« first day (1922 days earlier)      last day (3256 days later) » 

12:00
@kalina Sorry :(
Okay @kalina, thanks for clarifying that
@Adi Sorry, for the record, I cannot crack bcrypt itself. What I can do is try a dictionary attack against a hash, and find a message that validates.
I can go more into this later, after work. Can't secse at work anymore
rekt
Personally, I can be all sexy I want at work.
@MarkBuffalo I don't know what the context is, but bcrypt is specifically designed to make this as difficult as possible.
It's possible I have my terminology wrong here. I'd love a correction.
@TerryChia 16 character password, all lower case, with 2 numbers trailing. Famous author. Didn't take that long
12:05
Did you have a precomputed list or you made one?
the password was already in my little dump
I just had to match it against the hash
A dump of hash or plain?
plain. like this:
whenever there's a dump, gather passwords. if the password does not exist in the file, append to file
people use the same passwords often
I feel like that'd take years to go through a list. Bcrypt is slow.
and different people use similar passwords
12:08
(if done properly)
anyway, I did not feel comfortable showing others how I did everything. I'm sure some can figure it out, but I'm more worried about a malicious person screwing OP over
OP has changed its password since
He emailed me back
Yeah, but also his email address, etc... not cool to post that for all to see
email address, home address, what have you
Plus there may be other accounts he forgot about
@Simon so with a titan you can get 14440 H/s with bcrypt. So a straight dictionary attack even with 50-60k entries is quite do-able
@MarkBuffalo $2b$18$3ly.RRM0he4fEMOZWSRpCuGduQdWvAMd6up4h.lXwiwQXSgl.8AhO Crack that then
12:12
@Simon basically if someone gets an offline attack on a hash and your password is in a dictionary, you're stuffed
im off to work
@RоryMcCune Oh yeah? That's not too bad.
@Simon to put it into perspective MD5 on the same card is 16904 MH/s
Jeezus, get rekt MD5.
Should have used ROT13, plebs.
o no, they switched the PWK VM to GNOME 3.
so bcrypt is over a million times better than MD5
12:14
I'M DOOOOOOOOOOMED.
@RоryMcCune That's a fun way to see it.
His password weren't in any 50k-60k entries
@TerryChia Got it, it's pls torry.
@BenoitEsnard well @MarkBuffalo appears to be saying he had it in an existing password dump, so it would just depend on the size of that
but if you've got the plaintext already and you're just checking a list bcrypt ain't going to save you
Hey you know what, world? I like GNOME 3.
fkin shit on me.
at the rate of that titan even an 8 character random lower case+numeric password would take over 2000 days to get
so not in dictionary and decent length + bcrypt == fairly safe
12:18
@RоryMcCune Which is where avoiding dictionary words is important
Also, never use "Password1!"
@Matthew absolutely
and never use the same password twice
'cause when place one gets pwned, you'll be in trouble
@RоryMcCune and remember that "dictionary words" may not appear in the OED
@Matthew aye
There's soooo much snow outside x_x
Any one got some understanding/experience with ROP/buffer overflows?
12:20
@kalina here, obviously;)
@DavidFreitag We're supposed to get 10 cm on Thursday -.-
And 5 cm tomorrow, apparently.
@Simon There's like 10" out there right now
There's almost no snow outside right now, ffs.
@DavidFreitag WAT
super pissed
@Simon THANKS CANADA
12:21
NO, SHUT TOP
WE'RE GETTING YOUR SNOW
You can take it all
THANKS, AMERICANOS.
No, we got snow from canada
Not my responsibility.
A nor’easter (also northeaster; see below) is a macro-scale cyclone occurring along the upper East Coast of the United States and Atlantic Canada. The name derives from the direction of the strongest winds—as an offshore air mass rotates counter-clockwise, winds tend to blow northeast-to-southwest over the land in those regions. Use of the term in North America is associated with several different types of storms, some of which can form in the North Atlantic Ocean and some of which form as far south as the Gulf of Mexico. The term is most often used in the coastal areas of New England and the Mid...
Wait, no, you right
12:22
lulz
still, you will get hit with less than us
not only do you deforest vast space to mako sure your countries are separated, you do argue about whichs snow it is?
Adi
Adi
@MarkBuffalo No need to get defensive. We know what you meant. Of course nobody is claiming you cracked bcrypt itself. What I'm contesting is the idea that you even cracked this dude's own hash, which I doubt you did. Like the rest of us, you found the plaintext after some Googling, so no need to claim you "cracked" it.
@DavidFreitag WELL I HOPE SO SINCE IT'S YOUUUUUR SNOW.
12:23
@Simon IT'S THE OCEAN'S SNOW
GAT DANGIT
DAMN YOU OCEAN
Ocean sounds like a good name for a stripper.
I'll be suggesting it to the local strippers.
It's damn near april, and it's snowing? Dafuq
Adi
Adi
@MarkBuffalo And, dude, I found the password as well. No way you cracked it with any known wordlists or simple mutation algorithms. NO WAY!
@DavidFreitag, that.
@Simon If you're an ocean baby, I'd love to be a whale ( ͡◉ ͜ ʖ ͡◉)
12:25
@DavidFreitag :OOO
That reminds me of a song from Juno
btw, has brent been around?
pls google
Adi
Adi
@MarkBuffalo and if somehow you actually cracked it, then I applaud you for your cleverness and superior technical knowledge, and I'd highly recommend that you write some kind of paper about your innovative password method method (or wordlist mutation technique) because I can assure you you'd gain worldwide fame with that thing.
this seems like his flavour.
Adi
Adi
12:26
Still, I remain skeptical and do believe you haven't actually cracked it.
@Adi, sure he didn't. how can you be so insistive about this?
Adi
Adi
@SmokeDispenser He went again and claimed he had.
I'm just giving him the benefit of the doubt
What, @Adi being insistive? Nooooo...
Adi
Adi
@SmokeDispenser I don't want outright claim he's lying until he has a chance to explain himself. It's not cool to go and call people liars
12:28
I would be curious to see an article of how the password was generated
surely, he used the plain text leak and that might be considered cracking by some definitions of cracking.
I really enjoy when I hit the "Exit to desktop" button in games when they exit immediately
Why are there two different leaks? :(
That's the main problem here!
Adi
Adi
@SmokeDispenser and I'm 99.999% sure that's what he did, and I'm 99.999% sure he used the term "cracking" to make it sound cooler
@DavidFreitag is that like when I keep accidentally hitting the quick-shutdown button on my UPS?
Adi
Adi
12:29
It's just that I don't want to say I'm 100% sure
until he has a chance to explain
@Adi, so what's the problem with that?
I really need to find another place for my toolbox, just did it again :-(
@AviD Hahaha, yup
Adi
Adi
@SmokeDispenser That he's claiming he had no knowledge of the plaintext leak
suppose you are right, why not scare the hell out of OP?
Adi
Adi
12:30
@DavidZ I didn't know about the plaintext dump until Benoit pointed it out to me, and by then I already had the password. This particular password wasn't exactly hard to begin with. — Mark Buffalo 47 mins ago
@Adi, oh, he does?
oh
I do not remember the password at all from yesterday and the file is on a different machine.
But I'm interested, @MarkBuffalo, in your technique;)
Adi
Adi
@SmokeDispenser Which is why I said
5 mins ago, by Adi
@MarkBuffalo and if somehow you actually cracked it, then I applaud you for your cleverness and superior technical knowledge, and I'd highly recommend that you write some kind of paper about your innovative password method method (or wordlist mutation technique) because I can assure you you'd gain worldwide fame with that thing.
Because if it's true that he didn't use the plaintext leak, then it means he has one of the most advanced dictionary mutation algorithms I've ever seen
In addition to a very good cracking cluster
It's not the first time that Markus makes a bold claim like this here so I like what @Adi is doing right now.
@Adi, I didn't see his claim before. Nevermind me then. go ahead and be insistive. good call.
25 mins ago, by Mark Buffalo
anyway, I did not feel comfortable showing others how I did everything. I'm sure some can figure it out, but I'm more worried about a malicious person screwing OP over
There are other things around that message about what he did.
12:35
I like this word "insistive" better than the English word "insistent" :-)
Adi
Adi
@RoryAlsop AAAAAAAAAA
lulz
Adi
Adi
and I'm wondering what the shit he means
-.-
damn, that does happen rarely
12:36
not knowing all the details, it does look like a simple case of imprecise language, slight use of hyperbole with the wholesome intention of enjoyable reading.
In which case I would point @MarkBuffalo at @ThomasPornin's seminal meta post on use of funniness. ;-)
MRW I try to untar a file with the parameters from memory and it doesn't work: HOW SURPRISING!
Adi
Adi
@Arperum I read them, and still not convinced. He often makes claims like these, and once contested he falls back to "I can't share too much details"
12:37
@AviD Yeah, I'd be the sorry one.
@AviD :D
Adi
Adi
@AviD For me, that would be anything with Windows batch
Well that wasn't SUPER awkward.
@DavidFreitag @Simon's mom?
@Adi I don't know enough about the subject to say anything of value, so i'll leave it to you to poke at him :)
12:38
@AviD The phone call I just had
Adi
Adi
@Arperum Tbh, he'll just get defensive again, say that we "just don't get it" and then the whole thing will pass. I wouldn't pursue it further than that anyway.
Guys, what do you suspect Brent has to say about this, having read his USB nonsens?
@Adi Yea, can't help you with that.
Adi
Adi
Speaking of command line.. I created something!
I'm very proud!
Windows batch is a pain in the butt
I'm really really looking forward to him starting a discussion.
Adi
Adi
12:40
Fuck
I have a brainpoop in line 19 with the nul redirection.
@Adi So take some brain fiber and have a brain dump
@Adi why dont you just use powershell?
And that ^
Adi
Adi
@AviD XP in corp env
veeeeeeeeeeery old shit
@AviD pls adi is straight
12:41
eww.
@Simon wat
wat
> ANTI-HACK: FREE AUTOMATED SSL CERTIFICATES
Although I'm almost 90% sure this is not new information for you people.
@SmokeDispenser So I'm not the only one who doesn't understand what Brent means most of the time? :(
@Adi pls give them a high-finding for the use of an unsupported OS and move on :op
@BenoitEsnard, not at all.
@BenoitEsnard, if SE had a watch list for users, he'd be on there.
12:44
@Adi While you're here, let me use your experience/knowledge. Did you copy/paste your scripts in your lab report during PWK?
his contributions are.... entertaining.
Adi
Adi
@RоryMcCune Reported last year and this year a second time. They want the script, I give the sript, I get monies.
@Simon Which scripts?
@SmokeDispenser After your links, I checked more of his "research". Wow
@Adi, it's great, isn't it?
haha indeed
@Adi Like the first exercise that requires documenting is a ping sweep of your subnet, did you add the script in your report?
12:46
@Adi heh, yeah
@Simon Are you allowed to do that in any language, or must it be bash/python?
who is this brent y'all talking about?
Is it Data?
NO
@DavidFreitag They request it to be done in bash and then in whatever scripting language you like.
12:48
TIME TIDE AND I WAIT FOR NO MAN
I'll go with Python since I haven't done Ruby nor Perl.
there you go.
Adi
Adi
@DavidFreitag They usually prefer to do them first using what they show you, and then you do what you like
@Simon if it helps, my high school students have done this already.
12:49
@AviD Did they tell you that you're a moron already too?
yeah right
@AviD also see the intersting paper that is pin-linked to the right here ;)
Adi
Adi
@Simon Hmm.. I didn't do those
@Simon So you hand in both? I'm confused.
Adi
Adi
@Simon I mean I didn't include them in my report
12:50
I showed up in middle of class today, teacher was pissed off at one of the kids - he was just sitting there with his arms folded not working "I'm waiting for Avi"
@Adi I see, you just documented the result?
@Simon I have very little exposure to Python, and none to Ruby/Perl
@SmokeDispenser meh, too much reading. Thanks
Adi
Adi
@Simon Documented the actual lab hacking
but his post history is... interesting.
12:50
@AviD Wow that's awful civil for an 8 year old
@Simon you should do it all in PHP
Adi
Adi
@Simon Little secret: If you do well on the exam + have the lab report = Pass (no need to do the book exercises)
@DavidFreitag That's exactly my case and I like Python so I'll do more.
> I believe that the trojans are installed on USB drives during automount and perhaps by some portion
of the X windows GUI, although the latter may not be true. I also believe that the trojans only work on
USB devices, as opposed to other media, as they may exploit a fundamental aspect of the USB protocol.
12:51
@DavidFreitag high school. try 16.
Adi
Adi
@Simon If you do VERY well on the exam = pass, then no need for any lab reporting
@Adi Oh I see, it's the lab report that they want the most, not the exercises.
Gotcha man.
@AviD You're a high school teacher? Mr... Mr White...? Is that you?
Adi
Adi
@Simon It's even actually only the exam report
@DavidFreitag I support the "cyber" program in a local high school.
Adi
Adi
12:52
If you get 100 points on the exam, they don't give two shits about your lab
@Adi But like you said it can help so I think it's worth doing it.
@AviD Yeah, I mean, they're going to have sex anyway might as well make sure there's an ethernet cord between them
ohhh wait I recognize his avatar. THAT brent.
@DavidFreitag hehwat
Adi
Adi
@Simon Absolutely! I had a great time hacking the lab and documenting it
Thanks @Adi, that's helpful.
12:52
CAN I WEAR KYLE??
@Adi Good :)
@AviD You said cyber. Then my chrome extension transformed cyber into butt, like it's going to do to this message in a few seconds
hahahaha
cyber cyber cyber
asscyber
So your post now says "I support the 'butt' program in a local high school"
@Adi there's no magical wizardry going on here. I have a list of known plaintext dumps. His was in "c", this didn't take long.
12:53
:D
I simply ran that dump against his hash
I bet @AviD also has a red panel-van with the word "Candy" scratched into the side
heh
yeah in the summery months, I do find it inappropriate being in the classroom sometimes.
I find it a bit interesting after having read that message that they even let you within 500 meters of a school.
I have my own kids older than them!
@DavidFreitag exactly.
wait no what
the other way
12:55
haha
@MarkBuffalo did you have the 000webhost leak in your giant dump?
I got pwned in the 000webhost leak :[
Yeah, me too
But it didn't matter since no password re-use :D
Those dicks didn't delete my account when I asked them to like 80 million years ago
@BenoitEsnard Yeah I made that account in like high school, so who the hell knows what the login is for it
@BenoitEsnard that dump was sick. Likely, yes.
That dump gave me trouble. Improper formatting of text file
Adi
Adi
12:58
@MarkBuffalo mmhmm
@SmokeDispenser Yeah I really enjoyed that read.
Gotta love him.
... or her.
> Data on USB drives that have been infected by trojans can be recovered to trojan-free media as follows:
1. select all the files, and compress them into torecover.gz
2. mkisofs -o recovered-usb.iso torecover.gz
3. attach a new usb drive at /dev/usb, wipe (if it was formerly infected), partition, and do not mount
4. dd if=recovered-usb.ios of=/dev/usb
5. remove the new USB device without mounting it
@Adi alright, fine. I'M just trying to sound cool :(((( I can't actually write code, or any solutions that bypass a lot of effort. I'm a fake, a fraud, a phony :((((((
Adi
Adi
@MarkBuffalo Yup, now you jumped to the other end. Expected
12:59
@DavidFreitag, yeah.

« first day (1922 days earlier)      last day (3256 days later) »