general

[rapid merlin]

Alright

Im sorry

[bold latch]

Everything all good?

[night prairie]

btw, what are you actually meant to do in a scenario like that? @mossy river
just report the domain?

[mossy river]

Yes

[rapid merlin]

Wait-

To who?

[night prairie]

I assume the registrar

I doubt LE cares

[mossy river]

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[rapid merlin]

thanks

[atomic aurora]

I'm confused what did I do? 😦

[night prairie]

Thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1156)

[rapid merlin]

guys difference between public and private ip?

[mossy river]

You can also contact the owner of the server if you know who it is and they have a report process, e.g. Cloudflare, Digital Ocean etc.

[bold dawn]

If someone asks if something is illegal, I'm going to answer them. The message was already dealt with by the time I responded.

[sick lance]

You can google this..

[rapid merlin]

isnt cloudfare the anti ddos thing

[rapid merlin]

Yes, and a lot more

[night prairie]

They provide many services, including DNS resolution (so they would be able to suspend the account and remove the site if they want afaik - though name servers can still be changed I think)

[bold dawn]

I feel there is no need for mod involvement when speaking about the legal scope of public testing, when being asked questions about it. We advised on having permission to scan, and staying within the legal scope. As far as I'm concerned this was handled in a professional manner

[mossy river]

If someone is admitting to a crime in the discord server, you need to ping a moderator.

Failure to do so will result in you being muted.

It is purely to protect the Discord server. We are already on the radar for being a hacking server, the rules and policies are there to protect both the community members and the Discord server.

Lead by example; if you respond, others will think it’s okay.

[mossy river]

They didn’t ask for legal help, they admitted to committing a crime.

If you don’t agree, report it via the steps found in the rules.

[bold dawn]

I didn't realize that's the response you were referring to

[rapid merlin]

Now I understand why its so super strict. This server is under a scope by discord?

[bold dawn]

all I did there was say "it's illegal". Not sure how that's bad. Again, it was already dealt with by the time I even saw it

[heady nova]

hello people

[mossy river]

It was dealt with because an employee reported it.

[bold dawn]

It was dealt with before I even finished reading it

so again

not sure how that puts me at fault for anything

[mossy river]

This conversation is over

If you have a problem, report it via the steps in the rules

[heady nova]

hmm weird

[night prairie]

@mossy river You looking for a placement this year?

[mossy river]

Course doesn’t do placements

[night prairie]

Oh

[mossy river]

And I’ve already signed my house for next year

[night prairie]

Ah

[heady nova]

ok

[night prairie]

I haven't had much luck but still looking

[rapid merlin]

hey guys, what

[sick lance]

We can delay our fourth year and get a placement.

I'd rather get a job tbh.

[rapid merlin]

hey guys, what to do if u get tone of scam calls

[heady nova]

yup better

[sick lance]

My phone automatically declines them.

[night prairie]

i should probably start doing THM and shit again

[rapid merlin]

Wait does it update instant?

Im at 0x9 for a few days now lol

[heady nova]

you'll have to verify w bot

[rapid merlin]

Reverify?

[mossy river]

Ignore them, they’ll add you to a list if you pickup

[heady nova]

yup

[rapid merlin]

Pain

[heady nova]

indeed

[rapid merlin]

Anyway, this color isnt that bad

[sick lance]

Does that bot still do daily sweeps?

[night prairie]

Do the numbers show up as spam when you receive the call? If so, on Android at least there's an option for automatically blocking those, same if there's no caller ID iirc

[rapid merlin]

it says its coming from the uk

so no

[mossy river]

Which bot?

[sick lance]

THM.

[mossy river]

They route through Scotland because it makes people more likely to pick up

[sick lance]

For verification

[mossy river]

Yuh

It might be getting rate limited though so I’ll look to sorting that out

[rapid merlin]

i see

because they keep calling me everyday and i dont even pick up

[mossy river]

Have you considered it might not be a scam caller

[rapid merlin]

its different numbers everytime

for monhs

months

[mossy river]

Call your provider and ask for a new number

[rapid merlin]

ok

Why has the THM bot a role with 2023 in the name?

[sick lance]

Updated bot.

[rapid merlin]

ah

its 2024

from people yes

thats what nordvpn says anyway

they say it keep ur ip private online

[mossy river]

What do you mean by secure?

[night prairie]

I've had calls from England which still show up as spam, I think it might involve other people reporting the number too

Get into what exactly, your PC?

[mossy river]

wym hard enough to get into

I'm not sure I fully understand

[rapid merlin]

the vpn can be hacked yes

[night prairie]

@rapid merlin Idk if calling them is a good idea xd

[rapid merlin]

what

they cant hack ur pc

unless u download

[night prairie]

perhaps if they had access to the VPN server they could monitor and manipulate traffic

[shut hawk]

All a VPN does is just shift the trust from your ISP to the VPN provider

[rapid merlin]

i dont think people realise vpn companies work with the fbi

[rapid merlin]

authorities in general

[shut hawk]

and because mostly everything is HTTPS/SSL nobody can snoop on it anyway (assuming it's setup correctly)

[rapid merlin]

i use tor because people say its the safest browser

[night prairie]

i still find the Signal subpoena funny

[shut hawk]

https://tenor.com/view/thumbs-up-conspiracy-tin-foil-hat-gif-20017163

[mossy river]

wym a vpn can be hacked

[sick lance]

Do you run it on full screen?

[rapid merlin]

the hacker can breach the server

[mossy river]

What server?

[shut hawk]

such an inconvenience honestly

really not worth it for typical day to day browsing

[rapid merlin]

nordvpn got hacked and they steal the data and hack you

[sick lance]

Source?

[mossy river]

wym "hack you"

Eh?

This conversation doesn't make ense

[heady nova]

bing

[grim sparrow]

URL Scan Report

Report for https://www.bing.com/ck/a?!&&p=d9600cb2867e404cJmltdHM9MTcwNzg2ODgwMCZpZ3VpZD0wZDhlMjlhOS0xZjIzLTZhZTgtMDkxOS0zYThmMWU0MDZiZDImaW5zaWQ9NTIzOA&ptn=3&ver=2&hsh=3&fclid=0d8e29a9-1f23-6ae8-0919-3a8f1e406bd2&psq=nordvpn+data+breach&u=a1aHR0cHM6Ly93d3cudGVjaHJhZGFyLmNvbS9uZXdzL3doYXRzLXRoZS10cnV0aC1hYm91dC10aGUtbm9yZHZwbi1icmVhY2gtaGVyZXMtd2hhdC13ZS1ub3cta25vdw&ntb=1

Malicious?

false

[sick lance]

Bing pot!

[night prairie]

thats a nice feature

[sick lance]

https://tenor.com/view/bingpot-raymond-holt-brooklyn-nine-nine-bingo-got-it-gif-23124403

[shut hawk]

Yeah everyone knows bing is not safe /j

[rapid merlin]

i use bing too yes

because it has ai

[night prairie]

NordVPN claims not to have been notified about the breach until April 13th, 2019, more than a year after it happened. It took down the server the same day, and began an immediate audit of its 5,000 servers.
😬

legit the only person i've heard say they use bing

unironically

[thick moss]

This has to be bait or something.

[night prairie]

i heard the AI is pretty good tbf

[mossy river]

Just ride it out. You don't completely know if you like the field yet

[rapid merlin]

@mossy river wanna be my valentine?

https://tenor.com/view/thebachelorette-abc-chris-desiree-proposal-gif-3462443

[mossy river]

omg really!?!?

[sick lance]

Embed fail.

[rapid merlin]

Would I lie to you?

[night prairie]

https://tenor.com/view/suit-slideshow-man-in-suit-sitting-man-wearing-suit-sitting-slideshow-man-wearing-suit-meme-gif-25275395

oh mine worked

[sick lance]

https://tenor.com/view/lee-mack-innuendo-rimshot-sneaky-would-i-lie-to-you-gif-27318003

[mossy river]

I'll be your valentine !

[rapid merlin]

Cause I haven’t linked my account to discord yet

[mossy river]

Love this show

[rapid merlin]

[sick lance]

Gid innit?

[mossy river]

Hilarious

[shut hawk]

Bob Mortimer is the best character on it

[sick lance]

Bob is so good at lying.

[shut hawk]

I've probably butchered that spelling

I do beg your pardon..but we are in your garden

[mossy river]

It's not all black and white homie

You do you boo

[sick lance]

Don't be motivated by money.

Be motivated by passion.

[heady nova]

but

my passion is money too

[night prairie]

tf 😭 i gotta stop skipping uni

[sick lance]

You gotta work on your shapes first.

[night prairie]

😂

[wild rose]

https://tenor.com/view/shape-sorting-lol-gif-5209222

It was always a lie

[sick lance]

Yeah... But it's Roblox so...

[mossy river]

I'm not in this field for the money tbf

Knowledge

Fun

Passion

[near hawk]

I'm in the field because I enjoy it

[night prairie]

my friend knew a guy who was a php developer for the hub 😂

[mossy river]

Ignore them

Nah, I rarely tell people what I do/ am involved in

It's not a great self introduction and not that many people care

[chilly veldt]

I care about the person themselves, not the work they do or who they work for

[mossy river]

I’d rather tell them something interesting about myself

Like I play guitar or I am the world’s best Fortnite player

Or that I speak a minimum of 1 languages

[graceful thistle]

You forgot kiwi 😦

[heady nova]

ello dolph

long time

[graceful thistle]

Everyone forgets about the kiwis

Hello 😄 how are you

[shut hawk]

Yeah but what somebody's occupation is can tell you what they like doing as a person, and is a great starting point for a conversation

[heady nova]

been good, my internship dates keep shuffling back and forth. You got any interesting hikes/trekks yet?

[gritty zephyr]

Omg hi dolphin

Long time no see

How are you

[graceful thistle]

Ow, hope you can get started soon! Are you excited?

Not really, our van is out of order and will be for a while, no trips or camping 😔 but its alright

Heya Jester, long time indeed! How are you? Doing good here 😄

[gritty zephyr]

Im good except for ns being ns

[graceful thistle]

Yeah.. haha

[gritty zephyr]

But what qre you gonna do lmao, other than that great

Doing a semester on digital forensics, very interesting

[graceful thistle]

Oh that sounds fun

[heady nova]

Ooh that's bad. what happened to your van?

and yeah I'm excited and kinda anxious cuz I'll be moving out for the first time and relocating 1000+ km away from my home town. I've only ever got to be as far as 80km from my home town so kinda nervous

[graceful thistle]

Oooh yeah that is a big deal

[gritty zephyr]

Mhm, and im coupled with a nice girl i vibe with, so who knows

[graceful thistle]

But you'll be fine and it will be super fun

[heady nova]

good thing I can cook/clean though

[shell nova]

serious doubts on the Aussie, eh?

[gritty zephyr]

You can do this!!

[rapid merlin]

guys is a ring topology basically when devices are connected together?

[heady nova]

Haha I mean I already know basic survival skills + woodwork + electricity stuff, couldn't be that hard

but thanks

[graceful thistle]

You'll work it out

[heady nova]

in a ring, yeah

[shell nova]

it's mostly what it says on the tin: A -> B -> C -> D -> A

[gritty zephyr]

Bear Grylls would be jealous

[shell nova]

this is not used very much anymore outside very specific applications

[shell nova]

Bear Grylls cheats

[gritty zephyr]

Eating maggots is cheating? Ill stick to the rules then thanks very much

[heady nova]

Imma bring bug repellent

[heady nova]

Hydra meant he gets normal food and stuff off-cam

[gritty zephyr]

Ah fair enough

[main kraken]

fly

[rapid merlin]

what is osi models

🙏

im too poor to afford looking at it

[shell nova]

that sounds like a good research question 🙂

[rapid merlin]

ye

google is cost money bro]

they always make u pay

[gritty zephyr]

That was a bit of a mean comment, sorry

[grizzled crystal]

what? who?

[rapid merlin]

the websites

[shell nova]

you're joking, right?

[gritty zephyr]

Straight out of your notes i take it

[shell nova]

in any case, there's a THM room on the OSI model

[grizzled crystal]

No i just googled OSI Model

[hollow pivot]

How much did you have to pay?

[gritty zephyr]

XD

[grizzled crystal]

At least 1

[shell nova]

about 30 seconds of their life, apparently

[grizzled crystal]

at most..more than 1

[hollow pivot]

You should've just asked someone in this server, much more efficient

[gritty zephyr]

God i love this community

[shell nova]

clearly

[grizzled crystal]

Real #timeizmoney #hustler2hustler #grindordie #nogrindnolyfe

[gritty zephyr]

Werent you the one advocating rest, phony

[timid prism]

i grinded for a month just to fall sick on the exam 😄

[grizzled crystal]

/sarcasm here

[gritty zephyr]

Oof

[grizzled crystal]

I may advocate for rest however the real ones work 25 hours a day 8 days a week

[gritty zephyr]

You couldve made it better with #joke

[grizzled crystal]

#iamcompletelyserious

[gritty zephyr]

This now feels like 2000's twitter

[timid prism]

grinding is fun but the next time is just exhausted

[grizzled crystal]

yes it's a road to fatigue

[timid prism]

im completely exhausted rn and havnt touched my books in 3 days

[gritty zephyr]

Be kind to yourself, your mind and your body

🙂

[timid prism]

cant expect the exam to be kind

[gritty zephyr]

And theres absolutely nothing wrong with that, youre human, not a machine

[timid prism]

well i have to get back in action i cant take break for so long 💀

[grizzled crystal]

go watch a movie or something

[gritty zephyr]

I have faith in you passing 🙂

[grizzled crystal]

go to the park and feed birds

[gritty zephyr]

Mr robot, passive learning xD

[timid prism]

i have faith ill pass but that with a good grade no

99.7+ is purely luck

[grizzled crystal]

Ehh maybe

[timid prism]

nah, we dont allow that, they poop all over. also no park around where id go

but we do have a cat which meows all the day to my house

[grizzled crystal]

aww :(

[shell nova]

But I thought those weren't real

😉

[graceful thistle]

Petting a cat is much like touching grass

[timid prism]

it rubs itself to me

[graceful thistle]

Esp when they activate that purr

[timid prism]

it meows

i was doing a photography session with it

[graceful thistle]

Cute

[grizzled crystal]

parks or birds?

[grizzled crystal]

cute little guy!

[shell nova]

the latter

[timid prism]

knock knock

[sand trench]

t minus 5 days

;-; why time gotta move so slow

[tropic laurel]

Heyho, I want to play KoTH but I'm really bad at the moment and scared that I could do something against the rules might get banned because I dont really know what I'm doing. 🙂

[shell nova]

it'll speed up when you least want it to

[grizzled crystal]

correct, birds are not real

[tropic laurel]

Does anybody have some experience on KoTH?

[gray sonnet]

-6 kid

-6

[shut hawk]

Didn't receive any team Snapchat message about valentine @mossy river 😔

[near hawk]

Neither did i

but my gf did

Snapchat trying to rizz my gf up

[mossy river]

I don't have snapchat :>

[shut hawk]

Why did I think you did 🤔

[shut hawk]

Wow, keep on the lookout!

Can't believe it :(

[crude stump]

Cute cat

[sick lance]

It's wrong.

#room-help if you need help.

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 1962)

[sand trench]

meeping meep moop noodles

[naive violet]

@hollow turret Please don't post answers though

You did

[buoyant tree]

Hullo

[buoyant tree]

beep bop boopp

good comedy on reddit

[sand trench]

hah

they are slightly right

considering linux runs the majority of the servers on the internet finding vulns that affect linux tends to have better pay off

[buoyant tree]

not for malware atleast

for active exploits yes

but for malware, if they try and run the malware

there's bound to be a error

and then i gotta debug how to fix the error

[sick lance]

Linux Malware threats is around 2 million...

[naive violet]

Rce means crypto mining malware usually

[buoyant tree]

what about windows

[naive violet]

Small payoff

[sick lance]

95% of malware.

[buoyant tree]

heck i could go on github and search minecraft hax and get a good load of malware samples

[shell nova]

data exfil, proxying deeper into the network as well

[buoyant tree]

and none of them have instructions for linux sadly

[buoyant tree]

may be a question of quality over quantity

I may have to switch over to linux by dual booting

Any suggestions for a full on linux OS?

[sand trench]

linux mint

pop os

endeavour os

[naive violet]

Don't do bug bounty for the money

Nah if you want reliable income get a job

[buoyant tree]

eh last few reports were all duplicates

so am tired

how's ur experience atm

[buoyant tree]

hmm which one for a lil bit of hacking but still general usage

isn't mint just a windows alternative

[sand trench]

well if you want everything to be easy to install endeavour os is shadows go to

as the arch user repository covers a ton of software

[buoyant tree]

eh got out of scope also

[sand trench]

though it is decently focused on using the terminal to install stuffs

[buoyant tree]

gonna start looking for CVE's next month

[buoyant tree]

no worries about that

I was using sudo in windows cmd prompt

thats the main reason I am making the switch

[sand trench]

well linux mint has look alike to windows yeah but it is still linux... though it might have some problems with not being bleeding edge if that is something you care about

endeavour os is arch based and mint and pop os are ubuntu based which is debian based

so slightly different in what package manager you get

and what is available in default repos

other then that it is mostly the same under the hood

yes desktop enviroments that are installed by default or comes with a distro can change the feel a lot but generally you can change that

[naive violet]

Sounds like you're afraid of work

Both are going to lead to situations where you do work for no reward

But that's life so you know, you just have to do it...

Make a good CV once and then tailor it each time. Shouldn't take long.

[daring gull]

hey guys any recommendation for a good computer forensics book?

[chilly veldt]

Speaking of, I need to update my CV

[sand trench]

same but not a lot to put on it

[rapid merlin]

who actually inverts controls on games

[glass nest]

Australians

[wintry sluice]

I sometimes do. depends on how the controls are set up.
inverting pitch is about it though

[shell nova]

I usually invert pitch and vertical camera

[rapid merlin]

https://tenor.com/view/throw-up-dry-heave-vomit-gross-eww-gif-23254765

[sick lance]

Didnt you ask earlier?

[rapid merlin]

twice for goodluck

[sick lance]

It's a pet peeve of mine, (only when I already answered)

It's rude 😛

[rapid merlin]

indeed

[glass nest]

Can a NDA contain a clause thet prevents you from saying you signed an NDA?

[rapid merlin]

8 days until payday, amen

[daring gull]

oh I apologize it didn’t see you answered

my bad

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 14, 2024, 6:20 PM

[sand trench]

@rapid merlin ⬆️

[rapid merlin]

yeah

[glass nest]

So.. how would they know you signed it?

[rapid merlin]

who is "they"?

if its the people that gave you the nda, then they'd have it on records lol

[sand trench]

generally the exception clauses so the person you signed the nda for/company can tell

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1629)

[glass nest]

unless they too, signed an NDA NDA

[sand trench]

no problem

[glass nest]

So they couldnt ask to check

[sand trench]

what are you trying to set up esqy

[rapid merlin]

an nda that prevents you from asking others if they indeed also signed an nda that stated they cannot tell others

the nda cycle

[glass nest]

not setting anything up, Just an idle thought

[sick lance]

Enumerate.

[rapid merlin]

have you tried:
Username: Username
Password: Password
😉

[stone lynx]

It's a THM discord, but generally I recommend using /usr/share/wordlists/rockyou.txt

just run it in the background, who knows

always check the standard few, it's gotten me stuck way too many times

[rapid merlin]

if only 😊

[glass nest]

Use your hacking skills, and enumerate

[stone lynx]

you can always set up Hydra in the background :)

[glass nest]

But be careful - this community doesnt like helping with active CTFs

[stone lynx]

and enumeration is always the best option

Rockyou is a password list

so definitely the login

[glass nest]

Enumerate the whole thing, and use the tecniques youe've learned to solve it.

[stone lynx]

For the URL, use gobuster

[proven quartz]

HackerOne is a platform that enables people to engage in bug bounty programs, where you need a reasonably high level of skill. You should spend more time on THM learning all about web pentesting and the related tools and techniques

[glass nest]

Ahhh howaya, subtltey

(That was the irishest accent I could type)

[rapid merlin]

i was expecting a Leprechaun to jump out of my monitor

[proven quartz]

You seem to be doing well, keep up the effort

[glass nest]

Was that directed to me aswell? 😄

[twin ridge]

Gave +1 Rep to @proven quartz (current: #22 - 348)

[sick lance]

Fortnite time

[proven quartz]

Leprechauns are still hibernating. They normally poke their head out to sell breakfast cereal to kids and Guinness to tourists in the middle of March

[glass nest]

When they do pop their heads out to look for any danger they always do it twice. To be sure to be sure.

[gaunt basalt]

Anyone here finished OSCP?

[sand trench]

a few people yeah

[gaunt basalt]

Tough?

[sand trench]

shadow is not one of those people ¯_(ツ)_/¯

[gaunt basalt]

bee boop that no good

[sand trench]

most of the oscp people on here that chat have the oscp role

[proven quartz]

If you have specific questions about the OSCP, there's frequent discussions about it in #cyber-and-careers, #infosec-general and here in #general. Ask your question and plenty of people would be willing to help if they can

You can use the Search feature in the top-right to see all the mentions of OSCP, it's discussed regularly

[sonic wagon]

I have a quick question, how are you able to hack into devices that are around us, every device is different. I would like to learn more about it, lets say a traffic light or a billboard. Is this called "IoT Devices"?

[main kraken]

Scrubz

How do i hack a Android 13 m littlebrother cant get his old brawl stars acc back where he pro ah so im trying to hack his phone with PERMISSION!!

[sonic wagon]

you want to hack the phone or the account?

[main kraken]

The thing thats needed for me to get the acc for him back

[boreal scarab]

https://tenor.com/view/ablivya-weee-cat-catfastomgsofast-wtfisthistag-gif-26273699

[sonic wagon]

Can anyone help me with this?

😄

[sick lance]

Hang on a moment. 🙂

[boreal scarab]

@sick lance any fun RE lately?

[devout palm]

Hii

[sick lance]

Pegusus

I can't say anymore

[boreal scarab]

Which is understandable. But that's cool as hell!

[main kraken]

okay

hehe ||sus||

[sonic wagon]

@sick lance (sorry for the tag)

[glossy portal]

RFID hacking, but be careful the learning resources are mostly blackhat based

[sonic wagon]

Thanks!
Another question, lets say if you have a smart LED that is connected to WiFi, how would you get inside it and control it?

[twin ridge]

Gave +1 Rep to @glossy portal (current: #687 - 5)

[glossy portal]

I'm not experienced much in RFID, so I can't answer that question, but I have an idea, you'd have to use something like flipper0 or similar to pretend to be the wifi, take this with a grain of salt

[sonic wagon]

Okay, thank you!

[rapid merlin]

[sonic wagon]

Sorry, I am not that good at explaning what I know or what I would like to know 😅

[rapid merlin]

I’m not sure why you’d want to “hack” into a traffic light or a billboard lmao

[sonic wagon]

No, I don't want that, it was only the best examples I could find.

[umbral bay]

Does not sound legal.

[rapid merlin]

Yeah thm is for white hat stuff, that’s stepping into areas you shouldn’t step into

[wispy vessel]

hi , is VPN faster then attackbox for a normal user ?

[umbral bay]

We can only help with targets that are provided on the THM platform.

[sonic wagon]

How should I protect a device, if I don't know how to hack into?

[rapid merlin]

you can protect a device while still not knowing how to hack into it lol

[sonic wagon]

I would patch the ways I have got into the system, if I am able to hack into it, just like CTFs (I think)

[umbral bay]

You practice on a target on the THM platform.

[sonic wagon]

I asked that question because, there are just a lot of devices around us once your outside walking around. Each device can be hacked into. I just wanted to know what the name of these devices are.

[proven quartz]

AttackBox sits within the THM infrastructure but the speed difference between that and the VPN connection are generally not something to be concerned about. The AttackBox disappears when you've finished using it so you can't store info on it, such as your writeups or notes

[sonic wagon]

Yes, ofcourse I do, but I needed a name for the topic I am interested in.

[umbral bay]

We can't help with those targets.

[sonic wagon]

Yea but whats that topic called, so I can search it on tryhackme.

IoT Devices?

https://tryhackme.com/room/iotintro

?

[rapid merlin]

that is what they're called, yes.

[sick lance]

Why would it be sus?

[chilly veldt]

Traffic lights aren't IOT though

[buoyant tree]

what would they be classified as then

dumb tech

or just micro controllers hooked up to lights

[devout palm]

They are not connected to the internet?

[rapid merlin]

they are, no?

[buoyant tree]

most aren't in my experience

[shut hawk]

Some are iirc

[boreal scarab]

I hate NJ drivers @molten sky
I'm in a parking lot, driving through, and this girl is pulling out, but I'm too close to stop. I honk, she continues to move out of the spot, I lay on my horn and have to swerve.

Mind you, she's not backing up, she's pulling out forward, and can EASILY see me. She deadass stairs at me like I'm in the wrong

BREH

[sick lance]

Some traffic lights are.

[chilly veldt]

I would classify them as OT

As it's operational technology, and not internet of things

OT can still be connected to the internet

[sick lance]

Not the old ones, It think only the smart ones.

[rapid merlin]

tbh now i think of it, not a lot of traffic lights are even connected to the internet

just the smart ones that scrubz just mentioned

[proven quartz]

Modern traffic lights are managed centrally by a controller in a room similar to a NOC. They can be interacted with by emergency vehicles on the move in many cases, or these emergency vehicles can coordinate with the controller

[boreal scarab]

Can I just call it "Of Things"?

[chilly veldt]

Op things*

[rapid merlin]

they use sensors really unless its a busy city

they just use timers on those

[wispy vessel]

got it thx

[twin ridge]

Gave +1 Rep to @proven quartz (current: #22 - 349)

[boreal scarab]

OP?! Should we nerf it?!

[devout palm]

I see

[proven quartz]

Or people will just hear the sirens and stay out of the way

[sonic wagon]

Traffic lights aren't controlled with timers

[sick lance]

Unless they're at a red light behind traffic.

[devout palm]

is it necessary though?

[sick lance]

They turn their siren off and leave the lights on.

[rapid merlin]

major ones are

[sick lance]

If you run a red light to let emergency services through, you still risk a traffic violation.

[rapid merlin]

yeah, they only usually let you off if you are inching past the red light to make room

[sick lance]

Nope.

[chilly veldt]

Oh well, imma go back to my back workout

[rapid merlin]

well here it is anyway

[sick lance]

The only defence would be the officer claiming they allowed you

You could still cause a crash.

[rapid merlin]

if i cause a crash by inching past a red light and turning, id be surprised

Can i see what acc my discord is linked to?

[sick lance]

You never know...

An oncoming car could mistake you for coming out, slam on it's brakes and get rear ended.

[sick lance]

You could ask a mod nicely.

[rapid merlin]

Please

[sick lance]

I'm not a mod. 🙂

[naive violet]

I think you can just run /rank in #bot-commands ?

[rapid merlin]

Okay

[sick lance]

Asks for a user name now.

[naive violet]

Sad

[rapid merlin]

Yeah

Can u see

[sick lance]

I think Jabba is going to implement you can do your discord handle.

[naive violet]

@rapid merlin "HugoN"

[rapid merlin]

Thanks

[twin ridge]

Gave +1 Rep to @naive violet (current: #1 - 2097)

[rapid merlin]

to make it look less boring

Whats the max level a normal user can have?

[chilly veldt]

13

[devout palm]

0xD 13

[sick lance]

That's rank.

Max level is 1337

special event.

[devout palm]

but isn't it temporary?

And there should be a rank for bug hunter

which 0day has i guess

[sick lance]

Lvl 999 - Bug hunter
lvl 998 - Contributer
lvl 997 Staff

[sonic wagon]

😄

[sick lance]

Still obtainable.

[devout palm]

yes

[shell nova]

because it's 1337

[chilly veldt]

A 2 hour back workout just hit nicely, I'll walk like a grandpa tomorrow

[proven quartz]

Good going 🙂 Zimmer frame on order 😛

[chilly veldt]

I worked my back for 2 hours

[sand trench]

YATTA:

[glossy portal]

I meant like exercise wise

[sand trench]

that was a hard challenge in dragonfable

[chilly veldt]

Ah, single dumbbell rows, t-row, back extensions, lat raises, and overhead pulls, and sitting rows

[sand trench]

bella is more fit then shadow

[chilly veldt]

Yup, 5 sets of 10 reps each

With inclining weight

I'll be as wide as Mr. @silver sky

[silver sky]

Impossible

[devout palm]

Wide boi!

[chilly veldt]

Yeah, I actually don't want to, I want a slimmer body 🤣

[devout palm]

Long time no see

[silver sky]

I've been busy!

[sand trench]

what about a toned/muscular body???

[chilly veldt]

Yeah, slimmer and toned

[copper magnet]

Here's a question for everyone what are your thoughts on the Coursera Cybersecurity program from Google?

[buoyant tree]

Got a question about how hash's work, like if the text is bigger than the hash length then what happens?
Like I know it generates a signature for it but isn't there more things that can be random in a bigger file that the signature is not unique then hash collision happens

[glass nest]

The hash will always be the same length. If could be 1 character or a complete compendium of shakespeares work

[shut hawk]

Chick3man must be asleep

[devout palm]

Fair

Hope you've been happy though

[glass nest]

Chickenman is normally passwords, but i suppose hashes are related to them

[shut hawk]

They are one of the devs on hashcat 😛

[sand trench]

the point of the hash length is that it can be unique for basically everything... think like how many ipv6 addresses there are... nowadays with sha512 and newer the hash length is big enough to cover basically any input data

[polar spoke]

lol

[polar spoke]

hashes of fixed length output and without input limit will, of course, have a risk of collisions for any inputs longer than their output

the risk is low enough, however, that it's rarely considered

this is the "pigeonhole principle"

[sand trench]

sooo when we getting yescrypt support in hashcat???

yes know that will be painfully slow

[polar spoke]

soon, with hashcat 7

it won't be that slow

[sand trench]

oh neat

[whole yew]

"Universal hashing algorithm" should be your lookup. When you understand what one of these algorithms does and how the transformation works, your question will be self-evident.

[shut hawk]

What size would the input have to be to guarantee a hash collision? 🤔

[polar spoke]

doesn't work that way

assuming your hashing function is psuedo random and that 1 input will always map to 1 output, where input <= output size, which assumes a normal distribution of mappings

then you can also assume that any input > output size will produce a collision with an input that is <= output size

finding those, however, is usually as much work as a first preimage iirc

hence why it doesn't really matter

[whole yew]

I don't think you can make the assumption that it's a guarantee that exactly 1 input maps to exactly 1 output - just that the likelihood of a collision is m/n where m is the number of recorded inputs and n is the size of the key space

[polar spoke]

also, importantly, hashes are often constructed in such a way that there is always compression from input -> output

[polar spoke]

in the "real world" you probably can't

but for an ideal hashing algorithm, normal/even distribution of the mappings is often assumed

[whole yew]

yeah, i'm not trying to contradict what you said, just clarify for those that do not understand how one way functions are intended to work

[polar spoke]

right, i understood

[sand trench]

one way functions are like how food goes in mouth and come out as poop

[polar spoke]

well, that's one way to put it

[whole yew]

uh. that's a gross reduction of it, shadow

[polar spoke]

I prefer the blender and smoothie tho

[sand trench]

yeah probably quite gross explaination but it should be useable for basically any age group

[whole yew]

i've always had it explained to me mathmatically with respect to set theory and notation

[rapid merlin]

id prefer shadows explanation

[whole yew]

the smoothie idea is more palatable, if you will, but i still prefer the notions of one-to-one and onto

[polar spoke]

I think the concept of trapdoor functions or one way functions in general can be tough to understand

even simple ops like modulus

[shut hawk]

But if hash collisions exist then it's a many to one no?

[whole yew]

hash collisions do exist

the point of the hash algorithm is to distribute potential inputs across such a sparsely populated keyspace that hte likelihood is extremely low

[polar spoke]

^^

[whole yew]

the likelihood of collision for 2 distinct inputs is 1/n where n is the size of the keyspace

[polar spoke]

and to do so deterministically but with psuedo random outputs

[rapid merlin]

https://tenor.com/view/jim-carrey-liar-liar-funny-gibberish-blah-gif-12443056

[shut hawk]

You could have a hashing function that didn't have collisions, if the input was a finite amount

[sand trench]

hash collision is like how an orange and a blood orange both create orange juice

[polar spoke]

yes

[rapid merlin]

thank god you didnt make another poop example

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1630)

[whole yew]

if you have a keyspace of 2^512 bits, then it's a 1/2^512 for any 2 inputs to have a collision

[whole yew]

how does this contribute to the conversation?

[rapid merlin]

does it need to??

[sand trench]

sorry if shadow grossed you out.....

[whole yew]

I mean, if you want to be a part of the conversation instead of trolling, you can ask an honest question.

[rapid merlin]

if you consider that trolling, i cant help you, i was implying what i was reading is gibberish to me

[whole yew]

Then that's a you problem. You can always ask about things you don't understand instead.

[rapid merlin]

right

[shut hawk]

Hmmm okay so hash collisions are so rare it isn't really a risk anyway

[polar spoke]

normally yes

but sometimes they do happen

and sometimes algorithms are weak

[whole yew]

It's not so much that it isn't a risk

[shut hawk]

Why not just make the possible output length bigger than

[whole yew]

It's a known and quantified risk, and it's accepted that there is some risk, because hashing is only guaranteed to be imperfect

[polar spoke]

this is a thing

but output length is not everything

the actual construction of a hash can be weak

[whole yew]

usually you don't do that because it wastes space

[polar spoke]

MD5, for example

or SHA1

or etc.

[whole yew]

the point of the hash is usually to store a signature, not the original item

[shut hawk]

Is it that the algorithm is weak, you are able to "force" a collision?

[polar spoke]

or generate a key as with KDFs or similar

[whole yew]

so you can verify the authenticity of a claim submitted as the original data

[polar spoke]

yeah basically

MD5 has quite a few known weaknesses

some allow you to craft inputs for specific outputs

let you cheat your way into collisions

[whole yew]

yeah, those weaknesses are why MD5 is almost always fine for file verification but not for passwords

[polar spoke]

well no

[whole yew]

different risk and different security requirements

[polar spoke]

not anymore

[whole yew]

when did that change?

[polar spoke]

idk, 2004?

[sand trench]

thought so too

[polar spoke]

unless you mean single file, in place

[whole yew]

IIRC as recently as last year most distros were still using MD5 as signatures for repo files

[sand trench]

that md5 should not be used for file checks anymore either

[polar spoke]

oh yeah

they shouldnt be

they shouldnt have been for like, 20 years

[whole yew]

hmm

[polar spoke]

MD5 checksums aren't worthless but they certainly aren't secure

[sand trench]

sha256 is okay for file checks right???

[whole yew]

the point i think isn't to be secure - just that you can verify authenticity from a known file size and a published signature. Say, for a net-installer or DVD ISO

[polar spoke]

yes, for now

[polar spoke]

MD5 isn't usable for that

[whole yew]

i know i've been seeing gpg keys being published for more and more repo files, but i still see a lot of MD5 checksum files as well

[polar spoke]

because altering a file and having it's MD5 stay the same is within reach of adversaries

barely, but it's possible

[whole yew]

that would change the original file size though

[polar spoke]

not necessarily

MD5 is like, weak weak

[whole yew]

hmmm

[shut hawk]

I presume hashing algorithms are constantly evolving, how long do you think it would be before something like SHA256 is considered unsafe - or no way to tell until somebody finds a weakness in it?

[polar spoke]

we already don't use SHA2

[whole yew]

do you have a case study on it? not doubting, but i need to see the math why

[polar spoke]

in favor of SHA3

[sand trench]

nice that archlinux generally uses gpg to check file integrity after downloading it form repos... and paccheck has sha256 support

[polar spoke]

for MD5 being weak enough to generate collisions?

[shut hawk]

Oh, never even heard of SHA3

[polar spoke]

as far as free start and chosen prefix goes, Marc Stevens seems to have the most work in that area

[whole yew]

MD5 weakness specifically with respect to distributed file checksums

[polar spoke]

to be clear, changing a file with the MD5 staying the same is barely within reach

but changing 2 files to have them collide on MD5 is seconds at most on a modern CPU

so someone with control of a benign and a malicious file could alter both to make them have the same MD5 Very easily

but altering a file to have a Specific MD5 is much much harder

when I say barely in reach, I mean nation states might have the time/resources

[whole yew]

ok, that makes much more sense

[polar spoke]

that's still, imo, a complete break in its security

if anyone can do it, it shouldn't be used

[sand trench]

considering how many nation state APT:s there are yeah

[whole yew]

i thought you were saying that the second claim (alter to specific md5) is easy enough to make the algorithm roughly as bad as ROT13

[polar spoke]

no no

that's still ~ first preimage levels of hard

but that's so easy with MD5 that nation states are within reach

which is far far too easy

when it comes to crypto, "i think i can in 10 years" means "we should have stopped using it 5 years ago"

[whole yew]

lol, i thought the bounds were a bit tighter

like "i think we can break in 5 years" means we should stop using it next year

[shut hawk]

damn 😔

[polar spoke]

depends on what it is

especially in regards to who your adversary is

re: NSA scooping up encrypted data now, to eventually decrypt it later when they have the resources

[shut hawk]

You think RSA2048 will be cracked any time soon?

[polar spoke]

I am not at liberty to say 🙂

[shut hawk]

👀 lol, well thanks for ye time

[buoyant tree]

but to a certain limit

[buoyant tree]

hmm, going to read about pigeonhole principlec

[mossy river]

Hashes are commonly used for passwords and to show file integrity

[polar spoke]

as well as to derive fixed length signatures

and fixed length keys

Hashes can't be "decoded"

[buoyant tree]

hmm pigeonhole principle made some sense

[whole yew]

those fixed length keys are derived for things like diffe-hellman, right?

[polar spoke]

or AES

or basically every encryption you can think of that isnt based on two primes or a curve point

[mossy river]

If you're referring to something like crack station, it doesn't decode them

[rapid merlin]

guys how to counter a ddos attack

[buoyant tree]

Also chick3nman what's ur suggestion if I wanna learn everything about cryptography, like where to start and what to learn. Did THM's room's on them

[polar spoke]

That's tough

[mossy river]

Increase your resources, block the IP addresses

[buoyant tree]

Not everything per say but atleast enough to make me knowledgeable

[mossy river]

Mhm

[polar spoke]

https://www.schneier.com/books/applied-cryptography/

[rapid merlin]

how would you do that though

[polar spoke]

schneiers book is really good

touches on lots of stuff

might give you the info and vocab to look more things up

[mossy river]

It uses a database, it says at the bottom it's a lookup service

[polar spoke]

FYI on hashes being "decoded": https://www.techsolvency.com/passwords/dehashing-reversing-decrypting/

[rapid merlin]

youre better off setting up precautionary systems

[buoyant tree]

will finish the book in less than a month

but is there a more updated version of the book

with modern examples

[polar spoke]

honestly, not sure

[buoyant tree]

I know the theory doesn't change

[polar spoke]

crypto doesn't exactly move very fast

[buoyant tree]

but like its 1996

[polar spoke]

AES is, for the most part, still AES

and most crypto builds on previous stuff

so now, for example, we have AES GCM or XTS, which are based on previous cipher modes but with added features/concepts

[sick lance]

Crypto and Malware are probably two of the more common themes of the old theory is dated but still pretty relevant

[polar spoke]

yeah, crypto is very "learn all the stuff from way back first" imo

[mossy river]

I don't understand

[polar spoke]

jumping straight into salsa20 based stream ciphers mixed with poly1305 without some understanding of the principles/concepts isnt going to get you anywhere

[sick lance]

Probably put you off learning it tbh

[polar spoke]

yuuup

[buoyant tree]

hmm found a edition which is 2 generations newer
https://www.schneier.com/books/cryptography-engineering/

[polar spoke]

yeah, most anything from schneier is worth reading

[whole yew]

Agreed

His books also show up on humble bundle cybersec bundles fairly often

IIRC the no starch security bundles have his books regularly

[sick lance]

Yeah, I think that's where I got them.

[polar spoke]

in theory, yes

however, that doesn't reduce the security of the hashing algorithm

just tells you that that password/value is weak

I'm not sure I understand what you mean

[buoyant tree]

time to stop reading harry dresden and start reading studying books

[polar spoke]

yes, that's correct

if you find a hash like 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 and look it up, you will quickly find that it's the SHA1 of "password"

[shut hawk]

and there are many tools that do that

[polar spoke]

but that doesn't really mean anything other than that hash is known

if you lookup ddb32829d067a05fb0c644e84ef7ac493ab7baf4 you will NOT find the corresponding plaintext anywhere

and in fact, you likely couldn't break it even if you tried

so really, when you lookup a hash, you are sorta looking up known passwords more than you are looking up known hashes

of course, this all relies on the password creating the same hash

but modern hashing doesn't really allow that to happen because of the inclusions of salts and varied rounds and peppers and keys and etc.

well, i say modern, but really I mean "purpose built" hashing, since bcrypt is from like 1996

[buoyant tree]

and what other books would u recommend chick3nman

[polar spoke]

There's another applied crypto book around that has a similar name that I liked

really, "applied cryptography" is the right search term

[twin ridge]

Gave +1 Rep to @polar spoke (current: #164 - 37)

[polar spoke]

that's the kind of stuff you will want to learn

[naive violet]

Thanks for that, useful article

[twin ridge]

Gave +1 Rep to @polar spoke (current: #158 - 38)

[polar spoke]

🙂

[buoyant tree]

k

and you got any insights into encryption

[polar spoke]

the author is also on team hashcat, we get asked this stuff enough that at some point we just write it out and link people haha

[polar spoke]

elaborate maybe?

[naive violet]

Fighting the good fight

[buoyant tree]

like just to learn about encryption in general also

[polar spoke]

the above books cover encryption in general

in fact, i think more time is spent on encryption than anything else

[naive violet]

This comes up on Humble and I quite liked the crypto sections in that

[buoyant tree]

added that in

[naive violet]

Don't pay full price for it of course, just grab it if there's another Wiley bundle

[buoyant tree]

usually grab my books of orielly

I got thier subscription

great value for education

[buoyant tree]

also btw there's a 3rd edition

[naive violet]

I just grabbed the cover off google

[buoyant tree]

oh k

[hollow pivot]

That smoothie analogy is perfect!

[polar spoke]

agreed 🙂

[hollow pivot]

Everyone new to hashing should read this article, really clear and simple.

[buoyant tree]

How many years of experience do you have?

[polar spoke]

uh, depends on in what

in industry, maye 5 or 6 now working a job

[buoyant tree]

like in cybersecurity in general

[polar spoke]

outside of paid work? going on 10 or so?

[buoyant tree]

hmm

also does developing hashcat pay?

[polar spoke]

it's hard for me to quantify how long ive been doing this stuff

[polar spoke]

nope

hashcat is a free open source project that doesn't take payment or donations of any kind

that said, my experience with hashcat has certainly gotten me paid jobs doing custom development work or security work

[buoyant tree]

Makes sense, hashcat is like known by everyone in the cybersec space

[polar spoke]

indeed

[buoyant tree]

although why is hashcat defined as a password recovery tool exactly

[clear jackal]

Not speaking for Chick3nman, but asking someone how much they get paid is kind of a faux pas

And of course now the rest of the conversation loads

[buoyant tree]

eh was just asking if developing hashcat pays or not

not the exact amount

since like projectdiscovery the guys that made subfinder, nuclei seem to have jobs to make those things

[polar spoke]

because that's what it's for

[buoyant tree]

Isn't it to crack hashes but hashes can contain any different amount of things but usually they do contain passwords

[polar spoke]

well, we don't just crack hashes

in fact, i'd say the majority of our modes aren't hashes at this point

they may involve hashes

but they are keys and encryption schemes and such

[buoyant tree]

it seems like a few encryption algorithms also

also any plans about recoding hashcat in rust

[polar spoke]

haha

hashcat will not be written in rust

but future components are already potentially going to include rust, though not for any particular reason other than because some people wanted to

[sand trench]

t minus 4 days

[buoyant tree]

hmm although isn't rust theoretically faster than C

[polar spoke]

not that i'm aware of

[shell nova]

not faster, but much safer

Rust is compiled to machine code, so it'll be pretty quick in any case.

[shell nova]

I mean the interop shouldn't be too hard

[polar spoke]

yeah, though overall we aren't super worried about memory safe operation, it's not like this is an internet facing appliance app

abitrary file load and execution is a feature we ship as a "plugin interface" lol

[lime bobcat]

The smoothie volume can change based on the amount of fruit input. The poop analogy deals kinda better with the even size of hashes after transformation

[polar spoke]

lol

some hashes have variable output sizes

as does... poop

[glass nest]

👀

[mossy river]

Spotify's DJ is on one istg

Keeps saying "You have been listening to this artist/ song a lot" then plays something I have not heard

[lime bobcat]

You should take a look on Raibow Tables

[lime bobcat]

True, forgot about those weird kids

[polar spoke]

since it came up

rainbowtables are essentially dead

and have been for a while now, at least for common use

[lime bobcat]

Yeah, i guessed, but don't know exactly why

Too much keyspace?

[polar spoke]

just not effective

[lime bobcat]

Compute got cheaper?

[polar spoke]

compute is cheaper but also salts kill rainbow tables

[lime bobcat]

Oh, yeah, true

[polar spoke]

and generating rainbow tables is exepnsive compared to just running the computation

searching them can be fast

but only for single hashes

multiple hashes, not so much

[sand trench]

you can still buy hdd:s with rainbowtables

[lime bobcat]

freerainbowtables.org

[sand trench]

why you would want one is question shadow don't wanna think aobut

[polar spoke]

yeah, not very useful

only a few scattered use cases that could be useful these days

[lime bobcat]

I got 2 at defcon, helped me a little with my "pet project" dataleak

I'm striving to reach at least 80%

[buoyant tree]

gotta love windows saying i don't have internet but am using it still

[buoyant tree]

...

and they are expensive daymn

[lime bobcat]

For GSM I think it's still useful

[lime bobcat]

Honestly, for me the drives were cheaper than a new GPU, haha

[buoyant tree]

did u actually buy them

[lime bobcat]

But really an odd case

[lime bobcat]

Kinda, I bought the drives and had them filled at the Data Duplication Village at defcon

And two 8TB drives were fair easier to pass through customs when coming back than a new GPU would have been

[buoyant tree]

never heard of the data duplication village

[buoyant tree]

should have smuggled in a rubber ducky

[lime bobcat]

Already did a bash bunny and a shark jack

Sadly, flippers were unavailable

although at the time they were still not-illegal here in Brazil

[buoyant tree]

nice

[lime bobcat]

Now it's very hard to find and you will most definitely pay the "smuggle + dollarization tax"

Uuuh, got a Proxmark3 RDV4 too, I forgot that

Just so I could read and recover an implant in my hand using the special "human implant lf antenna"

Didn't work, still to deep and hard to read >.<

[buoyant tree]

eh I actually know about that tax, I live in Pakistan

[lime bobcat]

So now I have a NeXT that is basically a xNT

[buoyant tree]

don't nknow about that

[lime bobcat]

RFID hacking tool

[buoyant tree]

what is your implant for

[lime bobcat]

Before the flipper came around

[lime bobcat]

The NFC (13.56MHz) side of it has a vCard with my contacts, the RFID (125KHz) is stuck in a (broken) indala mode

[buoyant tree]

you used it practically yet

or still as a cool gimmick

[lime bobcat]

On the other hand I have a Spark2, that was supposed to be used with a new 2FA platform that never really took off

[lime bobcat]

I use the NFC capabilities as a keycard at work and at home

[lime bobcat]

No, this is the magnet, hahahaha

[buoyant tree]

nice

[buoyant tree]

do you have scars from the implants

[lime bobcat]

I think I probably could use the RFID side of the NeXT if was in EM mode, but I cannot get a reliable read, let alone a write 😥

[lime bobcat]

Barely, they are all very small

But they were all "syringe" implants. The flexM1 I need courage to pretend to implant is a little harder to do

[buoyant tree]

oh k

[lime bobcat]

The worst was the magnet

[buoyant tree]

does the magnet hurt when you use it

[lime bobcat]

Big, girthy and in the back of my hand

Very painful

[buoyant tree]

hmm

[crude stump]

What’s poppin in here

[buoyant tree]

cant you remove it

[lime bobcat]

It's over the bone that comes from my left pinky

[buoyant tree]

who1sroot's hand's popping open

[crude stump]

🤮

How?

[sand trench]

flipper zero stitting in a box.... doing nothing... at shadows home

[lime bobcat]

2 of them I think should be fairly easy to remove, a little more painful and involved to do than implant, but doable

[buoyant tree]

what would happen if you put a super strong magnet on top of your hand with the magnet inside then tried to remove it, like would your skin come apart

[crude stump]

Tbh what can you really do with a flipper. Doesn’t it just run off of frequencies

[sand trench]

play snake

[crude stump]

I guess that’s a plus

[buoyant tree]

now I have to buy it

[lime bobcat]

The other one, the one which is difficult to read, is in a really bizarre position and I'll probably need a surgeon to take it out. It's too close to the tendon.

[sand trench]

depends on how sharp it is... the skin is decently stretchy so would mostly just stretch your skin... though dunno how painful that would be

[buoyant tree]

hmm

[lime bobcat]

I want it to play with the iButton and sub-GHz radio, for common RFID/NFC I already have a Proxmark, which is much better at those frequencies

[mossy river]

I don't think this is a discussion for here, y'all 🙂

[sand trench]

oh....

[buoyant tree]

fine...

@lime bobcat mind if I dm you with a few more questions

[lime bobcat]

I have done this with one of those "magnet fishing" magnets. It just pulls my skin up

[buoyant tree]

might not be the wisest thing

[crude stump]

Interesting

Did y’all hear Canada is going to ban the flipper zero

[buoyant tree]

yup

[lime bobcat]

Not painful, but definitely a strange feeling, like someone is pinching my skin, but from the inside

[lime bobcat]

Sorry 😬

What would be the appropriate room? Is there some off-topic here somewhere?

[sand trench]

4 more days....

[crude stump]

Find it really stupid tbh. Banning flipper zero is not gonna stop bad people from using them. Only the good pen testers

[sand trench]

[polar spoke]

tbh, flippers probably werent used anyway

its just a scape goat

err

scapegoat

since that's somehow 1 word 😛

[crude stump]

This is a off topic chat but I think it’s because some people are really squeamish about stuff

[lime bobcat]

Yeah, but Brazil did it first 🎉 🇧🇷

[sand trench]

shadow got their flipper before it got banned anywhere as far as shadow heard

preorder benefit

[lime bobcat]

Well, to be fair there have been some car thefts using it here, but nothing that you couldn't already do with other stuff already in the market

[crude stump]

You don’t hear on the news about anyone actually getting into cars using the flipper. There banning that but not making Kia improve there ignitions.

[crude stump]

True

Like look at those inflatable bag things locksmiths use to get into cars.

[lime bobcat]

The good ones to steal cars are those kits with the very big foldable antenna

[crude stump]

Anyways let’s change subjects

Touchy subject if I must say

[lime bobcat]

It's just to pry open the door enough so that you can fish the security pin

useful for doors too, if you need to lift it up to pass an Under-the-door tool

Altough I'm not very good at it, I like lockpicking too, haha

[crude stump]

Lockpicking is a very cool craft

Especially watching somone who’s fast at it

[mossy river]

Not in the discord server 🙂
This is an infosec community

[lime bobcat]

"Be bi 🩷 💜 🩵 , do crimes"

[crude stump]

Idk if you watch tiktok but do you know that dude who has something against master lock and picks the locks in literal seconds

[sand trench]

when shadow finally gets their dragonbox pyra they will have a device running debian linux again

[crude stump]

Aye nice

[sand trench]

*the arm version but still

[lime bobcat]

Well, taking into account that I CAN clone badges to my implants and use the cloned badges on red team engagements, it should be relevant to the general topic

[crude stump]

Lol it’s like a mini computer

[sand trench]

and then comes the challenge of compiling veloren and oolite.space for it

[lime bobcat]

I've seen those, haha

If you like lockpicking, I recommend watching the lockpicking lawyer and bosnian bill

[sand trench]

think bill left youtube

[mossy river]

Talking about putting magnets and seeing if it will tear your skin isn’t appropriate for the Discord server, regardless of whether it follows the channel topic

[sand trench]

heard he was not making videos anymore

[crude stump]

Lockpicking lawyer is crazy. My favorite is him picking a lock with a twig lol

[lime bobcat]

Ok, I agree

But I have used the magnet to hide lockpicks before

[sand trench]

was a minute or two where shadow thought jabba was refering to discussing the flipper zero was what was not allowed

[crude stump]

Oh lol

[mossy river]

Flipper zero is fine

[crude stump]

It’s so expensive tho

[sand trench]

well it is an expensive infosec toy

like most things like it

[lime bobcat]

If you are interested, the chip on my implant is a T5577. There are definitely easier ways to use it than an implant, haha

[crude stump]

Hm let me research it

[mossy river]

Majority of people who buy a flipper won’t get proper use out of it

[sand trench]

this.... this all the way for shadwo

*shadow

[lime bobcat]

Flipper one is not, never got the funding :/

[crude stump]

The only people I think would get a solid use is like automated locking system company’s

Basically anything that uses frequency’s tbh

[lime bobcat]

I'm honestly interested in using it as a Tamagochi too, haha

[sand trench]

have used it as a controller for shadows stereo

[lime bobcat]

Red Team too

[crude stump]

Didn’t they make it so you can like use inferred with it

[crude stump]

Yeah them too

[lime bobcat]

Yeah, it has infrared too, but so does my Xiaomi.

Emulating TV-B-Gones is fun XD

I mostly use it to control the AC at work, the controller was hidden because I like it too cold, haha

[buoyant tree]

has anybody here ever used a homing pigeon?

[sand trench]

shadow don't but would not be surprised if someone here has

[lime bobcat]

Are trying to implement RFC 1149?

[buoyant tree]

surprised that even exists and you know that

but kinda yes

[crude stump]

Yes would love to send birds with messages

[buoyant tree]

hook them up to a usb drive like a guy I saw do it on yt

and then its faster than internet

[lime bobcat]

RFC 2549 is better, but harder to implement, and you probably don't need IPv6, so RFC 6214 is not needed

[lime bobcat]

https://en.wikipedia.org/wiki/IP_over_Avian_Carriers#Other_avian_data_transfer_methods

[sand trench]

the most fun thing about this april fools joke is that it could actually work in praxis

[lime bobcat]

It does, it has been implemented successfully multiple times!!

Peg-DHCP too

RFC 2322

https://handwiki.org/wiki/Peg_DHCP

[sand trench]

meep moop time for shadows nightly sleep sloop to the beep boops

[buoyant tree]

time to implement it

[lime bobcat]

I do it at home, but with binder clips

So, technically, "Binder clip DHCP"

[rapid merlin]

hi yall

[buoyant tree]

good idea

[molten sky]

computers are overrated

[buoyant tree]

we should use pigeons instead

[molten sky]

good ol IPoAC