/cyb/ + /sec/

previous >>60021750

>>60069767
In case you appear here, yes.

File: lain.png (213KB, 931x512px) Image search: [Google]

213KB, 931x512px

>want a job at palantir because white hat dayjob is /cyb/
>can't decide if i should focus on data science, security, or algorithms

Test

Daily reminder that the only secure way of messaging is xmpp with omemo encryption on conversations.

daily reminder that white hats are corporate puppets.
Underground went to the sink once that bastarization flooded the entire inet
be /cyb/
be /sec/

also, bump

>>60069750
I love that we have this thread

Going to my first infosec conference next week. Should be pretty fun.

>>60069750
what do newbie like me?

>>60069750
What do employers look for?

Tiger + Tripwire + Chkrootkit (or rkhunter) , or Samhain instead of that?

Is there anything wrong with storing passwords in a plaintext file if you're using full disk encryption?

If someone else has physical access or pwns your user account, you're fucked anyway (they can install keylogger, backdoor, grab your browser cookies, etc)

>>60073897
pajeets

>>60075279
You are not counting the autocomplete function of some password managers (keepassx) which may bypass a keylogger.

Layers of the onion.

>>60069750
I really want lain to be my little sister.

>>60075344
If a malicious actor can install a keylogger, they can grab your keepass password and your keepass database file. The autocomplete provides no protection.

They can also read keepass's memory directly if your account has sudo.

>>60075376
*could

All that is very likely, but not certain. This all security thing is about reducing risk, but there may be always a way.

File: 1492623432943.jpg (109KB, 423x414px) Image search: [Google]

109KB, 423x414px

>>60075358
"""Little Sister"""

>>60075438
Sauce?

>>60075438
kys nonce
>>60075621
kys turbo nonce

I don't want to fuck lain. I just want to play with her hair thing.

>>60075759
i want to steal her bear suit. looks comfy af

Been digging and if I understand well grsecurity has kernel lock down and user to process control, while AppArmor is path oriented. The two complement very well.

I say grsecurity + PAM + AppArmor is a good strategy.

>>60076542
I've been using a grsec kernel for a few month on my personnal server, and I had a lot of issues with languages compatibility.
For example, python and nodejs wouldn't work.
After lurking online, I found a way to fix most of theses issues with paxtcl, but it's not perfect, and you need to manually reconfigure the languages managers after every update.
Plus some software (like certbot) still doesn't work.

it was lainchan tier and it was on fourchan

>>60078297
Still easier than selinux

>>60078337
selinux is worth the time to learn

>>60078566
More than the combination of grsecurity with apparmor? Because I have my doubts

>>60078573
aparmor is a simple version of selinux

>>60078592
Yes I know, and grsecurity does many things, enough for me

New updated version of security tips in order of difficulty, now up to level 37. Added a deterrent section and a physical access section. Also split the first part.

https://pastebin.com/a2D6a8du

r8 h8 m8s

>>60078641
35 should be full disk encyption with key on a separte usb that you keep on you

>>60078566
RBAC

>>60078600
enjoy grsecurity while it lasts, testing patches may go private.
Anyway easiest way to use grsecurity is Gentoo Hardened because every package that need patches or paxctl settings has it automatically.

>>60078566
It is if you can do mls setups otherwise it's a waste of time.

>>60078769
you can it is easy when you did a minimal install

>>60072423
what is inet?

also wtf is up with the captchas lately? I'm having to do about 5 "select the X" ones

hiro why

>>60078761
https://grsecurity.net/passing_the_baton.php
rest in pieces

>>60069877
This is my life too. Except I'm also considering architecture.

I just bought some weed off the deepweb and plan to get stoned and program an encrypted CLI messaging service

am I /cyb/ or /sec/?

>>60081675
>giving your address and money out to strangers on the internet, let alone DEEP WEB
Well, only time will tell.

>>60081978
sellers got a good trust level and a high reputation, you're right though anything could go wrong

File: ohb2x69t4U1rqbtm2o1_500.png (673KB, 500x666px) Image search: [Google]

673KB, 500x666px

Is a password with 16 characters (Some uppercase, some lowercase, and symbols/numbers) good enough?

>>60081991
>Original owner taken out by DEA
>Knock on the door any minute

>>60082444
https://howsecureismypassword.net/

Type in a different-but-similar password to see how secure it really is

>>60082470
>for a tenners worth of weed

>>60082492
I know i shouldnt have, but i actually tried an actual password of mine (it has numbers instead of symbols) and its apparently harder to crack than a password with symbols. It would take a computer about

9 QUADRILLION YEARS
to crack your password

>>60082530
i imagine with quantum computing we'll see more advanced ways to break passwords

File: willyg.png (28KB, 113x113px) Image search: [Google]

28KB, 113x113px

posting one more time for those interested, a /cyb/ discord server -> https://discord.gg/HXy6kRH

not really focused on /sec/ much, more diy stuff and general media chat

>>60083306
yeah obviously not /sec/ cause discord is shit

>>60083306
I like the idea, but why should I trust discord?

>>60083306
>cyberpunk
>discord
>not IRC
fuck off

File: 39891740.jpg (174KB, 647x800px) Image search: [Google]

174KB, 647x800px

>>60071262
This

No seriously, how safe is discord?

>>60083763
not at all, they can MITM everything and do log everything

https://www.reddit.com/r/discordapp/comments/43z4yh/open_source_protocol_encryption_privacy/

https://discordapp.com/privacy

>>60083667
depends on how much info you want to give to them, as far as convo goes it's nothing too serious (i.e. getting into ethically questionable shit) ... mostly just a lax area to talk about the fiction and making things.

>>60083354
>>60083672
I prefer using irc most of the time, but I understand people not wanting to join bc of security/privacy concerns.

>>60083803
why did you choose discord over IRC?

>>60083801
>Our Services currently do not respond to “Do Not Track” (DNT) signals

>>60083801
>>60083803
Well, discord do looks nice, but as always the I like simplicity of IRC more. I dream of an extended IRC protocol with video or voice streaming capabilities.

>>60083824
Long story, but this chat spawned from a different community server from 4chan.

A lot of people had a shared interest so this one split off and trying to make it it's own thing. Figured I'd post here, take the shit from a few people, and maybe get a couple interested along the way.

>>60083863
I won't be joining, if there's ever an IRC hit up this thread senpai

File: 30031728.jpg (163KB, 700x700px) Image search: [Google]

163KB, 700x700px

>>60083306
>>60083763
discord is pure cancer, read this: https://r4p3.net/threads/what-is-discord.861/
>>60071262
>>60083758
these niggas know whats up

>>60083877
<3 no biggie, if the community gets large enough I would like to start a channel somewhere

>>60083859
https://github.com/Rivalo/discord-cli could always use this kek

>>60078641
Hi bud. Nice updated version.

But about point 37. What does hiding my powerlevel mean? (english is not my native language)

File: when the fbi knocks.webm (2MB, 840x473px) Image search: [Google]

2MB, 840x473px

>>60084095
Is an old joke

>>60082444
You should randomly generate a password with as long of a length is allowed and with as many symbols as is allowed.

File: f9d.gif (697KB, 295x197px) Image search: [Google]

697KB, 295x197px

>>60084095
>>60084546
:)
>>>/wsg/1660337

how's the intro to IRC guide coming along? think last thread someone said he was making one
>>60084546
not suspicious at all

>>60085123
Yeah, give me time I barely sleep yesterday updating the other list :)

>Many are huge whitehat/pentester resources. Be warned, they may turn you into an idiot.

uh whats does this mean?

>>60085278
Whitehats are usually people who just know how to use tools but don't even know how those tools work.

>>60085451
And that is why hacking yourself is a good idea

>>60085451
ah ok. is it still a good resource to get a basic understanding?

>>60085498
Yes of course. Otherwise they wouldn't be there.

>>60085512
thanks. You have no idea how hard it is to get a straight answer on this board

>>60084095
nothing to worry about until it goes
OVER 9,000!

>>60069877
> Palantir

They have some edgelords working there but fuck you're going to be a pariah if you take that plunge. Most people aware of mass surveillance tend to disapprove of its use and Palantir, one of the chief enablers of mass surveillance, is looked down upon for damn good reason.

File: a3191c43ea7c072e37484787c0852450135ff035f29f31199bdcdd816fe1e22c.jpg (66KB, 600x720px) Image search: [Google]

66KB, 600x720px

>>60069750
>MFW Whenever i see lain a big wave of sadness washes over me

ahhh i cant take it

Should I use the VPN inside or outside of the virtual machine?

File: NIOQvIWgRvG1JnRS9xpfrdrxKYgb8SAGRV2tHUizSP0.jpg (87KB, 576x768px) Image search: [Google]

87KB, 576x768px

I just noticed that >>>/tg/ plays a bunch of /cyb/ games.

>>60086020
/cyb/ is nothing but role players

>>>/wsg/1660337
Is that from matrix?

>>60085963
If you know how, outside.
This way even if insides of your virtual machine are fucked, it won't leak your IP.

how do I get a job in networking in security with a Bachelors degree in IT and 1 internship at an IT department for 4 months for a big citys county IT department. is it doable? do I need to lie on my resume? Do I try to get a level 1 help desk job instead?

>>60087687
networking or security*

>>60078566
Are there any good guides/books/documentation for learning and implementing SELinux?

>>60085720
i've spent so much time at university doing statistics, big data, machine learning etc etc etc etc honestly the stuff hurts your brain and is a lot less comfy than dealing with machines. but it's like a waste if i don't at least apply places where they do big data analytics. and i don't want to work at a shoe company or something, creating an algorithm to recommend people shoes. i want a cool job, good/evil aside

>>60087687
get a cert but remember: there's no qualification requirement to apply anywhere. applying never hurts

>>60088013

Then why not work for almost any other company in existence that works with "big data"? There's no shortage of them.

>>60088088
http://tvtropes.org/pmwiki/pmwiki.php/Main/EvilIsCool

File: 1489877455985.jpg (62KB, 960x720px) Image search: [Google]

62KB, 960x720px

>>60073897
compliance and mediocrity

>>60087278
It's a scene from The Core.

>>60088211

Yeahhhh not here. This is not evil as in anarchy. This is evil as in authoritarian.

>>60088333
darth vader wasn't an anarchist and i think he was pretty cool. he was definitely intended to be cool at least. evil stopped being associated with anarchy rather than authority a long time ago. ie a good knight kills a dragon and becomes a good king, nowadays that story would be considered a snoozer

>>60088426
Nope, being a cunt is still being a cunt and you deserve the hate

>>60088515
bit rude 2bh, you're gonna regret it when i'm watching you poo

Honest question:is systemd harmful for security? If yes, can you explain why? I ask this because many people seem to hate on systemd beacuse they are concerned on security.

File: 1422207013149.png (342KB, 412x373px) Image search: [Google]

342KB, 412x373px

>>60088793

>>60078641
I realized before reading the bin I already did some levels but skipping some. Is that good or bad?

>>60088793
that is like saying you want to be a terrorist

>>60087965
gentoo wiki has a good introduction
https://wiki.gentoo.org/wiki/SELinux/FAQ
https://wiki.gentoo.org/wiki/SELinux/Tutorials

>>60088808
it is young and people feel not enough of it has been audited.

>>60088859
nah levels are for diffuclty not order

>>60089059
Cool.

Some /sec/ tips for a newbie at homeservers? I only have running transmission, samba and ssh.

I changed ssh port, disabled root login, login with a key.
Samba is only allowed to one IP.
Transmission has KeepPass generated password.
And then I have iptables with just internet, samba and ssh ports open.
I alsohave fail2ban.

Am I doing good on a basic dose?

Noob coming through, dumb question that I couldn't find a straight answer anywhere:

Let's say I want to browse the web and hide my identity. So, I created a VPS and reverse SSH'd into that server, and used it as a SOCKS5 proxy in firefox's network settings. It seems to be working, since googling "what's my ip" shows the server's ip.

My question is: Will this system protect me in ALL cases? Like will Javascript http requests still to through the SOCKS5 proxy or through my home connection? If I set up the proxy properly, can I be certain that my identity is protected?

Not that I need to be anonymous or anything, just learning about security

>>60089357
Check for DNS leaks. I think be default FF doesn't send DNS requests through the proxy.

Just stop by to comment on the IRC tutorial. As there are several configurations to be done by each network it will be focused on two, freenode and rizon. And as the clients have their respective configurations is going to be focused on two clients, hexchat and irssi.

Is going to be something like this (this time in a respective order):

Choose a client: Hexchat as GUI client, the first screen presented is the server selection, where to change the configuration options for each server, just regular point ant click. Irssi is a a more traditional unix client, great for people who enjoy scripting, configuration done in files, interaction is done by only keyboard and even changing windows is done by a keyboard shortcuts.
Registration: You register for each network, and by network we mean a family of servers to which we connect, althought in reality you won't notice there is more than one server. To register your nickname you have to insert words, and to login you need to either type in each time or configure your client.
Use options given by the network: There is a couple of options to enhace privacy/security like cloak or vhost depending on the network.

Any idea is welcome.

>>60088859
Nope, not mandatory, although some stuff is a good idea to do it before later steps. Like is logical to tweak your browser and disable javascript and cookies before you navigate the internet though i2p. But these are mostly guidelines and you would probably to read the requirements of each step somewhere and there will tell you what you must do.

File: SWAT BTFO.webm (2MB, 480x360px) Image search: [Google]

2MB, 480x360px

>>60084925
:^)

>>60091120
Yo, that's a spanish national channel wtf

>>60091227
you got pretty fucked up tv shows buddy

>>60091258
Based on channel's logo, is very old, could be amerifat video on a late show. Search for "Antena 3" and your prefered search terms. That's the channel's name.

>>60091285
anything as good as that? ;^)

>>60090912
why make an irc guide not only does every program offer documentaion but searching for what you want to do is easy

repetitive wrist strain injury :)
can't sleep at night due to pain :)
just resting hands on my lap hurts too :)

Whats a more "high brow" /cyb/ novel?
All the classics read a lot like punk, and I was never partial to street speak.

>>60093986
i've got something you could rest your hands on bby

>>60094017
Is it a pack of ice?

>>60094033
sorry it was just a joke! :(

>>60085451
So, script kiddies.

I want a VPN but I don't want to spend money.

Is that even possible?
Should I just use Tor?

>>60095444
>Tor
*i2p

Anyway, I was thinking the same, but in my case is for the freaking youtube

>>60095208
"Professional" skiddies, in essence.

>>60096838
best korea

https://www.youtube.com/watch?v=cGYKCTFIZLI

Just put the subtitles on, the guy has a speech impediment.

How do I become like Mr. Robot?

>>60099561
by being high on morphine

I'm about to start comp sci or Security degree. The Security degree is not programming based and that kind of makes me hesitant to do it. They're offering 2 years at the cc level 2 at uni and 1 more for a masters, which also makes me feel it might be gimmicky. I want to be well versed in programming and figure this is kind of an objective in Security and all things computers. I can do basic shit but don't want to be a basic shitter after schooling. Can I get anyone's thoughts or advice on this?

File: tmp_21472-1492841997711-b-b-8e64-1194509814.jpg (39KB, 557x521px) Image search: [Google]

39KB, 557x521px

How can a criminal break into the system without inputting correct login and password?

>>60100301
security degree without programming is a meme degree.

Here is the IRC guide, partially complete but usable https://pastebin.com/QCKmysyY

Also a new updated version of the security tips https://pastebin.com/8c0PrKKn

>>60100896
noice, ty man

>>60100896
everything in the irc guide is already in the rizon wiki or the chat clients wiki. you added nothing

>>60101895
fuck off. i went to the rizon wiki and it doesn't list exact commands one after another like that. dickhead

>>60101919
yes it does and if you need help you can always message what ever bot or server with help

>>60100896
That's spoonfeeding tier on the IRC guide. Anything other than the vHost/cloak, and the hide email which aren't intuitive shouldn't be there.

/cyb/ in the news

Frozen brains 'woken up' and transplanted in donor bodies...
http://www.telegraph.co.uk/science/2017/04/27/cryogenically-frozen-brains-will-woken-transplanted-donor-bodies/

Home-made bricks for habitat on Mars...
https://www.yahoo.com/news/home-made-bricks-habitat-mars-142226720.html

Spacecraft survives unprecedented trip between Saturn, rings...
https://www.yahoo.com/news/spacecraft-survives-unprecedented-trip-between-saturn-rings-154244185.html

RISE OF THE SEX MACHINES: $15,000 robot companion...
Talks, learns, and never says no...
https://www.theguardian.com/technology/2017/apr/27/race-to-build-world-first-sex-robot

US Marines could deploy robots and 'HyperSubs' to storm future beaches
http://www.foxnews.com/tech/2017/04/27/us-marines-could-deploy-robots-and-hypersubs-to-storm-future-beaches.html

Hackers exploited Word flaw for months while Microsoft investigated
http://www.reuters.com/article/us-microsoft-cyber-idUSKBN17S32G

SHOCK: 2 teachers arrested for having sex relationships with SAME student...
http://www.clickorlando.com/education/ocoee-high-teachers-had-sexual-relationship-with-student-police-say

>>60102006
how about you make an IRC guide for people who already know how to use IRC, then

>>60102034
Yeah because it's really hard to learn how to IRC right?

>guide to learn how to buffer overflow
Okay.
>guide to learn how to reverse engineer
Okay.
>guide to learn how to stay secure on the internet
Okay.
>guide to learn how to stay secure in IRC
Okay.
>babby's guide to IRC
Not okay.

>>60102010
And today I am reminded again how much I hate mainstream journalists.

>>60101895
>>60101995
>>60102006
>>60102074
You want to keep IRC as obscure as possible? Fuck off.

I am under the impression you want to boycott IRC.

>>60102362
What's the point of spoonfeeding? And yes, it's perfectly okay to keep IRC for people that are above the average IQ, IRC is not discord.
It's not called boycotting IRC but making a quality filter.

>>60102417
You are the cancer killing IRC, fuck off

>>60102422
How is IRC dying at all? Please explain yourself.

>>60102417
i don't have time on my hands to research IRC because i have finals ongoing so i'm an idiot, sure thing m8. fuck that guy for making a step by step guide for using it

>>60102417
We don't want on the chat, nobody wants to talk to assholes like you.

These fuckers are trolls wanting to keep their safe space, this shit is killing IRC nad nobody likes them, ignore.

so theoretically, if I were to splice a usb cable into two branching cables, one of which went into the intended computer and the other went into something small like a raspberry pi with a text editor open, would I be able to capture the keystrokes the person intended for the main computer? Can data be captured by a branching usb cable that way?

>>60102476
the only thing i know is that USB cables are serial, so it wouldn't fuck it up as bad as if you tried that with a parallel connection. look into the anatomy of usb cables to make sure

>>60102438
>research IRC
So it's hard for you just to google something? Getting on IRC is not hard at all. Securing your existance in it may be, and I'm not against that (see >>60102074).

>>60102457
Aren't you the one that wants a safespace with all the spoonfeeding? Do you mind making a guide for me on how to brush my teeth? With pictures if possible, thanks.

Your attitude is horrible, people need to research easy stuff by themselves.

>>60102580
go to hell

File: __(71).jpg (57KB, 600x334px) Image search: [Google]

57KB, 600x334px

>>60102225

File: 1413112558499.gif (2MB, 308x214px) Image search: [Google]

2MB, 308x214px

>>60102640

>>60102438
If you can't even figure out irc, you're going to fail your finals anyway. Why even study?

>>60100301
>The Security degree is not programming based
stopped reading here

>I want to be well versed in programming and figure this is kind of an objective in Security and all things computers. I can do basic shit but don't want to be a basic shitter after schooling. Can I get anyone's thoughts or advice on this?

but actually this caugh my attention, and maybe this is worth for you:

http://www.myne-us.com/2010/08/from-0x90-to-0x4c454554-journey-into.html

>>60102731
have > 3.9 gpa

>>60102808
Yeah, probably out of 8.

posting a guide on how to into irc is not /sec/ or /cyb/

>>60100301
What school? i do computing Security at RIT and I can say that it can be programming based if you want it to be (Choosing secure programming cluster)

Stop shitposting

>>60103079
fuck fourself

i think we should make more "complete idiots guide to ____" 2bh. like SSH. i still don't know how to set up ssh between my desktop and my laptop. lul

Is the grsecurity patch for the kernel really necessary if you are concerned about security or is it just extra?

>>60103599
This, tbhq

>>60102734
>http://www.myne-us.com/2010/08/from-0x90-to-0x4c454554-journey-into.html

Shit, this is a wonderful list that I appreciate anon. This is more of what I figured I would need. I'm solving algorithm challenges on FCC to learn general programming and this will help in my next steps.

>>60103071
I go to a shit community college in NH and then wanted to transfer to UNH. I've been screwed out of shit in this school and giving the wrong information already and I understand they're basically selling a product. There's a few empty spots for electives but not enough to fill up with programming courses. I even checked the UNI's 2nd half of the degree and there's still not much programming. i don't want to get a meme education.

>>60104180
Can you recommend me some beginners book on algorithms? I want to first learn to optimize and write good code and also to learn well known algorithms that are usually used.

>>60079390
>Kernel security site
>Using php
lmfao that doesn't speak well about their product

>>60104180
A lot of that stuff seems really dated and probably outdated information.
This book covers most stuff and is up to date afaik.
https://www.amazon.com/Hacking-Ethical-Handbook-Networking-Communication/dp/0071832386

>>60104234
I'm a beginner my self and am using no books so if another anon wants to help both of us out that'd be sweet.

Currently I am using FreeCodeCamp for basic shit like manipulating strings to shit like solving the sum of all primes, product of all odd Fibonacci numbers etc.

>>60104297
Thanks anon. I'll bookmark it and look for a pdf or something.

>>60104234
introduction to algorithms. i'm going to try to make a TLDR version though because it's a bit encyclopedic. this site's got some explanations for dynamic programming problems
https://people.cs.clemson.edu/~bcdean/dp_practice/
algorithms aren't really cyb tho imo, i just have to learn this shit b/c employers have a boner for algorithms

>>60103599
if you dont know how to use ssh or irc you probably should not be in this thread

File: 1439569931776.jpg (37KB, 357x356px) Image search: [Google]

37KB, 357x356px

Ignore bollocks
Increase our numbers
Make cyberpunk great again

bumperino

File: img_2851-2-4032x2688.jpg (3MB, 4032x2688px) Image search: [Google]

3MB, 4032x2688px

>>60107039


VR fag reporting in.

>>60107339
Do you recommend waiting for next gen vr?

File: 1477503231041.png (139KB, 709x531px) Image search: [Google]

139KB, 709x531px

>>60107374
If you're not someone who likes fiddling with new things, yes wait for next generation. It's not at the point where it can replace your monitor for daily tasks, but next gen in 2019 it very likely will (don't be fooled by Microsoft's current headsets just yet).

>>60107427
Fiddling howso? I have a homelab that i would not trade for the last drop of vodka, it wouldnt be easy but thats the only analogy i can think of to show my love for fucking about wit tech

File: 1451427756723.webm (2MB, 206x360px) Image search: [Google]

2MB, 206x360px

>>60107461
Like unexpectedly having something break in hardware or software with stuff like drivers and having to go back and forth with customer support, or troubleshooting. Having to go through certain hoops or deal with generally bad designs, to achieve certain tasks because the software just isn't terribly developed yet. It's what you expect of being an early adopter.

Plus I would not recommend this stuff to non-gamers. Games and entertainment are what everyone is pushing. Especially the kind that makes you stand and move your body. Personally I love the games they've made so far but you might not like games.

Pic related. And the game he's playing (or at least the game the demo went on to become): https://www.youtube.com/watch?v=g48yzSY2lgg

If that video doesn't interest you then feel free to forget VR exists until 2019.

>>60107584
Okay. As strange to as it is to sya. Ive purchased an oculus rift, dont have the vive space, off of a fucking forchan post. As i love games and explored more into the residential evil series and it seems super spooks in vr,

How is porn in vr, if my assumption is correct; porn will lead the revolution

File: 1474745206819.png (87KB, 371x263px) Image search: [Google]

87KB, 371x263px

>>60107584
>tfw I got someone on the four chins to impulse buy a damn VR headset
Looks like Facebook's depositing some money for me today. :^)
Honestly though I'm glad. I'll be here for you if you need anything.

Yes, porn will be big.

Check out Honey Select with VR mods, that's usually everyone's go to. Don't even pay attention to the live video porn, that stuff is low quality at the moment (but will probably become better in the future).
Looks like Facebook's depositing some money for me today. Honestly though I'm glad. I'll be here for you if you need anything else.

By the way you also bought Touch right? I assume you have a high spec computer?

Also don't expect too much, the screen is very low resolution, the FOV is like swimming goggles, it's not very comfortable, the lenses are slightly blurry feeling due to the way they were made, etc.

>>60107881
>Looks like Facebook's depositing some money for me today. Honestly though I'm glad. I'll be here for you if you need anything else.

Not on my copy paste game today it seems.

>>60069750
I hate these threads... rarely anyone talks about interesting/nice technical stuff
I myself work in an infosec/pentesting/offensive security company, and my job is truly awesome. of course there is some obscure shit I don't agree with, and also some snake oil, but... other than those small (IMO) details, we do a lot of good, teach retards on how to fix their shit, and do/get to learn really cool stuff.

>>60069877
>palantir
kys

>>60073897
in infosec? knowledge and experience

>>60107881
Too bnee quite honest im so drunk, mopnmey had no value. This is mindset im in is how ive aquired the mass amount of mechanical kleyboards i have.

Im actually really excited for vr, just need to be in a state that i can be (whatever the word for manipulated is) to buy some vr.

ye i my comp can hadnle it, ive already bought a onahole and cant wait for the vr porn experience so i can delete bubmble, tinder, and antyhing like it.

Sooon IV food and hydration stations will be my future .

>>60107935
I klnow you look down upon these threads but you had enough time to reply, so i graciously ask for a timeline of your info sec careeer.

This could possible provide some direction for any neet requiring such direction

File: output.webm (641KB, 640x360px) Image search: [Google]

641KB, 640x360px

>>60107954
>Too bnee quite honest im so drunk, mopnmey had no value. This is mindset im in is how ive aquired the mass amount of mechanical kleyboards i have.

Dude that's not healthy.

Gif related might be what you think you want, but it's actually bad. Please don't ACTUALLY fall for the cyberpunk VR sheeple meme.

>>60107935
/cyb/ drowns out /sec/ and when people do ask about /sec/ related things it is always along the lines of how to be anonymous and career addvice. The first is played out the latter is not /sec/ related. On the off chance something unquie does come up it is either never acknowledge or recives little response.

>>60108128
holy fuck you just described very fucking well why I hate these threads

>>60082444
use passphrases

>>60107970
>I klnow you look down upon these threads
I don't, I just find it sad that people keep repeating memes and don't contribute much. OTOH, it's 4chan, so, really, what can I expect...

>you had enough time to reply, so i graciously ask for a timeline of your info sec careeer.
>This could possible provide some direction for any neet requiring such direction
mine is practically an accident:
I have some good friends (through IRC, haven't met IRL) that do CTFs and stuff, and are very good at it. well, they talked to my bosses about job, recommended me, I did some tests and got hired. been at my job for only a few months, though... so I'll see how things work
been doing/learning some infosec stuff for like 10 years, though. I got a few CVEs and other stuff
guess the takeaway is:
- learn as much as you can, and actually do stuff. show people what you know. for example, have a github repo or something with your scripts, programs, etc
- network. for example, IRC is a good place to be
- guess I could add: have a blog or shit, have some CVEs, make yourself known. I keep a low profile, so I don't do this, but I really wish I had started a blog a long time ago...

>>60108216
lmao you are not alone m8

File: mde.png (979KB, 1018x699px) Image search: [Google]

979KB, 1018x699px

is it true that the FBI operates a bunch of Tor exit nodes or is that just a rumor to scare people off Tor?

you fugs sticking with this site, or did you start putting out feelers to other chans?
I tried, but others seem much too slow for me and much more tight-knit. hard to break in into the boards or irc when they are like that.

>>60103730
Just extra, same with MAC's, standard UNIX DAC is perfectly fine for desktops/workstations.

MAC's are usually only used for servers.

>>60109448
that is true but it doesnt hurt to learn how to use a MAC

>>60109513
They are overly complicated to learn for the protection they provide. A MAC like SELinux can easily be bypassed, rendering it useless, you'd be better off spending the time learning to properly secure the kernel and userland.

This is a good start;

https://people.redhat.com/swells/scap-security-guide/RHEL/7/output/ssg-rhel7-guide-stig-rhel7-server-upstream.html

https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/

This does not just apply to Redhat, it can be applied to any GNU/Linux distribution. If you follow these security steps you will have a much more secure system than any MAC could provide.

>>60109554
how can a mac like SElinux be bypassed easily

Work insist on using Lastpass for everything but I've always questioned how secure it is.

What's your opinion on it?

>>60107935
>implying anyone cares about a job

>>60109657
Google it, it's happened a multitude of times. The only reason you won't find as many vulnerabilities reported for Apparmor is because it isn't as widely used as SELinux, don't let that fool you into thinking it is any better.

>>60109554
Your security is shit without grsecurity

>>60108216
Sounds mostly like bullshit advice, you can't learn everything in infosec so just pick some direction you want to specialise in.
If you want to reverse engineer do that or if you want to be a pentester go do that and so on.
Also learn a programming and scripting language because it's always handy something like C and Python fit the bill.

>>60109919
Well grsecurity is ending soon anyway, unless you want to pay for it.

>>60109871
they all show expliotes reguarding an selinux enviorment that was not properly secured

>>60107935
How often are you solving security problems that aren't on the OWASP top 10 in your job?

>>60104470
thanks anon

the thing is I am long time programmer but I feel I lack more formal and theory knowledge than just fixing stuff on my own. I need some guidelines on standardized ways to do stuff

>>60104234
>book on algorithms
The Art of Computer Programming

Thinking about trying to develop an secure messaging app for android with built in PGP, is SMS OK to use or are there other more secure protocols I could use

>>60110235
the legendary book
thanks anon

>>60109954
Okay so you either use Subgraph that is going to maintain 4.9 LTS or you compile your own kernel and remove all useless stuff and enable/disable all the things you see below : https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project

What are some /cyb/ manga or anime?

>>60110465
Much more hassle than it's worth

>>60078641
Can you clarify points 6,7 and 21?

>>60110897
It's just full of memes
>Level 11: Use Bastille Linux to harden your system.
Sometimes very-very outdated memes too.

>>60109081
Could be true, but they're not much worse than most of the other shady individuals and organisations running the majority of Tor nodes.

>>60109919
>Sounds mostly like bullshit advice, you can't learn everything in infosec so just pick some direction you want to specialise in.
well, of course you have to specialize in some area, but... most people in infosec know a bit of many things

>>60110013
all the time, I not only do web stuff and, in fact, it's the least I do... but other people in the company do that, and only that

>>60100338
SQL Injections,
rootkits,
social engineering,
etc

So now what's the grsecurity replacement?

>>60110655
you would have mitigated last vulns this year if you had a custom desktop kernel.

>>60111991
Getting whatever can be salvaged from the latest available patch into KSPP I guess. No real replacement tbqh

Anyone here who sold his 0-day? Best company to sell to? I'm turned off by Zerodium's cringeworthy marketing.

>>60112461
if it's no-name software they'll give you fuck all for it
just make something fun with it and either keep it to yourself or sell it on a darknet market

>>60101895
>>60102006

kys

>>60109690
Tell me your job so I can know what not to trust.

>>60110897
Level 7 I see some over here https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/
There was also a Novell paper giving the same recommendations but I don't have it at hand.

Level 21 is because i2p has a better protocol, but yes, some people suspect from Tor but I am not sure that is the main reason.

>>60075732
>kys
This is not facebook, nigger

>>60110503
>What are some /cyb/ manga or anime?
Ghost in the Shell (both manga and anime, in case you didn't know. This is perhaps the best known one)
Akira
Yokohama Kaidashi Kikou
Dennou Coil (though some disagree loudly)

Remember more in the pasta.

>>60114837
whats your opinion on the new ghost in the shell movie? been thinking about watching it. is it worth it?

>>60087965
There's a great talk out there called "Security Enhanced Linux for Mere Mortals." It's a little slow, I would play it back at 1.25 speed, but it's on youtube last I checked

File: 9GfkdO6cbWWmKTh3t1b0ma09KAp.jpg (149KB, 1280x720px) Image search: [Google]

149KB, 1280x720px

The Cyberpunk Educator https://archive.org/details/cyberpunkeducator

Pretty dope film lads

>>60089297
Yes. If you want to be a bit more esoteric you could use a port knocking daemon to open the ssh port on the proper sequence, but it's totally unnecessary. However, if you do, set iptables to drop packets instead of rejecting them, so it'll just look like your server isn't up to anyone who hasn't port knocked. And don't forget to try and unregister your reverse dns records if possible

>>60111025
read the "tor sucks.pdf" document on wikileaks

>>60114906
the hollywood one or "ghost in the shell: the new movie"?

>>60107935
any advice for getting a job in networking or security? all i have is a bachelors in IT from FSU and a 4 month internship at a major city's county IT department. do i just go for help desk? i graduate in a week and havent applied for anything yet HELP

This might be a stupid question BUT:

/g/ can you recommend me a way to mirror the content of a website? Let's say i want to mirror http://kekistan.com/ with my 5 dollar webhosting. How would i proceed?

>>60114906
I haven't seen it yet, probably will soon.

>>60115388
Use wget to download a backup. Then copy that archive to wherever you need it.

>>60115153
the Scarlett Johansson one

I just bought one of those DRM-Discs and watched the 1998? realease of Ghost in the Shell. I really liked it. Am I a weeaboo now?

Threadly reminder: Kalyx is a fag.

>>60116079
Second'd.

File: wadim-kashin-12shot.jpg (469KB, 1920x804px) Image search: [Google]

469KB, 1920x804px

how is lainchan /cyb/? it looks a general tech imageboard with some edgy elements tacked on, few of which seem to be related to cyberpunk at all.

>>60088013
>doing statistics, big data, machine learning etc
More companies than just shoe companies have an interest in this. Try getting a job in a consultancy and get more variations. With a stint at "The Firm", which is realistic, you will get a pretty good career.

Cyberpunk literature isn't just about the streets but also the executives. Real life execs often have such a background.

>>60107339
>>60107427
make a cyberpunk-as-fuck game or you're going to be exiled

>>60110235
that's not supposed to be a learning material, it's supposed to be basically an encyclopedia for computer science

>>60112461
idefense (not really sure if they still exist...), zdi, report through hackerone...
no need for exploit (I've heard they sometimes buy unexploitable shit...), but they'll give you more money if you sell them a PoC

File: 1452482975751.webm (3MB, 1272x544px) Image search: [Google]

3MB, 1272x544px

>>60117069
That is, in fact, in my plans.

>>60116942
Not him, but I'd like to add that those skills are used in all manner of prosthetics research. Universities, research institutions, and medical device companies all need people with those skills.

>>60093986
Go for the Yokohama Kaidashi Kikou manga, all 141 chapters. Use a foot pedal to page down.

Very comfy with some sadness and much nostalgia.

>>60116079
>>60116216
>lainchan
You've got to go back

>>60117134
what film

>>60115086
All my iptablea are set to Policy Drop and then i open right ports. That are 80, 8080, 53, SSH, 2/3 of SAMBA and Transmission related.

Also, the only access that should be possible would be through ip:port to Transmission/SSH. although I plan to use wev server on the future, so I'm interested in DNS topics.

What's up with jinteki? I haven't been able to get in for a while.

>>60117801
Hackers

File: 1200px-Transhumanism_h+_2.svg.png (67KB, 1200x1200px) Image search: [Google]

67KB, 1200x1200px

Transhumanism/ Posthumanism
Telegram group

t.me/posthumanism

>>60118482
Too bad is telegram, but I dig transhumanism, needs more love on /cyb/

>>60118482
>>60118765
What's telegram, why is it bad, and what is the best thing that serves the same functionality?

>>60118996
is a chat
not necessarily bad but I rather IRC
IRC

Cold boot encryption attack https://www.youtube.com/watch?v=C_VsNYwGM_k

>>60114906
it's very different from the anime, but imo it's fantastic in its own regard. if you like the anime a lot you won't be happy with it as a "faithful" adaptation, but it's really not trying to be. i'd highly recommend it anyways though, especially if you can see it in 3d (even though 3d is a meme and a scam, it looks completely amazing, and it's honestly a totally different film almost). just go in with an open mind and try and think of it as being unrelated or tangentially related at best.

Final (final?) update to the security tips guide https://pastebin.com/5XfDX4wL

I have to warn you guys, the other pastebins are going to expire. I knew some fixing was needed that is why I made this last fixed guide the only not expiring

>>60101852
np

File: 56b6d866a8e608f3ded7f56dac414627.jpg (83KB, 720x540px) Image search: [Google]

83KB, 720x540px

Hey there cyberpunks, just want to give a big recommendation to the 2006 documentary film TechnoCalyps.

It's a schway documentary on transhumanism. It's spooky and cyberpunks as fuck.

And it's all on YouTube in pretty decent quality,
http://www.youtube.com/playlist?list=PLLgVDY8_xVLYhjw_pOkTnuX2NWQ9fsSy3

>>60075621
Kyarame-Loli by Himeno Mikan.

>>60078641
Why KeePassX and not KeePass?

>>60082499
>what is opsec at ALL times

>>60124801
awesome post my cybernetically enhanced friend. thanks

How does one get into pen testing

Some /cyb/ gifs are posted here
>>>/wsg/1545074 because rain is CP
>>>/wsg/1659104

>>60127348
Go to a pen factory and ask if they need people to test their products.

>>60127365
>because rain is CP

Well, not necessarily. The color palette might be similar but you still need the neon lights or futuristic tech/architecture themes. Those gifs just happen to have those things.

>>60125338
Safer database format and it doesn't depend on .NET

Let's say I have a rooted Android Moto G5. What can I do to make it more secure? Anything at all? I'm considering removing the cameras soon.

File: 1488929856629.jpg (88KB, 1032x720px) Image search: [Google]

88KB, 1032x720px

>>60129886
I'd be more worried about the microphone on it spying on you d e s u.

>>60129908
True. Thinking about removing those as well, attaching a mic to the lanyard of my headphones and I'm off!

Still, the noise of the subway is probably much less useful to anyone than a picture of my face and my surrounding.

>>60129886
See if you flash lineage on it? Removing the play store is no big deal these days as f-droid has all you need but you can install microG and download apps from apkmirror or apkpure if you ever need an app from the play store

Does Arch use Systemd?

>>60130036
I'm planning on downloading Signal through an apkmirror, but the rest is going to be gappsless :^)

What Browser addons are recommended?

>>60130586
yes.
try reading this:
http://systemd-free.org

What do you know about social engineering in the chats?

There have been rumors of people on the IRC and livestreams infiltrating and disrupting groups during OWS on 2009

>>60115131
You mean this - https://www.wikileaks.org/wiki/WikiLeaks:Tor?

>>60131036
tamper data, greasemonkey are the most cyb ones i use

Any consciousness vastly superior to ours would be so complex that we wouldn't even be aware of it. So it wouldn't matter what it would do to us. It's the same with most animals. We might as well be gods to them. An ant lives in a completely different reality. The whole concept of "animal rights" is based on the flawed notion of trying to equate our reality to that of completely different beings. Something that is unable to even understand the concept of rights is incapable of having them, or morals, to begin with. Rights are not given, they are taken. There is a reason why humans rule Earth and not gerbils. Rights or morals didn't exist until we invented them. There is no objective spiritual truth out there.

File: wut.jpg (27KB, 432x432px) Image search: [Google]

27KB, 432x432px

>>60131973
Consciousness requires a critical mass of brain power. A wolf is relatively intelligent but not conscious, they are biological machines that only think about killing and mating and they have been doing that, without change for hundreds of thousands of years. And if the environment doesn't change then they will continue being identical for hundreds of thousands of years more. Trying to give animals human properties is really very foolish. It's like trying to do that with computers, just because they can give us illusions of intelligence and consciousness, but because computers don't have cute faces and cuddly bodies nobody thinks about it. Evolution really is very efficient but brutally so. Only reason why humans have things like compassion is because it has been evolutionarily advantageous to us. A single human is really quite weak and underpowered, we need to cooperate, it's the key to our progress. It is also why we think babies are cute and why we are instinctively protective of them and why sex feels good. There really is no deeper meaning behind any of it. If we had evolved from tigers then the world would look very (brutally)different, because tigers are solitary and territorial animals that have absolutely no use for things like compassion, empathy or cooperativeness. We wouldn't think twice about killing anything if it suited us, not even other tigers and it would be completely normal to us. If some hairless ape came to us on his high horse and started preaching about morals and rights then we would think that he was crazy, and then we would eat him.

>>60131998
you ever hear of the bicameral mind theory? it says that in pre-history, humans had the same brain size and power as they do today, but they didn't have consciousness. it says that to be conscious, humans needed language, to be able to have a framework for ideas and create a sense of internal self. as language was emerging, humans would hear inner voices and think that they were coming from spirits. they didn't know that it was just their inner voice

>>60132073
finish westworld yet retard?

i had to google search what westworld is, i don't get your point but you seem like a cunt either way

>>60128474
Neon was the future seen from 1980's, now it is LED. At times blue LEDs.

>>60131973
>moral relativism
>muh unspoken "superiority" is beyond your rights
you certainly won't fool me

What do you guys think about anti-stylometry software https://github.com/psal/anonymouth

Necessary?
Ineffective?
Unnecessary?

>>60132942
seems a bit overboard if you're not leaking documents at the NSA or running a kiddie porn dungeon network on the deep web

>>60133016
please no answers that depend on context, we are on /cyb/+/sec/ and we should focus on efficacy

>>60133044
Actually we should focus on use cases too. What is the threat model we cover with anti-stylometry?

>>60078641

i have full disk encryption with the qubes os install, it can make an anti evil maid thing to put the boot-loader on a usb if i understand correctly. with all this being done, i have a vault domain that isn't connected to the internet, could i confidently store passwords in plain text on there? Also could i skip the VPS steps and instead use this vpn? perfect-privacy.com they are a swiss company with swiss servers, i've found this to be the best option if you chose to go this route.

>>60133125
Qubes can put the bootloader on a usb or misunderstand what you said and you find a way to do it?

The plain text thing I don't think it works like that, I think text files could still be accessible for an attacker even if you cover your drive with encryption and your booting.

holy shit

i just realized the document viewer on debian at least, has an invert colors option

i can literally do darkmode for pdfs

>>60133525
bitch please, there is a ton other viewer that can do the same zathura and okular included

>>60133312
yes i'm saying that qubes provides the option

Any wargames for python programmers? Or can I use any language for the programming challenges?

>>60133703
Depends on the problem you're facing. And you should consider learning some C/C++.

>>60133967
I learned C# in high school, it was good, but I want to get better in Python first before moving to something different. Not a lot of time, unfortunately.

>>60133967
By the way, any C or C++ challenges? I feel I would learn faster if given problems to solve.

>>60133981
>moving to
That's not how languages work.

>>60134007
i think it's reasonable to want to get a solid grip on a language before you start faffing about and learning more. a beginner would end up getting the syntax confused and it be more harm than good

>>60134007
I know, but I feel I still have a lot to learn about Python. I suppose I'd have something for comparison, but it may be confusing for me.

>>60134040
Yes but since he talked about about a ctf for python I thought he already had decent knowledge.

>>60134040
Thank you for seeing my point (I'm the guy who asked the question)

I'm a faster learner in natural languages (i.e. German), but I feel I might use programming for making my translation work a little easier.

>>60134063
Wouldn't consider my knowledge decent by any means, and I talked more about wargames in the sense of overthewire, since it's challenges I can do in my spare time on the phone. The bandit stuff? Completely on the phone.

>>60134116
Then just do those about programming in python. The pastebin has a bunch of resources.

>>60134142
I see. Thanks!

>>60134142
we should balance out the links. i think we can include some sec links straight in the op as well. feels a bit uneven with there being a lot of cyb links and 1 sec pastebin link

>>60134303
Maybe dividing the /sec/ pastebin into other pastebins?

>>60134303

Learning: https://pastebin.com/VNTsyNKp
CTF/Wargames: https://pastebin.com/u2QTfmZn
News: https://pastebin.com/tDn5qzZE
Other useful stuff: https://pastebin.com/u21XrVaz

In case you want to do it like this, otherwise I can just pick a few resources to put in the OP instead of the split pastebin.

>>60134418
someone do a new

so this is a thing now

fug

I can add more /sec/ links if anyone wants

>>60103599
>>60103752
Where do you have problems? Maybe an iptables guide would do the trick

>>60134504
Good for me, I am curious

>>60134418
why do yo copy the /sec/ pasta and try to pass it off as your own.

>>60134418
>>60134582
dont put this in the op it would be repetative the /sec/ pasta alread has those links

>>60134582
why do you assume he's trying to pass it off as his own.

>>60134582
Are you retarded? Check >>60134327
Also you might notice it's the same account.

>>60134598
Well yes you remove that link and put those.


Also it was just a proposition, I can just do
>otherwise I can just pick a few resources to put in the OP instead of the split pastebin.
this too if you guys want it.

>>60134619
I am in for the split, more order, more ways to update it

>>60103599
Depends on whether it's over LAN or the Internet. If it's on LAN, it should be fine to just use "ssh 192.168.0.XXX" or whatever the IP address is. Over WAN, it takes fiddling with the router settings, or you can connect via a cloud server, but I don't know how to do that one (yet).

Anyway, youtube/stupid questions thread is there for these occasions. Also, https://www.youtube.com/watch?v=o-W_mDGX1bY should help you along.

File: 1492820305500.jpg (131KB, 459x448px) Image search: [Google]

131KB, 459x448px

someone make a new. last time i did b/c no one else was making one and someone else made it at the exact same time. i'm not making one again

>>60134776
>stupid questions thread is there for these occasions
you sure?

>>60134806
Certainly I am not making it, but thank you, maybe this time is different?

>>60134806
It was me who made it at the same time as you last time. Just make it, busy to find a new /cyb/ related image.

new
>>60134875