Is there some way to make "categories" on twitter without creating multiple accounts? In essence, I'd like to filter through a few categories of twitter accounts that I follow easily, say "security", "space bollocks", "other bollocks"
> We like to think outside of the box. For example, we had someone who needed to connect an LDAP server to a JavaScript application using a serial port... it took some jury rigging, but he got it done."
@Adnan - it was a spelling correction. You wrote rouge, but meant rogue:-)
@Lucas - in a 400bhp car, there is a fair amount of heat generated. Admittedly I wouldn't have the windows open at -20, but I probably wouldn't wear a jacket or gloves until it gets really cold.
Nah- it was a comment so you wouldn't get a notification.
@Thomas, @AviD, @Iszi and @Terry - how would each of you like to spend 15 minutes to write a quick QotW post for each of your posts mentioned here: http://meta.security.stackexchange.com/q/1018/485
?
I'll also do the one I proposed - then we will have 5 weeks worth of QotW posts to schedule and publish
Also, anyone want to add to the list of nominated posts, feel free - just felt I should kick start it again
(after @Lucas did such a good job with his wifi post)
What's a simple way to run a command, say, 8 hours from now? I can think of this way:
nohup bash -c "sleep 28800 ; ./mycommand.sh" &
Is there a more "proper" way?
At first it might appear that the buffers are protected from overflow by the use of strncpy(name, buf, 20);
but a closer look at the way a NULL byte is written shows you can make the 3 calls that construct fullname actually write more than 42 bytes, giving you your overflow.
That was the note I made to myself after I did it, incase I wanted to revisit and needed a clue :P
@lynks Why does writing the first[] buffer with exactly 20 bytes without the null terminator cause the function to also write the contents of the last[] buffer to the first buffer[].
@TerryChia Because they are neighbours on the stack
strchr(buf, '\n') = 0; when applied to the *first buffer will actually overwrite the 21st position
or not at all, depending
so you end up with buffer being [20 chars][null], but that [null] is at the same position as index 0 of the second buffer, because it was written off the end of the first buffer.
yeah, when you say to C, "hey can you read this string for me and do something with it" you give it an address, and it goes off down the stack incrementing the address for each character forever or until it hits a 0x00. (forever in this case means until a page fault)
@lynks One more question on level 6 if you will. :P I initially got pass the level by executing a shellscript that cats the contents of the level7 .pass file because I was unable to get a /bin/sh shellscript working.
I asked on the IRC channels and I was given this advice.
> <bla> you are most likely doing it in such a way that you close stdin <bla> for example <bla> ./exploit | ./level06 <bla> or ./level06 < exploit.file <bla> these close stdin, respectively after exploit terminates or eof of exploit.file
I was also given this tip to get pass it.
> <bla> ./level06 < <(cat exploit.file; cat)
When I tried doing that however, I am stuck with a stdin that apparently does nothing.
@TerryChia so yeah, when you use pipes or redirection, you send an EOF that closes stdin for your exploited process. What he is trying to show you there, is that you can send your /bin/sh shellcode and immediately follow it up with some shell commands to execute. Because you are delivering the whole thing as a single parcel, the commands get executed.
I think.
although that double redirect thingy looks weird
wait, yeah this is bash syntax that I am not familiar with
@Gilles "Key size" is an administrative concept, "modulus size" is a mathematical concept. On crypto.SE, the mathematical concept should be used, so reject.
@ThomasPornin The Bear explains what I was thinking, only he formulates it clearly. Thanks
@TerryChia if ./exploit generates the exploit input and you want to type shell commands afterwards, you have to pipe them both into the vulnerable program
e.g. { ./exploit; echo cat ~level07/flag; } | ./level06 or whatever it is you need to do to advance to the next level
or { ./exploit; echo 'bash </dev/tty' } | ./level06
@TerryChia that's process substitution. Search for <( in the bash manual
for what you're doing this is equivalent to { cat exploit.file; cat; } | ./level06
so I want to know how the police can find out who you are if you post something on the internet?
So just even this post, how does the police find out that this is me? How can they track me down?
if you guys want to reptrain on this, tell the guy to come to sec.se (assuming he doesn't find his own way). I'm not taking responsibility for unleashing him elsewhere
Also, there's a leak on the exhaust very close to the sensor so that might be the cause. I'll start with that, will do it on Saturday with a friend of mine.
@DavidFreitag Yup. I'll get an aftermarket Cat if needed, that's what my friend had. He paid ~300$ for the whole exhaust.
I bought a Bluetooth ODBII with the application Torque on Android. It cost a mere 28$ and it gives you much more options/details than a diagnostic tool you would buy for 200$.
@Simon Yeah, hopefully Subaru didn't use oddball sized piping like Ford did on my last car. I would have had to buy a new $1000 cat, so i just emptied it out and the ECU stopped throwing the code :]
@Simon Yeah that sounds about right. I had to do emissions with my cat that was throwing codes, i cleared them in the parking lot, rolled it in. Passed with flying colors.
@Simon the funny thing is that the guy came out of the garage with a sullen look on his face. he told me that it wasn't even street legal and needed to be towed out of his shop.
@Simon Also, check your air filter. I had a rat crawl up into mine and make a nest. I thought i blew the transmission. ECU was throwing every o2 related code possible.
There are a few factors that could have caused this. 1- I rev'd it about 10 seconds after I started it (it was hot though, I drove to the gas station) 2- I pretty much stopped accelerating all of a sudden because of the stop. 3- Possibly those check engine codes.
Hum yeah, I guess I should check that too but it should be fine.
@Simon Yeppers, almost got totally annihilated by a fully loaded car carrier. Luckily it happened while i was going down a pretty steep hill, otherwise i would probably been killed by a few dozen tons of new car
@Simon Theres nothing quite like arm wrestling with a steering wheel that won't steer and planting both legs into your brake petal that isn't braking at 85 miles an hour on the feeway.
@RoryAlsop Yeah, my old shitbox ford that had more rust than anything. Before i got rid of it the bracket holding the rear passenger leaf springs to the frame disconnected so whenever i hit a bump the axle slammed into the frame
What's a simple way to run a command, say, 8 hours from now? I can think of this way:
nohup bash -c "sleep 28800 ; ./mycommand.sh" &
Is there a more "proper" way?
so I want to know how the police can find out who you are if you post something on the internet?
So just even this post, how does the police find out that this is me? How can they track me down?
