« first day (3724 days earlier)      last day (47 days later) » 

3:19 AM
reads up
there's a bif difference between choosing not to go out, and not having the option :D
 
 
9 hours later…
12:06 PM
Hi o/
I hope everyone is fine amid COVID
 
home nobody got covid, but staying indoors all this time isn't nice.
yet way better than indoors at the hospital
 
totally agree
because that's all we can do as a safety precaution
I think situation is getting improved all over the world except US
 
12:21 PM
hahahaha... ever heard of Brazil?
you guys are leading in vaccinations already. we have signed a deal to buy Pfizer vaccines only THIS week.
and the total vaccines bought is enough for less than 5% of our population
 
@ThoriumBR ofc, I used to regularly check stats
@ThoriumBR and % of affected people?
 
we are beating our own infection records, and this week we increase the death rate over last week by 50-80% IIRC
infected people don't need to be vaccinated, they already got covid. the non infected need it first
on my State, vaccines are only for 76+ year olds. if you are 75 or less, no luck, only lock...
and vaccines for 76 yo will arrive on Friday. Hopefully.
 
yeah that's true, here also vaccination is being done on priority basis
"normal" people are #4 priority
@ThoriumBR but the very serious ones do need to be vaccinated first
@ThoriumBR Sorry to hear that
 
@daya nope, if you already got covid, throwing the vaccine in your system will not help. it's like start a fire escape training during the fire
from Jan 1st to today, death rates increased by close to 400%...
 
I see
@ThoriumBR Right, I just checked the stats again
 
12:32 PM
 
Here it was on peak in Sept-Oct, 98k+ cases/day
 
on this table, bulgaria is up 400%, but our population is 30 times larger... so a handful of deaths will skew the statistics a lot...
 
and it was estimated that we will soon surpass Brazil in no of deaths
 
your population is almost 1.5 of us...
you guys have 328M, we have 211M
so if you have 300k deaths and we have 250k, we are worse
 
@ThoriumBR no, I am from India
We are close to 1.4 Billion
 
12:36 PM
and you guys have a health industry, lots of labs that can create the vaccine, infrastructure to deliver it.
sorry... so we are way smaller
we have only 2 labs, half of the country does not have infrastructure, some large cities can be accessed only by boat or plane
 
Oh I didn't knew that before
@ThoriumBR yeah two institutes are producing the vaccine
 
Manaus... it's the largest city on the Amazon forest, and there's no highways going there, only boats and planes
we have only Fiocruz and Butantan that can create the vaccine
and the state government where Butantan is located and the federal government are enemies
so the federal government racked up import taxes A LOT when Butantan signed a deal with China
 
@ThoriumBR out of curiosity, What country did you thought before I was from as you said we are 1.5 of you guys?
@ThoriumBR that's very unfortunate
 
@daya that one...
"I think situation is getting improved all over the world except US"
 
oh
@ThoriumBR China is also supplying vaccines? I wasn't aware of that
 
12:45 PM
they supply the ingredients and we build it here
 
ah
India is also gonna give vaccines to many countries
like Bhutan, Nepal, Sri Lanka, Canada
 
our president is anti-vax, he said he would not care if you took the vaccine and turned into an alligator, that you have to be responsible for your own safety if you decide to take it, and so on...
 
Bangladesh and Mynamaar too
and many other countries
@ThoriumBR alligator? lol
yeah I had heard that news
here, situation is completely different, govt is even spending huge amounts of money in advertisement to ensure people that vaccines are reliable and safe
because many people were spreading rumours
and fortunately no negative effects of vaccines are observed till now
 
the worst case scenario on the vaccine is high fever and a trip to the hospital, and some long term effects... the worst case on the covid is death
 
right
 
1:01 PM
and it does not help that some health workers here are pretending to inject the vaccine but don't... it was caught on video several cases of this, and a couple nurses are in prison because of that
and I am left wondering "why the heck someone paid to vaccinate you will stuck a needle on your arm and not press the syringe to give you the vaccine?"
giving an injection is as basic for a nurse as typing on the keyboard is to us
 
@ThoriumBR that's very disgusting
 
and makes no sense
 
I sometimes really wonder how China controlled the infection despite being the most populated country in the world, I mean the virus was originated from there and got spread all over the world
They never told anything properly to the world
 
they didn't... that's why it spread. and statistics lie. our own, China's, yours, every single statistic out there lies
 
that might me true, as China have only 89k+ cases that's is simply unbelievable
 
J--
1:16 PM
Relying on other people to complete projects is the most infuriating thing ever.
Just let me do everything, ffs. I know what I'm doing. I'd rather just go outside of my job description than wait around for people to stop being incompetent.
It is so frustrating.
 
@J-- it's something on my top-10 too...
 
Hi J--
 
J--
I don't even care if the task is outside my job description.
Just let me do it myself. I don't care. I'll work extra hours if I have to.
I hate waiting for others when it is my project that it is essentially my fault if it takes too long.
And hey @daya long time no see
 
yeah, It has been more than a year
how are you?
 
J--
I'm good, thanks. A little stressed but other than that, okay. Yourself?
 
1:19 PM
I an good too, thanks
 
J--
Nice :)
 
so, did you got the job as pentester?
 
J--
Hah, yes.
I've been a pen-tester for... A year and a few months.
 
Nice!
 
J--
Heh, yeah. I didn't realise it was that long.
Now I think about it, I did stop using this site once I became a pen-tester, really.
 
1:24 PM
hmm because of limited time
 
J--
Yeah, also I kinda' lost motivation to write answers.
 
I will try into some entry level pentesting jobs after completing my grad
 
J--
What is your course on?
 
B.Tech Comp Sci
 
J--
Ah, okay.
 
1:29 PM
Getting job as a fresher in security is too difficult here
 
and I am here, doing a course on encryption, and the material confuses the IV with the salt...
 
J--
Well, just bought my OSED materials.
Time to spend every waking hour smashing stacks and getting frustrated by confusion.
 
Almost all of them req. min 2-3 yrs exp
 
J--
I got lucky...
 
Although I know development too but I am not much interested in that kind of job
 
J--
1:31 PM
Damn, that's annoying. I cannot start this course until 7th march at fucking 1am.
1am..
 
but yeah you have to end up with something
 
J--
I used to write code when I was younger. But not anymore, really.
Too boring,.
 
@J-- cool, yeah it is very confusing at starting, but it will become easier with time
 
J--
Well, I already started studying for OSCE which was the old course.
 
I did little bin exp before particularly protostar
 
J--
1:33 PM
I started studying for that ages ago. So I have a huge advantage. It has just been a while.
So, I've forgotten a decent chunk of the material. But whatever. I don't do anything except study anyways so I'll be fine.
 
yeah that' true, it happens all the time we tend to forget things
but it will take less time to recall
 
J--
Yup.
I was going to do the OSCE but then they decided to update the course so I just decided to wait.
I've been putting this off a bit but I just bought it so.
 
@ThoriumBR IV?
 
initialization vector
 
ah, okay
 
1:36 PM
you use a random IV so you can encrypt the same data with the same key multiple times, and the cyphertext will be different
so if an enemy compromises one message, he have no way to know that a second message is the same. and helps make cryptanalysis more difficult... but that is no salting
salting is to hash, not to encrypt
 
J--
That reminds me, my books should come today.
SO excited.
 
@ThoriumBR are you really doing an entire course on encryption? I mean you could have just learned it from free resources available on internet
 
I have to complete the course to be able to take the test that I am sure i will pass without the course
 
J--
I'm assuming he wants to learn it on a more mathematical level...
 
so I let the video playing on mute and background, and skimmed the presentation only to see what they are talking about
and realized I will HAVE TO study the presentation to learn the misconceptions that surely will be on the test
so if they call the IV "a salt", that's what I will have to answer
 
1:41 PM
@ThoriumBR ah, so is it your current job requirement?
 
it's not math level, it's the high level concepts: what's a key, what's cyphertext, who built enigma...
 
J--
Oh right.
 
it's for "corporate credits"... and to be able to put "cyber security l33333t master" on my mail signature
 
ah
That's annoying but yeah you have to do it to become 1337 haX0r
 
I usually let the videos play on the back, put a reminder for getting the last 20 seconds so I can click next, and go to the test. If I score 75% or less I have to retake the test (I have 3 chances), so I would watch the videos, but the last 5 courses I didn't even needed the material
it's annoying for us, but the management have to know who knows what, and those nonsense (for me) is necessary. I cannot "self certify" that I know a lot on security, and they need some way to evaluate that
 
1:48 PM
totally agreed
 
so when a project demands a security analyst, they look at their tables and select the l33t hax0r that is available
 
that's just happens literally everywhere
 
sometimes I can go straight to the test, but some don't and I have to do that...
 
they judge you by certs
 
J--
^ welcome to management in cybersec
and most fields...
 
1:49 PM
judging by the certs isn't the best way, but it's more accurate than judging you by your resume
 
J--
Yeah, unfortunately it is hard to find a balance.
 
same with me, few entry level jobs I see require CEH and I really don't want to do that useless expensive cert
 
J--
Judging only on certs for example is a disaster waiting to happen.
 
one guy here in Brazil put "Minister of Something" and got a job at a master's course...
 
J--
But not judging at all on certs is equally as bad.
Finding a middle ground isn't an easy thing at all.
 
1:50 PM
I like the "this is the requirements. what would you do" type of test
you will be a pentester? I will give you an IP address, and a week. reach me next week with a report...
 
J--
Personally I think a layered approach is good.
 
you're a infrastructure engineer? I need a webserver, database, analytics, firewall, and that's the credentials for our aws account. use as much as you need...
 
yep that's how hiring should be done
 
J--
Conversation -> Technical Questions -> Technical Assessment -> In Person interview.
 
but that rarely happens
 
1:52 PM
and use the creds to judge if you will take seriously the guy applying
 
J--
It is a long process, sure. But it is fair.
@ThoriumBR Exactly :D
Of course, no stage should be the end all or be all.
 
you may never actually talk to someone with real technical skills until you get hired
 
J--
If you fail the assessment it doesn't mean you should never get the job.
But I think it is an important part of the process.
 
there is a certification company named brainbench, it had a "all you can eat certifications this month" once...
 
J--
1:53 PM
Coming from a network engineering background, the amount of cheats that run rampant.
 
I took like 14 certs in a month...
 
J--
An assessment is super important.
 
I even got a master certification in Portuguese!
it's even on my resume...
I had a manager that said "certification means you can pass a test, your resume means you can write about, but if you talk to my engineers and they will know if you are lying"
 
@ThoriumBR lol I just realized Brazil's national language is Portugese
 
You didn't think it was spanish I hope
 
1:55 PM
the company said "you need x certifications", so I got those... they didin't told me obvious ones would not count...
 
Whenever I heard of portugal it's always associated with Ronaldo
(not a huge fan of football)
 
everyone thinks we speak Spanish... on the Americas, except of the US, Canada, Belize and 2 Guianas, everyone else speaks Spanish
 
@JourneymanGeek I didn't
I thought it was "Brazillian" lol
 
so there's like 25 Spanish speaking guys, and Brazil and 3 countries nobody knew about, and Canada and the US that I assume people know about...
we are the largest Portuguese speaking country in the world, and people from Portugal get mad when you have to select the language on any site and the Brazilian flag is there, not theirs
I assume the Englishmen feels the same with the US flag
I saw once a joke:
<British Flag>: English
<US Flag>: English, simplified
 
lol
 
J--
1:59 PM
lol
 
In India there are 22 different languages and every state has their own language
 
J--
^ password cracking must be a nightmare...
 
the wordlists should be huuuuge
 
@J-- yep, standard wordlists don't work
 
J--
Figures :D
 
2:03 PM
basically languages change every 10-20 kms because of so much diversity
19500 dialects
but majority of people speak and understand Hindi
(at least in North)
 
2:17 PM
"performance increased of up to 2x"
increase against what? "up to" means nothing. I can say I will increase my productivity "up to 2000%" and increase 0.0001% and be correct
 
 
1 hour later…
3:31 PM
@J-- tbh, most people don't have/use native keyboards
I use transliteration for typing in tamil usually
 
J--
Oh.
I didn't know that.
 
they exist but there's like
4-5 different standards...
for tamil keyboards
before ASCII unicode was common, you'd even have specific fonts for specific systems
en.wikipedia.org/wiki/… was the 'first' standard I guess
 
interesting...
 
3:58 PM
@JourneymanGeek That actually complicates things even more. Because you can transliterate the same thing in multiple ways.
 
@JourneymanGeek yeah but for passwords only English characters are accepted AFAIK so a huge wordlist can be used
 
@daya that in theory is an artificial restriction
and would kuthraibaatriserisulaani be better than "horse battery correct staple"?
(well a sulaani is a small nail but I can't remember proper tamil for battery or staple)
 
@JourneymanGeek definitely yes
 
or since yanno its modern times...
an on screen keyboard?
 
so you are south Indo-Singaporean :P?
 
4:11 PM
culture, language and country can be somewhat of a mix :D
 
yep
 
I mean within say the tamil culture, there's regional, religious and other variations
which may reflect in spoken language
the same is probably true of other linguistic groups
 
Yep, that's just everywhere in India, different dialects
 
 
1 hour later…
J--
5:24 PM
Well, OSED course locked in.
7th March @ 12:00am.
60 days of pure pwnage required by me, heh.
 
5:36 PM
@J-- Yup, you found the real argument against European-style language standardization academies: they make people's passwords easier to guess :D
 
J--
@LeifWillerts :D indeed!
 
5:58 PM
that's why I use a password manager
or I could mix English, Portuguese and Spanish words... take that, bruteforcers
English words, Spanish pontuation and Portuguese diacritics...
 
6:40 PM
I know a person who trained his dog to respond to commands Cherokee, just in case
 
J--
7:19 PM
I am reading through the syllabus for the OSED and I am scared. There is SO much content.
 
@FireQuacker something like that is a plot point of person of interest
 
8:09 PM
@J-- better than "I am paying so much for THAT?"
 
J--
@ThoriumBR Hah, true :D
I am going to have to study really, really, hard for this one. Just based on how much content there is.
 
your brain will enlarge a little after that
 
J--
I hope so :d
I get my materials in like a week so I have some time to mentally prepare
and prepare in general..
 
J--
8:32 PM
Wow this conversation I'm reading hurts my head...
SO much.
 
 
2 hours later…
11:01 PM
Hello everyone
 

« first day (3724 days earlier)      last day (47 days later) »