« first day (3794 days earlier)      last day (38 days later) » 

J--
8:32 AM
Morning.
 
8:42 AM
I won't say its morning, but hi!
 
J--
Heh.
Hello.
I just realised I still have one more NX bypass challenge to complete.
Yay.
More hand building rop chains...
sighs.
 
Do these challenges come with the course?
 
J--
Yeah, they do.
 
I wonder how people who try to learn by themselves practice.
 
Hello.
 
J--
8:54 AM
I think it would be virtually impossible to learn any of this without practicing.
It's the same with hacking in general, you cannot become a good hacker from just reading books and watching videos.
 
Apologies if this isn't allowed in here, just thought it was worth a try - I can't read the room description on my computer. I got this as part of a puzzle.
 
J--
You need to interact with a vast array of different systems, setups.
@A.B. A puzzle?
 
Yes. It looks like a rip-off of the old Cicada 3301 puzzles - it's not really them, no PGP signature and the real Cicada 3301 always made a big point of having a PGP signature on every message.
 
J--
Hmm, well... Nobody has posted anything puzzle related in here in the last week I can tell you that much.
I'm here everyday... I've not seen any ARG related material.
 
Our room description is simply A serious place where infosec is discussed PS we don't do hardware/software support (srs face -.-)
Its highly inaccurate BTW
 
8:57 AM
Oh, I don't mean I got the chat as part of a puzzle, I meant I got what I was just about to post as part of a puzzle. It's some kind of encrypted thing and I know very little about computer encryption, was just wondering if you could tell me what it's for.
:-)
Grr, too long to post.
 
J--
Upload it to pastebin, I'll see...
 
Well, first message was this
 
J--
@nobody haha, true :D
 
 
Go ahead and post. If somebody can help, they probably will, otherwise well just move on
 
8:59 AM
Which leads to this
Which is Base64 for this
and that's where it lost me.
It looks as if it's meant to be run somehow, but on what I'm not sure.
 
Well the base64 string after "ct": is the ciphertext for something encrypted with aes256-ccm with Initialization vector 0IyeLXANJxsSYPzVJP8iBA==. I'm not sure what the ts and iter parts are for though
 
J--
Pretty sure this has been done using sjcl.
You can find a lot of questions about sjcl on StackOverflow.
 
Right
So now you just have to guess/find the password
 
Thanks, both of you! Off to StackOverflow I go.
 
J--
I'm going to assume there is an IV re-use problem here, or something along those lines.
 
9:08 AM
Oh wait this is a crypto puzzle. I thought it was the sort of puzzle you found on puzzling.se :)
 
J--
Seems like an ARG with some crypto involved.
 
What's an ARG?
 
J--
Alternate Reality Game.
An alternate reality game (ARG) is an interactive networked narrative that uses the real world as a platform and employs transmedia storytelling to deliver a story that may be altered by players' ideas or actions. The form is defined by intense player involvement with a story that takes place in real time and evolves according to players' responses. Subsequently, it is shaped by characters that are actively controlled by the game's designers, as opposed to being controlled by an AI as in a computer or console video game. Players interact directly with characters in the game, solve plot-bas...
Typically how these online puzzles are defined now.
Since they place clues in the real world, on websites, using games, videos, pictures, etc.
 
interesting, but also boring
 
J--
I think puzzles are pretty cool but these days a lot of ARGs are very cringe.
 
9:13 AM
I think puzzles are pretty hard. I don't remember ever solving a real puzzle
 
J--
I used to do ARGs when I was like 14 or 15, I guess. There's a bunch of them laying around the internet some of which are really well put together others are just... Nonsense.
 
Hence why I find them boring ;)
 
J--
Heh.
Puzzles are hard, but that's the fun!
I'm a masochist, I love being stuck...
 
Hard things are fun if you ever manage to solve them. Not if you can't
 
J--
Hahahahahha.
I guess that is certainly true.
I am yet to find something I cannot solve though, even if it takes me years..
 
9:17 AM
@J-- Looks like you need to study quantum physics.
 
J--
@nobody Hahahahahhahahahah :D
No, that is something I could never understand.
Contrary to popular belief I am an idiot. Well, I know things about infosec - but I barely even finished school.
 
I'm not sure if anyone can
 
J--
I couldn't even tell you all the planets.
I don't know them.
I don't know a lot outside of infosec.
 
@J-- Well I am an obvious idiot :(
 
J--
Heh, I doubt that :)
Man, I can't wait to start these ASLR bypass challenges.
 
9:40 AM
@nobody I'm with nobody. If you're the master of solving puzzles you should try to figure out some outstanding questions in physics! There are plenty that can get you a Nobel prize, and what's the difference really between an unsolved physics questions and a puzzle?
 
@ThoriumBR so you're moving out, right?
 
10:28 AM
@forest I'm actually considering writing the script for OWASP-nee :D
@J-- The problem with a lot of puzzles is that the solution makes no sense, even after knowing what it is
Have you ever played 100 Doors? You know exactly what kind of BS I am talking about here
 
 
2 hours later…
J--
12:22 PM
@MechMK1 Heh, I guess that's true :D
No, never played that.
What is it?
 
@J-- It's a phone game. You have one screen and one door in front of you. The goal is to open the door.
The first one is simple, you just tap the door, it opens
 
J--
Phone game? I'm already turned off.
 
Then in the next, you lift a potted plant, find a key under it, it opens the door, etc...
But as the puzzles progress, they become batshit insane
 
J--
Heh.
 
I mean, some puzzles, when you see the solution, you're like "Ohh...ah yeah, now I see it"
For example in Submachine 2, there is a point where you have to enter a 5 digit code into a machine
And if you inspect the machine, you find e = mc² etched into it
And far far away, in a different section in the game, you find m = ____ etched into a lamp
And somewhere else, c = _____ etched into a brick
So once you realize you have to find the two numbers and calculate mcc, then enter the result into the 5-digit machine, it makes sense
 
J--
12:30 PM
wtf lol
 
Submachine is a classic point-and-click adventure
 
12:43 PM
@ConorMancone I used to think that because I could solve puzzle books that maybe I could solve one of the Millennium Prize Puzzles. Turns out those unsolved questions are like really really hard
 
1:16 PM
@FireQuacker If I can solve puzzles then why can't I solve an np-hard problem?
 
I looked into P versus NP once. Turns out most of the research is people finding ways you can't solve it. Like, okay can't do it this way, that way, or that way... guess I'm done then.
 
I solved a sudoku once so I'm pretty confident I'll be able to solve chess
 
J--
You know what I hate?
People who fucking quit.
People that quit genuinely baffle me.
Why would you spend weeks and months investing yourself into something just to give up?
And then expect someone (me) to have sympathy for you?
 
For most puzzles, the puzzle maker has a way they expect you to solve it, so all you have to do is find that path and stay on it. For physics/mathematical unsolved questions... nobody knows if there is a solution, let alone a path
 
J--
This is why I don't like people.
Don't come to me looking for acceptance of you giving up.
If you were content with giving up you wouldn't want acceptance of the action or sympathy for it.
/rant over.
 
1:35 PM
No worries, I'm not ragequitting yet :D
 
J--
Heh :D
 
It depends why they quit tho
 
J--
It just annoys me because... I've never quit anything. I've wanted to quit many times in my life, I've attempted to quit my actual life multiple times, that doesn't even factor just tasks, or whatever.
So when someone comes to me and bitches about quitting and wanting my acceptance.
I just have no time for that.
 
I've no time for whingers
 
J--
Quit, you can. But don't tell me and expect me to be like "oh its okay man!"
 
1:37 PM
yah
funny thing is, acceptance comes from inside
 
J--
You quit because you're too much of a pussy to try and achieve anything that takes more than the 5 year old of a child.
 
if you're whining to me about quitting, it's because you don't accept that you did it yourself
 
J--
SO don't expect me to be like "oh yeah good job!"
I never quit. I get very upset, but I never quit.
ANd if I did, I wouildn't expect anyone to go "its okay"
Its not okay.
@djsmiley2kStaysInside EXACTLY!
 
See, sometimes we can agree :D
 
J--
I quit every fuckin' day.
 
1:39 PM
I mean, I quit college, and 6th form
 
J--
But you know what? I always keep trying.
I always come back.
 
but, I did it because I'd chosen wrong.
 
J--
Almost every single day, I quit something.
Sometimes I quit things every hour.
 
I don't quit things I won't accept myself quitting
 
J--
I think its really important in life to get back up.
 
1:40 PM
actually, that's a lie
i quit learning programming, so many times
 
J--
Well, I think there's a difference been quitting and quitting you know?
You can quit something and come back, like a person who wants to try.
Or you can quit and give up.
And the second one is only okay if you're not gonna expect me to have sympathy for it.
I do the first one almost daily, for sure. But I always try again.
I think that is a value which most people have lost in recent years. But its really important to me.
It comes from bad parenting too.
Parents teach their kids its okay to give up these days, it's not.
 
J: I fucking hate people who quit!
Me, pondering about my heroin addiction: No, he's right!
 
J--
HAHHAHAHAHAHA
 
The best thing I've ever seen is those "motivational quotes", put under people drinking alcohol
"Crying is okay, throwing up is okay - quitting is not okay."
2
 
J--
hahahahaha :D
Maybe I'm wrong, but from my experience, a lot of people I know, they are the kinda' people who quit and they never want to get back up.
They don't feel sorry for themselves for a day, they feel sorry for themselves for 18 months.
"oh i quit this 17 months ago so i cant start this new thing yet"
 
1:46 PM
I'm basically just trying to get through life at this point
 
J--
this might be one of my most right leaning viewpoints i have
perhaps my only one...
if you can even call it that.
 
I have a feeling if I ever met J-- in real life, he would hate me
 
J--
It depends if you'd expect me to have sympathy for you or not :)
I should say; it's absolutely nothing personal. If you wanna quit, go right ahead. I just don't often have any sympathy for anyone because I think a lot of people bring shit on themselves and then expect me to care. And if I can navigate life, most others can to. People who say: "i cant find waht i enjoy" or shit like this, they often are not looking hard enough.
 
I hate sympathy from others in most things
 
J--
You'll be fine then :)
And that concludes any right leaning viewpoints I have...
Other than that one, I'm a communist through and through :D
 
1:52 PM
@MechMK1 Sodoku counts as a puzzle?
Because I have solved the easy ones
 
Sudoku (数独, sūdoku, digit-single) (/suːˈdoʊkuː/, /-ˈdɒk-/, /sə-/, originally called Number Place)[1] is a logic-based,[2][3] combinatorial[4] number-placement puzzle.
 
Yay! TIL I can solve some puzzles
 
J--
@MechMK1 I just thought of something.
THis picture reminded me of the time I had 12 tequila shots back-back
and that incident still haunts me to this day..
i was paralytic for about 9 hours or more.
i could barely even open my eyes
and if you wonder why i did that: i cannot disclose it.
 
Sometimes the best choice is to quit. For example, if you are on a ship (or in a company) bound to sink, it's often better to quit early (and be able to plan the exit) than when it's too late because the ship sank and you're left without a lifeboat or a direction to swim forward to.
 
J--
^ hahahaha
Yeah good point :D
 
2:09 PM
Reminds me of when I was on a lan
And someone put a bottle of Cpt. Morgan next to me
So I just kept drinking
Until eventually, I was really fucking drunk
And we were playing CS:S
 
that happens
 
And I was still dominating with the AWP
God, that was hilarious
LAN was over when someone spilled a beer over the router :D
And my drunk ass had the legendary idea of tumbling home with my laptop instead of sleeping there or calling someone
So at like 3 in the morning, I was completely shitfaced and stumbled through the city, towards my home
i didn't even take public transit or such, because I'm an idiot
So it was like 5 or such when I finally came home, my mom was like "The fuck are you doing here?!"
So I explained. Of course, she immediately noticed I was drunk.
 
J--
^ haha :D
 
I said I walked all the way from my friend here, since the router died when someone spilled a beer on it
To this day, I am puzzled how nobody robbed me
 
J--
Luckily, I was with a friend, the problem is that I ended up falling asleep in the boot of a car instead of in my hotel room.
 
2:14 PM
But to this day I remember how fucking good I was with the AWP
 
@MechMK1 probably scared them off :D
 
They were scared of getting quickscoped
:D
 
J--
^ hah :D
 
3:14 PM
I once sneezed, got a head shot through 2 doors on Aztec, with the awp
on the guy about to plant the bomb.
I should of just quit life right there
was never going to exceed that
 
Yup, doesn't get better than that
 
3:40 PM
@djsmiley2kStaysInside yep... I went to see a house this morning, I hope we can get it
 
@MechMK1 +1 Just for the ASCII art, didn't even bother to read your answer
 
 
3 hours later…
6:42 PM
@ThoriumBR good luck
 
6:56 PM
@djsmiley2kStaysInside I will end up buying a house... we went to see the location, because it's still not built
 
7:07 PM
ah ok
 
 
2 hours later…
8:44 PM
Folks, is there a convenient app for diff-comparing certificates?
 
 
1 hour later…
9:58 PM
@NickAlexeev I can't think of any, but you could decode the certificates with e.g. openssl and do a regular diff on the formatted output.
 
 
1 hour later…
11:09 PM
(Shower thought) Could disabling HPET would have an effect on any timing side-channels?
 
11:59 PM
@MechMK1 Since you were talking about Windows vs Linux security a few days ago, you might like this (criticisms of various default Linux setups): madaidans-insecurities.github.io/linux.html
 

« first day (3794 days earlier)      last day (38 days later) »