general

[half girder]

ahhh ok, was a bit confused ^^

[crimson rain]

ohh yes! Okay

I mean, they still use that name in certain parts of it.

[orchid dome]

It was supposed to be a joke but only Duolingo users would get it 😅

Isn’t it still Mozilla Firefox?

[half girder]

fun fact, i use duolingo but for welsh ^^

[blazing granite]

Navigator, Comunicator, Netscape 4, 5, release of the source of Netscape 5, Mozilla, then was a split between browser and mail that's who Firefox and Thunderbird were born

[crimson rain]

Oh, okay! Do you have an AI integrated into your brain or something like that? xD

knows a lot

[blazing granite]

because the project was called mozilla, then when spilt the browser from the mail, was firefox

[orchid dome]

There will be some famous sentence for welsh as well.

In Japanese, its “Ocha to Gohan kudasai”
“Tea and Rice please”
Lol

[orchid dome]

You sound kinda old

[half girder]

might be, im kinda blind to such patterns

[blazing granite]

I guess we can called it years of experience I lived through the process

[crimson rain]

hmm today I learn not to say that

[orchid dome]

I remembered that father son video.
Son goes likes “how old are you dad”
Dad: “47”
Son: “what was it like being a slave”

[blazing granite]

and you sound like a child pointing that out.

[orchid dome]

Hahaha

I pointed that out on purpose cuz we were just discussing how its rude

💀

[eternal timber]

In a meeting with 2 hours of sleep

[inner goblet]

Anyone ever been on netcad.com? The whole place is constantly reloading the page

[blazing granite]

that's actually my point, those are the actions of a child, a grown person would just join the conversation, and wouldn't mind about old or young

[devout palm]

Easy to speculate any word. Calling someone old doesn't necessarily imply negative connotations. It can be perceived as that, but being offended by it seems very illogical to me.

You can call me young. It is true and i am not offended by that. I don't care about social perceptions. Because you can interpret things one way around. Really up to your creative mind xd.

This discussion is unrelated to individuals talking here. Please don't get offended.

[crimson rain]

it was probably just a playful remark to keep things fun.

I wanted to know if it's better to use a personal virtual machine or the machine offered by TryHackMe to complete the challenges?

A personal machine seems more fun.

[whole yew]

It's completely your call. If you are not a subscriber, I think you can only use the THM attackbox for 1 hour per day

[crimson rain]

I'm a subscriber

[opaque flax]

Personal machine is more fun imo

[crimson rain]

yes thats what I was thinking

[opaque flax]

And you don’t deal with the laggy ness of an in browser attack machine

[crimson rain]

yes okay cool !

[blazing granite]

make sure you have all the tools you need

[crimson rain]

with kali-linux do you think it enough?

I'll install them if I see they're not there.

[blazing granite]

if you install the default set of tools you should be ok,

[eternal timber]

man

kept spacing out

[blazing granite]

just check, some rooms may have some special tools, but everything is downloadable, it's just a matter of convenience

[crimson rain]

Okay, yes, I have that! I created a Kali Linux clone machine in case something goes wrong. So, I have a "ready-to-go" one.

[sand trench]

apparently command and conquer has released from EA as open source now

[sick lance]

60 mins or one boot up.

[inner tendon]

Fav Time

[shut hawk]

yep the code

[eternal timber]

Yeppers

[sand trench]

new era for modders is here then

[inner goblet]

I have my username and password back😊

[sand trench]

congratz

[rapid merlin]

Bed is toasty

I’m sleepy

And hungry

[blissful snow]

yo

[elder peak]

yo

[blissful snow]

hru

[hollow nebula]

hey ppl. so i'm preparing some proof of concepts and examples of written reports of vulnerability assessments and pentests as examples of work i could perform as apart of my resume and letter of intent. anyone have any suggestions on what kind of work should go into a portfolio such as this?

[dusky matrix]

How do I hack

[silk coral]

I got some questions. Is there an equivalent of a Full Stack Web Developer like someone who can do Front End and Back End but for Cyber Security, like someone who can do Red and Blue team?
Also is it similar to coding where u can learn the basics enough to the point you can look up anything you don't know.
My final question's being if there is Red Team freelancing or if I need a college education to land a job in the field? Is there a way to build a portfolio or showcase your skills without college education?

[elder peak]

doing well, hru

[dusky matrix]

How do I hack?

[elder peak]

#start-here

[rapid merlin]

Ping IP

🤣

[dusky matrix]

Wait so how do I have bedwars roblox

[tame abyss]

hello

im back

[dusky matrix]

Hello

[tame abyss]

hi

[upper minnow]

Theres no "purple team" role, but a good red teamer should know his blue stuff and vice versa

[dusky matrix]

😭

[upper minnow]

Its gonna be a lot harder to get a job without college

You maybe could start as it help desk and go from there

[elder peak]

What is that

[dusky matrix]

Um I was told that this server is for hacking Roblox

….

[upper minnow]

Its not

[dusky matrix]

Oh.

.

Do yall know how anyways?

[upper minnow]

Why do ppl keep saying its for roblox

[elder peak]

Incorrect

[upper minnow]

Who is telling people that

[dusky matrix]

Um idk

But do yall know how anyways

[finite tulip]

no?

[dusky matrix]

Uhhh ok ima just go then……….

[tame abyss]

so what should i do on linux? im using penguin rn anybody got ideas?

[rapid merlin]

Adios

Amigos

Anyways, someone make me not be lazy. I’m hungry in bed rn

[finite tulip]

For the third time, there is no "penguin linux" The penguin is a symbol of linux

Also, go take a basic tryhackme course (path)

[tame abyss]

omg you know what i mean (its not entirely my falt i dont know the right terms)

[shell peak]

Wash ur cpu socket

[elder peak]

https://tryhackme.com/module/linux-fundamentals

[tame abyss]

ITS NOT HACKING LOL!!!!

[tame abyss]

thank you

[twin ridge]

Gave +1 Rep to @elder peak (current: #300 - 22)

[crystal flower]

it will make its very barebones and fast

[elder peak]

How's your kittycat?

[shell peak]

No preserve root is missing

[narrow zealot]

you forgot --no-preserve-root, king.

[crisp creek]

it's like asking 'how can i upgrade my four-squares10 to four-squares11?'

[tame abyss]

ido that each time i open it up or make new tab in terminal

[finite tulip]

scrubz is watching lol

[crystal flower]

https://tryhackme.com/module/linux-fundamentals

[tame abyss]

sudo apt update

[crystal flower]

some actual advice just do this module

[tame abyss]

sudo apt install

then check flatpak

[crystal flower]

oh r u using a debian based distro?

[finite tulip]

They are probably still using ChromeOS 😭

[silk coral]

Is Red Team more popular then Blue team? Red Team sounds cooler to me then defending and preventing.

[tame abyss]

no clue i opened up the terminal app on my chromebook pressed button and this is what my thingy looks like: jmoody1@penguin:~$

[tame abyss]

yep i am

also im not hacking im trying to turn this crappy little shit box into a gaming chromebook and linux is kinda my only way

lol

they can kiss penguins arse

[crisp creek]

did you get the chromebook from your school?

[boreal scarab]

@loud marlin @glass nest https://www.reddit.com/r/3Dprinting/s/G4PNZpRnAw

[tame abyss]

yep im on it now discord i could only get through linux install also i think i installed tor on it?????

[upper minnow]

Yeea pretty much

[sick lance]

@crystal flower Don't post harmful commands in chat.

[sick lance]

Is the chrome book yours?

[tame abyss]

schools, were allowed to game on them but the best gaming apps are blocked

schools

i awnsered lol just forgot the ,

[crystal flower]

mb

I did mean to but like im sorry

[sick lance]

Probably a good idea to bypass their restrictions,.

Not to*

Since it's not even yours.

[crisp creek]

sometimes it's good to not listen to these intrusive thoughts 😄

[crystal flower]

is this good?

[grim fern]

Hello guys i need some help with a survey , can yall help me get some responses ?

[sick lance]

No, for privacy of our members, I ask you don't send the survey in here, nor ask our members.

[crystal flower]

hey I want to lvl up hella in THM but like whats the most best way of lvling up fast

[grim fern]

Ohh okay sure

sorry about this

[rapid merlin]

Big boy

[sick lance]

Doing rooms.

AoC rooms give alot of points.

[half relic]

AoC

?

[sand trench]

advent of cyber

[half relic]

ah

[polar turret]

Hi

[half relic]

i think i'm almost done with cyber 101

hi

[polar turret]

Is anyone else running a VMware hypervisor?

Or a virtual box ?

[grizzled wing]

i use VMware

[polar turret]

@grizzled wing im having trouble downloading the hypervisor.

[blissful snow]

virtualbox is slow

[polar turret]

Is something wrong with the website?

[polar turret]

I know. That’s why I’m trying to get VMware

[blissful snow]

ah

[grizzled wing]

what are your troubles with downloading VMware?

[outer rivet]

https://tenor.com/view/wakey-wakey-bingus-time-for-school-gif-19250994

[flint sluice]

It was a struggle trying to get VMWARE fusion.

[outer rivet]

@fervent meteor

[flint sluice]

Broadcom is dumb.

[grizzled wing]

no issues for me when i downloaded and installed years ago

[flint sluice]

Things change. Broadcom has it behind a wall of red tape. Frustrating to get now.

[grizzled wing]

ah ok, makes sense i got it before the merger

[tame abyss]

yep

hey question

[proven quartz]

The points are explained here:
https://help.tryhackme.com/en/articles/6563910-points-explained

[tame abyss]

i installed Tor on my linux how do i actually use it?

[mossy river]

There are archive links that go directly to the setup downloads if you still need to download it
I believe I have one of them somewhere, I can send it over if you'd like.

It's honestly really silly and pushed me away from VMware, no matter how much I love their Software

[rapid merlin]

I love hairless cats

So cute

Like a chicken wing

[elder peak]

This may help @polar turret

[mossy river]

I don't know if VMware works without a license key anymore?

[elder peak]

If you make a broadcom account, you can download/use vmware workstation pro for free.

[mossy river]

I couldn't get to the download page, said I needed my account to be verified or something or other

[shut hawk]

Ja I do that

I just have a USB with a ton of app installers (setup.exe)

and vmware was thankfully there

[elder peak]

I remember having that issue among others, I ended up watching a yt tutorial and got it downloaded

[polar turret]

I cant even find the download file

[fringe nacelle]

I just used a github to get my vmware, it works without a key.

[mossy river]

I hope it was from the official VMware Github and not some dodgy random one 😆

[elder peak]

Search yt for a vmware tutorial, it will walk you through making acc. signing in. finding the correct download page/file etc.

[fringe nacelle]

I hope so too, it's been a while since I did it lol

[flint sluice]

They required a proper physical address but they don't tell you if something is wrong with it, the page just refreshes and sends you back to the homepage after loading for a minute straight. You have to insticntly know that they can't find your address and theres zero information anywhere that it's the issue, at any time.

That was legit the issue. Address couldn't be found by their database.

Or their API etc.

[mossy river]

I'd just put the white house or something

[polar turret]

Can someone go to the VMware website and see for your self what the problem is

I did all the tutorials and reading on how to do it…..

[flint sluice]

You'd never know if anything in the address was bad or not found.

[shut hawk]

https://softwareupdate.vmware.com/cds/vmw-desktop/player/

Thank me later

[fringe nacelle]

ty later

[mossy river]

!remindme later

[grizzled wing]

🇸🇪 Sweden + Signal news, @sand trench
https://www.infosecurity-magazine.com/news/signal-exit-sweden-government/
so its not just in the news

[half relic]

thanks not sure if ill use it but im saving that link lol

[sand trench]

WELP FUCK

just when shadow was feeling good that they figured out which font they were missing on linux

[half relic]

aw man that's where my vpn is located

[grizzled wing]

at least Swedish Army opposes this, so may that is helpful

[outer rivet]

https://tenor.com/view/catdance-gangnam-style-cute-cat-gif-11020797830010762324

[rapid merlin]

Wait are they actually considering doing it everywhere else

I can’t with this planet

Someone get me off this effing planet

[sick lance]

France too

[rapid merlin]

https://tenor.com/view/spaceship-lego-space-astronaut-excited-gif-15000835

[grizzled wing]

🇫🇷

William Wright, CEO of Closed Door Security, said he finds it “concerning that authorities from two Western governments have requested backdoors into popular software in the last few weeks.”

[rapid merlin]

Nowhere is safe anymore

If you open back doors in security other bad actors are gonna find ways in

[sand trench]

it is crazy how few politicians seem to understand a backdoor in encryption would not just allow them in but basically any external countries hackers too

[rapid merlin]

What do we do

I’m panicking

[grizzled wing]

Swedish Armed Forces (Försvarsmakten) oppose such a bill.

[rapid merlin]

Ah yes let me join the army and face plant in the mud the first 5 seconds of me walking through the gates

😆

[sand trench]

at least they seem to have some sense when it comes to this

surprised that FRA and SÄPO have not commented on it too

[rapid merlin]

Do you think they’ll implement it in the other Nordic countries ?

[sand trench]

anyones guess really

[grizzled wing]

if 1 falls they all will

[tame abyss]

what command do i run to see if opera was installed on linux right?

[mossy river]

Why have law enforcement all of a sudden decided that backdoors are required

[sand trench]

apparently good old investigations no longer cut it D:

[grizzled wing]

hmmm, maybe because they have been breached

[rapid merlin]

Because they’ve decided everyone is scary and hiding something… apparently

[sand trench]

assuming debian based
sudo apt search opera

[sand trench]

well fair shadow has plenty to hide

[grizzled wing]

waiting for when 🍁 makes such a stupid move, maybe after the election and if Polievre wins

[sand trench]

does not mean they will share with you what they are hiding

[grizzled wing]

LibreWolf 🐺 is nice browser

[rapid merlin]

I am pretty transparent. That’s how I ended up here in the first place

[tame abyss]

thank you

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2107)

[rapid merlin]

😆

[sand trench]

no problem

[tame abyss]

👍

[mossy river]

Backdoors create breaches

[grizzled wing]

no one wins in such a case for back 🚪 s

[sand trench]

exactly

[rapid merlin]

They once sent out a police officer to talk to me about cyber and I knew more than him. This was a couple months into studying. I think the gov don’t really know what they’re doing

And they’re surrounded by yes men

This is really dangerous

[sand trench]

yeah it sure is dangerous

[tame abyss]

i dont see any errors but now how the heck do i open it? open opera

[grizzled wing]

i dont think my gov't is well informed, their website sucks and is a whole rant i have on how behind everyone is on cyber security

[rapid merlin]

https://tenor.com/view/baka-gif-19268094

Me to them

😆

[grizzled wing]

BAKA = bake another knish Amanda

[sand trench]

check the app drawer/list thingy

guess shadow gotta figure out what representative to call again

[tame abyss]

uhhh command?

[grizzled wing]

BAKA actually means "fool" "idiot" in Japanese

[rapid merlin]

Yeah

[tame abyss]

im like useless cuz im learning 💀

[rapid merlin]

Exactly

[tame abyss]

excuse me sir?

[rapid merlin]

So you are not useless, you are very capable and you are learning

[tame abyss]

lol thx

[rapid merlin]

That was really bad timing 🤣 I was saying exactly to veggies description of bakka

[tame abyss]

should i put the code im looking at in terminal in here?

[tame abyss]

oh lol

[grizzled wing]

do you know how to make a code block?

[tame abyss]

me?

[grizzled wing]

like this

[tame abyss]

uhh no

[grizzled wing]

3 backticks

`

[tame abyss]

/// like this?

oh uh no

\\ like this?

[grizzled wing]

3 backticks start and end

[tame abyss]

///like this?///

tf

[grizzled wing]

use ` *3

[tame abyss]

'like this*3

[grizzled wing]

type `

[grizzled wing]

🌋

cool emoji for it

🛶 🌋

[half relic]

its the key in the top left with the squiggle

[grizzled wing]

squiggle ~

[half relic]

well it probably depends on which keyboard layout you are using

but that's where it is on mine

[grizzled wing]

the key that takes you home

[rapid merlin]

This messed with my brain so much that I must have read that five times and still had the picture of a boat

[half relic]

i wish it did that on windows. i could probably find out if i wanted to but now i dont' kow where my desktop is

if im trying to naviage to it outside of explorer lol

[grizzled wing]

dir

[half relic]

wait

[grizzled wing]

C:\Users\Chimera

[boreal scarab]

Cheers

[half relic]

it is there why was it not there m

mabe im crazy

lol

[shell peak]

Cheers

[rapid merlin]

‘’’boat’’’

[half relic]

seems i was on my laptop in y home directory an i was just trying to cd to desktop and it wasnt' there

[rapid merlin]

Nope

I can’t do it

😆

[half relic]

and i thought that meant that windows moved it to programdata or something lol

but i formatted that pc so now i can't look

[rapid merlin]

The only exciting thing that happens at a pub is when someone drops a glass and everyone goes UERGGHJHHHHHH

[half relic]

this pc has the same version of windows and its there though

[shell peak]

Only exciting part is the drinking part

[sick lance]

Wrong back ticks.

[boreal scarab]

https://cdn.discordapp.com/attachments/1273786089764819076/1345444650495774720/image0.gif

[tame abyss]

'''code block?'''

[rapid merlin]

I don’t like a lot of alcohol, I drink once a year

Or smth

I like fruity drinks

Most feminine thing about me

[blazing granite]

Paulaner great beer

[tame abyss]

code block

[boreal scarab]

Amen, tastey as fuck

[tame abyss]

wtf!!!

[rapid merlin]

How did ye do it ?!

[tame abyss]

im checking google

[boreal scarab]

Love all their beer, just not a fan of pils

[half relic]

apparently it is possible to move it so maybe its just something hp did on that specific laptop or something

[shell peak]

I drink whenever theres a chance

[tame abyss]

it wont fin work gdm it!

[rapid merlin]

Well at least you’re honest

[boreal scarab]

Huh?

[rapid merlin]

Ya made it bold

bold

Nope

I messed up again 🤣

[tame abyss]

three of them

[blazing granite]

the best one is the weizenbier

[grizzled wing]

markdown

[rapid merlin]

~bold~

[silver sky]

[rapid merlin]

Nope

[half relic]

does this work

[grizzled wing]

mark it down

[half relic]

i didn't know you could use markdown in discord lol

[lusty tusk]

###Mark

[grizzled wing]

Chimera is purple

[silver sky]

yeah man

[rapid merlin]

That I like fruity drinks

[tame abyss]

(''')code block?(''')

[rapid merlin]

@silver sky what do you think it is then

[tame abyss]

(code block)

tf

[grizzled wing]

`

`

[silver sky]

I thought you would have been more of a beer person idk why

[rapid merlin]

###mark###

Nope

[half relic]

|| hidden||

[grizzled wing]

[space] between [space]

[rapid merlin]

Because I dress like a boy

[tame abyss]

😭 im useless lol

[rapid merlin]

That’s okay we are useless together

[grizzled wing]

i thought it was simple explanation

[rapid merlin]

Noobsquad

[shell peak]

Y?

[lusty tusk]

Mark

[half relic]

at least you are trying to learn things

[silver sky]

Your words not mine 😂

[half relic]

can't learn anything if you dont' try

[lusty tusk]

I missed the space.

[sand trench]

anyone wanna guess if shadow calls their politician representative right now if it will go to voice mail???

[grizzled wing]

voice mail

[rapid merlin]

I’m literary sitting in trackies man splaining and no one is gonnna stop me

[lusty tusk]

https://tenor.com/view/omniman-fortnite-dance-emote-nolan-grayson-gif-568288613121490887

[silver sky]

I'm also sitting in trackies drinking chocolate milk 😂

[sand trench]

yeah probably better to call tomorrow some time

[grizzled wing]

kamma likes that comic character

[grizzled wing]

but you are angry now, so call now before you get busy

[rapid merlin]

Chat gpt got my back

bold

[sand trench]

well it would not be the first time shadow has done this kinda calls :D

[rapid merlin]

Damn I want chocolate milk

[grizzled wing]

i used to send customer complaint emails

i got free box of granola bars one time

[rapid merlin]

text

[sand trench]

most of shadows complaints and asking for signing or not signing has been for the EU decleratives though

[rapid merlin]

ohhhh

[half relic]

print (hello)

[sand trench]

this is a weird line of text

[half relic]

no that didnt' work

[grizzled wing]

if you state what language after the 3 ticks it colors the code

[half relic]

that's why i was trying to do

[grizzled wing]

v = "hello"

[rapid merlin]

Hold on I don’t have backticks on my phone keyboard

[half relic]

print ("hello")```

there

[rapid merlin]

Oh wait

[sand trench]

```python
print("hello world")
```

this is how you would do it

hate to type these out as it requires so many escapes

[lusty tusk]

That's what I thought I did ;-;

[half relic]

i forgot to put the string in quotes lol

[rapid merlin]

whoever threw that paper

Haha

[lusty tusk]

'''Am I dumb?'''

[lusty tusk]

Yes. The answer is yes.

[inner goblet]

Which is better? Kali, parrot or black arch?

[grizzled wing]

had no idea this would be a 🧵

[drowsy dust]

Kali

[grizzled wing]

use whatever you like

Parrot is solid distro

[half relic]

for what

[inner goblet]

Which is strong?

[grizzled wing]

your choice

[half relic]

I've never used parrot

[drowsy dust]

Parrot is nice yeah. I love the encryption

[crimson rain]

kali

[inner goblet]

Hmm

[crimson rain]

kali is sexy yk

[grizzled wing]

make your own conclusion and opinions

[drowsy dust]

Get Kali purple

[half relic]

i just meant it probably depends on what you are using it for

[grizzled wing]

try out the distro

[half relic]

i used arch at one point an it broke when i updated it when i was in a hurry that was a pita

[lusty tusk]

I figured it out

[crimson rain]

where is my friend @blazing granite

[grizzled wing]

use linux mint for hacking, all of the tools can be installed

does not really matter

[half relic]

not that its bad you just have to be prepared a lot of configuration

its been like 10 years though and i probably forgot how to do it though lol

[inner goblet]

What the difference?

[grizzled wing]

i have a install bash script to install the things i like on a new machines

[inner goblet]

I’m feeling red..

[half relic]

i like how ubuntu just works

[grizzled wing]

nothing other than the color

[boreal scarab]

You mean hefeweizen

[lusty tusk]

Why does discord have so many updates?

[half relic]

i went backwards some people say you should try ubuntu first to get used to it then move to arch or something but i tried gentoo first and i actually think its not a bad idea to do that cause then you already know what it can do after you get it installed

[grizzled wing]

because its software and needs work

[half relic]

gentoo is not very practical imo though

[grizzled wing]

never tried gentoo

[lusty tusk]

I mean, yes, but it's everyday out here.

[half relic]

i loved it as a first linux disro though

[drowsy dust]

Kali purple has both offensive and defensive tools installed

I like it better

[inner goblet]

More than Kali?

[grizzled wing]

it gets annoying at times, but i like seeing people are pushing updates, makes me feel good

[drowsy dust]

Well it is Kali but it just has defensive tools too hence it being purple

[grizzled wing]

you should just use Kali since you keep mentioning it in chat. give a try

[inner goblet]

I forgot how to download Kali

[grizzled wing]

/downloads

[half relic]

you just download the iso

[lusty tusk]

I guess I might be glass half-empty because it makes me think they got a lot of problems with what they push out, haha.

[grizzled wing]

or the pre configured VMware box

[drowsy dust]

You doing virtual machine or a full OS install on your laptop or computer?

[inner goblet]

I asked which is better because I looked at a career that has different requirements.

[sand trench]

In a letter to the government, the Swedish Armed Forces writes that the bill will not be realized “without introducing vulnerabilities and backdoors that can be exploited by third parties”.

[inner goblet]

Virtual machine

[grizzled wing]

i am used to seeing it update ,same with my browser

[crimson rain]

wait I never heard or kali purple

seems pretty nice

[grizzled wing]

okay, any job will use linux, which does not matter what flavour of linux you use. Arch is the same as Kali - in terms of how to use linux

[inner goblet]

Exactly see

[half relic]

i really hope it isn't passed

[drowsy dust]

Cool, you can download a preconfigured machine for your hypervisor to make things smooth on their website. Depending what you are using download the corresponding one

[half relic]

i hate politics lately I hope its okay to say that and nothing else

maybe i shouldnt' even say that

[sand trench]

ditto and shadow will talk with a representative at minimum to voice their concerns

[inner goblet]

Oh I see on the website

[lusty tusk]

Kali makes it eeeze

[inner goblet]

I want to get certified in cyber security analysis early. Like tomorrow.

[crimson rain]

damn

Good luck

[grizzled wing]

rushing gets you nowhere fast

but you will just "grind and make it work" i suppose

[crimson rain]

Liking what you are doing is better

[drowsy dust]

What cert? It’s gonna take a while to fully grasp the way they want you to answer the questions. I.e comptia has their own methodology

[inner goblet]

It’s not rushing I can hold information well.

[rapid merlin]

This is facts

[blazing granite]

Hefeweizen is a type of weizenbier 🙂

[grizzled wing]

sure you can hold 5 GB of knowledge

im wise enough to just say you do whatever it is you want to do

[inner goblet]

Idk if I can say it here but it’s through Cisco. Self paced and include 32 labs. 70 hours of class then the exam.

[inner goblet]

Thanks.

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #41 - 223)

[drowsy dust]

Nice! What Cisco cert? Cisco is a reputable brand to get one from so good work

I want to get a cloud cert from azure or AWS but I’m conflicted still on what one I should do

[inner goblet]

Junior cybersecurity analyst certification

[drowsy dust]

Nice! I hope it helps you :)

[crimson rain]

Do you guys think doing certification is better then going to school?

[lusty tusk]

Why not both?

[half relic]

I have no idea

[drowsy dust]

Depends what your employers want. Experience is number one though

[inner goblet]

I know I can do the 70 hours and 34 labs. If I pass the exam and get certified I know I will never stop learning, but if I get it then I’m happy to start a career being an analyst.

[half relic]

i was gonna say that but then i remembered my student loans

[crimson rain]

Im doing both

was just wondering 🧐

[drowsy dust]

Wishing you the best dude

[crimson rain]

10 opinions is better then 1

[lusty tusk]

Same. I'm in my second semester of college. I have Sec+ scheduled at the end of the month

[drowsy dust]

You’re doing awesome then :)

[crimson rain]

fresh

[drowsy dust]

Make sure to take advantage of internships while in school

It’ll propel you

[inner goblet]

I have a bachelors in sociology and I’m only 23. What got me interested in cyber security was watching a show called “YOU” and Joe mentioned Kali Linux so I looked it up and it brought me here.

[lusty tusk]

For sure. Most of them require you're in a bachelors program, so I'm trying to transfer for fall

[drowsy dust]

Yeah that’s something that upsets me man. It’s so hard to find internships without that qualification

[drowsy dust]

Glad you found something that interests you. It took me forever to find this path. Well worth the journey

[lusty tusk]

I know. I was going to just do my associates, but from what it looks like in the past year most jobs require a bachelors in compsci.

[lusty tusk]

That and the internships as well, so it seems like the best path.

[drowsy dust]

Yeah all the special people aren’t special anymore lol. Gotta pursue the best of the best as a minimum now. Really sucks

[lusty tusk]

Exactly. I'm hoping having my sec+ will make me more interesting for internships as well. We'll see though.

[drowsy dust]

You got this bro 💪

[lusty tusk]

Thanks man, I always know I can come to you for motivation 🫡

[twin ridge]

Gave +1 Rep to @drowsy dust (current: #149 - 54)

[tame abyss]

code block

YES! I DID IT!!!

[lusty tusk]

Nice

[tame abyss]

it took me too long to figure out how to make a code block 😭 im a discord noob

[fallen remnant]

At least you figured that out yourself 😂

[tame abyss]

i had help and i had to spend like 15 minutes trying diff things before i checked google

lol

i didnt know what a backtick was

i think i installed opera on my linux??? maybe? should i show the code?

i need help figuring out how to open it i dont see any error msgs either but im still learning linux

[formal steppe]

hi i have a question does anyone know what ai will be capable of after 10 years ?

[lusty tusk]

Like the browser?

[tame abyss]

a lot it depends on how much its used and how much people decide to work on it not to mention the machine learning aspect

[boreal scarab]

Desktop updated yesterday. Now my graphene phone is all up to date

[formal steppe]

i mean the impact of it , will it replace some jobs ??

[pseudo egret]

maybe

[pseudo egret]

Like software development

[lusty tusk]

If you want to see if you installed it you can run dpkg -l | grep opera I'm still fairly new to linux as well but I believe that will show you.

[tame abyss]

ok thank you

[twin ridge]

Gave +1 Rep to @lusty tusk (current: #1077 - 4)

[tame abyss]

how would i open and run it? 💀

[lusty tusk]

Might be different based on your distro. I'm not sure which one you're running.

[formal steppe]

and what will happen if humans create a robotic quantum ai ??

[lusty tusk]

I could definitely help you, but the best way to learn is to research how to do things like that.

[pseudo egret]

Quantum computers are expensive i guess so there is time before that happends in tha case of ai or robots

I don't think that it would come in next 10 or so years

If the success of ai increase tremendously it may happen in 5 or so years

[boreal scarab]

https://thehackernews.com/2025/03/mozilla-updates-firefox-terms-again.html

@sand trench

[gaunt sparrow]

Yeh

[sand trench]

yeah

[pseudo egret]

Hey how do you guys have the thm account levels displayed in the profile ?

[lusty tusk]

Whoops. it's in #start-here

[half relic]

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

you have to verify

[tame abyss]

penguin

[lusty tusk]

Okay yeah, than that command would work.

[tame abyss]

ok what is the symbol after dpkg -

[lusty tusk]

the letter L, lowercase

[tame abyss]

oh mine looks like 1

[lusty tusk]

-l is the same as typing in --list. So in that command you're pulling up a list of all the debian packages installed on your machine. The | is called a pipe, and it's piping the output command to the next command which is grep. Grep is a way to search the output, and in that command we are searching for opera

[tame abyss]

ii  gpg                                              2.2.40-1.1                                amd64        GNU Privacy Guard -- minimalist public key operations
ii  libostree-1-1:amd64                              2022.7-2+deb12u1                          amd64        content-addressed filesystem for operating system binaries (library)
ii  node-es-abstract                                 1.20.4+~cs26.27.47-1                      all          ECMAScript spec abstract operations
ii  node-retry                                       0.13.1+~0.12.1-1                          all          Retry strategies for failed operations module for Node.js
ii  opera-stable                                     117.0.5408.53                             amd64        Fast, secure, easy-to-use web browser
*******@penguin:~$ ```

[tame abyss]

where have you learned this? 💀

[half relic]

i used to use opera back when it had note taking features in it

and usenet believe it or not

[alpine shuttle]

could someone help me with connecting with openvpn?

[lusty tusk]

You can learn it all in the pre-security path on THM

[clear jackal]

For THM? #site-support

[tame abyss]

im unable to leave well enough alone so i have to do stuff to this chromebook and avoid the silly stock software lol

[pseudo egret]

Opennvpn ?

[tame abyss]

oh ok... guess i should probobly take it then

[half relic]

im not sure what opera has now

i use brave

[lusty tusk]

Yes, for sure. haha. Also just searching how to do things in CLI on linux and then trying to figure out how each part works.

[tame abyss]

dunno either lol just know its the "worlds best gaming browser"

[tame abyss]

good point. i was using ChatGPT with my coding but ive been told not to so im trying to ask Discord lol

[half relic]

there are sites like code acadamy

[tame abyss]

opera should open it up right?

[lusty tusk]

Using ChatGPT isn't bad if you understand what's going on. Like instead of copypasting ask for information on why it's doing everything.

[tame abyss]

free?

[half relic]

i would just get a book but that's what seems easier to me

[pseudo egret]

White rabbit neo is better than chat gpt

[tame abyss]

ok yeah

[carmine tinsel]

If you got friends who code, better to bother them

[tame abyss]

also good idea

[half relic]

its free

[tame abyss]

i dont sadly

[tame abyss]

ok

[half relic]

you have to figure out which langauge you want to learn

[lusty tusk]

There's also really good courses on udemy, or even youtube. There's a dude who makes 10 minute videos on every command.

[half relic]

python is pretty easy to start with

[carmine tinsel]

Try to only use chatgpt as a last resort, being an expert at googling will take you very far in life

[tame abyss]

linux

[half relic]

linux is not a langauge

[tame abyss]

ok who is he?

[tulip nebula]

Hi guys

[half relic]

there are several languages that you can run on linux

[tame abyss]

???

[half relic]

its an operating system

what kind of thing are you tryhing to make

[lusty tusk]

@tame abyss was just trying to install and run opera, haha

[half relic]

he keeps saying he was tryhing to make something on linux

[rapid merlin]

Damn 7!? And there was me just running English and sarcasm. Aha

[half relic]

i see though

[rapid merlin]

Ba dum tshhh

[half relic]

lol

[outer rivet]

https://tenor.com/view/discord-loading-screen-gif-21591154

[half relic]

wjhen i was little i used to think several meant 7

[rapid merlin]

It doesn’t ?

😅

[tulip nebula]

Guys and can't solve any easy challenge in tryhackme me I install now and iam end 25of cyber security and 100 of pre security

[tame abyss]

i was trying to make a web browser that was like a super bypasser

[rapid merlin]

Someone once told me a few meant two but a couple means two

[sand trench]

merpy morpy meep moops to the beep boops while shadow whadow sleep sloops

[rapid merlin]

And a few is more than two

[tame abyss]

kind just want to make websites tho

[half relic]

you were saying something like that

[rapid merlin]

Night night

Don’t let the bugs bite

[half relic]

if you want ot make a website there are a lot of languages like php python and nodejs that you can use

[tame abyss]

yeah... if i upload it to the web i might be put on blacklist

[half relic]

i dont' know if we can help with that lol

[tame abyss]

so wait wich one am i using?

[tame abyss]

yeah lol

[half relic]

im not sure that's why i was asking

php is probably the easiest i think but i could be out of date

[tame abyss]

so i opened up terminal pressed buttons and now when i open it i click penguin and it opens my terminal

[half relic]

https://www.w3schools.com/php/

[tame abyss]

idk

[half relic]

you can start there for an idea of what it looks like

[tame abyss]

thank you ppl why is there not a dedicated server 4 this?

[twin ridge]

Gave +1 Rep to @half relic (current: #808 - 6)

[half relic]

there probably is

[tame abyss]

i have not yet found one then agian discord noob

so wait if i put in opera would that launch it?

[half relic]

should

that's what i would do

[rapid merlin]

I have a sharp pain in my tummy 😖

[half relic]

aw

[tame abyss]

ok so if i put in Tor???

[rapid merlin]

God knows what’s caused it

[half relic]

i haven't used tor for several years and i just wanted to see what it was lol

i use a regular vpn now

for my laptop

[tame abyss]

opera works yay!!

[rapid merlin]

I don’t even know if vpns are actually good since good hackers can still track ya

[tame abyss]

i think i accidentially installed Tor 💀

[desert shuttle]

What browser do you guys use?

[rapid merlin]

Other than network chuck saying vpn in every video

[formal steppe]

brave

[half relic]

i use it mainly for my laptop

[pseudo egret]

Opera gx

For my main laptop

[tame abyss]

i use chrome os but just got opera running

[mystic hound]

Nation state actors already have all our info VPN or not.

[tame abyss]

uhhh

[half relic]

last time i used opera it was partially beacuse you could connect to usenet and i could ahve my rss feeds websites and usenet all in one place lol

[tame abyss]

Mar 02 18:42:46.048 [notice] Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.15, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc.
Mar 02 18:42:46.048 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/
Mar 02 18:42:46.055 [notice] Read configuration file "/etc/tor/torrc".
Mar 02 18:42:46.064 [notice] Opening Socks listener on 127.0.0.1:9050
Mar 02 18:42:46.064 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?
Mar 02 18:42:46.064 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.
Mar 02 18:42:46.064 [err] Reading config failed--see warnings above.
@penguin:~$ ```

[rapid merlin]

Yeah, so what do you do against corruption if that’s the case

[tame abyss]

ermm???

[pseudo egret]

Tor is a privacy oriented browser

[rapid merlin]

How to stay private

[half relic]

i am not gonna help you bypass your school proxy

and it probably won't work anyway

[pseudo egret]

Use tor

[mystic hound]

Like bureaucratic corruption? Just work inside the system.

Fill out your SF-86 if you’re in the US.

[formal steppe]

in windows i use brave in kali i just sudo systemctl start tor.service proxychains firefox

[rapid merlin]

Hm 👀

[pseudo egret]

What is that

[rapid merlin]

I’m not I’m in the uk at the moment

And our security sucks

[mystic hound]

It’s for security clearance.

[tame abyss]

wait but it doesnt shoe an error

[pseudo egret]

Ohh what does that do it clears your ip ?

[mystic hound]

No. It’s for highly sensitive government officials.

[cedar marten]

Hello

[mystic hound]

Like NSA, FBI.

[half relic]

hello

[pseudo egret]

Hey

[cedar marten]

I don't know how to speak much English

[mystic hound]

That’s fine. Welcome.

[cedar marten]

But I can't answer a question on the website

[pseudo egret]

Which language do you speak ?

[pseudo egret]

#room-help may help you

[cedar marten]

I speak Portuguese

[pulsar knot]

is there a way to get badges to generate with real name instead of username?

[cedar marten]

OK thanks

[twin ridge]

Gave +1 Rep to @pseudo egret (current: #2709 - 1)

[pseudo egret]

Didn't get you

[tepid citrus]

Which gpt model is the best for interview prep ?

[mystic hound]

You mean like the certificate of completion?

[pulsar knot]

yeah when you earn a badge from completing rooms or lessons

[pseudo egret]

I don't know any

[pseudo egret]

Completeing room will earn you badge

[tame abyss]

the interveiw model if you go into the sidebar on gpt you can find it i think

[mystic hound]

Yeah just change your "Full Name" entry in your Account Details.

[pulsar knot]

yeah but I want to know if I can change it from displaying my username to real name

[mystic hound]

It should generate based on taht.

[pseudo egret]

Take a look at chat gpt it may help

[pulsar knot]

I did that and it still generates the badge with username

[pseudo egret]

I think you can't

[tame abyss]

Mar 02 18:42:46.048 [notice] Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.15, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc.
Mar 02 18:42:46.048 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/
Mar 02 18:42:46.055 [notice] Read configuration file "/etc/tor/torrc".
Mar 02 18:42:46.064 [notice] Opening Socks listener on 127.0.0.1:9050
Mar 02 18:42:46.064 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?
Mar 02 18:42:46.064 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.
Mar 02 18:42:46.064 [err] Reading config failed--see warnings above.
@penguin:~$ ```

[pseudo egret]

Or just change the username

[tame abyss]

i dont see any error messages it should be working... how do i check?

[mystic hound]

Oh the badge, right. Yeah, I think that just generates solely based on your user. So you'd have to change that.

[pulsar knot]

https://assets.tryhackme.com/room-badges/382d83829c00b4216e0f48b6922ae7b6.png

[pseudo egret]

Change the username if you want

[mystic hound]

Shouldn't be a big deal though, if you have it linked to your LinkedIn, GitHub or some sort that should be fine.

[pulsar knot]

Yeah just thought it would look better on LinkedIn if it showed RealName

[mystic hound]

Probably. I'm not aware of how to do that though if that's possible.

I remember getting my Certificates of Completion with my full name though.

Just not the sharing badge achievement part.

[pseudo egret]

Yha that is possible

[pulsar knot]

OK so certificates will be in real name

[pseudo egret]

Yes

[pulsar knot]

good

that will do then

thanks

[mystic hound]

Yep, np.

[pseudo egret]

Hey @mystic hound you do bug bounty stuff ?

[mystic hound]

Nope.

I need to start exploring that at some point.

I've just been looking at diving into CCNA material.

[drowsy dust]

I like to keep my alias so people know my hacking name but up to you brother

Real certs I put my actual name on though

Like CompTIA

[mystic hound]

Yeah, GIAC certs, CompTIA, ISC^2, etc.

[pseudo egret]

Do you know any one whom i can learn with ?

[mystic hound]

Sadly, I don't know anyone. Although, Real-World Bug Hunting is a good book.

[full wave]

is cert matter? I don't have single one

[pseudo egret]

Ohh i will reffer it then

[full wave]

do I need one?

[mystic hound]

Employers value certs, so yes.

[pseudo egret]

It would increase the chances of getting a job

[drowsy dust]

HTB has a partnership with HackerOne for their bug bounty course. I would def check that out

[half relic]

i never got any cause they expire and and are expensive, but im not looking for a job right now anyway

[whole yew]

It's a mixed bag, honestly. Some employers value them, some don't. Usually the ones that do, don't value certs for the reasons one would normally think.

[cursive coral]

Did anyone take Cisco networking course? How is it?

[drowsy dust]

Experience trumps everything else

[mystic hound]

That's fair. I got my job because I had CompTIA and GIAC.

[whole yew]

Again, it usually does not. If the cert one has matches with the job req, then the employer might value that.

[mystic hound]

Like the net academy or their actual certs?

[cursive coral]

Netacadamy and cert both

[half relic]

I got mine becasue i could answer simple linux questions lol but its not the greatest job anyway

[mystic hound]

I think it's pretty good.

[half relic]

it just has work life balance i don't thikn i will find anywhere else

[pseudo egret]

Isn't that a bit expensive program ?

[whole yew]

The role of individual contributor certifications is for the business to demonstrate that the employee has expertise in a field, from an accredited source. Don't pay for certs out of your own pocket unless you absolutely have to have a specific one to get a job.

[cursive coral]

Okay. Great...

[mystic hound]

Though it's definitely geared toward Network Engineers. It really goes in depth on networking.

[drowsy dust]

I paid 8 bucks (student membership) to access everything in academy. Not bad at all

[mystic hound]

So, if that's not what you're going for, don't go for the cert at least.

[pseudo egret]

Usd ?

[drowsy dust]

Yup

[whole yew]

CCNA is probably the most useful cert you can have prior to working as a SOC analyst or engineer

[cursive coral]

Okay, so taking th lessons is fine, yeah I am definitely not going to be a network engineer...

[pseudo egret]

Ohh is there any discount for students in thm ?

[whole yew]

networking is fundamental to every operational security domain

[full wave]

is cissp hard?

[drowsy dust]

They have an annual subscription they give a discount to students for but nothing monthly

[pseudo egret]

What about pentesters ?

[crude stump]

What about security + since it’s fairly cheap

[whole yew]

CISSP requires a very broad knowledge. There's a reason it requires 5 years of experience to qualify for it.

[cursive coral]

Btw any book recommendations on networking..?

[whole yew]

Sec+ is ok, but I would not advocate spending money on certs as entry level. Certs are a game businesses play with customers

Don't know it.

[whole yew]

CCNA textbooks are a good place, although those are very Cisco specific. If you don't have an academic background, knowing how to configure 1 brand of routers, switches, vlan, etc, is better than not knowing any.

[pseudo egret]

What cert do you suggest for pentesters ?

[drifting violet]

hi guys, i was wondering, anyone remember what was the tool name which let you generate file to get session when file was uploaded..

[whole yew]

Experience.

[drowsy dust]

Network+, security+, OSCP or CPTS is a solid path for certs imo

[cursive coral]

I heard networking a top down approach is a nice book, but I never tried it....

[whole yew]

Pentesting requires a huge depth of background, and there are multiple areas of pentesting. I would not expect network pentesters to have the exact same skillset as ICS or app testers.

[drowsy dust]

Definitely agree

[whole yew]

If one is already in industry, yes. Without working experience, it doesn't look good to have advanced certs.

[pseudo egret]

Hmm thinks hands on experience first

[drowsy dust]

True that, experience trumps all

[full wave]

hey can u suggest some good cert for SOC and Cyber security analysts

[mystic hound]

Well, surely we need to promote SAL1 ey?

[whole yew]

Think "work as a sysadmin, net admin, or dev for at least 3 years" before trying to get a job as a pentester. At least a year as a security engineer or SOC analyst is also good.

[full wave]

I want to target for CISSP

[shy fjord]

y?

[drowsy dust]

Cysa+ would be good

[blazing granite]

y que? 😂

[pseudo egret]

Any company or so to start as a fresher ?

[whole yew]

So this is just my opinion, take it for what you think it's worth: if a certification doesn't have a proctored exam it doesn't carry any weight as a baseline for knowledge expectation.

[drowsy dust]

Definitely

[shy fjord]

OSCP doesn't have proctored exam?

[whole yew]

Security is all about the context of the environment. If you don't have work experience, you do not have any way to understand the context of all the pieces that go into a 'reasonable' enterprise IT environment.

[whole yew]

OSCP does. SAL1 to my knowledge does not.

[pseudo egret]

@whole yew any recommendation to start as a fresher ?

[whole yew]

A certification without a proctored exam is a participation award, and it's only good for CPE credit to renew other actual certifications.

I don't understand the question.

[drowsy dust]

They take their time to check out your results and give you feedback too. It’s a real blessing getting that feedback

[pseudo egret]

Any sites or company for a fresher ?

[whole yew]

Again, I don't understand what you're asking me.

[pseudo egret]

How can i gain experience

[whole yew]

Get an entry level job.

[inner goblet]

I’m updating Kali and it says “error failed to fetch” then it had the website and a lot of other stuff at the bottom

[whole yew]

Or go to university and get a Bachelor's degree.

[mystic hound]

I feel like this has gotten harder in recent times.

[drowsy dust]

Definitely start with the foundations if you haven’t already. Learn how computers work and networks then move onto whatever your target area of interest is and learn more

[full wave]

I am trying internship but not getting one maybe I don't have certs

[whole yew]

Sounds like broken kali repo. It happens sometimes if the VM is shut down mid-update, or if you've installed other repos to pull software from.

[cosmic pendant]

Most people in security don't know how computesr work 😦

[drowsy dust]

I would hope they do lol

[full wave]

thinking about building a home lab but things are very comlplicated if u work with mac

[whole yew]

In the US and parts of the EU, internships are reserved for current students. Certs don't help you get internships if that is the area you are looking in.

[half relic]

Engineers don't know how magnets work

[inner goblet]

The system fell asleep all times by accident. This my 3rd time trying now I don’t have space

[half relic]

but they still use them

I'm just being dumb

sorry im bored

[mystic hound]

That reminds me of the DOD's Cyber Sentinels challenge. There were people asking how to open a folder, hahaha.

[wary ocean]

"sir how do i turn the computer on"

[whole yew]

The game goes up, and the game goes down - but players got to play the game. I have seen a lot of entry level data center and help desk jobs. All you can do is keep looking.

[shy fjord]

I agree but if you have the knowledge to get a certification such as OSCP even if you have no experience, why not do it?

[wary ocean]

also i just got to plat 3 in marvel rivals

[devout palm]

It costs a lot and will not get you a job alone.

[whole yew]

Clear the cache, extend teh sleep timeout.

[mystic hound]

Well, employer can pay for it.

[pseudo egret]

I am looking for a job as red team associate and have completed the jr pentester course in thm

[shy fjord]

yes

[whole yew]

Employer should pay for it. Especially if the employer is going to use your skillset to sell services and products to other businesses.

[golden estuary]

uhhh can someone help me in my pc

[drowsy dust]

It’s gonna be a while until you get there unfortunately. Red teaming and penetration testing is very competitive. They want the best of the best

[crude stump]

Sadly I can’t get in your pc. Humans can’t do that

[pseudo egret]

Ok

[golden estuary]

currently being spied by another ip thats not mine

[mystic hound]

You sure it's not Microsoft? If so, that's normal.

[drowsy dust]

Keep up what you are doing and you will get there for sure. Specialize in what you enjoy most. Set yourself apart from others that way

[cosmic pendant]

Oh?

[golden estuary]

nope

[devout palm]

Can you elaborate on being spied?

[golden estuary]

not sure

[cosmic pendant]

how do you feel about installing an agent on your machine?

[wary ocean]

my problem is the fact that theres jobs all around, but theyre like an hour away 😭

[pseudo egret]

What about threat hunting ?

[crude stump]

How do you know Alpepe. How did you come to that conclusion.

[mystic hound]

Well, sacrifices can be made.

[whole yew]

My first job in industry had a 30min to 90 min commute each way. Sometimes you have to do it, assuming it's affordable.

[drowsy dust]

Defensive ?

[golden estuary]

soo my goofy ahh install a file for something thinking it was gonna be just microsoft antivirus freaking out about instantly injecting

[half relic]

that was my problem. i drove more than an hour to work for a few years before my job became remote

[pseudo egret]

Is that defenseive i thought it was offensive

[crude stump]

Hm so you downloaded a file. If defenders flagged it, it should have already cleaned it

[blazing granite]

@cosmic pendant 👋 how are you?

[cosmic pendant]

I'm good

[crude stump]

Nah

[drowsy dust]

Depends what you mean by what you said. threat hunting that I know of is defensive. You actively find threats that bypassed your defense

[cosmic pendant]

@golden estuary if you like you can DM me.

[wary ocean]

well its an hour for 15 bucks an hour, which imo isnt worth it

[drowsy dust]

That’s all relative

[wary ocean]

lenovo legion is pretty good

[crude stump]

Damn 3k for a laptop

[golden estuary]

you dont have public dm

[drowsy dust]

Tbh dude just spend 150 bucks on a used work laptop that is by far the best thing you can do. Unless you want some fancy laptop that can play high end games

[full wave]

mac. Trust me the best laptop

[boreal scarab]

My 2 cents, ask a school near you for old retired laptops. They just throw em out to Ewaste. They, atleast in my experience, don't care where they go.

[whole yew]

Did you tell them that you would make more working the line at macdonalds?

[boreal scarab]

Oh, I missed a whole convo

[crude stump]

That’s good advice tho

[mystic hound]

Dude, just do Data Entry lol

Do HIM. They pay well.

[boreal scarab]

Thanks

[twin ridge]

Gave +1 Rep to @crude stump (current: #63 - 139)

[drowsy dust]

Yummy rep

[wary ocean]

thats the problem they all are an hour plus away or require shit i aint got

[wary ocean]

i could just contact my staffing group and get paid 16 for hiding in the back of home depots warehouse 😅

[drowsy dust]

Lmao

[drowsy dust]

https://tenor.com/view/russian-saitama-opm-one-punch-man-bodybuilder-flex-gif-2462841191332517340

Working at Home Depot will get you ripped like this dude:

All that walkin

[wary ocean]

not even close, all i was doing was scanning boxes of screws

and putting them on carts

[drowsy dust]

Rip

[boreal scarab]

Even old corporate laptops like, I have a retired Lenovo T440s from my old job I got for free. Love the little thing, really nice amount of ram, CPU, meh, does it what I need it to do.

But asking School IT for old retired machines is my 2 cents. Asking corporate IT for old retired machines, they may get suspicious. (Remember kids, take out corporate laptop drives and mark them for destruction)

[half relic]

my company was terrible they didn't even wipe the disk

[wary ocean]

same

[orchid dome]

True

[half relic]

some of the laptops i got haqd a sticky note with a password still in it

[mystic hound]

So, same standards as the FBI?

[boreal scarab]

Oh no, no no no no no no. Bad company

[wary ocean]

the old warehouse i use to work with wanted no phones, no eletronics, shred all the data from amazons servers

[half relic]

yeah it doesn't exist any more though

[wary ocean]

but yet their laptops would be fully in tact hard drives

[orchid dome]

Straight out of movies 💀

[drowsy dust]

Yeah I was about to say. That company’s fucked lol

[inner goblet]

I deleted and set up my Kali and virtual box again🤦🏽‍♂️

[drowsy dust]

How’s it going?

[boreal scarab]

Mine, if we retired a machine, we HAD to take out the drives, put em in a box to be shredded later on.

Hell, they were all bitlockered, so you would need to put it in the correct laptop. And even then, they did a lock out, so when we retired it, and did our thing. If it can get internet, even for a split second, the whole laptop/ drive would be unusable.

We took that shit seriously.

Thanks PII, PHI, HIPAA.

[drowsy dust]

My dad would take them to the shooting range :)

Have some fun with it

[half relic]

the bad part was that the company i was talking abotu had hipaa information

[boreal scarab]

https://tenor.com/view/o-no-oh-no-no-no-no-no-gif-13088304234842611561

Mmmm HIPAA violations

Yummy

[drowsy dust]

Yummy

[inner goblet]

Pretty easy this time

[drowsy dust]

awesome !

[half relic]

they wouldnt listen when we told them that stuff was a bad idea too

¯_(ツ)_/¯

same one with the sql injection in some of the internal forms

[drowsy dust]

(╯°□°)╯︵ ┻━┻

[boreal scarab]

PLEASE tell me that company was atleast segregated in the IT department

[crude stump]

Ain’t there like a thing where if basically uses magnetic fields or some shit to wipe the drive

[half relic]

segregated?

[boreal scarab]

https://tenor.com/view/sheldon-bbt-hyperventilation-cant-breathe-gif-8676969

[mystic hound]

Imagine. All under one OU. One VLAN. One network to rule them all.

[half relic]

you mean vlans

im not sure what you mean lol

[boreal scarab]

Yeeeeeeep, they used to use that, then we needed to prove destruction, so started shredding em

[mystic hound]

Oh, and also Domain Admins for everyone? That would be awesome.

[boreal scarab]

Network engineering, desktop support, server support, Linux support, stuff like that

[half relic]

the ceo actually had a super simple password that he told us too and he demanded acces to everything

[half relic]

it was a tiny department it wasnt' really segregated

[mystic hound]

No separation of duties? Hell yeah.

[crude stump]

Smart ceo. 100 IQ move right there

[boreal scarab]

@cosmic pendant Get in here, we got HIPAA violations, bring popcorn!

https://tenor.com/view/popcorn-guy-relaxing-popcorm-popcorn-gif-26404903

Were the drives ATLEAST encrypted?

[half relic]

no there was a bios password that was similar to the address

[mystic hound]

Wait wait

Let me guess

It was hashed.

With like SHA2.

[half relic]

lol

[boreal scarab]

https://tenor.com/view/calm-gif-20765614

Mother fucker, I can't face palm any harder!

[crude stump]

And as a ceo is wild

[half relic]

it wasn't good lol

[boreal scarab]

NFC badges to get into the office?

[half relic]

no there was a door code

[boreal scarab]

[mystic hound]

Was it a masterlock lock too?

For the cherry on top.

[half relic]

lol

[blazing granite]

1234? 😂

[boreal scarab]

Probably steel too, and easily get the code

[half relic]

the door code was at least random

[real lichen]

what did i walk into?

[crude stump]

Shh

[boreal scarab]

4231 is not random!

[real lichen]

definetly still in the seclist

[blazing granite]

https://tenor.com/view/spaceballs-password-gif-22651610

[half relic]

im glad they dont' exist now cause i can talk about it

[boreal scarab]

Lets see

HIPAA Violations
No separation of duty
No NFC card access
Simple Passwords

[real lichen]

Love that movie

[boreal scarab]

Did I miss anything?

[half relic]

the company that bought them uses and msp

an

[mystic hound]

No principle of least privilege yeah?

[real lichen]

some of these things are so easy to setup too

especially for a small company

[crude stump]

Reminds me of when a water plant got hacked and the password was 1111

[mystic hound]

Also, since there were no separation of duties. I'm guessing there's some Sarbanes-Oxley violations.

[half relic]

yeah i had domain administrator privileges when i started becasue the guy couldn't figure out why my password wasnt' working for certain things

[mystic hound]

LETS GO

THE LIST GROWS

Let's see.

ECPA is added to the list of laws violated.

[real lichen]

lol group policy anyone?

[mystic hound]

They probably don't even know what that is.

Active Directory is a foreign language to them.

[real lichen]

right lol

[cosmic pendant]

where

[mystic hound]

Some old defunct company.

[half relic]

it wasn't that small either. it was small but it had offices all over the eastern part of the country

but anyway

[mystic hound]

Woahh.

[real lichen]

ok so multiple small offices

[half relic]

yeah

[real lichen]

that makes it even worse did they share data??

[boreal scarab]

#general message

They had PII/PHI information on the drives, no encryption, and didn't shred or delete the data, they just threw the laptops away.

[half relic]

yeah

[real lichen]

oh man

[half relic]

thats how they sent them to recycling but i actualy took most of them home before they could

[mystic hound]

Sold the info on the dark web, ey? Jk jk

[half relic]

(with permission)

[boreal scarab]

cough

[mystic hound]

Well considering their standard policy, I'm sure that wasn't hard to get.

[boreal scarab]

HMmmmmmmmmmmm how many HIPAA rules can we break today?

[mystic hound]

Bro, don't even need to look at the checklist, just mark the whole paper with one large checkmark.

[real lichen]

dude the fines on some of these violations is crazy

[wary ocean]

my old warehouse couldve been taken down my osha just walkin in the front door 😅

[boreal scarab]

HARD Tier 4

What's your use case?

[real lichen]

i sware by ASUS ROG lineup

swear**

[half relic]

i did try to tell them about that but they wouldn't listen

im not the only one iether

[drowsy dust]

YouTube ?😆

[real lichen]

ASUS ROG Strix G18!!!

[mystic hound]

Damn, I guess the CEO is only getting a 7 figure bonus this fiscal year.

[boreal scarab]

Like?

[fading ermine]

Where can I bug bounty?

[real lichen]

can do whatever your little heart desires

[drowsy dust]

HackerOne, bugcrowd

[boreal scarab]

We need to know to give you a better idea of what laptop you should get