general

[hoary bluff]

Please is there anyone here who has participated in the thm advent of CyberSecurity 2024?

[crystal mauve]

That’s like saying u haven’t seen ghost in the shell

https://tenor.com/view/ghost-in-the-shell-keyboard-gif-7519694

[upper knoll]

why

you might just need glasses

[cinder tangle]

I already wear glasses

[upper knoll]

different glasses xd

[cinder tangle]

They are for every day use and reading.

[upper knoll]

i had same issue they figured out my eyes cant focus well so gave me different glasses

[cinder tangle]

What kind?

[upper knoll]

all i know is the bunch of filters for light my astigmatism and they were like beyond confused how i managed to exist without glasses up till now

[cinder tangle]

Is this using a discord token or the tryhackme profile token? It lists to use both in different instances.

Unless I just don't understand

[carmine stream]

i wanna study but destiny 2 is calling my name

[gusty inlet]

In no way it lists using your discord token.

[upper knoll]

you take the token from your thm page and use it with the discord bot

very oversimplified

[carmine stream]

tryhackme token

[cinder tangle]

Then where is the settings icon on the site as indicated in that link you sent me?

2 and 2 isn't equaling 4😅

It says look in your settings

I don't see that available on the site

[carmine stream]

manage account

hover over your icon

[cinder tangle]

I just figured that out😂 😂

Thanks

[cinder tangle]

This

It's literally prompting me to install

Or is that malware on the site?

[carmine stream]

def shouldnt be malware, im also not on an android

but i wouldnt download that mobile is gonna be limited anyways

i should change my pfp

[gusty inlet]

Oh... that's normal chrome behavior for websites that supports it.

[plucky barn]

What resources could you reccommend to try the new rooms that are about blockchain?

[cinder tangle]

What I'm hearing is there is a mobile.

An app to be specific

Gonna try it then and see what it's like

[gusty inlet]

It's not going to be a mobile app. It's just going to be a shortcut to the actual website, but instead of being open in chrome, it will be like an app and open through a windowed frame.

But overall, it's still just a browser tab.

[cunning gyro]

Sounds incredibly unnecessary

[gusty inlet]

It doesn't sound unnecessary. It is unnecessary.

[fallow bridge]

Last week I got the premium membership and started the cybersecurity pathway, and got done with the pre-requisite and now doing the cybersecurity 101 section and I’m loving what I’m learning and how I’m learning it.

[gusty inlet]

https://tenor.com/view/thats-it-that-right-there-you-said-it-youre-right-you-got-it-gif-18397042

[cunning gyro]

Do every section 3x at least, you’ll be happy you did 👍🏽

And specified notes too, even just vocab

[fallow bridge]

I just got the Google it support specialist cert from cousera and now I’m doing this.

[fallow bridge]

Thanks

[twin ridge]

Gave +1 Rep to @cunning gyro (current: #1898 - 2)

[rapid merlin]

https://tenor.com/view/larry-henn-final-days-b4retirement-hahahahaha-gif-20544125

[safe heart]

yoo i finally got top 10%

[carmine stream]

peoples are comin for my top 5% ima need to lock in

[safe heart]

Shittt I’ve been just doing 2 rooms a day it’s decent

[cloud quiver]

Congrats , great job 🙂 🚀

[safe heart]

Ily

[split compass]

Smart go. I try to warn people against doing what I did.
Take your time, absorb, and don't burn out 🙂

[crystal mauve]

Wat gat dam

[feral charm]

Im highly interested in cybersecurity, hacking and understanding linux system.
I already have basic knowledge about Linux commands and network systems. Ive bough an external SSD to install ubuntu on it. But I feel lost. I dont know what kind of learning path should I follow? Should I do CTFs? Or obtain more certificates? Im open to any type of advices :).

[carmine stream]

pfp changed

dont worry

for i am not an imposter

[safe heart]

I'm still a novice but I think doing pre security then cybersecurity 101 on THM then follow a path of your choice, I started out a absolute beginner when it comes to stuff like this but It's helped me learn so much and so many tools about pentesting and cybersecurity in general

[carmine stream]

tryhackme has a pretty decent roadmap out on there site now to check out

[safe heart]

and also once your a little bit better you can do the challenges to reinforce

[carmine stream]

I highly recommend checking it out the fundementals are there and that will keep you busy, by the end of that you should know what you want to do

[wary ocean]

they have a multiple choice thing to determine what could fit the interest best

idk if it was supposed to be taken seriously though

[safe oxide]

Voidi changed pfp

[carmine stream]

who?

👀

https://tenor.com/view/feed-the-void-black-cat-snack-hungry-cat-hungry-gif-306965068353833327

[safe oxide]

You

[boreal scarab]

https://tenor.com/view/fox-hungry-butter-kit-gif-18290527340172991522

[safe oxide]

Beerise

Hallo

[celest dirge]

This^^^

It happens to me sometimes as well

[boreal scarab]

https://tenor.com/view/bonk-piggies-piggy-pigs-rodents-gif-25600042

[rapid merlin]

I was falling asleep and suddenly I’m awake

And then I see someone say they’re the top 10 percent

If you’re a wizard you’re in the top 4% apparently

What rank do you need to be in the top 1

[safe oxide]

Prolly legend

[safe oxide]

Salads

[rapid merlin]

I think my eyes are gonna fall out

[safe oxide]

Lol

It could be guru

[rapid merlin]

I was getting harassed by a fly, I go get the electric bat,get back in bed and it’s gone

🙄

[safe oxide]

It has the right to defend itself

[warm grotto]

[proper quiver]

admins that frog is hackerin

[safe oxide]

Admin is prolly sippin tea

[proper quiver]

pepe has me password help

[safe oxide]

[warm grotto]

Admin's busy hacking the Statue of Liberty.

[safe oxide]

He's gonna make it fly

[warm grotto]

He's gonna make it fortnite dance.

[knotty valve]

https://bsky.app/profile/koboldposting.bsky.social/post/3lpuqrq4axs2y

kobold posting (@koboldposting.bsky.social)

i don't wanna alarm anyone but Discord is implementing a feature that spawns a hostile kobold that hits you really hard on the shin with a golf club without telling you and you have to manually disable it

Reposts

390

Likes

788

Bluesky · May 23, 2025, 11:09 PM

CTF during work break let's gooo

[safe oxide]

[warm grotto]

Cozy CTFing.

[open parcel]

Hello

[warm grotto]

G'day.

[sturdy river]

howdy

check the site for help

[warm grotto]

Restore your wallet with your Recovery Phrase.

You should have stored that somewhere.

[bleak quartz]

Have u done the new-ish APT28 in the snare yet?

Room

If not, do it. It was hella fun imo

[finite basalt]

If you know you know

One of the most goated films

[carmine stream]

idk what i missed but i hope they have there recovery phrase

[proven escarp]

guys, anyone here into pentesting?

[carmine stream]

lol

alot of us

[proven escarp]

do u have experience?

[carmine stream]

i dabble 🤡

[proven escarp]

oh so ur not like really into it?

[carmine stream]

no im def into it

did you have a question

[proven escarp]

i mean yeah

[carmine stream]

well shoot your shot lol

[pallid lotus]

You dabble in pentesting? Usually a full time job, but fair enough

[carmine stream]

lmaooo that part

we offer pentesting as a service

not our top sell

[proven escarp]

so like idk what i have keep working on, i am fucking lost

[carmine stream]

well where are you at

[pallid lotus]

Curious strategy 😆
Fair though lmao

[carmine stream]

were an msp we do what we can

[pallid lotus]

Aye

[proven escarp]

well, i am working in kali linux and kinda know vocab, like dns http https and stuff like this, working with nmap and brute force, and i learned some of the html language

[pallid lotus]

So, tech fundamentals.
Keep working on those foundations. Build a lab environment (virtual good, physical a bonus). Do some overthewire to get comfortable with Linux.

End of the day, hacking is an applied mastery of other fields in computer science. The stronger your foundations, the easier you'll find offensive security

[proven escarp]

thanks buddy

[blissful snow]

hi

[carmine stream]

well there are prereq's to understand before attacking anything of course. If your attacking network services or functions then your gonna need to understand networking, if its a webapp youll want ot understand requests and apis, hardware requires an understanding of the logic gates etc

[sinful moon]

Just curious, does anyone know of potential concerns or gotchas with hosting Unifi Network Application/Controller on VPS/cloud resources in production? Seem like many do so though, and similar to my personal (local VM) setup but wanted to put out feelers

[carmine stream]

get used to identifying that feeling of not knowing something and then taking the time to research it. Dont reinvent the wheel here AI is very helpful with indepth conversations. I suggest perplexity

[carmine stream]

unfi's cloud portal isnt bad, i recommend researching there current vulnerabilities if disclosed

[sinful moon]

Yeah I stay on top of that but we do prefer the self hosted Unifi solutions, but that’s actually fair. Not sure why my employers won’t consider the actual Unifi cloud

[pallid lotus]

Oh God. Please do not use AI to learn new topics.

[sinful moon]

beyond lesser control

AI is great for drudgery for topics you already know

“Write me a a professional paragraph about [x company] for our company partners page”, used that within the last couple weeks when told to update the website lol

[pallid lotus]

If you must use it to learn then it can be a reasonable way to tentatively expand an existing understanding. I.e., signpost resources to expand your understanding of a topic.

But never use it for a topic you can't call BS on its responses

[carmine stream]

do your own research everyone has there opinions about AI. All you have to do is care about what your learning, if you do you will ask more in depth questions. Perplexity is a live browsing AI which simply pulls its answers from multiple up to date sources. You can watch its thought process and view the sources its getting its answer from, it simply searches faster then you

[north raptor]

how is the SAL1?

[finite basalt]

My favourite is getting isbns for books of interest for a subject

On the odd occasion where I use it that is

[warm grotto]

I've been rather impressed with ChatGPT lately, but I haven't tried to really grill it on anything very technical.

[sinful moon]

lol although then there’s the Chicago Sun Times where only 5 of their 15 “2025 Summer Reading Picks” were real books

[river meteor]

hi

[carmine stream]

welcome

[finite basalt]

Well yeah but that's where asking for the ISBN is handy

[sinful moon]

totally fair

[river meteor]

can anyone help me

[sinful moon]

that’s a good question lol

[finite basalt]

Only takes a second to look it up, it's more helpful for getting started finding resources for niche subjects occasionally

[sinful moon]

can anyone truly help you? Especially without any info or context?

[river meteor]

what is the syntax of ping 10.10.10.10

[finite basalt]

Although that's for when my Google abilities aren't quite enough

[sinful moon]

you literally just did it

that’s it

[finite basalt]

As you said it haha

[sinful moon]

for THM, that’s a good check to ensure you’re connected to the VPN properly, although 10.10.10.10 is often also an example IP

[north raptor]

I really need advice on how to get an internship, I have been looking for a long time now and have been getting constant rejections

[fallow bridge]

I think I'm done for the day, going to bed. It is 10pm here. I have had a very fun day doing the cybersecurity 101 section. I learned about Active Directory through Coursera IT course, but I really enjoyed the hands-on experience of that room. I learned a lot more than I did using Coursera

[warm grotto]

Not gonna lie, I like 10.x over 192.168.x.

[sinful moon]

I mean obviously, but for sure depends on how much scale you actually need

[finite basalt]

This is so nostalgic

[sinful moon]

lol is that rock band, let me grab my headphones

Oh it’s scooby

lol

[finite basalt]

Is scooby doo 2 monsters unleashed 😂

[sinful moon]

I have barely ever watched this second movie

[last harbor]

Wsp long Time no see

[north raptor]

what difference does it make? they are both private IP ranges, atleast upto a certain point

[finite basalt]

I've watched it a few times, mystery begins and monsters unleashed were great

I wasn't too fond of the other one on spooky island

I thought that one was overrated

[last harbor]

Gl on ur journey. Dm me anytime if u want any help or advice

[last harbor]

Idk

[uncut breach]

I remember watching that one when i was younger, it creeped me out.

[sinful moon]

You can do massively broader networks with 10.x style networks. I forget the nomenclature of Class A/B/C but, 192.168.x is a much more limited scheme

[finite basalt]

Nah nah it is haha

[warm grotto]

From what I gather, enterprise and corporate likes using 10.x for obvious reasons where as 192.168.x is pretty good for LAN and SOHO networks, but I'm lazy and like that I can type less numbers.

[sinful moon]

mostly ideal for actual businesses

[north raptor]

yeah I am aware but I mean, they both pretty much serve the same purpose (without context)

[finite basalt]

Honestly I loved that one so much

[north raptor]

oh yeah that makes sense

[sinful moon]

Yeah that’s more what I meant

[north raptor]

I like to use 10.x.x.x in my GNS3 labs too

[sinful moon]

You can do 10.x.x.x on your home network and labs but lol you’re likely not going to run out of 255ish subnets on 192.168.x.x

[warm grotto]

Yeah. The lazy part comes into significant play for me.

[north raptor]

Its been a couple months since I passed my CCNA, I need to brush up on some networking knowledge again

havent gotten a single interview tho, it really sucks

[warm grotto]

I've been going over the Google Cybersecurity Certification on Coursera. It's kind of whatever compared to Security+, but eh, 90 bucks for a Cert is not bad.

[sinful moon]

yeah just regular clients on my network range around 30-40 machines so it’s nbd, then I just have other subnets for my VLANs for labs and etc

[north raptor]

its terrible, I'd recommend doing CySA+ instead

my Sec+ is gonna expire in October so I need to get that done before the deadline

[sinful moon]

Yeah the Google one will be of limited value

[warm grotto]

Do organizations typically care if you've got an expired cert?

[north raptor]

I think they do

[sinful moon]

I mean technically you can’t claim you still have it when they expire

but yeah that’s the crappiest thing about certs

[warm grotto]

[sinful moon]

They say it’s for continuing education but they just want the re-occuring revenue

[north raptor]

The job market sucks right now anyway, all you can do is renew your certs

[warm grotto]

Makes me think you'd have to go through the entire A+, Network+, Sec+, Pentest+, CySA+ pipeline all over again if you've already reached the finish line.

[sinful moon]

Uh, you for sure won’t need A+ and Network+ depending on your intended field there. That’s kind of assumed what with the rest if you’re going into infosec

[warm grotto]

I'd guess they're then more interested in your immediate certs?

[north raptor]

I feel like certifications dont even matter anymore, I am gaining no traction with mine

[sinful moon]

mhmm

I meant for 0x90’s statement

Work experience will help even more imho but I’ve not been through this gauntlet often

[warm grotto]

So if you're in a SOC role or BlueTeaming or some crap like that, then I guess they wouldn't care that your A+ expired. Not bad, then, I guess.

[sinful moon]

Honestly in my understanding, A+ is “i know the basics of computing and fixing things”

not really a infosec cert

that’s just at least the vibe that I always got from the study materials

[topaz falcon]

I feel like some workplaces just use a checklist, if you've done A+, sec+ etc. then that's all they really care about but idk I am really drunk atm because I didn't realize having a specific amount of IPAs would get me super drunk

edit: this is not what I meant to reply to

[sinful moon]

lol there’s nothing special about IPAs that would make them less intoxicating

[warm grotto]

At least for me, I have 0 experience in a formal IT environment, so I've probably gotta start with A+ and Help Desk jobs, but yeah. At the very least, I've been looking at the Google IT Certification, but kind of ADHD'd into the Google Cybersecurity Certification.

[sinful moon]

Yeah I got my in with help desk and just rapidly got recognized for infosec and more, but really small org where I’m at

[north raptor]

pretty much same for me, and have been looking for internships while I am doing my masters

[sinful moon]

But yeah I don’t think A+ is worth it

If you can prove a higher tier cert, kinda useless to have the basic ones. Nah even then imho, Zumi

[warm grotto]

Google's Cybersecurity Cert at least seems to give you a 30% discount on the Sec+ Cert, so that's a bonus I guess?

[north raptor]

I have a couple certs but I feel like the barrier to entry is just too high, a couple certs arent gonna cut it

[topaz falcon]

to be fair I don't drink often but they are more concentrated than some beer I have had before

[sinful moon]

Meanwhile no certs and no college for me. Just hoping my 5 years experience and lol, connections will get me through. But I have been planning on certs for a while, I’ve studied for Sec+ before and from what I saw I basically don’t even need to study lol

[warm grotto]

At the very least I'm tight for Cash as I've decided on changing careers and currently unemployed, so I can't really fire off a couple hundred bucks in one go very easily. I'm just tryin' to get my foot in the door.

[full wave]

can u cancel THM subscription anytime?

[sinful moon]

depends if you’re monthly or yearly, but yes. Just for yearly I believe you pay upfront

[north raptor]

shit man, I feel ya, got uni debt to pay and I already regret taking up a Masters in Info Sec

[full wave]

no monthly

[sinful moon]

then sure, anytime. You’ll only be charged for your current month if you’ve already passed that deadline

[warm grotto]

Yeah. I was in the Trades, and I've still got it as an avenue, but I had a realization that I don't do wrenching in my spare time like the others I worked with. Kind of occured to me that I should devote my time into something I tend to gravitate towards or hover around, and that's just IT in general.

[topaz falcon]

every day I am glad tryhackme exists because honestly college has not given me all I need in terms of practice. one of the few services I'd pay for.

[full wave]

yo master in cyber is good or not?

[sinful moon]

And yeah some IPAs can be 5% abv vs the more typical beer 3%-ish

[north raptor]

nice, 5 years is really good!

[last harbor]

That’s good. I personally read books, watch vids and do other stuff for enhancing my knowledge

[topaz falcon]

i got a voodoo rangers pack btw which is like 9%

[sinful moon]

Thanks but lol I’m more than ready to move on

[north raptor]

would love to connect with you professionally, if possible.

[north raptor]

I wouldnt say it is, tbh

[last harbor]

First off, u can’t fully master it cause everyday, new attacks and threats r getting discovered. However u can learn stuff according to ur satisfaction

[topaz falcon]

that's fair, my college only offers a couple courses for cybersec as a "concentration" into the area, whcih is fair but not enough

[sinful moon]

Sorry I can’t give you any good legs up where I’m at if that’s what you mean lol. This is a really small org lol

[north raptor]

its just the name of a degree, it doesnt actually mean youre a "master" of it

[warm grotto]

The "Extra Competent" stamp of approval by a University.

[last harbor]

Yup. Also my DMs r always open for free resources and advice so dm me whenever u want

[topaz falcon]

appreciate it black hydra

[last harbor]

Ik people who don’t have any degree and earn more than someone who has a degree

[north raptor]

nah thats not what I meant, I am just connecting with people on Linked and disc to learn more about IT and InfoSec in an enterprise environment

[last harbor]

Ofc man

[sinful moon]

lol I don’t even have a Linked-in

I’m delaying that for as long as humanly possible

[warm grotto]

Professional Social Media is still Social Media.

[sinful moon]

I am not big on social networking, even if that is job related, I hear infosec Linkedin is especially cringe lol

[warm grotto]

[topaz falcon]

it definitely is

[north raptor]

its insanely cringe

[sinful moon]

Yeah seen screenshots of so many insanely bad takes lol

[north raptor]

it doesnt come naturally to me either, but I am cooked if I dont

[sinful moon]

totally fair

[north raptor]

I hate it tho, its weird

[topaz falcon]

i may be super drunk but honestly anytime I check linkedin it's cringe.
that or half the time it's in portuguese because I added people from brazil when I was younger for no reason.

I seriously do not understand why I added so many brazilians

[north raptor]

yeah that makes sense, but getting into IT right now is a living nightmare honestly

[last harbor]

Until u realized

[warm grotto]

My only experience with them is being swarmed by them in MMORPG servers and then seeing them rolling spam "jajaja" across the screen.

[sinful moon]

lol the Japanese equivalent is long strings of “wwwwwww”

[warm grotto]

Yeah, that's what I'm dreading. There's such a huge amount of competition and corporate hoops to jump through which kind of has me feelin' some kinda way about it.

[sinful moon]

as always, if it’s your first time in any kinda IT field, Help Desk is a good foot in the door and honestly gives you many more necessary skills you will require throughout your career

[north raptor]

even help desk positions are difficult to get right now, thats the thing

[sinful moon]

fair enough :c

[warm grotto]

What would one expect out of Tier I?

[north raptor]

I applied to just about every available internship for the Summer and I didnt get anything, now I am applying for the Fall

[sinful moon]

literally anything, and usually dumb things, but sometimes something more advanced

[north raptor]

well

you better know someone at the company

or you're cooked

thats what it is

[topaz falcon]

man I'm just hoping to get something in SOC or sumn after college, I hate this job market

[sinful moon]

Oh placement wise? Yeah, having hooks like that helps ton. I may be moving to a much larger org soon but we shall see

[warm grotto]

I tried youtubing the differences between the Tiers and it was some kinda generic but vague answers from some of them about what Tier I does.

[sinful moon]

you mean SOC or help desk?

[warm grotto]

Help Desk.

[sinful moon]

THM actually has good rooms on what the SOC tiers are

oh for Help Desk, level one is literally anything, and it really only progresses if level 1 gets stuck and escalates

[north raptor]

yeah same, applied to a lot of SOC internships

[topaz falcon]

I think tryhackme has a good SOC thingy word for application thingy you pass jfc I'm drunk

i don't remember the word but their thingy is cool, really enjoyed it.

[warm grotto]

Ah, okay. So you're kind of the Go-To to fix something until it becomes something weird and whacky, then you send it up to Tier II, or it gets sent up to Tier III?

[topaz falcon]

wishing for your success homie, I'm sure youll do great.

[last harbor]

Tbh college ain’t worth it

[sinful moon]

typical level 1 call “help I can’t open this PDF”, “dude it’s because you broke the 255 limit on paths and etc, just like rename your files”.

Level 2 which level 1 could probably still handle is like “help I can’t send invoices via my program this month” (turns out it was SMTP, and we just enabled MFA for this client in 365, so it needed an App Password as authentication to go through).

[topaz falcon]

I disagree, but that's because I'm in college and whether we like it or not, degrees are needed regardless of what we know now these days because of it being apart of the checklist. college is needed for newcomers, not really out of choice I think.

[sinful moon]

lol I can tell you many practical real world help desk examples since my org is small enough I often dip into the pool still

[warm grotto]

Ah yeah, okay. So even without my experience, I should be able to handle Tier I if I've been troubleshooting people's stuff in my spare time anyway.

[sinful moon]

yep pretty much

you very quickly learn also the enterprise stuff you wouldn’t normally be exposed to as well

[north raptor]

yeah please do, I need something to talk about in my interview (if i ever end up getting one, that is)

[topaz falcon]

you'll get one

[warm grotto]

Do you get much exposure or mucking about with AD as Tier I, or is that more something Tier II's trusted with?

[north raptor]

thanks a lot! same here as well, wishing for your success too! what are you studying currently?

[twin ridge]

Gave +1 Rep to @topaz falcon (current: #2896 - 1)

[sinful moon]

lol not sure what kind of examples you’re looking for but typically level 1 stuff is simple af. “Help I’m locked out of AD” (they phrased as can’t do “network password”), “Help, I’m not getting emails” (you literally toggled Outlook’s “Work Offline” button, ez fix). etc

[topaz falcon]

csc with a concentration in cyber. having to use thm to learn more important aspects of cyber. I'm trying to go on a path from SOC to reverse engineering since I like messing with assembly

hbu?

[sinful moon]

or dreaded printer stuff. The most recient printer issue I solved is “just reboot, your machine has been up for over a month” “oh, it’s fixed!”

that was easy but printers are more often hellish

[warm grotto]

Oh, that's brainrot easy. Okay, cool. So any time I've locked myself out of my account due to typing in a 15 character password wrong 3 times would be likely a Tier I that I was phoning.

[sinful moon]

Yeah level 1 stuff is often super simple

you just have to be prepared to filed literally anything, and if you need help ask a tier 2 or another co-worker, and if truely stuck, sure then you escelate entirely

[north raptor]

Oh nice thats good, you'll def get something in a SOC! I am currently doing a M.Eng. in Info Systems Sec and have a bachelors in Comp Sci but that was more AI/ML shit which I didnt really like

[warm grotto]

Probably more props for figuring it out yourself and solving it if it's something you can sort, though? Or does levelling up to Tier II generally come with Cert promotion?

[knotty valve]

Not yet no

[warm grotto]

I don't know if it's common for them to review your fixes.

[topaz falcon]

look ill be honest I am too drunk to understand this completely but I am sure you'll do great. if you have something to show for it like thm or projects, you'll get it. just keep trying my friend.

[last harbor]

Ik successful people who r successful without going to college. Ik people who r broke but went to college

[sinful moon]

But then there’s ultimate hellish scenarios, “you all shipped me a Mac, and I’m read to be set up with MFA and get going”… but wait the MFA doesn’t work upon reboot because Macs aren’t connected to internet first login, and Offline Codes don’t work because this is the first ever authentication. That was a hellish catch 22 I solved

[topaz falcon]

absolutely the case, however it's important to understand the current job market requires mostly bachelors in csc due to just how american job market works, unfortunatley, as well as the issues those without it will face. if one can get into the field without, GREAT! however, if you can go to college for free like myself, then do so yknow

[sinful moon]

I had to disable our MFA via Recovery Mode to get her in, and then re-enable it once it was connected to the internet properly lol. That is easier said than done

Thank you co-worker for not anticipating this expected issue and not registring offline login for our admin account either! 🙃

[north raptor]

yeah I got a couple projects here and there, also applying to jobs takes up like 80% of my time, it takes such a long time so I cant even do other things I wanna do

applying to jobs is a full time job

[topaz falcon]

after this school year I'll prob be the same ngl, got one more year left

[north raptor]

thanks a lot for the positive reinforcement

[sinful moon]

I’ve only worked at a smaller org, but generally just your talents gets you the bump

[topaz falcon]

no need to thank fsociety, thank yourself for trying hard

[north raptor]

yup I'd suggest sending out atleast a 1000 applications

[topaz falcon]

I am simply a very drunk man waiting for witcher 3 to download on my switch

[north raptor]

W witcher 3

[sinful moon]

It’s not an awful port (actually kinda limit pushing and neat), but is that really the only platform you have for such?

[north raptor]

one of my all time favorites

[topaz falcon]

gonna send it all to one company only then complain on reddit that I can't get a job

[sinful moon]

lol

[topaz falcon]

I have it on pc but I like to separate where I work and play due to adhd

and I am not home currently

[sinful moon]

No I’m the same, but I have seperate work and play PCs for sure

[warm grotto]

Okay, sweet.

[celest dirge]

I'm waiting for you to hop back on and take first place

[north raptor]

I am very disorganized, I am so disorganized, in fact, that I run WSL2 with Kali and Ubuntu on it

[warm grotto]

At least I know what I'm applying for, now, so that's cool. I think my interests and spare time stuff I put on my Resume might be a bit overkill then for the position, but anything helps in that end, I guess. Thanks for the info.

[twin ridge]

Gave +1 Rep to @sinful moon (current: #31 - 312)

[sinful moon]

Within my first couple weeks, I got to address Log4Shell vulnerabilities and patch our Unifi controllers and that quickly got me recognized as being more of a sysadmin/infosec type lol

But I will re-iterate, we’re like double digits amount of employees lol

[topaz falcon]

you use a computer?? don't you know its more secure to not use any technology? I just use my mind. you are all figments of my imagination (therefore you are all very TAX PAYING CITIZEN and granted tickets to disneyland)

[warm grotto]

Yeah, fair. At least the company I've got an interview lined up with next week's got the 100 range of employees. Probably less than.

[sinful moon]

Kali in WSL sounds like a bad time lol

[topaz falcon]

that honestly sounds epic

[sinful moon]

missing the point and not as fleshed out as a full VM, as VM-ish as WSL2 is

[north raptor]

it is but works for THM pretty well

[sinful moon]

ouch but fair enough

still run a real VM imho

[north raptor]

VMs are slow though

WSL is fast

[sinful moon]

WSL2 is already a “slow” as you say VM

[topaz falcon]

you know what is also fast @north raptor ?

[sinful moon]

it’s just Hyper-V

[north raptor]

thats the only reason I like it

[north raptor]

yeah?

[topaz falcon]

chicken butt

[north raptor]

thats valid

[sinful moon]

but sure since it’s Hyper-V that’s level 1 hypervisor instead of level 2 hypervisors (userspace)

[north raptor]

thats so valid

[north raptor]

Type 1 hypervisor yep

[sinful moon]

so like run an OS like Linux where you can just do kvm for level 1 hypervisors without bothering with Hyper-V garbage

[topaz falcon]

thank you thak you, I am here for one hour longer until witcher 3 is downloaded

[twin ridge]

Gave +1 Rep to @north raptor (current: #2896 - 1)

[sinful moon]

personally I have a whole Proxmox server which is just the Linux qemu/kvm equivalent to VMware ESXi/vSphere

if that’s overkill then virt-manager on a Linux workstation does the same

[last harbor]

Ik many people with degree who have no jobs. And ik many people who don’t have a degree and have jobs just because they played smart instead of hard

[sinful moon]

For Windows you really are stuck with Hyper-V if you want level 1 hypervisors. VMware Workstation Pro and VirtualBox are both level 2 and userland

[north raptor]

I have to use Windows for now, I dont have an extra laptop that I can fully run Linux on

[warm grotto]

KVM/QEMU.

[north raptor]

as much as I'd love to be able to do that

[warm grotto]

[sinful moon]

which honestly I never really had any issues with VMware Workstation Pro performance, but since you’re claiming “slow” might as well explain

[north raptor]

its slow even though I've allocated a decent amount of memory to my VM, Idk it just feels clunky and slow for me

[sinful moon]

And installed guest tools or just used open-vm-tools on Linux?

[north raptor]

I have installed many tools on it, of course

[sinful moon]

good just gotta check

my SO is awful about remembering how critical that is lol

[topaz falcon]

again completely fair but I do think we're past the age where the majority of jobs would be applied in such in America, I would not likely get a job without a degree here.

[last harbor]

Ooof rip
Man

[sinful moon]

there is a bit of a game changer setting in VMware Advanced settings for write back though

just like for optimial performance with Windows on qemu/kvm you do the same for the drives

[north raptor]

WSL is pretty cool though, I can use Linux commands on Windows, I feel like thats kinda sick

[rapid merlin]

Not today.

[north raptor]

what is it

[sinful moon]

I just always found it far too limiting for anything other than dev use

lol I’d have to check, I now a days won’t touch VMware with a ten foot pole so I don’t have it installed

but it’s whatever does writeback, either that or RAM purging stuff

Oh I lied, I do have it on a computer handy, one sec

[topaz falcon]

tbf I go to college for freee so its not all bad, I have enjoyed my time even if it is mostly swe experience. it's been fun

at least i am not learning java

[last harbor]

I mean free college is good

[boreal gull]

lol discord has u blocked by default, it says to me you're a spammer

[last harbor]

I just hate student loan

[sinful moon]

okay I was sorta close “Disable memory page trimming” despite the name, can help

[topaz falcon]

i agree, I am fortunate in my situation.

[last harbor]

Fr man

[celest dirge]

Alright, and why does discord think you're a spammer 😭

[boreal gull]

o i am also doing vm management stuff rn

[topaz falcon]

what i am not fortunate in though is how drunk i am because i am stupid

[arctic gyro]

Should I learn SQL?

[sinful moon]

yes

just the basics you need for infosec imho

[topaz falcon]

postgresql my beloved

[sinful moon]

yeah also keeping postgresql maintained for metasploit can be a whole thing lol

[arctic gyro]

Will Only Basics be enough
Cause I want to learn SQL Injections

[topaz falcon]

ye

[sinful moon]

this be "real" VM management stuff

Although don’t believe the HDD space, it actually has 64TB

also dramatically low use because we’re not doing crazy encoding and etc as normal

[arctic gyro]

WTF

[topaz falcon]

nuh uh, I am too dumb to understand so it must not be true

[arctic gyro]

https://tenor.com/view/what-monkey-shook-shocked-surprised-gif-8153885586429536809

[topaz falcon]

download more space?

[sinful moon]

lol it’s this guy:

[topaz falcon]

alright witcher 3 is done downloading, y'all have fun xx love y'all yada yada you all matter and don't forget to do your best, your life is your own journey, do not compare it to others, you have a purpose only you can create.

[sinful moon]

Dell Poweredge T430, expanded out to the second CPU socket so 2x Xeon, maxed out RAM and I think, maxed out storage

[topaz falcon]

also elizabeth is a nerd be wary

[sinful moon]

<3

[arctic gyro]

Why is the RAM more than The Hard Drive Space/Storage

[topaz falcon]

scary

[sinful moon]

As I said, it’s only showing one of the storage pools, the main pool is a good 58TB

total of 64TB

but lol even then we mostly use the NAS for actual long term storage, this is active storage

NAS is at 48TB

[arctic gyro]

Why do you need that much Are you making GTA 7

Or 8

[warm grotto]

At the rate of GTA 6's development and release, GTA 7's gonna be like a Nerve Gear release.

[sinful moon]

encoding and ripping physical media, while running labs, and critical network services. The performance is minimal rn because it’s under like no load

Here’s what the CPU time graph looks like when active when it was still on VMware lol

literal insanity lol

[arctic gyro]

Is it for your personal use or CORPORATE

[sinful moon]

Personal, but it closely matches (or even beats) some of our clients at work

[arctic gyro]

Hybrid

[sinful moon]

Last 5 years I’ve been administrating these same Dell Poweredges remotely from 800 miles away, so about 3 years ago I felt I wanted one for my home lab stuff

got to touch it and set up from the ground up

and yeah having the lights out management of Dell iDRAC was something I desperately wanted

[crystal mauve]

lol

[arctic gyro]

How much it costs?

[sinful moon]

this is a 2016ish era server, about $800-$1000 maxed out

[arctic gyro]

Will get something like it in Future

[sinful moon]

I would recommend a cluster of Dell Optiplexes in Proxmox though vs a big monolithic guy like this though

unless you really need big compute for some reason (our ripping and CPU encoding [GPU encoding is worse quality])

Vast majority of home lab cases and local network services will run just fine on a cluster of much smaller computers

So no need to break the bank. The main reason I did this was for experience with the same kind of setups we have/had on prem for our clients at work

[arctic gyro]

Ok tell me where can I learn SQL for free

[sinful moon]

I mean THM has good SQL rooms, really the SQLi ones teach you the basics to get into this

but beyond that, I hate to say it, but did you google it? lol

[topaz falcon]

freecodecamp

i'm using it in preparation for my dbms class in a couple days for fun

[arctic gyro]

I want to learn the language so I can craft custom injections myself without help of any tools

[sinful moon]

you don’t really need to learn how to be a DBA (well I guess stack there does) but yeah

just enough to get around

[blissful current]

ello

[blissful current]

ello

morning

[arctic gyro]

Is Coursera IBM SQL and Database course good I can audit it for free and use the resources

[arctic gyro]

Ello

[topaz falcon]

ye

[sinful moon]

Looks like IBM Cloud uses MySQL so sure that’s fine

(because actual IBM SQL is a 1981 product lol)

lol I love that I did initially come here with a question but yeah not too many people here doing self-hosting and devops.

Ended up asking my friend who is now a bigwig manager in his infosec department lol

spinning off from that, I do love my freaking Unifi equipment at home but yeah expensive. I rolled my own personal self-hosted solution, but now work is just asking me to do the same in production. No pressure lol

For home use though, damn I love having an actually robust mobile app.

I’ve just never seen a mobile networking management app be just about as robust as the web version. You can do about 97% of the same config just in the app

[median pond]

I am studying for comptia linux+ is there any rooms on thm that could benefit me?

[sinful moon]

There’s the Linux fundimentals rooms which do actually teach you some good stuff which is a bit more in depth than one may expect

[hearty otter]

Yo

[hearty otter]

You should try some bash scripting. Even simple ones teach you a lot. For me, it worked

[empty ember]

Did you guys know u could do this bc /etc/passwd has write options

[sinful moon]

lol wrong reply, tell the other user, I’m well versed in bash scripting and more

[hearty otter]

And what's ur problem

[sinful moon]

18+ years of Linux myself

you atted me lol

[hearty otter]

And you wanna learn fundamentals of Linux

[round onyx]

the single free one should get you familiar with linux terminal enough to get working

[hearty otter]

😄😄

[sinful moon]

I don’t think you read the conversation lol

[empty ember]

Everyone's admin yipee

[woeful cedar]

GTA 7 would be released by the time I have grandkids

[woeful cedar]

I tried using linux for gaming

Dont think i will try again

[round onyx]

hag
https://cdn.discordapp.com/emojis/860953188119216138.webp?size=48&name=TenmaYou

[sinful moon]

was replying to JohnDoe.exe

[hearty otter]

Maybe you won't even be alive when it's released

[woeful cedar]

Will stick to windows as daily driver

[woeful cedar]

Maybe

[sinful moon]

lame

[warm grotto]

I've found Linux Gaming is pretty doable, just barring those aggressive anticheat games.

[sinful moon]

Linux gaming is in a fantastic spot right now, but fair to each their own

[woeful cedar]

Unfortunately I do play those games with anti cheat with friends

[warm grotto]

Then again, I don't want a kernel level anticheat running on my system anyway, regardless of their assurances.

[sinful moon]

If linux isn’t your jam, use what is

[hearty otter]

My fav game is still not supported

That's terrible

[woeful cedar]

I play GTA Online alot and it doesn't work on linux

[round onyx]

steamOS is released rn i think

[hearty otter]

So many games don't

[sinful moon]

it used to, until they broke it with Anti-cheat again lol

[woeful cedar]

Ehh alot of my games dont work
And the ones who do, they perform worse than windows unfortunately

[sinful moon]

but like GTA Online is just online gambling timesink anyways lol

[round onyx]

did the amount of modders get reduced because of battle eye? :v

[warm grotto]

Ah yeah, fair enough. It made me sad that I couldn't play Battlefield V anymore because of their new EA Anticheat. I wanted to max out every weapon and vehicle, then never play it again, and I can't even do that now.

[sinful moon]

lol expect for the ones that perform dramatically better than they do on WIndows

Elden Ring, GTA IV, good bit more

[woeful cedar]

Yea they're lesser than few months back IIRC. I usually just play on private sessions and do missions with friends

[empty ember]

I wonder if gta is gonna re use the same dll's

[sinful moon]

it’s so bad on Windows that DXVK ported from Linux on Windows helps them dramatically lol

[woeful cedar]

In all honesty, GTA IV worked better for me on windows

I had some issues running it on linux

[sinful moon]

depends on what you define as “working” lol

[empty ember]

112 gb for a game is a lot

[woeful cedar]

It ran well

With 180-200 FPS

Probably just a me issue but still

[sinful moon]

I want smooth 60+fps with good frame pacing, Windows falls far below that

[woeful cedar]

I can also play ray traced games

Cause i have an RTX 4080

[sinful moon]

I’ve tested both without and with DXVK on Windows and just the same as Linux, massive improvement

[woeful cedar]

Well I guess we both had different experiences

[sinful moon]

Ray tracing works on LInux as well? lol

[woeful cedar]

I couldn't figure it out unfortunately

[sinful moon]

Just install Nvidia propritary drivers and like done

[warm grotto]

Sometimes you had to enable some particular switches in Steam's launch options, but now it seems RTX just works out of the box with Proton Experimental.

[sinful moon]

sudo pacman -S nvidia

[warm grotto]

Ayeeee, Pacman!

[woeful cedar]

Its probably just an issue from my side

But I'll stick to the convenience of windows

[sinful moon]

Fair enough, and sure there’s some weird edge cases with specific machines on both OSes

but Windows is literally inconvenient for me lol

[woeful cedar]

I use Kali on VM anyway for studying cybersec

[woeful cedar]

I assume you've used linux longer than you have used windows

[dark mason]

Morning chat

[sinful moon]

That being said, I’m OS agnostic, Linux may be my main but I use all three major OSes on the daily

yeah 18+ years Linux for me

[woeful cedar]

Yea in my case its the opposite
It just depends on what you're used to

[sinful moon]

I’m typing on a freaking iPad Pro with a logitech keyboard rn so yeah I’m not actually too picky if it gets the job done

[safe oxide]

[warm grotto]

I got really bored in 2020 so I ditched windows when 11 came out and haven't really looked back.

I did have a stint where I would KVM Windows using a GPU Passthrough script, but when Steam got better, I was good.

Though I started with Garuda. Garuda annoys me now, so I went to Endeavour.

[lunar stone]

bruv, my spacebar is broken, the most important key

and i use my resistance to activate it

[woeful cedar]

How are you typing then

[sinful moon]

lol rebind Caps lock to space

[knotty valve]

I relatively easy fix if you didn't break the actual key itself and only the cap or the bar(s)

[sinful moon]

I’m still just Arch but totally fair

[lunar stone]

really?

i broke the key retainer

and the key

[knotty valve]

....

How

[woeful cedar]

Buy a new keyboard

[knotty valve]

Do you literally just smash your keys when your typing

[warm grotto]

I kind of want to just run a vanilla Arch build to be honest. I've been very tempted and just custom configure everything.

[sinful moon]

Yeah been doing so since 2008

[knotty valve]

I'm running a fedora setup on my laptop rn

[sinful moon]

although yeah I just go archinstall these days

[lunar stone]

it is the integrated rgb led keybord of 200$ onto my laptop

a big loss

[knotty valve]

planning to change to void

[sinful moon]

enjoy lack of packages!

[knotty valve]

Again, how'd you break that

[sinful moon]

but maybe that’s changed

[knotty valve]

the keys are gel

You literally need to smash the keys 😭

[lunar stone]

something got stuck in it, and while removing it, it popped right out.

[knotty valve]

That's why you be careful with laptop keys

[lunar stone]

dell laptop, inspiron 15 5502

yeah

the dell exclusive store says that i will need to pay 500$ to them to fix this

worth more than the keyboard itself

[sinful moon]

dude just get the replacement part

[knotty valve]

Yeah cause you're paying for labour, warranty and the board itself lol

[sinful moon]

it’s usually not too hard to replace the entire keyboard assembly yourself

[knotty valve]

just, don't pinch the tape cable

[lunar stone]

i have a old ps/2 keyboard

[sinful moon]

*ribbon cable but yeah (sorry being pedantic)

[knotty valve]

or break the latch on the mobo

[knotty valve]

I never remember the actual name 😂

[sinful moon]

totally fair c:

[knotty valve]

I've called coaxial "round cables"

[lunar stone]

even the hid connecter is broken, fan missing

[knotty valve]

Which is funny when you're setting up a satellite receiver

and you look your coworker dead in the eyes going "you know, that round cable with the pin in the middle?"

[lunar stone]

i have been there

[knotty valve]

I've been given USB cables cause I've called DP and HDMI "rectangle cables"

cause I forget the names

[shut quartz]

Any of you ever made your own cat5e cables

Pretty cool experiment

[lunar stone]

nah, but a encryption algorithm

[knotty valve]

Nope, but I did splice together two USB cables 😂

I was too cheap to buy an adapter so I cut two USB cables, soldered the cables, and wrapped in heatshrink so i could have a male-to-male USB

[shut quartz]

Okay yeah that’s cooler

[knotty valve]

That same cable is also being used in production environment

which is Not Good™️

[scarlet vale]

hi

[knotty valve]

Straight-Through, Cross-Over?
Shielded or Unshielded?

[shut quartz]

Straight through are the ones I did

[knotty valve]

nice

Crossovers aren't too different really

[safe oxide]

hallo mortals

[blissful current]

[safe oxide]

hallo karma hows was the breakfast

[blissful current]

i missed the breakfast ...i had to go to college for a report submission ;-;

[round onyx]

i meannnnnn
as long as its not encountering any sort of high amps it should be fine

[knotty valve]

[shut quartz]

Yeah the ones I usually made were just in home router to pc/switch ones

[knotty valve]

It's a receiver for SATCOM gear

it's definitely going to fail eventually

[safe oxide]

hehe

[blissful current]

usual for me ...i rarely do breakfast

[safe oxide]

[round onyx]

same i do brunch instead :v

[blissful current]

yes

[safe oxide]

degenerate gamers

lol

[blissful current]

game dev*

[safe oxide]

hmmm same category

[blissful current]

[round onyx]

https://tenor.com/view/blender-3d-glitch-pixels-artifacts-gif-26391318

[safe oxide]

magic

[round onyx]

yesh cube magic :3

[blissful current]

[safe oxide]

blender

[knotty valve]

Most useful AI

[blissful current]

what AI is even that?

Gemini?

[rapid merlin]

That interface is definitely Gemini

[blissful current]

ya lol

[atomic veldt]

why i didn't get these type of answer

[knotty valve]

Because that's not how seeding, inference, and neural networks operate

[round onyx]

https://cdn.discordapp.com/emojis/585635824884908046.webp?size=48&name=squint

sounds very familiar

[hasty rover]

👁️ 👄 👁️

[blissful current]

We dont do that here

[hasty rover]

Cmon guys this is easy money

It’s not illegal

[blissful current]

it is

[hasty rover]

Oh mb

[naive violet]

If you use the report feature, the mods will then see it

[blissful current]

Okays

[grim sparrow]

:hammer: elcat1013#0 has been banned.

[lilac fjord]

One message removed from a suspended account.

[mossy river]

It’s not something we can discuss here in afraid

[lilac fjord]

One message removed from a suspended account.

[blissful current]

advanced channels only i guess

[lilac fjord]

One message removed from a suspended account.

[blissful current]

u need rank of 0xD on THM or official Certifications to access those channels

[lilac fjord]

One message removed from a suspended account.

One message removed from a suspended account.

[sick lance]

No

[sharp citrus]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

May 24, 2025, 7:43 AM

[blissful current]

then?

If you hold an OSCP or eCCPT certification
Holding a recognised cybersecurity certification, such as OSCP or eCPTX (or higher)

got it

[sick lance]

We don't really discuss phishing there either as it's illegal

Unless it's contract, even thehn it's not

[lilac fjord]

One message removed from a suspended account.

[pliant vale]

[sick lance]

And legal

[lilac fjord]

One message removed from a suspended account.

[sick lance]

Red hat is ethical and legal

[lilac fjord]

One message removed from a suspended account.

[languid pecan]

Bruh

[sick lance]

Not as often

However like I said, it's illegal to even try and phish

[naive violet]

Red hat is a Linux distribution

You may be thinking of red team

[lilac fjord]

One message removed from a suspended account.

[arctic gyro]

This Distractions are getting me

[unique phoenix]

[queen flare]

I've seen articles where vigilante hackers are labelled as "red hat". If you follow that definition then its illegal.

[naive violet]

Yeah all these definitions are people BSing lmao

[queen flare]

i see

[naive violet]

That's grey/black hat

[queen flare]

Theses definitions say grey hat is who penetrates system without permission
while red hat is who hacks blackhats

[naive violet]

Without permission...
It's black hat with extra qualifiers to make them feel good about themselves by feeling ethically/morally smug

It's all nonsense

[queen flare]

yeah i doubt this is common lingo

never seen a cybersec professional use these terms

only whitehat/blackhat at best

[naive violet]

This is why I believe it's important to call out these terms because otherwise the nonsense is perpetuated, then someone uses them in a real scenario and gets laughed at

[pallid lotus]

Although, in fairness, laughing at people using them in a professional scenario is fun.

[queen flare]

why do so many people use medium for ctf writeups

anything special about it?

[half girder]

they make money with

[naive violet]

Sometimes, and also it's an easy platform

[queen flare]

i see

[half girder]

discussable but not my cuppa xD

[sick lance]

It's worse when they bring purple, green etc

[empty ember]

does anyone know how to fix bind9 saying this
rndc: connect failed: 127.0.0.1#953: connection refused

im just trying to fully sign my ddnsec for my domain

[faint pulsar]

hi, are there currently active coupons for access to aws azure cloud?

[sick lance]

None at the moment.

[sick lance]

ss -tunalp | grep 953

[empty ember]

root@clumsy:/etc/bind/keys# ss -tunalp | grep 953
root@clumsy:/etc/bind/keys#

nothing

im on debain 12 btw

root@clumsy:/etc/bind/keys# rndc reload
rndc: connect failed: 127.0.0.1#953: connection refused
root@clumsy:/etc/bind/keys#
it keeps doing this

[sick lance]

Then there is nothing running on port 953

[empty ember]

oh see im not good at internal networking

ty let me allow tht port rq

[sick lance]

systemctl status bind9

[empty ember]

Failed to start named.service - BIND Domain Name Server.

Process: 268606 ExecStart=/usr/sbin/named -f $OPTIONS (code=exited, status=1/FAILURE)
Main PID: 268606 (code=exited, status=1/FAILURE)

[sick lance]

You configured everything okay?

[empty ember]

root@clumsy:/etc/bind/keys# systemctl status bind9
× named.service - BIND Domain Name Server
     Loaded: loaded (/lib/systemd/system/named.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Sat 2025-05-24 09:26:29 UTC; 3min 16s ago
       Docs: man:named(8)
    Process: 268606 ExecStart=/usr/sbin/named -f $OPTIONS (code=exited, status=1/FAILURE)
   Main PID: 268606 (code=exited, status=1/FAILURE)
        CPU: 44ms

May 24 09:26:29 clumsy systemd[1]: named.service: Scheduled restart job, restart counter is at 5.
May 24 09:26:29 clumsy systemd[1]: Stopped named.service - BIND Domain Name Server.
May 24 09:26:29 clumsy systemd[1]: named.service: Start request repeated too quickly.
May 24 09:26:29 clumsy systemd[1]: named.service: Failed with result 'exit-code'.
May 24 09:26:29 clumsy systemd[1]: Failed to start named.service - BIND Domain Name Server.
root@clumsy:/etc/bind/keys#

That's what it says

[sick lance]

Do you need to install/set this up in root?

[empty ember]

I'm trying to sign my ddnsec

like the domain is up and configured properly but the ddnsec isn't signed and idk why when it should be

[chilly veldt]

@knotty valve how's it going in naham?

[knotty valve]

Not running Naham, doing HackOSINT

And wishing they gave somewhat more clearer formats

[chilly veldt]

oof

[fading perch]

I THINK POSSIBLE

[normal canopy]

Hey guys

[round onyx]

Had to reset our attempts 2 times as well

So that means we lost out on quite abit of points

[rapid merlin]

Does thm have a more phone focused security path?

[chilly veldt]

not really, there's some rooms, but not a path

[rapid merlin]

Do you know anywhere where I can go more phone focused

[chilly veldt]

not really, cause it's pretty advanced stuff

[knotty valve]

Doesn't help I'm doing this mid breakdown

[rapid merlin]

Okay

[round onyx]

Take a break for now and we can continue in a couple

[chilly veldt]

all my phone knowledge comes from working with it and knowing people who are in the scene to get help from

[atomic veldt]

best cyber security learning path?

[hidden urchin]

is there any channel where i can ask questions? like how do i do after learning the basics of computer networks?

[sick lance]

Soon ™️

[rapid merlin]

https://tenor.com/view/bouncing-walls-gif-10159740

Cool

[knotty valve]

Ohhhh, I knew that android room was a hint to something

[atomic veldt]

@rapid merlin do you know cyber security and now want learn phone security or you just want to start with phone?

[tribal patio]

Is all the modules of thm free?

[rapid merlin]

Also why would phone be considered advanced

Just another system

[knotty valve]

Different systems, can hold more sensitive data, telecomm laws, GPS tracking, etc.

[rapid merlin]

I am just pivoting

[knotty valve]

You can track a phone's location more accurately than you can track the location of a laptop

[rapid merlin]

Yeah I know

[knotty valve]

And depending on how far in you go: There's systems like Secure Enclave and Knox

Which don't exist on 2/3 PC systems

[chilly veldt]

cause the phone is harder to get into than a computer?
your phone is one of the most by default hardened and secure devices you can get your hands on as a normal person

[knotty valve]

Tho tbf, you could argue secureboot and TPM falls under Knox/Enclave

[atomic veldt]

oh

[rapid merlin]

Fair, I’ve done some forensics on my phone but I need more knowledge on the system and how it works

[loud marlin]

graphene OS ❤️

bit annoying but it work like charm

[knotty valve]

Now the true question can I run it without losing telecomm functionality

[chilly veldt]

I would recommend never doing anything on your personal phone, cause it can and will leave it more open and insecure

[chilly veldt]

my work phone is graphene

[rapid merlin]

i wanted to install it but i got samsung

[knotty valve]

my work phone is iOS

[rapid merlin]

It doesn’t matter. It’s already been attacked so while I’ve got it I’m going to investigate it

Plus’s live attacks will make me better at security won’t it

[loud marlin]

for work phone all depend on company rules. some is ok to bonk the original os some not so much.

[chilly veldt]

it won't

[rapid merlin]

Yeah it’s a personal phone though

[atomic veldt]

you are in a war

[knotty valve]

my work explicitly tells us not to:

• side load apps
• jailbreak
• install software like Cydia
• install certificates without approval from IT and upper management
  And so forth

[chilly veldt]

and if you're that really keen on getting it investigated and figured out if it's being attacked, go to a professional and get it tested or the cops, there's someone who can help you

instead of going rogue

[rapid merlin]

You don’t think dealing with in world attacks is better for learning than answering questions online

[loud marlin]

that's ok, and all up to company rules. i also have list of DO NOT DO things

[knotty valve]

Once you know what you're actually doing without threat of damaging your system further, yeah sure

[rapid merlin]

The police won’t actually investigate anything unless you’ve got solid evidence

🙃

In England

Maybe it’s different where you’re from

[knotty valve]

but also: Coming from someone that loves forensics, you're gonna miss something that a team of people trained to do it will find

[rapid merlin]

Yeah I know that’s why I really want a job

[loud marlin]

my R&D part do not allow us toi take phone out of our pockets when we are inside. if we get call we need go outside

[rapid merlin]

Because I know there’s stuff I could learn so much better in a team

[knotty valve]

Same, but not just R&D, it's the entire facility

[rapid merlin]

But I’ve still got to start at support desk

😑

[chilly veldt]

what I am saying is, you don't know where to start with this, and can put yourself in more harm than good, and even then you wouldn't be able to see "live attacks", many of the so called attacks that happens on phones are zero click that you wouldn't be able to recognize or see, and the phone area of cybersecurity is so lucrative that you'll need more than just basic knowledge of phone forensics to find out if your phone is infected.

[knotty valve]

if you need to call someone in the company, you have instructions on how

[queen flare]

hello

[rapid merlin]

Yeah I’m stubborn.

[knotty valve]

Sometimes its as simple as a bad cert, or hidden app, other times the entire exploit runs in memory

And if they're working from memory, well good luck finding it without a device directly attached, airgapped, and having all the tools and knowledge to be able to analyse it

[rapid merlin]

Most of this persons exploits have been run at the core. I remember my bios was effed on my pc. They’re running before the system at above admin priv it would seem. I’m still interested in studying it 😛

https://tenor.com/view/monsters-inc-books-mike-shoved-gif-10486164

OM NOM NOM KNOWLEDGE

I love cornflakes

Crunchy

[atomic veldt]

then you start with bios

[knotty valve]

Don't touch the BIOS™️

that'll either destroy your system or give you one hell of a repair job if mess the volts

[atomic veldt]

will VM help here?

[rapid merlin]

I tried 😂 I turned off my computer and went to bed. When I woke up I found my pc on and the folder left open on my pc.

https://tenor.com/view/happy-halloween-gif-12849861831894812

Genuine question

Anyways we are getting off topic

Is hacking going to get replaced by AI or AGI one day?

I still want to study phones

[knotty valve]

AGI is not for at least another 100+ years

[rapid merlin]

Let me check my crystal ball 😂

[knotty valve]

and AI has given security people more jobs

[rapid merlin]

I don’t think anyone knows

[rapid merlin]

I'm kind of anxious by what's happening with software engineering

[knotty valve]

Especially red teams

[rapid merlin]

How can you please tell me

[knotty valve]

Nothing has happened to them lol, most companies prohibit the use of LLMs in code due to the excessive amount of bugs, vulnerabilities, and lack of complaince to coding standards that it introduces

[atomic veldt]

why?

[knotty valve]

Nor can it produce correct code

[atomic veldt]

hahaa

[rapid merlin]

But people do say that AI is advancing to the point that they will be replaced
Microsoft just laid off 6000 employees

[knotty valve]

1. Compute
2. We barely even scraped the surface on anything to do with cognitive behaviour and reasoning

[knotty valve]

People said NFTs are gonna be the next big thing, did they actually work out? no.

Don't believe the blind

[rapid merlin]

I've always loved hacking but I was pushed to be a software engineer and now I saw how AI is eating every thing
It's making me anxious if my passion will get eaten too

[knotty valve]

otherwise it's just going to be the blind leading the deaf and you'll fail at your own job

[atomic veldt]

what about if quantum computer is used to make AI and then

[knotty valve]

Yeah, maybe in the next hundred or so years when we can actually make a usable and scalable Quantum processor

not gonna happen for quite some time

[rapid merlin]

Then should I follow my passion?
Ever since this AI came I'm having second thoughts for everything

[knotty valve]

You're gonna have photonic processors before quantum

[knotty valve]

Look at it this way:
If you don't follow your passion and AI takes your job, you didn't learn anything and getting a new job is now officially A LOT harder
but if you followed your passion and somehow AI miraculously takes jobs, you learnt a lot in that time and are more well adapted to work in new fields that have developed

[silver sky]

@rapid merlin guess who was right! Someone stole my debit card details 😂

I told the bank it was a test purchase but I was definitely wrong. Even though the payment didn't work, they still tried to use those details to buy pizza 😂

[knotty valve]

Choosing not to learn will make things harder than just biting the bullet and learning regardless of what's going to happen in 50+ years

[atomic veldt]

🤣🤣🤣

[dark mason]

Check if it was with delivery as well

Might get the address

[rapid merlin]

I should go with my passion of hacking
But the problem is as versatile software engineering is
Hacking isn't
As people say

[silver sky]

The bank is going to do that 😂

[dark mason]

Awesome

How did that even happen tho?

[silver sky]

Only problem is. UK Bank - US Pizza Chain

[knotty valve]

Hacking is as versatile as the entire computer science industry

[silver sky]

I'd suspect my details were stolen from somewhere, but they didn't have the correct CVV2 details (probably because the service was smart enough to not store that)

[knotty valve]

it's not this tiny narrow little window

[rapid merlin]

I just don't want hacking to die
It made me anxious last night that my passion will end on the hands of a stupid machine

[rapid merlin]

You're right about that it is a vast field

[queen flare]

hacking is as versatile as it gets

[knotty valve]

And? as i said, better do it now and learn than not learn at all and get nowhere

[rapid merlin]

I'll start learning from today itself

[rapid merlin]

They had your card details and what they went for was pizza ?!

[silver sky]

Just remember, others are training. Why wouldn't you

[knotty valve]

I'd rather have knowledge that can be applied to anything, than not have that knowledge and be left behind

[frozen charm]

hey Ashlynn

[knotty valve]

Heya Kaal

[silver sky]

Well they probably sold it to someone and they wanted £20 worth of pizza

[frozen charm]

U said u use arch na?

[knotty valve]

Fedora

[frozen charm]

oh

[queen flare]

i used to use arch

but recently switched to fedora

[frozen charm]

hyprland?

[queen flare]

ye

[silver sky]

Hell yeah

[knotty valve]

SELinux my beloved

[rapid merlin]

do you like it ? i thought switch to fedora

[rapid merlin]

That’s next level. A card came here yesterday of the guy that used to live here, I could feel it through the envelope. Shredded it

SO much mail comes here that ain’t mine.

[queen flare]

i do like it
while making a system from scratch with arch is fun, fedora makes life a lot easier

[frozen charm]

btw any reason to switch?

[atomic veldt]

what kind of system?

[queen flare]

more like i didn't have a reason not to switch. i got decent hardware, so no reason to go so minimalist

[rapid merlin]

As long as there is technology there will be threats
So by that logic hacking and cys should never die or be automated by AI
Because chaos creates problems and that breaks systems

If I'm right

[knotty valve]

AI will only ever be a tool

learn to use the tool and you'll be fine

AVC i swear to everything holy

I'm going to yeet you

[frozen charm]

i hv i9 14900hx with 32 gb 5600mhz but still wanna use arch baremetal

[queen flare]

gg

[knotty valve]

Why is CF warp triggering SEL so much

[frozen charm]

i customized my arch but deleted

[queen flare]

i just want peaceful linux experience nowadays

maintaining arch is like a full time job

[frozen charm]

now agin tryin to customize

[frozen charm]

tru

[rapid merlin]

Just a question please don't judge me

[empty ember]

fixed it thanks for the help btw

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3755)

[rapid merlin]

How much tough time did you guys have when you started learning hacking/cys?

[queen flare]

everyone of us had a tough time

the field is like that

[rapid merlin]

im having it everytime

[queen flare]

i am still having a tough time with everything

[knotty valve]

Just depends on you as a person tbh

[frozen charm]

i m still having

[queen flare]

i think it just gets more and more as you learn tbh

i feel like i don't know anything about cybersecurity

[empty ember]

I learn new things everyday I refuse to do hardware bc it makes me feel like ima break something so i stick to web apps

[rapid merlin]

same

[queen flare]

i feel it more than i felt it when i didn't even know what a port is

[knotty valve]

there's people who are absolutely cracked at cryptography, but ask them to pull off some basic SSRF and they'll struggle

[rapid merlin]

when you got new thing to know

[frozen charm]

but know rsa

:' (

[empty ember]

Then there's those darn kids with their shenanigans

[knotty valve]

it's a field where you essentially want to "weaponise" your skills and focus on them instead

[knotty valve]

[empty ember]

facts

[queen flare]

yeah then there's a 14 year old sitting in his basement who knows everything

somehow

[atomic veldt]

i think the hard think in Cyber Security is remember the core concept

[knotty valve]

Core concepts are simple

[empty ember]

You get a group of em together and one says no balls boom crowd strike blue screen type beat

[rapid merlin]

harder is to apply

i mean knowledge

[queen flare]

remembering is not something that works in cybersec

you only apply

[atomic veldt]

i was learning about OS but i am not able remember

[knotty valve]

"don't disclose things you shouldn't"
"CIA Triad"
"Make sure the code you write follows standards"
Etc.

[queen flare]

i can google or read back my notes if i forget something

[queen flare]

that's what notes are for

[knotty valve]

Ain't no one remembering the bajillion different commands across windows, unix, linux, and mac

[empty ember]

Just remember your probs out of scope

[knotty valve]

we have cheatsheets and google for that

[rapid merlin]

i lost my obsidian notes because when installing linux on my other drive just out of habit formatted my main ssd

[knotty valve]

I don't even remember half the math for SATCOM and Wireless Comms and that's literally my job

[queen flare]

ikr same

[knotty valve]

I have about 5 pages on obsidian of notes

plus half a notebook

[empty ember]

Did you phone a friend?

[atomic veldt]

thanks! i thought everything should be inside my head

[knotty valve]

There's times where I have to verify I did the math correctly yeah

[frozen charm]

me too a lot of obsidian

[queen flare]

its more knowing what to google than knowing the thing itself tbh

[empty ember]

USE REAL LOGIC AI PLEASE DON'T SIMULATE IT !!!!! UGH now it's all broken 😦

[thorny prawn]

get joplin

[queen flare]

did they change the color of OxC?

wasn't it all green before?

[knotty valve]

We had this really weird case where Error Correction would accidentally false-positive in a loop, so only one specific frequency was effected

[knotty valve]

I wrote that code too

[frozen charm]

:' (

[spice olive]

Yo

[knotty valve]

Tbf I also wrote it on the second day of my job

at 3am

[thorny prawn]

trust me waaaay better

[empty ember]

import os
os.system("start cmd.exe /c = echo hello world!")

python and sub processes go hard

[sick lance]

No, that's the newer ranks.

[rapid merlin]

I just saw my cat run on two legs to attack 😂

[sick lance]

Anything after 0xd is green

[thorny prawn]

Has anyone done El Bandito ?

[knotty valve]

Ohhhhh

my AP is damn vulnerable fr

I should uhhh, do something about that

[atomic veldt]

No

I am very beginner 🥲

[knotty valve]

Oh my...

So uhhh, for context Manner, this is my shitty $80 access point

[crystal mauve]

What is the context here ash

Thnks read my mind

[knotty valve]

and that scan is from nmap's --script vuln

[queen flare]

its like that youtube video where the guy installed 10k virus and called ms support

this is probably for #cyber-and-careers

[mossy parrot]

Oh sry !

[crystal mauve]

is that another user on your access point ?

[knotty valve]

nono, that's NMap's thing to tell you when a CVE is potentially exploitable

[crystal mauve]

Ohh

[knotty valve]

I'm still scrolling for the AP scan

[crystal mauve]

Ah ok I see now, thought someone else was trying to run commands in your system

[knotty valve]

I'd have known instantly lmao

I'd have gotten wayyyy too many AVC alerts from SELinux, Clam alerts, and I would've seen it in the command history

[loud marlin]

@sand trench fixed... kinda

[crystal mauve]

Would Linux show other user live input on a root command line ? I’ve never had an intruder on my vm

That I know of

[knotty valve]

Live commands? not unless they're dumb enough to spawn a terminal UI lmao

it would show up in my command history though

[crystal mauve]

So selinux would alert u if any unusual cmds were inputted ?

[empty ember]

I just finished this one https://tryhackme.com/room/internal

[crystal mauve]

Clumsy y did u get banned from twitter