[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

/cyb/ + /sec/ general: cyberpunk and cybersecurity: /cyb/punk

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 330
Thread images: 41

File: cyberpunk_battlestation.jpg (450KB, 1920x1080px) Image search: [Google]
cyberpunk_battlestation.jpg
450KB, 1920x1080px
Cyberpunk battlestation edition

/cyb/ + /sec/ general is for discussion of anything and everything related to cyberpunk and cybersecurity.

>what is cyberpunk?
https://pastebin.com/raw/Jpci0dqD

>cyberpunk directory
https://pastebin.com/raw/HiTA1yXK

>nothing to hide? please.
https://youtu.be/pcSlowAhvUk

>cybersecurity essentials
https://pastebin.com/raw/0AjC2mcD

>cybersecurity resources
https://pastebin.com/raw/98vvNwcH

>thread archive
https://archive.rebeccablacktech.com/g/search/subject/cyb/

>thread backup
https://www.cyberpunked.org/

>previous thread
>>61144542

>>> Resources <<<
>> /cyb/
Condensed /cyb/ resources: https://pastebin.com/dxdjEerj
We already cyberpunk: https://pastebin.com/gbTLBWXA

>> /sec/
Condensed /sec/ resources: https://pastebin.com/RXvHEBuu
>>61064761 Advice: https://pastebin.com/xRqEW8W7
Old Skool Hacker Culture: http://67.225.133.110/~gbpprorg/#40
Firefox extensions: https://pastebin.com/dinBuXxJ
TEMPEST attacks against AES: https://www.fox-it.com/nl/wp-content/uploads/sites/12/Tempest_attacks_against_AES.pdf

>>Harden your OS, reroute your DNS and fire up the VPN - shit just got real
Condensed /shit just got real/ resources: https://pastebin.com/DMc57Dxw

>>The Old Skool
0ld 5k00l h4ck3rz: http://67.225.133.110/~gbpprorg/#40

Suggestions for new resources are welcome. /sec/ is looking for CTF team members, contact at IRC channel.

>irc://irc.rizon.net:6697
join #/g/punk and #/g/sec (requires SSL)
IRC guide: https://pastebin.com/YDbEWRHV

>>Resources have been condensed because the field became too long<<
>>
>>61194248
What is the best /sec/ language to learn first?
>>
>>61194782
My advice might be a bit outdated but python was a good first language for me and I still use it when I need to throw something together ASAP.
>>
>>61194818
Thanks, I thought so.
>>
File: 1472817661975.jpg (436KB, 1280x1024px) Image search: [Google]
1472817661975.jpg
436KB, 1280x1024px
>>61194782
If you have no programming knowledge already, you'll want to understand the fundamentals first. Python works for that, but plenty of people (myself included) started with C, which isn't difficult to learn and essential to specializing in security.

Following that, you'll want to study up on computer architecture and get your feet wet with understanding assembly most likely. There are many good books that teach x86 assembly from the ground up. To supplement writing assembly, you should practice opening up programs in a debugger and stepping through the disassembly to try to grok what's going on. The IDA Pro Book is good for learning IDA, but it's more about learning IDA than learning assembly, so you should know your assembly well before you get there.

If you get that far, you can figure out where to find more material to learn on your own.
>>
>>61194960
Concise and informative, thanks.
I like these threads.
>>
>>61195148
best threads on /g/ imo
>>
>>61194960
Nice Mulder/Scully frame.
>>
>>61195687
Thank you, anon.
I hope the information provided is pleasing.
>>
>>61194960
that is a beautiful picture
>>
>>61196414
definitely is
>>
I noticed Monero among a couple others gets noted as the crypto for security, but Verge (XVG) is another good one.
>>
File: mainframe.jpg (576KB, 2400x1758px) Image search: [Google]
mainframe.jpg
576KB, 2400x1758px
>>61195687
>>61196414
>>61196941
samefag
Daily reminder that chinkmoot is datamining you getting monnies for you pathetic information all under the cloudflare botnet.
>>
File: 1481960958473.png (31KB, 293x89px) Image search: [Google]
1481960958473.png
31KB, 293x89px
>>61197066
nice dubs
>>
>https://pastebin.com/raw/T8TeepZP
so what exactly does changing these settings do? any hindrance to web browsing?
>>
>>61197066 see >>61197684, not a samefag.
You do know people can get along right?
You might struggle to make friends with your autism, but we can be civil.
You might want to try that sometime.
>>
These threads have such an inconsistent tempo.
>>
=== /cyb/ news:
How the rich and famous are heading for a Virek and Tessier Ashpool like state of immortality, sans vats.

>FORGET THE BLOOD OF TEENS. THIS PILL PROMISES TO EXTEND LIFE FOR A NICKEL A POP.

https://www.wired.com/story/this-pill-promises-to-extend-life-for-a-nickel-a-pop/
>NIR BARZILAI HAS a plan. It’s a really big plan that might one day change medicine and health care as we know it. Its promise: extending our years of healthy, disease-free living by decades.

So, with this, CRISP/Cas9 and other developments we might look forward to a world where the leaders of all major companies will rule for centuries. Will this increase forus on self preservation, decrease appetite for risks and lead to statis.

Social mobility is down, this might take us interesting places.
>>
>>61194960
interesting ..
you're the expert

python then BANG right to assembly

like you just can program assembly yeah I'll just knock out this website in assembly

assembly does everything right

cos it's a programming language just like all the others

idiot
>>
>>61199148
He didn't ask what languages to learn to write websites. He asked what language to learn first to get into security. A grasp on assembly (and by extension C) is fundamental in order to reverse engineer binaries and develop exploits. I'd also like to add that while Python is perhaps a simpler language to understand; it is more sensible to learn C first and work your way up to Python as you get more comfortable with the fundamentals of computer architecture; as these concept transfer into many higher level languages, but will likely seem abstract if studied at that level.
>>
>>61194960
that case is fucking monstrous wtf
>>
>>61199225 seems to understand the concept of learning better >>61199148 does, so I think I'll take his ideas as a better medium for building understanding.
>>
File: 1fCsjrL.jpg (125KB, 1654x2048px) Image search: [Google]
1fCsjrL.jpg
125KB, 1654x2048px
>>61198937
>https://pastebin.com/DMc57Dxw

because only gatekeepers maintain and post them. Philosphically you can consider /cyb/ + /sec/ threads to be the gateway between two vastly oppositional and dissimilar lifestyles and mindsets.

These threads are made by people who genuinely care and generally want this information to be available to anyone who is willing to discover the pathway, but the threads are made by gatekeepers. Most of the interesting stuff happens whilst immersed in culture after embracing it. And most of that happens away from the surface.

>it's not muh secret club
>it's a club for people who want to know how to keep their secrets
>that's why the pace is inconsistent, go over all of the previous threads, check the archives, lurk moar and stay safe.

xo.
>>
What is the most /cyb/ phone?
KeyOne? K10000?
>>
>>61199498
nexus + nethunter
>>
>>61199471
This is most definitely being added to the pasta next thread.
Beautifully phrased, anon.
>>
>>61199572
you're welcome. Thanks for maintaining the gateway.

o/
>>
>>61199629
Publicly sourceable information should be freely disseminated and certainly information that can protect and better you in the Information Age.
I'm simply doing my duty.
Thank you for the appreciation though.
>>
What's a good microcontroller or single board computer that I dould shove in my express card port (custom power delivery through the express card 5V pin) to do security related stuff?

A raspberry pi zero for a portable VPN?
Or wi-fi extender?

Is there any useful hardware hack like this for laptops?
>>
>>61199726
I heard something about the Pi being backdoored.
>>
>>61199755
source?
>>
>>61199234
The only plausible reason, given the nature of this thread, is that the case is lined with acoustic and EM absorbents.

Oh, and a major thermite self destruct charge in case of someone trying to walk off with it.
>>
>>61199755
everything past early 2000s is hardware backdoored.
>>
>>61200223
This.
>>
>>61194960
I fucking love this pic
>>
Is system76 stuff just cashing in on a meme or is it decent? It seems cheaper to buy a windows laptop and put linux on it myself. There's also purism and zareason but that stuff seems hilariously overpriced.

Just shopping for a 15in linux laptop for basic computing due to travelling more often.
>>
>>61202365

System76 is VAR (value added reseller). They just repackage/re-brand chinese makers stuff. The name of the maker escapes me, but if you're interested I'm sure google will help you.

A person would be better served by buying some later model Dell/Lenovo/HP laptop for a fraction of the price, in my opinion. If it breaks there'll be tons of replacement parts on eBay.
>>
stupid question time, can a scanf("%d",&x) cause an overflow,
I've been scratching my head at this for a few days now, and I'm chasing my tail at this point.
To the point where I think the exercise is wrong.
>>
>>61202624
Very helpful info thank you. I think I will use an old college email to get a discounted surplus dell off somewhere.

As thanks I give the thread this interesting ssl logging python tool I found. github.com/google/ssl_logger
>>
>>61202705
what are you trying to do? a code snippet perhaps?
>>
>>61194248
How do i git started?

I can program some, and i've SOME netwerk xp
>>
>>61203300
First, you have to turn 18. Then you can post on this website.
>>
>>61203300
Please don't post like an idiot and rile people up in our comfy thread.

Go to the pastes in the OP and do your research. That is why the OP is there.
>>
>>61202763
The question is, does it work?

>>61203300
Read the pasta, it contains a direct guide on starting and it isn't even hidden in the other compiled resources.
>>
>>61202872
never mind, it's actually not how I'm suppose to fuck the program up,

I'm suppose to make an unsigned integer loop over, essentially
1073741824 * 4 = 0
>>
>>61194248
Is the libreboot x200 the most /cyb/ laptop ever?
>>
>>61199498
That would be a plain dumb phone.
>>
tech has perpetually made "hacking" not as feasible, SocialENG is the new cyber sec game, a well placed thumb drive outside a data center, some empty boxes to get a door opened you should not be able to get through, that phone game on lock telemarketing like a pro, high gain mini antennas well placed in receptions machine to create a rouge access point, you can try to hack but I don't need to run any spam tech to get into something, just a little social engineering
>>
>>61204266
forget that even better would be direct employment in the business you want information from.
>>
>>61204307
backdoors for days, dedication to a fucking cause
>>
>>61204327
actually amazing the kind of information and access they give to new employees in the latest companies I attempted to work for.
>>
>>61204266
You do know there are more unsecured Internet facing 'services' today than there have ever been right?
Just because you make something up, doesn't make it true.
In fact, this is quite a well known and concerning problem.
In fact, with more and more 'smart' technology in businesses, homes and in public, the world is becoming ever more hackable with each passing year, lustrum and decade.
Next time, think before you type, it might improve your attempts at trolling/derailing.
Merci beaucoup, I'm sure you'll show yourself out.
>>
File: eeeeeeeh.jpg (25KB, 480x480px) Image search: [Google]
eeeeeeeh.jpg
25KB, 480x480px
>>61197066
Hiro is using us to captcha farm and make money from Google. This is why you should use the legacy captcha.
>>
>>61204361
its hilarious, I went to SXSW to do a bit of job networking this year, and there were droves of potential employers from the video game industry, that were o so impress I had my CCIE, they thought it was super edgy and cool, the faggots were interested in me "protecting their servers" (whatever the fuck they thought that meant) and were ready to email me log files from recent attacks, so many dumbasses who think they work in the tech industry, with "social media" and "graphics design" degrees basically cuck out when you start talking security
>>
>>61204412
Then there is the otherway
>imageboard without captcha (to stop the bot spam)
>get spammed
>now use captcha system
>>
>>61204434
Make them do math and then you'd remove the problem of CS undergraduates.
>>
>>61204369
whatever you say crash override
>>
>>61204462
>Knows less than the VICE Cyberwar reporter.
>Still tries to act with authority.
You truly are a pathetic being and a hopeless troll.
>>
>>61204434
>literally every other image board site has no captcha or a simple one that isn't from Google
>(You) still justify it because "muh spam" when there are other options available that are easy and free to implement, and don't track the user
Wew lad.
>>
>>61204470
you truly are a silly faggot if you think social engineering does not play a huge role in information security
>>
File: 1493504676490.webm (3MB, 1280x720px) Image search: [Google]
1493504676490.webm
3MB, 1280x720px
>>61204498
I didn't say that it did not.
I disputed your claim that the majority of things are 'unhackable' without social engineering.
Don't strawman, it weakens your argument.
Not that it was much of one.
I'd advise, as a merciful god, that you back down before you get MUH FEELS hurt and shit up this thread anymore than you've already attempted to.
>>
>>61204456
you do realize it is extremely easy to calculate stuff which means it won't stop spammers right?
>>
>>61204498
>>61204536
children now.. its still afternoon, how about you both cool the fuck off
>>
>>61204561
>I'd advise, as a merciful god, that you back down before you get MUH FEELS hurt and shit up this thread anymore than you've already attempted to.
I've already asked him to stop, for his own good.
The onus lies with him.
>>
>>61204581
>sometimes i wish youd just shut your big yapper

you just cant bear to not reply can you faggot, let it go. its over
>>
File: mpv_shot0121.png (2MB, 1920x1088px) Image search: [Google]
mpv_shot0121.png
2MB, 1920x1088px
Since Space Corps is a thing now, is it wrong working for the gubbmint? I've wanted to be something like this my whole lif
>>
>>61204600
And now my suspicions are confirmed, you're a samefag trying to masquerade as an 'innocent interloper'.
Nice try, but I'm smarter than you.
>>
>>61204488
Things start to get real nasty when Tor mirror is introduced.
At least if the captcha is not under googles botnet then it's tolerable.
>>
>>61204615
Or, you could found your own 'astro-warfare' private contracting company?
>>
>>61204679
space piracy, fuck yeah

can't wait to intercept droneships as they make their yearly run from jupiter to earth
>>
File: iamverysmart subr.png (68KB, 674x541px) Image search: [Google]
iamverysmart subr.png
68KB, 674x541px
>>61204620
perhaps you should take your meds and gtfo if you cant be a normal human being. not everything is about you, and strangers can be nice on the 4chan, if only we didnt have niggers like you ruining it for the rest of us
>>
>>61204699
>Changing your IP to win a minor point of contention.
It would certainly explain the unusually long gap between your last posts and this one, when compared to your earlier posting averages.
Still not willing to back down?
Deary me, isn't one kicking in enough?
Are you a masochist?
>>
>>61204733
you're either trolling or have some serious autismo
>>
>>61204741
Says the samefag who isn't backing down and went as far as changing IP just to win a minor point.
I think we both suffer from intense autismo.
Back down, for your own sake.
>>
>>61204750
oh my god, just stop fucking arguing you autist and take your meds
>>
File: 1498493817239.jpg (75KB, 800x583px) Image search: [Google]
1498493817239.jpg
75KB, 800x583px
You guys are shitting up my comfy cyb thread don't make me track your IPs and totally hack you.
>>
>>61204761
Why don't you?
We're equally guilty.
>>
>>61204787
im not the "same fag" you were referring to, so stop arguing in the /cyb/ + /sec/ thread
>>
>>61204807
neither was I but that didn't stop his autismo from accusing me even after i presented proof. i could have my modem off for a fucking week and i still would get the same IP back. but here we are.

Anyone have an good sugestions on how to make a DNS server on a personal router? I got the 3040 for that reason but did not have luck with OpenWRT.
>>
>>61204698
That sounds aesthetic as fuck; /cyb/, /sec/ and /k/ in outer space (and on other celestial bodies).
Sounds like the basis to an masterpiece cyberpunk story, to be honest.
>>
Which generation(s) of ThinkPad does Stallman suggest?
>>
>>61204615
>>61204679
>>61204698
Since the US legalised space mining I guess the action will be in private sector. That could still turn hot. In fact many have set their eyes on Psyche, an asteroid which is so dense it probably is the remains of the core of a planetesimal. This would mean it is so full of precious metals that it would make the Chinese stranglehold on precious and rare earth metals implode overnight.

Unless of course the Chinese shot down the mining expedition. Given they probably gunned down 3000 students in 1989 this would just be par for the course.
>>
File: 1489602388433.jpg (9KB, 233x216px) Image search: [Google]
1489602388433.jpg
9KB, 233x216px
>>61205035
Our children and grandchildren get all of the fun.
>>
Why are you stealing from the /fucko/ template, OP? Did you want to get fucko'd?


ABANDON THREAD. OP IS AN INSURGENT. FAKE FUCKO THREAD
>>
>>61205069
Not if we defy God and achieve stable immortality anon. Your immortal cybernetic clone will have all the fun at the very least.
>>
>>61205093
Those threads haven't existed in a while.
Also, it isn't intellectual property and it was based upon the previous /cyb/ /sec/ threads that died out a while ago.
Call it a revival.
Or better yet?
Make your own /fucko/ threads and bring back the 'original community'?
>>
>>61205128

GET ON THE GROUND, FUCKO

SQUAD TAKE HIS STORAGE DEVICES NOW
>>
>>61205153
Too late, I've swallowed them all. :^)
>>
>>61205175
>>61205128

QUIET, FUCKO
>>
>>61205094
The future sounds colourful.
>>
>>61205069
>Our children and grandchildren get all of the fun.
Well, will they? Have a look at this: >>61198976

I am not really sure where we are heading. There is CRISPR/Cas9, the coming AI revolution that will claim most jobs, the prospect of basic pay, a likely dramatic increase in life expectancy, a Western economic structure that imploded in 2008 and shows little sign of recovering short of outrageous propaganda, end of cheap raw materials and oil yet prospect of vast space resources, a possible space race to the Moon and beyond, a possible conflict on He3 resources and more.

Fun? Perhaps. It might be the future we'd like to see.
>>
>>61205268
Cryptocurrency will take over and kill off central and reserve banking as we know it.
>>
File: fbc_03.jpg (37KB, 400x217px) Image search: [Google]
fbc_03.jpg
37KB, 400x217px
I've finally found work for crypto doing graphic design for startup sites. Ive found 2 guys with chunks of BTC wanting help. I'm sure more are waiting.

I've wanted this for a while.

I need to save and convert as much as I can for the cool toys coming around 2025

Art.
https://drive.google.com/folderview?id=0B3XpfZjUfT-2NFdLWVhpamUyNU0
>>
>>61205437
You cryptofags are hilarious, refuse to even acknowledge the huge problems with crypto.
USD can only be manipulated by the Fed, and if we switched back to the gold standard that wouldn't be a problem. Cryptocurrency can be manipulated by any country or organization in the world with enough money, which is already happening. The only people pushing crypto are NEETs trying to make money.
Paypal and banks require personal information for their users, its only a matter time before crypto is forced to require the same or be banned, which completely defeats the one advantage crypto has, anonymity.
>>
>>61205497
>USD can only be manipulated by the Fed
Wrong.
>Who is Soros?

>and if we switched back to the gold standard that wouldn't be a problem.
I agree, but we wont.

>Cryptocurrency can be manipulated by any country or organization in the world with enough money, which is already happening.
And? It doesn't have the same ramifications as money backed by reserve currency.

>The only people pushing crypto are NEETs trying to make money.
A lot of crypto requires a decent amount of startup capital, something NEETs wouldn't have, so try again.

>Paypal and banks require personal information for their users, its only a matter time before crypto is forced to require the same or be banned
Whoa, nice statism.
You know banning stuff (certainly digital) doesn't work right?
And even moreso when it is DECENTRALISED.

>which completely defeats the one advantage crypto has, anonymity.
Crypto isn't anonymous, logs last forever.
The only way to be anonymous using it is general /sec/ implementations, like degrees of seperation (VPNs, proxies) and also using new wallets as often as possible.

So, all I've gathered from your post is, that you have a superficial knowledge of the subject that seems to be gleaned from poorly written 'articles' on it.
>>
>>61205598
You are exactly what I mean, a NEET that refuses to acknowledge that crypto is just a meme.
Not all technological advancements are advancements.
>>
File: Cain.jpg (40KB, 1000x1094px) Image search: [Google]
Cain.jpg
40KB, 1000x1094px
>>61205619
I just falsified everything you said and you've made a non-argument as your faux-sophist retort.
I think we're done here.
>>
>>61194248
cyberpunk larpers gtfo sec
>>
File: 1488949037526.jpg (16KB, 360x360px) Image search: [Google]
1488949037526.jpg
16KB, 360x360px
>>61205659
>Low energy trolling.
Thanks for the bump though.
>>
>>61197066
what major companies still use IBM mainframes?
>>
>>61205701
Major financial institutions.
>>
>>61205701
Just buy one for 250$
https://www.youtube.com/watch?v=45X4VP8CGtk
>>
File: huh.png (185KB, 480x368px) Image search: [Google]
huh.png
185KB, 480x368px
>>61205598
Let's say """hypothetically""" I live a NEET-esque lifestyle at home in my parents basement at 24, but have a well paying job, how much startup capital to get into crypto are we talking? Or would putting together a mining cluster be more efficient, assuming cheap electricity (not free)? I'm aware all investments are a risk, I'm just fishing for tips and advice while I still have a bank account.
>>
>>61194960
What case is that?
>>
>>61205643
>faux-sophist retort
Not that anon, but please speak in memes.
I dun get
>>
>>61205838
looks a bit runtish. if you're going to have long hair like that you should have some musculature
>>
>>61205094
unless it requires 0 energy to maintain then it's not immortality
>>
>>61206037
I'll explain:
>faux means false.
>sophist means someone who useless a seemingly clever, but false argument.
So, if you put them together:
>faux-sophist is a seemingly clever but false argument, that is only that superficially.
So, you're calling them 'less than a sophist'.
It is a 'double insult'.
>>
File: 1489093994338.gif (84KB, 855x203px) Image search: [Google]
1489093994338.gif
84KB, 855x203px
>>61194248
https://www.pocogtfo.com/
lainchan
>>
Everywhere I look, the world is getting more and more /cyb/. I mean, they play ads before movie trailers now at the fucking movie theater.

Like, there's the local ads, and the movie goes to start, but lolnope, it's a fucking Coke ad!
>>
>>61206126
what is this ?
>>
>>61204488
>still justify it because "muh spam"
where the fuck were you when spam rules this place?

were you even here before captcha? i doubt it, otherwise youd agree how much better it is than having those javascript exploits spammed every day on every single page.
>>
>>61204854
>Sounds like the basis to an masterpiece cyberpunk story, to be honest.
pssst

thats because its a reference to an anime.
>>
>>61206277
interesting gif
a link you should visit
the name of chan where cyberpunk is not dead
>>
>>61206095
So a shitposter?
>>
>>61205862
>Or would putting together a mining cluster be more efficient
M80 you have no chance.

Theres anons in this thread with mainframes set to mine.
>>
>>61205004
Stallman uses an X60 with libreboot
he's likely in favour of any that can be run without needing non-free software, including thinkpad X60, T60, T400, T500, X200, W500
X60 and T400 (and others, I believe) are sold by minifree, endorsed by the FSF.
>>
>>61206095

Not him but your definition of sophist is wrong, therefore your interpretation of a faux-sophist could be held true.

afaik sophism posits truth couldn't be limited to just one side of the argument but if you're preaching to the choir at least bark at the right tree.

"The cyberpunk must find herself armed with a sharp awareness of what is going on around her. Most seem to be apathetic about the philosophical implications of the uncanny technologies of the near future as the existential issues invoked by artificial intelligence, transhumanism, and the technological singularity continue to evade our collective consciousness."
>>
>>61206396
Well I know nothing about mainframes but if I've got ~30 grand to blow is it worth starting to do some research?
>>
Following some anon's example:

=== /cyb/ news:

CIA is now targeting Linux Users through n OutlawCountry
>https://www.neowin.net/news/wikileaks-reveals-cia-targeting-linux-users-with-outlawcountry-malware
>>
>>61206126
Is that the gif that shows its own hash or something?
>>
>>61206850
Am I misreading this or does that malware seem pathetic?

>creates a new exemption in the IPtables firewall protocol
like anyone wouldn't notice that

>this malware attack requires physical access to the system
so it's useless then
>>
>>61206974
>>creates a new exemption in the IPtables firewall protocol
>like anyone wouldn't notice that
I though that too. But if CIA kept it should be some reason though.
>>
>>61206991
It would be good to load up onto a suspect's confiscated computer I guess, can't really think of any other use for it.
>>
File: 1498293183605.gif (2MB, 500x372px) Image search: [Google]
1498293183605.gif
2MB, 500x372px
Got a few questions.

1. Opinions on Cryptocat?

2. Got any recs for distros? I have some experience with Linux already but for the most part I've really only used Windows. I'm thinking on going with Mint but I'm open to anything right now.

Hope you guys are having a good day. Cheers.
>>
File: sophist.png (7KB, 570x160px) Image search: [Google]
sophist.png
7KB, 570x160px
>>61206393
I suppose so?

>>61206621
>1: A person who reasons adroitly and speciously rather than soundly.
>2: A person who reasons with clever but false arguments.
>3: A captious or fallacious reasoner.
>4: Any person practicing clever, specious reasoning.
>5: A person who reasons adroitly and speciously.
>6: One who is captious, fallacious, or deceptive in argument.
1: http://www.dictionary.com/browse/sophist
2: https://en.oxforddictionaries.com/definition/sophist
3: https://www.merriam-webster.com/dictionary/sophist
4: https://www.collinsdictionary.com/dictionary/english/sophist
5: http://www.thefreedictionary.com/sophist
6: https://en.wiktionary.org/wiki/sophist
>Picture is also very much related.
>>
>>61206621 see >>61207513 to quote a 'dear friend':
>if you're preaching to the choir at least bark at the right tree.
>
"The cyberpunk must find herself armed with a sharp awareness of what is going on around her. Most seem to be apathetic about the philosophical implications of the uncanny technologies of the near future as the existential issues invoked by artificial intelligence, transhumanism, and the technological singularity continue to evade our collective consciousness."
>>
>>61207513

a sophist is a teacher and were held in derision because they hindered progress, therefore sophists took a negative connotation

since you took the position of a teacher using words that he didn't understand you became the sophist however qualifying him as a faux-sophist (non-argument and faux-sophist are double negatives) from his retort of "Not all technological advancements are advancements." because he himself admitted he speaks in memes therefore an opinion which again is derided to put philosophers in better light offering true knowledge

so qualifying him as a sophist and teacher and saying he's not a teacher while using non-sequitur, not addressing the argument is ad hominem

therefore since the context of a sophist is erroneous since he did claim to be a sophist using memes >>61206037
then being a faux sophist, not a false teacher can possibly make him a true philosopher

hope you get this, it's logic
>>
Why don't we just move to 4kev.org? It's the only cyberpunk imageboard out there.. just saying
>>
>>61207807
Why don't you stop shilling your fucking stupid imageboard?
>>
>>61207674
You do know a word can have more than one meaning and those meanings can change because of semantic drift?
Not to mention, I just clarified the definition of the word I was using (the modern one).
In other words, you argument is a non-argument as it simply doesn't apply in this case.
I also linked several dictionaries with the modern definition of the phrase.
So no, your 'argument' and 'logic' are not applicable in this, sorry.
>>
>>61205643
>>61207902

>falsified everything you said and you've made a non-argument as your faux-sophist retort.

falsified, non-argument and faux-sophist

I understand your semantic drift and your intention isn't fundamentally wrong but I'm underlining that since what you determine negatively combined then can become real because sophism isn't positive esp. with regard to crypto

I speak French and the word faux means false and sophism exists. The false discourse, the one of sophists exists, therefore one would need to use Parmenides forbidden way where the non-being is, in a way
nothing exists
even if something exists, man can grasp it
even if man can grasp it, he cannot formulate or explain it to others

it's just that you dismissed his discussion by claiming to falsify everything he said which is a loaded word in currency and crypto (another point of discussion is why did you falsify everything he said and not tell the truth?) his non-argument (not addressed) and calling him a faux-sophist so it's effectively absurd

there is no such thing as a non-argument because you would have to prove this in dialectic discourse and dismissing everything pulls a chain reaction of negatives, my point being that one should focus on the truth rather than falsehoods supporting truth

Truth as the highest value, proposing that it could be discovered through reason and logic in discussion.

Sophists required neither logic nor proof and the faux-sophist could be real (real sophist or philosopher is again another discussion). This is the Socratic method to show that a method that leads to a contradiction; thus, forcing the withdrawal of the hypothesis as a candidate for truth.
>>
>>61207059
This.
>>
>>61206510
My plan is to mostly use it as an Internet facing terminal.
>>
What are you listening?

https://www.youtube.com/watch?v=bh66pGIhysQ
>>
>>61199498
The LG Google Nexus 5 was very popular for a while. I myself am highly interested in the Neo900 crowdfunded reboot of the Nokia N900, built with modern-ish open-hardware. But really, anything with that supports pentesting over both the 5GHz and 2.4GHz band frequencies (which is most phones these days) can be used.
>>
>>61199498
https://tehnoetic.com/mobile-devices

Anything else is futile
>>
>>61201582
Not true. I'd say anything after 2008 is questionable but in reality, the only :safe" hardware is open-hardware.
>>
>>61203571
It's good but it's a little slow. I just upgraded from the x200 to the x220. The reason was because the x220 supports 16GB of ram @ 1866MHz which is great for doing my network lab tests as well as code compiling and just plain faster overall. Also having a displayport and usb 3.0 port (got the i7 version) is pretty nice.
>>
File: railgun2.png (21KB, 438x943px) Image search: [Google]
railgun2.png
21KB, 438x943px
>>61204615
Too bad they're not sending people into space any time soon.
>>
This essay is being shared in many security-centric sites online.

It is also being retweeted and shared by multiple InfoSec/NetSec professionals, including Weld Pond and The Grugq.

It maybe good for the paste as it covers alot of info about getting into penetration testing, and Info/NetSec.

Quiet a bit of general methodology is shared as well.

In the interest of transparency, I am the writer; however, I generally dread attention and do not share much online (though lately I feel it is extremely important to do so).

I also do not own the site it is posted on and do not gain financially in any way through its distribution.

I love this general OP; I consume hours of InfoSec/NetSec/Cyberpunk media everyday.

This general is one I actually always look forward to and almost always completely enjoy.

So thank you very much Op and everyone who contributes here.
>>
https://0x00sec.org/t/shared-thoughts-after-6-years-in-pentesting/2492

Forgot the essay...Sorry.
>>
File: 1498821042863.png (988KB, 800x973px) Image search: [Google]
1498821042863.png
988KB, 800x973px
Can someone explain me how this code work ?

#include <stdio.h>
#define DEDANS 1 //à l'intérieur d'un mot
#define DEHORS 0 //à l'extérieur d'un mot

/* Ce programme va afficher son entrer sur */
/* ça sortie à raison, d'un mot par ligne. */

int main(void)
{
int c, etat;
etat = DEHORS;

while ((c = getchar()) != EOF)
{
if (c == ' ' || c == '\t' || c == '\n')
{
if (etat == DEHORS)
{
etat = DEDANS;
putchar('\n');
}
}
//Sinon ne rien afficher
else
{
etat = DEHORS;
putchar(c);
}
}
return 0;
}
>>
Can anyone provide me with a tutorial or guide on how to create a cyberdeck?
>>
File: Revolution-Action-5.jpg (276KB, 600x465px) Image search: [Google]
Revolution-Action-5.jpg
276KB, 600x465px
>>61210305
https://www.youtube.com/watch?v=i8JBUktSxvQ
>>
>>61206974
The CIA often has physical access to targeted computers, that's what makes them different from the NSA (which focuses on remote attacks). CIA has networks of people willing and able to physically compromise a target, so the software they develop often reflects that.
>>
>>61205659
we run this town kid, nothin personnel
>>
>>61206937
md5sum file > file
>>
>>61199558
nailed it
>>
>>61211218
Is this simply an aesthetic project or do you actually want a robust mobile hacking platform?
>>
File: cypun3.jpg (165KB, 1200x780px) Image search: [Google]
cypun3.jpg
165KB, 1200x780px
>>61211017
could you please just show the essay? even delete it after 5 min, youve got my attention
>>
>>61211640
He posted it doofus.
>>61211035
>>
>>61194248
If I had to choose between a certification to get, should I go with CPTE or CompTIA Security+?
>>
File: 1432437201542.gif (2MB, 200x200px) Image search: [Google]
1432437201542.gif
2MB, 200x200px
>TFW nobody in this thread has ever actually hacked anything

Bunch of fucking losers.
>>
File: cypun4.jpg (142KB, 1250x652px) Image search: [Google]
cypun4.jpg
142KB, 1250x652px
>>61211928
what have you hacked then, mr robot?
>>
>>61211017
>>61211035
as a struggling-to-find-a-field-i-like cs student, this was a good motivation piece. not going to the best school for it since there aren't that many electives for the field, but have long be interested in it.
just adding to the praise i suppose, but thanks anyway.
>>
File: postieburnout[1].jpg (158KB, 640x480px) Image search: [Google]
postieburnout[1].jpg
158KB, 640x480px
I currently have a career as a tradesman. I'm looking to change that and get into cyber security, already got a course picked out at a uni. I just wanna know what kind of roles there are in private or public sector for this skill and if its an over-saturated field. Anyone got any advice? The thread so far seems pretty helpful.
>>
>>61211937
Cant give you names because of NDA, but if you live in the US you've definitely heard of them.
I'll walk you through my last hack:
>Find their username convention on their website
>Scrape google/linkedin/data.com for email addresses/employees
>Password guess against their Outlook portal (Season and Year will always get you in, ex Summer2017)
>Use a tool called Ruler to get an Empire shell on some workstations https://github.com/sensepost/ruler https://github.com/EmpireProject/Empire
>Kerberoast to get a domain admin account www.harmj0y.net/blog/powershell/kerberoasting-without-mimikatz/
>Now with domain admin, I own the network
>Update their GPO to add me as an admin on their credit card servers
>I had access to probably 5 million credit card numbers

Their security guys had no fucking clue what was going on.
>>
>>61211937
>>61212036
Here's another one:

>Find picture of their badge on google
>Print myself a copy
>Walk right the fuck in to their building
>Find an empty cubicle
>Plug right in to their network
>Responder to get some NTLM hashes https://github.com/SpiderLabs/Responder
>Crack hashes offline, get domain credentials
>Look through their file shares
>Find some credentials, they had admin access on some servers
>Log on to servers, run mimikatz to dump all the creds https://github.com/gentilkiwi/mimikatz
>Domain admin
>Go look in active directory for their sysadmins
>Log into sysadmin workstations, find a .txt doc with everything i needed to log in to cardholder database
>Huge company, i dont even know how many customers they had
>>
File: cypun5.gif (2MB, 870x388px) Image search: [Google]
cypun5.gif
2MB, 870x388px
>>61212036
>>61212074
that's actually pretty cool man, thanks for the stories
I want to get into this field of work, I think I'd have to get a CompSci degree to even be considered (im not skilled enough yet, anyway)

Any tips for self teaching? I'm using some online sites to teach myself programming, youtube tuts etc on how to work linux distros and pentesting tools. I'm not just installing kali and changing terminal text color to green btw
>>
>>61212125
It's different for everybody. My best piece of advice would be to play to your strengths. Are you a coder? A sysadmin? A hardware guy? Play to your strengths.

I was CS but it really doesnt matter what degree you have. Get good at something. Coding, windows sysadmin, nix sysadmin, doesnt matter. Get really good at it.
Once you're good at it and can build it, then you can start learning how it breaks.
I wiped away windows and installed Ubuntu and used that for all of college. I got pretty good with Linux.
I did a lot of boot2root challenges (vulnhub.com), since they're all linux based
I did some CTFs (CCDC, Pros vs Joes)
My last year of college, I flew out to Vegas for Defcon, and got hired by a company that does pentesting/IR/forensics. They paid for me to take my OSCP which took about 6 months to get, but if you want to get into pentesting you're going to need that. Forget about Sec+ and CEH and those other bullshit certs.
>>
>>61211017
Thanks man; eye-opening piece.
>>
>>61212174
>Play to your strengths
Solid advice actually. Hardware is where I have the most fun, and social engineering is a strong point for sure.
I'll check out vulnhun challenges, sounds like fun
>>
>>61212174
woah really? in my last year of college, and i'm close enough to vegas to make plans to go now.
how did that process work out if you don't mind me asking
>>
>>61212036
>>61212074
I'm a junior sysadmin that recently made it out of helpdesk hell and I hate (and enjoy) reading shit like this because it's so disheartening. The company I work for has so many bad practices and there's only so much I can push for to try and change without getting the "yeah yeah it's been working fine all these years go away" bs. It's so bad literally half the company has the same password that never expires and I always fear some shit will happen then get blamed for it.
>>
>>61212263
Which process?

>>61212272
Probably below your pay grade to worry about that... someone else will get the blame.
Bad passwords are the only thing I exploit these days. I haven't actually used an exploit to get access in probably 2 years.
>>
>>61212174
>CCDC
Me too. SW. You?
>>
File: ee46c92.png (25KB, 468x216px) Image search: [Google]
ee46c92.png
25KB, 468x216px
/cyb/ currency of choice

http://45.32.161.183/get-started/what-is-monero/
>>
>>61212354
SE
>>
>>61212409
You sound like you're pretty good at what you do. Did your team ever make it to Nationals?
>>
>>61212321
the getting getting hired at defcon. i guess i should go with the expectation of not getting anything, so it doesn't turn out bad if nothing does shake out, kinda bad at selling myself.
>>
>>61212420
In college? Hell nah, i went to a real shitty school. Besides, i was still green in college and not the badass i am now

>>61212434
Defcon/Bsides is literally a job fair. I dont know why my company pays for everyone to go every year lmao.
Do you have a resume? Is it a single page with no bullshit (nobody cares about the bible camp you did in high school)
If you need stuff to fill, put some CTFs you did. There's a lot of them. I think i saw the list in the sticky somewhere.
Put all the code/scripts you've written on github and have a link on your resume.
Start a blog. Blog about shit you research, CTFs you did, etc. It doesn't have to be new, or advanced, but it has to show your knowledge of the subject. This will put you ahead of 80% of the competition in my opinion
If you're an overweight neckbeard, that can sometimes be OK. You need to know how to talk to people. The stereotypical basement dwelling autismo will never get far in the security industry. If you're an autismo nerd good luck, you better be wicked smart.
>>
>>61212506
>In college? Hell nah, i went to a real shitty school. Besides, i was still green in college and not the badass i am now
Phew. That's a big relief for me, honestly. At least I still have time, even though I constantly feel like I don't...

I'm going to defcon too this year, and I'm hoping I can finally find the right inspiration (which I once had when I was in HS) to actually get better at what I'm actually good at by objective measures.

I seem to have plateaued in my skills in that I 'want' to learn more and git gud, yet I have no motivation or inspiration to put in the work. I mean, I'm one big knowledge accumulation sponge and I <know> about so many things, but I've yet to put a lot of those things to practice. Although, it was those things I put in practice that gave me what I know...

Fuck I'm a convoluted mess. I just hope I can figure myself out, or at least find somebody to give me the right direction, before it's too late.
>>
>>61212506
not quite basement dwelling autismo, but not on the doing ctfs and having a ton of code on github track either, kinda too much of a slacker to get the extra curricular thing, which puts me in the middle of the pack i suppose.
no matter, i'll still go check it out, already booked a room and everything in a dingy looking hostel. hope i don't die of the vegas heat getting to my room and back on the strip.
>>
>>61207807
>Why don't we just move to
It is practically dead and what little is there does not impress me.
>>
>>61207807
wait, another one? losing track of these damn boards. probably slower than the last one shilled here too
>>
hows your mind for a Skype convo for /g/sec? Tired of those tinfoil hats honestly
>>
>>61212749
what's wrong with irc/telegram/riot/matrix/smoke signals/etc? all better than skype
>>
>>61211928
Well, I have bypassed a couple Supervizor passwords on thinkpads. After doing that, I can access BIOS.
>>
=== /cyb/ News

Earlier Sci-Hub was discussed.

>Websites offering pirated papers are shaking up science
https://www.economist.com/news/science-and-technology/21724381-musicians-and-moviemakers-are-not-only-ones-suffer-internet

>RECORD companies and film studios have had to learn to live with internet piracy. Despite their best attempts to close sites or co-opt them, pirated copies of their wares are easily available. Increasingly, the same is true of scientific papers. On June 21st a court in New York awarded Elsevier, a big scientific publisher, $15m in damages for copyright infringement by Sci-Hub and the Library of Genesis, two websites that offer tens of millions of scientific papers and books for anyone to download.
>>
>>61206671
>but if I've got ~30 grand to blow is it worth starting to do some research?
holy fuck.

yes, thats about what his cost. i wonder if we can summon him?
>>
>>61213072
Better off just HODLing BTC then investing in shitcoins during the next bullrush.

t. anon who made 40,000 in 3 weeks.
t. anon who also lost 10k of that due to greed
>>
>>61211035
OH FUCK ITS YOU

I read that article.

Your analogy of encapsulation knowledge giving you magical powers made me start my networking studies.

Id been putting it off for so long, and am now glad I have a reason to really dive into it.

Ive read it twice and due to its length and the sheer volume of information still think I am missing about 50% of its content.

The comparisons of a pentester to a warrior who trains and hones his craft did stir the heart.
>>
>>61212036
>>61212074
nigger im fucking jelly
>>
Anyone checked the FTP server the anon set up earlier?
lftp ftp://[email protected]:21212


Seems too good to be true.
>>
30 yr old here, can do lots on computers (compared to a normie), no techie job experience (only bartending) but studying for ccna, getting BS in computer networking, want to focus on network security.

I'm guessing my employment odds are close to 0?

Suppose I'm in Canada and want to get a greencard to work in the US, and accomplish this before 2020. How difficult are we talking? What's the best way to accomplish this?
>>
>>61212074
>>Walk right the fuck in to their building
I did that once, on legitimate business ( I am strictly white hat).

>Walk in
>official looking (that's me)
>am noticed by a secretary who promptly gets hold of me - practically by the hand
>tows me like I were a child to her desk
>me puzzled
>he points triumphantly on her desk
>now confused (and no dirty thoughts, anons! >_<)
>turns out she thought I was the repair man and I was here to fix her computer

>mfw, yeah..
>>
>>61205701
Basically the major (((companies))) running wall street and the central banks, or plugged into those networks (networks in the people sense)

IBM seems to be used by the (((elite))) types. Probably no hardware backdoors like AMD and Intel have, and the hardware specialized, undesirable, and unavailable to most companies.
>>
>>61213223
>Seems too good to be true.
then it is.
>>
>>61213255
>getting BS in computer networking
literally why
I dropped out of college after a few days after I realized I could teach myself all the coursework in a much shorter period of time, and you learn better when you teach yourself.
>>
>>61213286
It gives me pacing, structure and direction I tend to struggle with on my own. I'm able to network with other students (almost got a job off one), and I can clarify/ask questions/get details from the teachers - which is something I'm finding myself wishing I could do with my current online math course, which is pretty much 100% self-study. All well and good except when I run into a problem and have nobody to ask to help work it out.

I know post-secondary education is mostly a meme these days, but I'm not in debt and it has helped more than hurt me so far.
>>
Neighbor bought a used laptop and asked me to put Microdick Wangblows 10 on it. It looked stolen so I declined but not before I tried harvesting all the private data on it with a live-USB distro hoping for someones private nudes.

What kind of person does this make me?
>>
>>61213314
So you lack willpower then?
>>
>>61213286
This feel.

The only reason I'd even go back to college is for something resembling a social life. Otherwise I'm perfectly happy learning on my own.
>>
>>61213285
Haha. I had a look - pretty obvious 4chan posters have been "contributing" heavily.
>>
>>61212773
and xmpp/tox is better than any of those, especially >telegram
>>
>>61213619
>tox
but probably i guess. don't really use one exclusively, and barely use them beyond that.
>>
Whats the best (paid) VPN I can get (UK)
>>
File: 1386647193629.png (120KB, 362x394px) Image search: [Google]
1386647193629.png
120KB, 362x394px
>>61211867
a-anyone?
>>
>>61213725
there is no single best choice
mullvad is good
expressvpn is good

>>61213752
OCSP desu
>>
>>61211017
>https://0x00sec.org/t/shared-thoughts-after-6-years-in-pentesting/2492
OP here, thank you too for your contribution.
I'll be adding it to the pasta next thread.
>>
>>61212002
Work on it every day.
>>
>>61212773
>what's wrong with
security though obscurity is a false sense of security
just sayin
>>
>>61214396
>obscurity
Do you happen to have some sort of mental illness?
>>
>>61194782
LISP
>>
>>61211867
MCSE
>>
>>61211148
something like:

read from stdin until EOF.
output stdin to stdout, but strip whitespace and replace with single newline.


or this:
(pic related)
>>
>>61214613
Why are you spoonfeeding a retard?
>>
You are probably not believing this so please check the calendar. Here goes.

=== /cyb/ News

> NSA updates patent portfolio for licensing
http://www.worldipreview.com/news/nsa-updates-patent-portfolio-for-licensing-14284

Just as you thought your perimeter had been under an on fire for a while, comes this:
>According to the NSA, a US government agency, the TTP creates partnerships between the agency and industry to ensure that the NSA’s investments in research find additional uses that will benefit the US economy.

Our US friends are not that known for their command of understatements. This guy, however, reaches new altitudes:
>Sudesh Kumar, CEO of Kupalya, a company that licenses from the NSA, called the portfolio a “game changer”.

Now that you have burned your severs and filled your routers with hot lead you may want to peruse the menu for the next few months of entertainment:
https://www.nsa.gov/what-we-do/research/technology-transfer/assets/files/nsa-technology-transfer-program.pdf
>>
>>61215261
What pretentious permavirgin uses English like that? Was this written by Linkara?
>>
what do I major in if I want to be pen tester and/or a software developer with an emphasis on security software development?

choices are:
>software development
or
>networks and security
>>
>>61214334
these threads may be some of the best on here but quit with all the undeserved bullshit praising it doesn't help
>>
>>61215348
Oh, how about someone who learned it in the UK? Far from the United States of Basements.
>>
File: 61J3GZz9mOL._SL1328_.jpg (107KB, 1328x1063px) Image search: [Google]
61J3GZz9mOL._SL1328_.jpg
107KB, 1328x1063px
I want to buy a wifi antenna. Any recommendations? I've heard the name Yagi mentioned around here, are they good?
Pic somewhat related.
>>
>>61216152
I recommend a wireless USB adapter and a sieve
>>
>>61216152
Yagi is a type of antenna, not a brand, and they are good for this frequency band. You can make these yourself using the NEC antenna design software.

Higher gain means greater directivity so you need to be more careful with the direction you point this in. Also **NEVER** look along the beam, even the reflected wave can be harmful.

If you do not know why you do need to read up.
>>
>>61216476
Thanks for the info, that all helps. Especially about the Yagi thing, that's good to know.
>>
>>61213072
Kinda hesitant to pass off 30 grand to some super secret 1337 h4x0r.

>>61213147
What do you mean during a bullrush? Isn't it better to buy up shitcoins when no one cares then sell at the bullrush?
>>
File: 1495762594890.jpg (57KB, 524x468px) Image search: [Google]
1495762594890.jpg
57KB, 524x468px
>>61216152
>directional wifi antenna
>>
File: 1469054709546.jpg (50KB, 631x796px) Image search: [Google]
1469054709546.jpg
50KB, 631x796px
>>61213339
Makes you stupid, should have been hoping for saved passwords instead.
>>
>>61194248
My other post disappeared, so reposting.

Has anyone tested openbsd's performance recently? When 6.1 was the current branch, mpv was really laggy on the pentium 4 I was testing on. I would love to use openbsd full time, but the performance hit is too much.
>>
I posted the essay at>>61211017> >61211035

>>61211928
I'm glad this turned from anther pointless insult of its kind to solid substance.
>>61212036 :
To elaborate a bit on the substance for those starting out:
1) Scraping/dorking for naming conventions then a spray attack vs. OWA (especially within a large enterprise or any company with high employee turnover)is viable and will be for the forseeable future,

2 Ruler is an awesome, flexible choice for any network where Exchange is in play. It doesn't get the credit it deserves (likely because you need to put some actual thought/strategy into maximizing Ruler's potential (kind of like Nishang's relationship with Powershell; Ninjacopy is an unsung hero).

3) Also, Responder (and DNS in general) has been helping pay my bills for awhile now. Netbios and LLMNR poisoning are magic (especially if GPO/LGPO is configured to make any allowances for NTLMv1 or LM).

4) If you figure out general quitting time for a shift (and the other strategical conditons are right), WPAD poisoning can reap wonders at 4:45pm on a Friday (I see very few DNS entries for .dat, employees will click right through the prompt on their way to the weekend, minimal occurrence of reporting to IT, clear text creds under the right conditions).

5) I have sat through numerous "security presentations" in the last 9 months from my employers Microsoft Rep:

Along with Pass the Hash (the more common techniques usually utilizing circa 1999 PSexec and the younger PSexec_psh versions), Microsoft is finally (evangelizing) taking mimikatz seriously 10 years too late (though Credentialguard is still mostly a joke vs the hype).
This makes harmjoy's reworking of Kerberoasting far more versatile and a gamechanger that should be futureproof for some time to come.
>>
(cont'd)

>>61214334 : OP, I am glad for this. I think the combination of cyberpunk sensibilities and InfoSec/NetSec ability provide the vision and skillsets this space needs to evolve (,all hats have a necessary niche in this environment).

>>61211790 >>61212208: Thanks.

>>61211948: Thank you. In a myriad of aspects, this field is about making the most with what you have.

>>61213198 : Haha...yeah it's me. I grew up in martial arts and have fought professionally. It taught me the value of experience, training and discipline, which are the keys to skill/knowledge (and ultimately experience).
>>
File: Screenshot_2017-07-04-19-27-29.png (451KB, 1080x1920px) Image search: [Google]
Screenshot_2017-07-04-19-27-29.png
451KB, 1080x1920px
i read through whatsapp's end to end encryption details and it seems safe.
i'm not a security expert, what do you think? os whatsapp safe?
>>
>>61212272
If you want something done about it, you need to exploit the issue yourself to make them aware.
>>
>>61218282
Well don't do this but maybe write something up to show something is possible. If you have a dedicated netsec team just notify them through email and it's not really your problem anymore.
>>
>>61213255
Don't waste time on the bachelor's just go to a CC for networking
>>
>>61213223
Check #/g/ftp on rizon.
>>
>>61218272
no, its still proprietary shit
only runs on backdoored devices anyway, so you should already be careful with what you say and who you say it to
>>
>>61219913
therefore it doesn't matter that the encryption method is open source?
also, does that mean i shouls abandon hope in terms of searching for a safe chat app on android?
>>
>>61220672
You shouldn't be using a smartphone if you care about privacy and security.
>>
Any tips for tricking out a Panasonic Toughbook CF-29 Mk.5?
>>
>>61194782
Esperanto
>>
>>61220672
The problem is never the encryption algorithm, it's the implementation. It doesn't matter how secure your encryption algorithm is if the app itself is compromised. Proprietary code can't be independently independently audited, so it's a crapshoot whether the encryption matters at all.
>>
guys, is NordVPN good?
>>
>>61221172
I used to use them - kind of expensive for what you get but certainly a good option
>>
>>61221308
pros and cons? (besides the price)
any other you would recommend?
>>
>>61214634
Why are you mad ?
Sorry for being a newcoder
>>
>>61221129
This.
This is exactly why you should try, at all costs, to use software that is open source and readily audited.
>>
>>61213280
What the fuck are you trying to say..?
>>
>>61202365

I just spent hours debugging their shitty assembly where a cable was shorting out and the machine wasn't booting. Servicing it with them would require $80 shipping.

Save your money and build it yourself.
>>
>>61221587
>build it yourself
>save your money and build it yourself
>implying building your own laptop is easy or cheaper than buying prebuilt

>>61202365
just buy T500 and install libreboot and distro of your choice
>>
>>61221673
>T500
Most people recommend either X200 or T400 for libreboot and because firmware, why do you say T500 is better?
>>
>>61221698
its bigger
>>
>>61221366
This place is not your helpdesk.

>>61221547
I'm pretty sure that's a bait shitpost.
>>
>>61213725
Mullvad, it has no logging at all and impressive cryptographic services.

>>61215261
This is pretty terrifying.

>>61215348
>Using flowers of rhetoric is bad.
I know this isn't a US mindset, but rather YOUR mindset and the mindset of many walking clichés in STEM.
Stop it.
You're part of the reason that everyone says engineers and programmers are poor linguists, when in reality, as shown above, they aren't.

>>61215479
Uhm, how about, no?
I'll praise who I want, when I want, you have (surprisingly) no authority over anyone on the Internet.
We aren't your parents (carers), autismo.

>>61217796
>OP, I am glad for this. I think the combination of cyberpunk sensibilities and InfoSec/NetSec ability provide the vision and skillsets this space needs to evolve (all hats have a necessary niche in this environment).
Precisely, well put.

>>61221172
I'd just invest in Mullvad.

>>61221324
>https://thatoneprivacysite.net/vpn-comparison-chart/
Search for NordVPN.
>>
>>61217784
Glad to see at least one other person here who could hack their way out of a paper bag

The non-ops people at my company have been saying credential guard will be the end of network pentesting as we know it, as 90% of my pentests are what i call "the credential theft shuffle"
I think not. Not only are there pretty strict requirements for enabling credential guard that will limit rollout, but it breaks a lot of SSO capabilities. Plus its not on by default.

As much as I enjoy network pentesting, I dont see myself doing this for very long. Once you've done a few pentests they really are all similar.
>>
>>61222038
Don't they always hype new forms of digital security for it to only cause zero days and increase exploit/attack surface of its own, because it is so monolithic?
>>
>>61221526
>>61221129
>>61220766
thank you anons
>>
>>61222463
As a continuation of >>61220766, if you MUST use a phone, use a cheap burnerphone, that isn't tied to name through a bank account or the such like.
I'd also advise to change it periodically, at least every month, though weekly or fortnightly would be best.
And to avoid tower pinging to be able to be used to trace the route taken with the associated number, have an agreed timeable for when the phone is on and off.
For instance:
>6am
>12pm
>6pm
>12am
Or:
>9am
>12pm
>3pm
>6pm
>9pm
Something along those lines.
>>
>>61210691
is that the one with NSA inside? which is the latest that we can remove the entire ME? i understand the more recent ones you can remove it partially.

>>61204615
yes it is morally wrong to work for the state

>>61204698
please don't be a space nigger, i'll be out there contracted to stop you.

>>61205035
i would be grateful if anyone from earth could profit from these resources. it means that everyone else will be wealthier from it. imagine being able to mass produce things that were previously unattainable due to the cost of input.

>>61205268
automation will make everything much cheaper. human labor is a resource that will simply be reallocated as any other in the marketplace. wouldn't your family like their own cook? nanny? housekeeper? security? tutor? this is only one example of what the future will look like. there is nothing to be afraid of.

>>61205437
i agree. we will just go around the government in every aspect. the state will be ignored and it will beg for attention while crying for control.

>>61205497
they will eventually try to stop and molest this trade as they do with all other trade we try to make but the decentralized nature of it will make it really hard for them

>>61210834
i don't believe that there should be a nasa but as long as there is one they should at least do something. i agree. resources would best be spent sending humans to mars to test groundwater for life and for space telescopes. nothing else, i think that Dr. Zubrin's Mars Direct plan is optimal. in addition to that they should only do space telescopes.

>>61217784
thanks
>>
>>61223110
>the state will be ignored and it will beg for attention while crying for control.
You mean like they are already? The future will be glorious, I hope.
>>
>>61197027
>DogecoinDark

y tho
>>
>>61222038
just like my everyday life
>>
>>61198976
>metformin

Yeah, it's cheap and effective at preventing things, but goat's rue (the herb it's based on) might be better. Induce some lactation now, anons.
>>
>>61223373
Far from the same coin. Hell you can ask the dev for details on twitter, he's always happy to interact with the community.
>>
>>61223402
What're some other based cryptocurrency then?
>>
>>61223905
Keep an eye on Coval. Devs are linking up with Zeronet.
>>
>>61223959
We live in such a glorious era, we'll soon be 'properly' living in an overt cyberpunk world (moreso than we already are).
>>
>>61224097
Yea, honestly its exciting and scary at the same time. We're on the brink of a new wild west era imo.
>>
Is the Intel botnet thing true? And if so, how bad is it?

>>61224097
>>61224152
I like to think of the times we're living in as "proto-cyberpunk". Sounds fun if you ask me, but I really don't like the idea of the NSA listening in on me all the time.
>>
>>61224097
it will not be a cyberpunk world until i can get a cyborg gf with hidden blades to cut people down
>>
>>61224152
Certainly, with all of these governments losing foremost digital control and secondly physical control.
It is rather amusing watching the globalists scrabbling for life, simultaneously with their death rattle.

>>61224190
I'd say we're 'proto-cyberpunk' at the moment too, but certainly trending toward it.
Too many people have high life and high tech, but that wont last forever with the ever increasing degeneracy of pop-culture.

>>61224191
Why not a qt Asian gf and a cyborg bodyguard?
>>
>>61224224
>globalists
>degeneracy
something smells off here
>>
>>61222038
I understand how NetPen in many shops could get redundant if you aren't there just to collect a check (especially testing Windows networks); for a few years (and sometimes still) it was/is ingress/Local privs then some combination of priv escalation, persistence, hash/creds exfiltrate/capture/dup, Pivot/PsExec/WMI/WMISpray, lateral movement/some variation of Pass the Hash to the win.

Now in many cases (and probably for the next 5- ten years) it can easily be ingress, than some combination of Responder/CrackMap/BloodHound/DeathStar (and whatever Powershell framework, tool or custom module/script you may need to fill in the gaps).

Fortunately I get a really varied amount of engagements, many with PLC, SCADA in play on critical infrastructure, which raises the stakes on a fuck up a (challenge I am eternally grateful for).

Credentailguard is the crusade of eyeless managers leading the blind; it sounds impressive to the manager and their managers when the Microsoft rep demos it. Meanwhile, they have 200 issues with GPO/LGPO that would better secure them but won't be touched during the Win 10 implementation.

ANd when they/their customers do get exploited, they can blame it on an "advanced actor able to circumvent Credentialguard!"

All of the latter are why I am trying to help those who really have an interest in this field.
>>
>>61224224
>Certainly, with all of these governments losing foremost digital control and secondly physical control.
>It is rather amusing watching the globalists scrabbling for life, simultaneously with their death rattle.

Huh. Gives me some more optimism for humanity's collective future.
>>
>>61224238
Ah yes, because 'globalists' is an inaccurate term for the wealthy elite, who often control the world's largest companies and provably bribe or extort the world's governments and other lesser corporations for their own ends.
Oh no, wait! It isn't!
And you wouldn't call children listening to Ariana Grande songs about getting fucked until you can't walk straight degenerate?
Get fucked. :)

>>61224249
Why do you think we've become more obvious in their actions and hide less behind a facade?
They're losing power.
>>
>>61224269
>*we've = they've
>>
>>61224269
find it hard to take those words seriously anymore.
i will just keep living my high tech low life.
>>
>>61221775
>This place is not your helpdesk.

What're you gonna do? UNHELP HIM?
>>
>>61224269
>They're losing power.
As evidenced by CNN doxxing that one Reddit guy about the Trump .gif earlier today.
>>
>>61206974

If people aren't checking their iptables rules on a regular basis...
>>
>>61224319
Not everyone is /pol/, some of us are actual classical liberals whos' lexicon is apparently now tainted by that cesspool.

>>61224362
Precisely, when they have to go to that extreme, just to push a narrative?
It smacks of desperation.
>>
>>61215440
It sounds to me like the first degree fits the second career and the second degree fits the first career. Of course you could always learn one in school and then learn the other in your own time.
>>
>>61224370
>just to push a narrative?
Plus, that one video of the guy from CNN admitting all the fake narratives is still on the web.

Maybe we ARE winning.
>>
>>61224390
We are.
Empires don't last forever, they never have.
Even the US stranglehold via being the worldwide reserve currency is weakening and cryptocurrencies will speed that up.
>>
>>61224381
hmm, thanks for replying, which one would be easier to learn in my own time and without university resources?
>>
File: 1495916056429.png (15KB, 85x88px) Image search: [Google]
1495916056429.png
15KB, 85x88px
>>61224468
>Even the US stranglehold via being the worldwide reserve currency is weakening
>>
>>61224370
well if it sounds like a duck and quacks like one
>>
>>61204456

>low tier b8
>>
>>61224498
It could either be a Cajun hunter or a duck.
Your point is?
>>
>>61213281

IBM sold the counting machines to the Nazis and has been trusted by the elites for generations. I'm sure the backdoors have an off switch that is generously shared with the right people.
>>
>>61217636

fast, cheap, secure: pick two
>>
>>61224546
>IBM
>Irritable
>Bowel
>Movement
>>
File: bringittyrone.png (2MB, 1488x837px) Image search: [Google]
bringittyrone.png
2MB, 1488x837px
>>61216152
I own this yagi antenna, imo I think its worth the 100 dollars, I also bought 10 foot rp-sma cable for it, but that went out after.. 5 years of use. It fits in my small messenger bag.
>pic related
>>
>>61224638
are the yagi antennas from ali not good?
100 is quite a bit more than most i've seen on there.
>>
>>61224638
How l33t is your h4x0r1n6?
>>
>>61223110
>they will eventually try to stop and molest this trade as they do with all other trade we try to make but the decentralized nature of it will make it really hard for them
They can at least ban companies from accepting or using them.
>>
>>61224727
>What is an online company?
>What is the black market?
Look how well banning things like drugs, fraud and alcohol have gone.
It wouldn't work.
The government only have power as long as their premise of authority, that is supported by 'threat' stands.
The minute that the threat level is greater than that generated by the state, the people can and do overcome it.
>>
>>61224779
Yep, and reminder DPR getting taken down was a borderline fluke since he ignored some basic precautions.
>>
>>61224807
Exactly, government frailty is all to obvious.
>>
>>61224824
*>to = too
>>
>>61224676
I have never tried them, sorry, if they're cheap enough to waste money to try them, I say go for it, maybe if they end up being good, I might buy one.


>>61224713
I found your ip address
>127.0.0.1

:^)
>>
>>61224845
>127.0.0.1
Oh shit, you found me! :^)
>>
>>61224638
Can you post some of your old ones? I used to love the Pokemon go edc and seeing how it's changed
>>
File: edcprogress.jpg (2MB, 2040x2984px) Image search: [Google]
edcprogress.jpg
2MB, 2040x2984px
>>61224892
I made this a while back, unless you want the other ones without being mashed into one photo, i will upload them.
>>
>>61205175
>>61224845
>>61224860
>using the smiley with a carat nose
>>
>>61224970
I use it as if I was on twitch spamming Kappa
>>
>>61224950
Looks great, I can read the labels fine.

Thanks mate, it's interesting stuff
>>
>>61224970
>not using the smiley with a carat nose
:^)
>>
>>61224970
|
|>
|
|3
|
>>
>>61225029
I wonder who's behind this post...
>>
>>61224950
another question, is that tp link model better than the green alfa adapter you had?
>>
>>61225039
Richard (((Stallman)))
>>
>>61224994
>using the smiley with a carat nose
>>
>>61224239
I've found that I am highly interested in vulnerability research and software exploit development, what sort of jobs in the security industry do you think would lend itself to that kind of interest? I'm not sure if there are many jobs besides government that focus on that sort of work.
>>
>61225053
>not using the smiley with a carat nose
:^)

>>61225045
>Richard *Stallmon
He's actually Jamaican.
>>
Okay guys, the CNN doxing people, what the fuck! I bet they are in partnership with the NSA and the CIA too in what is called the 'deep state' if they are willing to go this far. I am no Trump lover, but shit just hit the fan.

God save us all.
>>
File: mister_trump_young_father.jpg (65KB, 728x588px) Image search: [Google]
mister_trump_young_father.jpg
65KB, 728x588px
>>61225091
FAKE NEWS!
>>
>>61225090
>using the smiley with a carat nose
>>
>>61225102
^:')
>>
>>61194248
What should one do to develop the "security mindset"?
>>
>>61225102
>not using the smiley with a carat nose
:^)
>>
>>61225155
>using the smiley with a carat nose
>>61225128
>using the smiley with a apostrophe nose and carat hat
>>
>>61225170
>he thinks it's a hat
>>
>>61225131
What do you think it is? Do you mean a cyb mindstate, or a privacy orientated mindstate? What does a security mind state mean to you?
>>
>>61225170
>not using the smiley with a carat nose
:^)

>using the smiley with a apostrophe nose and carat hat
It's actually a quiff, he's Elvis.
>>
>>61225180
By "security mindset", I mean the intuition that security professionals have when they look at a system and quickly figure out how its vulnerable and how to go about exploiting it

>learn about basic buffer overflows
>download a vulnerable binary intended for teaching beginners about security
>mind is blank

Is there a way to "know" what techniques to use to solve a particular problem, or am i just retarded?
>>
>>61225218
Experience.
>>
>>61224779
>>61224824

I'm not certain if cyberpunk automatically equates with anarchist tendencies, or whether anarchists and criminals use the underlying principle of decentralization as a utilitarian motive to justify a perceived oppressive threat versus some unlawful activity, which self-reinforces the notion of "us versus them" black and white thinking.

The government isn't fundamentally threatening under a premise of authority, but serves as a structure to regulate society and civilization. While unfairness, injustice and criminality may exist within the system as a double standard to protect lobbied interests to prosecute under an aegis balance, condoning a black market is one thing but having organized crime use it as a destabilizing leverage under the lofty security of technology is another. The government wouldn't pose a threat if the activity is deemed legal. One would need to look into the ethics of realistically why the law is in place. When people overcome "the threat level generated by the state" then a destabilizing reform is in action and beneath this is an organized interest. As one may consider that black markets could be condoned as more profitable when stocks run out with competition weeded out. When you look at the rule of law, it's important to note that this is applied with the power of discretion which means that one doesn't just autistically apply everything by the book but it's a matter of rule. When people want to rule themselves let it be with morality of intention, but the very moment a step is taken outside of hubris and naiveté one may ask whether organized groups control a higher level of decentralization within a centralized structure as the mirror image butterfly effect is shown within an artificial ecosystem of darker markets. afaik the oppression would stem from machines and transhumanism mainly.

>>61224807

You've mentioned DPR, see how the founder of KAT got arrested.
>>
>>61225225
I see, that would explain it

I don't know if this is a silly question to ask, but is there a surefire way to quickly build experience?

If I want to get better at grokking assembly and find low level vulnerabilities, should I be writing my own assembly code, reverse engineering existing software, analyzing malware, or something else entirely?
>>
>>61225237
>Implying I support anarchy.
I don't.
I understand the need for the state.
Also, state authority is derived from threat, laws only function by offering a threat based incentive.
However, not everyone wants to break the law, yet that doesn't mean that people don't exploit it on a day to day basis.
Using means to decrease the threat level, such as a VPN, or a proxy, is part of the reason why much criminality occurs online.
Anything else?
>>
>>61225248
I'm sort of in the same boat as you currently, my approach has been to read about exploit development with books like Shellcoders Handbook and get better at knowing how to code something in a secure way so I can recognize when something is not coded securely (Secure Coding in C/C++ is a good book for this).

After you get a foundation, just start doing old CTFs and try your hand at vulnerable VMs. Also, learn basic reversing and play around with binaries in a debugger like GDB or Immunity Debugger to get a feel for what is actually going on at the lower levels.
>>
>>61225040
you mean the 703n (blue) or the mr3040?
>>
>>61225307
Thanks for the tips, I'll start in that direction as well
>>
>>61225341
the latest one i mean, that's the one you are currently edc'ing right?
>>
>>61225353
I am edc'ing both

>mr3040 is in use, and can't get to it right now

703n the blue one, I use that for overnight wps attacks, nothing too special, I might swap that out for rpi zero, idk yet.
>>
>>61225305

I'd say as a reversal laws function as a constraint by offering a freedom based incentive. Not everyone wants to be constrained within that freedom and the exploit of an edge is to make a change or equalize a vulnerability to use as a tool to threaten or gain an advantage.

VPN/proxies are just tools and more a matter of security and privacy without being triggers for criminality to occur although the natural proxifying agent of digitalization may induce that behavior. Criminality exploits and uses any means that decrease the risk of detection from law enforcing factors. With regard to BTC and cryptocurrency, at the same where the fundamentals can be right but the use can be nefarious, a capitalization on that edge occurs based on a cashless society with transparency predominant, where all laws would need to be respected. This lack of middle ground and incentive for personal gain is made possible in a bubble of middle-men rather than within the system. One may ask if birds of the same feather really flock in the same direction.
>>
>>61225488
If A=true, B=true
B:
Governments litigious control and thus the root of their power is based upon threat.
A:
If you do X, we'll warn you, a warning that can lead to threatening action.
If you do X, we'll take D amount of resources away from you.
If you do X, we'll imprison you for Q amount of time.
If you do X, we'll torture you.
If you do X, we'll execute you.
All of the above come with the 'social threat' of being alienated for performing X.
A=true
Therefore, B=true.
Quod erat demonstrandum.
>>
>>61225341
>>61225350
>>61225353
>>61225384
>>61225488
>>61225590
The thread is dead, long live the thread: >>61225756
Thread posts: 330
Thread images: 41


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.