general

[wide marten]

Fixed by a June 11 update

[dull portal]

👍

[sick lance]

Still?

[gray sonnet]

the review is done, it's in the release queue now, so gonna be a while before it comes out

[sick lance]

Lol, I know it's done.

[gray sonnet]

ah, well according to Adrian, it's definitely gonna be after august

Duolingo

[rapid merlin]

fk no, duolingo is bad

if you pay for my ICS410 course - im down lol

[gray sonnet]

https://tenor.com/view/cat-stare-catstare-cat-stare-sus-catglare-cat-glare-gif-14942558849944709546

hopefully he doesn't steal your kidney /s

[rapid merlin]

as long as he pays for my courses i dont mind lol

[gray sonnet]

@sick lance

he might be able to help

[sick lance]

English only please.

[rapid merlin]

Community police! yay

Whoop whoop thats the sound of Scrubz!

[sick lance]

Is there an issue with moderators?

This isn't the first comment you've made.

[errant fossil]

Question, Ip address cant be the same on 2 devices on a network but i checked my ip on my macbook, my pc and my phone they are all the same?

[rapid merlin]

Im sorry.

Lol if there were no moderators this would be a mess

[sick lance]

You'll have a an internal IP for your devices.

[errant fossil]

so like a private ip address?

[sick lance]

Hello, can you please speak only English, this is for moderation purposes, this is the last time I'm asking.

[sick lance]

Yeah 🙂

[sick lance]

That doesn't answer my question.

[rapid merlin]

No issues

[errant fossil]

Alr, Thanks a ton

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2414)

[mossy river]

Moderators are here to protect the community. If you have any problems, please shoot me a DM 🙂

[rapid merlin]

i just said "community police" 😭

[rapid merlin]

Can I ask how you checked your IP? And did it start with 192 or something? (Dont tell the full IP)

[errant fossil]

checked on whatismyip . com and it was with 82

[rapid merlin]

Ah, thats the IP from the modem to the internet.

[errant fossil]

just checked my private ip and now i makes sense as that starts with 192

[rapid merlin]

There is a room on this, right Scrubz?

[rapid merlin]

Yep! They are different right?

[sick lance]

That will be your public facing IP, if you have administrative privs on your router. You can see all the devices connected with their own private IP.

[errant fossil]

Yup

[mossy river]

I’m just letting you know where the proper place to report it is in the event that you need to 😄

[errant fossil]

Yeah can check and see all devices on my wifi app

[rapid merlin]

Okay, thank you!

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1257)

[rapid merlin]

How you doing Jared?

[mossy river]

Tired, hby?

[rapid merlin]

Oh no, still on the no-energy-drinks-streak?

Im fine, thanks

[errant fossil]

and also does the private ip address change everytime i restart my device or is it static?

[rapid merlin]

Uhm, I think that depends on the settings.

Most times it resets after it is not connected for a while. A few days or something.

Its also possible to configure it so its static

[wide marten]

There's what's called a DHCP lease that comes with a certain duration during which the IP to device assignment stays the same.

[wide marten]

But depends on your home router and its settings.

[chilly veldt]

[errant fossil]

That makes sense

[errant fossil]

is there any way to know how long the lease is for or do the isp keep it private?

[wide marten]

DHCP is done by your router, the ISP has no say in that.

[wide marten]

You might be able to look up the configuration in the router's administration panel.

[sick lance]

Could also be done with control over AD.

[wide marten]

I'm assuming home network here.

[rapid merlin]

Depends on the manufacturer and the model of the router if thats possible.

[wide marten]

By the way a typical home router from my experience assigns the same IP to the same device even if the DHCP lease has been expired for ages, provided that IP address hasn't been assigned to a different device in the meantime. You could call it semi-static.

[chilly veldt]

actually, your public IP is also on DHCP if not bought differently

so yeah, your ISP is also doing DHCP

[wide marten]

Sure but we were talking about private addresses

[chilly veldt]

ah, didn't see the private thing

[errant fossil]

Manufacturer of the router right?

[rapid merlin]

Yes

Some are giving more advanced settings, some less

So it depends

[errant fossil]

and if i change my network card will the private ip change?

[rapid merlin]

Im not sure. @wide marten do you've got any clue?

[chilly veldt]

in what way change?

you can of course enforce private IP on your computer itself

[rapid merlin]

from 192.168.1.1 to 192.168.1.5 per instance

[wide marten]

Since the new NIC comes with a new MAC address you'd get a new DHCP assignment. That could coincidentally be the same IP address or a different one.

[errant fossil]

btw dont mind if my questions are stupid, im just reviewing some topics

[rapid merlin]

the MAC adress changes so...

yeah

[rapid merlin]

Nah, questions are not stupid

[chilly veldt]

if you set an IP on your computer itself and not follow "DHCP" you'll have that IP, but if you have a new MAC then yes, you'll get a different IP, if the old ones lease is not up.

cause if the lease is up and your new device connects, then it'll get that IP, as it's the lowest available

[errant fossil]

so a gamble lol

[chilly veldt]

as I said, you can still just write an IP address in your computers settings and it'll get that (if it isn't taken)

[rapid merlin]

A gamble with one in 255 chance its the same (in your home network and with no other ips assigned apart from the router itself). But as Bella said, you can force to use a specific one, yes

[errant fossil]

(if it isn't taken)- how would i know if its not taken by someone else

[wide marten]

Although assigning them sequentially is typical there's also dhcp servers that do it randomly or let you configure the behavior.

The answer depends on a lot of factors.

[wide marten]

You as the client can't know. You can look up the dhcp assignments on the router though if you have access.

[chilly veldt]

if we are talking home routers, then it's sequentially 98% of the time

[chilly veldt]

run nmap on the network prefix

[wide marten]

And when I say "router" I mean the dhcp component built into the home router. In a corporate network that would typically be a separate server.

[chilly veldt]

jk, no, you can't really find that out without looking at the leases in the router/dhcp server, and if 2 systems got the same IP, there's some troubles happening

[rapid merlin]

Mhhh. Lets say xxx.xxx.x.2 is static assigned but not connected, you wont know!

[short fiber]

does anyone knows how to mount /dev/loop1

[chilly veldt]

well, then it isn't taken 😛

it's reserved, but not taken

[rapid merlin]

But when its reserved, you cant get it right?

[chilly veldt]

you technically can

you can also get an IP that someone else is using at the same moment, it'll just cause problems with sending packets

[rapid merlin]

Mhhh. So when the client forces to use a specific one, it always happens? Even when its already assigned?

[chilly veldt]

yeah

[loud marlin]

ip conflict can cause issues yea =/

[chilly veldt]

it just throws out "I have IP xxx.xxx.xxx.xxx"

[loud marlin]

bell... how was party

[chilly veldt]

I am still ruined

lmao

[loud marlin]

that good 🙂

[errant fossil]

Thanks for the help guys/girls, Finally understood it

[chilly veldt]

sunday was afterparty

and it ended at 5 am

my flight was at 9 am

[loud marlin]

what about 2nd after 🙂

[chilly veldt]

vmware

[chilly veldt]

oh no, this was 3rd after, we drank friday, saturday and sunday 😄

sunday we started drinking at 15:00 and stopped drinking at 05:00

[loud marlin]

fair fair...

[chilly veldt]

and I only had lunch at 1200 didn't get to eat anything before breakfast at 0700

[loud marlin]

ik that orange or mango juice was life saver for me after that kind of days

[wide marten]

Dhcp is easy to remember with DORA

[chilly veldt]

the pancakes just hit so different

[loud marlin]

oooh that for sure

[errant fossil]

whats DORA?

[wild rose]

https://tenor.com/view/dora-can-you-find-where-i-asked-gif-18451614

[loud marlin]

@boreal scarab they arrived

[wild rose]

Whoops did see the last part.

[chilly veldt]

lmao

[wide marten]

The four messages sent in a dhcp conversation. Your computer broadcasts "Discover" to find a dhcp server, one or several dhcp servers reply with an "Offer" of an IP assignment, your computer "Requests" the offered assignment and the dhcp server "Acknowledges" it.

[wide marten]

That's how you get your IP address on a home network or public wifi, typically. And it's not only the IP address that dhcp provides but but other data like default gateway, DNS server and possibly more.

[errant fossil]

This makes it much easier, 100% going in notes, Thank you

[twin ridge]

Gave +1 Rep to @wide marten (current: #52 - 138)

[crude stump]

Why they in test tubes

[wide marten]

If that's your kind of fun you can turn on wireshark, request a new dhcp lease (depends on the OS how that's done) and watch these messages being logged. It's unencrypted.

[rapid merlin]

@errant fossil this module may be interesting! https://tryhackme.com/module/network-fundamentals

[loud marlin]

they cost 80e =/. and it is brass for most and it need to be with no damage to be used

[crude stump]

Ah I see

[crude stump]

Prolly also so they don’t get dirty too

[errant fossil]

Going over this right now 😃

[rapid merlin]

Nice!

[errant fossil]

what is the purpose of wireshark, cause i have not used it but saw it in a few videos

[crude stump]

Network analysis

[wide marten]

To capture network traffic and look at it, explore it, analyze it

[errant fossil]

It would be illegal to do it on a public network right?

dont want any legal complications lol

[crude stump]

Hm

[wide marten]

If you're capturing the traffic going in and out of your machine that's not illegal. At least not in Europe or NA to my knowledge. Not a lawyer.

You're just making visible and permanent the data that is sent to/from you anyways.

[sick lance]

Wireshark is also good to find hidden webcams.

[crude stump]

How

[errant fossil]

Wait What??

[crude stump]

Oh if it’s using your network?

[sick lance]

You can see the network traffic?

And you should not use Wireshark on a network you do no have permission to use.

That is illegal.

[errant fossil]

thats what i wanted to confirm

Thanks

[crude stump]

What I’m saying is if it’s a hidden camera someone put. How is it gonna show if you you are analyzing your network

[errant fossil]

will 100% try this after the lesson

[sick lance]

You'll be able see the network traffic, you can take the MAC address and use that. or the protocol many cameras use such as rtsp or onvif

[wide marten]

This needs further explanation. One can use wireshark with a wireless adapter in promiscuous mode. That would capture all data sent in the wireless network. That might be illegal in some jurisdictions. Probably is.

The default mode of operation only captures traffic destined or originating from one's machine. I wanna see the law making it illegal to store traffic going in and out of my machine without "permission".

[loud marlin]

more is due to be with no dmg. for dirt is no issue. since they got dirty all the way you use them

[sick lance]

https://www.law.cornell.edu/uscode/text/18/2511

[sick lance]

You may own the machine on the network, you do not own the network if it's obviously not your own.

[crude stump]

I’m just kinda confused. If you own a network right. If only you can own it, how would let’s say another electronic communicate with your device, you don’t truly own the network then?

[loud marlin]

btw... if anyone interested. the thermal paste is used in 3d printing is this kind. it goes up to 320c and best in shape is at 100c
also MSDS: https://cdn.shopify.com/s/files/1/0252/5285/5880/files/ReleaSys_HT_PASTE_Slice_Engineering_-01-23-24.docx.pdf

[sick lance]

You could have a simple wireless network at home with routers etc, that won't actually connect to the internet.

[rapid merlin]

You mean no permission to use the network? Or no permission to use Wireshark?

[sick lance]

You can still use an "internal" network, without coming out.

[crude stump]

Ah so that makes sense

[sick lance]

Pretty much, if the network isn't yours (for example, a school) it's illegal to use Wireshark to intercept the packets.

[wide marten]

Whether or not capturing data going in and out of my machine constitutes "intercept" is doubtful. At least it's not clear from the text of the law.

[sick lance]

If you're sniffing packets using a network monitoring tool, you're definetly intercepting them.

[crude stump]

If you have a public network like a Starbucks or sum that’s why they say you shouldn’t use it because a criminal can spot your traffic

[sick lance]

Especially if it's not traffic that is supposed to be for you.

[wide marten]

You say that. I care about what the courts say.

[sick lance]

Or hack the network and run a cryptominor in the home web page

[sand trench]

will doididylioudouieuyus do

[sick lance]

intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication;

[crude stump]

Dang

Is it possible to have an encrypted network?

[sick lance]

You're intentionally capturing packets with software

[rapid merlin]

The what

[crude stump]

Or would that just be none public

[sick lance]

WPA2

[crude stump]

Oo

[sand trench]

WPA3 too

if you can find a router that does

[crude stump]

Never knew about that

[rapid merlin]

Wow, I see its indeed illegal on public networks etc. Interesting, didnt know.

[wide marten]

Packets that run through my OS and memory anyways.

Law doesn't work this way that you or me interpret the words the way we think is right and then that's what's legal or not. You're not gonna answer this question, courts do. This judge for example came to a different conclusion

A federal judge in Illinois has ruled that intercepting traffic on unencrypted WiFi networks is not wiretapping. The decision runs counter to a 2011 decision that suggested Google may have violated the law when its Street View cars intercepted fragments of traffic from open WiFi networks around the country.

And that was even wider than what I talked about. Here we're talking sniffing of all traffic.

[sick lance]

Then go and see a court.

As a mod, I'd rather community members didn't speak about something that is illegal. 🙂

[rapid merlin]

Very interesting. (May be different in EU)

[wide marten]

Federal law makes it illegal to intercept electronic communications, but it includes an important exception. It's not illegal to intercept communications "made through an electronic communication system that is configured so that such electronic communication is readily accessible to the general public."

[timid prism]

if its not illegal then do whatever u want

[crude stump]

Nuh uh

[sick lance]

Unauthorized Access: The Computer Misuse Act 1990 makes it an offense to gain unauthorized access to computer systems. Using Wireshark to capture data on a network where you do not have explicit permission can be considered unauthorized access.

Computer Misuse Act 1990

[simple valve]

On this topic, assuming you have promiscuous mode on; will the switch still route to you network traffic of others (other than broadcast frames)?

[crude stump]

What’s this promiscuous mode I keep hearing

[wide marten]

"Can be". As I mentioned there are two modes of operation. That's a crucial difference. I'm not gaining unauthorized access to anything storing the data going in and out of my network interface (and destined for my device).

[crude stump]

The wireshark room never mentioned that

[simple valve]

Basically you let everything in on Wireshark. So even if its others traffic, it will be logged in your packet capture.

[crude stump]

Oh

[wide marten]

As a mod you are free to decide what's considered legal or illegal for the purpose of moderating this server.
That's an entirely different question from what's actually legal or illegal in real life.
I provided a court ruling, you your personal interpretation of a law.

[crude stump]

I’m guessing the main use case for that is if you a soc analyst and you have a big corporation to analyze

[simple valve]

Nah, you have other tools for that

[crude stump]

Hm

[ripe chasm]

Hey there

[crude stump]

Hi

[ripe chasm]

how you doing guys ?

[crude stump]

Fabulous

[errant fossil]

Great Wbu?

[ripe chasm]

nice

[ripe chasm]

thats great i am doing fine

[rapid merlin]

Wireshark can only capture packets going to the clients network adapter

[ripe chasm]

thanks for asking

[sand trench]

anyone have any idea how long it will take before ubuntu has systemd 256 as an installable package???

[ripe chasm]

No idea

[errant fossil]

Good to hear

[crude stump]

Ah I see

[ripe chasm]

are you into cybersecurity?

[crude stump]

So a ids/ips would take that job then. Aka snort because it has a sniffing mode and it blocks

[simple valve]

Yes that’s one tool

[rapid merlin]

Yep!

[errant fossil]

Yeah just the start tho

[sick lance]

You can also be recording personal data based on what is being transmitted, which could also be GDPR.

[sand trench]

well for all the arch users on here that has recently updated their system: thoughts on the systemd run0 command???

[pallid lotus]

(Can I point out you both seem to be talking about different jurisdictions as well? )

[rapid merlin]

I think there has never ever been a court case for this in EU?

[sick lance]

At this point, you're just arguing black is white, and white is black.

[sick lance]

Possibly not.

[crude stump]

Call jayoma

[wide marten]

Could be. That's again different from a blanket statement "is illegal".

[sick lance]

Ripa too.

[errant fossil]

[sick lance]

I keep forgetting about RIPA.

[ripe chasm]

same bruv , so have you taken any steps ?

[wide marten]

I'm arguing you can decide what you consider legal or not and then moderate this server based on that. That doesn't actually make something legal or not. Crucial diff.

[crude stump]

Man I keep getting distracted. Running through the nmap room and ifs pretty fun

[errant fossil]

Yeah, currently going over network fundamentals.

[ripe chasm]

sounds interesting , i am also learning about OSI model

[crude stump]

Pop quiz

What’s the layers of the osi model

[ripe chasm]

yeeeee

[sick lance]

Really.

What proof do you have, that it isn't illegal, please provide a non ChatGPT source.

[wide marten]

I cited an article reporting on a court case. You shared your personal opinion.

[ripe chasm]

there are total 7 layers in OSI models
starting with the lowest to highest
1 physical layer
2 data link layer
3 network layer
4 transport layer
5 session layer
6 presentation layer
7 application layer

[crude stump]

Damn right

[wide marten]

Here's another misunderstanding: the one who claims something to be illegal is required to prove it, not vice versa. In real life that is, of course discord is different.

[sick lance]

I didn't know the website I shared was my personal opinion.

[loud marlin]

btw @sick lance. after some talk with my printer... he decide to print and mask is finish
#general message

[sick lance]

Welcome to the world of debates. 🙂

[rapid merlin]

Now you name me the tcp/ip model!

[ripe chasm]

man if you have any sources where i can learn efficiently rather than quickly , you can tell me about it

[crude stump]

😨

[pallid lotus]

Which one?

[sick lance]

not yours, go away

[wide marten]

You shared the text of the law and your personal interpretation of it. As I had explained in the legal world it doesn't work that way. An individuals interpretation of the text of the law is not what's actually the law or not.

[sick lance]

[pallid lotus]

No u

[wide marten]

Between us only I have referred to a court's decision, which is the only relevant authority in legal matters.

[crude stump]

Nmap an in depth look at scanning with nmap, a powerful network tool

[pallid lotus]

Booooooo

[sick lance]

Told you.

[pallid lotus]

Oh, wait, hang on a second

That's the right one

[crude stump]

It says you made it lmao

[pallid lotus]

Forgot my own damn description

[crude stump]

You dark star and security nomad

[sick lance]

Muiri can't keep up with what he's made.

[loud marlin]

User Muiri has left the community Discord THM server

[pallid lotus]

No. Me

Dark's on there because one of the tasks came from RP: Nmap, so it's to provide credit there

[sharp zealot]

If you use nmap using naabu is must it is much faster made by project discovery

[crude stump]

Oh

What about nomad

[sand trench]

darn apparently the doctor who writers know how to spell rogue

[sharp zealot]

It doesn't have the scripts though

[pallid lotus]

Never met SecurityNomad -- guessing they're on there because THM want them to do maintenance on it and the room access controls don't let anyone who isn't an author to contribute

[crude stump]

I’ll have to look into it

[crude stump]

I see

[sick lance]

You're surprised by that?

[pallid lotus]

Or rather, it's all or nothing. You get editor access to everything (God I miss that ), or only rooms you're listed on. There's no inbetween

[crude stump]

So mans just a overseer or something

[pallid lotus]

Haven't a clue. They've been added to the room long after I made it, and after I left 🤷‍♂️

[sand trench]

not surprised... just disapointed in not getting the funny meme potential of them typoing it

[crude stump]

Tbh that kinda takes away the credit

They should have a name tag that says “author”

[rapid merlin]

Maybe this is a little bit a grey area, and court has to decide if its legal or not. Law has spaces for court to decide its legal or illegal.

[pallid lotus]

They do. It's just also used for access control

Stick it in the feedback section

[crude stump]

Ooh lmao

Aye atleast you left behind your legacy

[pallid lotus]

https://muir.land/content/
That's the definitive list of what I built at THM + the collabs I did

[sick lance]

Just don't try and bruteforce it.

Don't be an idiot.

[pallid lotus]

Eh?

[sick lance]

Didn't Zeeshan not try and brute force something of yours?

[pallid lotus]

Oh
Yeah, a few people tried that, especially with Wreath

They got chucked out rather quickly

[crude stump]

Your website?

[pallid lotus]

Fun fact -- once you ban someone only an admin can unban them, and I'm pretty sure that's still a manual DB modification

[sick lance]

I was threatened with never being unbanned for the stuff I was doing.

[crude stump]

💀

[chilly veldt]

I've just had the multiple DMs "hey, please stop this"

[sand trench]

the going into rooms you should not part???

[wide marten]

Exactly, the text of the law is open to interpretation that even courts don't always agree. Nevertheless it's exclusively the opinions of judges that define what's legal or not, not a reddit discord mod's interpretation of the text.

Scrubz appears to be of the opinion that his interpretation is the relevant one, not that of courts.

[sick lance]

Aye.

[chilly veldt]

Back when I did API stuff

[sick lance]

I'm not a reddit mod. 🙂

[sick lance]

My opinion is > yours.

[pallid lotus]

Yet... that's the next stage after Discord mod

[rapid merlin]

I'm sure Scrubz doesnt mean it like that

[sick lance]

I don't even use Reddit.

[proven quartz]

This is correct. It's up to the two legal teams in a situation to present their interpretation of what laws apply to what actions and how their interpretations work. It's up to the judge to accept or overrule, and the law is frequently created, interpreted and applied by law enforcement, judges, governments and their representiatives. The outcome of a legal dispute is between the parties involved and the courts, even though it might never actually get tested in court, and even so, court cases can go on through different levels of the court system and have massive repercussions in many ways. That's why you need lawyers and courts and governments to interpret it all

[sick lance]

I refuse to use the dumpster fire.

[pallid lotus]

Yet

[crude stump]

📖

[sand trench]

shadows reddit account is not used and maybe deleted

don't recall if shadow deleted it or not

[chilly veldt]

Only time I use Reddit is for osinf

[wide marten]

Neither of our opinions matters in legal matters. That's why I referred to a court case. You didn't.

[sand trench]

Sigh

[pallid lotus]

Tbf, it's legitimately useful for weird tech questions

[chilly veldt]

Yeah, that's why osinf

[pallid lotus]

Oh, I thought you mistyped OSINT lmao

[chilly veldt]

No no, open source information

[crude stump]

Anyways I’ll be the judge of your nmap room muiri. So far it’s good

[rapid merlin]

Fun describtion of lawyer. "What do you do for your work?" "I interpret text and then tell people how I interpret it"

[proven quartz]

Go on there and make a wrong comment about something and you'll quickly learn all kinds of things you didn't know (and probably didn't want to)

[pallid lotus]

Don't think I've ever posted anything other than from my time in charge of the THM reddit

[chilly veldt]

I always have 2 users, one for creating the question and one for answering the question wrong, that's how you get everything fixed, people don't want to help you, but to prove everyone else wrong

[proven quartz]

Just make sure you double check the answers 😆

[rapid merlin]

"I am Jose Mourinho"

[wide marten]

Since he insists on his blanked clam that it "is illegal" after I've referred to a US federal judge who ruled even wifi sniffing (we were originally talking about a much less intrusive practice) was not illegal in that case, I must assume that's what he means.

[sick lance]

You're just too intended in proving people wrong,

it's ok, take a day off. 🙂

[chilly veldt]

As I just said^

[crude stump]

Should I be worried if my Kali vm says my zsh file is corrupted

[sick lance]

Both of us could be wrong, both of us could be right.

[sick lance]

Mine says that all the time.

[chilly veldt]

Depends™️

[crude stump]

Good

[rapid merlin]

That's the meaning of grey area :p

[sick lance]

rm .zsh

[wide marten]

I care for the truth. "Welcome to the world of debates."

[sick lance]

It makes it go away

[sand trench]

@sick lance shadow wanna report scrubs for posting dangerous commands

[devout palm]

Hiya

[mossy river]

Why does it matter if it’s legal in the US? We moderate under UK law

[pallid lotus]

Right, okay, for the sake of settling this.
It's a grey area. If you own the network then most jurisdictions will allow you to intercept (most) traffic. If you don't own the network and can't reasonably claim that the information is public, most jurisdictions will not be happy. Can y'all leave it there lmao.

[sick lance]

It the my source 🙂

[wide marten]

Ask scrubz, he linked US law.

[sick lance]

You're too slow...

[wide marten]

Sadge

[sick lance]

👀

[sand trench]

[sick lance]

👀

[sand trench]

haha

[pallid lotus]

Do you know why that rule exists?

[sand trench]

good point right there scrubz

[sand trench]

yes because people run commands without checking what they do first

[pallid lotus]

Do you know why that rule exists though?

[sand trench]

and because that can harm a lot of users data a lot

[mossy river]

🖐️

[sand trench]

do elaborate please...

[sick lance]

https://tenor.com/view/dexters-lab-dexters-laboratory-dee-dee-dee-button-gif-17350140

Yeah...

If I'm on a VM...

[crude stump]

According to my calculations that rule is set in place to protect the user from any harmful commands

[devout palm]

To break

[pallid lotus]

Paradox convinced Elf to destroy his system... for the first of many times

Caused quite an argument

[sick lance]

Oh elf...

What a user.

[chilly veldt]

Typical elf behaviour

[mossy river]

[pallid lotus]

After that, Dark added the rule

[chilly veldt]

I miss elf

[pallid lotus]

... and Elf still managed to shred his disk another thousand times or so

[sick lance]

elf will do what elf wants to do.

[mossy river]

Elf having 20 people in vc all trying to help him was so funny

[pallid lotus]

Christ I'm getting old

[pallid lotus]

Were you there when he tried to take on Cherryblossom?

[crude stump]

Unc status

[sick lance]

https://tenor.com/view/kid-i-said-shut-your-dang-pie-hole-angry-gif-15902351

[mossy river]

If I was I don’t remember

[rapid merlin]

wait what why did my message get deleted lol

[wide marten]

Delete all files. (Supposed to be a reply)

[rapid merlin]

oh noo

[crude stump]

Where did my files go 😨

(Joke)

[sick lance]

I done that to the pentest assessment for uni.

"Ok, hide all traces you were there"

"YEET FILES"

I mean, I hid any evidence I was there.

[pallid lotus]

It was hilarious. He had a full VC trying to help him, and James basically holding his hand through it. I joined about 2 hours into the stream when he was just getting near the privesc. Forgot the creds. Hacked my way into his instance before he rooted it, and added a personalised congratulations to the root.txt file. Boy did the kid get a shock when he got the root flag lmfao

[sick lance]

Back when VC was full, and used more often.

[chilly veldt]

Me when I get RCE on CTF machine
(Joking)

[pallid lotus]

Back in the good ol' days of community

[sick lance]

now since 1gbot departed, it's rarely used I feel.

[sand trench]

git-key() {
    eval "$(ssh-agent)"
    ssh-add  $HOME/.ssh/github
}

shadow lazy

[rapid merlin]

Lol thats quite funny. I'd be so shocked either

[pallid lotus]

You remember the days of Xande?

[sick lance]

I think that was before me.

[pallid lotus]

Beginning of the end there

[mossy river]

Poor James

[sand trench]

ninja james or some other james????

[sick lance]

Now I see why James hides when he's online

[chilly veldt]

Ninja

[pallid lotus]

Xande was the first user who joined the Discord from a position of not actually having a clue what he was doing. Asked a lot of very basic questions that had us face palming on a minutely basis.

That's commonplace now, and has been for a long time

[rapid merlin]

Legends say he still has nightmares... Right?

[pallid lotus]

But you know what they say, you always remember the first

[sick lance]

I think the medical term is PTSD.

[chilly veldt]

I am surprised why k4fr hasn't been in here

Iykyk

[pallid lotus]

XANDE IS STILL HERE!!!!

A link to the past 😁

[sand trench]

which??? seems there are a few with similar usernames

[sick lance]

Who're they?

[sand trench]

haha scrubz and shadow did the same thingy

[pallid lotus]

DM'd ya

I'm not outting the poor sod

[clear jackal]

[chilly veldt]

Welp shadow, I am going back to Sweden

[sand trench]

well just wanted to check their tryhackme rank

to see how far they have progressed

[sand trench]

are you going for max hamburgers instead of burgerking now???

[chilly veldt]

Might be, but no, going shopping in Malmo real quick

[wild rose]

Make sure you visit an Ikea while you're there.

[chilly veldt]

.... We have IKEA in Denmark

[sand trench]

burger king:s burgers almost killed bella with a chicken bone

[wild rose]

Yeah but when in Rome have Swedish Meatballs.

[chilly veldt]

But no, it only takes half an hour train to Malmo

[sick lance]

I was in IKEA today, nobody sent help and left with a rug.

Didn't even get any meatballs.

Got McDonalds instead.

[sand trench]

shadow is getting pizza today

[rapid merlin]

We call it chopped balls, lol

[sand trench]

probably

maybe going for kebab instead

[rapid merlin]

Ever eaten kapsalon?

[wild rose]

The Ikea plushy came in the other day. Left it in the box cuz it's a gift.

[rapid merlin]

Fries with meat and cheese and vegetables = kapsalon

[whole yew]

10 yard penalty, misuse of meme, loss of down.

[rapid merlin]

Oh nooo

What meme btw?

xxd

[whole yew]

the correct use of this meme is when you are knowingly saying something incorrect from a perspective of irony and satire

crowder is factually incorrect on any number of subjects, that origin of that particular one was along the lines of 'climate change isn't real change my mind'

[pine stratus]

ww3 is real change my mind

[rapid merlin]

Tbh there is quite a chance there will ever be a ww3

But I dont think its appreciated to discuss that here

[pine stratus]

ye true

[sick lance]

It's not.

[arctic cradle]

how's everyone

[rapid merlin]

What is not? xd

[arctic cradle]

sup Scrubz

[devout palm]

Great. How about you?

[wide marten]

Would be a political debate within about five messages

[arctic cradle]

just had a coffee and I'm about to continue my TCP/IP (The Three-Way Handshake) module at THM

[rapid merlin]

Yep, thats why

[arctic cradle]

but good overall

[devout palm]

Awesome, networking is cool

[arctic cradle]

it's actually my only weak point so far

[sand trench]

hmmmmm pizza

[devout palm]

WHERE

[arctic cradle]

having some difficulties with the OSI model as I've never read about it before although I kind of understand how stuff works out

I assume layer 3 and 7 are the most important one anyway

[sand trench]

1-3 blocks away

[chilly veldt]

Ngl, I hate how companies changes logo for a month to "support" pride month

[arctic cradle]

https://tenor.com/view/pizza-cheese-cheese-pizza-slice-dollar-slice-gif-16826340

[loud marlin]

https://tenor.com/view/pizza-dog-dogs-happy-delighted-gif-14815268

[rapid merlin]

Shadowww

You should tast fries with meat and cheese and vegetables

Tastes really good

[wide marten]

In case you ever want to deep dive on that topic, there's a fantastic YT channel discussing wireshark and using it to disect protocols. "Chris Greer".

[sand trench]

sounds like a kebab salad plate

[arctic cradle]

thank you!

[twin ridge]

Gave +1 Rep to @wide marten (current: #52 - 140)

[shell nova]

You know better now that companies are soulless machines preying on our sensibilities to try and get more money

[rapid merlin]

Its called kapsalon and looks like this:

[sick lance]

We support pride, give me monies

[shell nova]

That yeah

[devout palm]

this tbh

[shell nova]

I mean it annoys the Tories I guess

[sand trench]

while most don't even release extra pride month merchandise

[devout palm]

It's just a marketing technique

There are tons

[sand trench]

yeah marketing

[shell nova]

Arg why do I get all the car troubles today 😦

[sand trench]

part of the scourge of humanity

[wide marten]

*in countries where supporting pride is socially accepted anyways

[sick lance]

From the context of the conversation, that was going to be obvious.

[devout palm]

Because it's chewzday init jk

[sand trench]

even Ea-nāṣir had some great marketing somehow

[shell nova]

I mean it's pretty rough in the states

[sand trench]

it is pretty rough everywhere for some parts of lgbtqia+

[shell nova]

Oh that's fair... The connector for my rear lights literally flared out this morning , and now I got a transmission warning

[devout palm]

Ow

[shell nova]

Had melty plastic and a burned through pin

[devout palm]

Unlucky

[sick lance]

Renault?

I had a Renault once, never again.

[shell nova]

Mini

[mossy river]

Evri stole my package 😡

[shell nova]

Worked at Renault once, never ever

[sick lance]

How tf you fit your bow in there?

[sick lance]

Good to know the company is as shite as the cars.

[shell nova]

Very carefully

[sick lance]

Complain!

[shell nova]

Well I saw what they used to design the cars

Worked on bits of that as well

[sick lance]

4-6 year olds and crayons?

[mossy river]

I submitted a ticket. Who knows how long this is going to take

[shell nova]

Close enougg

[sick lance]

Well...

Evri are late with everything...

So.. Good luck

[mossy river]

It’s just clothes 🙄

[shell nova]

Hoping the transmission thing is a spurious sensor error and that the ECB just put the whole thing in a degraded mode

[sick lance]

Not the point.

They literally have one job

[errant fossil]

Do websites like https://www.isitdownrightnow.com/ use ping or is it another way to determine a website is operational?

[sick lance]

User feedback.

[chilly veldt]

Yuuuup, you heard the whole target scandal?

[mossy river]

No I mean it’s just clothes, why steal them 😂

[shell nova]

Which one?

[sick lance]

Check your local facebook market place

[hollow pivot]

My suncream was stolen once

Times are tough

[shell nova]

I mean amazon stole one of my packages once....it was beer

[chilly veldt]

They removed 80% of their pride merch and haven't paid any of their queer designers

[errant fossil]

Thank you

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2416)

[shell nova]

Ouch

[chilly veldt]

Yuuuup

"because of politics"

[hasty palm]

good evening

[sick lance]

Good afternoon.

[hasty palm]

today i wrote my first bash script, in a lab environment but still. 🙂

[mossy river]

It was delivered today LOL

[sick lance]

"delivered"

[mossy river]

Taking all my anger out on these weights

PR incoming 😤

[terse edge]

I need experience in ansible, Infra as Code, CI/CD and devops. How should I get started on that? I have during my dev career used containers for dev and deployment using docker, phpuphet, and vagrant. I have not used ansible as much as I would like. I'm thinking, what can I do to get practice, so I can say on resume, I have experience with it.

I have a Proxmox server, 32GB RAM, Intel CPU, I have 14 nodes currently. I am wondering, how can I automate setting up some new LXC containers using ansible... to get experience?

https://docs.ansible.com/ansible/latest/collections/community/general/proxmox_module.html I found this module. Hmm.

[clear jackal]

It wouldn't be experience, you'd place it into a projects section. Work experience is different than personal development.

[terse edge]

I see. So I can control PVE with ansible. Create containers and launch them etc. etc. with whatever services inside them.

Oh ok

[shut hawk]

One more exam to go 😌

[devout palm]

Ya got this

[sand trench]

Pizza pizza pizza

[gray sonnet]

what cheese 👀

[sand trench]

Just standard mozzarella this time

[gray sonnet]

I like the cheese that melts in your mouth...I forgot what it's called haha

[gray sonnet]

👀

plain cheese pizza?

[worn thorn]

hmmm cheese

[sand trench]

Nope there is other stuff on it too

[gray sonnet]

👀

[rapid merlin]

What stuff?

Some meat?

[sand trench]

Pork thingy... Ham... Champion mushrooms... Onion... Garlick sauce

[rapid merlin]

Woo sounds good

[sand trench]

Gonna eat it soonish

[worn thorn]

fancy that :O

[rapid merlin]

Dayum. Enjoy your meal!

[wild rose]

https://tenor.com/view/suspicious-gif-16707238365657804070

[rapid merlin]

And there you have me, eating string beans

Everyone at their own level, they say

[gray sonnet]

what are string beans 👀

[worn thorn]

best beans

[pallid lotus]

Better question. Which one of you muppets actually went out and setup a website for fluffclan?

[gray sonnet]

Me...

[whole yew]

you have one guess....

[pallid lotus]

[devout palm]

Don't click the links

in his website

[rapid merlin]

Nahh, green beans are better tbh

[pallid lotus]

What, the ones leading to admin.tryhackme.com?

[gray sonnet]

yeah lmfao

[whole yew]

muiri, i was super disappointed

[devout palm]

Erm

[pallid lotus]

https://tenor.com/view/deep-magic-lion-witch-narnia-dont-recite-gif-14879671

[gray sonnet]

am I allowed to use those?

[devout palm]

Don't call me stewpid

[worn thorn]

beans

[whole yew]

I tried to use that house for sale link that you had listed, and it was 404'd

[devout palm]

But i fell for it

[pallid lotus]

I remember when that was created

[loud marlin]

Elder one...

[mossy river]

TryHackMe has cheaper merch for the record 😁 store.tryhackme.com

[rapid merlin]

Mhh?

[worn thorn]

both are great

[pallid lotus]

Wait, what? Is that genuinely down?

[whole yew]

it was about 2 months ago.

[pallid lotus]

Y'know, I think I may have not renewed that domain...

[compact yoke]

Hello guys, I want a honest answer. I was just scrolling thru reddit and someone posted a link saying "join my new app" and i wanted to, next thing yk its ||cp||, what do u think I should do? DDoS it and report it? or what shall I do?

[mossy river]

Just report it and move on

[compact yoke]

Alright.

[rapid merlin]

Report and leave to autorities

[whole yew]

Report to law enforcement and don't attack it

[mossy river]

Two wrongs don’t make a right

[compact yoke]

Its currently owned hy Cloudfare som

so.*

[pallid lotus]

That I doubt

[mossy river]

It’s not

They’re hosting the app

Anyone can rent from CF

[compact yoke]

True.

[whole yew]

Cloudflare probably owns the public facing IP because that's how services like cloudflare work.

[compact yoke]

how can I report the website if im outside of Americam

[mossy river]

https://report.cybertip.org

[compact yoke]

Alright Thanks.

[mossy river]

https://support.google.com/websearch/answer/148666

[rapid merlin]

One other thing. Never ddos something :). Its heavily illegal

[devout palm]

Muiri, would you like to send us some shiba pics?

[pallid lotus]

Sure!

[rapid merlin]

Ah yeah xd

[mossy river]

And it won’t really do anything because they’ll just pop up elsewhere and then your lead goes

[pallid lotus]

https://shibes.xyz

[sharp citrus]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[pallid lotus]

/bash

I cry

[mossy river]

L bozo

[devout palm]

no bash

zsh

[pallid lotus]

https://bash.muirlandoracle.co.uk/imgs/20210118_223907.jpg

I am the bot

[mossy river]

Gosh 😂

Knew you were a bot muir

[devout palm]

Easy mode bot

jk

[pallid lotus]

http://bash.muirlandoracle.co.uk/imgs/20210105_211056.jpg

That reminds me, gotta remember to leave those subdomains active when I migrate the blog

[pallid lotus]

I swear there's at least one more of those APIs

[mossy river]

Bot won’t crash when using /ollie, it will just generate a blank embed

[compact yoke]

Reported it.

[sick lance]

Worst dog tag ever

[wild rose]

I love dogs with floppy ears.

[mossy river]

Spaniel?

[boreal scarab]

We can spot him if he ever goes into a blue room 🤔

[pallid lotus]

http://reno.muirlandoracle.co.uk/
Not sure about spaniel

[loud marlin]

quack

[pallid lotus]

Oh, also
https://min.muirlandoracle.co.uk
For my own dog ♥️

[boreal scarab]

Fox

[mossy river]

You’re an ass

[worn thorn]

my nemesis

[pallid lotus]

I set that one up for Para

[mossy river]

My proxy is too slow with the signal I have but I know exactly where that was going

[pallid lotus]

He flew right into it

[loud marlin]

muahaha

[devout palm]

I was so fast that i managed to close it

[mossy river]

To think I thought Muir had a heart

[lone thistle]

sigh you got me

[pallid lotus]

[devout palm]

[pallid lotus]

I had a year long feud with Pars where I refused to send him pictures of my dog until he apologised for something. Can't even remember what it was.

[devout palm]

You can point all subdomains to rickroll

[pallid lotus]

Then the whole animal API craze started

[devout palm]

That would be nice

[pallid lotus]

So I set that one up and posted it in THM general

Got an angry message a few hours later lmfao

Pride cometh before a fall. He thought he could gloat about getting pictures of my Min despite not being allowed them.

[whole yew]

classic muiri

[pallid lotus]

He learnt 😁

[wild rose]

My fried chicken with a cone.

Huh didn't post

[mossy river]

Ah

There’s supposed to be an image

[pallid lotus]

Phew

[mossy river]

I thought you lost it

[pallid lotus]

Changed my mind

Cute!

[mossy river]

I read those messages in reverse order and thought you hated it 😂

[wild rose]

She's shaved right now. Not cute at all.

[mossy river]

Need sleep

[wild rose]

How could you hate that boop snoot with eyes?

[mossy river]

Jealousy that it’s not mine?

[wild rose]

Willing to share her if you can give her a bath? She's stinky and hates water btw.

[mossy river]

I’m very much I want a dog but not all the work that comes with it

It would break my heart because I don’t have the time for one

[wild rose]

True, owning a cat is much easier. Just feed them and they're pretty much happy.

Dogs run on a schedule. You need to make time for them everyday.

[mossy river]

I’ve had a total of 3 dogs, dog sat 2 more, and about 6 cats

Cats were the easiest but dogs were the best

[wild rose]

Post pictures of them. We have a dog walker in our building who will pet sit when we're out.

She also walks our cat Ashton who's an outdoor cat.

[valid mauve]

Is rooms showing as a blank page an issue localized to me or not?
With how today's going, I'd not be surprised if it were the former.

[mossy river]

I don’t have pictures of two of the cats because they passed about 10 years ago

[devout palm]

Aw

[mossy river]

Can you post a screenshot to #site-bugs and check your console for errors

[valid mauve]

All of them are handsome!

[sick lance]

I want to buy the blackcell pass for MWIII

[terse edge]

I'm going to try to apply for at least 10 jobs a day.

All I have to do now is write one paper and then I graduate.

In the meantime, daily 10 resumes at least, and in a month it'll be 300

[wild rose]

I stopped playing MWIII after all the skins made it so cartoony.

[terse edge]

Making custom tailored resumes for each job

it's hard work but eh

[sick lance]

I already have the position I want to move in to, I even know somebody who is going to tell me when they're going to be looking for me.

I'm just finishing my studies first.

[mossy river]

Bo1, Bo2, Bo3, Infinite Warfare, Ghosts

Best COD games for either story or multiplayer

[valid mauve]

Resolved appears even Ubiquiti equipment doesn't like 200+ concurrent connections. One of the things I gotta fight with here during company event pooling our entire workforce in one location

[terse edge]

I can't enjoy human weapons.

I don't like these games

[chilly veldt]

Ehhhh, spray and pray doesn't work that well tbh

[terse edge]

I like Doom. Alien weapons. Laser shooters.

[sick lance]

You missed out CoD4 and W@W.

[terse edge]

Human guns are soooooo boring.

[valid mauve]

Bloody bavarian middleofnowhere. Blegh.

[terse edge]

COD games are dull. IMO

[mossy river]

I don’t remember them, I was a wee child

I played W@W just don’t remember it

[terse edge]

Doom 2 > *

[gray sonnet]

Mac! Hai! Long time

[terse edge]

Fight me.

[gray sonnet]

how're you doing?

[terse edge]

Dun dun dun!

[chilly veldt]

Hmmm, might be the reason why we have slow internet as well

[mossy river]

Fighting you over your opinion sounds like something a politician would do

Am not a politician

¯_(ツ)_/¯

[terse edge]

That's the funny bit

or the joke rather

[valid mauve]

... Actually I'm seeing stuff in the console, and other issues are cropping up, moving to #site-bugs.

[terse edge]

fight me over opinions! because my opinion is right and your opinion is wrong.

dun dun dun!

well actually there wouldn' tbe a fight anyway

since I'm right to begin with

dun dun dun!

Alright I'm gonna go work on more resumes.

I'm using this website, since I'm in USA Colorado, builtincolorado

https://builtin.com

For USA people, try out this site looking for jobs.

Cheers

[mossy river]

What’s great about an opinion is there are no right or wrong answers, except yours because this is a dictatorship and I’m in charge 😁 /s

But no, statistically CoD has a greater player base and more reviews so technically more people prefer CoD over Doom

[chilly veldt]

All opinions are subjective and therefore doesn't provide enough stimulus to so call "to fight", if someone doesn't bring in actual factual basis on ones opinion or standing it is a totally valid opinion from their point of view

[high mulch]

[wild rose]

https://tenor.com/view/with-great-power-comes-great-responsibility-spider-man-peter-parker-tom-holland-andrew-garfield-gif-25326617

[sick lance]

I played the new Dooms, they're not as good as the classics.

[terse edge]

Doom is going strong after 30 years, wads are still being developed! 😄

Doom is the greatest FPS of all time. No arguments accepted!

I have never played doom 2016 or eternal

[sick lance]

Wolfenstein was much better.

[terse edge]

I kind of ddin't even like doom 3 that much

Doom 1 wasn't my fav, but doom 2 was my fav

[chilly veldt]

You don't provide any factual basis on this matter and therefore rendering your argument invalid, making your opinion have no standing

[terse edge]

That's just like... your opinion... man.

[sick lance]

I still play Doom and Final Doom on the Ps4.

[terse edge]

https://tenor.com/view/the-big-lebowski-thats-like-your-opinion-man-gif-15076479

[whole yew]

Doom 2016 and Eternal were both pretty good. I get why some purists wouldn't like the new meta game mechanics, but it was nice to see anything that added to the game and wasn't microtransactino gimmicks.

[sick lance]

Losy my Doom 2016 save, so I dumped it.

[sick lance]

Have you seen the trailer for the new one?

[whole yew]

I have, i will more than likely buy it

[mossy river]

@chilly veldt next tattoo incoming

[whole yew]

At this point, i'm basically buying any game that isn't a live service just to support things that aren't predatory

[sick lance]

Silent Hill 2, Black Ops 6 and that are probably the only games I'm definetly buying.

[high mulch]

titanfall best fps

[wild rose]

Live Service is the most hated term in tech next to AI.

[chilly veldt]

Niiiice, I can't find an artist I want to go with on my next 😦

[terse edge]

If you were to do a PhD, what would you do your thesis/research on?

[mossy river]

You change artist??

[terse edge]

I'm doing a consideration of doing a PhD

[chilly veldt]

My artists change places 😦

And don't respond

[terse edge]

Just a consideration. I don't know if I want to go into academia.

[mossy river]

🚩 🚩

[clear jackal]

I've started purchasing/repurchasing games I don't have with me on the used market

[chilly veldt]

So I am forced to 😦

[terse edge]

But it's nice to call myself doctor and be legit.

Doctor of Cybersecurity

Cybersecurity gets sicks sometimes

You have to tend to it.

Ha.

[clear jackal]

Finally bought a physical copy of Halo 3. Also bought Fallout: New Vegas

[terse edge]

I would change name to Did you DDG?

Because Google is unusable at this time.

Search results are terrible.

Mostly a comment on google sucking more than your nickname

[sick lance]

Did you Duckduckgo doesn't roll off the tongue as easily.

[clear jackal]

Did you Guided Missile Destroyer?

I don't think that makes sense

[terse edge]

Que?

DGMD?

[arctic cradle]

https://tenor.com/view/cat-meow-cute-gif-18625283

[terse edge]

Where did you get the M from?

[clear jackal]

DDG are a class of ship

[terse edge]

Got meeting with Uni career counciling services today at 2pm

11am appt with course instructor to discuss ideas for thesis research paper

[chilly veldt]

Yeahhhhhh, now I want to find a reliable person

[terse edge]

So someone is liable for something

[rapid merlin]

hello

[terse edge]

And someone can be reliable fi you can depend on them

Sure

I get that.

[sick lance]

Hello.

[terse edge]

But what about DE liable?

You can liable, you can RE liable, but can you DE liable?

That's what I'm on bout

[sand trench]

and back from eating pizza

[clear jackal]

No

[terse edge]

My resume builder is working 100% flawlessly. Can't automate the GPt keyword extraction part. That is manual, as you extract the, but you have to intelligently edit your resume yourself.

[mossy river]

If you’re fine with different styles and not knowing if the artist is actually good and knows how to make a tattoo last long then it’s fine

Personally I want the same style art on me

[clear jackal]

Delible is a word though and that's "capable of being deleted"

[mossy river]

Too wordy of a word

[terse edge]

I think it looks nice enough

Simple, easy peasy, passes ATS checks, text only, nothign else,

the only formatting I have is ____________________________ etc.

I hope that ___ chars don't screw up ATS software

[cold jungle]

Hey can anyone tell me where to put the txt file to test RFI?

[terse edge]

you have to host it

[cold jungle]

Any suggestion how?

[sand trench]

time to ask all the british people in here:
what is the word for the day before yesterday
what is the word for the day after tomorrow

[cold jungle]

And wehre

Where*

[terse edge]

You can put it in any directory and use python3 http.server on an port and server it there

For RFI, the exploit has to be hosted by you somewhere where ti can be fethced by the remote fil inclusion vujln

[cold jungle]

Any easy solution please

[terse edge]

Easiest way if you're on the THM VPN is to host it using python in a directory using python quick http server,

[cold jungle]

Would have to setup python each time

[pallid lotus]

In what context?

[terse edge]

I just give you all the solutions

🙂

google them learn them and employ them

[terse edge]

yes. nothing is magic. everything is manual.

[sand trench]

well you could setup a docker container to handle it but that sounds overkill

[pallid lotus]

Why?

[cold jungle]

Docker is seriously overkill

😭

[pallid lotus]

Nothing overkill about containerisation smh

[sand trench]

¯_(ツ)_/¯

[terse edge]

It's this easy...

[pallid lotus]

What are you attacking and where is it hosted?

[terse edge]

This is the only python 'setup'

[sand trench]

having a full web serving docker container to host RFI files for the super rare instance where you can exploit RFI feels like overkill to shadow

[terse edge]

You have to run the commnand to host it.

[cold jungle]

File inclusion attack in Jr Peneration tester

[pallid lotus]

Then yes, a python server will be simplest

[terse edge]

I just showed you a screenshot of that challenge task and how you can host the cmd.txt exploit

[cold jungle]

Yeah, would prefer going with this one...

[pallid lotus]

Why? And what happens if you need TLS?

[terse edge]

self signed cert

[sand trench]

you know did not even consider the problem of TLS

[terse edge]

easy peasy to create self signed certs

Firefox may give trouble, but chrome won't.

[pallid lotus]

There are also a million and one reasons to host a web server, not just RFI

[pallid lotus]

Eh? Why will chrome not?

[terse edge]

Chrome accepts self signed certs

Firefox makes it hard.

You can stil do it but it's a whole process.

[pallid lotus]

Or you could just use the Caddy docker container in a one liner to do that for you 🤷‍♂️

[terse edge]

sure

tons of solutions

easiest one is to run apython server instantlyu with one linel

my fingers hurt

[pallid lotus]

Rubbish
They both throw a warning. A virtually identical warning for that matter. You need to click through it either way

[terse edge]

I'm speaking from experience.

I battle this with self signed certs on firefox all the time.

Internally I use self signed, externally let'sencrypt

for example, right now kibana is hosted using self signed cert. Firefox craps out. Chromium does not

Also sorry I don't use chrome. I use chromium

I should have specified.

https://superuser.com/questions/1780337/let-firefox-accept-a-website-with-self-signed-certificate

[pallid lotus]

That's the button you're looking for

It's not exactly difficult lmao

[terse edge]

I don't get that button

[pallid lotus]

Well that's a brand new, default instance of firefox, so lord knows what you've done there

[naive violet]

ESR or regular?

[terse edge]

I'm not th eonly one

whatever came with ubuntu; snap i think

[pallid lotus]

ECR in that screenshot.

Regular in this one

[finite basalt]

👋 hey

[naive violet]

Burr!

Long see no time

[chilly veldt]

Yeah, I have different styles already and last couple of times I found them by their provided previous art

[finite basalt]

Yessir, how've you been?

[naive violet]

How's shenanigans?

[naive violet]

Busy, but good. Lots of projects, metric tonne of hardware repaired

[finite basalt]

Doing pretty well, been busy with work and sleeping at the wrong times but I'm alive 🤣

[naive violet]

I lived on GMT -8 at uni

[finite basalt]

I'm working full-time still haha, 3am going to bed and getting up at 6am for work

I go part-time in september for my final year

[naive violet]

That's not sustainable

[terse edge]

you can't keep that up for too long

body will give out

[finite basalt]

I've kept it up since ~september

[arctic cradle]

how do you even cope with it, if I do this for 3 days, I will die from migraine next 2 weeks

[finite basalt]

Weekends haha

[terse edge]

youth is probably on his side

When I was yhoung i could stay up for days too

[arctic cradle]

yeah, actually giving it a second thought, I was the same

btw James, nice TRON avatar

[finite basalt]

Yeah, I did have one night I woke up at 1am, couldn't get to sleep and got up at 3am and started doing some work 🤣

[pallid lotus]

And this is an Ubuntu 22.04 instance with snap install Firefox. So, again, lord knows what you've done there

[finite basalt]

Thank you 😄 I was actually watching it the other day and forgot how good it was so I changed my pfp

[twin ridge]

Gave +1 Rep to @arctic cradle (current: #1399 - 2)

[arctic cradle]

I heard they are making some sort of a new TRON movie, can't wait to watch it, also I should probably rewatch the movies as well

recently watched all Naked Gun movies, had a blast, classic humor

[finite basalt]

Yeah I think it's due in 2025

I'm excited for it tbh

[sand trench]

what site are you using to test this???

[pallid lotus]

Oh, yeah, funny you should ask that Shadow

[sand trench]

wanna check how arkenfox user.js for firefox reacts....

[sand trench]

ah

[pallid lotus]

A freakin' Caddy oneliner lmfao

    tls internal
    reverse_proxy 127.0.0.1:5901
}```

reverse_proxy line isn't necessary. I just copy/pasted from notes and couldn't be arsed removing it

[whole yew]

kek

you have a signed CA cert, why are you bothering with local?

[pallid lotus]

That's a self-signed cert

I literally just threw that up to prove a point (well, two points at once)

[quasi hedge]

Are there any recommended sources for cheat-sheets like hacktricks?

[finite basalt]

That reminded me muiri, I created a poc docker compose file using vulnerable docker containers and wanted to use it to pivot between machines which I used to learn some docker compose networking by trying to do things like isolate the networks

[whole yew]

fair, i just looked over from work to see the typical self-signed error

[finite basalt]

Was curious, did you end up using docker compose/swarm for your stuff? or were you using a different containerisation software?

[pallid lotus]

Heh, inspired by anything we know?

[sick lance]

Yer maw

[pallid lotus]

Gauntlet is all docker compose, yeah. These days I'd probably go for Terraform with LXC instead, specifically for something like a networking CTF challenge.

Docker compose or K8s for app deployment

[whole yew]

how does lxc handle rootless orchestration?

[finite basalt]

Thought it might be something worth looking at for our hack soc because it'd be nice to make something bespoke sometime and it seemed like a good opportunity to further what I know about docker

[whole yew]

haven't looked into it much, more familiar with podman and docker engine

[finite basalt]

That's fair, you looked into pulumi at all?

[pallid lotus]

Haven't a clue. I know it's possible, but not been down that route yet

[pallid lotus]

This 😆

[pallid lotus]

No, but that looks interesting

[finite basalt]

I've not played with terraform yet but have used pulumi (if you're using yml it's very similar) but it supports most major languages so it's really useful

[whole yew]

IMO anyone using containers as root is asking for trouble. Pretty much all the garbage things I see with containers are things like "run this container unrestricted or it won't work"

[pallid lotus]

I went the Terraform route because it's the industry standard

[finite basalt]

It's designed to work with AWS, Azure, Google Cloud and Kubernetes

[pallid lotus]

Oh God yeah. That's just lazy development imo

[whole yew]

hashicorp causing a revolt and most of the devs going to OpenTofu hasn't changed your mind?

[clear jackal]

These project names are getting out of hand 😆

[pallid lotus]

See, I seem to have missed this whole drama. Run into it briefly once or twice, but we still use terraform at work, so that's what I've been learning

What happened?

[finite basalt]

Yeah terraform's definitely the standard and I've taken a look at it but not made any projects with it. I did however make a lovely little project with pulumi, wanted to automatically schedule starting and stopping of EC2s as we entered and exited office hours and so I used pulumi to deploy and configure all the infra

[terse edge]

I'm drawing blanks on capstone ideas.

[pallid lotus]

That said, I do like the idea of OpenTofu

[terse edge]

No idea what to do my research masters thesis on.

[sick lance]

Relative to the field you want.

[terse edge]

Yeah but it too vast.

Gotta narrow it down a lot.

[pallid lotus]

Is it fully compatible with HCL and TF providers @whole yew?

Just googling the answer to that one as well

[finite basalt]

Just done a quick check, pulumi supports python, go, c#, java and yaml so god forbid you wanted to write infrastructure as code in c# or java you can haha

[sick lance]

I've seen some people struggling because they want to work in apples, and they do a thesis on pears.

[pallid lotus]

Disgusting
Assuming it's not declarative?

[terse edge]

I'm not sure what so I've an appt with course instructor in 15 minutes. Going to discuss potential ideas.

[finite basalt]

No I believe it is 🤣

[hot cairn]

No rust? Sad

[finite basalt]

I believe that's a work in progress

[hot cairn]

Rewrite everything in rust!

[finite basalt]

I like my typescript 🤣

[valid mauve]

Don't tell that to my customers lol.

Or rather, don't tell that to my colleagues. Because they will.

[finite basalt]

Yeah there's some things with pulumi that are worth learning as well because it relies on a state file and so if you login locally and for any reason wanted to share the state with another person, you need to tell it where to store the file. Aside from that it's beautiful

[finite basalt]

I had the misfortune of inheriting a C# project at work because they asked me if I knew it and I'd dabbled with it a little. Another colleague also ended up hopping on it so I also had to bring him up to speed 😭 It's finally getting there though, I hadn't touched C# in nearly a decade too

[rapid merlin]

Always happy to see MuirilandOrcale on chat.

👋

[finite basalt]

So either tomorrow or when I'm back from leave I'll be auditing his code before I merge it across

[rapid merlin]

Same here, wrote it a long ago for basic game modding.

[finite basalt]

Unfortunately, while I picked up quickly, the lad I'm working with was actively avoiding reading the documentation and relied on me till I said I wouldn't help him till he read the docs, I did feel bad but it was becoming a hinderence 😅
I would definitely have been better off on my own but he needed a project to work on so ended up on mine, that's been the bigger headache than getting to grips with the project

[sick lance]

Oh a new LoZ game, where you play as Princess Zelda.

[finite basalt]

coming out or already out?

[sick lance]

Coming

[finite basalt]

oooh, might have to take a look

[wild rose]

yeah it was leaked also a Zelda movie in the works.

[sick lance]

It's the same style as remake of Links Awakenin

[sick lance]

Wasn't that for Netflix?

[sick lance]

https://www.youtube.com/watch?v=94RTrH2erPE

[wild rose]

Not sure, but Nintendo is teaming up with Sony Pictures to produce the live-action.

[strong skiff]

hope you won't mind it in between😅
https://github.com/Chaitanya907/gravitational-wave-around-two-Kerr-black-holes-in-orbital-motion

[sick lance]

What's this?

[strong skiff]

it is what the link says "Gravitational wave around two Kerr black holes"

you can see it!!

[sick lance]

Just because it's named that, doesn't mean it is, what it is.

[mossy river]

Too much math

[strong skiff]

it's just a github link

nothing scary

[mossy river]

Always good to be wary 😎 prevention is the first step to security

[chilly veldt]

That moment when you cut off a friendship on good terms

[boreal scarab]

@chilly veldt May I DM?

[chilly veldt]

Sure

[next void]

Hey guys, it's my first time here in this channel. I just wanted to know if this is where we ask for help for the THM Labs?

[mossy river]

Yes!

#room-help for general help. Most of the channels might not be visible to you due to onboarding

[normal vessel]

We can send mods verification for certs like Sec+ right? I just passed my sec+

[shell nova]

Yeah, you may

[normal vessel]

okay when my status gets updated online I will 😄

[shell nova]

Alright

(Gratz, btw)

[shell nova]

It's a fork, so in theory it should be

[shell nova]

Strike my last, glanced too quickly and lost the subject

[wide marten]

At least I didn't need a verification. I just said I had them.