« first day (3793 days earlier)      last day (47 days later) » 

12:27 AM
guys, do anyone have any template for a document describing a high availability infrastructure? I designed a dozen of those, but I never had to write the specification using the isos and so... and now I have to write the document...
 
12:39 AM
You may be able to ask on Network Engineering, or their chat.
I'm sure they have more HA experts there than we do.
 
12:57 AM
I was thinking about the serverfault, but that is a good one too! thanks!
 
1:15 AM
I'm putting a GPG private key ID in my .gitconfig which will be public on my github. The ID being public should be safe right?
 
don't put on github what you don't want people to know...
 
Your private key or your fingerprint?
But yes the ID itself is meant to be public.
 
1:34 AM
serverfault room is a little deserted: "The last message was posted 267 days ago."
 
1:55 AM
haha wow
 
2:08 AM
@ThoriumBR that's definitely not correct. It is deserted thought
 
@ThoriumBR Are you talking about networkengineering's room? SF's room has last message 2 days ago
 
 
6 hours later…
J--
7:55 AM
@forest Oh I don't think they did it themselves personally. I was just merely trying to make the point that pigeon holing people's ideas as crazy simply because you disagree is just a harmful way to navigate life. Just as calling anyone who is more left-learning than you a communist or calling someone more-right leaning than you a Nazi is.
Which I also thought was a fairly simple concept to grasp but alas not.
 
8:21 AM
Ok, if I accept your point
at what point does a conspiracy theory have to surpass, before you got 'lol no'
Flat earthers?
 
 
2 hours later…
10:44 AM
New idea for an educational series: A tsundere loli berates her programmer brother on all the shitty mistakes he's making while programming a web application from home.
"Onii-chan, are you seriously concatenating strings in your SQL query?" - "What? It's a prepared statement. Stack Overflow says I should use those." - "Baka! You have to use them correctly. If you concatenate values into a string and then make a prepared statement out of it, you just "prepare" the attacker's code!"
 
 
1 hour later…
J--
12:06 PM
@MechMK1 heh :D
 
@J-- Every episode, they'll look at another class of vulnerability
Of course, the whole series will be littered with upskirt shots, so that people stay interested
And in the final episode, he releases the application and everything is fine.
 
J--
Hahahahahahahahhaha.
I mean, its one way to teach security for sure.
upskirt shots?
 
Also a white gothic lolita outfit
Because you know, she's a whitehat :D
Review from a programmer: "I am very confused. On one hand, the presented material helped me greatly in understanding security for web development. On the other hand, no other course made me consider the implications of incestous acts between siblings. All in all, I would give it a 8 / 10."
 
J--
12:26 PM
Hahahahahahahahahahah :D
 
Basically Ore Imo meets OWASP
 
J--
I approve.
Write up a script, find an animator :D
At least a pilot episode :)
 
Upskirts of a loli? Why does it has to be a loli? I'm all for gothic outfits, but please fill those upper frills.
 
J--
oh not of a loli
im not interested in that
 
More people seem into loli
But you're right, infosec onee-san is better
Oneshota x OWASP
UGH, I'm trying to decode a bike lock I have laying around at home
and it binds up a lot around 1234, but it won't open
 
12:50 PM
Maybe its extra secure... by which I mean broken
 
Could be
It hasn't been used in years
It's an old lock we had in our cellar
 
That might be due to false gates. For example, ABUS combination locks have 4 false gates per digit.
If you had an ABUS lock, that would mean that your combination is of the format [odd][even][odd][even]. That reduces the number of combinations to try from 10^4 to 5^4.
 
1:06 PM
It's a 4 digit bike lock with a wire
And knowing my father bought it, it was the cheapest they had and then he still haggled for the price
 
It can still have a few false gates. Or it can be just broken.
I have a very very cheap digit padlock: even with the correct combination, it's sometimes hard to open.
I guess you tried to jiggle it around the assumed correct combination (1234 looks like one). If so, it might just be too corroded or filled with dust to be used again. WD-40 might be your friend.
 
 
1 hour later…
J--
2:25 PM
So, someone just said to me that it doesn't make sense for me to be "woke" or progressive because I am just lucky to be born in a more "woke" or progressive culture and that if I was born I probably wouldn't be progressive so it doesn't make sense for me to be like that now.
I am not sure how to take this. That is either the most logical and based take ever or it's just backwards...
 
2:44 PM
It's backwards. It's normal for one's beliefs to be influenced by one's environment. But denying "environment influence" by basing the argumentation on its existence is just absurd.
 
J--
Yeah, that's what I thought.
I mean, on that logic; we'd have never progressed.
I get the feeling this person would much like to live in 1860.
 
 
3 hours later…
6:12 PM
@J-- my head hurts LOL
Don't you love it when people propose unprovable situations
 
J--
6:57 PM
It's utterly impossible to grasp how anyone can believe this makes any sense.
 
reading scroll log
Oh, I was hoping for drama.
 
J--
heh.
 
@MechMK1 This is the most amazing thing I've ever heard.
 
J--
I'm upset today as well, actually. Because I am in my self-doubt mode, which is fun.
The mode where I question every sentence I write. Every answer I give. Every challenge I solve and everything in my life up until this point.
 
7:13 PM
my landlord built a 9m wall 1m away from my windows, and now my house is as lit as a cave...
 
@J-- *write
:P
 
J--
yeah se...
 
he is asking me for suggestions to make the situation better, and I came with 2: move the house 3m back or the wall 3m away.
 
J--
Self doubting so much I can't spell.
 
Don't self-doubt. No matter what your situation, you're smarter than most assholes out there.
 
J--
7:15 PM
Thanks. It's okay, this happens a lot. I just don't deal with it in the most healthy of ways.
But I'll be fine.
 
:57884448
>gothic lolita
>not blackhat
 
J--
Heh, I was waiting for that :p
 
J--
7:36 PM
@forest
DO you know anything about these people? wait.
@0verfl0w_ and @VK_Intel
Do you know either of them?
 
Not by those names.
 
J--
Hmm, okay.
They're the people who own that platform.
Wondered if you knew them.
One of them seemed to be involved in blackhat world but from government side (spits)
 
Oh, no. I'm looking at their Twitter now.
Which one?
 
J--
Let me find it again.
@VK_Intel
"to the StubHub intrusion. In this case, Vitali identified and tracked the Russian cybercriminal in Spain and helped extradite him to the US. "
 
Ah.
Lots of people are very anti-ransomware.
But I hate it when a Russian hacker gets extradited to the US. They're fucking Russian.
It's not like they're a US citizen on the run in Russia.
But the US likes to play world police.
 
J--
7:41 PM
^
 
And either way, ransomware is not that bad. It's just a reminder to keep backups.
 
J--
Unfortunately they do like to do that, yeah.
 
@forest Not the new double extortion ones
 
Double extortion?
Are some of them just asking to be paid twice?
 
The ones where they threaten to release data.
 
7:42 PM
It's not a data breach. It's a surprise backup!
 
J--
Most companies deserve to get ransomed, let's be honest.
They bring it on themselves... If they wanna do horrific shit and expect people not to do it back then their delusional.
 
But even if they threaten to release data, 99% of the time it's "intellectual property", not someone's personal stuff, and it damages a company, not an individual. Also, leaks are good.
 
they are a reminder to have network flow analysis running
 
yup
 
J--
"let me use children for slaves! but dont ransom me for $50,000 please!"
fuck off.
 
7:43 PM
Apple in a nutshell?
 
if you have a development host sending GBs of data to a recently registered domain, something may be wrong
 
J--
^^ :D
Yeah pretty much, forest :D
 
@ThoriumBR Good data exfiltration will piggyback on an exiting connection.
 
J--
As far as I am concerned, most companies deserve it.
 
And pop the box on the other end.
 
J--
7:44 PM
Now, is ransomware on the NHS fine? No. It's not.
 
@ThoriumBR I guess the big groups are asmarter than that
 
J--
Is it fine on the police? Yes.
Is it fine on a government? Yes.
 
it's not that easy to piggyback on a connection and send 1TB of data outside
 
J--
Is it fine on a corporation which makes billions a year? Yes.
They've live...
 
@ThoriumBR Unless they're already sending TBs of data, then you can get another TB easily in a few months.
 
J--
7:45 PM
The children they work to death might not, but capitalism, right?!
 
and I don't believe lots of companies will keep logs on data being sent away...
 
@ThoriumBR Not to mention, data could be exfiltrated by the routers.
Not necessarily the servers themselves.
Sometimes the easiest way to pop a box is to pop its datacenter.
 
I saw some leaks that sent data to mega.nz, for example
how someone sends internal data to mega.nz and nothing stops them?
 
Are you sure the leaks went directly to meta.nz?
And not to some server the attacker bought?
 
nope, they found a mega.nz script to send data from console straight there
 
J--
7:48 PM
Speaking of interesting attacks. I was reading an article today, someone managed to domain transfer "dark.fail" to another registrar and then use it to phish users who use the non onion link.
Really interesting how they did that when there was domain lock on and never had access to the account of which owned the domain.
Apparently something about a fake court order or some shit?
 
heh
 
J--
Absolutely crazy.
It's pretty wild.
 
I've never heard of dark.fail.
Looks like a "darknet market" list?
 
J--
Its just a collection of darknet resources.
markets. forums. crypto converters. email services. just a bunch of random popular darknet shit.
 
And scams, I assume. :P
 
7:50 PM
@J-- they can... here in Brazil a drug dealer walked by the front door of the prison because someone spoofed an email from a judge asking to release him... prison guards got the email, believed it, and released the guy without questions
2
 
J--
probably some scams on there forest, yeah :d
 
hahahahaha
 
J--
@ThoriumBR hahahahahah wow
 
"some scans" is the understatement of the day...
 
J--
I mean, it's not ALL scams.
There's some good forums and stuff.
Nice conversion tool as well for BTC -> XMR.
But most places don't take XMR yet. Like, for example I can buy a laptop in BTC really easily.
But I can't buy a laptop in XMR.
 
7:53 PM
@J-- another fun story: bank robbers got to an Army Base with yellow vests, a clipboard, a truck, and a form saying they were there to replace the ATM.... asked the guards to sign the form, asked help to unbolt it from the concrete base, loaded it on the truck and went away.
 
J--
Hahha, that's insane.
 
after half a day the guards called the ATM company asking for the ATM replacement and heard this: "Replacement? Which replacement? Who are you?"
 
J--
Man, social engineering is so cool.
I wish I was better at socialising because I think it'd be a cool job.
 
Easiest way to sneak in: wear reflective high-visibility vests.
 
why use a bomb on an army base if you can ask them to unbolt the atm for you
 
J--
7:55 PM
But it is quite hard to be a social engineer when you can't even look at your own girlfriend when talking, let alone a stranger...
 
I saw some guys on youtube proving that if you have an yellow vest and a metallic stair, you can enter anything
 
J--
^ its true.
you can.
 
@forest I thought people had started catching on to the this trick, but no, its still works most of the time
 
@J-- get to a college and do some acting classes
I saw a guy entering Walmart with a badly faked Walmart uniform and leaving with a full pallet of beer
he did the same on more than one shop around town
 
(nvm was thinking of something else)
 
J--
7:57 PM
@ThoriumBR I'd rather die.
I have accepted now that I will never be a social person nor will I ever be good at it.
And I am quite happy to be like this until I die.
Most people make me annoyed anyways.
I don't like their mannerisms, the way they talk, the way they act. I just don't like people.
 
There's no need to be an expert social engineer to be a hacker.
 
J--
Oh I know.
I just think it's cool.
I have no intention of doing it, though.
 
@J-- social engineering in person is impossible for me too... I don't even know how I got married. but you can do it online
faking emails, sites, whatever... it's easy
 
J--
^^ i feel that second part lul
 
some time my wife makes fun of me asking if I would marry again if we broke up, and I say "I don't know to this day how I got to marry you...."
 
J--
8:05 PM
Haha. Yes, I'm much the same. I would never be involved in another "relationship" if this one were to end. Even if I wanted to, the chance would be very unlikely that someone else would cope with me. I mean firstly, I see my girlfriend for a maximum of 3 hours per day, if she's lucky. I don't know a single other human on this Earth who would be okay with that especially given she lives with me. If she didn't I'd see her less than once a month for sure.
Also, even if someone were willing to put up with that, there are many other things they wouldn't put up with. Talking to me at all being another... Since I don't talk in real life, rarely ever. I don't like it. Which most people find very odd and ultimately boring...
 
8:35 PM
@J-- there are some people that would find that interesting...
 
 
2 hours later…
J--
10:08 PM
@ThoriumBR I doubt that very much.
Besides, I find 98% of people absolutely intolerable.
Sot eveven if people were interested in that, I'd likely not be at all interested in them. I have more important things anyways. Like my career.
 

« first day (3793 days earlier)      last day (47 days later) »