I still wonder why somebody thought including JavaScript in PDFs was a good idea. Or remote resources. Or anything that is not simple text and images. The greatest threat in INFOSEC is "features". One day even plaintext might become a threat, because somebody will think of introducing a new Unicode character that allows code execution
It is pretty ridiculous, but considering that PDFs are brought to you but the same company that came up with the soon-to-be-defunct-for-constant-security-issues FlashPlayer, it's not really a surprise.
I'm having trouble with using CTRL-z in msfconsole in non-meterpreter shells. It keeps backgrounding the wrong things and it's really troublesome to background just the shell inside msf. How do you deal with this?
Yesterday, I asked this question: How can Tutanota, ProtonMail and Hushmail all claim to provide privacy when they only allow privacy-incompatible payment options?
It's now been "closed" as "off-topic", even though it couldn't possibly be more on-topic. Anyway, that is something I've come to expe...
@reed RE your comment "the problem with "clear and concise questions" and "factual answers" is that they can only apply to well-established knowledge. But if you are interested in research and in the bleeding edge of things, you are necessarily going to need to exchange some opinions and start a debate. IMO "bad" (but not too bad) questions can be useful and should be allowed, as long as they attract good answers. [cut for chat length limit]"
hey guys! I am from Brazil and don't believe this, but it's true. One inmate on jail for some serious crimes (almost killing his wife, among others) had already escaped 4 times and got caught again. He was serving time on a federal prison. But he was a solder, and the prison gate was needing some repairs. The geniuses running the prison thought it was a good idea to take this guy, put soldering tools on his hands, and leave him OUTSIDE, ALONE...
they thought he would ask to be sent back to his jail... Guess what? He soldered the smaller gate shut, and soldered the main gate to the tracks, and obviously ran away...
@reed I don't necessarily disagree. However in cases like this the OP is clearly far outside the bounds of "normal SE usage". Therefore it's not really the time for nuance.
SE itself can certainly be very restrictive though. There are definitely plenty who disagree with the overall stance, but all-in-all I don't mind and consider the focus here to be an advantage. There are millions of discussion sites on the internet, but the "focus" of SE keeps things a bit more contained and manageable. I appreciate that. It sets SE apart quite a bit, and gives it its own little niche.
There definitely needs to be some "wiggle room" at times, but in general I'm much happier with SE because it's not a discussion forum.
@ConorMancone, yeah, that last question wasn't appropriate anywhere IMO, not even on Meta. However the first question might have sparked some good answers with interesting stuff to learn. Of course I'm saying all this "in theory". In practice it's up to the moderation, and at the moment this policy won't be ok
@ConorMancone Epic question. Does this mean I am part of "the system" and involved in a big conspiracy to keep people down? Am I "the man" now? Finally I am getting somewhere in life!
and they give him a job outside, unguarded, with tools... he locked everyone inside and escaped. guards had to call a solder to cut open the soldering and release them...
officially? no. the maximum is 30 years, but you can get parole before in lots of cases. non-officially? if the jail is overcrowded (almost all are), the mobs kill people who are not in their ranks and don't pay them...
speaking of countries, crime, and bad questions, I wonder if it would be ok on SE to ask why the majority of attacks and cyber criminals seem to come from specific areas. It's always Eastern Europe (especially Russia), sometimes China or Brazil, Nigeria / Ghana and that area for scams, and that's it
if someone from Denmark, for example, steals 200 EUR, he have enough to maybe 4-5 pizzas... if someone from Brazil does the same, he got a month's wages
Why not Argentina? Why aren't there a lot of famous hacking groups in France? Why don't most cyber criminals come from Zew Zealand? Australia? Peru? Canada? Norway?
when working with the government, we were after a Brazilian group registering look-alike gov domains, and phishing gov employees... the guys were from Brazil, the domain was from Japan and all was host on France server belonging to a British company. Imagine the nightmarish jurisdiction mess you would have to untangle to take them down...
my idea: go on the phishing site, and log in with real honeypot admin credentials, and monitor the main site for anyone using that credential. if someone logged in with it, send a special javascript returning every single possible identification from the user: browser, plugins, all ip addresses, screen resolution, everything...
yeah, IMO it's all about some loophole in the law, somehow. But isn't it funny? I mean, it appears most cyber crime exists because the internet crosses borders and touches different jurisdictions. Same for privacy, I believe Tor wouldn't guarantee the same privacy if all its servers where in one single country (the US, for example).
someone who tries to break into your house must come from around there, not too far. Someone who port-scans your website, OTOH, might come form the other part of the world. I mean, it's crazy
I coded everything, tested, but the guys taking care of the official site delayed so long (20 days) to deploy one line of code plus one php file that when they told us they would do the change, the phishing site was offline
I don't think the main issue is the geographical distance... take the Sabu's lulzsec... he was in the US, hacking US targets... the problem is linking Sabu and Hector Xavier Monsegur
or linking dread pirate roberts and Ross William Ulbricht
even with entire FBI divisions knowing that dread pirate roberts was the mind behind silk road, and sabu was the mastermind of lulzsec, getting the person behind the handle takes time, and luck... it's way harder than setting a sting operation and nabbing drug dealers "on the act."
you set any online sting operation and you don't get people, you get a computer ID, an IP, a handle, and linking those to a person isn't always straightforward.
like that defunct p2p community space station 5 (alive early 2000's) that was based on Palestine... good luck having them respond to DMCA take down requests...
@ThoriumBR, but people have always taken drugs, in all cultures, it's a losing battle, they should be legalized and controlled by the state. But anyway, that's not the point. The point is that life imprisonment for that seems too much.
I believe the "life in prison" was justified for hiring a gun...
"The evidence that Ulbricht had commissioned murders was considered by the judge in sentencing Ulbricht to life, and was a factor in the Second Circuit's decision to affirm the life sentence."
There's a balance somewhere. Decriminalizing most of it would be a big improvement, even if it was still technically "illegal". It's especially stupid in the US where marijuana is both a "Schedule I" substance (which is basically defined as the "worst" class of drug - very harmful, very addicting, and no medicinal uses) and also now perfectly legal in most states
Everytime I'm reminded of its classification as a Schedule I drug it reminds me that this silly drug war is, in essence, completely politically motivated.
@ConorMancone All you need is import does_halt in Python. I don't know why everyone is so mad about the halting problem
@ConorMancone It came from the hippie era. You couldn't ban hippies, but you could associate them with marijuana and declare that illegal
I'd love to record a metal album that is just me screaming at all kinds of stupid now-deleted posts, with some added distortion, strong EQ and some noise ontop
