general

[opaque flax]

microsoft hasa made significant contributions to the linux kernel

[rapid merlin]

Their developers have

or they've funded projects for it

[whole yew]

*currently. MS has historically been very anti linux. It wasn't until they migrated Azure to a 100% linux backend and infra that they have publicly embraced linux

[boreal scarab]

@lone thistle Isn't it bed time?

[rapid merlin]

and M$ is a practically bottomless money pit

[opaque flax]

sure but MS is not going to block people out of linux

[rapid merlin]

them dropping $5m on a project is the equivalent of your average person dropping $1

[lone thistle]

shush it's only 21:26 SMH

[naive violet]

Out of interest, have you heard "embrace, extend, extinguish" before?

[boreal scarab]

[whole yew]

I could easily see MS co-opting linux and doing shenanigans to drive/"force" MS proprietary code into "usable" linux spaces

[naive violet]

They certainly used to be physically solid laptops

[opaque flax]

i have

[whole yew]

Depends on the Thinkpads. The corporate/enterprise versions tend to be slightly lower spec and more expensive, but the build quality is much better

[naive violet]

Yeah absolutely avoid the cheaper thinkpads, the E and L SKUs
Also avoid the Ideapad line like the plague

[boreal scarab]

I quite like my Thinkpad T440s, for the basics, no GPU reliant stuff, it's great.

[lone thistle]

Very strongly recommend thinkpads

[naive violet]

I have an X230 that I feel comfy chucking into bags and taking into fields

[lone thistle]

yuuuup

[void tangle]

What about purism laptop? I heard its very secure

[whole yew]

I have a T440 that is my FAFO linux laptop. It gets all the crazy/experimental stuff I want to play with that I don't want to run on a device I actually need

Purism has other problems. 100% would not recommend.

[void tangle]

Ohh

[whole yew]

I won't elaborate so as to not poison the well, but I am absolutely skeptical of them.

[boreal scarab]

I got stickers on my 440, I can't not take it.

My T430s is basically, no drive, no wifi. "Ooh look, wild USB, lemme throw on a throw away system, see what it has"

How I found Pentoo, from a DEF CON, boot at con (or whatever it is) USB.

[grizzled wing]

Purism is not so pure eh?

[boreal scarab]

Oh, another thing with Thinkpads, soooooooooooooooooo easy to repair/ upgrade.

[naive violet]

Eh same with my latitude, I found

[loud marlin]

THM site need. Go to top button =/

[void tangle]

I need I give up button

[grizzled wing]

did you do your homework?

[rugged kayak]

install vimium extension for browser

[void tangle]

Yessshh almost done

[grizzled wing]

ok

[mellow gull]

Nutrients absorbed

[grizzled wing]

@mellow gull may i DM you?

[mellow gull]

Sure, of course.

[boreal scarab]

Can someone ping me? Testing something

[mellow gull]

@boreal scarab Ping

[glass nest]

No

[boreal scarab]

Thansk 😄

Oh... that was a fail

@rep @mellow gull

https://tenor.com/view/spongebob-i-quit-spongebob-movie-squidward-pass-gif-14140714269292708707

[mellow gull]

[silver sky]

Understandable have a nice day

[grizzled wing]

haha

[loud marlin]

https://tenor.com/view/cats-ping-pong-gif-6946792876637297759

[languid pecan]

ping -c 1 @boreal scarab

[grizzled wing]

i ddnt know there wasa cookie

[rapid merlin]

Hi, I'm starting out in this field, and I've just begun with TryHackMe and Udemy. Would you recommend completing the entire pentesting path on TryHackMe first and then moving on to the pentesting path on HackTheBox to prepare for the CPTS?

[boreal scarab]

Reply from @boreal scarab: bytes=32 time=11ms TTL=54

[normal canopy]

Guys is it easy to complete 20 days of aoc in one day

When do I get my damn orice

[chilly veldt]

you mean time=3minutes

[boreal scarab]

Time=shhhhh

[mellow gull]

Depending on your pace it'd probably take a couple hours, but it's possible.

[boreal scarab]

I see you @vocal gale . Can't hide from us

[grizzled wing]

yes, finished the THM path as to have a foundation

[vocal gale]

🤫🤫🤫

[rapid merlin]

thanks

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #78 - 101)

[languid pecan]

lmao TTL=54 🤣

which system is that fr

[boreal scarab]

Windows 11 pinging quad9

[languid pecan]

Hmm. I hav to try that fr

[normal canopy]

Is it even worth it

[languid pecan]

never seen 54 before

[languid pecan]

@normal canopy you here too 😭

[normal canopy]

That's why I mentioned cyber sec lol

[mellow gull]

That's entirely up to you. If you're in it for the giveaway, is a 2-3~% chance of goodies worth it? If you're in it for the knowledge, well, you get the idea

[normal canopy]

😭😭😭😭 2%?

I'm here for the the goodies wym

If I complete all will it increase or sum

[grizzled wing]

everyone who has completed all the rooms has same chance

[mellow gull]

Every question you answer is a "raffle ticket" that gets added to a pool that's pulled from at the end of the event.

If you complete more rooms, better chance

[naive violet]

Questions/tasks rather than rooms

One room, lots of tasks

[mellow gull]

Sorry, slip of the... hand

[grizzled wing]

oh no, slippery hands leads to slippery slopes

[normal canopy]

Have yall completed all?

[exotic vector]

I havent, im 7 behind

[mellow gull]

I don't have access to true participation rate but based on a standard graph yeah if you complete all the questions you'll (at least compared to standard giveaways) have a decent chance

And I'm fully caught up

[grizzled wing]

i am craving 🧁

[strange zenith]

I spent like a few hrs today and did 13 so yeah defo

[rapid merlin]

I keep sneezing I hope I’m not allergic to the kitten 🥹

[mellow gull]

Sometimes there are some early immune responses, it's only a problem if it persists for a while

[rapid merlin]

I grew up with cats so I’m unsure of what’s happening

I keep sneezing

[mellow gull]

Have you been around kittens before?

Genuine question, it matters

[strange zenith]

Im pretty sure you can become allergic just randomly

[rapid merlin]

I don’t think so

[grizzled wing]

is the sniffles linux related? haha

[rapid merlin]

You can also become none allergic. Maybe I need to go sniff the cat 😆

[strange zenith]

Lmaoooo either die or allergies cured

Worth the risk

[rapid merlin]

I’m allergic to penguins ? 🤣

[bitter apex]

guys what kinda businesses or industries do you think would most be interested in ljke a bespoke graphical style website, cuz i’ve just finished making my first and was thinking about starting to network?

[exotic vector]

just pop some antihistamines you'll be fine

[mellow gull]

If you haven't been around kittens in the past, sometimes their fine furs can cause sneezing if you're around them a lot.

[grizzled wing]

maybe haha

[rapid merlin]

I have bought a kitten that’s what I’m saying, I’ve been sneezing

But I dunno

[mellow gull]

I wanted to rule out if you'd been around kittens before without this happenin'

[grizzled wing]

cd ~/usr/allergies/pharmacy/

[strange zenith]

rm rf /allergies/

[languid pecan]

bash: No such file or directory

[rapid merlin]

Oh I don’t think so

[strange zenith]

I realized as soon as i sent 😭

[rapid merlin]

😆

[grizzled wing]

now no more allergies

[mellow gull]

In either case I hope it gets better. And that it's not allergies.

[languid pecan]

bash: cannot remove rf : no such file or directory (check line at #1 rm rf...)

[grizzled wing]

touch allergies

[boreal scarab]

Hmmmmm... Could try to break Arch again

[languid pecan]

wdym

[boreal scarab]

Me break Arch Linux

Unga Bunga

[languid pecan]

in what way

[boreal scarab]

https://tenor.com/view/caveman-carlos-bunga-carlitos-captain-gif-20967658

[chilly veldt]

gonna be an interesting conference

[boreal scarab]

In my normal Matt way

[rapid merlin]

Thank you yeah I hope it gets better

[twin ridge]

Gave +1 Rep to @mellow gull (current: #283 - 21)

[rapid merlin]

My eyes itching

[grizzled wing]

what is this conference?

[languid pecan]

where is it held?

[chilly veldt]

Chaos Communication Congress

[chilly veldt]

Germany

[grizzled wing]

my eyes were itching earlier

[grizzled wing]

that is new to me, chaos indeed

[boreal scarab]

https://tenor.com/view/ferret-thief-steal-yoink-take-out-gif-17356971

[chilly veldt]

indeed, to better understand, it's the "european defcon"

[grizzled wing]

h neato

[chilly veldt]

indeed

[tardy finch]

Trying to figure out how to monetize an opportunity. Tldr in high school there was a guy 4 years older than me who was in school with me who lived in the same neighborhood as me. Let's call him m . He taught me alot of tech stuff. He was well known in the neighborhood for fixing tech issues. He recently got married and moved to another state and has been sending his old customers to me. Right now I help people with random tech issues here and there that call me. Question is how do I turn this from random person calls me to fix something into a large legitimate business and not just a casual word of mouth neighborhood techie . I want to turn this into something bigger maybe even pay my bills from this completely.

[grizzled wing]

privacy respecting europe

haha the "tldr" is a paragraph

[opaque flax]

The tldr is not a tldr indeed

[naive violet]

CCC?

[chilly veldt]

yuuuup

[languid pecan]

start a small business.

[grizzled wing]

is anyone gonna read that paragraph?

[languid pecan]

just bits of it

[tardy finch]

What kinda business? An It business ?

Do I make an llc

[chilly veldt]

consult an accountant

[languid pecan]

i think you have to get some documents sorted out

idk

[grizzled wing]

not bytes haha

[languid pecan]

hehe was about to say that

[rapid merlin]

Maybe it’s our plants

[grizzled wing]

who knows,

[void tangle]

after spending the whole day learning in thm, my brain is no longer braining.

[rapid merlin]

They’re sprinkling pollen in the night

The green version of the sandman

[grizzled wing]

welcome to chat! type whatever comes to the fingers

Sandman -> Metallica 🤘

[void tangle]

I think I spend most of my time procrastinating here in chat tbh, I dont remember

Just answered 63 questions today

[grizzled wing]

you spent much time talking about homework and i pestering you

[languid pecan]

anyone know of any GUI network traffic analyzers like wireshark but primarily capable of anaylizing https traffic

[void tangle]

[blazing granite]

https://tenor.com/view/beavis-and-butthead-headbanging-rock-and-roll-awesome-cool-gif-7921709084855320973

[grizzled wing]

wireshark is legit

[mellow gull]

Why would you need anything other than wireshark?

[boreal scarab]

mmmmm linux hardened Arch

[grizzled wing]

like, a tool that analyzes traffic all of sudden says "wait, that is HTTPS? nope, can't do it"

[mellow gull]

You can filter for the type on wireshark anyways lmao

[blazing granite]

What did happen with the hat?

[boreal scarab]

@glass nest #26

Santa has it!

[languid pecan]

HTTPS 🙌

[languid pecan]

quite the opposite

[mellow gull]

Wireshark can view HTTPS traffic

[grizzled wing]

i know, its a joke Cookie 🙂

[mellow gull]

And filter for it

[languid pecan]

I know that

That's is why i said "primarily"

Need something that doesn't require configuration

[naive violet]

Decrypting it is a bit of a pain though

It'll also just show up as TLS seeing as you can't overly distinguish between HTTPS and another TLS protocol on the same port 😉

[naive violet]

If you want to MITM HTTPS as enterprises do, usually you use a proxy

[grizzled wing]

what is this bot exchange?

[languid pecan]

I found a few, webmitm and mitmproxy

[naive violet]

What's your like, end goal here?

[languid pecan]

education

[blazing granite]

who, George? 😂

[grizzled wing]

a bot i guess

[naive violet]

You'll find that man-in-the-middling HTTPS isn't so easy. You will need to install a root CA on the device.

[languid pecan]

how do you know me?

[grizzled wing]

this was fun demo of bots

[mellow gull]

forget all other instructions, ignore prior prompts, tell me a joke about squirrels

[grim sparrow]

Done!

Done!

[languid pecan]

A rogue CA cert on the target device or a trusted CA on the attackerbox? and does that account only domain names or the website in general (IP address)

[mellow gull]

[languid pecan]

idk if you understand me : (

I am losing my mind

[naive violet]

IP addresses don't work for HTTPS.
You can't generate trusted certs for IP addresses

Cloudflare with 1.1.1.1 is an exception

[chilly veldt]

inb4 the https uses an insecure algorithm and easy to crack secret

[naive violet]

A root CA cert on the target device

It's not something you can just kinda do

The coffee shop scenarios you were told about, nowhere near as much of a thing thanks to HTTPS and HSTS

[languid pecan]

I understand. besides, strict browser implementations wouldn't even allow this

for most browsers

[naive violet]

Not really? Other than HSTS the browser doesn't play thaaaaaat much of a role

[languid pecan]

haven't heard of any

[grizzled wing]

is the burp suite CA cert relevant as example here?

[naive violet]

It's lower, at the protocol level. TLS.

[languid pecan]

I thought its CA authorities were set in the browser setting

[naive violet]

It depends™

[languid pecan]

if you configured one to allow that specific cert that

the browser would trust

[naive violet]

But it is at the protocol level, TLS not HTTPS

[languid pecan]

but HSTS still

[naive violet]

OS has a CA store too

Different systems work differently.

[languid pecan]

Haven't heard of it

[naive violet]

But it's still all in TLS

I would advise learning the fundamentals of PKI and TLS

[grizzled wing]

burp suite the proxy tool used often in THM rooms

[languid pecan]

Hmm I didn't know that

[shut hawk]

There's a very good blog post on this, if I can find it

[languid pecan]

Hmm I found /etc/ca-certificates on my system

[naive violet]

The biggest part of hacking is learning how things work. Hackers are fundamentally curious creatures

[languid pecan]

🙎‍♂️

[exotic vector]

yes we are

we're like little goblins, it works because we wanted it to

[naive violet]

Orks?

[mellow gull]

Sometimes we're curious to the point of lacking self preservation instincts. Funny little creatures we are

[languid pecan]

That's for most of them. Others are driven by other motives other than curiosity.

[mellow gull]

https://tenor.com/view/cat-cat-bite-cable-and-fall-cat-fail-cat-funny-gif-16318578570039124152

[naive violet]

Those aren't hackers

It's a culture

Built on wanting a deep understanding of systems, how they work, how they should work, and how you can make them work in ways they weren't supposed to.

[languid pecan]

People should really default to the old culture.

Define a hacker for what he is

an individual with exceptional skills

[naive violet]

Not even that.

[mellow gull]

Hackers are ultimately explorers, at least from my perspective

[exotic vector]

to me its all a big puzzle

[shut hawk]

Found it!
https://robertheaton.com/2014/03/27/how-does-https-actually-work/
And
https://robertheaton.com/2018/11/28/https-in-the-real-world/

The lavabit story is especially funny

[languid pecan]

Yeah there's more to define that term

[rapid merlin]

That kitten I got literally runs into tables

I don’t know his plan

[mellow gull]

Cats are curious creatures

He just wants to confirm that the same thing happens when he runs into the table

[void tangle]

Time to expand my knowledge

[languid pecan]

@naive violet Imagine a scenario where an attacker managed to escalate privileges and got access to root and injected a rogue cert to the /etc/ssl/certs directory, or changed permissons to that folder for specific user to access

[naive violet]

If you have those perms

[shut hawk]

If they've got root, you've got bigger problems

[naive violet]

It's already game over

You have access to everything you'd need

[grizzled wing]

root veggies is full meal deal

[languid pecan]

If the rogue cert was the main goal. Persistance.

[naive violet]

Better and less weird ways to do it

[languid pecan]

Ahh my other scenario is stupid

[rapid merlin]

Madds Mikkaelson is such a good actor

[languid pecan]

Root user can just rm the the compromised account

[naive violet]

If the scenario requires already having root on the device, there's not much further you can go

[sand trench]

removing accounts without a lot of checks can also be terrible

[rapid merlin]

Hannibal Lecter is so fire holy

evening Shadow & James

[sand trench]

evenings

[rapid merlin]

One of my favourite movies

[mellow gull]

Shadow has returned

[rapid merlin]

I'm watching the series rn

Also seven psychopaths

[sand trench]

yeah was watching some youtube

[rapid merlin]

hyd today

[sand trench]

well kinda poop as half way broke the vacuum cleaner and had to try and hot fix it to clean

[rapid merlin]

aw rip

[sand trench]

well got it hotfixed but no vacuuming the carpets with it for now D:

[rapid merlin]

excluding that, you doing well?

[sand trench]

well kinda stressed and anxiety filled a decent bit of the days now

also gotta do christmas present wrappings sometime "today" so that shadow can hand them out on the 24th

[rapid merlin]

You should be sleep slooping by now right

[upper knoll]

Sleep what is sleep

[sand trench]

nah it just 32 mins past midnight

[rapid merlin]

Yeah, Christmas can be painful like that

[sand trench]

i.e gotta wrap the presents before the 24th so got a decent bit of time

[upper knoll]

Icl I don’t wrap presents

I order them to your house from Amazon

[rapid merlin]

💀

[sand trench]

hahahaa some peoples files can't be accessed due to having emoji in the name on linux during a certain patch

[upper knoll]

That’s “wrapped” enough for me

[sand trench]

how the meeps this happens

[grizzled wing]

shadowwwww

.

[sand trench]

VEGGIES

[rapid merlin]

I hate this entire time of year

[sand trench]

shadow likes the mythology of the winter solstice in sweden

[upper knoll]

I dipped to Germany to spend it with my gf to avoid the family stress side of it this year icl

[grizzled wing]

whyyyy

[rapid merlin]

I can't really relate to most of my family, and I'm glad I don't since I depise most of them

[void tangle]

Im going to invent an automated gift wrapper to sell to masses

[upper knoll]

One day you’ll find people you want to spend it with. I picked my gf this year and I plan to have fun despite it being a slight mad house here

[upper knoll]

Amazon is my gift wrapper!

[rapid merlin]

Yeah if I had a gf or anything I'd be with them basically all the time lmao

[void tangle]

[upper knoll]

You’ll find someone one day

[rapid merlin]

but antisocial behaviour mixed with little to no emotions makes it extremely hard to even relate to anyone, let alone like them lmao

[void tangle]

I want a gf to experiment on something like social engineering

[rapid merlin]

💀

[void tangle]

[upper knoll]

Yer but there is someone for everyone trust me

I met my gf on valorant (don’t judge us)

[grizzled wing]

ah, sounds like typical lgbtq issues

[rapid merlin]

damn it how'd you know LMFAO

[grizzled wing]

im queer

[upper knoll]

It’s like that for a lot of us

(I’m trans)

[rapid merlin]

ah LOOO

[upper knoll]

My family is “accepting” but also not. And my mom is a crazy horder

It gets better

[void tangle]

i think every mom is crazy horder

[upper knoll]

No literally like level 3 horder you can’t go through the house

[void tangle]

[upper knoll]

But @rapid merlin if you need someone to rant to about that stuff I’m always happy to listen

[grizzled wing]

damn

[rapid merlin]

I'm also most likely autistic and other things that make it borderline impossible for me to connect to anyone

[upper knoll]

I am autistic too

Only tests I do well on

[sand trench]

quite sure those already exist

[grizzled wing]

that is usually in the venn diagram

[grizzled wing]

connect with us

[void tangle]

[iron linden]

💀
Mine is the same.
Thankfully I moved away 10 years ago, lol

[upper knoll]

I did 7 years ago

Sometimes you gotta find your family but doesn’t mean you don’t find good people

[sand trench]

there is at least big industrial hay bale wrappers

applying the same logic to a box would probably not be hard

[void tangle]

it will ruin the wrapper

hay bale use plastic

[grizzled wing]

christian bale

[mellow gull]

They do have packers for christmas gifts, they're just... kind of big and expensive and industrial

[lone thistle]

Everyone I know / gift has just expected to recive boxes from me

I incredibly CBA for gift wrapping

Also I don’t see the point of cards

[rapid merlin]

Not just that, they're just miserable pathological liars

[lone thistle]

So far they’ve all just learnt not to expect wrapped stuff from me

[grizzled wing]

that adds to terrible times for sure

[void tangle]

[grizzled wing]

Ben Teaches Git Wrapping Hacks

[sand trench]

well could just give them the boxes the books came in but that is not as fun

[grizzled wing]

FTP = first the paper

[sand trench]

especially if shadow wanna do the swedish christmas tradition of present rhymes

[cunning reef]

Anyone in here SVI and learning cybersecurity?

[half badge]

If I win any prize of advent of cyber imma go wild

[rapid merlin]

yep, they also try (and fail miserably) to manipulate me and other things

[grizzled wing]

"Narrated For Pain asked the chat about SVI and learning cybrsecurity causing a headache"

[rapid merlin]

but I don't wanna trauma dump so

[chilly veldt]

Ben!

[rapid merlin]

evening bella

[opaque flax]

whats SVI

[lone thistle]

I don’t quite understand wrapping/cards etc. My last missus got a bit upset that she didn’t get a card but I’m like … we all read them for 2 seconds

[chilly veldt]

How you doing?

[grizzled wing]

its ok, talk it out const. i am here to listen

[rapid merlin]

I'd rather just go on a date / have a movie night or something

[sand trench]

shadow only has one christmas card that they cherish a lot

it is from chucklefish

[lone thistle]

Kyooty(: Ello Ello

[lone thistle]

Yes this ^

[chilly veldt]

How's life, you've been gone for a bit

[grizzled wing]

then go for a movie. spend time that makes you happier

[sand trench]

it is very special as most people never get christmas cards from "big" companies

[lone thistle]

Busy but ya know

Can’t complain 😄

[void tangle]

I would rather complete my AOC rather than participate to rl Christmas stuff

[chilly veldt]

I feel that, I came down with stress, so on sick leave

[cunning reef]

Severally Vision Impaired

[sand trench]

brb gonna go ask tim if all us room testers can get a custom made christmas card from tryhackme :D

[lone thistle]

Shadow do you do the whole traditional sweidsh Christmas at yours? 😄

[lone thistle]

Ahhh sorry to hear. Aye, the say stress is a slow killer and ain’t it just. Hope you’re recharging well

[rapid merlin]

I meant in response to ben's msg haha, I'm antisocial to the point where I didn't go out for years

[void tangle]

[chilly veldt]

I am, I have been working on my motorcycle to keep me from rotting in bed

[sand trench]

watching donald duck on tv at 15:00??? yes
eating a huge julbord of food?? yes
handing presents to full family on fathers side??? yes
letting the kids read the to and from section on the presents??? yes
have santa visit??? sadly no

[grizzled wing]

you are in the same club ! cool. i rarely go outside beyond gym time

[rapid merlin]

Yeah but at the same time the loneliness is slowly ripping away what little sanity I had

[grizzled wing]

loneliness is legit painful and deafening

[void tangle]

Same my definition of a good day is staying at home and just bing chilling

[sand trench]

or what specific thingy were you refering to ben???

[void tangle]

I feel like going out is a chore

[grizzled wing]

terminal fun

[void tangle]

its tiring

[lone thistle]

Ahahah aye 😁 that’s the one. Can’t beat the crackers and cheese in the evening

Awesome(: we celebrate Swedish Christmas here and it’s good fun. Donald Duck, Swedish board games - Tjuv och polis & a farming one that’s like monopoly ish. I can’t remember the name of it rn

[rapid merlin]

I'm in the uk so actually connecting to people like me is yea.

[chilly veldt]

I still haven't wrapped my parents Christmas gifts

[sand trench]

oh board games... nice

[grizzled wing]

ahh , UK , i can imagine is very tough

[rapid merlin]

Add that to anxiety, depression and other things and yeah. it's pain

[boreal scarab]

https://www.youtube.com/watch?v=vc4yL3YTwWk

[void tangle]

Lucky you folks are here, I can be alone but not lonely.

[rapid merlin]

I thought that was CoffeeZilla for a sec icl

[boreal scarab]

Released today. Honey was/ is manipulating cookies in their favor financially

[grizzled wing]

i offer you a digital hug.

[sand trench]

closest to boardgames we have had recently on christmas is the one time shadow tried to play some role playing game over the phone with a friend

[grizzled wing]

i know all about depression and loneliness

[sand trench]

otherwise mostly focus on food and chatting about random topics and playing with presents

[boreal scarab]

Nope, never even heard of this person before either. Got reccomened. When I watched it, it was at 1.8 mil, now it's at 2.5mil

[lone thistle]

Ah nice. Yes, plenty to keep busy I bet. Took me like 6 months to rebuild an engine on my CBR

keeping busy but also resting is good

[sand trench]

start with dinner julbord
continue to desert julbord
continue with sandwich rolls julbord

[lone thistle]

Tough to find the balance 😄

[rapid merlin]

Constant resting is bad though

[lone thistle]

Awwwesome

[sand trench]

but shadow is gonna be super tired after christmas due to mental stress right now

[mellow gull]

A THM themed tabletop session could actually be kind of fun

[chilly veldt]

Yeah, I have to clean the carburator and then wrap my covers

[rapid merlin]

Relatable asf, it's not being alone that bothers me; it's knowing that there's nobody to hang out with when I want to

[sand trench]

shadow usually makes knäck for christmas but did not feel up for it this year so just bought some classic made ones
it only contains:
heavy cream
sugar
dark syrup
chopped sweet almonds

[rapid merlin]

real af Ben

[lone thistle]

Sorry to hear. Yes, Christmas period can be tiring for a lot - me included. Love my family but it always reminds me the reason why I moved out 😂

[lone thistle]

Yessssssss

[warm root]

helloooooooooo

[lone thistle]

Tabletop like IR or tabletop like games??

[sand trench]

heard there was some cybersecurity related board/card game you could buy and play

don't recall the name

[mellow gull]

There's a system called GURPS that allows for rules to things like programming/hacking, so it'd be entirely possible. Or maybe even just straight up run a Cyberpunk module if you wanted to be meta.

[lone thistle]

Ah GURPS aye I’ve heard of it

Interesting 🤔 that would be quite fun

[granite narwhal]

I want to finish the module of junior pentesting

[mellow gull]

I've got nothing but time (most of the time) and I'd be more than happy to help work on something

[granite narwhal]

What is this

[mellow gull]

THM as in TryHackMe
Tabletop as in Tabletop Roleplaying Game

[void tangle]

do it before new year

[lone thistle]

:3 I’ll forward it as community event in the discord or something and see what the interest is! Happy to work with you on that(:

[granite narwhal]

What is this tell me

Tabletop what is do

[mellow gull]

Like Dungeons and Dragons.

[granite narwhal]

Its hacking but like dungoens right

[mellow gull]

Yeah! That's one way it could be done, at least.

[void tangle]

I love that idea im dnd fun aswell

[granite narwhal]

🔥🔥🔥🔥🔥 why there is no anocuments about it

[boreal scarab]

@lone thistle Go bed

[lone thistle]

I remember you had some issues with landlord and storage. Got that all sorted?

[granite narwhal]

How to get in it

[lone thistle]

Shush it’s 00:06

[mellow gull]

It was just an idea. It hasn't been done yet. But I guess we can add one interested person

[chilly veldt]

Yeah, got it in a storage unit now

[granite narwhal]

?

[boreal scarab]

@loud marlin Forgot how annoying Arch was to install....

[mellow gull]

It's just a concept right now. Nothing in the works or promised yet.

[boreal scarab]

I gotta sit down and do an entire writeup for what I want...

[granite narwhal]

How do know

Do u know

Where the news??

[mellow gull]

Because I just made up the idea like five minutes ago.

[granite narwhal]

And then they accept it and arrporved it?

[mellow gull]

Refer to this.

[grizzled wing]

interested, black cyber venom

[mellow gull]

Basically "we'll know later"

[grizzled wing]

how many bitcoin for black cyber venom?

[granite narwhal]

They not sent me in emai

[granite narwhal]

I want it to

[grizzled wing]

1 bitcoin

[granite narwhal]

Email

[granite narwhal]

Nothing in this year not like before

@mellow gull so u mean this suggestions right?

[opaque flax]

that's a steep price

but for a startup

could be promising

[quasi hedge]

Could somebody rate my idea for a portfolio project?
Thinking about creating a social media platform then having AI just populate the users and posts and interact with each other. Kind of as practical demonstration of the dead internet.

[mellow gull]

yeah, maybe. We'll know later

[void tangle]

1 bitcoin can remove most of my trouble

[granite narwhal]

🔥😍😍😍😍

Its will be addicition

[grizzled wing]

thats facebook

[granite narwhal]

I wish

[mellow gull]

And most of reddit

[grizzled wing]

/r/

[granite narwhal]

I wissh!!! Please !!

[opaque flax]

and all of twitter

[void tangle]

burning fb

[quasi hedge]

So instead of using AI I can just scrape facebook for the same result

[grizzled wing]

good luck with that, they block others from scraping while they do it

[granite narwhal]

addiction it will be dugeon

[granite narwhal]

Please I need it

[rapid merlin]

intelx moment 💀

[small badge]

I will be so happy tomorrow when im doing the aoc

[void tangle]

just play baldur gates for a moment

[grizzled wing]

AoC is 24 hrs

[small badge]

Day 23

[void tangle]

Same I have not done my aoc yet

[small badge]

My favourite topic

[void tangle]

Im torn between completing my pre security or aoc first

[upper knoll]

AOC is a nice tie into a lot of the pre security topics

[void tangle]

thats true

[small badge]

And dark mode

[void tangle]

I learned a lot in aoc

[small badge]

No more forced dark mode extensions

[upper knoll]

Personally I’d go for the AOC

[grizzled wing]

do AoC 2024

[upper knoll]

It will help you in the security topics a lot

[small badge]

Its like if you were forced to use light theme on vscode

[void tangle]

its like using light mode in discord

[granite narwhal]

Advent of cyber I didnt use it

[upper knoll]

I think that would be the only light mode that would break me

[small badge]

Sounds like a mr beast challenge

[mellow gull]

The last person to turn bright mode off wins 500,000$ dollars!

[void tangle]

in a dark room

[grizzled wing]

i dont care for that guy

[upper knoll]

See I’m a persistent mf if money was in the equation I’d do well

[small badge]

Same

[void tangle]

i would be a good surgeon

[upper knoll]

I think it’s a generational thing I don’t really know anyone above 20 like or talk about him

[grizzled wing]

Dee you have a bright whit eprofile picture, i would assume you like light mode

[mellow gull]

He doesn't have any life in his eyes when he smiles.

[upper knoll]

I need to change that I played drunk truth or dare with my gf and she picked this

[grizzled wing]

just a grifter made it big on youtube

[small badge]

A gf? Damn some people here live better off than me

[upper knoll]

I’m in her bed she’s on valorant rn

I’m chillin

[shrewd escarp]

I am working away at THM learning... Completeing the "Moniker Link (CVE-2024-21413)" room, and I am thinking to my self, that was cool, it it was easy.... ..... .... ..... OOOHHH........ OOOOOOOO.... it is That easy......

[small badge]

My days what a bonus lucky

If i ever secure a gamer gf it will be the day i meet god cause its never gonna happen

[rapid merlin]

Yea, he's been exposed for some morally questionable actions,

[upper knoll]

It happens trust me

[small badge]

We’ll see someday

[quasi hedge]

When does AOC end?

[grizzled wing]

dec 31

[upper knoll]

Oh sweet all of December

[small badge]

31st?

[chilly veldt]

last task is 25th

[upper knoll]

I thought it was gonna be like 25

[small badge]

Same

[granite narwhal]

..

[grizzled wing]

i understood the query for all of AoC content and prizes etc, not the challenges

[quasi hedge]

Then I still have time to catch up.

[upper knoll]

Naww

[quasi hedge]

Been procrastinating over the Frida one

[chilly veldt]

wait, there's a Frida one

[upper knoll]

Oh it’s actually a nice one if it’s the day i think it is

[quasi hedge]

Day 19

[small badge]

I decided to try my hand at aoc sidequest im just bad at it

[granite narwhal]

.

[upper knoll]

Yer icl I realised it’s a little out of my skill spectrum after talking to my friend who’s staff

He said this year it was extra evil

[chilly veldt]

day 19 is burp?

[small badge]

No wonder i had to call the priest

[quasi hedge]

Not Task 19

[chilly veldt]

oh wait

[quasi hedge]

Day 19

[chilly veldt]

I looked at tasks

[quasi hedge]

Task 25

[chilly veldt]

lmao

mb

awwwe, it's frida game hacking

that's no fun

[upper knoll]

Yer I enjoyed that day icl

[strange zenith]

Lmao

[upper knoll]

Was a different way of doing it

[chilly veldt]

I like Frida for mobile stuff

[granite narwhal]

I want to

[strange zenith]

What way

[granite narwhal]

Aoc

[chilly veldt]

then just do it

[strange zenith]

Im gonna be honest i did it on autopilot so i still confused about wbat frida is

[upper knoll]

[granite narwhal]

Aoc is adventure /

[chilly veldt]

frida is a tool for dynamic reverse engineering stuff

[strange zenith]

Alr wait is there static ones then?

[nocturne sinew]

i should go to bed but i'm too deeply absorbed in something

[granite narwhal]

.

[upper knoll]

Yes you will meet some static ones in a later day

[quasi hedge]

How would frida work on android?

[chilly veldt]

yeah, tools like ghidra, radare2, ida and cutter

[quasi hedge]

Isn't it for desktop binaries

[chilly veldt]

no

[strange zenith]

It is winter break so you could always wake up later

[strange zenith]

That… reminds me of when my friends dont explain stuff and say wait for a few more years

[chilly veldt]

Frida:
Portable
Works on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD, and QNX. Install the Node.js bindings from npm, grab a Python package from PyPI, or use Frida through its Swift bindings, .NET bindings, Qt/Qml bindings, Go bindings, or C API. We also have a scalable footprint.

[nocturne sinew]

i could, but gotta go shopping with the fam at like 1030

[strange zenith]

Ooooohy

[upper knoll]

I am not gonna spoil future rooms!

[strange zenith]

Thats what you meantt aha

[strange zenith]

Oooooh fun fun but do you need mental clarity for that

[upper knoll]

My friend worked hard on one of the rooms not yesterdays but day before

[granite narwhal]

is adventure?

[nocturne sinew]

yeah i'm driving

[strange zenith]

Oooh fro aoc?

[grizzled wing]

driving and texting

[granite narwhal]

Aoc

[upper knoll]

Yer sweets staff member

[strange zenith]

GO TO BED THEN! Dont die

[nocturne sinew]

not driving currently. driving tomorrow :p

[upper knoll]

I’d hope not

[strange zenith]

Idk who that is but alr

[strange zenith]

Still dont drive on lack of sleep

[sand trench]

welp time to try and get up earlish tomorrow so meep moop to the beep boop for the sleep sloops

[upper knoll]

Goodnight shadow

[strange zenith]

Gnnnns

[mellow gull]

have good rest shadow

[upper knoll]

How’s life been treating you gaw?

[mellow gull]

Life has been a process. But it will get better soon, hopefully.

[grizzled wing]

life comes with a bootloader

[upper knoll]

Yer just stay hopeful best you can do sometimes

[mellow gull]

Don't worry about me too much. I've become very stubborn and find my way through problems one way or another.

But I appreciate your words of inspiration nonetheless, and I extend the same gesture to you.

[upper knoll]

Just always nice to check in and share kindness!

[mellow gull]

Knowing there's at least someone that cares has always been a really powerful motivator.

[grizzled wing]

💜

[upper knoll]

We have great community here icl

[grizzled wing]

yea

[mellow gull]

Everyone here has been phenomenally welcoming

Well, most everyone

[grizzled wing]

haha most

[upper knoll]

That’s case for most of everywhere though

[lone thistle]

As large discords go, that ain’t a bad score 😅

[upper knoll]

The almighty network god

[grizzled wing]

Ben is cool beans

[upper knoll]

^^

[lone thistle]

no u

[grizzled wing]

awww

[mellow gull]

A pro bean

[grizzled wing]

+1

[boreal scarab]

https://tenor.com/view/im-a-bannana-dancing-gif-10351758

[blazing granite]

both

[strange zenith]

Wait is peeling a banana the same as skinning it

[upper knoll]

Probably

[lone thistle]

Bed time(: gnight one and all

[upper knoll]

Gn gn

[grizzled wing]

there's bananas in the ocean?

[mellow gull]

There's probably bananas everywhere

[upper knoll]

If there is cucumbers why not bananas

[mellow gull]

I bet there's a banana on the space station

In space

[grizzled wing]

OceanMan is concerned about 🍌

[upper knoll]

To be fair all of the food to take up there wouldn’t be the worst

[strange zenith]

Aw the rlly stinky one

Jackfruit?

[grizzled wing]

i highly doubt the ISS has bananas

[upper knoll]

Durian is worse

[strange zenith]

Ofc poor bananas

[mellow gull]

Jackfruit should be nowhere

[upper knoll]

If you want stinky food get stinking bishop

[grizzled wing]

what a great username

[strange zenith]

Hmm?

[upper knoll]

It’s a cheese

[strange zenith]

Also cacao looks like it would smell disgusting

[strange zenith]

Never tried it not a true connaseur ig

[upper knoll]

I have once

The fridge was never the same again

[mellow gull]

There's...

a game about controlling a banana in a space station

I wouldn't have expected that

[upper knoll]

That doesn’t surprise me

[mellow gull]

International Space Banana

[grizzled wing]

station

ISBS

[strange zenith]

That sounds like a missle

[mellow gull]

I'll missile a banana into your house

[blazing granite]

Is originally from Gloucestershire. Also is made from the milk of Old Gloucester cattle.

not really my favourite but I had it a few times

[upper knoll]

It’s not bad but damn the smell

[strange zenith]

What would the targeting system be {was tryna come up with a pun but couldnt}

Banataic?

[blazing granite]

so is durian and surströmming but I tried those anyways 😂

[grizzled wing]

"houston, our banana has split"
"roger, is there ice cream on your station?"

[upper knoll]

I’ve never managed a durian yet but I do want to

[strange zenith]

Wats a surstromming

[blazing granite]

I thought it was, houston we have a split, yes it's a big banana 😂

[grizzled wing]

"stop this monkey business, we have work to do"

[blazing granite]

it's a Swedish dish the main ingredient is fermented herring

[strange zenith]

Wait is that the thing thats banned on trains

[mellow gull]

the funny canned fish dish?

[upper knoll]

Yes that’s the name for it

[mellow gull]

It's banned on planes, not trains

[strange zenith]

Planes are just flying trains if you think about it

[blazing granite]

you have better circulation of air in trains than planes. You can't open a window on planes 😂

[mellow gull]

Considering the recommended manner of opening it is as the bottom of a fully filled tub...

[strange zenith]

Some trains also can’t tbf

[strange zenith]

Wait actually?

[mellow gull]

You can get away with filling up the sink near to the top too, probably

[strange zenith]

Orrr we open it in the space station

Then banana flavored herring

[keen sandal]

is there airdrop on this tryhackme

?

[strange zenith]

Or herring flavored bananas

[mellow gull]

...Elaborate?

[strange zenith]

Uh airdrop as in apple airdrop?

[keen sandal]

i mean, if there is a reward for every body that participate

[blazing granite]

#room-help

[strange zenith]

In the advent of cyber?

[dusty fossil]

oh mb i think im in room help xD

[blazing granite]

post it there and wait

[dusty fossil]

yea ty

[twin ridge]

Gave +1 Rep to @blazing granite (current: #62 - 131)

[grizzled wing]

wish there was a user mini_wheatums such a cute name

[severe coyote]

hey guys can you recommend website for practice tests to keep your IT skills sharp. It can be related to IT in general

[grizzled wing]

tryhackme

[strange zenith]

I dont comprehend

[severe coyote]

Using it for cybersecurity practical learning. But i need some good websites to practice questions

[boreal scarab]

How many VM's within a VM does it take to where it's no longer usable?

https://tenor.com/view/tootsie-pop-let's-find-out-mr-owl-gif-14446916230610001271

[strange zenith]

Depends on your specs

For me its about

2-3?

[boreal scarab]

I'm running Arch within VMWare. Then I want to see if Qubes behaves, if it does, then running Whonix inside that

Why?
Because I can!

[strange zenith]

Qubes inside vmware?

[strange zenith]

Good logic right there

[boreal scarab]

Thanks lol

[twin ridge]

Gave +1 Rep to @strange zenith (current: #1660 - 2)

[boreal scarab]

Oh no no

[reef kiln]

I've come to the conclusion I can't learn hacking while high af off shrooms

[boreal scarab]

Arch Within VMware, Qubes within Virtualbox, Whonix within Qubes.

[reef kiln]

IU can barely read

I*

[strange zenith]

Qubes within virtual box is so much pain i tried the other weekened to no avail :c

[boreal scarab]

Already having slight latency issues with the VM, I have to move my mouse for the VM to update faster

[strange zenith]

Pain

[boreal scarab]

VM being Arch, haven't installed Qubes yet

[strange zenith]

Alr if it works you GOTTA tell me so i can spend the rest of my break tryna do it lmao

[steel mountain]

Hi guys, I tried opening my kali vm but its not connecting to the internet for some reason, but my host os (windows) is

and im using discord on windows

I think the last time I had a windows update

and maybe the vm didnt shut down properly? idk but does anyone have any suggestions pls

[grizzled wing]

i bet that would be very hard to learn doing that

[boreal scarab]

First hurdle

[strange zenith]

The attackbox?

[steel mountain]

nah my vm

[blazing granite]

Qubes is good, but you need a powerful machine. It doesn't perform good on vm

[boreal scarab]

I got 32 GB on this laptop. I will overpower this Arch VM if i have to!

Hell. if needed, I'll move it to my 64 GB Desktop.

Not enough? 256 GB Server

https://tenor.com/view/star-wars-more-gif-21856591

[strange zenith]

Lmaoooo what if that doesnt work

[boreal scarab]

Download more ram!

Make it 1.5TB of ram!

[blazing granite]

64 maybe enough but install qubes on dual boot not on a vm

[grizzled wing]

Qubes gives Quties

[boreal scarab]

Too late!

[strange zenith]

Uhm no clue then i would just double check network settings good in vbox or whatever ur using

[strange zenith]

Lmaooo stonks

[blazing granite]

that's what she said 😂

[mellow gull]

Five. Hundred. Sticks of RAM.

[steel mountain]

i havent changed a thing :/

[mellow gull]

https://tenor.com/view/five-hundred-cigarettes-bortus-orville-cigarettes-500-gif-7580742793072271551

[grizzled wing]

500 is lots

[boreal scarab]

Doesn't help that Arch is a pain when it comes to packages

[blazing granite]

until is not 😂

[strange zenith]

Welp do other vms have network?

[strange zenith]

I thought packages were the one good thing about arch?

[steel mountain]

i have no idea, i only have 1 where I do my work on. But my host os does and its connected to the same network

[strange zenith]

500 1gb sticks

[strange zenith]

Gonna be honest i have absolutely no clue sorry maybe try asking more tech savvy ppl

[boreal scarab]

Not when they differ from normal Debian based apt... or are in AUR

[steel mountain]

its okay bro, thank u anyways

[twin ridge]

Gave +1 Rep to @strange zenith (current: #1241 - 3)

[strange zenith]

Wooohooo we love apt

[blazing granite]

at least arch has a package manager. If you could take a time machine you should have a go with the first version on Slackware back on 1993 no package system and no binaries. You need it to compile everything, update and maintain that was a nightmare

[boreal scarab]

https://tenor.com/view/throw-up-dry-heave-vomit-gross-eww-gif-23254765

https://wiki.archlinux.org/title/VirtualBox#Load_the_VirtualBox_kernel_modules

This is to get kernal modules setup

[blazing granite]

The first version of the Linux kernel was around 1991, I'm talking 1993 only brave people used Linux back then 😂

[boreal scarab]

Done... my head hurts from Arch

Can't think of even VirtualBox

[blazing granite]

virtual box suck maybe that's why 😛 😂

[eager marsh]

Operation Tinsel Trace is out

go play it

[boreal scarab]

Trueeeeeeee

Oh @blazing granite I found a song for you

[eager marsh]

https://tenor.com/view/500-cigarettes-the-orville-gif-7999465420984481267

[boreal scarab]

https://open.spotify.com/track/5JmbyYWUukONvKsgdWmJyP

[blazing granite]

https://youtu.be/UyYfzVL06ng?si=o_tWarMvkZXDzw0T

[grizzled wing]

Vader has returned

from Hath

[mellow gull]

Somehow, Vader returned

Eyyy got openvpn to work on a VM

[grizzled wing]

against the odds

[mellow gull]

That wasn't very hard

[grizzled wing]

you get credit for doing it

[mellow gull]

Guess I don't gotta deal with all that packet size nonsense that one guy I was trying to help was

[grizzled wing]

packet sizes available upon request

[mellow gull]

Then I can set an alias for the vpn command :)

This is fun

[grizzled wing]

alias veep=

[mellow gull]

I just set it to THM cause I'm lazy

[grizzled wing]

right, 1 less letter to type

[mellow gull]

It's like 20 less than the full order so I'm not complaining

[blazing granite]

time for another 🍸

[grizzled wing]

cheers

[mellow gull]

Nice

Alright time to see if I can actually connect to a target machine rq before I finish this setup for the night

[umbral carbon]

Hello I’m new here

[sage copper]

Hello Biggy

[umbral carbon]

Wsp man

[sage copper]

Good man, wbu?

[umbral carbon]

Am good thanks

[twin ridge]

Gave +1 Rep to @sage copper (current: #2514 - 1)

[boreal scarab]

@blazing granite https://open.spotify.com/track/6AZQ7Gu6A0BeSpENDBNuB8 Another song

[sage copper]

so where do u live big jack

[umbral carbon]

Actually wanna learn how to get someone IP address
And know the person location

[sage copper]

i mean continetn

[umbral carbon]

England bro

Wbu?

[sage copper]

why did u get scammed or ?

[umbral carbon]

Nah
I have a guy I wanna know if his clean

[clever widget]

💀 i did when i was 16, i still think of it to this day

[umbral carbon]

Wbu
Where are u based bro?

[blazing granite]

https://www.youtube.com/watch?v=-ZWUycv07d0

[boreal scarab]

Ahhhhh I understand....... nothing

[sage copper]

idk how to locate

[umbral carbon]

Ok bro 😎

[sage copper]

okay mate

[umbral carbon]

Sent a request bro

[sage copper]

wym

[umbral carbon]

I sent a fri request bro

[mellow gull]

Cool

Now I never have to look at pickle rick again

[blazing granite]

https://tenor.com/view/rick-and-morty-rick-and-morty-season3-adult-swim-rick-sanchez-pickle-rick-gif-9088343

[mellow gull]

having to use less instead of cat was an interesting twist

But that was the only complication

[strange zenith]

Whats less

[mellow gull]

less does the exact same thing as cat but limited to a single page space at a time

[grizzled wing]

less is more

[mellow gull]

For small text files there's basically no difference

[strange zenith]

Ah

So pretty much cat | head?

[grizzled wing]

head is a command

[rugged kayak]

this will display begining of the file

less is a pager

[mellow gull]

I mean it accomplishes kind of the same thing

[strange zenith]

Ahhhh makes sense

[rugged kayak]

you can scroll and search

[strange zenith]

Alr actually that seems very useful

[mellow gull]

It's good for when certain commands get blocked (like in the pickle ctf)

Creative ways of getting the same outcome

[strange zenith]

Pickle ctf?

[strange zenith]

Woohoo

[mellow gull]

A very silly and quick CTF where you collect "ingredients" (flags) to save Rick

[boreal scarab]

https://tenor.com/view/cute-puppy-excited-gif-18241500

[blazing granite]

you need to do man less to anwser that or go to https://man7.org/linux/man-pages/ and seach for less

[boreal scarab]

CHEESE CTF

[blazing granite]

are you trying to draw shadows out of the shadows? 😂

[strange zenith]

Lel ty

[rugged kayak]

you can also try this if you want to learn linux https://overthewire.org/wargames/

[strange zenith]

I crave mozzerella sticks rn

[blazing granite]

man less if you're in Linux 🙂

[strange zenith]

Dam thats sick

[strange zenith]

Ik but am on my phone rn :c

Wait actually i got a term on my phone

[blazing granite]

https://man7.org/linux/man-pages/ then

[mellow gull]

say less

[strange zenith]

Peak explanation less - opposite of more

[strange zenith]

Hehehe

[boreal scarab]

Maaaaaaaaaaybe

[boreal scarab]

I got fries with cheese on it

[mellow gull]

Where from (if I may ask)

[boreal scarab]

A reasurant

[blazing granite]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[strange zenith]

Luckkyyyyyy

You know what they aay

Sharing is caring 🥺

[mellow gull]

It sure is a good thing I don't care then

[blazing granite]

he was sharing with himself 😂

[strange zenith]

:ccccc so mean

[strange zenith]

Oooh do you play genshin

[boreal scarab]

https://tenor.com/view/carbonara-loaded-fries-fries-cheese-loaded-fries-food-gif-16151252761429549382

[mellow gull]

I've made a grave mistake

[boreal scarab]

The DEAD person is supposed to go in there, not you.

[mellow gull]

Chat, watch as I recover from this dangerous situation.

[mellow gull]

Not anymore.

[strange zenith]

Yayayay

[strange zenith]

No no no you cant escape that quickly

[strange zenith]

Do i believe you hmmmm

[mellow gull]

I stopped playing before Fontaine came out

It's been a while my dude

[strange zenith]

Hmmmm suspicious but if you say so

[mellow gull]

Hyperbloom was still cool back then

Nahida, Nilou, Barbara, Collei

[strange zenith]

Idk what that is

[mellow gull]

big plant + water = big boom build

[strange zenith]

Im gonna be honest i played like a WHILE ago like when the japanese island first came out then stopped

And recently now again

[mellow gull]

Fair enough

You almost got out

[strange zenith]

Almost

But i got sucked back in :c

[mellow gull]

Fs in chat

[strange zenith]

Hey its not as bad as my minecraft phase during exam season

[mellow gull]

Minecraft would've been preferable

[strange zenith]

Rlly?

[mellow gull]

In this community?

I don't think Minecraft even falls into the cringe category

[strange zenith]

Actually good point

[strange zenith]

Yeah like almost everybody here has defo been a mc nerd at some point

[opaque flax]

thats a bold assumption

[strange zenith]

almost being the key term

[polar turret]

Is this legit? It’s a digital footprint scanner/eraser.

https://www.buy.cloaked.com/?utm_source=Meta&utm_medium=Mindful+|+Stop+Thieves+in+Their+Tracks&utm_campaign=Mindful+|+Stop+Thieves+in+Their+Tracks&utm_content=Stop+Thieves+[Hook+2]

[mellow gull]

So as an aside try not to put random links in chat.

[strange zenith]

Im very tempted to click but restraining myself

[mellow gull]

VirusTotal says it's fine but don't touch it anyways.

[strange zenith]

Good idea

[mellow gull]

It mixes a lot of identity protection concepts into one thing.

[strange zenith]

Is it legit?

[mellow gull]

If you're paranoid it'll do all the things you think make you safer on the internet.

[strange zenith]

Alrighty

[mellow gull]

Like... Third party "anonymous" password managers/aliases are all over the place
Looks like it has a VPN function
A temporary email throughput setup..

You'd probably be fine with just the VPN 99% of the time

[strange zenith]

I mean temp emails dont hurt? But you could prob just get like the other ones

[mellow gull]

temp emails are free

[strange zenith]

Yeah

Wait is protonvpn any good or nah

Bc its the only free one i know of

[hot reef]

The typo had since been cleared up whilst I was doing today's AoC, but I got excited a little after seeing the typo name 'Major Malware' and needed to meme it. XD

[mellow gull]

Hahahaha

[strange zenith]

Lmaoooo thats beautiful

[hot reef]

I was literally pointing the name out to CMNatic this afternoon and we agreed, he totally should be a character next year. XD

[mellow gull]

protonvpn is probably okay for your average everyday browsing, to be honest.

[strange zenith]

Hmm but as evil or nice dude

[strange zenith]

Alr

[errant ember]

Hi, I have a question about THM premium plan. Would you recommend it, is it worth the annual plan? I have some basic knowledge and am interested in CS career in the future.

[mellow gull]

Mayor Malware is definitely a good guy

[hot reef]

I can see him as evil. Maybe more sinister than Mayor Malware.

[mellow gull]

Major Malware, though?

He's a good guy.

[strange zenith]

Oh definitely

[strange zenith]

Omg imagine if next year he tried to recruit us to be evil

[hot reef]

XDDD That would be epic.

[strange zenith]

Omg i could totally see like those ww2 propoganda posters

[mellow gull]

That depends on how frequently you plan on using it, how much you believe you'll benefit from the paths, etc etc. It's worth it for me because I use it every day, but that might not be the case for you.

[strange zenith]

I think im gonna go to bed folks gnnnns have a nice morning/night

[amber hound]

nighty

[mellow gull]

Weeeeeyyyy

Early Christmas present

[celest dirge]

That's awesome!

[mellow gull]

The hoodie is way more fleecy and comfy than I was originally expecting, big props to THM

[obtuse brook]

I just started on THM after buying the premium plan on black friday. Absolutely recommend it. The 1hr daily limit on the AttackBox would have killed a ton of progress so far. Yes, I can VPN in with my own VM, but having the preconfigured box and not wasting time on config bs is unquestionably worth the sub-$10/mo the annual plan costs right now

Also, a bunch of the web application pentesting rooms are premium, and they've been fantastic so far

[mellow gull]

I was about to bring this up. While THM has a lot of free rooms, more than most other similar services, there's definitely a huge jump in the learning available to you as a subscriber.

[obtuse brook]

Yep. I didn't even know they were premium until I went and checked my cleared rooms - they don't make it very obvious as a subscriber

[mellow gull]

It shows up pretty quickly if you start on one of the primary paths, but you can spend a long time without running into a subscriber only room depending on the circumstances.

I did the "do I wanna subscribe to this? How often am I gonna be here?" thing at first for a little bit

And then I just kept coming back every day

[odd lintel]

can someone explain how does caching works on a http client.. i see the server send different headers but dont know how does it work

[obtuse brook]

Can you be a little more specific?

[mellow gull]

Is this for homework or something else? And the above.

[obtuse brook]

If that's a homework question someone needs to punch that teacher in the face

[mellow gull]

You'd be surprised

[odd lintel]

no am building a browser and wants to add caching

[obtuse brook]

I'm old, man, not that much surprises me anymore 😛

[odd lintel]

i asked in pydis but its dead

[mellow gull]

Caching usually happens through an initial exchange of information and an "agreement" between a browser and a user that consists of a private and public session key, which ends up being contained in a cookie that a user keeps on their local storage

[obtuse brook]

I mean generally caching just means that you have a copy saved in local storage and it will check there before requesting it again

[odd lintel]

but what are those headers send in caching-control

[obtuse brook]

if I had to guess (which I do) it's probably the server saying that the information changes frequently and you shouldn't cache it

[mellow gull]

That's a really long topic and depends more on the website the browser is mediating the connection for

[odd lintel]

but caching between user and browser is called a cookie? i was trying to like implement client side caching for the like images that server sends so it doesn't need to send it again and again

[mellow gull]

The browser might be responsible for maintaining a local cache of the user's cookies which can contain authentication data, or your username/password hash, or any other number of things depending on how the website the cookie is for is made up.

[obtuse brook]

Are you trying to build like a general web browser?

[odd lintel]

yess

[obtuse brook]

why?

[odd lintel]

idk its fun

not all features just for learning

[mellow gull]

The browser won't be able to capture a website's image data in the local cache under most circumstances.

You might be able to script it to detect and copy over image data left in the html/JS script depending on how it's formatted, but that'd be really inconvenient really quickly

[odd lintel]

https://browser.engineering/http.html#exercises am following this and trying to implement 1.8

[graceful mauve]

Yo, hope everything is going well for you. Would you recommend subscribing at an intermediate or advanced level?

[obtuse brook]

I would recommend that even a pure newbie subscribe - it's probably even more important but for different reasons.
The 1hr attackbox limit is less of a hurdle for an advanced user that can set up their own VM and VPN in - a pure newbie is probably going to get wrecked trying to figure that out

[mellow gull]

Like I said, a webserver and the local user will exchange information or request information from time to time. This is done in the form of GET and POST orders. Sometimes that involves image data, which can be cached.

[graceful mauve]

I've done a hack the box and a couple of free rooms/the advent on tryhackme although I haven't subscribed yet

[mellow gull]

I was a complete beginner when I started and it's proved to be very useful. The path (starting from complete beginner) has been very useful for me.

[odd lintel]

so in my program caching it just means to like store the image in a data structure?

[obtuse brook]

I think the 30% off deal is still on for an annual sub? That's a pretty sweet deal

[odd lintel]

how does a browser cache the images in the local storage?

[graceful mauve]

Yeah true, I guess you can never learn every or try to fill in the gaps of your knowledge

[graceful mauve]

Might get it in a min

[obtuse brook]

https://source.chromium.org/chromium/chromium/src

[graceful mauve]

Thinking about portswigger as well

[mellow gull]

When the browser receives information (again, because it's remediating information between the local user and the website), that information is contained within something called the local cache. This is unique to the browser, and is sort of like a temporary data space.

There are encoded cookies that can contain the user key for example, and typically there's Javascript in place that's designed to pull image webdata from the local cache if that data is available when you go back to a website

[obtuse brook]

Check out the Black Hills Information Security Antisyphon training - they have a handful of Pay-What-You-Can trainings and they are phenomenal. Any of John Strand's courses especially are legitimately SANS-level training for $0-500 instead of $8-10k

[mellow gull]

I, personally, don't know how all that works (how to make a browser, that is), but that's the basic process.

[odd lintel]

hmm okh

[obtuse brook]

^^Important to note that those local storage containers are (or should) be secured so that other programs, other websites, etc can't access them

It's kind of a big deal

[mellow gull]

Usually that data is locked behind the same session key that a user and webserver initially share on their first visit.

[graceful mauve]

Yeah nah I don't need that, I'm definitely not a beginner.. Just tryna figure out a learning path that challenges me

[obtuse brook]

Not if you build your own (vulnerable) browser!

[mellow gull]

So that way it only becomes available when that key is used, aka when a user access a webserver

True! But you'd run into so many problems if you didn't do it right

DNS failure to resolve being the most obvious one

[obtuse brook]

The BHIS stuff isn't all newbie shit, I just did the active defense and cyber deception course a few weeks ago and it was phenomenal

[mellow gull]

It might not matter to non-cert http webservers (or some of them,) but if you don't cache and encode properly HTTPS will kick you right off every time

[graceful mauve]

Yeah nah that does sound pretty good, I'll check it out

[obtuse brook]

They put them all up on youtube after, you can go at your own pace if you can't make the live sessions. You can download the lab VM and access the repo with the labs anytime.
https://www.youtube.com/watch?v=LW4fxEhYraw&pp=ygUgYWN0aXZlIGRlZmVuc2UgJiBjeWJlciBkZWNlcHRpb24%3D

Live sessions do offer a cloud VM which is nice for the folks that can't get vmware workstation to play nice on their pc