Root Access

Journeyman Geek

00:01

telegraph.co.uk/news/2017/09/05/… stay strange bristol. stay strange.

Burgi

@JourneymanGeek its gone downhill since you left

> I'd certainly be open to seeing her again.

one to tell the grandkids!

Bob

00:19

@bwDraco schneier.com/blog/archives/2017/09/security_vulner_9.html

ubu16

00:44

@fixer1234,Hi,sorry if I'm disturbing you.I just say bad news

That REDACTED Guy

@Burgi Since he left Bristol...?

Journeyman Geek

@ThatREDACTEDGuy I lived there for a bit, pre SE

That REDACTED Guy

Oh

Journeyman Geek

01:29

So, I forgot to take myself off the old IT support whatsapp group...

there's a message with an unplugged VGA port, and someone going "I have no idea where it goes, and the monitor dosen't work"

(just took myself off it)

Bob

01:40

@JourneymanGeek "someone"?

Journeyman Geek

@Bob oh, the lady 2 tables up...

but that's not important ;p

Bob

sometimes I see these things and I'm like...

Did you not play with one of these as a kid?!

plug, meet port

Journeyman Geek

;p

we also have people routinely getting confused they need admin rights to adjust the volume....

(the speakers are plugged into the wrong port, and that triggers off the troubleshooter)

that's colour matching...

oh my god. A THREE YEAR OLD COULD DO MY OLD JOB!

2

Bob

@JourneymanGeek I thought your job was ~~filling in~~ filing timesheets? :P

Journeyman Geek

hm. I should have done those in crayon...

then put it on a wooden table, and photographed them.

user226528

01:50

Hey guys. Oh, pretty ornamental cube!

That REDACTED Guy

@JourneymanGeek Solution: replace all users by three year olds. Production will skyrocket. And they accept candy as payment.

Bob

> Crossing border and in transit to carrier hub

Journeyman Geek

@ThatREDACTEDGuy teachers kept passing me candy ;p

user226528

I swear I am going crazy. I have confirmation that coffee has sleep-inducing effects on me.

Journeyman Geek

When I left, I gave one of my co-workers 2 chupachups and a strawberry alpenlebe

user226528

01:54

Why?

fixer1234

@ubu16, bad news?

Journeyman Geek

cause I was clearing my desk, and I didn't want it? And unexpected candy is better than unexpended ordinance ?

user226528

O.o Unexpected unexpended what?

user226528

The "didn't want" part makes more sense though.

Bob

'tis a joke

user226528

01:56

Oh! Okay.

user226528

Is this the whole joke, or part of it?

Journeyman Geek

yes

@FleetCommand it is a play on similar words. Like "I'd rather have a bottle in front of me than a full frontal lobotomy"

Bob

@JourneymanGeek heh, not heard that one before

user226528

@JourneymanGeek I am familiar with it. It is called alliteration. But until today, I had not seen it used for saying patent nonsense.

user226528

Hence my confusion.

Journeyman Geek

02:00

freakonomics.com/2010/04/08/…

... what else is alliteration for, nonsense, and ubuntu version names, but I repeat myself...

Bob

@FleetCommand ...I don't think that's alliteration

It's a pun.

user226528

@JourneymanGeek Actually, if you want to hear a real joke, Final Fantasy VII OST has a track named "Full Frontal Assault". LOL. They had the decency to rename to "Let the battle begin" later.

user226528

Pun

The pun, also called paronomasia, is a form of word play that exploits multiple meanings of a term, or of similar-sounding words, for an intended humorous or rhetorical effect. These ambiguities can arise from the intentional use of homophonic, homographic, metonymic, or figurative language. A pun differs from a malapropism in that a malapropism is an incorrect variation on a correct expression, while a pun involves expressions with multiple correct interpretations. Puns may be regarded as in-jokes or idiomatic constructions, as their usage and meaning are specific to a particular language and...

bwDraco

@Bob Not too sure if the SURFboard SB6141 is affected...

Bob

@bwDraco idk, just thought you were on AT&T

bwDraco

02:11

...this vuln appears to be limited to certain Arris gateways that contain built-in routing functionality.

tomsguide.com/us/arris-att-router-modem-flaws,news-25787.html

> Every Arris network device — modem, router or gateway device, which combines a modem and router [...] had a secret firewall bypass on port 49152.

The SB6141 is not a router. It is a standalone modem.

It's not a layer-3 device and doesn't provide a firewall.

Ramhound

I think my vonage modem was DDOS my router...

It refused to connect to the vonage network until I performed a reboot on my router, odd

@bwDraco If you can connect a device by LAN to the SB6141 (which you can) then it's possible you are affected by that vulnerability.

(very familar with Arris modems).

The good news, even if you vulnerable against that vulnerability if you connect it to a router, you no longer are.

bwDraco

There's a router in front of this modem. It has a rudimentary firewall.

Again, the SB6141 is not a router or even a switch. It's just a modem. It only has a coax connector and one Gigabit Ethernet jack. Yes, it does expose a simple Web interface at 192.168.100.1, but it's mostly diagnostic information about the coaxial link.

Ramhound

Does your model have a NAT/Gaming tab though?

bwDraco

02:26

No.

Ramhound

This article is really poorly written.

bwDraco

Now, it does have an internal DHCP server, but that's a layer-7 capability which doesn't require anything like a firewall. It also operates on the 192.168.100.0/24 subnet, which the internal network does not use.

Ramhound

Are you renting the device or did you buy it yourself? I have a strong suspicion these flaws only apply to the AT&T modems

bwDraco

We bought this modem at retail.

Journeyman Geek

....

bwDraco

02:29

The vuln in question is one that affects the firewall on certain Arris gateways at layer 3. There is no firewall on this modem. It is not a router.

Ramhound

then your model isn't vulerable

bwDraco

Any functionality of this sort is the responsibility of the router in front of it. We have a NETGEAR Nighthawk X4S (R7800) providing the routing, switching, and QoS for the home network.

Bob

@JourneymanGeek ?

Journeyman Geek

I fscked the wrong partition

Ramhound

@bwDraco - The source blog doesn't make that same statement. TomsGuide FAIL

Bob

02:33

@JourneymanGeek As in, fsck, or as in fsck?

Journeyman Geek

former

Bob

@JourneymanGeek cancel it?

I tend to do my fscks with dd :D

Journeyman Geek

naw, the other partition is dine

my boot partition has issues

Bob

o.O

Journeyman Geek

so livecd boot, and do it again

(power outage)

but its x86, its trivial to fix

....

still not booting

ugh

Journeyman Geek

02:56

ah!

YES~

system is back up

my.. hard drive vanished

Ramhound

that's isn't good

Journeyman Geek

eh, I throw in random drives in those

I ought to just use an external

Bob

06:54

You use an ink composed of parts of your own blood, and do a DNA test. Then you can only be fooled by an identical twin, which is the usual risk level for mathematical hypotheticals. — G Tony Jacobs 16 hours ago

Journeyman Geek

07:12

I have one of those particularly complicated errand runs ....

djsmiley2k

@JourneymanGeek But you don't work there anymore! :O

Journeyman Geek

Naw. For parents

Yanno how it starts with one thing.... Next thing you know...

djsmiley2k

yup :D

glad to have my own house

now I have to run my own errands D:

Does a bomb half the size, make an explosion half the size?

ffs I did it wrong agian \o/

Andy K

morning

djsmiley2k

Hi andy.

Meloman

07:24

Hi

djsmiley2k

Ok, why is that not changing...

450Kg bomb found in sussex - 'Dozens of familys moved'

Meloman

I have a question about download a file and the upload it in sh script (with cron every thursday). But I don't know where to post my question.

djsmiley2k

there we go

@Meloman su or l&u

if it's a very simple question I can likely answer it right now

Meloman

ok thanks, I'll post it right now.

Boris_yo

Yo!

Journeyman Geek

07:27

@djsmiley2k not really.

djsmiley2k

@JourneymanGeek k, maybe that explains it then

or maybe less populated area

Boris_yo

@JourneymanGeek Should I apply for IT course and get certification just because this industry has long-term viability in near future?

Journeyman Geek

Basically you could have different explosives. Or even inert bombs

Boris_yo

I love PC and tinkering with parts etc. I started CCNA but it appeared boring to me.

I was intending on going through course in manufacturing profession but friends say why would I need it. IT professionals get higher salary and besides, manufacturing jobs will be replaced by robots etc.

Meloman

@djsmiley2k I need to automate a task that downloads an XML file on a https:// web server (with authentification) and upload it on an FTP server (with another authentification). So I think the best approach is to use WGET or CURL to download the file and lftp to upload !?But I don't know how to script it in .sh file to program it with cron (every thursday at 8 AM). Have you got an example ?

I posted it on SU a few minutes ago.

djsmiley2k

07:34

@Meloman for running commands, you simply put the entire path to the executable + the arguments you pass to it in the sh file

#!/bin/sh

#command to run the wget
/usr/bin/wget <arguments> <url>

#maybe check the file now exists?
if[ -e x.xml ]
then
    /usr/bin/lftp something about credentials and a file
else
   echo "The file $x doesn't exist!"
fi

Something like that

Meloman

it seems so easy :D

I'll try...

djsmiley2k

@Meloman oh it is

it can get complicated fast ;)

@Meloman some of my own bash scripts here github.com/djsmiley2k/smileys-random-tools

most are terrible

but they give you an idea

Infact this one uses wget - github.com/djsmiley2k/smileys-random-tools/blob/master/…

Meloman

thanks a lot

crazy !

my playground is rather PHP

djsmiley2k

i know a lil' php

enough to get by

Actually I'd say the same of bash and sh too

ok chrome wtf

i'm connected to the same site 3 times

one of them shows as secure, the other two don't o_O

Bob

@Meloman @djsmiley2k I want to pull a @BenN and say "you can use PowerShell!" :P

Meloman

07:48

Well Powershell means Windows world

djsmiley2k

imgur.com/a/fkIJW

Meloman

I try to stay as far away as possible from this world

Bob

@Meloman You might've missed the memo, but github.com/PowerShell/PowerShell/blob/master/docs/installation/… :D

djsmiley2k

@Bob lul

the point of using sh is that it'll run almost anywhere, without anything installing

Bob

@djsmiley2k Probably insecure active content on the page.

djsmiley2k

07:49

it's the exact same page @Bob

Burgi

morning

Bob

@djsmiley2k Not necessarily.

It could be including a different <script>.

If a <script src="http://blah">, it's insecure

djsmiley2k

Also i got imgur.com/gallery/QFtrL on this

@Bob will dev mode show me quickly which bit is insecure?

just out of general interest, it's not actually important..

Bob

@djsmiley2k devtools should tell you why

it used to say directly in the popup but google did googly things and moved it

Meloman

@Bob ok, Powershell on Linux why not... but I think bash script will work.

thanks @Bob and @djsmiley2k

Bob

07:53

@Meloman I wasn't being entirely serious; it's a bit of a running joke in here :P

@Meloman chat.stackexchange.com/…

Meloman

@Bob The best is to use <script src="//blah" on every css, images, js, ... when you make your pages, then if you are in SSL it uses https and if not it call your assets with http.

:D ok, my english is not sharp enough to find every jokes hidden in conversations

Burgi

wait... PowerShell is a joke????

Meloman

@Burgi we are talking about the Microsoft Powershell technology released on Windows Server since 10 years ?

Journeyman Geek

@Boris_yo no. IT is horrible and you are mad to want to work in it. Herd sheep. Better job. Friendly co workers.

@Meloman iirc there's Linux powershell ports now

Burgi

@Meloman i refuse to hold up a sarcasm sign while talking to internet people ;)

Bob

08:01

@JourneymanGeek But then your users are bleating mad.

(I'm so sorry...)

Journeyman Geek

@Bob not so different.

Meloman

Ok, but if I can work without it, I prefer. It has no sense to use a "ported" Micro$oft solution in OpenSource world unless I am obliged to do so

Journeyman Geek

It's a baaaaaad job but I herd someone has to do it.

@Meloman one of our regulars is a bit of a powershell enthusiast. It's a running joke.

Bob

"Micro$oft" I'm done here.

That got tired decades ago.

Decades. Plural.

As in, more than one decade. At least two.

Journeyman Geek

Dog centuries ago? :P

Bob

08:05

*shrug* it comes across as incredibly childish

same as anyone who says "Crapple"

Meloman

Ok, so men, I would talk with you all the day if I can, but running out of time. Thanks for this great moment of philosophy :)

Burgi

08:33

^dogs/foxes/viper pilots/etc...

Journeyman Geek

@allquixotic youtu.be/utfbE3_uAMA (since you're a fan of rossman, and the closest thing we have to a apple fan ;p)

Meloman

09:09

@djsmiley2k still here ?

I writed my bash script

djsmiley2k

=)

Journeyman Geek

wrote

Meloman

sorry

wrote

I opened a room to discuss about

Discuss about a bash script not working

Bob

LG G5 Default Ringtone (Life's Good)

►

Meloman

for me the Ericsson T28S is the only I use. still

Journeyman Geek

09:20

I need a lawn, so I can yell at kids to stay off it.

djsmiley2k

can a mod visit chat.stackexchange.com/rooms/65227/…

and remove @Meloman's passwords from the history plz

Journeyman Geek

done, unless I missed any

djsmiley2k

ty

it was just in the script

Meloman

they are modified

my passwords are modified but keeping special chars

Journeyman Geek

ah

oops

@djsmiley2k requested I remove them sooooo

Meloman

09:30

all creds are modified with random ssdfgsdfgreert chars but I keepd special chars because i't my actual question, what and how to escape some chars

because I think the issue is with special chars

djsmiley2k

yeah sorry @Meloman I thought you'd put your real password at first

hense I asked a mod to remove it, for your safety ;D

Journeyman Geek

;p

Meloman

no problem :)

djsmiley2k

09:53

twitter.com/TamithaSkov/status/905439724021485568/photo/…

Did someone in the Carribian dosomething really bad?

now even the sun hates them

Boris_yo

10:43

@JourneymanGeek Nor sure if sarcasm or not...

Any good free email service?

Preferably one that you can pull incoming email from to Gmail...

Tried ZOHO and Yandex but their SPAM filters are too strong to let in some of email.

They do not even get to SPAM folder.

djsmiley2k

@Boris_yo why not gmail?

Boris_yo

@djsmiley2k I have main account there but I don't want to register it on some of websites.

Bob

11:05

Then make another gmail account...

djsmiley2k

@Boris_yo create more accounts

you can have as many as you like

I have 2 main ones, one is my 'normal' address, one is my 'real name' and I use it for job applications

its just setup to forward the emails to my main one

Boris_yo

@djsmiley2k No. They require phone number associated with each. I only have 1 number.

djsmiley2k

they do o_O?

Mokubai

I'm pretty sure they don't

djsmiley2k

they ask for one

i gave them the same one again

they accepted it. shrug.

they even asked my 'current' email address, so I gave them that as well ;D

Welcome!

Your new email address is [email protected]

yup, just go to the top right, click your 'icon', change account -> other -> create account -> fill it in -> boom, done

Just took me 10 seconds

Bob

11:22

@Boris_yo The phone field is optional...

unless that's a new requirement? :S

huh, that is new

o.O

Burgi

11:37

they've required a phone number since 2008

djsmiley2k

they either don't validate it, or don't care about duplicates, either way

Avery

You can use the same number

djsmiley2k

^^ indeed, as i demostrated

Burgi

iirc they let you have up to 10 accounts on the same phone number from the same IP

djsmiley2k

And you can always use the +spamisnotwelcome stuff too

rahuldottech

12:26

hi

djsmiley2k

13:00

sup @rahuldottech

rahuldottech

I need a damn break

djsmiley2k

sup?

need to rant?

Boris_yo

@djsmiley2k No, some websites do not accept "+"

So you can use only dots anywhere up to @

Gmail ignores dots when accepting email with address that contains them. So email address with dots is treated differently by websites than it is by Gmail.

rahuldottech

@djsmiley2k Would, but it's personal stuff not suited for a public chatroom

Journeyman Geek

13:22

Boris_yo

@JourneymanGeek Codebreaker?

djsmiley2k

@JourneymanGeek I lol'd

rahuldottech

@Boris_yo Someone who breaks codes

djsmiley2k

@Boris_yo not sure what your question is?

they broke Enigma

amongst other things...

@JourneymanGeek At first I was like '....This guy is an idiot', then I got it. ;D

@Boris_yo I do not use any sites which are not rfc compliant! :O

@rahuldottech aurgh :(

Boris_yo

@djsmiley2k Why guy calls them Nazis if these people helped defeat Hitler?

rahuldottech

13:27

@Boris_yo NOOOO

djsmiley2k

That's part of the joke @Boris_yo

'Listening to' as in listening to their encrypted comms, to figure out enigma

rahuldottech

Listen to Nazis == Listen to the Nazi codes so you can break them

djsmiley2k

It took me 3 re-reads before I 'got it'

Boris_yo

Ah...

djsmiley2k

2 mins ago, by djsmiley2k

@JourneymanGeek At first I was like '....This guy is an idiot', then I got it. ;D

Burgi

13:29

its a good day out if you are in milton keynes

especially if colossus is running

Boris_yo

I think dating sites are a mess these days... System looks for any small action you take like viewing profile and presents it to profile owner as an attempt of me wanting to chat. And viewing picture sends them notification as if I am interested in them.

When was last time I have been on a dating site? 3 years ago or so and there were no things like there are are today. All these notifications, like/dislike photo etc. and these games that try to get people take action.

Burgi

14 hours ago, by Journeyman Geek

http://www.telegraph.co.uk/news/2017/09/05/woman-rescued-fire-brigade-trying-ret‌rieve-poo-date-mishap/ stay strange bristol. stay strange.

it could be much much worse

Boris_yo

There are also these profiles that are really bots because they instantly message you and like you...

rahuldottech

@Boris_yo Pretty sure you should be using dating apps not websites...

djsmiley2k

@Boris_yo because you are the product, not the customer

Boris_yo

13:33

@rahuldottech Same for apps...

Burgi

i've been told that match.com is the best

Boris_yo

@djsmiley2k If I don't pay?

@Burgi Is it for US audience?

Burgi

no?

rahuldottech

OKAY WTF

Burgi

or you could just try chatting up girls in the bars?

Boris_yo

13:34

@Burgi I doubt about its popularity in Eastern Europe, among Russian audience...

rahuldottech

THIS ^

Boris_yo

@rahuldottech Barz?

djsmiley2k

bazz

it's like jazz but heavier ;D

Boris_yo

It turns out that I was not blocked by that girl as I inquired website support. The profile was removed...

Burgi

drop the bazz?

@Boris_yo seriously dude, move on

rahuldottech

13:36

@Boris_yo Why would you inquire support, man?

Boris_yo

Yet, it still is publicly available for non-logged in users?

rahuldottech

FIRST RULE OF DATING: TAKE IT EASY

I wouldn't date someone who got so worked up over a single girl whom he didn't know

Boris_yo

@rahuldottech Things were getting serious and I felt there is potential...

Burgi

@Boris_yo clearly she felt otherwise

Boris_yo

@Burgi I got email later from email address that had her name in it...

djsmiley2k

13:38

@Boris_yo because people click things!!!

Boris_yo

That was week after, I was surprised to discover only 1 photo and it was not her.

djsmiley2k

@Boris_yo bot/hack/scam detected

3

Burgi

+2

rahuldottech

+2k

Burgi

take up cooking classes

Boris_yo

13:40

@djsmiley2k But conversation was so real. I told that I did not understand Estonian then she talked in Russian. Then after I said I am temporary here she said we could try... All was very real.

Burgi

@Boris_yo scam

Boris_yo

I can't believe someone would sit and phish and do all that for 1 email...

djsmiley2k

I love how the whole world is like "We're sending flights to help the carribian".... did they miss the memo that the airports have been flattened?

@Boris_yo lol..... i can.

@Boris_yo I had a chat with a lovely bot the other week on psn

she chatted to me for 3 days

before going 'oh and me and my friend were just talking, I'm about to go to work...'

then links me to her 'camsite'

@Boris_yo 1 email what?

Boris_yo

Plus, it's one city, not entire country. Potential market to scam is not big...

Burgi

doesn't matter

Boris_yo

13:42

I can't see the benefit. Time spend versus benefits...

rahuldottech

@Boris_yo Dude.

Move on

Boris_yo

Yeah but I previously experienced scammers on dating sites and none were like this one...

Burgi

they will have multiple accounts going, lots of guys to "chat" to

djsmiley2k

bbc.co.uk/news/world-latin-america-41172545 -- why do they think the tornado will turn towards florida?

Boris_yo

Normally women do not initiate conversation?

djsmiley2k

13:43

@Boris_yo time is free if you have no work to go to.

Boris_yo

Darn... I was owned! FUK!!!

That's some high-class social engineering then!

Burgi

it happens

go have a beer and chat up some girl in a bar

Boris_yo

Must eradicate the scammer from this earth \-/

Revenge...

Ben N

D:

Burgi

@djsmiley2k its not a tornado...

Boris_yo

13:46

@Burgi The problem is that bars are for 1 night stands.

I am looking for a long-term stand.

rahuldottech

@Boris_yo NO

WHO TOLD YOU THAT

Boris_yo

@rahuldottech Read on some dating forum.

rahuldottech

##triplefacepalm

I Am A Bot

@rahuldottech That didn't make much sense. Maybe you meant: triplefacepalm

Avery

well

I Am A Bot

13:47

Avery

bars are not for that, but bars are more for that

rahuldottech

> dating forum

Avery

like, you're more likely to encounter people like that but like you're more likely to end up in a LTR than on tinder

Boris_yo

@rahuldottech You could show mercy and do a double facepalm at most... I am a long member on Root Access.

Burgi

heh

djsmiley2k

13:51

@Burgi Sorry, hurrican.

@Boris_yo met my wife in a bar

16 years later, it's one damn long night.

Boris_yo

@djsmiley2k Oh...

Yeah.

djsmiley2k

So you went on a dating site

it said 'don't get anywhere but this dating site, everything else is fake' and you believed it?

Andy K

@djsmiley2k I did an internship for a dating site

Boris_yo

@djsmiley2k I saw an ad for TWOO app on Facebook with good looking woman which I was interested in and hoped to find her there. I did not find here there but another woman messaged me. That picked my interest and it went on. The website was easy to register on and navigate. I have not been on a dating site for a few years and this one appeared to be very dynamic with action etc.

@AndyK Willing to share something from behind the scenes?

Andy K

@Boris_yo pot smoking in the office

@Boris_yo sexual teasing/flirting from one of the boss who happens to be gay to another guy working for him

Discuss about a bash script not working

Transcript for