| 00:12.35 | mindjuju | wps, you around? |
| 00:13.17 | mindjuju | just wondering if you ever found a project management software that you liked |
| 00:13.26 | mindjuju | if i recall, you were wanting something minimal |
| 00:27.37 | wps | ueah |
| 00:27.39 | wps | yeah |
| 00:27.47 | mindjuju | what did you wind up picking? |
| 00:27.48 | wps | I like TaskPro the best |
| 00:28.01 | wps | I've been using it four many years |
| 00:28.10 | wps | first started using it when I was at 3form I believe |
| 00:28.15 | wps | right now I'm not using anything |
| 00:28.33 | wps | except virtual sticky notes on my desktop |
| 00:29.11 | wps | http://en.wikipedia.org/wiki/Stickies_(software) |
| 00:29.28 | wps | (although those are horrendous screen shotsâ¦Â in Mac OS X, they can be translucent which is awesome)) |
| 00:31.16 | wps | if you have a last name that is Bang and you want to say I like the Bangs, you just add an s |
| 00:31.18 | mindjuju | so it allows you to do individual tasks or organize tasks into prjojects? |
| 00:31.24 | wps | both |
| 00:31.29 | wps | what about if a last name of Ash? |
| 00:31.31 | wps | Ashs? |
| 00:31.37 | wps | or would you add an es? |
| 00:31.40 | wps | Ashes |
| 00:31.57 | wps | Ashs sure doesn't look right |
| 00:32.10 | mindjuju | yeah, i'd oh, i see what you mean |
| 00:32.12 | mindjuju | hmm |
| 00:33.17 | wps | answers.com says yes |
| 00:33.23 | wps | Add -s to make most last names plural. Add -es to those that have endings with sounds such as ch (as in Hatch, but not as in Bach), s, sh, x, and z. |
| 00:35.14 | mindjuju | i wondered what rule it would use |
| 00:37.16 | mindjuju | ~apb macnewbold |
| 00:37.17 | ibot | ACTION summons Duane Lee to rough up macnewbold |
| 00:55.32 | *** join/#uphpu Lone_Wanderer (n=Dan@wsip-70-167-207-68.ph.ph.cox.net) |
| 00:55.32 | *** mode/#UPHPU [+v Lone_Wanderer] by ChanServ |
| 00:57.44 | *** part/#uphpu mgeary (n=mgeary@166.70.44.49) |
| 00:59.22 | macnewbold | ~lart mindjuju |
| 00:59.22 | ibot | teaches mindjuju the basics, including how to RTM |
| 00:59.24 | macnewbold | sup mj? |
| 01:06.12 | Lone_Wanderer | hey, it's a macnewbold |
| 01:06.46 | macnewbold | Lone_Wanderer! how's the wandering? |
| 01:06.52 | *** join/#uphpu BooRadley (i=BooRadle@69.73.223.47) |
| 01:07.04 | Lone_Wanderer | It has brought me to Arizona |
| 01:07.09 | *** join/#uphpu redroy1 (n=Adium@c-67-177-44-214.hsd1.ut.comcast.net) |
| 01:07.09 | Lone_Wanderer | 10 miles from the Mexico border |
| 01:09.19 | BooRadley | hi all |
| 01:10.37 | Lone_Wanderer | hello Mr. Radley. |
| 01:11.04 | Lone_Wanderer | How have you been, mac? |
| 01:11.27 | BooRadley | i am fine just looking for some support on a php security issue |
| 01:11.35 | Lone_Wanderer | ahh, what's the problem? |
| 01:11.37 | BooRadley | am i in the right place? |
| 01:11.55 | Lone_Wanderer | Sure. |
| 01:11.59 | BooRadley | cool |
| 01:12.01 | BooRadley | well |
| 01:12.30 | BooRadley | i have a site and it was hacked....the hacker used a shell script to deface it |
| 01:12.38 | BooRadley | i have since tried to patch t up\ |
| 01:13.01 | BooRadley | so i want to see if i can test its security now |
| 01:13.02 | Lone_Wanderer | ok |
| 01:13.03 | Lone_Wanderer | you can't |
| 01:13.19 | mindjuju | i think you'll find the consensus on an issue of server being hacked is that it should be scraped and reinstalled |
| 01:13.31 | Lone_Wanderer | Once you've been rooted, the only safe way to fix it is to.... do what mindjuju just said. |
| 01:13.35 | mindjuju | as there is no way to guarantee there isn't backdoors |
| 01:14.20 | mindjuju | extending that a little bit, when putting the site back together on the new server |
| 01:14.45 | mindjuju | i'd go back to a backup to get the site code |
| 01:14.54 | mindjuju | and fix the hole that was expoited |
| 01:15.08 | mindjuju | the reason is that there may be stuff in your site code |
| 01:15.16 | BooRadley | ok...i did that...i think...i needed to sanitize my inputs |
| 01:15.57 | BooRadley | i placed the site live again....to see if it is still vulnerable |
| 01:16.41 | mindjuju | so you're saying you want like a security assement? |
| 01:16.48 | mindjuju | assessment, i mean |
| 01:17.50 | BooRadley | yeh that could work...i laso wanted to find out the most common way a hacker would be able to place a shell script on a server |
| 01:17.54 | BooRadley | also* |
| 01:18.52 | mindjuju | well, to find out what happened, you'll need to go to your log file |
| 01:18.58 | mindjuju | unless that was wiped out to cover tracks |
| 01:19.19 | mindjuju | depending on if this was a personal server or a worker server, I'd hire a pro to test |
| 01:19.34 | mindjuju | though if you want to do some prelim stuff, here are a couple things to look at |
| 01:19.46 | mindjuju | cirt.net/nikto2 |
| 01:19.46 | mindjuju | www.sensepost.com/research/wikto/ |
| 01:20.10 | mindjuju | along with port scanning your server to see what ports are open |
| 01:20.14 | mindjuju | you can do that with nmap |
| 01:20.31 | mindjuju | i just know the basics on nmap, though others here know more |
| 01:20.56 | BooRadley | ok...i will check the server logs..for any thing susspicious... |
| 01:21.01 | BooRadley | thanks for the help |
| 01:21.11 | mindjuju | yup |
| 01:21.41 | mindjuju | come back during the day and ask for stderr -- he's great with stuff like this |
| 01:22.01 | mindjuju | he's good about answering questions, etc |
| 01:22.25 | mindjuju | though it helps to have your ducks in a row and have a basic understanding of things |
| 01:22.26 | BooRadley | cool...this is the 1st time i been on irc in ages |
| 01:22.43 | mindjuju | yeah, i love it and #uphpu has a great diversity of specialities |
| 01:22.47 | BooRadley | i know...since the defacing i learned a lot more on security |
| 01:23.21 | mindjuju | DBAs, Security gurus, Coders, Graphic Artists, CSS pros, PHP pros, Sys Admins, VOIP pros |
| 01:23.37 | mindjuju | you name the tech, and we prolly have someboyd here that can cover it :) |
| 01:24.12 | mindjuju | BooRadley - what OS you running on your server? |
| 01:24.15 | BooRadley | my main specialty i web development...but i have branched off into graphic design, flash, video, and anything related |
| 01:24.19 | mindjuju | Windows or linux? |
| 01:24.27 | BooRadley | its a linux on godaddy |
| 01:24.40 | BooRadley | i use a portable server on my pc |
| 01:24.44 | BooRadley | as well |
| 01:24.52 | mindjuju | ah, in our sister chan #UTOS, we are planning a conference |
| 01:25.03 | mindjuju | several of the topics are on servers, including networking, security, etc |
| 01:25.11 | BooRadley | cool |
| 01:25.11 | mindjuju | conf is next thursday in SLC |
| 01:25.24 | BooRadley | slc? |
| 01:25.28 | mindjuju | salt lake city |
| 01:25.44 | mindjuju | here is info |
| 01:25.44 | mindjuju | http://2009.utosc.com/pages/home/ |
| 01:25.45 | BooRadley | ahhh |
| 01:27.33 | BooRadley | i saved the shell scripts.....i must say those are some very powerful scripts |
| 01:29.57 | BooRadley | interesting conference |
| 01:31.49 | mindjuju | can you pastebin.ca the scripts so we can see? |
| 01:41.10 | BooRadley | ok |
| 01:41.10 | BooRadley | its a EgY_SpIdEr ShElL V2 |
| 01:41.29 | BooRadley | http://pastebin.ca/1588714 |
| 01:42.23 | BooRadley | from what i can gather...the hacker placed it in an imagefolder that was there for logo uploads |
| 01:43.06 | DexterTheDragon | yeah that probably how he got in |
| 01:48.06 | DexterTheDragon | that is a long script, gonna take awhile to read |
| 01:50.52 | BooRadley | in a nutshell...it loads acontroll panel with all sorts of tools to run |
| 01:51.15 | DexterTheDragon | yeah its a typical shell |
| 01:57.29 | *** join/#uphpu cro (n=cro@12.186.112.169) |
| 02:42.39 | *** join/#uphpu Utah_Dave (n=boucha@c-67-177-35-247.hsd1.ut.comcast.net) |
| 02:53.36 | Utah_Dave | My Google Wave invite came through! Thanks, herlo |
| 03:08.09 | herlo | Utah_Dave: awesome |
| 03:13.10 | *** join/#uphpu mindjuju (n=mindjuju@mail.billgood.us) [NETSPLIT VICTIM] |
| 03:13.10 | *** join/#uphpu cro (n=cro@12.186.112.169) [NETSPLIT VICTIM] |
| 03:13.10 | *** join/#uphpu redroy1 (n=Adium@c-67-177-44-214.hsd1.ut.comcast.net) [NETSPLIT VICTIM] |
| 03:13.10 | *** join/#uphpu stderr (n=stderr@truedat.org) [NETSPLIT VICTIM] |
| 03:13.11 | *** join/#uphpu orsonj (n=orson@b22222.bookstore.usu.edu) [NETSPLIT VICTIM] |
| 03:13.11 | *** join/#uphpu burnin (n=burnin@204-228-142-196.ip.xmission.com) [NETSPLIT VICTIM] |
| 03:13.11 | *** join/#uphpu jsmith-teaching (n=jsmith@asterisk/training-and-documentation-guru/jsmith) [NETSPLIT VICTIM] |
| 03:13.11 | *** mode/#UPHPU [+ovvv mindjuju orsonj burnin jsmith-teaching] by irc.freenode.net |
| 04:58.07 | *** part/#uphpu Utah_Dave (n=boucha@c-67-177-35-247.hsd1.ut.comcast.net) |
| 06:49.58 | *** join/#uphpu ibot (i=ibot@rikers.org) |
| 06:49.58 | *** topic/#uphpu is Utah PHP Users Group | uphpu.org |
| 06:50.03 | *** mode/#UPHPU [+v ibot] by ChanServ |
| 07:14.30 | *** join/#uphpu justincarmony (n=justinca@c-98-202-44-233.hsd1.ut.comcast.net) |
| 07:14.30 | *** mode/#UPHPU [+v justincarmony] by ChanServ |
| 07:20.29 | *** join/#uphpu opapo (n=daniel@205.118.116.89) |
| 07:30.29 | *** join/#uphpu stderr (n=stderr@truedat.org) |
| 13:42.01 | *** join/#uphpu BooRadley (i=BooRadle@69.73.223.47) |
| 14:19.15 | *** join/#uphpu redroy1 (n=Adium@c-67-177-44-214.hsd1.ut.comcast.net) |
| 14:33.25 | PoeticIntensity | ugh.... |
| 14:53.02 | *** join/#uphpu _psychic_ (n=_psychic@173-8-91-177-Utah.hfc.comcastbusiness.net) |
| 14:53.02 | *** mode/#UPHPU [+v _psychic_] by ChanServ |
| 14:59.13 | *** join/#uphpu redroy1 (n=Adium@c-67-177-44-214.hsd1.ut.comcast.net) |
| 15:00.05 | *** join/#uphpu fungus (n=olsonl@bromine.sosstaffing.com) |
| 15:00.05 | *** mode/#UPHPU [+o fungus] by ChanServ |
| 15:04.35 | *** join/#uphpu mgeary (n=mgeary@166.70.44.49) |
| 15:04.35 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 15:29.01 | *** join/#uphpu Utah_Dave (n=David@72-166-51-162.dia.static.qwest.net) |
| 15:29.01 | *** mode/#UPHPU [+o Utah_Dave] by ChanServ |
| 15:30.22 | *** join/#uphpu SunSparc (n=sparky@173-8-91-177-Utah.hfc.comcastbusiness.net) |
| 15:30.22 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 15:36.19 | *** join/#uphpu cro (n=cro@166-70-222-105.ip.xmission.com) |
| 15:47.43 | *** join/#uphpu redroy1 (n=Adium@66.60.105.178) |
| 15:52.32 | *** join/#uphpu justincarmony (n=justinca@98.202.44.233) |
| 15:52.32 | *** mode/#UPHPU [+v justincarmony] by ChanServ |
| 16:04.55 | *** join/#uphpu _psychic__ (n=_psychic@173-8-91-177-Utah.hfc.comcastbusiness.net) |
| 16:05.00 | *** mode/#UPHPU [+v _psychic__] by ChanServ |
| 16:10.23 | justincarmony | morning |
| 16:10.54 | justincarmony | anyone have any suggestions on a good place to use to host DNS |
| 16:13.36 | optikal | ZoneEdit is free up to 5 domains. |
| 16:14.05 | optikal | Only used it for personal, small sites though. |
| 16:20.06 | fungus | Though they just slave off my own home run DNS server |
| 16:35.23 | Utah_Dave | An old friend of mine's little brother posted this on Facebook. "Does anybody out there understand Internet Protocols?" |
| 16:35.55 | Utah_Dave | I replied to him saying I could probably help him out. |
| 16:36.16 | Utah_Dave | Turns out he can't get his network card working |
| 16:37.50 | *** join/#uphpu PoeticIntensity (n=jason@67.214.232.162) |
| 16:37.50 | *** mode/#UPHPU [+v PoeticIntensity] by ChanServ |
| 16:37.51 | fungus | hehe |
| 16:48.02 | *** join/#uphpu PoeticIntensity (n=jason@67.214.232.162) |
| 16:48.02 | *** mode/#UPHPU [+v PoeticIntensity] by ChanServ |
| 16:52.26 | *** join/#uphpu _psychic_ (n=_psychic@173-8-91-177-Utah.hfc.comcastbusiness.net) |
| 16:52.26 | *** mode/#UPHPU [+v _psychic_] by ChanServ |
| 16:58.12 | *** join/#uphpu redroy (n=Adium@66.60.105.178) |
| 17:10.57 | *** join/#uphpu whiteinge (n=whiteing@whiteinge.dsl.xmission.com) |
| 17:44.39 | mindjuju | anybody here created an easy to remember password generator and if so, how'd you do it? |
| 17:44.55 | mindjuju | big word bank? |
| 17:46.12 | cro | perl script to pick from random characters. |
| 17:46.18 | cro | My users hated me |
| 17:46.20 | cro | :-) |
| 17:46.36 | mindjuju | :) |
| 17:46.48 | fungus | apg |
| 17:46.52 | mindjuju | was hoping something more like this - http://paulding.net/password.html |
| 17:47.01 | mindjuju | it's for a 1 time event |
| 17:47.25 | fungus | apt-get install apg |
| 17:47.27 | fungus | or http://www.msdservices.com/apg/index.php |
| 17:47.42 | mgeary | apg++ |
| 17:47.53 | mindjuju | yeah, those are nice an beefy |
| 17:47.54 | mgeary | though it's not very easy to remember what it makes |
| 17:47.57 | mindjuju | i need soft and fluffy |
| 17:48.22 | mindjuju | click my link real quick |
| 17:48.25 | fungus | I make all my passwords from apg |
| 17:48.31 | mindjuju | see, nice and fluffy |
| 17:48.39 | mindjuju | it's not ging to secure fort knox |
| 17:48.50 | mindjuju | 1 use only password, easy to remember and type |
| 17:48.59 | fungus | apg is strong, but easy to remember |
| 17:49.11 | mgeary | i dunno about easy to remember... |
| 17:49.28 | mindjuju | more fluff! |
| 17:49.34 | mindjuju | must be fluffier! |
| 17:49.47 | fungus | ahh, for retards |
| 17:49.48 | mindjuju | i think i'll go with a word bank or something |
| 17:49.53 | orsonj | http://www.cs.indiana.edu/cgi-bin/haiku |
| 17:50.20 | fungus | how about "I can't remember passwords" |
| 17:50.30 | fungus | very strong, and easy to remember |
| 17:50.46 | mindjuju | yeah, i have to produce a few hundred passwords |
| 17:50.48 | fungus | or "Iamanidiot |
| 17:51.04 | mindjuju | 1x use only, for an event |
| 17:51.28 | fungus | how about "$firstname can't remember passwords" |
| 17:52.17 | fungus | <PROTECTED> |
| 17:52.35 | mindjuju | http://www.mrsperkins.com/dolch-words-all.html |
| 17:52.40 | mgeary | DON'T CROSS THE STREAMS!! |
| 17:52.51 | mindjuju | like in the primer, what if eat5brown |
| 17:53.01 | mindjuju | i wonder if that'll mean something bad to somebody |
| 18:08.28 | mindjuju | anybody looking for contract work, look at #uphpu mailing list |
| 18:08.35 | mindjuju | if you're not on it, let me know |
| 18:12.11 | DexterTheDragon | mindjuju: python -c 'import random; fd=file("/usr/share/dict/words"); l=fd.readlines(); w1=random.randint(0, len(l)); w2=random.randint(0,len(l)); print "%s%d%s" % (l[w1].strip(),random.randint(0,10),l[w2].strip())' |
| 18:12.27 | DexterTheDragon | there's your fluffy passwords |
| 18:13.34 | mindjuju | :) |
| 18:19.46 | fungus | what would you think if you were a reporter and your password is fabricates7overcompensates |
| 18:20.06 | mindjuju | :) |
| 18:20.37 | fungus | hehe, this is fun. thx DexterTheDragon |
| 18:20.46 | DexterTheDragon | lolz |
| 18:23.29 | DexterTheDragon | forsaking6voyeurism's |
| 19:10.55 | *** join/#uphpu pelaofeliz (n=PelaoFel@67.108.236.230) |
| 19:18.04 | *** join/#uphpu justincarmony (n=justinca@c-98-202-44-233.hsd1.ut.comcast.net) |
| 19:18.04 | *** mode/#UPHPU [+v justincarmony] by ChanServ |
| 19:20.43 | *** join/#uphpu mindjuju (n=mindjuju@mail.billgood.us) [NETSPLIT VICTIM] |
| 19:20.43 | *** join/#uphpu whiteinge (n=whiteing@oalug/member/whiteinge) [NETSPLIT VICTIM] |
| 19:20.43 | *** join/#uphpu cro (n=cro@166-70-222-105.ip.xmission.com) [NETSPLIT VICTIM] |
| 19:20.43 | *** join/#uphpu orsonj (n=orson@b22222.bookstore.usu.edu) [NETSPLIT VICTIM] |
| 19:20.43 | *** join/#uphpu burnin (n=burnin@204-228-142-196.ip.xmission.com) [NETSPLIT VICTIM] |
| 19:20.43 | *** join/#uphpu jsmith-teaching (n=jsmith@asterisk/training-and-documentation-guru/jsmith) [NETSPLIT VICTIM] |
| 19:20.43 | *** mode/#UPHPU [+ovvv mindjuju orsonj burnin jsmith-teaching] by irc.freenode.net |
| 19:30.06 | DexterTheDragon | ~rlart |
| 19:30.07 | ibot | send killer squirrels to attack mindjuju |
| 19:50.41 | *** join/#uphpu trevynm (n=trevynme@173.116.115.208) |
| 19:53.07 | *** part/#uphpu trevynm (n=trevynme@173.116.115.208) |
| 20:03.52 | *** part/#uphpu mindjuju (n=mindjuju@mail.billgood.us) |
| 20:20.53 | *** join/#uphpu andrey (n=andrey@elphelut.fttp.xmission.com) |
| 20:23.40 | andrey | Does anybody know if UTOSC has any phone contacts? |
| 20:27.05 | stderr | ~ping herlo |
| 20:27.06 | ibot | pong herlo |
| 20:27.52 | herlo | stderr: pong |
| 20:28.06 | stderr | andrey's question, above ^ |
| 20:28.29 | herlo | andrey: we do, but prefer to be contacted by email |
| 20:29.23 | andrey | We already sent one this morning |
| 20:29.35 | herlo | about? |
| 20:29.40 | herlo | the booth? |
| 20:29.45 | herlo | I think we are working on a reply now |
| 20:29.53 | herlo | but we're up for it |
| 20:35.48 | *** join/#uphpu olga (n=olga@elphelut.fttp.xmission.com) |
| 21:03.44 | mgeary | i'd like a booth so i can display and sell my special designer dog breed. Pookinausers: a special toy hybrid of poodles, pekinese and schnauzers |
| 21:05.08 | *** join/#uphpu jtsnow (n=chatzill@151.118.128.100) |
| 21:06.19 | herlo | mgeary: is it free or open source software? |
| 21:06.34 | *** join/#uphpu mindjuju (n=mindjuju@mail.billgood.us) |
| 21:06.34 | *** mode/#UPHPU [+o mindjuju] by ChanServ |
| 21:06.47 | mgeary | their DNA is open-source. It's the ultimate hacker's pet |
| 21:08.28 | herlo | heh, I'm sorry, we're all out of booths. |
| 21:09.28 | mgeary | ~sulk |
| 21:09.29 | ibot | well, sulk is now you're hurting me .. |
| 21:11.48 | *** join/#uphpu _psychic_ (n=_psychic@173-8-91-177-Utah.hfc.comcastbusiness.net) |
| 21:11.48 | *** mode/#UPHPU [+v _psychic_] by ChanServ |
| 21:35.24 | *** join/#uphpu ibot (i=ibot@rikers.org) |
| 21:35.24 | *** topic/#uphpu is Utah PHP Users Group | uphpu.org |
| 21:35.24 | *** mode/#UPHPU [+v ibot] by ChanServ |
| 21:36.35 | beandog | http://www.yourlogomakesmebarf.com/ |
| 21:41.46 | tierra | heh... Pegleg Paintball is in there |
| 21:56.11 | redroy | Dang, seems to only be ff too... stupid |
| 21:57.13 | Utah_Dave | In a MySQL database I have a tinyint column named 'Confirmed' that defaults to NULL. When a user marks that row as Confirmed I set it to '1' |
| 21:57.38 | Utah_Dave | WHERE Confirmed != '1' does not return any row that has the field set to NULL |
| 21:57.49 | Utah_Dave | I thought that was kind of weird |
| 21:58.41 | DexterTheDragon | well thats NULL |
| 21:58.55 | Utah_Dave | isn't NULL not a 1? |
| 21:59.27 | DexterTheDragon | it neither equals anything or does not equal anything, its NULL |
| 22:01.19 | redroy | 10.45.6.62 |
| 22:01.27 | redroy | whoops, wrong im |
| 22:01.29 | DexterTheDragon | NULL is an absence of value, so it can't !=1 cause it has no value |
| 22:01.31 | DexterTheDragon | fun huh |
| 22:02.25 | Utah_Dave | yeah, kind of a pain in this instance. |
| 22:43.33 | DexterTheDragon | ~lart mindjuju |
| 22:43.33 | ibot | puts on a hockey mask and jumps out at mindjuju |
| 22:43.39 | DexterTheDragon | BOOO! |
| 23:25.43 | herlo | mindjuju: ping |
| 23:57.21 | beandog | now_playing[Destiny Trip] length[2:31/6:26] |