« first day (3287 days earlier)      last day (1583 days later) » 
08:00 - 14:0014:00 - 21:00

Anonymous
8:05 AM
@TomK. Yeah, feelsbadman I wanted to play but my usual CTF team wasn't online so I didn't feel like being the one to ping everyone and ask if they would play.
 
Anonymous
@Arminius :(
 
8:31 AM
@ConorMancone It's closed now anyways
Good morning, my friends! How is everybody doing today?
 
8:42 AM
0
Q: Flatmate spying on my pc activity - he has Admin control of router/modem - how to beef up security?

AceOfSpadessI feel there's some way he has remote viewing of what's on my screen and what i've done. Maybe a keylogger or remote access - i'm not sure. O/s Win 10 pro 64 VPN wifi Is there some way to beef up security? Preventing this spying!!!

@ConorMancone Another security paranoid 1 rep user
@forest Are you here at the moment?
 
Anonymous
9:10 AM
Hey @MechMK1
 
Anonymous
Look what I found - "exec(info.format(path))"
 
@J.J Hey, what's up?
 
Anonymous
l m f a o
 
Anonymous
Now I just need to figure out how to exploit it.
 
Wait, what?
 
Anonymous
9:10 AM
I'm okay, tired. You?
 
I just got to work
 
Anonymous
I've been here two hours already.
 
Anonymous
Only had 3 hours sleep as too.
 
The magic of timezones :D
man, you really need to sleep more
 
Anonymous
Yes :p
 
9:11 AM
At least like 7 hours
 
Anonymous
Yeah, I know.
 
Anonymous
Too busy though.
 
There has to be time for sleep
 
Anonymous
Plus I don't like the idea of wasting all that time asleep.
 
It's not wasted time though
It's time for your physical and mental health
 
Anonymous
9:11 AM
It is to me. I could be working.
 
Anonymous
I know that I'll burn out soon from all the lack of sleep.
 
Anonymous
And that's fine because when I burn out I just keep going.
 
What's more important to you? Getting work done or having a good health?
 
Anonymous
Eventually I'll break.
 
Anonymous
I'm hoping I can go another few years without breaking at least.
 
9:12 AM
Ask yourself this: if you had a breakdown in your mid-thirties, would you say "I wish I had gotten more work done?" or "I wish I took better care of myself"
 
Anonymous
Well, I personally feel like I won't achieve everything I want to if I don't spend as many hours as I do (or more).
 
Anonymous
Whether that's a rational thought or not, I don't know. But that's how I feel.
 
What is it that you want to achieve?
 
Anonymous
There's lot I want to achieve.
 
And then? When you have achieved it?
Is there a life beyond achievement?
 
Anonymous
9:14 AM
I want to buy my first house before 20 (I am really on track). I want my OSCE before the end of the year. I want my OSEE before 21.
 
Anonymous
I want to go on the CoreLan Advanced Exploit Dev course before the end of next year.
 
Anonymous
Lots and lots I want to do. The list goes on.
 
Man, I envy you that you are in the position to buy a house
I have a BSc. and I'll probably never own a house
 
Anonymous
It's just luck.
 
And is all of that worth your health?
 
Anonymous
9:15 AM
Yup.
 
What will you do once you "break", as you said?
 
Anonymous
No idea. Hopefully have enough saved money to rest for a while.
 
And then? Then you are still broken
Our body is like paper. If you scramble it, you can still unscramble it, but the marks will still be here, and never go away
 
Anonymous
I guess, but if I want to achieve all of these things in that time frame I see no option but to sleep as little as possible.
 
For what? Just to say you did it?
 
Anonymous
9:17 AM
I am not successful enough yet to be satisfied with myself. I mean, I am satisfied with what I have but I want more.
 
Satisfaction will never come with external incentives.
 
Anonymous
Well, it's for myself to say that I did it without anybody helping me, yes.
 
If you do this to be satisfied with yourself, it's a futile quest.
 
Anonymous
No satisfied with my achievements.
 
Anonymous
I'll never be happy with myself, I accepted that long ago.
 
Anonymous
9:18 AM
But I can at least be satisfied with accomplishments I've made.
 
Did you ever think that perhaps your lack of sleep and healthy lifestyle and your lack of satisfaction with your life could be related to each other?
 
Anonymous
No that came long before those things.
 
Anonymous
That came since I was like 8 years old.
 
Anonymous
For a variety of reasons which I am aware of.
 
And you think it's beneficial to destroy your health for achievements?
 
Anonymous
9:20 AM
I guess on that logic, yes.
 
Anonymous
But all I really care about right now is getting my own home for once in my life, a place I cannot be kicked out of.
 
I mean, I am aware that I can't dictate to you how to live your life. Afterall, I am just text on a screen. But what I am saying is that I went down a similar route. Sometimes I didn't sleep at all. I just took enough coffee to stay awake.
 
Anonymous
If I am completely honest, I have nothing else.
 
Would you rather own a place of your own at 20 and break down at 30?
Or would you rather own a place of your own at 30 and live a healthy life there?
 
Anonymous
Okay yes, I have my girlfriend but.
 
Anonymous
9:21 AM
Other than that - nothing.
 
With a healthy life, you have all the things you have right now.
 
Anonymous
Of course I will still have the things I have now, but I want more. As I said, I want to be more successful in this field than I currently am.
 
Anonymous
Someone already beat me to passing OSCE at 19, so I already failed imo.
 
But for how long? Is it worth it to be "successful" and not able to enjoy the success?
 
Anonymous
I rarely enjoy a lot anyway.
 
9:23 AM
Is it worth it to spend 10k on a holiday when you are too crippled to enjoy any of it?
 
Anonymous
I'm not sure it will make a difference.
 
Anonymous
I am usually almost never happy.
 
And have you considered seeing help because of that?
A certificate is not a substitution for happiness, you know?
 
Anonymous
Yeah, I did for a while.
 
Did it help?
 
Anonymous
9:24 AM
Not really.
 
Why not?
 
Anonymous
Saw a few different people, none of them really helped I still felt the way I feel.
 
What did they tell you?
 
Anonymous
Well, it not helping was probably my fault.
 
Anonymous
I am very cynical, they were only helping because I was paying them.
 
9:24 AM
Don't think blame-oriented.
 
Anonymous
That's not help, it's just taking advantage of someone who is mentally sick for money.
 
Thinking in terms of blame is not constructive, and ultimately what you want is to be alright.
 
Anonymous
I find it very ridiculous society tells us that therapists are there to help and that they "care", they don't.
 
I suffer from depression as well, and so does my girlfriend. She probably even more than me.
 
Anonymous
They "care" about their pockets, they wouldn't be doing it if it wasn't for the fact it pays a shit load.
 
9:26 AM
I'll be honest with you, it depends very much on the country, and even more on the individual.
 
Anonymous
Of course there are probably some that do actually care but they are few and far between. And I saw way too many that clearly didn't care as much as they said they did to the point I gave up.
 
I understand your frustration.
Did you seek any help outside therapy? Support groups, perhaps?
 
Anonymous
Now I just put up with it, but hey I managed to stop the self harming on my own so I am sure I can deal with a few sleepless nights.
 
I'm glad you stopped harming yourself
It was a big problem for my girlfriend as well, but as far as I know, the last time she hurt herself was about a year ago now.
I found my support group in politics
I know, it sounds hilarious
 
Anonymous
I'm glad she is clean. It's a horrible habit and it's not easy to quit once you start.
 
9:28 AM
But it gave me something to work on, and the people supported me
 
Anonymous
So, that's good.
 
I believe so. I never self-harmed, unless you consider nail-biting self harm
It's a habit I had since I was a wee lad :D
 
Anonymous
Yeah, I bite my nails too.
 
Anonymous
Anyway as I said, I can deal with a few sleepless nights. I know I am too hard on myself, my girlfriend has told me this since forever.
 
Anonymous
Unfortunately while I know this I just don't do anything to remedy it or don't care to, something like that.
 
Anonymous
9:31 AM
So I keep going, because there's no other choice.
 
@J.J No, don't lie to yourself
 
Anonymous
Also working stops me over thinking and it's better for myself and for my girlfriend that I don't over think.
 
Don't say there is no other choice when there clearly is a choice.
I agree that overthinking is not good, but having a healthy work attitude and a healthy sleep cycle are both not in contrast to that
And 3 hours of sleep is definitely not a positive thing. It harms you too, you know?
 
Anonymous
I'm aware it's not positive, but, I just feel like it's my best shot at getting the things I want.
 
Anonymous
I'm not smart, I just work harder than most people.
 
Anonymous
9:33 AM
If I didn't work this hard, I'd never have achieved anything.
 
Working hard and taking care of yourself are not mutually exclusive either
 
Anonymous
I know that, but I feel that 7 hours sleep is too much.
 
Anonymous
There are guys that can work 2 hours a day and somehow be the best pen-testers I've ever seen.
 
Anonymous
If I work 2 hours a day I would never have even made it to being a pen-tester.
 
Anonymous
So what choice do I have if I want to stay competitive?
 
9:36 AM
But have you considered a model that maps more closely to the 8/8/8 system?
With 8 hours of work, you can still get enough stuff done
 
Anonymous
But it still isn't enough to catch up with people who are just gifted.
 
But your sleep time should be sacred to you
 
Anonymous
And where does that leave me? It leaves me being another average pen-tester.
 
You think you are average?
 
Anonymous
I don't want to be just another pen-tester.
 
9:37 AM
You're quite above that
 
Anonymous
Yes I think I'm average.
 
I think you have a very warped self-perception
You are very skilled, and quite gifted as well. You just don't compare yourself to your peers, but rather the best of the best you can find. And while a drive to improve yourself is admirable and desirable, you consider being anything but the best to be a deep personal flaw.

But the truth is, it's not. You're not flawed for not being the best there is. And this eternal desire to become better and better until there is nothing to improve anymore is self-destructive.
You are fine the way you are. You're a gifted pentester, and you should acknowledge yourself as such. It's good to want to improve, but not at the expense of your physical and mental health.
And you see, I'm not saying that because of any ulterior motives. I'm not here because you pay me to be here. I'm here and saying that because I want to help you.
 
Anonymous
9:59 AM
I really appreciate that @MechMK1 sorry I took so long to reply.
 
Anonymous
It's really hard for me to believe those things, but I do appreciate them.
 
@J.J I understand that it's hard, and I didn't expect to fix everything just by writing this. But I want you to really think about what I said, and try to believe it.

And furthermore, all of us in the DMZ are here to support you!
 
@J.J I didn't buy my first house until waaaay later than that, and it is harder every generation (blame the boomers :-) - but for me it was never a goal. Financially it became slightly better to own a house once kids started coming along.
 
@J.J I second what MechMK1 just wrote.
 
I am with you on the working to avoid thinking bit though - I don't like down time, holidays or anything like that, because my brain ends up going down self destructive routes. That said, you can look after yourself by taking other activities - for me they include music, going up mountains, sailing, and puzzles
You need to look after yourself, or else you will not be around to enjoy the fruits of your labours
@J.J You don't need to catch up to them - they have a different model
Mech is right - part of the problem seems to be the usual one - selfperception. You may be downplaying your skills and bigging up others
 
10:10 AM
I see something similar in miniature painting. I started this summer, and I compare myself to people who paint like this:
Like...duh! of course these people are better than me.
 
A quick side-comparison: for many years my kids would complain that they were competing against better kids in swimming. And I said, yep, you can try and beat them and come home with medals, but I am going to reward you for improving your personal best times, not for medals. SO when they got faster they got a wee extra bit of pocket money.
Encouraging competing against themselves
If they got a medal I was obviously happy for them, but it wasn't the main aim
Improving themselves was
 
Anonymous
Thank you so much @MechMK1
 
Anonymous
@RoryAlsop Well I am technically homeless right now so I just want to buy somewhere where I don't have the fear of being kicked out.
 
Anonymous
Plus, I have nothing better to spend the money on than a house.
 
@J.J You're welcome! And if you ever feel like you need someone to talk to, you know where to find me
 
Anonymous
10:13 AM
Thank you @A.Hersean :D
 
@J.J that does make sense
 
Anonymous
I probably am downplaying myself and bigging up others.
 
Anonymous
But I can't help it.
 
Anonymous
I don't like seeing people better than me.
 
It's understandable, but knowing that you do is half the battle
One thing that I once read that stuck with me is this:
> You see the "Making of" of yourself, and the "Best of" of others.
 
Anonymous
10:17 AM
You're right.
 
Anonymous
Speaking of which, new Web Security Academy challenges coming out today; the prize? A hoodie.
 
Anonymous
I need to win a hoodie.
 
I recall a colleague of mine doing the Flare-On Reverse Engineering Challenge for a belt buckle :D
he was soooo frustrated
 
Anonymous
Flare-On make super nice (and super hard) challenges.
 
Anonymous
Heh.
 
Anonymous
10:19 AM
I'm going to try my hardest to win one of these hoodies, I really want it - badly.
 
Yes, one of them was like reverse-engineering a malicious windows kernel module
From a crashdump
 
Anonymous
Also, I just bought tickets to see The Plot In You in APRIL.
 
Anonymous
AM.
 
Anonymous
I.
 
Anonymous
FUCKING.
 
Anonymous
10:20 AM
EXCITED.
 
Anonymous
SO.
 
Have a good time there
 
Anonymous
I can't wait. I am scared since...
 
Anonymous
I don't deal well with lots of people especially in such environments.
 
Anonymous
Especially with such loud noise.
 
Anonymous
10:21 AM
But I love them so much I have to go.
 
Bring earplugs, trust me
 
Anonymous
>.>
 
No really, I know you think I'm joking
But if you stand in the "wrong" spot, you can get permanent hearing damage
 
Anonymous
I will just stand at the back (hopefully)
 
Anonymous
Since I'll be fine there and less people, etc.
 
10:23 AM
I didn't bring earplugs to a concert once, and I have a tinnitus ever since
 
Anonymous
I really hope I don't have a fucking panic attack.
 
Do you have an exit strategy in case things don't go well?
 
Anonymous
Nope.
 
Anonymous
Never been this venue and only ever been to one concert.
 
Anonymous
If I have to knock a guard out to get out I will though.
 
Anonymous
10:24 AM
:upside_down:
 
Are you going alone or with someone?
 
Anonymous
Alone.
 
Anonymous
I have nobody to go with.
 
How far is the venue from your home?
 
Anonymous
An hour on the train.
 
10:25 AM
And how far is the venue from the train station?
Can you get there on foot or with public transit?
 
Anonymous
Quite far. Would have to get an Uber or bus.
 
Have you considered booking a cheap hotel room somewhat close to the venue for one night?
I went to Heidenfest in 2013 and I booked a hotel room for 19€
 
Anonymous
Yeah, I will
 
That's a good idea
So this is your second concert, right?
 
Anonymous
Yeah.
 
Anonymous
10:27 AM
First one I had a panic attack lmfao
 
Are you planning on drinking alcohol?
 
Anonymous
Yes.
 
Anonymous
It helps.
 
How much?
 
Anonymous
Quite a lot.
 
Anonymous
10:27 AM
If it's one thing I can do... It's drink a lot and not get drunk.
 
How will you get to the hotel?
 
Anonymous
Since I spend most of my time drinking.
 
Anonymous
Walk.
 
Do you know the town where the concert is?
 
Anonymous
Yeah, roughly.
 
10:30 AM
And you're sure you will find the hotel if you had a lot to drink and you may have had a panic attack?
 
Anonymous
I hope so. I don't have anyone to go with so if I want to go I just have to accept those conditions.
 
Anonymous
Of course I could not drink but if anything drinking will likely prevent a panic attack.
 
Anonymous
That's precisely how I manage to not have them if I go out on the weekend to a bar or something.
 
I'm not telling you not to drink. You're an adult, you're free to make that choice.
What I'm worried about is you not being able to find your way to the hotel.
 
Anonymous
Well, we'll soon find out :D
 
Anonymous
10:33 AM
I appreciate the concern a lot.
 
Do you really want to leave something like this up to the odds though?
 
Anonymous
I'm sure I'll be fine.
 
Anonymous
Yeah, I do.
 
Anonymous
I want to see them live.
 
Anonymous
It's worth it.
 
Anonymous
10:34 AM
They are hardly ever coming to the UK.
 
Anonymous
Now is my chance.
 
Don't get me wrong, I'm not saying "Don't go"
By all means, you should go to the concert.
I'm saying you should formulate a bit more of a backup strategy in case things go south
 
Anonymous
I have a while to think about it, I roughly know the city and I can get a hotel literally a 45 second walk from the venue.
 
Anonymous
Granted I'll have to pay a bit more, but I am sure I'll be capable of walking literally across the road and into an elevator.
 
If the hotel is that close to the venue, then you'll really be fine
 
Anonymous
10:36 AM
I can't wait, I am so excited.
 
Anonymous
Back to this from earlier - exec(info.format(path))
 
Anonymous
I am still trying to exploit it, this is Python by the way.
 
Anonymous
They are doing this in Python... I don't know why but there we go :D
 
Anonymous
I should just be able to pass in like
 
Anonymous
__import__(os).system(ping -c 3 $ip)
 
Anonymous
10:37 AM
But that doesn't work. So now I am confused. I guess I need to do some kind of character escaping.
 
Is this a prod binary or some CtF?
 
Anonymous
CTF :D
 
Anonymous
If someone deployed this in prod they would require shooting.
 
Anonymous
Since if you just did info.format(path) it would do exactly the same thing.
 
Anonymous
It just wouldn't let me execute arbitrary code.
 
Anonymous
10:39 AM
Execute is just going to attempt to execute this info = "output = 'Document: {}'" where the {} is of course whatever is stored in path.
 
Anonymous
And I can control path since it stores whatever is inputted after the / in the URL. So for example $ip/test path would be equal to test.
 
Anonymous
Somehow I need RCE.
 
11:36 AM
Man, I should get my own life in order too
My girlfriend is making my life hell again
 
12:03 PM
I've been listening to this track all day
 
1:02 PM
@MechMK1 what's up? Obviously you don't have to go into details you don't want to
 
@ConorMancone Are you refering to my rant from 12:36?
 
1:20 PM
@MechMK1 no, the getting your life together part
/girlfriend
 
Yeah, about that...
My life these days is dominated by my girlfriend's mood swings
No news there, I know
The past week or so was fine
But now it's getting awful again
She keeps bringing up the past, stuff that happened like 5 years ago
And I'm just so done with all of this shit. I just want a normal relationship, not a poor imitation of a relationship, deeply infused with her insecurities
I just want to be able to live my life without having to explain everything I do
Who I talk to, what I say, what music I listen to...
@ConorMancone Do you remember when I told you that that one knitted image looked similar to one character from a videogame?
Dec 11 at 15:28, by MechMK1
The third picture in the linked answer, left character, is clearly Sakuya Izayoi
My girlfriend freaked the fuck out because of that
 
Anonymous
I finally got RCE, yay.
 
Anonymous
EZ
 
3EZ5ME
 
Anonymous
It was actually quite hard.
 
Anonymous
1:32 PM
But once I figured out how to escape it was fine.
 
Anonymous
So yeah, if you ever see a Python based site using exec or eval just use this.
 
Anonymous
/%27;%20[python payload];#
 
@MechMK1 Not that it matters much, but why did that freak her out?
 
@ConorMancone Because she considers anything related to japan "dirty" and "overly sexualized"
Look at the picture I linked and tell me that that drawing is either of the two
Just for reference, this is a screenshot from the game:
 
I remember. They weren't.
As a brief aside I was going to post this article in an attempt to re-ignite the PHP flame wars:
 
1:44 PM
Here is a screenshot showing the characters more:
 
But then I actually read the article and realized it's very incoherent, and the person who wrote it clearly doesn't have much practical experience building web applications
 
> Based on the user-friendly feature
The what?
 
lol, that was just the start. /so disappointed
 
> This programming language supports the standard library which helps developers to build a website easily and faster.
The standard library.
You know, that one standard library.
 
There's only ever one
Used by all languages everywhere, including english
 
1:46 PM
> PHP programming language is familiar with the Syntax, which turns the coding easily.
It even has the syntax! Unlike other languages, which do not include the syntax.
I would say that all claims are either not relevant to PHP at all, or are just plain weird.
Like, the advantage of PHP is that it has syntax. What the fuck was she smoking?
I get english isn't her native language (I hope so at least), but this point doesn't even make conceptual sense.
 
@MechMK1 Getting over emotional baggage can be a surprisingly long process, even for someone who is interested in getting better. I was effectively the first functional relationship my wife has ever had. Our marriage is preceded by a decade of dysfunctional relationships and before that neglect and verbal abuse at the hands of an emotionally abusive, alcoholic mother and her equal alcoholic wife. Her father is actually a health adult, and is probably the only reason she survived childhood
(her parents got divorced when she was young and she spent her childhood in a 50/50 custody split)
Despite all of that, when I met her she was really a very "emotionally healthy" person
 
@ConorMancone The situation is similar for my girlfriend. Her entire family is dysfunctional
 
However, there is still "impact" from those years of abuse and control, and it comes up sometimes in our marriage. It comes up less over time, but even after all these years of a generally "healthy" relationship (next year is our 9th anniversary) the emotional wounds are still healing.
And this is a woman who really has her shit together: she's a mature adult, actively wants to put her past behind her, has a healthy view of the world, and understands the impact that her past has had on her
 
@ConorMancone I wish I could say the same about my girlfriend. She's the polar opposite of "having her shit together"
 
But sometimes those very old emotional wounds still cause trouble
 
Anonymous
1:53 PM
@MechMK1 If I put you & my girlfriend in a room you'd have a blast.
 
@MechMK1 My point in all of this is that changing is hard, and even for someone who understands their issues, is a mature person, and wants to be "better", it's still a very long and complicated process
 
@J.J Why so?
 
For someone who isn't really interested in change (either from lack of ability or just lack of desire), it's really never going to happen
 
Anonymous
Because you have to basically mentally look after your partner.
 
Anonymous
She has to look after me a lot.
 
1:54 PM
That's pretty much the nature of relationships
 
@ConorMancone I told her the same. It's the same problems, coming up again and again and again and again
And I keep hearing "I'll change, things will be different this time", but it's always a lie
She detests that she's lying, and I say that it means she's either unwilling to change then, or unable to change. And both is equally terrible
 
So in the long run one of a few things is going to happen:
1. Your girlfriend is going to recognize how things are, decide she wants change, and start doing something about it (which probably won't happen without external help, although I certainly don't know what it would take).
2. Things will continue to stay exactly the way they are.
3. You will decide to break it off.
It's actually kinda silly to break it down like that: those are literally the only options.
 
What I think is going to happen is that she will claim that she will change, and then do the tiniest amount of progress, just barely enough to notice it.
I will, at some point, not be able to deal with all of this anymore, and she'll attempt to guilt trip me into staying with her, pointing at the tiny bit of progress she made.
This is actually the loop in which I am stuck right now.
This will happen until I really can't deal with it anymore.
As much as I love her, I have given up hope that she will make any real changes.
 
08:00 - 14:0014:00 - 21:00

« first day (3287 days earlier)      last day (1583 days later) »