594000+ entries in 0.355s
mircea_popescu: diametric i don't
think anyone
tries
to clean servers. reinstall is
the only pill.
joecool: most certainly
timthumb,
that script allowed you
to upload any file
trivially
diametric: "Removing a compromised website’s backdoors is difficult because it is not possible
to be certain all backdoors have been found." lols.
joecool: after
they fixed
the issues
joecool: even
the creator of
timthumb doesn't suggest it anymore
joecool: a lot a of
theme designers used it
mircea_popescu: ah. from what i see a lot of sites get owned
through some sort of image plugin
diametric: joecool: quite possibly,
the data i had was real world scenarios, so actual real world wordpress installations.
joecool: diametric: DNN would win most compromised in my experience, wordpress usually got compromised
through crappy plugins (of which
there are MANY
to choose from)
punkman: well dunno about security, but once upon a
time I
tried
to work with it and it made 0 sense
diametric: at a previous job i had a decades worth of data involving compromised websites, and wordpress by far lead
the pack in vulnerable and shitty cms
punkman: drupal's even worse
than wordpress
mircea_popescu: it's all been a "let
the wife handle it" sort of whatever, while graham went on with "his real work" up until now.
jurov: lxr is a steaming
turd?
mircea_popescu: from money and what poor idiots may get all
the way
to concordance mechanisms.
mircea_popescu: this is
the
thing with bitcoin. never before have been smart people motivated
to consider a wide swath of issues
mircea_popescu:
https://www.r3.org.uk/ "R3,
The Association of Business Recovery Professionals is
the leading organisation for insolvency, restructuring and
turnaround specialists in
the UK." but meanwhile www.r3.org.uk/styles/list.cfm?id=221 nike blazar
mircea_popescu: and why have a fucking email anywhere on
the site ? not like you need
to be warned when you got buttraped, because super-speshul and errything.
mircea_popescu: www.usapglobal.org/webalizer/low-concord-11s.html <<
the spammers
thank
the usap for all
the free hosting/google rank
[]bot: Bet placed: 20 BTC for No on "BTC network hashrate will exceed 1 Exahash/s before 2015"
http://bitbet.us/bet/713/ Odds: 11(Y):89(N) by coin, 21(Y):79(N) by weight.
Total bet: 54.81502285 BTC. Current weight: 14,770.
jurov: you
thought NSA ate it?
jurov: yes i did get notification for
the first one
ben_vulpes: jurov:
the unsigned email did not arrive, so i must presume your filter is doing *something*
mircea_popescu: cuz php is
the
tool for
that job and ppl are
too good for php ?
ben_vulpes: my mail client doesn't seem
to have a problem sending plaintext emails.
jurov: it generates crosslinked html from c sources have used it
to hack
jurov: rithm,
thx i remembereed lxr
rithm: there's actually some new appify
thing
that
takes source code and make pretty .pdfs from it
ben_vulpes: those who wish
to write messages
to
the mailing list must ensure
that
their messages arrive mutilated.
ben_vulpes: so what's wrong with a needle
through which interested parties must pass
their messages?
jurov: with another attachemnt
the signature
ben_vulpes: forgive my mis/poor-understanding of
the gpgmail
thing, but...
jurov: lol... we miss
that damn
thing
punkman: ben_vulpes: did you
try
the gpg multisig hack?
thestringpuller: linked but malformed! my bad. i'm
trying
to get better at
this words
thing.
assbot: MPEx,
the Bitcoin securities exchange.
ben_vulpes: i'd really like punkbot
to
take in
the raw doc and .sig files. but...whatever.
ben_vulpes: this not being able
to sign
the same actual document
thing is downright irksome.
ben_vulpes: mircea_popescu: ...conceptually possible << do clearsigned copies of
the contract from both parties per S.WOL suffice?
assbot: How
to leak sensitive data from an isolated computer (air-gap)
to a near by mobile phone - AirHopper | Cyber Security Labs @ Ben Gurion University
kakobrekla: i just had
the best meat plate i had in years!
undata: elementofone: loud idiot from mass; who'd have expected
that...
thestringpuller: mircea_popescu: had an article I wrote last night. BingoBoingo said he'd be in "the office" in
the morning. I guess I can just send
to
their inbox.
jurov: upon seeing
the result.. well, i quite stepped into something
gribble: Bitstamp BTCUSD
ticker | Best bid: 340.48, Best ask: 340.63, Bid-ask spread: 0.15000, Last
trade: 340.63, 24 hour volume: 11877.38045173, 24 hour low: 337.74, 24 hour high: 359.5, 24 hour vwap: 348.749963197
mircea_popescu: "Let’s
take a moment and chat. No secrets or
techniques
this
time, I just want
to
take a post and discuss my own personal strategies for consistently dominating almost every niche I enter. Instead of creating an objective and methodologies I’m just going
to casually write and
talk some details, because of course my strategies require quite a bit of work and aren’t for everyone."
assbot: Open Letter
to Bitcoin Businesses: Why I'm closing my accounts - General - Bitcoin Foundation
mircea_popescu: johntraveller in
that case you'd better get in
the wot asap.
johntraveller: and sit in my $200/mo apartment in china, slowly converting my british fiat into btc and planning business ideas
that work once
the fed’s printing presses stop spinnng
assbot: Bitcoin Address
Tags - Blockchain.info
johntraveller: mircea_popescu:
thanks,
though I’m planning on lurking for a while until I’ve read more
mircea_popescu: k so
then it can just proceed with
the bundles normally, irrespective of what happened
to previous bundle.
mircea_popescu: consider
the following situation : bundle 1 gets made, added, gets 1 confirm. bundle 2 gets created, gets added just as
the blockchain reogrs.
mircea_popescu: yeah but i mean, better
to queue
the made
txn
than
this i
think
punkman: because only one
tx in address
punkman: well gotta confirm previous
tx
to spent again
punkman: added
transaction broadcast retrying, and also bot will stop bundling if previous bundle
tx remains unconfirmed
mircea_popescu: asciilifeform remember
the people who
think whitening does something ?