"Someone asks you for advice. They say on every boot, some undesired program launches. What do you first check?" 1.) BIOS Config 2.) Task Manager 3.) Autostart Entries 4.) DNS Cache
@MechMK1 Not as much as i would have liked. I managed to login as admin with sql injection, also got a admin bearer token and his email this way. So i will change his pw next. But i'm not yet able to find the scoreboard
I think i found it. After i tried out to just change the url /scoreboard the site send a request to check if i finished the challenge. /api/challenges. But it looks pretty raw
I went to university, but it's by no means the only way. It really depends on what you want
University has the downside that you don't earn any money while you go (assuming you go full-time), but the upside that you have some certificate that you know what you are doing
While applying for a job directly is a bit riskier in the sense of "Why should we hire you?", but it may be faster
The question you have to ask yourself is, do you want to spend 3 years of your life with very little income, just so you can write BSc after your name?
@MechMK1 Good point. I would opt into a hybrid model between university and working. In Germany we a the "dual Studium" where you're employed and payed while you go to university. It's like 3 months in university and 3 months in the company.
Or you can do what I do, spend 9 years of your life, get to write Dr. before your name, and then forget everything you learned because it is only tangentially related to your work in the future. It impresses people on occasion, but for the most part I don't recommend it.
I have a PhD in astrophysics. It at least involved lots of programming and data analysis, so it was by no means "bad" for my own development as a programmer, but sometimes I wonder if I would have been better off just going into engineering full time
@venter In an attempt to actually be helpful though, I look back at my time in university as an opportunity cost. I got paid in grad school (so no loans), but at the same time my years there don't always count the same as experience gained as a full time job. If I had landed and started my career 5 years sooner, I might be 5 years "further ahead"
Of course, could I have landed a professional job? Who knows! Would I be in a better position in my career for it? Who knows!
Which apparently is to say that I don't actually have a suggestion for you. You never really know how things are going to work out in the end. There are jobs out there that require a computer engineering degree, and despite the fact that I'm very over-educated in a technical field, I still can't apply for those
Not that it is a big deal, but sometimes having a degree does help
In the end though life is pretty much a crap shoot anyway, so you give it plenty of though, make your best guess, and see how it works out 5 years later. :shurg:
Pretty sure that was the least useful life suggestions ever. If anyone else needs any suggestions I'll be here all week!
Man I hate it when I forget where I stored my keys... I feel bad downloading another one and having multiple keys attached to my service account - it just screams "THIS DUDE AIN'T ORGANIZED". I swear I am...
My sense of humor is terrible - I'm just not funny. I also have a very dry sense of humor, and my favorite kind of jokes are the ones when no one else realizes you are joking (which has definitely made situations awkward more than once). Unfortunately I'm surrounded by potty jokes. All my kids, including my 3 year old girl, think that potty jokes are hi-larious!
I still remember my oldest's first pun (I usually hate puns). He made a game out of naming the gas stations as we drove around - that's a Shell! That's a Kangaroo! That's a BP!
Do we need a canonical question about how to deal with ransomware, so that questions like this could be marked as a duplicate instead of closed as off topic?
An answer could consist of something along the lines of:
You should keep backups. Restore if you have them.
Don't pay.
Check these sites...
@MechMK1 Nowadays, chanses that you get your wedding photos back are not that great. I would recommend divorce and remarry instead so you can take new ones.
@ThoriumBR I used to be much more sarcastic. Then my oldest started taking after me and took my "level 8" sarcasm and cranked it up to 12. I started dialing back my sarcasm hard-core after that. There's nothing that helps you learn more about what it's like to live with you then having a kid who does everything you do except more...
@MechMK1 I once had a 1tb hdd plugged to a raspi on my network... when I connected on my home wifi, my computer would sync to it, and late night raspi would sync to a vps I had...
but now I only sync my 2 notebooks with syncthing... I have to change that a little, add another node
"I was driving in Austria, and I was at a red light. I took a look at my map (reference to an earlier joke about how men never use maps), when the light turned green. I was too busy looking at the map to notice, so I didn't drive. In Germany, 0.0004 seconds after the light had turned green and I was not driving, I would have had a tinnitus after the driver behind me pushed the car horn through his driving wheel into the engine compartment.
NOT SO IN AUSTRIA
The guy behind me got out of his car, casually walked up to me and knocked on my window - casually of course - and asked: "Master, ho…
I'm kinda the go-to guy for tech issues in my company, and when those extortion emails went around I got a panicked email from someone in my company about, "oh my gosh what do I do???!!!". I responded quickly and calmly with some articles and assured him that he could safely ignore it.
But at the same time learned too much about his personal life...
@ConorMancone that is and old-ish scam... people go after leaked passwords, and spam everyone the same message telling the receiver that the scammer got something as secret as his password, so he installed sw on the machine and knows everything he does/sees... and ask a payment for not disclosing.
when ashley madison got hacked, a lot of their userbase got those nastygrams too...
I'm not sure why having password like WP9D_7Yybu]#5m}/CTFj3$ftu[(c8qJZge*PR5a' is more safe than BricksOfSaltFallIntoTheQuietSea.WhoIsThereToCountTheWaves?Nobody.
Basically traditional passwords try to be high entropy, but short. They fail. Passphrases are low-to-medium entropy, but VERY long. They succeed for the most part, depending on the inspiration. True Random Passwords are very long AND have very high entropy. Literally unbreakable
When I use passphrases, I use the following schema, because it keeps most of the entropy while beeing faster to type and harder to read over the shoulder. WIupps,Iutflwsm,bcikpmotetpwlbefstttahdtrovtsd.
XkYTG!gNbAEkR+smS8TZbgABtJL_TfgV8Z&ssQt_%XTM@CEHtJhk=ng62Wr72@A-=!mB=sjgf&9$sMa+!GQfxMG38x?wpsSqr_4N%$LaUHVcJ9zzf%yZSCW7p#r!hMq7j=Zw_uYy7hFMJ5Tt-w7u!6B3wmm@UZJPBnTpccC+RLUL&KuGgJ!w6R3Qmp+Px7yD3bZj9bD2!LuC4=K@8LuVkJ=$e&JVG$haJdHDSTR$^@Emt=RXzvwgV3&EUcFFhA this is an unbreakable password, I agree, but you won't ever catch me using something like this for any of my passwords ever. It just seems too ridiculous to be practical
@MechMK1 that's what I do... I have my pw manager generating 40-byte passwords for me, and have to memorize only one long password that I don't ever ever use anywhere else for it
Just because even if the chance is slim to none, there is still a chance that someone can break into it. If I keep my passwords in a book, who's going to break into my house to steal it?
@UwU if you use a unique password for your manager, it is more secure than your book... losing your book is more probable than someone stealing your password manager and breaking the encryption. if you use a good manager, of course...
I use Enpass on my android, iphone, and linuxes... it have an encrypted db, and syncs only the encrypted db using dropbox or gdrive. it's very good, the encryption is sound, and have very good usability
These days, it's not uncommon to have dozens and dozens of passwords for various sites and services. If you're using different passwords for each service it can be basically impossible to hold all the passwords in your memory.
Some people keep a book with their passwords written down, and are oc...
Is it acceptable in this case to rely on IP as an authentication mechanism ?
Yes, because performing an attack that will spoof a connection requires the attacker to be placed in a very very specific location along the path of communication. So you are safe from that.
The above holds, assumi...
You have to look at the edit history.
The original answer and the current answer are literally completely different. Schroeder and I both argued strongly against his initial answer, and he argued his points to the death
Then suddenly decided to completely rewrite the answer. Normally I'm all "People edit their answers in response to feedback - great!" but in this case, he was so hard-core deadset against admitting he might be wrong, it just seems crazy
the comment thread was great but is of course deleted now...
I can't decide if he is just really good at changing his answer when presented with convincing arguments, or if he just can't stand downvotes. He also has another answer on this same question which he deleted after receiving a downvote.
Never seen a battle of that much green and red before
To be fair, if my question gets enough downvotes I just assume it probably wasn't worth asking / a better version of the same question exists somewhere else
Do we need a canonical question about how to deal with ransomware, so that questions like this could be marked as a duplicate instead of closed as off topic?
An answer could consist of something along the lines of:
You should keep backups. Restore if you have them.
Don't pay.
Check these sites...
Is it acceptable in this case to rely on IP as an authentication mechanism ?
Yes, because performing an attack that will spoof a connection requires the attacker to be placed in a very very specific location along the path of communication. So you are safe from that.
The above holds, assumi...
