Tavern on the Meta

12:15 AM

46

Q: Your handling of security reports is disappointing

I'm trying to get a security vulnerability on a Stack Exchange domain fixed for about 8 months, but the lack of progress and communication is frustrating. Unfortunately, asking for status updates repeatedly and offering further details if needed didn't get me anywhere. Timeline 2017-11-20 Repo...

lol I never saw this

241

Q: Setting Up a HackerOne Security Bug Bounty Program

We at Stack Overflow are interested in setting up a security bug bounty program to begin rewarding users monetarily who report serious security vulnerabilities to us, and we want to know what the community thinks. This program will be run through HackerOne where we are currently testing features ...

discussion security

Probably would have helped.

Journeyman Geek

12:41 AM

@SomethingBadHappened ought to get handled at some time

they did get their new security person I heard

Not sure who she is

Shog9

1:11 AM

Lynne. Spelling may be 2oeng. I'm on mobile. And drink. But she's pretty good

Gears within gears and so on

Catija

1:23 AM

@Shog9 No e.

Shog9

1:40 AM

@Catija ...wat

Catija

Lynn, not Lynne.

Shog9

Really? What seems fake you sure you're not messing with me?

Also, what are we talk about

Catija

linkedin.com/in/lynnballard

Shog9

Ah

Link it lies

...I will sound much more lucid as soon as I figure out what 8m re0pkhting to

Catija

Or, maybe after you wake up... SleepStacking... not for everyone.

Shog9

1:47 AM

Rubbish. I still have like n hour of Netflix to watch before sleep. And perhaps more Canadian whiskey

Catija

Well, at least you're enjoying your Friday.

Journeyman Geek

2:09 AM

@Shog9 ya. My usual rumor mill was less than useful

@Catija or drunk chatting

(I am disappointed in them :p)

Shog9

Gin Blossoms absolutely perfect! Sound quality is sweeeeeeeet

►

Something Bad Happened

2:32 AM

I was looking through her LinkedIn and other stuff earlier. Looks like a strong hire.

Shog9

2:51 AM

yes. She's pretty damn savvy

Also, we desperately needed a serious security person

match made in heaven, really

Journeyman Geek

I heard good things off the DMZ/security slack

Just not much detail :p

Magisch

8:04 AM

\o/ a good security officer at stack

EKons

8:57 AM

@Fabby does the herb of my biological clock count? ;-P

rene

9:21 AM

The tagging is a bit of a subtle put down ...

Somewhat

10:14 AM

Just when I wanted to go out, it's raining heavily 😭

Journeyman Geek

→ 12 messages moved to Chimney

SmokeDetector

10:27 AM

[ SmokeDetector | MS ] Link at end of answer (60): Generate some rough numbers by omgpatipon apple on codegolf.SE

SmokeDetector

11:03 AM

[ SmokeDetector | MS ] Bad keyword in link text in answer, blacklisted website in answer (172): How should I reply to "Assalamu Alaikum"? by user29638 on islam.SE

Tinkeringbell

@Somewhat Go put on some boots, a rain coat, take an umbrella and have fun splashing through puddles!

rene

Have him move here. It is dry today ...

Tinkeringbell

Yeah, the weather is nice today.

Maybe I should spend the afternoon walking instead of crocheting.

rene

Can't you do both? Maybe with the help of those?

Tinkeringbell

11:22 AM

Crocheting takes two hands. None to spare for a seeing eye person :P

rene

Hmm, okay.

Shadow Wizard

11:35 AM

boo

Journeyman Geek

that was fun

I completely broke the hobby project I was working on

cause some key software ubuntu decided was useful... is buggy as hell it seems

Shadow Wizard

:(

Journeyman Geek

naw, its all good ;)

I just need to decide how to proceed

SmokeDetector

12:33 PM

[ SmokeDetector | MS ] Link at end of answer (60): Humans with natural "weapons", how effective would they be and how would it impact development by user56986 on worldbuilding.SE

Journeyman Geek

1:50 PM

it lives agaaaainnnn.

SmokeDetector

2:07 PM

[ SmokeDetector | MS ] Bad keyword in title (98): Why need clipping path service? by clipping path core on academia.SE

Journeyman Geek

2:26 PM

@ShadowWizard I just hit a fun set of bugs with a specific config with netplan (the new ubuntu network config thing I can rant about for hours) and dnsmasq

but my notes were rediculously detailed so I just ripped out netplan and did things oldschool

and that worked <3

Somewhat

3:21 PM

it died again. :(

SmokeDetector

3:35 PM

[ SmokeDetector | MS ] Bad keyword with email in body (66): Bonus dollar money balance problem by Ajay Kumar on webmasters.SE

Shadow Wizard

@JourneymanGeek cool! I knew you can do it. ;)

@Somewhat Kenny?

Journeyman Geek

@ShadowWizard so did I

Fun part is swapping this in instead of our current router

Shadow Wizard

Yup

Somewhat

@SmokeDetector asking about SE's clone's money payment on SE platform...

@ShadowWizard dunno, but Journeyman said "it lives again" and I wonder...

Shadow Wizard

Ohhh

What @Journeyman brings back to life, stays alive.

Journeyman Geek

3:44 PM

@ShadowWizard well. I literally basically looked at my router and built something that does most of that off the internet :p

It's hardly sensible outside 'if it gets hacked, it's your fault'

::p

Also so relaxing.

Somewhat

4-eyes sticking tongue! 😲

Journeyman Geek

I wear glasses. Or need them. Maybe both

πάντα ῥεῖ

4:16 PM

I always tend to leave my glasses elsewhere, especially at places where it's hard to spot them without glasses on :3

Something Bad Happened

4:33 PM

I downloaded one of those email:password lists criminals have compiled and looked through it the other day.

I like to think I have half a clue about security.

But it had three of my passwords in there, two of which I'd reused on a bunch of sites, and when I searched for my friends and other people, I found almost nothing. :P

I found a bunch of passwords for a shog92, but none for our shog9.

$ rg "stackoverflow.com|stackexchange.com$" Exploit.in/*.txt
Exploit.in/107.txt
24177635:[email protected]:superbowl
24201465:[email protected]:ps2rocks

Exploit.in/58.txt
26831:[email protected]:sekritz

Somewhat

there are 91 other shogs?

Something Bad Happened

There are a lot of shogs, apparently:

$ rg '\bshog\d+' Exploit.in/*.txt  | wc -l
     277

On Reddit earlier this week there was a very dumb "open letter on diversity" allegedly posted by an Apple intern. But the dude later deleted the post and claimed he'd been hacked. I was obviously skeptical, but it led me to go download this, and what do you know, the guy's real old Gmail password (changed a couple months ago) was there. So maybe he had actually been compromised and framed.

aaaaand for all your fast file searching needs, consider ripgrep, written by one of the Rust developers, because Rust is the best.

SmokeDetector

5:38 PM

[ SmokeDetector | MS ] Shortened url in body (39): Thỉnh mẫu tượng Phật Bà Quan Âm đẹp nhất ở đâu? - Buddhist Art by Trang Cao on academia.SE

SmokeDetector

6:01 PM

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad asn for hostname in answer, potentially bad ns for domain in answer (180): Fatal Error - While upgrading magento 1.9.3.4 from 1.9.3.3 by preter jack on magento.SE

SmokeDetector

6:24 PM

[ SmokeDetector | MS ] Bad pattern in url body (95): Offline safe sync directory on sd card on non-rooted Android with Ubuntu PC by Tom on android.SE

Something Bad Happened

😗🎶

Fabby

7:45 PM

@EKons I don't get it. I was talking about Tobacco or Marijuana...

(English is only my third or fourth language depending on how you count)

EKons

@Fabby lol, not all herbs are weed

my "herb", as I said above, is my own self-control :P

Fabby

@EKons Aaah.

rene

delv-pls 20K eigen meta.stackexchange.com/questions/317753/… (needs 1 more) /cc @ShadowWizard @Glorfindel @JourneymanGeek @TravisJ

EKons

lol like the eigen part is important

rene

delv-pls 20K failover meta.stackexchange.com/questions/317750/… (needs 2 more) /cc @ShadowWizard @Glorfindel @JourneymanGeek @TravisJ

delv-pls 20K react-vue meta.stackexchange.com/questions/317749/… (needs 1 more) /cc @ShadowWizard @Glorfindel @JourneymanGeek @TravisJ

That should clear all off-topic stuff for now

Something Bad Happened

8:30 PM

The face of a man ready to watch history unfold. #WCS Finals time. sOs vs Stats Rogue vs Serral Spread the word, this is only happening once. http://Twitch.tv/StarCraft

Tweeted by Artosis on November 3, 2018 at 8:24 PM

Magisch

@SomethingBadHappened Funny thing is everybody I know is basically not paying any attention to anything at blizzcon besides roasting the company over a fire over the mobile game announcement.

Something Bad Happened

Diablo's announcement was disappointing, and there wasn't much for Overwatch... but this has been a great year for StarCraft 2, and we're getting WarCraft 3 Remastered.

As an RTS fan I'm satisfied.

Magisch

8:50 PM

Everyone I know is now boycotting blizzard

my wow guild also lost 5 people from them deciding to stop playing. seems like at least storm in a waterglass level

Then again people were equally annoyed when d3 first came out so

Something Bad Happened

I guess I don't disagree with the pessimism towards Blizzard's new releases. I'm happy they're maintaining their good old games.

SmokeDetector

9:31 PM

[ SmokeDetector | MS ] Bad keyword with a link in answer, potentially bad asn for hostname in answer (78): How to compute angle of two points using tangent in a plan? by Kiva on math.SE

SmokeDetector

10:24 PM

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (161): Optimizing diet / meal plan by Cum Fingers on math.SE

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected, blacklisted user (229): Optimizing diet / meal plan by Cum Fingers on math.SE

Transcript for