general

[opaque flax]

it WAS drill disk

then

[mellow gull]

People use Obsidian for all sorts of stuff. I used to post chart graphs, datasets, survey collation, and all sorts of stuff into notes that I'd use for meetings or informationals.

[opaque flax]

so now im trying DMDE

[near sapphire]

editor syntax highlight is gone??

[jolly aspen]

Yea I guess I would assume it was an image. But you are able to make graphs in obsidian?

[opaque flax]

no

what plugin did you use

[mellow gull]

With certain plugins, yeah. Obsidian does have some limited tools for collation - mostly just data boxes - but it can do a lot with some help from the community.

[near sapphire]

is it under a different name? I'm pretty sure there was one called "editor syntax highlight"

[opaque flax]

what plugin are you using

that made it go away

or what are you putting into your code block

[near sapphire]

no I meant its not in the community plugin list

[opaque flax]

syntax highlighting is in by default

i assume youre talking for code

[woeful cypress]

haha yeah there's a chance that one I mentioned is redundant (or obselete and gone) these days

I've had obsidian for years 😅

[near sapphire]

oh ic

[opaque flax]

no plugins

[jolly aspen]

But you do have to put the language in the first line correct

[opaque flax]

yeah

im yelling BASH i know

[jolly aspen]

All caps?

[jolly aspen]

Necessary or…bash do something to you today

[opaque flax]

echo "this works too"

[mellow gull]

BASH (aggressive, mean, presumptuous)
bash (quiet, demure, orderly)

[opaque flax]

i just like my agressiveness and i think you would appreciate it too

[mellow gull]

Eventually I'll go through and adjust all my code blocks to have color

But I'm more focused on actually WRITING IT right now

[opaque flax]

i wonder what kind of code execution i can get in obsidian

[jolly aspen]

This is my next task. I just hit the ground running typing up a storm of notes without knowing how to do any of the features

[opaque flax]

like do they stop malicious code

prob not

[jolly aspen]

Revshell your obsidian notes

[woeful cypress]

iirc the community plugin area just warns you like "careful, could be malicious"

[opaque flax]

im watching the defcon documentary lol

[jolly aspen]

Write your notes via command injection from your system shell like a real hacker

[opaque flax]

ill encrypt my notes via TLS1.3 too

man i love bf2042

its definitely nota flop failure of a game

[crystal mauve]

All games are failures

And a waste of time 😔

[sinful moon]

Wasn’t BF 2038 the rad one? But yeah there’s fun to be found in many odd games

[opaque flax]

BF 2142

[crystal mauve]

Unless you are playing StarCraft Broodwar or Dark Souls

[opaque flax]

i think games are not a waste of time

[sinful moon]

Sorry BF Battlefield 2142 is the rad one and 2038 is the Unix Epoch rollover problem

[crystal mauve]

They r, pointless

[opaque flax]

if you say so

but sometimes i gotta relax

[mellow gull]

That's your opinion and that's okay

[sinful moon]

As pointless as any movie, or music or media you consume, sure

[crystal mauve]

Just cas they are pointless doesn't mean they aren't fun

Ok?

[opaque flax]

if you say so

[sinful moon]

Video games are art and entertainment on par with all the other genres so no need to say they’re poinless

unless you say reading a book is also pointless

[mellow gull]

Don't you know self indulgence of any kind is inherently worthless?

We're meant to be robots.

[sinful moon]

beep boop, whoosp, I need to get back to my 9-5 indeed 🙃

[austere verge]

Right

[crystal mauve]

Reading doesn't trickle down the same path and become lost progress tho

[austere verge]

Video games are art too

[sinful moon]

mhmm

[mellow gull]

That relies on the inherent theory that video games don't result in benefit of any kind.

Which is observably untrue.

[austere verge]

At least some of them

[opaque flax]

as dolly parton would say WORKIN 9-5

[austere verge]

I have no sympathy for pvp games

😒

[sinful moon]

in the same vein, we have dumb thoughtless media in other mediums as well, indeed

[opaque flax]

theres some books out there that could also be described as pointless brain rot

or just pointless

[sinful moon]

unless you truely think that the latest Transformers movie is art greater than any decent video game lol

[mellow gull]

The entire fantasy genre of literature is just worthless

[opaque flax]

you could call fiction pointless

[mellow gull]

[sinful moon]

Thats very reductionary

[opaque flax]

its kinda making the point tho

[sinful moon]

inb4 you say the same for scifi and I get pissed off lol

[austere verge]

There’s a lot of arguments that can be made through fiction

[mellow gull]

I'm being facetious Eliz, we're all good here

[austere verge]

Yeah I thought so

[sinful moon]

Fair enough, the scarcasm didn’t carry through your messages

[opaque flax]

you can also make arguments through other forms of fiction. movies and games

[mellow gull]

I don't think literature of any kind of worthless
Or art of any variety, digital or otherwise

[sinful moon]

You literally never know online lol

[crystal mauve]

I read the sarcasm but also saw the value in it

[mellow gull]

Video games taught me essential critical thinking skills, problem-solving, creative application, manual dexterity, and several other skills that it's been proven to teach

[sinful moon]

Mhmm for sure, and also hacking and modding these games teach tons

[crystal mauve]

I love video games, but I can't play anymore - wasted the best years of my life losing to Koreans on game-i server

[opaque flax]

i remember cheat engine when i was a kid

i played this game called mechquest

and was able to give myself like tons of health

[mellow gull]

League?

If so yeah, that is a worthless game, fair enough.

[opaque flax]

its not they have FAKER

[sinful moon]

Yeah single player games vs competitive PVP is a whole different beast, not the same ting

Decades of games you have not experienced if so

[crystal mauve]

StarCraft Broodwar

[mellow gull]

Basically the same variety of toxic community

[sinful moon]

same thing, but even then it has a nice PvE campaign to enjoy

[crystal mauve]

League isn't toxic when u turn off chat

[opaque flax]

then theres RDR2 overhere wich is a Narrative MASTERPIECE

[sinful moon]

Video games don’t have to be all tryhard, it’s only what you choose to make them

[mellow gull]

In any case calling games "worthless," as an entire branch, does a disservice to the reality of most people's lives and implicates several other types of art as inherently 'worthless' as well.

[opaque flax]

https://tenor.com/view/im-afraid-arthur-morgan-rdr2-fnaf-horsea-gif-16191481

[mellow gull]

Generalization is never kind.

[opaque flax]

hardest scene in rdr2

[crystal mauve]

The eyes 👀 so much pain

[opaque flax]

dude roger clark killed that scene

[sinful moon]

97% of gaming is actually PvE singplayer experiences. So it is silly generalizing the 3%

[opaque flax]

like actually made me feel feelings

[crystal mauve]

U were feeling less beforehand?

[opaque flax]

i am unfeeling

until rdr2

[sinful moon]

Surprising to hear that’s the first game to give you an emotional response, but fair I’ve been gaming longer than you have I wager

[opaque flax]

its not

the first game that actually gave me an emotional response that i can rememebr is bioshock infinite

[crystal mauve]

Yeah.. I was thinking mega man

[opaque flax]

burial at sea

[crystal mauve]

When he picked up the blaster from his dead friend

[sinful moon]

Infinite feels grand and amazing until you think about it for a single second

[crystal mauve]

And then u went to fight wind 🍃 man

[opaque flax]

right and the facade fades

also

[sinful moon]

I respect your choice and feelings, but that would not be my first pick

Infinite burned me bad

[opaque flax]

i did specify burial at sea

[crystal mauve]

What's infinite ?

[opaque flax]

gaww is

[half badge]

Every second counts!

[sinful moon]

But fair I did not finish the DLC because I was so exhausted by the main game

[opaque flax]

i loved it

[sinful moon]

Bioshock: Infinite

[mellow gull]

gaww is indeed infinite

[crystal mauve]

Oh , I thought

[sinful moon]

Yeah it’s fun so far, I haven’t gotten far yet though

sorry that silly game is though, I didn’t think you were the same person who was asking

[crystal mauve]

I couldn't get into BioShock, same as fallout

[austere verge]

Def top 3 games for me

[sinful moon]

Well that’s getting into loaded question territory lol

(for Manner)

[mellow gull]

Also FFX was my first major emotional response game, had to think about it for a bit

[sinful moon]

Shadow of the Colossus was probably the first game that absolutely devastated me

I can’t even mention the subject of which without major spoilers

[austere verge]

I’ve seen clips from it

Well one clip earlier today

[crystal mauve]

Never played but it looks epic

[opaque flax]

It’s begun

[sinful moon]

who gives a crap lol

[graceful mauve]

How can you get past it?

[sinful moon]

brainrot the platform

[crystal mauve]

Ww3 started long time ago

[opaque flax]

probably against TOS to do that so for all intents and purposes it is literally impossible

[sinful moon]

social media was a mistake

[opaque flax]

big true

[sinful moon]

Chinese owned social media even worse

[graceful mauve]

Yeah man, it's not in scope in their bug bounty

Rip Tik Tok fans

[opaque flax]

where will i get my daily accurate financial information from randoms suggesting FRAUD

[sinful moon]

Literally curates for “western/chinese beauty” standards

and much more concerns

[fringe nacelle]

Sup yah

[crystal mauve]

Chinese beauty ?

[graceful mauve]

On the dark web? xD

[opaque flax]

no ill actually get it from Enron

[mellow gull]

Tik Tok is so brainrot that Chinese citizens can only get a curated, sanitised version of it.

[sinful moon]

if you look like a normal human being and not a legendry nymph godess, you’re not getting on their homepage lol

[opaque flax]

theyre a reputbale company i hear

[crystal mauve]

Chinese beauty is not showing up on my feed

I m giving up insta next

Facebook already xed out

[mellow gull]

Avoid social media in general.

[sinful moon]

Good stuff

[mellow gull]

It's not worth the headspace.

[opaque flax]

i browse way too much reddit

[sinful moon]

No reason to use these services… YOU are the product in them

Reddit is okay sparringly, but honestly I only use it for work these days

[crystal mauve]

Or the target

[sinful moon]

/r/sysadmin Patch Tuesday thread is critical

[opaque flax]

its also fun for the silly things sysadmins say

[crystal mauve]

I'm sick of reading "what a time to be alive"

When did this become a phrase

[sinful moon]

at least a century ago if not more

[mellow gull]

It's always been a phrase.

[crystal mauve]

lol

[opaque flax]

god i can talk to random people all around the world without leaving home. what a time to be alive

[sinful moon]

Yeah we’ve had this for decades as well lol

[crystal mauve]

But they use it for everything

[opaque flax]

whhhhaaaaaat?

no this was the first

discord invented everything

[sinful moon]

lol hush, at least for most home users, this was a possibility since the early 90s

[opaque flax]

what?

IRC wasnt real

it was made up

BBS?

thats fake

[sinful moon]

lol there was also this thing called e-mail

[blazing granite]

Fidonet FTW

[sinful moon]

I know it sounds magical

[crystal mauve]

You're not old enough for irc r u

[opaque flax]

fake news

[sinful moon]

Usenet also is

[graceful mauve]

What's BBS?

[sinful moon]

Bulletin Board System via dial up modems

[opaque flax]

what a time to be alive

[graceful mauve]

Ahhh, I've heard it before I just don't know what it is

[crystal mauve]

I rememba nobody cause use our phone cause I was bunker rushing zergs

[sinful moon]

You’d dial in to a specific BBS host instead of any “internet” or TCP/IP doing the job

[crystal mauve]

Wat te

What year were u guys doing this?

[opaque flax]

1337

[sinful moon]

BBS use (mostly) predates me, but this was done from 1978ish to 1994ish when the Internet took over. But there’s still BBS hosts around today

[graceful mauve]

That does not sound safe lol

[opaque flax]

a guy from my local defcon group is making a BBS

[sinful moon]

Why not?

[opaque flax]

he wants to however make it work over tcp/ip

while the infrastructure is still using old modems

[sinful moon]

You’re making a call directly from your home to the home of the BBS operator

[graceful mauve]

Cause you don't have a proper connection without a hint of encryption?

[sinful moon]

Who’s going to intercept that call?

in a MitM attack

in 1986 per say

[opaque flax]

im going to put some alligator clips on the phone line

[graceful mauve]

A penetration tester

XD

[blazing granite]

I was 10 when I used my first BBS 🙂

[manic isle]

Tradewars!

[sinful moon]

didn’t exist. Sure we had phone preakers and yep dem alagator clips but, have fun using a latter to climb up the pole to use professional telephone equipment to interscept

[crystal mauve]

I missed BBS:( was busy calling miss cleo

[sinful moon]

also how did you even know this peer to peer telephone call was happening?

[graceful mauve]

Can't you just use the same frequency

[sinful moon]

what

[graceful mauve]

Or do they have cables

[sinful moon]

yes they’re called telephone cables

[opaque flax]

a phone line used to be a literal line lol

[sinful moon]

twisted pair copper wires that went all across america

[crystal mauve]

Haha

[blazing granite]

blue box FTW, 😂

[opaque flax]

and phone operators would connect the lines

[sinful moon]

to MitM that you’d have to literally have to tap the wires, unless you’re goverment and working with a provider

[graceful mauve]

Shielded or unshielded, UTP or STP?

[sinful moon]

I mean they’re literally on telephone lines exposed to the elements so they are sheilded

is this really new info? This is classic POTS telephone network

[graceful mauve]

Idk I haven't done work on telephones

Just like SIP and stuff

[sinful moon]

fair enough, but yeah back in the day this is even how our internet worked

[graceful mauve]

Yeah you gotta love history

[sinful moon]

I had experience in the 56K dial-up days but it goes far far far back from that

it would all be twisted copper pair POTS phone networks

[crystal mauve]

What's crazy is that they're still bums cutting that old copper wire out of old infrastructure

[blazing granite]

I remember as a kid sometimes picking up the phone to call and hearing people talking, the line got mix with some other number and some time were juicy conversations 😂

[graceful mauve]

whips out the crocodile clips

[sinful moon]

it went down to 1300 baud rate and below in the olden days lol

again even then, how are you going to find the telephone pole to tap?

[crystal mauve]

Ahh I only heard 2 of those

That was exciting tho lol

[graceful mauve]

You would need to trace it back to the source

[blazing granite]

my first modem was 9300 or something like that

[sinful moon]

Yep and that’s a 10 minute rush alone for a service provider to even provide for law enforcement

best in class operators could get it down to 3-5 minutes

to trace a call

[graceful mauve]

Yeah, definitely not recommended for POTS systems or non-POTS telephony systems 😂

Unless you have permission right?

[opaque flax]

and this is where the movie trope comes from

[sinful moon]

and getting even more archaic, many still had mechanical relays for these

[sinful moon]

Yep, gotta keep them talking for as long as possible

[opaque flax]

now you can get a very precise ping instantly

[sinful moon]

yeah lol

[opaque flax]

or if youre a 911 dispatcher you get an approximate location

with an x radius

[sinful moon]

mhmm, but heck we didn’t even have 911 in most areas until the late 80s and early 90s

you’d just call the number of the police station lol

[mellow gull]

Cell tower triangulation is pretty instant nowadays for the purposes of locating a caller

Hearing people that don't know about landlines make me feel old...

[opaque flax]

yes but if you call into 911 the dispatcher doesnt get an exact location

they get an approxmiate one with a radius

[crystal mauve]

Not if I used *67

[opaque flax]

lol no

[sinful moon]

Well that did change with 9/11 mandiating GPS in phones providing E911 info

[opaque flax]

thats not how that works

[crystal mauve]

I'm untraceable

[opaque flax]

its still an approximate location if you are just calling into 911

[mellow gull]

I think it's to within a couple meters now

[opaque flax]

an exact location can be obtained under certain circumstances

[sinful moon]

Only if you don’t have GPS enabled for whatever reason

[opaque flax]

no

im telling you

lol

that is not how it works cause the constitution

[graceful mauve]

I think they have access to GPS and private phone-based fingerprinting data

[sinful moon]

this has been federal law since 2001 though

[opaque flax]

its not exact

[sinful moon]

in the US to be clear

[crystal mauve]

Is that why I hear voices

[opaque flax]

its an approximate location

[opaque flax]

they do not

[mellow gull]

No, I'm just talking to you in secret

[opaque flax]

cause the constituion

[graceful mauve]

I thought they get GPS?

[sinful moon]

the entire concern was their inability to find people in the rubble of the World Trade Center

[graceful mauve]

Maybe not the fingerprinting data

[opaque flax]

only under certain circumstances

[opaque flax]

you can justify that

as an exigent circumstance

[sinful moon]

There’s nothing in the constitution protecting personal location data

[opaque flax]

and get an exact ping

the 4th ammendment

[sinful moon]

what lol

[graceful mauve]

Technically calling up 911 is illegal unless it's an actual emergency

[opaque flax]

exact pings barring exigent circumstances or a warrant are considered a 4th ammendment violation and unreasonable search

[graceful mauve]

So they get the location for law enforcement too

[sinful moon]

Not in the constitution either, you’re not wrong but I’m not sure why you chimed in to say so

[graceful mauve]

So they would have a right to GPS systems to identify precise locations and use it legally

[opaque flax]

lol no you need much more investigation before you can do that

[sinful moon]

Okay but if you are explicitly making a call to 911, they have every reason to like actually use your location data with your permission. If not you may be f-ed

[opaque flax]

right but they are not provided an exact location

[graceful mauve]

Ahh so they use triangulation algorithms

[sinful moon]

they literally are, it’s not just cell tower triangulation

[opaque flax]

dude i did this job lol

[mellow gull]

E911 from the FCC specifies that location data must be accurate within 50-300 meters. It mixes technology including GPS and Network-based triangulation from a receiving-antenna site.

[sinful moon]

Thank you

this

That’s why I explicitly mentioned E911

[opaque flax]

right i know

im just saying its not an exact location within say 3 meters

which is possible now

[crystal mauve]

Yah rightttttt

https://tenor.com/view/i-dont-believe-you-gif-24248233

[mellow gull]

I know people don't like us saying this.

But google is your friend.

[graceful mauve]

Are we even allowed to talk about how they do that?

[mellow gull]

Sure, it's public information

[opaque flax]

its not illegal

[mellow gull]

America has to be transparent regarding how this stuff works

[sinful moon]

Yes it’s literally federal law and guidelines

Anyways, maybe I misunderstood, Malarum, but you made it sound like GPS had no factor in this and it was all gross trangulation via cell towers alone which is pretty inaccurate

[graceful mauve]

Probably because of different telephony systems and implementations they have access to all the towers as an emergency department if the circumstances call for it. They actually can get a precise location if their systems are advanced enough to handle computations like that

[opaque flax]

no and i am sorry if i made it sound like that. I was just saying that regardless of how the location is obtained unless there is a warrant or an exception to the warrant requiremet exact locations of 911 callers are not given

[crystal mauve]

javelin missiles did have a 93% hit rate in Ukraine based on cell target data :/

[opaque flax]

if you want a specific location you must call the cell provider and request it

[sinful moon]

Typically, caller not responsive cases is often an exception to the warrants in my understanding which constitutes an emergency which warrants more fine grained tracking

[opaque flax]

it can't be purely the caller isnt talking there has to be some other facts leading up to it like you heard a scream and then the line went dead or someone is screaming help me help me

[sinful moon]

this whole system was put into place after 9/11 and trying to find people in the rubble which was an extreme task, which warranted this kind of fine grained tracking

[graceful mauve]

Who says the cell provider can't automate that task with a system in place that accepts tickets from the emergency department upon request.

[opaque flax]

cause i know how it works and the cell provider must be called and the dispatcher must answer questions

[graceful mauve]

Ahhh

[sinful moon]

Yes indeed, but I’ve seen how dead air is usually treated much the same as you describe

[graceful mauve]

I understand

[opaque flax]

generally lets say you call and then nothing is said, its a 911 hangup

like no one ever says anything

its generally not enough

[sinful moon]

in my part of the country that means they take it very seriously and will dispatch immediately even if it’s a False Positive

[opaque flax]

oh yes it will still get dispatched

[sinful moon]

seen it happen first hand

[opaque flax]

however it wont be enough for that exact ping

but LE will still be sent to check the area

[sinful moon]

Then how did they go to the specific establishment within 10 minutes via a cell call to 911, even if it’s a false positive?

[graceful mauve]

This sounds right

What if the other person cant talk

[sinful moon]

Yeah there’s tons of emergency cases like domestic assault where you actually can’t speak

[opaque flax]

prior information from calls, maybe the cell number is tied to someone associated with the esdtablishment, LERMS entries etc

prior reports

theres also a ton of 911 butt dials

[mellow gull]

If you'd like I can send you the exact compliance information (in a link) to whoever's really interested in this

[graceful mauve]

That would be great 👌

[opaque flax]

and the rules could be different there Elizabeth, I just know the rules for my area

[mellow gull]

Eliz is in the US and it's all the same at this point in time

Everyone had to be in compliance by 2014

[sinful moon]

I don’t mean to doubt you, as it sounds like you’ve worked in the field Mal, I’ve just seen things to work like overdive where I live in the US

[opaque flax]

no no every state, county, and city handles things differently

[sinful moon]

mhmm

[opaque flax]

the laws are different too

so its hard to know who exactly does what

the only thing everyone is bound by is the consitutions

[sinful moon]

and my local county is both very well funded and usually doesn’t have anything to do any given day lol

so they are on the scene ASAP for even a false positive

even with no prior record or expectations

[opaque flax]

must be nice to have that level of resources

911 hangups can hold for HOURS in busy places

[sinful moon]

it’s thanks to us being the headquarters of a multinational chemical corporation lolol

[graceful mauve]

What is the point to that

[opaque flax]

lack of resoruces

imagine you have tons of high priority in progress violent calls

and barely enough resources to handle them

and thenyou have a 911 hangup with nothing but dead air

[graceful mauve]

But I mean, what is the point in having a call on hold for hours when there could be other callers needing help

[opaque flax]

you dont have enough resources to answer it

and you are prioritizing calls

and triaging

[graceful mauve]

Ohh I know what you mean

[opaque flax]

that call will be gotten to eventually

[opaque flax]

oh if by hold you mean a literal hold line

[crystal mauve]

I work in the public sector in California n can 100% confirm that response rates are much less reliable than approx pinging locations

[opaque flax]

no it would be answered

and then go to the dispatch queue

and sit there

[sinful moon]

I won’t get too specific but they were one of the major Agent Orange producers for the US government in the 70s, so yes they’re well off and contribute to the city in kind 🙃

[opaque flax]

and wait for a resource to get dispatched to it

[crystal mauve]

Who? O.o

[sinful moon]

USA USA! 🙃

[opaque flax]

oh makes sense

[eternal timber]

It’s growing

[opaque flax]

so yeah high level of resources

[sinful moon]

Mhmm

[eternal timber]

Rahhh 🔫

[crystal mauve]

Ehmmm, proctor n gamble

[sinful moon]

part of why even my special education programs that I taught at were so well funded compared to anything around us

I was a parapro to be clear though, not a teacher formally

[graceful mauve]

It's why funding should go to maintaining the country and not destroying it lol

[opaque flax]

i feel like this could quickly dive into a political conversation lol

[sinful moon]

Yeah trying to avoid that

[graceful mauve]

Haha a very in depth one at that

We'll steer away from it

[sinful moon]

although I will say it’s kind of insulting to work in special eduction and home health care, only to move to IT where I got a 3x increase in pay lol

[opaque flax]

was it private or gov?

[sinful moon]

I get 3x more to keep servers alive and functioning than I did to keep human beings alive and functioning

[graceful mauve]

That's crazy

[sinful moon]

Government vs private for IT

[opaque flax]

lol yikes

[sinful moon]

I was salty for a while but I got over it

[graceful mauve]

But servers becoming dysfunctional can put lives in danger indirectly

[opaque flax]

depending on the server yeah

[sinful moon]

yes but not ours, it would only put these businesses at risk indirectly

[graceful mauve]

True

[opaque flax]

same i support insurance companies, oil and gas, and lawyers

none of that will put people at risk

[sinful moon]

and yep that’s why we have backups too

[opaque flax]

Disaster recovery for the win

[sinful moon]

can spin up another server in a couple hours at worst

can’t spin up another human 🙃

[graceful mauve]

Sounds like a cloud environment and yeah they have a lot of funding

[sinful moon]

nah even for on prem

any IT or MSP worth their salt has backups

[graceful mauve]

Oh yeah even more I think?

[opaque flax]

it must be relieving when you have such good backups that you can get ransomwared and recover quick

the incident will be stressful

but better than if you didnt have backups

immutable storage or airgapped cold storage for the win

[sinful moon]

indeed, but it gets tricky if they do the double um I forget the word, but where they threaten to release your data even if you can recover

[opaque flax]

oh yeah thats true

sometimes they take your money and release it anyways so

[sinful moon]

Never ever happened to us but yeah that data leaking is how the threat actors combat the offiste data they can’t wipe

[graceful mauve]

Backups and proper specialized individuals are the bread and butter of top to bottom scenarios ngl

If you don't have that, then you have issues

[opaque flax]

i mean id say good cyber security insurance is the bread and butter along with backups

they will be able to bring in the specialized individuals and get you a firm to help recover/do DFIR

[sinful moon]

Yeah we even have multiple layers there where O365/OneDrive is backed up but server are also backed up, it’s good stuff

[opaque flax]

yeah we use Axcient cloud and recover

backups all O365/Onedrive

[sinful moon]

Good choice!

[opaque flax]

and all the onprem infra to a local cache and a cloud backup

it's a little annoying how lazy it makes people

"oops i just killed very important document oh we have backups right?"

[sinful moon]

Ah I don’t find them to overly rely on it, but I get you.

[graceful mauve]

Lol, little did they know, it's still in memory...

[sinful moon]

Our file servers have hourly backups and our machines have at least daily backups if not more

[opaque flax]

lemme just dump the memory 1 sec

[graceful mauve]

Memdump ftw

[knotty cargo]

Do u guys working in backups use RAID ?

[graceful mauve]

Chuck a memory dumping function to a crob job

Every 1 second

[opaque flax]

cron jobs on windows?

[graceful mauve]

Task scheduler on windows

Hit it up as an alias and tie it to a system call or something idk

[sinful moon]

We have on site NASes which replicate offsite basically

[opaque flax]

this sounds so much more complex

[sinful moon]

our on-site NASes are RAID tho yes

[sinful moon]

It’s ideal to always follow the 1-2-3 backup approach

[opaque flax]

oh i meant memdump on a scheduled task aliased as cron lol

[sinful moon]

Although fair with our new solution only the “cache” is actually stored on the NAS

[opaque flax]

we are not like that

[sinful moon]

oh lol

[opaque flax]

just axcient usually

[graceful mauve]

XD

[opaque flax]

some people has NAS

[sinful moon]

Ah almost all our clients have NASes for backups

[opaque flax]

we also scooped up 4 other MSPs in a year

[sinful moon]

even (wealthy) individuals

[opaque flax]

so

pain

[sinful moon]

mhmm

[graceful mauve]

NAS isn't that secure though is it?

[opaque flax]

why wouldnt it be?

[graceful mauve]

Not from a lateral movement or side channel technique perspective imo

[mellow gull]

That relies on the assumption that you let someone get into your system in the first place

And if they've gotten into NAS there's other problems you're dealing with

[opaque flax]

i feel like with that logic just having computers is a problem for lateral movement

[graceful mauve]

😂😂

Gonna be Google in a month

https://www.lexology.com/library/detail.aspx?g=51be4f57-447e-44a0-b34c-6c0d6f76da91

[mellow gull]

[sinful moon]

Am I missing something critical about this 2015 into that doesn’t impact me?

[graceful mauve]

2025?

[sinful moon]

whoops wasited my single allowed viewing of the article

[graceful mauve]

Oh yeah I'm totally subscribed to that

https://www.forbes.com/sites/zakdoffman/2025/01/11/google-starts-tracking-all-your-devices-in-6-weeks-forget-chrome-and-android/

[knotty cargo]

What yall up to

[mellow gull]

So google is going to remove the prohibition of fingerprinting from its privacy policies.

That's
whack.

[graceful mauve]

Thinking about triangulation algorithms.. got any advice?

[knotty cargo]

What is that

[graceful mauve]

Idkr, it goes against GDPR

Regulations

[knotty cargo]

Context

[sinful moon]

Alright private browser got me back in. And not like Apple is perfect, but this kind if thing is exactly why I moved way from them professionally

[graceful mauve]

Telephony triangulation or using multiple points of reference to calculate a probable location

[knotty cargo]

Im getting rid of all google apps on my phone one by one

[knotty cargo]

Hmm r u looking for a replacment for gps

[sinful moon]

I’d rather pay or a phone which is on the cost of the hardware vs one which is all about ads and reselling my data. And no custom ROMs as much as I love them are not the solution if you ever need to use them for work

[graceful mauve]

There are other good browsers, I liked google though 😦

Autocorrect 🤡

[sinful moon]

That’s not the issue at hand but fair enough

[graceful mauve]

Lmaoo

[mellow gull]

It isn't just browsers, is the problem

[knotty cargo]

My next phone will be a pixel with graphene OS

[sinful moon]

Entire Google Ecosystem has you as the product

[knotty cargo]

Best privacy combination out there

[sinful moon]

Good luck doing banking, anything work related, etc

[graceful mauve]

It's probably going to be one of my subjects in my course, so I'm getting pre-empted

[knotty cargo]

If anybody wants to start switching firstly get rid of google keyboard

[pliant cairn]

sreiosuly can't i like it too much tbh

btw Hey people

[graceful mauve]

Hey, how's it going

[pliant cairn]

doing better : P

[graceful mauve]

Did something happen?

[knotty cargo]

Maybe use a refrence point and an acceleration sensor and compass to calculate ur distance from it

Wont be accurate as gps but its a totally offline system

Pair it with a barometer too

[graceful mauve]

Hmmm yeah I'll check it out

Might make one eventually

[knotty cargo]

It helps u type faster by guessing the word ur trying to type and makes the next keypress' hitbox bigger so u dont misstype

[pliant cairn]

what are you going to do with that? know the altitude?

[knotty cargo]

I think of it a lot but i dont have enough passion

[knotty cargo]

Yes

[graceful mauve]

It's just like. What's the point when you can use someone else's 😏

[pliant cairn]

trust me the difference is literally 0.0000 something for many many kilometers of height

[knotty cargo]

Also helps for more accurate speed when climbing, declining

[graceful mauve]

I didn't say that and if I did it's a joke 😂

[knotty cargo]

Well at least get an alt reading

[knotty cargo]

[pliant cairn]

yeah that could help but not for triangulation atleast

[eternal timber]

Kachow

[knotty cargo]

Gps here in jordan is getting distirbed lastely due to wars around

It always shows im in beruit airport

[sinful moon]

are we getting paranoid about using GPS here? That’s not even the concern. Assisted GPS is the privacy concern. What are you all on about?

[knotty cargo]

All smart booking apps drivers here are suffering

[knotty cargo]

Not here lol

[civic meteor]

What do I learn first when learning cybersecurity like what do I master first im 16

[pliant cairn]

do tryhackme. not sure about age factor tho

[opaque flax]

#start-here

[graceful mauve]

The signal to the GPS system

[civic meteor]

Is all I need to get a job in there?

[knotty cargo]

Well at that age learning anything helps

[opaque flax]

no you need more

but starting is good

[civic meteor]

Like what

[sinful moon]

is to 80s era satellites in space, at least protocol wise? Why is that a concern?

[pliant cairn]

skills

[civic meteor]

I need like a roadmap

[sinful moon]

THM literally has a roadmap

[opaque flax]

well no one here will provide that but yes THM has a roadmap and there are plenty if you google them

[civic meteor]

Blue team

[opaque flax]

google "cyber security analyst roadmap" and im sure you will find something

[knotty cargo]

In jordan here the GPS signal is jammed by the occupiers israel

[mellow gull]

#soc-level-1-path

[civic meteor]

Is that the highest payed entry level job?

[pliant cairn]

or other search engines...if you prefer privacy

[knotty cargo]

We have no more maps guding

[sinful moon]

That’s fair but most phones support multiple global positioning networks beyond GPS

[knotty cargo]

But thats not a concern here cuz most people dont use it

[opaque flax]

cyber security analyst is not an entry level tech job

[graceful mauve]

Cause the signals could be captured or intercepted from GPS transceivers near the area of the target system

[knotty cargo]

I tried them all, the jamming involes them all

[opaque flax]

sure

duckduckgo it

selfhost your own search engine

[knotty cargo]

Theres an app on google play

That shows different gps systems

[sinful moon]

If this is a concern for you than god help you, that’s an extreme use case, but fair sounds like the Chad has one as well

[pliant cairn]

bing it. (i feel bad just thinking about it lol)

[knotty cargo]

Including russian and chinese ones

[civic meteor]

SOC?

[opaque flax]

yes

[graceful mauve]

🤣 that's funny as

[opaque flax]

cyber security is not an entry level tech job

[sinful moon]

There’s the European solution as well

[civic meteor]

What YT channels do you recommend

[opaque flax]

just go onto youtube and search "how to get into cyber security in 2025"

[knotty cargo]

Yeah car booking apps' drivers are suffering a lot

[opaque flax]

i garuntee you will find something

[knotty cargo]

When u book a car, they call u immediately

U need to specify ur location on phone

[civic meteor]

Is myDFIR a good one channel

[sinful moon]

If this is a concern for your every day life than holy crap, I wish you luck because your threat model is insane

[opaque flax]

i dont know ive never heard of him

[civic meteor]

Who do you know that’s good

[pliant cairn]

look whatever you ask here we can only suggest you and at the end of the day you will have to figure out what works best for you. And moreover THM is very beginer friendly so the learning paths will help you get an idea.

[opaque flax]

https://www.reddit.com/r/cybersecurity/comments/1bdrma8/cyber_security_youtubers/

google

[sinful moon]

That is wild, yeah Russia needs to cut this out, it’s insane and violates international ITU radio regulations, but as we know, Russia doesn’t care about law and order

[pliant cairn]

damn

[knotty cargo]

Last time i opened google maps for guding was years ago

We dont use it here

[pliant cairn]

i used it like an hr ago lol

[near sapphire]

oh hey my color changed

[knotty cargo]

But booking drivers do a lot

[knotty cargo]

Jordan is a small country

And ive a nissan leaf so i dont go too far places

[sinful moon]

And I know Russia is a far ways away from Jordon, but they’re the top proliferators of GPS jamming hardware

[knotty cargo]

Israel is doing it

[pliant cairn]

wait it is small. ok

[sinful moon]

They’re doing is constantly atm on their borders and its insane and against ITU regulations

[knotty cargo]

Becauseany cruise missiles and drones use gps

[sinful moon]

causing isues with airline navigation and more

[knotty cargo]

Yeah they dont give a sh

[civic meteor]

And is letsdefend and security blue team good hands on sites?

[pliant cairn]

a lot of things that many do are against the regulations. well such is life

[knotty cargo]

Theyre killing tens of thousands in gaza so who gives a * about gps lol

[sinful moon]

indeed, but freaking up international civil aviation is no joke, but they do it anyways since the whole world already has them on their, erm, crap list

[knotty cargo]

I heard that they didnt comply with ceasefire this morning

[pliant cairn]

^ @civic meteor

[knotty cargo]

Choose ur weapon

[pliant cairn]

i choose the glasses

[knotty cargo]

Its funny that the right one is running ubuntu and the left one is running windows

[sinful moon]

I’d choose the Nvidia one and still put Linux on it anyways, but depends on what I need to use it for

[knotty cargo]

I cant manage it install nvidia driver

I did it a year ago and it was a complicated task

[sinful moon]

in arch it’s pacman -S nvidia

[knotty cargo]

And after a clean install after. Ehm.. i didnt know hoe important a backup is, i forgot how 😭

[knotty cargo]

It stucks on boot screen

And i cant login until i boot ij recovery and purge nvidia or switch to integrated

[sinful moon]

I’m guessing this is for business?

[knotty cargo]

Nope

Thm and hackthebox until it dies

The left one is from a guy who needed repair

[chilly veldt]

Finally done with the weekend part of the job, now I have to clean up, I'll do all the crimping tomorrow

[sinful moon]

well I don’t want to eagerly say “just use arch bro” to anyone but it does work well there, but that’s assuming you assmble the rest of your system as such lol

[knotty cargo]

Their chassis looks more sturdy im thinking about switching the chassis lol

Jk

[knotty cargo]

If it really works well there then im doing it

[sinful moon]

but either way even if you went Ubuntu, you need the non-free repos to even think about installing the propritary Nvidia drivers

[graceful mauve]

Hey guys a bit off topic but how do I get a different coloured name tag?

[eternal timber]

Right

[knotty cargo]

Yeah

[sinful moon]

if you’re fine with 2D only, then the nouevu drivers should be fine

[red surge]

kamma you are still here hehe just woke up 😄

[eternal timber]

Verify

[knotty cargo]

Nouveau is a lot worse than integrated

Surprising but idk y

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 19, 2025, 7:20 AM

[eternal timber]

I’m in and out of here

[knotty cargo]

Its bad because its stuck on lowest clock speed

[graceful mauve]

Ty

[knotty cargo]

Verify and level up i guess

[chilly veldt]

Nvm, I have to pull a new HDMI cable as well

[red surge]

what is the smoothes working browser in kali any ideas 🙂 ?

[knotty cargo]

Im doimg HTB all the time so im missing on color upgrade lol

[sinful moon]

It’s not surprising, it all had to be reverse engineered lol

[eternal timber]

@red surge it’s growing

[red surge]

something lightweight and fast

[chilly veldt]

Firefox

[eternal timber]

Firefox probably

[knotty cargo]

What an amazing work

[sinful moon]

screenshots are also a thing you can do lol

[eternal timber]

Meh, I don’t wanna open discord on my laptop

[sinful moon]

Mhmm, I wish Nvidia would open their stuff up but yeah likely not happening

[knotty cargo]

I rarely do

[red surge]

That is cool 🙂 you know I been wanting to do a webpage that involves ML and other stuff much in the likes of THM in terms of gamification but different stuff....I stopped the project for OSCP

[knotty cargo]

Yeah if they wanted to they wouldve done from a long while

[eternal timber]

Well 1 hour a day is better than nothing

[red surge]

i have the home page and some others stuff looks cool as hell

[chilly veldt]

This happened while working, so now I have to repull it 😭😭

[eternal timber]

I love the Nvidia CEO’s resume

[red surge]

yes i need to get back on track for sure

[eternal timber]

Did you bite it off

[sinful moon]

Nvidia is too secure in their market leadership to even consider open source or open API/documentations which would make projects like nouevu more feasible sadly

[chilly veldt]

No, it got pulled out

[sinful moon]

lol bella, at that point it’s just time for a new HDMI cable. Yes you could fix it but come on

[knotty cargo]

Check this one out

20 meters hdmi

[sinful moon]

$10 for a new cable is worth the hour you’d spend fixing it manually

[eternal timber]

I need new headphones

Fell asleep with it on my bed and woke up with it broken

Somehow

[chilly veldt]

That's why I have a new cable laying right next to it

[chilly veldt]

You need to keep them neat

[knotty pendant]

How does this happen brah

[chilly veldt]

The cable gets pulled while plugged in

[knotty pendant]

Oh

[sinful moon]

lol can’t say I’ve ever yanked an HDMI hard enough to make that happen but fair enough

just, glad you’ve got it sorted

[delicate star]

sheesh

[chilly veldt]

I moved a tv

[sinful moon]

mhmm, and typically one unplugs them first if need be

[chilly veldt]

Didn't feel anything happen, it just pulled out of the pins

[chilly veldt]

It was cabled so this wouldn't happen

Also, this is what happens when you ask a plumber to pull Ethernet cables

[knotty cargo]

Theyre ready for anything

[red surge]

customised my github yesterday haha

[eternal timber]

I love learning when I’m not assigned pages to read

[sinful moon]

lol obviously did happen, which again is why you unplug things before moving even if it was a “short” distance

[knotty cargo]

It has a hard skin i cant keep them neat

[eternal timber]

Updated my GitHub for the first time in years recently

[chilly veldt]

Indeed, but now my PVC pipe cable hiders are up

[red surge]

looks really cool on both darktheme and light

[sinful moon]

either way I’m getting sleepy and salty. lol talk to you all later!

see ya c:

[mellow gull]

Get good rest

[red surge]

i did not know since yesterday that you can create a specfial profile file

that is basically your intro page

[eternal timber]

I think you see that option when you go to your homepage lol

I put in that I’m learning Rust and forgot to do it

[eternal timber]

Cya

[red surge]

never noticed but again never really used github that much expect to backup my notes sometimes

with few expections aswell

[graceful mauve]

Out of curiosity, what are some of the most difficult rooms you all have completed on THM?

[graceful mauve]

👋

[sinful moon]

2023 Advent of Cyber Side Quest, I was too busy for 2024 lol

[graceful mauve]

Lol that was me last year

[hot cairn]

Based, I’ll be flying to PHX soon but not on SW

Taking a Q4 tmmrw though

[graceful mauve]

I'll give it a look

[sinful moon]

It plays into the main AOC so you need to do some of that to even get into the Side Quest to begin with

[eternal timber]

Sqli room cause of how boring I found it

Did 3 other rooms in between

[sinful moon]

and the QR code for the room was split across social media and more

Ah they made it public now, nevermind

okay see ya for real now!

[graceful mauve]

Yeah I took a look at how it was outlined and damn that looks good

Alright cya

[graceful mauve]

SQLi room lol

Do they have a noSQL room?

[eternal timber]

SQL injection

Hence the i

[graceful mauve]

Who knew

[eternal timber]

Okay I don’t want to get into this

Bye

[graceful mauve]

Was it difficult or boring?

[near sapphire]

Americans, has tiktok really been banned

[eternal timber]

Boring, like I said

[eternal timber]

Probably

[opaque flax]

yes

[graceful mauve]

That doesn't answer my initial question 😭

[eternal timber]

Haha

[opaque flax]

who cares i dont use it

[eternal timber]

It was difficult to get through

[eternal timber]

So this is why my friend asked me what vpn I use on my phone

[graceful mauve]

Who needs that anyways

[eternal timber]

That bum

[near sapphire]

Americans moving to rednote to say f u to the government is funny

[sinful moon]

less toxic social sludge the bettter, no matter who it comes from

[graceful mauve]

Was it something like second order SQL injections?

[red surge]

agreed

[eternal timber]

It got into that as well but like I said I just found it extremely boring and as such it was difficult to get through for me.

[eternal timber]

Reels is sm worse.

[chilly jungle]

@betta.system @betta.system

[eternal timber]

People will now migrate there

[graceful mauve]

That's completely understandable, you need passion for it to work easy

[sinful moon]

I remember a year ago when TikTok pushed out notifications about the ban and proved the very point we’re concerned about, it had teens crying in class and calling their goverment officialls whilst at school in tears

[high dragon]

Guys installation of pentesting toolkit on any os should be enough for bug bounty, right?

[sinful moon]

sounds like a very persuasive platform for a foreign body

[graceful mauve]

That's just funny to me

Who TF is crying over an app

Weak

[eternal timber]

@red surge how long would it take you to build the decision tree regressor class from scratch

[sinful moon]

Teens with not fully developed pre-frontal lobes

[red surge]

Uff haven't done anything in ML field for over 2 years

[graceful mauve]

I hate to say it

But their just cringe

[eternal timber]

As opposed to the teens with fully developed pre-frontal lobes

[eternal timber]

Man

[sinful moon]

Typically doesn’t happen until 25

[eternal timber]

Yeah exactly

A bit younger for women

[sinful moon]

mhmm

[red surge]

Yea sad afair 2 years ago I wanted to go into that field but ended up in Cyber. sec

they took me it so this is my career 😄

[graceful mauve]

Just use insta, Facebook, Reddit, youtube

[eternal timber]

Machine learning is sm cooler

As someone who does both

[sinful moon]

but just that a Chinese campaign could cause this kind of mass outcry and tying up of goverment phone lines literally prooved the point lol

[eternal timber]

Insta is cancer

[graceful mauve]

Yeah fr

[sinful moon]

that TikTok is a dangerous force

[red surge]

well I plan to do it just not for someone else...

[graceful mauve]

At least it's not banned

[eternal timber]

Zuckerberg somehow wants even less moderation

[sinful moon]

but yeah all social is gross and cancer lol

[eternal timber]

Like people aren’t spamming the n word on every video

[sinful moon]

He’s doing it to suck up to the incoming administration very clearly

“please let the goverment be lax on us”

[eternal timber]

lol I can build the class. I was just curious how long it’d take you

[sinful moon]

“see we fired all the DEI staff, and moderators like you want”

[eternal timber]

Not cool, Zuck

[red surge]

read a book and do it so about 1 hour xD

[sinful moon]

mhmm very lame, no tech company has the balls because they’re afraid of government intervention

literally either way they go

[red surge]

In all fairnes doing this in python is simple as hell

[sinful moon]

so they figure, get in favor with the new administration and “play nice” with their dystopian policies

[red surge]

like if you have data all sorted out

[eternal timber]

Musk removing a gamer’s blue check mark cause they outed him for being a fake gamer is easier

[sinful moon]

I laugh so hard at that post about Musk saying that GTA is too scary because he can do socially bad things in it

[eternal timber]

You might be thinking of just using sklearn after data processing. I was referring to building a class to do decision tree regression for you

[muted light]

Mark Zuckerberg said by 2025 ai will replace mid level software developer

[eternal timber]

Yeah

[sinful moon]

dude you’re freaking up the world every day, massively, in much broader ways than you could in a silly video game

[eternal timber]

Crazy claim

[graceful mauve]

And he's out here blowing up rocket ships over people

[sinful moon]

lol indeed

[red surge]

o i see from scratch

[eternal timber]

Yes

[graceful mauve]

"watch out for falling shrapnel boys, but make sure to invest in what I tell you too"

[red surge]

pff my python skills have droped substantially since my last employment which is terrible

[eternal timber]

sklearn makes things convenient

But it also restricts you

Python is relatively easy to pick back up so you’re good

[muted light]

@eternal timber and when will be our time to get replaced?

[eternal timber]

I don’t like seeming superficial but Sam Altman’s face makes me mad

https://tenor.com/view/bouncy-hair-my-hair-looks-very-bouncy-bouncy-hair-tik-tok-bouncy-hair-meme-gif-22988563

[sinful moon]

If nothing else though, wow did Starship Launch 7 breakup look beautiful as the debris flew through the atmosphere, with so many colors due to the toxic materials which made up the ship

[eternal timber]

Reminds me of this guy

[graceful mauve]

Why?

[eternal timber]

5-10 years I’d say

[graceful mauve]

AI generated

[eternal timber]

Unfortunately real

[graceful mauve]

From where?

[eternal timber]

That’s not him but they look alike

[graceful mauve]

Yeah I was like, that's not the Sam Altman that I've seen

[muted light]

@eternal timber then have you thought to change the field

[eternal timber]

https://tenor.com/view/sama-sam-altman-openai-sama-yapping-yapping-gif-7525532358145568607

[eternal timber]

I do cybersecurity for fun. I’m currently getting a PhD in mathematical physics

[eternal timber]

“We’ve cracked AGI”

[sinful moon]

chat is giving me brainrot, time to take off for the third(?) time lol

[chilly veldt]

lmao

[graceful mauve]

I'm thinking I might do the same lol

[eternal timber]

Cya in 3 mins

[graceful mauve]

Brain rot fr

[chilly veldt]

I just cleaned up and now on my way home from work

[red surge]

Have you ever done any web devlopment ?

[muted light]

Nobody is chating 😅

[eternal timber]

Yeah

A bit

[red surge]

I was thinking after I am done with OSCP to start continuing with the webpage, after some additional work on the page I will just make it open source 🙂 for people to contribute to it...just need to set up the domain first so it is uploaded...

Will definitely will need some ML content 🙂 which is what the page is about hope I can count on you 🙂 hehe

[eternal timber]

Yessir 🫡

[stone root]

Hey everyone! My name is Davey, I am extremely new to this community and discord in general! I like to exercise, play games, and I have joined discord because after looking everywhere for a community of people who actually know this stuff! I ended up joining this server and a few others. Thank you for letting me in and I hope we can all become good friends!

[crystal mauve]

Hi Davey welcome 🤗

[red surge]

[blazing granite]

I also like long walks on the beach 😂

[red surge]

https://tenor.com/view/you-wanna-be-my-friend-eric-cartman-south-park-s4e6-cartman-joins-nambla-gif-21962201

[brisk tree]

https://tenor.com/view/mr-bean-on-the-sea-beach-rowan-atkinson-dancing-gif-17657253

[eternal timber]

why is bro bullying him

[knotty pendant]

Hi

https://cdn.discordapp.com/avatars/1277088584662384651/a_71665621ab28d8160e9107d022c44106.gif?size=512

[rapid merlin]

hi all hope you have a nice weekend

@wary barn sorry I cannot accept the fr atm

I am dead

The weather got me

[knotty cargo]

Im shocked about how vulnerable my university's website and moodle are

[rapid merlin]

what happened?

[knotty cargo]

Even having PoCs avaliable

Report it -> no degree

[brisk tree]

my uni and lots of unis in the uk in 2023 got hacked and the lecturers info was taken and sold on the black market it was wild

[rapid merlin]

I have a headache, stuffy and a cough 😷

[rapid merlin]

sorry to hear that, hope you have a fast recovery

[knotty cargo]

The uni deserves it for being too lazy to sudo apt upgrade on their ubuntu server

Come oon

[rapid merlin]

Thank you

[twin ridge]

Gave +1 Rep to @rancid hemlock (current: #641 - 8)

[rapid merlin]

you're welcome :) mom used to drink a nasty. sort of tea (boiled onion and wallnuts) she said it was good for colds, never tried it myself but a good old tea and some soup will work too

[eternal timber]

Moodle tends to be not secure

I’m a Good Samaritan and never did anything tho

[knotty cargo]

We are guys who know how to do it but were just chill about it and play it fair

[rapid merlin]

Sometimes the old school stuff is the best though. Even if it don’t taste so good 😊

[knotty cargo]

https://tenor.com/view/chill-guy-just-a-chill-guy-chillguy-chill-guy-chill-gif-7380092655709947717

[eternal timber]

That meme died faster than my ambitions

[rapid merlin]

yep :D true, gtg now take care

[rapid merlin]

Thank you, have a good day

[twin ridge]

Gave +1 Rep to @rancid hemlock (current: #591 - 9)

[naive violet]

This is a horrible mentality.
There's more to security than this, and more to patching. Things aren't as simple as you might think.

[naive violet]

Version numbers don't tell the full story either.

Patches might be applied without bumping versions, workarounds could be applied, or it might require a specific configuration

[knotty cargo]

Its an 2004 http server

How much patches they gonna apply to it

[chilly veldt]

Uptime is also a big factor

[knotty cargo]

I know but when there are a full team being paid monthly from my pocket to do it but instead theyre putting our information at risk

[knotty cargo]

Not sure about this one

[naive violet]

Welcome to reality, sadly

[knotty cargo]

Bruuuh apache server just do apt upgrade

Its free

[naive violet]

When you learn more about security, you'll understand why it's not that simple

[knotty cargo]

I hope so

Let me finish my last uni exam first

After last exam:

1. Take the rest of the day a break and enjoy the time

2. Be a gigachad and get to work (also enjoys the time)

[chilly veldt]

Have you worked in enterprise environments?

[half badge]

I love loving, but I have yet to find someone to love

[knotty cargo]

Not at all

[graceful mauve]

You do gotta take into account the amount of processes and programs

[chilly veldt]

Have you dealt with legacy programs that had to run and if restarted would possibly brick?

[knotty cargo]

Hmm no

The uni website has been down sometimes tho

[graceful mauve]

I mean, you've got SIEMS, EDR, XDR, NDR, etc

[chilly veldt]

Yes, cause there's approved downtimes, the uni my friend works at has to plan 7 months ahead for scheduled downtime for maintenance, and this can change in an instant if someone has a project running that can't be shut down

And 7 months is the minimum, sometimes it's 2 years ahead cause that's the first available time

[knotty cargo]

Woah 2 years

Thats crazy

[chilly veldt]

That's what happens in enterprise environments such as universities

It's not just "sudo apt update && sudo apt upgrade"

[knotty cargo]

So it is possible that it can be they scheduled a server upgrade 10 years ahead

[chilly veldt]

Indeed

If it's a server connected to a medical study

[graceful mauve]

Enterprises also may use their own technologies so they may have a custom CI/CD pipeline

[knotty cargo]

Its not

[rain river]

Hello guys

[knotty cargo]

But also it has been running like that since a long time

[rain river]

How r y’all

[graceful mauve]

👋

[chilly veldt]

You can't be sure, that's why you have to write a detailed plan on the whole process to get it updated

[knotty cargo]

My brother graduated from there in 2015 and its the same website

[graceful mauve]

I like your name

[chilly veldt]

I can only say what I know, and as someone who has 5 years of experience working with servers in enterprise settings, legacy happens a lot

[graceful mauve]

What types of legacy systems do you find the most used?

[chilly veldt]

Depends on the sector

But windows servers

[graceful mauve]

Idk why

Maybe it's just difficult for them to upgrade

And the cost-benefit slipped their mind as there is no direct threat

[naive violet]

That... That's persistent branding

[toxic kettle]

how can i scan machine networking help with nmap and bypass firewall

[naive violet]

Critical software vendor goes bankrupt and so stops supporting new versions
Cost of replacing software >>> cost of compensating controls

[naive violet]

Is this for a tryhackme room?

[graceful mauve]

How much does it usually cost?

Estimate, I know it depends on the system

[naive violet]

I don't have to deal with that kinds stuff

I just talk to them about the vulnerabilities, compensating controls, etc

[toxic kettle]

yes

[naive violet]

Please use #room-help and share some more detail about what you're having trouble with

[graceful mauve]

Compensating, damnn
Preventiveness is where it's at

[naive violet]

I have no idea what you mean

[graceful mauve]

Preventive controls

[naive violet]

It's really easy, from a pentest perspective, to just say "fix this thing"

World doesn't work like that

[graceful mauve]

Haha imagine

Software engineers replaced by penetration testers

[eternal timber]

Whats sleep

[knotty cargo]

2 brothers not 1

One graduated on 2011, the other at 2015

Im supposed to be on 2026

And we all studied engineering

[knotty cargo]

Yeah i see now

Still not 100% convinced but i feel less rage

[graceful mauve]

Should I cook tacos or spaghetti?

[naive violet]

Tacos

[graceful mauve]

Bet

Some are gonna be hardshell and some softshell

But it's all the ingredients that matters 😎

[knotty cargo]

I neved tried out tacos

Typooos

[graceful mauve]

You're missing out bro

You gotta have the spicy tacos with the Mexican flair to it

[eternal timber]

Tacos suck

[knotty cargo]

Im constrained to the traditions

[eternal timber]

Burritos are where it’s at

[knotty cargo]

Which im ok about btw

[graceful mauve]

You're biased and ratio-ed lol

[eternal timber]

🤔

[graceful mauve]

Yeah, I don't mind a leg thick burrito

[graceful mauve]

What's that?

I've never heard of no taco, life time edition

[knotty cargo]

I meant traditional food

Either cooked at home or in resturants

If i go to a resturant and ask for taco, the cashier will laugh

[chilly veldt]

So let's say that the legacy software is now fully paid for and only costs work hours to maintain and support,
That's 0+M hours of work (M being maintenance hours x salary), so let's say 3 hours a week for one employee, with a salary of $100 an hour (just random numbers)
That's 0+M = 0+((3x100)x4) for a monthly payment of $1200 to maintain the system
If you want to switch, you'll have to pay for the new service, maybe it's not a one time payment, but a monthly
That's 5k USD a month easily for some enterprise programs. That's 5000+M again
Now we also have to research it, learn and teach employees how to use it, let's say 10 hours a week for 15 employees to learn this new program, takes 2 weeks
That's 5000+L+M (L being learning hours x salary)
So 5000+(((100x10)x15)x2)+M
Again, after learning we only need 1 person to maintain it, same hours as older program
5000+(((100x10)x15)x2)+((100x3)x4) = $36200 USD for the first month of getting the new program
Then "luckily" just
5000+((100x3)x4) afterwards

Just to put things in perspective

[knotty cargo]

thats crazy

[graceful mauve]

Homemade tacos are the best

[knotty cargo]

Looking at tacos on google, we have the kind of same food but different naming and styling

[graceful mauve]

Just get some mince (veg or meat) tomato's, cheese, salsa, lettuce, sour cream, etc

[knotty cargo]

And some onions 😋

[graceful mauve]

Damnnn right

Cook the onions nicely so it brings out the flavours from the rest of the ingredients in the cooking pot 😎

[knotty cargo]

I think raw onions will taste better

Do u put any sauce ?

[graceful mauve]

Yeah, I get salsa sauce and diced tomatoes

Caramelize the onion

Cause caramelized onion just melts the flavor into the rest of whatever's cooking

I'm cooking it slowly ♨️

[elder peak]

Sounds delicious, way more appetizing then what I'm about to eat.