/cyb/ + /sec/ general: cyberpunk and cybersecurity: ghost in

>>61144542
hello anons

File: 1466492042968.gif (71KB, 864x496px) Image search: [Google]

71KB, 864x496px

True Anons (as in actually anonymous and max /sec/), how did you get started? When did the paranoia first kick in?

On an unrelated note, should I buy into Monero simply because I support a true anon coin but am not a wet pocket /biz/kid?

>>61144542
Good work, anon. BTW the archive still has a few other /cyb/ threads including cyb cities and cyb music.


From earlier thread:

>>61131325
>>61128368
>>How, more specifically, do you recommend people store data?

>3 2 1 - Backups.

>A 3-2-1 strategy means having at least 3 total copies of your data, 2 of which are local but on different mediums (read: devices), and at least 1 copy offsite.

Sure, and I have something like that, but that still means you store data on your own computer, you just have a backup plan.

It was
>people should be encouraged to not store data on their computer period
that I wondered about.

>>61144542
does anyone have the pastebin of firefox extensions that was recommended here a couple times?

What programming languages should I learn if I really want to go max /sec/? I know jack shit about programming; my only experience is with HTML/CSS.

>>61144728
https://pastebin.com/raw/T8TeepZP

Used it for a bit but after a week I had to refresh due to not being able to watch any video. In the process of slowly moving down the list each week to figure out what went wrong.

>>61144728
>>61144811
Oh my bad, wrong thing

>>61144542
/k/ommando here.
I may not know how to program but when you can't hack a system remotely you'll need a team to get you inside.
Can't wait to see /kg/ working together in the upcoming cyberwar.

>>61144799
Assembly/C

>>61144857
Thank you, anon.

>>61144621
>>61144799
See:
>>61064761 → Advice: https://pastebin.com/xRqEW8W7

>>61144832
/k/ and /cyb/ are actually a very good mix.

So did the guys here exodus from lainchan? Recent jp drama makes me suspect this is the case.

In any case, glad to see these threads are starting to become more commonplace.

>>61144974
I screenshotted this and saved this a while ago. Thank you for giving me the rec, though. I appreciate it.

>>61144832
Fellow /k/ommando here. Was thinking about something like /kg/ a few days ago. Sounds like a fun time if you ask me.

>>61145009
There's been bullsoykaf about pedo channels on the irc. I noped out of lain for a while because I really don't want my mind be affected by how much drama that is.

File: 5.jpg (419KB, 1384x644px) Image search: [Google]

419KB, 1384x644px

TAKEN FROM LAINCHAN:
worlds.com, a relic of the early internet, a 3d chatroom and virtual reality. good for chatting, exploring, admiring the beauty of it.
need help entering? http://users.worldsonline.com/jimbly/index.htm
http://smurfyworld.no-ip.com/jett/

seemed pretty /cyb/ to me when i saw it

File: 1490309330338.png (433KB, 1189x589px) Image search: [Google]

433KB, 1189x589px

>>61145220
It's pretty cool. There's an old thread from Uboachan on it. I don't know if I still have it, though.

File: 20170629_235005.jpg (587KB, 2016x1512px) Image search: [Google]

587KB, 2016x1512px

>>61144621
Having a few friends help me move the super computer cluster I bought 2nd hand on ebay. Will mine Monero on it. $80k price tag, 768 hp blades, 24 576 threads, will mine around $60k/m.

>>61145351
You ever go there? I'm planning to check it out sometime soon if I can get it running.

>>61145418
Amazing, please provide pics when you have it all mounted.

File: 1477703069942.png (33KB, 588x345px) Image search: [Google]

33KB, 588x345px

>>61145420
I haven't been there. Been putting it off ever since I stopped playing video games. Might visit it late at night one day, but I'm always busy with stuff so I won't get on it for a while.

Here's that thread, by the way: https://uboachan.net/og/res/443.html#q839

>>61144728
Should be on the OP https://pastebin.com/dinBuXxJ

File: 16278122.jpg (6KB, 210x230px) Image search: [Google]

6KB, 210x230px

how do I get into cyb stuff?

>>61145790
> how do I read the OP
come on guys
Half of cyb+sec is figuring things out on your own
don't ask questions you could figure out by yourself
ask for guidance from there you should be able to figure out the things you want to learn

>>61145790
Reading the OP might help...

What can I put on a usb drive for /sec/ and exploration purposes that Kali doesn't cover?

>>61145712
thank you so much anon

>>61145712
Don't worry, I'll be adding that to the /sec/ pastebin.
Thank you for sourcing it though, anon.

I noticed at my college (fuck my college btw) in the system tray there is a little icon that I cannot left or right click to any effect that is shaped like a gray husky or something. Any of you know what it is? I assume it's monitoring software to prevent running .exe files and such, probably called "WATCH-DOG" or some shit.

>>61146540
Monitoring software.

>>61146603
What do schools even look for, anyway, at this point, do you think? Porn? .exe running? I wonder if there's a school that uses a keylogger. Maybe in China.

>>61144621
>When did the paranoia first kick in?

when the state police investigators requested my hard drive and my phone in order to backup statements from other people.

>>61144621
>When did the paranoia first kick in?
When I signed my rental agreement using a brand new phone number and immediately began receiving telemarketing calls.

My paranoia was reinforced when I had to rent a car for a week and they wanted to run a background check on my name.

>>61144646
>Sure, and I have something like that, but that still means you store data on your own computer, you just have a backup plan.
>It was
>people should be encouraged to not store data on their computer period
>that I wondered about.

I'm the anon who said that. You should have a dedicated machine to manage your backups, for reasons of compatibility, and you should store your backups in either external HDs or if you prefer in other mediums.

The bit about don't store data on your computer period comes from bad experiences I have had in the past, BeOS came with a parition editor that literally would show you the 1s and 0s, i pushed the wrong key somewhere and poof there went the parition table and with it, literally, all the data. I have had situations similar to those in which all the data was simply gone because of stupid shit like a mistake. Think of the encryption scenarios today also. You're just safe by not having any of it connected to your computer.

Keep backups, have a "disposable" external HD that you can use everyday for your data, I say disposable because if something happens to it, you got backups. The schedule at which you should update your backups will depend on you.

But that is what I meant, I hope it helps.

>>61144621
i had it pretty bad for a few years. have lost it in the past year if i'm being completely honest. can't say i miss the constant worry.

Lurker for a few weeks, just recently started getting heavy into the /cyb/ ethos, but I've been a fan for a few years.

In the name of freedoms and security I just bought a System76 laptop. Has anyone else bought one? Just trying to get a poll of how long it'll last and what they think of it.

>>61147984
Also adding to this. There is nothing wrong with backing up your things in the cloud. You should first encrypt your backups before upload. It will obviously have a monthly/yearly cost, and that cost will be directly related to the amount of data you want to save. There's benefits and risks to this, but that applies to everything in life.

>>61144832
>>61145080
Back when I was doing network sec at uni my lecturer would remind us every lesson that the weakest link in the chain is always the squishy bit. /kg/ sounds like a fun place

>>61148307
>/kg/ sounds like a fun place
Hell yeah.

>>61148417
Welcome to /kg/
Operators Operating Operationally Urban Ed.
>Information Warfare
>Urban tactics
>Social Engineering
>Exploits and Hacking
>Self Defense
>Physical Infiltration
>Radio and Jamming
>Encryption and Communication
>Weapon Concealment and urban carry.
>/cyb/ as all hell

>>61147877
Holy shit, what country?

File: 1469054709546.jpg (50KB, 631x796px) Image search: [Google]

50KB, 631x796px

>>61148629
I love it.

>>61144542
Cyberpunk literally has nothing to do with cybersecurity.

>>61144799
If you want to know about web security particularly, check out PHP. A lot of the decisions made in that language have opened up the doors for a number of awful exploits since it was first made publicly available.

>>61148640
USA.

I refused, they subpoenad me to testify in court.

http://optout.aboutads.info
are you in the botnet?

>>61148702
Did you microwave it?

File: 1494203029891.png (35KB, 1077x897px) Image search: [Google]

35KB, 1077x897px

>>61148669
Your ice is weak, just wait till I have your ip

>>61148702
Wipe anything incriminating by replacing it with fuck you in plain text.

>>61148718
I had nothing illegal, just my family and vacay pics and shit like that, but I didn't have any other copies, 1TB HD and no money to purchase another one. I would never seen it again if I handed it to them. Same thing with the phone, I am not a rich guy and I had saved up to buy that phone, I wouldn't have seen it again if I handed it to them

Fuck that.

File: 1494260513760.jpg (187KB, 1280x720px) Image search: [Google]

187KB, 1280x720px

>>61148702
God damn, this is the kinda shit Ive tried to warn my friends about, especially my dealer friends. You could just randomly get scooped up and your rights go out the door. ffs.

/cyb/ is now

>>61148733
Here you go
127.0.0.1

>>61148763
Just back it up to (((cloud)))?

>>61148789
I lived in flyover, at the most my upload was 1mbps. It would have taken for fucking ever.

Wasn't even that long ago. But since then >>61147984 all the fucking way.

>>61148789
Also, I'm no longer in the USA, but if I was, I'd highly recommend cloud storage.

ENCRYPT IT BEFORE YOU UPLOAD

7z with password is easiest way to do it.

>>61148763
I have started storing important photos and such on encrypted blu ray discs. that are in an easy place to get to in the case of emergency.

File: 1494133237386.jpg (11KB, 480x270px) Image search: [Google]

11KB, 480x270px

>>61148777

>>61148777
Thanks Elliot

File: 481133_406488099412892_1586034639_n.jpg (19KB, 320x462px) Image search: [Google]

19KB, 320x462px

>>61148838
>that are in an easy place to get to in the case of emergency.

That is good, don't store them in visible ways. Literally put them in a plastic case, tape it on the inside of your satellite box or some kind of box you may have around the house with a big void on the inside.

Or a HD, same advice applies.

> /cyb/ + /sec/ general is for discussion of anything and everything related to cyberpunk and cybersecurity.

Why don't you guys talk about impressionism and chemistry? Some concept.

Oh i get it, because this is all a pose, hey? This is "cool" to you guys, hey?

>>61148886
And we wouldnt be poseurs if we talked about impressionism and chemistry?

>>61148174
Thanks, anon.

My first time seeing this thread, but I've linked the information I've gained from it to 7 people already. Thanks for centralizing this information, fellas. Great shit.

>>61148886
I think the only poseur here is you, wannabe contrarian.
Everyone else is having a good time, so fuck off.

>>61149376
Thank you, anon.
I've still got more stuff to add, I do every thread.

>>61149449
Anything you add, I'll take into consideration carefully. I'll probably make an SOP to distribute in small numbers to specific people.

>>61149449
>>61149463
Forgot to say, thanks especially for contributing personally and consistently. The kind of person that makes a difference.

>>61149463
>>61149472
My goal is to disseminate the information interred within as widely as possible.
The skills to be as free as possible, should be freely accessible.
And that requires maintenance.
Just doing my self-assigned minor duty.
Thank you though, I appreciate it.

Is anybody here interested in data hoarding, specifically textbooks, journals, schematics etc?

>>61149760
If you're offering data, I'll take it?

>>61149760
I do it actively, but for personal interests. I love that shit.

>>61148832
7z with password is not enough.

>>61145790
One of the pasta is specifically about getting into it.

>>61150571
This

=== /cyb/ News:

>'E-Brain' to Pilot Air Force Jets
http://www.eetimes.com/document.asp?doc_id=1331955&
>The U.S. Air Force has commissioned a “brain-inspired supercomputer” powered by IBM’s TrueNorth neuromorphic 64-chip array for potential application in aircraft and other embedded, mobile, autonomous systems with size, weight, and power constraints. With more than 64 million neurons and 16 billion synapses, the e-brain’s neurosynaptic array will perform real-time pattern recognition and sensory processing faster and more accurately than a human brain while requiring just 10 watts of power.

Well, what could possibly go wrong?

>>61148838
>important photos you need in an emergency
Literally what?

>>61144832
Look into redteams

>>61150356
Not enough? Why not?

>>61151305
Not him, but there are many documents you may need a high quality photos of
- passports (also old ones)
- permits
- birth certificates
- documentation of property and pictures of metes and bounds
- pictures of valuables (for insurance questions)

I travel a lot and was recommended to have a picture of passport on my phone. IT is no good replacement of course but a good start for the replacement process.

Also you do very much not want others to get hold of these pictures.

>>61149760
A huge library (of questionable origins) was placed on torrents and TBs of data was spread out. That was probably more text than humanly readable in one lifetime.

Also you are left with the problem of organising and being able to retrieve useful info from such a gigantic amount.

The hype dies down, not sure this is still going on.

Ahhh what the FUCK

I just cooked up a VERY BASIC meterpreter reverse tcp shell, and encoded it with something else from the metasploit frame work that is rather basic, and its slipping through my 100% up to date windows 10, and bypassing the AV

I am fucking amazed this can happen.

>>61145009
>exodus from lainchan
that place is fucking dead

>>61145950
when you find a need, youll find the right tool. loading up on toys is the last thing you need to be doing.

>>61152872
Yes welcome to AV. 64bit, custom template + encoding (multiple levels mostly) and AV can't do shit.
https://www.blackhillsinfosec.com/?p=5094

But if you think about it, it's not surprising. AV works by detecting signatures, and the encoders literally generate a new signature. AVs are designed for viruses and worms that have no variation to them.

So as a protip when writing a REALLY nasty virus, write an encoded like shikata_ga_nai into it for maximum buttpwnage

>>61152941
>shikata_ga_nai
this got picked the fuck up hell easily. i had to step outside msfvenom to encode it to slip past the av.

>>61152658
Where and how do I download it?

>>61145418
Are you the bunker dude who bought a surplus bunker for the surplus servers a few weeks ago?

>>61146540
Sounds like deep freeze. We have it at my college too, it resets the machine to a given state upon reboot.

File: 1492208378964[1].png (3MB, 1701x8000px) Image search: [Google]

3MB, 1701x8000px

Why are you recommending DuckDuckGo as a search engine?

>>61151270
The military really likes SWaP-focused design

>>61151768
And also, I value my family pictures a lot, years of pictures christmases, birthdays, pictures of people who are gone and they usually don't amount to a whole lot of data, maybe 100GB of pictures. They're important to me and I am sure you have something you consider important, we're human we gonna hoard something.

>>61152658
>Also you are left with the problem of organizing and being able to retrieve useful info from such a gigantic amount.

How about a self hosting PHP forum, you could simply make each item a thread and organize it that way?

Or a self hosting wiki?

I actually been dreaming of doing that, I never have committed to it. I keep thinking about power hogging for something that isn't needed 24/7... I guess this is real autism.

>>61152872
>>61152872
>>61152872
>>61152872
>>61152872
WHAT THE FUCKKKKKKKKKK

My same exploit works ON A MAC IN WINE

WHAT

THE

FUCK

NO.

How can it be this easy?

>>61153722
show us it my dude

>>61153771
it is literally windows/meterpreter/reverse_tcp spat out of msfvenom and then combined with an obfuscation method that is also inside msfconsole

>>61144542
Hello friends. I haven't been browsing the web a lot lately, I heard that Lainchan got wiped and then split. Which one's better, .org or .jp?

>>61153967
>Lainchan
>better
the best one is neither.

Why are there so many "nothing to hide"-fags on /g/? What happened to this board?

>>61148629
please make this reality

>>61156443
It's probably mostly /v/tards here for the cpu/gpu arguments.

>>61156490
This desu.

>>61156443
>>61156490

ok explain this to me. you mean /v/ tards are the people who use the argument "nothing to hide" or that /v/ people want privacy?

>>61156710
/v/ are full on normies who openly crosspost from reddit and facebook. They genuinely buy into the "nothing to hide" argument, because they're retarded.

>>61156726
ok, had trouble understanding that. that nothing to hide argument is such bullshit beyond words. but to move away from that. im still waiting on a reply to why is 7z with password not enough to upload your backups to the cloud,

>>61156726
>>61156490

cpu/gpu flame threads
ios/android flame threads
windows/linux flame threads

should not even be allowed. think about this shit, we can't have homescreen/desktop screenshot threads but flaming retarded threads about what devices one chooses are allowed.

>>61156822
Why does everyone whine about no desktop threads? What's so great about them, they're all animu/ricing anyway, and have little to do with technology.

>>61156937
desktop threads are in a lot of ways like battlestation threads. you get to see and find out about shit you may not otherwise.

kinda like this thread

>>61156963
>desktop threads are in a lot of ways like battlestation threads
This is why they are trash.

>>61156963
Since you like desktop threads thought I'd mention /bant/ has them every once in a while.

anyone have cyb wallpapers?

>>61157001
I've seen more useful info advice books and other important tid bits in generals than on flaming threads. But that's me I think one general is better than twenty threads over two different products that fulfill different needs for different people and simply none are superior to the other if they're being used for the proper task as long as the user feels they are sufficient. Instead what we have are peter measuring contest threads every god damn day. While generals as a whole provide useful information to those who don't know as much.

A lot of cyb images and >>61157331 wallpapers were gathered earlier, and now there is an opportunity to distribute. Another anon has set up an open FTP (the madman!)

>>>61141379

>>61157400
sounds kinda sketch

File: 1443571953427.png (3MB, 1862x974px) Image search: [Google]

3MB, 1862x974px

>>61157331

>>61157331
Some of these might suit your needs >>>61100084

>>61157331
Here's some pretty decent ones: https://imgur.com/gallery/mJc9h

>>61148838
>>61148876
I'll do Micro SD cards. Easy to hide. Easy to flush.

>>61153967
dot org has most of the original user base and generally the people who didn't care about the drama.
dot jp is a set of the original userbase and mods that wanted to run things their own way. I think kalyx is also staff there but that may just be rumour.

Personally I think the split was a childish move by jp but by all means check out both.

>>61149760
I'm hoarding movies and TV. I suspect that the era of free and easy torrenting will soon come to an end.
I also hoard manuals, because those tend to disappear from the internet.

Wow surprising the security thread has nobody posting about security
Keep larping kids

>>61159334
Feel free to fix this X)

>>61159334
>Loads of people post about security
>Ignores it just to make a contrarian post
Shut up, you moron.

>>61159542
Running metasploit isn't security
'cyb wallpapers' aren't security

>>61159561
>Reading less than half of the thread and attempting to sum up its contents.
Wewlad, I thought you were just LARPing the retard, it seems you've fully committed to the role.
I'd also like to note, you can improve the thread if you so wish, by contributing, not shitposting.
Just a thought, I know you don't have many of those.

>>61159624
If a single other person in this thread can tell me the x64 calling convention without googling it I'll consider posting here

>>61159653
>I am important, listen to me.
Nice grandiose pretense, trying to give the false sense of auctoritas, but sadly, for you, you're nothing more than an anon, like the rest of us.
So step the fuck back, you aren't important, regal, or powerful and either enjoy yourself or find something 'more productive' for such an 'important' person like yourself.
Cheers.

>>61159689
VR is the most important and exclusive security field
All others are beneath me, sorry you weren't smart enough to get into iy

>>61159689

>no hablas espanol
>du no hablas espanol tubien

>>61159759
Ah, it is you again.
Thanks for letting me know, I'll be ignoring now as I'm sure the others will too.
You mustn't be very busy if you such an amount of time to continuously shitpost on /cyb/ /sec/ threads, you must've found all of those 0days.
Gosh, you're so impressive.
Not.

>>61159800
First time posting this week actually champ
Fridays are for shitting on cucks like you since I'm not in a scif today, so I have my phone with me

>>61153138
Startpage is literally the best browser and there is nothing you faggots can do about it. It is LITERALLY Google without the botnet.

https://www.startpage.com/

Is encrypting data to mp3 still considered safe?

>>61153801
post code desu

>>61160152
Lmfao

for(int I = 0; I < sizeof(buffer); I++)
{
buffer[I] ^= 0x69;
}

There your payload is now encrypted and bypasses AVs

>>61160226
is that python????

>>61160258
It can be any language you want
Write a wrapper to decrypt it and it won't be detected on disk

Is /cyb/ and infosec related fields infested with feminists??? I'm referring to how wumen are trying to get into "coding" and shit like that + companies being biased in hiring towards people of color (niggers mainly), females, and gays

>>61160354
Back to your box >>>/pol/

>>61160404
You know this is a problem in technology right?? Programming jobs are being infested with bootcampers and feminists who think they're hot shit cause they know how to kode

>>61160226
>I
>not i
But why?

>>61160354
I believe /sec/-related jobs have that disease, yes. Just like every other field of technology.

>>61160354
wait, you mean I can get a job because I'm gay? are you sure? how does that work? do I bring it up during the interview, like "btw I'm gay ;)"? do I put it on my resume?

>>61160463
I'm phone posting and it kept capitalizing it

what's a good VPN that I can pay for with bitcoin?

>>61144811
had the same problem with the videos, pretty irritating

>>61157591
thanks anon

>>61151305
not him, but pretty sure he's about cp

>>61160485
attach a pic of you where you rub your crotch against some other man at a gay pride parade

>>61144621
>when it started
I read 1984 when I was 12

File: 1467830682578.jpg (5KB, 208x250px) Image search: [Google]

5KB, 208x250px

>>61160722
You're welcome.

File: relevant.jpg (85KB, 604x358px) Image search: [Google]

85KB, 604x358px

>>61157761
This.
Also swallowing those bastards, but I believe it will only partially desolve. So don't expect it to be gone all the way, HCl in your stomache is able to desolve razorblades, but I heard a story of a person who did exactly this but retrieved all the data.
Stomp first ( or break it) and then swallow parts and just throw some shards in the drain and wash them away.
Also, microwaving.

>>61153559
Please do it

>>61158784
Yes kalyx is actually a admin of JP, he is listed.
For whom who doesn't know: kalyx is the guy that deleted the original site

>>61160910
Wasn't it Appleman?
I am kinda not really following it all.
I was gone while it happened.

>>61160485
just wear a fucking rainbow braclet to the interview or mention in your linkedin/cv that you're lgbt guaranteed you'll get the jobezpz

to HR lgbt/niggers/females are a goldmine cause of muh diversity

>It's great to have you on the team, anon! We are a very diverse workplace :^)

>>61160966
Just wall in with a set of a starbucks cup and a macbook and talk shit about how this community hates gays and that job is yours.

>>61160418
It's not a problem if you're better than them.

>>61161203
sometimes, you always get some token niggers/ women

>>61160869
I aint got that much stuff hoarded anon, just offering suggestion as to how to organize it. im more of a file manager kind of guy.

>>61145712
>>61144542
thanks... i added both uri leak and google search link fix but i primarily use startpage anyway. aren't i just making myself a more unique fingerprint? how much good does this really do for me anyway? thanks for your time

>>61161218
girl i went to high school with went from art school to working at ibm after one code camp. think she's working on ai/watson now

>>61145790
watch SEL

>>61160936
Appleman didn't have the creds for the VPS dashboard. Tried to reset the password, which sent an email to kalyx. Kalyx then logged in and reinstalled the VPS from scratch, wiping everything.

>>61153138
>use ixquick

Just tried looking up a question about an Arch and of the two pages they pulled up, Arch wiki was not one. Ya I think Ill use DDG until a more secure alternative can compare.
Idgaf if they have my IP if they dont connect to anything identifiable, and if I didnt want anyone to know I used DDG I would just use Tor or a VPN.

>>61160583
Mullvad

>>61153132
Oh, nice, thanks for the info. That's consistent with what I've seen occur.

So I want to create my passwords for websites with argon2

hash(salt + master_password + user@domain)

and save them in a file that is on secure storage with

user@domain $argon2_hash

I'm thinking about not using a salt at all because in case my password file gets lost I can still recover my passwords. If I use a non-static salt I might as well do hash(urandom)

So how likely is it that anyone can figure out hash(master_password + user1@domain1) with hash(master_password + user2@domain2)

>>61163120
If you want recoverable passwords you need to encrypt, hashing is one way

>>61160485
They check your social media so just put that you're gay there and you're all set.

>>61148187
Plan on buying a thinkpad myself, apparently they are not a meme.

>>61148629
Do it

File: 1396565140837.jpg (89KB, 500x503px) Image search: [Google]

89KB, 500x503px

>>61149534

To the guys asking what search engine is the best, remember YaCy, the self hosted search engine, is what you guys should recommend. You can enable or disable sharing searches (anonymously), so is the best bet on the long run.

File: IMG_20170630_234746-3036x2277.jpg (1MB, 3036x2277px) Image search: [Google]

1MB, 3036x2277px

Drunkenly got this moments ago. Bring on the hate.

>>61165912
haha nice

>>61165912
doctoor?

>>61151270
>fighter jet AI girlfriends soon

What's /sec/'s opinion on Vivaldi? At the moment it's my favorite browser, but I'm willing to switch to something more secure if I need to.

>>61166330
>What's /sec/'s opinion on Vivaldi?
he had some alright tunes

File: 1472992062859.jpg (48KB, 490x490px) Image search: [Google]

48KB, 490x490px

>>61166341
Not the answer I was expecting.

>>61148629
>tfw cyberpunk operator

>>61149760
I should refer to every single piece of information like books as data now.

>>61151305
>he doesn't keep images of young computer processors on his computational device

File: dckr.png (38KB, 640x480px) Image search: [Google]

38KB, 640x480px

Anyone knows for sure if when you enable Firefox or one of its forks to check your spelling, does the browser do this internally with a dictionary, or sends your text to check it online, like browsers do when they suggest you pages from the web as you type in the location bar?

>>61161994
Thanks for updating me on that, anon.

>>61165134
I tried it but had a hard time getting any relevant search results. But I'd give it a while to expand it's index before I try it again.

>>61166548
You download a dictionary

>>61148733
Omg
Reported, ip a and thats my ip

>>61167279
I can verify that this is correct.
>>61166548
Try unplugging your lan and then write typos on the current loaded page.
>>61167316
I assume you quoted the parent post, eh?

Good to see this thread still going.

>>61167279
>>61167328
Thanks a lot, it did work.

>>61162589
StartPage my friend.

>>61148777
How did you get my IP so fast!?

>>61168292
L33t magix

>>61166353
Well, it is the best browser for all seasons.

>>61144542

Let me hit a /sec/ question.

I've been reviewing a lot of malware lately by looking in our spam quarantine. A fairly common pattern is a .js attachment, which contains JavaScript which downloads and then executes an unsigned executable.

The thing is, if you just try and execute an unsigned executable, you get a massive Windows Smartscreen BTFO message about how it really doesn't want to run unsigned content.


I can't work out how this obfuscated faggotry gets around it, except to say I've run it in a throwaway VM and there are no warnings.

How does malware deal with code signing?

>>61163198
This isn't about passwords I store for users, it's for the passwords I generate to log in to websites myself.

If I follow Kerckhoffs principle and assume the website provider knows what algorithm I use I can't use

hash(user@domain)

because if he knows my username he knows my password for other sites
If I use

hash(master_password + user@domain)

he would need to brute force my master_password to access other sites

basically I want to know if that is good enough in combination with an argon2 hash or if I should use a random salt.

>>61153172
>The military really likes SWaP-focused design
What did anon mean by this?

>>61166066
https://www.youtube.com/watch?v=1IwPOIcloiU
>soon

>>61166066
If only.

>>61153053
>Where and how do I download it?
I cannot remember. It was put on torrents and the publishers blew their fuses.

Argh! I just cannot remember that name, the web site that disseminates scientific articles, started by a Russian scientist. I think it was involved.

It was in the TB range, far more than I have bandwidth for and also my ISM is likely to monitor such activities anyway.

>>61173421
Scihub?
not started by a russian scientist but a Kazakh CS student

>>61173561
>Scihub
Yes! That was the one. I'll blame my recall problems on the summer heat.


Anyways, I think it was the centre of it but my memory is (clearly) not too reliable.

any cozy /cyb/ movies/books?

>>61173953
Many.

Check the pasta on getting into cyb. It does of course depend on what you consider cozy. Some like Tetsuo the Iron Man. I found it revolting.

If you prefer the "Cozy Catastrophe" genre with Cyberpunk overtones then Yokohama Kaidashsi Kikou is simply unsurpassed. Just snuggle up with a huge cuppa chocolate or iced tea, weather depending, and start reading. It ran for over a decade so there is a lot to read.

This thread has /cyb/ and /sec/ implications:
>>61165993
>Tires contain RFID chips for "inventory tracking". Just put a RFID reader along the road, and you've got every car as they go by.

Wow. Just wow. The automobile industry just has no clue. Perhaps we should have guessed so when their idea of "innovation" is to make emission defeaters.

>>61173953
installgentoo wikia has some recommendations.

>>61174549
I'm surprised that wiki hasn't been trashed yet.

>>61174141
The level of tracking, thanks to technology, is just utterly delirious, a nightmare incarnate.

Hey, I'm already neck deep into /sec/ what with all the tools and such. I was wondering if it's worth it getting a job in the compsec field of the IT industry?

>>61176505
Most certainly, there exists a straggering amount of Internet facing 'services' that aren't secured (some at all) and they need to be secured.
Ergo, there is and there will be a demand, a large demand.

>>61176505
>I'm already neck deep into /sec/ what with all the tools and such
does that mean you have script kiddie tools on your kali thumbdrive? might need more than that to get a job on the field

>>61160463
>I
>not i
obfuscation

>>61148766
My roommates got an Alexa as a gift. They haven't set it up yet because they know I'm against it, but it's only a matter of time. They want to ask an AI inane questions and get voice-activated light bulbs.

I don't know why I bother. Half the things that come out of anyone's mouth - particularly in their own home - can be used against them, even if that's just to spin a negative character portrait to push a narrative. Why you'd want to welcome a wiretap into your home is beyond me, but I can't really point fingers when I own multiple fucking cell phones. Turning off permissions ultimately doesn't mean shit.

>>61177359
Damn. At least they didn't get a fucking Smartduvet.

>>61177359
>an Alexa

Alexa isn't a physical product, moron.

>>61177673
fucking literal autistic.

>>61177673
an Alexa enabled device

thanks mr pedant

>>61169321
The Windows permission model is a black hole of inconsistencies and loopholes. Typically if you already have the ability to execute code on the target machine, you can either privilege escalate to the required level to do damage (mostly works on unpatched machines with known vulnerabilites), dick around with tricking running programs into doing it for you (chaining exploits or spawning child processes), or by simply asking the OS to stop being a fucking snitch. That last one doesn't always work.
I can't say with any certainty, but it's probably doing some kind of privilege escalation using known vulnerabilites to run things silently. There's also whatever method programs like CCleaner use to bypass the warning about modifying system files.
Disclaimer: I'm not a wizard.

>>61177673
I actually have no idea what Alexa-powered IoT appliance they got, but you seem to want additional specificity so I'll oblige.

>a telescreen-in-a-box connected permanently to Amazon's remote services, controlled via voice commands piped through to the weak-AI personal assistant Alexa, primarily serving home automation and consumer functions

I think you'll agree "an Alexa" was sufficient.

>>61178148
I agree, it was.
Too bad 4chan is home to the autismo.

>>61178769
but it's still home

File: 17190475_755919291230390_5992908902917949816_n.jpg (26KB, 480x463px) Image search: [Google]

26KB, 480x463px

>>61165912
>those wrists

>>61178917
I believe 'dench' is the term.

What programming languages do you know?

>>61164955
Which one?

>>61180712
Well, you really want a pre-Intel backdoor model.

Can /sec/ tell me the least vulnerable Android permutation that I can use with banking apps and 2FA? Is it LineageOS? I bought a chink-phone and the vendor-flavoured OS does not inspire confidence, especially since the last security update is dated October 2016.
On a related note is bleeding edge of Arch superior to Debian Stable distro vulnerability-wise?
Is initd security through obscurity?

>>61160137
startpage sucks though. you can type the exact same search query into startpage/google, and startpage finds 1/10th the stuff google does

>>61166330
It's Chromium-based, so it still phones home to Google. If you want something more secure, try Iridium (it's chromium but no communication with google servers)

>>61181017
Thank you anon. I'll check it out.

File: file.png (36KB, 576x366px) Image search: [Google]

36KB, 576x366px

am I hack now

>>61180094
python's what i'm most comfortable with and what i'd use if you told me to do something. also know C/C++ and Java but i don't really use them. i've used haskell, scheme and prolog before for classes too

File: blind.png (676KB, 1269x721px) Image search: [Google]

676KB, 1269x721px

>>61181245

>>61181260
I'll admit a white terminal looks hard to read in a screenshot but if you actually try it looks beautiful

>>61181245
Holy shit, no, either black and green, or black and white.
Never... that's just awful.
Bad anon, bad!

>>61181283
>black and green
What are you, a 1337 hacker from the 80s?

Oh wait I forgot I'm in /cyb/

>>61181289
Thank you for correcting yourself.
I riced it all back to black and green terminals.
Cool, right? :^)

>>61181308
TempleOS is white background.

Real hackers have white backgrounds.

>>61180839
me_cleaner pretty effectively neutralizes the backdoor.
https://github.com/corna/me_cleaner

>>61181316
White backgrounds destroy my retina.
And if I'm sitting in a dark room, with my hoodie on and a Guy Fawkes mask, performing some l33t level hax0ring, I'd like to be able to see what I'm doing.
Then again, because of my clinical Asperger's I do have photosensitivity.
Either way, black background or kill.

>>61181326
>https://github.com/corna/me_cleaner
Interesting.
Thank you, anon.
I wonder why Stallman (peace be upon him) doesn't mention it?

>>61147877
>>61147877
>he uses a cell phone

>>61181344
i agreed with what you said until it got all faggoty after the fifth word or so

>>61181344
It doesn't actually get everything. It's a hardware backdoor for a reason

>>61180926
Bump.

>>61181344
>he doesn't do l337 lvl hax0ring in a room filled with dim red LEDs naked whilst still wearing fingerless gloves in a Guy Fawkes mask

>>61144542
Are there any free vpn options?

Is it too late for me to become secure? Have I been indoctrinated already? I feel like my computer is buzzing with malware.

>>61181707
my d and your mom are virtually private

>>61181729
U need to talk to a real woman, furryfag

>>61181709
No but in order to be invisible you'll need to do a lot of work. Focus more on security rather than privacy. You can have a reasonably secure system without losing any usability. Remember that anonymity, privacy and security are different things.

>>61181755
will you be my friend?

>>61181770
Should I buy a new computer? I think I am compromised

>>61181924
What makes you think that?

>>61181931
Torrents, Facebook, and other shit.
I can't delete my facebook for some reason

>>61181950
If you're that worried just format and reinstall your desired OS. I'd recommend arch-anywhere with a hardened kernel (enable dkms if nvidia) unless you're a gaymer.

>>61160846
They can be broken in half easily.

My college results come out in like 4 days however I know the results would have been uploaded. Is there any way to view them? I assume results have been put in but are hidden so is there any way to get around this and view them. Maybe in page source or something?

>>61182165
That's what I said.

>>61182289
Injection

>>61182289
Any way you could do it, it seems like more risk than it's worth. Just wait 4 days.

>>61144542
anyone care to share their script to check email?
I'm working creating one at the minute with python but don't want to send cleartext credentials

>>61180993
is this true?

>>61184469
i like proton mail because i don't have anything local to give up and i trust that they won't have anything on their end to give to the state. seems to be the best choice for secure email.

>>61181950
>I can't delete my facebook for some reason
this is a feature of facebook

>>61144542
more like fat cringey loser general

File: IMG_20170702_132701-2277x3036.jpg (993KB, 2277x3036px) Image search: [Google]

993KB, 2277x3036px

>>61178917
>>61179575

What's wrong with my wrists dudes? Damnit, I have Judy Dench wrists?

>>61188610
>Hacker-Pschorr Weißbier
Mein Neger.

>>61188610
It looks like you could strangle a buffalo, to be honest, man.

>>61161461
ah savant i see

File: 2017-07-02-191636_62x20_scrot.png (462B, 62x20px) Image search: [Google]

462B, 62x20px

>>61185983
I mean more for displaying my mail on the desktop through scripts like pic related. I can get it working using python but the problem is your credentials need to be sent in cleartext and saved somewhere in a file

>>61173561
>Scihub

The website operates on donated accounts? Then why are some papers available while others are not when both come from the same source? What is the "proxy" system there?

>>61189127
That term gets thrown around too much.

>>61188569
>Low tier bait.
Try harder.

=== /cyb/ news:

From tropical paradise to urban dystopia
>From the sky, it looks like an entire city is adrift in the Indian Ocean. A forest of tower-blocks rise above the emerald-coloured water while just a handful of trees poke through the canopy of concrete.
http://www.bbc.com/future/story/20170628-how-to-best-manage-earths-land

>“When people think of the Maldives, it is usually of a beautiful paradise with crystal clear lagoons and white sand beaches,” says Shamau Shareef, the city’s recently elected deputy mayor. “Malé is very different. We have very limited space and life is tough.”
Space is such a premium in Malé that pavements are often less than three feet wide, forcing pedestrians to walk in single file, while many streets have no sidewalk at all.

>Malé, capital of the Maldives, is emblematic of modern-day land issues: A small, increasingly urbanising space with a skyrocketing population

>Rents have risen exorbitantly and, in some of the poorest areas, up to 40 people can be crammed into buildings with just 250 sq feet (23.2 sq metres) of space - about the same size as a small studio flat.

>With so many people living under each others’ feet, crime, drugs and domestic violence have risen alarmingly while the city frequently runs out of water. An entirely new island has risen out of the sea from the city’s garbage.

=== /cyb/ News

A fellow anon on /sci/ asked for input on clothes for permanent wear and later added it was inspired by Eudeamon [NSFW]. As it happens someone is already working on that, seamless clothes made from fungus, living off waste. Seems to be taking more time to reach the market than originally expected.
http://mentalfloss.com/article/55269/making-clothes-microbes
https://www.dezeen.com/2014/02/12/movie-biocouture-microbes-clothing-wearable-futures/

File: sd.png (101KB, 600x300px) Image search: [Google]

101KB, 600x300px

i never come here but lets see if you have any suggestions. i'm modifying my roaming setup and am in need of usb hardware suggestions

since tails installer now bitches about my thumb drives i'm moving to micro sd. i only use metal bodies that i have on my keychain (e.g. kingston datatraveler se9) since the plastic ones always break.

possible options so far:
lexar LRWM05U-7000
rocketek rt-tcr-tf1

This is for a black/grey/white content laptop. the usb sd is obviously for black which i previously used the kingston.

>>61191488
also, i'll be around for a few hours so ask me anything about programming (20+ years), linux, security, guns, etc.

i guarantee not to disappoint :)

>>61191536
Not that guy but I have a programming related question how can I pull my emails using imap without having to store my password in a file in cleartext?

>>61191536
how did you get started in sec?

>>61191577
typically in this type of scenario you'd have to have it on disk somewhere encrypted. which means the key to that encryption must be somewhere also

>>61191608
Thanks, I was thinking something along those lines but not really well versed in ecryption, know of any python libraries I should checkout?

>>61191604
early/mid 90s, got my first 'puter and bank account... got pissed off at the bank due to bullshit fees and started poking around. security was a bit lax back then
>>61191577
>>61191608
to expand on this a bit further, take a look at public/private keys for passwordless logins on ssh. things like automounting smb/cifs shares or auto-vnc logins also do this. basically look for similar types of functionality even though it's for something different (i'd probably just xor encrypt and leave the key on disk... perhaps a thumb drive with the key so it must be plugged in to work)

>>61153559
>>Also you are left with the problem of organizing and being able to retrieve useful info from such a gigantic amount.
>How about a self hosting PHP forum, you could simply make each item a thread and organize it that way?
How does that assist in retrieving what you are looking for beyond what you get with a plain Linux file system (locate, find etc)? Also a little uncomfy with PHP, too often it is Pretty Hard to Protect,

>Or a self hosting wiki?
I have been thinking of Tiddlywiki, clever system and self contained. I just don't know how I can relate that to files on disk that are far too big to embed.

>I actually been dreaming of doing that, I never have committed to it.
If I were to found a startup this would be it. A lot of my time at work is spent looking for things that I know is there, somewhere. Also were I to get ill and a colleague were to step in it would be an utter nightmare to pick up all the threads.

>I keep thinking about power hogging for something that isn't needed 24/7... I guess this is real autism.
Then again this is the best kind and the best place for it.

>>61191634
https://www.dlitz.net/software/pycrypto/api/2.6/

>>61191653
am >>61191604
thanks for answering. since you got 20 years of programming experience, how would you recommend i go about getting my entry-level programming job considering that i have no degree?

>>61191694
i also don't have a traditional education and i perform interviews for my company's engineering department (programmers). half of them have degrees, half don't. those with degrees are typically cs, ee, sometimes bs, some masters.

short story, demonstrate proof of skills via side projects. build things in your spare time to demonstrate passion and ability. if you're going in for an android job, show them your android app. if you're going in for a backend job, show them some postgres/mysql/sql server CRUD web app. frontend job, show some angular/jquery, etc

>>61191536
What books would you recommend to someone who wants to get into vuln research, who has a basic knowledge in x86 assembly, C, and sockets programming?

>>61191747
honestly, i'd recommend sun tzu's the art of war. security/pentesting/vuln researching is a mindset, not a prescribed set of tools.

start learning concepts from techniques. once you understand the concept, you can apply it to many domains. think about weaknesses and strengths of what you're trying to break/attack. i could get incredibly philosophical about this so i'll stop there.

also, k&r and beej. they have all you need. i personally don't do assembly since it's not my domain. typically researchers have a specific area of interest. some do osi layer 1 like bluetooth/wifi/ethernet (back in my earlier days we had vampire taps lmao, but it's the same concept). other researchers are owasp focuses, some like mitnick are wetware based and fully retarded on other levels. what you see and read about hackers is typically an amalgamation of multiple people in one which you don't find in the wild. everyone has a specialty.

let's go /g/, ask some more questions... i can handle pretty much anything on this board

>>61191964
im sure you can, smart guy

can you write me a gooey in visual basic to track tripfag ips please

>>61191992
no thanks, mr csi

do you have a real question?

>>61191881
can I obtain this mindset through The Art of War?

i've read beej's networking guide, and parts of k&r.

>i could get incredibly philosophical about this so i'll stop there.
could you please expand on this and give me some examples? i am very interested in the thought process behind security research

how do i learn more advanced /sec/ topics like kernel exploitation, creating rootkits/malware, etc? what are some good resources?

Should i use the default Tor browser or a custom hardened firefox?

>>61191881
>art of war
>incredibly philosophical

put away your fedora

security research is a methodology, not a mindset.

>>61192045
>can I obtain this mindset through The Art of War?
no, you must think about each example and how it could be applied to your specific scenario. the reason i suggest it is because it covers a broad range of security related issues. it is up to you to understand the underlying reason "why" and apply it to a different scenario.

>>61192045
>>i could get incredibly philosophical about this so i'll stop there.
>could you please expand on this and give me some examples? i am very interested in the thought process behind security research
every scenario is different. sometimes it's important to understand the motives behind a task in order to circumvent it.

>>61192098
i'd start here:
https://github.com/torvalds/linux
i realize i pointed to the ocean, but you need to find a specific place you want to break into. typically newer code has more holes. you have to go deep into a patch and the context of the patch to figure out a way in. and once you do, then you have the moral dilemma on responsible disclosure :)

>>61192116
i personally run tails and never mix grey/black with my white boxes.

>>61192134
methodology = science != art
methodologies are taught in votech schools as are other methodologies such as plumbing, auto mechanic, carpentry. security research is an art. sure, there are methodologies like fuzzing, disassembly, reverse engineering, but security research is the art of knowing when to apply those things

>>61192116
For what?

>>61192221
>art of knowing when to apply those things
that is still methodology, not art, not philosophy, not any other crap you're gonna espouse

>>61192294
Sounds good, Mr pedantic contrarian. You won this argument

what are your favorite /sec/ tools?

File: CG-33.jpg (282KB, 1000x400px) Image search: [Google]

282KB, 1000x400px

>>61144832
>>61144974
>>61148629
Only if directed-energy or electromagnetic weapon and I mean not only toy with ECE under 1-3% but something with ECE >30-35% (firearm equivalent or better).
https://www.youtube.com/watch?v=pHqWvgi3IKE
https://www.youtube.com/watch?v=TWeJsaCiGQ0

>>61192465
nmap

>>61192465
typically i build my own, but there are plenty of great classics out there

nmap, john the ripper, aircrack, kismet, fierce (although i loathe rsnake as i know him), wireshark/tcpdump. depends on what you're doing but google dorking is incredibly powerful (as is archive.org), nessus, metasploit for skiddie stuff, dban, dirbuster, links/lynx/wget/curl, netcat.

good old fashioned port mirroring on a layer 2 device is lovely too if you have the hardware. different honeypots for wifi, watering holes, etc

>>61192607
and i can't forget good old fashioned github where people like checking in passwords or just looking at the code. sometimes you want to grab banners from whatever service, then you download the code for that specific release and poke around.

>>61192465
this is a really great question... got me thinking of many things.

even something as simple as dropping a usb drive in a parking lot with some infected docs that spawns a reverse shell.... human psychology will always be predictable.

>>61192483
I think there was some group experimenting with lasers to help create directed electro-guns.

However, I think there is an issue with the fact the lasers would be powerful enough to burn holes in people anyway, so just use that!
They'd probably need femto or lower speeds for the laser, and reliably, in portable design.
That shits hard.
Femto-lasers open all kinds of neat shit up, like touchable floating holograms.
https://www.youtube.com/watch?v=AoWi10YVmfE

>>61192465
They aren't sec tools per se but:

mitmlib, dnslib, privoxy/squid, Iptables (you get the gist of where this is going), SSLstrip+ (HSTS partial bypass), hamster/ferret

Wifi:
pixiewps, reaver, aircrack-ng, hashcat

>>61192713
this guy knows whats up... good list

>>61145418

am jelly

>>61192713
That is a pretty good list.

>>61181344
>>61181408
It gets enough, simply removing the network stack and everything that isn't critical to hardware initialization effectively defangs it. Clearly I'd prefer it completely removed, but eliminating more than 90% of its functionality is pretty dang good. RMS doesn't say anything about it because it's new and you still have to have portions of the closed-source firmware present for hardware initialization, meaning it's not fully libre hardware just yet.

How essential is it to learn TCP/IP for cybersecurity?

>>61193164
pretty important lol

>>61189194
oh.. idk.. it sends my desktop an alert through the browser whenever i get a message. i think i've read that they also have a phone application

>>61192607
Post some of your tools

>>61151270

>recognize friend from foe
>never saw the movie stealth

>>61152960

use veil, not metasploit

>>61174141

tire pressure sensors use bluetooth for in car communication so bluetooth tools work as well

>>61193096
That is pretty good, I'll admit that.
But I still prefer a 'fully free' system.

>>61192701
I think of same thing but one laser produce beam with too small area width however multiple laser can produce (with optic) acceptable area (Collimated) size, also for economy of space and energy laser can be movable:
https://www.youtube.com/watch?v=RY5RYb14mIE

>>61193164
>[Hide] [Show All]
>>61193204
>>61193219
>>61193346
>>61193485
>>61193571
>>61193730
>>61194031
>>61194108
The thread is dead, long live the new thread: >>61194248

>>61182289

phish your professor's account or target his smartphone and hope it's not up to date. hacking a website from your real name login is a bad idea.

>>61190564
And the /cyb/ness of reality just keeps increasing.