general

[molten sky]

like holes in the bottom worn out

[finite basalt]

Yeah but my running shoes always fall apart so damn quickly

[molten sky]

couldn't live without em. not tryna walk through 6-8" of mud in vans

[finite basalt]

Like the front toe bit always starts to peel, the heel wears and the underlying fabric starts to show where the toes bend

So I feel like something without the front toe and a proper fabric will last a bit longer potentially, I never have issues with the soals

Soles*

[molten sky]

inverse exp

my brooks are solid tho. not planning on even trying another runner. very comfortable + some good impact absorption

[fading perch]

guys,
how to get email extension @dawn bronzecom

[finite basalt]

That's fair man

[finite basalt]

Buy a domain and set it up for email

[fading perch]

doesn't github provide email services?

[finite basalt]

Not that I know of

[simple valve]

Github gives you email aliases

IIRC

something something hide primary email something

[finite basalt]

Yeah I really should invest in Timberlands so I can get away with saying I'm 5'10 and put the 5'7/5'8 in the small print

[finite basalt]

I thought that was specifically when putting issues etc. down, it's not a full email alias

[simple valve]

i dont remember. been a long time since i used github but that checks out

[molten sky]

afaik the only aliases github gives most users is their anon one -- but that's not a pretty "jdoe[@]github[.]com", it has a fuckton of random numbers of nonsense too

[molten sky]

yeah don't believe you can send from it, just a relay

[molten sky]

ehm, tims or tim pros

[gray sonnet]

Morning

[molten sky]

m

[gray sonnet]

how're you doing today?

[molten sky]

less productive than i had hoped but not unproductive

i need to reset --- it's 2am and i'm wide tf awake

[gray sonnet]

sleep 👀

just close your eyes and relax

[molten sky]

can't

too much stuff needs doing

[gray sonnet]

👀

reset == sleep

[molten sky]

reset == don't sleep tonight so that i can go to sleep at a normal time for once tomorrow(/today) and have a normal sleep schedule again

[gray sonnet]

makes sense

coffee 👀

[molten sky]

already wide awake tho

[gray sonnet]

I mean after

[molten sky]

well yeah, religiously

[gray sonnet]

yes

[chilly veldt]

I have messed up my sleep schedule

[finite basalt]

It's 7:30 am and I've failed to sleep yet

I may as well wait till 8 so I can call the bank

[chilly veldt]

I went to sleep at 10 am yesterday and woke up at 8pm, been awake since then 😄

[sick lance]

Bank is open on Sunday?

[finite basalt]

For calls yeah they're available 24/7 with mine

[steel aspen]

Facebook marketplace scams making their rounds again

Feel like I should let people know around me but think they know if it's too good to be true it probably is

[wraith fjord]

Guis

https://tenor.com/view/bruce-almighty-morgan-freeman-i-am-god-hello-hey-gif-4743445

[chilly veldt]

gg

[lavish star]

morning guys

[bleak moat]

morning bois

[rapid merlin]

How to find an SSID from BSSID?

[bitter apex]

in my website what data should i be basing my auth token off of? should i use the username or smth like a uuid?

[molten sky]

for the record, usernames can be uuids

i never liked doing it that way tho

shouldn't auth tokens be fairly random

[chilly veldt]

yup

[molten sky]

unless you're seeding with the uuid ig idk 🤷‍♂️

[bitter apex]

so should i be randomly generating it then storing it alongside the users data in the db

and also giving it as a cookie

[chilly veldt]

I would go with a session instead tbh
https://www.geeksforgeeks.org/session-vs-token-based-authentication/

[sick lance]

Lumpy porridge, 4/10

[molten sky]

not a web dev so don't take anything i say as gospel btw lol
should it really be stored at all?

should be short lived for the sesh

[chilly veldt]

why store tokens?

[molten sky]

i was imaging session this entire time lol forgot they were different

[bitter apex]

wait im talking about session tokens my bad

[molten sky]

sorry?

[chilly veldt]

you don't store session tokens on client

[sick lance]

I'm eating lumpy porridge, it's 4/10.

[bitter apex]

i thought you do on cookies

[molten sky]

what's the difference between porridge and oatmeal i forget

[molten sky]

nvm

But the main difference between porridge and oatmeal is that porridge is made with a variety of whole grains, cereal or legumes, and oatmeal is made with oats

[chilly veldt]

that's just a key

[bitter apex]

oh so do you store the key on the clients cookies, and the session token on the servers db

[chilly veldt]

the cookie stores id, generation time and expiration time

and the server validates this and logs you in if it isn't expired

[molten sky]

|| wait til you start with anti csrf toks ||

[chilly veldt]

wait till you hear about certificate based
https://www.geeksforgeeks.org/what-is-certificate-based-authentication/?ref=ml_lbp

[bitter apex]

yeah currently im using jwt.sign() with my secret key and the username of the user to generate one, then i pass it to the client to store as a secure cookie with 10 days expiry and then when they send a request i decode the cookie, i get the users data from the decoded username

[chilly veldt]

ewww, not jwt

[bitter apex]

what’s the better alternative

[molten sky]

sounds like what the district here used for their transparent proxy on student/faculty machines back when they didn't hate dealing with proxies

[chilly veldt]

let me introduce you to php

[molten sky]

as much as php annoys me, php.

[chilly veldt]

https://dev.to/codeparrot/jwt-vs-session-authentication-1mol

[sick lance]

I best hurry and re-new

https://x.com/vxunderground/status/1794415129334829260

😂

vx-underground (@vxunderground) on X

When Mark Russinovich and Co. begin writing the next edition of Windows Internals

Twitter · May 25, 2024, 5:08 PM

[bitter apex]

oh right, so is the main advantage that you can invalidate any users session if needed and it’s more safe from XSS attacks

[chilly veldt]

basically, yes

[bitter apex]

ok cool thanks imma try implement that

[timid prism]

reset = sleeeeeeeeeeeeep

[molten sky]

TypeError

[timid prism]

skill issue

i get my sleep during holidays

the extra 1 hr sleep

u shd sleep too

[naive violet]

@bitter apex JWTs are fine.

Storing a JWT as a cookie as basically as safe. Keep the lifetime short, keep it httpOnly

Renew it

Short being like 5mins

[bitter apex]

imma try php anyway

[naive violet]

That is not a good thing.

PHP is not an alternative to JWTs

[bitter apex]

how do website keep you logged in then

for days

[naive violet]

PHP is a backend language. PHP can do JWTs yoo

I didn't say it was impossible

I said it wasn't a good thing

You'll quickly learn that user convenience is prioritised over security, and that leads to loads of security issue

[bitter apex]

yeah true

but if i do php can i hold the cookie for like 10 days and if they go back on the website i can refresh the session identifier

[naive violet]

You can do that with JWTs

You can do that with JWTs in PHP, or Node JS, or Python, or Ruby

Do you mean PHP session storage? That's nothing special really

[bitter apex]

yeah i kinda just wanna try it for practice as well

[naive violet]

Don't rebuild your app in PHP just to get a basic key-value store

[bitter apex]

doesnt express have some kinda session thing as well

[bitter apex]

so does this mean that imma have to refresh the jwts every 5 mins

[naive violet]

I think so

I'd recommend that

Defense in depth, minimises attack window for a bunch of stuff

[bitter apex]

if i do that then i won’t be able to keep users logged in hm

ig it’s a trade

[chilly veldt]

well, they will still be logged in if they keep the session open

[bitter apex]

yeqh but like between days

[naive violet]

Again, that isn't a good thing.

https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html
This doesn't include JWTs but it's important

Also oauth2/oidc is super easy if you want to offload almost all the authentication stuff

[bitter apex]

yeah ofc imma prolly just login with google on my acc website

but just for practice i wanna try sessions

[simple valve]

wouldn’t that be harder to implement, security-wise?

[naive violet]

Huh?

I have no idea what you mean

[simple valve]

Building an OAuth flow versus using your own framework’s session management for authentication

[naive violet]

Use a trusted library?
But oauth/oidc with external identity providers means you don't implement the authentication

Don't make your app an identity provider

Let Google or Microsoft or Github or Twitter etc do all the heavy authentication lifting

[simple valve]

Yeah you could def do that but one wrong implementation and you could be leaking OAuth tokens for user PII against those providers.

[naive violet]

The whole point is that the tokens aren't for the platform, they're only acting as the identity provider

This goes back to what I opened with anyway. Use a trusted library.

OIDC definitely works this way at bare minimum
https://www.microsoft.com/en-us/security/business/security-101/what-is-openid-connect-oidc#:~:text=OIDC stands for OpenID Connect,information without compromising user credentials.

[simple valve]

I get that, but it doesn’t necessarily mean the flow would be robust too. But it is true that Oauth type vulns may need some other type of vulns to also be viable.

[naive violet]

The tokens aren't valid for the idp, there's no way you can trace them back

This isn't like the Teams exploitation with Microsoft graph

You just ask for the right set of claims etc

[simple valve]

Do you mean like logging in on the IdP like Facebook for example?

[naive violet]

You authenticate with the idp, and the idp tells the app only the info that is in the scope

The app doesn't get a token that's valid for your, eg, facebook account

[simple valve]

Oh yeah definitely

[naive violet]

So this ain't a thing

[simple valve]

This is still a thing though. https://hackerone.com/reports/665651

[naive violet]

Isn't that the idp?

[simple valve]

Its not necessarily an issue with the IdP but with the OAuth flow itself of the application

[pallid lotus]

The example there is with the IdP not verifying the redirect URL

[naive violet]

You register the redirect URLs with the idp

I've set up a bunch of them

Why would someone like Facebook, Google etc open themselves up to a scenario like this?

It's in their interest to prevent malicious applications

Even then, the token issued doesn't allow control of the Facebook account etc unless you scope it for that

OIDC and Oauth are pretty well thought out

The oauth token goes to the attacker and then the attacker can use it against your application? That's basically the scenario.
No PII leaked except what you're requesting and storing

[simple valve]

Isn’t that the PII leak itself? Gaining access to someone’s account. I did not mean PII leak in terms of IdP but PII leak generally. Gaining access of someone else’s oauth token already allows for PII leak.

[naive violet]

It's a misconfiguration in the IDP there though

[simple valve]

Yes yes definitely

[naive violet]

But we're talking about the end app

Jeez, absolutely do not build an IDP yourself

Authelia/keycloak/etc for that, even AD Federation

Aws has some interesting stuff in cognito

[lone thistle]

might be thinking of robocopy? Windows is fine with large file transfers, just not via GUI/Windows explorer in my experience (especially over shares, etc)

[naive violet]

It's large copies of small files that really suck

Big files are fine

[lone thistle]

yes^

[naive violet]

Robocopy is really nice

[pallid lotus]

Depends what's in the token (and the token type) as well. An access token should never store user info. A client token should never store sensitive user info. If the IdP returns a token containing sensitive info then that's something which can be reported on, yes.

The issue there is that client tokens are designed to return basic user info (username, first name, last name, email, etc).

[shut hawk]

That's the one!

[pallid lotus]

I say "issue" -- it's not really an issue any more than if an API returned the same information, as the client token is only meant to be used by the client, e.g., to fill in information for the user's profile. It shouldn't be sent elsewhere, etc.

[naive violet]

I've had weird smb issues where copy failed but robocopy just did it

Can't remember the scenario aside from it being some real hacker nonsense

[pallid lotus]

Only becomes an issue if you can intercept it (and yes, an open redirect in this instance could potentially do that)

[naive violet]

(Which is why the idp makes you register the redirect URLs and enforces them)

It's really worth messing around with these solutions, Oauth2-proxy is good fun

Run some stuff internally, run a keycloak or AD Federated Web Services or whatever

[shut hawk]

Ooo raindrop.io got some AI feature now, hopefully able to help cleanup my tags a bit more

ok listen it's either that or I manually sift through them (~1K) and I don't have the time for that

[lone thistle]

yeah bun that

[naive violet]

Yeah somewhat

Spf - what IPs can send email for this domain
DKIM - public key cryptography to make sure emails are authentic
Dmarc - what to do with emails that fail spf or dkim

Is there a more specific question that I can help you with or were you just after an ELI5 of them?

Not exactly for "outbound" email, it's enforced by the recipient but the policy is from the sender

[bitter apex]

how do you implement the jwt refreshes? do you create a second refresh jwt with a longer expiry and when the first one expires you use that refersh jwt to generate a new normal jwt?

[naive violet]

Just give them a new JWT with a new expiry?

[bitter apex]

yeah but then they have to login every 5 mins surely

[naive violet]

No?

It's an authenticated session, you just update the cookie

SPF, DMARC, and DKIM are all for spoofing, not for spam

Granted spammers might not set them up, or they might spoof, but...

Arguably it's in the spammer's interest to have valid spf/dmarc/dkim anyway

[lament tendon]

Dunno whether you thought of this yourself, but refresh tokens are actually a thing.

[bitter apex]

but for me the cookie is the only thing that allows the user to stay logged in

so if it expires theyd have to login again

[naive violet]

I don't think they're particularly good in this case, seeing as the refresh token is dangerous to leak

[naive violet]

You update it before it expires?

[bitter apex]

but how do u know its gonna expire

[naive violet]

Because that's in the JWT?

That's the "exp" field

[lament tendon]

You check the expiration time stamp of the token with every request, I suppose. And if it is about to expire, set a new one.

[bitter apex]

so if u dont request for 5 mins ur gonna have to login again

[naive violet]

So you write some JS to make sure it gets renewed, and you can even implement idle timeouts there

[bitter apex]

so to make sure its renewed before the 5 mins is up imma have to implement some timer

[naive violet]

The main thing this works to prevent is reusing a token after the user logs out

[naive violet]

In JS, trivial.

[bitter apex]

yeah

[lament tendon]

Every token is dangerous to leak tho.
If someone gets their hands on a normal JWT in your case, they can theoretically stay logged in forever, no?

[chilly veldt]

I added tahin to my noodles, tastes amazing

[bitter apex]

yeah true cuz the JWT is based off the user id

[naive violet]

Yep but the 5min window minimises the likelihood, hence reducing the risk.

Session tokens are also the same

[bitter apex]

currently every jwt made for the same user is the same, so i should prolly change the secret each refresh

[naive violet]

Nope.

The exp should be different

The iat should be different

[lament tendon]

And with a refresh token you reduce the risk by not sending the refresh token with every request and attackers being locked out after a few minutes when stealing the normal token. IDK, I don‘t see one being particularly better then the other.

[naive violet]

You can add jti if you wanna be fancy

[naive violet]

So you can't store the refresh token as a cookie or it'd get sent every time
So you have to store it in sessionstorage or localstorage where it's immediately stealable with XSS

[lament tendon]

Plus refresh tokens will still require you to input a password every few hours instead of minutes and not keep you logged in forever.

[naive violet]

A proper refreshing JWT implementation doesn't make you enter your password every few minutes

[bitter apex]

oh ofc

[naive violet]

The session doesn't just remove itself

[lament tendon]

That‘s not what I mean.
When the JWT refreshes itself, you don‘t need to enter your creds again at all, unless the server implements specific logic that blocks refreshes after x times.

[naive violet]

Yep even without the refresh token pattern that's true.

[lament tendon]

With refresh tokens you would need to log in again after a day, maybe a week, up to the dev.

And an attacker would get locked out after that time, because a refresh token should not refresh itself.

[thorny bobcat]

👍

[bitter apex]

so if u go off the website for loinger than 5 mins then it logs u out

[naive violet]

Which is a good thing

[bitter apex]

yeah

[naive violet]

You can go up to 15 etc

[bitter apex]

but its only a game website so im thinking refresh tokens are more the play

cuz i feel like user experience > security of their account

cuz whos gonna wanna get access to it

[lament tendon]

I‘d argue refresh tokens are not less secure.

[crude stump]

Bad people

[bitter apex]

noo not my daily streak

[lament tendon]

It might just be easier to implement with the solution Ninja suggested, however.

[bitter apex]

but i wanna be able to keep users logged in for a week

[lament tendon]

And obviously require less manual logins.

[lament tendon]

You can do that with both solutions.

[bitter apex]

yeah ig

[naive violet]

I'd recommend offloading authentication to like oauth for that.
Session for your application ends but they just click on sign in with $PLATFORM

[lament tendon]

When the token refreshes itself tho, expiry times will be atrociously long.

[lament tendon]

Also a very valid approach.

Plus pretty secure, 'cus now e.g. Google will now handle the authentication part.

[bitter apex]

yeah but with the other solution the actual token itself will have to be long

[lament tendon]

You misunderstood, I was talking about that exact case.

[bitter apex]

ohh yeah

[naive violet]

Don't leave sessions alive for a week

Just... So many issues with that

[chilly veldt]

looks at netflix

[bitter apex]

yeah i get that but i think for my website cuz its just really ur game stats and i dont really think it matters

[naive violet]

Game stats? See if the game platform offers a developer API with oauth

[lament tendon]

Anyhow, I will go look for a nice café to work in now.
See you guys around. ^_^

[bitter apex]

its my own game

on the website

[naive violet]

Do you reallt need authentication then? You just let them enter a username to lookup their stats

[crude stump]

Is that why I get signed out of some websites if I don’t log in for a long time

[rapid merlin]

@queen dune hai

[blazing stone]

guys... i found the dumbest way to fuck a pc... but its fucked

windows didnt think this through 💀 like they thought about it but then didnt

im baffled

[flat sky]

Heyyy, can ask for sum help? From any python coders?

[bitter apex]

do u have to pay to implement a sign in with google

[flat sky]

So basically, one of my family relatives got her house broken into, and then they put there rubbish in [her] skip; I want to make a py-program/bat, to find out who the person is (since, the persons face did flash in the cam. And it was *night.)
*Black and white cam since night.
So any tips or code to make this possible and easier to report to the police I would greatly be thankful!

[hardy orchid]

i swear the attackbox things are so buggy lately

[flat sky]

Innit

[sick lance]

Why not just give the footage to the police and let them do their job?

[hardy orchid]

i mean either it refuses to launch or refuses to load after it launched

[flat sky]

Because, my family is threatened and the police don't do nout' unless there is more evidence

[sick lance]

Then what do you expect to do if you find who they are?

[naive violet]

You won't be able to get the dataset you'd need for facial recognition either...

[sick lance]

This is more than likely also false.

[flat sky]

Ikik...

[flat sky]

It's not, the police where i live don't care unless they have face/name or proof of them, and on the video all the police will do is wait. Whilst I will get data and report it with Proof. I just don't have a py data or programs to get all the data i need for the file

[sick lance]

As James said, I doubt you'd get it.

[flat sky]

Ik.

U just gatta at least try yk

[sick lance]

You can try, I'd ask you don't ask for help in this server however.

[rapid merlin]

Any madam

[crude stump]

Is is with you and trying to find a girl in this server

What

[hardy orchid]

funeh

[sick lance]

Can you please stop asking for women in this server please.

[rapid merlin]

No

[rapid merlin]

Ok

I have a small question that way I will ask

[crude stump]

Also scrub check @ justmahirs description

[sick lance]

What is the question.

[sick lance]

It's a movie quote from American Psycho.

[crude stump]

Ah

[rapid merlin]

No its c++

[crude stump]

I see

[sick lance]

Then ask the question in #programming you may get help in that channel please.

[uneven yarrow]

Is there a way you can see how many points a room will earn you?

[sick lance]

No, but this could be a good addition to the over all experience, I'd suggest you use #feedback-and-ideas

(although the age of the room may dictate the points)

[uneven yarrow]

sweet

[static bolt]

Well, you kind of can derive it from API...

[sick lance]

Api isn't documented for member use though.

[static bolt]

I even remember making JS script to find the rooms for cheese

[pallid lotus]

Does it need to be?

[static bolt]

when did it stop anyone?

[rapid merlin]

Ok

[naive violet]

By counting.
30pts/q for a challenge, 8pts/q for a walkthrough

[sick lance]

No, but members probably don't know how to use it though.

It's stopped plenty of people I'm sure.

[pallid lotus]

As damning a feedback for the usefulness of the content as ever I've seen lmfao

[bitter apex]

do u have to pay to implement a sign in with google in a website

[bold dawn]

you can probably google that pretty easy

[sick lance]

Plus, I'm sure Tim has asked people/person(s) to stop before.

[naive violet]

No

[naive violet]

As long as it's in line with the terms of the bug bounty program/tos, they can knock themselves out on it

[tall yew]

Hi

[pallid lotus]

I mean, you can't expose an API as part of your service offering and then tell people not to use it 🤷‍♂️
It's literally the backbone of the application

[ashen condor]

hiya does any1 here have a broadcom account?

[sick lance]

Yeah.

[pallid lotus]

Could arguably make it a ToS breach to connect to it using unapproved clients (i.e., anything that isn't the web frontend), but that does absolutely nothing to prevent people from using it to their own ends.

It's also very much against the spirit of "hacking", and guts the bug bounty programme. Surely you would want to encourage your students to practice responsibly in a real environment

[naive violet]

Pretty sure it's self-sign-up for broadcom?

[sick lance]

Yup!

[ashen condor]

im unable to create one do you mind sending me the vmware workstation installer?

[sick lance]

Why cant you create one?

[ashen condor]

the problem is the website is an indecipherable maze and i keep running into one error after other

[ashen condor]

idk why whenever i create one it makes me manually log back in and when i do it gives me an error

it's incredibly frustrating

and I cant even ask for support cause it just redirects me to it's homepage

it's a clunky bloated mess

[sick lance]

Look up at my previous messages, I've sent a direct link and screenshot of the version needed.

[ashen condor]

cheers mate

ugh it makes me sign in I'll try to create another account

[static bolt]

Try to use different browser and/or proxy, changing something might help

[ashen condor]

perhaps

I'm just baffled by why they migrated from a perfectly functional site to a half assed one

[shut hawk]

Are you trying to download VMware?

[ashen condor]

yep

vmware workstation

atp it doesnt even seem to be worth it lmao

[shut hawk]

Hold on, I'll spare you the hassle

[ashen condor]

❤️

[shut hawk]

Here you go

Slightly older version, but it'll auto-update anyway

[blazing stone]

oh god i accidently deleted my desktop

[static bolt]

how?

[blazing stone]

IDK

[ashen condor]

cheers

[blazing stone]

its just missing

[ashen condor]

ur a legend

[naive violet]

This is why you use VMs for messing about

[blazing stone]

it is a VM im fine

its just interesting

[naive violet]

Revert snapshot ezpz

[blazing stone]

i never made a snapshot 💀

[static bolt]

then use your custom image with everything setup

[pallid lotus]

Well, lesson learnt

[blazing stone]

i dont have that either-

but its just a fresh windows install

just takes forever to get another T-T

[pallid lotus]

How'd you delete your desktop on Windows?

[blazing stone]

IDKKKKK

ill show the error

some file is just missing

i didnt even delete any files

[pallid lotus]

Windows. The operating system which throws a hissy fit if you uninstall a freaking web browser.

[blazing stone]

well ye but

apparently it doesnt care if you delete important things

[pallid lotus]

@mossy river y'all switched away from Stripe entirely, right?

[blazing stone]

that file is apparently gone

so now it looks like this 🤣

[ashen condor]

been using win11 ltsc for a week now it's rock solid im pleasantly surprised but then again ltsc hasnt let me down in years I'd check that out if i were u

[shut hawk]

well....that's still usable I guess 😂

[blazing stone]

its not

the taskbar is purely cosmetic

[shut hawk]

oh

lmfao

Where did you get the iso from?

[blazing stone]

wait IT IS usabel

but i have to use windows r to start stuff

lol

cuz explorer is kind of broken too

[blazing stone]

oh it was normal

[shut hawk]

is explorer.exe running

[blazing stone]

it is

[shut hawk]

Could check event viewer

[blazing stone]

xd i wonder what happens if i end explorer

cuz like

its already gone

ok now its all gray

fair

well restarting explorer gave me my desktop shortcuts back

its funny lol

[rapid merlin]

Hi yall

[near hawk]

New role I see 👀

[rapid merlin]

Yeah true, omw to the 0xD

But with mostly walkthrough rooms it lasts some time

[blazing stone]

still triggers me that E and F isnt a thing 💀

[rapid merlin]

Yeah imma do a suggestion in #feedback-and-ideas

Or is there a specific reason there are no E and F?

Maybe they should be something like 25k points and 30k

[loud marlin]

https://tenor.com/view/coffee-koala-coffee-time-cute-caffeine-gif-20268883

[rapid merlin]

Hello Im in the intro to offensive security course some commands arent working like 1s

or the passwords they give me

Nmap done: 1 IP address (1 host up) scanned in 1.83 seconds
root@ip-10-10-6-82:~# ftp 10.10.199.195.
Connected to 10.10.199.195.
220 (vsFTPd 3.0.3)
Name (10.10.199.195.:root): anonymous
530 This FTP server is anonymous only.
Login failed.
ftp>

the anonmyous command is supposed to work

[naive violet]

There shouldn't be a dot at the end of the ip

But please use #room-help

[loud marlin]

fraaack... i overlap two models on 3d printer and now they are printed as one thing =/ so 5hrs in waste

[rapid merlin]

that worked thanks

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2141)

[rapid merlin]

sorry im new I just joined

[loud marlin]

tou can #start-here . also might be ok to verify to have full access into things

[bitter apex]

how do websites normally handle if an account already exists with an email, but then they try to log in with google using the same email?

do they just log into the same account cuz their emails are the same?

[ashen condor]

it'll probably return with an email already registered error

[naive violet]

https://book.hacktricks.xyz/pentesting-web/oauth-to-account-takeover

[crude stump]

I love the internet

[bitter apex]

oh so the email account needs to be email verified, and then if it is the OAuth will just link back to that account

makes sense

what if its the other way around

if youve logged in with google and try to make an account then itll just say email already registered

[crude stump]

For a task I was looking for when a powershell downgrade attack happened. first I used trusty mitre for the event id. Then I was looking through the logs but I didn’t really know what I was looking for. Mitre said to look at the processes it’s created and the powershell versions and that’s exactly what I did. So fun

[bitter apex]

nvm

[rapid merlin]

Mitre has a special place in my heart

[crude stump]

So helpful

The people that add new vulns and stuff to it are awsome

[rapid merlin]

True

[mossy river]

Day 1 with no caffeine, so sleepy

[chilly veldt]

hour 5 (or something) with no nicotine

can't focus on work, my brain needs stimulance

[crude stump]

Chew nicotine gum

[chilly veldt]

Went to get snus

[loud marlin]

do some pushups and so to get some adrenaline and so

[crude stump]

yes

[loud marlin]

situps also

or whatever is english word

[chilly veldt]

Got plenty of adrenaline, just can't focus

[crude stump]

does music help

[sick lance]

You can do this! 💪

[bold dawn]

you got this

i'm almost 2 months

[crude stump]

Drink tea jabba

Atleast it’s not bad chemicals

[bold dawn]

that had caffeine

[crude stump]

Yeah

I mean caffeine isn’t bad in small amounts

[bold dawn]

@mossy river find something with B vitamins. Helped me quit

[sick lance]

Depends if Jabba is going cold turkey or not.

[crude stump]

It’s just the Red Bull is filled with chemicals

[crude stump]

True

[near hawk]

Just drink water for the energy

[crude stump]

Like I’m drinking coffee right now

It’s not the best tho

[bold dawn]

eat some feuits

[crude stump]

Water on top 🔝

[bold dawn]

great

[crude stump]

Favorite fruit Darek?

[gray sonnet]

Hey there THM 👋

[bold dawn]

pineapple

[sick lance]

A pineapple, the fruit the eats you back.

[crude stump]

Yall seen pineapple under a microscope

It’s like tiny needles

[near hawk]

Kiwi is my favourtie fruit

[crude stump]

Kiwi is good

I looovvvveeee apples

[sick lance]

I love putting apples in my chicken nuggets.

Yup, you heard that right.

[eternal heart]

hi

[loud marlin]

when you watch to much of horror movies and then you meet girl named Carrie. frack

[crude stump]

Oh my

[chilly veldt]

when you know you've taken on a biiiiig project

this is going to be fun to finish soon™️

[rapid merlin]

Good job :)

[loud marlin]

zipping 64gb of pdf's with 30mb speed =/

[rapid merlin]

HI world and officials , I just have a question .. Does is it hard to make a OS that works and survive themselves ... Any GUIDE to make a OS + ARTIFICIAL Intelligence + botnet + CYbersecurity + rescource montinoring and helping people by themselves and maintain peace in furture ... IF we combine all this software and make a program that works on my system and help humanity ..

[sick lance]

Why would you need a botnet? 🤔

[rapid merlin]

i need only guiidlines and discussion about it nothing else

[sick lance]

In order to have that discussion, I'd like to know why you want something that can be illegal.

[rapid merlin]

its not illegal ...

[sick lance]

If you create a botnet without the owners permission, yes it is. 🙂

And the most use case of botnets is also illegal.

[rapid merlin]

What's your defenition of botnet then?

Maybe ur thinking about something different

[loud marlin]

that was also mi toight. wrong definition

[rapid merlin]

botnet is a like for me group of computer that is infected by my program and they monitor all resources and all working all around the world and they activate themselves when user types something illegal or do something illegal ..

[chilly veldt]

why is this so haaaard

[sick lance]

"infected" is a suspicious word there.

[chilly veldt]

I keep running into learning opportunities

[loud marlin]

the infected part is issue as scrub says.

[sick lance]

This is bad idea from the get go, and I'd be surprised if anybody would let you "infect" them

Please don't ask in this server.

[rapid merlin]

got up

sorry

[chilly veldt]

Scruuubz help me, I don't know kotlin or enough in android development to solve this

[sick lance]

This server is for TryHackMe, a website which is dedicated to teaching Cyber-Security in ethical and legal standards, methods..

[loud marlin]

if you pc or so is infected without you knowledge or you didn't alloved is illegal

[rapid merlin]

as i think hacking is a art . THe things we read or see is just a part of our imagination ..

Nah, the last part no

[loud marlin]

you can make you own os and so what you stated. the botnet is illegal

[sick lance]

It's an art, but must be so legally and ethically.

[rapid merlin]

ik can u tell me any book

im working hard on C

[loud marlin]

you can buy/rent servers and so to have that thing in larger power and so. but botnet is not legal

google

[rapid merlin]

i have a question CAn i build my own hardware server

it seems excited ..

[sick lance]

You can build your own server very easily.

[rapid merlin]

Of course that's possible

That's the way I became interested in computers / cyber

[crude stump]

Virtual box?

[rapid merlin]

I built my own pc

[sick lance]

VB can be used, yeah.

You can create a "virtual" server on your laptop.

That's what I done for my AD network.

[rapid merlin]

are u in windows or linuxc

Windows as daily

how

But there are many people who use Linux as daily

u have to purchase it i think

Yes

if u build ur own system

[crude stump]

Usually your computer comes with windows right

[rapid merlin]

Yep

[sick lance]

Usually.

[rapid merlin]

Self-built, no

lmao i dont have money ...

[sick lance]

You can buy hardware which don't have an OS, or created pc's.

[rapid merlin]

i am out of money here ..

[rapid merlin]

what made u interested in digital forencis

i think u are like me ..

[sick lance]

I like both Red and blue team.

Blue team because I like peicing together the narratrive and means for criminals doing what they do.

[rapid merlin]

i like both too but interested in foreincs science

i have reading a article about hacking in ToR and some people has installed some hardware on keyboard that collect every key stroke .. how to detect them ..

[sick lance]

AV is a good way to detect them, assuming they're in the database.

[rapid merlin]

nahhh they use hardware not software and creates a funnel through ur system

[shut hawk]

ubuntu 24.04 install setup kinda fire

[rapid merlin]

The traffic for that has to go through your computer. (Assuming they just sell the keyboards) So there is a high chance something / someone detects it

yeah when i see that stuff it made me worried did someone is seeing me through my keyboard and my private life ..

True

[rapid merlin]

Last help before i got to study

Go ahead

suppose we have a wireshark can we add wireshark and load a script into it to break firewall of any system ..

[sick lance]

[rapid merlin]

and how to create own defensive system i read all books available online ..

[sick lance]

This isn't what Wireshark is used for.

[rapid merlin]

wireshark is hard to understood

[rapid merlin]

You got me confused

[crude stump]

Wireshark is for monitoring traffic

[rapid merlin]

does its possible

[crude stump]

And blocking traffic

All kinds of stuff

It’s more used as a blue team tool.

[rapid merlin]

we can attach a script of data frames and try to make a digital signature ..

[sick lance]

Wat?

[rapid merlin]

Yeah it can't block traffic right?

[fast inlet]

wireshark doesn't do IPS stuff

[sick lance]

Nope.

[crude stump]

I’m thinking of zeek then

[fast inlet]

neither does zeek lol

[crude stump]

Hm

Nvm

[rapid merlin]

Snort

[fast inlet]

snort / suricata

[crude stump]

Ignore the blocking traffic part

[rapid merlin]

u all are confusing me i think i have too again start with OSI model

[crude stump]

Sorry

I’m confusing you

[sick lance]

Start with the fundementals, you seem entirely new to this.

[plush sierra]

hello, I can't use the code I received because I have a £5 reward because I used a link from my friend to sign up, how do I please? (I've spent 3 hours on it and I can't do it)

[rapid merlin]

i am not new

[sharp citrus]

@rapid merlin

TryHackMe's Website

You should know our website by now!

​

https://tryhackme.com/

TryHackMe Socials · May 26, 2024, 3:33 PM

[shut hawk]

@rapid merlin Wireshark is just a piece of software for monitoring network traffic, that's all

[plush sierra]

please ^^

[rapid merlin]

can we upgrade them for our purposes just as all defense agency do ...

[shut hawk]

The $5 is a discount for a premium subscription, and should be applied automatically to your credit

[rapid merlin]

No...

ok

You have other tools for that kind of things

name them

Depends. What do you want it to do?

[plush sierra]

I'd like to buy the premium, it has to “enter the coupon” but when I put it in it's invalid.

[rapid merlin]

u tell me tools

[fast inlet]

is that where the name comes from? lol

[loud marlin]

that's the only thing that give it name

[crude stump]

I’m trying to think how I thought wireshark was blocking traffic. I remember blocking and dropping packets. That might be snort and I’m getting them mixed up

[loud marlin]

thoes data must taste great

[fast inlet]

that being said you can see a lot with wireshark and there's so so many options to play with, the stuff on THM barely scratches the surface

[gritty fern]

nom

[naive violet]

So I looked into this

[rapid merlin]

Nmap / metasploit for scripts

[naive violet]

It isn't the fibre they like, it's the electricity that runs alongside it to power the amplifiers

[shut hawk]

I'm not sure sorry, you'll have to contact the team at [e-mail]

[loud marlin]

yes. i was reading of it. the electricity of it. they can "smell" it. or smth like that

they have that sensors thing

[plush sierra]

ok ok

[naive violet]

@rapid merlin Please do not spread unfounded conspiracy theories here.

Darpa is not even the right organization, at least get the basics if you want to be belivable

[rapid merlin]

ik

but i am curious who is behind the walls and watching everything and protecting world

[fast inlet]

"wireshark is too hard to understand"
"i studied at the top agencies"

[naive violet]

I doubt they studied at DARPA for a few reasons but I'll keep those to myself

[sand trench]

ooooh looking forward to see the room in room testing release

this was a fun one

[gray sonnet]

SHADOWW! Long time!

[sand trench]

*and says no more then this

[sand trench]

ello ello vain

[gray sonnet]

how're you doing today?

[sand trench]

kinda tired.... and slightly drenched.... and very spooked from lightning bolt that struck closer then 500 meters away when shadow was outside

[gray sonnet]

the heck?

so damn close

you good?

[sand trench]

yeah

just huge amounts of adrenaline

[gray sonnet]

lol, happens

adrenaline saves lives

[warm kettle]

how does the bot assign roles? Y'all have like wizard and God roles and i have a different one

Based on tryhackme activities?

[sand trench]

it goes by your level on tryhackme

[rapid merlin]

0day and johnMohomaad are they real ...

[warm kettle]

oh

[gray sonnet]

yeah...

I wonder why anyone would ask that...

[fast inlet]

no they're AI generated

[rapid merlin]

cool i have seem on yt

johnMOhamaad give too muchb sponsorship and make their videos boring ..

[loud marlin]

i knew it... all the time

[gray sonnet]

Hey Alex 👋

[rapid merlin]

so where are theyy

[gray sonnet]

somewhere in the US

[bitter apex]

whats the best library in js to send verification emails?

[rapid merlin]

i try to investigate and its hard but no difficult

[loud marlin]

ik where 0day is. prob bussy

[rapid merlin]

yeah a pure white hacker

[gray sonnet]

what are you trying to do...

[fast inlet]

in a bunch of data centers owned by Microsoft

[loud marlin]

let me try my luck... @hasty sand are you AI generated person?

[rapid merlin]

okk

[sand trench]

0day was here in chat just a few hours ago getting asked about pentester.com and how it works and if he created it

[rapid merlin]

got up

i have a questions

if all are white hat hackers here who are then black

[gray sonnet]

the ones not here...

[rapid merlin]

ok

[sand trench]

the unethical hackers which yeah are not in here

[sharp sail]

👀

[rapid merlin]

i think they are

STart people watch and respond when they have a right mood to win the match

as we known as active reconn

[short quail]

There are definitely grey/black hat hackers here

[lament tendon]

I even got blue and green hats in my closet. 😎

[short quail]

They just don't expose themselves

[rapid merlin]

okkk

[naive violet]

Discussion of illegal or unethical activities are not allowed here.
What people do outside of here is left to the proper authorities, as it should be.

[warm kettle]

Why it's saying virus?

Firefox browser

[naive violet]

Usually because there's a command in there in text that it doesn't like

[warm kettle]

but it's just a pdf

[loud marlin]

is it ?

[sick lance]

If it acts like malware it will be treated as such.

[warm kettle]

It's scanning the text in pdf??

[naive violet]

Which has text in it

[naive violet]

The PDF file actually has the text in the raw bytes

[loud marlin]

it svans more than just a text

[warm kettle]

oh

[naive violet]

If you don't trust it, simply do not download it

[loud marlin]

in short it looks for all the things, no meather what extension is

[warm kettle]

I downloaded it from chrome didn't detected it

[naive violet]

Ok but it's still the same file

So again, if you don't trust it, don't download it.

[warm kettle]

k

[loud marlin]

GTA VI radio is savage af =/

[gray sonnet]

how do you know 👀

[loud marlin]

i listen it

[gray sonnet]

👀

[rapid merlin]

can anyone know how this ussd code works

and how specfic number like calling police or medical help done ..

[sick lance]

You dial your local emergency phone number...

[rapid merlin]

how our phone knows its a local number

where the number has to be procceed

[loud marlin]

magic

[shut hawk]

magic radio stuff

[gritty fern]

magic

[sharp sail]

Funny enough you can call 911 and if your country is in another country apart from the US it will auto route it to the respective emergency number

[chilly veldt]

same with 112

[sharp sail]

Yeah that's what i meant

[boreal scarab]

https://tenor.com/view/the-studio-whats-up-losers-the-mentor-whats-up-losers-gif-17315226

[chilly veldt]

yup, it intercepts and reroutes

[rapid merlin]

is it possible to create own emergency number

[chilly veldt]

no

[sharp sail]

No

[loud marlin]

no. if you are not gov

[boreal scarab]

[rapid merlin]

why

[gritty fern]

Why would you do that anyway

[loud marlin]

cos you are not gov

[sharp sail]

And it would be considered illegal

[rapid merlin]

tell me about the book i gain information about my own

[naive violet]

What?

[gritty fern]

huh

[sharp sail]

🤨

[short quail]

How will it actually work when there is no emergency service to help u out in case of an emergency

[naive violet]

Read about how telephone exchanges work

[loud marlin]

what the fresh turkey

[rapid merlin]

tyy

[gritty fern]

We get some silly geese in here lol

[naive violet]

Creating a phone number for your own use with an IVR on it isn't illegal

It'll be a long number though

https://tenor.com/view/01189998819991197253-maurice-moss-the-it-crowd-emergency-gif-15186743

[rapid merlin]

tyy

[gritty fern]

I think at that rate id just dial 911

[rapid merlin]

bro u are genuis

[naive violet]

Hey they didn't ask if it was a good idea

[gritty fern]

Fair kek

[sand trench]

ah yes from the epsiode where emailing the fire department about a fire works out

and creating numbers for use like business and stuff is not super hard either but yeah area codes

[bitter apex]

with email verifications, what do they normally put after in the parameter of the verification url, is it just random bytes?

[sand trench]

for example if you decide to open up a pizzeria

[naive violet]

Have you researched this?

[bitter apex]

what ive found is just random bytes

[naive violet]

"Email verification implementations"
"Email verification security"

[loud marlin]

"what is email"

[gritty fern]

“is email?”

[sand trench]

email == epost

[gritty fern]

A very specific epost

[sharp sail]

https://tenor.com/view/you-have-mail-mailbox-gif-11623462

[rapid merlin]

as everyone knows the best encryptions methods in cryptography does anyone know latest one on this field ..

that is hard to crack

[loud marlin]

md5

[gritty fern]

isnt that a hash?

[sharp sail]

md4 better

[sick lance]

Let's not troll users...

[gritty fern]

Or am i silly?

[loud marlin]

fair yea

[naive violet]

One Time Pads

[gritty fern]

google it lol

[loud marlin]

well... veracrypt do the pretty good job

[naive violet]

Not the latest but fully impossible to crack

[gritty fern]

How is it impossible to crack?

[sand trench]

yeah one time pads is basically the best if you need aboslute protection against decryption

[rapid merlin]

cool i want to try on it

[sand trench]

but it is not very convienet

[lament tendon]

AES with a sufficiently long key.

[sand trench]

random key and the key is only used once for one message after which it is never used again.... making it virtually impossible to crack

[lament tendon]

If you are talking about device or drive encryption, veracrypt as ralex suggested.

[gritty fern]

https://tenor.com/view/dumb-and-dumber-lloyd-theres-a-chance-jim-carrey-gif-11098164

[lament tendon]

Drawback is that the key is the same size as the cipher, so encrypting large things with it becomes very difficult.

[gritty fern]

With all this talk about encryption anyone have good videos for learning this stuff a little better?

[lament tendon]

I can offer you cryptohack.org, which is not a video but good for learning.

[gritty fern]

kk thanks!

[lament tendon]

I‘m personally more of a bang-my-head-against-the-problem-until-I-win-kind of guy.

[naive violet]

Nature of XOR with key length = plaintext length
You can make it say anything you want.
I could give you two different keys for the same ciphertext and you'd get two different messages

[gritty fern]

Wait the same data can be decrypted into two messages?

[naive violet]

I'd demonstrate but my laptop is off

With one time pads

[gritty fern]

Oo thats really cool

[naive violet]

It's as many plaintexts as there are permutations of the input

[lament tendon]

Let me do the honors then, I suppose.

[bitter apex]

it seems like they use a random string then assign that to a whole new token db and when u click on the link it checks if the parameter matches with the one in the db then their account is set to verified, but i couldnt find how to make it time sensitive, so ig is it that they just add the time of sending to the db and if it is longer than 30s away then the link is made invalid?

[naive violet]

You just store a timestamp?

[bitter apex]

yeah tahts what i thought

[naive violet]

Storing Unix timestamps is easy

[bitter apex]

yeah

is it nessesary to use a whole other db for the tokens

[rapid merlin]

u seems pro in cybersecurity .. I want to match with u in furture

[naive violet]

A whole other table

[rapid merlin]

and scrub too

[naive violet]

I am a pro, by the definition of professional

It's what I do for money

[bitter apex]

oh yeah ofc

[sick lance]

I'm nowhere near a pro.

As in know what i do, or professional.

But that time will come.

[boreal scarab]

https://tenor.com/view/snicker_doodle7-chips-man-eating-chips-dude-eating-chips-gif-22845702

[naive violet]

Eh I don't doubt we'd hire you immediately, sadly there's the geographical challenges

[lament tendon]

'Hello TryHackMe'
XORed with
'af48e8d9f82a6d' (key in hex)
becomes
ç-„µ—
7¦Ö�‰º“g

[naive violet]

Do it with hex but yeah

Add a cheeky tohex on the end in cyberchef

[lament tendon]

Feel like this shows it better. ;)

In hex, the result would be e72d84b5970a37a6d60089ba936706.

Also my key is too short.

I'm silly.

[static bolt]

do it with cryptographical tokens, this way you can reduce load on DB and add time limit as well

[lament tendon]

Would need to be twice as long for it to be a true OTP.

[sick lance]

Aw man 😦

Your company should move up here then 😄

[naive violet]

Depends if its treating the hex string as UTF8 or decoding to raw bytes

[lament tendon]

I treated it as hex input. 😅

So 15 nibbles, which doesn't even go up to 8 full bytes, lmao.

[bitter apex]

surely id have to save it to the db anyway, no?

[static bolt]

nope

[rapid merlin]

someone hired me too if one's place is left tho as i am mostly foodie ...

[static bolt]

That's the bonus of cryptography, you can remove some load from the DB

[bitter apex]

oh so i like encrypt the email of the user put it in the verification link, then when they open it it just verifies that email

[loud marlin]

protonmail offers some encryption by default

[static bolt]

Check it out
https://jwt.io/

[bitter apex]

ohh use jwt

got it

[gloomy linden]

i have a question i am using virus total to scan an exectutable my problem is that some av engines found it as malware but virus total dont let me to click on thoose to see more details? Do i need to have any paid versions of virus total?

[loud marlin]

it depend if signature is on that AV

and many other things

[sick lance]

IIRC you can't click on the vendor analysis

[lament ravine]

how to contact facebook? regarding in this...

[sick lance]

Regarding what?

[gloomy linden]

ok thnx

[lament ravine]

could not send a pic

[sick lance]

You need to be verified to do that.

Description can work.

or

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 26, 2024, 4:51 PM

[lament ravine]

https://snipboard.io/EkQBaI.jpg

i use snipboard then

[shut hawk]

What's the query?

ah, I see

[sick lance]

Meta/Facebook support.

[static bolt]

But, frankly, using JWT might overcomplicate things too much. Pretty much almost any cryptographically signed token would be enough, you should just verify it on the server side.

[shut hawk]

It says "Review requested", I assume you've requested one alredy?

[loud marlin]

o ffc... i was try to click logout... dear lord

[lament ravine]

i think its over a month based on what i read on some acticle that it also consist of 30days

[naive violet]

A month often is 30 days

[shut hawk]

Wise words

[naive violet]

If you broke Facebook's rules though, there's nothing you can do

You broke their ToS, so they're enforcing it

[lament ravine]

i think i did not because i only use messenger not really much used..

[naive violet]

Then your appeal should be successful

But there is nothing more you can do.

[lament ravine]

yeah probably but it was over a month this time

[naive violet]

Ok, so?

It's their platform

[bitter apex]

i mean its litch just 1 line of code basically so isnt that complicated

[lament ravine]

trying to email the facebook support but i got no response hhehe

[sick lance]

Wait patiently "hhehe".

[lament ravine]

same i did on my past account same situation

[sick lance]

You broke the ToS on two accounts?

💀 That's not looking good.

[lament ravine]

but based on rules that i read from fb maybe the violation i get are not using my real name on it

[boreal scarab]

Love me some damn fine mead on a Sunday afternoon

[lament ravine]

or i think i'm being mass report from the user

[sick lance]

Ususally they send you a mail to change it.

[lament ravine]

for unknown reason

[boreal scarab]

https://tenor.com/view/cheers-dwight-the-general-manfredi-sylvester-stallone-tulsa-king-s1e6-gif-27284894

[chilly veldt]

I FOUND THE SOLUTION

[lament ravine]

nope the past account i talk that already gone was year 2021

[boreal scarab]

🥳

[lament ravine]

they did not hahah

[chilly veldt]

finally gotten past an issue I have been sitting with for hours

[sick lance]

🤷 Not much we can suggest then.

[sand trench]

found a new interesting website: https://roadmap.sh/

[boreal scarab]

@chilly veldt You'd be proud of me as a Scandanavian. Got a glass of mead in my hand

[chilly veldt]

ew

[sick lance]

just need an arrow to the knee.

[boreal scarab]

WYM EW

[chilly veldt]

drinking on a sunday?

that's not scandinavian

[sand trench]

yeah drinking on sundays is eeeew

[boreal scarab]

At that point. Lemme just throw in some juniper berries

[sand trench]

sunday is the recovery from hangover day

[chilly veldt]

we got work tomorrow

[boreal scarab]

Well, US got memorial day tomorrow

[sick lance]

We got a bank holiday tomorrow.

Not that it means anything to me, I don't have any classes until September.

[chilly veldt]

I got work tomorrow

aka an onboarding*

aka I have to talk about stuff to a new employee all day

[boreal scarab]

Perfect time to drink

[chilly veldt]

just checked the music 2 hours and 30 minutes sitting here trying to figure out how to move data in between activities on an android app lmao

[shut hawk]

I've linked the cyber security one here many times! It's really good!

[chilly veldt]

I am on his mailing list 😄

[wooden totem]

anyone know how I can check if site was deleted or if its just down?

[sand trench]

and free

[sick lance]

downdetector?

[sand trench]

making it even better

[wooden totem]

not recognized site

[sick lance]

Which sort of site is it?

[shut hawk]

how would you know if a website was deleted or is down?

[wooden totem]

its saying this site can't be reached

[naive violet]

Contact them

[wooden totem]

when accesing though link

[naive violet]

Or get someone from another country to check

[sick lance]

Or use a VPN.

[chilly veldt]

I should go sleep

[lament ravine]

https://snipboard.io/Zs1QIA.jpg

i got the long term banned in this case hahah

[wooden totem]

unreachable in all countries

[sick lance]

...Fun...

[lament ravine]

alternatively

[naive violet]

What?

[sick lance]

Probably a sign..

[boreal scarab]

NordVPN? 🤔

||/j||

[rapid merlin]

Don't use that thing.

use iVPN or Mullvad Imo!

[boreal scarab]

Ya miss the hidden portion?

[wooden totem]

The site was down quite a few times and when it redirected to cloudflare something something is down, but now it gives me DNS_PROBE_FINISHED_NXDOMAIN error

[rapid merlin]

yea

Ig I did.

[boreal scarab]

[shut hawk]

what's the site?

[wooden totem]

yarr

[rapid merlin]

?

[rapid merlin]

Hey Jayy 👋🏻!

[shut hawk]

https://tenor.com/view/confused-confused-look-confused-face-huh-what-gif-2480734549943489640

[shut hawk]

👋 hi

[buoyant tree]

https://tenor.com/view/dns-haiku-dns-haiku-tech-pod-it-was-dns-gif-27399037

[rapid merlin]

how's going..

[shut hawk]

not bad, you?

[rapid merlin]

I think they meant "yar" a word or term in Hindi/Urdu means Bro.

[rapid merlin]

Ah, Frustrated with Grub getting deleted by windows again and again!!

[shut hawk]

@lament ravine That link you posted literally just tells you to contact facebook.

Which you've done, lol.

[sick lance]

@lament ravine please don't any potential, yet doubtful, means to get un-banned from a service.

[shut hawk]

It's literally just "Contact facebook", "Request a review" which is what you should do

[sick lance]

I know, but it really means any potential website and service, not limited to that one.

[lament ravine]

yeah your right but just reading to find some hint

[sand trench]

this is why a lot of people seperate it out to multiple physical storage devices

[rapid merlin]

Well, I had (rip me using linux) on a seperate SSD and windows on other.

[lament ravine]

facebook gives me and idea to make my own platform hahaa ... just kidding

[naive violet]

No hints needed, you have your answer. Contact Facebook, which you did.

[rapid merlin]

It's not only getting deleted by windows, the new Kernel update re-writes the grub.
and I think which freaked out my UEFI dual boot.

[shut hawk]

Oof, can't help there much - Not sure why windows does that. When I was dual-booting it behaved well, but maybe that was just due to the layout of how I had it setup?

[naive violet]

That's illegal. Please do not discuss illegal activity here, it is against our rules.
If you continue, you will be immediately and permanently banned.

[rapid merlin]

Yea, I moved on from Linux now..
Just going to stick with windows... tried fixing it with live boot.

anyways learnt something new to deal with. 😄

[shut hawk]

always a learning opportunity

you can also use a VM anyway, which im sure you probably have already

[rapid merlin]

Yep, basically I learnt how can I fix grub....
and if I don't have any way to boot in system I can just boot from live bootable and mount it... and then chroot it... to mange it.

[lament ravine]

sorry

[boreal scarab]

Paying car insurance is such a hard pill to swallow... ew

[sick lance]

Is it optional?

[rapid merlin]

Yep going to setup a VM and re-create if I can...and try to fix it.

[boreal scarab]

Well..... yes, but really no.
Get pulled over. No car insurance, fine.

[sick lance]

Mandatory in the UK.

[sand trench]

well in that instance shadow meant is you have grub installed on the linux drive and linux and nothing else
and on the windows drive you got windows and the windows bootloader and nothing else

and then to choose which to boot you use your bios/uefi

[boreal scarab]

It's mandatory here. You can get fined, and MAYBE jail.

[sand trench]

that way they never interact

[rapid merlin]

Yes, It was like that.

I think the new Debian small updates or me trying to do something freaked it up!

[boreal scarab]

@sick lance

[crude stump]

The heck is a unlimited fine 💀

[naive violet]

They have guidelines usually

But it means there's no imposed maximum

[crude stump]

Damn

[naive violet]

The judge responsible for sentencing can decide

[crude stump]

So they can charge you a million bucks

[naive violet]

If the judge sentencing you decides that's appropriate

It'd be in pounds rather than bucks, so £789,608.80 which would be oddly specific

[sand trench]

petit potat

[crude stump]

You grow those

[crude stump]

Damn

[boreal scarab]

How to confuse today's generation:

https://youtube.com/shorts/60QnTrQbNTA?si=gOJloHsEf_-nCCO-

[sand trench]

flash is kinda alive if you consider ruffle

[naive violet]

Are you trying to be a boomer or what?

This is such a boomer thing to post

[boreal scarab]

https://tenor.com/view/the-office-john-krasinski-jim-halpert-no-comment-gif-4812541

[sick lance]

I don't think he regularly has to try...

[shut hawk]

I guess chat rooms doesn't exist anymore 😔

[boreal scarab]

[sick lance]

Chat rooms + MSN were the days.

You all missed out.

[boreal scarab]

https://tenor.com/view/you-kids-get-off-my-lawn-cranky-old-man-suburbia-americana-gif-14239371

[sick lance]

I'm not that old.

[shut hawk]

well.....

🏃‍♂️

[loud marlin]

do you get angry when they put one item, in store, on another place and you can't find it ?

[sick lance]

No, because I can read signs... 😄

[loud marlin]

that's ok. but if item from one place is on another place and you checked first place and is not there?

[sick lance]

Then it's meh, lol.

I don't get angry

[loud marlin]

then you are old 🙂

Trilobite

[rapid merlin]

Cutie Potato!

[boreal scarab]

God, I really really REALLY hate drop shippers with a burning passion

[naive violet]

It must be difficult holding onto this much hate

[boreal scarab]

Oh totally

[sick lance]

You'd make a terrible Sith lord.

[naive violet]

You should chill more

[boreal scarab]

I'd actually be a quite an excellent sith lord with all my hatred for things 🤔

[naive violet]

Hate less

[boreal scarab]

But then, what would I complain about?

[sick lance]

Nothing, have a good chat for once.

[boreal scarab]

Impossible!

[shut hawk]

https://youtu.be/0la5DBtOVNI

😛

[boreal scarab]

My hatred for the dropshippers are this:

-They claim to have invented it themselves
-Their entire page is just about that 1 product
-They increase the price immensely

[sick lance]

Purchase from dropshippers is 100% optional

Thanks for attending my Ted talk.

[buoyant tree]

Finished IT Crowd

[boreal scarab]

I know that, but they take advantage of people as well

[sick lance]

Of course.

[wooden totem]

Money is evil, and there is a need for money

[sick lance]

FB Marketplace is a goldmine sometimes.

[naive violet]

Everyone does, that's how the economy works.

[boreal scarab]

I hate the economy

[sick lance]

You're stuck in the wrong era.