@LucasKauffman After plowing through the Symantec site to figure out what patches might be available for PGP Universal I'm about to call my life a night.
So, I have U-Verse home internet. Overall, no huge complaints with the service, but the equipment's a little lacking; notably, the 2Wire 3600HGV home gateway has no WiFi-N capability, which was a step down from my old ADSL connection run through a Cisco E3000 Wireless-N router.
A couple of weeks...
I am looking for a mentor. I am proficient in python, C, some ASM. I understand Berkeley IPC and a good bit of network architecture. I want to become a proficient penetration tester.
@Andrew The path to become a strong Penetration Tester is long and difficult. On your quest you shall encounter many perils and temptations! You will have to pray to the @Rory s and ask for their guidance and advice. (as written above)
I was reading this article which talks about a new attack against TLS being called Lucky Thirteen. It claims to allow repeatable MitM attacks against HTTPS connections.
It's described as being fairly impractical to actually carry out:
Each tweak attempt causes a TLS session to terminate, ...
@LucasKauffman pretty easy, kind of like 5th grade reading level. That's why @RoryMcCune did not pass the first time, and why they're both all nervous and everything.
@AviD Oh - totally. In my talk I did chat about SANS etc for technical practitioners/delivery etc., so this slide as more an indicator and yes...snr management happens eventually
@RoryAlsop I meant, as an experienced and senior practitioner, all certs are useless (except for certain gov't RFPs...), until/unless you want to apply for management.
@TerryChia i had tried on same plateform i can encrypt - decrypt each file and it works fine for C# and java both.. but when it comes to cross plateform its not working
@TerryChia i tries AES encryption for JAVA and RijndaelManaged for C# or .NET
@SilentKiller if the algorithm is the same it should work (assuming no issues like big/little endian, CR/LF etc) - so perhaps the implementation you have is not quite the same
I had tried encryption and decryption in Android, Java, C#, .NET respectively i can encrypt and decrypt files in this languages[technologies]
now, My problem is when i Encrypt the file in C# or .NET i can not Encrypt that file in Android or in Java..
I encrypt the file with RijndaelManaged in ...
@RoryAlsop didja notice that most of the q's in that tag really have nothing to do with security theater|re?
clueless users probably type in "security" (because of course you need to mention on a security site that the question is about security, of all things), and grab the first tag that pops up.
The cipher text looks like this:-
dO+4ubRqxB801u3ZLZx2A5dvmHCbw3MnQYxDkhSRLoOJ7CFiPg7Xxhzf1T8g69iB
+JLEKvBlESQJTnSJkEEesgBnVAwrAz/v9MGgVp//gOV9xlyUca7UOI5kZglQq6WX 8V3NaEQmzAXFb1sMvlOukKjaQEvEGIOUxaWM5TC8f1w=
I also strongly suspect that the encrption key is
ABCDABCDABCDABCDABCDABCDA...
@CodesInChaos hahaha - I'm willing to forgive bad English from people who don't have it as their first language, but all languages have rules of construction that allow adults to get concepts across. Failing them is just.... annoying
> To abuse the metaphor a bit further, worrying about the "lucky thirteen" is a bit like worrying about corrosion on board the Titanic: a valid concern in an abstract sort of way, but not as pressing as other issues related to boating.
How does @Thomas come up with such amusing metaphors every day?
I agree, I can't keep up, I just finished learning backbone.js and now I've found out on HN that it's old news, and I should use ember.js, cross that, it has opinions, I should use Meteor, no, AngularJS, no, Tower.js (on node.js), and for html templates I need handlebars, no mustache, wait, DoT.js is better, hang on, why do I need an HTML parser inside the browser? isn't that what the browser for? so no HTML templates? ok, DOM snippets, fine, Web Components you say? W3C are in the game too? you mean write REGULAR JavaScript like the Google guys? yuck, oh, I just should write it with CofeeSc…
@RoryMcCune I'm sure I would be if I was able to learn ruby on my own terms. Having it forced down my throat at work by management who chose it because they read about it on techcrunch is not a conducive learning environment.
@RoryAslop Yes, I've read a few of them. I didn't find them particularly helpful, although I scraped the publicly available information about the curriculum for GPEN and GXPN from SANS and I've been using that as guidance for training in my VM lab.
@RoryAslop Thank you. @TerryChia I've worked with rewriting some of the exploits in exploit-DB from C into python and run them against vulnerable VMs like metasploit...so the network/os stuff was where I started and was very interesting, but then I worked on Kioptrix Lv3 for a while
@TerryChia and I got a lot more into web vulnerabilities
@RoryAslop (As a side note I have a technical interview in 8 days..haha)
@Andrew if you just click on the reply icon to the right of posts, it saves you misspelling people's names, and helps them see what you are replying to :-)
@TerryChia I understand those attacks well in theory, and I'm not bad at scripting/ASM, but I'm probably not familiar enough with operating systems to build an exception and subvert stack protections
> That's right -- Curley gamed the system so hard, the system took off its hat and openly applauded his giant balls. Then it muttered a torrent of curses and tossed him his fucking money.
In the US each state has its own laws governing lotteries and the like, so you would want to check with your specific state. I don't see why it wouldn't be legal, you just may need to follow some rules first depending on how that state classifies raffles.
I was reading this article which talks about a new attack against TLS being called Lucky Thirteen. It claims to allow repeatable MitM attacks against HTTPS connections.
It's described as being fairly impractical to actually carry out:
Each tweak attempt causes a TLS session to terminate, ...
I had tried encryption and decryption in Android, Java, C#, .NET respectively i can encrypt and decrypt files in this languages[technologies]
now, My problem is when i Encrypt the file in C# or .NET i can not Encrypt that file in Android or in Java..
I encrypt the file with RijndaelManaged in ...
The cipher text looks like this:-
dO+4ubRqxB801u3ZLZx2A5dvmHCbw3MnQYxDkhSRLoOJ7CFiPg7Xxhzf1T8g69iB
+JLEKvBlESQJTnSJkEEesgBnVAwrAz/v9MGgVp//gOV9xlyUca7UOI5kZglQq6WX 8V3NaEQmzAXFb1sMvlOukKjaQEvEGIOUxaWM5TC8f1w=
I also strongly suspect that the encrption key is
ABCDABCDABCDABCDABCDABCDA...
