general

[umbral bay]

👋

[sinful moon]

Well hey Tim Taylor the Tool Man

[crystal mauve]

hihi

[stoic quarry]

👋

[sinful moon]

Just pondering the MITRE news. So if we have no more CVEs I guess that means we can all pack it up, no more vulnerabilities

[stoic quarry]

Yep

[sinful moon]

I joke but yeah, not great.

[stoic quarry]

We solved vulnerabilities!

I'm wondering if the NCSC will pick up the slack

[sinful moon]

I think not with how things are going unfortunately 🙃

[stoic quarry]

Eek

Not too familiar with the NCSC but a boys gotta be hopeful

[sinful moon]

Anyways yeah I deliberately overstated the potential impact, we shall see but yeah backlogs galore either way

[stoic quarry]

CVEs weren't being enriched for a while a year back iirc

[sinful moon]

They’re trying to say it will mostly impact the CWE program but yeah idk about that…

[stoic quarry]

An impact either way is gonna be rough

[sinful moon]

Indeed, just weird to think about when yep I had to refer to specific CVEs multiple times at work today lol. I mean kind of to be expected in infosec but whew

but yeah we shall see

[stoic quarry]

Yeah I don't think there's a day where I'm not referencing a CVE

[ruby ocean]

No more CVE 😳

[stoic quarry]

But now just gotta hope there's no CVEs past April 2025 ever again

(Except for the chrome critical today)

[ruby ocean]

Ugh

Should I sleep for 2 hours and go to school

[stoic quarry]

Good luck

[sinful moon]

Either way this will be a wake up sign to the industry that yeah maybe we should try for something a bit more distributed if that’s even viable

[stoic quarry]

Brb gotta add "Matured the Security Program to ensure no new CVEs were introduced into the environment since April 16th, 2025." To my CV

[stoic quarry]

I 100% agree.

Even the reliance on VirusTotal annoys me sometimes

Distributed/Nonprofit thing maybe? Idk policy all that well

[sinful moon]

How do you mean? I to someone trained in infosec it’s a tool like any other and has to be taken with a grain of salt and a bigger picture

lol to be fair MITRE is technically a non-profit already, just one that happens to be almost exclusively a defense contractor

[stoic quarry]

I worked with a senior analyst who would run a hash through VT. And that would be the only analysis they do

Tbf they didn't last long

[sinful moon]

Ouch, I just know I go well beyond that in my investigation and sure lol. I’ve not run into any personally but there’s for sure tons of malicious samples that don’t have detections yet

[boreal scarab]

[stoic quarry]

Not much behaviour analysis if you're just giving it a hash

[sinful moon]

yeah lol, it’s nice when they have that but lol something had to provide that first

[stoic quarry]

Mmhm

Any run is nice, but a sandbox and knowledge of how to use wireshark will get ya places

[sinful moon]

I will say it is quite nice our EDR product does have an easy link to the VirusTotal hash result for any detection but yeah just one more tool to make your determinations

mhmm

[stoic quarry]

I think I know which one you're talking about. It's definitely a nice thing to check quickly, but over reliance on it seems bad

What were we even talking about

Oh CVE

🫡 RIP king

[opal shard]

Sorry to ask here. Looking for getting back on the cyber side. Anyone got study mats I can take for a job interview? red teamed for 3 years and now going for a security engineer position. Or does it exist somewhere on here already

[sinful moon]

We shall see, if they really pause entirely tomorrow it will be no good and a big wakeup call

[desert dirge]

D&D?

[boreal scarab]

Yep!

Druidic dice tower

[desert dirge]

[boreal scarab]

Made out of wood filament, rosewood to be exact

[stoic quarry]

Nice nice

[sinful moon]

I mean not so much but there are relevant security engineering rooms on THM? Ehh close enough

[stoic quarry]

Fitting for your druid

[boreal scarab]

You haven't seen my dice!

[stoic quarry]

Go on then

Give us a peek

[boreal scarab]

https://fennekandfinch.com/products/white-flowers-and-moss-dnd-dice-set
https://fennekandfinch.com/products/thicket-dice-set-7-piece-green-forest-themed-dice-set-with-branches-and-copper-foil
https://fennekandfinch.com/products/falling-leaves-dice-set-7-piece-autumn-trees-themed-dice-set?variant=39411984531552

[stoic quarry]

Very nice

[boreal scarab]

[stoic quarry]

All my dice have been lost to the void, so I might pick some of those up!

[boreal scarab]

Hell yah! Fenneck and finch look very reputable too. They make dice for a couple of specific classes, or you can get metal, wood, etc etc style dice

[stoic quarry]

I had a spiked metal set before. They look cool but they roll so badly

[boreal scarab]

Also, one wrong move, lands on your foot

https://tenor.com/view/realkimroro-police-gif-23236998

[stoic quarry]

Yeah the D4 was basically a caltrop

[fossil orbit]

yo guys got my second certificate

[desert dirge]

gz!!!

[crystal mauve]

Bravo

[desert dirge]

Ansible gib green text
Green text gib dopamine
Dopamine gib gud feels

...

Green text says Hallo Wurld

[boreal scarab]

https://tenor.com/view/we-do-a-little-hacking-hacker-meoware-hacker-cat-cat-gif-1513020089831183224

[desert dirge]

ohhhh nnnoooo, not the mouse as a mouse! lmao

[boreal scarab]

2 and a half more hours on my print

[crystal mauve]

meoware xD

[rapid merlin]

Sup everyone!

Happy to be back.

https://tenor.com/view/hasbulla-im-back-chat-im-back-chat-gif-10891601084898830857

I was out for a bit, had some life changing stuff happen. Im hoping to get back into THM now that I have more time.

Last thing I did was fix some vulns in EasyMap and then dip lol.

[leaden marsh]

I feel myself lost in cybersecurity

[rapid merlin]

Why is that?

[leaden marsh]

Everything has developed

Azure defending

Aws attacking

I stopped learning I have crouse

[rapid merlin]

Oh yeah, the kind of thing I haven't had a chance to explore still lol.

Im really wanting to get into the Azure defending, that seems fun.

AWS attacking has been around for a bit, but I will don't know much about it.

Technique-wise

[leaden marsh]

I dont know what aws attack and azure defending

[rapid merlin]

Im more of dev than a hacker tbh. Which gives me a little advantage in code reading situations, but not much otherwise. I've learned everything I know for modern techniques from THM. Before that I was reading a whole bunch of books.

[leaden marsh]

I dont know any code just python

[rapid merlin]

Python is a pretty nice language and easy to learn.

I use Go because I can make everything modular. Easier than C++ and C# which is what I coded in before.

[leaden marsh]

I dont want give up

[rapid merlin]

Keep trying, eventually after seeing things enough, they start making sense. It's a process.

[split compass]

Dang... Mitre. 😓

[leaden marsh]

I will study aws attack and defend azure after the red team path

[rapid merlin]

I liked the red team path. it was super helpful.

[cloud quiver]

Welcome back

[rapid merlin]

Thank You @cloud quiver

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 4545)

[keen hull]

intereting

[oblique loom]

Should I give up Cybersecurity and be a truck driver? Lol

(Might tbh if cyber doesn't work out.)

[rapid merlin]

Ah dude, thats dope!

[leaden marsh]

Kgb

[rapid merlin]

Don't give up cyber though, its about the same in pay tbh.

[oblique loom]

It'll be a backup plan :)

[leaden marsh]

Web fundementals
And webpentesting before red teaming and offensive security or after the offensive security and redteaming

[rapid merlin]

@oblique loom Good thinking

[leaden marsh]

About me?

[oblique loom]

Me xP

[rapid merlin]

@leaden marsh Web pentesting shows you a lot of the fundamentals.

[leaden marsh]

Okay I after jr pentesting and pentest+ then go to offensive security and redteaming and then web fundetmentals and web pentesting

[rapid merlin]

@leaden marsh I did, web pentesting, linux fundamentals, web protocols, nmap, and metasploit before even attempting read teaming.

[worn turret]

Cve getting cut?

[leaden marsh]

I have cybersecurity 101 first

[rapid merlin]

@leaden marsh That works.

[rapid merlin]

Cve getting cut how?

[leaden marsh]

What do you think is before it?

Or after it?

[rapid merlin]

@leaden marsh Do it before red teaming, cause when you get into read teaming, you kind already have to know how to do basic pen-testing.

[normal fable]

def do jr before red..

[leaden marsh]

Before redteaming and offensive security

[rapid merlin]

Yep.

[normal fable]

you can do offensive before red.. but get jr out of the way first.

It's only going to give you more knowledge.

I have pre, 101, red teaming and off all done.. plus a few more.

I'm working on Azure right now but have been lazy.. lol

*Defending Azure

[rapid merlin]

I took a little break, now Im finally getting back into it. But definitely lost my streak lol.

[normal fable]

Liiiizzz! Moo!

I see you typing. 🙂

[sinful moon]

Nice EZ, I picked it up too for that deal. Was distracted with watching show after work and news today though so I’ll get back to it tomorrow

[umbral bay]

Looks like a NY pizza.™️

[normal fable]

Them's fighting words...

[torn hornet]

#room-help lateralmovementandpivoting Web mask cannot be removed

[boreal scarab]

https://tenor.com/view/crazy-cat-mushroom-dance-gif-11846709049893854538

[normal fable]

https://tenor.com/view/good-morning-cow-gif-24965573

[boreal scarab]

Have a more built up NY Pizza

[normal fable]

Chicaco style??

[boreal scarab]

💯

[normal fable]

no.. I didn't misspell that.. 🤣

[umbral bay]

With bronze cheese.

[sinful moon]

only the best for Berry

[normal fable]

Speaking of food.. I'm smoking some meat right now to make chili with.. It'll be done about 3:00 AM Matt time.. 🤣

[sinful moon]

Very nice!

[normal fable]

I got my ears lowered the other day too...

hardcore lowered..

[sinful moon]

what does that even mean lol

[umbral bay]

If Eddy van Halen was a cow.

[polar wedge]

i just saw the john hammond vid

[sinful moon]

Yeah I’ve discussed it above

[polar wedge]

Or just saw the thumbnail actually

[polar wedge]

ohh i see it

[normal fable]

Yeah.. The CVE getting cut thing.. that's totally gonna help the US riiiiight?? 😭

[sinful moon]

some certificate naming vendors have reserved like 1000 CVEs to assign in case of something like this ahead of time, but that presumes MITRE’s infra isn’t just “paused”. Will be a disruption either way

[normal fable]

Okay.. we should probably not talk too much about this here.. but maaan.. wtf...

[sinful moon]

Yeah honestly more so because it’s depressing and I don’t want to think about it any longer today lol

But may be a wakeup call the industry needs unfortunately

[normal fable]

I'm not sure exactly what you mean.. but at the same time.. statement works for both sides.

[knotty pendant]

https://cdn.discordapp.com/attachments/1284180023607038114/1284958846950838385/03420234342.gif

[sinful moon]

my second bit? As in we need something more distributed and fault tolerant if that is possible

[polar wedge]

https://tenor.com/view/dog-bubble-speech-bubble-gif-25905495

Funny dog

[sinful moon]

Anyways may be time for some Truck Simulator… to which they’re actually adding a gameplay mode for just driving cars which should be interesting lol.

been mods for that for years but nothing official. Branding it as “Road Trip” for America Truck and will have actual unique gameplay tasks for it

lol I told my SO that and he was like “I don’t get it, that defeats the whole purpose”. But nah he doesn’t know the joy of just driving around Europe and America exploring while you complete these tasks all chill like

[torn hornet]

#room-help Lateral Movement and Pivoting Why can't I cancel the prompt?

[desert dirge]

Utah?

[oblique loom]

Yup, Cedar City to be specific

[sinful moon]

lol someone wrapping the chat back up together here

but yee I have an obscene amount of hours in these games lol

[desert dirge]

OSINT

[oblique loom]

I'm truckin to St. Louis

[sinful moon]

Nice nice c:

lol maybe in two years we’ll finally get to my state

[desert dirge]

Quite a ride

[rapid merlin]

St.Louis is a beautiful place.

[sinful moon]

indeed, and that’s half the joy of these games. The virtual tourism

[oblique loom]

They only have the Missouri part of St. Louis tho

Basically downtown area

The arch

[rapid merlin]

Still cool

[oblique loom]

Can't wait for Illinois dlc to finish. That and Iowa also Louisiana is what they're working on rn

At least there's Texas and Nevada :D

That's all I need lol

[river zealot]

Hi

[rapid merlin]

Hello 👋

[lucid reef]

Nice

[rapid merlin]

Been working on a little pen-testing / secure shell project. Pretty cool stuff. Got some of the pentest features coded today.

Spoilers it has built-in port, http web, and host scanners. As well as what could be considered a payload Generator... maybe... 😅

Alright, good night ya'll

[dense cloud]

Hi Everyone I Finally FInished my Cyber Security 101!!! Keep at it gang!

[cloud quiver]

Congrats , great job 🙂 🚀

[floral gale]

hey guys, i have an annoying assignment that's CTF-like. i'm stuck on one part, anybody that can possibly assist me?

[normal fable]

If it's an active CTF or for school/work we cannot help per the rules.

from what I understand anyway.

[floral gale]

aww men aight, it's graded anyway lmao just wanted to see the ending since our prof won't tell us

thanks!

[normal fable]

Good Luck on it though!

[floral gale]

appreciate it!

[normal fable]

My beans just finished.. I'm smoking my beef... then gonna make chili.. yes.. with beans.. hate me but I like beans. 😛

[desert dirge]

Is there any other way to make chile?

[normal fable]

Ask a Texan.. 🤣

[desert dirge]

I mean, I'll make chile without beans, and then put it on a fritoboat with beans anyway, so I might as well just put beans in it in the first place lmao

[normal fable]

Technically... original chili is just stewed meat with chili peppers.. that's it.

From what I understand of the history of chili..

[desert dirge]

Well and you would be right, but we also don't make icecream from custard anymore either

so...

[normal fable]

ice cream is made with cream.. wth.. LOL

[desert dirge]

smh lmfao

[normal fable]

well.. dairy...

[desert dirge]

but how do you make custard

[normal fable]

Eggs..

wait.. is that dairy??

[desert dirge]

yes... and....

[normal fable]

Sugar!!

[desert dirge]

lmfao

Traditionally, ice cream is made with a custard base

[normal fable]

oh man.. I failed.. I have no chocolate for my chili.. whatever...

[desert dirge]

and the amount of custard used as the base determines the type of icecream, from gelato, to soft serve

the type of ice cream in terms of mouthfeel, bite, sweetness, etc.

take for example, a gelato is usually about 40-45% custard, while the ice cream most of us are used to is around 25-30%

[normal fable]

I always thought gelato didn't have dairy for some reason..

I'm not a fan of desserts anyway.. but I have to research it.

[desert dirge]

lol no worries

Most modern icecreams are thickened with starches or gums, from cornstarch to agar-agar, which is far removed from tradition

[normal fable]

I mean.. I was a pastry chef for a while in my earlier life... but I always preferred the savory ones.. like steak and kidney pies.. etc.

more of a baker I guess...

[desert dirge]

lol don't worry, I'm not knockin' ya

[normal fable]

My preferred YT feeds are about food.. I love food. LOL

[desert dirge]

irish pasties are my heckin' favorite man

[normal fable]

If I didn't know.. hey.. cool.. now I know.

Jamaican patties... omfg

[desert dirge]

we used to have a food truck that drove around out here in the summer and served pasties, worth every penny

[normal fable]

beef with cheese prolly one of my all time favs

[desert dirge]

dude those sound gooooooooood

[normal fable]

I'm gonna make some sometime soon I think.. but I gotta find the right ingredients.. West coast USA is hard to find good ingredients for that stuff. 🤣

[desert dirge]

Oregon or washington?

LA?

[normal fable]

WA

[desert dirge]

oof, yeah

[normal fable]

Seattle area..

so.. diverse at least..

[lucid wasp]

Guys, did you know about Zabbix?

[desert dirge]

Yeah, you can usually get some of your less common ingredients from whole foods if you're desperate

[normal fable]

My best friend is Jamaican.. and he can't handle ANY heat. LMFAO

[normal fable]

And have an open wallet...

[normal fable]

What about?

[desert dirge]

true, but I mean you wanna go only for unique ingredients though, like spices, do your normal shopping elsewhere lol

[lucid wasp]

its a tolls to monitor, sorry for bad english

[desert dirge]

I'm not buying no $24/lb salmon at whole foods lmao

give me a frozen salmon patty for $3.49/lb and we're gooood

[normal fable]

That's about 10 more than a fishing license out here... to catch salmon.. 🤣

You can catch and eat.. it's fine.. but I prefer to smoke.

Hunter fisher...

[desert dirge]

I've been really digging mesquite lately

been putting it on everything

don't have a smoker, so I gotta do it the lazy way lol

[pine stratus]

who heard about the cve stuff will it shut down ? 🤔

[vast egret]

Yeah saw that

[desert dirge]

I'm trying to get a download of the cve list right now, but it keeps failing. I'm at 20kbps on a 450m download

[crystal mauve]

North Korea already bought them out w the bitfinex money

[desert dirge]

oof

explains the download speed, good timing

[crystal mauve]

Jk but I’m kinda skeptical about it just expiring

[leaden marsh]

What you mean about cve website?

[desert dirge]

oh no.

[crystal mauve]

Mitre

[pliant bronze]

[clear jackal]

MITRE is not expiring, just the contract for them to update cve/cwe. I expect data to remain in place for a while, just no new content

[blissful snow]

https://www.youtube.com/watch?v=itbsfeqrRY4 john hammond vidieo on it

[mellow narwhal]

How long was the contract valid?

[clear jackal]

Would assume until tomorrow

MITRE has been doing that work for years if you're asking when they started

[mellow narwhal]

Oh wait, so they have till tomorrow to revalidate the contract

I got confused because of timezones and thought it was till today lol

[wary ocean]

im slowly working through a song and at this rate it might be out by edgerunners s2 😭

[pine stratus]

how would this affect cyber security just wondering

[dark mason]

I don't think that much

If mitre doesn't document CVEs, another company will

[woeful cedar]

Hello

[pliant onyx]

Hello excuse me where is my CVE

What did yall do to it

[pliant onyx]

Ye this should ideally be an easy fix, since the problem seems funding mostly

The weird thing is, someone else may start the cve program now

[normal fable]

chili is brewing...

I'm curious how it's gonna turn out because of kidney beans.. but it should still be good.

[woeful cedar]

What is this CVE thing, can someone explain in brief?

I'm not willing to go through many videos

[normal fable]

Yes. Check the JH video of it.

John Hammond

[woeful cedar]

Alright

[normal fable]

https://youtu.be/itbsfeqrRY4?si=niTBgsU5y36ESFI9

[steady pewter]

Hello, good...evening(?) everyone.

[normal fable]

moo

[steady pewter]

Wait, isn't this english only?

[normal fable]

It's night for me rn.

[sinful moon]

Good night!

[normal fable]

moo is English for cow sounds. 🤣

[steady pewter]

https://tenor.com/view/oscar-actually-the-office-blank-stare-gif-14405570

[normal fable]

I use Arch btw...

[steady pewter]

big deal.

[normal fable]

Do you know how to spot a Linux user??

[steady pewter]

Just be one, and do it casually.

[wary ocean]

they mention arch

[normal fable]

Don't worry.... they'll tell you.

I'd say a good 50/50 mix of us Linux/Windows here..

[woeful cedar]

They'll make it their personality

[sinful moon]

And lol I don’t know why I checked in. Just feeling the extential dread and yeah I gotta report on this tomorrow. Reportedly more info will be coming from MITRE at 10 CEST/4am EST

[woeful cedar]

I use windows as my daily driver for casual stuff and Linux for cybersec related purposes

[steady pewter]

my brain in the morning:

ping 1.1.1.1

Network Unreachable

[normal fable]

I am full opposite.. I use Linux as my daily and mostly Windows for "work stuffs"....

[woeful cedar]

😂😂

[buoyant geode]

New Path behind a paywall? zzzzz

[woeful cedar]

I cannot use Linux as my daily driver, I am not that advanced

[normal fable]

PowerShell is a-maze-ballz

[sinful moon]

I use all three major OSes daily but Linux main for nearly 20 years

[woeful cedar]

Plus I play video games alot in my free time, so I use windows for that

[steady pewter]

It's not about being advanced, it about having the most endurance to fix the damn thing every time it breaks down for no reason.

[woeful cedar]

Exactly

[sinful moon]

That sounds a lot like Windows!

[normal fable]

@sinful moon you going to dc ever?? Totally wanna meet you irl.

and your SO

[sinful moon]

lol I have no such plans

[woeful cedar]

For me, personally, windows is more stable

[sinful moon]

traveling is not something I get to do unless it’s a special occation

[woeful cedar]

I mean once in a while I'll have some problems

But fixing the problem is easier on windows, for me personally

[steady pewter]

https://tenor.com/view/he-got-cancelled-keemstar-he-got-called-out-removed-cancel-culture-gif-21882741

[sinful moon]

Linux at least tells you what’s wrong so it’s easy to fix. Windows makes it opaque behind a hex code and all answers online are people asking questions with no answers on Microsoft TechNet lol

[normal fable]

Stability is a relevent term... frfr...

[steady pewter]

Different problems, same horror.

[woeful cedar]

The biggest problem I faced was when I was playing a pirated game and it didn't work properly cause Defender stopped it

[sinful moon]

And don’t at me if you’ve never had to use BlueScreenView and Windbg to figure out why your WIndows server in production is broken

lol

[normal fable]

Windows keeps on changing day to day and you never know which flavor is under that chocolate... 🍫

they don't let you even see under the wrapper....

[sinful moon]

I updated to Windows 24H2 on my work computer and it literally bricked my install

[steady pewter]

Personally I did it manually.

[steady pewter]

Yikes...

[normal fable]

omg it's gonna be some good chili btw.. I'm so excite

[steady pewter]

What chili?

[normal fable]

I can smell it on my face hairs....

[sinful moon]

You analyzed Windows crash dumps without a debugging tool? You’re either crazy or….

[normal fable]

This may win awards... if I actually replicate it again.

[steady pewter]

I prefer the term mad.

[sinful moon]

I do mean the full developer level BSOD time dumps

fair enough

either way Windbg does actually ingest those natively lol

[woeful cedar]

I used Chris Titus's windows Utility to clean up some windows bloat

[normal fable]

I mean.. if you're not crazy.. what are you doing here??

[woeful cedar]

And stop updates (the security updates still happen)

[pliant onyx]

https://tenor.com/view/this-is-fine-fire-house-burning-okay-gif-5263684

[steady pewter]

Buddy, I developed AR glasses just to see if I could.

[sinful moon]

All of those can be fixed in Local Group Policy without trusting some rando

for Kratos

[normal fable]

fair.. welcome. 🙂

[sinful moon]

If you just mean one machine

[woeful cedar]

Fair enough

[normal fable]

Speaking of machines.. I need to get my ESXi stuffs up to date.. and ... cloud migration... for MS... omg.. I've got so much to keep me awake for 7000 hours on my 30 hours alloted...

[woeful cedar]

I'm watching a video on the 4chan hack

[sinful moon]

lol Proxmox when tho EZ

[steady pewter]

7000 hours? What are you doing? Running a marathon?

[sinful moon]

Migration was easy for me thankfully

[woeful cedar]

It feels good to see a cesspool website like 4chan get hacked

[normal fable]

2035????

[sinful moon]

ouch

[normal fable]

I'm planning on pushing all Azure for 2026-7...

[sinful moon]

Personally I had to do it or my ESXi features would degrade the usefulness of my homelab

[normal fable]

full server migrations and all if I can.

[sinful moon]

VMUG is dead unless you really want to earn some VMware certs

[normal fable]

offsite...

[steady pewter]

What does your homelab look like? Personally, mine just looks like a bunch of garbage machines put together.

[normal fable]

plans be ... brewing...

[sinful moon]

lol let me share the image I always do

[dark mason]

I am betting a solid 5$ that offsec will take over the CVE program

[knotty pendant]

https://tenor.com/view/gato-gato-lamiendo-gato-paleta-lamiendo-gif-15858928605675053640

[woeful cedar]

This reminds me, I should probably change my PC setup a bit so it's more convenient for me

[normal fable]

I have hopes and dreams.. don't smash my dreams with your hopes. 🤣

[steady pewter]

That was..out of context.

[woeful cedar]

And I should also clean my PC from the inside

[sinful moon]

https://media.discordapp.net/attachments/680459914828972076/1290479311358398514/dell-pet-430v4.png?ex=68005383&is=67ff0203&hm=d163725c60b914deb872b4556358ffcbd197c044f330f2ca7785260edec00eac&

[steady pewter]

Those are easy to get!

[sinful moon]

Dell PowerEdge T430 with dual xeons, 256 GB of RAM and 64TB of storage

yeah it’s 2016 era so wasn’t bad

[normal fable]

I totally just wanna work in a datacenter and do tape backups again... headphones in... no cares.. just do the things and go get paid.....

Oh.. I found another undetected virus too... but then I got let go.. so... they kinda muffed.

[sinful moon]

I just had to have dat iDRAC and I administrate PowerEdges at work, just remotely 800 miles away so it was neat getting to set one up and do everything

[steady pewter]

Yep. Can't say the same about Tesla K80s though. They're super cheap, and I'm building a new VBIOS for them so I can..well, let's just say so things can surpass kepler--by a mile.

[sinful moon]

lol you all are distracting me from my ‘Murca Truck Simulator but I sure don’t mind. lol I just need to be distracted after today

[steady pewter]

Can it remote 40 lightyears away?

[normal fable]

@sinful moon okay to DM?

[sinful moon]

lol what does that even mean, but no it’s limited to local, I don’t have any reason to have remote iDRAC access via VPN or otherwise since I never leave the house

EZ you don’t have to ask, we’ve chatted in DMs tons but sure

[normal fable]

More of a formality for the THM chat.. but yeah. I still wanted to ask.

[sinful moon]

Totally fair

[steady pewter]

40 lightyears = 40 years for a photon to reach it's destination

Although it's technically the information that takes so long, as the information of a photon has rest mass, slowing it down. However, a photon reaches everywhere in the universe within..NULL amount of MS.

Laymon's terms:
Takes 40 years to establish a connection on SSH and any info sent will have 40 year latency over fiber.

[sinful moon]

lol I know what a lightyear is and I question the relevance still

[steady pewter]

the relevance:
My brain going on hyperdrive and breaking the universe in fundamental ways.

[sinful moon]

lol alright

Either way, yeah it’s running Proxmox now and going great including SATA passthrough to blu-ray drives for media acquisition which is no small feat

[steady pewter]

That's great!

[sinful moon]

Yee, just had to manually edit configs to low level assign each of the two drives to a different VM

[knotty pendant]

[pine stratus]

hello Elizabeth!

[sinful moon]

Final post here is how it’s done: https://forum.proxmox.com/threads/how-to-do-a-scsi-passthrough.111505/

If you don’t do this, disc drives are basically paravirtualized and you can’t access low level hardware features directly

Enough for raw data but not more advanced media tasks

That was interesting to figure out but I’m glad I found that post. Still requires some trial and error despite being able just to list your drives

since lol my iDRAC presents the ISOs I have on the SD card as a virtual drive of the same standing physically

Anyways just a fun aside

Just really a pity about Broadcom and VMware, I used to be an evangelist of theirs with over 15 years experience with VMware products

now yeah don’t touch them with a ten foot pole for work or homelab (although free Workstation Pro I can’t complain with people using, just too little too late)

I literally was paying them $200 a year for VMUG to get all VMware license keys for strictly personal use, but nope that wasn’t enough for them. Gotta buy and pass a VMware certificate now too to even qualify

[sinful moon]

Also shh, this is actually a better server than half of our clients

We have so many that are even worse PowerEdge towers with 64GB of RAM

Oh yes let’s host three+ graphical Windows 2022 servers on 64GB of RAM. That will end well. They are not happy if they all reboot at the same time

And… commence disk thrashing. Despite the RAID they really struggle

[sinful moon]

I think I won as last person standing in chat, I out ranted the rest unfortunately. Don’t mind that everyone should be asleep now

[desert dirge]

lol

[austere verge]

I can run 3 windows servers on 8 gb ram

I’m built different

[desert dirge]

actually I have an ansible-navigator question

[sinful moon]

I mean Ray, sure but to production workloads and with a GUI instead of Core? Idle doesn’t say much

One I’m thinking of is Domain Controller and two line of service business application servers each running SQL and more

Sorry Wrap, I’m still learning Ansible. Sadly not required at all at the scale of my current job

[desert dirge]

Damn.

all g

[sinful moon]

I am the only Linux admin and can afford to treat each server as pets rather than a generic unit, besides the Docker stuff I roll up

[austere verge]

I’m just pretend I understood all that but I hope u find peace in typing out ur thoughts

Might haveta explain it to me like I’m 5 for me to understand

[desert dirge]

I'm trying to follow the documentation to learn it but I'm getting stuck lol the commands aren't working

[austere verge]

The old chatgpt trick

[sinful moon]

Okie Ray, no worries. Keep it up despite your RAM limits. Although if you haven’t done much I would highly recommend learning Active Directory and Group Policy and setting up a mini-lab with them

THM has some good rooms on the basics

[austere verge]

Ram limits

Ooh

Where do I find them rooms

[sinful moon]

I’d ask you more but I’d probably get too wrapped up in troubleshooting tech I’ve barely used lol

[austere verge]

I was going through the beginner stuff over winter break but then my classes started up and I kinda got busy and put it on hold

[desert dirge]

don't worry about it, just venting lol

[sinful moon]

Here’s the very basics: https://tryhackme.com/room/winadbasics

AD and GPO is how you manage (on prem) an entire Windows domain for a business

[desert dirge]

I'm at the part where we're supposed to be learning how to run playbooks inside of containers, so that we don't need to worry about playbooks failing because of varied environments.

...But the damn container isn't working for me and neither is ansible lmao

[sinful moon]

You know settings you hate that Microsoft removed from Windows like “Download updates but ask me to install” and etc? That’s still all available in Group Policy. You can configure all machines in a business to do that for example

ah lol warp

[pliant bronze]

Bro your Pfp

[austere verge]

I forgot that guys name

[desert dirge]

https://tenor.com/view/steve-harvey-gif-24496348

[pliant bronze]

[desert dirge]

ssssssssSteeve
Haaaaaarveyyyy

When I joined HTB it was all the rage, they got the sticker and the emojis too and they spammed the heck out of it. It was great

[sinful moon]

Although he’s right up there with Dr Oz with peddling nonsense TV to housewives lol

That’s going a bit far, I mean the same catagory of brainrot lol

[desert dirge]

wdym lol

[sinful moon]

daytime TV vibes

[desert dirge]

oh yeah

I don't think I've met anyone under 50 that watches it on purpose

[pliant bronze]

Did you guys have watched Money Hiest (Webseries on Netflix)?

[desert dirge]

although it is fun to watch the clips, he is actually funny sometimes and has some good advice for kiddos

[sinful moon]

eh debatable at times since often it’s just what makes good TV for dem housewives and etc. Which yeah I guess as you say is a class that’s kinda aged out of what we would expect

but lol I want more tech chat, something something I made a Group Policy change that fixed everything today at work

[desert dirge]

nah, still pissed at podman and ansible rn

can't figure out what's going on here at all

[sinful moon]

eh technically it was the opposite. We inherited an awfully setup domain from another IT company. They configured everything in Default Domain Policy rather than their own GPOs. We ran into a snag with some security software which did a check if Windows Firewall was enabled…. whoops old IT disabled it domain wide by pushing “Disabled” Domain Firewall Profile.

boss was like, remove that crap. So today was just me fixing what broke after reverting Windows Firewall to “Not Configured” aka on per machine

Honestly it was trivial, just allowed the server to have inbound to the line of business app, but I wasn’t certain ahead of time what all would break. Most software is pretty good about proactively adding to Windows Firewall, enabled or not

[desert dirge]

wat lol

[sinful moon]

What do you mean?

[desert dirge]

the last one wasn't super clear to me tbh

[warm marlin]

Hello Guys any body know that when I try to play King of hill it show me error. I mean it show error like "For intermidiate level" kind of.

[sinful moon]

Typically on install, apps will just add themselves as Windows Firewall rules when run as admin. Our EDR did for example despite the firewall being technically disabled.

So this line of business app just needed quick manual firewall rule added to allow inbound traffic to the server

as soon as I resolved that, client complaints that can’t access line of business app disappeared with under 15 min of work. Windows Firewall by default only blocks inbound by default, so outbound from the clients were fine. Server just needed a tweak

[austere verge]

Good job

[sinful moon]

Thanks but it was ez and I just looked up the docs

[warm marlin]

I have a question ?

[sinful moon]

Literally just this, doesn’t matter me saying the app since it’s everywhere: https://us-kb.sage.com/portal/app/portlets/results/viewsolution.jsp?solutionid=220924460105259

[desert dirge]

nicee!

[sinful moon]

Yeah ez pz win, but fair it was my boss who told me to break it with outcomes I couldn’t always anticipate and I did try some. But lol we don’t have logins to this app

After I made the change to revert Windows Firewall to stock in Group Policy, I just did some quick reading and yeah sysadmins were just like, lol just see what breaks and fix it, it’s not hard.

While I wouldn’t advise that for larger companies, for this small client it was more than fine

[desert dirge]

lol sounds like a lot of fun

[sinful moon]

just another day in IT lol, it’s not actually that exciting, just illustrative lol

We’re just such a small MSP that I wear very many job roles and yeah sysadmin being amongst the top, along with sole infosec person

Frankly I was less worried about this than restricting old NTLM versions, and we have not taken the step to disable NTLM entirely. But I did enable SMB message signing and more

Even with auditing enabled for that, it could mean a ton of legacy network printers break and that is no fun at all

[desert dirge]

I FIGURED IT OUT BY CHANCE!
I had a typo.
I wrote: ansible.buildin.debug
and not: ansible.builtin.debug

[sinful moon]

lol ouch, glad you figured it out

[desert dirge]

it's always a typo, ALWAYS

[sinful moon]

Yeah I wouldn’t have caught that if you did give full context

anyways lol I could rant about random IT stuff all day. Its a trip is what I’ll say

from mundane to wtf

lol like the time I found Kerbostable account in a domain… it was for the default domain Administrator. Someone was running a service as domain admin back in the early 00s and due to AD/GPO just being passed on to new DCs over the years, that was lingering in the background

Huge security concern, literally said it was originally created for a Windows 2000 Advanced Server machine that’s been gone for a long long time.

That was very satisfying to fix with no repercussions

Just funny finding 20 year old nightmares your predecessors used as a quick hack and forgot about

[desert dirge]

lol

It seems like a really cool nightmare to have, needing to migrate 20 year plus old systems to modern infra

[sinful moon]

Can’t recommend this tool enough for anyone who needs to administrate or security audit AD/GPO: https://www.pingcastle.com

Even stock, Windows AD/GPO is insecure out of the box in the name of legacy compatibility you likely don’t need

[desert dirge]

that's heckin' rough man...

[sinful moon]

Yee but I’m so glad we have tools like this to easily analyze, just straight up tells you what needs to be resolved

and yeah many of these domains have just been going for 20 years with little thought or insight

lol if you ever inherent 12+ client domains like I did, this is a game changer for immediately actionable security improvements for each

[desert dirge]

Thanks! I copied it to my notes!

[sinful moon]

also a 1-100 overall risk score that it provides is easy to sell to management/C-Suite if you need changes approved

[desert dirge]

You work for an msp I take it?

[sinful moon]

yee, for the last four years

it’s a blessing and a curse c:

[desert dirge]

lol nice

how'd you make your way into that?

[sinful moon]

Pros: I wear all the hats of multiple formal titles in other firms, Cons: I wear all those hats…

I joined as Help Desk and quickly proved my security aptitude from rapidly responding and patching log4j vulnerabilities back when that was a concern in late 2021 when I joined

immediately showed management that I could handle infosec and sysadmin. Which I could but that is the exact moment I signed up for TryHackMe, since I was all self taught previously and had been out of the game somewhat

I just knew I needed to up my game and get with the times since most of my, erm, information security learning, was hands on in the mid to late 00s

[desert dirge]

When are you gonna make the jump for a devsecops job?

[sinful moon]

Help Desk may get a bad rap, but no it’s one of the best ways to get started in both IT and infosec as SwiftOnSecurity often professes to. It’s good to have a handle on the day to day of IT and end user expectations rather than sitting up on a security perch above it all, expecting your changes to rain down from above with no impact

Yeah I’m applying to a Linux sysadmin/devops role atm. Not quite infosec as I wanted but Linux is my jam and so is sysadmin

[desert dirge]

Good luck!!

I'll be waiting for your usn to transition from green to maroon!

[sinful moon]

Thanks! I was distracted by tax season but now that that’s through, I’m going to make my stab

lol the colors are based on level on THM, so it’s just this same green all the way up from where I’m at

I’m at what max level used to be

[desert dirge]

lol you ever play any mmorpgs like osrs or wow?

[sinful moon]

Yeah I’ve played WoW Vanilla/Classic and enjoy that, but enjoy other MMOs like FF XIV, Guild Wars 2, and (Japanese pre English launch) Phantasy Star Online 2

I kinda bounced off the official English/western launch of PSO2 and haven’t made another attempt, let alone the new “Genesis” redesign the did

[desert dirge]

gw2 was cool, classic was AWESOME!

[sinful moon]

back in 2014 all western players would play on Japanese servers with a DLL translation injection patch

[desert dirge]

ps02?

[sinful moon]

mhmm, although I still prefer actual Vanilla over Classic for WoW. But I’m not a hardcore WoW fan

Phantasy Star Online 2

[surreal locust]

can anyone tell me where to find Workflow Id for an incident in sentinel ?

[sinful moon]

No, try #room-help or #defending-azure-path

[desert dirge]

when I was a little kid I used to play SilkRoad Online, but you can't really play it anymore because of bots and the company died a looong time ago 😦

[sinful moon]

LIkely not many walkthroughs atm, but those will be soon to come

[desert dirge]

The monsters were so cool, and the magic system was pretty imaginative

[sinful moon]

I think I tried that sorta thing once and it was just not my jam

but I may be thinking of MapleStory lol

[desert dirge]

PPO2 graphics remind me a bit of destiny 2

[sinful moon]

it’s just kinda 2012 era if you mean the non-genesis stuff. Doesn’t look bad

[desert dirge]

yeah

yeah, SRO wasn't for everybody. I was a kid though and my imagination ran wild in that game, not so much when I grew up lol

[sinful moon]

Despite that, due to being f2p it was very well optimized for machines of the era so it flew on something decent (PSO2 I mean)

[woeful cedar]

I listened to Halo theme after so many years and it's still goated

[sinful moon]

Yes and now you should replay them all

Halo: MCC is in a great state these days

I am a massive Halo nerd, but admittedly mostly for the Bungie era of games

[woeful cedar]

Lol I should

[desert dirge]

halo has been on my list for yearsssssss

I used to play the demo for Halo 2 OVER and OVER again for months because I couldn't afford to buy the game

[sinful moon]

Mhmm I just did recently and had a great time

[desert dirge]

It's probably going to be one of my first purchases when I upgrade my computer

[sinful moon]

lol was it a Vista demo? I wasn’t aware of Halo 2 having an Xbox demo due to the rushed dev

[woeful cedar]

I am currently replaying the God Of War franchise

[sinful moon]

lol we can well

[woeful cedar]

I'll complete the assassins creed franchise after this

[desert dirge]

yupppp!

[woeful cedar]

I have many games on my list to play

[sinful moon]

Halo 2 multiplayer and XBL is just when I got broadband internet and it was a magical experience

[woeful cedar]

What's yall's favourite games?

[sinful moon]

what do you mean I can play with 15 other people in a “Big Team Battle”

lol that was my top rank in Halo 2 MP on OG XBL

[woeful cedar]

Sounds like you had a fun childhood

[sinful moon]

mhmm, more like early teens but same difference

[woeful cedar]

It's common to see hackers who were games in their youth

Hackers + other fields of cybersecurity

[desert dirge]

Alterac Valley in WoW was my FAVORITE battleground because of the huge 40 vs 40 battles, sometimes with bosses, magic flying everywhere

[sinful moon]

Changes depending on my mood and the day but: Shadow of the Colossus, Katamari Damacy, Rez, Halo 2, Metroid Prime

that’s at least the top 5 I’m giving right now lol

I’ve played too many games to consider realistically but those all left a lasting impact on me

[woeful cedar]

I wish to play all those but I don't get time 😭

College exams really are annoying

[sinful moon]

lol I never got that far in WoW. Don’t misunderstand, I love classic WoW but I usually get bored in level 20s

and I ironically play most MMOs singleplayer until I’m forced to do otherwise

[woeful cedar]

Nowadays I just play CS2 for maybe 1-1.5 hours with friends

Single players are more peaceful to play

[sinful moon]

Coincidentally every single title I named is from PS2/Xbox/GC generation so lol I have a vibe there

But I have too many “favorite games” to even list lol

[desert dirge]

my whole family played on a pvp server, so we got ganked all the time. Really gave us the push to 'get even' lol

[sinful moon]

ah lol wild

yeah I’m much more of a PvE kinda player

[slate linden]

can we all be honest

[sinful moon]

It may sound silly but I just enjoy the story and atmosphere of MMOs, the stuff most people just ignore to grind to max level lol

[slate linden]

gaming is a big waste of time

[sinful moon]

so is any hobby

give up guitar, waste of time

you could be learning infosec!

[slate linden]

really? bruh why?

Guitar could make u friend

[sinful moon]

Once you get into IT you will understand that balance is key

I am all about tech but if that’s your job and whole life then it’s exhausting af

Hobbies are healthy and help people unwind

I speak from experience being all about tech myself lol

[slate linden]

I just want to be employed😭 and buy a 2M$ apartment in Australia ,then live a peaceful life. Is that possible for cybersecurity???????

[sinful moon]

lol good luck my dude

[desert dirge]

I agree, but that's kind of the point. Your mind needs a chance to relax and recoup.

Of course all things in moderation, but for most people videogames are the safest way for us to escape. Some live in unsafe areas, or don't have enough space or money for a more tangible hobby.

Personally I did quit gaming because I became addicted to it, best thing I ever did. But most people don't go to the extreme that I did

[sinful moon]

Whew I can’t say I was ever addicted to gaming but that may be understandable if you went deep down that MMO pathway lol

gotta get you to sub somehow lol

[slate linden]

do u have a job in cybersecurity Elizabeth

[sinful moon]

yes

[slate linden]

OH DANG

is it stressful?

[sinful moon]

yes lol

[ripe vine]

Morning 🌞

[sinful moon]

which is all the more reason to have hobbies and interests to unwind with

[slate linden]

Do u think in your perspective that the salaries are high?

I mean every job is stressful at some point, isn't it

[sinful moon]

That depends on many factors, but I’ll just say this is an over 3x increase in pay from my previous unrelated job

[ripe vine]

From my experience, the only stress I encounter is a lack of pre-requisites before an engagement starts 😆

[sinful moon]

Mhmm, imho which is why even experienced folks like me are here and presumably yourself

Infosec never stops, continuing education all the time

so it can be nice to have a break

[fading perch]

YOU CAN START FROM HERE

[slate linden]

Is your job a senior or a junior job?

[ripe vine]

agreed, I neglected this for a year when learning infosec and pentesting and got burnt out fast

[deft quarry]

Wow boolean-based SQLi is a lot of work

[ripe vine]

WHY ARE U SHOUTING AT ME

[sinful moon]

N/A, I’m a Windows sysadmin, Linux sysadmin, sole infosec professional, devops, compliance manager, and still help desk in one. Just small business things

so one could say that’s senior but lol I’ve never gotten a bump in title since I’ve started. But lol this is like a ~10 person org as an MSP

[desert dirge]

Maybe a little deep for the direction the conversation took; but I learned that if you aren't paying attention, you can end up mistaking your successes as your purpose in life.

People too easily devote themselves to what they perceive as their purpose without judging whether it should be. ofc I was a kid, but it might help to share

[slate linden]

one last thing I wanna ask is whether your job is flexible compared to SWE or software dev?

[sinful moon]

That’s a really good take. Agreed

Even if you kid, many kinda live this way

Professionally I’ve been a Graphic Designer, a Web Developer, a Home Health Care Professional, a Teacher in public schools…. on top of all the silly roles I listed above

Never great to pidgin hole yourself into one field. Being able to adapt is great

[fading perch]

I THINK THIS NOT SURE

[foggy otter]

870 points for MS sentinel chall, insane! 😄

[fading perch]

YOU PROACTIVE

[desert dirge]

https://tenor.com/view/idiocracy-idiocracy-movie-movie-idiocracy-luke-wilson-gif-13326295852468392208

[sinful moon]

congrats on your fake internet points!

I kid though, I do love how TryHackMe gamifies learning but I feel this new leaderboard system is questionable

and leads to abuse where people just spam answers from a walkthrough without learning, which we’ve seen happen in this chat plenty

[slate linden]

one last thing I wanna ask is whether your job is flexible compared to SWE or software dev?

[sinful moon]

totally ruins the entire point lol

[slate linden]

agreed, i'm literally doing it rn

command + F then find the keyword

[sinful moon]

I’m not sure what you’re asking by that. But on flexability I’m 100% remote I can say

[red kite]

ay everyone.

[sinful moon]

My place of business is 800 miles away

[red kite]

you drive there daily ?

[sinful moon]

Just United States things, not like that’s a brag these days but we won’t get into that

[wintry girder]

hi

[red kite]

are you in cali ?

[sinful moon]

I am technically an independent contractor

nah I’m east coast-ish

[desert dirge]

good night everybody, good talk and good luck!

[red kite]

that's nice I guess.

[sinful moon]

G’night if your’e headed out Warp, great chatting!

[sinful moon]

Yee, max “flexibility” but that means the small company just pushed the burden of handling taxes and more off on me because it’s cheaper to do so than to figure out how to do remote work properly

but yeah in a weird way I’m legally my own business rn 🙃

[red kite]

it sounds like you're dealing with a bit of a frustrating situation. the company is prioritizing cost savings over investing in remote work infrastructure, which is putting more burden on you. have you considered discussing potential solutions or compromises with your employer ?

[sinful moon]

I mean we’re a company of ~10 people, I will and have survived with this situation

It’s honestly nbd, I just have to set aside money for taxes instead of getting a refund

[red kite]

as a small company, resources can be limited, and it can be tough to navigate these kinds of challenges. you've managed so far, and that's great.

[sinful moon]

lol thanks?

You sound like ChatGPT output or something

[devout palm]

Lmfao

[red kite]

that can be a bit of a planning challenge, but at least it's manageable. setting aside money for taxes can help you stay on top of your finances. if you need any tips on tax planning or budgeting, feel free to ask🥲

[sinful moon]

lol confirmed

[mellow narwhal]

"feel free to ask"

this is fucking heights

[red kite]

lol wow

[mellow narwhal]

who uses chatgpt to converse daily lol

[fading perch]

I MEAN THIS GIRL LIKE THIS

[mellow narwhal]

that would be the peak of social loneliness

[devout palm]

"GPT, WHAT DO I DO NOW???? THEY FIGURED IT OUT!"

[mellow narwhal]

not accusing this dude but the idea is wild

[sinful moon]

If you’re serious I do apologize but for real, even at my most professional I don’t sound like this. I appreciate the thought either way

[red kite]

🤦🏼‍♂️

[mellow narwhal]

the problem with chatgpt is it's made fancy english exclusive to itself

[deft quarry]

So well-spoken they think you're chatgpt

W

[mellow narwhal]

so if you sound genuinely empathetic or something, you're labelled as AI 🤣

[fading perch]

BEAUTIFUL

[deft quarry]

But colleges think you're using ChatGPT if you even use an em dash now, complex English has disappeared off of the face of the Earth

[sinful moon]

lol I do use the fancy english though for my professional writing and email responses and I’m ironically more formal than that is

[mellow narwhal]

truly beautiful. a knight fork

[deft quarry]

You're in the marvel rivals server do you play

[sinful moon]

Weird condrunum.

[red kite]

academia's gotten pretty strict, huh ? using an em dash is suddenly a red flag for AI-generated content. it's like they're expecting students to write in plain text only. complex English might be taking a hit, but it's interesting to see how language evolves alongside technology.

[sinful moon]

oh please

[red kite]

yes i play.

[deft quarry]

ranked?

[red kite]

nah bruh.

[deft quarry]

oh damn

[devout palm]

Very interesting personality you have. @red kite

[red kite]

I mostly play COD. warzone.

[deft quarry]

I never got too into Warzone since it was infested with cheaters for a while

[red kite]

thank you man.

[twin ridge]

Gave +1 Rep to @devout palm (current: #26 - 379)

[sinful moon]

Although not to diss with my own react, as I said above it’s important to have hobbies, just amongst gaming not my personal jam. So far enough

[red kite]

Call of Duty: Warzone had a pretty rough patch with cheaters, didn't it? It's frustrating when you're trying to enjoy a game, and cheaters ruin the experience. maybe you'll give it another shot now that they've likely implemented more anti-cheat measures bruh.

[red kite]

you should try gaming.

[deft quarry]

😭 I don't like battle royales too much to begin with

[sinful moon]

I’ve been gaming since I was three, try me bro

[deft quarry]

But I do like very competitive games

[sinful moon]

Sonic 1 and Aladdin for Sega Genesis were my very first games 🙃

[deft quarry]

I'm 20 I don't even know what the Sega Genesis is

[red kite]

lol
that's the problem. you should probably keep playing.

[sinful moon]

whew we’re failing the younger gens

[red kite]

oh I see, what games can you play ?

[sinful moon]

Sega Genesis is a 16 bit console released a year or two before Super Nintendo

[mellow narwhal]

Making games is more fun

With Unity

I haven't found the perfect game yet tbh

I have a bunch of potential candidates, but I'm waiting on more advanced hardware to run them on

[red kite]

lol old.
who plays Nintendo in 2025 ?💀

[mellow narwhal]

I like 3D/AR

[sinful moon]

…

[mellow narwhal]

those kind of games

fully immersive experience type shit

[mellow narwhal]

switch 2 just released

[devout palm]

Me

[deft quarry]

I just like playing the popular competitive shooters

[sinful moon]

So I take it youre not getting a Switch 2 indeed

[devout palm]

I like retro stuff.

[sinful moon]

or even keep up with current events in gaming

me too!

[red kite]

you can't compare that to play station 5.

[red kite]

nah

[red kite]

you should try a different gaming console.

[sinful moon]

come on, try harder if you’re going to troll

[devout palm]

Such as?

[mellow narwhal]

I don't play either so I can't compare

but since switch 2 released, it implies people still play Nintendo in 2025

[deft quarry]

I do agree the Switch is a lil eh, they apparently still haven't upgraded the joycon technology to prevent the inevitable degradation

Most likely to keep people buying new joycons

[sinful moon]

We still don’t know exactly what they’ve done besides lol, “not hall effect”

they just claim they “fixed it” lol. We shall see

[deft quarry]

I love the hall effect

[red kite]

actually, the Nintendo switch 2 hasn't been released yet. there's been a revelation about the Switch 2, but it's scheduled for release on June 5, 2025. this indicates that people are still invested in Nintendo, and the Switch remains a popular console.

[deft quarry]

I'll never go back to other keyboards

[sinful moon]

uh

[mellow narwhal]

what

[sinful moon]

Yeah they’re still going

[mellow narwhal]

my point was exactly that people are still invested in nintendo

[red kite]

okay bruh.

[deft quarry]

Oh wow it's coming out on my birthday

I didn't know that

[sinful moon]

Nice!

I am a PC gamer main these days but yeah I’ll probably pick one up

[red kite]

you should probably get one as a birthday present.

[red kite]

stop right there.

[deft quarry]

I'm okay I stick to my pc 😭

[sinful moon]

oh do tell Ofye

what does your prompt have to say this time?

[red kite]

you in cali ?

[red kite]

huh ?

[deft quarry]

Nope I am on the other side of the country

[red kite]

okay.

[naive violet]

Honestly tempted by a deck more so

[sinful moon]

Yeah I’ve got a Steam Deck OLED and would recommend it more highly at the moment

[naive violet]

I've some some interesting hackery use cases for a deck, a little portable horsepower would go a long way

[sinful moon]

Yeah I’ve seen people using it as wild SDR workstations with backpacks full of antenna and more lol

[slate linden]

this may sound a little bit stupid, but is there any certification in cybersecurity for an entry-level guy? Tysm

[sinful moon]

I mean Security+ is the most boring normal entry level cert that’s not hard to get

[mellow narwhal]

SAL1 for blue teaming

Sec+ for general

[sinful moon]

I say as someone who has only studied and not taken it

[mellow narwhal]

What's the content?

I've been considering that one

[slate linden]

thank you

[twin ridge]

Gave +1 Rep to @mellow narwhal (current: #176 - 48)

[slate linden]

thank you

[sinful moon]

As Zag says, kinda just general. It’s a baseline

[mellow narwhal]

For my first cert, I'm considering either Sec+ or Pentest+

[sinful moon]

kinda like A+ is like “oh I can work with tech half way decent”

[mellow narwhal]

as we all know CEH is a joke

[sinful moon]

All I can say to that is that PenTest+ is much newer, thus the promotion with THM, but might as well if it’s covered by your org or place of education

Haven’t heard bad things per say, just if what TryHackMe’s path that gave you that discount was any indication, yeah nothing special

but lol I don’t even know if that promo is still going

[mellow narwhal]

Both are around the same cost

so I could take either

[naive violet]

Sec+ is a wider entry level cert, pentest+ is more specialised and the step up

[mellow narwhal]

this is just for the sake of getting one at least before joining college lol

[sinful moon]

Sec+ and PenTest+? I’d just go with Security since it proves you know the basics vs a somewhat unproven cert. I’m no hiring expert however, just think about the HR final boss for applying to a job and what they may know are industry standards

[mellow narwhal]

I plan to do more specializations like CPTS later on, like in 2026 or 2027

[naive violet]

Bear in mind it might expire, higher effort

[sinful moon]

but yeah Ninja has a good take

[mellow narwhal]

Oh yeah, Comptia expires

Is it 3 years?

[sinful moon]

correct

[blazing loom]

Yep

[mellow narwhal]

how do you get CPEs to upkeep it?

[sinful moon]

Didn’t use to but they want that re-occuring income

[mellow narwhal]

because I cba to do comptia material regularly

wait you have to pay for upkeeping it? without an option to use CPEs?

or whatever those credits are called?

[naive violet]

Usually CPE plus an annual fee

[mellow narwhal]

Yeah no then lol

I have enough things to regularly spend money on

Anything else you suggest for an entry level cert which isn't CompTIA?

[naive violet]

Nothing that doesn't expire

[mellow narwhal]

Oh well

[naive violet]

Avoid anything that isn't proctored too IMO

[mellow narwhal]

Yeah I might go for the CPTS directly then

[silver sky]

Morning folks

[naive violet]

It's getting some reasonable recognition but it's not there yet

[mellow narwhal]

Yeah I mean, it doesn't expire, which is a good thing. It's practical, which is another

My skill level currently isn't enough to pass it, of course, but I'm working towards that

[naive violet]

Is it proctored tho?

[mellow narwhal]

It is high enough to comfortably pass Sec+ or Pentest+ though, which I would've probably done if not for the annual fee

[sinful moon]

I’d just apply a bit of healthy skepticism to CompTIA before you go all in on such a venture, but fair I don’t know the whole story abut this

[mellow narwhal]

I don't think so, but I'll double check

[naive violet]

Every cert provider should have some healthy skepticism applied

In the UK they overhauled the whole system for being certified for Gov work

[sinful moon]

also notice how suspiciously chatbot replies have disappeared

[naive violet]

Made everyone's certs almost useless overnight

[sinful moon]

Yeah for sure

[naive violet]

That was forces mostly outside the cert providers too

[mellow narwhal]

Yeah it's not proctored. You're allowed to use any resources like in a typical pentest

Aside from cheating of course

[naive violet]

So like. What stops someone else taking it in your place? There's no integrity, like SAL1

[mellow narwhal]

You mean someone physically taking it in my place?

[sinful moon]

oh lol I still remember the day someone here was proud of passing the new THM cert by just using AI and understanding none of it

[real oyster]

Hey guys, where can I give feedback on the randomly shutting down of machines? First the target machine was killed, after reconnecting the attack box was killed. This sucks

[mellow narwhal]

I mean you do need to sign an NDA afaik

[naive violet]

Well it's not physically, as it's remote

[silver sky]

#feedback-and-ideas

[sinful moon]

because it was “open book” which they defended to a T

[naive violet]

Ok so you swear you are playing by the rules? That's... Not a secure system

[mellow narwhal]

Then you mean by livestreaming the exam to a third party or something?

[mellow narwhal]

Yeah that's true

[naive violet]

We're security professionals, we should hold ourselves to an appropriate standard

[naive violet]

Proctored as most exams are

[mellow narwhal]

I wasn't aware that CompTIA exams were proctored tbh

[silver sky]

I swear I'll never do anything against the rules to get financial gain by getting employment. Some people will happily cheat

[naive violet]

Generally you have to show photo id etc

[sinful moon]

yee I followed all rules to get fananical gain already having employment lol

For real though THM is fantastic for getting someone up to speed who hadn’t been deep into infosec in years beyond headlines I can personally attest

[silver sky]

For my side of the industry, I must provide one passport photo, one form of ID from Group A (Photo ID) and two forms of Group B ID (Anything except a mobile phone contract with my address on it).

And even after all that, I must go to the post office to have my photo and the same documents checked as well.

And then wait for a enhanced criminal record check

[sinful moon]

whew for which cert?

or certifying body

[naive violet]

Ah yes, the people known for exploiting systems, following the loosely enforced rules of a system

[sinful moon]

I was both half kidding but also being serious. My learning on THM resulted in massive benefit for my current position. Just wasn’t talking certs

[silver sky]

Any of the Security Industry Authority licences/courses in the UK.

For example, Security Guarding, Door Supervision, CCTV Operator, Close Protection, Cash and Valuables in Transit and Vehicle Immobilization (Northern Ireland Only)

[sinful moon]

That’s wild but somewhat understandable

[silver sky]

I would say it stops cheating but it doesn't sadly

[sinful moon]

Was worried it was for a technical cert more traditionally

[silver sky]

Lots of dodgy training providers

Give us xyz money and we'll pass you

[sinful moon]

Ouch

[silver sky]

It's why at my workplace you can only do your training (paid for) via our chosen provider

[sinful moon]

sounds like the organized crime in :/

[silver sky]

The SIA debated licencing pentesters at one point (but was out of scope for the legislation)

[potent nymph]

Hi

Everyone

How are you

[sinful moon]

Meanwhile we have no such provisions, just a small org so it’s out of pocket (but tax deductable! lol) for me

[mellow narwhal]

I wish spending money was tax deductable

[sinful moon]

I think I said it above but as a legal entity I am my own business as an independent contractor lol

[silver sky]

Can be!

[sinful moon]

Not something I asked for 🙃

[silver sky]

I get a tax rebate for cleaning my uniform

And any equipment I purchase for work

[red kite]

sup buddy.

[mellow narwhal]

really?
I could buy a new GPU and say its for work...

[silver sky]

Depends on the tax laws in your jurisdiction and justification for purchases

[sinful moon]

I probably won’t but theoretically I could say the three month cloud license for THM AWS/Azure is a business expense since for me yep it’s helping and necessary to my “business needs”

[slate linden]

3 things we can't avoid: 1/Death 2/Taxes 3/Change

[sinful moon]

I am no tax expert however, take nothing I said as advice

[potent nymph]

Anybody now any drak web services or chat room

[red kite]

know ✅️
now❌️

[slate linden]

Your PFP guy looks dope

[potent nymph]

Know ok

[silver sky]

Why would you want that?

[silver sky]

Well it's me 😂

[slate linden]

sybau

[potent nymph]

Because i want to explore it

[mellow narwhal]

What if I'm pentesting Minecraft or RDR?

[silver sky]

Probably unlikely to have that approved

A burp licence on the other hand

[red kite]

do you have the alienware laptop ??

[sinful moon]

We have a name for that and it’s just reverse engineering and modding, sorry not tax decutable… ah nevermind that’s your point

[potent nymph]

No

[red kite]

you should get one, it helps alot.

[potent nymph]

Ok
I understand

[sinful moon]

plus like what would you write off for that? Ada Pro license or something? lol

[mellow narwhal]

I'd buy a whole arsenal of security tools to save on tax

[silver sky]

Alienware is garbage

[sinful moon]

Ignore that, you can do infosec learning on any hardware, they’re not being helpful

[mellow narwhal]

What if THM subs were tax deductable?

[red kite]

to you son.

[potent nymph]

@sinful moon ok

[sinful moon]

My remote pentesting server is 2 cores 4GB of RAM, and even that is over specced for most needs when terminal only

[silver sky]

Well first of all, I'm not your son, I'm probably older than you. But Alienware is garbage and overkill for pe testing.

[potent nymph]

No i just want to order some some guns

For self defense

That's why

[red kite]

self defence ?

[red kite]

NO IT'S NOT GARBAGE.

[sinful moon]

Oof, that we can not assist or facilitate

[potent nymph]

@red kite yes because in my city gangster was to much

[slate linden]

where are u from?

[potent nymph]

Bsl

[stoic quarry]

I haven't heard of Alienware in years lmao

[silver sky]

Honestly same 😂

[sinful moon]

For a good reason lol

[silver sky]

Other than the odd few I've salvaged for parts

[grim sparrow]

:hammer: rohaan_73#0 has been banned.

[slate linden]

First time hearing it

[stoic quarry]

I only remember them as laptops that had a GPU in them back when laptops never had decent GPUs

[red kite]

he got banned ?????

[silver sky]

That's what it says

[sinful moon]

Actually one of my first hand me down laptops in 2002 did have discrete Nvidia graphics, was neat for the time and beyond

[mellow narwhal]

depends on what you're doing.

wine is actually very useful for pentesting

that requires those specs

[stoic quarry]

Terminal only ain't gonna be using wine

[mellow narwhal]

I mean I'm able to low-end run it

but that would be nice tbh

[red kite]

you must be a gamer or into high-performance computing! Alienware laptops are known for their sleek designs and powerful specs, making them perfect for gaming, video editing, and other resource-intensive tasks.

[mellow narwhal]

I meant any 4gb ram with GUI

[stoic quarry]

Dog that's the most GPT answer I've seen

[sinful moon]

Just boring Dell Inspiron 8200, but whew it had a 1600x1200 screen back then which is same pixel density as HD

[mellow narwhal]

not just terminal only

[stoic quarry]

They said terminal only lol

[red kite]

okay

[mellow narwhal]

oh

[deft quarry]

The Boolean Based SQLi challenges just took so much time... but it was kinda fun

[sinful moon]

To be fair the times I’ve needed WINE on my pentesting server is zero, but fair I’d usually use another machine if Windows only was a requirement

Very few tools actually require that, even things that natively interact with AD, but yeah there are a few

[stoic quarry]

I was gonna say the PS modules usually work fine, but half of them get abandoned lmao

[mellow narwhal]

I use Wine for CTF-y things

because I'd need to switch between a Windows VM otherwise

[sinful moon]

And I’d say something something Powershell for Linux, but fair I’ve never had a reason to actually try that for module deployment and more

[silver sky]

I'd say if you wanna a gaming laptop, ASUS's ROG range is decent

[mellow narwhal]

Why would anyone want Powershell for Linux when good old Bash exists

[silver sky]

I love my little ROG Ally

[stoic quarry]

If you need to interact with Azure

[sinful moon]

Yee I have an Asus Zephryus G15 (2021) and it’s lovely

[mellow narwhal]

I'd want Bash for Windows more

[sinful moon]

um you just mean WSL?

[mellow narwhal]

You can do that on their online terminal, I forgot what its termed as

[sinful moon]

But fair Microsoft was branding it as such for a while

[mellow narwhal]

yeah basically that

[sinful moon]

It does have limitations even with WSL2, even if much improved

since it’s literally just a VM there

[stoic quarry]

Virtualized Linux wahoo

The true Linux experience I promise

[sinful moon]

So I don’t entirely get the point since it has a lot of compromises even compared to a fully VM Linux system

Anyways I will say thank you to chat, you all have very effetely distracted me from my concerns I was super anxious about

[stoic quarry]

Hell yeah

[sinful moon]

lol I could also just answer Linux questions all day and be happy to be frank, which is why I guess I’m applying to this Linux sysadmin position

[stoic quarry]

Good luck!

[sinful moon]

Not infosec but nah still my jam

danke!

[stoic quarry]

I love Linux but I would still feel so out of my depth with a sysadmin role lol

[sinful moon]

it was a rude awakening for my first IT job when there was no Linux and it was all Windows AD/GPO, but if I’m being honest I learned to love that and make sense of “oh this is how Microsoft expects business to adapt this to not be crap”

[frank night]

https://tryhackme.com/room/tmuxremux

is this room just giving away 500points??

[sharp citrus]

Points Explained

Article Link

https://help.tryhackme.com/en/articles/6563910-points-explained

Apr 16, 2025, 7:50 AM

[sinful moon]

lol are you kidding? That would be too funny, but yeah I’d have to do my compulsive action to rebinding Ctrl-B to Ctrl-A

[stoic quarry]

Yeah, small enterprises seem to only be windows where I'm from

[woeful cedar]

Should I just switch to Linux permanently?

[stoic quarry]

If you want

[sinful moon]

I’m a long time screen user who made the switch to tmux with no regrets

[peak ridge]

how to send a picture in this server?

[woeful cedar]

I would not be able to play all games

On linux

[silver sky]

Verify

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 16, 2025, 7:51 AM

[stoic quarry]

You can play a lot now

[sinful moon]

Beat me to it

[stoic quarry]

Protondb is a good resource

[peak ridge]

done @silver sky

[sinful moon]

I was a mod in their discord for a while lol

[peak ridge]

with my phone number

[woeful cedar]

Yes but games with kernel level anti cheat would not work
And I play those with friends

[silver sky]

No you haven't follow the guide

It's separate to discord's account verification

[stoic quarry]

Probably don't go to Linux then

[woeful cedar]

Yea

Unfortunate

[frank night]

maybe try dual booting so u can play games at free time
(I do like this)

[slow cloud]

or just use a windows vm

give it a ton of resources

[sinful moon]

I’ll just say unless you are all about online compeditive shooters, yeah vast majority of Windows games on Linux will just run

[woeful cedar]

Would games with kernel level anti cheats still work on it?

[slow cloud]

not sure tbh

[sinful moon]

no, GPU Passthrough is deceptively difficult

[silver sky]

Probably not

[slow cloud]

Does that also count for things like proxmox?

[sinful moon]

I would not in my right mind recommend new Linux users figure out either GPU passthrough or shutters switchable graphics

[stoic quarry]

Unless you got a GPU just for valorant

[woeful cedar]

Problem with dual booting is that it requires you to switch off secure boot
And games with kernel level anti cheat like Valorant often require secure boot to be on, so even with dual boot, it would not work

[stoic quarry]

That's wild

[woeful cedar]

I play valorant mostly with friends

[slow cloud]

kernel level anti cheat kinda sucks anyways

[woeful cedar]

Maybe once in a while I'll solo queue