« first day (3505 days earlier)      last day (1673 days later) » 

John Zhau
John Zhau
02:35
2
Q: What allows meterpreter to migrate processes and how to defend against it?

John ZhauI mainly use Linux so I'm not well-versed on how Windows and its privileges work. I've recently learned to use Metasploit and meterpreter on Windows boxes. Previous research This answer has given an overview of how meterpreter migrates on Windows. This article has addressed process migration on L...

meterpreter
I'd like some more attention to this...
 
2 hours later…
MechMK1
MechMK1
05:01
@ConorMancone No worries, didn't come across like that
 
2 hours later…
John Zhau
John Zhau
07:00
I generally prefer animals but human babies are nice too
 
2 hours later…
Conor Mancone
Conor Mancone
09:28
The classic, "Has a friend who works for the phone company" threat model
0
Q: How can I stop being hacked?

cs91I believed a family member hacked my PC and now he can see everything I do online. I believe is something in the router because I did not find any spyware on my PC. He is friend with someone from the phone company.

router
 
3 hours later…
reed
reed
12:34
@ConorMancone those kinds of questions are common and follow more ore less the same pattern. Unfortunately they seem to be related to mental disorders such as paranoia or schizophrenia
Typical signs: you hear other people repeat or talk about what you have typed on your PC, the attacker knows very powerful people, the attacker has advanced technology, the victim can't really provide any proof of what's happening, etc.
Pole_Star
Pole_Star
@ConorMancone Actually I visited Chinas mouthpiece news page global times.cn.So from there can their it be hacked? In general, are Gmail accounts hacked?
reed
reed
@Pole_Star I doubt that seeing that chinese ad after visiting a chinese website can be called "signs of hacking". But I don't even have those tabs in my Gmail (social, etc.)
I'm sure some people have those tabs, I don't, I don't know why
ok, because I have disabled those categories
ok, I enabled the social category, and I can see ads there by default. Why would I even want to turn on something so useless, with ads! So basically Google is spamming itself by default, only it doesn't call it "spam" but "ads". Nice trick. Let's disable this crap again
Conor Mancone
Conor Mancone
13:05
@Pole_Star It's extremely unlikely that you visiting a Chinese news site - or even the governments own website - would result in you being hacked. If anyone did hack your computer in such a way, they certainly wouldn't change your language to chinese. It's much more likely that, based on you visiting a chinese website, google decided to serve you some ads in chinese.
As a general rule of thumb, if you keep your computer up-to-date and have a modern OS and browser, you don't have to worry very much about getting "hacked" just by visiting a website. Such things require the rarest and most valuable kind of browser vulnerabilities, and so such things are used by hackers only when absolutely necessary (and are mainly just used by governments in their continuing attempts to spy on eachother).
For further background read up on burning a zero day:
163
Q: What does it mean to "burn a zero-day"?

YetAnotherRandomUserI noticed a comment on this answer where another user said ...but it requires risking burning a 0day, which people are not always all that willing to do. I did an Internet Search for the phrase "burning a 0day" (and similar permutations like 0 day, zero day, etc) and not much came back. I...

terminology zero-day
meagar
meagar
> In general, are Gmail accounts hacked?
What does that mean? Are you asking if Google shares your data with China?
Conor Mancone
Conor Mancone
@reed It's not quite as useless as it sounds. In short google automatically takes emails from social media sites and puts them in those sections. If you only just turned it on then it will be empty and you'll just have a page with a couple ads. I'm sure many avid social media users like having those emails separate.
In my case (I don't use social media but have a couple accounts because sometimes you need it), it's nice that those emails never end up in my actual inbox, so I just open that tab every couple weeks to delete everything in it.
reed
reed
@ConorMancone yeah, I figured that I don't understand its purpose because I don't use social media (no FB nor Instagram)
reed
reed
13:36
On a local news site, there's an article about an ethical hacker, apparently pretty successful (lots of books, conferences, he collaborates with the police, works for VIPs, etc.) He says he helped to find a person who had disappeared several years ago, and found he was hiding in the US. He said he only searched "open sources" (so he's probably referring to OSINT), and he wrote "small programs" to extract info from the internet (legally).
He said it isn't easy to search for this stuff legally, because after the Cambrige Analytica scandal "app have cut the parts what siphoned the most data" so he said "you need to be able to code to get this info legally".
Has anyone any idea how I should interpret that story?
what is he doing to get the info with his "small programs" that would not be available otherwise? What OSINT techniques might he be referring to?
Fire Quacker
Fire Quacker
I'd be curious about how legal his small programs are. I mean, maybe there's no particular law about it, but the websites he was harvesting data from might not be so happy if they knew what he was doing.
reed
reed
I guess by "legally" he just means he is not exploiting vulnerabilities. Otherwise in theory even just violating the ToS is probably illegal (breach of contract?)
Conor Mancone
Conor Mancone
14:03
That's the most non-sensical sounding paragraph ever. It makes me suspect that either he's just talking up himself, or that the news source grossly misunderstood him. Either is fairly likely

« first day (3505 days earlier)      last day (1673 days later) »