| 02:02.52 | *** join/#utah tiwula (~lane@174-23-82-48.slkc.qwest.net) |
| 02:21.17 | *** join/#utah josephscott (~josephsco@74.114.153.251) |
| 09:14.21 | *** join/#utah romanovic_ (~romanovic@puritynine.com) |
| 11:39.16 | *** join/#utah emcnabb (~emcnabb@hs-nc-1fff767f54-29977-1.tingfiber.com) |
| 13:17.05 | *** join/#utah josephscott (~josephsco@74.114.153.251) |
| 13:32.42 | *** join/#utah emcnabb (emcnabb@nat/redhat/x-zakctbxowjbotqbe) |
| 14:31.02 | *** join/#utah braxtron (~braxtron@216.160.248.178) |
| 15:20.55 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 16:30.28 | jlp_znc | rain in the valley, someone has been spreading powdered sugar over the mountains again. |
| 16:56.40 | jackman | mmm... candy mountain |
| 17:02.09 | jfindlay | ~napoleon yukaia |
| 17:02.09 | infobot | ACTION makes yukaia feed Tina |
| 17:02.13 | jfindlay | ~napoleon youtah |
| 17:02.13 | infobot | ACTION takes youtah's girlfriend to the mall for glamor shots |
| 17:02.18 | jfindlay | ~trump jlp_znc |
| 17:02.19 | infobot | ACTION builds a wall at jlp_znc's expense |
| 17:42.23 | jackman | ~obama jfindlay |
| 17:42.24 | infobot | ACTION believes in jfindlay |
| 18:10.03 | jfindlay | lol |
| 18:48.40 | jackman | ~binladen jackman |
| 19:33.16 | *** join/#utah emcnabb (~emcnabb@hs-nc-1fff767f54-29977-1.tingfiber.com) |
| 19:43.31 | *** join/#utah youtah (~youtah@67.139.187.132) |
| 19:43.31 | *** mode/#utah [+v youtah] by ChanServ |
| 19:43.38 | youtah | ~cheese |
| 19:43.38 | infobot | i heard cheese is pure awesomesause. I love cheese. |
| 19:43.42 | youtah | ~nachos |
| 19:43.42 | infobot | schweet. |
| 19:43.44 | youtah | ~bacon |
| 19:43.44 | infobot | it has been said that bacon is a filling substance which will make you even fatter than you already are... Take my advice, bacon is a food for the gods or for underweight models such as that McBeal chick... |
| 19:43.48 | jsmith | youtah: I had nachos for lunch! |
| 19:43.48 | youtah | ~youtah |
| 19:43.49 | infobot | Mmmm Bacon |
| 19:44.10 | youtah | homemade? gas station? |
| 19:46.36 | jfindlay | ~bernie youtah |
| 19:46.36 | infobot | ACTION requests a $3 donation from youtah |
| 19:50.34 | jsmith | <sarcasm>How am I going to go to school for free if youtah only pays $3?</sarcasm> |
| 19:51.16 | youtah | it's easy |
| 19:51.25 | youtah | just tax jsmith for all his things |
| 19:51.34 | youtah | ~tax jsmith |
| 19:51.45 | youtah | hmmmm, that's problematic |
| 19:51.51 | youtah | that should be a thing |
| 19:54.40 | jlp_znc | well, it could be |
| 19:55.42 | jlp_znc | ~zippy |
| 19:56.11 | jlp_znc | ~yow |
| 19:56.41 | youtah | lol |
| 19:57.03 | youtah | There is a new "National Geographic Photographer Barbie" that was just release |
| 19:57.05 | youtah | released |
| 19:57.17 | jlp_znc | of course there is |
| 19:57.52 | jlp_znc | meanwhile, Ken continues to mooch off of Barbie, living in her beach house, driving her corvette. wearing his preppie sweater as a shawl. |
| 19:58.13 | jlp_znc | if he had a pipe, he'd be smoking it, too. |
| 19:58.31 | jlp_znc | (and wearing slippers while reading the newspaper) |
| 20:44.44 | youtah | more people need to use keybase IMO |
| 20:57.11 | spangborn | deletes keybase |
| 20:57.18 | spangborn | What's the point to keybase though, really |
| 20:57.22 | spangborn | nobody uses GPG/PGP |
| 20:57.48 | youtah | Authentication and verification of online identities |
| 20:58.14 | youtah | since not all of us are fancy enough to get the verified badge next to our names on twitter |
| 20:58.23 | spangborn | Yeah but who cares about that |
| 20:58.27 | spangborn | I don't think many people do |
| 20:58.33 | youtah | additionally, the whole secure/encrypted git repos are pretty slick |
| 20:59.02 | youtah | and the fully encrypted chat is nice too. |
| 20:59.03 | spangborn | I do like the git stuff |
| 20:59.08 | spangborn | but again, nobody really uses it |
| 20:59.14 | spangborn | They also have that stupid cryptocurrency now too |
| 20:59.25 | youtah | is has been messaging jlp_znc via keybase earlier today |
| 20:59.28 | youtah | lol |
| 20:59.39 | youtah | and yes, their crypto currency is lame |
| 20:59.46 | spangborn | You revoked one of your proofs lol |
| 20:59.59 | youtah | yeah, one was for https and the other http |
| 21:00.07 | youtah | I killed the https since I dont have an ssl cert on my site |
| 21:00.14 | youtah | isn't going to pay bluehost |
| 21:00.21 | spangborn | Nah you killed the non-SSL one lol |
| 21:00.22 | youtah | which I really need to migrate away from BH |
| 21:00.34 | spangborn | https://usercontent.irccloud-cdn.com/file/WzY7zYk5/image.png |
| 21:00.37 | youtah | wait... what?! |
| 21:00.46 | youtah | great |
| 21:00.53 | youtah | this is what I get for messing around with this stuff late at night |
| 21:01.12 | spangborn | and you have a LetsEncrypt cert on it |
| 21:01.13 | youtah | oh, you know what... I think BH automagically does the SSL stuff now |
| 21:01.14 | spangborn | So that's fine |
| 21:01.18 | youtah | tries to remember |
| 21:01.45 | youtah | That's right |
| 21:01.45 | youtah | https://my.bluehost.com/hosting/help/473 |
| 21:02.14 | spangborn | You don't even have your photography website in there |
| 21:02.16 | spangborn | Fraud ;p |
| 21:02.34 | spangborn | Oh because you can't verify smugmug lol |
| 21:02.46 | spangborn | feels dirty even opening a smugmug site |
| 21:02.56 | youtah | lol |
| 21:03.11 | spangborn | I still laughed that they didn't take my security vuln report seriously |
| 21:03.14 | spangborn | *still laugh |
| 21:03.26 | youtah | They have fully turned over most of their devs and QA |
| 21:03.33 | youtah | i know the head programmer really well |
| 21:03.37 | spangborn | "We'll just put a login page on a http:// box, and post it to https://, sounds secure enough" |
| 21:03.42 | youtah | when he comes out to SLC, we go to Moab for photos |
| 21:04.08 | spangborn | It would have been so easy to setup a honeypot wifi network at some photo conference or a smugmug event |
| 21:04.11 | youtah | and Ryan Wellington has moved from Customer Success (Heros) to QA to DEV since that time |
| 21:04.15 | spangborn | "Starbucks Wifi" |
| 21:04.19 | youtah | is it still that way? |
| 21:04.34 | spangborn | Nah, they finally fixed it after I made their CEO look like a moron on Twitter |
| 21:05.05 | youtah | Redirects the entire user to https://secure.smugmug.com/login now |
| 21:05.08 | spangborn | It's funny to see how different companies handle vulnerability disclosure differently |
| 21:05.08 | youtah | LOLOLOLLLLLLLLL |
| 21:05.10 | youtah | thanks to spangborn |
| 21:05.21 | spangborn | youtah: yep, it just used to pop in a login form before |
| 21:05.29 | youtah | I remember this |
| 21:05.53 | spangborn | Plex was great with their disclosure stuff |
| 21:06.00 | spangborn | I found a pretty significant XSS in their stuff |
| 21:06.30 | spangborn | For like 30 seconds, anyone who navigated to their forums had their session cookies sent to me |
| 21:06.34 | spangborn | whoops |
| 21:06.42 | spangborn | And then I reported it and deleted my test account |
| 21:06.55 | youtah | wait |
| 21:06.57 | youtah | what the |
| 21:06.58 | spangborn | They gave me 3 lifetime subscriptions, and like $200 worth of swag |
| 21:07.18 | youtah | okay, go to smugmug.com. Open the Network tab in dev console |
| 21:07.24 | youtah | click login |
| 21:07.36 | youtah | notice it redirects you to secure.smugmug.com |
| 21:07.56 | youtah | nevermind |
| 21:08.14 | spangborn | That's expected yeah |
| 21:08.29 | youtah | i thought I saw something, it was nothing |
| 21:09.03 | spangborn | using secure.smugmug isn't really necessary now that they've got the whole domain behind SSL, but there's probably some internal reason for that |
| 21:11.05 | spangborn | https://usercontent.irccloud-cdn.com/file/n8vbzITn/image.png |
| 21:11.12 | spangborn | It was a bug in their SSO app heh |
| 21:11.25 | spangborn | Which is funny because they moved away from their old forums because of XSS vulns |
| 21:11.30 | spangborn | and I found one the same day they moved over lol |
| 21:11.42 | spangborn | whoops! |
| 21:14.44 | spangborn | eightyeight: did bitwarden change their stance on ToTP being a premium option yet? |
| 21:15.08 | eightyeight | i haven't seen anything |
| 21:15.22 | spangborn | bleh |
| 21:15.32 | spangborn | 1Password is starting to get naggy about me not buying 1Password7 |
| 21:16.45 | spangborn | $10/yr isn't terrible, but still |
| 21:17.02 | eightyeight | less than $1 per month |
| 21:17.15 | spangborn | It's more of the principle of the matter for me |
| 21:19.15 | youtah | is still using lastpass |
| 21:19.19 | spangborn | ew |
| 21:19.23 | youtah | which I know many grown upon, but... meh |
| 21:19.42 | spangborn | Easy to jump ship to Bitwarden, if you're not using any of their "premium" features |
| 21:19.47 | spangborn | Like ToTP in this case |
| 21:20.52 | youtah | how does it sync across devices? |
| 21:21.22 | youtah | I assume bitwarden has it's own servers similar to lastpass? |
| 21:22.28 | youtah | hmmmm, only difference according to this high level, quick comparison table, is that it is open source |
| 21:22.33 | youtah | https://www.codeinwp.com/blog/best-password-manager/ |
| 21:23.55 | youtah | I just remember trying out 1Password (long long time ago) and it was local only |
| 21:24.11 | youtah | so all the passwords I had on my desktop, I didn't have on my laptop |
| 21:24.20 | youtah | I thought "This is the dumbest thing I've ever seen" |
| 21:24.30 | spangborn | 1Password has sync via various options |
| 21:24.37 | spangborn | I've used it via Dropbox and iCloud |
| 21:24.38 | youtah | My guess it's not the case anymore, but that really turned me off of 1Password |
| 21:24.55 | youtah | bitwarden looks clean |
| 21:24.57 | spangborn | I think they even have their own sync option now too |
| 21:25.03 | youtah | I like the look of their interface |
| 21:25.10 | spangborn | yeah, it's basically an OSS ripoff of 1Password's UI/features |
| 21:25.20 | spangborn | Which I'm fine with, 1Password got real greedy |
| 21:25.26 | youtah | but I also have all of my family (after years of struggling and pulling teeth) to use LastPass |
| 21:25.38 | spangborn | bitwarden has a family thing too, I thought |
| 21:25.45 | youtah | so we share stuff via LastPass and kind of feel stuck there |
| 21:25.54 | youtah | My parents and grandparents are used to LastPass now |
| 21:27.26 | youtah | Oh, interesting |
| 21:27.31 | youtah | "Can be self-hosted on your own server if desired" << re: bitwarden |
| 21:27.38 | spangborn | Yep |
| 21:27.48 | spangborn | The only dumb thing about that - you still have to pay premium if you want some of those features |
| 21:27.54 | spangborn | unless you just patch out the checks hah |
| 21:28.04 | spangborn | Someone should just fork it *shrug* |
| 21:28.43 | youtah | interesting. They said that they think 1Password is the overall best password manager |
| 21:29.05 | spangborn | It's really slick |
| 21:29.12 | spangborn | I just hate what they've done with getting greedy |
| 21:29.19 | spangborn | They pulled features and increased pricing |
| 21:29.45 | youtah | they're probably hippies with cashmere sweaters and birkenstocks in San Francisco |
| 21:29.58 | spangborn | Well they're primarily an Apple shop |
| 21:30.00 | spangborn | so probably |
| 21:30.03 | youtah | lol |
| 22:27.40 | spangborn | bitwarden's security audit seemed okay |
| 23:28.52 | jlp_znc | I've been using EnPass for a while now.... it seems fairly stable and usable. |
| 23:36.42 | jfindlay | I will never trust a 3rd party to host my secret data in their proprietary warehouse |
