« first day (3309 days earlier)      last day (1580 days later) » 

7:16 AM
Good morning, Hackers and Hackresses! Are you all root already?
 
7:48 AM
24
A: Preventing artificial latency or "Lag Hacking" in multiplayer games

Thomas PorninI see two conceptual paths for dealing with lag attacks: Punish lags. When an "artificial" lag is detected, evict the offender and enforce a ban period. This is hard to do in practice because there is a delicate balance to be found between people who cheat through lagging, and people who simply...

This is actually a bad answer :D
I'll quickly write up why
 
Anonymous
8:00 AM
I wish I was hacking today...
 
Anonymous
I have a mountain of stuff to do.
 
I have to be on-site this week again. Yaaaay...
 
Anonymous
lul - this is why I refuse to get an external pen-testing job.
 
Anonymous
Well, an external security job in general.
 
Anonymous
Internal security > external security.
 
8:05 AM
It's not that bad actually, I just like to complain
The pro is that I have about 2 hours to get there, and 2 hours to get home
 
Anonymous
Eh, I'm well aware of what being on a customers site is like, it's pretty bad.
 
Anonymous
It makes each day feel a hell of a lot longer.
 
Anonymous
(I used to work at an MSP, visiting customers was frequent)
 
I can take those 4 hours, do whatever I want and call it overtime
 
Anonymous
Yeah, that's true.
 
Anonymous
8:06 AM
That's the advantage of being on site it's easy overtime collection.
 
That means if I do that just 2 days, I have 8 hours overtime and I get one day off
So if I work for 2 weeks (10 days) overtime, I can take one week off afterwards
And that's a breddy gud deal in my opinion
 
Anonymous
Hahahahaha; meanwhile we've had 14 SQL Injections reported to us cannot wait when someone tells the guy that the back-end running these 14 "unique" sites is the same and thus the bug only gets fixed in one place.
 
Anonymous
He's going to be so upset, he has 13 duplicates & 1 valid submission lmfao.
 
Anonymous
Unluko.
 
Well, at least it's something :D
 
Anonymous
8:09 AM
Bug bounty "researchers" do not see it like that.
 
Anonymous
lmfao.
 
Anonymous
Also, I have this stupid song stuck in my head from YouTube. Last night at like 2am I was letting YouTube autoplay.
 
Anonymous
And I found this channel of a girl who makes like edgy 1 minute songs in the style of VHS tapes and now I have one of the songs "stripper magician" stuck in my head and it's really annoying me.
 
Anonymous
And this is why you don't let YT autoplay, especially not at 2am because you get to the side of YT you never knew existed and wish you were not there but you cannot just click off for some reason.
 
I currently have 恋の氷結おてんば湯けむりチルノ温泉 stuck in my head
The lyrics literally mention "Normies, get out!" and I'm laughing my ass off
 
8:31 AM
@forest Congrats! You are now at 50k + 4.
 
Anonymous
9:18 AM
Well, back to ASM land for me :D
 
Don't you mean you will return to ASM? :D
In other news: DMZ regular "MechMK1" was found murdered in his apartment. A letter written by who is assumed to be his murderer reads "Please just stop with your shitty puns"
 
Anonymous
Yes, I am going to ret to asm.
 
Anonymous
:D
 
man I wish you good luck
I'm just here writing a waaaay too long reply to an answer by Thomas
 
Anonymous
Heh... Thanks.
 
Anonymous
9:31 AM
It's long...
 
Anonymous
asm is hard.
 
Anonymous
OSCE is hard.
 
Anonymous
ahhhhh
 
You can do it!
Does anyone know if I can use a Yubikey to log into Windows 10 even if I don't have a Microsoft account?
 
Anonymous
Well, I am sure I can it's just a hell of a lot of work, I guess.
 
Anonymous
9:42 AM
I mean, I was expecting a lot of work but I am kinda' blown away by how much I have to study now I have a proper study plan in place.
 
Anonymous
It's a hell of a lot more than I expected.
 
10:35 AM
Does anyone of you have experience with Yubikeys?
I'm interested in buying one, but I don't know how easy it is to make a backup of them, in case my key is lost/damaged/etc...
 
Anonymous
No, sorry.
 
you cannot backup them
 
Anonymous
But I am fairly sure @RoryAlsop uses them, Mech.
 
Anonymous
So he probably knows a bit. And I think @arminius too.
 
@MrHeliose So what would I do if I would use a Yubikey for a Google account, and say, my YubiKey breaks?
 
10:38 AM
You should use google recovery stuff
 
Now you know why 2FA is really not as common as it should be
 
if backup were possible, anyone can fake your key (it's kinda problematic I guess)
 
Because people forget usability
@MrHeliose Not really. They would need to possess my key first
But I see your point
 
Yes I mean with a physical acess
 
That's not really something I worry about. I would keep my key on me. I'm more worried about losing access to the key
 
Thank you!
 
 
1 hour later…
11:46 AM
Also, regarding Yubikeys: It seems as if the yubico setup tool allows you to duplicate a key
 
12:27 PM
My advice about Yubikeys: wait.

They will release a biometric key, I think it will be much more interesting than a simple key were you will be fucked if someone stole it. Otherwise, Keepass is good enough for me atm.
 
1:17 PM
@MechMK1 That is pretty sweet.
 
@ConorMancone it is:D
 
@MechMK1 People in the ~10-50K rep category aren't allowed to disagree with people in the 100k+ rep category. Sorry, it's a rule.
 
@ConorMancone I've never been one to play by the rules, my friend.
 
@MechMK1 If you plan a situation where you have to login with your yubikey every time you may end up causing yourself trouble. If, however, you have a computer that is always authenticated (for instance, my personal computer), then you have some options even if you lose your key (since you still have access to your account).
Although that may not be a perfect solution either
 
Wat
 
1:22 PM
lol, yubikey auth?
 
No, keepass :D
 
Too late, I already memorized it!
Ironically, we had a conversation about this not too long ago
Anyway, It's also possible to have more than one kind of 2FA, although that probably introduces weaknesses that you may not appreciate
 
I didn't know I had keepass open
 
Clearly someone has hacked your computer. You should ask a question about how to rid your machine of your malicious firmware
 
@ConorMancone my monitor is obviously infected
I can tell
I know who did it
 
1:24 PM
lol, hilarious!
 
Luckily that was an account I really don't care about :D
Feel free to wreak havoc with it
 
For my work account I have a yubikey for 2FA which my boss has (since my work account has lots of important information on it), and I also have my phone connected so I can auth via SMS. When I need to add a new device I have google text me, and he can add a device without me from the yubikey.
 
So anyways, what I wanted to say was you can clone YubiKeys, so if I buy two, clone them, keep one on me and one in a safe, I would be fine
 
Of course that makes my phone number a vulnerable point, but it's convenient :shrug:
I would probably change that eventually, but it works for now
 
Oh yeah, I should change the password
 
1:25 PM
@MechMK1 That sounds like a plan too. You could also try the google authenticator app as an alternative. Most of the same benefits but slightly easier to work with
 
I completely forgot because I was eating pizza
 
/mmmmm pizza
 
Hey give me a moment while I change passwords
back
 
I was reading Thomas' answer, and he mentions the possibility of display-only games. Conveniently of course, google has just tried to launch a "console" that does everything server-side and simply transmits rendered graphics to your device
(Stadia) I was reading up on it again, and I was just amused by the first paragraph on the product page, as it has a higher density of "exceptions" then just about anything I've read
 
@ConorMancone And it's not like literally every article on that was negative
 
1:32 PM
> There’s no need to overpay for expensive hardware. With Stadia, you get up to 4K 60 FPS[2] gameplay on TVs[3] without the hassle of time‑consuming game downloads or in‑game updates. And you can take your favorite games with you on your laptop, tablet, or phone[4] as long as you have Wi‑Fi.[5]
 
Reminds me of "Stadia tries what GameOn did before. What is GameOn you ask? Exactly my point!"
 
Are you interested in my take on Stadia?
 
It's an interesting concept, I'll be curious to see if it actually pans out in the end. Probably not though, simply because serious gamers are very serious about their gaming
Sure, go for it
 
Stadia is a product with no consumer demographic
As you said before, people who care about videogames have either a good gaming PC or a console
A PS4 costs 250€ today. That's very affordable
"Casual" gamers will play on their phone or on a handheld device (Nintendo 3DS, etc...)
A nintendo 2DS costs 100€
Now what does Stadia cost? "Nothing", for the basic edition, but you have drawbacks.
if you want the "pro" edition, which no doubt they will try to sell to you every waking moment, you have to pay 10 USD per year
Per month, I'm sorry
So 120 USD per year
Which means a handheld console will be cheaper than stadia pro after less than a year, and a full-sized TV console will be cheaper in 2 years
So you can't really give the "It's cheaper to enter the gaming market", because consoles are already extremely cheap
Secondly, it's not like "netflix for games", as some people thought it was going to be. You still have to buy each and every individual game
So if you are just here to try things out, you are still expected to shell out at least 40 USD per game, 60 USD for others
That's literally the retail price.
With the added downside that, should Stadia ever go down, you will never be able to play any of these games anymore
Next point: The smallprint. While they advertise that the game will be in 1080p, only the video stream will be in 1080p. The game itself will be rendered at 720p and then upscaled. This is done so they can technically advertise it as 1080p without actually being 1080p
 
1:41 PM
I can buy that. On the opposite end the Wii was a big success because, despite being very off-the-wall, it ended up finding itself a huge market in more casual gamers. From what I can tell the Stadia seems like it is marketing itself to more serious gamers, and per your analysis above, I can see why it wouldn't have much success in that market. My family and I are definitely on the "casual gamer" spectrum, and while it's only a matter of time until I buy a Wii U, this has 0 interest for me
@MechMK1 Oh, that's sneaky and mean
 
Next is the input lag. Most people reported somewhere around ONE SECOND of input lag
You can see videos on youtube where people press a button and the game responds a second later
When I play, I disable V-Sync because the ONE FRAME delay on a 144 Hz monitor makes me feel weird. Now imagine that effect times 144!
Imagine a driving game and on every corner you have to estimate when you have to steer so you will make it
The next big problem is the random connection drops
Again, most players reported that the game just randomly does not respond to your inputs for a few seconds. The problem is, the game doesn't just "lag" - it runs fine on google's servers. Your input is just missing.
Imagine a console where someone randomly unplugged your controller for a second
All of these points make Stadia extremely unattractive for me as a platform, and I see absolutely no way of how any of this could ever be fixed.
Perhaps if we all had like a zero-latency internet, then perhaps, but as things are now, it's an absolute disaster
 
Network latency would certainly be a huge potential issue. You'd think they would get that ironed out before trying to launch something like this, because it would be a huge deal breaker.
 
The games look and feel terrible, and the Stadia version is literally the worst version you could get
 
As we know, I certainly don't have the internet connection for it
 
It looks worse (720p on supposedly E X T R E M E hardware, versus 1080p on a 250€ PS4), it plays worse (1 second input lag versus virtually no input lag), the service could randomly shut down (my old B/W gameboy still plays Tetris just fine)
Why would anyone ever want this?
@ConorMancone Is there a reason why you want a Wii U and not a Nintendo Switch?
 
1:52 PM
@MechMK1 lol, I totally meant a Switch
Confused my generations
 
Switch is a good console. I had a lot of fun with it
 
I wanted to buy one for Christmas but we ended up having too many presents already
Mainly I just want to play Pokemon sword and shield, if we're being honest :p
 
No need to stress it. There's still Easter coming :D
my mom played Pokemon Sword
She said it's rather....short
She finished it two days ago, and played since christmas
 
Anonymous
@MechMK1 I am still waiting for you to explain why The Bear is wrong :thinking:
 
I'm still writing
 
Anonymous
1:55 PM
Also, the fucking vending machine at work with Red Bull in it is out of fucking order.
 
Anonymous
OUT. OF. ORDER. YOU HEAR ME?
 
Anonymous
Fucking... What?
 
But the short version is: if a game actively punishes me for something that is not my fault, I will not play that game
If the game randomly decides that I will die now, it's not a good game
 
Anonymous
So technically he isn't wrong, just not a good solution.
 
Anonymous
Gotcha.
 
1:56 PM
I never said it was wrong. I said it was a bad answer
 
Anonymous
Oh right.
 
Anonymous
I thought you said he was wrong, nevermind.
 
Anonymous
Man, what the fuck am I going to do about this vending machine.
 
A much better solution is manual overview (aka. CSGO's Overwatch) paired with account-tied items
 
Anonymous
I need Red Bull...
 
1:56 PM
@J.J That's why I bring my energy drink from home
Though I switched from Red Bull to my discounter's brand
Red Bull costs 1,79€ per can. Flying Power costs 0,39€ per can
What I meant before was if you have rare and desirable items on your account, then you will not cheat with that account, else you would risk all the effort you put in over years
 
Anonymous
I'm an energy drink snob what can I say.
 
Anonymous
Also, without meaning for this to sound like a "weird flex but ok" I earn enough to pay £1.79 per day without needing to be worried about it.
 
@J.J I enjoy both Red Bull and Flying Power
 
Anonymous
Eh, I tried budget energy drinks before; didn't like them.
 
Anonymous
I'm a snob.
 
1:59 PM
@J.J i can too, but why would I pay more than 3.5 times as much for what I consider to be an equivalent product?
I don't consider Red Bull better or worse, just slightly different
 
Anonymous
Well yeah in your case sure
 
Anonymous
But in my case I dislike the budget ones.
 
Anonymous
So /shrug
 
Anonymous
Although over the years I must have spent thousands on red bull
 
Anonymous
I drink at least 2 500ml cans a day
 
2:00 PM
So my point in regards to rare items was that if you saw a player with lots of rare stuff, the chance that they are cheating is very low. It's like a weird "proof-of-work", where a person becomes more trustworthy the more stuff they have
 
Anonymous
The 500ml cans are £2.20.
 
Anonymous
I've drank pretty much 2 per day at £2.20 each for the last 8~ years.
 
"Damn, that sounds unhealthy", he writes and takes a sip from his pepsi before taking another bite from his pizza.
 
Anonymous
HOLY FUCK
 
Anonymous
THATS A LOT OF MONEY.
 
Anonymous
2:01 PM
Hahhaha, suddenly I hate myself a lot more than I did before I math checked my statement.
 
Anonymous
HAHAHAH
 
Anonymous
My favourite thing to ever come out of Britain ^
 
Anonymous
Well, except Keira Knightley.
 
My favourite thing is that I sometimes sneak in an unnecessary u in some words and make people question if I am from the UK or not.
And I do it inconsistently enough so that there is no clear pattern
 
Anonymous
2:03 PM
lmfao.
 
Anonymous
That's great.
 
I do it quite a bit with "behaviour" and such :D
 
Anonymous
"I know, I know, this is fucking killing me but I can't let gooooooo".
 
Anonymous
Man, I love Story of the Year, Wolves was SUCH a good album.
 
Anonymous
Every song fucking rocked.
 
2:05 PM
Oh I thought you were talking about Red Bull again
 
Anonymous
No, lol.
 
Anonymous
But I have spent roughly £10,000 on Red Bull.
 
Anonymous
(In my entire life).
 
Anonymous
Which is a sickening number.
 
Now ask yourself: Would you rather drink this much Red Bull? or would you rather spend it on weed? :D
 
Anonymous
2:06 PM
Red Bull.
 
Anonymous
Don't like weed.
 
I wish I had some, but my dealers don't have any and growing it will probably smell too much
 
Anonymous
lol.
 
Anonymous
I don't know how you like that stuff.
 
Anonymous
It's rubbish.
 
2:08 PM
Maybe your weed is rubbish. mine is grade A
I just make myself some brownies, put on some Tool and eat ice cream
 
Anonymous
lol.
 
Anonymous
Meh. I like Shisha a lot though.
 
Anonymous
I smoke Shisha way too much.
 
I don't smoke at all
Bad for the lungs
 
Anonymous
Yeah, it is.
 
Anonymous
2:11 PM
But, Shisha is tasty.
 
Anonymous
And I am usually intoxicated when I smoke Shisha.
 
That of course makes it much less bad for your health :D
 
Anonymous
lul.
 
Anonymous
No, it just makes me feel less bad about doing it.
 
If it works
 
Anonymous
2:12 PM
You ever had Shisha?
 
Anonymous
It's tasty as fuck.
 
As I said, I don't smoke
 
Anonymous
You've never smoked...?
 
Anonymous
You gotta' try pretty much everything at least once.
 
Anonymous
>.>
 
2:14 PM
I never broke a bone either, and I am not fond of trying that.
 
Anonymous
Hahah.
 
Anonymous
I pretty much try everything once.
 
Anonymous
What's the worst that can happen?
 
Anonymous
/shrug
 
Lung Cancer
My grandpa died from it
 
Anonymous
2:15 PM
Well, I'm gonna die anyways.
 
Or COPD
My uncle has that
Has several holes in his lung
 
Anonymous
As Ricky Gervais said "we're all gonna die and there's no sequel".
 
Anonymous
Fair enough.
 
Anonymous
As I said, I try pretty much everything at least once.
 
Anonymous
You know, minus a few obvious things...
 
2:16 PM
Yes, but there is a difference between living relatively healthy for 60-70 more years, and living for 50 more years and feeling like I am about to suffocate every second of my life
 
Anonymous
Well... One cigarette is not going to make you feel like that lmfao.
 
Anonymous
But, fair enough.
 
No, certainly not, but why would I want that? If I dislike it, I just did something I disliked, and if I like it, I would not do it anyways, knowing the concequences
Reminds me of how a guy described heroin once:
 
Anonymous
Well, like you I never liked trying things and I still don't always like it.
 
Anonymous
But I forced myself to at least try, at least, as often as possible.
 
2:17 PM
> It's like a huge weight is suddenly lifted off you, and you're sitting on a cloud. And when it wears off, that weight is put back on. The problem is, now you are aware of the weight, and this feeling will never go away.
 
Anonymous
Because I'm not going to instantly die from most of these things and after I try something I feel like I achieved something.
 
Anonymous
And most importantly I feel like stepping out of my comfort zone is good for me.
 
Anonymous
And so I try things.
 
I do plenty of things. I wanted to start shooting guns, so I did that
 
Anonymous
/shrug
 
Anonymous
2:18 PM
Fair enough then.
 
And I tried all kinds of large and small calibers
I have an AR-15, and I shot with a lot of other stuff
I have a good gaming PC, I have a nice Warhammer 40k army, etc...
Some people may think this is sad, but I enjoy this life. I feel no desire to go out partying every weejend
 
Anonymous
I don't like going out often either.
 
Anonymous
But, I do sometimes go out on a Friday night.
 
Anonymous
For a nice quiet Scotch...
 
Anonymous
:p
 
2:20 PM
Eh, I don't drink that often
 
Anonymous
I love scotch.
 
Anonymous
Well, I collect scotch too.
 
If you don't count the tiny glass of plum wine you get at the chinese restaurant
 
Anonymous
2:33 PM
We don't get those...
 
it's sake most of the time not plum
 
@MrHeliose Depends on the restaurant
Many chinese restaurants use plum wine
While japanese often use Sake
 
didn't say you lied, were I live it's Sake most of the time.
 
I didn't take it as you claiming I was lying. I just explained how things are in my area
 
 
3 hours later…
5:29 PM
hey
If I use windows "Format Drive" wizard and I do 7 formats on my external HDD, I assume it's as secure as any other 7-pass wipes? (E.g. from DBAN)
 
5:52 PM
HDD
with a USB connector
 
Then I'll go with "yes", although not an expert
 
toshiba
Well, I read that Win Format feature zeros out
so I mean...
It's not like I have nuclear thing blueprints or anything
 
All I know is that SSDs are very tricky, but old school spinning disk platters are much more straight forward.
 
I read that SSDs arent tricky at all
since they basically dont have more than 1 layer (physical)
so even a 1 pass "All zeros"
on all clusters or whatver
should do the trick
correct me if wrong
 
 
2 hours later…
7:45 PM
@MechMK1 You can set up a spare/backup key. I have a number of keys with different permissions/logins associated with them, and a set that live in a safe in case of loss/damage. That said, for all the uses I have, there is a recovery option, ranging from google authenticator in one case up to cyberark in another
@J.J that sounds bad...until you look at how much everyone in my office spends on coffee every day. Multiple times that! It's crazy
 
Anonymous
8:27 PM
Yeah...
 
Anonymous
If I saved all that money I'd have an extra £12,000 for my house deposit, heh.
 
Anonymous
What a mess.
 

« first day (3309 days earlier)      last day (1580 days later) »