The DMZ

Rоry McCune

13:00

@JourneymanGeek he misses @kalina and @TildalWave

Simon

@JourneymanGeek I'm staying at home to work on my PWK course today, that might be why.

PEEEEENETRATION

TTTTTTTESTING

Rоry McCune

@Simon how you getting on?

user11842

I blame the drugs. So many drugs.

Simon

@RоryMcCune Very well so far, I wish I had a bit more time to spend on it but y'know, life.

Journeyman Geek

@TechnikEmpire or contrariwise. Not enough drugs. Or the wrong kinda drugs.

Simon

13:02

I still have about 40 days left of lab access, should be enough.

Rоry McCune

@Simon life'll do that fo' shuz'

user11842

@JourneymanGeek lol possibly

Simon

And the fact that I managed to get my employer to cover a few days to work on it is great.

It makes my Wednesday all nice!

Bob Ebert

If one is using a socks proxy in a vm with NAT, does it stays encrypted when sent over the internet?

Journeyman Geek

maybe?

for some reason I'm thinking those things arn't encrypted by default

user11842

13:07

@BobEbert Not sure why you would expect that modifying the IP in the packet header would at all modify the packet contents

Mark Buffalo

@AviD and maybe the rories. Any chance I cold snag your opinion of my LinkedIn page?

AviD

Sexy.

Mark Buffalo

@BobEbert I don't think socks are encrypted. You may need an encrypted layer between the server and the client in order for this to work

Bob Ebert

tor is using socks proxy but encrypts your packets

Mark Buffalo

@AviD I changed it heavily last night

Journeyman Geek

13:08

so..

socks is an interface. Lots of browsers and other applications speak sock

Bob Ebert

alright lets assume the proxy is tor

Journeyman Geek

so its a handy thing for things like ssh or tor to use.

But if its encrypted, the only real way is to check

silverpenguin

@AviD you called?

Journeyman Geek

and tor's meant to anonymise not protect traffic no?

AviD

@silverpenguin aaaawkward.

silverpenguin

13:10

@JourneymanGeek well that is the aim of it yes, to hide the source location not your idenity

Journeyman Geek

and whoever's sitting at the end point can listen in to what you say anyway, no?

Bob Ebert

while encrypting the traffic

Mark Buffalo

@AviD my LinkedIn?

silverpenguin

@BobEbert yes but the encryption is hjust a layer because of the hops

Journeyman Geek

@BobEbert as part of "keeping things anonymous"

AviD

13:11

@MarkBuffalo no

Journeyman Geek

dosen't give you the same kind of security between point A and point B as say a SSH tunnel

silverpenguin

@AviD didnt think I saw e_e I knew you missed me ovid

Journeyman Geek

it just makes point A look like its somewhere else.

then from the endpoint to point B, who knows.

Bob Ebert

I understand, but does using the proxy in a virtual machine using nat changes something in the equation?

because nat distributes, if its a vm..

Journeyman Geek

No more than if it was a physical box behind a NAT

Bob Ebert

13:12

idk it seems stupid now but I'm just making sure

silverpenguin

@BobEbert shouldnt change anything no ... as long as you have everything set up correctly

Bob Ebert

yea okay thanks,

Journeyman Geek

or a physical box behind double NAT

or triple nat, but in which case I suspect you've pissed off some cosmic force.

Bob Ebert

well, technically it is double nat since the router acts like one

user11842

@BobEbert So does it change when you're outside the VM and behind the router?

silverpenguin

13:13

nat-ception

Bob Ebert

I would think not @TechnikEmpire

Journeyman Geek

(I've had a triple nat before. shhh)

user11842

@BobEbert Right, so it's the exact same scenario inside the VM no?

Matthew

@JourneymanGeek I have a friend called Nat...

silverpenguin

You're a monster.mov

►

Bob Ebert

13:15

I would think so but at the same time, I didn't know if the vm would act differently, changing something somewhere

Journeyman Geek

@silverpenguin naw, I was a poor college kid with a penchant from scounging hardware

used a old adsl modem router as a second router, but it had a fixed IP address rangend no way to turn off DHCP

then a IP phone device which had its own internal one port router

silverpenguin

@JourneymanGeek erugh! man you are about to tell me this was last year? :P

Journeyman Geek

@silverpenguin I spent a lot of time in uni? ;p

4-5 years ago I guess

Bob Ebert

While I'm at it, I was wondering if it was possible that I setup a raspberry pie to extend wifi range. The pie would pass packets from the router to the device, and the device to the router, all, encrypted, and thus, working as a encrypted tunnel

Journeyman Geek

sure

hostapd might work for that.

silverpenguin

13:17

@BobEbert plug it into your wifi - router and reroute your traffic via the rasppi .... cant get better range than that on a pi

Journeyman Geek

however whatever wifi card you have on a rpi might suck

and you might be able to get a good, cheap flexible AP

silverpenguin

@BobEbert learn.adafruit.com/onion-pi/overview

Journeyman Geek

I used to suggest tplink but they're apparently locking down some routers.

silverpenguin

two suggestions host APD or reroute as a proxy on your router

Bob Ebert

Lets say I'm outside my house but the wifi range doesn't reach, I would use the pie close to the door to pass the traffic through it (only for the selected device, of course)

AviD

13:19

hey @MarkBuffalo - took me a while, but I finally remembered your real name ;-)

Mark Buffalo

@AviD haha

Bob Ebert

I wouldn't want to connect the pie directly to the router since I want to place it in the center, between the router and the device that seeks for internet

AviD

your other profile pic was sexier

:P

Simon

ovid pls

AviD

looks too professional now

I'm sure @RoryAlsop would prefer that

Rоry McCune

13:20

@AviD yeah it's not too difficult based on his handle, although I will admin that (redacted) is an odd real name

Mark Buffalo

@AviD But less professional?

@RоryMcCune dammmit!

AviD

@MarkBuffalo depends for what.... Suit & Tie == HR ;-)

Rоry McCune

@MarkBuffalo sorry, fixed it now

Mark Buffalo

@AviD All the infosec professionals I know are wearing suits

AviD

tbf, I used to dress that way too.... yknow, back when I had a real job

lol

@MarkBuffalo indeed

Mark Buffalo

13:22

I have no idea how my phone made that kind of mistake

AviD

yknow what they say - dress for the job you want, not the one you have.

well, I want a job where I lay around at home in my shorts and tshirt.

one suggestion: in your SE section, link to some of your best posts :-)

Mark Buffalo

And you have it?

Yeah, I'll do that when I get home

AviD

also maybe to your profile in the personal section...

OR alternatively, make a Careers.SO profile, and link to that

@MarkBuffalo yeah I do!

Mark Buffalo

@AviD I think they removed it

AviD

@MarkBuffalo ?

Rоry McCune

13:25

@MarkBuffalo careers.stackoverflow.com

Mark Buffalo

Visit it. They changed it completely. It now automatically links to your SO account. Not any other SE account.

I rarely ever use SO

AviD

whoa, when they do that?

Mark Buffalo

You can't link your SECSE profile as far as I know

It's strictly for programming now

Bob Ebert

@JourneymanGeek which of your two suggestions you think would be better in my situation?

AviD

@MarkBuffalo thats new then

it was always heavily biased towards SO, but was possible.

Rory Alsop

13:28

@MarkBuffalo I'm not. I'm wearing jeans and a Skeptics t-shirt

user11842

@BobEbert These questions seem like they'd be a great thing to post on a question and answer site. If you know of any site like that, might be a great thing. Then other people could learn from the content.

Rory Alsop

Lol

Bob Ebert

Do you know any forums that I could post this question in?

user11842

:O

AviD

@MarkBuffalo ah no, you can still link other profiles and posts

Mark Buffalo

13:30

@RoryAlsop You can get away with it, I cant. Lol

@AviD You can? Because I see no such options. Weird.

AviD

@MarkBuffalo yeah, its like the Doctor said - I used to pretend to be so grown up, as one does when one is so young

@MarkBuffalo hover over "Accounts" section and click "Edit"

Mark Buffalo

Kay, I'll check later thanjs.

user11842

@AviD Doesn't count, he doesn't have to pretend to be grown up anymore because his current actor can draw dinosaurs from memory.

AviD

@TechnikEmpire thats the point.

when you are senior enough, you dont need to act senior.

@MarkBuffalo than.js? is that some kinda new hipster npm library?

Mark Buffalo

Well most CISO's I know are wearing suits

AviD

13:33

@MarkBuffalo exactly

Mark Buffalo

@AviD What? Where is that listed?

AviD

1 min ago, by Mark Buffalo

Kay, I'll check later thanjs.

Mark Buffalo

I never listed than.js

Oh. . Thanks. This phone is hard to type with

AviD

lol

user11842

@AviD why you no let me just say funny jokes

AviD

13:34

hahha I just got some email about "leaf.js"

truth really is stranger than friction.

Mark Buffalo

Lol

The only library I worked on was asteroid.js

And it's unreleased

SmokeDispenser

so, @AviD, after half a day, I can say: nope, not riding the rep train because of that tweet.

silverpenguin

@RоryMcCune :O your company got back to me

mwahahahaha

Rоry McCune

@silverpenguin well nice to see people being responsive :)

silverpenguin

@RоryMcCune I thought i was swept under the rug to be honest xD

Mark Buffalo

13:43

Glad you're actually searching for work

Matthew

@silverpenguin Would you like me to wander downstairs and get them to sweep you under a rug?

SmokeDispenser

@silverpenguin so that's a good thing?

Matthew

Might need to buy a rug. We have carpet tiles, rather than rugs

SmokeDispenser

@Matthew are y'all working for the same company then, with @silverpenguin getting involved, too?

silverpenguin

@Matthew not saying i want you to do tht at all! just thought my cv was bad

Matthew

13:50

@SmokeDispenser I work for the same company as @RоryMcCune, yes. But he is based out of a luxurious house in the Scottish highlands, whereas I work from a 1960's concrete bunker in Manchester!

AviD

@Matthew hey cmon, concrete bunkers can be luxurious too

especially if they are under a pyramid #simon #notsimon

Mark Buffalo

I want to get a double ice cream later

AviD

wat

@MarkBuffalo #simon?

@MarkBuffalo #simon's mom?

ahh okay

Matthew

@AviD This one isn't. This one vibrates when heavy vehicles go by, and the other week one of the internal glass walls spontaneously shattered

Mark Buffalo

But I've lost like 15lbs in nearly 2 weeks

AviD

13:52

surreptitious

Mark Buffalo

I'm on a huge diet kick

AviD

@Matthew then its not done right

David Freitag

@Gilles You have misunderstood. I am not mad that he stood up to what he thought wasn't ok. I'm mad about how he did it.

AviD

its obviously not bomb proof

and then, whats the point?

@DavidFreitag OH GEEZ MAAAN CMON!!! NOOOEE MOAAAR

Some Guy

@MarkBuffalo Sounds unhealthy

And unsustainable

AviD

13:54

yknow what? next one to bring up flagdrama is getting flagged.

Rоry McCune

@Matthew well for now, till you move to the shiney glass offices with spa's and foosball tables

Mark Buffalo

@SomeGuy 60% calorie deficit. Keto

AviD

oh crap!

Matthew

@AviD Any blast waves pass straight through...

Mark Buffalo

Can do 90lbs in 6 months if I stick to it

David Freitag

13:54

@AviD That was the last thing I had to say.

Some Guy

@MarkBuffalo Ah, neat. I've meant to try keto, but I don't feel like it's worth it for me

Matthew

@RоryMcCune I think you misread. I think it's "with a Spar, and footballs through the windows"

Some Guy

@MarkBuffalo Ah. Is that your target?

Rоry McCune

@Matthew lol, I may not be so quick to visit now

David Freitag

Keto is just too damn inconvenient. How the hell do you get away with not eating bread?!

Some Guy

13:55

Worst case; it takes a year, which isn't so bad either

@DavidFreitag I don't eat bread often. My carbs are usually just fruits :P

Mark Buffalo

@SomeGuy I don't need to lose that much this time around

David Freitag

@SomeGuy How?! Bread is nature's handle

Mark Buffalo

My target is 40 more

@DavidFreitag almond flour

Coconut flour

Some Guy

I've been bulking and cutting within a 10kg range

David Freitag

I'm not baking my own damn bread

Some Guy

13:57

Going to cut a little further this time, and then I can bulk more too, maybe

@DavidFreitag shrugs

Simon

@DavidFreitag Homemade bread is so damn good though!

Rоry McCune

@SomeGuy I'm afraid I can never hear those terms without thinking of cartman "Beefcake, beeeefcakeee!"

David Freitag

@Simon Yeah if you're good at baking

Simon

@DavidFreitag I didn't say anything about baking it, you get other people to bake it for you.

David Freitag

@Simon Nobody is going to bake me bread. Especially on a regular basis.

Mark Buffalo

13:58

Bulking is super easy for me

I put on muscle crazily

Some Guy

@RоryMcCune lol, this? youtube.com/watch?v=7pAYNm5nx1M

Rоry McCune

@DavidFreitag open bread machine, put water and bread mix into bread machine, wait 2-4 hours, extract bread

Some Guy

@MarkBuffalo It was difficult for me to just eat that much initially

But I got used to it pretty quick!

David Freitag

@RоryMcCune Another appliance?

Rоry McCune

@SomeGuy that's the one :)

Transcript for