C-league goal and look forward to games 4 and 5!

  660. Griefers experiments prove trust exists, news at 11 > @joshgans Journalists relying on Wikipedia caught out with hoax. http://short.to/7z41

  661. @will_torres go caps! C A P S! (I am surrrounded by penn fans)

  662. Corporate web filtering drives users to the black market. When the latest American Idol clips are banned, only criminals will have the la…

  663. The file system ‘name’ metadata exclusivity is v. 1970s, ignores superior solutions in MacOS, BeOS, file hints, etc.text.tweet.html.exe

  664. You know wha’ they say: See a broad to get that bodiac lay’er down an’ smack 'em yack 'em!

  665. @sckain I ran osx86 on my HP laptop for a while (10.4.8-ish?), macbook now. Dogfood at work, I would frown on other hackintoshes on our LAN

  666. Second bankrupcy of the week: XP on the desktop. Returning to FreeBSD asap, as OSX is sady not an option.

  667. Every time virustotal says ‘-’, I think of Dark Helmet’s thoughts on the triumph of evil over good.

  668. Eschatologists have caclulated the # of collective pronounces and -ly words that will bring end times, but not which conference room

  669. Remoting three+ levels into varying resolution GUI systems should be covered under article 3 of the geneva conventions.

  670. The closed class door and lights off jogged my memory that class is canceled tonight, rushing through leftovers or driving to UMBC didn’t.

  671. VM bankruptcy declared. My greeting now requests that you e-mail me or call my cell phone, then it hangs up on you. VM is dead tech to me.

  672. @LazerFlip how’s your heel flip? I can’t do either half of a lazer flip, need somoene to teach me. https://www.youtube.com/watch?v=JxJyZ8Bi-2k

    how to laser flip aka 360 heelfliptrick tips for laser flips/ 360 heelflipsYouTube
  673. By popular demand: four photos of the almost finished basement. http://is.gd/wAmb (I’m accepting tap handle donations for the home-brew tap)

  674. Asked Sfwy meat counter for 4 oz bacon for a ragu, one piece was 8 oz, he couldn’t ring such a small amount, so I got it free. Free bacon!

  675. @tombihn I have a medium cafe bag and both of the clips on the plastic buckle broke off, so it doesn’t latch closed.

  676. @commonwombat yup, should be right up our street! #baltimore #kinetic

  677. @electricfork want to come early? The Kinetic Sculpture Race is going to go right past my house. Bring something to grill. At waterfront now

  678. Many shortened urls last forever. Anyone ever rainbow table them? What percentage of the urls point to darknets? Contain auth creds?

  679. @pearsontowers: Awesome Moneyshot / Johnny Rotten set http://is.gd/vN6G <- great setlist and a cool bit of history!

  680. @dionthegod ‘we were’ got lost in editing, became ‘were’ and implied ‘they were’. My ego is already a lumbering Stay Puft, be careful.

  681. Going to Artful Gourmet to avoid the snarling traffic downtown, then open for the weekend w/ @vurtyou out of town.

  682. @XSSExploits http://is.gd/vWfD played like a pentest to me.

  683. @XSSExploits that was an excellent play in three acts. I’m not normally into tragedies but with writing like that, who wouldn’t be?

  684. @censey I bought a year of trst.us, have a dev, going for sushi. http://trst.us/

  685. @sdwilkerson @dionthegod mentioned #vzdbir, I said ‘oh it was nothing’, everyone agreed, and were all humbled by his pdf exploit earnings

  686. @sdwilkerson I bought your last Guinness @charmsec with my “CONGRATS ON CRACKING THE CODE” Amex card.

  687. @censey let’s do it. We can partner with http://www.stopbadware.org/ - do you have a name in mind? (slightly serious)

  688. @StrongwaterSec Just commands? Grab everything! Tweak something like http://is.gd/vRvi to be trusted, maybe throw it at a serial device?

  689. There is this weird small computer on my desk – has keys 0-9, *, and #, and I don’t know how to make the red blinking light on it stop.

  690. > @pearsontowers: Awesome Moneyshot / Johnny Rotten set http://is.gd/vN6G <- great setlist and a cool bit of history!

  691. 2009 Great American Beer Festival: 9/24-26, Denver, CO. I had a lot of fun last year who wants to go this year? http://is.gd/vJue

  692. It looks like userscripts.org needs an @attritionorg style Going Postal section: http://is.gd/vJoi

    Dance Partyis.gd
  693. Http://is.gd/vf3f Kirk: ipod shuffle. Khan: kindle. Aaaaannnnnd… scene.

  694. 2009 Great American Beer Festival: 9/24-26, Denver, CO. I had a lot of fun last year who wants to go this year? http://is.gd/vJue

  695. @SemanticV: A new Stingray Explorer demo is online. Browse Enron’s email using concepts - http://semanticv.com/stingray/

  696. Simplepedia: fluid.app, ssl-aware, front page tweaks, and self-updating. ♥ing the ideas & support submitted by users. http://is.gd/jiaW

    Dance Partyis.gd
  697. Argus has a daemon flag and no netflow listener while ra has a netflow listener and no daemon flag because real sysops daemonize with &. 😦

  698. > @SemanticV: A new Stingray Explorer demo is online. Browse Enron’s email using concepts - http://semanticv.com/stingray/

  699. Phơ Hương Mới, noonish, http://is.gd/7xCG

  700. If I owe you a link re: and open discussion @charmsec, please remind me. http://is.gd/vAiq

  701. WikipediA on the front page is now WIKIPEDIA. Why? BookendS > SOLID imo.

  702. Rage, then The Running Man, and now The Stand? Someone has to stop Stephen King. (@nprnews’s WHO Phase 5 declaration is freaking me out)

  703. Rocking @will_torres’s face off with The Oxes in preparation for @charmsec to combat his new Lionell Ritchie “Hello” replacement ‘ygm’ sound

  704. Also: If you don’t hate e-mail like we do, sign up for the CharmSec list so’s we can sell your info for beer money: http://is.gd/vqG9

  705. @oneeyedcarmen yes sir! 7PM @ Slainte. I’ll go ahead and RT it from @charmsec

  706. WikipediA on the front page is now WIKIPEDIA. Why? BookendS > SOLID imo.

  707. @s_crawford, @chriseng, @dionthegod, @IBMFedCyber, @Fred0828, @ryanaraine, & @geekgrrl thanks for the ★! Aw, shucks, etc. =)

  708. How I Decoded the Verizon 2009 DBIR Cover

    I was the first to solve the Verizon 2009 Data Breach Investigations Report cover. Chris Eng’s similar write-up is excellent and perhaps more in the spirit of defeating a challenge of the sort.

    That wasn’t how I solved it though.

    2009 Verizon DBIR cover
    Figure 1. 2009 Verizon DBIR cover.

    Below lie spoilers. You’ve been warned.

    I have no idea what I’m doing when approaching a cryptographic challenge. My
    background is in art.

    I approached the challenge naively unaware it even was a challenge. A
    designer had been asked to put 1s and 0s on the cover of the report
    because hey, it’s about computer stuff right? That’s what I thought at least.
    I’ve been asked to do that sort of thing, and copy and pasting finger-mashed
    1s and 0s is boring. I always made an effort to make my gibberish mean
    something
    . At the least, I’d find Cicero’s lorem ipsum dolor sit amet et cetera ad nauseum.

    I assumed something amusing would be there but didn’t bother much with it. It
    was 5:30AM and the report made better coffee reading than the cover. When I
    reached the end though, I found the major clue.

    So I tweeted about it.

    Verizon Breach Report, page 48: Notice it? It’s 2 searches away from
    WikipediA. Common cipher lore? Neat regardless! https://www.verizon.com/business/products/security/

    Cybersecurity Solutions: Network Security & Data ProtectionProtect your data with Verizon's advanced cybersecurity solutions. Explore managed security services, SASE, DDoS protection, and mobile device management to secure your network and endpoints.Verizon Business

    By two searches away from WikipediA, I meant, as others have noted that it was a one-hit google search at the time, for a geocaching clue.

    Handy. Even handier is the ‘decrypt’ link on the geocaching site, yielding the
    original text, le chiffre indéchiffrable. Seems like an obvious clue! As I
    related in my tweet, that led me straight to the WikipediA article on the
    Vigenère cipher.

    So then I read up on Vigenère. I’m kind of into just hopping through WikipediA. I read up on Caesar ciphers, of which rot-13 is one. I joked about it on twitter and went back to syndicated feeds and twitter, then drove to work.

    What is The Verizon Breach Report cover binary text? http://is.gd/hafb please be Clutch lyrics, please be Clutch lyrics, please be Clutch l-

    At the office, I asked a few co-workers if they had noticed the clue on page
    48, and showed them that the cover text was probably something. I had no
    idea what, but hey presto, let’s give it a spin.

    I threw the source 1s and 0s into Vim and got rid of all the newlines.
    Nothing useful. Then I tossed the single long line into TextMate to play with
    wrap points.

    While shifting it around in Textmate I noticed a pattern.

    A pattern emerges… http://is.gd/sz5k #vzbdir

    screen shot
    Figure 2. screen shot.

    Neat columns, but what does it mean? I didn’t know. I was getting tired of
    moving the source text around though, and knew it was copy and pasted a few
    times, because I was still going on the naive ‘it is nothing or it is funny’
    approach. I selected the first line and searched-all in TextMate. Four hits on
    lines 101, 201, etc… I did the same for the second and third lines. Sure
    enough, only the first 100 lines were unique. Oh well that proves nothing,
    back to work.

    Only the first 100 lines matter. Off to blue team, will have to resume
    after lunch. Argh, obviously a Vigenère. http://is.gd/sz5k #vzbdir

    After my morning meetings, I decided to keep at it through lunch. After
    talking to my friend Ben, we agreed I should just
    script out ascii one letter at a time whether that was what I was looking at
    or not. All the easy to find online ascii-binary converters wouldn’t accept
    it. I read up on perl’s pack() and threw this together.

    #!/usr/bin/perl -w
    # bin-to-ascii
    my $binary_text = shift;
    open (BINARY, $binary_text) or
        die "Can't open input file: $!";
    foreach my $line () {
        my $length = length($line);
        my $hex = pack("B$length", $line);
        print "$hex ";
    }

    Simple enough, what does that yield?

    evntxigyimwsneheiefotxbscwyhrqmwguzabvycbbfreyfbvedkevmfri
    fngfnrbfgvksfpnbufzjgceeewakhpxebtzjczowgtbsqgtmiaydpydriryetkcjrpyhepwkuoa
    eknvtvzhsmznttivikmmrysnuiakbrkqmstycgccrlrriirefgytjubuxheysgleyrvhiyxdeyzcj
    kvtosoixjehoxevmwjbnzmtkwzefofcnbwncuwmyfiuvbkwnpwtyoeyqtirryrcmnvfvlrsbn
    tpwpaoczpekhlfceerrvwvuybvjpuvpoaymikqqnswzghzkdgylaegwpkesgcyzfvjdmepq
    ksslnvsvpuvvrvyerhdtutyymqgevwrmqszfnpnrjiggwajnnjlkoeqhnetrpuqydfzwczkvje xlm
    ckcsiftctsutldrrmikqtninpgrpqqxptzdpaiotceuazfewdqllpzrhxlxqgslrjtblzrirvisnzi
    wl mvyadvohfevnakkgorrxsygxpumvgbomrjlcrefcmrqvxtmiymjjvhxnbtszmtjefkfgkurfl
    nhxpkcwlexmiylgynnrwaksewthpkgzkkxgazellutayciekwishundkekwargbyzfgkepkqg
    zzsrimflgkarturainsngeeumexrveelzxtisuwvzkoyltpbhzweoqwnxnpxpkssxjhpancvfpr
    yadrlroewebqewhzrgatzdguceklfyhzjnnzijrgnzrvbocauyezgkpsjxjiasmvftdwfxbidhqz
    eykdrtdrioppkjrpisskmczjfztbvbjugeyanjigjtdcptzdeogutlzpekhtnihtggumvgbomrjlcr
    efswfzocroheau
    

    Whoa! Letters! Chris Eng got this far immediately with a shell one-liner: sick fu!.

    I had no idea how to attack the Vigenère but given the clue on page 48, that’s
    where I had to start. I read up on brute forcing Vigenère. Yikes. If it’s possible, I can probably find a tool to do it. I found lots, but the first hit was enough.

    I asked Munsee and Leech’s java applet to find 5 keys. The first one
    looked like a winner.

    crangingdefaultcrrdsntialschangingdlfeultfredentials

    A few typo’s but that’s obviously English. I fixed the typos and used the key
    and Munsee and Leech’s java applet again to decrypt the text.

    changingdefaultcredentialschangingdefaultcredentials

    By the time lunch was over, I’d discovered the source text, found out it was actually a contest, and submitted my answer.

    @alexhutton I just submitted my cipher
    text solution. Never done any code breaking before, was a lot of fun!
    #vzdbir (now back to work!)

    I got a call an hour later.

    I was the first to submit! I’d won!

    Congratulate me at CharmSec this Wednesday, and I’ll
    buy you a beer.

    Update

    I just used this old ascii <-> hex <->binary converter
    I keep handy and noticed it would have converted the binary for me. I use it
    for hex so much I forgot it handled binary. I didn’t need that perl script
    after all. Doh.

  709. Why does my macbook pro feel like a candidate for an anarchist’s cookbook recipe? Oh, just some crashed shells. http://is.gd/uX6X

  710. @alexhutton awesome, @charmsec is a fun group of talent with an infosec problem.

  711. How I decoded the 2009 Verizon DBIR cover and won the challenge: http://is.gd/uWLU #vzdbir #databreach #security #crypto #infosec

  712. @electricfork could be. I think @McNasty99’s 90’s cover band White Ford Bronco has the power to actually warp time. But only to the 90s.

  713. With my new cornelius keg homebrew rig, I have the power to force-carbonate five gallons of any liquid. World: you are on notice.

  714. Bottling or kegging my Batch! Pale today, then brewing another pale ale and a dunkleweizen with @electricfork

  715. Spring: GFY, bring summer. Instead: I got a https://www.imdb.com/title/tt0480669/ recursive time travel movie so I could travel in time while I travel in time.

  716. Spring: GFY, bring summer. Instead: I got a https://www.imdb.com/title/tt0480669/ recursive time travel movie so I could travel in time while I travel in time.

  717. Hopefully grilling and relaxing w/ @vurtyou on our roof deck this evening w/ torches + tunes, practicing for tomorrow’s beer festival

  718. Watching @philip_daigle try to ctrl-c to the end of an infinite bash for loop I wrote for him is making Friday afternoon sail.

  719. @satie45 Make him say “Hello,” on mouse over. shiver “is it me you’re looking for?” http://is.gd/uiVR double-shiver

  720. @censey that’s sad. My first website was in a GeoCities neighborhood.

  721. Bounced between dd and xxd, identified the HFS volume I’m trying to recover, kicked off full dd, realized the drive is click o’deathed. Ugh.

  722. Celebrating a night of no insanity with dinner at Peter’s Inn w/ @vurtyou

  723. Celebrating a night of no insanity with dinner at Peter’s Inn w/ @vurtyou

  724. @oneeyedcarmen I’ll be at @city_paper’s Brew Fest with @vurtyou and a few others. Hey @satie45 - get tickets!

  725. Really Twanalyst? Coherent? More dentist’s agree: I am not coherent. Mphmmmgaaaa Nnnmmhhhhh phrkghx!

  726. My Twitter personality: likeable inquisitive cautious My style: chatty coherent WRITER http://twanalyst.com/grantstavely

  727. @bkdelong nice, I really dig the badware project and nomenclature and I didn’t even know I was benefiting from it!

  728. To save you all the trouble, I put in a ticket to get Yahoo.com reimaged. You’re welcome.

  729. Does the amount of malware people find through Yahoo search say something about Yahoo or about people that use Yahoo search? I say former.

  730. Outlook Zen Behavior: The message notification growl alters any multi-selection group in the message list to the most recent one only.

  731. I’m sorry you’ll need to resubmit all of these GMT, AD time values to UTC, CE values. Sobchak, Preferred nomenclature, etc.

  732. Dear three color, 9 bullet point, executive e-mail signature: You are the lambo-doored, buick-ported 1994 Type-R Celica of e-mail.

  733. The existence of yellow whiteboard markers are proof that there is no God and that reality is a strange, strange place to be.

  734. 14 hours, 4 ZUPDOG, 12 hours, 6 ZUPDOG, staring over now. Even I’m not sure what that means but four people will probably chuckle.

  735. Tired infosec engineers WILL disco dance if the music is loud enough. Anyone else consider soundboards invaluable for SIRT sanity?

  736. Learned from following @BaltimorePolice: Baltimore: The city that walks into area hospitals with gunshot wounds.

  737. Tired infosec engineers WILL disco dance if the music is loud enough. Anyone else consider soundboards invaluable for SIRT sanity?

  738. Learned from following @BaltimorePolice: Baltimore: The city that walks into area hospitals with gunshot wounds.

  739. @SteveS86 fucntion? At hour 26 I grabbed a 4 hour nap, I feel like a million bucks! Where am I? What’s going on?

  740. I’d forgotten all about that fourth wind that comes with 24 hours personal uptime. Suddenly I’m awake again.

  741. Cell phone radio chatter on conference calls is-OMG SPEAKERPHONE FEEDBACKZKWEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

  742. @will_torres yeah, but they left already. About to get out of PA myself and head back to Baltimore.

  743. Having great vocabulary didn’t save the THESAURUS from extinction / eradication / extirpation http://is.gd/tinC

  744. @wadebaker I skated a park for the first time last night and didn’t break anything. You’ll live!

  745. @ddeighton I prefer denyhosts for simple ssh Rumpelstiltskin defense http://is.gd/3Ijv, as it’s KISS enough for me.

    Welcome to DenyHosts is.gd
  746. @marcusjcarey No match for “EVERYTHINGELSEIDO.COM”.>>> Last update of whois database: Sat, 18 Apr 2009 09:48:45 EDT <<< Do it!

  747. Only annoyance of migration to the new MacBook Pro - my keychain, which I’ve moved from mac to mac for six years, seems to be busted?

  748. @jennrenwick nice to see you tweeting more - gotta do something about that default o_O picture next!

  749. @censey saving that story for the next @charmsec at the request of the Verizon folks. Short version: perl and google: took 30 minutes

  750. @Fred0828 Nice! We should hit a park old-school: you on a plastic Hobie and me on a Chris Miller mini.

  751. Kicking unattended 13 year olds out of a skate park looks like a thankless job!

  752. Wikipedia

    Simplepedia is a
    greasemonkey userscript that
    gives mediawiki sites a modern and clean design.

    Wikipedia’s design and style is tiring and cluttered. There’s just too much
    going on!

    Wikipedia front page
    Figure 1. Wikipedia front page.
    Wikipedia main page
    Figure 2. Wikipedia main page.

    Without the entire left bar, banner ads, footers, and tiny sans serif type,
    wikipedia is much more inviting.

    Wikipedia front page
    Figure 3. Wikipedia front page.
    Wikipedia main page
    Figure 4. Wikipedia main page.

    Visit your about:config to chose the heading and body fonts
    you’d like Simplepedia to use. You can change the link colors too.

    Wikipedia as an editor
    Figure 5. Wikipedia as an editor.

    Try it in Helvetica. Wikipedia in Helvetica

    Or Wikipedia’s logotype, Hoefler Text. Wikipedia in Hoefler Text

    And you can optionally display a drop down selection box to jump to the same
    article in other languages, hide edit and logon text, and more.

    The script generically applies to any site built with the standard MediaWiki
    engine using the default theme, but works best on WikipediA.

    This was inspired by Jon Hick’s excellent
    Helvetireader user script for Google Reader.

    Change Log

    • Version .991 July 17, 2009
      • Added a W favicon for wikipedia only
      • Cleaned preference handling a bit, please reset and reload to use
      • Fixed display of international language selection to use a localized title
      • Darkened the darks a bit
      • Misc. css tweaking
      • Updated wikipedia discovery to regex better
    • Version .99 July 15, 2009
      • Fixed the alternate language select drop-down and made it an option
    • Version .983 July 10, 2009
      • Miscelaneous small css fixes adapting to changes made at Wikipedia
      • Simplified front page further
      • Made en.wikipedia closer resemble artile pages
      • Embracing helvetica, possibly renaming to helvetipedia soon
    • Version .982 June 22, 2009
      • Tweaked thumbnail picture padding to correct a hover issue (thanks sdfghrr)
      • Tweaked Encyclopedia Dramatica again
    • Version .98 June 2, 2009
      • Added a new about:config / cookie option to make customizing link colors more discoverable
    • Version .97 June 2, 2009
      • Resolved issues with preference handling in webkit
      • Added disabled preference to dynamically create jump-list of all alternate language versions of a given document on wikipedia (still under construction)
    • Version .96 May 21, 2009
      • Improved generic wiki support (including wikia.com wikis)
    • Version .95 May 18, 2009
      • Improved font selection changes and examples
      • Updated namespace
      • Fixed Auto-updating menu selection controls
    • Version .94 May 16, 2009
      • Reset font selection to allow greater user control
      • Tweaked javascript style, thanks iandalton
      • Updated css for multiple fixes
    • Version .93 May 14, 2009
      • Added checks to leave user configured items alone, thanks iandalton
      • Updated css for multiple fixes
    • Version .92 May 10, 2009 (Complete rewrite)
    • Version .9.1 April 30, 2009
      • Fixed front page WikipediA logo (wikipedia moved it)
      • Dumped firefox specific auto-updater in favor of pure js version by Jarett (http://userscripts.org/scripts/show/20145)
      • Fixed http/https mixup when browsing secure sites, simplepedia will now also use https to grab external css
      • Updated front page bookshelves to link to random pages because it makes more sense to me
    • Version .9 April 29, 2009
    • Version .8.1.51 April 13, 2009
      • Added support for http://.intelink.gov/wiki/, just in case
    • Version .8.2 April 11, 2009
      • Added a simple wikipedia graphic anchor for the main page next to the search bar
      • Swapped the same out on wikipedia.org/
      • Added support for http://wiki.greasespot.net/*
      • Improved user/editor display option
    • Version .8 April 5, 2009
    • Version .7.5 March 30, 2009
      • Reintroduced edit links, page and user login tabs, ++
    • Version .7.2.1 March 25, 2009
      • Added helper functions, basic error checking
    • Version .7.2 March 18, 2009
      • Added basic support for wikileaks.org
      • Added support for secure wikimedia sites
    • Version .7.1 March 17, 2009
      • Fixed front page form elements in Firefox
      • Added default language links to the front page
    • Version .7 March 17, 2009
      • Added ‘I’m feeling lucky’ and ‘Search’ buttons to the front portal
      • Reintroduced .noprint content for the main pages
      • Fixed center td border display
  753. Kicking unattended 13 year olds out of a skate park looks like a thankless job!

  754. Holy crap, Alvin and the Chipmunks have parts in Michael Jackson’s P.Y.T - jump to the 3:30 mark.

  755. Blasting Michael Jackson’s PYT hoping to drive two geeks jabbering about hardware away. I hate hardware. They hate PYT: took 25 seconds.

  756. Hitting CharmCitySkatePark tonight to see @LazerFlip and @aaronbarnett out-skate me. Never skated a park, injury likely. http://is.gd/sYM1

  757. Was about to whine that it’s so cute when domains don’t point their A record at their www but check out spamhaus’s SOA: need.to.know.only.

  758. @oneeyedcarmen I already got a warning ticket for speeding in the new Ft. McHenry Tunnel lane - too spoiled by the Dulles Toll Road.

  759. Looking for a urlsnarf style dnssnarf I can daemonize. Should I give up and throw pcaps at tshark? I want to keep months of data for NSM.

  760. @sdwilkerson a https://en.wikipedia.org/wiki/Corna - thanks for the @charmsec support, I’m looking forward to it too

    Sign of the horns - Wikipediaen.wikipedia.org
  761. Jib, cut, like > @mubix: Penetration Testing isn’t dead, it’s the 2009 version of the CISSP.

  762. Jib, cut, like > @mubix: Penetration Testing isn’t dead, it’s the 2009 version of the CISSP.

  763. Slainte wins for the next @charmsec, will update the site soon

  764. Slainte wins for the next @charmsec, will update the site soon

  765. The Mad Tea Party

    There was a table set out under a tree in front of the house, and a Democrat
    and a Republican were having tea at it: the Economy was sitting between them,
    fast asleep, and the other two were using it as a cushion, resting their
    elbows on it, and talking over its head. ‘Very uncomfortable for the Economy,’
    thought Alice; ‘only, as it’s asleep, I suppose it doesn’t mind.’

    The table was a large one, but the three were all crowded together at one
    corner of it: ‘No room! No room!’ they cried out when they saw Alice coming.
    ‘There’s PLENTY of room!’ said Alice indignantly, and she sat down in a
    large arm-chair at one end of the table.

    ‘Have some wine,’ the Democrat said in an encouraging tone.

    Alice looked all round the table, but there was nothing on it but tea. ‘I
    don’t see any wine,’ she remarked.

    ‘There isn’t any,’ said the Democrat.

    ‘Then it wasn’t very civil of you to offer it,’ said Alice angrily.

    ‘It wasn’t very civil of you to sit down without being invited,’ said the
    Democrat.

    ‘I didn’t know it was YOUR table,’ said Alice; ‘it’s laid for a great many
    more than three.’

    ‘Your hair wants cutting,’ said the Republican. He had been looking at Alice
    for some time with great curiosity, and this was his first speech.

    ‘You should learn not to make personal remarks,’ Alice said with some
    severity; ‘it’s very rude.’

    The Republican opened his eyes very wide on hearing this; but all he SAID
    was, ‘Why is a raven like a writing-desk?’

    ‘Come, we shall have some fun now!’ thought Alice. ‘I’m glad they’ve begun
    asking riddles.–I believe I can guess that,’ she added aloud.

    ‘Do you mean that you think you can find out the answer to it?’ said the
    Democrat.

    ‘Exactly so,’ said Alice.

    ‘Then you should say what you mean,’ the Democrat went on.

    ‘I do,’ Alice hastily replied; ‘at least–at least I mean what I say–that’s
    the same thing, you know.’

    ‘Not the same thing a bit!’ said the Republican. ‘You might just as well say
    that “I see what I eat” is the same thing as “I eat what I see”!’

    ‘You might just as well say,’ added the Democrat, ‘that “I like what I get” is
    the same thing as “I get what I like”!’

    ‘You might just as well say,’ added the Economy, who seemed to be talking in
    its sleep, ‘that “I breathe when I sleep” is the same thing as “I sleep when I
    breathe”!’

    ‘It IS the same thing with you,’ said the Republican, and here the
    conversation dropped, and the party sat silent for a minute, while Alice
    thought over all she could remember about ravens and writing-desks, which
    wasn’t much.

    The Republican was the first to break the silence. ‘What day of the month is
    it?’ he said, turning to Alice: he had taken his watch out of his pocket, and
    was looking at it uneasily, shaking it every now and then, and holding it to
    his ear.

    Alice considered a little, and then said ‘The fourth.’

    ‘Two days wrong!’ sighed the Republican. ‘I told you butter wouldn’t suit the
    works!’ he added looking angrily at the Democrat.

    ‘It was the BEST butter,’ the Democrat meekly replied.

    ‘Yes, but some crumbs must have got in as well,’ the Republican grumbled: ‘you
    shouldn’t have put it in with the bread-knife.’

    The Democrat took the watch and looked at it gloomily: then he dipped it into
    his cup of tea, and looked at it again: but he could think of nothing better
    to say than his first remark, ‘It was the BEST butter, you know.’

    Alice had been looking over his shoulder with some curiosity. ‘What a funny
    watch!’ she remarked. ‘It tells the day of the month, and doesn’t tell what
    o’clock it is!’

    ‘Why should it?’ muttered the Republican. ‘Does YOUR watch tell you what
    year it is?’

    ‘Of course not,’ Alice replied very readily: ‘but that’s because it stays the
    same year for such a long time together.’

    ‘Which is just the case with MINE,’ said the Republican.

    Alice felt dreadfully puzzled. The Republican’s remark seemed to have no sort
    of meaning in it, and yet it was certainly English. ‘I don’t quite understand
    you,’ she said, as politely as she could.

    ‘The Economy is asleep again,’ said the Republican, and he poured a little hot
    tea upon its nose.

    The Economy shook its head impatiently, and said, without opening its eyes,
    ‘Of course, of course; just what I was going to remark myself.’

    ‘Have you guessed the riddle yet?’ the Republican said, turning to Alice
    again.

    ‘No, I give it up,’ Alice replied: ‘what’s the answer?’

    ‘I haven’t the slightest idea,’ said the Republican.

    ‘Nor I,’ said the Democrat.

    Alice sighed wearily. ‘I think you might do something better with the time,’
    she said, ‘than waste it in asking riddles that have no answers.’

    ‘If you knew Time as well as I do,’ said the Republican, ‘you wouldn’t talk
    about wasting IT. It’s HIM.’

    ‘I don’t know what you mean,’ said Alice.

    ‘Of course you don’t!’ the Republican said, tossing his head contemptuously.
    ‘I dare say you never even spoke to Time!’

    ‘Perhaps not,’ Alice cautiously replied: ‘but I know I have to beat time when
    I learn music.’

    ‘Ah! that accounts for it,’ said the Republican. ‘He won’t stand beating. Now,
    if you only kept on good terms with him, he’d do almost anything you liked
    with the clock. For instance, suppose it were nine o’clock in the morning,
    just time to begin lessons: you’d only have to whisper a hint to Time, and
    round goes the clock in a twinkling! Half-past one, time for dinner!’

    (‘I only wish it was,’ the Democrat said to itself in a whisper.)

    ‘That would be grand, certainly,’ said Alice thoughtfully: ‘but then–I
    shouldn’t be hungry for it, you know.’

    ‘Not at first, perhaps,’ said the Republican: ‘but you could keep it to half-
    past one as long as you liked.’

    ‘Is that the way YOU manage?’ Alice asked.

    The Republican shook his head mournfully. ‘Not I!’ he replied. ‘We quarrelled
    last November–just before HE went mad, you know–’ (pointing with his tea
    spoon at the Democrat,) '–it was at the great concert given by the Queen of
    Hearts, and I had to sing

    “Twinkle, twinkle, little bat!
    How I wonder what you’re at!”

    You know the song, perhaps?’

    ‘I’ve heard something like it,’ said Alice.

    ‘It goes on, you know,’ the Republican continued, 'in this way:–

    “Up above the world you fly,
    Like a tea-tray in the sky.
    Twinkle, twinkle–”’

    Here the Economy shook itself, and began singing in its sleep ‘Twinkle,
    twinkle, twinkle, twinkle–’ and went on so long that they had to pinch it to
    make it stop.

    ‘Well, I’d hardly finished the first verse,’ said the Republican, ‘when the
    Queen jumped up and bawled out, “He’s murdering the time! Off with his head!”’

    ‘How dreadfully savage!’ exclaimed Alice.

    ‘And ever since that,’ the Republican went on in a mournful tone, ‘he won’t do
    a thing I ask! It’s always six o’clock now.’

    A bright idea came into Alice’s head. ‘Is that the reason so many tea-things
    are put out here?’ she asked.

    ‘Yes, that’s it,’ said the Republican with a sigh: ‘it’s always tea-time, and
    we’ve no time to wash the things between whiles.’

    ‘Then you keep moving round, I suppose?’ said Alice.

    ‘Exactly so,’ said the Republican: ‘as the things get used up.’

    ‘But what happens when you come to the beginning again?’ Alice ventured to
    ask.

    ‘Suppose we change the subject,’ the Democrat interrupted, yawning. ‘I’m
    getting tired of this. I vote the young lady tells us a story.’

    ‘I’m afraid I don’t know one,’ said Alice, rather alarmed at the proposal.

    ‘Then the Economy shall!’ they both cried. ‘Wake up, Economy!’ And they
    pinched it on both sides at once.

    The Economy slowly opened his eyes. ‘I wasn’t asleep,’ he said in a hoarse,
    feeble voice: ‘I heard every word you fellows were saying.’

    ‘Tell us a story!’ said the Democrat.

    ‘Yes, please do!’ pleaded Alice.

    ‘And be quick about it,’ added the Republican, ‘or you’ll be asleep again
    before it’s done.’

    ‘Once upon a time there were three little sisters,’ the Economy began in a
    great hurry; ‘and their names were Elsie, Lacie, and Tillie; and they lived at
    the bottom of a well–’

    ‘What did they live on?’ said Alice, who always took a great interest in
    questions of eating and drinking.

    ‘They lived on treacle,’ said the Economy, after thinking a minute or two.

    ‘They couldn’t have done that, you know,’ Alice gently remarked; ‘they’d have
    been ill.’

    ‘So they were,’ said the Economy; ‘VERY ill.’

    Alice tried to fancy to herself what such an extraordinary ways of living
    would be like, but it puzzled her too much, so she went on: ‘But why did they
    live at the bottom of a well?’

    ‘Take some more tea,’ the Democrat said to Alice, very earnestly.

    ‘I’ve had nothing yet,’ Alice replied in an offended tone, ‘so I can’t take
    more.’

    ‘You mean you can’t take LESS,’ said the Republican: ‘it’s very easy to take
    MORE than nothing.’

    ‘Nobody asked YOUR opinion,’ said Alice.

    ‘Who’s making personal remarks now?’ the Republican asked triumphantly.

    Alice did not quite know what to say to this: so she helped herself to some
    tea and bread-and-butter, and then turned to the Economy, and repeated her
    question. ‘Why did they live at the bottom of a well?’

    The Economy again took a minute or two to think about it, and then said, ‘It
    was a treacle-well.’

    ‘There’s no such thing!’ Alice was beginning very angrily, but the Republican
    and the Democrat went ‘Sh! sh!’ and the Economy sulkily remarked, ‘If you
    can’t be civil, you’d better finish the story for yourself.’

    ‘No, please go on!’ Alice said very humbly; ‘I won’t interrupt again. I dare
    say there may be ONE.’

    ‘One, indeed!’ said the Economy indignantly. However, he consented to go on.
    ‘And so these three little sisters–they were learning to draw, you know–’

    ‘What did they draw?’ said Alice, quite forgetting her promise.

    ‘Treacle,’ said the Economy, without considering at all this time.

    ‘I want a clean cup,’ interrupted the Republican: ‘let’s all move one place
    on.’

    He moved on as he spoke, and the Economy followed him: the Democrat moved into
    the Economy’s place, and Alice rather unwillingly took the place of the
    Democrat. The Republican was the only one who got any advantage from the
    change: and Alice was a good deal worse off than before, as the Democrat had
    just upset the milk-jug into his plate.

    Alice did not wish to offend the Economy again, so she began very cautiously:
    ‘But I don’t understand. Where did they draw the treacle from?’

    ‘You can draw water out of a water-well,’ said the Republican; ‘so I should
    think you could draw treacle out of a treacle-well–eh, stupid?’

    ‘But they were IN the well,’ Alice said to the Economy, not choosing to notice
    this last remark.

    ‘Of course they were’, said the Economy; ‘–well in.’

    This answer so confused poor Alice, that she let the Economy go on for some
    time without interrupting it.

    ‘They were learning to draw,’ the Economy went on, yawning and rubbing its
    eyes, for it was getting very sleepy; ‘and they drew all manner of things–
    everything that begins with an W–’

    ‘Why with an W?’ said Alice.

    ‘Why not?’ said the Democrat.

    Alice was silent.

    The Economy had closed its eyes by this time, and was going off into a doze;
    but, on being pinched by the Republican, it woke up again with a little
    shriek, and went on: ‘–that begins with an W, such as war, and wealth, and
    weasle, and whiners-- you know you say things are “war of wealth”–did you
    ever see such a thing as a drawing of a wealth?’

    ‘Really, now you ask me,’ said Alice, very much confused, ‘I don’t think–’

    ‘Then you shouldn’t talk,’ said the Republican.

    This piece of rudeness was more than Alice could bear: she got up in great
    disgust, and walked off; the Economy fell asleep instantly, and neither of the
    others took the least notice of her going, though she looked back once or
    twice, half hoping that they would call after her: the last time she saw them,
    they were trying to put the Economy into the teapot.

    ‘At any rate I’ll never go THERE again!’ said Alice as she picked her way
    through the wood. ‘It’s the stupidest tea-party I ever was at in all my life!’

    Just as she said this, she noticed that one of the trees had a door leading
    right into it. ‘That’s very curious!’ she thought. ‘But everything’s curious
    today. I think I may as well go in at once.’ And in she went.

    Once more she found herself in the long hall, and close to the little glass
    table. ‘Now, I’ll manage better this time,’ she said to herself, and began by
    taking the little golden key, and unlocking the door that led into the garden.
    Then she went to work nibbling at the mushroom (she had kept a piece of it in
    her pocket) till she was about a foot high: then she walked down the little
    passage: and THEN–she found herself at last in the beautiful garden, among
    the bright flower-beds and the cool fountains.

  766. Heading to meet @highburygoon at Slainte, then maybe Max’s, then somewhere in Fells for cheap good eats w/ @vurtyou & @satie45

  767. @macsec indeed! #security #vzdbir #databreach

  768. @alexhutton I just submitted my cipher text solution. Never done any code breaking before, was a lot of fun! #vzdbir (now back to work!)

  769. Only the first 100 lines matter. Off to blue team, will have to resume after lunch. Argh, obviously a Vigenère. http://is.gd/sz5k #vzbdir

  770. A pattern emerges… http://is.gd/sz5k #vzbdir

  771. Θ - τ + δ = something that makes sense.

  772. Given A tweet, Θ, at least one out of place word from a previous revision τ will be present, and/or a word that should be there, δ, won’t be

  773. @electricfork (← thar be spoilers) I know, I googled it, I trying to not give it away though.

  774. What is The Verizon Breach Report cover binary text? http://is.gd/hafb please be Clutch lyrics, please be Clutch lyrics, please be Clutch l-

  775. @sans_isc 1500+ g-reader full-text subscribers, and you $html =~ s/<.+>/<br>/i;? Why? http://is.gd/stWw I want to help! Experience matters!

  776. @mubix @Jeffers0n classic consulting ship of theseus: Great last year becomes “their new guys” next year. Process > Talent

  777. I like beer. I like bacon. I can walk to @bad_decisions. I have an exam tonight. One of these things sucks.

  778. Banning hugely popular websites because ‘they might be attack vectors!’ fear creates a black market. See: drug war

  779. Noticed an uptick in yahoo.com GET malware vectors? Were one of their advertisers compromised? Vetting prob? goforuniq.evil + adtrgt.evil

  780. @sansforensics RegRipper rocks! Registry analysis tools are critical for incident responders and forensics analysts. http://is.gd/shqp

  781. @grecs plug for NSM practitioners using ringbuffer captures that are dealing with data overload: https://code.google.com/archive/p/nsm-capture (comments appreciated)

    Google Code Archive - Long-term storage for Google Code Project Hosting.code.google.com
  782. Innaction in the face of expected interruption because of a fear of task-switching is a terrible design pattern. Stop procrastinating.

  783. Pirate walks into a bar, bartender notices he has a ship’s wheel attached to his belt buckle.

    Bartender says “What’s that for?”

    “Vundo!”

  784. Batch! Pale Ale FG: a cloudy 1.010, OG was 1.078 pre-pitch. That’s a 9% ABV! I question my OG reading – tastes great, but tastes 5%ish

  785. Pharoah’s charrioteers are to Moses as contractors on the Death Star are to Lando.

  786. Pharoah’s charrioteers are to Moses as contractors on the Death Star are to Lando.

  787. At a baptism tonight, didn’t realize it’s done at a full Easter vigil mass. Will be in the front row atheisting, whatever that is, for 2.5h

  788. @oneeyedcarmen good eye, you probably know all the local coolers. I haven’t found anywhere besides Racers that is closer to home.

  789. Simplepedia updates: a bunch of other wikis supported, user/editor toggle, Helvetica/Serif toggle, and a graphic http://is.gd/jiaW

    Dance Partyis.gd
  790. OSX needs /dev/loop virtual block devices, wouldn’t have needed the VMware Fusion install that just crashed all over my system. Carving dd.

  791. OSX needs /dev/loop virtual block devices, wouldn’t have needed the VMware Fusion install that just crashed all over my system. Carving dd.

  792. City Paper Brew Fest: http://is.gd/rPtG

    Loved it last year, just got tickets for this year. $30.

  793. @electricfork anything we can do to help?

  794. Via @srfstn – Peter Funch shot the same location, then reassembled collections of people in a variety of themes http://is.gd/kmH0

  795. Would give my right arm if I knew I had a chance of eliminating that blue gradient, four type faces, & dozens of colors. PS get Nessus 4.

  796. I’m not one to rage on post-it passwords but @philip_daigle just picked one off a public area table with IP, username, and password.

  797. Understanding through metaphors inevitably leads to misunderstanding through the inappropriate extension of said metaphors.

  798. Dear new hire that drinks even more coffee than I do and always has a fresh pot made: You complete me. I wish I knew how to quit you, etc.

  799. Interesting things only happen when @electricfork is on vacation. @electricfork must project an attacker distortion perimeter field.

  800. @LazerFlip \m/.

  801. Making javascript gibberish to de-obsfucate itself. No skills required: http://is.gd/rqW3

    Found spreading pdf exploits.

  802. @will_torres is submitting some ugly we found to ISC. I’m not versed in de-obfuscating javascript: http://is.gd/rqhe #pdf #swf #iframe #cn

  803. @shmausen Yup. Wouldn’t SEOUL PLAZA be the perfect set for a Scooby Doo episode?

  804. I’m in the mood for Phơ Hương Mới for lunch http://is.gd/rpyo, say noonish.

  805. Plane text pdf/swf iframes are elite on some planet, but the weak link is: this is Earth Wimp Lo: Oh yeah? Try my nuts to your fist style!

  806. Plain text pdf/swf iframes are elite on some planet, but the weak link is: this is Earth
    Wimp Lo: Oh yeah? Try my nuts to your fist style!

  807. Courses this summer and fall: tech writing, finite math, hardware/software concepts, accounting. Can I handle a 9 credit-hour load + work?

  808. @aaronbarnett (re: http://bit.ly/pv9jH) they are all so stern. Came for the the NIN – the future as predicted by Vinge – stayed for Devo.

  809. @dionthegod details unless it’s mine. Wait I just script, can’t be mine. Details!

  810. @ssoper - reminds me of https://en.wikipedia.org/wiki/Why_We_Fight_(2005_film) Ratio of U.S. jet fighter programs to number of enemies with modern air forces? http://is.gd/r4s0

    Why We Fight (2005 film) - Wikipediaen.wikipedia.org
  811. @sckain that bounced off my team one person at a time and we are still giving patient-zero crap for it. My sore throat lasted 2 days. gl.

  812. How do I submit this to virustotal? “Client states the his computer mouse is infected. When he touches the mouse, ants come crawling out!”

  813. @cyberhiker tyvm - I couldn’t agree w/ @robcorddry more re: ‘after the jump’ and unnecessary UX difficulty of basic tasks

  814. @dionthegod just an SNPA clone. Wort is chilled, will pitch after I clean my brew pot. First time using this thing: http://is.gd/qU0U

  815. .5oz Magnum into the boil, timer set for 60 minutes and hoping the gravity goes up a smidge. Started at 1.048 after steeping 1lb Crystal 60

  816. @sdwilkerson your advice at @charmsec to daemonize dsniff and urlsnarf has payed off already in reducing time to find root cause, tyvm!

  817. Simplepedia updates: user/editor toggle, many more mediawikis, refactored css, dom walking, error checking, still a hack, http://is.gd/jiaW

    Dance Partyis.gd
  818. @dionthegod Pizza Port rules, only been there once & sampled what they had at the '08 GABF. Ayers Maharaja, and Erie Railbender Ale now mmmm

  819. @marcusjcarey vim rules. Have you built up a dotfile you like? I’ve been abusing q and :! lately (and own writequit.com)

  820. Enjoying a cask White Marsh Octopus Pajamas at Mahaffey’s with @vurtyou

  821. @slp22 & @jeson, we would love Paradiso but the 45 mile walk is a bit much tonight.

  822. Walking to get @vurtyou Italian Ice in Fells, then open schedule for the evening & no idea what to do.

  823. @bsdunlap extract or grain? I just picked up extract ingredients for an SNPA clone I’m brewing tomorrow. Boring, but easy.

  824. Enjoying a cask White Marsh Octopus Pajamas at Mahaffey’s with @vurtyou

  825. Walking to get @vurtyou Italian Ice in Fells, then open schedule for the evening & no idea what to do.

  826. San Francisco vacation photos: http://is.gd/qJil At the rate I silly flower photos I should break down and get a macro lens.

  827. MBP out of the box color temp seems a bit hot. Am I crazy?

  828. San Francisco vacation photos:
    http://is.gd/qJil

    At the rate I take silly flower photos I should break down and get a macro lens.

  829. The Migration Assistant transfer to the new mbp took 9 hours over gigabit. Now onto darwinports and app licensing cleanup.

  830. Amanda’s cat felt it crucial to let everyone know that it is raining outside and

  831. > @wrayjustin Great time @DojoSec. Thanks @marcusjcarey for a great lineup. #dojosec

  832. Joseph McCray is cracking me up re: pen testing, if you aren’t watching the stream, make time to watch later! #dojosec

  833. @wrayjustin Great time @DojoSec. Thanks @marcusjcarey for a great lineup. #dojosec

  834. Joseph McCray is cracking me up re: pen testing, if you aren’t watching the stream, make time to watch later! #dojosec

  835. Watching Tech Tips with Matt Rothman http://is.gd/qmIG

  836. @dionthegod seems like @dojosec will fill the auditorium, @philip_daigle and I will be there

  837. I would buy a loaf of all heels.

  838. You know the story… Same old, same old, it is what it is…

  839. TRULY GROUNDBREAKING
    MARKETING RESEARCH:
    UNDERSTANDING
    TWITTER

    http://is.gd/pV0n

  840. Jeeze, here it is, #conficker already and I’m still writing RBN on all my checks!

  841. Hype like conficker is why I have this old d i g i t a l poster for y2k pro-services poster up in my cube. http://is.gd/q64H

  842. Anyone up for tossing me a Tcl primer? It’s for a friend.

  843. Outlook populates the “You replied on…” status line of a message before you send the reply.

  844. The names conficker and downadup both scream telephone game.

  845. Miller Lite adds hops three times during the brew process! Just like every other beer you’ve ever bought! Ever! All of them!

  846. @marcusjcarey I tried Toastmasters and didn’t care for the ritual stuff, + I’m hopelessly shy. Hope you like it!

  847. The names conficker and downadup both scream telephone game.

  848. Miller Lite adds hops three times during the brew process! Just like every other beer you’ve ever bought! Ever! All of them!

  849. This Thursday evening: @dojosec Talks: http://www.dojosec.com/?p=76 Directions to Capitol College: http://is.gd/pJV4 (where Infragard meets too)

  850. I wish scs.exe understood CIDR. Still very handy!

  851. Ordered: A 2.4Ghz unibody MacBook Pro refurb, should be here by the end of the week.

  852. Walking to Slainte with the in-laws to check it out as a prospective @charmsec spot (and to get lunch)

  853. XM Radio & their customers got screwed by whoever sold and implemented their CRM. The web-enabled side is dumb and predatory.

  854. @mcsweeneys THE RULES: TIME-TESTED SECRETS FOR GETTING AND KEEPING A JOB IN THIS ECONOMY: http://is.gd/pkS3

  855. @explodingdog …clean(ing) out my warehouse. So, for a limited time get a Signed Book for $10 http://bit.ly/xiluf

  856. Sharepoint urls are doing%20it%20wrong?Source=http%3A%2F%2Ftwitter%wEcom%2Fgrantstavely%2Fstatus%2F1345311260

  857. Reason #51231 that I’m a lucky guy: @vurtyou drove home, picked up the empty dfh60min keg and is meeting me at Beltway. Beer-less no more!

  858. Http://is.gd/p7hF working links help!

  859. Http://is.gd/p7fn + daemonlogger. It’s like having a time machine. In need of a code review. #lazy http://is.gd/jSIq

  860. Great comment last night @charmsec from Mike “Who pays for browsers!?” I did: Opera on Linux, Omniweb on the mac.

  861. I just printed the art for @philip_daigle’s insane @charmsec sign. It has das blinkenlightzen. That’s so Daigle!

  862. @city_paper A gem of a missed connection on Craigslist. This happened about 50 paces from our office… http://ow.ly/1puu

  863. How I know this cold is licked: The wood stove had the room up to 80F, I was still wearing a sweatshirt, and I noticed it was ‘a bit warm’

  864. A table for tomorrow’s @charmsec is reserved at Max’s http://is.gd/gRjs

  865. @SemanticV The website is live after six months in private beta http://semanticv.com/. Register to try Wikipedia Explorer.

  866. How are you feeling? Did you go to work today?

  867. @electricfork don’t forget to call Max’s to reserve the table for @charmsec Wednesday night - 7PM

  868. OSX mounting network shares in /Volumes with afp and/or smb, appending -1 to the end of mounts with the same name: stupid or stupidest?

  869. Yay - @vurtyou just picked up a Cherner style chair for $99 at Oakenshawe in Hampden – it needs some TLC, but I love it. http://is.gd/orWU

  870. Stuck in the house with a cold. What a waste of time.

  871. Troubleshooting an http redirect loop at the apple store when trying to access edu pricing pages. 301 -> 301 ouroboros. #lazy

  872. Sis & 'Laina are in town, pushing a stroller to misc. shops in Fells Point for an afternoon shopping.

  873. Weekend sysadmin: automagic GFFS rsnapshots from Amazon EC2 host

  874. Probably getting a 15" mbp tonight in Towson, but what to do in the area for dinner? Maybe Thai One On?

  875. Re: powerbook: http://is.gd/o4c0, new-ish battery too

  876. Buy my 17" Powerbook: 1.67 GHz G4, 2GB memory, 120GB drive, matte screen. $500?

  877. So you watch all the websites I go to?” “Not specifically, but alarms go off every time you talk about your ex-boyfriend.” Ex-bf’s name?

  878. Doh. Keg kicked.

  879. Outlook Zen Koan: Extra line breaks in this message were removed.

  880. Oh clipboard, what can I do to win your heart back?

  881. Haven’t recovered from how relaxing my SF vacation was to attack the inbox, but 1000+ is ridiculous. Pressing Z or R twice rest of the day.

  882. Orange Crush smells funny.

  883. Watching the remake of The Day The Earth Stood Still: complete train wreck.

  884. Google Reader handles comments now: http://is.gd/ntuB (and why did I say ‘threaded’? I hate threaded. e.g. /. cesspool)

  885. Twitpic kicks ass but were I able, I would http://is.gd/5P1 and http://is.gd/nq7P

  886. Watching paint dry is like watching grass grow. Wait, I meant e-discovery.

  887. CapSec DC is 4/25 (the same night as CharmSec) @ Stetsons on U Street. http://is.gd/naWh

  888. Staged crucifixions are the only kind. (they are also the only time you’ll ever write a word ending in -xions)

  889. Stewart v Cramer seems awfully one sided for Stewart, but Cramer brought his sleeves-rolled-up-shit, so I guess it’s nine-tenth’s sided

  890. Drinks with @vurtyou in Blue Sea, dinner TBD

  891. If I had a Kindle, could I have it replace ‘leche’, ‘milk’, and ‘obsenity’ in For Whom The Bell Tolls with real obsenities? Que va Bendejo.

  892. SIG{INT} handling in perl is harder than it should be. My new favorite bash documentation re: ‘exit 2’: “Seldom seen”. Helpful!

  893. -C: sort of a mnemonic for ‘copy’. ⌘-V: sort of a mnemonic for ‘next to copy and not in the way of print’ ⌘-C, ⌘-V: http://is.gd/n08i

  894. I will be at the Columbia LUG meeting tonight - haven’t been to a LUG meeting in 4+ years. Any @charmsec folks attending?

  895. Hands ♪ ♪ Touching Hands ♪ ♪ Reaching Out ♪ ♪ Touching Me ♪ ♪ Touching Youuuu ♪

  896. Researching visiting the Kennedy Space Center for a shuttle launch this year: $400 seems to be the ballpark. I have lots of questions.

  897. Function scp() { echo $2 | grep -e 😒 if [ “${?}” ne “0” ] ; then echo “Idiot.” else scp $1 $2 fi

  898. I’m dumb for not going to SOURCE Boston. I qualify for the student rate, which is @shmoocon pricing. facepalm

  899. Base ’09 mac mini ordered to replace the XBMC, and the NLSU2. Would anyone like my NLSU2? http://is.gd/mR41 It needs an OS and HD

  900. Tomorrow’s Columbia Area LUG meeting looks like a network security monitoring with linux chat: https://lists.unknownlamer.org/pipermail/calug/2009-March/000556.html Awesome! I’m going!

    [CALUG] Which Python Book? lists.unknownlamer.org
  901. Http://is.gd/lXtX Always ask ‘Have you ever hacked anything?’ Always.

  902. Hates midterms

  903. Modern (networked) GUI experiences are shining examples of transitive trust at layer 8.

  904. I only read on planes. To & From SF: @mcsweeneys #30 and Raskin’s “The Humane Interface” https://en.wikipedia.org/wiki/The_Humane_Interface UI and InfoSec are intertwined

    The Humane Interface - Wikipediaen.wikipedia.org
  905. Http://twitpic.com/1x4oi - Everything here is beautiful

    Everything here is beautifulEverything here is beautifultwitpic.com
  906. Cabbie: OMG you’re from Baltimore? I LOVE John Waters, I would die to be in one of his movies! Do you know him?

  907. Does @philip_daigle still have his moustache? That’s so Daigle!

  908. I’m amazed at the fascination San Franciscans and Chinese have with miniature liscence plates and street signs with their names on them.

  909. Alcatras vist done, heading to Fisherman’s Wharf for lunch. Why are there so many more European tourists here than DC?

  910. My Out of Office Message is on. If only I could configure it to blast the SCADA-Sec list, so that I could feel like I was contributing

  911. RT @shmoocon Most speaker presos are online - videos to follow soon. We have a badge contest winner.

  912. On a flight heading to San Francisco to see @johnconstable for five days. Bbl Baltimore.

  913. Watching MJR and Bejtlich debate 15 topics at once in a 20 person round table: Like a tennis match

  914. Maybe I’m cynical but I a sophisticated attacker targeting specific assets is undetectable until the loss is realized. Duh.

  915. Anti-debugger tech is not 5 years old DOD tech, it’s much older. IDS and IPS are critical NSM components, not even close to a distraction

  916. I am at the front right table, j, c, and l are at second row second from right, both have empty seats

  917. The intro talk is about vulnerability scanning Zzzz

  918. Wow. I didn’t look at todays schedule, so I left at 6:15, but left late at 6:45 :p I just walked in, BK just got here, no worries

  919. Innapropriate to the ask Mu Dynamics sales reps if he’ss still beating his wife? Or does he probably get that a lot?

  920. A vendor at IANS just called SMTP a legacy protocol: keeper.

  921. Psyched for the IANS Forum tomorrow in DC w/ @electricfork and @jeson. Not psyched about 5AM alarm to make it down from Bawlmer.

  922. My Wikipedia userscript is coming along nicely http://is.gd/luKO will release tonight and sync fixes w/ Simplepedia. I need a name for it!

  923. Grabbing Pho with @vurtyou in Sec-that-wierd-empty-asian-upstairs-urity Mall’s SEOUL PLAZA.

  924. Earthless and Witch kicked my ass last night. My ears will probably be ringing all day. I definitely need to take ear plugs to shows now.

  925. Hey @vurtyou, let’s make some pho http://is.gd/ldv7 I assume the broth freezes OK? Need to hit an asian market for some of those ingredients

    is.gd - Shortened URLShortened URLis.gd
  926. Why I, lover of all things pub-crawl, won’t be going on any snuggie pub-crawls http://is.gd/l9m3 (shit, look at question i. shitshithshit)

  927. I love finding out I was cargo-culting something out of ignorance. I am a walking, mumbling, fumbling knowledge gap.

  928. Heading to Max’s for @CharmSec soonish & bringing a pile of spare 2009 Sourcefire calendars to give out, and a few 2009 ShmooCon schedules

  929. Bob Edwards interviewed planet hunting astronomer Allan Boss(sp?) this morning on XMPR. Interesting planet forming theories!

  930. CAPS LOCK is the appendix of the keyboard. When will yours burst?

  931. I would love a terminal.app that used the Safari 4 beta tabs. While dreaming, it should bind ⌘-# shortcuts to tabs, not windows!!@#^%!#

  932. Did mail.google go dark because of an attack? Sorbs.net listed their outbound mail servers as ‘currently sending spam’ last night.

  933. The rear USB ports on HP Monitors are a rogue HP industrial designer’s cruel joke.

  934. I must have corrupted omnioutliner.app: Opened econ notes, they auto-imported as a very large tree diagram in omnigraffle, head a’sploded

  935. Does SimplepediA need a new name? Could it confuse simple.wikipedia.org users?

  936. My ground-level condo is being carried away on the backs tiny ants.

  937. Let’s appropriate a poster for CharmSec 10. I propose http://is.gd/kpsV More Not Working than Networking

  938. NB: The previous track was Miles Davis’ 23 minute Bitches Brew, so there was definitely some tension before the Vangelis came on

  939. Blasting the Esper Edition of Vangelis’ Blade Runner soundtrack: @vurtyou just ran upstairs “CAN I HAVE SOMETHING A LITTLE LESS CREEPY!?”

  940. I’m watching Return To Oz for the first time. Yikes, this is creepy.

  941. Whoa! People still like U2? https://techcrunch.com/2009/02/20/did-lastfm-just-hand-over-user-listening-data-to-the-riaa/

    Did Last.fm Just Hand Over User Listening Data To the RIAA? | TechCrunchThat leaked U2 album is causing all sorts of trouble. The unreleased album, which is due out on March 3, found its way onto BitTorrent and was downloaded hundreds of thousands of times. That, apparently, sent music industry lawyers over at the Recording Industry Association of America into a fit. As a result, word is going around that the RIAA asked social music service Last.fm for data about its user's listening habits to find people with unreleased tracks on their computers. And Last.fm, which is owned by CBS, actually handed the data over to the RIAA., according to a tip we received: I heard from an irate friend who works at CBS that last.fm recently provided the RIAA with a giant dump of user data to track down people who are scrobbling unreleased tracks. As word spread numerous employees at last.fm were up in arms because the data collected (a) can be used to identify individuals and (b) will likely be shared with 3rd parties that have relationships with the RIAA. Supposedly, the operations team which handed over the data in the first place weren't told the true purpose for the transfer or who was getting the data until after the fact, and only when they had to help with some corrupted data. It sounds like it was more of a corporate decision. I've contacted both CBS and the RIAA. Most of the Last.fm team is in London, where the weekend has already started. For now Last.fm says: "To our knowledge, no data has been made available to RIAA." (The RIAA declined to comment).TechCrunch
  942. It’s a crime that the closest bar to the office has @Dogfishbeer 90 minute IPA on tap and is a 45 minute drive from home.

  943. On writing procedures: removing all articles (a, the, some, etc) does not technical writing make.

  944. Am I alone in thinking that continuous partial attention is a generation-gap issue and not a problem? http://is.gd/kfgA Am I just selfish?

  945. Going dumpster diving for old lumber, wish us luck

  946. Grabbing a burger at JD’s in Canton w/ @vurtyou and Kathryn and K’s friends

  947. What are the legalities of pilfering some amazing O.D. aged 2 x 8 lumber, er trash, from a roll away dumpster in Canton?

  948. Toying with extending simplepedia global support for major language editions; In russia, css tables joke–oh nevermind http://is.gd/k9cT

  949. Please use a chain of custody form when sending a hard disk inter-office naked in manilla envelopes, so we know who to blame when it clicks

  950. Http://twitpic.com/1kh7v - I like changing flats in the rain! Yay!

    I like changing flats in the rain! Yay!I like changing flats in the rain! Yay!twitpic.com
  951. Dreaming about brewing beer is surely a sign that I should continue not making time to do it right? I need to break in the basement.

  952. Enjoying Asimov’s /It’s Been A Good Life/, but disagree w/ him that The Last Question is the best SF short story ever, it is merely the 2nd

  953. capture - a script for analysts and incident handlers

    Frequently, security analysts kick off tcpdump full packet captures on unix servers with tapped interfaces at trust zone perimeters which they leave running in the background. Often this is done in a hurry in order to catch something before it disappears, and just as often, the capture is left running for a few days, weeks, or even months at a time.

    Unfortunately, this leaves dozens of tcpdump capture files strewn about home directories, all of them poorly named and all too often left running and forgotten. Which ones are junk? Which can be archived or deleted? What a mess!

    And this is even more problematic for those of you practicing network security monitoring with daemonlogger or a similar rolling full packet capture daemon.

    How can an analyst dig through hundreds of large pcap files for just the traffic they want? Whether it is 50Gb of accumulated network traffic that left a T1 connection over the past week, or that left an OC3 connection in the past 15 hours, it is too much to pull a file at a time, even with a guess where to start. These nsm daemons can easily generate a Gb of data every minute! Neither tcpdump -r nor daemonlogger -r accept wild cards. Hunting for an event one file at a time? No thanks.

    Who wants to mess with ps, grep, and kill, much less the oft repeated -nn -s 1516 -i interface during incident handling?

    A solution

    I created a perl script to manage starting, monitoring, and stopping all packet captures - live or from active daemonlogger pcap files. I retrained all my analysts to use it. I updated my sensor monitoring scripts to start using it too.

    I think this would be useful at ISP’s, .edu’s, and enterprise organizations so I refactored what my team and I have been using for the past year to make it significantly better. Time to release it!

    capture

    > capture
    Usage: capture [-h?lsmv] [r|R] [-a analyst -d 'quoted description' -e 'quoted expression'] [-f filter]

    Starting captures

    Script the repetitive stuff, force the informative and useful stuff, and prevent mistakes.

    > sudo capture -a grant -d 'traffic to grantstavely.com' -e 'host 205.134.166.178'
    Password:
    Started: grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.22.UTC_1234902022_.pcap

    Monitoring captures

    > sudo capture -l
    grant Tue Feb 17 15:20:22 2009 traffic to grantstavely com
    will Tue Feb 17 15:24:05 2009 irc traffic
    philip Tue Feb 17 15:24:41 2009 strange malware on 8081

    Too many, I’m checking on my own captures only!

    > sudo capture -lf grant
    grant Tue Feb 17 15:20:22 2009 traffic to grantstavely com

    Need more detail?

    > sudo capture -lv
    Analyst: grant
    Size (bytes): 720.00 KB
    Started: Tue Feb 17 15:20:56 2009
    Last Modified: Tue Feb 17 15:21:31 2009
    Last Accessed: Tue Feb 17 15:20:56 2009
    Last Changed: Tue Feb 17 15:21:31 2009
    Description: traffic to grantstavely com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap

    Stopping Captures

    > sudo capture -svf grant
    Analyst: grant
    Size (bytes): 720.00 KB
    Started: Tue Feb 17 15:20:56 2009
    Last Modified: Tue Feb 17 15:21:31 2009
    Last Accessed: Tue Feb 17 15:20:56 2009
    Last Changed: Tue Feb 17 15:21:31 2009
    Description: traffic to grantstavely com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap
    
    Capture file info:
    File name: grant_traffic.to.grantstavely.com_Tue.Feb17.2009-20.20.56.UTC_1234902056_.pcap
    File type: Wireshark/tcpdump/... - libpcap
    File encapsulation: Ethernet
    Number of packets: 2778
    File size: 1869006 bytes
    Data size: 1824534 bytes
    Capture duration: 12.070557 seconds
    Start time: Tue Feb 17 15:48:22 2009
    End time: Tue Feb 17 15:48:34 2009
    Data rate: 151155.74 bytes/s
    Data rate: 1209245.95 bits/s
    Average packet size: 656.78 bytes

    Daemonlogger Data

    If you have a directory of daemonlogger pcaps, point capture at them with the same standard syntax and it will run through each file, gradually merging only the data you want into a single manageable pcap.

    Note that capture maintains a soft link to the currently merged temp file using the name of the final target file so that you can start performing analysis right away.

    > capture -ra grant -d 'historical traffic to gs.com' -e 'host 75.101.142.201'
    Generating grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap
    Currently Processing: Tue Feb 17 05:23:45 2009

    Or do both - start a new live capture and grab the same data from daemonlogger archived pcaps.

    > capture -Ra grant -d 'historical traffic to gs.com' -e 'host 75.101.142.201'
    Started: grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.pcap
    Generating grant_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap
    Currently Processing: Tue Feb 17 05:23:45 2009

    While running, the ‘Currently Processing’ line will maintain a listing of how far through daemonlogger data the process is. From another console, the same is available to other analysts

    > capture -lv
    Analyst: will
    Size (bytes): 60.00 KB
    Started: Tue Feb 17 16:21:02 2009
    Last Modified: Tue Feb 17 16:21:15 2009
    Last Accessed: Tue Feb 17 16:21:03 2009
    Last Changed: Tue Feb 17 16:21:15 2009
    Description: dns traffic
    Expression: port 53
    Capture File: /Users/grant/captures/will_dns.traffic_Tue.Feb17.2009-21.21.02.UTC_1234905662_.pcap
    
    Analyst: grant
    Size (bytes): 0 Bytes
    Progress: Tue Feb 17 10:03:01 2009
    Description: historical traffic to gs com
    Expression: host 75.101.142.201
    Capture File:
    /Users/grant/captures/grant.processing.4958.1234882981_historical.traffic.to.gs.com_Tue.Feb17.2009-21.12.57.UTC_1234905177_.past.pcap

    Additional uses

    capture takes full advantage of syslog, so that you can validate what analysts did what, and when.

    You could schedule regular e-mail to management to validate what captures are running, or were run, per user, per day, and so on.

    If short on disk space, leave only individual long running captures going against specific hosts, add them to start with init.

    capture has support for hashing completed capture files, use the hashes later to validate your data.

    Use shell aliasing to create a quick start cap $1 $2 $3 alias which defaults to one of the operations cap normally requires -a, -d, and -e to perform

    Requirements

    You must have: perl, a few perl modules, and tcpdump. You also need capinfos and mergecap, both of which are part of most wireshark and tshark distributions.

    I suggest that analysts run capture on systems using sudo.

    capture has been tested and run successfully on linux, bsd, and MacOSX systems. You should review the source to configure the handful of options available before testing.

    Future plans

    • Run through a directory of pcaps w/ mergecap
    • Integrate daemonlogger
    • Better privilege seperation
    • Built in man page
    • Functional option combinations and errors
    • FreeBSD and OSX support
    • More useful verbose output
    • More user testing
    • A ‘speed start’ no-flag syntax for starting captures rapidly
    • Proper SIGNAL handling to stop --read jobs
    • /etc/ file usage to replace script header configuration
    • Assumption defaults (friendly handler name interpreting, auto descriptions using bpf, etc)
    • Suggested alternate resources; web links, dns information, argus queries, ids urls, extensible whatever
    • A web front end
    • Just kidding about the web front end
    • Specific script targeted output
    • Capture monitor and alerting
    • Better facilitation of metrics
    • Threading to improve speed of daemonlogger filtering

    Download

    Capture is hosted on google code.

    This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.

    Enjoy!

  954. What happens when you die?” “I don’t know, google it” “It says you respawn at the last save point with no power-ups” http://is.gd/4Hd8

  955. was a brand. kraftfoods/* Make today delicious …is boring type with bad ideas after and below it. http://is.gd/jXdM

  956. I’ve updated my nsm/ir laziness script ‘capture’ to run through daemonlogger pcaps http://is.gd/jSIq Ew perl, right?

  957. Best Practices < Design patterns. BP: “We got a IPS-firewall! Prob solved!” DP: “We are applying Least Priv. and NSM! Still expect loss!”

  958. Best Practices > Design patterns. BP: “We got a IPS-firewall! Prob solved!” DP: “We are applying Least Priv. and NSM! Still expect loss!”

  959. Google reader ‘share with note’ needs a threaded reply feature.

  960. I am Kitty Genovese. Nobody told me my release was a big fail in the 99% of users demographic. Webkit > Gecko http://is.gd/jB4i Fixed!

    Dance Partyis.gd
  961. THE BANSHEE WAIL OF DATACENTERS IS DESIGNED TO KEEP GEEKS FRO-WHAT?! I CAN’T HEA-$@%PHONE BRB-“YEAH, I’M IN THE DATACENTER IT’S SO-WHAT? I-”

  962. I haven’t had to mess with Simplepedia in a while so I put it on userscripts.org http://is.gd/jiaW

    Dance Partyis.gd
  963. Using perl to serially process a few hundred 500MB pcaps instead of using threads because I’m too stupid and lazy to grok threads or fork()

  964. Unix epoch time 1234567890 is this Friday at 6:31PM EST. If your technical team has been looking for an excuse to have a happy hour…

  965. What’s w/ people in the New Testament buried in tombs w/ rolling stones for doors? Didn’t want to dig in sand? Resurrection convenience?

  966. 2AM, drunk: @electricfork How’s the fall of the military industrial complex ging? Marine Lt.Col: Quite the contrary I think. Me: Really?

  967. Ever get the feeling that the conversation you just had was all exposition? It’s fun to treat everything that happens like it’s in a novel.

  968. Glen /forgot/ to eat lunch. Somewhere out there, there is a big bald dude named Nelg that’s been grumpy all afternoon https://en.wikipedia.org/wiki/Tomax_and_Xamot

    List of Cobra (G.I. Joe) characters - Wikipediaen.wikipedia.org
  969. Excellent talk: Brewmaster at Brooklyn Brewery explains beer. http://is.gd/j5yl I think I’m too techy to be a CAMRA/Slow foodie. Almost tho

  970. I asked @will_torres if coaches used biz terms the way biz leaders use sports terms. He says no, they just use other sports’s terms.

  971. Outlook Zen Koan: Opening a lot of items could take some time. Are you sure you want to open these items? Yes/No?

  972. Confirming that 2 Amy’s is still second place to Pizza Paradiso with a Dales Pale Ale, wishing I had a spare stomach.

  973. I just played a Theremin at the Hacker Arcade at Shmoocon: Jimmy Page emulation near complete. I need a dragon suit.

  974. Dead Additc’s talk on security and the false trade-off at the sake of usability and design is excllent.

  975. At The Reef in Adams Morgan

  976. The UMBC bookstore had the textbook for my Java class finally. Yay! Now going directly to Shmoocon.

  977. Have a brilliant Shmoocon barcode presentation idea, 24 hours to execute, and no budget to acquire the dozens of misdirections needed. Shit.

  978. Yea!! I like your profile pic! You are almost not making a stupid face 8)

  979. Https://www.imdb.com/title/tt0060153/quotes the riddles abound. Batman: [reading a riddle] What has yellow skin and writes? Robin: A ball-point banana! Precisely!

  980. Every time I use a site with password complexity requirements I use the ‘Forgot Password’ function, log in, change it, & forget it. UX FAIL.

  981. I just passed a lone tire mounted on a steel wheel rolling along in the slow lane on 83N, no 3 wheeled cars in sight. Gonna be a wierd day.

  982. UMBC must have seen through the whole 90’s Aeron chair thing. These VIRCO MARTEST one-piece plastic and formica units are awesome.

  983. Dear Random Things Meme, ♫, #ff0, ♂, III, ☺, , $, 21224, ., gonk, gs.com, cheers, ~, ♥A, ( | ), ≠†, 29, meh, derp, CEG, the boy, \m/.

  984. My Airport Express randomly decides that some songs should be played in the spirit of 4’33". Too artsy for me.

  985. No turn signals? Know riding the bus.

  986. On adverbs: Any word that ends in -ly should be removed from formal procedures. @electricfork says: Like Stavely?

  987. Non@Shmoocon DC to-eat&drink list for this weekend: Pho, Regent Thai, Big Hunt, sushi (suggestions?), Pizza Paradiso, Shmoo party, 2 Amy’s

  988. I named @vurtyou’s chili contest entry yesterday after the sounds that cows, pigs, and beans make.

  989. And Friday are now friends.

  990. How do you keep an analyst in suspense? python volatility ident -f /4GBddImage.dump http://is.gd/hPiF

  991. LGS Senior slipped on ice and broke his femur, surgery tomorrow, home enjoying a Keystone Light w/ ice cubes in it by Monday I hope.

  992. What’s worse? http or self-signed SSL https Citrix logins? LoginType=Explicit&user=Scroob&password=12345&domain=SPACEBALLS1

  993. Guardian angel bots are even more flattering than cute vanity name bots e.g. @Laura9238, with neither posting, what is their raison d’etre?

  994. Twitter spam bot: $0, bot follows thousands: $0 Obvious, gets blocked. Alternative: Guardian Angel Bots: one per person e.g. @satie45

  995. Nice 😃 be careful

  996. Had to abort Cave Rd hill climb midway up, all-wheel-slide, Garrison Forest doesn’t look plowed either. Main roads ftw.

  997. Commuting to work in crap weather to sit in cubes and e-mail and IM each other is so 20th century it hurts. But we can have meetings!

  998. Driving through the inner harbor because my EZPass says INVALID TAG: totally beat.

  999. Considering a zeitgeist of google searches found in referers to malware fast-flux sites, worried it follows the heavy side of the 80/20 rule

  1000. #myfirstjob was 14. Xmas tree farm tree-shaper. In August. 100°, jeans, sweatshirts, hand clipper, wasps. Lasted 3 days, wrecked work truck.

  1001. Hello my childhood friend…it’s been a loooooong time. How are you doing? I know my mom still keeps in touch with your mom. I heard about Katie’s baby and congrats on getting married! How’s life treating you??

  1002. A very special episode: Leaving in-laws in Mt. Airy to go see my Uncle’s band play @ Griffs in Frederick.

  1003. TinyTwitter is an excellent TwitterBerry alternative (nicer UI, icon, & sync settings) but it fails to count characters per tweet? Fail?

  1004. The left lane of 83N is coned off from Fayette to 695 because the International Brotherhood of Cone Layers needed some overtime

  1005. Dear QuartzWM, What power over window z-index order does exposé have that clicking on the window lacks? Glitchtastic.

  1006. Corporate Brand Mash-up DIY Rebellion

    From the Wall Street Journal via Dark Visitor:

    A property developer in Nanjing, hoping to lure business and buzz, set up storefront facades with logos such as “Haagon-Bozs,” “Pizza Huh,” “Bucksstar Coffee,” “KFG” and “McDnoald’s.” Images of what became known as “Shanzhai Street” spread rapidly online.

    Once a term used to suggest something cheap or inferior, shanzhai now suggests to many a certain Chinese cleverness and ingenuity. Shanzhai culture “is from the grass roots and for the grass roots,” says Han Haoyue, a media critic in Beijing, who sees it as a means of self-expression. “It gives people another choice and the possibility of resisting dominant cultural values.”

    I love that they are using the scrambled letter approach – wonder if they got the idea from silly forwarded email. This has expanded from brick and mortar space to websites that mash brands like google, yahoo, and baidu into one logo / search site.

    Brilliant co-opting!

    Applying some McLuhan reasoning, I wonder how this changes customers perception of Shanzhai products.

    In single blind taste tests, people told they are having their favorite brand name product may fail to notice discrepancies, or notice them and shrug them off (I lack a source for this). When all appropriate visual clues are included – a Strabuks cup with logo, band, and top for example, could Maxwell House drip coffee be passed off as a new flavor?

    Cleo McDowell: Look… me and the McDonald’s people got this little misunderstanding. See, they’re McDonald’s… I’m McDowell’s. They got the Golden Arches, mine is the Golden Arcs. They got the Big Mac, I got the Big Mick. We both got two all-beef patties, special sauce, lettuce, cheese, pickles and onions, but their buns have sesame seeds. My buns have no seeds.

    Certainly.

  1007. Enjoying a Green Flash Hop Head Red at Frisco Grille in Columbia, MD. Strange that this place doesn’t do coasters.

  1008. Bob Edwards interviewee on XMPR on /Military Industrial Complex/ is rapping about John Boyd, very interesting

  1009. Ugh, I have to take the 17" PowerBook apart this weekend and clean the coke that splashed under the trackpad button. clshk clmf CLACK

  1010. Dude you are totally slacking on Twitter/Facebook posts… Very dissapointed.

  1011. Manda, Sandra, Taf, and I were about where my cursor is pointing in this pic for Obama’s Inauguration http://is.gd/gEwI (note shadows - AM)

  1012. I think I’d rather have bad wide angle and telephoto zoom lenses than the kit glass I’m stuck with. The bottom of a building? 3’s a crowd?

  1013. I need to run kegerator lines up to the bathtub.

  1014. 95 north stinks like tour bus exhaust.

  1015. Tons of volunteers in red hats are posted saying “Welcome! We are glad you are here! Have a good day!”; feels like a Vonnegut novel.

  1016. Twitter and AT&T both get huge presence fails @ the inauguration. Wool socks, a crappy hot dog, and no snow were all wins.

  1017. Just made it back to Adams Morgan; walking route was insanity with most northern mall exits blocked because of the parade

  1018. Http://twitpic.com/158ke - The cold isn’t so bad.

    The cold isn't so bad.The cold isn't so bad.twitpic.com
  1019. The crowds are not bad at all, and the PA and Video systems are great. Walking to the center of the mall now

  1020. Having morning coffee in Adams Morgan, then we’ll be layering up for the walk down to the mall for the inauguration of Barack Obama

  1021. IMG_4837

  1022. IMG_4784

  1023. I’m totally updating my linkedin to say I’m a corporate quarterback with skills, awards, and hobbies. And experience. Senior Lead Manager!

  1024. Click here for details on the totally gross stomach bug that @vurtyou caught last night. Ask me about where our bathroom trash can is!

  1025. Had a post-Obama half-n-half at James Joyce, cab back to the house, now for a wood stove fire and gumbo

  1026. Walking through the police and nat’l guard maze to get to the line to get to see Obama in downtown Baltimore

  1027. Getting a gumbo roux started, seafood gumbo will rock after seeing Obama in Baltimore (brrrr), (soundtrack: dj mixes from pearsontowers.com)

  1028. What is the Sat. morning hashtag for #hangover? #tags should auto-sub authors to identical #tag tweets for 1 hour, and not go to followers

  1029. Pizza, you are a cruel mistress: $9 for 7oz of imported mozzarella di buffalo, plus San Marzano tomatoes, and 00 flour!? And toppings?!?

  1030. I’ve seen web servers push some silly file extensions, but .txt? http://www.thesttammanynews.com/articles/2009/01/14/news/doc496df022da317117181188.txt What is the reasoning behind that?

  1031. Have you seen it’s 11 degrees outside!? Whooo are the Ad-wizards that came up with /this/ one!?

  1032. I learned camera on film so I only take 35 pictures per week to save on film, and I use only ISO400 & manual focus. Each shot counts more!

  1033. Http://is.gd/g0cA Mayor announces legislation addressing the city’s blunt shortage; democrats hope to increase blunts per capita five-fold

  1034. Hey I think I might take you up on the offer to hopefully fix the HD. I’m waiting on a write up from my hubby on what actually happened to it. Don’t sweat shipping, the post office on base is just like mailing something from inside the states so shouldn’t be bad at all. How much do you charge?? 😃

  1035. I have seen the fnords. Look for two (or more) spaces after periods in electronic documents and read between them. See!? /they/ are everywh-

  1036. My old row home’s lack of insulation starts to be annoying when its 20°F outside. https://www.coloradoenergy.org/procorner/stuff/r-values.htm Brick is nearly worthless.

    ColoradoENERGY.org - R-Value Table coloradoenergy.org
  1037. Help! Trapped at Safeway by @vurtyou’s selection paralysis! Send nat’l guard! Surely they’ll know the /right/ snacks, or have a sniper.

  1038. I’m not sure who on @will_torres’s whiteboard threat list scares me more: Brainy Smurf, Alex Trebek, or writequit (me, 2002)

  1039. Dj cheeba’s mix for solidsteel #82 is bangin! http://is.gd/fInj (Playlist: http://is.gd/fInO | Direct to the mp3: http://is.gd/fIoS)

  1040. Dear self: “nothing” was not the correct “what’s the worse that can happen?” answer. You owe me a 9V DC brick. Stop terminating hot wires!

  1041. Roadhouse on A&E, edited for TV: Constant T+A and fist-fights, but bleeps a character saying ‘Jesus Christ’? This country is nuts.

  1042. Use the car horn to say “I’m here!!” to future passengers “I’M HERE!!” still in their “I’M!” home? “HERE”? Die in a "IMHEREIMHEREIM-"fire.

  1043. Google -> twitter -> facebook status. Mystery solved. https://antwerp.wordpress.com/ Try robots.txt? http://is.gd/eUjK (orig: http://is.gd/eUmo)

    Private Siteantwerp.wordpress.com
  1044. I’m contributing my free CPU cycles to the Sharepoint Document Library Explorer View - hopefully it’ll find the cure for… something…

  1045. I get three scoops of raisin’s in my raisin brain.

  1046. Like, whoa: @philip_daigle: “I’m in the packets”

  1047. Https://antwerp.wordpress.com/2006/09/13/a-message-from-the-us-ministry-of-homeland-security-to-all-us-bloggers/ troll.clayton.state.gov. Old, found after following up web access logs re: @charmsec

    Private Siteantwerp.wordpress.com
  1048. RT @charmsec Charmsec 9 is set for the 21st. We’re doing it at Max’s this time. 7PM. DM for more info. http://electricfork.com/charmsec

  1049. Tech facilitation of time-shifting human interaction is and will continue to change how we live and work. Time is a luxury. Be selfish.

  1050. Http://is.gd/eN9Q THERE IS PROBABLY NO GOD, NOW STOP WORRYING AND ENJOY YOUR LIFE. How would this go over in the U.S.?

  1051. 101 wpm (http://is.gd/eJeW): Much faster on the powerbook http://is.gd/7Yae

  1052. On my white mac keyboard: http://is.gd/eIT5 Any challengers? I’m pretty sure I’d be faster on my powerbook or an IBM 104e springboard

  1053. I’ll be at the Caps game Friday & staying late for @will_torres’s; his beer-league team has the ice @VerizonCenter for a second game

  1054. Making a list of things to pack for inauguration day walk from Adams Morgan to the Mall the morning of + day hangout. Any do’s or don’ts?

  1055. UMBC is rubbing my night-school return in by sending me “you should apply for graduation” e-mail every few weeks for the next 2.5 years

  1056. Watching @vurtyou install some of my open source on her windows laptop (no innuendo), DS_Store folders are very tacky

  1057. Another step closer to becoming my dad: I’ve got the wood stove chasing us out of the living room (HVAC thermostat reads 80 degrees)

  1058. Don Eduardo is so busy making amazing Añejo that they still have a crappy print-design website and no wikipedia entry http://is.gd/ewPI

  1059. Grades are in from my prof that uses Blackboard - aced my final paper (100) and the class (94), now just waiting on the other prof