/cyb/ /sec/ general: cyberpunk and cybersecurity

File: BN-FZ324_noonan_GR_20141211191837.jpg (347KB, 1242x810px) Image search: [Google]

347KB, 1242x810px

>>60583651
I prefer hackers that didn't get caught.

IPv4 is dead. Cybersecurity implications?

>>60584327

what is going on in ze pic?

>>60583651
Still missing that green /CYB/ in the picture, OP.

Low recognition is probably what kills these threads.

File: 1476051008827.png (1MB, 1000x667px) Image search: [Google]

1MB, 1000x667px

>>60585531
Indeed. Here OP, save it.
Prick.

What's the safest browser.search.region in about:config?

In the 1990's I had a set of hacker tools called AOheLL. It let you enter any AOL chat room, crash any room and also spoof credit card numbers. An acquaintance of mine claimed the numbers were successful in ordering items online. Items were ordered from the school library and shipped to newly completed homes in a nearby neighborhood where they could be picked up off the front porch.

That is about as close as I've felt to being a hacker.

>>60585691
You misspelled "nigger".

>>60585724
No argument there man. I was a punk.

Since this is /sec/, here's a question: do VPNs actually improve privacy/security?

A friend of mine is set on buying one "so my ISP can't sell my data to 3rd parties", whereas for my part I'm quite convinced https should be good enough. In fact, he doesn't even use https everywhere, or a user-agent/fingerprint spoofer, uses ublock with the default lists (although that may be good enough to block trackers to be honest), uses WhatsApp and Skype (though he did express concerns and I'll try to get him to switch over to tox), he's on windows 7 (which I believe still has some telemetry, right?) and doesn't encrypt his data (and while right now he's using a desktop, he plans to buy a laptop soon and has to plans for full disk encryption as far as I'm aware) - personally I'd worry about all of that before even considering a vpn (and would probably decide against one anyway).

What would be your advice to him?

>>60575150

Movies:
Blackhat
Sneakers
Takedown
Enemy of the State
Hackers
WarGames
WarGames: The Dead Code

Documentaries:
Hackers Wanted aka Can You Hack It
New York City Hackers
We Are Legion: The Story of the Hacktivists
Spying On The Home Front
Tracking a Spy Through the Maze of Computer Espionage: Early Hacking Techniques https://www.youtube.com/watch?v=nlCCpm53Jb4

(Not so) fun fact: Stoll told how he teach the NSA early techniques on how to tamper communications.

UK encryption ban when?
kek that will be hilarious.

I wonder what excuses the tory retards will use when terrorism still happens post encryption ban.
"we need to watch more! Cameras in EVERY HOUSE!"
Theresa May will jack in to the CCTV network directly and become the all seeing eye of Great Britistan.

>>60585914
>yfw V for Vendetta becomes a reality

>>60585387
>>60584327
Not a "hacker" in the traditional sense, also kind of a cunt. Probable rat.

>>60585691

When I was a kid (around 1999-2000), I discovered how to get around the passwords in old county government windows computers. I basically went through every single government windows computer I could get my hands on (my school, the school my mother worked at, libraries) and set them to DDOS things with various amounts of success. Most of their buildings had T3 lines or better. Eventually, I moved on to using social engineering to steal teacher passwords to cause havoc. I could have changed grades of anyone, but instead, I used it to send goofy emails. I was eventually caught, and smooth talked my way out of any real trouble.

Years before, I somehow found out the phone number to the county's VMS server, along with the username and password for the library. But the most I could do with that was transfer and reserve books. But this in of itself was pretty cool as the library system had zero Internet presence at all at the time.

That is probably the highest level of hackery I ever achieved.

Of course, because of my own experiences in the matter, I am extremely suspicious and social engineering attempts won't work on me, so I guess that is a plus.

only took 3 years for cyb to get popular and all you needed was /sec/

>>60583651
how long until sibyl system?

How do I go about creating a small, local and cheap mesh network?

Think on starting a local file sharing and maybe streaming service with little money at hand.

>>60586154
high tech, low life

>>60583651
I am from the San Fernando Valley! I am shitposting not far from Van Nuys

>>60586176
my diary desu

>>60585927
Except in the feminism world, The almighty ruler Adam Sandler is now a tranny. (as played by Therasa May herself)

>>60583651
is Kevin Mitnick

>>60584327
is John McCain

for those that didn't get it

>>60585590
what font is that?

I want to make some more bumpers

>>60586399
Look slike simple raster, just any 7 x 10 font will do. It is recognition that is te key though so I believe a large /CYB/ in a green font will do. In the interest of good taste, please avoid comic sans.

>>60583651
I posted a thread yesterday about how I'm being monitored by an IP camera. I've been trying to use nmap and VLC to find the stream but I'm pretty unfamiliar with what I'm looking for. Anyone care to help an anon out?

cyberpunk is a bleak future that no sane human would hope for.

>>60586664
Yeah, but what of those here for /sec/?

>>60585744
HTTPS just hides what you're doing. ISPs can still see what websites you're visiting. A VPN is the only the way to completely hide all your traffic from your ISP.

The rest of your post has little to do with your ISP tracking you.

>>60585931
Mitnic was absolutely a hacker, and also not a rat that's why they threw him in solitary for years because he refused to become an informant.

Mitnick also spent the most time on the run of any hacker with the entire FBI after him.

>>60587386
VPN still leaks your DNS unless you forward it through the VPN too

>>60585744
Tell him to make his own
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/

Also if anybody here is involved in code review ala Art of Software Security Assessment, they'll know never to trust OpenVPN it's a nightmare of spaghetti code

Does KASLR work if I also put the boot partition on a separate USB?

File: 1474256179813.jpg (200KB, 990x810px) Image search: [Google]

200KB, 990x810px

made some new bumpers
i can still make some if you have good backgrounds

1/7

File: 1491079737402.jpg (190KB, 990x810px) Image search: [Google]

190KB, 990x810px

2/7

>>60587187
reality is like that

File: 1472651061882.jpg (232KB, 990x810px) Image search: [Google]

232KB, 990x810px

3/7

>>60587771
like this one

File: 1481205451792.jpg (174KB, 990x810px) Image search: [Google]

174KB, 990x810px

4/7

>>60587771
Where are the /s.

File: 1488774665585.jpg (134KB, 990x810px) Image search: [Google]

134KB, 990x810px

5/7

File: 1484591801275.jpg (249KB, 990x810px) Image search: [Google]

249KB, 990x810px

6/7

File: 1467620018058.jpg (155KB, 990x810px) Image search: [Google]

155KB, 990x810px

7/7

>>60587823
didn't look good

>>60587902
4U

>>60587996
trust me

>>60587771
god my eyes

>>60585914
How can you possibly ban encryption? It's like banning guns. Crminals give zero fucks.

>>60588087
Remember the ban on alcohol in 1920's USA?

>>60588087
Illiterate retards from the ancient times that don't understand our modern society in a nutshell.
They think banning anything works.
Most of them are also religious nutjobs and horrible prudes.
People that were born with silver spoons up their ass because a bunch of them are also child-rapists as well. (fucking Tories)

>>60588197
A lot of the people who are for banning encryption are so-called educated liberals who think the illusion of safety trumps freedom.

>>60588242
>A lot of the people who are for banning encryption are so-called educated liberals who think the illusion of safety trumps freedom.
Have any examples? I usually hear this from right wingers.

>>60588189
Yes. It generated an extremely profitable black market.

>>60587771
>>60587789
>>60587811
>>60587821
>>60587838
>>60587856
>>60587868
None of these have anything to do with cyberpunk. #3 is the most aesthetically pleasing though

>>60584943
Cyber security implications are that most IDS/IPS aren't optimized for IPv6 yet.

>>60588269
>None of these have anything to do with cyberpunk
i made bumps
this is unnecessary autism

>>60588327
1 and 5 have the best color combination, still needs something

sure "/" won't look good?

>>60588595
the font that i had made "/' width too long and it just fucks with the proportions and what i was trying to do

>>60588780
ouch

File: 1487717622352.webm (2MB, 204x364px) Image search: [Google]

2MB, 204x364px

Guys every time I click on 4chan it copys and pastes an image or link? I used a AV it shows nothing?

File: 1de70c62-d847-47f9-b6b9-64d445e7d807..png (625KB, 1280x800px) Image search: [Google]

625KB, 1280x800px

I found this and thought /cyb/ might enjoy. Bladerunner ambiance. not at all what I thought I would be.
https://www.youtube.com/watch?v=vVBARPxXlzk

>>60587589

what the fuck does ASLR of any kind have to do with partitions?

Stayed in a hotel on a business trip about 5 years ago, they had TVs in each room that displayed your name, anything you'd ordered to the room, check out times, everything. Play with the controller for 10 minutes and find a debug screen that lets me spoof that I am any room I choose, confirm its valid with colleagues room number. See he's ordered some porn, oh hoh.

Debug screen has an IP address overlay, connect to port 80, it's got a generic login screen with a hardware manf name and version number. Use free Wi-Fi to download installation manual, default username and password still set. Find switch login screen, ditto.

Basically control the entire network, use my new powers to download some pay-per-view porn and movies. My cyber skills gave me a bigger boner.

>>60586176
that's cyberpunk alright

>>60588911
pretty cool m8

>>60589218
l33t h4x0r

File: dd_dec_ranch.gif (97KB, 512x354px) Image search: [Google]

97KB, 512x354px

>>60588250

Not him, but

>thinking it's only one side

>>60589472
You can tell I'm l33t because instead of saying "open the ip in a browser!" I used "connect to port 80".

>>60585836
>blackhat
>Christ Hemsworth

Is this a troll?

So, anyone here working in a 24/7 soc?

When setting up a local unbound resolver & cache, is it better to have it recurse from the root servers or forward everything through dnscrypt to a remote resolver?

>>60589218
Now it's a struggle to even fucking unlock the damn TV out of 'hotel mode' or whatever. Grats on that though.

>>60588242
A lot of decisions are made by people with no technical insight, around here they are frequently not much educated at all. Being in an in-group where they call each other "intellectual" is sufficient to make any decision.

It is this chasm between the self declared elite and the people they have ruled which brought us Trump, Brexit and other changes in Europe, perhaps elsewhere. Reducing the number of "professional" politicians , irrespective of their political colour, will lead to improvements in sane decisions.

You can get far in politics by not doing stupid things.

>>60587262
>Yeah, but what of those here for /sec/?
Well, /sec/ is now /cybsec/ so /cyb/ covers both.

>>60592650
Fair enough.

File: street-light-blue-japan14.jpg (80KB, 580x387px) Image search: [Google]

80KB, 580x387px

>>60587856
>streets at night lit by streetlights.
Why not futurize this a bit more with ... blue street lights? No really, this is a thing, from Scotland to Tokyo,

Huh. Just found out that, after they repealed the bill stopping ISPs from selling our info, Google searches for 'VPN' went way up. Almost brings a tear to my eye to know that normies might at least be trying.

>>60593554
Yeah, I noticed that. I also get more and more questions about basic opsec at work thanks to WannaCrypt.

File: huh.png (8KB, 637x60px) Image search: [Google]

8KB, 637x60px

>>60583651
Why? I get that's it's probably not reliable, but as far as I know it serves only as a big warning screen anyway. Is this like Do Not Track and instead used for tracking purposes too or what?

Dissection of an exploit https://chao-tic.github.io/blog/2017/05/24/dirty-cow

=== cyb news
http://www.bbc.com/news/business-39947942

>>60583651
What's some cool stuff I can do to learn about networks? Zenmap to scan everything and it makes a cool map. I wanna make my own home server. How did you guys initially get into this kind of thing?

>>60597035
So many questions I wanted to ask myself.

>>60590284
did you even watch the fucking movie

File: EncinoMan.jpg (51KB, 291x451px) Image search: [Google]

51KB, 291x451px

>>60586192
kek me too

>>60584943
IPv6 is easier to MITM locally when compared to v4.

v4 will never disappear. v6 is in everything IoT.

>>60597035
nmap not Zenmap -- I hacked my schools email server when I was a wee lad.

The best thing to ask is. What area of cyber security do I want to get into?

>>60594615
"Dissection of a local privilege escalation exploit"

DirtyCOW was a simple concept...race the kernel during a file IO operation.

>>60588950
It doesn't...ASLR is memory segmentation obfuscation when things from disk are loaded into RAM. Specifically virtual addresses as paging and the MMU abstract physical addressing from you.

It's a only when running a process thing and that's it.

It's not as random as people think either.

>want to use irc for the first time
>irc.rizon.net
>connection timed out
I'm at the library, am I supposed to change ports or something?

>>60585691
In 1988, I was 11 years old at the time, I crashed 1,507 computer systems in a single day which caused a single-day 7-point drop in the New York Stock Exchange. My family got fined $45,000 for the events and I was banned from using computers or touch-tone telephones until I was 18 years old.

That is about as close as I've felt to being a hacker.

>>60598177
is this pasta?

>>60598177
In 2001, I was 6 years old at the time, I hacked several commercial airplanes, talking control of them and flying them into the World Trade Center, toppling them over and causing thousands of deaths. My family got awarded 1,000,000 rupees for the event.

That is about as close as I've felt to being a hacker.

>>60585836
>Tracking a Spy Through the Maze of Computer Espionage: Early Hacking Techniques

You forgot movie 23 by germans. Be sure to get subtitles (not infected ones)!
http://www.imdb.com/title/tt0126765/

Also another a direct to tv film about the events featuring Stoll himself
https://www.youtube.com/watch?v=EcKxaq1FTac

>>60598177
*seven years later*
https://www.youtube.com/watch?v=9c4KG_8iTZM

>>60598418
https://www.youtube.com/watch?v=LsC94MPfslQ
I feel like a real cyber hacker now.

>>60587541
I thought the point of using a VPN (and a popular one) was so that you could hide in the noise of other users, if you're the only user using it, they'll be able to trace the IP back to you more easily.

>>60598190
kys

>>60599436
I've never understood this myself. You're less anonymous than even using your public IP because even then you're sharing it with your flatmates. You are basically announcing to the world that all your traffic is coming from you and it is authentic. Why the fuck would you ever use a personal VPN unless it was explicitly used only to get around government censorship in China or elsewhere?

>>60599571
You can use personal VPNs as a security measure on compromised networks.

>>60599866
So, >>60587541 was incorrect in asserting one should use over a paid service for online anonymity; as it doesn't have the benefit of noise (what you pay for).

>>60583651
>Mitnick
>Hacker
Pick one. He's a social engineer

>>60599970
>He's a social engineer
So he's a hacker.

>>60600005
Ok Kevin whatever you say. They let you near computers now?

>>60598170
Some uni block packets I/O on ports that are not 80/443, mine does, but for unregistered people. That's probably the issue.

File: 1493044861283.jpg (205KB, 1520x1080px) Image search: [Google]

205KB, 1520x1080px

/sec/ is participating in another CTF this weekend, feel free to come and help as you please, as usual everything is discussed in the IRC, so just join if you want to participate.

https://wargame.whitehat.vn/

Is there a addon that let me hide my fingerprint on firefox? because the user agent ones only change a part an the fingerprint from Jquery and Javascript is still leaking, i use noscript at the moment but if i need to load a page its gonna to leak the fingerprint anyway, there is a way to just fake or change it?

>>60600510
Use TBB and don't change the window size.

Were we born too early to experience cyberpunk?

>>60600598
cyberpunk is now, it's just kinda boring. Gotta drive up the punk shit.

>>60599500
(you)

>>60586154
so siberpunk

>>60600510
Maybe User-Agent JS Fixer (https://addons.mozilla.org/en-US/firefox/addon/user-agent-js-fixer/).

>>60600068
yea finally got home and it worked

>>60600407
That is a great pic of lain. I don't remember her looking up in that scene.

>>60600510
These are the addons I use https://pastebin.com/dinBuXxJ

You can test it https://panopticlick.eff.org/, but be warner, with things like canvas defender it will say you are identifiable when in reality you are not so because you randomize canvas.

>>60584943
doesn't this mean that it will eventually be easier to track devices if everyone can be assigned a cheap static?

>>60598170
Rizon is shit. Try reconnecting a couple of times.

>>60600614
If Tories get voted in, you'll see it become more of an 'obvious' thing in the United Kingdom, certainly with the increase in armed police and military on the streets.

>>60601163
so I'm trying to get into #/g/sec, but I need to have ssl?

>>60602437
Yes of course.

>>60602470
how? im noob

>>60602501
Maybe stop being retarded, I can already tell you're not fit for infosec if you're asking someone to spoonfeed you.

>>60602470
>>60602501
same dude does rizon use 6697 or 6667?

>>60602437
https://pastebin.com/WFkuY5pk

Are scripts used with Greasemonkey reliable?

File: Screenshot_7.png (216KB, 558x343px) Image search: [Google]

216KB, 558x343px

>>60602566
Im another dude, but rizon uses 6697 for ssl connections
>mfw you can literally google this shit

Anyone know a good domain register that keeps your contact information (name, email, address, etc) all private?

>>60603544
Can you elaborate?

>>60587589

no you have to gigabit the cyber in the hard drive before the dep will activate

>>60599970

his shlomomuro attack was bretty gud

>>60604164
Does this even exist?

>>60605727
i tried to burn the cyber to a gigabit cd but it says its out of memory

>he doesn't block google scripts so he can post on 4chan
glad the dumb cunts can't post desu

Here are some sorta cyb-looking pictures for you all for free. https://twitter.com/Yulily_K/status/865538836046069760

>>60607137
Fuck off real life Flanders

What kind of information about my traffic does my ISP have?

>>60601774
no the UK has been 1984 for years already

>>60608000
Why don't you ring up and ask? Freedom of information act and all that :^)

>>60608000
netflow
netflow

N E T F L O W
E
T
F
L
O
W

Everyone and their dog stores netflow for all time.

how come cybrary isn't in the resource list anymore

>>60608717
Seconding this question, also which are entry level guides?

>>60608717
Tell more, please.

What's up with all these courses on pastebin?
Are they even worth it?

>>60612413
Be autodidactic and source the information yourself, learn to be a hacker the same way the hackers of yore did.

>>60612413
Some of the cyb pasta at least are good. I made one. The pastas were cooked by people who wanted to bring readers up to speed.

>>60612567
That's what I am doing, but seeing these courses intrigue me a little bit. Wondering if they are at all good courses.

>>60612601
I am talking about these
https://deals.pastebin.com/deals/online-courses?sort=best_sellers#29-it-security

>>60608494
May be I don't understand something but what is the point of all that vpn, proxy, anonimity bullshit if at the end of the day all everything you do online goes through an ISP that will give away all your information on first notice?
The point is not to get incriminated in the first place so they wouldn't want to check you?

>>60612797
You clearly don't understand what any of it does if you think they can simply give it away, for instance, VPNs be they IPsec or SSL encrypt data, so you ISP can't 'see it'.
Educate yourself.

>>60599436
if the vpn logs your ip and the sites you visit using their servers then u're fucked anyway, if in the tos they state that they'll give u up if anything happens, then u're just as fucked as you were with your isp.

There's no noise. Many popular VPN providers log something.

if you set up your vpn from a trusted vps who let's you pay anonymously and doesn't log your ip then u're better off with that, still not 100%.

Dont' do anything stupid using a vpn cause u'll get caught anyways.

>>60597410
>Blackhat
No there is no way its actually good movie, let alone accurate either.

>mfw mr robot is not on that list.

>>60613316
it is patrician m8

also it's much more accurate than most films, especially from a social engineering point of view. of course there are parts of it that are/seem to be silly from the perspective of someone who actually knows anything about the subject, but that's necessary to make a movie, plain and simple. mann knows what he's doing, and he's pretty committed to getting the details right. as to the complaints about hemsworth, firstly there's an explanation inside the film and secondly, there's an actual guy that the character is (roughly) based off of, who is equally large and un-hackery-looking

>>60613316
I never got around to watching Mr. Robot, is it any good?

>>60614102
Season 1 is good imo, season 2 is like wdf is going on type thing. you will see example of social engineering, and more accurate hacking than most movies/shows.

>>60614252
Didn't they have some cyber security consultants advise them on how to portray realistic hacking? I seem to remember hearing or reading about it in passing.

>>60614304
The guy who created the series used to work on cyber security or something like that.
They tried really hard to make as "realistic" as possible for a TV series. The first season is definitely worth watching.

>>60614304
yeah, season 1 imo is worth watching, season 2 is like you can watch it on closure to ending of season 1, but that is about it.

>>60583651
WHEN YOU KNOW NOTHING ABOUT CYBERSEC SO YOU HAVE TO RESORT TO LARPING HOLY FUCK THATS GAY

>>60614680
Cyberpunk and cybersec have been linked for decades, you Plebbit faggot.

>use arp -a on private internal network
>crash network
wat?

>>60615271
don't think that was the only thing that happened

>>60615990
hit arp -an
instantly after I execute the command internet crashes for everyone on the network

care to explain?

>>60617126
Well, that's not supposed to happen.

>>60598278

i giggled.

>>60618965
The fuck are you talking about? Why ask this thread? Why would any of us know that?

>>60619177
You all have experience in /netsec/ don't you? :^)

>>60619195
As FBI or NSA? No, fuck off.

>>60619235
:(

>>60586097
Not long anon. Give it maybe 15 years to fully actualize

File: Bruce Willis.jpg (16KB, 232x240px) Image search: [Google]

16KB, 232x240px

>>60585836
yfw you realize all movies in the Die Hard series had realistic hacking scenarios

>>60618965

not without clearance. try to get an internship with a defense contractor and make sure you can pass the top secret requirements. maybe join the military? you'll be in demand since you already have the degree and you'll get experience as well as clearance. if you can't do that then you'll be a sysadmin for life and can shitpost on /g/ forever.

>>60621685

>ad spamming an offline ics

so the Intel backdoor. does it affect Penryn-based systems?

I know Nehalem supposedly has it embedded in the hardware but ME was released for late Penryns.

are they at risk too?

>>60614102
It isn't. Just a bunch of fucking hacking cameos that have the fan boys worked up. It is just another fucking show that breaks your suspension of disbelief that makes it hard to watch. If you can focus on the "movie hacking" being top tier and ignoring everything else then I would assume it wouldn't be bad.

Reminder that Kevin Mitnick was just a Social Engineer and Phone Phreaker who knew how to code a bit

Source: His fucking book.

File: GNUTHANKS.png (360KB, 813x688px) Image search: [Google]

360KB, 813x688px

>>60619250
don't give up on your dreams, anon

anyone can be a cia nigger if they truly -believe- in themselves

Try to get an internship like other anon said, certs won't hurt (sec+ / net+ maybe?) cybrary is a good website for learning, good luck!!

>>60624394
You just reminded me I've got those to read, they've been in my PDF collection for a couple of months and I'd forgotten about them. Thanks chummer.

what IRC chans do you nig nogs lurk?

File: 1477301783267.gif (1MB, 972x1000px) Image search: [Google]

1MB, 972x1000px

I know of two RDP ports wide open on two different businesses. One is a helpdesk website for a hospital and the other is for a large fiber provider.


How can I use this information to my benefit?

>>60625602
Report it to their IT departments for good karma.

>>60583651
Is this just people that can't program: the thread?

>>60624394
if the story of him hacking his teacher's laptop as part of a school project is true then he's still legit.

>>60625602
Heard of Wanacry?

>>60626234
Of course. I thought it exploited SMB though? Can it be delivered over RDP?

File: fancygif.gif (2MB, 500x400px) Image search: [Google]

2MB, 500x400px

>>60621900
>>60624414
GNU/Thanks a lot. I applied for some co-ops in the area that would probably help how you said. I'll try studying for the net+ cert you mentioned too.