general

[molten sky]

i should jump on for a round at some point

[lavish shell]

Got one in like two minuets about to start if you want to

[molten sky]

not tn, bouta write a POC for some things and get to bed

but eventually

[lavish shell]

Never mind, not enough people joined so it's over

[molten sky]

F

it's a weird time rn between two pretty active time zones

[desert shuttle]

Ooouuu POC for?

[molten sky]

super special secret hackerman stuff

[lavish shell]

Wish there was a downloadable lab or something similar. Even a person vs bot type thing would be great

[desert shuttle]

I’ve never done KOTH here

Did you start already

[lavish shell]

No, wasn't enough people unfortunately

[unreal solar]

https://tryhackme.com/room/kothfoodctf
https://tryhackme.com/room/kothhackers
https://tryhackme.com/room/redisl33t

[lavish shell]

Oh damn, thanks man. Super helpful lol. Guess ifI learn to use my eyes I'd actually have known lol

[twin ridge]

Gave +1 Rep to @unreal solar (current: #122 - 51)

[clear jackal]

Yeah, 1-2 years ago at this point

Oh that was a while ago

Sorry

[molten sky]

👀

[lavish shell]

So, are there tools preinstalled like recon-ng, snort, etc, or would I need to download my own?

[chilly veldt]

Morning

[unreal solar]

[molten sky]

m

[fresh cobalt]

Morning Europe

Trying capstone challenge, how is it ?

[chilly veldt]

It's quite good

[desert shuttle]

im no longer stuck

[rapid merlin]

Good morning everyone

[molten sky]

m

[glossy mantle]

yoo

[rapid merlin]

How are yall doing?

[glossy mantle]

fine how abt u

[molten sky]

both tired and wide tf awake at the same time

[rapid merlin]

Yeah I have the same mate

[molten sky]

just spent the last several hours doing powershell stuff so life is fun /s

[rapid merlin]

😂

[glossy mantle]

why do i feel guilty when im stuck at a ctf and open a writeup

is this normal?

[molten sky]

~~ no ~~ yes

[rapid merlin]

I still have html lessons at school

High school

[desert shuttle]

Damn

let me hit the nmap scan 3 times

[rapid merlin]

Yep

It's normal

[molten sky]

on the one hand..

i need sleep

on the other.... i've got so much shit to do

and the other other... i don't want to do any of it

i've had this exacto knife on my desk for like 2 weeks now that i just keep playing with and i have no idea where tf i got it from

just appeared here

[sharp forum]

I planned to do keylogger as my final year project in python what kind of api shall i use i am so confused can anyone suggest me?

[chilly veldt]

I think I broke my switch setup

how else would you see a website?

you have to get access to the html before the website can load?

you can get access to the html even without inspect 😄

but you'll need access to the html no matter what, otherwise the website wont load, html is the thing that makes the website

[fresh cobalt]

👍

[finite basalt]

Morning all 😎

[sick lance]

You can copy the html to "clone" the website, so you can browse without interaction with the main site.

[naive violet]

We don't discuss these sorts of topics outside of #advanced-general

I doubt a key logger has the required complexity for a final year project also.

[finite basalt]

Guess what james

[fresh cobalt]

Done that was fun

[unreal solar]

Scams like that occurs often because it's (like you said) as easy as copying the HTML/CSS of a website. However, you cannot replicate the domain name of the website, which a end-user will most likely notice, even though these fake websites wil try to imitate the domain name as closely as possible.

[naive violet]

This is an "evil bit" solution

[finite basalt]

Off to Dundee today in about 4 hours

[naive violet]

And you keep asking this and you always get the same answers @rapid merlin

Do you know one definition of insanity?

[finite basalt]

😂

[glass nest]

Trying to listen to alien broadcasts?

[chilly veldt]

me when reading CCNP

[glass nest]

yes, CCNP. Not CCNA

[chilly veldt]

reading and reading but getting nowhere

[glass nest]

Did you just skip CCNB through CCNO?

[naive violet]

@rapid merlin read about how a browser worls

The end user needs html sent to them

[chilly veldt]

yeah, and then skipping everything from CCNQ to CCID so I can take CCIE

[glass nest]

What bit of CCNP are you trying to understand?

[chilly veldt]

currently doing a lab on GLBP

[glass nest]

Ahh. that was the graphic you posted yesterday?

[chilly veldt]

ye this one^

it's both IPv4 and IPv6

[shell nova]

don't tell them about view source

[chilly veldt]

that too, or curl

[lavish shell]

I have a quick question

[finite basalt]

I did that for my cicd pipeline status so I could feel better about it failing with no obvious reason

Changed the fail to a pass 😭

[chilly veldt]

I have a quick answer

[lavish shell]

Does anyone here have experience with Software Defined Radio? Me an my team have been looking for people who are skilled at it

[chilly veldt]

for a ctf?

[finite basalt]

Definitely people here for that anything in particular? There's actually a thread where some radio discussions take place

[lavish shell]

Yeah, we've been doing Ringzer0CTF and was never able to get that section done

[finite basalt]

We can't help with active ctfs unfortunately

[lavish shell]

I'm not asking for help, just looking to recruit for a team lol. Ringzer0CTF never shuts down, it's 24/7

[finite basalt]

Also https://nohello.net/en/ while it's a joke website, it is also good guidance for how to ask questions effectively, just helps you get a quicker answer and makes it easier

I don't want to come across as a twat but it's worth a look

[chilly veldt]

if it never stops, then it's a good way to learn SDR

[finite basalt]

Also I disagree with not saying hello, it's more the question asking part of it 😂 always welcome to say hello and chat here

[molten sky]

Insane? I was insane once

[chilly veldt]

they locked me in a room

[graceful thistle]

ok someone tell me where this is from

I've had enough

whaha

[molten sky]

@finite basalt hello

[finite basalt]

What the crazy I was crazy once meme?

[chilly veldt]

https://knowyourmeme.com/memes/crazy-i-was-crazy-once-they-locked-me-in-a-room-a-rubber-room-a-rubber-room-with-rats-and-rats-make-me-crazy

[lavish shell]

Alright guys you all take care, I got to finish this machine before my wife gets back and sees me hacking again 😂

[finite basalt]

Morning! How're you? 😂

[molten sky]

a rubber room

[finite basalt]

Gl mate

[finite basalt]

A rubber room with rats

[molten sky]

rats? rats make me crazy

[finite basalt]

Crazy? I was crazy once

[void valve]

aaa

[worn thorn]

sounds like you've gone crazy

[molten sky]

https://tenor.com/view/crazy-rubber-room-gif-10524477174166992043

[void valve]

yeahh too much information for the past few days

brain overload

[molten sky]

no such thing

a brain?

never seen one

prove it

[worn thorn]

I had a brain once

[molten sky]

human or it doesn't count here

[void valve]

i just believe i have one but cant prove

[worn thorn]

goose

[molten sky]

idk what kind it was but if it was a Canada it had it coming

cobra chicken mfs

[naive violet]

@lavish shell I'd personally start by trying out one of the public websdrs or one if the airspy server network boxes on SDR#
Look at the waterfall, poke around, use the SIGID wiki to look at what you're looking for and get your bearings

[glossy mantle]

what is sleep?

[molten sky]

it's what lazy people do

[lavish shell]

Alright, thanks for the heads up. I'll look into it

[twin ridge]

Gave +1 Rep to @naive violet (current: #1 - 2103)

[modest axle]

Hi, can someone help me ? I'm looking for Act of Kindness Badge, which room is contained? Thx

[chilly veldt]

the act of kindness badge is given out to members of the community who have done great acts of kindness and can only be obtained by an admin giving them it personally

[modest axle]

OK, thx for answer! I'm just looking for missing badges, sometimes I have finished room before badge is add.

And Webbed badge ? Where is possible earned?

[chilly veldt]

iirc
https://tryhackme.com/room/howwebsiteswork

or this
https://tryhackme.com/module/how-the-web-works

[modest axle]

THX

[brisk tree]

hey

[sick lance]

Gm.

[brisk tree]

hows things

[sick lance]

Yeah, can't complain.

Yourself?

[brisk tree]

yeah good just looking at twitch overlays ahaha

[sick lance]

For your own channel?

[brisk tree]

yeah thinking about streaming again

[sick lance]

Hacking or gaming?

Gonna Collab with Ego?

[brisk tree]

gaming

i used to do it and it went pretty well

[sick lance]

I know, lol.

[shell nova]

hax

[amber quarry]

h4Xx

[brisk tree]

lol

https://tenor.com/view/waiting-waiting-patiently-waiting-for-you-waiting-on-you-gif-15489516379864441176

me waiting for an nmap scan to finish

[sick lance]

-T0

[brisk tree]

im using -T5

[shell nova]

don't use -p- first?

[uncut cove]

try rustscan, it's way faster

[brisk tree]

i just used the command i was told to use then cause it ran for 6 hours yesterday i just added -T5 to it or it would scan 16 million ips

😂

[sick lance]

What if it's not a CTF?

[shell nova]

break all the things

[unreal wadi]

Jeez, not even going to ask why the whole /8 netblock. Just checking for alive hosts or going straight to ports?

[sick lance]

Is this part of your Internship?

Hoiw's that going?

[brisk tree]

it is. its intense in a good way they are preparing us for real life work. feel like ill get a years experience in these three months ahah

[sick lance]

They must cram it in, if they're condensing 12 month in to 3

There's somebody else in this server who's doing the same thing.

[brisk tree]

they arent im just saying with how intense it is

ahaha

got 53 nmap scans to perform this week

[rapid merlin]

Anyone here doing devsecops

[sick lance]

The path?

Oh, Kali 2024.1 is released.

[unreal wadi]

official now?

[sick lance]

Yeah.

[sage knot]

Hey

[unreal wadi]

Nice, finally able to see in more depth what I've been running for some time now

Did a full upgrade some time ago, and found myself on 2024.1 before release

[north badger]

the temptation to run my own Cybersecurity competition for students in my part of the UK...

[sick lance]

Having to join a Discord server just to DM somebody

[desert isle]

hi, is it normal tohat ssh has no "up arrow" for seeing the previous command ?

[north badger]

bruhhh

[shell nova]

do it

[sick lance]

It can be, yeah.

[shell nova]

depends on what shell it spawned

[north badger]

I likely will, may reach out to thm (education) to see if they wanna partner or something on it LOL cause I think it'd be great (now to decide what challenges to do, wanna do a 50/50 of red and blue)

[desert isle]

i used ssh username@ip on the attackbox version SSH-2.0-OpenSSH_6.6.1p1

should i run ssh with other commands or upgrade the shell ?

[shell nova]

that's an old version

though it should give you a bash at least

[desert isle]

so is it possible to start ssh directly with bash ?

[north badger]

Screw it, I will. Okay time to start designing the CTF

[unreal wadi]

Good luck on the journey

[north badger]

Thanks dude! Time to see if any of the educational places in my area are interested or companies wanna work together on this 😅

[twin ridge]

Gave +1 Rep to @unreal wadi (current: #690 - 5)

[shut hawk]

N,E,S,W of UK?

[sick lance]

Yes.

[chilly veldt]

REEEEEEEEEE

my GLBP doesn't work

[sick lance]

Hello, this IT...

[gritty zephyr]

Good luck British pounds?

[sick lance]

Have you tried swithing it off and on again?

[chilly veldt]

I have

3 times now

well, it works, with ipv4, ipv6 doesn't

[gritty zephyr]

Blow inside the cartridge, that helps me often times XD

[shut hawk]

IPv4 on top

[gritty zephyr]

How are you beside the tech troubles bella?

[chilly veldt]

I think I know why

how tf can the md5 of the same key be different

[gritty zephyr]

The cia triad has been compromised

Integrity has failed

PANIK

[north badger]

South West (Will DM a screenshot of rough area covered if youd like), however if I get national interest may run 4 area comps and then a final national one

[chilly veldt]

oh well, still doesn't work

I am doing alright

[gritty zephyr]

Good to hear, did any rallying in the offtime still, or have you ceased that!

?*

[north badger]

heh?

[chilly veldt]

haven't done much with my car lately, actually going to sell it soon as I just found a massive amount of rust

[gritty zephyr]

Ah that sucks

Any ideas for the new bolide!

[chilly veldt]

miata

[gritty zephyr]

Hell yeahhh

With the signature engine swap or stock?

[chilly veldt]

stock, engine swaps are illegal in denmark

[spice adder]

Good morn thm

[gritty zephyr]

Oh damn whats the reasoning behind that?

[gritty zephyr]

Heya

[glossy portal]

Any of you know openAI Api key alternative? I'm working on a discord bot, and they want me to pay 20 bucks

[spice adder]

If it makes you feel any better I have a fist size hole in my boot well because of rust 😂

[spice adder]

You can get an api key for 3.5 for literal pennies

[sick lance]

"rust"

[glossy portal]

Oh wasn't aware of this, checking out

[spice adder]

Ain’t no rust if there ain’t no metal there 😂

[spare vapor]

Good morning

[gritty zephyr]

Hahahaha

[chilly veldt]

laws

[spice adder]

Np dude, I’ve been using 3.5 turbo 16k and the most it’s cost me in a month is just over $1 lmao

[chilly veldt]

making it "unsafe"

[spice adder]

Lots of requests to api as well

[glossy portal]

ain't no way

thanks man

[spice adder]

Np np

[gritty zephyr]

But do you know why they made the law, emmisions?

[gritty zephyr]

Ah right

[spice adder]

Miatas are fantastic cars. A lot of the older ones have many rust issues tho but luckily the majority of their panels are replaceable, cheap to replace too

Can buy a whole sill for around £70-100 here in UK

[spare vapor]

the new path has so much information to absorb i feel stupid

[halcyon wyvern]

if parrot os freezes allocate more cpu or memory?

[sick lance]

Have you tried allocating more, instead of asking? 😄

What's the worst than can happen, you freeze it faster?

[mossy river]

Have you checked which one is being filled?

[spice adder]

@chilly veldt some lil shots of my friends mk1 mx5. I miss that car so much. If ur thinking of a new car, definitely a good choice

[halcyon wyvern]

oh no lol i asked first

[spare vapor]

Yo that yellow car is fire looking

[spice adder]

Danke

[chilly veldt]

I have driven NA's before, and got friends with Drifting/track versions of them 😄

[spice adder]

Ah sick! The 1.6’s are fantastic engines and the whole chassis is an amazing platform to build on

The most fun I’ve ever had in something just over 100hp

[chilly veldt]

1.8 😄

[spice adder]

Naaahhh you want the 1.6 if you ever want to do anything with it modification wise. A lot more reliable to work with. Or just drop a mk2/2.5 engine in it and have a reliable turbo’d lump in it 😂

[chilly veldt]

no, I drove 1.8's

but I am going to get a 1..6

[spice adder]

Oh I see, great! good luck with the search

They’re pretty overpriced these days, as much of the old jap stuff. Worth experiencing tho

[chilly veldt]

already got one in eyesight, though yeah, need to save up

[steel aspen]

With the THM ctf rooms can I exploit them to get more info within reason or do I have to follow the room properly? I wanna be able to practise what I learn fully but don't want to get in trouble either

[mossy river]

You are the master of your own learning

[spare vapor]

If you find other ways to exploit something, more power to ya! In fact that's how you know you're getting skilled.

[steel aspen]

Obviously not DDoS or getting into internal servers or anything like that just strictly to the machines themselves

I just wanna see what I can do with my skills I've learned via THM

In a legal setting

Is that allowed?

[mossy river]

As long as you’re not breaking our TOS then yes

[steel aspen]

Yeah I'm not gonna do anything stupid or anything that feels off.

It'd just be good to practise everything I've learned

[spare vapor]

You mean like taking a CTF room and exploiting in other ways than it wants you to right?

[steel aspen]

Yeah within reason

[spare vapor]

Oh yeah thats completely fine I've seen people do it before

[steel aspen]

THM has been great for learning

[spare vapor]

Real I been here since 2021 I believe

Never stopped paying for it once, its such a game changer.

[steel aspen]

Yeah roughly same here with next to no experience lol

Had never used Linux before not properly

Didn't know how to operate VMs or what the goes were with ISO files lol. Even something as simple as ports were new. I mean I knew about SSL/TLS but that's pretty much as far as my knowledge went.

Never heard of an FTP server lol

[spare vapor]

I was the same way, I tried to extract their local VM env as the ISO file, I had to figure out later that I was supposed to get the bare metal for an ISO file.

[steel aspen]

Yeah and even getting started with openvpn to connect to theirs properly was a mission 😎🤣

[spare vapor]

Im not gonna lie I struggle with that still sometimes, something to do with it saying its connected but not working on THM's machines even though I can connect to their test site.

But yeah I wish it were more user-friendly at first to get the hang of Kali

[steel aspen]

Yeah i remember having to change something in the ovpn file to get it working and it took a while lol

[steel aspen]

Lots of Google and YouTube

[spare vapor]

Yeah I like to watch NetworkChuck

[sick lance]

Said nobody ever.

BUT YOU NEED COFFEE NOW!

[spare vapor]

He's good at explaining things although I feel like he's for younger people

When do I not have coffee?

[steel aspen]

Yeah he's pretty good at explaining core concepts for newbies but idk how good he is at a professional level

Yeah he got one thing right professionally

Coffee

[spare vapor]

Yeah NetworkChuck I feel is for younger auidences, if I were 12 I'd be watching non-stop.

Ironically my passion for programming and then into hacking was because of roblox and C language I wish I knew about him back then

[steel aspen]

Never understood programming language. I'm trying to learn python and having a lot of trouble.

[glossy portal]

2010's hacker movies 😎

[steel aspen]

I thought it was gonna be similar to bash scripting.

Yeah no I was wrong

[spare vapor]

The only hacking "movie" I know is Mr. Robot

[glossy portal]

You remember that one hacker movie where they hack a whole group? Like frame them for something?

[steel aspen]

Does matrix count? 🤣

[glossy portal]

Oh yeah that's really good too

[glossy portal]

Badass.

[steel aspen]

The first one yes. 2nd and 3rd movies were eh.

[spare vapor]

MR. Robot inspired me to be better it is so cool how they integrated cybersecurity into a show so accurately

[glossy portal]

I only remember the first, was too young

[steel aspen]

That's lucky lol

[glossy portal]

yeah I pretended to be him when I first started watching it, wouldn't recommend emulating his personality xD

[steel aspen]

Altho last parts of 3rd movie wasn't too bad. Ctrl C and Ctrl V of Agent Smith/Hugo Weaving

Haven't watched the 4th one.

[sick lance]

Looks like they put Snort back in Kali.

[spare vapor]

He is def schizophrenia

[glossy portal]

Me neither, appranetly it sucked

according to friends

[steel aspen]

Can't do it without laurence Fishburne

[spice adder]

Fantastic show. Genuinely wish I could watch it for the first time again

[glossy portal]

yep DID, but it's just another way of coping with reality

[steel aspen]

That's another tool I've been having trouble with lol. Did the first 2 rooms. Snort and the basics. But I think it's live attacks I'm stuck on at the moment

[glossy portal]

doesn't help that he doesn't get serious help...reminds me of a certain someone in the programming community...

[spare vapor]

Which is sad but cool at the same time both psychologists and programmers / hackers can all get something out of it lmao

[spice adder]

The art of deception, who better to share thought with other than a psychologist, or another hacker 😂

[steel aspen]

FB and Reddit give Kali users a bit of stick lol

[glossy portal]

Therapist, if only he got therapy early man

[spice adder]

Also art of deception is a fantastic book

[glossy portal]

haven't read it, checking out

oh social engineering

[spice adder]

A classic for social engineering. Really worth the read

[sick lance]

Reddit is a dumpster fire.

[glossy portal]

I'm usually careful around that stuff, "if you lie down with dogs don't be surprised when you wake up with fleas" but yeah it's a skill I could use, if acquired ethically

[steel aspen]

Yeah it's turned pretty badly but even most FB groups to do with cyber and Linux give Kali users stick

[spare vapor]

The Secrets of Reverse Engineering is a good one too

Thick book full of interesting material

[spice adder]

Good thought. It’s a skill in this industry. One that I don’t have a lot of direct practice with

[sick lance]

@lone thistle

Do you have any W7 images for VmWare? 👀

[spice adder]

I’ll check that out, thanks!

[twin ridge]

Gave +1 Rep to @spare vapor (current: #472 - 9)

[spare vapor]

np

[spice adder]

You do much RE? I fell into a black hole of it about 6 months ago, love it

[spare vapor]

Used to but I took a hiatus for my mental health and forgot pretty much everything

[steel aspen]

FB probably not much better

[spare vapor]

I plan on returning to it when I complete Cyber Defense path

[spice adder]

I must add, I still hate how complex typecasting can get. Skill issue for me tho

[steel aspen]

Any reason in particular you think Kali users get stick aside from the stereotypical h4x0r?

[spice adder]

Gotta look after yourself, you understand your own path. U got this

[spare vapor]

Thats when you change one datatype and convert it to another right?

[sick lance]

Because it's pretty much "plug n play"

[steel aspen]

Yeah I can see that I guess lol

I've got Kali and Ubuntu vm

[spice adder]

Yeah, gets confusing for me when I’m working with entities n fucking referencing a type casted relative address within an object of a module address

[steel aspen]

Ubuntu seems to be the same but Ubuntu doesn't get much stuck

[spice adder]

That is the skill issue part for me

[steel aspen]

Sticl

[shut hawk]

https://blackarch.org/
Honestly blackarch is worse, the website literally screams script kiddie vibes

[steel aspen]

Can't type tonight

Arch user's seem annoying af

Every FB post "I use arch BTW"

Is it ment to be a status thing in Linux? Lol

It's become a meme

[uncut cove]

ubuntu has a bug that prevents terminal from opening, if the locale isn't en_US

[spice adder]

Tbf the reverse engineering I don’t mind, it’s the development of projects to work with reverse engineering finds

I just gotta get better at C

[steel aspen]

I can't remember what I set mine as but haven't used by Ubuntu vm for a while. That'd be fairly annoying though.

[shut hawk]

it's just a meme that they like to flex what distro they use

[unreal wadi]

I'm not sure why, but BA logo always reminds me of the Delta Force emblem and original CoD MW

[steel aspen]

I'm gonna assume arch can be a pain to set up from scratch or something

[shut hawk]

It can be, but it's a lot easier now with the use of graphical installers like other linux distros

[uncut cove]

absolutely! stopped deploying my vms on ubuntu when even setting en_US didn't open the terminal

[shut hawk]

I can see that

[steel aspen]

Sounds like Ubuntu just trolling lol

[steel aspen]

Oh makes sense. Graphical installation is a lot easier.

Somewhat ironic for me considering I find command line tools easier to use than graphical tools like Burp or Wireshark

[steel aspen]

But with command line just have to remember the switch and syntax ig

Some of the graphical tools has stuff everywhere it feels like Windows

[shut hawk]

Graphical interfaces have their use, especially for showing large amounts of information in an accessible way

[steel aspen]

Yeah snort/tcpdump involves lots of scrolling. Not that Wireshark doesn't but it's not hard to find what ur looking for at least.

Well idk about tcpdump only used it a handful of times but I remember having to scroll a bit

[gritty zephyr]

Honk

[unreal wadi]

GUI and CLI both have their pros and cons in specific use cases

[steel aspen]

Yeah definitely depends.

But I'll always prefer command line I think

Can snort record live network traffic like Wireshark does?

[unreal wadi]

e.g., tshark (cli) is great for quick IP parsing from pcap, but fails to show extended data in nice readable format when you can get it quickly out with wireshark (gui)

[steel aspen]

Yeah Ive used tshark a few times too. It's really good.

[loud marlin]

my company simulate phishing attack, and 277 users fall for it. they enter username/pass 🙂

[lavish shell]

You ever used snort? I heard it was pretty good too

[steel aspen]

I've just been learning it

I've done the first 2 THM rooms n halfway I think through the 3rd

[uncut cove]

also nobody knows how many of them have already entered their credentials in a non-simulated phishing 😄

if there was any, that is

[steel aspen]

It's definitely good to learn. It does a lot of different things

[lavish shell]

I didn't even know they had a room for it, I just started using it myself a few days ago

[loud marlin]

we have 2fa for all logins. and for sure we have extra high security in general due to nature of work and so

but you are not wrong

[steel aspen]

277 people got called into office? 🤣

[lavish shell]

Yup, heard it was good for network intrusion prevention

[loud marlin]

i think they might do some education for sure

[steel aspen]

There's 3 I think. Snort, snort the basics and snort live attscisb

Attacks

[unreal wadi]

ugh... was in the middle of final task in exploitingad as time ran out, and network shut off. Wouldn't be an issue, but even after restarting the network, no icmp or other packets go through anymore. Anyone want to chime in with a reset (currently 3/5)?

[sick lance]

Which subnet?

[simple valve]

did you click the link 😄

[sick lance]

Probably best asking in #persisting-ad too

Instead*

[unreal wadi]

10.200.83.0/24

[loud marlin]

at home, outside the company network and did OSINT. i reported it at same day, just i enter [e-mail] Y0u5uX87

and i was THIS close to male some flood thing to automate enter/send

[steel aspen]

Try that 15 min mail if its still active lol

Just to see what gets sent out lol

[loud marlin]

nah. hight power hold me nack. it is shade area to do. and i kinda think it was simulation due to some OSINT. was to easy to pass to us in first place

[finite basalt]

@sick lance did you get a ticket for the conference in the end?

[sick lance]

Nah, I've got uni on a Friday 😦

[finite basalt]

🥲 next time mate

I'm on the way over now, arriving in about 5 hours

[pale smelt]

Anyone is a hacker ?

[uncut cove]

nope

[lavish shell]

Hacker? What's that?

[wraith fjord]

https://tenor.com/view/hacker-hackerman-kung-fury-gif-7953536

[uncut cove]

a big knife that hacks instead of cutting, maybe?

[lavish shell]

I was thinking a cereal killer, but a spoon doesn't do very good at hacking lol

[loud marlin]

https://www.youtube.com/watch?v=9VDvgL58h_Y

death bt the spoon

[sick lance]

Yeah!

[spare vapor]

Why does he kinda look like the owner of McAfee

[loud marlin]

lol

[rapid merlin]

I think I was trying to SSH into the wrong domain, there are multiple domains in those rooms like ZA\ or THMWRK1\ etc.

[loud marlin]

if you are born deaf... on what language you inner thoughts are ?

[shut hawk]

sign language

[loud marlin]

=/

[worn thorn]

vibrations in morse style code

[rapid merlin]

Pictures

And indeed sign language

[loud marlin]

might be

[crude stump]

Prolly what ever they grew up listening too

Wait lmao

Bruh

I didn’t read

[mossy river]

I wonder if deaf people have inner monologue, not everyone does

[spice adder]

I find it hard to comprehend what reading must be like without inner monologue

[unreal wadi]

Imagine reading in braille

[floral wing]

Lol ive just seen we’ll be exploring ctf websites in our ctf lab class & thm is one of them

THM bout to get more users lezgooo

[rapid merlin]

Is it possible to run Windows on my Mac Mini M2? (without a VM)

[rapid merlin]

Yeah

Mac has the option to dual boot using boot camp assistant

[rapid merlin]

not anymore unfortunately, only if you have an intel cpu

[rapid merlin]

I think it's only for Intel based chips

Sounds like a very Apple thing to do

M family chips have different architecture than Intel. So the only option is virtualization

I miss playing Valorant but I dont wanna buy an extra PC for it

I doubt that VMs use your GPU enough to run a game

[rapid merlin]

Check if you can use cloud gaming for it such as nvidias one

You can run it in chrome

[rapid merlin]

I think theres a input delay in shooting games

I never had issues

But I’m also not a serious gamer

Did you try shooting games on it?

A few

were you able to hit some headshots?

Just need a direct rj45 ink

[rapid merlin]

In pvp I’m usually the one getting shot

But I have in story mode

lol ill try it

[spice adder]

Just finished Jr Pen Tester. That was juicy

[rapid merlin]

Congrats 👍

[silver sky]

I wonder if it's the same statistics as everyone else or actually more common

[sick lance]

@shut hawk

Got your Arc E-mail yet?

I've had 3 now...

[shut hawk]

no, I even emailed them about my student email not working and they haven't gotten back to me ☹️

[upper bison]

Why THM emails has been landing into my spam folder?

I use Proton Mail and it says that the THM email domain has failed the domain authentication check

[sick lance]

Your E-mail rules, perhaps.

[upper bison]

Rules?

In my email box, I just created a specific rule to forward THM emails into a specific box

That's it

[boreal scarab]

Be me:

-Wake up to hear a strange beeping sound. Panik
-Don't hear your server running. Major Panik
-Power is out Panik
-Remember your server is on an Eaton UPS Kalm
-Eaton UPS isn't supplying the server with enough power to power the PSU's Panik
-Power comes back on. Kalm

[near hawk]

Lets go Nvidia made me £7

[sick lance]

I don't think you passthrough for your GPU and VM, otherwise Hashcat would be good to go from a VM AFAIK.

[shut hawk]

I believe it's possible? But its certainly not recommended to do

Much better support on the actull host

[bitter quiver]

Did something change with the GPU market? Suddenly 30xx series laptops and PCs are reasonable

[near hawk]

Probably becasue the 50 series is coming out soon

[golden timber]

I connected with a senior security engineer at Rockstar games and it's taking every ounce of me to not ask about gta 6 leak 😂

[near hawk]

99 more members on the Reddit and will do a sub giveaway

[finite basalt]

Scrubz, just did the event for how many from our soc and alumni are going to the conference, we got about 30 😂

We an army

[shut hawk]

https://tenor.com/view/kilt-scottish-gif-19175472

[brittle lynx]

Hell ocan anyone help me I want to search for a value within any table of a database in mysql

[bitter quiver]

I never care much about leaks of AAA games anymore

I get excited for indie devs making a new 16 bit platformer

[chilly veldt]

going for an enjoyment meal today 😄

[gray sonnet]

:/

[near hawk]

Always the leap years

[brisk tree]

this has me dying ahahahahaha

[near hawk]

Bruh

Not even remotely close

[naive violet]

That's literally an "evil bit" solution...

[gray sonnet]

🤣

[naive violet]

You know that's solutions that don't work right?

[brisk tree]

😂

[sand trench]

to simply answer your question: yes some do.... how does shadow know?? well had some deaf friends from school and asked them to explain things.... some kinda see the signing they do as abstract inner monologue and others more see text as their inner monologue

anyone see what is wrong in this image???

[gray sonnet]

what the...

[sand trench]

you spot the error vain???

[golden timber]

with google genie?

😂

[bitter quiver]

Huh? No all the sweet ones on Steam

[gray sonnet]

set up ssh? or the developer mode part

[sand trench]

it is in the set up ssh part

[gray sonnet]

sudp apt install openssh-server

[sand trench]

hint: || look up what distro steamos on the steamdeck is based on||

[gray sonnet]

it's definitely not debian

that's where the mistake is

[sand trench]

🎉

[gray sonnet]

it's pacman

[sand trench]

haha yeah it is based on arch so it would not be apt install

not to mention it is immutable

[gray sonnet]

yup

[bitter quiver]

Man I love these things. Actually gives detailed info

[rapid merlin]

So that file casually encrypted everything!

Good thing you didnt run on your own pc

[bitter quiver]

I mean it's the little report thing from one of the modules

[sand trench]

@mossy river you there??? got a question

[bitter quiver]

It's cool to read through and see what it did

[mossy river]

Hm?

[sand trench]

see image above

and also how you are doing and if you found the information about deaf people having inner monologue interesting

[bitter quiver]

Is this a static report on tryhackme or is it an active thing it runs

[sand trench]

oooh it is from a tryhackme room

[golden timber]

https://lifehacker.com/tech/googles-ai-can-now-create-video-games

[bitter quiver]

? Yes

[sand trench]

thought you were messing with malware samples on your own computer for a bit

[bitter quiver]

Hell naw.

[rapid merlin]

Whats the name of the room btw?

[bitter quiver]

I just did a fresh wipe as I do like once every 2 years just to keep it fresh.

[bitter quiver]

Pyramid Of Pain

[rapid merlin]

ahh

[bitter quiver]

Basically turning 30

[sand trench]

anyways time for shadow to head to the store and pick up some french fries

[bitter quiver]

But it takes forever to load when you click it so Iw as wondering is it a software snapshot that actually runs, or some static "info"

Vs the other questions using a simplified report you sift through to identify answers and info

[bitter quiver]

Oh god. No the real deal

Like Panzer Paladin

[lone thistle]

the link is a static version of the analysis task. So an analysis isn't ran everytime, it's just a shareable link to the analysis that was done originally 🙂

[mossy river]

Which?

[crude stump]

She thought the static report was malware or sum

[desert shuttle]

What a good day

[midnight hazel]

hey guys

when does the level update on discord lmao

[viscid hill]

what

[finite basalt]

@pallid lotus just arrived in your ends 😎

[near hawk]

Usually the next working day automatically or you can reverify and should update it

[midnight hazel]

hmm k

[mossy river]

Next working day? 🤣

[near hawk]

I didn't realise I put that

Oh wow i'm tired

[mossy river]

Funky sentence, go sleep

[near hawk]

I'm forced to play Palworld

[mossy river]

By whom

[near hawk]

Girlfriend

[mossy river]

https://tenor.com/view/understandable-have-nice-day-have-a-great-day-have-a-good-day-nice-gif-20850110

[near hawk]

Recenlty addicted to the game

[mossy river]

I hope you’re aware I already knew that entire conversation

[sick lance]

Is Muiri still in Dundee?

I thought they left after graduating.

[mossy river]

https://tenor.com/view/thanos-strong-unstoppable-gif-20284663

[naive violet]

I know where Muiri lives 👀

But I'd never say

[sick lance]

Yeah, I think I asked the after they graduated if he moved closer home, and I can't remember the answer.

Even then, I can't remember if they're from Invernees, or near it.

[glass nest]

James knows everything 😄

G'd evenin' folks 🙂

[chilly veldt]

👀

[warm bear]

Hii all. I need some advice on certs plez. Considering doing eJPT because people are doing it. But I don't have a clear idea of what I wna be doing 👀 \

[bronze osprey]

Good morning all

[glass nest]

Hiya alex dot exe. Long time no see 🙂

[bronze osprey]

Same to you! How are you?

[glass nest]

Living the dream. Unwidning after work to re-energise then into the workshop 😄

[golden timber]

sounds fun

I spoke with a recruiter at an agency this morning. Was pleasant

A little typical recruiter slang. I was gonna play corporate bingo

[bronze osprey]

What are you making???

[graceful thistle]

you need to add 'put a pin in it' and 'circle back'

[sick lance]

You''re doing a cert because people are doing it?

I don't understand that logic...

[golden timber]

thanks, I found this on wikipedia actually https://en.wikipedia.org/wiki/Buzzword_bingo

[twin ridge]

Gave +1 Rep to @graceful thistle (current: #22 - 350)

[warm bear]

gotta match others idk

[glass nest]

got a couple of jigs I need to put together, then a box, a reel for my air hose, gonna have a crack at a foldable chair - which I will template up so I can repeat it easier

and inbetween it all - organise the workshop a bit better

[mint palm]

Everyone’s situation is different, the cert might be close to useless in your area

[sick lance]

Surely though, you'd do all certs, because people are doing them?

[warm bear]

Yeah. That's the dilemma I am facing rn

dunno whatt to do

[sick lance]

Which area of the field do you want to move in to?

[glass nest]

Welcome to life, brodda 🙂

[warm bear]

I can't decide for sure. I am between VaPT and GRC rn ( I am currently doing )

[naive violet]

Let's take this offline

[graceful thistle]

ah yeah good one

[sick lance]

Then look for certs which specialise in that area?

[bronze osprey]

Sounds awesome!

[graceful thistle]

https://www.youtube.com/watch?v=xBbt_HKXfXM&ab_channel=NicholasT.

[glass nest]

Alex - so much woodworking is making stuff to do woodworking 😄

[warm bear]

eJPT is related, but I only have 5 months experience so idk if I should buy it now or later 🤔

rn there is a sale for annual fundamentals on eJPT

[bronze osprey]

Custom tools for custom works!

[mint palm]

You don’t really have to buy the INE course, everything (or most) can be found for free on THM

eJPT is not that much of an HR boost, but I’d take it as a really expensive lab and a fun experience

[warm bear]

Yeah, I have most of the foundational knowledge and concepts grasped. It's just I have to find practice to the relevant subjects/techniques tested in eJPT.

[tidal river]

I am doing ecppt with non IT background and with basic of cyber security knowleage Im doing a best

[mint palm]

If you have a lot of spare money then I’d say try it out, but otherwise there are better alternatives

[tidal river]

Guys i am facing a issue with the xfreerdp

[warm bear]

How long have you been preparing? and when are you planning to do it?

[tidal river]

can any one help with it

[warm bear]

Got it, thank you mate

[twin ridge]

Gave +1 Rep to @mint palm (current: #267 - 18)

[tidal river]

3 month

[mint palm]

What’s the issue

[tidal river]

4 th month going to start

but i have lot to prepare

[warm bear]

Wishing you success 🙂

[tidal river]

Thank you

buffer overflow will be a tuff

[warm bear]

btw, if you buy the voucher, does it expire after some time?

[tidal river]

now i have trying Buffer Overflow Prep

[tidal river]

I have buyed totally 6 month valid to take test

now it is over 3 month

[warm bear]

Ah oki

[tidal river]

till have time to take test may month !

─$ xfreerdp /u:admin /p:password /cert:ignore /v:10.10.103.16 /workarea
[23:35:20:831] [28493:28494] [ERROR][com.freerdp.core] - transport_connect_tls:freerdp_set_last_error_ex ERRCONNECT_TLS_CONNECT_FAILED [0x00020008]

can any one help with it

I have google ed but i am not geting solution

[finite basalt]

Pmed

[tidal river]

Or please point me to a right channel

[near hawk]

Vouchers don't expire

[tidal river]

it will expire after 6 month

[near hawk]

No they have no expiry date

[tidal river]

you speaking about INE !

[near hawk]

Ahh sorry, thought you was reffering to THM

[tidal river]

Ahh i need help with Buffer Overflow Prep
on THM

can any one help me !

[near hawk]

#room-help is better if you need help on the rooms

[tidal river]

thank you dude

[stuck tangle]

Are there any active discounts for THM subscription?

[warm bear]

There is 20% off if you are a student I think.

[near hawk]

Yep

[warm bear]

You're account would need to use a student email for the discount to be reflected in the pricing 🙂

[sick lance]

Doesn't need to be.

[pseudo sparrow]

Good evening everyone, im new to these part of it. I have a little problem with my section. Can i ask here?

[sick lance]

You can E-mail support and prove you're a student that way.

[silver sky]

You can contact support and prove it that way

[sick lance]

Section of what?

[stuck tangle]

Not a student. I guess there aren't any active promotions?

[pseudo sparrow]

https://tryhackme.com/room/operatingsystemsecurity -> the password provided in the instructions is wrong. i try bruteforcing the password

[stuck tangle]

Not a problem if not.

[pseudo sparrow]

no im a Qt programmer

sorry to disturb you guys

i think someone changed

[sick lance]

there isn't, no.

[sick lance]

#room-help for this, it could get lost in here. 🙂

[pseudo sparrow]

sorry, thank you

[buoyant tree]

Spent 40 min trying to debug why my code wasn't starting, realized I didn't call the function

[plush mesa]

mustve been some pretty bad debugging 😃

happens sometimes

[buoyant tree]

yup although I probably made the function too big that it was almost all my code

so didn't even realize I was coding inside a function until later, (was continuing a few months old project)

[sick lance]

https://www.bleepingcomputer.com/news/software/citrix-sophos-software-impacted-by-2024-leap-year-bugs/

This only occurs every 4 years 🙈

[plush mesa]

The leap year bugs, definitely not Citrix/Sophos vulnerabilities 😂

they've been having quite the run

[shut hawk]

So have EA 😂

[bitter quiver]

We were taught to fear y2k

But the real risk was always leap years

[shut hawk]

#general message

[naive violet]

Just wait for 2038

[bitter quiver]

It's weird to think about 2038

Firstly if I'll even be alive, since anything can happen and our health is never promised. And secondly, how wild will tech be

[sick lance]

I will get past this great firewall of Windows 7!

[lavish shell]

Was talking to a guy about bugs, he said that he hated them because they crawl on you when you sleep 😂

[sick lance]

They're not wrong.

[bitter quiver]

Technically wasn't the first ever computer bug literally a moth that got fried inside one of those old giant room size computers?

[wheat crater]

yep

hence the name "bug"

[clear jackal]

TIL Google warns you about password breaches even if your password isn't stored with them

[shut hawk]

Where? 👀

[clear jackal]

I am assuming anywhere chromium touches. It happened on my phone and using chrome on my pc

[bitter quiver]

My password manager warns me

Which is nice

[plush mesa]

Were those password breaches for gmail addresses/email addresses you registered to google services with?

[clear jackal]

Yeah, Bitwarden has the feature. I just wasn't expecting it from google because I don't use any of their account management products

[clear jackal]

No, work email and an account with an organization that is not google

[plush mesa]

hmm ok interesting

[clear jackal]

Yeah, it was a surprise. Though I suppose it shouldn't be considering how much google has their fingers in at varying levels

[shut hawk]

At least you know your password was breached

[clear jackal]

Yeah, it aint great lol

I know what I am doing after work today lol

[bitter quiver]

After? When I see a breach I start swapping passwords right there, and generally any other accounts associated with it either via linkage or the email used.

I don't play that game.

In 2024 someone doing crap on your account can lead to a period of pain in the butt time fixing it all

[shut hawk]

Have you considered the fact that they might not be able to change their passwords while at work...?

[near hawk]

The only thing that was disappointing to me that got breached was my club penguin account

[clear jackal]

This

[buoyant tree]

club penguin was a old game right which got shutdown?

[clear jackal]

Am I that old?

[near hawk]

Yea, then they put it back up

[buoyant tree]

do people still play it

[shut hawk]

I used to play it when I was younger

Was part of a super secret spy agency 😎

[near hawk]

Not sure been a long time, pretty sure Disney made their own one then that got shutdown

[shut hawk]

I wasn't able to get my account on the remake version

[near hawk]

I couldn't either, although I just wanted to play it again to get to black belt

[lavish shell]

Anyone know when Deadface is happening this year? Maybe October 20th like last year perhaps??

[near hawk]

The past has been in October, so yea most likely then

[mossy river]

I think Duolingo is wrong here smh

As someone who goes through many thoughts at one time, this is sentence I would say

[gritty zephyr]

I mean eating a schnitzel at a waterpark is also possible

[near hawk]

The coffee is cold. Do you swim here?

[mossy river]

I don’t think you realise how many times I’ve pressed the coffee on that same question

[gritty zephyr]

Ok quick question, i need to simulate something on a phone(see it as a playbook) for my digital forensics semester, for that i want to inject stock photos with exif data to simulate it being taken at a certain place, anyone know a tool for this?

Like where i can add time/coords

[wheat crater]

its not 😉

except that water != Kaffee ^^

[wintry sluice]

android emulator?

[bitter quiver]

True. I just tell my boss I need a few though. But not all bosses are flexible or care, I've had some that aren't.

[mossy river]

It’s a sentence you figure out by context but there is a lack of context and it can be subjective

[lament tendon]

imagemagick or exiv2.

Alternatively I am sure that there is some way to do that with ffmpeg, if you have too much free time.

[wheat crater]

Well, you swim in water, not coffee, so that's your context

[lament tendon]

On IPhone you can also just click on the "Info" icon in your gallery and add a place there.

[mossy river]

It doesn’t imply that you have been in the water or swim.

It’s actually a really odd sentence, it would make modern sense to be “Der Wasser ist kalt. Möchtest du schwimmen”

[wheat crater]

*Das
But I got your idea.

Used Duo for almost 3 years. It got worse by time 😦

[shut hawk]

Fun fact: there's actully a spa in Japan where you can swim in coffee

[mossy river]

Duo has gotten really good, but as someone who speaks German to my friends, it doesn’t really prepare you for actual conversations.

But the concept is very well made and it does work for casual learners who want something to do on the go.

People that actually want to learn a language should use Duolingo as well as watching TV shows/ movies, reading books, conversing with other Germans and researching grammar, sentence structure, etc.

My biggest problem with Duolingo is that it tells you how to do it, just not why.

There is a language app that tells you why but I forget it’s name and it’s a premium

[mossy river]

Yes, correct, I get confused when switching between two languages lol, I was still thinking of coffee hence the wrong gender haha

[clear jackal]

As someone who also used to speak German and has been to Germany multiple times, I agree

[plush mesa]

"My biggest problem with Duolingo is that it tells you how to do it, just not why. " dont question german grammar, i don't understand it myself as native speaker

[mossy river]

I speak a mix of German, Turkish and English which is utterly useless in actual conversation because the words I don’t know in German, I never actually learn.

[wheat crater]

I'm speaking 4 languages, German as mother tongue. i still think Ger is the least intuitive 😄

[clear jackal]

Are you thinking about babble for the other service jabba?

[mossy river]

Not everyone can just blindly follow the rules. Especially me, I have to understand why something works before I apply it.

It also makes sense when you grow up in the language but English doesn’t heavily enforce cases which means people learning German from English can struggle with the word order and the forms of the words changing.

I’m not saying you can’t just go ahead and remember all of the sentences, just means it’s really hard to create your own sentences and imo it creates more effort.

[mossy river]

I think it might be, yes

And! A perk of learning German at such a low level actually improved my English

[plush mesa]

One tip I can give you on your german journey

It's die Nutella in case you ever get asked

[wheat crater]

What? Never! It's DAS Nutella xD

[plush mesa]

DIE NUTELLA

[clear jackal]

are you basing that on the article Italians use for nutella?

[mossy river]

Krapfen or Berliner @plush mesa @wheat crater

[clear jackal]

iirc they use la

[plush mesa]

Berliner

[mossy river]

Noooo

It’s Krapfen

[clear jackal]

I guess you could use any article in german

[wheat crater]

Krapfen! 😄

[plush mesa]

A. yeah it has a feminine ending
2. das Nutella is just wrong

oh god

its late

[clear jackal]

der nutella

[plush mesa]

cant even do numberings anymore

[mossy river]

Oh god my brain interpreted that as a 1 wtf 😭

[plush mesa]

der nutella is 100% wrong

[mossy river]

Der nutella actually feels right

I decree

[clear jackal]

das feels best, because you know, it's an inanimate object lol

[plush mesa]

but thats a bad logic

Every object would be das then

Wow, the duden says you can use any article

It's both feminine, masculine and neutrum. Even though the ending is feminine ;)

[lament tendon]

Aahahahaha, I did not ever expect non-german people to argue about this. xD

Das Nutella here, der Nutella there.

Not even Germans agree.

[wheat crater]

You would be amazed how Austrians and German can argue over language 😄

[mossy river]

I’ve had my fair share of German disagreements 😄

[twilit inlet]

same argument with Marmite/Vegemite - in nz and AU - sorry but the brtitish stuff is gross

[rapid merlin]

This reminds me of "Ich bin ein Berliner"

[near hawk]

Marmite is disgusting

[mossy river]

At least he got a laugh

[near hawk]

Should be burned from existence

[mossy river]

All the good speeches are funny

[lament tendon]

You can literally leverage the answer to this questions as OSINT, because it's region dependent what people call it.

[mossy river]

Yup 😆

It’s always fun to get to people from different areas in the call and ask the question

[gritty zephyr]

thanks 🙂

[twin ridge]

Gave +1 Rep to @lament tendon (current: #35 - 208)

[wintry sluice]

nutella 🤤

[cosmic pendant]

They are different

if you're new, use Kali

if you're pro, Use Kali

If you're really really pro, use ubunutu and then turn it into Kali 😄

[brittle flume]

does anyone know if possible to change the cipher suites of a subdomain only?

on cloudflare

[wintry sluice]

this sounds like a lengthy way to say "don't use parrot"

[cosmic pendant]

I don't use Parrot, I don't know anyone that does that I worked with, or have worked with. But I look at like this. OffSec, some of the best training, some of the best people, make and use.... Kali

The best tools are the one you use, you like and are comfortable with,

[whole yew]

Try both, in VMs. See which one you like more, and use that.

You can use any OS you want, it's a matter of building or locating tooling that matches what you want to do, and then platforming it in a way that's easy for YOU to deploy and manage.

At work, it literally doesn't matter what linux distro I use, because I use IaC to manage my tooling and tooling config. Every security assessment gets a 'fresh' VM and the playbook gets run from scratch.

[keen walrus]

indeed

[cosmic pendant]

Since we're on the topic. Obligatory don't use Obsidan 🙂

[whole yew]

kek

[rapid merlin]

To my experience, the actual difference between Parrot and Kali isnt that big. Just UI stuff

[cosmic pendant]

The Obsdian devs fight their user base enough, I'll defer to them 😄

[whole yew]

Parrot has been much more unstable for than kali, and comes with a lot fewer tools installed by default.

[lavish shell]

I, personally, wouldn't recommend Kali Linux, yeah it's great because it comes with all sorts of tools pre-installed but chances are you're either not going to like the tools, not use the tools, not know what they do, or are otherwise unfamiliar or uninterested in the ones provided.

[cosmic pendant]

Wait

Did you just argue to remain ignorant? Don't learn new tools. techniques and only stay with what you know?

[lavish shell]

Lol no, let me explain

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 29, 2024, 8:47 PM

[whole yew]

But some people like parrot more; my experience with parrot is that it made things more difficult (not less) and so I dumped it. Kali is a good enough platform for most of the security activities you'd expect to do, and it's oriented towards new-to-security but not necessarily new to IT.

[cosmic pendant]

@lavish shell you should verify first :0

[rapid merlin]

Funny thing is, kali broke 2 times at my pc, and parrot didnt

It isnt down so

[wintry sluice]

but I like obsidian

[whole yew]

That is unique to you; Kali used to have a tendency to break on big version updates. Since they moved to a rolling release, it's been much more stable.

[cosmic pendant]

I did too, I really did.....

[bitter quiver]

I'm always going to just be a OneNote weirdo

[rapid merlin]

Yeah to make it better, older versions were more stable xd

I had the cannot-log-in issue

[lavish shell]

Point being, you can grab an OS crammed pack full of tools that take up a lot of space, or you can use an distro like Bodhi where you have the extra space and can install the tools you want and not have a ton of space used up by tools you don't like using

[rapid merlin]

the login loop

[cosmic pendant]

Kali minimal is a thing...

[wintry sluice]

why not?

[shut hawk]

Just like Android is an OS

[cosmic pendant]

But also, Kali coming with most tools by default is great when you don't have internet access likea gov't facility

Cold server room in the middle of nowhere, you know what you have

[rapid merlin]

(Parrot has most tools Kali has too)

[cosmic pendant]

So, big advantage, and Juun is 1000% right since they started doing the rolling updates with regression testing

[whole yew]

I understand what you're getting at; often, new linux users don't really get how to install all that tooling on their own if it's not in a compatible repo. That's fine, we shouldn't gatekeep people from exploring and learning security topics because of it. Kali is a 'good enough' solution for those kinds of introductions, and it does simplify tool management for many orgs who use it as the security distro of choice.

[glass nest]

And when you are learning. ok you might not use a lot of the tools, but there are some tools you'll use a lot 🙂

[wintry sluice]

do you recommend something else instead?

[glass nest]

hiya Toaster 🙂

[cosmic pendant]

Joplin

Hey Esqy!

I tried every tool under the sun for notes, i think a few folks here know that 😄

Joplin is the best mix of ease, accessbility, sync, multi user.

[glass nest]

Currently giving Trilian the college try

[cosmic pendant]

Oh, yes I remember the Trillium days...

Try backing it up hahah

[glass nest]

Obsidian just stopped working for me randomly

[whole yew]

Trillian has some very strong arguments for it; I like the note-locking capability the most. Joplin is a close second on that front, and does tagging better though

[bitter quiver]

The old software that combined ICQ, AIM, MSN, etc?

lol

[glass nest]

you old

[bitter quiver]

I last touched that in ~2003

Two decades ago

[cosmic pendant]

Do you remember when it was called Gaim?

I do

[bitter quiver]

Pepperidge farm remembers

[lavish shell]

It really depends on what you prefer honestly, I prefer something that offers more customization. That's why I use Bodhi. To each their own, Kali is good, hell I don't think there's such a thing as a "bad linux distro". But Bodhi offers so much in terms of customization

[cosmic pendant]

Arch

😄

[rapid merlin]

Dont say that out too loud

:p

[shell nova]

see, I prefer something that actually works 😉

[leaden fiber]

[bitter quiver]

Damn Small Linux had to swap from 50mb to 700mb

Linux community has failed us

[cosmic pendant]

I sure do love compiling!

[crude stump]

What’s poppin

[shut hawk]

I love using heptabase

[cosmic pendant]

Does anyone know of any OS written in a mem-safe language?

[bitter quiver]

Does Tails have that?

[lament tendon]

If you find one, ping me. I'd be interested in that.

[shell nova]

wonder about NixOS or one of those immutable core

[cosmic pendant]

So is DHS in America 😄

https://www.tomshardware.com/software/security-software/white-house-urges-developers-to-avoid-c-and-c-use-memory-safe-programming-languages

[shut hawk]

Yeah did you see the report? 😂

#programming

[wintry sluice]

do they just mean managed languages?

like c#

[shell nova]

they mean stop using C

[bitter quiver]

Did the whitehouse just realize risks of memory in 2024 or something?

Like it wasn't a thing in the 90s

[lament tendon]

I don't think so, e.g. Rust is also considered memory safe to my knowledge.

[shell nova]

yup

[wheat crater]

C# is also considered as mem safe afaik

[shell nova]

any managed code will be

so is Java fwiw

[wheat crater]

https://www.memorysafety.org/docs/memory-safety/

nice read

[lament tendon]

Ok, thanks to the background code in this image I stumbled about an absolute comedic gold mine:
https://stackoverflow.com/questions/1642028/what-is-the-operator-in-c-c

[twin ridge]

Gave +1 Rep to @cosmic pendant (current: #37 - 191)

[lament tendon]

You just have to ignore all the normal answers. ;)

[cosmic pendant]

Sounds like a perfect fit for AI.... /s

[wheat crater]

reading the explaination ruins the joke tbh 😄

[sand trench]

wut???

[lament tendon]

Fun fact, this actually works.

[sand trench]

yeah it works but why the meeps

[wintry sluice]

meep?

[sand trench]

meepmeep

fun sound to make

[lament tendon]

That's hella funny.

[sand trench]

YAY the sixel branch of alacritty on the aur got updated

boo tmux not handling sixels well in alacritty

guess it is time to bring out zellij

[shut hawk]

https://youtu.be/emJsHKINn-s?si=BlDmUeb2n82sF71B

[bitter quiver]

I can imagine the smell

[wintry sluice]

I can't 😭

[lavish shell]

I don't know wtf is going on with my VM, it's hating against the tryhackme site today. I used it for endless hours last night, now it's saying I have to use a desktop version.

[wintry sluice]

I often forget to turn off the proxy on my VM

[lavish shell]

Nah, that isn't the issue, it's reading my bowser as a mobile version rather than a desktop version

[charred forum]

aw missed the kali vs parrot debate

ive done most of thm rooms with ubuntu

[hybrid shale]

i was told to use thm by cyber security police thingy (at school) and im only 13 lol

[charred forum]

i only use kali for burpsuite because ubuntus graphic are weird

[charred forum]

good luck

[hybrid shale]

ty

[lament tendon]

Small update on my very important scientific work.
C++ is great.

[hybrid shale]

im experienced with lua coding (can do most stuff off by heart) but not other languages and cba to learn them

[loud marlin]

https://tenor.com/view/speechless-no-comment-okay-jason-bateman-gif-13712743

[shut hawk]

Welcome! Don't worry, you're not alone - a lot of the users here are quite young

[hybrid shale]

Ty

[bold latch]

Anyone from the homeserver squad around?

[shut hawk]

Ask your question

[bold latch]

Need some opinions on cloud backup options. What's y'alls provider, if you have any?

[lavish shell]

Got my issue fixed lol, someone thought it'd be funny to change the browser settings to where it would be initiated through a terminal session rather than starting regularly when clicked

[spice adder]

Hell yeah, still more efficient than Python

[shut hawk]

https://eylenburg.github.io/cloud_comparison.htm

Here's a comparison, I like using filen personally

[bold latch]

I've been thinking ideally of a Nextcloud instance, which'll be hooked up to an external cloud to ensure data integrity because as much as I can trust ZFS, well. 3-step backup ideology

Looking at Idrive, Blackblaze and whatever else's around for some 10TB plan

Filen looks decent, yeah

Idrive looks just a bit cheaper with its $300/year plan compared to the translated $431 filen's charging you

Or would be, if you're using 10TB that is

Which well. Quite a bulky amount

[shut hawk]

Filen had half prices on black Friday which is what I got

What are you using 10tb for?

[hot cairn]

10tb is alot?

[glass nest]

Barely an EmmaByte

[loud marlin]

for us, simple mortals, 10tb is nice 🙂

[hot cairn]

@bold latch if you want cheap backups - backblaze personal

[bold latch]

Felt like a sweet spot for a "set up and forget" type homeserver plan i'm expecting to last for a lifetime

[hot cairn]

you can also just buy a 14tb HDD for like ~$130

and put it somewhere safe

as a backup

[bold latch]

with a physical 4x4TB NAS system

[bold latch]

well, the whole point of an online cloud backup is if something happened to home, data's not lost

[hot cairn]

store it at a friends/family place

mb even throw it in a junker PC to do online backups

[bold latch]

and i'd need it sync'd regularly, yeah

right, that's a good point. why not just invest the £300 yearly into a second server to cluster and run an additional ZFS pool on

[hot cairn]

zfs send | zfs recv best

[chilly veldt]

👀👀

[bold latch]

use that budget to replace faulty drives and ZFS redundancy backups to recover data

[molten sky]

guys

the word circuit

like electrical circuit

[bold latch]

ahh. imagine. 1 server with ZFS tier 1 redundancy and 4x4TB. another server with ZFS tier 3 and 4x8GB storage or somethin

[molten sky]

how do you abbreviate that when labeling

[shut hawk]

https://www.rsync.net/pricing.html

pay what you use

[buoyant tree]

are you the one who created the video

[shut hawk]

no

[wintry sluice]

ckt?

[chilly veldt]

CCT

https://www.archtoolbox.com/electrical-abbreviations/

[bold latch]

reasonable, but probably not. if it's a "pay what you use" case, i've seen backblaze seem reliable on that front

[shut hawk]

oh actully

[molten sky]

🙄

[shut hawk]

sync.com seems to be doing a big deal on right now

[molten sky]

you were supposed to say CKT

[shut hawk]

$140 a year for 6TB

[wintry sluice]

yay, I won 🥳

[molten sky]

i just had the realization that depiste CKT being the norm around here.... why do we use a K???

everything's a lie

[wintry sluice]

pronounciation

[buoyant tree]

or buy it physically for 80$

[bold latch]

that'd be a great deal, yeah. looking for consistency though, rather than any potentially temporary deals

[molten sky]

cloud prices go up every year

hard drive prices last until they die

[shut hawk]

I think it locks you to the price

https://www.tarsnap.com/deduplication-examples.html
Finally theres this, now I have no clue how it manages to reduce backup size this much, but seems pretty good for power linux users

[bitter quiver]

Last time I used a cloud based server it stayed the same price since 2018

Still dropped it though

[bold latch]

just checked, its $240

[molten sky]

oh wow i misread the original msg

[shut hawk]

Promocode: SAVE100

[bold latch]

ahhh, gotcha

[rapid merlin]

Hey red teamers