Friday, 2015-12-11

*** salv-orl_ has joined #openstack-security00:04
*** salv-orlando has quit IRC00:06
*** carla1 has joined #openstack-security00:14
*** carla1 has quit IRC00:14
*** austin987 has quit IRC00:15
*** sigmavirus24 is now known as sigmavirus24_awa00:26
*** salv-orl_ has quit IRC01:00
*** bigpuddintater has joined #openstack-security01:53
bigpuddintaterHey, guys. This is probably pretty common, but I'm interested in security and ethical hacking. I'm running ubuntu and I know the basics of java and c. Any advice on where to go from here?01:56
*** bigpuddintater has left #openstack-security01:58
*** jamielennox is now known as jamielennox|away02:01
openstackgerritEric Brown proposed openstack/bandit: Use sphinx autodoc to generate docs from docstring  https://review.openstack.org/25617702:02
*** bigpuddintater has joined #openstack-security02:02
*** bigpuddintater has left #openstack-security02:03
*** bigpuddintater has joined #openstack-security02:03
bigpuddintaterI suppose not, then?02:03
*** bpokorny_ has joined #openstack-security02:05
*** browne has quit IRC02:06
*** bigpuddintater has left #openstack-security02:07
*** bpokorny has quit IRC02:09
*** bpokorny_ has quit IRC02:10
*** jamielennox|away is now known as jamielennox02:29
*** Grey_A has joined #openstack-security02:36
*** Grey_A has quit IRC02:36
*** kaotiko has quit IRC02:49
*** sinkmanu has joined #openstack-security02:57
*** salv-orlando has joined #openstack-security03:04
*** browne has joined #openstack-security03:10
*** salv-orlando has quit IRC03:14
*** bpokorny has joined #openstack-security03:59
*** dave-mccowan has quit IRC04:13
*** salv-orlando has joined #openstack-security05:05
*** ig0r__ has joined #openstack-security05:15
*** ig0r_ has quit IRC05:19
*** ig0r__ has quit IRC05:21
*** armitage81 has quit IRC05:30
*** bpokorny has quit IRC05:56
*** salv-orl_ has joined #openstack-security06:04
*** salv-orlando has quit IRC06:07
openstackgerritEric Brown proposed openstack/bandit: Use sphinx autodoc to generate docs from docstring  https://review.openstack.org/25617706:25
*** tpeoples has joined #openstack-security06:26
*** jamielennox is now known as jamielennox|away06:33
openstackgerritOpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals  https://review.openstack.org/25624306:44
openstackgerritMerged openstack/security-doc: Updated from openstack-manuals  https://review.openstack.org/25624306:54
*** salv-orlando has joined #openstack-security06:57
*** salv-orl_ has quit IRC06:59
*** salv-orlando has quit IRC07:01
*** ig0r_ has joined #openstack-security07:32
*** agireud has quit IRC08:10
*** ig0r_ has quit IRC08:11
*** ig0r_ has joined #openstack-security08:19
*** Steap has quit IRC08:24
*** Steap has joined #openstack-security08:24
*** browne has quit IRC08:25
*** shohel has joined #openstack-security08:34
*** salv-orlando has joined #openstack-security08:44
openstackgerritvenkatamahesh proposed openstack/security-doc: Drop py26 from setup.cfg file  https://review.openstack.org/25628408:44
*** rcernin has joined #openstack-security08:44
*** salv-orlando has quit IRC08:50
*** ig0r_ has quit IRC08:53
openstackgerritMerged openstack/security-doc: Drop py26 from setup.cfg file  https://review.openstack.org/25628409:06
*** ig0r_ has joined #openstack-security09:19
openstackgerritvenkatamahesh proposed openstack/security-specs: Add python versions for classifier in setup.cfg  https://review.openstack.org/25629909:22
*** ig0r_ has quit IRC09:47
*** salv-orlando has joined #openstack-security10:23
*** wayward has joined #openstack-security10:58
*** wayward is now known as Guest5859810:58
*** wayward710 has quit IRC11:02
*** ig0r_ has joined #openstack-security11:08
*** ig0r_ has quit IRC11:46
*** salv-orl_ has joined #openstack-security11:50
*** salv-orlando has quit IRC11:54
*** salv-orl_ has quit IRC11:54
*** ig0r_ has joined #openstack-security12:14
*** rcernin has quit IRC12:18
*** ig0r_ has quit IRC12:24
*** salv-orlando has joined #openstack-security12:31
*** salv-orl_ has joined #openstack-security13:03
*** salv-orlando has quit IRC13:05
*** ig0r_ has joined #openstack-security13:16
*** ig0r_ has quit IRC13:25
*** dave-mccowan has joined #openstack-security13:28
*** salv-orl_ has quit IRC13:39
*** hyakuhei has joined #openstack-security13:52
*** hyakuhei has quit IRC14:00
*** hyakuhei_ has joined #openstack-security14:02
*** gocrazy has joined #openstack-security14:24
*** hyakuhei_ has quit IRC14:35
*** hyakuhei_ has joined #openstack-security14:37
*** shohel has quit IRC14:38
*** ig0r_ has joined #openstack-security14:41
*** ig0r_ has quit IRC14:43
*** pdesai has joined #openstack-security14:43
*** pdesai has quit IRC14:44
*** hyakuhei_ has quit IRC14:50
*** hyakuhei has joined #openstack-security14:51
*** hyakuhei has quit IRC14:53
*** gocrazy has quit IRC14:55
*** hyakuhei_ has joined #openstack-security14:55
*** hyakuhei_ has quit IRC14:58
*** gocrazy has joined #openstack-security14:58
*** ig0r_ has joined #openstack-security15:01
*** hyakuhei_ has joined #openstack-security15:02
*** ig0r_ has quit IRC15:06
*** mdavidson has quit IRC15:06
*** sigmavirus24_awa is now known as sigmavirus2415:15
openstackgerritMerged openstack/security-specs: Add python versions for classifier in setup.cfg  https://review.openstack.org/25629915:18
*** hyakuhei_ has quit IRC16:00
*** dave-mccowan has quit IRC16:04
*** ccneill has joined #openstack-security16:13
*** hyakuhei has joined #openstack-security16:14
*** dave-mccowan has joined #openstack-security16:19
*** mdavidson has joined #openstack-security16:19
*** ig0r_ has joined #openstack-security16:21
*** bpokorny has joined #openstack-security16:28
openstackgerritMichael Dong proposed openstack/syntribos: Added in issues for test results  https://review.openstack.org/25535716:45
*** ig0r_ has quit IRC16:47
*** salv-orlando has joined #openstack-security16:48
*** jhfeng has joined #openstack-security16:59
*** browne has joined #openstack-security17:15
*** hyakuhei has quit IRC17:17
*** hyakuhei_ has joined #openstack-security17:28
*** jhfeng has quit IRC17:31
*** hyakuhei_ has quit IRC17:34
*** jhfeng has joined #openstack-security17:35
*** browne has quit IRC17:49
*** bpokorny_ has joined #openstack-security17:58
*** bpokorny_ has quit IRC17:58
*** bpokorny_ has joined #openstack-security17:59
*** bpokorny has quit IRC18:02
*** browne has joined #openstack-security18:37
*** shakamunyi has quit IRC18:44
*** elo has joined #openstack-security18:51
*** pdesai has joined #openstack-security18:51
*** ccneill_ has joined #openstack-security18:58
*** ccneill has quit IRC18:59
*** ccneill_ is now known as ccneill18:59
*** yuanying has quit IRC19:03
tmcpeakbrowne: ping19:39
sigmavirus24tmcpeak: browne hope I didn't rain on anyone's parade19:40
tmcpeaksigmavirus24: feedback is good :)19:42
*** shakamunyi has joined #openstack-security19:49
*** agireud has joined #openstack-security19:51
sigmavirus24tmcpeak: I'm looking at your baseline change19:52
sigmavirus24I'm very confused by things19:52
tmcpeaksigmavirus24: how come?19:53
sigmavirus24There a lots of global vars19:53
sigmavirus24*are lots19:53
tmcpeakyeah, figured it was just cleaner looking for the small program than passing stuff around everywhere19:54
sigmavirus24That's why you can't test it without subprocess though :/19:54
tmcpeakahh19:55
*** shakamunyi has quit IRC19:55
sigmavirus24tmcpeak: y'all can merge that, but I'd like to take a shot at refactoring it a bit19:55
tmcpeaksigmavirus24: ok cool, sounds like a plan19:55
browneno worries, i like reviews.  that doc patch still needs work19:59
sigmavirus24I just don't want to start sneaking back into Bandit -1'ing everything :P20:01
tmcpeaksigmavirus24: we expect nothing else :P20:02
chair6so y'all want me to merge this bandit-baseline thing in now?20:04
tmcpeakchair6: badly :)20:04
sigmavirus24lol20:05
elmikosigmavirus24: +1 on the refactor20:05
sigmavirus24Idk when I'll have time20:05
sigmavirus24But I'll do it20:05
elmikoi refrained from -1'ing because it seemed like the group had good consensus about the state of the patch20:05
* sigmavirus24 is moving people this weekend20:05
elmikobut i agree with sigmavirus24's thinking about the code20:05
tmcpeakcool, fair enough20:06
elmikoplus it seems like a good starting point for the baseline20:06
tmcpeakyeah, I think it will be useful so I'd like to get it out there and we can always clean it up, iterate as needed in the future20:07
elmiko+120:07
tmcpeakbrowne: any thoughts on timing for your doc stuff?20:08
tmcpeakwas planning on rolling 0.17.0 soon with the baseline tool, but if you think it might be in soon I'm happy to hold off20:09
tmcpeakseems like a great improvement20:09
openstackgerritMerged openstack/bandit: Adding bandit-baseline tool  https://review.openstack.org/25445520:25
sigmavirus24elmiko: so what your'e saying is that the review for the bandit-baseline tool was a good baseline for the tool?20:28
sigmavirus24:P20:28
elmikohaha, nice!20:30
elmikoi wish i had more time to work on bandit, sadly i'll just have to snipe my occasional +1 here and there ;)20:31
*** timkennedy has joined #openstack-security20:34
*** ig0r_ has joined #openstack-security20:37
brownetmcpeak: the doc stuff won't be ready till next week.  when are you planning on doing 0.17?20:46
*** Pic_Sky has joined #openstack-security20:46
tmcpeakbrowne: I was planning for Monday20:46
tmcpeakwe could punt until Tues or Wednesday if you think you could have it done by then20:46
browneok, hopefully by then20:47
brownetarget wednesday20:47
tmcpeakI don't want to hold off much past that because we're going to use it as part of our outreach20:47
tmcpeakok cool20:47
tmcpeaksounds good20:47
sigmavirus24tmcpeak: also, I'm all booked and ready for the OSSG mid-cycle20:48
tmcpeaksigmavirus24: awesome! with any luck I should be good to go soon too20:48
tmcpeakstill waiting for approval20:48
tmcpeakhow about you browne? elmiko?20:49
tmcpeaknkinder20:49
*** gocrazy has quit IRC20:49
brownei still need approval.  let me check on that today20:49
tmcpeakcool20:49
elmikotmcpeak: i'm waiting on travel approval20:51
elmikoi hope to have it sorted before holiday break20:51
nkindertmcpeak: it's bumping up against another international trip I have going on around then20:51
nkinderthey don't overlap, but it's a lot to have back to back20:51
tmcpeaknkinder: ahh, ok bummer20:51
*** rcernin has joined #openstack-security20:56
*** gocrazy has joined #openstack-security21:01
Pic_Sky<Saoul server amtp peel one Yellow ?>21:03
*** dave-mccowan has quit IRC21:05
sigmavirus24wat? ^21:06
tmcpeakyeah, wut21:07
tmcpeaksomebody's really awesome password?21:08
Pic_Sky<Bip'ch work hours in marley room geef-beef, tempest wank time pitch tomer d'gever ? Flip home ?>21:09
*** ChanServ sets mode: +o tmcpeak21:09
*** Pic_Sky was kicked by tmcpeak (gibberish)21:09
tmcpeakhaven't seen any spanish bots in a while21:10
tmcpeakmaybe because I was in Europe and they are predominantly active in this timezone?21:10
*** ChanServ sets mode: -o tmcpeak21:10
elmikowow that was fun21:13
elmikotmcpeak: you'll love this, i got this as a private msg the other day21:13
elmikopepe> Hi! I am new in this site, I am a network administrator in Cuba and I am using OpenStack. Can you tell me the password  for this chanel?21:13
michaelxinelmiko: lol21:13
tmcpeaklooooool21:13
elmikohaha21:13
tmcpeakdid you tell him? ;)21:14
elmikothat was is definitely going in my save file21:14
elmikonothing, i was afk at the time21:14
michaelxinOur password is password21:14
elmiko+121:14
elmikologin creds admin/password21:14
tmcpeakmichaelxin: it was until we had to cycle, now it's password121:14
elmikolol!21:15
michaelxintmcpeak: +121:15
michaelxinPassword123 used to be one of the top three choices21:15
elmikowhat about 1234521:16
sigmavirus24elmiko: that's my luggage combination!21:17
elmiko=D21:17
*** dave-mccowan has joined #openstack-security21:21
tmcpeakoh this is cool, I hadn't seen this: http://blog.rackspace.com/hack-some-tools-openstack-security-project/21:22
michaelxintmcpeak: +121:22
*** bpokorny_ has quit IRC21:23
*** bpokorny has joined #openstack-security21:23
elmikoooh neat21:24
*** bpokorny has quit IRC21:24
*** pdesai has quit IRC21:24
*** bpokorny has joined #openstack-security21:25
*** pdesai has joined #openstack-security21:25
michaelxinThe Hunger Games: Mockingjay - Part 221:26
michaelxinsorry, wrong channel :-)21:27
sigmavirus24michaelxin: is that your password?21:31
michaelxinsigmavirus24: lol21:31
elmikohaha21:35
elmikoit's got decent entropy at least21:35
*** austin987 has joined #openstack-security21:36
michaelxinelmiko: agree. haha21:36
michaelxineverything you need for a passphase is there.21:36
elmikoright ;)21:36
*** timkennedy has left #openstack-security21:42
*** pdesai has quit IRC22:07
*** pdesai has joined #openstack-security22:09
openstackgerritMichael Dong proposed openstack/syntribos: Added in issues for test results  https://review.openstack.org/25535722:12
browneok, i got the approval for midcycle.  see ya guys in San Antonio22:14
brownebtw, there is a security related review in keystone.  this patch is using passwords on the command line.  kinda security no-no22:15
brownehttps://review.openstack.org/#/c/25559922:16
michaelxinbrowne: +122:16
michaelxinSee you.22:16
openstackgerritMichael Dong proposed openstack/syntribos: Fuzz test cases will now store information about vulnerabilities in Issue objects.  https://review.openstack.org/25679922:16
michaelxinWhat's the purpose of the password22:19
michaelxin?22:19
browneits to create a user/pwd for initial boostrapping.22:19
brownerather than using the admin token22:19
openstackgerritMichael Dong proposed openstack/syntribos: Make fuzz tests use Issue class  https://review.openstack.org/25679922:21
michaelxinAfter bootstrapping, will pw become invalid?22:22
michaelxinThanks.22:22
brownegood question.  i think it stays until someone deletes the user22:22
sigmavirus24browne: said something for you :P22:26
brownesigmavirus24: cool, thx22:27
openstackgerritMichael Dong proposed openstack/syntribos: Make fuzz tests use Issue class  https://review.openstack.org/25679922:30
*** pdesai has quit IRC22:31
*** pdesai has joined #openstack-security22:33
*** Guest58598 has quit IRC22:34
*** openstackgerrit has quit IRC22:37
*** openstackgerrit has joined #openstack-security22:37
*** rcernin has quit IRC22:37
*** gocrazy has quit IRC22:40
*** salv-orl_ has joined #openstack-security22:48
*** salv-orlando has quit IRC22:51
*** shakamunyi has joined #openstack-security22:51
openstackgerritMichael Dong proposed openstack/syntribos: Test runner and test result class now use Issues  https://review.openstack.org/25687823:00
*** shakamunyi has quit IRC23:00
*** August1914 has joined #openstack-security23:03
*** bpokorny has quit IRC23:05
*** bpokorny has joined #openstack-security23:06
openstackgerritMichael Dong proposed openstack/syntribos: Test runner and test result class now use Issues  https://review.openstack.org/25687823:11
*** pdesai has quit IRC23:16
*** pdesai has joined #openstack-security23:23
*** shakamunyi has joined #openstack-security23:26
*** shakamunyi has quit IRC23:32
*** sigmavirus24 is now known as sigmavirus24_awa23:35
*** August1914 has quit IRC23:36
*** ccneill has quit IRC23:41
*** salv-orl_ has quit IRC23:47
*** bpokorny has quit IRC23:57
*** bpokorny has joined #openstack-security23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!