IRC log for #ldstech on 20111110

00:24.07*** join/#ldstech TimRiker-NC (~TimRiker@bzflag/projectlead/TimRiker)
00:24.07*** mode/#ldstech [+o TimRiker-NC] by ChanServ
03:20.02*** join/#ldstech TimRiker-NC (~TimRiker@bzflag/projectlead/TimRiker)
03:20.03*** mode/#ldstech [+o TimRiker-NC] by ChanServ
03:20.11TimRiker-NCmoin
03:50.23TimRiker-NCtries to poke smootar
03:54.12*** join/#ldstech JohnGalt2600 (~john@71-36-70-244.slkc.qwest.net)
04:02.29*** join/#ldstech smootar| (~smootar@ppp-71-139-28-38.dsl.snfc21.pacbell.net)
04:05.36*** join/#ldstech JohnGalt2600 (~john@71-36-70-244.slkc.qwest.net)
04:05.44smootar|sees TimRiker in a Silicon Valley Fireside.
04:07.42*** join/#ldstech TimRiker| (~TimRiker@bzflag/projectlead/TimRiker)
04:07.42*** mode/#ldstech [+o TimRiker|] by ChanServ
04:36.30*** join/#ldstech JohnGalt26001 (~john@71-36-70-244.slkc.qwest.net)
04:37.16*** join/#ldstech JohnGalt26002 (~john@71-36-70-244.slkc.qwest.net)
04:37.18*** part/#ldstech JohnGalt26002 (~john@71-36-70-244.slkc.qwest.net)
04:53.33*** join/#ldstech josephscott (~josephsco@104.2.233.72.static.reverse.ltdomains.com)
04:58.35josephscottfirst post!
04:59.08josephscottdoes the charlie brown dance to the hold music
05:02.31josephscottscgallafent: you calling in?
05:09.48*** join/#ldstech macnewbold (~Adium@c-67-172-228-255.hsd1.ut.comcast.net)
06:09.43scgallafentjosephscott: Nope. Just getting back from meeting with an elders quorum presidency and I've got a CES meeting tomorrow morning at 06:00.
06:12.55josephscottscgallafent: np
06:24.12*** join/#ldstech kim27 (~kim27@host-166.arcadia-srv-216-83-132.fiber.net)
06:26.32*** join/#ldstech kim27 (~kim27@host-166.arcadia-srv-216-83-132.fiber.net)
06:29.29*** join/#ldstech smootar (~smootar@207.239.115.78)
06:29.30*** mode/#ldstech [+o smootar] by ChanServ
14:14.34*** join/#ldstech tdeforest (~tdeforest@cpe-74-78-85-69.maine.res.rr.com)
14:14.34*** mode/#ldstech [+o tdeforest] by ChanServ
14:42.24*** join/#ldstech thaddeusq (~thaddeusq@proxy.lds.org)
15:21.58*** join/#ldstech macnewbold (~Adium@76.8.223.101)
15:46.43*** join/#ldstech smootar (~smootar@207.239.115.78)
15:46.44*** mode/#ldstech [+o smootar] by ChanServ
15:52.51*** join/#ldstech TimRiker-NC (~TimRiker@bzflag/projectlead/TimRiker)
15:52.51*** mode/#ldstech [+o TimRiker-NC] by ChanServ
15:53.34TimRiker-NCmoins from bed. tired.
15:53.49smootarmoins
15:54.33TimRiker-NCdo we have a time set to meet downstairs?
15:55.07smootarI thought it would be after our 9AM chat.
15:55.23smootar8AM in San Fran
15:59.48smootar************************************************
15:59.48smootar***** Begin - LDSTech Meeting - 10 NOV 2011 *****
15:59.48smootar************************************************
15:59.53smootarWho is here for our meeting?
16:00.10TimRiker-NCnods. just wondering how much after. =P
16:00.16smootar:)
16:00.42TimRiker-NCraises a tired hand
16:00.57smootarAfter getting up at 5:15 everyday, I agree.
16:02.34TimRiker-NCI've not gotten to much development this week.
16:02.44smootarIs there anyone else here besides TimRiker-NC and me?
16:02.52scgallafentJust got back from seminary inservice.
16:03.01smootarmoin scgallafent .
16:03.07TimRiker-NCSome support tasks for projects is all.
16:03.14smootar:)
16:03.29smootarI do need to get caught up on some things as well.
16:03.44TimRiker-NCmoin scgallafent
16:03.49smootarscgallafent, how are things?
16:03.57scgallafentmoin. How is San Francisco?
16:04.20TimRiker-NCwarmer than Utah. =P
16:04.27smootarnods
16:04.37smootarWe had good meetings yesterday.
16:04.39scgallafentWe finally got cold. And I had a 6 AM meeting. brrrr
16:04.46smootarThe earlier meetings were not as productive.
16:05.01smootarsmiles.
16:05.24smootarscgallafent, any updates?
16:05.49scgallafentMost of my week has been shot dealing with some fires someone else started.
16:06.07scgallafentI think I got all the vulnerabilities in the old RecProp site cleaned up and it is back online.
16:06.14scgallafentSteve K is going to have some people test it.
16:06.24scgallafentThat should take some of the heat off that project.
16:06.34smootarSounds annoying and good.
16:06.41smootarAny damage done?
16:06.43scgallafentThey met last night but I was with an elders quorum presidency, so I'm not sure what happened last night.
16:06.46scgallafentYes.
16:06.57scgallafentWhich fires? RecProp?
16:07.08smootarRecProp server damage?
16:07.10scgallafentYes.
16:07.28smootarAny issues that we need to help address?
16:07.33scgallafentThere were A Few™ SQL injection vulnerabilities.
16:07.40scgallafentMost of the problem was database defacement.
16:07.56scgallafentI've dealt with the defacement and think I've fixed all of the injection issues. We'll find out if it comes back!
16:07.59smootarWhere is the attack coming from?
16:08.00TimRiker-NCdid the attack try to harvest information or just deface?
16:08.09scgallafentInserted some exploit code.
16:08.29scgallafentUnescaped output coming out of the database and they were able to insert some JavaScript that links to ...
16:08.36smootarWas it clear what they were trying to exploit?
16:08.44scgallafentYes. Looking....
16:09.02TimRiker-NCk. link spam then sounds like
16:09.11scgallafentNo. Exploit spam.
16:09.20smootar:)
16:09.47scgallafentThey were inserting links to nbnjki.com.
16:10.15scgallafentThat triggered "this site may harm your computer" warnings from Google.
16:10.44TimRiker-NCnods
16:10.51scgallafentI didn't go download the link to see what it does. :)
16:11.08TimRiker-NCloois to be offline now
16:11.18TimRiker-NCs/loois/looks/
16:11.32scgallafentOnce TimRiker-NC is back in town, we need to look at the new server for RecProp and get it configured.
16:12.00scgallafentEventually we need to move the production instance off 5230.
16:12.04smootarlooks to see who owns that domain.
16:12.29TimRiker-NCnods. hope to get to that monday. as well as gettin deploys to the rhel test box.
16:12.41smootarOwned by someone in Plainview NY.
16:12.50smootarJames Northone.
16:13.00smootarI was expecting it to be China or sometiing.
16:13.02scgallafentThe registration date on the domain (2011-10-16) is after the attack.
16:13.04TimRiker-NCs/Owned/Pwned/
16:13.05smootarsomething.
16:13.18scgallafentI wonder if the registration was canceled and he registered it.
16:13.40scgallafentGoogle still thinks it has malware.
16:14.01smootarhmmmm
16:14.04scgallafentI haven't had a check to see if the Google Apps accounts for cdev.lds.org and tech.lds.org have been converted to full accounts yet.
16:14.12scgallafentI'm hoping to look into that today.
16:14.25scgallafentI've got most of the fires that erupted on Monday put out.
16:14.36scgallafentI'm looking forward to not having to tend those!
16:14.58smootarThat would be good to get cleaned up.
16:15.37scgallafentThat's about all of the excitement here.
16:15.43smootarThey must bounce that registration around.  Can you see history on domain registration?
16:16.08scgallafentOne of the sites has registration history, but you have to pay for it.
16:16.37smootargotcha.
16:17.04smootarIs there a place to report this kind of stuff?
16:17.14scgallafenthttp://whois.domaintools.com/nbnjki.com shows he owns about 40 other domains.
16:17.29scgallafentI'm not sure where you would report it and whether anyone would do anything about it.
16:17.42scgallafentCue story about trying to report money laundering to the FBI.
16:17.51TimRiker-NCabuse@example.com, fbi, domain registrar, etc
16:18.34scgallafentIt's the "whether anyone would do anything" that is the issue.
16:18.43smootarDoes our legal department help with this kind of thing?
16:18.49TimRiker-NCnods
16:18.55smootarRight.
16:19.09scgallafentRegistar is bizcn.com.
16:19.11smootarIt is unclear whether this was abuse from the U.S. or not.
16:19.15scgallafents/Registar/Registrar/
16:19.30TimRiker-NCsecurity folks here should be in the loop
16:19.34smootarBut it seems like we could do more about it in the U.S. than we could if it was in China.
16:19.52scgallafentI suspect if we dug into the logs we would either find it coming from outside the US or proxied through a compromised machine somewhere.
16:20.01smootarWould you mind putting the information that we have together and send it to dhazar?
16:20.06scgallafentIt's on a Church site but hosted on a BYU server.
16:20.12scgallafentI can send the info to dhazar.
16:20.24scgallafentI'll see what kind of logs there are on the server.
16:20.26smootarI'm not sure if it is worth chasing.
16:21.10smootarBut lets send it to them.
16:21.15TimRiker-NC jusf hopes for some awareness.
16:21.24TimRiker-NCer just
16:21.28smootarnods
16:21.30scgallafentLooks like the registrar isn't known for being an upstanding Internet citizen.
16:21.37TimRiker-NCheh
16:21.53smootardid you look him up?
16:22.11scgallafentYes. The registrar is in Chinda.
16:22.24scgallafents/Chinda/China/
16:22.46scgallafentXiamen Longtop Online Technology Co, Ltd
16:23.24smootarbizcn.com
16:23.31scgallafentYes.
16:23.48smootarWell, let's move on.
16:24.01scgallafentShould I bother sending details to dhazar beyond a basic report?
16:24.06scgallafentI know that the BYU security team is aware of it.
16:24.32smootarNo, I think he should be aware and we can let  him decide what to do with the info.
16:24.35smootarTimRiker-NC, do you want to give a short update on our meetings here?
16:25.24TimRiker-NCnot from the nook. =/
16:25.46smootarsmiles.
16:25.53TimRiker-NCsmallish turnout, but som interesting contacts.
16:25.59scgallafentTime for the bluetooth keyboard? (Does the Nook support that?)
16:26.09smootarYesterday was our best day so far.
16:26.30TimRiker-NCthe hacked nook does support bluetooth. yes
16:26.41smootarWe had about 40 people in our morning meeting, and maybe 15-20 in our evening meeting.
16:27.16smootarThe key contact is probably Elder Harmer who is over many BYU Business Chapters as a Service mission.
16:27.20scgallafentMorning meeting was with Management Society?
16:27.29smootarYes.
16:27.45smootarBut the same guy over the morning meeting lined up the Fireside as well.
16:28.08smootarHe has conacts within many of the Silicon Valley technology companies that are LDS.
16:28.18smootarThere are quite a few LDS people in each of these companies.
16:28.40smootarSo, over time we plan to work with him to build out more of an LDSTech presence here.
16:28.58smootarWe did meet one of our new missionaries on Concord.
16:29.10smootarShe is working with TomJ writing articles.
16:29.43smootarAlso creating infographics.
16:30.05smootarAnyway, most of our meetings have been underwhelming.
16:30.19smootarBut I think we have key contacts that will help us moving forward.
16:30.32smootarAnything else TimRiker-NC ?
16:31.01smootarAnything from anyone else?
16:31.15scgallafentI checked the Google Apps accounts. Not upgraded yet.
16:31.37TimRiker-NCthat's about it. nice to put faces on some  of the folks. that helps move things along
16:32.19smootarWe may need to chat with google to find out what we need to do to upgrade.
16:32.25TimRiker-NCoh, we met with some potential interns  too.
16:32.27smootarThen work to make that happen.
16:32.36scgallafentThey have info online. I'll look it up.
16:32.41smootarOh ya, we interviewed all morning after our meeting.
16:32.47scgallafentIs Matt Hyer the person to push it forward?
16:32.58TimRiker-NCscgallafent: probably
16:33.05smootarMatt is the guy, but he seems to be waiting for someone to drive it.
16:33.10smootarI think we need to drive it.
16:33.17scgallafentOK. I'll get my keys. :)
16:33.28TimRiker-NCagrees
16:33.32smootarIf you need gas, let me know.
16:33.38scgallafentSure thing.
16:33.49smootar*************************************************
16:33.49smootar***** End - LDSTech Meeting - 10 NOV 2011 *******
16:33.49smootar*************************************************
16:33.52smootarthanks you guys.
16:33.54TimRiker-NCnods off. er.. nods
16:34.02smootargrins
16:36.28*** join/#ldstech kim27 (~kim27@199.192.164.75)
17:16.44*** join/#ldstech josephscott (~josephsco@208.95.152.44)
17:31.50*** join/#ldstech TimRiker| (~TimRiker@bzflag/projectlead/TimRiker)
17:31.50*** mode/#ldstech [+o TimRiker|] by ChanServ
17:40.29josephscottTimRiker|: meetings still going well?
17:44.09*** join/#ldstech marilynwaswiley (~textual@66.243.229.173)
18:16.39smootarjosephscott, meetings were good yesterday.  A little underwhelming before yesterday.
18:17.19smootarjosephscott, we have made some good contacts in the Silcon Valley area.
18:17.37smootarIt has really been through the BYU Management Society.
18:18.59*** join/#ldstech aamonson (80bb6105@gateway/web/freenode/ip.128.187.97.5)
18:18.59*** mode/#ldstech [+o aamonson] by ChanServ
18:19.27aamonsonHellote
18:24.40TimRiker|woah. sleeping. /me gets up
18:31.30aamonsonhey there tim
18:43.15*** join/#ldstech josephscott (~josephsco@208.95.152.44)
18:43.40josephscottsmootar: good to hear, I figured SF/SJ would be better for a tech crowd, the other side of the bay not as much
19:42.59*** join/#ldstech numbers (~ilikesci@tx-71-51-106-76.dhcp.embarqhsd.net)
21:02.29*** join/#ldstech josephscott (~josephsco@208.95.152.44)
21:22.23*** join/#ldstech johnsonth (~JohnsonTH@proxy.lds.org)
21:32.51*** join/#ldstech thaddeusq_ (~thaddeusq@proxy.lds.org)
22:15.33*** join/#ldstech josephscott (~josephsco@208.95.152.44)
23:41.39*** join/#ldstech smootar (~smootar@207.239.115.78)
23:41.39*** mode/#ldstech [+o smootar] by ChanServ
23:56.21*** join/#ldstech smootar (~smootar@207.239.115.78)
23:56.21*** mode/#ldstech [+o smootar] by ChanServ

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.