The DMZ

David Freitag

21:00

Just scrape all of the public numbers off of facebook and bam instant infectee list.

You could even automate it to say something from one of their friend's names eg: "Hey this is <name>, I borrowed a friend's phone. check this out:"

Ohnana

@DavidFreitag so glad i don't have my number on there

David Freitag

@Ohnana So glad I never made a facebook

Simon

@Gilles C'EST QUELQU'UN OU UN ENDROIT ÇA?

Ohnana

arstechnica.com/security/2015/07/…

@ErrataRob I'm not waiting anymore I'm releasing that packet http://t.co/fnXVQfLcJn

Tweeted by serdat5tm on July 31, 2015 at 8:25 PM in reply to ErrataRob

Simon

J'AI RÉPONDU À MA PROPRE QUESTION EN TE STALKANT

Ohnana

21:05

public-root.com/root-server-check/index.htm

i think someone's attacking root dns servers

David Freitag

@Ohnana Good thing I use Google DNS servers.

Richard

Lame. I was expecting more chat about donuts and booze and here you are talking about DNS servers.

Which I gather are something to do with computers.

TildalWave

worse, network security for which you were called an impostor for bringing it up

Richard

@TildalWave - I'm sorely tempted to put the room on timeout until you stop talking about boring stuff.

TildalWave

21:21

I wouldn't even mind

Richard

This room was placed in timeout for 1 minute; the topic of this room is "All Hail our new canadian mod overlords (who will surely provide doughnuts and whisky)" - conversation should be limited to that topic.

Note the room topic, people.

TildalWave

hmm where's that timeout counter? I'm sure it used to be there

Martin Rory Ingesen

It was.

Ohnana

BOOOO

TildalWave

really? I didn't see it

Ohnana

21:24

you're a mod ya ninny

Richard

@TildalWave - Only the little people can see it

Martin Rory Ingesen

o/

TildalWave

oh yeah

Gilles

(TWHS)

Richard

David Freitag

21:32

@Richard It's the weekend, many people are out doing something with their life.

Xander

Will the influx of new people with blue names never cease?

David Freitag

I however, am working on my speech controlled vibrator.

@Xander I'm just upset that it is not you who has the blue name.

Freedom

guys

Xander

@Freedom Freedom.

Freedom

i'm trying to fix a PC from family but i'm having problem deleting some hidden drivers

they keep coming back. and i'm not sure if they are a rootkit

David Freitag

21:34

@Freedom I never noticed this, but why is your avatar not a bald eagle?

Freedom

I'm not an american ?

David Freitag

@Freedom Did you nuke it from orbit?

Gilles

@Freedom nuke it from orbit

@DavidFreitag why would it be?

David Freitag

#rekt

@Gilles BECAUSE 'MURICA

Freedom

its a business computer. I'm not sure they would like me to nuke it from orbit

Xander

21:35

@Gilles @Freedom Better yet, throw it away and replace it with a shiny new Chromebook.

Freedom

@Xander Lol, isn't chromebook required to have internet access 100% of time to work?

TildalWave

@DavidFreitag what has freedom got to do with it?

David Freitag

@TildalWave Everything.

Freedom

@DavidFreitag maybe i'm not old enough. But i don't seem America as a country fighting for freedom anymore

Xander

@Freedom Yes, and in light of your comment that this is a business computer, probably not the best option.

David Freitag

21:38

@Freedom It was a joke... An apparently bad one

Freedom

@Xander I guess i will try to argue with them to let me reinstall Windows 7. I'm not in the mood to fight rootkits today

Xander

They're fantasic for people who only need to browse the web and read email though. Particularly those who can't be taught to stop clicking on things they shouldn't.

David Freitag

@Freedom Well here's your options: leave it, and leak out potential business details, or grab all of the necessary files, run, and nuke it.

Xander

0

Q: Stalking and harassment

I believe my ex wife is redirecting my yahoo and google accounts and somehow has access to anything I do online. How can I tell if my suspicions are correct. She is director of I.T. of a large company in the Kansas City area, so I know the knowledge and resources are available. I'm getting tired ...

privacy

Freedom

@Xander Yes, i really don't know how people still click in anything and install anything in 2015

Xander

21:41

Wat?

Freedom

@Xander I've being using a software called WinPatrol, it least stop them to call me to things like " my browser is hijacked "

TildalWave

@DavidFreitag I don't get the connection. How is 'murca synonymous with freedom in a way that all other countries aren't?

Xander

@Freedom Yeah, I don't either, but there are more of them than there are of us.

Ohnana

@Xander hmmm i might try to answer this one

Xander

@TildalWave Because we're the free-est.

@Freedom Interesting. I'll have to check it out.

TildalWave

21:43

@Xander right

Freedom

@Ohnana Best possible simple answer lol : change your passwords or create new accounts with strong passwords different from what they used before

Ohnana

@Freedom that's what I'm writing

Xander

@TildalWave Plus we have the biggest marketing budget.

Freedom

" She is director of I.T. of a large company in the Kansas City area " its funny how normal people see us like a super hacker just because we work with IT

Richard

@Freedom - Which would work a treat unless the computer he uses has a keylogger on it.

Which would explain how she gets access to all his accounts

Xander

21:44

@Richard +1

TildalWave

@Xander I know you can connect the dots, but I'm not sure @DavidFreitag did

Freedom

i will leave a comment " she ever had the hands on your computer? " opened any email after you broke with she?

David Freitag

@TildalWave I lost interest in the conversation

Xander

@TildalWave Sure he can. He's an American too. Americans are great at connecting the dots. It's one of our special powers.

Richard

@Freedom - A few years ago I found a weird dongle connected between the back of a computer and the keyboard.

Ohnana

21:46

@Freedom i beat ya to it

Richard

Looked a bit like this;

Ohnana

@Richard oh jesus those little fuckers

hardware sniffers make me so paranoid

TildalWave

@DavidFreitag oh you're such a tease :)

Freedom

@Richard Scary. It was a hardware backdoor probably?

I wonder how hardware backdoor can send data back to the owners

Ohnana

@Freedom i believe you have to retrieve them periodically

Xander

21:48

@Richard I thought about buying one of those once. But I didn't really have a use for it, and they're like $80, (or were, at the time) so I ended up not.

@Freedom It's a keylogger.

Richard

@Ohnana - My understanding is that they can be retrieved physically (with potentially months of keystrokes) or even downloaded to a file if you press the correct keystrokes on the keyboard.

Freedom

@Richard That would be not even a little discret

Ohnana

@Richard that makes sense

Freedom

If nsa was to broke the house of every person they put a hardware backdoor

Ohnana

@Freedom how often do you mash Ctrl+Alt+F6?

David Freitag

21:49

@Freedom That could have a wifi chip in there

Freedom

we would probably see this on news one day

Richard

@Freedom - Perfect if you have physical access but no password access (like a shared machine, for example)

David Freitag

Run some aircrack or something and boom internets

Xander

This is better

zdnet.com/article/…

Ohnana

@Xander oh fuck me

Richard

21:51

Ohnana

I can't even plug in y fucking computer fuck you darpa

Richard

Physical access not needed.

Freedom

It's really scary

David Freitag

amazon.com/NETGEAR-Nighthawk-AC3200-Tri-Band-R8000/dp/…

Freedom

Its funny how internet power most of the business today and the government still want to destroy it. I wonder will be a day where we will have to go back to sending messages with pigeons

And they want to push to me cars with internet.

I obviously want to give the world the chance to kill me while i drive just so i can check my stupid facebook feed

Xander

21:58

@Freedom Auto-Driving cars FTW. You can check Facebook all you want then.

David Freitag

There's also this: pwnieexpress.com/product/pwn-plug-r3penetration-testing-device

Ohnana

"runs Pwnix"

uggggh

David Freitag

And I like to drool over this one from time to time. pwnieexpress.com/product/pwn-pro

@Ohnana iirc that's basically just Kali that isn't debian-based

Freedom

@Xander ...you can even take a photo before your car throw you on a cliff

Ohnana

@DavidFreitag they said it's custom Kali built on Debian

aka it's Kali

David Freitag

22:01

Well kali itself is based on debian

Ohnana

that's what I mean!

Freedom

i've been very interested in white-box threat model recently, i wish i could find more sources for that

pt.slideshare.net/NicholasSullivan/whitebox-talk-baythreat

From that i have been able to think in some interesting applications : like route all logs for a central server over SSH with a unprivileged user and chrooted, and since i control all the points (client and server) i'm being thinking about writing a script that in a event my server goes off new certificates/keys get pushed to it and new ssh keys too. Of course i'm assuming that is hard to physical attack a server and retrieve sensitive information without turning it off. Is that true?

Martin Rory Ingesen

22:39

@Ohnana Ever got any further with this?

TildalWave

23:12

-1

A: Installing Ubuntu with a potentially compromised USB drive

I'd like to drink beer without getting fat, but that has not worked out for me. Using hardware you believe has been compromised is likely to be give similar results. Don't do it. Instead: The cheapest 4Gb USB stick (that is suitable for a Ubuntu live install) on Amazon.com is $1.48. It is horrif...

Why was this flagged as not an answer? It is an answer. It's even a rather good one. The question is ridiculous.

The question is similar to asking how can you eat healthy from an e. coli petri dish

Simon

@TildalWave Because it is not an answer?

TildalWave

@Simon how isn't it?

Simon

It doesn't matter if the question sucks, he shouldn't have had answered it at all.

Because he's linking products and not explaining anything.

Fine, he does explain it a bit but still, it's a super snarky answer.

TildalWave

@Simon he's explaining everything, and the links are to Amazon which are automatically converted to ref SE

Simon

I strongly believe that this is a low quality answer anyway.

TildalWave

23:20

You strongly believe? Like you'd give up donuts for a week strongly?

it's an answer... might not be the answer, but it's an honest advice and if I were OP I'd take it

Transcript for