general

[mossy river]

Not that

[crude stump]

Oh

Tbh manuals scare me

Spooky

[loud marlin]

Red Team field Manual 🙂

[crude stump]

It’s a pretty cool manual but it doesn’t really explain to to use all the stuff

I’m guessing you would have to research it more

[loud marlin]

is just shot notes kinda

[boreal scarab]

Cute kitttieeees!

[pallid lotus]

You're in the wrong field then

[crude stump]

😂

Nah but fr I don’t mind reading

Do yall like pickles

I absolutely love pickles

[molten sky]

@mossy river funny timing -- just scrolled through reddit for a bit and the "add commas to your passwords" thing is a hot post today in a sub or two

[magic vector]

Hello everybody

[molten sky]

cursed gif

but also hello

[rapid merlin]

hello I'm new !

[blazing granite]

Hello New, I'm GNU-Rex 😂

[molten sky]

new meet gnu

[rapid merlin]

damn thats actually fire

[loud marlin]

it is kinda nice to play with

[molten sky]

bluetooth tomato right

[loud marlin]

i never buy adapter for some reason =/

yep

and free c2 server is crap

[blazing granite]

IDK why but that remind me of the film "Attack of the Killer Tomatoes" 😂

[loud marlin]

for c2... you miss nothing... i host it on AWS and is just pain in ass

[twin ridge]

Gave +1 Rep to @loud marlin (current: #26 - 315)

[loud marlin]

oMG cable is also kinda nice

@boreal scarab
https://github.com/hak5/omg-payloads/blob/master/payloads/library/exfiltration/Tree_structure_of_the_operating_system/payload.txt heh

[crude stump]

Lmao a Florida man shot at a Amazon delivery drone thinking it’s a spy drone

[jovial musk]

ofc

its florida

ofc alliens would like to see tf they are doing

[crude stump]

Correction “Walmart deliver drone”

[loud marlin]

some dumbass also try fly drone in our company... guard shoot it down =/

[crude stump]

With those signal blocking gun thingamajigs or a net gun

[loud marlin]

real gun

[buoyant tree]

Uh what is going on?

[crude stump]

Conversations

[buoyant tree]

Nice marksmanship

[buoyant tree]

Wait are those already out?, thought they were concept

[crude stump]

They are used in military

[loud marlin]

they are army. just in case that we do some super high lvl then also special army is there. and yes they have full go if some is stupid enough to try walk in

[buoyant tree]

Blink if you work at a military base.

[crude stump]

https://youtu.be/_GPLsJ4FLuA?si=BiM0Oqjlye0VCpld

[buoyant tree]

Quite much better

AI written code is not usually secured by default

So yes, 0day's will be much easier to find

[clear jackal]

Right now, you would need a way to train the model to find zero days, from my understanding, which would be quite difficult.

Zero days are unknown

Can you use LLMs to make exploits more efficient or have a higher success rate? Yes.

AGI is likely where it's going to fork a bit though

[loud marlin]

or as some train a the big birds like eagle to catch drones 🙂

[crude stump]

Oh yes I see that too

That’s very cool too

[clear jackal]

To dig into this deeper, you may be able to train the LLM on some form of pattern matching? Such as training it on a category of exploit and then looking for patterns that match in what you're testing? Idk, AI is not my area.

[loud marlin]

like burp automation testing links and or so ?

[gray sonnet]

I just went on a 5k run

I don't know why I did it, but I did...

[buoyant tree]

go sleep

[clear jackal]

More like pattern matching in code

[clear jackal]

Nice!

[gray sonnet]

I can't 😭

gonna start off the day with something nice hehe

[gray sonnet]

aye! exercise is good 😄

[buoyant tree]

now drink water atleast

[clear jackal]

You have x result, review the code behind those results(human & machine reviews), see if there is a pattern, go from there

[gray sonnet]

Not immediately

In a couple minutes

[jagged moon]

I guess, more realistic is it running code and finding irregularities in execution flow that are indicative of flaws. But don't quote me on that, also not ai person

[clear jackal]

Yeah, this is kind of what I was getting at but didn't know how to put it into words

[gray sonnet]

Hey Fluff

[jagged moon]

Kind of like debugging, but on steroids and much faster than human would do

[clear jackal]

Pretty much

It's not that it's doing the work itself, it's the x factor of work output of an individual contributor

Idk if that sentence makes sense, I'm tired af

Force multiplier is probably a better way to put it

[jagged moon]

Ai fuzzer could be fun. Without actual fuzzing, just simulated based on decompiled binary

I am proud of you

[molten sky]

and yesterday too, right?

[gray sonnet]

Hey Verum 👋

[molten sky]

Hey me

[boreal scarab]

GIB KISMET CASE!

[molten sky]

welp that's enough discord for today

[gray sonnet]

Hello there 👀

[molten sky]

https://tenor.com/view/kto-lbow-hi-hello-hi-there-gif-25347432

[gray sonnet]

Good night!

[fair marten]

hi

[boreal scarab]

So, it drops your entire folder structure into your own Discord via webhook?

[gray sonnet]

Hi 👋

[fair marten]

hru mate

[gray sonnet]

Doing good, got back from a 5k run and took a shower

[fair marten]

good joob

W mans

[fair marten]

uk you just reminded me to go back to running

[boreal scarab]

mmmmm 221 Human teeth

[gray sonnet]

YES, go back to running!

[fair marten]

i'm specialist at 1.5km run

[gray sonnet]

Detroit become human?

[molten sky]

running is fun and all
but it's like 100 degrees and 97% RH rn so yeah let's not

[boreal scarab]

In what reality does that look like Detroit Become Human?

https://tenor.com/view/bonk-gif-13392138837084579216

[gray sonnet]

it's 75 degrees here lol

[molten sky]

37 degrees for all you weird temperature having places

[gray sonnet]

what game is it then 👀

[fair marten]

bro my dad doing sport since he was 18 now he's 56 yo never smoked or something but he got heart atack

doing sport is better than nothing

[gray sonnet]

you mean non-freedom units

[clear jackal]

I went mountain biking today, it was a mistake

[boreal scarab]

Police Simulator Patrol Officers, with the Highway Patrol DLC

[gray sonnet]

Oh wow, nice!

[molten sky]

looks like tomorrow is 90oF and 72%

[clear jackal]

With heat index it was like 110°+

[molten sky]

high UV index as well

[clear jackal]

I also broke a pedal

[molten sky]

who needs pedals anyways

flinstone that shit

[clear jackal]

My bike is Giant, both in name and in size

[fair marten]

my knee hurts if i dont move for more than 15 mins do you have any idea why?

[gray sonnet]

I'm not a doctor, so probably not haha

[fair marten]

haha true

[clear jackal]

I can't touch the ground if I'm on the bike, and I'm 6'5"

[fair marten]

we use meter 💀 so i dont understand

[clear jackal]

Move around more, it will help your ligaments and tendons

[molten sky]

2

[clear jackal]

~197cm

[gray sonnet]

Oof, tall man

[fair marten]

can i start running again? ( stopped a month ago)

[gray sonnet]

I'm 5'10...

[clear jackal]

I probably wouldn't off the bat

[fervent iron]

Damn, my discord bot will mean the death of Discord lol

[clear jackal]

Running is high impact

[fervent iron]

Im taking it out replacing it with my own improved version

SoundCloud and Spotify are going down too

[fair marten]

i'm 5'90 😊

[clear jackal]

You need to strengthen before going back to running

[fervent iron]

my bro at www.whyp.it has made a nice app. but playlist.lsangeles.com will be far better

[molten sky]

but tbf if he's already been running he probably has proper form, so not AS high

(probably)

[fair marten]

cuz i walked alot since it started hurting but nothing changed

it also makes sound hhhhhhhhhhhhhhhhh

[clear jackal]

In comparison, running is one of the highest impact things you can do to your joints on the cardio scale

[molten sky]

100% --- just thinking more along the lines of "can i resume"

[clear jackal]

You may want to see a doctor, we're not medical professionals

[fair marten]

ye true

[clear jackal]

Yeah if there's pain, probably not

[molten sky]

i'm tryna figure what noise hhhhhhhhh is and where it's coming from lol

[fair marten]

from the bones

[molten sky]

i missed a few messages apparently 😂

[clear jackal]

Yes

[clear jackal]

Actual bone pain is typically pretty severe

How old are you?

[fair marten]

19

[clear jackal]

You could be getting late stage growth spurt

[fair marten]

but the pain comes only from one knee and only if i stay too long without mooving

[clear jackal]

Body does weird things sometimes, but at this point I'd recommend a doctor

[fair marten]

yes you're right i should see a doctor

[clear jackal]

Walk (forwards and backwards) , swim, cycle

[fair marten]

i went to the beach today

[clear jackal]

All of those are low impact

[fair marten]

( i almost died i couldnt swim well with that leg in pain )

[clear jackal]

OK, so see a doctor

[molten sky]

cycle x2?

but yeah doc

[loud marlin]

is it bone direct or muscle or so ?

[fair marten]

bro didnt hesitate haha

[clear jackal]

We're not medical professionals

[fair marten]

just a 2 bones friction sound

[clear jackal]

At this point we've given basic remedies

[fair marten]

cs majors 💀

[fair marten]

yes and thanks a lot

[twin ridge]

Gave +1 Rep to @clear jackal (current: #17 - 430)

[clear jackal]

So everyone's weather was miserable today, right?

[loud marlin]

then might the soft thing in middle. idk english name

[fair marten]

and sorry i didnt google

[clear jackal]

I know it was too hot here

[fair marten]

my life is

[clear jackal]

Probably going to try and stay inside tomorrow

[loud marlin]

here was 3x rain in one day =/

[clear jackal]

May get roped into car repairs with a friend though

[fair marten]

how many degrees was it today?

[clear jackal]

I put it above, with the heat index 110°+, so 43°C+

[fair marten]

daamn where is that?

[clear jackal]

DMV

[fair marten]

i guess i should thank god for the 33

[sinful moon]

Gotta love when the boss straight up copy pastes my email response to someone else inquiring about the Ticketmaster Snowflake breach notification word for word

[clear jackal]

My body is still trying to recover from the strain I put it through today

[sinful moon]

Guess I did good lol

[fair marten]

gl with that hope you'll feel better tomorrow

[sinful moon]

Also I feel sorry for you and those temps lol

Do hope it gets better

[clear jackal]

Yeah, it's probably going to be high 90s until August

This summer has been miserable here, might move tbh

Go back to New England or try out west somewhere

[fair marten]

if it's temporary it would be fine

[loud marlin]

try harder

[jovial musk]

eyy codecademy

[cedar swan]

whats that

[jovial musk]

ure in the server

wdym

[cedar swan]

what server

[jovial musk]

the... codecademy server

you are in it

[cedar swan]

am i

[jovial musk]

yep

[cedar swan]

idk what that is

[jovial musk]

we have it in common

[cedar swan]

where is it

[jovial musk]

idk man

idk where its located ima be real

jk its the white C

[cedar swan]

i dont remember being in

[jovial musk]

in blue background

[cedar swan]

r u a hacker

[jovial musk]

yes/kinda/probably not

why

inspect element

why?

@whole yew

[cedar swan]

who that

am i in trouble

?!

[jovial musk]

@sick lance

[loud marlin]

if there is no option to download them might not be ok to do so

[cedar swan]

why are you pinging every mod

[jovial musk]

yeah its pretty damn obvious ima be real

[cedar swan]

is that against the rules

[jovial musk]

???

is stealing against the rules?

[cedar swan]

oh

[jovial musk]

yes

it is

[cedar swan]

im sorry ill delete

i didnt know

[fair marten]

lol

[jovial musk]

well you cant ask for help for something not legal

[cedar swan]

ok sorry forget it ever happened

[jovial musk]

its not up to me

its up to the mods

[cedar swan]

i hope mods are nice

[jovial musk]

they are

not to me they arent, but in general they are

[fair marten]

😂

[cedar swan]

i know scrubz

[jovial musk]

@sick lance scolded me yesterday and told me to ping anyone

[cedar swan]

hes the boring one

[jovial musk]

that was doing something not nice

[jovial musk]

well that aint a good way to get a slap on the wrist

damn you really woke up on the wrong side of the bed

[cedar swan]

no he knows its like

inside joke

he’ll find it funny i hope

[fair marten]

bad humour

[jovial musk]

well they take illigal activity very seriously here

[jovial musk]

yeah fr

insulting =! funny

[cedar swan]

isnt it !=

[jovial musk]

idk man

havent coded without auto corrector in a while

[cedar swan]

i didnt know i joined 2 years ago but my first message was yesterday

[fair marten]

why is there?

[jovial musk]

theres an extention for common typos only

[jovial musk]

damn

tought luck

[fair marten]

i see

[jovial musk]

bad day to start msging

[fair marten]

ai also does the same

[cedar swan]

youre scaring me

[fair marten]

😂

[jovial musk]

?

[cedar swan]

mods please have mercy on me im new im young im dumb you can mute me for a week but dont ban me i think this server is very useful 💔🙏❤️

[fair marten]

he said nothing but warnings

[jovial musk]

omg where is scrubz

yeah

lmao

[cedar swan]

i think hes offline

[crude stump]

What are you yapping about

[jovial musk]

aces

[crude stump]

Yes Alex

[jovial musk]

she wanted to download stuff not allowed

call a mod

like, stuff w/ copyright

and was yappin bout asking

they arnt gon ban you

[fair marten]

https://tenor.com/view/you-are-banned-banned-ban-ban-him-ban-hammer-gif-3899611162483726731

[cedar swan]

okay i asked twice i didnt know it was that bad

[crude stump]

U see

[molten sky]

🍿

[jovial musk]

yeah

im eating rn

mexican stuff

not really, its kinda from panama

[cedar swan]

im mexican

[jovial musk]

good to hear

[cedar swan]

i was watching the copa america

[jovial musk]

cool, anyways

@molten sky you made yourself a taco finnaly?

[cedar swan]

and i cried cus santiago gimenez

[jovial musk]

ah i see

idk bout football

[cedar swan]

r u mexican

[jovial musk]

yes

tacos tacos and cartel and stuff

[cedar swan]

r u allowed to say one foreign word or is this strictly english and a big no no

[fair marten]

alexandro mamamiya

[cedar swan]

i love tacos

[jovial musk]

you are already in trouble

please, just leave it be

idk what scrubz is doing over there in arkaham city

[cedar swan]

okay true im sorry

[fair marten]

there are rules you must read

#rules

[jovial musk]

i didnt read the rules, i just follow my intuition

really aint that dep

deep*

[fair marten]

( SAME )

just dont do anything wrong :V

[sinful moon]

Honestly that’s not a bad take lol, just follow common sense and don’t be an asshole and wow you’re follow the rules in nearly every server

[jovial musk]

yep

reading rules is a red flag fr

[cedar swan]

Ill study the rules 🧐

[sinful moon]

but fair this server does have some stipulations for advanced malware discussion which are limited to more advanced rooms

[jovial musk]

cuz you either paranoid, or want to say "technically it wasent against rules"

also, hi elizabeth

didnt see you in a while

havent*

[sinful moon]

Heya, yeah I’ve been around but mostly tired from work and distracted with Kingdom Hearts Steam release

[jovial musk]

seen*

[jovial musk]

lmao

[sinful moon]

lol you can press the up arrow to edit your lass message or right click or long press to edit a specific one

okay brb quick

[fair marten]

good night guys

[jovial musk]

good night

where the hell are the mods

[cedar swan]

goodnight

[jovial musk]

the fuck

i am not going to sleep

i was answering a msg

.-.

[cedar swan]

but you said goodnight

[jovial musk]

yep

cuz when someone says good night

[cedar swan]

so i say it back

[jovial musk]

i say it back

[cedar swan]

jinx

[jovial musk]

@umbral bay help me out

with a situation here

[cedar swan]

i know him too

i like him

[cedar swan]

i think they can check logs

its okay

[jovial musk]

how do you know every mod and not know the rules

[graceful thistle]

you are the situation at this point Alex, damn. You pinged all the mods already, let it go

they will get to it when they get to it

[jovial musk]

hey, yesterday they specificly told me to ping them

[fair marten]

there are 2 options
1 - you're dumb
2 - you're acting dumb

[cedar swan]

my first message was yesterday

[graceful thistle]

and you did, so now you can move on

[jovial musk]

aight

[whole yew]

You can stop now

[cedar swan]

hi mod

[whole yew]

Piracy is unethical and illegal, we don't help people do unethical nor illegal things

[cedar swan]

okay im sorry

will you mute me

please dont ban me

[whole yew]

Best way to avoid forcing us to take action is to be a good member of the community and stay within the rules

[cedar swan]

okay sorry ill be responsible

[jovial musk]

@sinful moon have you been able to use RegreSHHion's POC?

i found a bug bounty with the vulnerable version but i cant use it

dude im so pissed, im like 3cm away my first VDP

[sinful moon]

I didn’t think there was a valid public POC, I know there were some fake ones. But yeah the very low chance of successful memory corruption makes this very tricky to validate

[jovial musk]

wait

i thought i was running the origginal one

everyone was yappin bout it taking like 8 hours to run

[cedar swan]

hey look i think im okay now

[jovial musk]

i assumed they were all talking bout the same one

[sinful moon]

Qualiys didn’t publish their POC afaik

[cedar swan]

mods are nice

[jovial musk]

thats good

[jovial musk]

what why?

well i guess ik why

[cedar swan]

thx lexi

[twin ridge]

Gave +1 Rep to @jovial musk (current: #1065 - 3)

[jovial musk]

wouldve been hell on earth

[sinful moon]

because yeah it is dangerous, but they did give enough into for others to do so themselves

[jovial musk]

thanks

[jovial musk]

gotcha

well that sucks

[sinful moon]

but there was a ton of work which went into their POC which we’re not seeing

[jovial musk]

i wouldve gotten like 10 bug bounties honestly

[jovial musk]

hm

do you think its comming out soon?

also, @timber nova

we are fighting ghosts

i was running like 1000 scans

[sinful moon]

I wouldn’t hold your breath, this practical but kind of silly to make 6 hours to days of attempts alone to begin with

[slow helm]

he will be in chat

wait a sec

[jovial musk]

hey diyo

[slow helm]

hey

[molten sky]

note that bounty programs often make recent CVEs ineligible for reward until 30 or 60 days past initial publication

[slow helm]

new color baby

[sinful moon]

also their POC was against x86 only, the AMSR on x86_64 is significantly more difficult

[jovial musk]

hold on WHAT?

[jovial musk]

yeah i had a nuclei template

[jovial musk]

nice

[sinful moon]

sorry ASRM

[jovial musk]

i had ez 50 ip's that where 100% vulnerable

[sinful moon]

or whatever I probably got it wrong but it’s for sure not AMSR lolol

[jovial musk]

lmao

[sinful moon]

Address Space Randomization

[jovial musk]

sounds about right

[sinful moon]

From what I’ve read Address Space Randomization has been somewhat broken/vulnerable on x86 for a long while, but can’t say the intersection between 32bit OS and 2021+ regression will be high at all

[jovial musk]

idk what that means ima be real

[sinful moon]

32bit Linux with a 2021+ install date is very rare

which is what the Qualiys POC was targeting

[jovial musk]

i see

welp, ive wasted like the past 1 hour

which is nothing, but still

[weary garden]

hello

[jovial musk]

hi

[sinful moon]

yeah chance of getting that going for x86_64 is somewhat impractical

[jovial musk]

whats up

[weary garden]

gud

[jovial musk]

what are you looking to learn?

[weary garden]

bunch of things

[molten sky]

lmao, if you search the nmap topic on GitHub, nmap itself is only #2. rustscan is #1 for the nmap topic.

[jovial musk]

thats so sad

like, funny

[sinful moon]

Awesome well TryHackMe (the site) will certainly help there, no matter where you’re starting from

[jovial musk]

does rustscan support NSE?

AIO i see you

typing then deleting

[buoyant tree]

Eh I haven't ever installed nmap manually ever.

[sinful moon]

wat

[weary garden]

yeah i have been there so far

[buoyant tree]

Watching tv show

[sinful moon]

to be fair I classify “manually” as doing so via package management as well

[molten sky]

I don't recall if it supports NSE proper, but it does support some scripting engine. And in either case, it can often pass results over to nmap proper for further processing (inc. nse scripts)

[jovial musk]

nmaps scripting engine

[sinful moon]

I know

[jovial musk]

gotcha

[jovial musk]

oh sry

[molten sky]

lil weird tbh

[buoyant tree]

Eh I use nmap usually via kali/parrot usually

[sinful moon]

I was saying wut to AIO never installing nmap themselves

[molten sky]

not unbelievable

just unusual

[jovial musk]

honestly i just do pacman -Sy nmap

[buoyant tree]

Only installed it on windows via the nmap.org site

[sinful moon]

indeed, I just use it tons outside of Kali and etc

[molten sky]

nmap on windows sounds cursed in itself

[jovial musk]

cuz, i use arch (btw guys i use arch(btw guys i use arch(btw)))

[sinful moon]

Don’t do -Sy for installing packages, this leads to partial upgrades in Arch which can break things

only do it with a full -Syu

[jovial musk]

oh gotcha

[weary garden]

sure

[jovial musk]

now im better at arch (btw)

[sinful moon]

lol indeed

[buoyant tree]

And Ellie, I'm mad at you

[molten sky]

same

[buoyant tree]

I died 6 times today in Nier while trying to retrive my loot

[sinful moon]

it’s not likely to break things but if a package has a dep for a system package which got upgraded, and other apps depend on that library, it can break things unless those other packages are upgraded as well

[jovial musk]

im not getting the inside joke

[buoyant tree]

Ellie recommended me Nier automata

[jovial musk]

gotcha

well i can see how its her fault

[buoyant tree]

and I don't want to blame myself, blame falls towards Ellie

[jovial musk]

yep

[sinful moon]

lol hush

I haven’t had that experience much so I couldn’t even say

[jovial musk]

@buoyant tree i recomend you dark souls 😉

[sinful moon]

I didn’t even know you dropped your loot when you died

[jovial musk]

nah but fr you all should play dishonored

actuall best game ever

[sinful moon]

I thought it was pure save point based

(in Nier Automata)

[buoyant tree]

Seriously tho, I feel into a area that wasn't marked as a level 40 boss and I'm level 12 and I couldn't leave then I skedaddled

[buoyant tree]

You losle all chips and your levels

[jovial musk]

well il be going for a bit

good luck to you all

[sinful moon]

nah that’s a natural part of sensible world progression

You’re staring to see less railroaded design philosophies, enemies don’t scale to you, you have to scale to the enemies to actually progress in those areas

[buoyant tree]

Yeah, but atleast it should have been marked

"DANGEROUS AREA"

[sinful moon]

harkens back to classic Dragon Quest, Final Fantasy and more

nah

you very clearly learned it was a dangerous area via your own gameplay and it generated a story

so it will be all the more rewarding once you come back and just decimate that area

[buoyant tree]

Yes, and after that I ran to a save check point then closed my game

[buoyant tree]

yeah probably

[sinful moon]

This is organic game design

vs handholding

[buoyant tree]

Did you fight the robot on the top of the building called "Father servo"

[sinful moon]

idk, there’s a lot of robots in those games 🙃

[buoyant tree]

The master oogway type

[sinful moon]

is there a giant crater in your main map?

[buoyant tree]

I doubt it

[sinful moon]

Then I most likely have played it and had no issues

[buoyant tree]

oh k

Also have you ever used this thingy called "Lossless scaling"?

[sinful moon]

Anyways I’ll do the obligatory whine, I’m burnt out at work but still love infosec. Plz help lol

Honestly just need to get a new job but I want to fix some cosmetic health issues first with dental and more before I move on for better chances with interviews

[sinful moon]

That’s a bit of a misnomer, so I’m not sure what you mean

[buoyant tree]

Don't you work as a sys admin not specifically in Infosec

[buoyant tree]

https://store.steampowered.com/app/993090/Lossless_Scaling/

Steam

Lossless Scaling

Lossless Scaling allows you to scale windowed games to full screen using the state-of-the-art scaling algorithms, as well as use ML based proprietary scaling and frame generation.Frame generation options: LSFGScaling options: LS1 AMD FidelityFX Super Resolution NVIDIA Image Scaling Integer Scaling Nearest Neighbor xBR Anime4K Sharp Bilinear Bicu...

Price

$5.59

Recommendations

6210

[sinful moon]

No I do it all at this small org lol

that’s not “lossless” that generative fill

it is lossless in that you’re not lossing the original image but that does not preclude upscaling artifacts

[buoyant tree]

Oh yeah you're the tech person.

[sinful moon]

Anyways infosec is my main focus but I’m also sole linux sysadmin, sole compliance manager, one of two Windows sysadmins, dip into many other concerns, and yep just basic help desk when the need arises

It’s just a small enough org that I wear a silly amount of hats/roles

[buoyant tree]

Hope you get the job you want.

[sinful moon]

Totally fair, I mean this is the job I wanted for a long time and it’s been extremely invaluable experience wise, I’d just appreciate something a bit more focused. We shall see

[buoyant tree]

Which role you looking to fill

[sinful moon]

infosec or Linux sysadmin are my faves that I’ve listed above, and heck for infosec alone I’m just doing it all for this company so even that could split into many specializations

[whole yew]

that's what you get working for the same MSP in the middle of nowhere 😛

[sinful moon]

if you want to get picky/silly I’m a Senior SOC manager, Incident Response Manager, Threat Hunter, very rarely Pentester, and doing other stuff like vuln scanning and more

lol this is in a major southern US city, it’s just a small org

[whole yew]

honestly, you should really be looking to go to either a larger company or a startup trying to scale to full-on enterprise

[molten sky]

i'm sorry, southern?

this is news to me

[sinful moon]

Yeah no it’s clear that need to be my next step

[sinful moon]

I’ve gotten a couple of low key offers from my Incident Response Manager friend at a major financial org as a level 2. That sounds lovely but I’d like to make myself more presentable to a major org first

[whole yew]

Imposter syndrome

Make the jump soon

[sinful moon]

Yeah it’s like 800 miles away lol, but also my coworkers are real chill and it’s a pretty liberal environment in case you were expecting the worst

And thanks @whole yew, you’re most likely right but it’s sometimes hard to break these habits and thoughts. We shall see but I can confirm I’m burned out AF

[twin ridge]

Gave +1 Rep to @whole yew (current: #10 - 765)

[molten sky]

@sinful moon ngl being on this side of things makes it different to interview sometimes too
many large companies want someone who's done x y and z for x years, not someone who's done a b c d e f g h .. y and z spread thin for the same time

specialized sucks but generalized can be difficult as well

[whole yew]

burn a week or two of PTO, chill, and rework that resume. Send it to me and I'll help you orient it towards the kind of position you want. then start looking

[molten sky]

ah that's right--was like i know for a fact you're not southern --- the farthest from, lol

[sinful moon]

Yeah thankfully with my work experience I can tailor that as exact or broad as I want since I’ve kind of done it all

[molten sky]

also fuck coding interviews

[whole yew]

eh

coding interviews aren't bad

[sinful moon]

No PTO, cheap small business independent contractor things 🙃

[molten sky]

i just had someone ask me to write a ceaser cipher in python --- like yeah i maintain some pretty public shit in python that you can see for yourself but when tf am i gonna be moving individual chars around? i deal with larger data sets

not a good representation of ability often times

[whole yew]

99% of th time, they are tricksy string manipulations and data structures that are well known but reformulated to be more complicated

they're testing logic ability, it's trivial but they just want to make sure you're not the 'import pandas' without understanding the why behidn it

[sinful moon]

Yeah that would be annoying, could be simple to code but… we have libraries for that even for a cipher this simple…. but I get it

[molten sky]

logic ability
sure, if done right. but many aren't

[whole yew]

so you get paid shit, and don't get any accrued PTO? you absoultely need to peace out of there ASAP, I know a year ago you were reluctant because you were learning, but youv'e been there for long enough you are going to be trapped if you don't go very soon

[sinful moon]

Yeah you’re not wrong at all

[molten sky]

^ MSPs are fun at that level short term but not a career (unless you own the place, lol)

[sinful moon]

I’ve kinda grown past the learning phase and onto the stagnant phase without more stimulus

[molten sky]

ironically may be returning to an MSP myself shortly but it would be in a pretty narrow role with apparently good comp 🤷‍♂️

[sinful moon]

We’re just also paying off our first house and I need dental work so we shall see

[molten sky]

waiting for the city to sign off on shit still

if you jump ship fast enough you can maybe get dental at your new place and not pay shit

[sinful moon]

lol I’m just worried about interviews, but fair I have no idea how they may be conducted and if I may be able to work remote or not

[molten sky]

honestly just interview anyways

even if you aren't looking

[sinful moon]

I know my friend works remote but he’s full up IR manager and can commute onsite no problem

[molten sky]

passively price shop a bit and get good at doing it

[whole yew]

covid changed things, almost everyone in IT can now be full time remote

[molten sky]

lol

eh

[sinful moon]

Yeah that is my hope, but not all businessess are as chill

[molten sky]

i wouldn't say almost everyone

[whole yew]

i can't think of a shop that isn't a SCIF off the top of my head that requires 3 days in the office

[sinful moon]

but yeah I can take the temp with my friend

[molten sky]

many many many many companies around here are going back to onsite and hybrid

[sinful moon]

mhmm lol

[molten sky]

the remote roles suck to apply to as well because you have hundreds of applicants first day

esp after the mass layoffs in the US

[sinful moon]

ironically thanks to MSP, yeah I have legacy on onsite experience tons and tons, was there for the dying days

[molten sky]

tons of companies are firing people who don't go back onsite still

[sinful moon]

sorry onsite server experience I should say

[molten sky]

companies are realizing "we're paying for this big building and nobody is using it -- let's fix that"

[whole yew]

those companies that don't do remote are only going to get absolutely green juniors or dinosaurs on the verge of retirement

[sinful moon]

I have never even visited any businesses who are clients or even our own office 🙃

[molten sky]

not at all

not here

[whole yew]

that should be a sign of the exodus that the company isn't sustainable

[molten sky]

so many of the roles i've been contacted for recently have been at least 2x/wk

especially in the ny [metro] area

[whole yew]

there are some benefits to be in the office

[sinful moon]

Yeah I’m just somewhat warry since this is a major financial and software institution so I expect them to be a bit less progressive than full on tech firms, but yeah I’ll just touch base with my friend

[whole yew]

the team i work on is spread coast to coast, and we have overnight staff overseas

banks are a different beast

[molten sky]

my last enterprise place slowly eased back into 4x/wk where they're at now ---

they aren't in any exodus either, and would seriously disrupt the entire market if so

[whole yew]

the financial sector in general is one of if not the most conservative industry in the US

[molten sky]

i was the only person on my team in this part of the country. i was effectively remote. still required to be onsite 2x/wk in ny.

the "everywhere is remote" is behind us already

[sinful moon]

Indeed, thus my concern but idk, I know my friend has excelled there and that business has done a ton to revitalize the state of the city they are in

[molten sky]

lots of places still are remote, but it's already not the rule anymore

[sinful moon]

Yeah I loled at what happened at Dell

“If you stay remote you won’t get promotions and are subject to other conditions”… lol a majority stayed remote

[whole yew]

honestly, it's middle management power tripping. I get that they are wasting money on the huge building, the solution is to downsize the building and not spend millions on the office

[molten sky]

it's middle management power tripping
spot on lmao

[sinful moon]

Yeah, it’s just ironic too since if you go back into the office, you’re met with an empty office and Zoom calls anyways

[molten sky]

i went into the office one day when we were still hybrid, but on an off day, and my god it was a ghost town
i saw two people on all three floors and one of them was IT

[sinful moon]

lol sounds about right

[molten sky]

caught the IT guy off guard too, lol

[sinful moon]

https://arstechnica.com/gadgets/2024/06/nearly-half-of-dells-workforce-refused-to-return-to-the-office/

[molten sky]

all of them are also now job shopping (while working), 100%

well, they should be

[sinful moon]

Yep mentioned heavily in the article indeed lol

[whole yew]

one of the major attractions for me is the 100% remote

maybe once a quarter we have an in-person meeting at corpo HQ, but it's pretty rare

which makes sense, it's about a $2500 per person to travel and accomodate since we're a distributed team

[sinful moon]

I can agree although I won’t lie, as a very social person I very much missed out on having actual office commrodery and friendships. I do have people I favor as friends at work but never meeting them and etc is kind of wild

[molten sky]

depends on the place

[sinful moon]

But yeah at these much larger firms, can’t garuntuee you’d get that either

[molten sky]

the corpo place i was at before, prefer remote 100% any day of the week

way to corporate

not as enjoyable or casual

[sinful moon]

Mhmm, I just I guess expected my first “office job” to be more typical, but fair I was hired during height of the pandemic so 100% remote

[crude stump]

Why not work government

[sinful moon]

not even sure if I stepped foot in South Carolina before lol

[sinful moon]

poor pay, IT can be lackluster at times, it all depends where

[molten sky]

annoying politics, poor comp, fixed timelines, etc

[sinful moon]

also a very broad spectrum

[molten sky]

would rather work for a [gov] contractor

[crude stump]

Yeah

[sinful moon]

yeah sounds like a much better idea

[crude stump]

Really depends on what government agency too

[sinful moon]

Just sucks so many of those are multinational arms dealers 🙃

[molten sky]

cool with me

[sinful moon]

I freaking laughed out loud when I saw the gay programmer socks that Lockheed Martian has

I promise you I’m not making that up

[crude stump]

Martian

👽

[molten sky]

immediately reminded me of the ATF gift shop selling stuffed/plush dogs

[sinful moon]

lol they’re trying hard to get the programming socks crowd

missed opportunity not making them thigh highs, but Lockheed Martian is only so progressive 🙃

[molten sky]

don't think i've interviewed at lockheed specifically but have had some chats with people there at one point

some interesting projects (at the time)

[sinful moon]

Yeah I know an individual who was very much on the spectrum who interviewed for them or another defense contractor. They do very much want those very obsessive programmer types

just lol blatantly telegraphing their intentions with the above “programmer socks” :p

[molten sky]

as opposed to..normal socks? or are all programmers gay or something

[molten sky]

just noticed but the text lines up in this pic

like it's still readable across the gap

[sinful moon]

“programmer socks” as a meme are thigh high, the meme insinuating that many low level/obsessive programmers and etc are trans

[weary garden]

pls what time is it now

[sinful moon]

11:35 EDT

[molten sky]

time for a snack

[sinful moon]

also lol this is what NTP and chrony are for, use it lol

(*nix network time protocols to be clear since you’re new)

[weary garden]

whoa it's 04:36 here

[sinful moon]

mhmm I’m a US Eastern Time peep

[molten sky]

got one of those +0101 time zones

[sinful moon]

I’ve got a fantastic article if you’d love to hear how wild time and date is to code for

[sinful moon]

Is that really a thing? Don’t even joke +30 and +45 timezones are already hell lol

[molten sky]

wdym? you don't just use time since epoch for everything?

[sinful moon]

lol literally the title more or less

https://zachholman.com/talk/utc-is-enough-for-everyone-right

[molten sky]

https://www.reddit.com/r/ISO8601

[sinful moon]

I’ve linked this numerous times but 10/10 write up

[weary garden]

appriciate

[molten sky]

appriceate

[sinful moon]

Slay gal, yes, I format all my filenames for company sharing with ISO 8601 timestamps

been especially useful as I’ve had to do the same compliance or security tasks x years in a row

I can not even express how much it bothers me when people don’t stick to this format for their filenaming and mess up alphanumeric sorting despite appending a date

no 06.30.2024 is not the same, thanks boss (and others) lol

[molten sky]

that and written months inside the document

[sinful moon]

I’ve not read the actual text of the ISO standard, just respect it lol. I can say I just use common english in documents to refer to dates per our locale, but file names I’m all or nothing the ISO standard and obsessive about it lol

[buoyant tree]

Oi Ellie, any idea to read Wikipedia as a whole on a ebook reader

[sinful moon]

easiest way I’ve found stock is on Kobo ebook readers, you save a couple jumping off points like Wikipedia lists in Pocket and read them on Kobo, you’ll then get asked if you want to open subsiquent links in Pocket on the Kobo

Obviously it can be eaiser with the web browser on Kobo or on Android eink devices with Wikipedia app, but none of them are as well formatted or native enough to be like the Pocket experience on Kobo

I’d type more but kitty agressively wants attention

[buoyant tree]

I've got a kindle for now

[buoyant tree]

Yeah I hate the formatting for wikipedia in a kindle

It's in freaking desktop mode

[sinful moon]

I’m sorry to say your potential ideal device circa a decade ago is no longer in production: https://en.wikipedia.org/wiki/WikiReader

[buoyant tree]

Ah crap

[sinful moon]

Yeah Pocket does solve that for Kobo devices thankfully

[buoyant tree]

that does look like something I would buy

[sinful moon]

Just makes it ebook formatted

[buoyant tree]

Yeah, I tried to turn wikipedia pages into a epub ebook

Better but still okayish formatting

Oi, found this

https://polyreader.app/

Seems like a good solution except I would have to turn off airplane mode

[sinful moon]

Second page off camera shot of Chain Home page on Wikipedia on my Kobo Libra 2.

[buoyant tree]

looks nice

Kobo's got a better UI

[sinful moon]

any of those links you could also choose to “Open in Pocket” allowing you to continue your similarly formatted Wikipedia rabbit holes

this is just making it a normal ebook/eink UI

[buoyant tree]

So that's your secret to reading hundreds of wikipedia pages

[sinful moon]

obsessive interests

[buoyant tree]

Sadly not in my budget right now to get a kobo but it's defo on my wishlist

[sinful moon]

lol mainly showing off Consoles and Computers here but Wikipedia reading lists are addictive

btw wikipedia reading lists on mobile are also stored offline c:

and sync between devices

[buoyant tree]

Eh I can't read wikipedia on my phone

too small

[sinful moon]

font size is customizable in the app

[buoyant tree]

Then I gotta go like grandma font size level due to my phone's size

lol

[sinful moon]

lol just how small is your phone

I mean I’m on an iPhone 14 Pro (not Max) and this is concered small these days

[buoyant tree]

It's like iphone mini level

It's a chinese one

[molten sky]

i hate it

[sinful moon]

6.12 inches diagionally

[molten sky]

too large

i've got a 12 pro and unironically considered a mini when i was buying

[sinful moon]

I ironically downsized from my final Android phone in size

dramatic improvement in usability

wow I don’t need a pop socket just to use my phone with small hands anymore

[buoyant tree]

Why the interest in cold war

[sinful moon]

because it’s freaking rad and wild

[buoyant tree]

Those aren't the words I would use to describe the cold war but I could be wrong

Enlighten me

[sinful moon]

https://en.wikipedia.org/wiki/Nuclear_close_calls

articles like this are very much my thing

[molten sky]

if war doesn't interest you, you probably haven't read enough about war

[buoyant tree]

I haven't

[hoary basin]

any americans can tell me if you need some sort of license to sell pentesting services? google is just telling me what schooling/training you need to do the job. Assuming you self learned and dont have a degree/certificate

[sinful moon]

one of the best of all time was this soviet radar technician who was working in 1985 or so and saw 5 nuclear missile radar signatures and correctly called it as a bug. He was trained that the US would launch a massive strike, not something like this… so he didn’t even ring his superiors

[molten sky]

you don't need a license but to do so without being a registered business with insurance and without a proper contract in place would be fuckin nutty and not worth it

[jovial musk]

kindles are the best

[sinful moon]

He alone could have averted nuclear war just by his inaction there

[jovial musk]

since you can send it pdfs

oh sry i just jumped in lmao

i thought you were still talking bout pdfs and kindles

[sinful moon]

no worries, we’re talking about that too lol

[buoyant tree]

Uhhhhhhhhhhh

[sinful moon]

just happened into Cold War as a happenstance of discussing Wikipedia

[molten sky]

also just a note when asking about professional licensure in the US --- like with most things, it varies state by state. Every state can be as different as every country in the EU in some facets. Being in the EU means some laws are commonly shared, but far from all

[buoyant tree]

Kindles are terriblwe with pdf's

[jovial musk]

nu uh

[buoyant tree]

Not properly sized up

It's usually treated as images

[sinful moon]

Kobo > Kindle

[buoyant tree]

Me with my 2016 kindle

[sinful moon]

which one can handle industry standard epub files? Kobo

[buoyant tree]

And my kindle's bugging up with the wifi

I connected it to the internet after a year

[hoary basin]

@molten sky well yea im assuming someone opened their own business and did all the necessary legal things like insurance, if they didnt have a degree/cert would the government allow them to still sell security services

[buoyant tree]

Now it isn't staying connected

[molten sky]

yes

there isn't much (professional licensure type) regulation (in any state) as it pertains to technology services, aside from low volt related items like security cameras, alarms, and such

[sinful moon]

Goverment does vet their vendors lol, but sure much much lower stakes for municipal government and MSPs unfortunately

[hoary basin]

i ask because like for a plumber you cant do that without the pro license, i was curous how it is for it security if someone wanted to

[molten sky]

yeah for gov work you have a higher bar to meet

still not licensure, but a higher bar for sure

[mortal echo]

Got home, shower or bath? 🤔

[molten sky]

depends on the state still

not all states require trades to be licensed

[sinful moon]

Yeah it’s still a mess for municipal goverment vs federal

[mortal echo]

I need to relax for a bit, but might fall asleep 😂

[molten sky]

but yeah licenses don't exist in any state for IT type work

[sinful moon]

G’night if so xana!

[hoary basin]

what if someone hired a pentest against their home network setup, id imagine your isp wouldnt allow that lol

[sinful moon]

And I’d say shower personally

[jovial musk]

gn @mortal echo

[jovial musk]

theres only one way to find out

lets try it at home

[molten sky]

well it depends ofc --- but things like DoS are often explicitly prohibited by your terms with your ISP

[mortal echo]

Where are you from?

[sinful moon]

internal scan is obviously no problem, external scan, sure maybe run that past Comcast or whomever but I run these scans all the time and it’s no problem

[jovial musk]

mexico

[molten sky]

reason being, for DoS, you're affecting other customers at the same time

[jovial musk]

hbu?

[buoyant tree]

Cya, me go now

[jovial musk]

cya fam

[molten sky]

even some cloud service providers prohibit port scanning against your own servers for some reason, lol (even dedi)

[sinful moon]

Yeah if NAT is in place, this is a big concern for vuln scanning

[mortal echo]

True, haven’t made my lunch for tomorrow yet so I need to be awake for that.

[jovial musk]

@mortal echo whyd you ask?

[molten sky]

cgnat will be the death of me

[mortal echo]

What time is it for you?

[sinful moon]

I specifically asked my VPS provider and they were a-okay with it, was happy to hear

[jovial musk]

10 pm

[mortal echo]

I see, was just wondering.

[hoary basin]

even they would not allow nmap?

[jovial musk]

should i change my pfp?

[sinful moon]

They said if I wasn’t low level manipulating and spoofing TCP/IP packets, then I was fine

[jovial musk]

i feel like im tired of this one

[molten sky]

yeah in MOST cases it's more of a "there in case we need it" kinda policy, i've never seen anyone actually enforce it in normal cases

[mortal echo]

Simpler always the better 😂

[molten sky]

some don't

[sinful moon]

mhmm

[jovial musk]

idk id like to have like a cobra

like a cute one

same as my thm profile

[hoary basin]

why would thjey not allow nmap tho? insurance reasons probably or some technical reason?

[sinful moon]

I just literally run an external vulnerability scanning server from work from my VPS service and no complaints or issues, same deal with my private pentesting VPS server

but sure was glad I asked them first

[weary garden]

but some not

[jovial musk]

whatcha all think

[sinful moon]

lol found a property we help out at, but has another primary MSP had their freaking property management server exposed to the internet 🙃

[weary garden]

i have try it

[molten sky]

just easier to have blanket policies against certain types of activity and selectively enforce rather than leaving the door wide open
scanning if done in certain ways can be quite invasive or demanding, reducing their ability to service real traffic

[jovial musk]

yeah

"im with prod on this one guys"

[molten sky]

if everybody was scanning 24/7 (even if legitimate) it'd cause a lil bit of a problem for providers

[jovial musk]

depends

if they all do stealth scan idk

but like a -T 5 i aggree

[molten sky]

still traffic and compute

[weary garden]

agree with that

[jovial musk]

@molten sky stay with this pfp or go back?

[molten sky]

ngl not too sure what the original was -- but the snake is fine 🤷‍♂️ lol

[jovial musk]

the original was the one discord gave me

like, the discord logo but just the default pfp

[molten sky]

ah yeah then may as well

[jovial musk]

what the hell

[sinful moon]

aka ouch

[jovial musk]

is that your internet provider?

like, that has all those vulns?

[hoary basin]

QoD?

[jovial musk]

whats qod

[sinful moon]

that is a hotel property management server I found exposed to the Internet for a client we only do on-site support for. They had their PMS server exposed to the internet, a huge nono

QoD is Quality of Detection

[jovial musk]

wouldnt it be detection of quality

nvrmind

just, nvrmind

[molten sky]

ah, hotels. the pinacle of secure infrastructure.

[jovial musk]

yes ofc

[sinful moon]

imagine the service you use to check guests in, stores cardholder data and more being exposed to the interent

[jovial musk]

where there are def no cameras, right Mariott?

[hoary basin]

@sinful moon did they have any sqli's 😭

[molten sky]

squillies

[sinful moon]

none of our hotels are this bad, but this one managed by another MSP had this egregious issue, this should not be publicly accessible

[jovial musk]

good pet name

im naming my next dog that

[sinful moon]

I do not have enough leverage or proper permission to test SQLi on this client, and even if I did, I would be extremely cautious with little bobby drop tables. This is a production DB, but I don’t think it’s SQL from what I could see externally

this was just a casual scan of their public IP to see if there were any issues

[jovial musk]

@sinful moon is it true that "1 or 1=1" can mess up tables?

[sinful moon]

yes

[jovial musk]

:0

god damn

im a war crimminal (joke, kinda)

[sinful moon]

although syntax needs to be more exact than that

But I knew what you meant

[molten sky]

for the uninitiated:
https://imgs.xkcd.com/comics/exploits_of_a_mom.png

[jovial musk]

like what?

[sinful moon]

like the above

[jovial musk]

that joke is on cs50

[jovial musk]

oh

so not 1=1

that cant do anything

[sinful moon]

that is a method but it needs to have proper leading SQL characters like that to terminate the expression

[jovial musk]

gotcha

[sinful moon]

just know, a lot of SQLi you’re learning early on is extremely dangerous to do with production databases if you don’t know the consiquences

[jovial musk]

yeh ik

[molten sky]

good thing they have backups right? right?

[jovial musk]

omg

[sinful moon]

Thankfully we do up the wazoo but yeah good point for sure

[jovial musk]

did i ever tell you about the time i searched r/unixporn (the subreddit) in my school and got suspended?

like the subredit about ricing linux

[sinful moon]

also I feel like a boomer saying wazoo but I couldn’t think of a better word at the time lol

[molten sky]

that would be kinda funny to see happen actually

[sinful moon]

how do you get banned from /r/unixporn lol

[jovial musk]

no

my school

suspended me

[sinful moon]

freaking lolol

[jovial musk]

cuz i searched up r/unixporn

and they were like "funny shit to do alex"

so yeah

[sinful moon]

it was probably just the “porn” bit which is hard to explain

[jovial musk]

yeah

i was like "look at the subredit" and they said "how dare you suggest such a thing"

[sinful moon]

lol

Thankfully my IT admins at school were understanding, but fair

[jovial musk]

my parents did see that it was just linux and didnt ground me

[jovial musk]

my it at school knows nothing

like, he actually just has a portal and istg he would rm the whole thing if a guide told him to

[sinful moon]

I will refrain from commenting on my school activities lol

[jovial musk]

no, go ahead

ok, story time

[sinful moon]

no I will defer to the rules and the mods former statements lol

[molten sky]

if that had happened to me it'd be a battle between wanting to be like "you're a dumbass just open the link" and keeping quiet for a free vacation

[sinful moon]

Do you have a web filtering tech in place, null?

[jovial musk]

when i was little tere was a thing where you would read and get points, the thing is the passwords were based on your name, there was a girl in my class FILLED WITH points, so i went into her acc and spent there all

i was 6

i also got suspended

[molten sky]

are you asking if my school did at the time, or if i manage any now?

[jovial musk]

but i wouldnt been caught if it werent for these meddling kids

[sinful moon]

Is of need for us so I’m curious. I’ve tried out some solutions and boss pushes back against uBlock Origin

[sinful moon]

Now

[molten sky]

I've dealt with DNSFilter with pretty positive results

[sinful moon]

Just spoke with an old lady today who clicked on a Facebook ad for “Celeb News” and got standard Microsoft Virus Warning template scam

uBlock would fix but yeah

[jovial musk]

oh no

wait, pass me the number

i love scambaiting

[sinful moon]

That would be going too far to share that, but if it was something I ran into personally sure

[molten sky]

as an interim, can you just set 1.1.1.3+alt as preferred or something

[sinful moon]

Yeah boss mentioned that as a potential solution but I’m not sure how well it will do practically

too used to uBlock and similar, but yes Cloudflare is lovely

[jovial musk]

did you all know how CloudFlare has the encryption?

[molten sky]

is the network fully managed or do you have unkown devices as well?

[jovial musk]

they use lavalamps

to get trully random numbers

[molten sky]

i.e. mobile phones

[sick lance]

That doesn't sound very legal....

[jovial musk]

https://www.cloudflare.com/learning/ssl/lava-lamp-encryption/

[sinful moon]

This is a private individual where we only manage her devices

[jovial musk]

used to*

[sick lance]

Doesn't change the fact it's still illegal...

[jovial musk]

yeah ik

[sinful moon]

Yeah to be clear, scamming the scammer is very against Discord TOS

[jovial musk]

yeah mb

but rn i just waist there time

i just get a old man voice and ramble

[sinful moon]

I knew a moderator of a Linux discord who was permabanned for this, so just be careful

[molten sky]

dhcp lease to set 1.1.1.3/1.0.0.3, use policy to disable all web browser's DoT or set them to the same ?

( .2 if adult is permissable )

[sinful moon]

Yeah sounds reasonable, I will have to give that more of a try

I’ve really only used 1.1.1.1 but for sure know of those alts

[molten sky]

quad9 has a few as well but we've had iffy uptime with them

[sinful moon]

And was literally what my boss was asking if we could potentially use

but this scam site was azureedge.net hosted so tricky

[molten sky]

is that it?

not getting a resolution

[slow helm]

its 5am here

[jovial musk]

diyo

like the new look?

[sinful moon]

Unlike the other details I don’t mind giving out this defanged IOC:

wgdhxaqpztfqfw[.]azureedge[.]net

[mortal echo]

Where?

[slow helm]

i think that snake

i saw it

blue one

[jovial musk]

on my thm profile

yep

im the snake

[sinful moon]

As always this is malacious, and I did see it tried to Microsoft Oauth SSO style

[slow helm]

on someone's pfp

[mortal echo]

Nice snake, is it yours?

[opal crow]

Guys I'm at antivirus evasion in red team path. From now on do I need to learn c language? Because the rooms say it's better to have c language knowledge but I don't understand how anyone can understand the code in those rooms without knowing c

[molten sky]

still NX. wonder if it got nuked.

[slow helm]

no fake snake

[jovial musk]

no

[slow helm]

tunisia

[jovial musk]

i wish 😦

[jovial musk]

wdym!

[neon river]

getting suspended at the age of 6 doesn't seem very healthy

lol

[mortal echo]

I hear great things

[slow helm]

i saw and admin

[jovial musk]

bro what?

[slow helm]

yeah great culture great place

[jovial musk]

ure tripping rn

[slow helm]

i saw that blue snake

[sinful moon]

Honestly I just pulled the domain from the history so probably missed some critical stuff in the URL, which is typically how they validate their attacks

[slow helm]

on someon's pfp in thm staff

[neon river]

I saw, I user'd, I root'd

[jovial musk]

whatcha yappin bout fam

[jovial musk]

ITS MINE

[sinful moon]

Was just so low key I didn’t care that much

[opal crow]

They tried to buy my mom when she went with my dad to tunisia

[jovial musk]

i told you, its my thm acc

[opal crow]

They told me

[slow helm]

w about u where are u from

[sinful moon]

lady already rebooted her computer before she called us so already resolved the “browser hijack” situation

[mortal echo]

😅

[molten sky]

should query .2 or .3 on the next one and see if it catches -- curious how good it is nowadays

[slow helm]

aw

[mortal echo]

India, moved to Canada

[molten sky]

what part? (Can)

[slow helm]

great news

[sinful moon]

Yeah I’m also testing a browser filtering tool from a new security firm we’re testing for email stuff and so far, very much not impressed

[mortal echo]

Punjab

[weary garden]

is better to know c programming

[molten sky]

sry i meant to ask what part of canada you moved to 😂 realized that it was ambiguous after sending but was too late

[weary garden]

for malware analysis and reverse engineering

[sinful moon]

The email tool tho is 10/10, no complaints. Literally decreased my spam and phishing workload by tons and tons

[molten sky]

the DNSFilter minimum for msp is like 50 bucks a month, so pretty cheap really
might be worth taking a look at 🤷‍♂️

[mortal echo]

Oh sorry, ON

[slow helm]

hahahahahahahh

i found it

@whole yew

the real snake owner

aw wait

there not the same snake

damn it

[opal crow]

😭

[molten sky]

For some reason I was expecting BC or QC. Nice to have a not-QCer in thm finally! lol

[sinful moon]

Yeah I know my Boss experiemented with PiHole for DNS filtering in the past but he really doesn’t know Linux that well to administrate it so went nowhere. But yeah just a simple DNS change could be an easy sell

[sick lance]

Not beginner lever, so I would not worry about it quite yet

Level

[molten sky]

tell em to bring me on for that stuff -- hook me up

[mortal echo]

A lot of Punjabis move to ON haha

[opal crow]

My goal was to finish red team path and then spam ctf's while doing the cpts from htb

[molten sky]

huh. wouldn't have guessed that. is there a reason why, or just by chance it's normally ON?

[opal crow]

But bro these rooms with antivirus evasion feel like death

[slow helm]

belive

try

[sinful moon]

lol, you do not want to work with us, but yeah you’re not wrong with your recommendations. I would be curious if Cloudflare DNS is just blocking this stuff on .2 or whatever

[slow helm]

advent of cyber

2019 2020 2021 2023

[molten sky]

do they pay above 30c/hr? is the money green?

[sinful moon]

under sorry lol

[opal crow]

Yes I will keep going but if I need to learn c idk how long it's gonna take

[opal crow]

Uh?