@copy Got the pen-testing gig through word of mouth
Didnt do any tertiary qualifications, i started uni but got bored quick
Also, the uni i went to had like 80% 'exchange' studdents that were only there for 6-12 months. So as a result, i made friends, then they bailed back over seas and i never saw them again. Which was a bit shit :(
@copy Depends which state your in, just make sure its east coast :P Melbourne is 'fun' but has the most bizzare weather ever, Sydney has the nicest weather year round but has a lot of douchebags who are only intersted in money, Brisbane has good weather year round but occasionally has cyclones and floods in the CBD. :P
@copy Yeah, reminds me a bit of germany and even the netherlands
Has anyone ever come across an issue with a motherboard, when you scroll around a large high res picture or move the mouse around, that causes 'static' to be played out the 3.5mm speaker jacks?
@D3C4FF No, but I once rented a car that would play static over the speakers for 30 seconds every time you used the turn indicators. That was really annoying.
@Xander You can embed C# as-is into ASPX files using the old ASP-style <% %> notation. The real question is, how do you get the ASPX file onto the server.
@tylerl Through the handy upload page that exists :)
@tylerl So i've got it on the page already, and i'm trying different things, the page executes (i think) because it processes the import namespace declarations
@Xander Sure. But dropbox doesn't run on ASPX. A PHP site shouldn't, as a rule, let the general public upload PHP files, even if they do filter what commands you can execute.
@tylerl I don't think that has anything to do with it. If the purpose of the site is for users to upload arbitrary files, users should be able to upload arbitrary files. The file extension, or contents, shouldn't matter. However, the application shouldn't mistake UGC for a part of the application itself.
@TerryChia but I don't think that selinux offers the granualarity of control you're talking about. because when php (or any other interpreter for that matter) reads a script, it does so in the context of reading a data file. Execute only comes in to play when you try to exec() a script.
@TerryChia The solution is pretty bloody simple: store the files outside of any area where scripts are searched for. And preferably with a random name that doesn't include .php on the end.
@D3C4FF Is that really the problem?
@D3C4FF It may be that what you're running is erroring for some other reason.
if what you're doing is making it crash, then it's not gracefully detecting the intrusion
@tylerl Well, yeah. But that selinux thing is interesting to try nonetheless. I would expect you to be able to write a policy to stop interpreters from reading a particular file. Selinux is pretty damn fine-grained.
@TerryChia It's fine-grained, but it's OS-level. You'd need control within the interpreter to differentiate between files read for the purpose of running, and files read for the purpose of reading files.
@tylerl No no, i'm just trying to 'break' the application to see if it throws any interesting errors to prove its reading it, my test file is as follows:
Sorry, something went wrong An error occurred during the **processing** of /my/personal/aa/Documents/dorrs.aspx. Code blocks are not allowed in this file.
Interesting. So I don't know SharePoint well at all, but I see that error discussed in relation to the Designer, which is for adding new pages to your site. Perhaps this is another interface into the same functionality?
And it looks like this error is caused by a default SharePoint setting. It looks like there's a setting in web.config that you can change that would allow you to use script blocks, if it's the same filter the Designer folks are running into.
I can't off the top of my head think of a way to obfuscate the script block directly, but what you might try would be uploading a *.cs page (extention is really irrelevant) and in the @Page directive of your .aspx page, point the Src attribute at your cs file.
> You get stuff like instructions on whether of not to put a space before a semicolon; in which corner of the page a staple should be used, and at what angle it should be to the page, or how many sheets of TP to use for #1 vs. #2, and whether you should choose one ply or two ply.
Hum, just read some of the wiki page. So, must of these scams happen because the victim is greedy as hell and believes he's gonna get some money out of that story?
@Stephane I don't think I have, no. I pretty much only have 2 e-mail accounts: 1 hotmail that is at least 10 years old which does receive a lot of spam but I delete them as soon as I see them. The other one is gmail and it's pretty much a professional e-mail so I don't register anywhere with it.
In his lecture Reflections on Trusting Trust, Ken Thompson describes a virus that infects a compiler; the infected compiler installs backdoors into programs, but the key part is that the infected compiler also infects all compilers it compiles.
K. Thompson notes that if this was implemented at t...
When I google my name while I am logged into Facebook, my ENTIRE Facebook pages pops up.
EVERYTHING is viewable: Closed groups, messages, all pictures - EVERYTHING.
I have asked friends to key in my name in a variety of search engines - in spite of closing the search engine viewing option on my ...
Either this person is incredibly stupid/ignorant, or the biggest troll and he trolled all of us.
> Google search engine shows my entire Facebook page when I am logged into FB & google my name
After you Google yourself and click on the Facebook result, you're taken to your Facebook page. If you're logged in, then it's only natural that you'll see your messages and closed groups.
@Adnan He also wrote that he asks his friends to try the same, and they also see the information (at least, that's what he says). The fact that he is logged in at the same time could be a red herring.
@Adnan no idea, but I read somewhere that google were going to start incorporating facebook profiles into their knowledge-graph interface. clientside would be better, and makes more sense.
They might have backed away from this idea in light of recent global privacy scandals...
So i walked into the office cafeteria this morning only to see a box that said "Gerry's Donuts" and i thought to myself, "Oooh donuts" only come to find out there are only muffins in that box. I have been duped i say!
@DavidFreitag He dropped the price by 1.5k, should be plenty to fix it if it gets bad. I'll be using a far better quality oil which might fix the issue too.
@Simon Anyway, I hope the oil fix will be easy. I'm not exactly sure what it would take to fix a car burning oil.. new head gaskets and new compression rings?
@TerryChia Yes I watched it last night. It was great, he's a good signer/dancer. I didn't get most of the jokes though 'cause I'm not into gossiping actors but it was cool.
@DavidFreitag Rings usually. A failed head gasket causes you to consume coolant, rather than oil. The real question is, how much is it burning? If it's not much, it may not be worth fixing. Just check the level regularly, and add as needed.
@Xander How much would a new set of rings run you? I bet a ton in labor alone to pull the engine apart and replace them. I suppose it could also be the diameter of the cylinder (of there were gashes or scrapes letting oil past) that would probably be a new engine block which wouldn't be cheap.
@DavidFreitag Yeah, it's many hundreds, usually. And typically you don't need to replace the block even if you have issues with the cylinder walls, you just have them honed.
@Simon I'd have gotten the work & parts quoted before negotiating the price difference. 1.5k for what you'll be looking at will probably just barely cover it.
@Xander Yes. These motors are known to have weak head gaskets but he had them replaced in December and they're fine now. So, the major maintenance is done.
@copy He did not say "I'm not saying stupid enough stuff" (that one would indeed be impossible) but "I'm not saying enough stupid stuff" (which is wrong, but not impossible).
Apart from that, yeah, slow day. Neither of my accounts is at rep cap yet.
So what about the name change from "IT Security" to "Information Security" ? The meta question is there, it got upvoted, there seems to be a consensus, what's the next step ?
I have downloaded and ran the programme Rootkit Hunter and the results are worrying.
I don't know much about malware other than a malicious individual has persistently been installing it onto my machines via malicious emails - this time targeting my iPhone 4 (which I promptly got rid of upon dis...
I fell in a scamming trap. It took me a while to figure it out. Blinded like an idiot. But it is what it is. I can only do as much as I can now. Tell me if there is anything else I should do.
After realizing, I scanned everything for viruses but there where none. I used Macscan and ClamXav.
I c...
@Gilles Well, that's the difference between "consensus" and "unanimity". In the expressed answers in meta.SE, yours is the only one which expresses a preference for "Security" over "Information Security".
@ThomasPornin mine is the only one that expresses this preference explicitly, but others do implicitly: D3C4FF (who seems to want lockpicking to be included), lynks (I think). The top-voted answer prefers Information Security, but it's difficult to tell which upvotes are for the preference and which are because he favors the change
In the previous episode, we established a consensus that changing our name to either “Information Security” or “Security” would be preferable to keeping our current name “IT Security” which does not reflect the site's topic well.
We've answered questions about blasting ATMs, stealing some doc...
@Simon What's wrong with that? There's currently at least 7 billion worse ways to live your life. Think of all the remaining 7 billion people alive that don't get to read my awesome chat contributions! However they can live with themselves??
@Simon I know. But he's prolly laughing out loud now with a glass of a 20 year old whisky in one hand, and scratching his balls with another. Achieving that takes years of dedication!
@Simon I'm sure I'll back off at some point. I'm just a bit focused at the moment. I think Ali is irritated that I passed him for the top spot, because he keeps hammering out bursts of reviews like he's trying to catch up. So, in response, I've decided to work to bury him so deeply that he gets discouraged, loses hope, and gives up. Then I won't have to pay as much attention to it.
Although I don't think your answer is "better" than Rory's, I like the style of the writing and I think it's definitely more convincing. In that manner, is it possible to edit the question and add something persuasive (whatever that means) and some details on what needs to be done?
In the previous episode, we established a consensus that changing our name to either “Information Security” or “Security” would be preferable to keeping our current name “IT Security” which does not reflect the site's topic well.
We've answered questions about blasting ATMs, stealing some doc...
