general

[dusk canyon]

rce?

[pliant cairn]

what rce?

[dusk canyon]

like i have a website

like a login page with username and password

csrf token

and username and pasword is sending in plane request

plane text

[boreal scarab]

Is this for a THM room?

[dusk canyon]

and i tried sleep for 10 second

it worked

no real bug bounty website

real website

can you help me out brother

[boreal scarab]

@naive violet can help with that

[pliant cairn]

new room already?

i didn't even do the last one yet

[plush needle]

We can not help you with something like that, only if you have some THM room related questions.

[wintry roost]

im sure this gets asked alot but whats your opinions with FREE then PAID vs FREE/PAID from the start?

[boreal scarab]

Holy, a wild @plush needle has appeared! Long time no see.

[plush needle]

I'm always just 1 ping away 😄

[worn turret]

What

[boreal scarab]

I mean, true, but I've always seen you as one to work in the shadows, in the background.

[simple valve]

That’s because Fontaene is secretly Batman

[plush needle]

True 🥷

[boreal scarab]

https://tenor.com/view/cat-meme-cat-cats-batman-bruce-wayne-gif-17330080989025218452

BatCat!

@plush needle I sumon thee!

[shut hawk]

Ayee so proud of you, well deserved 🫡

[grim sparrow]

:hammer: jonathanstone_#0 has been banned.

[cloud mauve]

😂😂😂

[boreal scarab]

I ping James, Fontaene shows up, I ping Fontaene, Scrubz shows up

https://tenor.com/view/madness-this-is-madness-this-is-crazy-will-ferrell-insane-gif-15697806

[sick lance]

The command and search term isn't linked.

There was a doc edited for something due to this it links a different document

Gatekeeping ain't so good

[upper minnow]

but they would still be able to speak, just in another channel

if thats gatekeeping, then having advanced channels also is

[sick lance]

Verification is completely optional, and no member should feel forced to verify.

Nor should they be excluded from general chat

[sick lance]

We just spin a wheel.

[whole yew]

There has been a lot of discussion in the past about this; it was decided that restricting unverified users out of general defeated the point of having a general chat. The compromise was that they are not allowed to post images

[sick lance]

And I don't think that should change.

We get members who improve the server without having an account, just dominated by the people who don't

Less dominated, more over shadowed.

[chilly veldt]

It's just 6 easy challs

For now

You have a month to do them

[shut hawk]

Does this mean you have a place on the team or still another ctf to go?

[chilly veldt]

Still means I have regionals, nationals and bootcamp

[timber galleon]

Hi, off topic

does anyone here know how 3d printing works and or how i can design a stand with a logo?

[chilly veldt]

You design it in a tool like blender or tinkercad

[rapid merlin]

I'd try joining some 3d printing servers

[timber galleon]

yeah i have no idea how to use it

okay thx mate

[rapid merlin]

good luck

[main meadow]

the same guy was also behind WannaCry and bybit hack . Park Jin Hyok "best hacker in the world"
https://x.com/crptAtlas/status/1893414253509611539

[chilly veldt]

YouTube has good tutorials

[thick estuary]

You have to design it in something like Tinkercad or onshape then export it to a stl file! I do 3d printing in my free time

[devout palm]

I wouldn't call him "best hacker"

[last gale]

there is no way public key cryptography basics is an easy room 💀

[timber galleon]

i forgot bout tinkercad

[near sapphire]

it is though, relatively

i think its considered easy cause its literally the basics

[last gale]

am i supposed to google the answers of these equations

[near sapphire]

which ones

[last gale]

bc this is like advanced algabra i was never good at math

[near sapphire]

head over to #room-help ill help you there

[sturdy pike]

New task - start doing the most random certifications

starting with CySA+

[rapid merlin]

Why?

[wooden totem]

New task - apply for server room cleaner

[main meadow]

i did the google cybersecurity certification before i learned about THM. that was the biggest waste of time ever, half of the course was testimonials from people how amazing google and cybersecurity is and how important diverse teams are...

[wooden totem]

I don't remember it being that bad

[sturdy pike]

https://tenor.com/view/shenanigans-bradley-hall-mischief-horseplay-pranks-gif-9695810069875484987

[boreal scarab]

[rapid merlin]

Just get a degree at this point

[ripe vine]

I did it as well, it can feel quite useless once you start doing more hands-on training from THM or other resources

[queen flare]

the one on coursera?

[main meadow]

they literally had a whole video explaining the difference between a gui and a command line. ok the parts about all the NIST frameworks and stuff was decent

[main meadow]

yeah, 50 bucks or something, better buy thm for that

[queen flare]

no i got that free from my institution

i do remember it being terrible and certainly not adequate

[sand trench]

Wallpaper of the day:

[queen flare]

especially when you consider the cost

[sturdy pike]

I'm at the end of my degree, still on the phreaking fence between Masters and Jobs (I wanna do jobs)

[main meadow]

but all these courses of big companies are the same. i did AWS courses before, just talking heads and no hands on

[rapid merlin]

I would forget masters and get some experience some how.

I was going to get my masters also but meh.

Only if I get this job, if not, I'll continue in school.

[strange current]

god I wish I could get a degree

[ripe vine]

Dropped out of my masters to get a job, learnt a lot from just getting hands on experience. Also client interaction is a huge aspect of cybersec for some roles

[rapid merlin]

Why can't you?

[sturdy pike]

I'm now kinda tired about talking this topic, I'll just do THM to the full extent

[rapid merlin]

There's TONS of scholarship programs out there. A company is paying for my tuition. You just have to reach out.

[queen flare]

this will look good on arch

[strange current]

I was stupid when I was a kid, dropped out of highschool like 12 years ago and then moved to a foreign country with different language, no decent paths for me to fix my screw up so I just do online learning

[tardy finch]

Got all my sophia classes done for the wgu bscsia degree Going to finish off my pnpt then enroll. Who here would like to study for the pnpt with me?

[sturdy pike]

Damn, how did you get a job tho? Did you require any certs or... what was your portfolio like?

@rapid merlin IDK how you're doing it, but congrats on the new color!

[rapid merlin]

By doing the easy-info rooms. 🤣

[sturdy pike]

Oh fuck off! 😂 🍪
Come, let's do some challenges and proper rooms!

[ripe vine]

Was on a graduate programme for a large MSP then moved internally to info security, after a year got a pentest job

In a different company that is

[rapid merlin]

I am. 😛 Just started on them yesterday.

[sturdy pike]

That's great to hear, congrats haha!
What I'm wondering is how do you make yourself visible with just skills and no certs whatsoever?

[sturdy pike]

That's good, do it the hard way, I'd be 0xB if I was doing just info rooms lmao

[near sapphire]

so it seems i have attracted my friend to thm

[rapid merlin]

RIP Friend

https://tenor.com/view/dead-man-walking-dead-man-walk-gif-10836495

[ripe vine]

I got super lucky as the company was taking in actual juniors and putting them on to get their CSTM certs. If I was doing it now I would invest in a recognised cert like OSCP and just focus on THM rooms, other courses, setting up home labs etc. Super cliché stuff. Additionally, trying to get into a helpdesk position and showing interest in security internally to the right team could be an avenue to land a cysec role

If you want to do the no cert route, getting a helpdesk job and potentially getting expensed training for a security cert would be a good way to go

[shut hawk]

CyberScheme Team Member?

[ripe vine]

that's the one

[near sapphire]

we got two jays in chat

[shut hawk]

aye nice

Jayy and JAY

[rapid merlin]

Where's certs on being a Server Room Janitor?

[dawn grove]

Anyone can reccomend me a pretty easy challenge room? (i've already done: Lo-Fi, Neighbour, Brick Heist and lookup )

[ripe vine]

😄

[queen flare]

oh-sint

[near sapphire]

any specific category?

[rapid merlin]

You can set it up to only show easy rooms(and free).

[dawn grove]

im open to everything

[dawn grove]

yeah ik but some easy ones are pretty hard

[whole yew]

can't wait for the call because they knocked the paired redundant interfaces offline with the vacuum

[queen flare]

https://tryhackme.com/room/ohsint
@dawn grove

[near sapphire]

searchlight is literally just googling although its not as easy as it sounds

[dawn grove]

imma try this one, i'll then try searchlight

[dawn grove]

thx

[twin ridge]

Gave +1 Rep to @queen flare (current: #525 - 11)

[sturdy pike]

I want to get a cert and I'm working towards it along with doing THM, HTB and portswigger (Have yet to start HTB )

[queen flare]

searchlight is pretty cool as well

[rapid merlin]

Try doing more info rooms and llearn. And if it's too hard, do more research on the topic of the room you're sturggling with.

Skipping it and going to another room isn't progress.

[near sapphire]

i think im gonna try out portswingger

[ripe vine]

It's good that you have an objective, my advice would be to narrow down the resources and stick to 1/2 atm. I was using all sorts of platforms and just got overwhelmed in the end

[boreal scarab]

OSINT?

[sturdy pike]

So just THM and Certs

[near sapphire]

i have 2 main platform i use rn-thm and cryptohack thinking to add portswingger into the mix

[rapid merlin]

Is that what the stand-by interface is for?

[queen flare]

it is an osint based room

[ripe vine]

Depends what role you want to land, red or blue team focused?

[dawn grove]

I find challenge rooms which sometimes have the rooms u need to know before doing them, i do those and then i do the challenge and see if i understood sum

[sturdy pike]

Red team

I'm torn between privesc and web exploitation

[rapid merlin]

Good that you're making sure you're understanding the room over completing them. Underrated advice for the new folks.

It's not about completing the rooms, it's about UNDERSTANDING them

[dawn grove]

About this.. what rooms should i do before doing ohsint? i have no clue on where to start with this image

[ripe vine]

Web exploitation is huge I would get comfortable with network testing by following the jr. pentest path (it covers some basic web stuff too) then hop into the web pentest path. Ultimately follow the roadmap that is provided on THM.

[rapid merlin]

Usually a room tells you what rooms you should do before starting them at the top.

[dawn grove]

not this one

[queen flare]

get a general idea about what osint is and what metadata / EXIF data is

[dawn grove]

ight, thx

[twin ridge]

Gave +1 Rep to @queen flare (current: #490 - 12)

[sturdy pike]

Web exploitation was my first thought aswell, let's set it in stone for now, I'm doing so because I don't want to second guess myself later on haha, thanks for the help!

[twin ridge]

Gave +1 Rep to @ripe vine (current: #1762 - 2)

[queen flare]

also the tools you need on kali linux to be able to view metadata

[sand trench]

BLREGHS

[wooden totem]

notepad

[sturdy pike]

https://tenor.com/view/gojo-satoru-gojo-satoru-satoru-gojo-jjk-gif-11160740313336974756

[ripe vine]

No problem, feel free to add/dm if you have any questions or need some help!

[queen flare]

i was refering to exiftool

[boreal scarab]

If you wanna learn OSINT, I got a huge resource for you

[lament tendon]

exiv2 is a neat CLI too.

[queen flare]

send

[wooden totem]

I personally like reading raw binary

[boreal scarab]

https://start.me/p/DPYPMz/the-ultimate-osint-collection

[sturdy pike]

Sure, I'll add you, might need help later on, thanks again!

[queen flare]

it looks awesome and overwhelming
thanks

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #29 - 348)

[wooden totem]

this could definitely be more organized

[rapid merlin]

Holy moley that's a-lot

[dawn grove]

Is exiftool a web page or a tool in kali>

[near sapphire]

huh i thought i would be green today but life got in the way.....

[near sapphire]

tool in kali

well not only kali

most linux distro have them i think

[boreal scarab]

I didn't create it 😄

[wooden totem]

I just had to mention it, I love my things organized

[boreal scarab]

Oh, If you buy into Kase Scenarios, 10/10 learning

[shadow rune]

xcuse me guys

can I ask? 💀

[sturdy pike]

https://tenor.com/view/cat-computer-typing-fast-gif-5368357

[storm maple]

guys any good websites to learn hacking

[boreal scarab]

https://www.authentic8.com/

They give you access to Authentic8 Silo

[boreal scarab]

https://TryHackMe.com

[shadow rune]

I'm doing a ctf, I found a git in the web source, what next? 💀

[queen flare]

i am just gonna organize this myself as i take notes while reading through this

[wooden totem]

you're the one doing a ctf 😭

[near sapphire]

is it a thm room?

[shadow rune]

no just a ctf training event

[dawn grove]

exiftool -verbose <image-path> is this good?

[cosmic pendant]

OverTheWire?

[near sapphire]

then sorry we cant help active ctf 🙂

[boreal scarab]

@sick lance Did I ever show you this site before?

[wooden totem]

you mean ethical hacking right

[queen flare]

we don't help with that here

[near sapphire]

waitt exiftool has verbosee???

[wooden totem]

bros turning into a mod

[eager marsh]

Is that a goddamn toaster?

[dawn grove]

yea i've read it on the manual but ion understand nothing on those manuals

[eager marsh]

Man this field is getting diverse, now we have kitchen objects doing infosec

[near sapphire]

usually i just exiftool <image-path>

[cosmic pendant]

I bet I've been doing it longer lol

[near sapphire]

we also have a pokemon doing infosec

[iron frigate]

on a windows host, for room "blue", how can i access the target machine through cmd, or ps? I'm connected to openvpn.

[eager marsh]

I’m sure you think that

[queen flare]

it's a pretty good website with great ctf challanges
overthewire.org

[near sapphire]

how does a toaster get a phd??

[dawn grove]

i've got the coordinates i think but no clue on how to get to his damn socials

[queen flare]

try reading the hints

[cosmic pendant]

You didn't think that?

[eager marsh]

You’re hilarious will you be here all day?

[queen flare]

which question are you referring to?

[near sapphire]

running a exiftool command is hilarious?

[dawn grove]

the hint on the first question is "exiftool is your friend. Who is the author of the image? Do they have any social media accounts?"

[naive violet]

#room-help please

[eager marsh]

It’s hilarious that you would think exiftool works 90% of the time on osint ctfs

[near sapphire]

oh no i was referring to that i dont run exiftool with -verbose i didnt read the context of his command

[cosmic pendant]

I think you're not

[rapid merlin]

How would OSINT even be applied in a professional environment? (cybersecurity environment that is)

[mossy river]

Could be worded in a nicer way don't you think?

[eager marsh]

Which fair enough it could

That’s my fault

[eager marsh]

Oh trust me it helps, look at job postings and look at certain employees. It could give you hints about their infra

Google dorking can also help identify endpoints that could potentially lead to you finding something that’s been abandoned by the company

On the defensive side, ehhhhhh not much you can really do with osint

[rapid merlin]

Wasn't disputing it, was just asking for examples.

[queen flare]

depending on the environment, osint can be quite useful
in pentesting, you could find out more about your target organization through osint, which might help out with the pentesting process
in a military setting, it helps with gathering intelligence on enemies
i heard about a case where a terrorist clicked a selfie near their base of operations and posted it on social media and us military was able to identify their base through that image and then dropped a bomb on top of them
there's even an organization called trace labs who work on finding missing people through osint (https://www.tracelabs.org/)

[rapid merlin]

Thank you Vader.

[shut hawk]

RIP 😔

[eager marsh]

Other than make sure that your employees are practicing good opsec

[queen flare]

also what oxvader said about google dorking being used to identify endpoints
sometimes you can also find sensitive information and documents through google dorking

[eager marsh]

Precisely

It’s common in bug bounty and offensive in general

Also regarding exiftool, you won’t find much in 90% of ctfs you do

Often you’ll have hidden info in images or the hex data of the image

[near sapphire]

skiing looks fun, i wanna try it sometimes

[queen flare]

haven't done that many osint based ctfs to know

[queen flare]

oh hidden info
yeah i've done steganography stuff

no hex data stuff though

[near sapphire]

in fact i would say if a ctf could be solved by exiftool only its a bad ctf

[shut hawk]

it's great fun

[rapid merlin]

In a real life scenario or just CTF games?

[eager marsh]

OSINT specifally requires the usage of geoguesser like challenges where you’ll have to find landmarks or reverse image search diffrent things

[near sapphire]

too bad there is no snow here

[queen flare]

did you try turning it off and turning it on again?

[shut hawk]

nowhere near as much snow in places as there used to be 😔

[eager marsh]

Just Ctf things for the hidden data but sometimes threat actors will use it to hide stuff

[wooden totem]

I prefer remembering how to find out information over remembering all the information

[rapid merlin]

Besides googling for vulnerabilities and understanding search operators, I cannot see any true practical use for OSINT in a professional cybersecurity enviroment. Very rarely you're allowed to do any social engineering at all so I don't see how mastering OSINT will help me in the future.

But that's just me.

[mellow narwhal]

This is important in threat hunting

[cosmic pendant]

I hate stego

[mellow narwhal]

Also, knowing how to google can help lots in bug bounties

[upper minnow]

yo @mellow narwhal have u played the new hades update

[unkempt talon]

i love turtles

[mellow narwhal]

nah, I don't play it anymore

[near sapphire]

also i would believe that there are a lot of criminals that got caught through osint

[mellow narwhal]

my pc probably couldn't take it anyway

[upper minnow]

:^0

[near sapphire]

stego is cheesy

[rapid merlin]

The only valid example I can come up with.

[dawn grove]

2 questions left on the ohsint room

[tardy crater]

😂 where is it exactly, how are the prices, they say its expensive there

[shut hawk]

A lot of things related to digital investigation falls under OSINT. Say you're conducting a red team op, you need to do research on the company and it's employees to see how they operate, any insight you can get is always valuable

[rapid merlin]

Thanks.

[near sapphire]

osint makes me paranoid to post any pics of myself lol/j

[shut hawk]

Slovak High Tatras, I'd say slightly more expensive than other places around here

[azure lava]

[movd to room-help]

[near sapphire]

bit is here, hi bit

[lament tendon]

Not room help, because helping with active CTFs isn't allowed. ;D

[rapid merlin]

Everytime I tag a different channel, it automatically takes me there. Wtf.

[lament tendon]

Hi Karev. ^_^

[mellow narwhal]

I heard of someone hacking assets (I forgot if its accounts, phones, whatever) using your pic to bypass the biometric lock

I forgot where I read it

[rapid merlin]

https://cyberprotection-magazine.com/open-source-intelligence-osint-a-practical-example

[queen flare]

biometric lock as in facial recognition?

[mellow narwhal]

Yeah

[rapid merlin]

Finally found somewhere about OSINT in realistic scenarios.

[queen flare]

i've bypassed biometric locks in the past using photos

(in an ethical setting on my own assets)

[mellow narwhal]

Shodan can also be considered an OSINT tool

[queen flare]

shodan is considered an osint tool

[wooden totem]

I think iphones make a 3d scan

[mellow narwhal]

I bypassed my mom's biometric lock using my face, although it wasn't set, because I look like her

[near sapphire]

thats a bad biometric lock lol

[rapid merlin]

I feel like the term OSINT is wayyyy too broad. And needs to be broken down into smaller categories.

[mellow narwhal]

Samsung latest version

or second to latest whatever

[near sapphire]

report the vuln! bug bounty wohoo

actually is that considered a vuln

[rapid merlin]

Read a guide about how this guy who unlocks phones by 3d printing faces and covering it with a photo.

[shut hawk]

Yep, basically anything related to information that you find online can fall under OSINT

[wooden totem]

you can (hypothetically speaking) use a few variations of half a thumb to bypass unknown biometrics

[rapid merlin]

It seems such a broad term. I originally assumed it involves finding information on people.. not information on ANYTHING.

So basically anytime someone Googles, they are using OSINT.

Even your grandma looking for recipes.

[near sapphire]

i actually had a ctf recently where we had to bypass a ai face recognition software

[wooden totem]

no it actually just tells you in the settings that this is shit

[rapid merlin]

Did you guys succeed?

[unkempt talon]

no

[near sapphire]

why are you answering for me lol, but yes no

[sand trench]

scratches head
hmmmm if shadow could figure out how to add chapter jump links in pdf:s

[shut hawk]

hmm for social media that'd fall under SOCMINT

[near sapphire]

hyperlinks are a think in pdfs no?

[rapid merlin]

I thought PDF doesn't truly have "chapters"

It's pages.

[shut hawk]

https://ohshint.gitbook.io/oh-shint-its-a-blog/osint/osint-wtf
@rapid merlin You should read this

[sand trench]

yes for a decent bit of pdf:s sadly not for the ones shadow bought late lastnight

hence wanting to add it to help shadow jump around instead of using ctrl + f search

[rapid merlin]

Cheers man, loving the more indept information.

[sick lance]

No

[unkempt talon]

i know it , lmao

practice more (good luck)

[rapid merlin]

Why being rude?

[near sapphire]

they were being rude?

[unkempt talon]

when ?

i just told him to practice

[rapid merlin]

Feel sarcastic to me.

[unkempt talon]

nothing else

[unkempt talon]

hellnah

[rapid merlin]

Okay.

Fair enough.

[wooden totem]

(he's under your bed)

[near sapphire]

he's spying on me when i did the ctf!

[rapid merlin]

Man, no wonder why I haven't slept more than 3 hours. Keep forgetting my meds.

College life is stressful.

[mental pumice]

hi guys

someone a hacker?

[rapid merlin]

I'm a wanna-be.

[mental pumice]

my friends roblox acc got hacked

[near sapphire]

everyone

oh boi

[rapid merlin]

Everyone's Roblox got hacked.

[mental pumice]

someone needs to hack it back and change the password

[mossy river]

We can't help you here, you need to contact support.
Hacking a service without permission is illegal and against our community #rules

[mental pumice]

not mine

[near sapphire]

jabba was quick

[rapid merlin]

that's illegal

Imagine sitting in federal prison with a bunch of straight k*llers and they ask why are you here, "I hacked a roblox account".

[orchid dome]

Hacking generally has small penalties only

[sick lance]

^

[near sapphire]

not if you hack the government

[orchid dome]

Infact even bigger crimes which are limited to online activities result in 5 years max jail time

[mossy river]

Depends on what you are caught doing

[rapid merlin]

Depends on if you got priors for it or not.

[wooden totem]

no more computer :(

[sand trench]

eating candy

[sick lance]

Depending on how you hack it, or what you do.

You might get a t shirt.

[wooden totem]

they take your router, and waterboard it

[orchid dome]

Yes, I was talking about first time offences only

[near sapphire]

oof

[mossy river]

@remote aspen Please don't share rooms here that haven't been through the QA process 🙂

[orchid dome]

And a high paying job

[sand trench]

shadow could win prioces if shadow solves the FRA christmas hacking challenges

[orchid dome]

With secured retirement

[mossy river]

In order to share a room here, you must make it public in the room settings.

[near sapphire]

FRA?

[sand trench]

but those FRA challenges are stupid hard

[orchid dome]

Are you the same shadow who talks in third person?

[sand trench]

swedish government orginsiation

[near sapphire]

the one and only

[near sapphire]

ah

[rapid merlin]

[sand trench]

FRA, the National Defence Radio Establishment, is the Swedish national authority for Signals Intelligence. We supply intelligence to the Government, the Government Offices of Sweden and the Swedish Armed Forces and to other concerned authorities. Swedish citizenship are required.

[lament tendon]

A lot of rooms on THM are made by normal users.

[sick lance]

Users can share rooms after QA has checked the room.

[sand trench]

took a bit to find an english translated version of that message :P

[near sapphire]

how does National Defence Radio Establishment become FRA

[near sapphire]

ohhhh

[sand trench]

swedish translation

[near sapphire]

yeah

how many did shadow solve

[mellow narwhal]

You will, if you hack the Dutch government

That's the next on my target list

[sick lance]

My point.

Room marked public does this.

[mellow narwhal]

"I hacked the Dutch government and all I got was this lousy t-shirt."

This is what it should say 🤣

[sick lance]

Jabba only asked you not to share it in.

[sand trench]

so far??? 0 of their christmas nuts/cracks challenges

[sick lance]

Not true.

They also have out a cup.

[sand trench]

or are you asking how many rooms shadow has solved on tryhackme????

[near sapphire]

no on FRA

[near sapphire]

its still going?

[sand trench]

naaah

2024 one has its solution published already

[sick lance]

In this server, we ask you don't share it.

Make it public, then it QA will check, and release it public.

[mellow narwhal]

Also a gift card, iirc

[near sapphire]

is it in english, i wanna check it out

[sand trench]

nah it is in swedish

[sick lance]

Yes. 🙂

[sand trench]

would have shared the link if it was in english

[mossy river]

It is to avoid users attempting to bypass the QA process through sharing here, it incentivises users to make it public 🙂

[wooden totem]

kind of an odd off topic problem, but does anyone know what do when you don't want to listen to music but also not be in silence while working

[sand trench]

white noise

or fire crackling or rain/thunderstorm sounds

[rapid merlin]

Does the paid/membs information rooms go into better detail or are they vague also?

Sure the free ones help you answer the questions but not truly fully grasp the room subject.

[sand trench]

shadow feels like they do but think shadow might be biased

[rapid merlin]

I mean, it's always good to get information from multiple sources anyhow.

[mellow narwhal]

i don't think so

I question the distribution a bit, but the quality would remain the same

[rapid merlin]

Thank you @mellow narwhal

[twin ridge]

Gave +1 Rep to @mellow narwhal (current: #230 - 33)

[shy finch]

hello guys i was wondering how do i get the completion certificates of the pré-security that ive finished ? thanks

nevermind i found it

[rapid merlin]

Congrats @shy finch !

[shy finch]

thanks @rapid merlin

[twin ridge]

Gave +1 Rep to @brave cape (current: #609 - 9)

[rapid merlin]

Would love more information on pivoting and tunneling then maybe a nice ligolo-ng based room.

pivoting, port forwarding, tunneling, etc.

[upper knoll]

@celest shale dont add random or dm random people please

[pliant onyx]

So many bots these days

[celest shale]

Yep bots

[pliant onyx]

And so many scammers too

[rapid merlin]

[pliant onyx]

How do I know you aren't a bot

PROVE YOURSELF

[celest shale]

i can count to 3

look

0

1

2

[rapid merlin]

How many fingers am I holding up?

[mossy river]

-unmute 436982125867040779 Please don't spam

[shy finch]

failed

[twin ridge]

🔊 Unmuted kouikiaziz

[pliant onyx]

[celest shale]

Sorries

3

[orchid dome]

Now thats a way to get thanks💀

[rapid merlin]

What?

[pliant onyx]

Phreak were you pink all the time

Or did you just change

[orchid dome]

Were you not expecting him to say “thanks” after your congrats?

[rapid merlin]

No..

I wanted to congratulate him on his progress.

[orchid dome]

Ahh nvm then, I thought you were collecting “thanks” and this “congrats” was a trick to make him say it

I should stop being so suspicious 💀

[pliant onyx]

Even if it was, they are congratulating someone's achievement at the end of the day

Nothing wrong with being nice, whatever may be the purpose behind it

[rapid merlin]

I don't care about imaginary internet points.

[pliant onyx]

[mossy river]

+rep @rapid merlin

[twin ridge]

Gave +1 Rep to @brave cape (current: #566 - 10)

[orchid dome]

I know, I was just like “This is guy is smart, no way he played this out”

[mossy river]

for being a nice person

[rapid merlin]

Only thing I'm collecting is my college degree then a nice career.

[pliant onyx]

I was JUST bout to do that, Jabba

[orchid dome]

Which year? CS?

[rapid merlin]

1st year. Yes.

[orchid dome]

2nd sem?

[rapid merlin]

Yes. We are coming up on the end of my first year.

[orchid dome]

I will join college this year, couldn’t do it in 2024 because of some issues

[gilded kayak]

Guys just noticed that the License of Aurora is expired. I'm talking about Room Atomic Red Team, Task 5
Learning Path SOC L2

[rapid merlin]

It has been wild year so far for me though lol.

[rapid merlin]

Good luck man, if I can do it, you could also.

[orchid dome]

I think adjusting to the new environment is the biggest challenge so it must have been quite different than your usual

[orchid dome]

@mossy river

[mossy river]

#1333993673381253162 please, ensure to use the template in #1333994601157103626

[rapid merlin]

Most definitely, I'm from a more rural area so being in a city is exhausting for me. Quite positive that's why I'm having a very hard time getting any sleep.

[pliant onyx]

When I was in my first year, people thought I was in my second or third year

[orchid dome]

Well something we got in common 😅

[pliant onyx]

For some reason

And I rolled with it

[orchid dome]

Beard? Mine started growing when I was 16

[pliant onyx]

I guess beard yeah

[rapid merlin]

What a good guess though.

[orchid dome]

Experience 💀

[rapid merlin]

I just assumed because he's already self-educated and it was easy for him.

[orchid dome]

I was just starting my highschool and saw two guys discussing if this guy (me) was in junior or senior year

I was like “what do I even say” 🤧

[pliant onyx]

wtf

[sand trench]

hmmm seems good

wow that was larger then shadow expected

just gonna remove that

[pliant onyx]

Shadow, maybe send these in some DMs or an inactive group lul

[rapid merlin]

I'm curious about how this works though. Once tried to figure it out and couldn't.

[orchid dome]

Code blocks? Or what?

[sand trench]

there you go

smaller message

[rapid merlin]

chapter links in pdf files @orchid dome

[pliant onyx]

This is better

[orchid dome]

What chapter links?

[rapid merlin]

Adding links to pdf files that will direct you to a different chapter.

[wooden totem]

Betta approves

[gilded kayak]

Thanks, done

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1495)

[sand trench]

you go to one of the early pages of the book where it lists the chapters and page numbers
by following the instructions here you can now click said titles of chapters to jump to them in your pdf reader

or at least that is it in theory

[orchid dome]

Oh, clickable index 🤔

[rapid merlin]

You haven't tried it yet Shadow?

[sand trench]

yeah basically

[sand trench]

nope... busy with live stream watching

[orchid dome]

How old is shadow?

[rapid merlin]

I know what you're thinking.

Don't say it lol.

[orchid dome]

No no no

[sand trench]

old enough to have sleep problems

[weary delta]

Hey! I’m working on something on the moment and wondered if I could pick your brains on it a bit?

[orchid dome]

My guess 25

[rapid merlin]

It took me a minute to get used to Shadowspeak also. Now I love it because she's unique.

[orchid dome]

@rapid merlin how much do you plan on doing before your degree ends? Like the certs and stuff

[rapid merlin]

Good question that I need to figure out myself.

[orchid dome]

Less boring? Yeah cuz its something fresh

[orchid dome]

I made a plan for myself this December and I have taken steps towards it

Oh btw, I only started this December so I am pretty new

[upper minnow]

god why does it always feel like everything i do fails

im doing the exact same thing as the task says too do and it doesnt work for me

[orchid dome]

Context?

[pliant onyx]

How's that a bad thing

[upper minnow]

just venting my frustration

[pliant onyx]

Ye, was about to say

Your feelings are valid

It be frustrating as hecc

[orchid dome]

You just need to do it enough times so that you remember stuff. Next time when there are no steps, you should know what you did back when you were practising.

[rapid merlin]

Tempted to work my way up to OSCP+.

[upper minnow]

yea but its some basic stuff that doesnt seem to work for no reason

[rapid merlin]

Relatable.

[orchid dome]

My goals for the end of my degree feel unrealistic now 💀

[sick lance]

Depends

[rapid merlin]

Why so? @orchid dome

[shut hawk]

Ask away

[orchid dome]

Now you know @rapid merlin 😅

[rapid merlin]

You can do it man. You'v already made it this far in just a few months.

[orchid dome]

Kind of true, 3 months in and I have sec+ and ccna

CPTS might take half a year though

[rapid merlin]

You got this. Just keep churnin'.

[orchid dome]

Let me give you your thanks for motivation 😂

[orchid dome]

Thanks

[twin ridge]

Gave +1 Rep to @brave cape (current: #526 - 11)

[sinful bobcat]

[rapid merlin]

Scrubz is going down. Taking his #1 spot soon.

[sinful bobcat]

Hello people

[orchid dome]

Yo

[sinful bobcat]

How you doing ?

[gleaming grove]

OHHH new color!!

[sinful bobcat]

[orchid dome]

Were you writing this for the past 10 mins?

[gleaming grove]

nothing.... im not use to write in a split keyboard

[sinful bobcat]

You are the first person I meet that uses a split keyboard

Is it actually more comfortable ?

[gleaming grove]

i was about to say that certs are so expensive to me, idk which one should i pay

[orchid dome]

She might be on a tablet

[orchid dome]

Where are you in your journey? And your goals

[sinful bobcat]

Well it's still the first person I meet that uses that keyboard

[gleaming grove]

yup, good for the shoulders

[sinful bobcat]

[gleaming grove]

and a lot of cool layers shortcuts

[orchid dome]

Check this out as well

https://pauljerimy.com/security-certification-roadmap/

[gleaming grove]

idk, im in college, i dont have any cert, so maye pjpt or ejpt?

to start

[ripe vine]

PJPT then PNPT are great for beginners and the course is awesome

[gleaming grove]

yeah i dont have a lot of money and i need to pay college, thats also why

[boreal scarab]

Worth a look, little useful for OSINT, I don't have a use case for it, nice to have access to though. But they talk about Malware, not sure how useful it is for RE

[orchid dome]

Depends on budget, I would say go for CPTS directly

Having CPTS is equivalent of OSCP, it just doesn’t have that HR hype

[gleaming grove]

cpts looks great, but when i search on linkedin, hr wants things like oscp

ceh, and stuff

[orchid dome]

1 step ahead 🗿

[dark mason]

Hi chat!

[orchid dome]

Ceh is useless

[gleaming grove]

but thats expensive to me

[dark mason]

I am in the best mood that I ever had this week

[orchid dome]

If you are in college, you can get the course at $8 a month and certification for $220

PNPT and eJPT together will cost you around $500

Choice is yours

[gleaming grove]

thats great! 🎉

[rapid merlin]

You could randomly type 3-4 letters and there's probably a certificate with that acronym.

[whole yew]

if you don't have some kind of background in IT or compsci, OSCP is a waste of money to get a job - focus on the first steps of your career path, that is down the road 3-5 years.

[dark mason]

CWEE

Is there?

[whole yew]

OffSec has a CWE

[rapid merlin]

yes

[orchid dome]

Yes

HTB CWEE

[dark mason]

No fucking way

[rapid merlin]

https://academy.hackthebox.com/news/launching-htb-cwee-htb-certified-web-exploitation-expert

🤣

[dark mason]

Wtf

PNPT

[gleaming grove]

yes thats why im looking for "beginner" certs

[orchid dome]

Then security+ is the best start

[rapid merlin]

look at that list MZZ posted

[orchid dome]

It basically sums up every theory you need to know

[orchid dome]

!

[whole yew]

Unpleasant truth time: entry level to security usually assumes 1-3 years of IT background, and pentest is not entry level to security

[dark mason]

You have got to be shitting me

[whole yew]

If you aren't looking for vocational training, college, or university, your best bet is an entry level help or support desk role

[rapid merlin]

Yeah, that's why I decided on college.

[orchid dome]

I would say CompTIA triad but it will be expensive and she needs to be selective and thus security+ should be good

[gleaming grove]

yeah at least in my country cibersecurity is something "new" last yeah we updated the last law, from 93

[whole yew]

CompTIA A+, Net+, Sec+ are affordable for individual contributor - but if you are making entry level salary, you shouldn't be paying out of pocket

[orchid dome]

Which country?

[gleaming grove]

im from chile

south america

[fiery imp]

hey guys

[whole yew]

Certifications are a business requirement, so the business should pay. The only time I would even suggest you pay out of pocket is if it's a hard requirement for the role and you cannot get a foot in the door with HR or a hiring manager any other way

[eternal timber]

That’s chill

[orchid dome]

It’s not affordable in Chilean Peso.
1 USD = 950 🤷🏻‍♂️

[naive violet]

Advice for different markets can be completely different

Look at what job postings are asking for in the requirements section

[orchid dome]

True, demand and what the HR requires is also quite different

[whole yew]

Course and exam prices have been known to be localized for local markets. Additionally, local vocational schools might have a discount for the exam if you take the course through them.

[naive violet]

Also Juun I made chashu the other day, good stuff

Highly recommend

[whole yew]

aww yeah

[orchid dome]

Checked that out as well, half is most they drop the price, so Security+ for 230 instead of 400 in US

[whole yew]

i am putting together my list to make kimchi this week, James

last time i was at the store, the napa cabbage and bok choy was not looking good

[naive violet]

I need to find somewhere near where I live to source some

[rapid merlin]

Kimchi is SOOOOOOOO good

[whole yew]

Then my advice for true entry level with no experience nor background is this: look at the local market for the actual entry level requirements for those roles, and figure out what you can do without paying out of pocket. Tier 1 support is very commonly no requirement beyond secondary or high school equivalent.

[gleaming grove]

thanks for the advice guys. i really aprepreciate it

[whole yew]

you collecting bones and trimming to make the broth too?

[naive violet]

Chinese food and ingredients is easy to get, Korean seems less so.
Was easier in my last place

[naive violet]

Oh, no. Just making instant stuff better with good meats

[whole yew]

A lot of the korean veg is very common in chinese markets too, from what I've seen here. Different names, same produce

[naive violet]

Might get some proper broth in this year though

[orchid dome]

If I can afford it, then I can pay from my own pocket right? Worth it?

[whole yew]

Get some premium soy sauce and some of the 'upgray-e-d-d' sauces and broth mixes - if you can find dashi that's an instant win. Chicken stock is a good substitute if you can't find the real deal

[whole yew]

Unless you are lookoing for a job with that cert as a hard requirement, I would not recommend it. The biggest factor in getting a certification is your ROI - if you spend money and it doesn't get you a raise or a job, in that persepctive it's wasted money.

You can learn the material without the certification, getting the cert is for business reasons.

[whole yew]

i save the carcass when I do roast chicken, when I have a 2L bag full it's time to render in the pressure cooker

@naive violet Alright, it's lunch time. Time for some tonkotsu ramen and fried curry rice balls. https://www.jinyaramenbar.com/

[rapid merlin]

What's with the hate against AI generated images?

Is it because graphic designers aren't getting clients anymore?

[mossy river]

They use other people's art without their permission to generate the images

[sand trench]

same argument as why meta/facebook gets in trouble for having 80+ TB of pirated books to train their llm called llama

[rapid merlin]

I read about that.

[eternal timber]

Because they are trained on people’s art

Often without their permission

[austere tusk]

I had a question and was wondering if anyone could help. I got a small buffer overflow to just test buffer overflows and used the following line to compile it "gcc vuln.c -o vuln -fstack-protector-all" Than I used checksec but it sayed that it did not have a canary wich I thouged it should have when usingfstack-protector-all

[rapid merlin]

Training > Plagaring

[naive violet]

You recommend that place? Will recommend it to my other half if so

[whole yew]

Yes. It's goood

[eternal timber]

Did you mean plagiarizing?

[whole yew]

If your SO is anywhere near one of those, they should go

[rapid merlin]

I mean, that's like being mad at new band for being inspired by a classic rock band. As long it's not straight up plagarism.

[rapid merlin]

Yes.

[grizzled wing]

scamming term of the day : Love Bombing 💣

[whole yew]

I eat at the local Jinya at least every other week. Usually once a week

[eternal timber]

Humans take inspiration too but the subconscious process isn’t really quantifiable

[whole yew]

You should look into Steven Hassan's BITE model.... super interesting psychology stuff

[mossy river]

It's a little more complex than that. And honestly I don't 100% agree with musicians suing others for taking chord progressions etc.

[whole yew]

Not comparable. Look at current lawsuits for LLMs reproducing copyrighted works as output.

[grizzled wing]

acronym BITE stands for Behavior, Information, Thought, and Emotional control

[rapid merlin]

Any sources? Would love to dive into this topic.

[whole yew]

Yeah. Looking at how various groups institute control mechanisms for membership is interesting, revolting, and thought provoking.

[grizzled wing]

that's good to know.

[ancient mirage]

how was your weekend guys?

[whole yew]

The closest argument, Phreak, would be saying it's OK for a cover band to pretend they are the original author of a song (lyrics, music, et al.). Like if the Helles Belles went off the rails and said that Thunderstruck was their original song that they came up with, instead of proper attribution to AC/DC.

[rapid merlin]

I think LLMs should be registered then we need a universal useragent name for blocking all of them at once(prevent them from crawling your page).

[dark mason]

what's that

[dark mason]

it was alright

[rapid merlin]

That was fast.

I wanted to scan it though.

[dark mason]

it was just a yt video lmfao

[eternal timber]

I don’t want this color anymore

[dark mason]

stop boosting then

[grizzled wing]

its when a scammer gives the target lots of compliments and boost to confidence, telling them they are loved in attempts to boost trust which will be used for a scam

[eternal timber]

I was about to

[grizzled wing]

orange kamma | purple Nitro kamma

[eternal timber]

Hi Sudo

[eternal timber]

How’s your weekend going

[grizzled wing]

boring

not much on podcasts to listen to

[eternal timber]

I got accepted into an AI research team

[rapid merlin]

Truly hate when you save an image and it saves as a .webp format.

[eternal timber]

[grizzled wing]

sounds nice !

[eternal timber]

Try more plates more dates

[shut hawk]

hmm sounds like something called robots.txt

[eternal timber]

Although I listen to him when I want to sleep

[proven quartz]

Some images are webp...

[rapid merlin]

Yeah but I hate the format.

[shut hawk]

Which gets mostly ignored anyway, sadly

[eternal timber]

You know you can see the image format before you download it right

[grizzled wing]

when i get webp , 🖨️ > save as PDF

[eternal timber]

It’s pretty great

Should be able to have a paper published by late May

[grizzled wing]

then published kamma then

[dark mason]

hm

sounds like a normal relationship to me

[naive violet]

Or they could respect the licensing of content, by default all rights reserved...

[eternal timber]

I’ve co published a physics paper with a professor before

[naive violet]

Can be a form of emotional abuse

[grizzled wing]

not at all, quickly being flooded with compliments is not normal. young men are really falling for these scams

[dark mason]

luckily for me, I ain't pulling girls, so I am immune to the scam

[eternal timber]

You’re like 13 tho

[grizzled wing]

this is not a joke topic. anyone can be a victim. i hope you would be more mature on this terrible scam

if joking about scams is your thing then i will no longer wish to communicate with you

[dark mason]

that's the point

[eternal timber]

Is it? Thought the point was the fedora

[pallid lotus]

You realise half the AI stuff going on just now is written in Python, right?

[dark mason]

💀

no comment

[eternal timber]

I mainly use Python. I’m just sharing a meme

[cosmic pendant]

Ai.doStuff("Magic")

[rapid merlin]

My 14 year old niece got hooked on scammer bot so bad, that she literally "fell in-love" with it and stole CC information from my grandparents for the scammer. She's currently not allowed online at all anymore and I had to set-up strict parental controls on their network.

It's bad, really bad. I have to agree, this is no joke because it's becoming a pandemic almost. We are from a rural area and I know 3 cases like this, if it's happening here, it's happening everywhere.

Apologize if that's a bit non-pg13.

[eternal timber]

Me after making 50 hidden layers

[cosmic pendant]

when you send me your paper 😄

[devout palm]

https://tenor.com/view/cat-orange-spin-hat-one-brain-cell-gif-2745719316163357325

[rapid merlin]

She's currently seeing a therapist over a scammer bot.And has been for almost a year now.

[eternal timber]

Which one

[grizzled wing]

thank you for sharing. this is terrible stuff happening. i really feel bad for your family.
joking is just cruel and immature which i do not tolerate, its a crime

[twin ridge]

Gave +1 Rep to @brave cape (current: #490 - 12)

[dark mason]

That's actually terrible

[eternal timber]

Omg it’s Mahoraga

[pallid lotus]

It's quite sad really. Very human.

Internet leads to loneliness epidemic.
How do humans respond? With empathy, kindness, and a solution?
Not a chance. They start exploiting it... which no doubt makes things worse.

[sonic mango]

😂😂

[dark mason]

humans exploit humans!

it sucks, but it's the world

[grizzled wing]

dude

[pallid lotus]

That really wasn't the point

[shell nova]

Sounds like pig butchering

[sonic mango]

Are the younger generation chronically online

[eternal timber]

I know I am

[pallid lotus]

I mean, so are most of the older generations at this point...

[grizzled wing]

similar but slightly different tactic

[eternal timber]

I’m in a meeting rn but I’m still texting here

[shell nova]

Same ends though

[sonic mango]

I actually wonder what they are going to be like as they grew up on the internet

[shut hawk]

Speaking of python, new 3.13 SEGFAULT just dropped

def f():
    lambda: k
    k = 1
    print([locals() for k in [0]])

f()

[pallid lotus]

What, Gen Alpha?

[devout palm]

Waat

[shut hawk]

If you run that in python 3.13 it segfaults, lol

[grizzled wing]

which is very sad and terrible

[sonic mango]

Is that what the new gen’s are called

[pallid lotus]

Everything after 2013 or so

[rapid merlin]

They already are...

[pallid lotus]

2000 -> 2012 (ish) are Gen Z, so apparently whoever named that doesn't know the alphabet

[shut hawk]

To be technically accurate, cpython 3.13

[pallid lotus]

Or didn't think far enough ahead

[rapid merlin]

My uncle is almost 50 and he practically grew up online.

[devout palm]

Socially devastative

[pallid lotus]

I mean, even many of my generation have never worked in-person in an office

[sonic mango]

But I doubt as much as gen alpha

[naive violet]

They moved to a new alphabet

[rapid merlin]

WWW =/= Internet

[sonic mango]

True true

[rapid merlin]

Love bombing is awful

[rapid merlin]

Welcome to THM though.

Especially when it’s not legit

[sonic mango]

😂 thanks

[grizzled wing]

really cruel

[rapid merlin]

Been there

They got me

😂

[sonic mango]

Just trying to become a pentester

[rapid merlin]

I really want to know why more kids are failing school when they have access to more information than ever.

[pallid lotus]

Less requirement for critical thinking

[rapid merlin]

#start-here Feel free to ask for questions here.

[devout palm]

Easy dopamine

No goals

[rapid merlin]

Yeah I agree. 🥲

[sonic mango]

Ditto

[grizzled wing]

that is a huge 🧵 , but i quickly blame tiktok

[sonic mango]

Don’t have to search as hard for the information so less dopamine when found and then less memorable

[pallid lotus]

Social media just generally has a lot to answer for lmao

[eternal timber]

I’m craving barbecue

[sonic mango]

Fairs

[rapid merlin]

I think it depends on the person, I was at my most motivated when I was seeing all these opportunities on TikTok. Also adhd makes long form hard to study. I think I learnt 5 new business skills because of TikTok 😅

[dark mason]

While they have access to morr information, most (myself included) instead of using this advantage, we play games, talk with friends and we just don't do work anymore

[devout palm]

But all the bs you have watched...

It is no good to the brain

[grizzled wing]

is this spoken from as an adult with a mature brain or as a teenager ?

[rapid merlin]

Uhhh well, do I have an adult brain ? I learnt more on TikTok as an adult😂I don’t know tbh. I spent over twenty years playing video games like a zombie. I didn’t learn anything and I think my addiction kept me a teenager ?

[eternal timber]

https://tenor.com/view/firey-barbecue-barbecue-ribs-outback-steakhouse-gif-11165334

[rapid merlin]

Like I just never left my room for twenty years

So I never grew up

brain development doesn't stop at 25 or 30 or even 40.

When I stopped playing it was like coming out of a dream

[grizzled wing]

right, as an adult you have yoru brain formed, so this is not the focal point. Teens not achieving to their potential was the initial query

[rapid merlin]

I see I missed the point

[grizzled wing]

prefrontal cortex is the primary brain part i have in mind for this discussion

[mossy river]

Yup pretty much, there's no drive anymore.
In the past you had to go to libraries to get this information, now I can spend 20 minutes copying ChatGPT's output and game for the majority of the day

[eternal timber]

Actwally, the frontal lobe for a male usually fully develops at 25

[rapid merlin]

But I also don’t know if I have an adults brain. 🤷‍♀️

[devout palm]

Not too late, never too late

https://tenor.com/view/wiwiwi-cat-kitty-wiwiwi-kitty-cat-nham-nham-gif-1979698139149794258

[grizzled wing]

you do

[eternal timber]

Indeed

Although some research shows that your fluid intelligence and ability to pick up new skills decreases after your 20s

[devout palm]

Yeah

But not completely

[eternal timber]

It doesn’t disappear, just decreases.

So you can still learn

[devout palm]

I love it

[rapid merlin]

I could not really learn anything growing up other than games.

[dark mason]

I feel called out 😭

[rapid merlin]

I sucked in school and college

[eternal timber]

Well you have time

[rapid merlin]

I’ve been trying and I’m much better now. I wouldn’t have been able to learn if I continued playing games

[eternal timber]

The best time might have been 10 years ago but the best time you’ll ever get now is today

Or smth to that effect

[sonic mango]

Well said Socrates

[devout palm]

One day, or day one.

[mossy river]

Once you start to let yourself be comfortable, you massively lose your drive.

[rapid merlin]

Yes, hopefully I can continue.

[devout palm]

True xd

[eternal timber]

Comfort is the enemy of progress

[rapid merlin]

Or depression. That shit kills my brain fr. I feel heavy and air headed. Zombie mode activated

[devout palm]

Not always

[mossy river]

Having a healthy routine will help you maintain energy throughout the day and eventually you will be able to keep yourself productive.
However, most people won't get past the first week because we expect instant changes. Just keep at it

[devout palm]

Self progression is a thing

[eternal timber]

Yes but if you’re comfortable with where you are, why would you progress

[devout palm]

Temporarily comfortable

Not long-term

[eternal timber]

Well that’s what the quote refers to

“Comfort is the enemy of growth”

[devout palm]

It actually depends on what comfort is.

[eternal timber]

You mean I can’t get a PhD after 1 week of studying?

[devout palm]

If i find reading books comfortable, that might not be the worst enemy.

[rapid merlin]

I can’t even get that anymore, I can’t even have a bath without being constantly aggravated and thinking about cyber protection 😂

[eternal timber]

It refers to comfort with your state

Not comfort in general

[rapid merlin]

Buy a cheap smartwatch and set-up a daily planner on it. Great way to maintain a steady routine.

[weary delta]

Im trying to think of things to that I wish I’d learnt in school that are important in real life (because I feel like school does a really bad job of teaching skills etc in personal development sessions rather than just academic content). Does anyone have any ideas that they wish they’d learnt?!

[sand trench]

taxes and economics for personal money management

[sonic mango]

But would most people be interested in class when learning about taxes

[devout palm]

A person can be comfortable with their routines and life, that doesn't necessarily mean it blocks self growth

[sand trench]

maybe not but it is a super useful life skill to have

[sonic mango]

I agree but I just think it would be just as well received as any other lesson

[sand trench]

basically everyone in the world deals with taxes in some way shape or form so it would be valuable to teach it in school

[devout palm]

Simple biological analogy,
Working out every day non-stop is worse than working out with breaks.

[sonic mango]

Yea true

[dark mason]

Financial education should be mandatory at least a year imo

[sick lance]

All depends on the routine I guess.

[devout palm]

The key point is to get up when you are done with your break.

[rapid merlin]

You know what it reminds me, this whole school talk. Do you remember boyinaband? I loved his videos

[dark mason]

Money management, taxes, bills etc...

[eternal timber]

It’s implicit that the comfort in the quote refers to comfort with where you are in life and making no effort to change it. It’s easy to poke holes in sayings

[pallid lotus]

Alternatively -- and hear me out here -- we could revamp the financial system to be simple enough that your average person doesn't need to waste their time learning an entirely arbitrary (and massively overcomplicated) human-made construct.

... Fat fucking chance

[grizzled wing]

• teaching basic cyber security hygiene.
• understand that data is important to aware of, how its used, each website you join adds to a chain of knowledge
• how to determine what is factual
• critical thinking skills

[sand trench]

yeah true but good luck getting that through the ones in charge of the financial systems

[pallid lotus]

I mean, I work for a bank 🤷‍♂️

[sand trench]

meant as for the general population to get that through... you muiri have a valid chance

[pallid lotus]

No I don't lmao

[devout palm]

Yeah but it may be misleading, making a person obsessed over work with no breaks.

[cosmic pendant]

All of them

[eternal timber]

That’s true. Blame P. T. Barnum

[sand trench]

teaching basic internet hygine with privacy and security shadow somehow learnt

[rapid merlin]

My anxiety would be through the roof if I had to do cyber for bank

[sonic mango]

Just laughing at you two still discussing the whole comfort thing

[eternal timber]

Perhaps

[devout palm]

I like to do philosophy

[pallid lotus]

Hey, I just get to break stuff, and occasionally tell people how other people broke stuff. Good times

[eternal timber]

Did it consent

[pallid lotus]

Oh FFS. Not another anthropomorphised concept...

[rapid merlin]

I never break anything on purpose but I still break stuff. I don’t even know how I break stuff

[mossy river]

"you're only paying me how much!? I can see how much money you all have"

[sand trench]

shadow frequently "break" their toes

[pallid lotus]

So can everyone else -- our annual results were released last Friday lmao

[sand trench]

it is most likely a cordination problem

[mossy river]

I meant the individual employees not the bank 😆

[rapid merlin]

I asked my mum the other day how someone could possibly break their toe. I’ll finally get the answer 😂

[fringe nacelle]

Hitting the pinky toe against a corner while walking is peak pain.

[rapid merlin]

My mum is constantly watching hospital programs

[pallid lotus]

As a general rule, if you're trying to run a study, just assume Shadow will be an outlier and exclude from the results smh

[rapid merlin]

I’ve never broken a toe as far as I’m aware

I’ve broken my jaw and that’s it I think

[pallid lotus]

You ever tried dropping something really heavy on your foot?

Like, say, a piano?

[sand trench]

yes considering shadow either runs over their toes with something or hit table legs or chair legs or the corner of door frames at least once a week shadow is definitely an outlier in toe breakage

[pallid lotus]

It's fun

[rapid merlin]

They dropped a piano on their toe ?!?

[sand trench]

shadows dad dislocated his big toe by making a 5 meter drop with a ladder

[cosmic pendant]

This is a heartbreaking question. Should I return to using obsidan for my notes?..... Goodbye Joplin

[devout palm]

https://tenor.com/view/piano-gif-22243713

[pallid lotus]

No -- I did when I was a kid. Or, it slipped off its trolley and idiot over here was standing too close anyway.
Didn't break a toe, granted, but boy did I lose a few nails...

[pallid lotus]

That's a keyboard. A synth if it's lucky

[rapid merlin]

I am forever hitting my head but not my toes.

I must lead with my head

And you lead with your feet

[devout palm]

Fine, that would work too xd

[shut hawk]

Yes

[pallid lotus]

Not really. Those are generally portable

[sand trench]

the ladder basically slid against the driveway out from beneath him

[shut hawk]

https://tenor.com/view/doja-cat-star-wars-gif-25078126

Join us, Toast

[pallid lotus]

Trilium

[cosmic pendant]

OHnn noooooo

[devout palm]

Portable enough to hit with it

[pallid lotus]

Sod Obsidian and its plaintext crap

[sand trench]

neovim best note taking app :P

[rapid merlin]

I’ve lost one nail and that was when I closed my thumb in a car door 😦 that one hurt

[fringe nacelle]

Use Nano for notes

[pallid lotus]

Same problem... amongst literally dozens of others

[sand trench]

naaah neovim has plugins for database queries and stuffs

[devout palm]

Obsidian is good

I use it

I just want to edit text that's all

[sick lance]

It's a nice night for a hottub

[shut hawk]

Haha you know what's hilarious, I was doing some cyber material today on a laptop that I had just setup with obsidian and my notes on.

So imagine typing away, absolute doddle, no issues. You then start to type in <?php system($_GET...and suddenly hear a "DING" - awh crap. You see the little notification pop up and have a couple seconds to say farewell to your note

[devout palm]

Lmao

[loud marlin]

how do i prevent external usb drive to poweroff or whatever is to make them not go to sleep if un-used?

[devout palm]

Damn defenders...

They wouldn't let the king enter the castle

[sand trench]

well it is not like it is hard to setup a folder that is excluded from anti virus

just maybe not the best idea for most

hence why we recommend trilium

[devout palm]

That's dangerous

Malware can scan for excluded folders and use it

[sand trench]

trilium uses a database hence it gets around the problem of storing the things in plaintext

[devout palm]

Actually they do, i saw somewhere

[sand trench]

hence why shadow said it is not the best idea for most

[tranquil comet]

Hows everyone doing

[rapid merlin]

Sleepy but no time for sleep

[sand trench]

technically you should be using: https://github.com/TriliumNext/Notes instead of old trilium

as well things got weird with maintaining and maintance

[shut hawk]

https://tenor.com/view/uhm-meeting-3-hmm-meeting-hmm-pepe-pepemeeting-gif-3714368513695129278

[dark mason]

I am gonna get so much hate for this

CherryDB

The best

[shut hawk]

it's good until you get a large amount of notes and it can't handle anymore

[rapid merlin]

What is that?

[dark mason]

It's good for taking notes

Comes pre installed with kali

[steady hollow]

is there chance to move up in the ubuntu server? to see the terminal output?

[sand trench]

if you use ssh and/or tmux while connected it should be simple scrollback length

[rapid merlin]

Ohh okay, now I remember. Never really used it.

Trilium looks a-lot like Obsidian tho.

[naive violet]

Generally best to use a pager like Less if you're in a plain command line

[shut hawk]

You can use page up/down key and home/end

[eternal timber]

Obsidian is awesome

[devout palm]

I am not fan boying a text editor xd

[sand trench]

vim
or
emacs???

[eternal timber]

I love the graph view

[devout palm]

Vim

I would say

[rapid merlin]

neovim imo

[sand trench]

https://xkcd.com/378/

xkcd: Real Programmers

Real programmers set the universal constants at the start such that the universe evolves to contain the disk with the data they want.

[dark mason]

What is that

[sand trench]

graph view in obsidian

[dark mason]

Ah

[orchid dome]

How long did it take?

[eternal timber]

I’ve been using obsidian for close to 2 months now

@orchid dome

[tranquil comet]

I am glad i am slowly getting these commands, feels sometimes i will never keep them in my head

[dark mason]

New to linux?

[orchid dome]

You spun this chaos of a web in just 2 months? 🫡

[orchid dome]

Its the best thing when you get used to it, you feel like you know something😅

[tranquil comet]

Relatively new, its the things like deploying exploits like in the Vulnerable and Outdated Exploits lab in OWASP

[eternal timber]

I read a lot

[tranquil comet]

using the terminal is like i learn something then for some reason it slips

Feels like wheels spinning in sand

[orchid dome]

Using it with consistency is the key

Keep at it 💪

[tranquil comet]

I will do that. I am doing the tasks and i feel like sometimes i am stupid

lol

I am like should i know something or did i forget :/

But i will keep trying

[orchid dome]

Just revise from time to time, otherwise it will all be for a naught

Like you completed a module today, revise it briefly after 2-3 days and then after a week and then after a month

[gleaming grove]

OverTheWire - Bandit is a great way to learn linux commands!

[orchid dome]

Interestingly, I was introduced to overthewire before THM but I didn’t really spend much time there

I will go back and complete it, it has some 30 levels I think

[tranquil comet]

I will

[gleaming grove]

me too, i started with bandit, waaay before thm

[gleaming grove]

yes, like 30 levels aprox

[orchid dome]

How do you play things on Discord or atleast connect them? Like it shows you are using obsidian.

And its purpose? 💀

[carmine tinsel]

Anyone familiar with pentester labs, are their resources helpful

[crystal flower]

how do I verify

[rapid merlin]

settings > activity privacy > on

[gleaming grove]

hm? its just an obsidian plugin called discord rich presence

[pallid lotus]

Trilium >>>

[rapid merlin]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account~

[crystal flower]

ty

[rapid merlin]

You can do that in Obsidian also.

[pallid lotus]

I know

[dark mason]

[rapid merlin]

Gorgeous though.

[dark mason]

What the fuck this that

[pallid lotus]

My notebook

[carmine tinsel]

It looks like a hairball

[dark mason]

That...

Notebook-

God have mercy on my soul

[dark mason]

400 MiB?!???!

[mossy river]

Created at 1am is 100% me suddenly deciding to organise my notes

[rapid merlin]

Not mine but it's gorgeous.