general

[bleak quartz]

Ah k

[ebon prawn]

english not my first language

[bleak quartz]

Ye alr

I was just curious

Heavy stuff makes u wanna k**

At the start

Start from simple

[knotty valve]

Languages aside, lol

If you're starting out in computer science (or even general IT) it's generally better to start minimal and get used to the system first then move onto things that are more complicated

[wraith tusk]

true

[mossy river]

I'm happy to drop it if you don't want to continue, in your example were you referring to home brewed coffee or coffee that you buy at a coffee shop?

[raven nimbus]

where can I accept friend req?

[bleak quartz]

Faxs

[wraith tusk]

wha

[bleak quartz]

📠

[slow cloud]

tryhackme friend requests lands in your email

i think

[knotty valve]

Yeah

Think the dashboard has something towards the bottom right too

[bleak quartz]

Ye

[knotty valve]

But I do t remember if that was just a list or accepting as well

[raven nimbus]

My friend already sent me the req but I couldn't see , where to look and accept ?

[bleak quartz]

I found a funny bug with it

[blissful snow]

[bleak quartz]

Should I report it even tho it's just funny

[knotty valve]

Probably

[sick lance]

Check spam.

[bleak quartz]

Alr

It hides your username in the invitation

With the bug

[sick lance]

It's known.

[knotty valve]

Ah yes, the ethereal beyond has request to be your friend

[sick lance]

It's either your name if it's set.

[bleak quartz]

Why is it not fixed then lol

[sick lance]

🤷

Not sure.

[knotty valve]

I just discovered a fun way to describe depression with that

[knotty valve]

Probs only P4 if they use the P0-5 scale

[raven nimbus]

There isn't any req

[sick lance]

Wat?

[wraith tusk]

wha

[raven nimbus]

There is no friend request

[knotty valve]

Nya!

[crystal mauve]

Email req didn’t work for me, try searching through username instead - then accept via email

[blissful snow]

Wait whats going on?

[knotty valve]

Yes

[raven nimbus]

Already sent via username but still couldn't see any req

[hallow hazel]

I'd say both, but there are obviously a lot of factors it depends on. I just think generally people consume way more coffee than they do energy drinks, or consume coffee in larger portions and tend to see energy drinks as an extreme health hazard, when they are drinking 3-5 cups of coffee daily.

[crystal mauve]

Have him try, (not through mobile )

[mossy river]

Try asking them to send it to you? If not it might be a bug

[raven nimbus]

Yes from his laptop

[raven nimbus]

Both sent each other, but no one can see req 😂

[mint palm]

Yeah, it depends on a lot of factors. A cup of good filter coffee usually has more caffeine than a can of red bull

[rapid merlin]

Time is going so fast today

[blissful snow]

Is your friend new?

If so did he/she verify his email?

[raven nimbus]

Yes, but got accepted, thanks

[twin ridge]

Gave +1 Rep to @blissful snow (current: #293 - 25)

[blissful snow]

Oh okk your welcome.

How was it solved ?

[vernal dawn]

where can I accept friend req?

and vpn important before opening attackbox in thm

[sick lance]

No.

you don't need the VPN for the attackbox.

[mossy river]

People do consume coffee much more than energy drinks, it's accepted by society and generally considered "safe", but obviously just with anything safe means not overconsumption.

In general, comparing to generic instant coffee brands, coffee from a coffee shop usually contain more caffeine (varying depending on size and coffee type, i.e. Latte, Espresso etc.), which is why I asked 😄

In general I'm against both coffee and energy drinks, but will always suggest home brewed coffee to energy drinks because of what is added to it. You also get to control how much and what you put in coffee at home

I have a friend that won't touch an energy drink with a 10 foot pole but will happily make three espressos at home in a short period of time

[blissful snow]

Networkchuck home brew.

He loves coffee.

[mossy river]

I apologise for not communicating better earlier @hallow hazel 🙂

[blissful snow]

Almost wrote a eassy lol

essay

[mossy river]

I could write a lot more 😆 It's something that interests me and is a really big part of my life

[sand trench]

4k chars in a text message with nitro on discord

[mossy river]

Not to say that I'm right on the topic 100% of the time though, always point out if I'm wrong

[sand trench]

2k otherwise

[blissful snow]

Nice, I used to wanna do something with writing but never did.

Well I wrote a really crappy book lol.

[sand trench]

according to shadow energy drinks are safe enough to drink one a day

[lavish rune]

im practically loosing my mind right now and i need help

[sand trench]

which is probably not over consumption

[blissful snow]

Oh no that's common.

[lavish rune]

kaspersky cant access network, amd cant access network but normal stuf fl;ike setups for games can? i just reset my pc and i have no idea whats wrong i tried everything in the book that i know of

[rapid merlin]

o

[mossy river]

I mean, I wouldn't suggest doing so unless you have a reason to use the energy, but always make sure you're not replacing meals with an energy drink

[sand trench]

yeah not replacing any meals with it either

it is basically just a tasty treat instead of a 500 ml of coffee for shadow

[blissful snow]

People really replace their meals with energy drinks? That's crazy.

[mossy river]

iirc I read about caffeine/ energy drinks supressing your appetite

[rapid merlin]

Even water is dangerous when over consumed

[blissful snow]

I think that happens to me when I drink root beer.

[rapid merlin]

And slows metabolism of body for a while

[blissful snow]

And a lemonade slushy.

[echo sentinel]

I've heard that 1,5h liter of water drank in one gulp can be lethal, as we don't have more space in our stomach

[rapid merlin]

Anything not taken in moderation is harmful to us. Even most healthy foods you can find

[mossy river]

I find it funny but concerning that companies are allowed to sell a normal-size bottle of drink but write "contains two servings" in small writing on the back

[versed merlin]

Yo everyone

[blissful snow]

hii

[rapid merlin]

Helo

Hi is more of chat killer than greetings

[blissful snow]

Quick question so a self bot is a another account that only response to my message basically making a bot for the server?

[blissful snow]

Oh didnt know that

[knotty valve]

A self bot is an automated user account

[blissful snow]

I'm bad with convos I'm really introverted.

[rapid merlin]

I am kidding

[blissful snow]

Oh lol.

[mossy river]

a self bot is using your discord token to interact with the API via scripts or non-human means

[rapid merlin]

What’s the flux for in soldiering

[knotty valve]

Doesn't need to be via token

Discord define it as any form of automated user account

[blissful snow]

So it's againsted the rooms to create a bot that talk to my friends for me?

[hallow hazel]

And I'm sorry for maybe writing in a bit of a rude tone as it is difficult to understand tone through text. I definitely understand and agree with everything you said, I guess energy drinks are a bit worse, because you can't really control the amount of sugar you get in them. That's why there exist the zero sugar variants, but they tend to be actually even worse for many organs, as the zero sugar variants in all energy drinks generally contain aspartame or acesulfame-K, which is in my opinion even worse than sugar. Although Red Bull sugar free contains sucralose (maybe even acesulfame-K?), which is healthier than aspartame or acesulfame-K iirc, it's still quite unhealthy. I'd wish there was a stevia red bull as it would probably be most healthiest out of all other options, while still making it taste good.

[knotty valve]

Including using tools like puppeteer

[blissful snow]

I never understood how to use puppeteer

[knotty valve]

Which is different to self-scripting (i.e. console or monkey patch) also against ToS to modify or use the endpoints outside of regular means, but yeah

[blissful snow]

Well that was bad in my script kiddie days.

[knotty valve]

Basically headless chromium browser that allows you to interact with the DOM and console

Iirc bs4 was the python alternative

[blissful snow]

I know just never understood the js.

[rapid merlin]

Me too I still hate js even though I am better at it now

[blissful snow]

or slunium

[rapid merlin]

Never used it to code anything

[lavish rune]

like bro i cant even do a windows repair

[blissful snow]

I think that's close to name.

[lavish rune]

do i have a rootkit on my shit bro

[rapid merlin]

Selenium

[knotty valve]

I found selenium to be more cursed than puppeteer

[rapid merlin]

bs4 is quite nice

[rapid merlin]

Lowkey is, but really powerful too

[blissful snow]

I haven't use bs4 in a whilee.

[rapid merlin]

Same

[worn thorn]

it removes oxides from the suface and helps flow the solder better.

[crimson frigate]

I go to sleep and when I wake up Ashlynn is purple. I've fallen behind

[blissful snow]

Hm, I see why now lol.

Just compared them.

[knotty valve]

I have moments where I just go through a spurt and smash out a bunch of rooms then stop for like a week

[crimson frigate]

It's also difficult to compare myself since you actually work on the field and I don't

[knotty valve]

It'll probably finish the jr. pen test path next week

Despite it being two rooms

[blissful snow]

We gotta rob him/her for the job exp >:)

We split it 50/50

[knotty valve]

Lol

[blissful snow]

her*

[crimson frigate]

I probably won't even have the security 101 done this week and I'm spending hours a day on these rooms

[lavish rune]

does any1 know a discord for ttech support

i cant find any

[mossy river]

No need to apologise, I am the one at fault here
Hopefully we'll have Stevia Redbull one day, but I hope I quit caffeine altogether before then 😄

[rapid merlin]

I am down, I have exp too but I literally detect bugs from Brower Dev Tools and code fixes for them 🥲

Coz my company is retarded

[knotty valve]

Depending on how the next few weeks go, this may be my last year in cyber anyway 😅

[blissful snow]

Ohhh I have no job exp

[crimson frigate]

Big bounties?

[rapid merlin]

Nope

[blissful snow]

might have to rob both of yall for the exp lol

[knotty valve]

So don't look up to me as inspiration lol

[rapid merlin]

just developers here are 💩

[crimson frigate]

😬 that doesn't sound good

[mossy river]

I wouldn't recommend looking for technical support via Discord imho, you're welcome to ask here but it's important to note that the people helping you may not be experienced professionals or technicians

[rapid merlin]

Ah thank you, I thought my comment lost in the wave 😆 I need to fix my keyboard on my laptop, the clip came away from the motherboard 🫣 very Sadge

[twin ridge]

Gave +1 Rep to @worn thorn (current: #114 - 72)

[knotty valve]

It's going to be my decision to make
Not like I'm being fired or anything

[rapid merlin]

Well I don't have anyone teach me here, I just loved scanning through webpages and find for gaining access to things I am not supposed to

[lavish rune]

is there a channel or doi js ask here

[rapid merlin]

And that's how I end up here

[mossy river]

Here is fine, #quiet-conversation if chat is moving too fast

[blissful snow]

Um, isn't that like illegal??

Or are you just looking thro.

[crimson frigate]

Guess I can't say much. I've been in the medical field nearly a decade so, I get changing careers

[rapid merlin]

Well I report it and fix it myself

[mossy river]

Doesn't make it right though

[rapid merlin]

Yep

[blissful snow]

Oh I forgot that's your job.

is it?

Wait hold on let me refresh.

[mossy river]

the first person ever arrested for the computer misuse act was actually a good guy trying to fix vulnerabiliites and spread awareness for weak passwords in University systems

[rapid merlin]

Nope just going out of my way from dev to cyber sec guy which my company doesn't have and never practiced.

[lavish rune]

well i have just reset my laptop ut when i tried to install kaspersky it couldnt access network, same with my amd software and when i tried to do a windows repair the website blocked me, i have tried all network resetting options and nothing worked

[mossy river]

Have you tried contacting Windows/ Kaspersky support?

[rapid merlin]

I Exploit I fix, no one to guide me 🥲

[echo wasp]

what's the issue?

[lavish rune]

they didnt reply

[blissful snow]

I would reommend you a tool but not even if I'm allowed to help

[knotty valve]

Not so much "changing careers" but we'll scratch it up to that 😅
Makes the reason look prettier

[rapid merlin]

Well I am authorized to exploit anything I want in my organization, coz I don't touch stuff that might cause harm to my career, I only touch development servers

[echo wasp]

have you tried windows SaRa?

[lavish rune]

whats that?

[echo wasp]

google it 🙂

[blissful snow]

AH.

[leaden shale]

hello hackers

[blissful snow]

hi

[mossy river]

Just make sure it's written and signed

[echo wasp]

or was it Microsoft SaRa

[leaden shale]

i am king

in hacking

[rapid merlin]

well my company is paranoid they don't like "tools" Not even Version control software till I yelled at them for having a month of delay from manuall merging

[dark mason]

What's a tcp packet?

[echo wasp]

it's a MS tool that can help you fix your broken windows @lavish rune

[crimson frigate]

Fair enough. I won't press

[blissful snow]

crazy you have to read all the code

[rapid merlin]

oh, well it's not 🥲 but well I won't do it anymore

[lavish rune]

ah

[echo wasp]

my ip is 127.0.0.1 can u take my internet down?

[blissful snow]

but its a tool that san thro js file for keywords

[mossy river]

It's more for your safety because if it isn't and you break something you're on your own pretty much

[blissful snow]

So their relying on the user to update?

[dark mason]

[rapid merlin]

They don't just use notepad ++'s compare feature check if its correct, dumps it in final code base, test it, if it works it works,if not redo it

[crimson frigate]

Who is my father?

[echo wasp]

sometimes i just randomly check pastebin to find disclosed information that got dumped

[rapid merlin]

Yes I am aware so I am not doing anything out of my way anymore as I am just being exploited here 😂 planning to quit soon, nothing broke so far which I am happy about.

[lavish rune]

checking it out rn ill lyk how it goes

[dark mason]

I searched for open api keys on github

[blissful snow]

ping -f 127.0.0.1

[dark mason]

We are not so different

[blissful snow]

dos

[slow cloud]

https://tenor.com/view/hacker-pc-meme-matrix-codes-gif-16730883

[echo wasp]

plz no hack me

[blissful snow]

loool

[crimson frigate]

I feel like if someone did they'd find a shell that just contained malware in the only present file. (I have no idea if that's even how that works)

[lavish rune]

import time

while true:
    os.sys("ping -f 127.0.0.1")
    time.sleep(10)

[echo wasp]

i love it when these 12 year olds who just found a LOIC youtube vid say "i am king in hacking" but can't type it in one sentence

[rapid merlin]

Holy shit you slowed down my mobile top with that script I had to block your up addr, pls no do it again

[blissful snow]

the -f is flood.

[blissful snow]

you would have to use -c 1

[lavish rune]

oh!

[modest river]

Looking for a legitimate hacker; will pay anyone here?

[lavish rune]

thanks for letting me know

[dark mason]

No.

[lavish rune]

never knew about that

[echo wasp]

we don't do that here @modest river

[dark mason]

We are not for hire

[mossy river]

this isn't a hacker for hire discord server

[modest river]

nah dude i mean any white hacker

[blissful snow]

We know.

[dark mason]

Still a no

[echo wasp]

contact company's @modest river

[blissful snow]

What do you need help with anyways?

[crimson frigate]

Just pay me anyways even though I won't do the work

[modest river]

wanna recover my gmail

[slow cloud]

have you contacted gmail support

[echo wasp]

contact google support

[modest river]

how much do you want?

[echo wasp]

LOL

[blissful snow]

pro scammer here

[mossy river]

You're waware that's illegal right?

[modest river]

ik dude

[grim sparrow]

:hammer: hellvi.kings#0 has been banned.

[slow cloud]

ez

[crimson frigate]

73$ and at least 2 gift cards to Chipotle.

[echo wasp]

No way jabba took away the fun i was about to have

[crimson frigate]

I am hax0r

[slow cloud]

https://tenor.com/view/spongebob-patrick-patrick-star-broke-poor-gif-14729256

[blissful snow]

He was looking for a white hat to hack a gmail

[rapid merlin]

What happens if I flood TCP SYN packets but don't send any response back for Targets SYN/ACK response, and drop every incoming packets as response? ( or spoof ip if they are vulnerable to it), would that lead to DOS? Just asking

[mossy river]

the fun that breaks the "no interacting with rule breakers" rule? 😄

[echo wasp]

https://tenor.com/view/bye-felicia-hiding-humiliated-leave-me-alone-girl-bye-gif-21567771

[slow cloud]

but why cant we just have a little fun jabba

🤏 fun

[blissful snow]

Until your next.

[dark mason]

https://tenor.com/view/comunisto-dogo-gif-15433861177915232836

[echo wasp]

no way he was trying to hack [e-mail]

[crimson frigate]

Gulp

[blissful snow]

he dm'd you?

[echo wasp]

nah he can't dm me

[mossy river]

because it comes across as toxic and makes moderator lives hell when we're trying to deal with the situation 😄
Also, it has happened in the past wherein a user wasn't doing anything wrong and a bunch of users dogpiled and started to be unnecessarily mean to a user

[echo wasp]

People mean on the internet? no way that happens 👀

[slow cloud]

Rule 1

[rapid merlin]

People are always mean on internet

[blissful snow]

If your new people assume your here for illegal activity.

[mossy river]

Not in these here parts

[slow cloud]

wasnt there a command to show the rule

[mossy river]

Yes but it's moderator-only

[slow cloud]

yeah thought so

[crimson frigate]

Speaking of being mean on the Internet, I just got told on Facebook that I should... Ya know... Because I have a picture of a Honda on my profile. Car guys be crazy.

[echo wasp]

how about you give me mod powers so i can show them?

[slow cloud]

#mod-application Gerard

[blissful snow]

social engineering +20pts

[analog holly]

will the state of azure webinar be recorded? I have a conflict

[mossy river]

hmm which button was it again 🤔

[slow cloud]

It was fun Gerard

[crimson frigate]

There's a webinar for it? Genuinely I keep getting soamy ads for azure I'm tempted to check it out

[echo wasp]

hovering the wrong button it's "roles"

[mossy river]

All webinars should be recorded and uploaded to our YouTube channel

[echo wasp]

Roles "Mod"

[analog holly]

sweet thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1599)

[dark mason]

Actually 🤓 ☝️ , you aren't allowed to do that without giving them a warning first

[blissful snow]

Ohh could we have a tryhackme minecraft server

[mossy river]

Says who? 🤣

[echo wasp]

WOW

[dark mason]

Skidy, probably.

[mossy river]

Listen here pal, I wrote the moderator handbook

[dark mason]

I can't confirm nor deny that

[dark mason]

Oh shi-

[echo wasp]

https://tenor.com/view/taking-notes-write-that-down-gif-27686706

[crimson frigate]

https://tenor.com/view/deep-magic-lion-witch-narnia-dont-recite-gif-14879671

[dark mason]

Was nice knowing you chat

[mossy river]

I would be interested in implementing an open warning system but I'll leave that to an ADHD session sometime in the future

[dark mason]

I am about to get banished to the shadow realm

[echo wasp]

@dark mason imma join you

[rapid merlin]

He is joining you*

[crimson frigate]

An open warning system?

[blissful snow]

brb

[dark mason]

Like a voting system for warnings?

[echo wasp]

https://tenor.com/view/jake-gyllenhaal-bye-bye-gif-7990496184851258495

[slow cloud]

surely that wont end badly

[echo wasp]

if we create a cult we can target ban people

[rapid merlin]

No one answered my question I was curious to learn about it

[mossy river]

Yes, when you receive a warning it will be in an "open" state for a specific amount of time (i.e. 30 days), receiving 3 open warnings within that period would result in a ban

[echo wasp]

so we basically would be moderators

[slow cloud]

There already is one, a clan i should say

its called fluff

[crimson frigate]

Ohhhhh. I've seen several do that just never heard it called open warning before.

[dark mason]

Ohhh, so rn warns are on your record permanently?

Let's add "vote kick" command 🗣️ 🔥

[crimson frigate]

"hey kid. What's Italy shaped like?"

[echo wasp]

./votekick @mossy river +1

[rapid merlin]

Vote kill, would be fun to play amongus on here

[mossy river]

Well, they'll still be on your record permanently, however it is more transparent to users and adds actual weighting to warnings

[lavish rune]

I have installed SaRa but it just asks me to open get help

[echo wasp]

what happens if you actually do that?

[lavish rune]

it js gives me forums for solutions but nothing really describes my issue

[echo wasp]

i'd suggest creating a bootable disc

& reinstalling ur PC completely with it

[lavish rune]

wdym?

like get my os on a usb and do a clean install?

[echo wasp]

yup

or create a new user & check if you have the same issues on there

tbh

last resort

do a DISM

sec lemme get the command

DISM /online /cleanup-image /restorehealth

open CMD as admin

[blissful snow]

a packet.

[lavish rune]

already did that

ig ill do a clean install

[echo wasp]

Yea clean install windows

[dark mason]

👏

[slow cloud]

or

install

[blissful snow]

no

[dark mason]

*debian

They mean deabian

[blissful snow]

https://cdn.discordapp.com/attachments/680459914828972076/1370036851485970524/arch-linux-arch.mp4.gif

I coudn't wait to use this.^

[crimson frigate]

How many Linux is there lol

[echo wasp]

i'm over here using a Framework laptop with Kali

[slow cloud]

tons

[sand trench]

do you really wanna know??

[slow cloud]

i would love a framework

[blissful snow]

Everyone uses linux

[crimson frigate]

I'm scared

[sand trench]

https://upload.wikimedia.org/wikipedia/commons/thumb/1/1b/Linux_Distribution_Timeline.svg/800px-Linux_Distribution_Timeline.svg.png

[echo wasp]

.

[sand trench]

enjoy this picture from wikipedia

[slow cloud]

do you have the link

im lazy to lazy to google

[crimson frigate]

[sand trench]

https://en.wikipedia.org/wiki/Linux_distribution

[crimson frigate]

I want to get into Linux, but uhhh. Bro where do you even start lol. That's so much

[rapid merlin]

Arch is fun, trust I love it so much

[slow cloud]

yeah

or maybe linux mint

beginner friendly like arch

ubuntu

[blissful snow]

ngl I had to search it up to make sure I had the right defination ni my head lool

[crimson frigate]

I see Ubuntu a lot in the rooms

[sand trench]

start with linux mint or pop os
try and learn how to use gnome or kde desktop environments
learn the terminal commands
have fun trying out a window manager
move to more do it yourself distros

[sand trench]

yeah linux mint and pop os are built on top of ubuntu basically

[whole yew]

Run it in a virtual machine first. On windows, install a hypervisor like Hyper-V, vbox, or vmware workstation. Don't jump straight into bare metal linux on a computer you need to use daily.

[dark mason]

Say a number

Any number

[sand trench]

ubuntu has some weird issues because its parent companies stance on snaps

[boreal scarab]

Do y'all put your coffee in the microwave to heat it up?
(To reheat, not brew)
(But also brew too)

[blissful snow]

ohhhhh watch youtube video and do tryhackme rooms on linux

[boreal scarab]

@cosmic pendant and I are having a heated argument

[sand trench]

agree with juun

try it on virtual machines first

or on a second computer that is not required for your daily computery experience

[whole yew]

This is absolute heresy.

Pour-over coffee to brew, ember mug to keep hot.

[rapid merlin]

Wyland Hyprland with i3 / sway is fun

[whole yew]

microwaving to reheat heats the mug in unacceptable ways

[crimson frigate]

I didn't really know how to use VM. When I say I'm a tech noob I mean I barely know how to work Excel 😂😂😂

[sand trench]

????

[boreal scarab]

THANK YOU!

[twin ridge]

Gave +1 Rep to @whole yew (current: #11 - 839)

[sand trench]

something went wrong with ken's message

[rapid merlin]

Really?

[blissful snow]

I recommend linuxmint its something like windows.

[rapid merlin]

No idea what's wrong there I can see it fine

[sand trench]

yeah... how confusing it is

[rapid merlin]

😂😂

[whole yew]

figure out the VM piece first, honestly. Unless you have a spare laptop just doing nothing, you should not run linux on bare metal without understanding more about linux first.

[crimson frigate]

Thank you. I'll look into that one

[twin ridge]

Gave +1 Rep to @blissful snow (current: #288 - 26)

[crimson frigate]

That legit sounds terrifying

[whole yew]

Vbox, hyper-v are both very easy to install, and there are tons of documentation and guides to installing linux on a VM.

[blissful snow]

I just hopped straight into linux mint it was pretty easy to use.

[echo wasp]

i recommend kali for daily usage 🔥

[sick lance]

Vmware is easy too, you just need to jump through a million hoops.

[blissful snow]

on bare metal?

[sick lance]

Kali can be run as a daily driver if you remove all the tools.

[whole yew]

The problem is that if the laptop has data they need to care about, they are extremely likely to break the OS as part of the learning process. Much better to break it in a VM.

[sand trench]

wayland is a display server protocol
hyprland is a wayland based window "manager" program
i3 is an x11/xorg window manager
sway is the continuation of i3 in wayland instead of xorg/x11

hence your message makes near 0 sense to shadow

[sick lance]

That is how it's suggested to run.

[slow cloud]

virtualboxxx is beast but vmware is aslo nice

[echo sentinel]

Btw, how can you download VMware now? Broadcoms site is pretty messy tbf

[blissful snow]

Ohhh okk.

[echo wasp]

yea i got a windows machine & a kali framework for my pentesting

[sick lance]

Yeah.

[blissful snow]

Anyone here heard of demon linux

[echo sentinel]

Nice to point out that Hyper-V is only available in Windows Pro iirc

[echo wasp]

i use my kali device 90% of the time

[echo sentinel]

Makes sense

[sand trench]

freebsd

???

[rapid merlin]

I will just show it when I reach home, hard to explain instead of x11 I use wayland sessions, and instead of gnome / kde, I use Hyprland as window manager.

[blissful snow]

Ohh ok I have popos ad a kali vm

nope

[blissful snow]

I don't think

[queen flare]

how annoying is linux from scratch on a scale of 1-10

i wonder

[rapid merlin]

Ye sorry about i3

[blissful snow]

https://www.demonlinux.com/

[slow cloud]

it can be 0 and it can be 10

[blissful snow]

I love the theme

Haven't use it tho

[queen flare]

schrodinger's annoyingness?

[sand trench]

damn they almost stole freebsd:s logo

[queen flare]

sounds cool

[whole yew]

Is it? I don't really use windows as a host OS in my lab.

[blissful snow]

I broke my hold system taking to do it bare metal lol

[slow cloud]

if you know what to do it wont be so annoying but if you dont know what to do it could be annoying

and it depends on distro

etc

[crimson frigate]

Should I clock the link in the discord full of hackers? Yes fuck it

[blissful snow]

They did just made it a little more simple lol

[queen flare]

you can verify stuff like this using virustotal whenever you're unsure

[echo sentinel]

Yup - it's indeed easy to get (a.ka 3 clicks + restart) but I feel like Vbox/Vmware are much more intuitive

[slow cloud]

urlscan is also very nice

[sand trench]

well considering the moderators and admins actually remove and ban any malicious links it should be fine

[crimson frigate]

I forgot about that. It was mentioned in the first lesson in did yesterday lol

[whole yew]

Honestly, they are all about the same to me. Libvirt (mostly virsh, some virt-manager) has been my primary for so long, I barely remember my student days running windows and vbox.

[sand trench]

who here supports xkcd:s .norm files???

[blissful snow]

https://tenor.com/view/heinzel-evil-dance-cursed-summoning-devil-gif-17325881

i forgot how to summon demon linux

😭

[echo sentinel]

Makes sense - I've never realy used libvirt. Now I run both VMware and Vbox

Vmware for majority of machines and Vbox for malware-related stuff

[sand trench]

there are way to many layers to that animation

[queen flare]

lesson?

[blissful snow]

lol

[queen flare]

like on a tryhackme room?

[whole yew]

I'm considering wiping one of my lab workstations and making a single node proxmox on it. It's got the compute and ram, just need to summon the motivation.

[crimson frigate]

If I break the OS in a VM is that a huge deal?

[whole yew]

Nope

[crimson frigate]

Cyber security 101 on THM

[queen flare]

no you just delete that and install a new one in 5 mins

[sand trench]

nope worst case senario you just lost whatever is on the vm...

[echo sentinel]

Alr, good luck

[slow cloud]

its good to create snapshots tho

[whole yew]

Just keep a post-install snapshot so you can recover instantly.

Even reinstalling a onto a VM is super easy

[sand trench]

nothing on your windows machine will be impacted

[echo sentinel]

Nah, either restore a snapshot (if you have) or just delete the machine

[sand trench]

anyways back to watching this dude play alan wake remastered :D

[crimson frigate]

Adding snapshot to my list of things to Google

[whole yew]

It's pretty much expected that someone new to linux will break it mulitple ways in the first year. You can keep the borked vm to try to learn how it broke and why, and you can also just recover from the snapshot and keep going

[echo wasp]

a snapshot is an exact image of the currently running OS

if you fuck up updates

you can rollback

to a snapshot

before the updates

[slow cloud]

snapshots are so nice

[echo wasp]

in vmware if a VM has a snapshot you can't extend the disk 🙂

[slow cloud]

oh didnt know that

[whole yew]

It is not a exact image of the currently running OS. It's an image of a point-in-time, it will not maintain data added after the snapshot. You also cannot snapshot a running machine, as that would imply it keeps whatever is running in memory. Snapshots do not include memory.

[blissful current]

Still didn't find where to go? 👀

[crimson frigate]

I see

[sand trench]

naaah just wanna see what chapter 1-2 looks like in the remastered version

[rapid merlin]

how is everyone

[echo wasp]

tired

[blissful current]

Oh ok 🐈

[crimson frigate]

Learning

[sand trench]

as the remastered version is horribly broken on amd cpu:s and gpu:s

shadow blames bad remastering team

[blissful current]

Damn

[echo wasp]

completed JR pentester path today & i'm 80% done with redteaming atm

[rapid merlin]

Nice :o

Im very sick

[sand trench]

if the game black screens ever 1-2 seconds and don't come back unless you pause it it is broken in shadows eyes

not to mention all the other artificating glitches before it goes black

[frigid dagger]

Who here has an OSCP certification?

[sand trench]

everyone with the <@&620958598759055380> role

[rapid merlin]

I have a really old gameboy advanced here from when I was a kid… contemplating modifying it /using the case for a project.

[sand trench]

if all the buttons work and you also have a good battery those are still very nice game consoles

[crimson frigate]

I still have a red one but it won't turn on. Can't figure out why. What is the project,?

[frigid dagger]

Thank you, did that ping them by chance?

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2134)

[sick lance]

No.

[sand trench]

doubt it did ping them

as shadow don't got role ping permission last time shadow checked

i.e by using the copy id and paste role id in chat

[sick lance]

Only admin and the bot can ping.

[rapid merlin]

Where the batteries go in are rusty 😦 so that’s why I thought to just repurpose it

[sand trench]

ah leaky battery

[rapid merlin]

Yeah the battery acid

[sand trench]

could try replacing the battery as there are some that make new ones still

[rapid merlin]

Also think a hacky device looking like a game boy would’ve been cool

[frozen gull]

[crimson frigate]

In cleaned that of off mine and it still won't work. I guess it's cooked.

[rapid merlin]

My bad, it was a game boy colour

[sand trench]

still worth a decent bit in collectors

[slow cloud]

i want oneee

[rapid merlin]

Game check

I had lion king at some point I swear

[crimson frigate]

I gotta track Mime down. I ain't even see. It in 2 year

[slow cloud]

modded ones are so expensive

[echo sentinel]

lolz - I just logged in to one of my old outlook emails and found a generic scam email with a litecoin address attached to it.

Turns out bro did not make much money out of it

[sand trench]

YAY for unsuccessful scammers

[sour geyser]

Not gonna lie, it's disappointing to see previously free courses get turned into paid courses

[rapid merlin]

Still more money than me 😆

[rapid merlin]

Modded gameboys ?

[crimson frigate]

When I was deployed the locals were selling Gameboys with PS2 games and all kinda stuff on them for like 200 $ lol

[slow cloud]

Yess

[echo sentinel]

Fr - and he put so much effort into that message it almost made me cry

[echo sentinel]

Same lol

[rapid merlin]

How is that even possible

[slow cloud]

i want a modded advanced

[sand trench]

shadow is happy with their 3 working gameboy advance sp:s

[crimson frigate]

It barely is. Had 1,000s of games on them but hardly any actual worked lol. Just a gimmick

[rapid merlin]

Ahh I see

[slow cloud]

gameboy advance no mods is 130 euros coming from a quick google and local sites

[rapid merlin]

This one I’ve had since I was a child.

I should clean it up

[crimson frigate]

I tried to play need for speed underground and it wouldn't let me select a car lol

[rapid merlin]

Making you walk

[blissful snow]

this is to long 😭

Btw it's not install the other iso cancelled if your looking at .iso.1

also gotta do this thro tor

[rapid merlin]

The insides of this game boy may be effed tbh looks rusty

Let’s open it up

[naive violet]

Wow they're a lot less than that in the UK

I have two advance SPs, need to service one

[sick lance]

I will never part with my GB colour and SP.

[crimson frigate]

Mine is somewhere in storage

[rapid merlin]

I’m opening it

It doesn’t look good

Yep it’s pretty done for

I think I’ll use the case though

[blissful snow]

We gotta make oe

one*

[rapid merlin]

What annoying is once something goes rusty unless it’s treated it come back

[lavish rune]

hey im trying to reinstall windows with a clean reinstall and i have my flash drive plugged in and everything

and im in bios rn

i watched multiple tuts

but none showed a hands on guide

any1 willing to help?

[blissful snow]

oooo

I never booted windows before

well once

[rapid merlin]

Neither have I

[blissful snow]

peer luck

[blissful snow]

I could try

[chilly veldt]

Having a good day?

[blissful snow]

Yep wbu

[lavish rune]

sure

[blissful snow]

What did you use to make the usb bootable

[lavish rune]

media installation tool

i have seen a video just right now that said all i have to do is restart my pc and windows will autp detect the usb?

[rapid merlin]

I wonder if I made a device inside the playboy if I could still use the same battery system

[lavish rune]

lemme try that out rq

[sand trench]

you might need to change the boot device order in your bios/uefi

[wind magnet]

Hay Guys

[blissful snow]

hi

[lavish rune]

oh yeah im in bios rn but i have no idea how

[blissful snow]

Look area for boot order.

[lavish rune]

i see 2 boot options but i have no idea which one is which

[sand trench]

that heavily depends on what device/motherboard you are using

[blissful snow]

I was just getting ready to say that I gotta start typing faster

[lavish rune]

its an asus laptop

[sand trench]

yeah one of those 2 boot options is probably your usb stick

[blissful snow]

swap them

[sand trench]

assuming you made the usb stick the right way using something like rufus or microsofts windows own tool for generating a windows install usb

[sand trench]

and did not just copy the iso to the usb device and did nothing else

[lavish rune]

i just used the media installation tool, and it uploaded alot of files and then said the usb is ready

i chose the usb driver option inside the installation tool

[chilly veldt]

Pretty chill, finished getting my network configured

[blissful snow]

nice

[sand trench]

yeah try swapping them like imm0 stated

[lavish rune]

so i js swap the options and restart?

[lavish rune]

alr

[blissful snow]

For what?

[cosmic pendant]

hi

[lavish rune]

heya

[wind lake]

beep

[blissful snow]

I was like what is imm0 llol then i notice

[leaden shale]

hello everyone

[boreal scarab]

https://tenor.com/view/fox-gif-25500376

[lavish rune]

oh yeah poois good so far it instantly put me to the casual windows 11 swtup menu

thankss ill lyk how it goes guys

[leaden shale]

https://tenor.com/view/anonimous-hacker-gif-25488931

[wind magnet]

How are u

[lavish rune]

its asking me to choose a disk partition to install it on, do i choose rhe primary one with all the storage?

[sand trench]

have you backed up all the data from the device before doing this??

[blissful snow]

https://tenor.com/view/anonimous-hacker-gif-25488931

[blissful snow]

I'm good wbu

[lavish rune]

the device is fresh no data to back up, i had just reset it yesterday

[wind lake]

anomonyonmosu

[blissful snow]

What happened to them.

[lavish rune]

i did back up the old data so ill be able to get it back

[wind lake]

theyre a stunt group pretty much

[sand trench]

then maybe use the delete partition option and remove every partition on disk 0 and then install to that disk

[keen light]

uwunomouwus

[blissful snow]

[blissful snow]

Ah what does that mean?

I have an idea in my head but not sure.

[lavish rune]

is a partition space being used by the main windows in this vase disk 0?

[leaden shale]

I'm just watching you guys chatting like this.

[wind lake]

they dont really actually do anything

[sand trench]

yeah basically if shadow recalls correctly

[lavish rune]

so im js gonna choose that and go next

[lavish rune]

ah

[sand trench]

yuups

[wind magnet]

How are u

[lavish rune]

alr its installing rn, tysm shadow

[leaden shale]

where are you from shadow

[blissful snow]

I'm good wbu

[sand trench]

it is obvious if you read peoples about me:s

[blissful snow]

This is like the second seepling misstake i ever seen you make lol

rb

brb

[jade oar]

Good morning 12 am waking up is crazy

[sand trench]

?????

[wind magnet]

if you pc is not high a option of best for you is just make 10.windows

[sand trench]

shadow can use the word me rarely when it comes... like in this instance everyone calls the about them pages about me:s so shadow does too

don't really think that is a mistake

[blissful snow]

I was in a rush

oh i thought the me:s was the mistake

[crimson frigate]

Are there CTFs on THM?
I can find KOTH

[lavish rune]

keeps erroring whenever i try to install drivers

[sand trench]

¯_(ツ)_/¯

no idea how to fix that

[lavish rune]

well

shit

ill go to the website

[sick lance]

Look it up.

[lavish rune]

and check out the aka.ms thing

[lavish rune]

yeah

[lavish rune]

i found this video vut the guy ends a whole task and im not sure if its safe to do or not, is it fine if i send the video here for someone more experienced to check it out?

[blissful current]

sup

[chilly veldt]

A case project at school, need to make an enterprise setup with collapsed core network and server infrastructure

[sick lance]

Or look it up?

[lavish rune]

i did but i like to ask actual people for their opinion about so i feel more safe, i dont want this to fuck up my entire windows iywim

[lavish rune]

nvm i used mobile tethering and its all fine now

[sick lance]

An opinion on ending a task won't be the same as doing.

[lavish rune]

true

[blissful snow]

Well I was going to go somewhere...

Until some man came to the school door yelling let me in and now there was a big seen.

[rapid merlin]

I wanna keep the game boy colour but but the screen part is so scratched. Wonder if I can just replace that part

[sick lance]

It's all one screen IIRC?

[blissful current]

NOICE

Ah scratches ...OOF

[rapid merlin]

That’s what I was wondering

Was also thinking If it is I might be able to put that plastic out and then put a replacement screen in place

[rapid merlin]

I know they’re so bad, tbf it’s over twenty years old

[crimson frigate]

I broke the very firstt ctf i tried lol

[blissful snow]

lucky

I broke my first one like 17 times

[blissful current]

👀 nice

[blissful snow]

I was going crazy with metasploit

[crimson frigate]

The website im supposed to uuse wont load

[rapid merlin]

You can buy a replacement screen which must mean it’s removable

😌

[sick lance]

No, it's all one piece.

But you can buy new ones.

[rapid merlin]

Yah that’s what I saw, I still want it to say gameboy so I’m pretty happy about that

[shut hawk]

I love how you got all the news and then the TV series

[near sapphire]

hey my internet is finally working again i can see ur pfp

[cobalt crescent]

aahahha

[last harbor]

Sheesh

[cobalt crescent]

i live in Rome

im waiting for the pope

[last harbor]

Wat had happened?

Yh

[fierce raven]

Hello, I'm new to TryHackMe. How can I properly understand the courses?

[blissful snow]

Why did you tell us this we already know we're spying on you 😉

[last harbor]

It basically depends on wat u r interested in

Technically Yh

[cyan merlin]

hello! In room 'Red Team Recon' task 6 on question 'censys_email_address is a module that “retrieves email addresses from the TLS certificates for a company.” Who is the author?' I can't insert answer "censys team" . What's wrong?

[blissful snow]

If you don't understand you might wanna look into some more simple.

Or take a break and come back to the topic.

[last harbor]

Or maybe watch tutorials from yt

[blissful snow]

Only if you complete stuck.

Also take notes.

[last harbor]

Also btw can u send me the invite to the CYBR guild?

[last harbor]

Seems like he is

[last harbor]

Ofc

[blissful snow]

In your own worlds not copy in paste

[blissful snow]

ye

[last harbor]

Wdym

[last harbor]

Pls send

[fierce raven]

thank you

[twin ridge]

Gave +1 Rep to @last harbor (current: #2862 - 1)

[blissful snow]

i meant words*

I meant like where you could understand it instead of using fancy words and etc.

[fierce raven]

i am undertood thank you

[last harbor]

Np

[last harbor]

Yh basically

[blissful snow]

I remember I used to take notes by copying the hold tryhackme course lol.

[blissful current]

[last harbor]

lol. How long have u been doing this stuff?

[blissful snow]

It was for like a few weeks

But I stopped

[last harbor]

Oh

And how long r u into hacking?

[blissful snow]

Atm I'm using "Note taking gpt"

[blissful snow]

For a few year but I actually started focusing in december of 2024.

[last harbor]

Oh

[last harbor]

Dang

[blissful snow]

I also used to code only for a little while.

[blissful current]

[last harbor]

Wat languages?

[blissful snow]

I used to only know python now I know python, html ,css, js, c, c++, asm, a little lua, and sql

[blissful current]

[blissful snow]

You love this emoji lol

[blissful current]

ikrrr

[last harbor]

Dang. Ik python, html, css, js, c, c++, lua,php and sql. I’m thinking to learn rust ngl

[blissful snow]

ohhhh i forgot php

[blissful current]

Rust is in demand indeed

[last harbor]

All good

[last harbor]

Yh recently it has been

[blissful current]

Faster Compilation n response time

[last harbor]

I might be forgetting some but these r the ones I remember

[last harbor]

Yup

[blissful snow]

I prob going to learn rust, or go and more of lua for nmap

[last harbor]

I forgot wats nmap again😭💀

[blissful snow]

network mapper

[blissful snow]

I'm guess your a coder?

[last harbor]

Learn lua first tbh. It’s like super super easy.

[blissful current]

Port enumeration tool

[blissful snow]

guessing*

[blissful current]

...in simple words

[blissful snow]

I know I the first time I touched it I knew the basics really similar to python.

[last harbor]

Yh ik that. Idk why I thought there was a new programming language called nmap💀

Wait

I also am thinking to learn swift

[last harbor]

Kinda. Been coding for years tbh.

[blissful snow]

I'm thinking about java for minecraft mods lol

[last harbor]

Yh

[mellow narwhal]

Nmap is coded using Lua

[last harbor]

Yup

[mellow narwhal]

Specifically NSE is made using Lua

[blissful snow]

And I wanna make scripts

[mellow narwhal]

https://tenor.com/7eBwa1eE14.gif

[last harbor]

lol

[last harbor]

Do it

[blissful current]

useful even in games ...in some cases

[blissful snow]

roblox

[blissful snow]

I'ma try

[last harbor]

Fr. I learnt lua for taht only

[blissful snow]

The more advance lua is new for me

[last harbor]

Oh

[blissful current]

assetto corsa (idk i dont play roblox ...never really played it tbh)

[last harbor]

It’s fun if u wanna make ur own games and earn money

[blissful snow]

I actual learned lua before python but it was mostly copy and paste lol

[last harbor]

Oh

[blissful snow]

After attemp to learn lua I watch a 15 hour python course lol.

[blissful current]

ikr

[last harbor]

I tried that way but failed horribly

[blissful snow]

Same

[last harbor]

Idk how many hrs of courses and stuff I took on python

[blissful snow]

I also use an ipad but I learn python pretty quick

[blissful current]

but lua is mostly for extra scripting stuff usually such as modding

in games

[last harbor]

My school sadly has school iPad so I watch videos at school and do tryhackme and stuff at home. But sometimes I make python scripts

At school

[last harbor]

But it has other uses too

[blissful snow]

I'm at school right now lol about to go to the computer lab.

[blissful current]

ofc for logics and integrations

[blissful snow]

We have chromebooks but I use my person laptop.

[last harbor]

Oh. How old r u if I can ask

[blissful current]

but mainly C++ and C# is used

[last harbor]

And some people use it for attacks too if I remember correctly

[blissful snow]

I need Linux

[blissful current]

for game dev

[last harbor]

W

[blissful snow]

16 u?

[blissful current]

[last harbor]

Yh

[last harbor]

I’m 16 next month

[blissful snow]

Nice.

[last harbor]

Oh btw I use Roblox to find some uh

[blissful current]

High school , noice

[last harbor]

Pdf’s so that I can report them

[blissful snow]

Yeah getting out soon 2 more years

[last harbor]

Yes sir. How old r u if I can ask

[blissful current]

ughh well ...thats a big problem in Roblox

[blissful snow]

Yeah 100%

[blissful current]

22

[last harbor]

I’m still thinking about going to college

Cause I have few options

[blissful snow]

I'm going to try to get a scholarship full ride

[last harbor]

1. Business degree
2. Cybersecurity degree
3. Both
4. Don’t go to college at all

[last harbor]

Fr

I have been beefing with few pdf game developers for few months

[last harbor]

U in college?

[blissful current]

[last harbor]

W

[blissful current]

yeah ...farewell next week

[blissful snow]

What degree are you going for.

[last harbor]

Dang. R u taking a cybersecurity degree?

[blissful current]

nah

Bachelor of Engineering in Computer Science & Design (Game Dev & AR/VR stuff)

[last harbor]

Noice

[blissful snow]

Oh cool.

[last harbor]

Then u should fr try Roblox💀

[blissful snow]

I was gonna ask you to put my name as your's but I don't develop.

[last harbor]

Wat do u mainly do?

[blissful current]

neh , i'll be making my own indie games ...wip already

[blissful snow]

bio

[last harbor]

Even better

[blissful current]

wdym?

[blissful snow]

Check my bio.

[last harbor]

Tahst cool

[blissful current]

duck?

[last harbor]

Check his dc bio

[blissful snow]

Ohh gotta change that I was a duck lol

[last harbor]

He tells wat he does

[last harbor]

Oh I didn’t see that lol

[blissful current]

ya i read that

[thorny prawn]

Habemus papam

[blissful current]

now you're a meow

[last harbor]

I mainly try different stuff tbh

[blissful current]

🐈

[blissful snow]

lol

[last harbor]

But I manly like finding vulnerabilities

[blissful snow]

me-ow

[last harbor]

And making scripts

[last harbor]

Wsp

[blissful snow]

You know what you wanna do in cybersec?

[last harbor]

Yh

[last harbor]

I do

[blissful snow]

brb switch classes

[last harbor]

Alr

[amber cosmos]

im doing cybersec too

[blissful current]

already life has so much stress n competition and now its becoming CoD Black Ops 2 irl

[knotty pendant]

https://cdn.discordapp.com/attachments/1350575055200977028/1369743400051675246/image0.gif

[last harbor]

W. Wat r u doing exactly

[last harbor]

Only a gamer can use this figurative language

[amber cosmos]

well im still learning

im getting certs rn

[last harbor]

Oh

[last harbor]

CCNA?

[blissful snow]

I'm gettig certs to

the free ones

[amber cosmos]

googles course LMAO

dont flame me

[blissful current]

me too in few days ...will go for CRTP

[amber cosmos]

i needed something beginner friendly

[last harbor]

I tried getting certifications but got bored

[last harbor]

Gl

[blissful current]

nah thats a fine start too for fundamentals and Basics

[last harbor]

Oh

[blissful snow]

The one's are one are 800$+

[last harbor]

Good

[amber cosmos]

then compTia sec+

[amber cosmos]

wbu

[blissful snow]

How much is that?

[amber cosmos]

50 a month

[last harbor]

I’m currently not doing any certifications

[amber cosmos]

if u grind u can finish it in two months

maybe even a month if ur built diff

[last harbor]

Ik but I just got bored with doing some certifications

So I might do next year

[amber cosmos]

you mentioned before that youre young right?

you got time i feel

[last harbor]

Yh. I’m about 16

[blissful current]

good time to think and start about progressing in career

[last harbor]

Tbh Yh. If I do only certifications certifications in my senior year, I might be fine

[last harbor]

Indeed

[amber cosmos]

yup thats what i did

well doing

[blissful current]

do participate in hackathons/Tech competitions/CTFs ...they'll reinforce your learnings with real world problem solving

[crimson frigate]

Bro how do i open a .log in terminal lol

[last harbor]

@cobalt crescent @shut hawk pope Leo

[blissful snow]

I wnna go to one

[last harbor]

Yh

[crimson frigate]

i tried one and the website didnt work

[last harbor]

On tryhackme?

[shut hawk]

ye?

[crimson frigate]

yea. it hasnt ttaught me how to do that but the flag is in a .log

[last harbor]

We have a new pope. Pope Leo

[blissful current]

cat/less <file> .log

or nano/pluma/vim etc

[shut hawk]

oh, yeah I saw

[blissful snow]

or

open <file>.log

[last harbor]

Or?

I think it will work

But only for the file

A specific file

[blissful snow]

it just opens it as the format prob gonna open as txt

well plain txt

[crimson frigate]

i just need to know where the cat is sleeping and the hint says to open the file lol. none of that worked

2 of thedm said the file doeesnt existy

[last harbor]

Good that u mentioned “plain txt” lol

[last harbor]

Hmmm

[blissful snow]

Tryhackme room?

[last harbor]

Wats the name of the room?

[crimson frigate]

yea im abot to ask in 5room help

[blissful snow]

I was getting room to send that lol

I can't spell

sob:

I was getting ready to send that*

[last harbor]

Add : before sob

[blissful snow]

Yep

Yea mitre in the search bar of them.

[last harbor]

Lemme find a good one from Google

[crimson frigate]

now i wait on the help

[last harbor]

Gl

Do MITRE walkthrough

[cobalt crescent]

what ahahah

[last harbor]

Leo is the new pope

[cobalt crescent]

i was expecting the italian one

[last harbor]

Ooof

[cobalt crescent]

i know

[last harbor]

Alr

[cobalt crescent]

i was there at the vatican

[last harbor]

Nice

[blissful snow]

I'm board ima work or my tool or minecraft map

cya

[last harbor]

Alr bye

[blissful snow]

Nvm not gone yet

gotta watch for someone

[last harbor]

Wait for someone?

[blissful snow]

yes

[blissful snow]

I'm gon now

gone*

I don't know why I keep doing that

[last harbor]

I found a rust course btw so I’ll do that

[last harbor]

Alr bye

[last harbor]

It’s alr

I’ll go too so bye chat

[blissful current]

bye

[round orbit]

Thoughts on FIDO software-based passkeys? I don’t think they’re as secure as we think they are

[polar spoke]

passkeys in general arent as secure as they are presented

the concept sounded good originally on the surface

but then everyone who implemented it decided to make caveats for user experience/usability reasons

and effectively ruined the security model being presented in the first place imo

[lavish rune]

ok so @echo wasp , i have done the clean install everything is looking fine but im facing the same problem i previously had of my network not working with kaspersky, or amd being unable to install what it needs from the web but now an addition to that is my earphones to being detected at all, thoughts?

[round orbit]

I think they’re secure by design. But using a password manager to store them, especially a PW manager which can be phished isn’t secure

[polar spoke]

it's kinda the opposite imo

the design of the passkey itself is the problem

[round orbit]

Idk. If it’s FIDO and FIPS compliant, you can’t really argue it

[polar spoke]

we took pubkey crypto, with discrete private keys and the ability to make sub keys

and basically forgot how to do half of it securely, despite it being widely used for other systems

[polar spoke]

lol, tell that to FIPS-140 and it's constant insistence on using PBKDF2 as the only secure KDF

[round orbit]

FIDO/WebAuthn is heavily reviewed

[polar spoke]

ok?

[round orbit]

The issue relies (in my opinion) is the level of trust put into the ecosystems, Microsoft, Google, 1Password syncing

[polar spoke]

i'm not sure i follow

[round orbit]

Not all are equal. I think FIPS 140-3 is the latest

[polar spoke]

sure, but unfortunately last i saw they still only recommend PBKDF2 as their primary kdf

[echo wasp]

do a driver update

[polar spoke]

but that's a bit of a tangent

lets consider WebAuthN and the use of any of the platforms you described

a core part of WebAuthN is that private keys can't leave the device for which they were created/assigned

none of those platforms can do WebAuthN correctly and allow passkeys to be synced from device to device

that defeats one of the core featuers, private keys being device locked and provide a form of hardware attestation

[round orbit]

Yes I agree so you’re trusting the vendor that is storing your passkey

[polar spoke]

well, sure, but not really

[round orbit]

Which isn’t terrible like it’s still phishing-resistant and beats a password, depending on how you have secured the password manager

[polar spoke]

at least in the case of pwmanagers, you aren't trusting the vendor by design

"phising resistant" is.... a bit finnicky imo

[round orbit]

1Password for example, you can’t login on a new device as you need the secret key and unless you have it, you can’t login at all

[polar spoke]

right

and in the case of 1Password, they also simply do not have your data in a way they can access it

so you aren't really trusting them

[shut hawk]

it's incredibly annoying to add a new device to 1password which is why I like it

[polar spoke]

but, stepping back a bit to the FIDO/WebAuthN thing

we are in agreement that moving passkeys around pretty clearly is in violation of the core design of device locked keys

but i have some bad news

the FIDO alliance disagrees with us about that

[round orbit]

I’m more worried about someone gaining access to an account and having access to supposedly a secure and modern FIDO-compliant passkey, than the vendor. This is the concern

[polar spoke]

the FIDO alliance makes room for passkeys that can be recovered and moved between devices

so what do they offer that passwords don't?

¯_(ツ)_/¯

[round orbit]

iirc, isn’t Yubikey working on a solution to backup your key? :/

[polar spoke]

no idea but as of right now, i cant rip the private keys off my yubikeys

well, not without a vast amount of effort at least

[round orbit]

I guess I’ll stick to using my hardware key and passkeys where they aren’t supported

[polar spoke]

passkeys are being touted as better in a lot of ways, but the actual implementation and spec work from the FIDO alliance stands pretty in the face of those claims

it's pretty insane

[round orbit]

It’s still better that TOTP

[polar spoke]

honestly, as long as TOTP codes are treated correctly, as private, they offer similar security