general

[rapid merlin]

Hey guys I wanna start studying in a library or coffee shops,

what's the best way to get internet access while being safe? should I find an offer from my cellular provider like T-Mobile and get a NordVPN subscription?

[indigo geyser]

Hi guys I have a code base in SQL/JS and PHP. I need help in finding vulnerabilities in codebase and exploiting them. Would anyone be willing to do it with me?

[cosmic pendant]

For what purpose ?

[grizzled crystal]

Go for it!

[indigo geyser]

Learning to codereview a PHP based server. I have never worked on backend vulnerabilities . Hoping to start and work with someone together starting on Monday.

[cosmic pendant]

Why are you doing the code review (which codereviews are pretty garbage btw - as far as security is concerned)

[indigo geyser]

I understand but my job requires me to learn so no option.

[cosmic pendant]

Oh, this is for work professionally?

[indigo geyser]

consulting

learning for professional work yes but the codebase is a dummy one for practice.

[cosmic pendant]

Neat.

[indigo geyser]

Our company has a collection of practice codebases

[cosmic pendant]

Do you know PHP?

[indigo geyser]

Not at all. Learning JS for next 2-3 days and then will move to PHP

[shell nova]

Hard to review something in a language you don't know

[simple valve]

thank you! just dm'd

[twin ridge]

Gave +1 Rep to @grizzled crystal (current: #119 - 52)

[cosmic pendant]

Code reviews are hard when you know the language, they are nearly impossible to do well when you don't know them

[indigo geyser]

Yep. Working on so many things together. Upskilling is so hard

😛

[cosmic pendant]

Best of luck to you

[shell nova]

It depends on the reviewer tbh

[indigo geyser]

Haha yeah true.

[cosmic pendant]

I mean, a good reviwerer helps, but also the context. Do you have any reason to believe there is something malicious going on? Insider Threat?

I'm doing some research in this area, it's cool

[indigo geyser]

I have a coding bg a little so I am guessing some Googling might help with stack overflow 😛

[shell nova]

You tend to catch the obvious stuff, user input not sanitized, poor architecture

Some automated tools are getting better at it, notably sonarqube

[spring token]

Hi

[cosmic pendant]

it's the unobvious stuff that is still the security problem.. I hate automated tools, but they are getting better

I've seen a big leap

[shell nova]

Which can do taint analysis

[shell nova]

Yeah, but the easy stuff crops up super often

[spring token]

Can anyone help me with CEH prep?

[cosmic pendant]

try harder oops wrong one 😄

[cosmic pendant]

what's your issue?

[shell nova]

Similar idea though 😉

Take notes

[spring token]

I have my exam scheduled on Saturday need some tips😃

[cosmic pendant]

Are you ready?

[shell nova]

Good luck, rest up

[spring token]

Yes

[cosmic pendant]

Alright then, good luck.

[shell nova]

You got this then

[spring token]

Just wanted to ask how to deal with confusing questions

[cosmic pendant]

Do they still have that stupid question about gratituous arp?

[shell nova]

Get a good night's sleep

[cosmic pendant]

That was the stupidest question on a test I ever seen

[spring token]

No

[spice adder]

Got my CEH exam this year, very excited for my first cyb sec cert

[golden timber]

Update your apple devices

[simple valve]

this is low i'd say

[golden timber]

yea but the article claims "actively exploited" - whatever that means (they don't elaborate

[bold latch]

https://youtube.com/shorts/IcXqr8KqLRs

And you guys were dissing me for having 12TB planned

[mossy river]

Having lots of storage is only good if you are going to use it

Otherwise, don’t waste your money. Storage will get cheaper

[rapid merlin]

Good morning fellows

Nice try buddy

[mossy river]

That is a real link

[rapid merlin]

A referrer link

[shell nova]

Probably not the best idea to post a referral link here though

[rapid merlin]

Nice try: in getting us to give you a small reward

[mossy river]

It’s not against the rules

[rapid merlin]

Jesus

You think I'm that brain rot I can't read a URL?

[shell nova]

I mean sure but I still don't like it

[rapid merlin]

[cosmic pendant]

I thought it was a polyglot

[rapid merlin]

+1

[shell nova]

Probably ethical issues imo

[spring token]

Kernel Level Rootkit?

[spring token]

Thanks Toaster!

[twin ridge]

Gave +1 Rep to @cosmic pendant (current: #37 - 192)

[cosmic pendant]

if done correctly, yep

[spring token]

One thing I've observed it is always easier said than done in hacking, but when we ourselves delve deep into hacking we face other issues as well. The tiniest ones isn't it?

[bold latch]

Always true. I do believe I have need for that 12TB on a for-life scale, seeing how I've used just over half as much in the numerous PCs I've owned and passed down

[mossy river]

You get a lot more use out of your PC than I

[bold latch]

I struggle to think what 160TB's worth would be useful for though

[mossy river]

Most of my storage is used by games and VMs

[rapid merlin]

Databases

[bold latch]

Well, safe to say most of it is the chunky downloads my game libraries throw onto me. Most of these things take up ~100gb a pop

[spring token]

i think you have a whole database of games

[sick lance]

I have 2 TB on vm's alone.

[rapid merlin]

[bold latch]

Yeah my current desktop sits on 3.5/4TBs worth of games and VMs rn

[spring token]

12 TB is like 12 brand new pc's

[rapid merlin]

What could you possibly use all of them for?

[spring token]

But how do you manage to store these much of data

[cosmic pendant]

Can you rephrase that?

[sick lance]

Malware analysis, Malware exploit/written.

DFIR, kali and a full AD network.

[bold latch]

2TB SATA HDD 2TB NVME SSD, that's about it.

[rapid merlin]

Ah okay now it makes sense

Very cool projects

I'm too scrub to be doing all that

[spring token]

I mean if I were to implement that rootkit myselves having good conceptual knowledge, it wouldn't come easy there's always those 1/2 minor issues I'd get stuck into

[bold latch]

As for how I manage to amass that, well. VM practise installs and games I haven't used in years

[spring token]

In a lab environment*

[cosmic pendant]

........... If you know how to do it, it's just a matterof doing it 🙂

[spring token]

Maybe you know better because you are experienced🙂

[cosmic pendant]

There are books you can read up on

[bold latch]

A full AD network? I should probably get a lab up and running with that at some point, but surely that can't be over 100-200gb of storage at most

[spring token]

Please suggest

[rapid merlin]

Doesn't that exploit require a chain of different exploits to work though? Or am I thinking of the wrong iOS CVE

[cosmic pendant]

Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats

Rootkits: Subverting the Windows Kernel: Subverting the Windows Kernel (this one is older but still the basics are good)

[sick lance]

I have an Server set up, I also have a cli only and gui servers for backups. And have 6 different "client" pc's.

[cosmic pendant]

Also look into BYOVD attacks

That's rootkits the easy way

[spring token]

Bring your own device you mean!?

[bold latch]

Ahh right, I forget there's mailservers and simulated backup servers with whatever samba shares

[cosmic pendant]

nope

[spring token]

Then

[bold latch]

Why 6 whole clients though?

[cosmic pendant]

google it

[spring token]

Oh yes gotcha!

[sick lance]

Because I use them to "simulate an org"

[rapid merlin]

Lmao

[spring token]

Allow I'm a beginner 🙂

[rapid merlin]

No no I'm just thinking about the phrase

Bring your own device attack

Hehe

[spring token]

Yes you got me Cam!

[rapid merlin]

Keep up that enthusiasm 🙂

[sick lance]

You'd be surprised how many people don't update their devices etc and that a method used to infiltrate a network.

[spring token]

I just ignored the V there I suppose 😃

[spring token]

Yes, definitely.

[rapid merlin]

At my current job which thankfully I am leaving, all my staff leave their windows without updates for months...

[spring token]

That is the breeding ground of vulnerabilities

[rapid merlin]

When we got a new IT director he locked everyone's devices that were x weeks out of date

[spring token]

Maybe they don't care about insider attacks😂

[rapid merlin]

I mean they all have very sensitive PII so they should be

[spring token]

What is PII🙂

[rapid merlin]

Personally identifiable information

[spring token]

Oh👍

[mossy river]

Best tip: learn how to research, it will massively benefit you in this field 🙂

[cosmic pendant]

Learning is a skill

[rapid merlin]

the amount of times someone has said something and I've had to open a google tab to keep engaging in the conversation 0.0

[mossy river]

That shows a good mindset 😉

[spring token]

Point noted!

[spring token]

That's a flex

[rapid merlin]

That's how I should view it but I used to see it as incompetence when I was younger.

I soon realised the fact you're even willing to go out of your way to learn is the important part, not what you do and don't know

[mossy river]

Exactly, and not a lot of people see that.

Most people try to compare themselves against others.

Rather than comparing, use them to further your learning.

If you are smartest person in the room, you are in the wrong room.

[rapid merlin]

Facts my friend

[mossy river]

Having this realisation shows intelligence

[rapid merlin]

Mhm I try not to overestimate

EDIT: thank you however

[spice adder]

Nothing but truth. Especially that last sentence.

Don’t sit in habituation, learn to enjoy the uncomfortable growth

[mossy river]

People that refuse to accept that others are smarter usually struggle to ask for help. This causes frustration and slows their learning journey down.

[shell nova]

The more you know, the less you know

[sick lance]

I wonder how Fortinet are for certs.

[rapid merlin]

haha yes

i got another one

idiots admire complexity, geniuses admire simplicity

[loud marlin]

salt water when boil pasta

[willow furnace]

aany one know abt webhook and how it works

[sick lance]

What would you like it for?

[willow furnace]

not sure i have heard abt it

[shell nova]

Basically, you call a url to perform an action

There are many many many implementations

[cedar scaffold]

example number 1 million of me failing to run a command because I've got a space where it shouldn't be

[shell nova]

That hurts

[cedar scaffold]

yeah i was trying the nfs mount command and had a space between the hyphen and nolock

and for the life of me could not see why it wouldnt run 🤣

[shell nova]

That'll break yeah

[cedar scaffold]

we got there eventually

[shell nova]

I kept flailing at a command because I forgot a - once

[willow furnace]

does THM have webhook course

[cedar scaffold]

spaces and case errors are my nemesis

[narrow lark]

hello

have i a question

[chilly veldt]

answer I may have

[narrow lark]

ok

can me hack any social account by hashcat or john the ripper

?

?

[chilly veldt]

@shell nova

[narrow lark]

what did you mean by this account ?

[shell nova]

No

[void zodiac]

Where to get motivation?

Then Where to get normal brains?

[umbral bay]

Inspirational success stories: https://tryhackme.com/r/resources/success-story

[proven quartz]

The funny thing about motivation is that, it happens after you've started working, and usually after the work is done

[void zodiac]

I wasted like this half of my premium month, lol

[wintry sluice]

music works for me.
blocks out the world of the simulation real.

[proven quartz]

Schedule a few hours. Do some work. See results. You're now motivated. Schedule more work tomorrow

[rapid merlin]

wsp everyone

[spring token]

Guys are there any default creds for telnet/ssh?

[void zodiac]

And I just start studying on thm, and I get bored and sleepy

[spring token]

Naive question but please answer

[rapid merlin]

idk tbh

[spring token]

I tried brute forcing ssh through hydra did not work same for telnet

[wintry sluice]

telnet has no such thing

[spring token]

Used nmap script for telnet

[spring token]

How do I find out the username passwd

[mossy river]

Brute force should always be your last option

[outer rivet]

[spring token]

I mean as 9999 port is open and listening found a hint there but it doesn't work at all

[spring token]

Abyss

[mossy river]

Are you doing a tryhackme room? @spring token

[spring token]

Yes

[mossy river]

#room-help

[rapid merlin]

go there and itll help u

[outer rivet]

Jared I got questions if you don’t mind

[spring token]

Ok

[chilly veldt]

hmmm @sick lance 👀

https://www.vmware.com/security/advisories/VMSA-2024-0006.html

[rapid merlin]

didnt know ryan is here'

[loud marlin]

he jump from time to time yea

[rapid merlin]

damn

[mossy river]

'Sup?

[spring token]

Didn't get any response

[limber wigeon]

Hi
I would like to buy tryhackme premium I need a body for discount. is anybody interested in ?

[spring token]

I'm tired off myself that I'm even unable to crack ssh and telnet

[rapid merlin]

keep trying

[spring token]

I will atleast I gave my best

[rapid merlin]

you'll learn how, cuz failure always stop when they fail in something, and mistakes are great sometimes.

[spring token]

Yes hopefully I can learn

[rapid merlin]

itll take time but keep going

always having issues with english cuz im iraqi :/

[cedar scaffold]

I find finally getting the hang of something after some difficulties is more rewarding than getting it first try. You usually have to navigate some problems and so understand what you are learning better.

[rapid merlin]

thats the point'

u learn smth useful from ur mistakes

[outer rivet]

So It been on my mind for long time I google and everything but it just making confusion so I am trying to update my resume and trying to add some good stuff for example homelabs so what is homelabs is the one I do ctf like Kali ?

[sonic dust]

are we ever gonna bring throwback back

or put out a new AD network?

[shut hawk]

https://noted.lol/homelabs-and-learning/
So for example my homelab consists of a small server and raspberry pi

[outer rivet]

Oh wow I appreciate it big help

[thin raft]

Wish you a good day y'all

[sick lance]

VmWare don't often have bugs, but they do, they're critical.

[chilly veldt]

yup, vm escape time

[wintry sluice]

as in, breaking out of the simulation type escape?

accessing the machine hosting the VM

[chilly veldt]

yup

[wintry sluice]

eeeeek

[fleet finch]

Guys can anybody remember if there is a cloud azure or aws pentest course on thm or htb? I think i got E-Mail about this 1-2 months ago

[chilly veldt]

there is an AWS here on thm

https://tryhackme.com/path/outline/attackinganddefendingaws

[fleet finch]

Thanks

[chilly veldt]

you're welcome

[buoyant tree]

hullo

[shut hawk]

I might do a room on this

[desert shuttle]

Reee

[chilly veldt]

Nice

[rapid merlin]

How do cops track criminals phone numbers or mobiles?

[shell nova]

May be difficult to demonstrate in a practical sense

[sick lance]

Espeically if the user does not have VmWare.

[shut hawk]

Yup, was thinking more of a theory based room instead of practical

[uncut cove]

sup everyone!

I have a comment about "Complete beginner" learning path. IMO Kenobi should precede "Basic Pentesting" room, because Kenobi kinda introduces back the smb enums

[shut hawk]

Secret law enforcement tactics

[shell nova]

They aren't accepting community walkthroughs anymore

[limber wigeon]

Hi

[sick lance]

Have a look at the "Anom" phones.

[shell nova]

Afaik

[sick lance]

I'm still looking to buy one.

[shut hawk]

Ah rats, you're right - forgot about that

[loud marlin]

here is Bubbels

[rapid merlin]

And what r those tactics

[sick lance]

I thought I bought an Anom phone, but it was inactive.

[plush mesa]

werent that honeypots

[sick lance]

Not honeypots,

honeypots have useless data on them.

Trojans, woud be more accurate.

[plush mesa]

well if you bought the phone from your local fed i would consider it an honeypot

[sick lance]

They didn't know if was feds behind it until the last minute.

[plush mesa]

Maybe I'm mixing things up here I'm starting to loser overview with all those privacy marketed phones ;) but weren't that the anom phones who were sold by the FBI?

[sick lance]

I'm also not looking to purchase it for privacy, I'd love to chuck in all my DF tools.

[plush mesa]

lol

i can imagine that being interesting

[sick lance]

That's why I want to do it 😄

[rapid merlin]

Can they trace with the phone numbers only?

Or IMEI number?

[sick lance]

They can check which towers the numbers bounces from, so it's not as accurate as GPS.

[plush mesa]

Triangulation works, so determining which cell phone towers are nearby.

[wintry sluice]

if they know enough about the phone, they might be able to use local wifi too

[plush mesa]

Phones can also be tracked with a similiar method to apples find my. Basically phones check which other devices are nearby. This isn't as exact as GPS/

[wintry sluice]

like the covid bluetooth sorcery?

[plush mesa]

yeah right

[peak crown]

hey

[rapid merlin]

meow

doing the windows priv esc room meow

[outer rivet]

Anybody here tried commando vm ?

[sick lance]

Not for a while, is it still supported?

[outer rivet]

Well it look like it last update was 5 months ago so

But is something weird about it I did it yesterday after installation process it didn’t download any tool at all even my antivirus is off

[sick lance]

Do you have enough space?

[outer rivet]

Well I had 100gb

That what I am gone do now extend more space and try

[naive violet]

Way more exact actually, uses wifi networks etc as they're fixed typically

[sand trench]

yeah most wifi networks don't move around

[buoyant tree]

yup, a lot of tech youtubers who show around the wifi options don't sometimes blur it

so since u can lookup thier SSID on wigle and u got thier location of filming if u can cross reference a few more wifi networks if the same one exists in multiple areas

[bitter quiver]

Huh

I'd purposely show wrong info now that I know that

[wintry sluice]

or just go to the site of the network and home in on it by measureing signal strength

[boreal scarab]

Unpopular insanity: change your wifi name every 5 minutes.

[bitter quiver]

I do update mine on occasion

[wintry sluice]

or just set it to not broadcast

[bitter quiver]

Usually cartoony names

[buoyant tree]

or make it hidden

[bitter quiver]

I swear every apartment complex has one chucklebutt who laughs that theirs is "FBI Surveillance van"

[boreal scarab]

I see that too!

[bitter quiver]

Be creative.

[buoyant tree]

"Director Skinman"

if you have seen the x-files

[bitter quiver]

"Hannibals Meat Locker"

[boreal scarab]

"Total bodies: 5"

[wintry sluice]

"DefinitelyNotAHoneypot"

[buoyant tree]

"DefinitelyAHoneyPot"

[bitter quiver]

Ironically like 20% of them here are peoples names

Some full names

[crude stump]

Do you keep your thm 0x1 on purpose?

[buoyant tree]

ye

[bitter quiver]

Went so far the counter reset

https://tenor.com/view/vegeta-its-over9000-gif-14419267

[buoyant tree]

also Cipher of Sin, Helldivers 2 getting a lotta updates

[wintry sluice]

integer overflow; return to start

[bitter quiver]

Yes it is

Me and 2 buddies doinging all evening tonight after work

[buoyant tree]

hmm

[bitter quiver]

Mostly doing hard missions now but we may up it

[buoyant tree]

hard is the proper difficulty

medium is too easy

[bitter quiver]

Right

[plush mesa]

ah ok. I didn't know the specifics anymore i remember a samy kamkar research he did ages ago where both android and apple phones do this based on MAC address

[bitter quiver]

Challenging can be fun, depending what happens

Hard is the meat it feels like

[buoyant tree]

although now me focusing on movies more

[bitter quiver]

What movies

[buoyant tree]

finishing up my denis villeneuve binge

[bitter quiver]

Oo

[crude stump]

Helldiver difficulty is slight. Only with a good team tho

[buoyant tree]

Arrival done, Blade runner 1 done (pre-req), bladerunner 2049 almost done, dune part 1 done

[buoyant tree]

I play with randoms

[bitter quiver]

WE want to go higher difficulty but we are unlocking a few more gear items and wewant a 4th player we know

[naive violet]

Yeah MAC addresses of wifi access points, BSSID

[crude stump]

Same but some reason I always end up with some good players

[boreal scarab]

I got Mexican coke!

[buoyant tree]

eh 1 I get 1 good player

[bitter quiver]

After a few ranks, most players are good

[buoyant tree]

the rest are bozos

[bitter quiver]

FOR DEMOCRACY

[boreal scarab]

Oooh that really does taste different

[bitter quiver]

https://tenor.com/view/helldiver-helldivers-helldivers2-chestbump-flag-gif-2708234001444907997

[buoyant tree]

wanna know smth, mexican coke or what yall call it was the standard here in Pakistan about 2 years ago

[bitter quiver]

I heard Mexican coke actually tastes real. Assuming we are discussing soda

[buoyant tree]

now they switched it up to the weird one

[boreal scarab]

TACOS

[crude stump]

I think it’s because they use cane sugar

[wintry sluice]

oh... right... soda. the soda coca cola. that soda.

[crude stump]

Wrong person

[boreal scarab]

No Comment

[buoyant tree]

use the 3 lemons wisely

[boreal scarab]

That's LIME!

[buoyant tree]

same thing

[crude stump]

Facts

[boreal scarab]

https://tenor.com/view/newspaper-gif-18150652

[crude stump]

1s just more bitter then the other

Sour I mean

[buoyant tree]

the more bitter/sour the better

[boreal scarab]

Omfg, I had doubts bout this place..... this thing is AMAZING

Mexican coke is less loaded eith sugar, feels less carbonated. I love it

[crude stump]

My favorite Mexican dish is birria tacos

[buoyant tree]

adds to OSINT, Matt is at a mexican place eating 3 taco's which is in a platter/combo, contains spice, rice, lime, beans

[crude stump]

Also likes coke

Drink kind

[buoyant tree]

although idk why we call it coke

[bitter quiver]

Yoooo. I use Pakistani Camo on my ZTZ 96a in Warthunder

[buoyant tree]

coca-cola is the proper name

[wintry sluice]

cos it used to contain the non-soda stuff

[buoyant tree]

ur words don't make sense

[crude stump]

Back they they use to put coke in Coca Cola

[buoyant tree]

yea thats way back

1970's

[crude stump]

Talking about his fighter plane in warthunder

Or tank

Or ship

[boreal scarab]

Matt no at mexican

[buoyant tree]

eh I don't play warthunder

[bitter quiver]

I rock the Pakistani Army camo on my ZTZ 96a tonk in Warthunder

[boreal scarab]

@heady nova

[bitter quiver]

A fellow armor lover?

[bitter quiver]

No biggie, just like saying hey - connection here

[buoyant tree]

ye

[bitter quiver]

Looks slick

[buoyant tree]

btw u play any single-player games

[boreal scarab]

"Worst" (I don't see it at all that say) I've done is weed. (It's legal recreational here, deal with it)

[buoyant tree]

https://tenor.com/view/smoke-weed-joint-marihuana-gif-18002627

[bitter quiver]

Gunner, HEAT, PC! Total War Warhammer III, Total War Rome/Napoleon/Three Kingdoms. Stellaris,Hearts of Iron, Warno, Sonic Mania, Panzer Paladin, Cassette Beasts, Ozygen Not Included, Don't starve, Elden Ring, Cult of the Lamp, Fallout 4.

To name a few

[boreal scarab]

Mfer doesn't know how to actually smoke it

[shut hawk]

waiting for the mechs on helldivers 2

I'm level 25 so should hopefully have it unlocked

[buoyant tree]

wait, wait, wait mechs are coming to helldivers 2

[bitter quiver]

Ditto. Kinda wondering what they are going to toss to the enemies to balance it out

[bitter quiver]

Mechs, APCs, etc

[buoyant tree]

...

[bitter quiver]

Helldivers 1 had them

[buoyant tree]

I love mechs

[bitter quiver]

Also a new enemy

The Illuminate faction

Also from HD 1

[shut hawk]

we need a buff like this, titans on helldivers difficulty is tortue

[bitter quiver]

This game is just starting my man

[bitter quiver]

oooo yeah. I haven't faced a titan on that diff yet

I can imagine

[buoyant tree]

hmm so mainly shooters

[bitter quiver]

Uh

None of those are shooters except Fallout 4

[buoyant tree]

uhm isn't total war a shooter

[shell nova]

Why is it always you?

[buoyant tree]

gunner seems like one

[bitter quiver]

Noooo. Strategy

[buoyant tree]

hmmm

[bitter quiver]

https://tenor.com/view/demigryphs-total-war-warhammer-the-empire-demigryph-knights-warhammer-fantasy-gif-19543191

[rapid merlin]

🙂

[bitter quiver]

80% of what I currently play is strategy games

[buoyant tree]

oh k

[bitter quiver]

In part due to hand issues

It's easier

[buoyant tree]

I usually play story based ones

[boreal scarab]

Oh fuck, it's Hydra!!!! RUUUUUN!

https://tenor.com/view/scared-child-running-away-baby-spooked-gif-23509618

[bitter quiver]

WHen I do play FPS I use the mapping on th eside of my mouse to move things like jump to my mouse

[buoyant tree]

nice which mouse u got

[bitter quiver]

Nice. I want to play most of those but my PC can't run most of those, I have most on my PS5 but can't enjoy it ther eyet

[bitter quiver]

Razer Naga Trinity

[wintry sluice]

more horizon soon 🥹

[buoyant tree]

oh k

[buoyant tree]

yup

although gonna play ghost of tsuhima first

its also getting a port

[shell nova]

I saw the minimum reqs for that and I'm so far under it's no longer funny

[bitter quiver]

After my India trip I plan to save up for a ~$1500 ish gaming PC

Then all will fear me

[buoyant tree]

which monitor?

[bitter quiver]

Using an 8 year old Samsung SyncMaster

[buoyant tree]

get a better monitor then pc

[shell nova]

Good enough

[bitter quiver]

It really is

I don't believe in 4k

[buoyant tree]

get a 1440p one

[wintry sluice]

I'm still using an i5 2500K 😄

[bitter quiver]

My eyes are too shit to benefit from 4K

So 1080 is perfect

[shell nova]

Meh 4k just means you need a huge gpu

[shell nova]

Mine's a 4670K at least

[bitter quiver]

My brother does it and is like look how pretty this is

I see no difference

Eyeball upgrades wen

[shell nova]

No upgrades, only downgrades

[buoyant tree]

eh get a higher refresh rate and color accuracy atleast

[shell nova]

I have an IPS monitor, accuracy is pgood

[sick lance]

I mean, your eyes can't keep up with all the FPS etc.

[wintry sluice]

some places offer laser eyes

[bitter quiver]

Outside of strategy games I play a ton of retro games.

I'm stuck in 1986

[shell nova]

Refresh rate is shite, but so is my gpu

[buoyant tree]

get a CRT

[bitter quiver]

These modern desks can't handle that

[shell nova]

Yeah CRTs are heavy

[buoyant tree]

get a ancient desk

[brisk tree]

i have every uncharted game and havent finished one yet really need to

[buoyant tree]

yup quite heavy

[bitter quiver]

When I'm healed I'll hand make my own oak desk

THen I can do it

[buoyant tree]

u should do it

[brisk tree]

i will

[bitter quiver]

I can make a far better desk than 95% of these companies

[rapid merlin]

ive hp probook 640 laptop with i7U which im using rn :)...

[brisk tree]

i need to finish resi 4 first

[buoyant tree]

resident evil 4?

[brisk tree]

yeah

[buoyant tree]

hmm

[brisk tree]

on hardcore mode just now

[bitter quiver]

Also this standing desk is nice

[buoyant tree]

i gotta play it sometime

[brisk tree]

its soooooooooo good

[bitter quiver]

Been wanting to play through RE 2 Remake

[buoyant tree]

got it in library

[cedar scaffold]

it was so well done

[rapid merlin]

hardcore and resi 4 is perfect'

[brisk tree]

you should do it ive played it once its amazing

[buoyant tree]

got both games and haven't had time to play them

[bitter quiver]

Man that was a lot of positive instant feedback on the game lol

Yeah it's on my soon to do

But probably not till May

[buoyant tree]

How many games have yall bought and haven't played

[bitter quiver]

Several thousand

But that's from 10+ years collecting

ANd Steam used to do really nutty sales

Plus I have humble bundle subscription so each month I get like 10 new games

[brisk tree]

i have witcher 3, baulders gate 3, alan wake 2, all the uncharted, cyber punk, elden ring, control

[sick lance]

Witcher 3 > all of the list.

[buoyant tree]

i got all of those except balduers gate 3

[wintry sluice]

control is awesome

[cedar scaffold]

i dont wanna talk about it

[sick lance]

I cannot wait for Silent Hill.

[brisk tree]

it is i need to finish it

[buoyant tree]

...

nearing 90 for me

[sick lance]

RE2 remake was good.

[buoyant tree]

110*

[sick lance]

Re3 Remake was disappointment.

[brisk tree]

i cant wait for Re9

i also need to finish Re7 but damn its intense

[buoyant tree]

well in the trillions?

[sick lance]

RE: Village was good.

[cedar scaffold]

im not that rich

[sick lance]

Only RE I didn't like was 6.

We don't talk about Re6.

[brisk tree]

i keep seeing vidoes of the baby from Re8 and it terrifies me

[buoyant tree]

heard its the best

[sick lance]

[sick lance]

Bahha!

Get on twitch and stream it.

So I can laugh at you 😄

[brisk tree]

ill stream it drunk one day that will be interesting ahahaha

[buoyant tree]

although why you waiting for Silent Hill only

its remake*

[sick lance]

The majority of the games released these days are poor.

I'm a major SH fan, and I really hope it's worth the wait.

[buoyant tree]

hmm

silent hill or silent hill 2

[sick lance]

Sh2

[rapid merlin]

both great

[sick lance]

Silent Hill isn't getting a remake

[sand trench]

well think shadow fixed a "bug" they are having

[brisk tree]

i need to try silent hill

[sick lance]

Silent Hill set the bar for Atmopsheric horror.

[buoyant tree]

u played the first alan wake yet

[brisk tree]

no

[buoyant tree]

watched a video on it like how it inspired RE and stuff

[buoyant tree]

Play it before Alan wake 2

[brisk tree]

before last year the only games i commpleted were the first two uncharted remakes

ok i will do

[cedar scaffold]

i havent played the AW games but control was amazing

[buoyant tree]

yup Control is great

a true masterpiece

only thing missing is ng+

[sick lance]

Nah.

They drew insperiation from each other, RE dated SH by 2 years.

[brisk tree]

one game that got me emotional was beyond two souls

[naive violet]

@loud marlin https://mitxela.com/projects/etching_pcbs
Btw

[sick lance]

Got it, not played it.

[loud marlin]

nice. just he have 40w laser, and mine is 2w. just he dont say what power he used to do the task. but yea. it can be done. and results are quite precise

[brisk tree]

its amazing i nearly cried at the end

[naive violet]

You're just etching paint so I reckon it's fine

Chemicals for actually etching the copper away

[sand trench]

seems like shadow got it "fixed"

no sub pixel shenanigance

[naive violet]

FR4 copper boards are cheap and might be pretty

[sick lance]

Can I post a mock question in here to show you how stupid my SoC exam is going to be?

[loud marlin]

yea. i can do the metal. but will need lots of passes to do so. but will try for sure. just when i get some time.

[naive violet]

Seeing as you're not asking for helo with it, yeah

[loud marlin]

if i ever get my hands on around 10k$ will get fiber laser around 60-80w to make 3d stuff

[sick lance]

Oh no, when you see this question, you'll see why I'm not asking for help...

[naive violet]

Ferric chloride is a bit nasty but he talks about ways of making it less nasty

[sick lance]

I mean, come on...

[wintry sluice]

🤣

[shut hawk]

must be a type of malware

[loud marlin]

true. + i can get my hands on more pure/potent ones that you can't get in free sale and so. that might give better results

[buoyant tree]

...

[wintry sluice]

what exam did you say this was an example for?

[buoyant tree]

A network protocol seems correct

[sand trench]

where is option E all of the above???

[sick lance]

SoC.

[wintry sluice]

level 0?

[naive violet]

If you don't get 90% then I'll be disappointed

[sick lance]

If I get less than 90% I'll be dissapointed

[naive violet]

905!

[sand trench]

good one hymnosi

[plush mesa]

bbbut isnt linux the kernel not the operating system 🥸

[loud marlin]

@naive violet also... i have some machines and ways to "enrich" copper with more electrons, ions and stuff that might result in better conductivity, without loosing any other properties

[sand trench]

yes

[shell nova]

Clearly B

[naive violet]

Trace resistance isn't much of an issue

You just make em wider

[rapid merlin]

its all but C is most used

[gritty zephyr]

Its still wild to me that most computing is almost done at atom levels of conduction

[loud marlin]

yea. i kinda did get that from what i read. with more powerful laser i can even "drill" a holes for soldering and so. so yea... laser, as in this case, can be useful for making pcb's

[gritty zephyr]

Like what the hell i cant even multiply correct and these dudes use atoms for some calculations

[naive violet]

I just get JLCPCB to make them lol

[shell nova]

Quantum effects are real

[loud marlin]

hehe. fair. one downside of galvo laser is that the laser that comes from middle point and if you do on wide area, it kinda all small angle of cutting. if i explain it right

[gritty zephyr]

My mind is just boggled when i think about it, and im just learning a pea size bit of knowledge of it all

[naive violet]

I need to work out how to cut sheet steel

[shell nova]

We're at the stage where electrons can tunnel through a FET gate

[loud marlin]

laser. let me find you some video 🙂

[naive violet]

I don't have a laser

[rapid merlin]

xd

[shell nova]

Water jet also works

[gritty zephyr]

I like your pretty words magic man

[loud marlin]

noob 🙂
https://www.youtube.com/watch?v=O2eWxUUzM-4

[naive violet]

Also don't have one of those

[shell nova]

Also plasma torch

[naive violet]

I'm a big fan of not spending money

[shell nova]

True, prefer watching stuffmadehere for the tooling porn

[rapid merlin]

spend money in useful thing is perfect

[naive violet]

Using something once isn't cost effective

[rapid merlin]

true

[shell nova]

You get the cheap tools, if they break then you use them enough to get the better tools

[gritty zephyr]

This life is also one use only, have some fun with it 🙂

[rapid merlin]

fun with useful things is more better tha parties

[naive violet]

I'll scribe some lines and see how I get on with snips

[rapid merlin]

imagine urself hacking ur friend just for fun

[naive violet]

That's no fun

[loud marlin]

@naive violet i can cut card for sure. will make you vid. but it need some time.

[shy tapir]

hello

[naive violet]

Incredibly illegal, which leads to a huge lack of fun

[loud marlin]

card as metal sheet

[rapid merlin]

if u friend know abt it ofc

[shell nova]

I wanted to look up the penalties to add as a disclaimer to my pres, they're...high

In France it's up to 300k€ fine and up to 7 years in prison

[shy tapir]

hi how do i get started?

[rapid merlin]

ofc and thx for advice

[twin ridge]

Gave +1 Rep to @gritty zephyr (current: #153 - 41)

[gritty zephyr]

For us its max 4 years plus fines

[naive violet]

@gritty zephyr let's make sure your comments are appropriate for an educational environment

[gritty zephyr]

Sorry, shall keep it more sfw

[shell nova]

Probably a bit on the line yeah

[loud marlin]

@naive violet this one is great
https://www.youtube.com/watch?v=yKHvCprJGQg

[shell nova]

I prefer styropyro's laser.

[shy tapir]

how do i get started with ethical hacking?

[loud marlin]

that guy is a freak... i watch him what he doing

[shell nova]

I hear that www.tryhackme.com is a good source

[wintry sluice]

#start-here

[shell nova]

I'm impressed he hasn't killed himself yet tbh

[loud marlin]

or cut some parts of boby and going blind and crazy =/

[rapid merlin]

wasent there a channel for suggesting rooms?

[shell nova]

Nah he's already mad

[naive violet]

#room-ideas

[shell nova]

Both valid interpretations tbh

[chilly veldt]

I got kebabmix for dinner!

[loud marlin]

for sure. tbh... prob lot's of things might be illegal to do so lol

[sand trench]

https://calyxos.org/news/2024/03/05/fp5/

YAY

[naive violet]

Ooh interesting

[sand trench]

can finally probably switch to shadows fairphone 5 with calyx os now

[naive violet]

I like my FP5

[sand trench]

from the short test run shadow did they also like their fairphone 5

[uncut cove]

time for a stroll I guess

[naive violet]

That's why you don't use rockyou for network brute forces

[sand trench]

just been waiting on this calyx os release

[uncut cove]

what would you recommend, instead?

[naive violet]

Generally not brute force

[sand trench]

and if you must brute force at least use a web dir discovery list for finding directories on the target host

[uncut cove]

oh but the stem implies using brute force

[naive violet]

Yeah but real world...

[quartz mulch]

Hi, how to check the overall quality of randomness estimated to be?
Task 8 Burp Suite?

[buoyant tree]

Burp's sequencer may help with that, as well as reading whats in the room

heya ben

[naive violet]

@quartz mulch @primal ivy #room-help please

[sick lance]

I see Ben Lurking 👀

[quartz mulch]

Go to direct?

[uncut cove]

Ben hating?

[sick lance]

Nah, no idea who that is.

[buoyant tree]

Let's see if Ben's really lurking here

[uncut cove]

don't forget the foil hat

[bitter quiver]

[buoyant tree]

eh X-files doesn't have a lot of tin foil hats

[umbral bay]

No choice E. All of the above. 🥳

[uncut cove]

darkweb2017-top10000.txt takes only 40 mins btw

[buoyant tree]

depends on your target, tool threads, timeout, internet speed

[wheat crater]

i remember seeing the "cool ass paranormal entity" episode as a kid... freaked the shit out of me xD

[uncut cove]

and size of the wordlist, primarily, I'd say

[buoyant tree]

yea

[buoyant tree]

me watched x-files first time when I was about 7-8

[errant jackal]

Hey yo

[wheat crater]

me too, was about 8 or 9. and the episode with this guy who was able to squeeze through holes and gaps. we had this ventilation shaft in the bathroom... was afraid he was comming through that xD

[loud marlin]

@hasty sand you might here? mind i DM?

[sick lance]

Tooms!

[charred forum]

real

my comfort show

[midnight hazel]

i sweated a lot of info rooms and now i have a bunch more badges and completed rooms

[solemn edge]

Hey everyone, im creating a CTF team, starting with the picoCTF 2024 and then moved on to others CTFs... if someone here want to join, feel free to DM me 🙂

[sick lance]

@shut hawk

Belkasoft sent you another course yet?

[buoyant tree]

that one was scary

surprising that you can do the exam review before the actual exam and then you get instantly passed

[crude stump]

How does that work lol

[buoyant tree]

Probably just a IDOR

it doesn't alloow u access to the cert url before the exam

but since the review redirects u to the exam cert

[crude stump]

Ohh

[buoyant tree]

yup quite stupid

and I can't even do the exam after I have the certificate

[crude stump]

That’s stupid

What if you forgot stuff lol

[buoyant tree]

emailed the site about this stuff

[crude stump]

Wanna refresh

[buoyant tree]

yup

[buoyant tree]

eh simple English test

just a requirement for a lotta programs here

[crude stump]

Oh

[shut hawk]

Yeah

"Beyond the Basics: Mastering Advanced Digital Forensics Techniques."

[crude stump]

Do certs ever expire?

[buoyant tree]

nop

[crude stump]

That’s good

[shut hawk]

it depends what cert it is

some certs exprire, some don't

[buoyant tree]

yea ik, was talking in other context

[buoyant tree]

.

[shut hawk]

ah, I think it was just a general question

[crude stump]

Yeah

But that’s ok

Still basically answer my question tho

[loud marlin]

🙂

[crude stump]

That’s fire

[bitter quiver]

Looks like metal to me

[crude stump]

Ah your right

[buoyant tree]

Should be offical merch

[loud marlin]

heh

[crude stump]

Apparently there stuff is too hard to restock

As seen with the stickers

[loud marlin]

yea... depend of from where u get them and time to make it

[mossy river]

Hi, really sorry, busy day.
Did you get an answer to your question?

[rapid merlin]

guys ive a question, when u try to turn on ur laptop with battery without charger it wont work, but when u plug the charger it turns on, while the drivers are all on latest updates, what could be the issues?

[loud marlin]

also have some small metal boxes or so

[mossy river]

Sounds like an issue with your battery. When you use your laptop with a charger plugged in, it doesn’t use your battery.

Or in most cases it doesn’t. If your battery is flat, it will be taking the charge and immediately powering the laptop

[outer rivet]

Yes I did thank tho

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1188)

[outer rivet]

+10

[sand trench]

and calyx os installed of fairphone 5

now to go migrate stuffs

[mossy river]

The stickers are the only thing that we can’t always guarantee that they are in stock.

I can’t discuss the process externally but everything else on the store should be stocked 😄

[crude stump]

Bet. Once they do a eventually come out I’m buying it asap

[rapid merlin]

my laptop is hp probook 640 g2, and then if i unplug the charger and trying to power it, it wont turn on, so what could be the Solutions?

[uncut cove]

the fans do

[rapid merlin]

and also another question abt trojan viruses and how to remove it

[mossy river]

https://answers.microsoft.com/en-us/windows/forum/all/laptop-wont-work-without-the-charger-plugged-in/13ea98d7-6b58-4719-8c82-c05396d5bee0

https://www.quora.com/My-laptop-wont-turn-on-without-the-charger-How-can-I-fix-this

Sorry, I can’t provide device support over the internet.

If these don’t work, take it to a tech shop

[rapid merlin]

ill do thx

also another question

[rapid merlin]

.

[lavish shell]

Sounds like a bad battery. Depending on the quality of your laptop it may be better to just buy a new one. If you bought a $100 laptop, why spend $80 just for a battery? Chances are, if it powers on whilst plugged in but not when unplugged then it's the battery.

[rapid merlin]

heh in iraq its only 5-19 dollars

[crude stump]

Run malware bytes or any other antivirus you have.

Also Microsoft defender

[lavish shell]

You can DM me for instructions on manual virus removal, or you can otherwise try things like bit defender or other anti virus programs. Not all anti virus programs are equal. Nord may catch a virus that McAfee doesn't, and bit defender may catch one that neither of the other two did.

[rapid merlin]

and if there's a file that microsoft defender cant access, what i could do ?

[lavish shell]

Manual virus removal through command prompt

[rapid merlin]

thx

[twin ridge]

Gave +1 Rep to @lavish shell (current: #607 - 6)

[lavish shell]

Although, sounds to me like you may be experiencing registry issues which can be fixed by using Ccleaner to fix broken registries.

[crude stump]

I’m kinda confuse why defender wouldn’t have access to a file

[rapid merlin]

it skips it

[crude stump]

Oh

[rapid merlin]

yeah

the file could be accessed by super user only so

it just skip it

[crude stump]

I see

[lavish shell]

We give help, not answers. You don't learn anything by being spoon fed answere

[crude stump]

You can have hints tho here #room-hints

[rapid merlin]

did he/she left that fast?

[crude stump]

Deleted it prolly

Or a mod

[quartz mulch]

i delete

soory

[crude stump]

@quartz mulch

Only for hints tho

[quartz mulch]

thx

[rapid merlin]

anyone have vodafone internet in UK, is it any good?

[boreal scarab]

@naive violet https://www.twitch.tv/oh_bother

This guy is doing antenna stuff and boards. Incase you're interested

[bitter quiver]

I've discovered one issue with standing desk. It's been 4 hours since I sat down and I didn't realize till my knees informed me

[hasty palm]

what somewhat annoys about this cyber security and it in general, i like it and im like a kid in a toy store, amount of stuff i see per day that is new and what i must know in order to get a job in this field is insane.

"Jack of all trades, master of none"

[uncut cove]

that's why you need a purpose in your learning. then you pick tools that suit for this purpose and refine your trade

[hasty palm]

😄 have u seen a kid in a toy store and tell him pick 1

[desert shuttle]

One tomato at a time

[uncut cove]

as much as I understand you, being a kid in a toy store will probably not get you far in this field

[wintry sluice]

part of it is just learning how to gather OSINT efficiently

[uncut cove]

true

and generally how to ask questions

cause the correct question already contains a half of the answer 😄

[wintry sluice]

and as esqy said yesterday: "notes notes NOTES"

make a decent backup brain

[hasty palm]

it took me about 5-6 months to figure out what i want ot of this it, this is how i ended up in tryhackme and cyber security

[uncut cove]

so do you want to atacc or protecc

[bitter quiver]

You know the full saying for that right?

[wintry sluice]

or both for those of the purple persuasion

[bitter quiver]

"A jack of all trades is a master of none, but oftentimes better than a master of one."

[uncut cove]

purple rain...

[bitter quiver]

The amount of people I meet with PhDs that are entirely incapable at some common things is testament enough to the full saying

[uncut cove]

stumbled upon it recently

[bitter quiver]

I think CyberSecurity requires a wide scope of understanding.

[hasty palm]

it might sound wrong but im so beginner that i dont care but iv been thinking of soc analytics or pen-testing as a start. i dont care what i do as long company where i work understand that im beginner. i guess whatim trying to say is "Where can i be most useful?"

[uncut cove]

and a portfolio

[bitter quiver]

I tell folk make a github early actually lol

FOr IT, Programming, Cybersec folk

[hasty palm]

my last 10-13 years is construction work 😄

[bitter quiver]

Even IT. You can do cool network automation work with PowerSHell and display it

[bitter quiver]

That's a great thing though. That's solid life experience, understanding people, regulations, time constraints, logistics

ALl of that realistically transfers

Especially if you got into leadership

Feel good about that

[uncut cove]

yeah but not only this

on cybersec interviews, they often ask about your practice e.g. what you managed to implement or how you managed to improve anyone's security posture.

[bitter quiver]

If you do the paperwork right, you can often get in some freelance practice helping local churches and non-profits set up and test.

[uncut cove]

and it is a plus if you can tell the amount of money that was saved by mitigating the vulnerability you found or something like that

[bitter quiver]

The payment is them letting you list it as experience on your Resume

But cosntantly using things like THM is a great thing to include and show

[uncut cove]

yes, I do volunteer for ISC2 as SME, this is great practice

[bitter quiver]

But real world physical stuff is big

[sick lance]

Not if I buy them all

[distant gazelle]

oh my

[crude stump]

Don’t you dare

[distant gazelle]

omw to scalp thm stickers

[uncut cove]

just do it every day, and eventually you'll become good at it

[hasty palm]

true

[amber bloom]

Good evening everyone! How can I read the forum from this thread? https://tryhackme.com/forum/thread/62bc5fb1fcafa700618f25f0

It's always redirecting me to this discord server

[wintry sluice]

I think that means you can't read that forum thread

at a guess, I would assume it no longer exists, and that this discord is it replacement

[sick lance]

Discord has over taken the forum, yeah.

[amber bloom]

ahh, nice! Could you maybe tell me how to fix the openvpn peer certificate verification failure?

[sick lance]

Are you using Eu_reg_3?

[amber bloom]

Yes

[sick lance]

Actually, #site-support please, I can help.you there.

[loud marlin]

@glass nest @boreal scarab

[bitter quiver]

That's quackers

[loud marlin]

https://tenor.com/view/duck-gif-22135253

[wintry sluice]

what does the blue one do?
I'm guessing the silver is concussion, and the red is remote explosive

[loud marlin]

blue is just holding his breath for last 3 days...

[bitter quiver]

Ducky shaped nades

Perfect for the Penguin

[wintry sluice]

perfect for Agent 47

https://hitman.fandom.com/wiki/Remote_Explosive_Duck

[bitter quiver]

I'd be miffed if an assassintook me out with an explosive rubber ducky

[rapid merlin]

xd

[wintry sluice]

no you wouldn't because (1) you'd be dead and (2) it would be hilarious

[bitter quiver]

I'd be so angry my spirit would linger

Follow him/her home and write mean messages on the bathroom mirror for when they shower

[remote prairie]

Hello THM general

I have been in the weeds of Digital Ocean services

[loud marlin]

if i notice explosive duck ill prob pick it my my self lol

[wintry sluice]

how would you know it was explosive?

[bitter quiver]

It would have a fowl plastic smell

[wintry sluice]

the whole idea is it just looks like a normal rubber duck

[bitter quiver]

🪿

[loud marlin]

timer: <t:1709848330:R>

[wintry sluice]

how dare you
||lol||

[lavish shell]

Speaking of explosive rubber duckies, there's a new usb drive that destroys itself with the click of a button.

[loud marlin]

ill ask before 🙂

[cedar scaffold]

[loud marlin]

ppl have to much of free time to make dumb things like that

[bitter quiver]

Sir and or Madam in the black tux, would you kindly inform me IF this particular rubber water fowl is capable of explosively damaging the objects and people around it? It would greatly aid in my decision making process

[loud marlin]

if you don't ask you will never know for sure 🙂

[wintry sluice]

someone should make a usb stick (with usb C) that wipes itself if you insert it the wrong way up

[lavish shell]

It's actually useful and designed for security. Can't perform forensics on an object that's been totally destroyed

[wintry sluice]

you can always perform forensics

[bitter quiver]

Small onboard battery that when triggered starts writing overtop of the data constantly

[bitter quiver]

But it doesn't always yield results

[loud marlin]

good encryption with compliated password is much more ok. and you can faster unplug than find the button lol

[bitter quiver]

Source - I've wiped probably 100,000 hdds/ssd

Not exagerating

Was my job to lead a team doing purely data sanitation on loose HDDs/SSDs for a couple years

Do admit SSDs there for a moment could not be reliably wiped, but they can now

[wintry sluice]

so you had a job involving playing around with magnets and emps

[loud marlin]

3x pass with 0/1 will make it greatly to not retrive data

[wintry sluice]

neat

[bitter quiver]

Nah, various passes . 1,3,7, and a few more versions

[warped crane]

There is a symbol on the keyboard i see alot in the videos I can't find

[bitter quiver]

Standard DoD 3 pass is really succesful for HDDs

[warped crane]

Its like a stick ( l )

[wintry sluice]

| pipe?

[warped crane]

Yes that one

It's called pipe?

[bitter quiver]

Hard drives to deal with are actually those "hybrid" drives that have the small SSD board and a traditional platter

[warped crane]

How to type it on mob and on laptop keyboard?

[loud marlin]

yea... full disk ecntryption with super-great password also is greatly safe

[wintry sluice]

depends on the keyboard layout

[warped crane]

So on laptop i have to install some custom keyboard to find it

[wintry sluice]

for me (UK) is on the same key as backslash (\)

[warped crane]

Wait wait i think i found it

[bitter quiver]

Depends who is looking at it. Encryption that stops most hackers is fine, "National" level actors are a bit more capable.

[warped crane]

Lol i have been searching for 2 days

[warped crane]

Omg it's the same

Ty rswallen ❤️❤️❤️

[lavish shell]

This one has a button that when pressed burns the circuit board by sending sending mass amounts of electricity through it. So if USB ran on 5 volts, it would send 30 volts through the board

[loud marlin]

fair...

[boreal scarab]

https://tenor.com/view/duck-quack-squawk-squawking-honk-gif-19638612

[loud marlin]

quacky quack

[boreal scarab]

https://tenor.com/view/cat-snow-vanished-disappear-gone-gif-17222138

[shell shore]

Ay

[hidden hazel]

I hate to bring up a mood killer but has anyone lost their passion for hacking before, this has happened to me multiple times and i come back to it the work just gets tedeous sometimes and i loose enthuziasm i dont know if i should pack it up but i dont want to because i cant imagine what else id want to do its just not like how it was when i started

[molten sky]

if you spend any time programming or on the command line, that symbol will quickly become your favourite symbol

[molten sky]

take a break

burnout is a thing that exists

[lavish shell]

It sometimes comes and goes, but I always stuck with it. Even when I don't have access to a pc, I've spent hours inside of nano on my phone coding away.

[hidden hazel]

Idk i think tbh this all started when i tried to start focus on getting a job before i did it just cuz i wanted to learn now i want to get a job but i think thats wrong mindset. Before i was hungry for knowledge and i just want that feeling back tbh

[molten sky]

honestly just sounds like burnout

go outside
touch some grass
come back to thm in a couple weeks

[remote prairie]

So hi

I have ADHD

And before I got diagnosed, yeah this happened to me big time. I was doing international CTFs, I was working in pentesting, and the combined experiences, plus my inability to make myself actually practice for CTFs and resulting negative feedback loop, made me burn out HARD on hacking. I honestly thought I wasn't cut out for it.

Took a break for a few years. Actually got diagnosed. Got on meds. And then I realized that, hey, I can actually do this thing. Do I go out of my way to hack on THM, admittedly no but every once in a while I pop on and do a CTF, and I tend to stay up to date with news and whatnot. I also have a bunch of other things going on with university, so that is a contributing factor lol.

While I'm not 100% sure I could do pentesting as a job, I still try to keep my skills sharp, and I've got a security analyst internship lined up for the summer.

(Also, this wasn't just hacking I was burnt out on. School, compliance, development, a lot of shit.)

[boreal scarab]

Is today an essay kinda day?

[lavish shell]

No matter how much you learn, there's always something new to learn. Perhaps red team penetration may suit you, instead of lofing around waiting for an attack, be a pentester. Cleverly find new ways to to exploit instead of waiting for a system that's already exploited to try to create a patch for it

[molten sky]

i didn't want to say it lmao

[remote prairie]

No, I just tend to write them in response to things 😂

I regularly hit the character limit when posting on LinkedIn

[shut hawk]

this is called burnout and is totally normal

[remote prairie]

(Also I'm not saying you have ADHD, I have no idea what your day to day is like, this was just my experience)

[lavish shell]

I can provide you links for bug bounty programs that pay pretty good cash, if interested

[molten sky]

as a warning, BBPs are a good way to get burnt out as well, lmao

hundreds of other people fighting to find things first and pickings may be slim on popular programs

VDPs are often more fruitful if you want producitivty over cashflow

(bounties are great tho)

[gritty zephyr]

Whats VDP?

[hidden hazel]

No i think thats my problem focusing on it for money and jobs ive turned it into a chore instead of a hobby

[jovial cypress]

I think this is influenced by the imposter syndrome, while it is really an annoying feeling you have to remember the road that is yet undiscovered for you. Try a new field within cybersecurity or IT in general. I think we have all felt this, but we are in this together. Stay curious! :)

[hidden hazel]

Vuln disclosure program

[molten sky]

technically a BBP is a type of VDP. Just means vulnerability disclosure program. But the disctinction I meant to imply was programs that pay bounties vs those that don't.

[bitter quiver]

Man I have had ADHD since I was a kid and it always caused issues. Recently started a medication for my fibromyalgia and my anxiety and BAM. Suddenly I study every single day across 5 applications + what I do for work to build tools + gaming + watching shows finally

[molten sky]

programs that don't pay bounties will have more pickings and less competition normally

[bitter quiver]

First time in my life it's felt beneficial vs horrible

[remote prairie]

LEGIT YEAH

[gritty zephyr]

So vdp is more about just generating the report and not focusing on the money?

[lavish shell]

A job is what you're required to do to survive, but bounties are on your own time, pick and choose which you want and still keep it as a hobby, just onr that pays

[hidden hazel]

I started when i was 15 and im now 19 i think its also demotivating because cybersec is so vast u cant learn everything u always feel behind

[molten sky]

pretty much. The DoD for example has a pretty prolific VDP where sometimes they'll pay out for bigger issues but like 90% of reports are unpaid

[bitter quiver]

You have the greatest advantage of any field friend. Youth. Don't feel demotivated. Many folk trying to break into CyberSec are twice your age

[molten sky]

other than the DoD one, most VDPs have less competition because people want monies

[bitter quiver]

And anything tech related often includes a lot of unspoken "agism"

[remote prairie]

Like heck before I got diagnosed I was UNABLE to force myself to do ANYTHING

Dishes? Lmao nah
Housework? Only if my roommates reminded me endlessly
School? Thought I was gonna have to drop out
Work? Ha, between the ADHD and having ZERO interesting things to work on I was like the least productive person ever

[gritty zephyr]

You cant be an expert in everything, it is so vast, just learn what suits you and try to stick to it

[molten sky]

Also, if you're participating in VDPs on sites like Bugcrowd or H1, they can lead to more/better invites to private bounty programs down the line which have less competition as well

[gritty zephyr]

Thanks for the info!

[twin ridge]

Gave +1 Rep to @molten sky (current: #77 - 78)

[jovial cypress]

Yeah, its the imposter syndrome. Its when you feel like you have learned a lot, but there is still infinitely much to learn. As much as we all hate this demotivation, we have to hit it with all our might and move past it. You have been learning this for years now, you are the prodigy. I believe in your strenghts, you can do it!

[molten sky]

movin up in the ranks

[remote prairie]

I'm also usually more quiet about it because employers are uh . . . not the kindest folks to those with ADHD, to put it nicely.

[bitter quiver]

Eh, you learn to cope. It's nothing worth talking about.

[hidden hazel]

Tbh i probably have adhd but over time ive just sort of had to force myself to live with it im not diagnosed but i do find it hard to cocentrate or get things done i just have to force myself and i went from a very lazy person to a pretty productive one

[molten sky]

at most maybe ask about flexible hours but i wouldn't ask for like accomodations or otherwise mention it (personal opinion)

[bitter quiver]

I have stress jobs when I technically have anxiety/depression/adhd/few injuries/headache condition.

None of it is allowed to impact me, so I don't mention it.

[molten sky]

some companies don't mind flexi

[bitter quiver]

Exactly, other ways to set yourself up

[gritty zephyr]

I wouldnt say it isnt worth talking about, but it is something that you just have to deal with

[remote prairie]

I feel like there's a level of nuance in the sense of "What do I need to do my job?"

[bitter quiver]

Many folk make it their "identity" though

[molten sky]

isn't worth talking about as in it's not worth trying to get special treatment for it

[bitter quiver]

At work. Had a dude call off because his finger was hurting, the other manager looked over at me who was working 1 handed in a cast and laughed lol

[molten sky]

also wouldn't mention it during interviews/hiring

[bitter quiver]

We work on laptops

[jovial cypress]

Remember that you dont have to overdo stuff. Take a break just for yourself - a week, a month perhaps. Come back to it when you feel like it. When you return, you will feel more free and maybe regain the motivation. :)

[bitter quiver]

Dude called off for a sore finger

[gritty zephyr]

Yeah good point, if its bothering you this much maybe seek a therapist 🙂

[remote prairie]

And honestly some accommodations can be beneficial for everybody, not just ND folks

[molten sky]

it's my typing finger!

[bitter quiver]

I agree and I tell some employees to get accomodations.

But there is a real reason for it, and then there are...well people who don't fit well in a team that desires success

[gritty zephyr]

I can tell you most IT peeps are ND and still make it work regardless, not trying to invalidate anything here

[molten sky]

tf is nd

[gritty zephyr]

Neurodivergent

[molten sky]

the only nd i know is negligeent discharge

[bitter quiver]

"Neural DIvergent" it's a new trend word

[molten sky]

ugh

[bitter quiver]

It doesn't exist

[remote prairie]

Wait what

[molten sky]

why do we keep making up words

[bitter quiver]

ADHD isn't ND. We just had to get hit a few times more as a kid to listen.

How we roll

[spice adder]

neurotically spicy ⭐

[remote prairie]

. . . Dude, our brains are literally wired differently are you shitposting lmao

[bitter quiver]

No I'm not. I learned to use it to my advantage and grow within companies.

[gritty zephyr]

How are you coping with the trauma my dude XD

[lavish shell]

Everything in this world is made up.

[bitter quiver]

Technically, I'd say very successfully.

[gritty zephyr]

Great 🙂

[molten sky]

not denying the existence of things, just that the constant changing of language because words hurt people every 3 months gets old pretty damn fast

[shut hawk]

Everybody is unique in their own amazing way

[molten sky]

the underlying cond is obviously a real thing

[gritty zephyr]

But yeah just try to make your own brain work with you instead of against you in whatever way possible

[lavish shell]

That hurts, could you rephrase that? 😂

[bitter quiver]

I use specific music with isochronic tones, avoid certain stimulants, use other stimulants, meditate, and manage serotonin addiction.

Most people who have ADHD want to do nothing to moderate it is all

[wintry sluice]

weird. I just use music that sounds awesome

[grizzled crystal]

Gosh darn kids with their neural networks and neural divergents grrr

[molten sky]

honestly most people i know opt for caffeine before anything else

[gritty zephyr]

Cancel culture is a pest imo and im pretty damn left if i dare say so myself

[molten sky]

trying to avoid medicating

[gritty zephyr]

Ai is stupid XD

[wintry sluice]

I do like the caffiene...

[molten sky]

not 100% sure what you're saying but i think we agree

[grizzled crystal]

I think that's a huge generalisation. What do you mean by moderate exactly? 🤔

[gritty zephyr]

That everything you say can hurt people and people think thats not politically correct because of that, ypu cant please everyone lol

[molten sky]

oh yeah we 100% agree then