general

[sand trench]

most definitely not

shadow will only tell you about the public hacking discords they are on

[grizzled wing]

hey congrats on being a wizard

[chilly veldt]

I was working on setting up my setup at home, but then I remembered that I have a technician coming in and working on an outlet on Monday😅

[split compass]

Mechanical keyboards have a huge following.

[grizzled wing]

got a Docker query, i should use Docker inside my VM for max security or is it okay on host machine?

[sand trench]

depends on what docker container and how it is configured

[grizzled wing]

ah ok

[sand trench]

if missconfigured it could give root on the host machine

[grizzled wing]

that's what i fear

[forest mortar]

Thanks! I think I'm... 2k XP away from 0xB? I think

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #71 - 83)

[naive violet]

Depends what your model of security is and what you're running in docker really

[grizzled wing]

model of security is that i want to reduce risks so i guess running Docker in a VM makes sense

the Docker image in mind is unknown, a basic Ubuntu one

[naive violet]

Reduce what risks?

[boreal scarab]

That right monitor.......

[naive violet]

Don't run untrusted docker containers, IMO

[grizzled wing]

risk of attacks. but of course don't run/install untrusted Docker containers

[midnight hazel]

hey

[chilly veldt]

It's the stand that has problems, if I put it on the left side it is straight with the middle monitor

[grizzled wing]

hey vip3r

[boreal scarab]

@shut hawk SO you've been exploring TrueNAS apps for awhile now, any you REALLY recconmend?

[boreal scarab]

What about putting a book under the right?

[naive violet]

Get truecharts working

[chilly veldt]

Hmmmm

[boreal scarab]

Done

[naive violet]

The trilium one is nice

[boreal scarab]

Got that too 😄

[chilly veldt]

Can I DM Matt?

[boreal scarab]

I do really love that, just go to the IP and port, and got all my notes there

[boreal scarab]

Always open for ya 😄

[naive violet]

Deploy yourself a wireguard

[shut hawk]

File browser is very nice

[boreal scarab]

Not a bad idea, I was thinking bout adding it for one app

[shut hawk]

Kavita

I have a Firefox VNC w/ KASM too

Ntfy for notifications

Cowyo for quick note sharing

File shelter for ez file sharing as well

[boreal scarab]

So, lemme get this traight, you want me to add a docker container..... that's a browser, so I would have to go through a browser, to get to a browser...?

[sick lance]

straight*

[buoyant tree]

lemme set it up again

[shut hawk]

File browser is for file management

https://github.com/filebrowser/filebrowser

But the Firefox VNC is so helpful

When I'm in college or remote

[buoyant tree]

firefox vnc?

[shut hawk]

Instead of having to setup bookmarks, themes, extensions, booklets, logins etc

[boreal scarab]

No, traight.

[shut hawk]

I can just connect directly to a already setup Firefox instance

Which also allows me to access my home network from it

[boreal scarab]

I read browser thinking the firefox app lol

[buoyant tree]

should I run filebrowser with docker or linux

[sick lance]

Butchering the English language as usual. 🙂

[midnight hazel]

creative name

[shut hawk]

Docker imo

[boreal scarab]

I'm sorry British, did you say, you needed a bottle of water?

https://tenor.com/view/bottle-of-water-saull-gif-26356875

[sick lance]

You do realise it's the English that pronounce it like that?

Not the full of GB.

[mossy river]

🤦‍♂️

Americans

[split compass]

So Firefox added remote access similar to chrome remote desktop? Interesting.

[boreal scarab]

https://tenor.com/view/america-hurricane-happy4th-of-july-america-flag-independence-day-gif-21259025

[simple wave]

IM ENGLISH NOT BRITISH!!!

🤡

[boreal scarab]

https://tenor.com/view/spongebob-squarepants-spongebob-nick-nickelodeon-patrick-gif-17195320

[simple wave]

I’m Texan not American!

[boreal scarab]

Texas is the most American you're gonna get

[mossy river]

No, that's like calling someone from Florida a Texan

English people are from England, Scots from Scotland, Welsh from Wales

[simple wave]

Lmaooooo

[devout palm]

Texasish

[boreal scarab]

England, Britain, UK... Y'all confusing Americans over here

[forest mortar]

Wait til they hear about Wales

[boreal scarab]

Do they live in the sea?!?!?!

[mossy river]

United Kingdom.. United States.. hmm

[forest mortar]

Some of them, others are farmers I'm told

[simple wave]

And all of them together are…

[shut hawk]

Nah it's not a Firefox specific thing, just a VNC session with Firefox running

[boreal scarab]

Like the sea people in Dave the Diver?!

[devout palm]

We all speak english, please don't fight

[split compass]

Ah, thought you were saying firefox was enabling the access 😄

That said, I do enjoy Guacamole.

[forest mortar]

idk what that is tbh

[simple wave]

The only valid Brits are Old Trafford Manchester peeps

[mossy river]

English*

[forest mortar]

What about the Scots

Is that reeeeally English

[sick lance]

We speak English too?

[forest mortar]

Could've fooled me

(jk I love Scottish accents)

[shut hawk]

Agreed, guacamole is super nice

[devout palm]

Trousers

[shut hawk]

Not the food of course

[forest mortar]

(long live Limmy)

[iron salmon]

food?

[devout palm]

We don't have chips

[simple wave]

Scots 🤝 Appalachians
|
Not speaking English

[boreal scarab]

https://tenor.com/view/lil-baby-me-no-hablo-english-dont-speak-english-lil-baby-english-paparazzi-gif-24898898

[devout palm]

Skills section in a personal website is useless, right?

[split compass]

Condiment, if you prefer?
But Guacamole the server is key here.

[forest mortar]

Depends on what purpose you want the website to serve

[devout palm]

To put in my resume, to share blogs; To publish my knowledge, experiences, and progress in the realm of technology

[forest mortar]

I mean, seems reasonable to have a skills section, or at least a section describing your technical focuses

[split compass]

Gotta keep it somewhere, may as well keep it on your site.
Then you can dump it into your git repo for easy backup.

[devout palm]

I mean, i have a database server

I don't have any blogs yet ahha

[forest mortar]

A full copy of skills from the resume might be overly redundant, but I can see there being value in having a stripped-down version on the site for people visiting it from places other than your resume

[devout palm]

I'll share my blogs on linkedin

probably

I enabled my account back

[buoyant tree]

docker run
-v /:/srv
-v /home/user/filebrowser/filebrowser.db:/database/filebrowser.db
-v /home/user/filebrowser/settings.json:/config/settings.json
-e PUID=$(id -u)
-e PGID=$(id -g)
-p 8080:80
filebrowser/filebrowser:s6

(ofc I replaced user with my usr)
@shut hawk I think I broke filebrowser when installing

[split compass]

file /database/filebrowser.db

I've seen strange mounts before.

[naive violet]

Jeez you don't have the docker mount syntax quite right

[buoyant tree]

wdym

[naive violet]

It's expecting a dir

You're passing a file

[buoyant tree]

oooooooooooooooh k

yup didn't fix by removing file name

heck offical docs say to pass a file also

docker run \
    -v /path/to/root:/srv \
    -v /path/to/filebrowser.db:/database/filebrowser.db \
    -v /path/to/settings.json:/config/settings.json \
    -e PUID=$(id -u) \
    -e PGID=$(id -g) \
    -p 8080:80 \
    filebrowser/filebrowser:s6

[naive violet]

Hmm

Maybe it's that the source is a directory

[buoyant tree]

oh read the entire docs

some extra instructions

[shut hawk]

It says it right there

"Make sure to create an empty file otherwise docker will create an empty folder and error"

[buoyant tree]

yea

just read that

[shut hawk]

Nah, it needs a file

[buoyant tree]

docker run -d --restart always
-v /:/srv
-v /home/user/filebrowser/database/filebrowser.db:/database/filebrowser.db
-v /home/user/filebrowser/config/settings.json:/config/settings.json
-e PUID=$(id -u)
-e PGID=$(id -g)
-p 8080:80
filebrowser/filebrowser:s6

ah k this worked

[boreal scarab]

@shut hawk

[shut hawk]

lol

[boreal scarab]

Expose that container to the internet

"Ooooh an open port"
Rick Roll starts playing
"FUCK"

[main kraken]

this is wild

[buoyant tree]

me doing that atm

[boreal scarab]

I just opened it, seeing what it's about. Still loading

[main kraken]

i got a like 4 cm usb drive and im trying to get kali live there and when i tok it on etcher i saw this why does that little thing where it says 32gb have actually more than my pc

[boreal scarab]

Unless that's the whole rickroll..... just loading

[buoyant tree]

how much did u get it for

[shell nova]

Oh damn, I forgot to include a rickroll in the room I submitted a while back

[main kraken]

idk got it from my dad

[boreal scarab]

video.mp4
I get a 502... but this is just beautiful

It's just a rickroll vid... amazing

[boreal scarab]

You know what that means, right?

Rick Roll every single possible way in the next room

[main kraken]

but when i tried with my other usb where i got kali live when i boot it i goes into GNU GRUB version2.06+kali1

and i cant get out to normal installation to kali linux

like this but none of the tutorials work

[naive violet]

Reflash your usb

[main kraken]

whats that:)

[loud marlin]

"format"

[main kraken]

huh

[naive violet]

Make it again

[boreal scarab]

Nothing but 502 on this rickroll container. I sadge

[main kraken]

the kali wlinsuxx >.<

[buoyant tree]

Should I play a game or watch a cartoon

[buoyant tree]

Time to make my own one

[main kraken]

THM

[buoyant tree]

eh not atm

gotta relax my brain

[main kraken]

not try hack me like me but website

[buoyant tree]

@plush needle did u accidently send a pic in #announcements

[main kraken]

and i mean don try hack the website i mean rooms

[boreal scarab]

They got Splunk👀

[sage wolf]

lmao

[boreal scarab]

Checking it out, no use case here, but neat

I haven't really found an extra app that's useful for me, couple that look cool, but gotta read how to install em properly, they gotta complicate stuff lol

[buoyant tree]

@boreal scarabtry this cmd

ls -lol

it works

[main kraken]

im going alpha mode soon

[boreal scarab]

ls -lo does the same thing

Same output, the hell is -lol?

[chilly veldt]

Just double L's that you're taking

[shut hawk]

laugh out loud

[main kraken]

Im going alpha mode

[boreal scarab]

Cool

[chilly veldt]

Did you know nmap has --allports as a command

[main kraken]

i saw on tiktok its good to put salt water in hair so i took a bag of salt in some water and now my head hurts my hair is dry like sand

[boreal scarab]

isn't that just -p- but written out?

[chilly veldt]

Nope

[main kraken]

nmap -p-

nmap

[shut hawk]

don't take advice from tiktok out of all places

[chilly veldt]

Allports scans some ports that doesn't support a protocol, where -p- skips it iirc

[main kraken]

thats what i do

its very good just find right videos (i ended up in the hospital once bc i trusted tiktok)

my hair tastes very salt

[chilly veldt]

.....

[main kraken]

.................

[sick lance]

Holy moly.

General is on one.

[main kraken]

https://cdn.discordapp.com/emojis/874480044771274762.webp?size=48&name=hushmode&quality=lossless

[chilly veldt]

My brain hurts because of it

[main kraken]

why

Who thinks i can quit school and work with cybersecurity now😎 i can do mnmap and gobuster (bc i do every day on THM i love challenges there😎😎😎😎😎😎) and i can throw my pc when i cant get access to a exploit after i have came so far

[rapid merlin]

Stay in school kid.

[main kraken]

actually im 30

[boreal scarab]

On one?

[loud marlin]

then you might be to long in school

[boreal scarab]

You mean many

Anywho... still have no idea, for me, a use case for Splunk Enterprise.

[main kraken]

ima try restart now and see if the kali works if its going again top GNO GRUB so im stuck there im gonna cry and ask for help

in 2min

that means thm time😎

[rapid merlin]

Youre 30 and still in school?

[main kraken]

no

i was joking im not 30 im 4

[magic loom]

Morning all

[main kraken]

Morning

its 9:59 PM for me tho

[split compass]

Regardless of what you think of the subject matter. ||https://www.irishtimes.com/ireland/education/2022/11/04/trinitys-oldest-ever-phd-graduate-84-tackles-harry-potters-popularity-with-adults/||
Never stop stop learning. 84 year old PHD grad.

[magic loom]

8am, here

[crude stump]

Wow

[rapid merlin]

Thaht right. Its never to late. I agree with thaht sir

[crude stump]

People change careers so they go to college to get a degree in thus career

[rapid merlin]

Ive started learning CyberSec this year and im 26. The whole time i thought i was to old to make a carrer in CyberSec.

[crude stump]

Never too old

[boreal scarab]

@sand trench

[crude stump]

Hm

Personally I hate soup

[boreal scarab]

Here's the recipe

[crude stump]

Ah thanks

Force myself to make it

[boreal scarab]

Not sure if I can add more recipes to this container, or if it's a set list of recipes, but so far, I am really liking this app

[split compass]

If you follow infosec twittersphere you'll see a bunch of people who changed later in their career from all kinds of places.
One of them I met a few years back on Facebook, they landed their first SOC gig at 'round 2020 I guess?
Now they run a CTF team and discord channel.
They're in my age range, (Early/Elder Millennial)

[boreal scarab]

For anyone curious, app is called Chowdown in TrueNAS Scale TrueCharts

[crude stump]

Interesting

Never heard of it

What’s trueNAS scale true charts

[split compass]

Now I want an ML/MV application that will take 6 seconds of person waving their camera around the front of their fridge, process it to determine what items are available, and spit out recipes.

[crude stump]

Or a fridge that does that for you

[boreal scarab]

TrueNAS Scale is an OS, TrueCharts is a charts catalog for TrueNAS Scale

[crude stump]

Ooh

[boreal scarab]

Thought there was an app for that, no?

[crude stump]

Have y’all seen the warehouse robot that straight up killed itself while it was doing its first test run in front of people

[rapid merlin]

Getting my Amazon Kindle tomorrow. Anyone knows some good books to learn hacking/pentesting. I have a developer background, so not a complete beginner here.

[crude stump]

https://nostarch.com/search/Cybersecurity

This has very good books

Atleast what others told me

[rapid merlin]

Do you prefer books for learning or other sources?

[crude stump]

I don’t mind books tbh. It’s all a preference but if you have a kindle I would go books

[raven moth]

Test

[chilly veldt]

I got a one day internship tomorrow

[shut hawk]

🤔

[split compass]

I think there's one where you manually input a list of things.
I just want the "AI" version of the same thing 😉

[chilly veldt]

It's a "this is how we do things" day, cause I am good friends with the CISO and wanted to have a look cause I was interested in seeing it, and he's interested in hiring me

[boreal scarab]

Fell with my laptop and now my laptop wont close all the way..... fuck

[novel haven]

Good evening lads, just out of curiosity. Anyone grinded the OSI Dungeon? Anyone got a highscore?

[boreal scarab]

Screen got bent.... damn it. Still works, just annoying

[chilly veldt]

It got rekt

[boreal scarab]

Yah, $2k laptop got rekt by a small trip

[chilly veldt]

I should go to sleep

[shell nova]

Nice

[crude stump]

Hydra do you know are they gonna post the live stream on YouTube when it’s done?

[split compass]

3d print a new screen enclosure and swap x'D

[boreal scarab]

Prob not a bad idea lmao

Thing is bent on the right side, nice little dent, now I got weight on it, see if it'll help a little bit

[feral spoke]

Is the link in the event still not working for people?

Or is this a hacking test

[near hawk]

Blank screen?

[feral spoke]

Ya

[rapid merlin]

Hey guys! The screen is showing fine for me. Is anyone else having issues? https://app.livestorm.co/tryhackme/kickstart-your-career/live?s=3d9be65b-cfad-4f8d-a863-26c6a99197cd

[near hawk]

That link seems to have worked, thank you

[rapid merlin]

Pheeewww!!!

[crude stump]

Forgot to register

L for me

[feral spoke]

Full for me too

[near hawk]

Looks like they forgot part of the link in the event

[feral spoke]

This is why i asked about link being broken other day. Figured youd have to register

[ruby jungle]

😦

[feral spoke]

Will it be recorded?

[rapid merlin]

Can someone pls help in #exploiting-ad ? I'm lost

[crude stump]

This

[buoyant tree]

did anybody see the bitlocker attack

[crude stump]

No

[rapid merlin]

It will be recorded, yes! 😄

[crude stump]

YES

thanks I was so bummed I thought I completely missed out on it

[rapid merlin]

Pico raspberry pi used to decrypt?

[buoyant tree]

@molten sky how simple is hugo for u?

thinking about using it

[shut hawk]

Use ghost for blogs imo

[rapid merlin]

[buoyant tree]

need for a portfolio page

simple af static

I don't need code

[buoyant tree]

Gotta add like contact, info, pictures

family friend's food site

[shut hawk]

GitHub pages

[chilly veldt]

Yeah, I am going to use this opportunity as a project I have in mind

[buoyant tree]

isn't it just hosting?

[rapid merlin]

Yes but its effectiveness is limited to highly specific scenarios and relies on physical access, which can be readily countered.

[shut hawk]

ye

[buoyant tree]

oh k

[chilly veldt]

Eh, bitlocker has so many attacks tbh

[buoyant tree]

don't wanna code it

[chilly veldt]

WordPress

[rapid merlin]

Like in reality, the vulnerability lies in the key exchange process which also extends to other transparently encrypted systems utilizing a dedicated TPM chip for encryption and LUKS2 for example.

[buoyant tree]

can't do php

[rapid merlin]

Concept has been around for like decades.

[chilly veldt]

Attacking bitlocker is though an advanced topic ino

Imo*

[rapid merlin]

Yes but it's relative if you know what you are doing.

[chilly veldt]

Yeah, but I was more talking about using #advanced-general to talk about said topics

[rapid merlin]

It's not that advanced to be honest.

But sure why not.

[devout palm]

Event is full

😦

[molten sky]

my comment was about hugo was meant as a joke --- but i actually have used it once or twice in the past and it was quite simple

there are a couple other static site generators out there that might be worth comparing to though, like jekyll, ghost, eleventy, astro, etc

they each have pros and cons

[warped crane]

Hi guys, i was wondering is there any way i can change my ip address to a certain location?

[lyric otter]

This is why it's not loading?

[shut hawk]

Ghost isn't static)

[molten sky]

thought ghost was. well the others should be

[warped crane]

For example if i am using a vpn change my city to Amsterdam, can i choose where exactly in amesterdam

[shut hawk]

Depends on where the server is located 🤷‍♂️

[devout palm]

This link is working fine

But the event is full

[warped crane]

So changing locations isn't available

[shut hawk]

Idk

Depends on your VPN providor

[warped crane]

All vpns choose a country

Never the city

[molten sky]

not the case

many are city based

[warped crane]

Which vpns?

[molten sky]

most tbh

nord, pia, mullvad, proton, etc etc etc

[shut hawk]

the question is, why?

[warped crane]

And is there any of them that can choose a specific location

[shut hawk]

why?

[molten sky]

i agree, whym

[warped crane]

First i am trying to teach my parents about fake links they are sending to me daily

And they don't believe me about people can hack them

2nd i need to login into Netflix from a specific location

My parents house ip

So i don't pay for a new user

[shut hawk]

lol yeah not happening here

[molten sky]

a commercial vpn often doesn't address that anyways so yeah

even if we could we can't

[lyric otter]

It's just green for me

[warped crane]

So only cities allowed

But not specific place in the city

[shut hawk]

You don't understand how VPNs work

We aren't going to help you bypass Netflix's regulations, but I'd suggest instead looking up how a VPN actually works

[sand trench]

SOUUUUP

[sick lance]

Disney has invested 1.5 billion in Fortnite.

[boreal scarab]

Souuuup tomorrow!

[boreal scarab]

If Fortnite couldn't get any worse

[sand trench]

american billions or the older but better that is no longer used british billions?????

[sick lance]

Elsa with guns.

Lightning McQueen in Rocket League.

[boreal scarab]

https://tenor.com/view/uhh-wait-oh-walk-out-gif-15030069

[glass nest]

Cmon Steam. Whay does it have to be like this between us?

[boreal scarab]

18?! 👀

[glass nest]

I know. I'm slumming it.

Don't forget the .1

[boreal scarab]

Wifi 6 speed from phone

Get 900 down, 900 up hard wire

[ionic mist]

hello

I'm new to all this

Just started dabbling in hacks and all, wanted to ask if someone could give me an overview of the site

Or a guide to follow to begin

Finding it a bit difficult navigating through this all as a beginner

[hot cairn]

have you tried doing 100g fibre via your phone

[ionic mist]

I have a decent foundation at programming, but 0 cybersec experience

[boreal scarab]

Uuuh, no, have you?

[ionic mist]

Any tips/guidelines?

[hot cairn]

no

i just use wifi 5

[glass nest]

Yeah, but theres no .1 Beerise. Thats where the real power is.

[hot cairn]

Using slow wifi limits my toothbrushes ability to DDoS

https://www.malwarebytes.com/blog/awareness/2024/02/how-to-tell-if-your-toothbrush-is-being-used-in-a-ddos-attack

[shut hawk]

@polar spoke 😂

[polar spoke]

oh god

i'll just link the damn malwarebytes article

[sand trench]

yeah that happened

[chilly veldt]

You can always #start-here

[shut hawk]

uhh chick3man, that's the same article here

[polar spoke]

that is the malwarebytes article

i noticed lol

[boreal scarab]

It's beautiful!

[chilly veldt]

Oh well, shits late and I got the internship tomorrow, should probably sleep, goodnight

[crude stump]

Bruh 💀

Thought it was real

Real article

[hot cairn]

https://images.0xem.ma/u/JYrahF.png

best comment

[magic loom]

Lol

[boreal scarab]

"It's not" love it. Straight to the point.

[crude stump]

What if it vibrates and accidentally ddos

[shut hawk]

wut

[boreal scarab]

They'll hack your toothbrush and play music

https://tenor.com/view/tooth-tunes-vine-toothbrush-music-gif-24879078

[crude stump]

Mind control music

Scary stuff fr

[boreal scarab]

Anyone else weirded out anytime those people in commercials smile?

Or just me?

[crude stump]

I see it

It’s that forced smile

[boreal scarab]

It's so weird!

[sand trench]

it is like that hide the pain smile

[crude stump]

It’s the music from the toothbrush

Has to be

Imagine how many takes

[devout palm]

lmao

[grizzled wing]

that malwarebytes blog had no content

[boreal scarab]

The forced smile in medicine commercials....

And can possibly lead to death
The actors:

[crude stump]

Read a little down

[devout palm]

Teeth brushed with infected smart toothbrush

[boreal scarab]

Does that mean my teeth are little bots, and the toothbrush is the net?!

[grizzled wing]

yea, the simple "its not" = no content

[crude stump]

Supposed to be a joke

[boreal scarab]

https://tenor.com/view/bruh-gif-24935909

[devout palm]

My teeth are so bright that they can down a website

[crude stump]

Flash bang

https://tenor.com/view/reaction-my-eyes-cant-unsee-burn-gif-7225082

[grizzled wing]

often people use white/ light themes and i have no idea why

[crude stump]

They like to stare at the sun

[grizzled wing]

haha

[crude stump]

24/7 daylight for them

[devout palm]

They think it's more professional i suppose

[crude stump]

Now that is DUMB

[grizzled wing]

since when did having eye burning colors = business/ professional?

dark blue works

[crude stump]

Since people

[devout palm]

I don't know...

More like psychological affection

[grizzled wing]

since Windows is light theme by default i guess is root of it

[sand trench]

higher contrats and easier for read for tons of people with any sort of vissual impairnments

[devout palm]

Chatgpt

[umbral bay]

Did you all join the Discord Event today? 🥳

[grizzled wing]

high contrast in dark mode exists

[sand trench]

so please make sure that light themes keep existing for people to keep accessability up

[devout palm]

Couldn't due to room being full

[grizzled wing]

@umbral bay no

[sand trench]

sadly no as not on a platform shadow wants to sign up for

otherwise would have loved to hop on and see

[shut hawk]

Hey Tim, why was it hosted on an external platform instead of a stage discord?

Just curious

[umbral bay]

Was a great event, great speakers. 🥳

[sand trench]

same question here jayy

[shut hawk]

Sounded really good!

[umbral bay]

External on Livestorm.

[sand trench]

also the tryhackme twitch went unused yet again

[grizzled wing]

🎵 Kick Start Your {career}

[crude stump]

forgot to register

[devout palm]

Next time i guess 🤷‍♂️

[grizzled wing]

i assumed it was same info other places say, network, ask to follow someone, find a mentor, etc

[crude stump]

ima watch the recording of it

[visual elm]

crap I forgot that thing was today, I meant to join it. I thought I set a notification but I guess not...

[umbral bay]

You can watch the video recording. 😄

[chilly veldt]

Funny thing is I said I wouldn't be awake to see it, but here I am and even missed it, lol

[umbral bay]

Quite more insightful from people who work in the industry. 😎

[grizzled wing]

ahh okay

[chilly veldt]

Oh well, good news, I am getting my network up and working on Monday, so I can finally finish my project I have in mind

[crude stump]

do you know what platform it will be on

[umbral bay]

Hopefully YouTube link will be forthcoming soon.™️

[crude stump]

thanks tim

[sand trench]

think the answer is yes but might be hard to search for

[split compass]

Still a few phones with 3.5mm jacks.
I wonder how those low-mid phones with 3.5mm jacks compare to mp3 players these days.
I can't imagine there's much difference in audio circuitry and isolation.

[sand trench]

size of storage space is a problem though

old ipods are still out there being used

[split compass]

Grab a Pinephone?

[sand trench]

the pinephones currently do not work very well for smartphone stuffs

[split compass]

Definitely a dying market.
If I check BestBuy (.ca) and filter by In Stock, and Sold by Best Buy Only, they have 6 offerings supposedly, and I only see 3 of them XD
They're all Sony, and they're priced like it's 1999's price for storage, but also beaten with the inflation stick.

Hmm, nope the company that makes my Bluetooth DAC is very expensive in that market too. (FiiO)

[crude stump]

Ik eBay isn’t really a trusted market to by electronics off but did you check there stuff?

[split compass]

Can't say I know that company, but that is far more reasonable than Sony or FiiO are offering.

Alright starting commute home.

git add.
git comment -m "${comment}"
git push

out.

[dusty island]

Dose anyone know free safe vpn ?

[blazing granite]

when things are free is because you're the product, they have your info, habit, etc in exchange, so the answer is no. If you want to use a vpn thinking it as an investment and pay for one.

[glass nest]

Damn. that was intense

[simple valve]

Mullvad is good VPN service, not free though

[rapid merlin]

The best (that is public) but it's not smooth sailing.

It's blacklisted nearly everywhere.

The simple fact that it's free is problematic.

At the expense of IP quality.

It's fast but it's borderline usable.

[blazing granite]

there is a saying "There is no such thing as a free dinner" either way you end up paying for it, in this world nobody does anything out of the goodness of their heart, that the hard truth

[rapid merlin]

Yes which is fine and how you want it to be otherwise it's unsustainable.

It's a service at the end of the day.

[blazing granite]

that's why I don't use free stuff for things that matters

[rapid merlin]

If you know where to look there are much better alternatives but not everyone is into OPSEC anyway.

[rapid merlin]

100%

[blazing granite]

5 euros a month, drink a few less coffees and you're on 😂

[rapid merlin]

I get it. Even though it's anonymous, the quality of IP addresses has significantly declined in recent years or months. As more people join, there's also more trash/garbage traffic.

[rapid merlin]

It's very affordable which is good and not good.

But for casual browsing it's fine up to a certain level.

[dusty island]

Ok

[rapid merlin]

Also depends what you want to do with it.

[dusty island]

All i want is when i open links not safe they don't know my real ip

[rapid merlin]

In that case, any reasonably decent VPN should suffice.

[blazing granite]

what about not open unsafe links 😂

[dusty island]

That's the right thing

[rapid merlin]

Everything is unsafe nowadays.

[dusty island]

But i am big ass i love opening not safe links

I always want to know what's there

[rapid merlin]

Then you probably need more than just a vpn though.

Read more about OPSEC.

[dusty island]

And my anti virus always stop me but i feel like if i have vpn with my anti virus that will be good

[rapid merlin]

You don't want to mess with that, if you don't know what you are doing.

[dusty island]

VMware too ?

[rapid merlin]

Like 5% of the time.

[dusty island]

What do you mean ?

[blazing granite]

and you think that opening unsafe links with a free vpn it's good 😂 how are you sure that your ip it won't leak, it's free after all so you can't complain, probably as unsafe as without vpn, just because you're connected it gives you some comfort, but no really assurance

[dusty island]

uhh

[rapid merlin]

If someone remotely knowledgeable can bypass both, it's quite straightforward. That's why it's advisable to separate your personal machine, containing sensitive information, from another machine with no data. Even in the rare event of a sophisticated malware escape (unlikely, especially with proprietary enterprise software, where issues are quickly identified), this segregation ensures added security.

Then you also have VPN bypass and malware hopping around your network.

[dusty island]

Oh

i will learn so much from the people in this server

[blazing granite]

let's use Qubes 🙂

[rapid merlin]

Ideally, if it aligns with your threat model, there's a significant learning curve to consider (you wouldn't want to make mistakes). However, Qubes is a solid option.

[dusty island]

But that's not easy i have antivirus

[rapid merlin]

What antivirus for example?

[dusty island]

Well about that everyone know it say it's not safe but i am sure it's safe

[rapid merlin]

Kaspersky?

[midnight hazel]

hey what did i miss

[rapid merlin]

Definitely but a bit extreme.

[dusty island]

No

[blazing granite]

I have Qubes install in on laptop I use it when I'm really paranoid about something 😂

[dusty island]

I have Mcafee Endpoint Security

[dusty island]

I hear that Kaspersky is good but i didn't use it

[rapid merlin]

Qubes is effective for 99% of cases, and even in those scenarios, it may be considered overkill, which ultimately it's good.

[rapid merlin]

You should never rely on antiviruses alone though.

[dusty island]

That's right

[buoyant tree]

why am i better at breaking things than building them

[rapid merlin]

Because each possesses entirely distinct mindsets.

[dusty island]

😂

[rapid merlin]

Way easier.

[rapid merlin]

When securing and constructing, your focus is on devising 1000 methods to safeguard yourself and mitigate risks from potential attackers. An attacker only requires one opportunity to breach your defenses.

There exists an entire art dedicated to constructing secure infrastructure.

Which is why you should always focus on building both skillsets.

[blazing granite]

Good antivirus in its beginnings actually one of the first ones, but decline with the time IMHO. I've heard good thinks about Kaspersky, but personally I don't use antivirus, because I use Linux

[dusty island]

Oh ok @blazing granite @rapid merlin Thanks for helping me by giving me more information about how i be safe

[twin ridge]

Gave +1 Rep to @blazing granite (current: #155 - 39)

[dusty island]

But is Linux can not be hacked ?

[rapid merlin]

Consider looking into OPSEC (Operational Security) and related topics. You might also find it helpful to explore operating system hardening and overall infrastructure security practices. These areas can contribute significantly to safeguarding your systems and data.

However, keep in mind that unless you are specifically targeted, it's important not to go overboard with security measures, as it may compromise convenience. Balance is key when implementing security practices to ensure they are effective without causing unnecessary inconvenience.

[dusty island]

I think that what i needed to hear

[blazing granite]

Everything can be hack if you put your mind to it, and work your a** off 🙂 but there are different levels of security. I use Linux because I don't want to tide down to paying for software, and the quality of the stuff it's really good, the security it's a plus. I've been using Linux for years

[rapid merlin]

If you find yourself being targeted with malware that can escape enterprise-level grade virtual machines (VMs). Then you have a much bigger problem.
Generally, vpn + vm (full isolation) and good browsing (not being an idiot) will be way more than enough.

[buoyant tree]

I have to make things look "good"

which is not my specialty

[rapid merlin]

One more thing a skilled malware developer wouldn't waste their malware by deploying it indiscriminately like that.

[buoyant tree]

hate frontend

[rapid merlin]

The more adept you become at hacking (in its truest form), the more you'll understand how to defend yourself effectively. However, it demands sharp lateral thinking and creativity to stay ahead of the game.

[rapid merlin]

Same, I hate web app pentesting for example.

[blazing granite]

doesn't everybody? 😂

[dusty island]

X509 i will remember that name it's nice to meet you bro

I have to go now

If we can talk again later that will be good thing

[rapid merlin]

I really dislike learning it because it feels shallow and uninteresting.

[rapid merlin]

Sure thing

[blazing granite]

less often that win blue death screen that's for sure 😂

[rapid merlin]

In some software engineering programs, the main focus is often on frontend development. While it's important, I don't think it represents the full scope of coding.

[buoyant tree]

i like web app

[buoyant tree]

not those UI/UX designers in thier turtlenecks

[rapid merlin]

I find it boring personally.

It's way too high level.

[buoyant tree]

eh I been meaning to get into low level

but never had the energy

[valid mauve]

Do we already have a room for shim?

[buoyant tree]

i think so

[rapid merlin]

Exactly, a true hacker typically works at a lower level, dealing closely with machine code, Assembly, C, C++ and so on. Then you have low-level exploit development (dealing with ASLR, DEP, CFI, NX and so forth).

[blazing granite]

those, I don't care how things works, just make it nice 😂

[rapid merlin]

If you're serious about cybersecurity, you need to dive into it deeply.

[buoyant tree]

yea

[rapid merlin]

Black hat hacking.

[boreal scarab]

https://tenor.com/view/sunday-yes-look-back-dance-gif-12692748

[buoyant tree]

yea know a lil binary exploitation

a lil

[rapid merlin]

Hacking is more than that.

[desert shuttle]

https://tenor.com/view/tomatothink-gif-23324294

[rapid merlin]

If you're interested, take the time to learn more about it. I notice a lot of pentesters, but not many actually delve into the deeper technical aspects. They still refer to themselves as hackers though which is hilarious.

It's actually bad.

[buoyant tree]

eh I can do linux, web atm

[proven quartz]

Hacker is not a derogatory term for hackers

[rapid merlin]

Many have distorted the original definition, particularly the one from MIT.

For real, 100%.

[sand trench]

A hacker embodies a boundless passion and insatiable thirst for understanding the complexities of a system, computers and networks in particular. They revel in the pursuit of knowledge and mastery, constantly seeking new solutions and opportunities for growth. Their drive and innovative spirit inspire and are inspired by the hacker community, where ideas and knowledge are freely shared and valued regardless of their origin.
-- Silk

??

you sure that is not the cracker definition

[rapid merlin]

I've been learning it for about 10 years, but I'm still far from mastering it. Not even close, not by a long shot.

Yes but also most importantly to demonstrate cleverness and ingenuity in your approach.

[proven quartz]

So have the media. A hacker finds clever ways to do things using things not necessarily made to do those things. The outcomes are for society and the courts to decide I guess but the definitions of everything are kinda loose in a lot of cases and definitely not in others. Some things often mean both what you think they are, and the exact opposite of what you think they are

[buoyant tree]

who's Silk

isn't that a Phreaker

[sand trench]

alex chaveriat
a famous defcon goer and part of defcon darknet
nowadays also a defcon goon that helps out with creating videos about the defcon videos

[buoyant tree]

hmmm k

[rapid merlin]

In my perspective, merely running a few scripts and taking a superficial look at a system doesn't constitute hacking. True hacking, at a professional level, involves deep understanding and comprehensive exploration of a system. It's about knowing precisely what's happening and delving into the details, even resorting to thorough research if necessary.

[blazing granite]

phreakers

[rapid merlin]

The way the media talks about hacking and how people downplay (huge trivialization) cybersecurity has really messed things up haha.

[proven quartz]

The original term in that context had nothing to do with breaking the law or breaking into phone systems. That some people did unethical and illegal things is another point but it's not the original definition. To hack is to use one thing to break another thing but to be a hacker doesn't necessarily mean to destroy, it can easily mean to create or to just do something clever and new

[proven quartz]

It's an uphill battle but the hill has a low gradient and the battle is against people behind you, also trying to get up the hill but deciding it's easier to let you do the work and drag them up it

[rapid merlin]

I understand the true definition, even though I wasn't born in that generation. Just look at all the original hackers - their knowledge is off the charts. Maybe I am just a perfectionist.

[rapid merlin]

I guess so.

[sand trench]

shadow only knows that they know near to nothing

[rapid merlin]

People who know a lot about hacking would agree with me too.

The more I learn, the more I realize how little I actually know. That's the essence of mastering it which is pure.

[blazing granite]

It's a sisyphean task, I decided to let them talk, I don't have the strength or the time to correct all those people 😂

[buoyant tree]

How old are you

[rapid merlin]

Exactly, because they don't realize that hacking and cybersecurity aren't for everyone. I'm not gatekeeping; I'm just acknowledging that it's not a field suited to everyone.

[rapid merlin]

Between 16 and 22

[buoyant tree]

Hmm I'm 14

[buoyant tree]

prolly 19

[blazing granite]

between 18 and 100 😂

[rapid merlin]

I started when I was around 10 years old. If you keep learning seriously, you'll be miles ahead of everyone else.

[buoyant tree]

we all know ur older

[sand trench]

does not tend to talk about all the tech they broke as a kid

[blazing granite]

older than 100 no 😂 😛

[rapid merlin]

Of course, I'm a perfectionist, so for me, "enough" is never really enough.

[sand trench]

striving for perfection only gets you so far

[rapid merlin]

I understand. It's a constant battle with oneself.

[sand trench]

it can be a limiter on your performance as you try to get to an unreachable goal

[rapid merlin]

I'm still studying (college), but I spend about 12 hours a day on average learning all of this (and still it's not enough).

[sand trench]

shadow used to be a perfectionist for a very long time until it dawned on them how it hindered them learning a more spread of things instead of focusing on a single thingy all the time

jack of all trades, master of none, but oftentimes better then master of one

[rapid merlin]

Since high school ended, I've been studying from home, only going to college for exams, so about 12 hours a day from there. Back in high school and even earlier, once I finished school, I'd get on the computer and learn until 2-3 am. Sometimes I'd keep learning till morning and sleep during the day at school.

[sand trench]

that is the full quote last shadow heard

the third part is important

[buoyant tree]

I just do THM daily and thats it

[blazing granite]

shooting for perfection it's great, keeps your bar high but sometimes you need to know that perfection can get away of doing your job and can bring you frustration. Shooting for perfection it's great, but most of the time you won't get there you just need to go as far as you can go

[rapid merlin]

Still I can do better.

[sand trench]

well another probability is x509 hits a burnout and then gets very depressed that they can't keep learning at the same rate

[buoyant tree]

happens to all of us

i enjoy that time by watching a movie

[rapid merlin]

I live for that. I don't need video games or anything else for entertainment. This is entertainment for me.

[sand trench]

burnout can also make you hate doing what you once loved to do.... happened very well for shadow with programming

[rapid merlin]

Sure thing of course, I like thinking about one day reaching that level (in theory).

[rapid merlin]

I've been doing this since I was around 10, and it genuinely makes me happy.

It will pay off though.

[sand trench]

yeah.... shadow is just trying to tell you what to look out for and what problems you might run into

it can keep working

but that is not a 100% certain

[blazing granite]

Always aim for perfection, but don't get discourage, and frustrated if you don't get it (and probably won't get it 99% of the time)

[hollow stream]

Hey all, should I be doing write-ups for rooms I am completing? I'm just wondering if it could help me internalise my thought process? Or is it more of a waste of time?

[rapid merlin]

What they're saying might be true for most people, but for me, this is what I like and strive for. Knowing that what I'm doing right now will pay off, and that all of this is both entertaining and productive, is a very rewarding feeling.

[rapid merlin]

Yes 100%, do it.

[hollow stream]

I'm very new though, I'm still struggling on a lot of different tasks

[rapid merlin]

Keep at it and document everything.

[rapid merlin]

Sure thing. That's why I'm always chasing it. I know what I'm chasing is borderline impossible, but knowing I'm giving my best at all times feels good.

[rapid merlin]

Yes, I appreciate it.

[sand trench]

that or just do what is normal for you in the note taking department

also known as
note taking note taking note taking note taking note taking note taking

[rapid merlin]

It'll not only help you remember but also develop your writing skills.

[hollow stream]

That's true

I see a lot of people use medium

Any places you guys would recommend?

[rapid merlin]

It can also serve as a motivator when you see that you've accomplished a lot by writing consistently.

[rapid merlin]

You don't even have to post it online, just use obsidian.

[sand trench]

medium should not be recommended as they have banned hacking writeups in the past and probably will keep doing that

[solid spoke]

someone know how to open brainstorm executable in immunity debugger ? i am just getting errors

[sand trench]

anything that supports markdown.....

or note taking apps like trilium notes

you don't even need to publish your notes or writeups

[magic loom]

Not endorsing but obsidian is another

[sand trench]

they can be for only personal use and be fine

[rapid merlin]

Obsidian is good and quick, very intuitive.

[blazing granite]

the rush I got when I solve something is one of the thing that keep me going 🙂

[sand trench]

obsidians md files can make windows defender unhappy

[rapid merlin]

100%

[sand trench]

if you store payloads and scripts and tricks in it on windows

[hollow stream]

Alright, I'll give obsidian a look

[rapid merlin]

I spent around 15 hours straight on Hack The Box after I first created my account. They make it very addicting. Just knowing that you are close to full root.

[hollow stream]

Thanks @rapid merlin @sand trench

[twin ridge]

Gave +1 Rep to @signal nimbus (current: #1990 - 1)

[hollow stream]

::)

Of course

I was thinking about using everything on Kali

[sand trench]

no problem

[hollow stream]

I have my own VM that I have setup

[sand trench]

this reminds shadow that they probably migrate a lot of txt file notes into trilium again

[rapid merlin]

Then you are good to go.

[blazing granite]

I actually write note on paper, then transfer to obsidian to digital safe keeping

[sand trench]

yeah that can work but keeping your notes on kali which can be unstable and need reinstalls can be a pain..... but there are ways to backup notes online or to your host so yeah

[hollow stream]

I was thinking about creating a VM shared folder, that way I can save to both my virtural machine and my host

Not sure how kali would like that

Same here, I have the writing of a 5 year old

[rapid merlin]

Same I write too quickly.

[blazing granite]

Actually there are studies that shows that writing on paper create new neuropaths that help you remember better.

[hollow stream]

I've heard that too

My mate always brags about how he remembers his lecture notes better since he writes them insteads of type them like me

How are you finding it?

[karmic furnace]

I'm off work because I'm sick, but I still wanna work..

such a dilemma.

[sand trench]

yeah that can work but be careful with the files on your host and don't run random executables that are stored in the notes folder then

[hollow stream]

Must be nice for taking notes 🙂 I was thinking about getting one for my lectures

[hollow stream]

Absolutely, but I think that if I only limit it to my writeups it should be okay

[sand trench]

getting an eink notebook works too

[hollow stream]

That's a decent recommendation

It's something I'm going to look into more

[sand trench]

yeah just did not wanna specify just the remarkable but basically anything in similar vains

[hollow stream]

Yeah

I'd like something around A4 size but I don't mind

[buoyant tree]

did that

[hollow stream]

Anything portable rather then my massive macbook

[buoyant tree]

defender didn't go haywire tho for me

[rapid merlin]

I can't decide between a 28 inch and a 32 inch monitor, help

[sand trench]

measure your desk space

and distance from screen/monitor

[rapid merlin]

there's enough room and i can adjust the distance 😂 both are 4K

Maybe bigger = better?

[buoyant tree]

how many Hertz isit

[rapid merlin]

144 but I wont be gaming much

[hollow stream]

Even without gaming I find that a 144 Hz monitor is far more satisfying imo

Everything is smooth

[rapid merlin]

Truuue

alr thanks

[twin ridge]

Gave +1 Rep to @keen depot (current: #208 - 25)

[dusty island]

👍

[grim sparrow]

There are no URLs in that message.

[hollow stream]

Better go guys, tis late, but thanks for the recommendations on the write ups!

[rapid merlin]

👋

[buoyant tree]

new error for the day

I don't have space on my taskbar for it

and yes every app is utterly important

[boreal scarab]

https://tenor.com/view/movies-willywonka-charlieandthechocolatefactory-classicmovies-moviegif-gif-3483573

[molten sky]

anyone here a wizard when it comes to powershell and wants to try their hand at fixing a mystery bug

[rapid merlin]

PowerShell syntax is beyond trash.

[molten sky]

yes, yes it is

[rapid merlin]

It's genuine radioactive garbage.

Did you try with chatgpt?

[molten sky]

i hate that i'm doing this tbh

and yea

truly is a mystery bug rn

[rapid merlin]

Yes, indeed. It can be suitable for less desirable tasks (in other words trash things). Let chatgpt deal with it.

[rapid merlin]

What is the bug?

[molten sky]

example:

<< Write-Host "$path"
>> "C:\Users\Test\Desktop"
<< Import-StartLayout -LayoutPath "$path" -MountPoint "$env:SystemDrive"
>> Error something something path "C:\randomunrelatedpathUsers\Test\Desktop"

var mystery change

[rapid merlin]

And in what context are you trying to run that?

[molten sky]

(randomrelatedpath tends to be where you currently are with no sign of how it's getting there)

just as an admin on a fresh sytem

[rapid merlin]

I have to manually try it on a system.

[molten sky]

it's like they know this project is to completely rip apart windows and theyre tryna stop it

[rapid merlin]

Interesting, I need to actually do it manually.

Do you have the exact error code?

[boreal scarab]

Very ancient art.

[rapid merlin]

I don't even know where to begin with powershell.

[ionic mist]

What’s the difference between try hack me

And hack the box

[rapid merlin]

Academy or labs?

[ionic mist]

Do u do both simultaneously

[rapid merlin]

Yes.

[ionic mist]

Which would you start with

[ionic mist]

I’m a complete noob

[rapid merlin]

What's your skill level?

[ionic mist]

No clue what those mean

[rapid merlin]

Then tryhackme.

[ionic mist]

I’m a computer engineering student

But 0 experience with cyber sec

[rapid merlin]

You could even start with hackthebox academy if you learn quickly.

But in the end do both.

[ionic mist]

I see

So hack the box academy is before hack the box labs

What’s the end goal of these

[rapid merlin]

Yes preferably.

[ionic mist]

This is a completely naive question but I mean

Do u actually become a “hacker” towards the end

Or is it more so geared towards pen testing

[rapid merlin]

Depends on how you define a hacker.

[rapid merlin]

You could but it's very ctf based (HackTheBox labs).

[ionic mist]

A person who is able to exploit defects in real life software

What he chooses to do with those defects

Like report

[rapid merlin]

In theory.

[ionic mist]

Is what makes him white or black hat hacker

I see

[rapid merlin]

Learn from both platforms.

Much of cybersecurity is googling and learning new things.

[ionic mist]

I gotchu, so I’ll start with THM and hack the box academy and move upwards from there

How much time

Would you dedicate

[rapid merlin]

Good

[ionic mist]

Before you can move on to HTB labs

[rapid merlin]

For easy machines, you can easily get there in 1-2 weeks.

[ionic mist]

What’s an easy machine

💀😭

Sorry brother just getting started

[rapid merlin]

You have easy machines, medium, hard and insane on hackthebox labs.

[ionic mist]

Is it like

Leetcode?

[rapid merlin]

Sort of.

[rapid merlin]

I started directly on hackthebox labs.

While I had some indirect background knowledge, it's important to remember that this is about CTF and puzzle-solving.

Sometimes it won't make sense.

You have to be very creative.

[sand trench]

meep moop it is finally time for shadows sleep sloops to the beep boops again

[blazing granite]

me too see you

[rapid merlin]

@ionic mist Start with the hardest.

[ionic mist]

Gawdamn

[blazing granite]

it's 4am here time to go 😂

[rapid merlin]

Haha quite late (or early depending on your perspective).

[rapid merlin]

If you start with the hardest and build a good methodology, it will pay off in the long run.

[blazing granite]

that's life bye

[ionic mist]

Hmmm I see

Why do people do this

[rapid merlin]

Haha, it really depends on one's personality. That's what makes it so fascinating.

[ionic mist]

Like

[sage wolf]

Don't go too easy but don't go too difficult either, just always make sure you can challenge yourself

[ionic mist]

Are majority of you guys in the field

Working cyber security

For fun?

Like what’s the underlying motivation

[sage wolf]

I mean there's no one simple answer, it depends on who you are

For me it's more of a passion, I love computers and stuff

[rapid merlin]

Nothing better to start with something new and challenging which can lead to rapid learning and growth. It's a great way to expand your skills and knowledge.

[rapid merlin]

I started cybsecurity when I was about 10 years old. Even though I'm still a student (in college) and not currently employed in this field, my main motivation is my passion and enjoyment for it.

100%

[blazing granite]

before I go, that would work for some people, but IMHO it's the worst advice ever 😂 there is nothing to prove. Also there are levels for a reason, you have to build the knowledge, step by step. Get the foundations down, you can't expect to build something stable if the foundations are shaky

[rapid merlin]

That's how I got started. Even though I could barely read and write, I was hanging out in forums with hardware engineers, trying to understand how console hacking works. I would Google every single term they mentioned and learn from there.

[rapid merlin]

It really depends on how quickly you learn and your motivation.

[ionic mist]

But why

It’s difficult in that it doesn’t translate that much to real life

Unless u join the military or smthn

[rapid merlin]

Passion and puzzle solving (when I was much younger).

[sage wolf]

Literally, every company needs security

Anything running on a computer

[rapid merlin]

100%, if you know how to google and gather information. You will get there easily.

The rest is just a matter of time.

That's the beauty of the internet.

[ionic mist]

True but this isn’t security more so than attacking no?

Unless I’m mistaken my knowledge on this is very limited

[blazing granite]

if you start at the top, it's not really learning, it's just throwing shuts in the dark and see if something stick. Like anything in life your start from the beginning, how fast you advance it's a completely different matter, but you never start at the top.

[ionic mist]

But I’d assume that learning how to demolish a building is not the same as learning how to build one

[cosmic pendant]

Attacking is a very very little part of security

[sage wolf]

I was gona say it's like military or police officers learning how to use weapons

[cosmic pendant]

and you're wrong

It is the same mostly

[blazing granite]

to demolish a building you need to know where the weakest points are, you doing that buy learning how to build one so you can see the process and detect the weak spots 🙂

[ionic mist]

Really!? That’s acc super interesting

[cosmic pendant]

I mean. think about it

[ionic mist]

Ohhhh I acc never thought about it that way

[cosmic pendant]

There are no jobs where you just blow up buildings

[rapid merlin]

It really depends, because it puts you in a certain mindset. I enjoy diving into complicated things because it's like a sinkhole. You start with A, then you realize you need B, so you learn it, then you discover you need C, and the process continues with D, E, and so on.

[cosmic pendant]

You have to have learned how to built them first

[rapid merlin]

You learn extremely quickly like that.

[cosmic pendant]

Best things attackers can do, is learn defense. best things defenders can do, is learn offense

[rapid merlin]

Better do both.

[cosmic pendant]

(Best thing anyone can do is stop using computers and go back to paper)

[sage wolf]

The amount of jobs that would open up

[ionic mist]

And you guys would say THM and HTB are good for both

[cosmic pendant]

Yea

[rapid merlin]

Yes + books, whitepapers, forums and so on.

[ionic mist]

But I guess you’d still be missing the real world experience no?

[cosmic pendant]

..............

[rapid merlin]

Yes.

[sage wolf]

Uh.. there's bug bounties

[ionic mist]

Because you wouldn’t be able to practice what you learned on real life stuff for legal reasons and all

Or is it allowed as long as u report your findings

[cosmic pendant]

That's right. That's why these places exist (stay away from bug bounties)

Get Certs, Get a job, win

[rapid merlin]

I wouldn't recommend it to be honest.

[cosmic pendant]

yeah, I guess make sure you have a github with some stuff on it too, now days

[ionic mist]

Why would you say stay way from them

I assumed that would be the most interesting part

[cosmic pendant]

Because businses love them, to save them money

[ionic mist]

Legally attacking real life companies and having them pay you for it

[cosmic pendant]

No, it's a scummy way to get make people work hard

[cosmic pendant]

How much? Very very little

[sage wolf]

I mean I see bug bounties as like a side thing, not a main source of income or whatever

Like yeah get a actual job first

[rapid merlin]

Even then, it's a mess on it's own.

[cosmic pendant]

You could be better off finding a CVE and selling that instead ahahhaha

[buoyant tree]

u can sell CVEs?

[sage wolf]

That sounds like fun too

[cosmic pendant]

I mean, there are market places... some people pay lots and lots

Ethical? I'm not sure, Legal? For now. Should it be.... not sure

[rapid merlin]

@ionic mist The best advice really is to learn and try to master very complicated things. You need to do what people are not doing or avoiding.

[ionic mist]

CVEs mean u sell the exploits you find?

[cosmic pendant]

It's no less ethical than companis running BB saying "We pay you"

[rapid merlin]

And even then it's luck based depending on when you join and so on.

And it's web app for the main part so I hate that.

[cosmic pendant]

There as a big bug , BIG BUG, that just came out.. I forgot which one

They paid 10K

that's it

Scum

Or, they resell it first

[rapid merlin]

If it's valuable.

[cosmic pendant]

Then patch it 2 months later

[ionic mist]

Hmmmm

What about AI

[rapid merlin]

You want to sell 0 days not CVE's.

[ionic mist]

How would you guys say it affected the field

[cosmic pendant]

You should verify Baba

[ionic mist]

Did it change anything in cybersec?

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 8, 2024, 2:22 AM

[ionic mist]

On either side

[ionic mist]

How

[rapid merlin]

Exactly.

You want that.

[cosmic pendant]

................

.......................

[ionic mist]

Will do asa I’m home

[cosmic pendant]

If you register the CVE, because you found it

[rapid merlin]

It's not the same though.

[cosmic pendant]

......... That's an 0day

that's what we're talking about

[rapid merlin]

Yes.

[cosmic pendant]

Sheesshhh

[rapid merlin]

You want to sell a 0day with no background and no disclosure.

Yes, I agree but you have to know what you are doing because it's a very shady line of business.

[cosmic pendant]

Is that more or less ethical than companies selling dangerous and crappy code?

(See Pulse VPN)

[rapid merlin]

Ethics in business doesn't exist.

It's all about profit at the end of the day.

[cosmic pendant]

Goodbye self driving cars

[cosmic pendant]

so selling 0days is good money

[rapid merlin]

Yes if it's valuable.

[cosmic pendant]

If you sell that 0day, before other 'bad guys', then you are preventing them from getting money

[rapid merlin]

100%, it's all an illusion.

[rapid merlin]

Yes assuming the intent is bad.

It also depends who you are selling it to and how you do it.

[cosmic pendant]

There are so many issues, does it matter? Maybe on the severity, wormable, no-interaction.

Just food for thought anyway

[rapid merlin]

Many people prefer to think of themselves as inherently good and honest. However, in truth, they can often be the first to betray others when it suits them.

[cosmic pendant]

Apple Backdoor say hello? That was crazy, did you read that?

[buoyant tree]

send them over

[cosmic pendant]

https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/

These attackers found and used "the" apple backdoor

it's insane

it's scary, read it

[rapid merlin]

To discover the vulnerability of the eternal blue is a dream (alternative). You need a lot of ressources though.

[cosmic pendant]

protocol aware fuzzing? and directed AI?

I'm better than my peers

[rapid merlin]

100%, I literally know I am not the greatest person morally speaking.

I am borderline horrible.

But I don't fake it which makes me better than most haha.

[sage wolf]

What if I say I'm worst than my peers

[boreal scarab]

Join the club, we got many here

[rapid merlin]

Well it's interesting to discuss.

[cosmic pendant]

little bit of both depending on the days and the orders 😄

[rapid merlin]

I don't know much about AI (I am still learning) but it's very interesting.

Insane possibilities.

That's peak hacking.

[cosmic pendant]

The fact internet browsers, load fonts from the internet by default blows my mind

[rapid merlin]

There are so many attack vectors.

[ionic mist]

What do you guys think of it

Ai I mean

[rapid merlin]

That's why if someone aims to bring you down, they will succeed.

[ionic mist]

How does it impact cybersec

[rapid merlin]

1000 different ways.

[buoyant tree]

learning lotta new things fromthis chat

[sage wolf]

I mean it's being used on like firewalls and IDS/IPS and stuff

and whatnot

idk

[sage wolf]

i feel smooth brain right now ngl

[ionic mist]

Like

I used to do web dev

Ai basically took/is taking over

No one can do web dev

Or at the very least front end

[rapid merlin]

Learn polymorphic AI-driven malware and you will see why.

[cosmic pendant]

@graceful thistle

[ionic mist]

It’s taken/taking over the field

[sage wolf]

that name is scary itself

[ionic mist]

Would you say a similar thing can/is happening to cybersecurity

[sage wolf]

I mean what is AI not impacting?

[cosmic pendant]

Do you know about P, NP and NP Complete?

[rapid merlin]

Haha, that's true it's very esoteric.

[cosmic pendant]

Go read up on that and the apple thing, I'm out

[rapid merlin]

AI should be designed to complement and enhance human capabilities rather than replace them entirely.

[ionic mist]

Very briefly covered

[rapid merlin]

Even chat gpt can do it right now with a bit of help.

[ionic mist]

NP complete are the problems that cannot be solved

1 million dollar problems

I believe iirc

[rapid merlin]

Much of information security realm (twitter, marketing and so on) is pure garbage.

So yes I agree.

[ionic mist]

What

What is infosec twitter

Marketing output

What is this magic

[sage wolf]

just people blabbing about infosec in social media

[rapid merlin]

Twitter-related information security knowledge.

[ionic mist]

What’s RDS

RSS*

Oml so many terms

[rapid merlin]

Forums remain a valuable resource for information exchange and community interaction much purer.

[sinful moon]

Bah I still use RSS all the time. And RSS is a system for subscribing to an XML based feed of a site which you follow with dedicated apps

[sage wolf]

Yeah you're going to learn a whooooole lot more

[rapid merlin]

Really Simple Syndication.

[sinful moon]

So you can follow the entire feeds of Ars Technica, Bleeping Computer, etc all in an RSS Feed Reader

I wouldn't make that conneciton at all tbh

It's just many sites grew to use Twitter to spam their articles anyways in a much less well managed way

[rapid merlin]

And trivializing cybersecurity (probably the worst thing).

[sinful moon]

lol stop saying past tense, RSS is alive and well and I use it daily in 2024

[rapid merlin]

Do this cert and in only 2 days you will be able to become 1337 leet hacker.

[sinful moon]

It is for providing timely infosec news that's not just toss up between Twitter/Mastadon/BlueSky and various other sources