general

[loud marlin]

you can enable few 2fa, depend of app and so. i have otp, pass key and hardvare key for protonmail

[digital estuary]

https://tenor.com/view/cat-cat-playing-guitar-jinx-the-cat-goofy-goober-gif-27109870

[trim portal]

Imagine doing that either by the end of this month or at the start of April

[loud marlin]

and on proton i can select what i wish

[sand trench]

[e-mail]
if anyone wanna test if shadows email is working here is a temporary throwaway address :D

oh shit

ralex pressed yubikey in wrong chat

[loud marlin]

lol

[timid prism]

Our does via face recognition and qr.( Something introduced this year cuz the owner of the group realised he has a clg and he shd mark his presense

[loud marlin]

oh, it is one that every press regenerate

different app use different protocol heh 🙂

[sand trench]

true but you can do weird timing attacks with those

[digital estuary]

time to make my professors put some elbow grease into checking if the work i do is AI generated

[loud marlin]

indeed. but you can proram key to certein time that will generate few of them and only output one in certein time

[digital estuary]

spooky ghost 👻 🙀

https://tenor.com/view/conductor-we-have-a-problem-cat-cute-funny-gif-17168115721186324165

[sand trench]

anyone know if tuta to protonmail or the reverse also works with fully end to end encrypted emails???

or is it only inside their own ecosystems

[trim portal]

Got it! Thank you so much, Alexander! I learned a lot, and I will try the protonmail for a start first

[twin ridge]

Gave +1 Rep to @loud marlin (current: #23 - 452)

[sand trench]

yeah they have free option... though better pay for it eventually

just proton pushes hard for you to get the proton unlimited at 9.99 a month to have their entire suite of things

[lament tendon]

As far as I know Proton is very restrictive with stuff that‘s not their product, so I‘d not expect that. Don‘t actually know tho.

[trim portal]

but thats me whenever I see you lol
That I rush like a ghost! Or the cat in that sticker heh

[sand trench]

yeah.....

[loud marlin]

proton also have some things liek that

[trim portal]

Got it. Thank you very much Shadow!

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2250)

[lament tendon]

Honestly worth it IMO.

[digital estuary]

aww!

[lament tendon]

It‘s not perfect tho, I wish I could mount their cloud storage.

[sand trench]

kinda agree but shadow wants to compartmentalise which is not a thingy everyone wants to do or needs to do

[loud marlin]

well... shadow can do things and send ralex email to check if things works... if wish

[sand trench]

sure

[trim portal]

If a cat does this to me, the cat can have all the treats I have in my pockets for sure.

[loud marlin]

ill dm you email. but i think is kinda obvious what it is heh

[lament tendon]

I honestly only use 'em for the mail and everything else is a neat addon, but I tend to have other solutions for it. E.g. using Mullvad for a VPN.

[tall knot]

I can login now
But the courses are loading very slow

[sand trench]

¯_(ツ)_/¯

[lament tendon]

The file share is really neat when you need to share larger files with people as well.

[sand trench]

paid services of shadow:
tuta revolutionary
mullvad vpn
domain name from somewhere :D

[lament tendon]

Or yourself.

[rapid merlin]

Where r u from, if you don't mind me asking

[velvet gull]

tried a speedtest?

[lament tendon]

I have a bit more stuff as I self host multiple things over a VPS. Too lazy to type it out on mobile. xD

Client side encrypted, of course.

But yea, domain name, vps, mullvad and proton are my main subs as well.

[sand trench]

technically shadow has more paid services but not gonna list out everything as that would be a security risk to a degree

[lament tendon]

Yee, same.

[digital estuary]

https://tenor.com/view/dance-cat-glowsticks-gif-27381983

[tall knot]

HK

[sand trench]

having your own domain name helps a ton

[lament tendon]

Got two, even, because one is free if you pay for the other with my provider. :D

[sand trench]

also domain names nowadays are surprisingly cheap

[rapid merlin]

Honk Kong should have fast internet

[lament tendon]

Only using one of them tho, atm.

[rapid merlin]

Maybe check your DNS

[tall knot]

I just recently able to login and load the course

[lament tendon]

Maybe the thing is down because of the AWS outage or something.

[rapid merlin]

It's working for a lot of people

[rapid merlin]

Maybe 🤔

[lament tendon]

[rapid merlin]

Did you try a VPN

[worldly pollen]

good morning ladys

[rapid merlin]

[sand trench]

https://shadowabsorber.com is very boring

[loud marlin]

well... it works =)... you can also attach public keys and so on tuta ?

[sand trench]

¯_(ツ)_/¯

[rapid merlin]

How much, a dollar for a month then pay some amount?

[sand trench]

they use other protocol for encryption then rsa

[digital estuary]

[sand trench]

10 usd a year for the domain name
free hosting on github for static site

[tall knot]

nope

But will try that next time

[rapid merlin]

Try before u die

[loud marlin]

https://proton.me/support/how-to-use-pgp proton can do this

[rapid merlin]

Right, cool

[sand trench]

Tuta uses symmetric (AES 256) and asymmetric encryption (RSA 2048 or ECC (x25519) and Kyber-1024 as quantum-safe algorithms) to encrypt emails end-to-end. When both parties use Tuta, all emails are automatically end-to-end encrypted (asymmetric encryption). For an encrypted email to an external recipient, a password for encrypting & decrypting the email (symmetric encryption) must be exchanged once. You can then use the same password for any conversation with that specific contact: With Tuta you don’t need to set a new password for each email sent to the same contact.

Tuta’s automatic encryption works easily on all mobile and desktop devices. The encryption key is never shared with anyone else, including Tuta. Therefore, even if a malicious attacker intercepts the email message, they will not be able to read its content or attachments.

[tall knot]

(joking)

[sand trench]

Why does Tuta Mail not use PGP?

Tuta uses standard algorithms also being used by PGP (AES and RSA or ECC) for encrypting the entire mailbox. In addition, Tuta Mail already uses post-quantum cryptography (Kyber) for quantum safe accounts, which is still a work in progress for PGP. Furthermore, Tuta does not use an implementation of PGP itself because PGP lacks important requirements that we have for Tuta:

PGP does not encrypt the subject line (already achieved in Tuta),

PGP algorithms can't be easily updated, e.g. to post-quantum secure ones like in Tuta Mail,

PGP has no option for Perfect Forward Secrecy (already achieved for Tuta in a prototype).

In Tuta we can easily update the algorithms, and we plan to replace the current algorithms with quantum secure hybrid protocol in the near future. The flexibility of Tuta enables us to integrate an encrypted calendar, encrypted cloud storage and many more features much easier and faster than it would have been possible with an implementation of PGP.

[dark wolf]

Yes that is accurate Vigo. People use easy pins to login to their computer so if they use passkeys and someone gets their device, they are screwed lol

[sand trench]

the encryption of subject line is important to shadow

as any meta data leak can be bad

[loud marlin]

fair fair

[leaden marsh]

There is cloud hacking tryhackme

[tall knot]

Speaking of VPN, why does ppl online NOT recommend using Opera's Free VPN?

[rapid merlin]

They have vpns

I don't know

[calm briar]

so because i've gotten these scenerios for the next interview- i feel like i could do a write up for them ? like instead of just discussing them i show that i know how to construct a write up and talk about it. maybe i could have a cheat sheet of some similes or metaphor for more techinical ideas to help fill out the grey areas

[oblique loom]

Is THM having issues again, Can't get a room to load for some reason.

[loud marlin]

free vpn = not free

[calm briar]

good idea or over doing it?

[tall knot]

May I ask what is being extracted from me to make 'free' VPN?

I heard Opera sold user's browsing data

[loud marlin]

if vpn is free. then person who own vpn server can read all data.

use payd vpn from trusted one

[rapid merlin]

Mullvad

The Goat

[loud marlin]

mullvad, proton or some by own choice

[mellow blade]

Proton is pretty good

[tall knot]

What about Vivaldi?

[loud marlin]

jsut know. if ding illegal things it might not protect you if some 3 letter agencies ask for data

[loud marlin]

idk. im on proton

[rapid merlin]

Russian vpn?

[calm briar]

what do you guys use for making reports? i just spent dumb long learning sysreptor and it's pretty cool - i gotta get my html on point though for putting my own graphics where i want them obvi

[wicked lagoon]

hey guys i got a question

[rapid merlin]

question us

[wicked lagoon]

is it okay to create summaries based on Tryhackme rooms and post them on linkedin and github ?

[rapid merlin]

Hey chat

[wicked lagoon]

i want to create a series of summaries of different subjects and use tryhackme and other resources to create beginner series

[woven brook]

im still confused who is jabba

[calm briar]

you mean like tactics, techniques and proceedures? ttps? if its in your own words you gucci

[loud marlin]

is thm emply who can tell you more of thing you ask

[woven brook]

oh alr

can I dm them?

[wicked lagoon]

nah just like windows basics , linux basics , wireshark ex....

[loud marlin]

when he show's up here you can ask directly

[oblique loom]

Yea, THM seems kinda slow atm

[calm briar]

ahh. i mean sure. you are just aggregating the information but you are displaying it differently. i'm sure you'll add more for other sources along your journey as well

i mean - it's just like keeping good notes

[dark wolf]

import re

[wicked lagoon]

yea exactly since i'm reviewing what i studied so i don't forget while progressing i said why not make summaries and post them on linkedin and github for more interaction

[dark wolf]

wrong window

[true rune]

hi

[calm briar]

yeah i think that's all good - as long as you don't take their trademarked stuff or plagarize them directly

[wicked lagoon]

like what

[calm briar]

plus you'll find more stuff - take a tour of hacktricks and other repositories

like screen shots of their website.

[sharp raven]

Does anyone know how I could find my buddies IP address?

[wicked lagoon]

oh nah nah

[wicked lagoon]

192.168.0.1

[wicked lagoon]

i'm using both hackthebox and tryhackme

[calm briar]

cool

yeah you'll find alot of stuff out there

[rapid merlin]

127.0.0.1

[rapid merlin]

Ask him/j

[calm briar]

what are you using to take notes? i started to use google docs after the 3rd time losing everything

[rapid merlin]

Obsidian

[wicked lagoon]

Obsidian

[rapid merlin]

https://tenor.com/view/bros-bro-high-five-dillon-duke-gif-24818151

[rapid merlin]

sublime text\

[wicked lagoon]

but when i'm doing a summary that i post on linkedin i use Photoshop i have experience as a designer

[mighty veldt]

cherrytree xD

[wicked lagoon]

this is an example

[calm briar]

I like using canva etc

[wicked lagoon]

only GOATs use obsidian

[mighty veldt]

th fk.. 🤣🤣

[rapid merlin]

[wicked lagoon]

i mean word or photoshop are a better alternative on the long run

[calm briar]

where are you getting your graphics for hardware and communication??

[narrow yew]

What site would have the largest amount of subdomains stored?

[mighty veldt]

crt.sh

i guess

[wicked lagoon]

for the hardware i use cisco's icons they post it for free , and i download them off of iconfinder

[narrow yew]

I tried that, I am looking for words in subdomains only

not for a specific parent domain

[wicked lagoon]

ask chatgpt

[narrow yew]

She can not be trusted with this

[calm briar]

you dont like it or use it? i was using it alot when i made my osi coloring book it just continued

[wicked lagoon]

the Cisco CCNA books are ELITE

[narrow yew]

https://crt.sh/?q=%25MBZ.%25&output=json

This does not work perfectly

[mighty veldt]

yes yes. iz good man.. was jkin xD

[narrow yew]

but this would in theory find anything "word."

[calm briar]

oooo i didnt know about iconfinder. nice thanks

[twin ridge]

Gave +1 Rep to @wicked lagoon (current: #2122 - 2)

[wicked lagoon]

no problem mate

[calm briar]

lol why am i getting such shade for canva? their free tier does alot

[rapid merlin]

[calm briar]

I got this interview coming up and they gave me a bunch of scenerios to 'explain to a client' so i'm going to make a fake pentest report with screen shots of these vulns/exploits so being able to explain some interactions via graphics will help to 'explain to non techinical c suites'

i'm using metasploitable 2/3 and juiceshop to illustrate the issues

[rapid merlin]

Best of luck 🫡

[calm briar]

thanks dude. i dont' want to hope too much about it but i got to the final interview so i just gotta do this right.

[rose tusk]

You will most likely need to explain using comparisons, why this is a problem, what are the risks and what can be done to fix it

My advice, flag things that are potential or require complex as lower priority to something that has an associated high/critical cve

[calm briar]

oh for sure. show the vulnerability - why it's vulnerable - show a exploitation example - suggest remediation and why the remediation is important

etc. i expect to use alot of similar and metaphor in explanation as well - thats why i was inquiring about graphics

[rose tusk]

you need to cover why this vulnerability is a problem. e.g. an attacker can download this exploit from the associated github and run against the target to gain elevated access

lemme pull an example, might be easier

Assessment Findings
1. Weak HMAC Authentication (Replay Risk)
Description
The agent communicates with the API by generating an HMAC signature only over the current timestamp. This means the signature is not tied to the actual request details such as the method, URI path, or request body. An attacker who can capture a legitimate request therefore gains both the timestamp and the signature and can replay them against other endpoints within the server’s acceptance window. The agent further exposes itself by printing the timestamp and signature to the console, making accidental leakage more likely.
Impact
This weakness undermines the entire trust model of agent-to-server authentication. An attacker who gains access to these headers can impersonate a legitimate agent without needing to know the underlying secret. They could use this to renew credentials, register malicious endpoints, or inject falsified monitoring data. Over time, this could erode the reliability of monitoring and potentially hide malicious activity.
Recommendations
The HMAC scheme should be improved so that it binds to all aspects of the request: method, path, body content, timestamp, and a unique nonce. The server should validate not only the signature but also ensure nonces are never reused, effectively preventing replay attacks. Console logging of sensitive headers must be removed entirely to reduce the risk of disclosure.
Business Impact
Major: Exploitation undermines trust in the agent ecosystem, potentially affecting monitoring across the organization.
Remediation Difficulty
Moderate: Requires changes to both agent signing logic and server-side validation.
Risk
High: Authentication bypass enables impersonation of agents.

CVSS v3.1: 8.1 High

IsUrgent: Yes

POC: replay.txt

[calm briar]

ahh that 'why' is a different why than what i meant. you're right. i hope you don't mind i copy and pasted it as an example to keep in mind when i'm writing my reports

[rose tusk]

nah, no worries 🙂 these are actual findings just to make it clear haha

[sand trench]

mullvad
ivpn
proton

in that order for vpns

[calm briar]

yeah i figured so

they're written very nicely. clean and precise.'

[rose tusk]

Thank you :), if you need my metrics system can give you that too

[calm briar]

what metric system do you use?

[calm briar]

i was going by cwe and cvss

[rose tusk]

I use a bit of a more business centric approach, to make the vulnerabilities easier to digest

[calm briar]

yeah i like that alot

the language used is business like but not too techy

[sand trench]

critical
likely
major
hard

was the log4shell vuln

[rose tusk]

[vapid geode]

just found out my email passwords were fking breached

https://breachdirectory.org/

bruuuuuuuuh

[sand trench]

welcome to the club

[rose tusk]

change it to winter2025

[rapid merlin]

[calm briar]

dude if i give them a report with metrics with an overview for remediation - they'll definitely throw in that monthy train pass with the job offer

[rose tusk]

don't steal my colour codes i called dibs on them

[sand trench]

naah go for the classic
correct horse battery staple

[rapid merlin]

I have seen this before

Tuta ?

Can't remember

[calm briar]

OooOOoo i never thought of using my own color scheme

[sand trench]

https://xkcd.com/936/

xkcd: Password Strength

To anyone who understands information theory and security and is in an infuriating argument with someone who does not (possibly involving mixed case), I sincerely apologize.

[calm briar]

should we make it autumunal my dudes?

samhain approacheth

[rose tusk]

the colour codes are based on RAG, fyi

you don't want to steer too much from red amber green (blue for informational)

[vapid geode]

guess I can start using those randomize password generators...

like pwgen

[sand trench]

get keepassxc

or bitwarden

[loud marlin]

was looking of keepassxc with setting yubico challenge-respond thing as password

[rapid merlin]

If I saw this as a non tech individual, the colors r subtle, not too bright nor too dull, just perfect

[calm briar]

ahh the old Simonides of Ceos trick

[calm briar]

i was gonna use glaucus, zafre, eburnean - you know classic colors

[rose tusk]

thanks 🙂

[twin ridge]

Gave +1 Rep to @frozen hull (current: #291 - 31)

[dark wolf]

My passwords are in a text file in c:\users\vigorizatnte\not_my_passwords\definitely_not_my_passwordlist.txt

I think I am safe

[rose tusk]

yeah add some blastoise, ghastly and magikarp to make it even better

[calm briar]

My son's name is Magikarp

[rose tusk]

when he's 18 is he going to become gyarados?

[sand trench]

no that is first at level 40

[still glen]

Hey guys! Whats the recommended wordlists for usernames and passwords for brute forcing thm boxes?

[dark wolf]

rockyou.txt

[sand trench]

sorry.. level 20

[dark wolf]

but thats only passswords

[sand trench]

miss remembered that

[mighty veldt]

seclists

[dark wolf]

/usr/share/seclists or /usr/share/wordlists has them

[still glen]

Do you use it for both usernames and passwords?

[narrow yew]

@thick shell Impressive introduction in #intro.

[loud marlin]

rockyou is default on thm for bruteforce. if thm dont point to smth else on some room or so

[dark wolf]

/usr/share/seclists/Usernames for usernames and /usr/share/seclists/Passwords for passwords

[narrow yew]

Usually it is a name wordlist for usernames and rockyou for pws

What Viggo said

[calm briar]

i'm thinking of scripting a few things in to specifically do some stuff with these scenerios - is that too over the top and i should keep a couple tricks in the bag?

[dark wolf]

If you think it's over the top you can't do it. If you think it's not over the top you can do it.

It only matters what you think

[sand trench]

https://www.youtube.com/watch?v=BEXDruMq6dI/

[rapid merlin]

https://tenor.com/view/chappellesshow-dave-chappelle-crack-drugs-gif-18560143

[sand trench]

this is starting to be a banger of a series

[still glen]

I see, iirc it has files containing millions of usernames / passwords. Now i havent done any complete bruteforce attack on any thm machine as of now, but wont this take alot of time?

[narrow yew]

@fair trail I accidentally found an anonymous POSt load on a sub....

[narrow yew]

I had not seen her in a long while. thanks

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2251)

[sand trench]

you're welcome

[fair trail]

wym

[narrow yew]

@sand trench you are in too info sec alot. How do you feel about ISO 27001

[narrow yew]

I found a vuln that allows me to post files with POST requests.

[sand trench]

to be honest don't know much about that D:

[narrow yew]

I contacted the CTO of Globalconnect about it

From my work email for some legitimate powah.
But he is OOO

The ISP Allente pissed me off

So now they have a grumpy old guy after them

and the CTO of Telenor

[calm briar]

Does anyone happen to know where i could find a vulnbox in thm, htb, or vulnhub etc that has ssrs (sql server reporting services)?

that's the only one i'm having difficulty replicating immediately

but i guess i could spin up a windows box and do the whole mamajama

[narrow yew]

But that takes time

[calm briar]

yes. yes it does

[dark wolf]

He/She may be on vacation. I highly recommend finding out when they will be back on vacation and making sure you get into their house and wait for them in the lazyboy.

Then when he walks in his house you can say "I've been expecting you!"

[calm briar]

hmm i think i found a couple htb retired ones that have ssrs available. i'll figure it out

[dark wolf]

Yes, it will take a lot of time. Usually the password is within the beginning of rock you. For username + password there are more clues provided to narrow down the list.

[polar holly]

Guys the weirdest thing happened and I'm not sure... Usually our company doesn't advertise for pentest roles, they head hunt. I recently moved to data and am less than 3 months in my current role however I've been with the company for 4 years. So I asked my manager what he'd do in my situation and he only said he'll come back to me tomorrow.

[dark wolf]

Vigo says thank you shadow

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2252)

[still glen]

Thanks for the info 🙂 ill be using rockyou from now on. Btw, is aws having issues again?

[twin ridge]

Gave +1 Rep to @dark wolf (current: #85 - 117)

[dark wolf]

Probably lol

[still glen]

Downdetector says so

[sand trench]

GG amazon

proving why the big tech giants is bad

[still glen]

Yep, didnt amazon say they fixed the issue?

[sand trench]

the internet was supposed to be decentralised

but apparently 50%+ use aws

[still glen]

Look at this https://www.reddit.com/r/CrappyDesign/comments/1ocl3w0/aws_crash_causes_2000_smart_beds_to_overheat_and/

[sand trench]

don't buy internet of things devices basically

[still glen]

yep

[sand trench]

instead buy ploopy hardware

[distant robin]

beep boop beep boop meep moop poop pee

[sand trench]

ey the meep moops belong to shadow

[silver hornet]

https://tenor.com/view/hakannnn-erkemmm-gif-2598742263059534717

[marsh lark]

lol

[distant robin]

https://tenor.com/view/howlers-den-who-gets-the-pokey-pokey-cat-gif-8874659858752863111

[narrow yew]

https://tenor.com/view/longing-longing-for-you-miss-you-missing-you-silicon-valley-gif-11909057

[wicked lagoon]

how HR team feel like when they make your life miserable

[narrow yew]

Why would you ever have to deal with HR

if not reporting colleuges

I am making new friends reporting people to HR every now and then

[wicked lagoon]

😭 think you making enemies

[narrow yew]

Im IT Security, they don't dare to do shit 😄

[boreal scarab]

AI enabled printer! Get your AI enabled printer here!

https://www.hp.com/us-en/shop/pdp/hp-officejet-pro-8139e-all-in-one-printer

[narrow yew]

Well they deserve it and its not something they did per say.

Maybe storing videos for adults with obscene names on their work USBs etc.

That is for HR to solve

[blissful snow]

https://tenor.com/view/unfunny-black-guy-not-impressed-not-funny-ok-and-gif-21269558

Why does my printer need AI

[narrow yew]

They just dont think about XSIEM to store all content from any USB stick in logs

And that we monitor it 😄

[boreal scarab]

AI ALL THE THINGS!

[narrow yew]

Enumerate all the things is the life motto

[tribal tapir]

Hi are there any rooms to group up with someone on some security projects?

[blissful snow]

Are you looking for rooms or team projects

[dark wolf]

That's why when I am at the drive thru and they ask, anything else? I always say, yes may I enumerate you?

[tribal tapir]

I'm looking for projects mostly

[blissful snow]

Hm what level would you say your at

[tribal tapir]

but it is preferable that it is group work as in regular corporate work

[dark wolf]

stalker

[clever turret]

Pen

[blissful snow]

👀

[dark wolf]

Don't worry, I won't stalk you

[blissful snow]

Are you sure?

[dark wolf]

Yes, I already have too many targets to go through

[tribal tapir]

beginner I know linux a bit I've basic knowledge and few certf in SOC field but nothing beyond that

[blissful snow]

through or to ?

[blissful snow]

Are you wanting to make defensive tools or offensive tools

[dark wolf]

Depends on the subject. Some I can have others go "to". I just cross it off my list when I have the information I need.

[blissful snow]

https://tenor.com/view/catpopo-gif-14363104828101683866

[tribal tapir]

I'm more into offensive but I know it's good to start in the defensive fields so I'll do both

[blissful snow]

which one would you perfer

[tribal tapir]

offensive

[blissful snow]

hm ok

I guess search up offensive tools and start there

[dark wolf]

So you don't want a job , just learning for fun?

[blissful snow]

Most offensive projects are just attacking and making tools from what I'll seen so far

[dark wolf]

And for fun, not for a job usually

[wicked lagoon]

which provider is used more in canada AWS or Azure ?

[tribal tapir]

me? ultimately I would love to obtain a job

[wicked lagoon]

then go defensive

[tribal tapir]

but firstly I need to craft something to my portfolio I guess

[dark wolf]

Most jobs are defensive focused

[wicked lagoon]

1. Implementing XDR Platform using: Wazuh + Suricata + TheHive + Cortex

2. Implementing Threat Intelligence and IOC Correlation Platform (Wazuh + MISP + YARA)

3. Implementing Adversary Emulation & Detection Platform (Wazuh + Atomic Red Team + MITRE ATT&CK)

4. Deploying Compliance Assessment Platform (Wazuh + Grafana + OpenSCAP)

5. Deploying Automated Incident Response System (Wazuh + SOAR tool like Shuffle or StackStorm)

6. Implementing AI-assisted Threat Detection Platform (Wazuh + ELK + ML pipeline)

these are some projects that were adviced to me by an expert

[blissful snow]

I don't really like defensive its boring

sometimes

[wicked lagoon]

boring = less people doing it = more chances of finding a job

[tribal tapir]

noice I'm gonna reserch these right away

[wicked lagoon]

good luck use THM & Hackthebox academy for resources

[blissful snow]

Btw THM premium is worth it

If you have enough ofc

[wicked lagoon]

THM yearly subscription + monthly student HTB academy subscription is a deadly combo

[blissful snow]

I haven't went back to hackthebox yet

its been a while

[tribal tapir]

yea I've already seen some intriguing topics that are premium only, gonna buy it when I'll run out of interesting rooms

[wicked lagoon]

i'm following the SOC path on both platforms

goal is to get my CCD in two years

[blissful snow]

What is that

[wicked lagoon]

Certified cyber defender

one of the hardest blue team certifications

[blissful snow]

What after that one

[wicked lagoon]

i think it depends on the path you'll take

[blissful snow]

ah

[wicked lagoon]

BTL2 is also a great choice

[blissful snow]

I wish I could get crts

https://tenor.com/view/anton-karnov-pov-typical-anton-anton-anton-pov-karnov-gif-12875937738105798632

[wicked lagoon]

me too bro lmaooo

i wanna get my CPTS and that's gonna be it for me in red teaming

[blissful snow]

Nice

[wicked lagoon]

i'm focusing on cloud and SOC that's it

[blissful snow]

I wish I could join HTB server :(

[blissful snow]

I need to learn more about lcoud

sometimes i've been thinking about

[wicked lagoon]

you could ...

[wicked lagoon]

AZ-900 AZ-104

[blissful snow]

Me banned

[wicked lagoon]

passing my AZ-104 in december

[blissful snow]

I have no clue what that is lol

[wicked lagoon]

azure certifications

[blissful snow]

ahh

Just wondering are there 900 certs

or is the number something else

[wicked lagoon]

it's just a code

[blissful snow]

ohh ok

[heavy storm]

https://pauljerimy.com/security-certification-roadmap/

[blissful snow]

def a phishing link /j

[blissful snow]

thanks

[twin ridge]

Gave +1 Rep to @heavy storm (current: #1099 - 5)

[blissful snow]

oh no i've got clay in my eye 😭

[tribal tapir]

I've been to a webinar recently where soc menager said that certs don't really matter for him rn. The key to land first job at cyber sec is having basic skills requied to navigate in soc and some type of thinking that's critical for this type of job, I can't really specify what kind that is, but he also said that it is better to have few github projects that show steps that you've made to obtain certain results

[dawn wren]

I dont know about you guys but I am done with recon. That alone mentality burned me out i know it's important but it's not need for most vulnerabilities out there.

[mint inlet]

Oh thanks for the tips !

[twin ridge]

Gave +1 Rep to @tribal tapir (current: #3229 - 1)

[wicked lagoon]

certifications + projects > projects

the guy with certifications will always have a better chance of getting an interview

[dawn wren]

Any certification is better than nothing these days regardless if it's well known or not.

[blissful snow]

unless we kidnap them >:)

[blissful snow]

Do you know any affordable certs

[gusty inlet]

https://dragkob.com/security-certification-roadmap

Filter by price.

[blissful snow]

thankss

Also jsut wondering can normal people buy data from data brokers

just*

[sand trench]

from some of them yes
not from all of them though

[blissful snow]

Ah ok

[dawn wren]

There are currently well over 450+ cybersecurity certs out there. There is no way one person can get all these certs. But Googles and THM is a good place to start.

[blissful snow]

How muc his stuff like that

[blissful snow]

I was going to do google cybersecurity cert but i stopped half way

[slow cloud]

i think googles cert is pretty worthless

[dawn wren]

Well there are 100s more to choose from just have to find one that will work for you. But the thing is EVERYONE is doing that certification. Which means the competition gets more fierce you have to find a certification that is high in demand.

[slow cloud]

according to the people here

[gaunt flower]

Hey there!
Are you having trouble with a lost or hacked Roblox account? Don't worry, I'm here to help! 💡 I can assist with account recovery, password resets, and security measures to prevent future issues. Whether you've been scammed, lost access, or just need some guidance, I'm here to help. 🤝 Let me know if you need assistance, and I'll do my best to get you back in control of your account! 😊"

[slow cloud]

but idk, i didnt get it

ah yes

[slow cloud]

i think @gusty inlet needs his account recoverd

[blissful snow]

or @mossy river

[crimson portal]

Someone need any sorts of help or any type of script for ANYTHING?

[dawn wren]

The whole point of certifications is to get past those HR gatekeepers and get hired. Beat the competition I used to work with people who had all the certifications in the world but didn't know WTF they were doing.

There is a difference between theory and practical

[gaunt flower]

Ok
He can message me privately

[dawn wren]

IMO you can multiple choice your way into a job in cybersecurity.

[blissful snow]

crazy

[blissful snow]

Just wondering does anyone know what they actually do

I never looked into this type of scam

[slow cloud]

you either pay them and they dont give you anything

or maybe hack your email

or account

idk

[blissful snow]

"hack"

[slow cloud]

you never know

[gusty inlet]

Thanks for thr recommendation!

[twin ridge]

Gave +1 Rep to @slow cloud (current: #54 - 197)

[grim sparrow]

:hammer: ericmatteo#0 has been banned.

[loud marlin]

dumbass backup script =/

[dark wolf]

$HOME/Working must be really important to back it up twice

[glacial cove]

I prefer me a good homelab with Seafile 😅

[sand trench]

personally use pika backup

because don't really care about system folders.... as nearly all important data is in /home/

[dark wolf]

and /etc for customizations of services that you locked down

[sand trench]

have copies of those in /home

also had to undo all the sddm hardening shadow did as it made podman crash with cryptic errors

[ripe sleet]

😮
New Rules section?

[ripe sleet]

Hello Shadow!

[sand trench]

ello darkfly

[ripe sleet]

How're you?

[sand trench]

slightly excited for new art commission shadow is starting to pay for

[ripe sleet]

Let's goooo

[chilly veldt]

red motorcycle is now sold

[sand trench]

does motorcycle go beep???

[chilly veldt]

yes

[sand trench]

also how much did it sell for??

[dark wolf]

Only if it’s backing up like a truck 😄 normally it just vrooms, not beeps.

[sand trench]

https://www.youtube.com/watch?v=bKaeI61BtVc

[rapid merlin]

https://tenor.com/view/gif-gif-8593213374087197675

[chilly veldt]

870 Euro

[sand trench]

sounds low for a vechile but what does shadow know

[chilly veldt]

it's cause it doesn't run

needs to be fixed first

[dense hinge]

this website

is so peak ngl

[rapid merlin]

[mossy river]

@marsh lark

[coarse hedge]

I have been playing CR for 8 years, but never reached top 10 in global 😮‍💨

[gusty inlet]

Yo I reached 10K yesterday!

[lone thistle]

bmt is this clash of clans

[gusty inlet]

better

https://tenor.com/view/mimimi-gif-12010519003275209713

[lone thistle]

pray tell?

[gusty inlet]

Clash Royale

[lone thistle]

AHHH

tomato tomato 😄

[mossy river]

Tomato tomato??

CMNatic this is the first time I’m ever disagreeing with you

[mossy river]

Ayyyy up we’re moving up in the world

[digital estuary]

https://tenor.com/view/clash-royale-emote-angry-king-chess-gif-8475376968549347293

[gusty inlet]

I can't find a good Netflix serie or movie for the love of god.

Nothing's entertaining.

[narrow yew]

Poking around a bit and seeing this on an RDP
OS: Windows 8.1/Windows Server 2012 R2
OS Build: 6.3.9600

must resist the urge

too poke

Just browsing a few IP ranges on Shodan, nothing too exciting.

"Blackbox"

[bright stone]

Hi can somone help me. I’m stuck on an “wifi hacking” training. The goal of that training is to accses the admin panel of the wifi, but I don’t know how. I already cracked the hash of the wifi password by deauth the fake devices to force them to login again. But I don’t how to continue

[dark wolf]

Money Train, Suits, Breaking Bad (if it's still there), Blacklist

[narrow yew]

are you on the wifi?

[bright stone]

Yes

[narrow yew]

and the admin page is not on the default IPs?

[dark wolf]

Better call saul

[bright stone]

What do you mean by default IPs?

[dark wolf]

Don't know you well enough to know your tastes @gusty inlet

[narrow yew]

The office.

[narrow yew]

adminpages on wifi are usually in the same places

[dark wolf]

I find the humor lame and dry hahaha, brittish humour is better

[narrow yew]

look at your own router, on what IP is the admin interface located?

is it not the same kind of question here?

just enumerate all IPs?

@dark wolf Maybe I am all wrong here and not undestanding the issue

seems like a no brainer

[bright stone]

Well I tried the default credentials to login but it won’t work. The wifi panel login is on 192.168.1.1 in the target wifi

[dark wolf]

I don't know Math, I'm working and not paying attn

[narrow yew]

I can help you work

@bright stone What have you tried

[ripe sleet]

I saw these sora clips where characters from that game are on your front step. There's one where the hog riders break into your house

[bright stone]

Nothing now, I tried to brute force. And I scanned the wifi on routersploit but gave no results

[narrow yew]

what router is it then

[ripe sleet]

Your profile picture and IGN look familar

[bright stone]

The router modell is Sagemcom F@st 5350

[narrow yew]

and what IP numbers have you found

Do not reply you used routersploit

[dark wolf]

THM has a wifi room?? whats the url

[narrow yew]

Its not THM

[dark wolf]

The mods discourage helping people with challenges not originated from here

[narrow yew]

Otherwise he would have said so

[bright stone]

What do u mean?

[dark wolf]

They could be hacking someone

[narrow yew]

True

but if admin/admin did not work

he's out of luck

[sturdy sequoia]

https://tryhackme.com/room/wifihacking101

[bright stone]

😂😂 no, it’s an CTF training lab on Google

[narrow yew]

If he did not even scan the network for other IPs. Not much to do

[bright stone]

But how can find the flag. I can’t continue

[narrow yew]

@WWW share it, I want to do it

We can do it with Viggo

he needs a break from work

[dark wolf]

Ahh yes, I've done that one

[bright stone]

And I tried burp suite on the see the requests for the login page. And still that didn’t help

[narrow yew]

I need to do something, my grey hat is slowly turning dark by looking at all these IPs

[bright stone]

I don’t how to continue with that CTF. And I can’t get hints

[narrow yew]

And you are not sharing the CTF

[bright stone]

Give me a sec

[narrow yew]

So I suggest you move along 🙂

[next kelp]

I am doing the Powershell room. First time I have seen it broken down like this. It's a REPL.

[narrow yew]

Tooo late, i've moved on

[bright stone]

👍

[dark wolf]

Yeah I learned a few things from that room. It's kinda cool.

[rapid merlin]

How do I hack library

Library say I have to pay library fees

How to change numbers like in Mr robot

?

[narrow yew]

Then you pay ofc

[rapid merlin]

Huh

[next kelp]

Move to another county

[rapid merlin]

No I use kali Linux

To stop library

[narrow yew]

If you owe money you pay it

That is how life works

[rapid merlin]

Huh

[dark wolf]

@gusty inlet knows

[rapid merlin]

No

No I use kali linux to stop library

And stop the fees

Like Mr ribit did

[narrow yew]

Mr rabit is now mr soup

sorry

[rapid merlin]

Kale 🥬

[narrow yew]

What library is it?

[dark wolf]

paramiko

[sleek hare]

uh

its illegal?

to hack library

[dark wolf]

unless you wrote it

[narrow yew]

Maybe he wrote a lib

made it an AI

AI is now pissed off

[sleek hare]

he means library

[narrow yew]

demands money

[sleek hare]

like physical place

[dark wolf]

yeah, C ? Java? Python?

[sleek hare]

right?

[dark wolf]

Oooooooooooooohhhhhhhhhhhhhhhhhhhhhhhh

[narrow yew]

Yes he does

[sleek hare]

@rapid merlin so like

the place

where you get books

right?

[sleek hare]

I know you never been there

[dark wolf]

i see

[narrow yew]

ofc he wants to hack his school lib or somehting due to the fact that he ows money

[dark wolf]

hahah i been there plenty of times

[sleek hare]

I just bought new book

[dark wolf]

in school you had to go to library to study

i had no internet

[gusty inlet]

Maybe go back to mr robot.

[sleek hare]

withotu letting school know I broke old one

:3

[dark wolf]

no phone

[narrow yew]

But If he just tells us the library's name we can just tell them to add more to his account

[sleek hare]

id add there extra fee

"trying to hack lbirary"
10k USD

cuz

why not?

[narrow yew]

Well if he does the rest is easy

[sleek hare]

how many russians are there

[dark wolf]

https://tenor.com/view/hack-the-planet-keyboard-keyboards-twitchcon-bluvelvet-gif-15929096

[sleek hare]

CS GO with fire sign == 10000% russians

[sleek hare]

https://tenor.com/view/disgust-gif-21405981

[rapid merlin]

It’s not Russian it’s an American podcast

[narrow yew]

Classic movie tho

[sleek hare]

my friend wrote website

[narrow yew]

I even have the script

[sleek hare]

added there ping command

[dark wolf]

The earths mantle has a CVE rated 10.0

[sleek hare]

guess how many vulns I found?

[rapid merlin]

I can’t tell you what library. Developing kali linux hacks

[dark wolf]

we should exploit it

[sleek hare]

right about two vulns which gave root access

💀

[rapid merlin]

I’m developing a device. Device generates unlimited WiFi anywhere you go.

Using kali linux. And library wifi

[narrow yew]

Its called unlimited sub to your cellphone service provider

[sleek hare]

😭 what what but that is illegal

for sure

he said WIFI

[rapid merlin]

Huh

[narrow yew]

Well its a 4g/5g router

[rapid merlin]

No it isn’t

[narrow yew]

Oh

you'r friends with Elon

[rapid merlin]

Device makes unlimited wifi

[narrow yew]

Does it have internet?

or just wifi

because my Raspberry will do that just fine creating an wifi

Why post those referal links?

@dark wolf you can report it for me

im old

[rapid merlin]

Idk it’s using kali linux

[narrow yew]

You have mentioned that a few times now

[rapid merlin]

Yeah exactly

I’m using kali linux to make free wifi

[narrow yew]

Yes you told us

[sleek hare]

Bro either tries to scam or earn 10$

[dark wolf]

I reported it

[narrow yew]

There have been a few of those links today

[sleek hare]

If not wrong its referrals

For commet

[narrow yew]

If it were free Claude I would have signed up

[sleek hare]

Per user 10$

[dark wolf]

advertising

[sleek hare]

Yep

And also earning moni

[narrow yew]

Claude is a great AI

[rapid merlin]

Plan to use kali linux to act as wifi router. And then connect to free school wifi

[sleek hare]

Human brain is great AI

[sleek hare]

I use mikrotik

[rapid merlin]

And generate unlimited wifi anywhere you go. With Kali Linux

[sleek hare]

Amazing thing you know

[dark wolf]

I swear this that dude has about 90 lines with the words wifi linux and kali all in it

[sleek hare]

@rapid merlin

wat is kali linux

[dark wolf]

what is wifi

[sleek hare]

(other don't say a word doing test)

wat library are you using?

[dark wolf]

me too!

[sleek hare]

do you also have controller licence

i think its a bit overkill for my use case

[rapid merlin]

I am the Mr robit

[sleek hare]

but i have it

[sleek hare]

hi robit, I'm luna

[rapid merlin]

Or rather. The Mr Kali Linux Ribot

[sleek hare]

Now tell me what is kali linux

[dark wolf]

you are mr ribbit

https://tenor.com/view/koharu-bunny-eating-munching-bunny-munching-gif-14734225609698921002

[hollow lodge]

Hii guys I'm not a professionel so I should to build a portfolio ? and makes write-ups for any room I finish ?

[dark wolf]

What are your goals?

[narrow yew]

Tell me more about the "everywhere you go" part

So you have kali, sharing schools wifi

how does it share it everywhere you go

And explain how mobile hotspot while phone is connected to wifi is not the same thing

[sleek hare]

uptoyou

[narrow yew]

I guess you could set up your own Cell tower

[sleek hare]

i really regret not doing streams when I did insane challenges

[dark wolf]

he can 3d print one

[sleek hare]

I might redo them for fun

If I find out how to redo a challenge..

I'm nee to this web still 💔

Didn't click all the buttons yk

[dark wolf]

Options -> Reset progress

on any room and you can redo it

no more points tho

[rapid merlin]

Link to your GitHub page. And put all your stuff on there. Or LinkedIn

Idk I heard kali linux makes wifi

For free and unlimited

YouTube video

[sturdy sequoia]

are you just trolling?

[narrow yew]

I think he is

Or he be special

[dark wolf]

I just reported

spamming

[narrow yew]

I can 3d print you something cute

[sleek hare]

Aha

Sounds fun

[dark wolf]

I can 3d print anything i want but i can't think of anything i want to print. I've printed more modifications for my 3d printer than anything else lol

[sleek hare]

Theseus stream commin

Oh wait. No nvm

I ain't leaking theseus

I'll stay loyal to it

[narrow yew]

Voron?

Or what printer do you print mods for 2025 that is not a selected few that is not Bambu

Prusa? But those will slowly die, Bambu took too big piece of the market

[dark wolf]

Ender 3d Pro

[narrow yew]

Haha Ender 😄

[dark wolf]

Got it 4 yrs ago

[narrow yew]

I have an old dusty one forgotten in the basement

V2

[dark wolf]

It works just fine

yeah

[narrow yew]

I have an P1S that is the best ever

And a few resin once

[dark wolf]

What do you print?

[narrow yew]

Things I do not need

[dark wolf]

hahah yeah, well we try and keep our place free of chachkies

[narrow yew]

Gadgets for home and gifts, cookie cutters for christmas. Nothing too serious.

[dark wolf]

or however you spell it

[narrow yew]

If you were in to resin printing I would hook you up with files

[zealous socket]

if system.isCrashed: system. restart(system)

[narrow yew]

IF system crached

there be no restart

System be ded

[dense hinge]

i love how i be getting stuck on some of the beginner module questions for no reason 😭

i might be cooked on some of the harder ones

💀

[sturdy sequoia]

you cant know everything

[dense hinge]

for sure

[hidden gull]

Hi, i try migrate the process but don't work in room/blue , someone can help me

[dense hinge]

i love it when i give up and have to look at a walk through and then realize what im doing wrong, and it gives me the boost i need to answer all the other questions easily after feeling silly for a few moments

lmfao

[dark wolf]

sometimes you just need that one clue

[dense hinge]

yup

[sturdy sequoia]

the walkthroughs are there for a reason

[dense hinge]

real

[dark wolf]

How about a bot that scrapes walkthroughs and does the ctf for you when you are sleeping

lol

[dense hinge]

😂

[hidden gull]

i try several pid but don't work

[sturdy sequoia]

youll probably get a better response in #room-help

[dense hinge]

i cant wait to get to the blue team level 1 path

im excited to learn that stuff

[narrow yew]

Take a while with the new rate limit rules

[umbral bay]

👋

[ripe sleet]

Hello No Name!

[blissful snow]

Hi

[ripe sleet]

Hello Immortal!

[blissful snow]

Just wondering do I know I forgot people a lot 😭

[ripe sleet]

Prolly not

[blissful snow]

Sorry

Ahh ok

Well hru

[sleek hare]

hi

hru?

[ripe sleet]

I'm doing good
How are you feeling today?

[sleek hare]

no idea honestly

like a potato

worse

or better

no idea

[dense hinge]

is it chill if i go abit out of order for some of the learning paths? like doing the splunk basics in soc level 1 and then heading to soc level 2 to do the advanced splunk stuff for example

i think splunk is the first tool i wanna get super comfortable with

🤔

[sturdy sequoia]

yer do what you want. i dont even follow a path

[dense hinge]

bet

[ripe sleet]

I hope that your day is able to improve!

[sleek hare]

Going to sleep

Soon

Aka yes it will improve

As I love sleeping

But depends if someone will wake me up in the morning or no

[sleek hare]

btw that's great to hear

[sleek hare]

I don't even do the path

I just go straight challanges

[sturdy sequoia]

i just do rooms i find interesting.

[sleek hare]

I just do either all challenges which are purple team

Or all insane ones

Or hard ones I find interesting

Insane ones sadly all completed

I don't have premium to do Osiris

[dense hinge]

i kinda wanna mainly focus on the skills that will be important for the job i want

but there are a ton of super cool rooms

im hyped to try

[narrow yew]

I am guessing... Pentester

[dense hinge]

nah

[sand trench]

huh so apparently shadow is not the only person using shadow absorber as a username

[narrow yew]

Whuut

[dense hinge]

Soc analyst

[sand trench]

did not expect that

[dense hinge]

pentesting is cool

i wanna learn that stuff eventually

[narrow yew]

Best reply ever.

(Im a SOC) So im all for it

[dense hinge]

maybe go for OSCP if i want to make myself suffer

[dense hinge]

really?

thats sick

[narrow yew]

I pentest at work, I manage our bug bounty program so I triage everything, and I can pentest all I want in our enviorment

And its alot.

But SOC work takes heeps of time if one allows it

[slim patrol]

is openvpn not working for anyone else? keeps disconnecting

[dense hinge]

cool if i add you so i can maybe bombard you with questions sometime

lmao

[celest dirge]

You have a fan then

[narrow yew]

Shehe have fans everywhere

There is only one absorber

[celest dirge]

Hopefully, no one has taken my name just yet.

I don't mind fans, but y'know.

[sand trench]

they don't have a lot of following to be sure

only find them when running sherlock to find old unused accounts to remove

[long lotus]

guys, rate my dog

[sand trench]

don't want to ruin others days thats for sure

[sand trench]

very pant

[narrow yew]

is it alive?

[long lotus]

good question

[celest dirge]

Cute&goofy/10

[narrow yew]

Maybe its stuffed

and just resting

[long lotus]

[long lotus]

yea

[celest dirge]

Idk, they have their tongue out..

[narrow yew]

I am guessing dead

Some people even keep dead parents for company

[sleek hare]

I'm not fan of dogs

I hate them

But urs looks nice

Ig

Anyways gn chat

[brisk cairn]

[pastel tartan]

Hello if i want to take the 1 year of ine fundamentals that include ejpt exam + ICCA what rooms to finish in tryhackme first before taking the practice in ine for ejpt

[grim sparrow]

Done!

[sand trench]

thank you dkob

not sure if they posted in multiple channels but that message sure seemed sketchy

@boreal scarab how often use sherlock???

[topaz topaz]

Hey guys easy question, doing a THM room where I've gained admin access to a Wordpress blog website. How do you guys usually go about retrieving flags in these situations?

Are they hidden in posts, dashboard?

[boreal scarab]

Sherlock Linux?

[rapid merlin]

https://tenor.com/view/shut-down-press-button-shut-it-down-gif-17603164

[sand trench]

https://github.com/sherlock-project/sherlock

[sturdy sequoia]

im still a noob with thm rooms but from what i can tell they could be anywhere. sorry if thats unhelpful

[topaz topaz]

You're doing great. Keep at it 💪

[boreal scarab]

Think I used it once or twice.

I'm a man of manual searches. Buuuuuuuuut I'll give that one a try

[sand trench]

from wordpress admin migrate to www-data on the target machine by using rev shells

then from there use grep to find flags

[topaz topaz]

woah

[boreal scarab]

Haven't touched my Graphene phone in about 2-3 months..... it's so out of date lol

[sturdy sequoia]

haha thanks

[twin ridge]

Gave +1 Rep to @topaz topaz (current: #235 - 40)

[sand trench]

hope the uppies work

[topaz topaz]

considering androids latest shenanigans I think graphene will be a nice option

[boreal scarab]

https://tenor.com/view/grogu-baby-yoda-uppies-gif-8205373085076956043

[sand trench]

using grep to scan for flags in likely folders is very nice

[topaz topaz]

migrating to www-data through wordpress is something i havent seen in a CTF before. that means I can execute commands via the admin page?

Or am I looking at it wrong

[sand trench]

well more or less yes

[topaz topaz]

(Not asking for an answer just looking for a key while blindfolded)

[sand trench]

you can upload a php file in most instances that replaces a 404 link

[boreal scarab]

I have 2 phones, my main and My graphene I take to DEFCON. Found my Graphene phone and now updating it

[topaz topaz]

are they both pixels or just one of them?

[sturdy sequoia]

yer a reverse shell will basically give you a console

[boreal scarab]

F-Droid has a lot of updates, Aurora store, Graphene App Store, System updates

[boreal scarab]

One is a Samsung S21 Ultra, 16 GB of ram baby WOOOOOOOOOOOOOOH

The other is a Pixel

[topaz topaz]

ooo boy

[boreal scarab]

Pixel 7a Pro to be exact

[topaz topaz]

the S22 Ultra in Burgundy is still the most beautiful phone to ever come out in my opinion

I much prefer the Pixel 9's design but it doesn't compete against that burgundy

[boreal scarab]

Shut up and take my S7

[sand trench]

shadow happy with their pixel 9 with graphene

also now got a nice grippy case for it

[boreal scarab]

Was it S7 or Note 7?

Which one exploded?

[topaz topaz]

Ehhh S7 is nice but my experience with the edge screen :/

[topaz topaz]

The note hahaha

[boreal scarab]

TAKE MY NOTE 7

[topaz topaz]

Pixel 9 twinninggg

[boreal scarab]

[topaz topaz]

The note 7 is most definitely a beautiful phone yes

[boreal scarab]

I had a Note 4, S8, then S21 Ultra

But I didn't start on the 4

I started on a flip phone baby WOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOH

[topaz topaz]

SAME!

[boreal scarab]

MOTOROLA RAZOR LETS GOOOOOOOOOO

https://tenor.com/view/glitter-glitter-girl-silly-rabbit-fliphone-gif-11933922

[sand trench]

have a fairphone 5 shadow needs to repair

[topaz topaz]

This was unc's first phone (mine)

[sturdy sequoia]

haha my first phone was an ericsson a1018s

[sand trench]

any nokia users in chat???

[topaz topaz]

Do Microsoft Lumias count?

It's basically Nokias that were bought out

[sand trench]

barely but yes

[boreal scarab]

Let me get Grandpa in here..... @normal fable What was your first cell phone? The brick?

[topaz topaz]

I had a 535 as a first smartphone ever

[sturdy sequoia]

im so old

[boreal scarab]

https://tenor.com/view/cat-macska-cica-vomit-oklendez-gif-14738230240638170539

[topaz topaz]

Truly... At the start I loved that phone buuut.

[boreal scarab]

GET THAT MICROSOFT PIECE OF SHIT WINDOWS 8 FUCKING CRAP OUTTA HERE

[topaz topaz]

I couldn't wait to get it off my hands

I do have fond memories of it though, I had a Gameboy emulator with a mortal kombat deception rom and would play through it in secret during boring classes as a teen 😂

[sturdy sequoia]

i used to have a HP ipaq before phones had touch screens

[sand trench]

blackberry users rise up

[boreal scarab]

I had a similar "first" phone. Wasn't mine, I was like 6.... but I remember playing a motorcycle racing game on it

[boreal scarab]

BBM LETS GOOOO

[topaz topaz]

never had the joy of using a phone with a physical keyboard other than the numpad 🙁

[topaz topaz]

Hehehehe love that

I saw my grandma using that flip phone I posted and I was like "yeah I want that.."

[boreal scarab]

Customizable notification light to tell you if it was a BBM message, text, and from who

[topaz topaz]

I feel like going back to dumbphones, anyone else have the urge every so often?

[boreal scarab]

Blackberry was great

[topaz topaz]

Their failure story is very intriguing

[boreal scarab]

Going back to Windows ME? SURE!

[sturdy sequoia]

ive become too reliant on all the internet stuff. i dont think i could go back to a dumb phone

[topaz topaz]

Ohhhh darling please don't hurt me thiiis waaaay

[topaz topaz]

That's the reason why I want to go back. It feels like corporations and governments are forcing their people to be hooked on them, and while I won't push this conversation to the political side, I am feeling the effects of having a device connected to the entire planet on me the entire time and it feels draining more often than not

[boreal scarab]

No reason WHATSOEVER..... Having FDroid going through TOR for updating my apps, Proton going through 2 servers, both non 14 eyes.

Hypatia going through tor.

Is there any reason? Fuck no

Do I care? Also fuck no

[topaz topaz]

I understand, what do you use your phone for mainly?

[boreal scarab]

I remember playing Bajuled (Or however you spell that) on a gateway Windows ME

[boreal scarab]

The Graphene? Privacy, but only at DEFCON

[topaz topaz]

I'm not talking about government surveillance per say, I don't care about that. I just think of how our communities expect us to roam with smartphones, using them for the slightest of activities. Going to a restaurant? Scan the QR code, no menus.

I know it sounds backwards and I understand the controversy behind such an opinion, but I do wish we could go back to times where smartphones were a luxury and not expected of a civilian to carry around in order to cover the incompetence of others

[boreal scarab]

What's FBI going to find? "Chromebook reset keyboard shortcut"

[topaz topaz]

"Asus BIOS key"

[sturdy sequoia]

to each their own. this same kind of stuff happens a lot with new technology. give it 20 years until its the norm and no one will care

[boreal scarab]

F2, Del, F1, F12, F10, fuck you just hit all the keys till one works

[topaz topaz]

Do you find comfort in this thought?

[boreal scarab]

This job I don't handle sensitive data at all. I used to, Thanks HIPAA...... but never saved anything besides "Room X has this issue Desk X has that issue"

[sturdy sequoia]

kind of. its a long and detailed conversation. not sure i can summarise succinctly

[topaz topaz]

The good samaritan. We believe in this man 🙏

[boreal scarab]

Oh and even then, it's in Secure Folder, in an FOSS Note taking app, that's also encrypted. Is there ANY reason for this? Again, fuck no. But I like it.

[remote cradle]

Why is it hard to see who knows website that see email logins?

[sand trench]

does not parse
try again

[sturdy sequoia]

uuhhh what?

[boreal scarab]

Current job, I don't have access to tickets, so all my notes and everything I have to keep, dated too, so when my boss asks me "Hey, X, what happened there on Friday X date" I can easily go back and look

[topaz topaz]

It is indeed. Just remember that we are headed towards a very new era of information control and weaponization, one that coincides with the obligation of having a network connected phone even for the slightest of your bureaucratic needs along many other services. Services that were once useful and are now evolving into something different entirely

[topaz topaz]

Do you keep digital notes?

[boreal scarab]

Yep

But again, my notes just consist of what to do that day, what happened, what did someone tell me, what questions do they need me to ask someone

[nimble gorge]

https://superintelligence-statement.org/

[boreal scarab]

Oh shit, Ubuntu has ZFS with encryption... experimental, but nice that they have ZFS

[sand trench]

yeah zfs looks neat but seems incompatible with a lot of linux due to thingies

license thingies

[woven drift]

what about the zte users 💔

[boreal scarab]

ZFS is basically like BTRFS, but ZFS uses RAM for cache

Also ZFS has Software Raid, RAIDZ, no need for hardware raiding.

[sand trench]

shadow knows plenty of what ZFS is

[boreal scarab]

RaidZ1 I think is a Raid6? I can't remember the whole RAID crap

[sand trench]

also know that you gotta do crazy vodoo to install it on arch

[boreal scarab]

My Graphene phone thinks it's in Poland?

TF?

[fervent cove]

Hi, I’m Excel 🌸

[sturdy sequoia]

@remote cradle please dont dm me without asking first

[fervent cove]

can i dm u

[rapid merlin]

hey

[ripe sleet]

Hi, I'm Internet Explorer 👴

[ripe sleet]

Hello Ace!

[ripe sleet]

Hello Matt!

[ripe sleet]

How're you Fugu!

[topaz topaz]

Oooo my dear, how've you been?

[ripe sleet]

Good

[topaz topaz]

that IS ideal

[ripe sleet]

Doubt it

[topaz topaz]

Where did you find these? I haven't seen anything like that

Have you reported that content?

Admins are often quick to take action, but at the end of the day this is a public cybersecurity server

Please report it as well

[pallid lotus]

... How'd you figure that one out?

[topaz topaz]

Should it not be okay, admins will take action

[boreal scarab]

https://tenor.com/view/raccoon-salivating-drooling-drool-saliva-gif-22893007

[topaz topaz]

Although I do not see where the maliciousness is

But as mentioned earlier if the admins deem it inappropriate they'll take action against it, I don't have any input on the matter

Are you sure it's not your phone's antivirus software playing tricks on you?

[pallid lotus]

That said, they've got a grand total of about 3 mods. Encouraging people to report random shit with no evidence isn't necessarily the best use of their time

Detected how?

[topaz topaz]

As someone who has no power over this, there is nothing I can logically recommend other than that. If someone sees something suspicious, they mention it. That's all. As you said, 3 mods, stuff can slip every so often

[pallid lotus]

Dunno what AV you're using but VirusTotal thinks it's clean

[ripe sleet]

https://cdn.discordapp.com/attachments/1365553006111756308/1365555099015053353/ezgif-3-99a9343f3d.gif

[ripe sleet]

Hello Muiri!

[pallid lotus]

Aside from Fortinet marking it as spam, but A) who listens to Fortinet and B) that ain't a malware designation

[boreal scarab]

https://open.spotify.com/track/2yN2B1x7ypvUd13EzEblz2

I can't stop listening to this lol

[topaz topaz]

Seeing your screenshot from earlier, I would recommend you switch AVs, or not use one on your phone if you feel you can avoid shady links

[pallid lotus]

A bit of common sense goes a long way.
You said it yourself: you don't see how it's malicious. Why would you immediately jump to "just report it anyway"?

[pallid lotus]

Okay, so?
What's that telling us?

[nimble gorge]

Its a screen shot

[cosmic pendant]

Did your color change again here recently?

[nimble gorge]

Read the text in the screen shot

duh

[topaz topaz]

When someone comes with screenshots of AV alerts, as a not as experienced user, I cannot take it upon myself to tell anyone NOT to report something that's been flagged as such.

[pallid lotus]

Obviously. What is the screenshot saying.
I see the site, and your browser has coloured the URL red. What does that mean

[topaz topaz]

And next time I'll do the same cause it's better to bring this to the right people's attention and they can decide further

[pallid lotus]

Not since Skidy stripped my roles, nope

[boreal scarab]

I've tried a bunch of these "username look up" apps/ sites, and they have always given me false positives... like

"Yah, Shadow_absorber is on Pintrest"
goes there and there's no account at all

[sand trench]

ello and good night muiri
shadow is gonna go sleep nows

meep moop to sleep sloop while beep boop basically

[boreal scarab]

Example... gave me Hackenproof for my username and yours, 500 error..... always hate the false positives

[pallid lotus]

Fyi, there's also a time article on this:
https://time.com/7327409/ai-agi-superintelligent-open-letter/

And CNBC:
https://www.cnbc.com/2025/10/22/800-petition-signatures-apple-steve-wozniak-and-virgin-richard-branson-superintelligence-race.html

Plus a bunch of others.

So, to summarise:

• VirusTotal ran 68 AV Engines / URL status checks against it. They all came back clean.
• Multiple major news outlets have run stories corroborating the existence of the site.
• The only thing flagging it is whatever the heck you've got installed in your browser.

I remain open to correction, but I'd say there's a reasonable chance it's legit

[real leaf]

Hello im Wann im getting into cybersecurity ive always loved computers if anyone needs a study partner or someone to get help and just spend hours on trying to fiqure out somthing im open to being that person its always fun doing things with people instead of by your self send me a dm im about half way done in cyber security 101

[desert shuttle]

Hola

[desert shuttle]

https://tenor.com/view/popcorn-popcorn-eating-gif-15328083130531614510

[brazen crane]

Gday humaniods of the inter of nets, how are we all feeling today?

[dark wolf]

Fantastic

Just busy hacking something

Although I have to say I am a bit paranoid as it is my first time hacking a voodoo doll

[sturdy sequoia]

a what?