The DMZ

Gilles

12:00 AM

@ThomasPornin yeah, it does

actually here the permissions were r-s--x--x, i.e. a setuid executable

you can't attach to the program with ptrace afterwards, but you can start it under ptrace

oddly, with a setuid binary, you can't read /proc/$pid/maps or /proc/$pid/mem (without being root)

but hitting the program with PTRACE_PEEKTEXT or similar works

and you can find the interesting addresses with PTRACE_GETREGS

TildalWave

@AviD Add the link to the video in the comments, this is crazy fun. Now I wanna know if it'd be possible to land it on a peer with a dive jump :))

@AviD 55mph FTW!

Iszi

1:47 AM

@AviD Protip: Don't wander around a government installation, even properly badged and authorized, wearing a hat, black military-style jacket, beard, and backpack. Especially don't do this in front of little old ladies who can't be bothered to ask you for your ID before calling security behind your back.

D3C4FF

3:09 AM

pop quizz time!

I've rooted a SQL server(lol winXP), added myself as a local admin, enabled RDP via xp_cmdshell but i still can't seem to connect...

I get "The connection was lost due to a network error"

Google tells me that this is due to firewalling. Seems logical.

I've done netsh firewall add portopening TCP 3389 "Remote Desktop"

All seems good.

But i still can't connect.

Suggestions anyone/

Same error still

Jeff Ferland

3:42 AM

YOLO Crypto

@yolocrypto

Crypto is hella YOLO!

10 tweets, 142 followers, following 5 users

Stack Exchange

4:17 AM

So far Voyager 1 has 'left the Solar System' by passing through the termination shock three times, the heliopause twice, and once each through the heliosheath, heliosphere, heliodrome, auroral discontinuity, Heaviside layer, trans-Neptunian panic zone, magnetogap, US Census Bureau Solar System statistical boundary, Kuiper gauntlet, Oort void, and crystal sphere holding the fixed stars.

D3C4FF

4:29 AM

Just out of sheer interest... how old are people here? I get the feeling most of you are a bit older than me (what with having kids and all...)

Terry Chia

@D3C4FF 18.

D3C4FF

Eyyy! sup @TerryChia

Thats fairly young. You still in highschool?

Terry Chia

@D3C4FF I'm in something called a polytechnic, not sure if they have those where you live. I am taking a diploma in infosec. :)

@RoryAlsop is practically ancient.

@ThomasPornin is ageless of course, being the Bear God and all.

D3C4FF

@TerryChia Yeah, i'm familiar with them but they call them TAFE in Aus...

something along the lines of 'trade' school.

Terry Chia

0

A: Authorising use of apps from a public store with no back end service

Your requirements appear to be quite contradictory. I am going to suggest a scheme which may or may not be feasible for you to implement. You decide. I suggest that the app you submit to the public app stores not contain any of the sensitive information. Instead, the application should provide a...

Anyone has a better scheme for his requirements?

TildalWave

5:22 AM

Ah bloody hell, I was writing an answer to some question for at least 15 minutes and then OP deleted the question LOL. It wasn't even a bad question ("What is w2 token authentication?").

OK, back to bed! Cheerio!

Bailey Rowland

Hello

TildalWave

Wow hey @BaileyRowland IIRC it was you asking about W1/W2 authentication?

@BaileyRowland Hello ;) You know you're making me sit here in my P.J.s waiting for your answer? What can we help you with? :P

@BaileyRowland OK I'm off to bed, but in case it was you asking that question, here's a quick sum:

It's a windows authentication mode in WCF for members that are not a part of a domain and are authenticated by username and password (W2 mode, no token used, unidirectional authentication). That's in contrast to members that are a part of a domain and can be authenticated by a token provided by KDC for the service requested (W1 mode, with a service-specific KDC token).

W1 is also a bi-directional authentication, or multi-factor authentication, so in this sense more secure for both sides involved

Right... Narnia here I come.

Rory Alsop

7:25 AM

@TildalWave youtube.com/user/Metaltechtheband

I'm lead guitar, and pyrotechnics :-)

@TildalWave see what you think of our Rammstein tribute...Hammstein (a demonstration of how the daftest words sound good in German over a heavy beat)

►

and glad you enjoy it :-)

@Iszi hahahaha - this includes playing Ingress at international airports, just so you know

@TerryChia cc @D3C4FF - what do you mean practically? I'm very nearly the Answer to Life, the Universe and Everything

Transcript for