The DMZ

and swearing in chat is an instutionally grey area. I don't think its allowed allowed, but most people don't care that much other than when they get flag suspended

forest

Well I never curse at someone.

Journeyman Geek

If you want to tempt fate go ahead ;p. But the offer is open unless I need to go through 38 pages

forest

Tempting fate is fun though!

Plus, cursing and infosec go together like bread and butter.

Journeyman Geek

eh, even in the infosec community I suspect there's varying levels of acceptance

forest

I've never seen anyone upset about it :D

Journeyman Geek

4:31 AM

no one ever complains

forest

Infosec folk can be pretty thick skinned given how egoistic everyone is.

Journeyman Geek

(flags on the other hand...)

forest

(But then again I hang out with blackhats and greyhats)

True, and I guess some snowflake could join this channel and start flagging.

Journeyman Geek

well, or just flag things to watch things burn

forest

Perhaps, but it needs 3 people right?

Journeyman Geek

4:32 AM

the reason we started the "language!" thing was cause people were flagging stuff, and it was causing lots of drama

sure, but it happens more often than not

forest

You'd have to be a special kind of jackass to coordinate with two other people just to flag ages old curses in a tiny infosec channel.

Journeyman Geek

not necessarily co-ordinate.

Just validate flags fast.

forest

Oh like a flag from a year ago + a month ago + a week ago getting validated at once?

Journeyman Geek

I've never been fast enough to invalidate a flag in flight

well who sees it can be vaguely random

forest

Ah

Does it only take one flagger but 3 verifications?

Journeyman Geek

4:34 AM

I'd much rather leave a polite warning if its a stray swear

yup

forest

huh

But what, it only kicks you out for like 15 or 30 minutes, right?

Journeyman Geek

it keeps increasing IIRC

forest

hm

Journeyman Geek

but typically I'd much rather suspend people properly or have an RO kick over flagging.

forest

I suppose I'd start worrying once it starts getting long.

But since it's never happened before in this channel...

Journeyman Geek

4:35 AM

well if it happens a few times a day... well... stop ;p

forest

Hasn't happened once in like a year :D

Journeyman Geek

I personally think a high functioning channel actually handles things 'in the family'

forest

I think this channel is fairly high functioning at this point in time.

Journeyman Geek

well we're talking over pain points ;p

and well, I'm vaguely trusted on quite a few places.

there's rooms that have been inrecoverably toxic

and rooms that were toxic as heck, and got better through a lot of hard work

forest

Someone told me this room used to be full of drama.

But not anymore (though most regulars from back then left).

Journeyman Geek

4:39 AM

oh, specific folks

forest

But I haven't been here long enough to know.

Journeyman Geek

Yup

SE's 'official' moderation of chat's not... great

forest

Like when the staff idle in a room?

Journeyman Geek

Oh that's fine in theory

I'd totally idle the heck out of this room if I got hired ;p

More that quite often, folks get involved only if there's trouble

I'm a firm believer in chat moderation as a process

also, being default public and on the internet can have issues

forest

I'm a believer in self-moderation.

Journeyman Geek

4:43 AM

Well more that you're setting a tone and such for most part

and things follow from there.

forest

hm

Journeyman Geek

if you're having people come in only when there's trouble...

forest

Well that's a good thing. It's bad for staff to come in on their own.

It always means problems.

Journeyman Geek

you don't see the big picture and root causes

lol. On RA ... its usually fun.

I told shog he can't ask hackintosh questions ;p

forest

How so?

pfft

Journeyman Geek

4:47 AM

POWER!

Jeff was kinda fun too

huge hardware geek

had a CM or two hang out too...

before your tine

time

forest

lol searching through chat history for slurs is bringing up fun stuff

forest

5:04 AM

tracker.archiveteam.org/tumblr

There's no way they'll get it all :(

Even if I lend them botnet resources, there's just not enough time.

Journeyman Geek

I think that was part of the idea

forest

Of the timing of their announcement?

Journeyman Geek

and the short amount of time available

less than 2 weeks?

forest

I honestly think it was due to them panicking.

Since the child porn and iOS debacle.

Journeyman Geek

eh bit more than that

Basically the ex yahoo/aol properties are bleeding money fast

I wouldn't be surprised if it was an attempt to basically kill off the product

forest

5:14 AM

Well that's the issue of Tumblr letting itself be bought.

I mean I hate Tumblr with a passion, but I hate to see sites vanish even more.

Journeyman Geek

Well, Yahoo was (mostly) hands off

and seriously, alienating a major part of your userbase in 2 weeks...

and the sheer.. "quality" of their autoflagging system?

forest

On the upside, it's unlikely that they'll be able to nuke everything at that time.

There will be a lot of stuff left over that can still be archived.

Journeyman Geek

or just nuke everything, not just the stuff they 'don't want'

forest

I doubt they'll literally shut down the site tomorrow.

Journeyman Geek

well no

forest

5:16 AM

They'll let it go the way of MySpace.

Journeyman Geek

they'll just make stuff inaccessible randomly

forest

Yeah

Journeyman Geek

I've seen big sites get archived with not much resources quickly

(and shamble on after shooting themselves footily)

forest

Indeed. In this case, Tumblr is doing IP blocks.

So the resources are more limited.

Journeyman Geek

Pity it needs a whole VM

forest

5:18 AM

It's just for compatibility.

Journeyman Geek

I'd be happy to stick a script on my boxen but running a VM is a little more involved on the spare boxen I have

forest

I mean otherwise they'd have to help people get it running on their system.

Journeyman Geek

ya.

forest

I think you should. It would be great to help them.

I just lack the bandwidth on my ISP to do so.

Journeyman Geek

yeah, looking around

I think I can do the docker image

forest

5:26 AM

Awesome!

It's times like these that I wish I had a PC botnet lmao

Journeyman Geek

eh

amusingly I have a dedicated server sitting around doing nothing

(well not nothing, but very little)

forest

I have a couple, but they're all busy. :(

g2g

Journeyman Geek

5:43 AM

hm. fail

Journeyman Geek

6:00 AM

I forgot I can't run localhost through a proxy

oops

Journeyman Geek

6:11 AM

ah

@forest eh, apparently its rate limited by the tracker

shrug I'll leave it running, for whatever good it'll do ;p

so your botnet wouldn't be much help

forest

7:15 AM

@JourneymanGeek Rate limited by the tracker, huh?

Like it limits the speed at which you can download?

Journeyman Geek

@forest no, limits the number of DLs in the swarm

forest

Eh? So if there are a certain number of people downloading, it throttles you?

Journeyman Geek

yup!

forest

lol why

Journeyman Geek

> Tracker rate limiting is active. We don't want to overload the site we're archiving, so we've limited the number of downloads per minute. Retrying after 300 seconds...
Project code is out of date and needs to be upgraded. To remedy this problem immediately, you may reboot your warrior. Retrying after 300 seconds...

.....

I am not impressed :/

forest

7:19 AM

That's dumb. I mean it's Tumblr.

It auto-updates though so I suppose you can just reboot it and it'll work.

Journeyman Geek

I agree

other than installing it about... IDK an hour ago? ;p

forest

It's probably trivial to disable the ratelimiting.

Since it's likely in the warrior code.

Not the tracker itself.

Journeyman Geek

hm

restarting did something

yup, its working ;)

forest

Nice

What name did you select? :P

Journeyman Geek

journeymangeek

naturally

Tom K.

8:10 AM

@forest smth else for you i guess embedi.org/blog/nuclear-explotion

forest

8:28 AM

What is that

Won't load

Tom K.

8:40 AM

maybe here intel.com/content/www/us/en/security-center/advisory/… @forest

forest

hah

Tom K.

yeeaah..

I don't really know how widespread these NUCs are

forest

Well better than a bug in fTPM or something.

Journeyman Geek

@TomK. the proper intel ones are commonish

though there's a bunch of similar machines made by other companies

they're great when you need a lot more grunt than a NUC

forest

Never used one myself.

Journeyman Geek

8:44 AM

I've got 2 non intel ones

Tom K.

yeah, I didn't know them before reading about the vuln

Journeyman Geek

gawd people, do you not hardware? ;)

forest

I only use enterprise servers, or crappy low-end embedded devices. :D

Journeyman Geek

Its basically a generic, standardish equivilent of a mac mini

there's two basic varient form factors (with or without hard drives)

forest

> Description: Improper input validation in firmware for Intel® NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

Well at least it's limited to privileged users.

Journeyman Geek

8:47 AM

@forest in theory it would affect any motherboard intel made but... they're out of that game

forest

It's weird because some of their code is pretty high quality.

They must have outsourced that.

Journeyman Geek

9:00 AM

or its rebranded third party firmware

which could be a thing

forest

true

I'm never really concerned with all these vulns that require a privileged user.

I mean it's like kernel DoSes. They're really not that special.

forest

9:22 AM

Anyone got a DeathByCaptcha (or similar) API key that they could lend to #tumbledown to help with the Tumblr archival effort? My key is expired.

M'vy

Tumbledown?

forest

@M'vy The ArchiveTeam initiative to mass-download Tumblr posts.

tracker.archiveteam.org/tumblr

M'vy

oh

BTW you also have that language tool on the bottom? or is that from my firefox update?

forest

(If you care about preserving the Internet btw, you should run their Warrior VM).

I don't see any language tools.

M'vy

Shows as a blue icon in the bottom of my text input box

Oh I think it's me

There gone.

forest

9:37 AM

Tiny blue people are spying on your computer.

Right now they're just hiding behind some CSS table.

24

Q: What can I do about the Intel Management Engine?

I recently read about the Intel ME (Management Engine), which is a special area in new Intel processors that has complete control over the computer. Nobody knows exactly what it contains, and there are many security concerns about it. I learned about it here: https://stallman.org/intel.html Wha...

Man people love freaking out about such an inconsequential feature.

Anonymous

9:50 AM

Morning.

forest

morning

Rory Alsop

morn

Journeyman Geek

woof

Anonymous

I am tired! :D

Anonymous

I've got a phone call with another company today.

Anonymous

9:54 AM

I hope, hope, hope, hope I get a phone interview for them too.

Anonymous

If I have potentially three other choices not including my current place coming into the end of my contract then I'm in a very nice position :D

Tom K.

@JourneymanGeek yeah.. I really don't :s

sandspiel.club

forest

10:27 AM

Anyone who still wants to help the effort: tracker.archiveteam.org/tumblr

Anonymous

10:41 AM

What is it @forest

Anonymous

I never used tumblr.

forest

@J.J It's a project to archive it before it is finally deleted.

It's a virtual machine. You just run it and it helps archiving.

Anonymous

Oh.

Anonymous

I would, but I cannot run that on my work laptop really.

Anonymous

Jesus - items 200655done + 57435out + 665519

Anonymous

10:43 AM

665519GB left.

forest

Yep

Lots of people running it

Anonymous

What even is Tumblr?

Anonymous

I think I'm a little young to understand it's beauty to be honest.

Anonymous

A little bit like me & MSN.

Anonymous

You guys had MSN, I had Facebook. You guys had Tumblr, I have Medium... Right? :D

forest

10:48 AM

It's basically a blog platform with porn and SJWs. It's hugely popular.

Anonymous

lmao.

Anonymous

How does "porn & SJW" ever go in the same sentence? :O

forest

No idea. But it does.

Anonymous

lol.

forest

And very soon (hours), Tumblr will be mass-deleting millions of NSFW blogs.

Anonymous

10:50 AM

Oh wait, so Tumblr is not closing?

Anonymous

They're just deleting NSFW content?

forest

Well it basically means they are closing. That's like 20% of their users.

It's likely that Yahoo (who bought them) is just trying to kill them.

Anonymous

Oh right, why exactly are they deleting NSFW content?

forest

Ostensibly because they want it to be a "more welcoming space", but I think it's really because of the horrible SESTA/FOSTA laws (which have an actual body count).

Which basically make it illegal to host porn in the US (I mean that's hyperbole, but it makes it exceptionally difficult to do it legally, to the point where it's almost illegal).

Anonymous

Imagine being that offended by a picture of a ladies boobs, Christ...

forest

10:52 AM

Yep. Puritans everywhere.

Anonymous

Soon we will live in a world where showing ankle is frowned upon again.

Anonymous

If it gets to that I'm buying a personal stripper.

Anonymous

shrugs

forest

heh

Anonymous

I mean seriously though, the fact someone can get so offended over nudity is just absurd.

forest

10:54 AM

It really is. And of course the US is bullying the rest of the world.

Forcing everyone else to play by their puritan rules.

Anonymous

I mean sure there is a time & a place, but if Tumblr has welcomed those images since it's release then they should not change that.

forest

Mhm

Anonymous

Of course a place like here is not a place to post nudity, but we never allowed it!

Anonymous

That would be like PornHub saying: "oh by the way, porn cannot feature below the waist now, we don't like that anymore"

Anonymous

:p

forest

10:55 AM

lmao

Anonymous

That sounds like very boring porn too...

Anonymous

hehe.

forest

Jewish porn).mp4

►

Anonymous

I feel like I should not play this.

forest

It's SFW. It's from Family Guy (the TV show).

Anonymous

10:57 AM

Let me get on my VPN, lmao.

Anonymous

More worried about the title.

Anonymous

It's embedded though so it should not send any other DNS requests? :thinking:

forest

Right.

Well no DNS request that would give it away.

And since it uses TLS, your ISP can only know you visited YouTube.

Anonymous

Oh lmao, I have seen that clip before.

Anonymous

Although, I lost interest in Family Guy TBH.

forest

11:01 AM

:D

I love Family Guy. I have all the episodes downloaded.

Anonymous

Hah, my uncle is obsessed with South Park.

forest

South Park is also hilarious. I love offensive humor.

Anonymous

Yeah, I watched a video about SP, I did not know this but, they make every episode within 7 days.

forest

Especially an equal-opportunity offender like them.

Anonymous

That is crazy to me!

Anonymous

11:03 AM

I quite like offensive humor too. Do you like Bill Burr, Forest?

forest

Yeah they do. It's made by just two people (though obviously they have an animation staff and the like, but the ideas are just from two people).

I don't know him.

I don't really watch a lot of TV. Just a few things I watched when I was young.

Anonymous

Wait, I will send you something.

Anonymous

Oh, you don't watch YT, do you?

Anonymous

I was quite literally dying from laughter when I first watched this.

forest

I don't watch YT. I just searched for the title and linked it.

And hoped to god that it was actually Family Guy.

Anonymous

11:04 AM

Google - "Bill Burr no reason to hit a woman"

Anonymous

It is one of the funniest pieces of standup I've ever seen.

Anonymous

11:44 AM

@forest That phone call just went very well.

forest

Nice.

Likely you'll get the job?

Anonymous

Well, this was not for Claranet, this was a different company.

Anonymous

The hiring manager is keen to take a deeper look at my skills so I believe I might get an in person interview.

Anonymous

They said I will hear back in a few days.

forest

nice

Anonymous

12:05 PM

Yeah, I'm pretty hyped for 2019 tbh.

Anonymous

12:31 PM

@HamZa Before you got your role as a pen-tester, what jobs did you do?

forest

12:47 PM

Editing a question and replaced "linux" with "Linux", but my inner Stallman is telling me to instead replace it with "GNU/Linux".

HamZa

- I worked for ~6 years in a "hardware shop" (Baumarkt in german?), mostly parttime, also full time in vacations
- I did an internship for 7months web developement (mainly Joomla) and Augmented reality dev
- 6 month internship where i was building a platform using php/js
- a lot of side projects @university webdev, mobile dev, robotics/computer vision etc...
- 6 months internship on a "smartfloor" (iot), did some python, webdev, backend and also maintenance (raspberry pi, docker etc...)
- 8 months parttime as a developer for the smartfloor thingy

euh i also did postal delivery for like more than a year parttime

@J.J got the complete list of technical stuff here: stackoverflow.com/cv/hamza

Anonymous

Oh damn, you did all that?

Anonymous

Maybe I'm aiming too high then.

Anonymous

Because I'm trying to get a JPT role now.

Anonymous

With only one and a half years experience as a network engineer.

HamZa

12:59 PM

@J.J i was "programming" since i was 14 or something. Nothing exciting really, but i was that kid at school that had much more practical skills in IT than the rest. I once solved a team's problem with a small hack-ish solution in two days, while they were working on it for like 5 months.

Anonymous

I'm aiming way too high :p

HamZa

@J.J what is a "JPT role"?

Anonymous

Junior Pen Test

HamZa

@J.J then no, you're not, i wish i had jumped much more earlier on that train

just go for it

Anonymous

I mean right now I've got three applications for SOC roles.

Anonymous

1:01 PM

One phone interview pending, one interview pending and one I'm still waiting to hear back from.

Anonymous

I've also got my job here which I will get offered a new contract for soo.

Anonymous

I just don't know what to do really :p

HamZa

that said, i do have "the upper hand" because of the many experiences i have. I kind of dabbled in everything and nothing so i can pick up stuff pretty quickly. Sometimes i help people with programming problems in languages/stacks i never used before

Anonymous

Maybe I just need to get over my imposter syndrome.

HamZa

@J.J yes, you will learn on the job, just be ready for that

and if you're lucky, you will not be thrown into too much deep water :P

Anonymous

1:05 PM

I don't think I'm going to get a JPT role without the OSCP.

Anonymous

I've looked every where but no luck.

Anonymous

So I think I'll have to sit with a SOC role first.

HamZa

@J.J in our company, of aaaaaall the pentesters, we have only 1 oscp certified dude

@J.J oh i guess then it is important, at least to get yourself into that role

Anonymous

That's cool but in the UK that's not the case.

Anonymous

Every one says "OSCP required"

HamZa

1:09 PM

@J.J so you were plannign to do that right?

Anonymous

I am going to do it, yes. But I don't know when yet. I have a few small problems in the way right now.

Anonymous

I should be starting in a few months, but I've already started I guess.

Anonymous

I do HackTheBox and Boot2roots, etc.

HamZa

cool

Anonymous

It's such a shame that certs still for most companies are the only way to prove knowledge.

Anonymous

1:11 PM

:/

HamZa

@J.J well it's an easy way to prove that you at least have a certain minimum/basis knowledge

Anonymous

@HamZa Yeah I know, it's just a shame there is not a better way I guess.

Anonymous

I'm confident I could sit in a Junior Pen Test role right now, sure I would not know a lot but I would also learn a lot.

Anonymous

But no companies care for that because I don't have paper.

Anonymous

:( Oh well I guess.

HamZa

1:18 PM

@J.J i'm confident i would not be able to pass the oscp test right now haha

Anonymous

Oh, I cannot either.

Anonymous

I know that, but that's part of the process!

Anonymous

Learning.

Anonymous

Companies seem to forget that sometimes..

HamZa

my point is, security is a broad field, oscp prepares you for certain skills i do not have
nor do i really need it atm, it would be nice to have though

Anonymous

1:20 PM

Yeah I get you, well - I think I'm just going to do a SOC role until I get this OSCP then go for a pen-test role, it's not the end of the world.

Anonymous

I'll still be young, I guess.

HamZa

@J.J go for it (y)

Anonymous

@HamZa Yeah, I'm waiting to hear back from one company now, I have a phone interview with Claranet too so we shall see how this goes.

Anonymous

At least if I get some kind of security position I will have my foot into sec whereas right now I do not have that.

daya

1:47 PM

How can I change the username in Ubuntu 18.0 LTS?
Since I was the only user so I created another temp user and logged into temp and then `sudo usermod -l newUsername oldUsername` and to change name of home folder `sudo usermod -d /home/newHomeDir -m newUsername` . By doing this username has been changed in `/etc/shadow`
But I can't understand why the fuck it didn't changed in login screen?
I am not even able to login into my account!
What is happening
_very very frustated_

Tom K.

281

Q: How do I change my username?

Some time ago when I installed Ubuntu I chose a rather stupid username for my account that I do not want to use anymore. How do I change this (including the name of my home directory, and the name in the terminal) without loosing settings for applications? How do I keep permissions and my keys ...