general

[unique sonnet]

i need to level up my skills

well how are you sure i am bro?

[dark frost]

sister ?

[unique sonnet]

like pro can be anyone?

[dark frost]

are you appach helicopter ?

[unique sonnet]

i was just checking that statement

same ***bro ***, i am newbie

[dark frost]

Bro

[unique sonnet]

how are you so sure man?

[dark frost]

am just yapping

[unique sonnet]

same

[boreal scarab]

https://tenor.com/view/father-ted-jack-frolicking-gif-7227415

[unique sonnet]

its cute

[polar tree]

is there a way to desactivate suscription auto renewal?

[dark frost]

depend on the payment , me i can on Paypal to remove auto pay

[polar tree]

for credit card

because i payed the year but i don't want it to auto renew

[dark frost]

#site-support

[desert imp]

hey where can i ask for help for some bugs regarding kali linux dpkg ?

[mossy river]

Here:)

[desert imp]

can i post the error i'm getting ?

[mossy river]

Yes, you will need to verify your account if you want to post images though

[wind lake]

the answer is 3

[dark frost]

as long you hide your private informations 🙂

[dark frost]

42

[wild rose]

https://tenor.com/view/shrek-farquaad-number3-pick-number-three-my-lord-gif-27226327

[desert imp]

so this is what i'm getting , i've been trying to install packages but i get this error everytime i try to do something
i tried all the solution in stackoverflow and youtube but

dpkg: warning: files list file for package 'lvm2' missing; assuming package has
no files currently installed
dpkg: warning: files list file for package 'metacam' missing; assuming package h
as no files currently installed
dpkg: warning: files list file for package 'mac-robber' missing; assuming packag
e has no files currently installed
dpkg: unrecoverable fatal error, aborting:
files list file for package 'myrescue' is missing final newline
Error: Sub-process /usr/bin/dpkg returned an error code (2)

[wind lake]

whats the command youre executing

[desert imp]

every command related to installing packages literally

[zealous shell]

Simply cancel your subscription. You still will be premium user till your subscription is over. Still ask someone in just to clear things out #site-support

[desert imp]

trying to update the package list and upgrade them
tried installing terminator
tried installing dselect

same error

[wind lake]

sorry with apt or

im dummy rn

[desert imp]

yeah apt update
or apt-get install package_name

[mossy river]

Ty

[stone pasture]

I had a doubt mint is good or I can go for Ubuntu ? Or Kali , parrot?

[mossy river]

-unmute 551425579514331146

[twin ridge]

🔊 Unmuted sn1per1010

[mossy river]

-unmute 150413887810961408

[twin ridge]

🔊 Unmuted likerofjazz

[zealous shell]

thanks XD

[dark frost]

https://tenor.com/view/azumanga-daioh-hello-everyone-hello-everynyan-oh-my-goh-gif-4097965043367168076

[wind lake]

i thought you forgot about me for a sec jabba

[polar tree]

i ended up doing that

thanks

[mossy river]

Ahah, no I did it in the list the messages were logged 😆

[stone pasture]

Planning to use it as live on usb

[mossy river]

Much appreciated

[wind lake]

haha

[zealous shell]

Took my opportunity to use everyone tag without consequences : P

[wind lake]

is that the only error you get?

how old is your kali install?

[desert imp]

yeah i copied it all

[desert imp]

1 month

[wind lake]

do you have anything super valuable on it? sometimes its best to just reinstall

or if you have a snapshot

[desert imp]

not really i don't

[wind lake]

yeah honestly just transfer the files off and grab a new kali if you really cant solve it

im not too sure what the issue is the errors dont give much

[desert imp]

yeah it's annoying af , nothing seems to help online , i tried all commands

thanks @wind lake

[twin ridge]

Gave +1 Rep to @wind lake (current: #70 - 116)

[wind lake]

ya np. i would suggest once you get a new kali, update and upgrade, then take a snapshot of the VM

[stone pasture]

Pls help

[wind lake]

depends on your use case

what are you using it for

[desert imp]

aight noted

[dark frost]

packages errors are a nightmare to resolve

[stone pasture]

And planning to use it as live usb as I'm desktop user

[mossy river]

Here's another opportunity, do you mind doing it again?

[exotic vector]

for me my main OS is linux but I have vms for my cybersecurity stuff

[dark frost]

[zealous shell]

Nah not taking the bait

[stone pasture]

For now my main os is windows 11 and I'm not going for dual boot

[mossy river]

I'll give you a free reputation point if you do it

[dark frost]

[stone pasture]

For daily use and practicing cyber security

[exotic vector]

the better idea would be to have virtual machines running on your computer. Instead of using live boot usbs

[zealous shell]

Reputation is earned not given

[mossy river]

Let's see about that

Who wants to earn a free reputation point?

[chilly veldt]

Jabba, did you go by GR eggs today?

[mossy river]

Not today

[stone pasture]

I used Kali in virtual box but it is slow and had some errors when I update the Linux

[dark frost]

no thanks 😗

[twin ridge]

Gave +1 Rep to @mossy river (current: #5 - 1369)

[wild rose]

ME Pick ME Mi Lord!

[mossy river]

Mind typing @everyone for me please

[exotic vector]

I knew it was going to be a trap

[gloomy yew]

Lmfao

[chilly veldt]

Just saw someone call greggs for GR eggs

[mossy river]

-unmute 167340874114662401

[twin ridge]

🔊 Unmuted dawiddym

[mossy river]

-unmute 608542743253221387

[twin ridge]

🔊 Unmuted dextrememachine

[mossy river]

Much appreciated

[dark frost]

🆓

[twin ridge]

Gave 1 Rep to dawiddym (current: #654 - 7)

[wild rose]

c I knew bestie wouldn't leave me out to dry.

[twin ridge]

You're still on cooldown

[mossy river]

eXCUSE ME

[chilly veldt]

Lmao, skill issue

[mossy river]

I'm literally on the exclude list

[dark frost]

[chilly veldt]

Neeeeerd

[wind lake]

id suggest kali

[zealous shell]

It's a sign it must be earned

[dark frost]

discord admin get rejected by his own discord

[mossy river]

Excuse me mr bot

[stone pasture]

@mossy river okay thank you but virtual box or bootable live pendrive which is faster and portable

[twin ridge]

Gave +1 Rep to @wind lake (current: #69 - 117)

Set dextrememachine Rep to 34

[mossy river]

There you go @wild rose much appreciate

[wind lake]

depends, do you know how to dual boot

[wild rose]

oh np

[wind lake]

i would suggest VM

[stone pasture]

Yeah but not willing to do that

[wind lake]

well then its VM

[sick lance]

I would never suggest dual botting with windows.

[exotic vector]

also with vms you can give them more resources

[knotty cargo]

me neither

Just choose a weapon and stick to it

[rapid merlin]

gm

[wind lake]

ive done it, it can be useful

[exotic vector]

evening const

[wind lake]

but

not really the best

[rapid merlin]

evening fae

hyd

[stone pasture]

Ok thankyou then 🙂

[exotic vector]

im doing alright, you?

[sick lance]

Until Windows gets hungry.

[wild rose]

👋

[wind lake]

whats your specs on your computer? like ram cpu etc

[knotty cargo]

Installing linux as a main OS forces u to go throw installing drivers shit and makes u learn a lot

[stone pasture]

16gb ram
i5 10th gen
256 ssd
1tb hdd

[knotty cargo]

Also optimizing things to work on linux as it was on windows teaches a lot too

[knotty cargo]

Yeah with these specs u have no problem using VMs

[stone pasture]

For good performance how much storage and ram can I share

[knotty cargo]

Im not into VMs but i think 2gb of ram and 30gb rom is sufficient

[wind lake]

youre solid for ram then 4gb ram should do perfectly fine

thats really the most important part

like 2 cores 4gb ram is what i usually do

30gb storage should be good enough, unless you know youre going to be using it a long time

[frozen star]

im practicing on my ubuntu server machine, I deleted the netplan .yaml that I created, now im stuck at init-premount script. did I fuck this machine up or can I reverse this?

[stone pasture]

Ok thank you for helping me

[twin ridge]

Gave +1 Rep to @wind lake (current: #68 - 118)

[sick lance]

Boot in to GRUB and replace the file?

[frozen star]

on it!

[wind lake]

np anytime

[frozen star]

shhh! I did it lol

[worthy venture]

How we doing

Ooo I have an orange name now

You know what, I’d just like to say one thing. Honestly I appreciate the team behind TryHackMe

I haven’t had this much fun learning ever

Hated school and college. But something about the interactive parts of the modules makes it so much easier to get through it, feels more like a challenge than a lesson

Hope we are all having an awesome day

[rapid merlin]

^

[dark frost]

https://tenor.com/view/adventure-time-fin-and-jake-fin-jake-time-to-learn-gif-16612208

[cloud quiver]

Thanks 🙂 . Hope you're doing also well buddy 🙂

[twin ridge]

Gave +1 Rep to @worthy venture (current: #2382 - 1)

[worthy venture]

Just had 4 days off, was gonna play leagues on RuneScape ended up spending most my time going through tasks 😂😂

[worthy venture]

Unfortunately just started work 😩

[rapid merlin]

Good, about to buy the tcm all access pass since it has a few courses I wanna get

primarily the python 101 & 201 + the programming with ai mini course

[cloud quiver]

That's sounds like a good thing 🙂 . Have a nice day at work 😄 .

[worthy venture]

I shall try, hopefully it’s a nice peaceful night in the control room

[umbral lance]

Howdies

[manic shell]

wow cybersecurity is such an awesome field ❗

[drowsy dust]

[raw plover]

.

guys what tools yall recommend for ethical hacking like
strombreack
like what else

[umbral lance]

I personally find Mjolnir better

oh you mean social engineering

[boreal scarab]

Drinking and not haven eaten today is not a good combination lol

[rapid merlin]

o/ cl@n

yes that is a bad combination

eat

[boreal scarab]

[rapid merlin]

ironic since I've not ate since last night kek

[umbral lance]

Drink more

[boreal scarab]

I've so far, drank a glass of heated wine, (not mulled) and a flight of whiskey

0 food

https://tenor.com/view/weeee-gif-23716396

[narrow bone]

So still in warum up mode

[cobalt iron]

Good job mate, I'm starting the whisky now, one glass deep ... shooting for 50 answers today

[wide merlin]

coming back to tryhackme after not touching the site for a handful of years. I want to check out your #1305926862114914325 !
seems like a cool event thanks for putting it together.

[boreal scarab]

50 answers to the world's greatest questions? Lol

[boreal scarab]

Oh yah... even though I can't drink as much as I used to before my accident

Long story short.... spleen go kaboom, me no drink much anymore

[cobalt iron]

Well, i'm working through the "complete beginner" path, so idk about "worlds greatest"

[wide merlin]

what path are users tools generally held in on a linux box mr hotdog

[glass nest]

The worlds longest journey begins with a single step.

[rapid merlin]

or a rocket propelled car

[cobalt iron]

do you mean on the attack boxes or my machine Mr ntwrk? ...My machine isn't all too clean a house right now...

[upper knoll]

how u doing this fine evening!

[glass nest]

NTWRK - Is that question lifted directly from a room?

[boreal scarab]

@glass nest

https://tenor.com/view/i-bestow-upon-you-a-boop-ollie-boop-ollie-and-lauren-boop-boop-exchange-gif-22807860

[glass nest]

I'm alright, Dee. Struggling with a conundrum... Do i, or Do I not order something from UberEats

[wind lake]

@boreal scarab

[boreal scarab]

@wind lake

[wind lake]

this is the question of our generation

[glass nest]

Haha

Oh Jazz - The VC was the first time I heard your voice - you have a great accent 😄

[upper knoll]

what u thinking about getting?

[glass nest]

Probably a Kebab 😄

[boreal scarab]

I think that VC was the first time I heard your voice too lol

[wind lake]

no it wasnt but thanks

[twin ridge]

Gave +1 Rep to @glass nest (current: #19 - 477)

[glass nest]

If it was on one the the old events, I guess I didn't remember.. Sorry 😦

[upper knoll]

when was the last time u ordered something?

[boreal scarab]

I know what you need!

[glass nest]

Errrrmmm.. a week and a half ago?

[boreal scarab]

Pizza from Domino's

[wind lake]

hahha yeah it was probably years ago

[upper knoll]

if u have the funds and u have been good and wokring hard

whats the harm lad

[glass nest]

Beerise - Nah, I'd rather the store make pizzas for paying customers rather than lil 'ol me

Especially on a friday night on pay weekend 😄

Hmm... 'working hard' may be an overstatement :p

[upper knoll]

sometimes u just gotta treat yourself

[glass nest]

https://tenor.com/view/treat-yo-self-parks-and-rec-aziz-ansari-gif-13608081350089138705

[upper knoll]

great show

[glass nest]

the Ron Swanson (and a few other people) show? Yeah, was great

Apart from the Non Ron Swanson parts

[upper knoll]

probably one of the best written characters in recent tv history

[glass nest]

And i reckon it wasn't really 'Written' , feels like offerman just.. was a caricature of himself 😄

[upper knoll]

yer i can see that

[cobalt iron]

random interjection - is there a way to make something like a pull request for the uh... "task text" on rooms? or is that just a ticket in the chat menu?

[glass nest]

Same as audrey plaza. Apprently she auditioned, and then they created the character for her

Just copy/paste it?

[devout palm]

Hello

[glass nest]

Sup Heap 🙂

[whole gazelle]

h e l l o !!!

[glass nest]

Got some gaps in your text there, MV

[devout palm]

Letters need some personal space too

Darn it, i got cold

[cobalt iron]

Perhaps I mistyped - I mean to make a request to update the text on the site.

[glass nest]

Oh, That would be #room-bugs I guess

[upper knoll]

if its the room i think its probably a typo

[cobalt iron]

Ah, ty Uncle E, if only I'd scrolled down a little ...
and ty Dee - in this case not so much a type as lack of info (and I suppose sometimes ... perhaps more often that I'd suspect, that's intentional).

typo, that should read.

[upper knoll]

just give the room a couple reads most of the info rooms its there

sometimes u gloss over something u dont realise u need

LOWKEY DONE THAT ONE

rn im stuck unable to debug shells for example but im working through with the info i got ill get there

[glass nest]

thats the spirit

[upper knoll]

he says as my spirit leaves my body

[glass nest]

Your sprit might be able to cruise through networks

[upper knoll]

yes the networking rooms xd

[rapid merlin]

eddie and venom are genuinely like a couple who have been married for 30 years

[marsh bridge]

anyone wanna check this? am just new to this stuff
https://github.com/miskuro/jinx/

[upper knoll]

i feel like thats a bad idea

xd

[glass nest]

I don't wanna click a random link on a hacking server. Even if it is on github

[upper knoll]

^

is it even allowed?

xd

[marsh bridge]

oh lmao

[cobalt iron]

I clicked it lol - what's the question?

[glass nest]

Shrug. Dunno.

[marsh bridge]

just check it out if you have any thing to say or note lol

[rapid merlin]

it's not a hidden link

[glass nest]

Coeus "Danger" Ramone 😄

[marsh bridge]

its just a encrypting script I put on github

with C language

i just started learning C

[dim girder]

Like bro for real @analog stream or @mossy river .......my eyes are killing me🥲

[hazy sundial]

never used C++ in my entire life so idk

[upper knoll]

sounds more and more sus

[marsh bridge]

XD

[upper knoll]

poor jabba he cant make it appear sooner

[shut hawk]

december

[mossy river]

You just pinged a random user called admin 🤣

[upper knoll]

xd

[glass nest]

#announcements message

Or as a fix for now, I use DarkReader extension on Chrome

[cobalt iron]

idk if that's encryption, but on a quick scan that appears to do what you say it does...

[marsh bridge]

not really encryption it just flips bytes lol

[shut hawk]

^

[marsh bridge]

Ill probably make real encryption with the same logic i used for traversing directories and subdirectories

[rapid merlin]

god damn it

[dim girder]

Bro did actually replied me with a specific date though😂😭

[dim girder]

oh cool, thanks

[twin ridge]

Gave +1 Rep to @glass nest (current: #19 - 478)

[mossy river]

December 1st

[dim girder]

wait frfr?

[mossy river]

Oh I was wrong

[glass nest]

Something else is happening on the first on THM... Can't remember what it might be....

[mossy river]

It's just December 🤣 #general message

Apologies

[dim girder]

https://tenor.com/view/ok-gif-3541715392052943031

[glass nest]

Ahh, I remembered! It's when we don our santa hats 😄

[shut hawk]

I guess i'm not here 😔

[dark frost]

[mossy river]

Has anyone seen Jayy recently

[upper knoll]

jabba i expect u to be draining the life out of your heating still or ill be annoyed xd

[cobalt iron]

Tesla, you could refactor that into a while loop that calls a function and condense the hell out of that code.

The function would be 'if there is a sub directory, keep going (idk, return 1), else, don't (return 0) and the while would call the function until there are no sub directories.

Little slower performance, but easier to read.
Depends on your priorities I'd suppose.

[glass nest]

jabba - i think I left a window open. Probably flew out

[shut hawk]

[mossy river]

I was cuddling the radiator earlier

[upper knoll]

good! revenge!

[dim girder]

lol......ya'll had better be quick please sirs and my lords😂😭

[mossy river]

https://tenor.com/view/on-the-case-search-detective-on-it-batman-gif-26966319

[dim girder]

xD

[dark frost]

https://tenor.com/view/1966batman-adam-west-batman-bomb-scene-gif-12161316

[sick lance]

No new room tonight? 👀 @umbral bay

[glass nest]

Haha, You are relentless, Scrubz 😄

Right... Gonna refresh some knowledge on Windows/AD. uggghh. gotta be done though

[rapid merlin]

anyone here watched the originals?

[glass nest]

no, just the remakes.

[rapid merlin]

..

[glass nest]

It's friday. I'm in a silly mood.

[rapid merlin]

god damn it

[glass nest]

You can call me 'Esqy'

😄

[rapid merlin]

You should watch The Originals, it's so good

[sand trench]

300 days to go

[vagrant kraken]

Is anyone here actually working in IT

[sand trench]

bella
emmers
think muiri

[wide merlin]

I was just giving a random trivia. The answer was /usr/bin

[rapid merlin]

wtf jesus LOL

who has #1 streak

gotta be ryan right

[shut hawk]

many many people

[mossy river]

captchas getting too complicated

[nocturne oriole]

[rapid merlin]

yeah it's so annoying

[vagrant kraken]

Cooll

[soft oxide]

hi

[rapid merlin]

I just be tryna log into roblox and I gotta solve 14,583 problems 😭

[glass nest]

Hey! I designed that one. you can tell, right?

[nocturne oriole]

hello

[mossy river]

Yes Mr Pizza man

[cobalt iron]

Well,I appreciate it, the more I lean the better ... I suspected /usr/...
would be (well round about) the same on my mac.

[glass nest]

Coeus - Might be worth looking up and noting a few commands that help you find files on linux. Will save guessing 😄

[cobalt iron]

Oh I'm rather familiar with a terminal emulator Esqy - but linux organizes things a little differently.

[glass nest]

Granted, yeah

[acoustic siren]

Hello everyone , does anyone know what specifications I should look for in a laptop for a cybersecurity eng student?

VMs crash a lot on my 8GB laptop

[mossy river]

Honestly I couldn't suggest a laptop if you're looking to run many VMs.

[cobalt iron]

^^ what Jabba said

[acoustic siren]

Still a student only need to use kali Linux

[mossy river]

You're going to want to look for one with >16GB RAM and that can support Virtualisation for at least a smooth experience

[acoustic siren]

some don’t support??? How do I know

[glass nest]

Less than?

No greater than. ok, I read wrong

[cobalt iron]

Some don't support what Kira?

[naive violet]

Tbf a decent ex business laptop with 16GB is a good start

[acoustic siren]

Do I have to care about graphics card and those stuff about display that increase price ?

[acoustic siren]

Virtualization

[zealous shell]

Is there any site or some where i can see which skills are required to complete which rooms?
(Except entering room and reading the details)

[acoustic siren]

we enable it from bios I thought all laptops

[mossy river]

Not really no

You'd want to focus on the CPU rather than the GPU

[acoustic siren]

And also I don’t want my laptop to turn into an airplane in class so what makes it quite when running codes and stuff?

[acoustic siren]

ok okk

[sand trench]

power savings options

most of the ways to save power also makes the temps go lower which causes the fans to spin less saving power from fan usage and from cpu usage

[acoustic siren]

Not that it makes it laggy and slow

[sand trench]

¯_(ツ)_/¯

[acoustic siren]

Gaming laptops have good fans but still noisy (even without gaming) I thought the more fans the quieter

[cobalt iron]

Virtualization is software.
You've seen machines that don't support virtualization software?
Perhaps that's true, but can I get more info?

For example, would the same machine not suppot docker?

[acoustic siren]

I was asking when someone said to check if laptop supports VM cuz I was shocked to know some don’t support

[sand trench]

shadows gaming laptop form 2017 is extremely quiet when using auto-cpufreq

[acoustic siren]

just download oracle and enable vm I thought it’s possible on every laptop

[sand trench]

very few cpu:s don't support running virtualmachines anymore

[acoustic siren]

Couldn’t find it on Amazon in my country >.<

[acoustic siren]

Oh that’s a relief

I’ll send some options recommended by chatgpt if u can all help me pls

[cobalt iron]

Yeah, I'm not familiar (even with <= 8gm ram, 1.x ghz processor) machines that "don't support" virtualization

[hazy sundial]

i finnaly made this room https://tryhackme.com/r/room/catregex

[cobalt iron]

Not that those are ideal specs

[hazy sundial]

this was the most painfull room i made so far

took me almost 2 days to make it

@sand trench

ay u proud of me?

[sand trench]

yeah nice job cab

[rapid merlin]

was doing a python course and actually didn't have python installed, const is smart

[cobalt iron]

I'm pretty sure I could run a VM on a commadore 64 ... I might try that later ...

[hazy sundial]

[glass nest]

@sinful moon Coeus was think about running a VM on a C64. thoughts?

[rapid merlin]

W congrats

evening james

[glass nest]

(She is our vintage computer expert 😄 )

[sinful moon]

lol ouch

what would that even mean

[rapid merlin]

evening elizabeth

[sinful moon]

heya!

[cobalt iron]

Not gonna be easy, but ram is ram, and cpu is cpu

[naive violet]

There's hardware extensions for virt too
There's also the resource requirements
It can "technically" support virt but VMs could run like molasses.

[cobalt iron]

It's not like machines today are all that different is all i'm sayin ... better screens ... memmory is "free"

[naive violet]

Possible perhaps, but maybe an unpleasant experience

[sand trench]

anyone wanna talk shadow out from doing linux from scratch again???

[sinful moon]

lol got distracted for a second, got another birthday present

anyways

[acoustic siren]

• Lenovo Yoga 7i 2-in-1 Laptop 16" Touchscreen Core Ultra 7 Processor/16GB RAM/1TB
  SSD/Window 11

• Lenovo IdeaPad Flex 5 Convertible 2-In-1 Laptop
  With 14-Inch Display, AMD Ryzen 7 5700U
  Processor/16GB RAM/512GB SSD/AMD
  Radeon Graphics/Windows 11

• Asus TUF Gaming A15 FA506NCR-HN044W
  Laptop With 15.6-Inch Display, AMD Ryzen
  7-7435HS Processor/16GB RAM/512GB
  SSD/4GB NVIDIA GeForce RTX 3050
  Graphics Card/Windows 11

[glass nest]

oh James - Did the switches arrive?

[acoustic siren]

Is there a better way? I don’t want to buy a laptop with Linux operating system if I can

[glass nest]

HAPPY BIRTHDAY @sinful moon !! 🥳

[sinful moon]

Why would you even think C64 could virtualize anything including its self? Now emulate, it sure can but it’s got a weak af CPU, so not sure what is even the throught here

[naive violet]

I have a lovely assortment, some real vintage ones

[naive violet]

Better way compared to what?

[sinful moon]

Thanks! It was on the 25th so this was just a late delivery

[acoustic siren]

I mean to use kali Linux on windows without my laptop crashing and turning to airplane from running VMs

[sand trench]

...

welllllllll

[sinful moon]

No reason not to shadow lol

[sand trench]

technically windows subsystem for linux exists

[sinful moon]

to your ealier LFS question

[acoustic siren]

the thing is that we start this stuff next year according to my study plan but they are too slow

[sand trench]

fair... the documentation reading on its own is amazing to learn from

[sinful moon]

mhmm great learning experience every time, but fair not much practical to do with the install after lol

[acoustic siren]

I didn’t know such a thing exists💀

[sinful moon]

maintaining it is a pain in the butt

[sand trench]

yeah usually do it in a vm anyways

[sinful moon]

mhmm

[sand trench]

so the vm rarely stays forever after

[acoustic siren]

but like does it have pre installed features and all the stuff

[sinful moon]

what are you even asking

[sand trench]

basically yes but it is more or less terminal based and has some problems with the network stack

[sinful moon]

you mean the Kali version of WSL?

[sand trench]

kira is asking if kali linux in wsl2 is okay

[sinful moon]

yeah networking will be a constant issue

just use a VM as neat as WSL2 is

it

[sick lance]

I mean it works, but connection to THM will be more trouble than it's worth.

[sinful moon]

it’s better for development work

[naive violet]

If you just want to run a single VM, usually that's not a problem

[sick lance]

ALso don't get access to hardware with WSL2.

[cobalt iron]

Lots of CS stuff is "cause I can" ... remember when doom 2 was ran on a pregnancy test?
It's about understanding machines, not necessarily practicality.

[acoustic siren]

I’m still inexperienced to participate in catch the flag thing competitions cuz I’m still a first year but the price money is too tempting and I have coding experience lol

[naive violet]

I will always recommend second hand business grade laptops, they offer an incredible value for money

[sick lance]

It wouldn't let me run an emulated android.

[sand trench]

think bluestacks is for that scrubz

[sinful moon]

That’s fair but how are you going to virtualize anything on C64, and again too weak to emulate much of value

[acoustic siren]

yeah I think

[sand trench]

also good lord not looking forward to compiling web browsers again

[cobalt iron]

idk yet, but now i'm inspired to try!

[sick lance]

Bluestacks isn't compatabile with Android Studio.

[sage axle]

guys can i delete my payment method? I feel safe that way, cant see an option

[sand trench]

ah

[sick lance]

Contact support.

[sinful moon]

and both options are awful indeed lol

[sick lance]

There used to be a chargebee URL, but that no longer works.

[sage axle]

are they helpful in this?

[sand trench]

if even gentoo decides to ship browsers as prebuilt binaries there is probably a good reason

[sick lance]

I should hope so, it's their job.

[sinful moon]

Browser compile longer than kernel compile these days lol

[acoustic siren]

I have trust issues tho >.<

[sand trench]

hahaha yeah

[sinful moon]

not a good sign when kernel compile time is the metric for how long everythign else will take

[naive violet]

Hey it's your choice
I'd rather spend 20% of the money and get 90% of the performance

[sick lance]

After two weeks of contstant work arounds to get my VM's to recognise VT-X.

I remembered I had an android phone that I have spare that I can just plug in to get my android exploitation and analysis studio up and running.

[sand trench]

just go out and buy a second hand android phone scrubz.... what is the worst that can happen

[sinful moon]

yeah lol significantly easier indeed Scrubz

[sick lance]

And faster.

[cobalt iron]

That'sreally interrsintg - is there history to that?

[sinful moon]

How do you mean Ramone?

[acoustic siren]

Understandable fr

[sinful moon]

Browsers are just bloated these days and take forever to compile

[sand trench]

standard compile units is a thingy

[sinful moon]

it is indeed silly that kernel compiles faster

oh yeah if you mean what shadow mentioned, yeah that’s a well defined thing

[acoustic siren]

Btw is there any good option between those for high speed coding/ no crash / no noise

[sick lance]

"high speed coding" doesn't take much to run.

[sinful moon]

lol the one I run into most often in every day use, the Python 2.x compile. Holy heck, plus you have to pass tens of thousands of checks lol

that one is not fun

[rapid merlin]

Python3 >

[shut hawk]

what are you on py2 for?!

[cobalt iron]

Whay would that be the standatrd? I mean, it is a good benchamark, but is there some reason we decided? Like you mentioned browser takes longer, but is ... maybe, probably the most important software we have on a machine. So when did the kernal become the choice?? This is totally new to me I'm not sure I can ask good question here, just looking to learn more.

[sinful moon]

yes but you still likely need Python 2.x for legacy

I’m not lol

[sinful moon]

for Gentoo and LFS, compiling the kernel is a given. So since you have to do that every time, you can track how long the compile takes and the rest of the guide uses that as a unit of measure of how long (appox) other software will take to compile in comparison

[sand trench]

https://www.linuxfromscratch.org

if you wanna go into linux from scratch

though recommend doing this in a vm on a desktop computer with decent amount of cpu cores and ram to give to the vm

[sinful moon]

Both distros are all about compiling everything basically, although as shadow notes, even Gentoo offers binary packages for browsers since compiling them takes even longer than the kernel lol

[sand trench]

linux from scratch is also a time investment

[sinful moon]

And yeah Linux From Scratch is a good experience for anyone interested to go through at least once in their life

[sand trench]

and after you most likely know more about compiling and what package does what

[sinful moon]

yeah it is far far from trivial

you have to compile the build tools which compile the actual build tools and more to make everything self hosting lol

[sand trench]

followed along a video of someone doing linux from scratch once... but wanna do the entire thingy sometime

[sinful moon]

Oh I wouldn’t recommend a video for that, yeah the docs are more than enough

It’s not a practical distro to use, but is invaluable for learning

[sand trench]

well they had the docs up on the video through the entire process while chatting to chat

[sinful moon]

totally fair lol

[sand trench]

the problem is they stopped a with vods of said livestreams before finishing it fully so there is some end parts shadow dunno how they work

[sinful moon]

yeah just follow the docs, they are very well done, and you could complete the rest, but yeah a new install depending on how long this has been would be good

[sand trench]

well swapped pc since last time so would need to do from start anyway

[sinful moon]

lol totally fair

[sand trench]

and yes plan on reading the new docs

i.e this: https://www.linuxfromscratch.org/lfs/view/stable-systemd/

[sinful moon]

Yeah they get point releases as well which is interesting

I am all about low level operating system stuff and as with my use of Arch, it’s just neat learning how and why everything fits together, especialyl with how modular Linux really is

especially compared to FreeBSD which ironically is all meant to be a part of a single whole, one project for the whole base system.

[sand trench]

did you know sed package is responsible for the clear command

[sinful moon]

I don’t think that’s entirely true depending on your shell and more

but it may be true for some shells

[rapid merlin]

isn't LFS just a masochists dream

[sinful moon]

It’s good experience, and like I said, not intended to really give you a distro you live on after you’re done

[glass nest]

Setting up email servers is

[rapid merlin]

what server you using LOL

[glass nest]

i don't want to talk about it

[sinful moon]

Self hosting email is always hell lol

[glass nest]

😄

[sinful moon]

brb

[rapid merlin]

isn't there a script lukesmith made to make setting it up relatively easy

[sand trench]

getting google and microsoft to not block your own made email server and email adress is nightmare fuel

[sinful moon]

^ this and more. It’s one thing to set up an email server, that’s relatively easy, but maintaining it and your reputation with other vendors is the real battle

[cobalt iron]

mad respect, but I'm not sure that answers the question - I see ur crazy busy in chat so do what you do.
Once a kernel is compiled, we move on to software? Correct? some software takes longer. It could make sense to benchmark at the software level, right?? (yes, a kernel is, in a sense software, but it has super special privileges that other software doesn't)

To me, and I'm happy to learn more, the kernal is just another software (like browsers) and (although they're bloated af agreed) why is that the benchamrk?? citing OS's that ... exist? IDK maybe there is something important there I missed, doesn't create a standard in my head.

[sinful moon]

yes SPF/DKIM/DMARC help, but that’s not the end of the story by any means

[sand trench]

🍕

so apparently if you click on the pizza emoji on discord it says this

[sinful moon]

What are you asking? Basically in LFS once you compile the kernel that’s your benchmark for approx how long other software compiles will take. And no there is nothing special or privileged about a kernel compile vs software compile, it’s the same deal

It’s just a very rough measurement and not like an exact unit, just giving you an idea

Pretty sure Gentoo does the same sorta thing for its initial setup but I have less experience there

[wide merlin]

its sorta similar on different oses. I was asking for linux. On windows theyre held usually at C:\Program Files or C:\Program Files (x86)
I dont like that theyre not under a user account folder.

[sinful moon]

Why not, I’m not entirely sure I understand the question. In Linux things are even more correctly sorted by the filesystem than in Windows

[cobalt iron]

^^ apparently I can't add emojis or I'm too silly to find it -- heart hear heart.

[glass nest]

If you've used Windows for all your computing life, sure, the way files are orgnaised in Linux is different/strange

[sinful moon]

Typically binaries are in /usr/bin, system wide configs are in /etc and local configs are in ~/. or ~/.config generally, $XDG_Config_Dir more specifically

[cobalt iron]

What I'm asking what why OS is the benchmark

[sinful moon]

Hah no problem and you just need to verify your account to access that

[sinful moon]

because you have to compile the kernel before you even proceed to anything else

[sick lance]

This is intended

[cobalt iron]

Right, so what about the "anything else" is that is there not a level of importanse to all those things?

[wide merlin]

I think the windows filesystem is strange. I like linuxes more.

[sinful moon]

And the reason both are the way they are… legacy cruft

Heck in Windows 3.x we didn’t even have Program Files

[cobalt iron]

"Is there not" that should read

[wind lake]

hi elizabeth happy belated birthday

[sinful moon]

Not sure what you are asking yet again, really the “Standard Compile Unit” is just a silly rule of thumb whilst you are compiling Linux From Scratch or Gentoo in the docs

[sinful moon]

Thank you!

[twin ridge]

Gave +1 Rep to @wind lake (current: #68 - 119)

[sand trench]

oh wait they are called standard build units in linux from scratch

sorry....

[sick lance]

Windows doesn't keep program files in a users folder for Data separations, access control too, files stored in program files will be accessible to all, where as the users folders will only appear to who has privs.

[sinful moon]

yeah I couldn’t remember off the top of my head lol

[sick lance]

Also Windows profile folders will change alot more than program files.

[sand trench]

%appdata% is complicated on windows

[sinful moon]

Also Microsoft had to force some standards on devs…. which it’s up to them if they use or not lol

yep like that

[sand trench]

storing user specific things in there is a mess

[sinful moon]

On Linux it was much more agreed where everything goes

shh we won’t talk about /opt lol

[sand trench]

https://wiki.archlinux.org/title/XDG_Base_Directory

^ this article is nice

[wide merlin]

exactly. imo not the best way to go about it all.
cause if not encrypted, you can usb boot and read all of the program files, despite ones that would be hidden to a default user.
On linux you can set up LVM and have separate /usr/ folders with their own binaries, which cannot be inspected, as well as other folders separated in their own protected partions such as /tmp

[sinful moon]

mhmm and we have standards bodies which help to define these standards especially the XDG ones as I refrenced above as well

[sinful moon]

To play devils advocate, moot point if the entire drive is bitlockered

I could poke even more holes in that though

[sick lance]

If somebody doesn't encrypt their drive, that's their issue.

[wide merlin]

yeah thus the if not encrpyted part. that is true. but go ahead id like to know what else

[sick lance]

Although, I'm sure even if it's not encrypted, you'd still need a password to look at some folders and files.

[cobalt iron]

"Silly rule of thumb" -- Exactly what I'm asking about -- do you know of a history to this "rule of thumb?"
I find (for me) the history of "automatic computing machines" guides me on how to understand purpose and possibilities of the devices that we use on a daily basis.

Brett Victor??

Ope, one T, just "Bret Victor"

[sinful moon]

what lol

[wide merlin]

you do not unless you need to unlock the bios to boot from another drive

but yes, their issue if not encrypted. But in lots of places with lots of public accessible computers i havnt seen encyption or boot locking

[sand trench]

removed the drive encryption on shadows laptop while in uni to quickly be able to start and shut it down during class but yeah... don't recommend doing that

when your passphrases are generally long there might be reason to think twice about it

[sinful moon]

I don’t know the history of this, it is just sensible to use kernel compile time as a rough measurement of how long compiles for the rest will take. It’s not exact and it doesn’t have to make sense, anyone could have thought of it

[sick lance]

I take my laptop to Uni, it's so much better than their system.

[sinful moon]

You’re forgetting another protection that we actually use at work for our publicly accessible computers. Immutable filesystems. Upon reboot everything is wiped and it’s back to the same base state as it started

[wide merlin]

probably for the better. Idk about my uni pcs, but in hs if you signed in a copy of your user documents was made, meaning your projects can personal files could be stolen by the exact method of usb booting into an unencrypted pc.

[sinful moon]

So if nothing is actually stored, who cares

[wide merlin]

yeah ive seen them go on where they have their backups and then a cron job to revert them at the start of each day

[sinful moon]

Ours are significantly more aggressive than that but sure

it’s upon reboot for us

[cobalt iron]

Elizabeth, I really appreciate your participation in this convo - thank you so much for being here and helping all of us learn.

[wide merlin]

but still, similarly to the school account and files situation, the user files are still held on the system.
Surely still including im sure the user profiles for browsers. Which is a problemo for the users of the systems.

[sinful moon]

No problem!

[sinful moon]

I mean this is just handled natively in Windows via filesystem permissions and Group Policy. Fair I did some things in high school which invalidate this, but that was because they didn’t use proper permissions and more. You don’t need full on encryption per user, you just need to properly administrate how your filesystem and shares work

[glass nest]

Hacking is in your blood

[sinful moon]

I get where you’re going though, yes if a user logged into a domained computer with a Linux ISO and just poked around, they could get to each users’s %APPDATA% and such… but that’s what Bitlocker is for

[sand trench]

A hacker embodies a boundless passion and insatiable thirst for understanding the complexities of a system, computers and networks in particular. They revel in the pursuit of knowledge and mastery, constantly seeking new solutions and opportunities for growth. Their drive and innovative spirit inspire and are inspired by the hacker community, where ideas and knowledge are freely shared and valued regardless of their origin.
--Silk

[sinful moon]

but typically the rest is done via Folder Redirects to a file server or similar, and it doesn’t even live on the local machine

it’s really only %APPDATA% and such that will remain on the machine per user

again to get into very specific windows admin situations

[worthy venture]

Yeh what that guy said

I have no idea what’s going on here

Seems heated

[sinful moon]

lol it’s not heated and I’m a gal but thanks c:

[cobalt iron]

^^ It's not, all is good bro 😄

[worthy venture]

You can still be a chill guy if you’re a girl!

https://tenor.com/view/chill-guy-my-new-character-gif-2777893510283028272

[sinful moon]

lol no complaints there!

lol I want that gif but with nuclear bomb going off. Thought that was what it was at first

btw they should have used dithering for that gif, that is some atrocious banding

[rapid merlin]

Hello

[worthy venture]

Yeh not exactly the best gif 😂😂

https://tenor.com/view/my-new-character-chill-lowkey-doesnt-care-gif-10682709799802781848

[sinful moon]

lol not much better, other issues here

lol graphic design is another field I almost went into

[worthy venture]

Atleast this one moves more than 1 frames per year

[glass nest]

Soooo.. what was the gift, Ellie?

😄

[worthy venture]

Graphic design is my side hustle!

[sinful moon]

for my birthday? Nothing really

And nice!

[glass nest]

Excellent 🙂

[sinful moon]

But I got myself an M4 Mac Mini and x3 1440p 144Hz monitors for my work from home setup

[cobalt iron]

Elizabeth, I would love to talk CS history with you sometime (I've got that C64 in my bedroom rn, use it every night), I know I'm new here and exactly no one special to you or anyone else but it'd be cool to get to know the resident expert on "classical" computing.

best to the chat, I'm off to meet my learning goals for the day.

[sinful moon]

Mac Mini is just my side infosec computer in that setup

[glass nest]

I thought it might have been The Book. the one thats been advertised everywhere about starting a civilisation from scratch 😄

[sick lance]

Classical 💀

Holy moly, it's not Mozart

[sinful moon]

I am all about computing history and Commodore so no complaints. Retro computing is my jam so ask away and feel free to add me

[cobalt iron]

I'm also new to discord and don't know how to do that .. I'll google some shit lol

[sinful moon]

I’ll spam my pride and joy which others have seen endlessly, my 1999 Pentium III machine

[cobalt iron]

Oh YEAH!!!! ... we're gonna get along

[sinful moon]

hah I bet c:

[wide merlin]

absolutely gotta encrypt the system and it gets rid of the problem. But weird so many public networks dont. I dont think I have came across a public network that isnt crappily put together, allowing some weird misuse. I live in a smaller town area though.

but I definitely plan on pushing advocacy to stop this around here.

[cobalt iron]

Yo, before I dip, I'm for damn sure trying a VM on that C64 toni.... over the next few days lol

[sinful moon]

Yeah which is why I mentioned the bitlocker, Group Policy and more, but I get you. I for sure found issues in our school computer back in the early 00s, just yeah responsibly report them

[glass nest]

Look forward to seeing that, Ramone 😄

[sinful moon]

lol I still don’t know what that means or entails, but good luck

just emulate Mac on your Amiga for a better time

[cobalt iron]

We'll figure it out together!

[wide merlin]

my last day of HS i had the IT guys huddled around me on their computer and their jaws were literally dropped. Ive been thinking for years to go back and check up on them. They at least admire me enough to where I think they would let me come in and check a few things out.

[sinful moon]

lol for the sake of the community rules I can not discuss what I did in high school, but needless to say there were issues

[wide merlin]

Because with what was present, entire takeover of so many parts of the network seemed quite easy but of course I didn't cross any lines where I shouldn't have, and showed them the core principals of which allowed me to do such things. But, i doubt they did much to fix it.

[sinful moon]

always yeah responsably disclose any issues you find

mhmm perfect

things were just different in the 90s and 00s I’ll say lol

[glass nest]

Yeah.. we don't have 'boost' buttons on our computers anymore 😄

[sinful moon]

It is invaluable experience when you get into the workforce though

Turbo, excuse me Esqy lol

[half girder]

but in bios xD

[glass nest]

https://tenor.com/view/tuyrbo-hack-gif-20004374

[wide merlin]

I could do a lot for my local community i just havnt been sure how to officially get everything in a legal standpoint to where i can offer consulting and not immedietly get into some mud. I understand responsible disclosure and the penetration testing process, meaning that I know that I need permission and a defined scope of engagement.
For these businesses and establishments that dont consider security in the first place, I don't know how to offer it to them.

Even at my last hotel I stayed at I suspected a security issue with a few things and tried speaking to the manager but he was never in while I was there. I have his email now and grabbed some info before I left to research it remotely.

[sinful moon]

Typically bigger businesses will have at least a legal disclosure policy or a [e-mail] to contact. It is extremely rare they will go after you if you are doing responsable disclosure and have not leaked any data. But it all depends.

If this line of work interests you, you can do so professionally and even independently via HackerOne where they very publicly ask “please attempt to hack us” which proper scope and guidelines

[glass nest]

find a pentesting company that works in your area. there are a LOT of legal stuff.... ok, Noir has it covered 😄

[sinful moon]

mhmm and that too, not hard to do so with the right firm either

Also Hotels are a nightmare for security so I’m not suprised

lol let me look up a PMS (property management software) vuln which made me lol

https://www.assetnote.io/resources/research/exploiting-an-order-of-operations-bug-to-achieve-rce-in-oracle-opera

consider this login screen is still the state of the art for many hotels lol

[glass nest]

looks like a cheap routers web interface 😄

[sinful moon]

yeah the article its self says “gives off Geocity vibes” lol. Not wrong

[glass nest]

I wonder if theres a <marquee> on there anywhere

[sinful moon]

lol there isn’t sadly

nor a view counter lol

[glass nest]

I vaguely remember a circle? Like... links to other websites along the bottom

[wild rose]

o/ ello

[sinful moon]

working with PCI DSS compliance and other concerns, yeah I’m now quite a bit more paranoid about how lax and ancient the security and payment platforms of many public locations are lol

[glass nest]

no no, i'm not gonna browse oocities. Not again 😄

[sinful moon]

Yes that hole in the wall no name gas station or liquor store you just went to are subject to PCI DSS compliance concerns as well and holy heck, I can gauntee they are not up to spec lol

for those not aware PCI DSS == Payment Card Industry Data Security Standards (aka credit cards/debit cards)

[wide merlin]

Gotta get started somewhere. Been doing cybersec research for 10+ years. At this point I have some strings being pulled to set a nice path to get more opportunity to do what I'm good at.

[rocky mulch]

Sup, ElizabethNoir are you fr ?

[sinful moon]

Totally fair, but as Esqy mentioned it’s best to get under a firm than go indipendant

[glass nest]

i Dunno about where you are, noir, but over here pretty much every payment processor requires the PCI DSS, or they terminate the account

[sinful moon]

No I just thought it sounded cool and mysterious lol

also I just like film noir as well lol

[glass nest]

i read 'fr' as for Real? 😄

[wide merlin]

Ill share what one of my biggest insights was to my personal experience:
I have self taught myself a large amount of cybersecurity methodology and concepts;
But I have not taught myself how to make money and contribute my specific efforts very well.

A lot of my research can cause problems if I release it, so I don't release my critical research on things like github, or to the public at all. My github is very different than what I primarily do.

[sinful moon]

That is worldwide, but yes I’m in the US. But requiring and being compliant with such are very different things lol

[glass nest]

Hehe, yeah

[rocky mulch]

@sinful moon 👍 🤓

[wide merlin]

I also realized going to some cyber conferences and talking to the speakers and asking questions the hard realization, that companies do not want to pay for cybersecurity. They rather tank the damages and pay for it seems to be the unfortunate trend. But I won't give up. Its important we advocate for greater security.

[sinful moon]

Glad to hear you’re respectful of responsible disclosure. I too am self taught, not sure what your statement means to achieve however

[sinful moon]

Well that’s where you would be surprised, cybersecurity is in huge demand and is what I do professionally

I literally work in a company with a dozen employees yet I am the cyber security person, I have both saved the company and our clients from numerous threats both potential and active

I stopped a threat which could have ruined our business even, so there is a market, even in small business

[rocky mulch]

Do you have some sort of degree or have you fully learnt by yourself ?

[wide merlin]

I was sharing along the lines of how its two different things to teach yourself and to put that into practice. I noticed very early on there are people who know signifigantly less about the feild, but still are actually a part of it at some capacity. Which is success. So I have respect for that even looking from more of the bottom of the hill up at those who are the kings/queens of the hill.

doing the research I do doesn't fall under the category of something that would be front facing to employers, because it is held under personal classification.

[glass nest]

They key is to not do anything unethical that can get you into trouble beforehand.

[sinful moon]

Fully self taught, but I did luck out having connections which helped get me into this job. But yeah I’ve been learning infosec since the early 00s

[sinful moon]

That’s fair but I’m still not sure what you’re getting at, you have some pretty darn marketable skills. Why not work at a company which gives you greater peace of mind and consistent pay?

[glass nest]

and potential connections

[sinful moon]

A Manage Service Provider is a great start since you get to test the security of dozens to hundreds of different clients

[wide merlin]

makes it hard to get to do what I do professionally. I would be best at physical penetration testing engagements such as red team. I have tools I have made that other researchers dont have access to since ive never realsed them, and i feel that gives me a unique edge and approach at simulating what a real world threat could do against a company. I can write nice reports too.

right now im working on getting basic certifications since theyre cheap and short so its a good start. I wholeheartedly believe I can get the somewhat industry standard certs like security+ and such, but havnt been able to get the money for it. I got a weird story man with how i went about learning all of this and getting into it hah.

So i guess also pro top: Right now ISC2 is giving away certifications guys, i say check em out.

[sinful moon]

what

[rocky mulch]

In 10 years jobs will rain like cash (not really, but it's what I'm believing)

[glass nest]

automate - they say that every year.

[wide merlin]

I've not known anyone personally who is in the industry until I got to take a trip to my university recently, which i impressed the staff and alumni there.

But I think my biggest problem is I havnt been able to build that bridge to get to put myself to good use. I am talking a little bit too much now but i wouldnt mind clearing it up more over time here perhaps. not really sure why im sharing so much to be honest.

[sinful moon]

You are like really playing things up in suspicious ways. You are more than hirable. Not sure why you are being weird about this

[wide merlin]

I got offered a few paid internships. I think I might take one for the summer to get some experience under a company and use that to put my foot in the door somewhere else.

[rocky mulch]

Uncle Esqy, I'm still optimistic about how things will evolve

[sinful moon]

Sounds like you are still a bit younger and still learning, nothing wrong about that, just give it time

[glass nest]

Good to stay positive! Luck is when preparedness meets opportunity. create your own luck 😄

[sinful moon]

building those connections will help though, with people into infosec and in person etc

[rocky mulch]

Yup !

[wide merlin]

I am sorry, I actually don't know what you mean by that but my mistake.

You might say that because of what I say I research, and that is just attributed to the fact that its me researching what is possible. And I have found a lot under my sparse resources, I know with the resources of a company I would be very valuable.

An example of why I am so vague is because some things, are just wild. One project I want to get a gov contract on (for data to simulate the attack) and potentially talk somewhere about it. But this project is another part of my confusion on how to execute my research in a meaningful way.
To not give too much information I created a framework which is very powerful in terms of attacking a networks WiFi. I see no real world way to stop it. But a project like this is not only a danger to a company because of what it can do, but in general WiFi accross the glove.

And I don't have any other researchers included and I've never released something like this so its kind of stalled in a state where I don't/feel like i can talk about it much.

Eh im talking a lot and a little flustered right now cause I got a lot going on but sorry for sounding suspicious and being a little convoluted with my messages.

[sinful moon]

Honestly as someone who doesn’t have a degree or anything I worked random jobs for nearly a decade until I got my first IT job just as Help Desk. Within a month I was immediately recognized for my infosec skills and just kinda became our sole infosec professional, along with one of the sysadmins. So yes just getting your foot in the door can be invaluable

[wide merlin]

Definitely been considering starting as a help desk.

[glass nest]

Sounds like Academia might more be your jam. Not great money, but a lot of freedom

[sinful moon]

Starting out in help desk can be invaluable, SwiftOnSecurity which you may have seen online got his start the same way and praises that background up and down

[rocky mulch]

Jesus why all the THM CTFs start with a dirbuster on port 80

[wide merlin]

Yeah Im currently a student. I finally had the money to enroll, got into a really nice school for cybersec. heavily awarded for its program. but to me its weird. everything has been so damn rudimentary. I just want the degree so it shows I can go through and dedicate myself to a program to get x piece of paper

[glass nest]

If tou do Web rooms, then yeh, they will :p

[wide merlin]

so at least thats smooth sailing. my school is a side concern, im still working on all of my other stuff in tandem. Just took over a website i am now the CEO of a cybersec blog I think will be really good for my resume now too when trying to pivot into the industry

[sinful moon]

I’ll just say there’s a reason I didn’t go into college in the 00s for IT/CS, but there really wasn’t a pathway to infosec back then. Things have changed so I can’t really advise you there

[glass nest]

So put effort into the degree. Many '/r/iamverysmart' fo;l say that they 'didn't do well in school because it was too easy' and then it bites them in the butt. Getting an 1/1st/whatever will open up a LOT of doors. Especially if your final year project is good

[latent nacelle]

https://tenor.com/view/skeptical-futurama-fry-hmmm-i-got-my-eyes-on-you-gif-17101711

[wide merlin]

Yeah I mean I recently got to meet alumni and stuff. I feel generally like its not as important as it seems to be outside of it. For me personally though. I see a lot of my classmates are learning new things and getting those good insights and admiration for security.

[sinful moon]

If you’re already there, stick with it and see it through

[wide merlin]

Im gonna get that degree though, and pick up whatever certs I can afford. Working on an ISC2 path right now cause im trying to utilize the certs from their grant program. CISSP seems like the end goal from that.

[rocky mulch]

Honestly the diploma is good for the paper and somewhat the large amount of diverse data you ingest, but learning infosec by practicing and tryharding on your side is far more valuable... Not in the market though, so don't drop college

[sinful moon]

this

[hazy sundial]

mid my pc has a 4090

[latent nacelle]

are you in the United States?

I went back to school for a similar reason

[sick lance]

80 is the default http port?

[sinful moon]

lol this had an Nivida TNT2 until I swapped with 3dfx Voodoo 3 2000. Get on my level

[wide merlin]

yeah well even my project I talked about I believe is HUGE, way bigger than anything my school would direct me to research. I genuinely believe I can talk at a con with this. But... With that specifically I need responsible disclosure, since its with virtually all WiFi im not sure if I should contact the FCC or what. So still figuring out the non technological bits of making the full blown paper. But once thats released it will be very useful I think to the world at least, and my papers im making for school arent generally like that.

[hazy sundial]

my bad

[wide merlin]

Yep US.

[rocky mulch]

Scrub, I have a doubt now 🤓

[sinful moon]

lol no worries, you just need that 3dfx advantage

[hazy sundial]

fr

[sick lance]

?

[wide merlin]

side note which is what I was trying to emphasize but I feel at a stalemate and cant really release this without probably a shit ton of things happening before, which might not allow me to release it because those things aren't realistically gonna happen to stop it. Unless they do and I really changed WiFi. But I will let my fellow computer geeks here know when I get to that point. Projects been out for just over a year.

[rocky mulch]

Scrub I don't even see scrub now on phone

[wide merlin]

the framework can be used very maliciously if I released it, and it only costs $50-$300 in hardware to be able to use it. I used a WiFi pineapple for mine, just to go ahead and have the different modes on my antennae

[sinful moon]

get peer reviews on your research even before submitting it, if it is as big as you say, you need more than just a second set of eyes on it

[glass nest]

NTRK - Which is why I mentioned academia.

People to talk to about it, and the connections/opportunity to present it to the right people

[fair lava]

nulled, leakbase, exploit.in, etc...

[sinful moon]

there’s a lot of issues with WiFi but most are extremely well known, so you can understand why I may be abit doubtful of your claims, but just get some feedback on your ideas

[glass nest]

An MRes is kinda designed for this sort of stuff

[sand trench]

wifi = half duplex

ethernet = full duplex

[sinful moon]

Again not here, but with trusted and well informed professionals. WiFi cracking is where I got my start so I am more than interested and thus why I am also a bit more skeptical

[sand trench]

untrusted human interface devices is where shadow started with hacking if you don't count shadows minecraft modding days

[wide merlin]

it is a multiple exploit chain. The foundation of which is the evil twin attack. Its alright to be doubtful, I understand I am extremely vague.
When I talked to a government worker alumni at my school this october, he understood my classification and I told him the baseline of what I can tell him, he looked visibly scared and told me "yeah, you're definitely on a watchlist.". However I am not worried about that statement because I am very ethical with the way I conduct my research, which he had even attributed to my level of vagueness about this specific project.

You can see the bite marks when I release the paper :)

[sinful moon]

Sure, I look forward to seeing any released research, just make sure to do it right for sure

[sand trench]

shadow is on a few government lists

[sinful moon]

There’s just a ton of established research for evil APs and etc so I’m quite curious what is novel which you may have conceived of

[sand trench]

1. for downloading tor
2. for downloading tails
3. for using i2p for a bit

[rocky mulch]

Aside from deauth and cracking the pass WiFi is well protected nah ?
I mean gov could just evedrop from the roots of your bandwidth

[shut hawk]

Which standard would be vulnerable?

[wide merlin]

I actually didn't bring my project to show my professors cause I was worried the gov would go into my hotel room and swipe my drive if I brought it. Or copy it. Even though it is encrypted. I have a drive that I usb boot with just this projects data on it, so it is my development environment for the project. And its not like I havent talked about the fact I have it. As I said im not worried about what it is, im worried about what it can do outside of my possesion. I know it can be considered valuable information so I keep it close as I would like to benefit from it without it being stolen.

[sinful moon]

That is the question that has been nagging at me as well

[sand trench]

nah it is painfully easy to disrupt signal and thereby doing denial of service

[wide merlin]

virtually any wifi network allowing ICMP packets to be sent.

Regardless, the framework does not NEED to send ICMP packets to do what it does, but doing this allows it to get all of the wireless clients.

[sinful moon]

uhhh

[shut hawk]

wat

Do you know...what 802.11 is?

[sand trench]

for example place your wireless access point on top of a microwave and then wait for lunch time at your company.... the wifi will suddenly drop through the floor and people will not be able to use the wifi easily

[sick lance]

Judging from that, I'd say no.

[wide merlin]

it works on 2g and 5g networks, the ones ive tested on was using 802.11b im pretty sure

[rocky mulch]

Yup but harder to crack it clear

[sand trench]

wpa3 is looking promissing shadow has heard

[sinful moon]

so it’s not a wifi issue…

[sand trench]

to be honest not read the wpa3 spec yet

[wide merlin]

i am so for the feedback, because of course doing the research ive looked a lot at difffernt points. What is the core of the problem then?

[sick lance]

WPA3 is nice.

[shut hawk]

So it's a layer 3 issue?

[wide merlin]

I am essentially hosting a cloned network, in which the clients are now all turned into targets. Of course you can try to downgrade connections take data, but it does more than what you would suspect is generally capable from this position on a network.

so none of this in what I have told you guys is new

[dark frost]

https://tenor.com/view/merkat-hogle-zoo-gif-11552753335479033171

[shut hawk]

okay, well good luck with whatever it is

[wide merlin]

yeah haha im sitting here trying to think about what i can say without just saying blocks of information

thats within what I feel comfortable sharing

but yeah

its cool

[sinful moon]

Yeah probably the best take, let this cook whatever it is but I’m not entirely convinced it’s novel and of the correct scope

Good luck for sure!

[wide merlin]

I wouldnt say directly level 3. I cant really break it down either. But yeah i mean thanks for listening to my little bit of info.

I agree though noir

[sinful moon]

I’ll be more than happy to be proved wrong

[wide merlin]

I dont think that I directly know why this is such a problem myself, I just know from my testing its bad.

if this framework were deployed at something such as an airport, i am fairly certain a lot of bad would happen.

[valid mauve]

Noirrrrr!

[sinful moon]

Heya!

[valid mauve]

I spent like 5min looking for a "Hello" type gif featuring The Boys' Vaughts' 7s Black Noir.

[sinful moon]

lol I have a new Mac on the way MacATtack lol

[wide merlin]

from what i have looked through, I dont know what to say to make my framework not be so dangerous. You could disable ICMP and have all users use a VPN, but at the same time theres problems that lie outside of those mitigations.

[sinful moon]

M1 replaced by M4 Mac Mini as my work side infosec computer

lol I specced my M1 too low but I didn’t know how hard I’d use it

[valid mauve]

The doorbell just rang..

Hey, why is there someone with a human sized trunk? Also, why does this napkin smell like chloroform??

[sinful moon]

lol oh dear

[latent nacelle]

I would go into the program with an open mind,
and I highly recommend that you participate in school clubs / activities.

We get government employees from 3-letter agencies visit our campus, and without going into detail,
I know they pose as "students" sometimes.

So leverage your network, and show people what you know, keeping in mind that you're leaving an impression

[dark frost]

👀 you putting a show my friend that stuff you hidding look tasty

[wide merlin]

yeah ill talk to you guys more when I get more info I feel I can share and more progress on releasing it. I cant say anything past what everyone is likely already familiar with, nothing new until you get past that point then even still its just the fact this is all strung together how it is. I havent seen any similar projects.

[valid mauve]

Nomnomnom.

[sinful moon]

Yeah will be nice, I am excite. My Mac is 1/3 of my work from home monitors

[glass nest]

I wonder why theres no similar projects

[sinful moon]

also have 3x new monitors on the way for that same setup to replace my shitty mashup of random displays

[wide merlin]

@latent nacelle
I just started network building around the first time i got to visit campus. I mentioned this project to the peopel who seemed higher up, they cant really help me either. But I have been gaining useful insight on where I should be stepping to get to where I want to go.
@dark frost It would be very bad if I shared this code 😆 Hopefully by the time you see it its not a problem anymore.

If it is still a problem, you won't be seeing it. simple as that haha.

unfortunate for the bad guys

but good for the hundreds of thousands of people in and out of high traffic public wifi access areas

each day

[wide merlin]

:D

[sinful moon]

Pretty much lol this is not a new threat, so I would be curious what you have to bring to the table

[wide merlin]

fun little thing. But as I said not necessary. can definitely get a cheaper setup to have monitor and promiscuous at the same time.

[sick lance]

@hazy sundial please don't be rude to members.

[dark frost]

i see you also on hak5 😄

[wide merlin]

yeah as I said none of what I mentioned is new, and the stuff after I am not sharing but not all of it is really new either.

truth is though

if any similar project existed, it would be used for a large scale attack.

[glass nest]

Any why do you think it doesnt exist?

[dark frost]

did you saw P4wnp1 project ?

[wide merlin]

alright ill tell ya why i think that

[latent nacelle]

people who can communicate themselves as a valuable business asset seem to do pretty d*mn well,

just be humble, keep an open mind, and don't expect anything from anyone

can't wait for next semester, as I'm coming in fresh with basically no knowledge of cybersecurity

[wide merlin]

if a criminal organization had an identical framework to what I have built. For virtually free to them, seeing as this would be considered a (bad word) attack, they could deploy this en masse across a country. Lots of important business people come in and out of these large traffic areas, do not want to mention the specific type of place, although I already have earlier.

But for a low price, a criminal org can passively get massive amounts of data of potentially valuable individuals with virtually no way to stop it.

I think if an identical thing existed, I would see it on the news somewhere.

[dark frost]

[sinful moon]

Fair so get to it and write your paper and publish and get peer reviewed

[glass nest]

And you don;t see it on the news. nor evidence that it's been deployed. What would that indicate?

Ok ok, I'll stop 😄

[wide merlin]

haha I am not deploying it I run my access points using mac whitelists.

[dark frost]

what you saying is dangerous , that imply there is something to work with wifi somehow 👀 they is something wrong in it , with some of it protocols used

[snow pike]

dark mode when

[wide merlin]

Yes.
I called literally half of the public libaries accross the US and escallated to their IT department. I wanted a PCAP file of theirs to run a simulation to see what would have happened if I ran it there. just do a packet replay.

However they told me I need a government contract for that. So that I believe is the next step for that.

[glass nest]

Info - Right now. with DarkReader

[snow pike]

wait what

Lemme do research

[upper knoll]

yo uncle i made it through!

[sinful moon]

lol yeah I use DarkReader myself for such

[glass nest]

excellent, Dee 🙂

[upper knoll]

now ive had home made moussaka and got figs and dark chocolate

had some help from the kgb (was using a port too low for the user i was exploiting)

[snow pike]

wait huge ty

[twin ridge]

Gave +1 Rep to @glass nest (current: #18 - 479)

[wide merlin]

I mean we can probably assume that. Its not even based off of just protocol or just wifi, its just how it works being a user connected to WiFi to be honest.

[sinful moon]

You’re still typing so let me be frank, we are not interested until you publish your research

[wide merlin]

It would be nice to get another researcher who has disclosed something similar to give me insight on how exactly I should disclose it.

[glass nest]

Dee - Help from the KGB. Love it 😄

[upper knoll]

i see them helping all the time fire helper icl

[hazy sundial]

rude?

[glass nest]

@sinful moon Hiya Frank. Can I still be Esqy?

[sinful moon]

sure!

[glass nest]

(Sorry. Was too easy)

[wide merlin]

understood, what are your thoughts on the bit I said about my next steps. Think that is what should be done before publishing a paper? Thats what im hung up on is that I dont wanna publish the paper while this can be actively reporduced.

[upper knoll]

did u get a kebab btw?

[wide merlin]

you understand that right? I understand also you guys dont have to give an answer so it can just stop there too

[glass nest]

Nah, I found a piza in my freeer 😄

[upper knoll]

oooo what kind

[glass nest]

Quattro Formaggio!

[upper knoll]

oooo

cheese

i love cheese

[dark frost]

you doing some man in the midle attack by jamming an area and autoconnect to your wifi proxy ?

[glass nest]

I know right.

[wide merlin]

this specific thing like for the first time it felt bigger than me

[normal canopy]

Am I allowed to trade my monthly thm premium voucher for something else from someone here

[sinful moon]

submit your paper to known people in wifi or TCP/IP research fields for feedback and ask them how you should proceed

[glass nest]

Blue cheese on a pizza is BAE ( @mossy river - Did I use that right?)

[upper knoll]

answer is probably no

[mossy river]

Bae is like 10 years old

[dark frost]

blue cheese on pizza is good , if you like blue cheese

[glass nest]

I'm catching up!

Lit, maybe?

[normal canopy]

💀💀💀

[boreal scarab]

https://tenor.com/view/mr-rogers-proud-of-you-so-proud-of-you-im-so-proud-of-you-i'm-proud-of-you-gif-10989094795311289485

[upper knoll]

i do love some blue cheese

icl

[glass nest]

Ooh.. 'bussin'

[upper knoll]

makes soup acceptable

and i hate soup

[glass nest]

Ooohhh, I love a good soup.

[wide merlin]

okay so I can write the paper then. dont have to feel so hung up. Thanks I will choose that as what I do next then.

[twin ridge]

Gave +1 Rep to @sinful moon (current: #35 - 243)

[sinful moon]

this is making me hungry lol

[glass nest]

French onion soup... mmmmm

[dark frost]

i put Gruyere in soup ,it get so good

[upper knoll]

i am not a small bean so when someone feeds me soup and expects me to be full

i am sadge

[glass nest]

Noir - You had a massive dinner only yesterday!

[sinful moon]

Soup sounds good so alright I’ll have a burrtio

[wide merlin]

Ill say thanks everyone for the chat about it, I got to see how people in the industry and community react to it a bit based off of the few crumbs I can throw.

Glad to be here though, I joined because I felt like the advent looked fun.

[sick lance]

Like what?

[upper knoll]

icl i do eat decent sized meals

[wide merlin]

havent been on tryhackme in like 8 years. the site is looking really good now too i LIKE it.

[upper knoll]

its grown a lot

[normal canopy]

Anything anyone here wants I have no use for it

[wide merlin]

I can tell. Compared to before it seems totally commercialized, but in a nice way.

[upper knoll]

much more sleep love the attack boxes

super good development

there is this dude cmnatic bro writes some fire rooms

[dark frost]

good night you all .
stay safe NTWRK , i hope i can read your article , when published 🙂

[upper knoll]

made networking not boring

[upper knoll]

gngn

[sick lance]

Wat?

[glass nest]

Haha 'This dude cnmatic' - He'd love that 😄

[rapid merlin]

I’ve got to slowly get my kid into pc gaming

[wide merlin]

yeah I just checked that out today pretty cool. HTB started doing that too a little while ago I though that would have been neat when I first started. When I started I used kali live with no persistence, I actually held all of my files on a separate partition for some form of prst lol.

[rapid merlin]

Currently on pubg mobile 😂

[sick lance]

Thm is turning 6 years old this year.

[upper knoll]

click my profile xd

i dont have bias no

[wide merlin]

yeah i guess so haha it hasnt been 8. So i probably joined around when the site first was released

which was in 2020

[glass nest]

Hehe, He's a good egg

[upper knoll]

met him in uni

love him to death

[sick lance]

First released?

2024-6 is 2018.

[wide merlin]

im tripping rn haha

[sick lance]

Not 2020

[upper knoll]

i think it might have been hyperbolic?

however thats spelt

[wide merlin]

2018 is when I thought i was on it but my dumbass said 8 years

[dark frost]

https://tenor.com/view/its-been84years-waiting-for-dinner-titanic-gif-11575907

[wide merlin]

I talk too damn much 😭 I was about to say sumn about me doing something similar last night playing a card game but like nah im just yapping at that point

[dark frost]

[silk birch]

Hi, is it possible to buy a premium? I tried to pay with revolut but it says payment cannot be made.

[dark frost]

#site-support

[granite narwhal]

arp is doing to know the mac addresss to comuntcation to other devices

right?

[glass nest]

What does ARP stand for?

[granite narwhal]

address resolution protocol

[glass nest]

And without thinking about hacking, what is it's main function?

[granite narwhal]

k

[wide merlin]

just checked og account, made in 2019 actually. :)

[wide merlin]

k 😆

[teal wharf]

for when a service or app needs ur mac address

it sends these two packets : "who has x ip address " , "tell sender_ip "

[granite narwhal]

Because to know who is messgaing right ?

[glass nest]

Sweet 🙂

It links an IP address (Which can change) to a Mac Address (which can't)

[upper knoll]

^

[analog ravine]

my first ctf is soon

wish me luck 😳

[upper knoll]

glgllglg

youll do well im sure

[glass nest]

Hix - New rank, Gratz 🙂

[teal wharf]

thanks 🙂

[twin ridge]

Gave +1 Rep to @glass nest (current: #18 - 480)

[teal wharf]

i made a promise to myself

but shit i broke it

[wide merlin]

i did some weird dumb shit in my project to resolve mac to browser clients without using arp. Dont know why i didnt use arp lmao. But thats one of the bits I didnt talk about, browser generates a unique ID which is in the packet and gets linked in a database to link the IP to the MAC and user agent. But I DID NOT have to do that lmfao

i guess its cool cause its not sending excessive arp requests over the network. even though its not really abnormal if it did since it is technically the router.

[teal wharf]

u need to start a blog my brotha

[granite narwhal]

I understand what is arp means changing to ip to mac

[teal wharf]

well not technically

[glass nest]

not changing.

[granite narwhal]

Sorry

To asscotiate with

To make it with

To know the network each other

[glass nest]

Think of your Discord ID as your Mac address, and your nickname as your IP

[granite narwhal]

Okay

[boreal scarab]

https://tenor.com/view/elias-turtle-elias-turtle-wake-up-do-you-hear-me-gif-13853886

[glass nest]

You can change your nickname. and you do, a lot 😄

[wide merlin]

this is the polite way of saying I talk too much? But yeah I actually just became the CEO of a blog site I acquired haha. So working on it :)

[glass nest]

But your discord ID doesnt change.

when your nickname changes, thats the one we now associate with your Discord ID

[teal wharf]

its just like in real life for example , if i want to address to someone i dont know by face imma ask " Hey who's name is dave " , " tell me " , and dave is gonna say " heey am dave"

[wide merlin]

shit, on that note. I cant write posts about the advent until next year correct?
It says this event can be played until november 2025. Or could I wait til after january 6?

[wide merlin]

I love this analogy haha

[teal wharf]

there may be also another person named "dave" and he is gonna say "Hey am dave" but that aint the dave am looking for . this is called mac spoofing

but thats another and deeper story

[loud marlin]

and MAC address can't be changed on device. MAC is "burned in" device chip or so... the IP change from time to time and so

[glass nest]

ralex knows about burning stuff into stuff 😄

[granite narwhal]

Yes Will asks all the ip and computer will respone

[wide merlin]

also arp flooding too. Spamming you saying all kinds of clients are other names and filling up the arp table.

[teal wharf]

yep thats why they call it physical address

[granite narwhal]

Because in the board

[loud marlin]

you can impersonate MAC, but real mac stays real mac

just that is story for other things

[wide merlin]

Love you guys, i gotta get back to work.

[glass nest]

Yes. Gotta undsrstand how the thing actually works before being able to use it for our nefarious deeds

[wide merlin]

Mac spoofing is what enables that notorious evil twin attack i mentioned earlier :D

[loud marlin]

if wish to know more of networking

no w8

wrong

[wide merlin]

woah! sick boockstack bro. I would love to read that level 2 vpn vulnerabilities book.

I only have a couple physical security books, I get them online

[loud marlin]

humblebundle is nice way to buy pack of books for like 20ish e cca

[glass nest]

Agreed 😄

[wide merlin]

not gonna lie that is really nice. It would be nice to sit there and just read them. Its cool to have the physical books.

[upper knoll]

humblebundle is the best

[glass nest]

Theres a few solid bundles on there now.

[granite narwhal]

😍🤍

I want to learn networking really

[loud marlin]

this mine

[granite narwhal]

💕🤍

[wide merlin]

Hey for those interested in SE, im reading aristotle art of rhetoric right now (the 1992 penguin classic edition). And I see a lot of parralell themes to social engineering. Seems very valuable and im not even a 3rd of the way through yet.

Also, another personal insight; art of war by sun tzu has heavy parrallels to cybersecurity as well. I am considering making an annotated version of this book in alms to cybersec.

[loud marlin]

and for digital books, esqy prob have mre than me

[glass nest]

Yeah, but you have more cybersec ones

[wide merlin]

nice ive read a few of those. It sucks cause everytime I see a book ive read digitally in a physical bookstore, its always like $50 and I always want like 4 of them haha

you have a great collection brotha

[loud marlin]

https://www.humblebundle.com/books check this

[wide merlin]

okay I found one for 35.99. Whats the shipping price like?

[loud marlin]

this is digital ones

[wide merlin]

through this the books might be like $10 cheaper based off of the one I looked up to check

ohh

man I gots the digital ones

tbh, a lot are on archive.org or lib;--

which is not 🏴‍☠️ afaik

i didnt finish the second sight cause it might be

site

[loud marlin]

tbh the 20ish book for 25e cca is nice price to buy and give money for it

[glass nest]

I think I have those tech bundles. Apart from the Microsoft one

[wide merlin]

I agree. I just even dont really like the digital copies in the first place to generally purchase them.