| 01:58.59 | klys | ~slashdot |
| 02:37.52 | *** join/#utah spangborn (~spangborn@192.230.132.113) |
| 06:10.11 | romanovic | One of my favorite things? Sites that take user input and then throw it away when you submit because they logged you out 67 minutes ago in the background and failed to indicate this in any way on the front end. |
| 06:17.04 | romanovic | It would be really inconvenient e.g. if a student were writing an essay due at 11:59pm on a Sunday night, and the homework management system lets one hang oneself by preserving nothing at all when redirecting one to the login screen after having logged out before one even began the homework assignment |
| 06:17.15 | romanovic | completely hypothetically |
| 06:23.40 | romanovic | (also, one hypothetically wrote up a draft in google docs and luckily didn't have to start over in this case) |
| 06:45.41 | levi | Yes, well, this is just one of the many ways that the web fails us as a rich application platform. |
| 06:47.03 | levi | Not that there are a lot of great alternatives for cross-platform applications. :/ |
| 07:55.14 | *** join/#utah frostyfrog (~frostyfro@unaffiliated/frostyfrog) |
| 08:00.36 | *** join/#utah levi (~levi@c-98-202-130-141.hsd1.ut.comcast.net) |
| 12:13.54 | *** join/#utah jab416171 (~jab416171@c-67-172-234-125.hsd1.ut.comcast.net) |
| 12:36.41 | *** join/#utah aeryndunham (~quassel@ip-64-134-191-165.public.wayport.net) |
| 14:47.57 | *** join/#utah BitBandit (~BitBandit@50-198-187-221-static.hfc.comcastbusiness.net) |
| 15:45.16 | jlp_znc | https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/ |
| 15:48.05 | spangborn | This should make things interesting |
| 15:48.16 | spangborn | watches everyone run out and buy new routers |
| 15:52.54 | jlp_znc | problem is, the protocol itself is flawed. we need a WPA3 now. |
| 15:53.13 | spangborn | Yep, but old routers not gonna get updated to support the protocol |
| 15:53.23 | spangborn | Router companies gonna make $$$$$ selling new "secure" routers |
| 15:53.33 | jlp_znc | true true |
| 15:53.41 | jlp_znc | until the next vulnerability comes out. |
| 15:58.28 | TodPunk | No, we do not |
| 15:58.48 | TodPunk | We just need to not reuse nonces |
| 15:58.49 | TodPunk | done |
| 15:59.13 | TodPunk | An upgrade of either client or access point makes the whole thing moot, as his actual paper points out |
| 15:59.19 | TodPunk | https://www.krackattacks.com/ |
| 15:59.31 | jlp_znc | yeah, and doesn't "nonce" mean not reused? who ever was reusing them in the first place? |
| 15:59.53 | jlp_znc | nonces by definition are only supposed to be used once, I thought. |
| 16:11.08 | programmerq | lol, I've seen things called nonce that get used for 6 months |
| 16:14.34 | spangborn | My password is nonce |
| 16:14.39 | spangborn | So nobody can use it but me |
| 16:14.49 | jlp_znc | ~youtah spangborn |
| 16:14.49 | infobot | ACTION takes spangborn's picture |
| 16:15.59 | jlp_znc | I remember a site that had a "unique" on the password field (and must have stored passwords either in the clear or unsalted). it was some mail order prescription place as I recall, and I had set up accounts for me and my wife and tried to use the same password for both. |
| 16:16.11 | spangborn | lol |
| 16:16.11 | jlp_znc | "that password is already in use, please choose another" or some such nonsense. |
| 16:54.22 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 17:06.06 | *** join/#utah lane_ (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 17:13.08 | *** join/#utah youtah (~youtah@67.139.187.132) |
| 17:13.16 | youtah | morning all |
| 17:14.51 | spangborn | hacks youtah's wifi and yubikey |
| 17:15.36 | youtah | So I take it you've seen this already? http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007_FAQ_Rev-1.pdf |
| 17:15.45 | youtah | the WPA2 vulnerability? |
| 17:16.19 | spangborn | Yes |
| 17:16.24 | youtah | "The attack does not expose WPA2 authentication credentials such as passwords or pre-shared keys. |
| 17:16.24 | youtah | There is no need to change passwords or re-key a Wi-Fi network in the wake of this vulnerability." |
| 17:16.35 | spangborn | Did you also see the Infineon RSA 2048-bit factorization? |
| 17:16.44 | youtah | negative |
| 17:16.56 | spangborn | https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/ |
| 17:17.12 | spangborn | ^ This also affects some Yubikeys |
| 17:53.32 | aeryndunham | so if everything people ask me about at work I've already gotten done today, am I TOO efficient?? |
| 17:54.07 | spangborn | Yes |
| 17:54.10 | spangborn | Slack off more often |
| 17:55.31 | programmerq | aeryndunham⸠nah. it's okay to not be 100% utilized. |
| 17:55.48 | programmerq | just as long as you can look busy still |
| 18:01.25 | aeryndunham | I typically am busy while I'm here |
| 18:02.29 | aeryndunham | I've decided though that I am going to be as productive as possible while I'm here and not feel guilty about leaving at a normal hour |
| 18:16.57 | programmerq | you should never feel guilty about leaving at a normal hour. |
| 18:17.21 | programmerq | I think that the 40 hour workweek is crucial to mental health of folks that work in this industry. I have seen way too many folks get burned out, and it is pretty ugly. |
| 18:27.02 | aeryndunham | I don't mind doing a long day once in a while if it's really urgent, but there's no point in being here 10-12 hours a day like I have been |
| 19:11.57 | aeryndunham | I've got seven iPad minis plugged in at my desk right now and it looks ridiculous |
| 19:24.19 | *** join/#utah Heartsbane (tsharpe@unaffiliated/heartsbane) |
| 20:29.12 | frostyfrog | pics or the ipad desk didn't happen. |
| 20:29.20 | frostyfrog | jokes. |
| 20:29.54 | frostyfrog | youtah, Welcome back! :D |
| 21:15.30 | frostyfrog | Oh, huh. didn't reailize that the salt lake internet exchange was basically run by xmission. |
| 21:27.56 | Migs | who else? |
| 21:30.33 | frostyfrog | Someone like Hurricane Electric, who I haven't heard before but provides a part of the internet backbone? Or maybe the state of utah? |
| 21:30.41 | frostyfrog | found a bug on slix.net, btw. |
| 21:31.20 | frostyfrog | The main content div has a static height. It was probably meant to be a min-height instead. |
| 22:20.03 | *** join/#utah josephscott (~josephsco@2601:681:8001:c340:34ce:6a88:1952:4272) |
| 22:31.04 | youtah | frostyfrog, that reminds me of the time that Cinamark's website used to have an HTML for with hidden input elements with the price of the tickets. You could (theoretically) change the price and submit the form, and it would show the new price. |
| 22:31.23 | youtah | and no, I never did it. I did email them about it however. |
| 22:31.29 | frostyfrog | x3 |
| 22:31.57 | youtah | "This dude rented out the whole theater for $2?" |
| 22:32.03 | frostyfrog | xD |
| 22:32.41 | frostyfrog | probably would've tried it once to see if it was a vulnerability. If it was, I'd contact them. If not, I wouldn't bother. |
| 22:32.47 | youtah | btw, I think I told you this already, but we got a 120Mbps 5GHz link (14 miles) running from West Mountain to a parking lot near BYU? |
| 22:33.06 | frostyfrog | I'm not sure where that falls, black hat white hat wise. |
| 22:33.14 | youtah | that was with the 250 milliwatts radio with the 31dbi dish. |
| 22:33.28 | frostyfrog | You told me BYU and I was thinking it was on a tower on BYU :o |
| 22:33.53 | youtah | running INSIDE of ISM. Granted we had to use set the SSID to our call sign, as we were running well above the legal 1W limit. |
| 22:34.12 | frostyfrog | xD |
| 22:34.51 | frostyfrog | Is ISM wifi power measured in ERP or PEP? |
| 22:34.58 | youtah | PEP |
| 22:35.02 | youtah | 1500 Watts PEP |
| 22:35.59 | youtah | So that is 54.98 dB EIRP |
| 22:36.18 | youtah | wait, that doesn't seem right |
| 22:37.05 | youtah | ah, here we go... so that is 278 Watts ERP or 281 EIRP |
| 22:37.26 | youtah | Effective Isotropic Radiated Power |
| 22:38.12 | frostyfrog | Aah, that seems much closer to 1500 watts ;p I'll try subtracting the gain when I get home. |
| 22:38.25 | frostyfrog | work my math muscles, you know? |
| 22:39.39 | youtah | at 1 watt |
| 22:39.43 | youtah | it is much closer |
| 22:40.05 | youtah | whereas these radios max out at 250 milliwatts |
| 22:41.45 | frostyfrog | nods. |
| 22:42.32 | frostyfrog | It'd be interesting to see what kind of range they'd get blasting out at 1500 watts. It wouldn't be very nice, but it'd be interesting to see what the stats are. |
| 22:43.43 | frostyfrog | also, I'm assuming by "our callsign", you meant, the mesh call, right? |
| 22:49.18 | youtah | yeah |
| 22:49.22 | youtah | the K7MSH |
| 22:53.00 | youtah | btw frostyfrog ... we're going to use MESH for the next Field Day. We need a Samba Server to share the common logging log file. I will make a cron job that backs up the log every 15 minutes. We're also looking at doing this with Winter Field Day. |
| 22:53.28 | frostyfrog | ... suuuuppppeeeerrrr easy to setup |
| 22:53.34 | youtah | yup |
| 22:53.44 | youtah | and then possibly running a PBX Server so we can setup an IP phone in each trailer |
| 22:53.57 | youtah | So we can easily call each trailer |
| 22:54.37 | frostyfrog | I wonder if we'd be able to use the TCP stuff with us having the mesh gear instead of consumer gear... |
| 22:55.19 | frostyfrog | I know we had issues with it last time, but we were also loosing link connectivity. |
| 22:55.29 | youtah | it wasn't just us |
| 22:55.32 | youtah | it was a software bu |
| 22:55.33 | youtah | bug |
| 22:55.43 | youtah | and keep in mind we were hard wired |
| 22:56.25 | frostyfrog | Ah, yeah. I remember now. |
| 22:57.45 | frostyfrog | When/where is winter field day? I think I may want to help out with that if we're committed to doing it. |
| 22:59.15 | youtah | We're going to the Lindon Marina by Utah Lake again |
| 22:59.17 | youtah | most likely |
| 23:01.28 | frostyfrog | Oh, so we can easily link in to home and such.. Like for making sure that we have an extra backup or timed backups or something of the logs. |
| 23:01.36 | youtah | Yup |
| 23:01.49 | youtah | So we'll have 5GHz and 2.4GHz into Lake Mountain |
| 23:02.07 | youtah | access to the GPS based NTP rpi server |
| 23:02.12 | youtah | etc |
| 23:02.20 | frostyfrog | Man, this sounds awesome. Is there a planning party or net that I can join? :p |
| 23:02.27 | youtah | not yet |
| 23:02.36 | youtah | I haven't put the WFD committee together yet |
| 23:03.14 | youtah | January 27/28 2018 |
| 23:04.09 | frostyfrog | Alright, well. If you need anything from a linux perspective, let me know. I'll see how I can provide some assistance. |
| 23:06.03 | youtah | cool |
| 23:06.06 | youtah | probably |
| 23:06.20 | youtah | We need more M2 Rockets lol |
| 23:06.22 | youtah | $$$ |
| 23:08.40 | frostyfrog | :p |
| 23:09.09 | frostyfrog | will be heading home and will check back here once they get there. <3 ZNC |
| 23:58.31 | frostyfrog | youtah: Right when I got home and turned on my radio, I heard you clear off the air :p |