The DMZ

forest

1:57 AM

@MechMK1 Depends on how important the passworded resource is. :P

@OakDEV TKIP is insecure.

Anonymous

2:44 AM

Well, got my OSED materials.

Anonymous

I have never been so excited to learn. Except when studying crypto.

Anonymous

This is awesome!

forest

OSED?

Anonymous

The Windows Userland Exploit Dev course by OffSec.

Anonymous

I bought it like... 2 weeks ago, I think. Got the materials earlier.

forest

2:47 AM

ah

>Windows

gross

Anonymous

Yeah, I searched high & wide when you asked about these kinda' courses for Linux.

Anonymous

I cannot find one :(

Anonymous

Such a shame, really. I am sure one will come out eventually.

Anonymous

But, since this is basically an introduction to exploit dev course with some intermediate stuff thrown in I am sure a lot of the principles carry over, just of course differences with syntax, the apps themselves, blah, blah. But a BOF is a BOF and that kinda' thing.

forest

Yeah true. The memory allocator and layout are different, though.

Anonymous

2:49 AM

Yeah, of course there would be some pretty significant differences you'd need to be aware of.

Anonymous

But at least it isn't a total waste of time!

Anonymous

Unfortunately... A lot of exploit courses, as well as pen-testing focus on windows because...

Anonymous

Well, its common.

forest

Yeah. I mean, I'm really unfamiliar with Windows. I probably sound retarded saying this but... I don't even know if Windows syscalls pass arguments on registers or the stack!

Anonymous

It makes sense. It is a shame but I get it.

Anonymous

2:50 AM

Even CoreLan is all Windows :(

forest

Luckily Linux is easier to learn exploit dev for since it's open source.

Anonymous

Yeah, I guess if you understand the principles then you just dive in on your own.

Anonymous

Like, I could do this course and whatnot. I would have an easier time using the material in a Windows environment, sure.

Anonymous

But if I understand the principles, different bug classes, etc then I can just self-study in a Linux environment.

forest

I think you're just looking in the wrong places.

Anonymous

2:52 AM

I do struggle to learn like that though, I need structure which is why I opt for courses where possible.

forest

I'm pretty sure there are lots of Linux courses and information.

Anonymous

Probably are, yeah.

Anonymous

I couldn't find any commercial ones.

Anonymous

But they likely exist.

forest

But maybe the terms you're using to search are wrong. Like instead of "Linux userland exploit dev", perhaps "ELF binary exploitation".

Why do you need it to be commercial?

Anonymous

2:53 AM

Basically.

Anonymous

So to do that

Anonymous

I mean, I got my job before I had oscp but that was just blind luck and the fact i had a blgo with a billion posts

Anonymous

and the fact they already knew me

forest

heh

Anonymous

had to remove those.

Anonymous

2:55 AM

but you get the point :D

forest

yeah

Anonymous

Yeah, once I've done that then I have way more freedom.

Anonymous

I am not bound to needing x or y. I can just go study things I am interested in.

Anonymous

Which is exploit dev in linux :D

forest

Are you looking into pentesting in general? Or what?

Anonymous

2:56 AM

No, I am already a pen-tester.

forest

Also, embedded exploitation is very big right now.

And many embedded systems use Linux (some use VxWorks though).

Anonymous

I want to move into basically binex for a living in either platform :)

Anonymous

by the way, dont know if you saw but i finished manos

Anonymous

what a great film

forest

:D

You should do Linux kernel exploit dev imho. It's a fascinating field!

Also, the Linux kernel's security is... wanting...

Although it can be compiled to be quite secure (with a good kconfig), and grsecurity is great.

Anonymous

3:00 AM

Yeah, I am interested in kernels for sure. Pretty much anything low-level.

Anonymous

Once I get this out of the way and get into a new situation. I am going to start getting familiar with exploit dev in linux and go from there

Anonymous

my day job is likely to be windows but thats okay

Anonymous

thats my idea anyways.

forest

You can easily get a day job for *nix, especially if you do embedded hacking.

There's a massive market out there for that.

Anonymous

Yeah, who knows, there might even be some of that when I move!

Anonymous

3:02 AM

Just from looking around the general ask is that you have some cert in exploit dev

Anonymous

whether elearn, sans, offsec.

Anonymous

which is fine. im happy to do it. it is all interesting to me anyways.

forest

Yeah it's not as easy if you don't have any certs.

At least not white hat stuff.

Anonymous

Yeah. I mean, I got OSCP but where I am trying to move is a lot more specialised.

Anonymous

Plus, I have only been working in InfoSec for 2 years, most of these roles I want to move into want 3-5 years. That means I gotta' be ahead of everyone.

forest

3:09 AM

But OSCP at least shows that you understand the basics.

Anonymous

And as I said, my brain learns better with structure so although this isn't perfect, it is a really good start.

Anonymous

Oh for sure.

Anonymous

I have mixed feelings about certs but it is what it is

Anonymous

if anything it provides me with clear requirements for what i wanna do

Anonymous

so it helps in some sense...

Anonymous

3:10 AM

im just so bored of my job

Anonymous

it isnt challenging

Anonymous

anything that challenges me is good in my view

forest

sigh one annoying thing about cryptography is that it's kind of hard to find resources if all you have an are equation... Having a hard time finding if this is correct for Oakley groups:

I only find RFC 3526 (and related RFCs) which gives fixed values for n and c.

Anonymous

I wish I knew enough to help :(

Anonymous

One day, I hope!

Anonymous

3:12 AM

I am still doing 1 lecture a week while i do this course

Anonymous

in crypto*

Anonymous

because i dont have a life.. or im a masochist

Anonymous

no idea.

forest

:p

Well cryptography is very interesting!

Anonymous

^ agreed.

Anonymous

3:13 AM

one of the things i am drawn to the most, despite being horrible at it.

Anonymous

just so fucking fascinating.

forest

It really is. I've learned a lot on Cryptography, both reading and writing answers.

Anonymous

Yeah, I need to start writing more questions on there and also absorbing more answers from other questions for sure!

Anonymous

also any ytime i feel the need toi be amazed by another humans intelligence

Anonymous

i just go there, find a question and get blown away

forest

3:20 AM

So many of the questions are beyond me, but I'm slowly getting to the point that I can understand more of them, or at least have enough knowledge that I can learn the relevant terminology.

Anonymous

Yeah, that is where I'd like to get. Just going to take time I guess :D But, I like learning anyways so.

Anonymous

Okay, gotta' go. Gonna focus for another 2 hours then sleep.

Anonymous

Nice to see you :)

Anonymous

Take care.

forest

later

forest

4:11 AM

twitter.com/inf_0_/status/1367376959055962112

heh

Context:

75

Q: Does Schnorr's 2021 factoring method show that the RSA cryptosystem is not secure?

Claus Peter Schnorr recently posted a 12-page factoring method by SVP algorithms. Is it correct? It says that the algorithm factors integers $N \approx 2^{400}$ and $N \approx 2^{800}$ by $4.2 \cdot 10^{9}$ and $8.4 \cdot 10^{10}$ arithmetic operations. Does this lead to the conclusion that the R...

ThoriumBR

4:27 AM

1am, people doing some changes on a client environment and I am tasked on watching them over webex

forest

The life of an on-call infosec guy, eh?

ThoriumBR

but it's nice... I can use the time perfecting my own desktop capture plus ocr plus indexing on elasticsearch

well, my role isn't infosec here, I am a senior support engineer

forest

ah

ThoriumBR

it pays more than infosec

forest

You haven't found the right infosec job then. :P

ThoriumBR

4:29 AM

I dream on doing some bug bounties and earning some extra, but my current job isn't infosec

forest

I can't think of many support engineers who can make $600,000 a year on bugs!

ThoriumBR

thinking about it now, I never had an infosec job...

forest

Well even sysadmin/devops/whatever involve infosec, just not exclusively.

ThoriumBR

I'm building a docker container that may be interesting to more people... you run it, it captures your screen every 60 seconds (configurable), runs tesseract on it to parse the text, runs imagemagick to reduce the image, and saves image and text. when you have 120 txt files (configurable too) it sends everything to elastic, so you can search later. and have a PHP script for searching, changing settings... it's getting nice

I was doing this since a decade ago, but it was a collection of messy scripts that could not be easily shared, lots of hardcoded paths and so...

now it's getting cleaner, and I believe it will be possible to anyone git clone, run the startup script, and be happy

forest

Oh interesting.

I've tried OCR on screenshots before but never got good results.

ThoriumBR

4:37 AM

if you preprocess before with imagemagick it works

and elasticsearch finds things that grep wouldn't

forest

Preprocess in what way?

ThoriumBR

convert origin.png -modulate 100,0 -resize 400% destination.png
tesseract destination.png

this increases contrast and resizes the image to 400%

forest

Oh I see.

ThoriumBR

and elastic can find things even if OCR mistook a m for a rn or an O for a 0

forest

Neat.

I suppose it can be made even better if the OCR is font-aware.

ThoriumBR

4:46 AM

it would take a lot more processing power...

forest

Would it? I'd think it'd take less since it already knows what the characters should look like.

And it's not printed on paper so it can expect the pixels to be generated more or less deterministically from the actual unicode (after whatever deterministic processing is done by the display, font renderer, etc).

ThoriumBR

I was using easyocr, it is really better than tesseract, but it takes A LOT more cpu to process

forest

Does it have OpenCL support?

ThoriumBR

tesseract is good on my terminals, because monospace fonts and back background makes its job easy

I don't know if easyocr uses opencl, but I know it uses a neural network and a dictionary, so when it detects something that looks like a word, it looks at the dictionary

forest

Ah if it uses an NN then probably no OpenCL.

Do you know anything about hardware security of Yubikeys? Trying to improve my answer:

0

A: Is there a Yubikey equivalent to "stealing the hard drive"?

Short answer Where would this data live on the device if not on something like flash storage? It probably is flash, but it's put in a chip that's hard to take apart and examine without destroying the data you're trying to read. It's not impossible to do, but it's really quite difficult and expe...

I've added decapping, glitching, and passive side-channel attacks, but I don't know if there are others.

ThoriumBR

5:11 AM

glitching is the most common (and accessible) way to do it

not easy and accessible, but easier than decapping

change went well, now back to bed...

forest

Is glitching really easier than decapping for an HSM?

I was under the impression that it was possible, but very difficult for secure microcontrollers. For a cheapo Atmel 8051 sure, but a Yubikey or TPM? I know a TPM at least actively detects high RF levels and carefully measures input voltage and clock and shuts down if it varies too much. I wouldn't be surprised if the Yubikey smart card did the same thing, at least to some extent.

forest

6:39 AM

Woah! Spectre exploits finally found in the wild: dustri.org/b/spectre-exploits-in-the-wild.html

forest

7:06 AM

Are they fucking serious? God damn... orenlab.sise.bgu.ac.il/p/PP0

Side-channel attacks (the famous prime+probe) in pure CSS.

[SCREAMS INTERNALLY]

John Smith

12:45 PM

hello

hod no idea there was chat in stackexchange

forest

yup

MechMK1

5:02 PM

Is anyone actually in the DMZ on the weekend?

ThoriumBR

5:28 PM

forest was up until late night (for me) today

I believe he does not sleep

Anonymous

8:34 PM

^ heh.

MechMK1

8:52 PM

The trees never sleep, they merely wait

2

Anonymous

Exactly.

Anonymous

Also, hey @MechMK1 :D

MechMK1

@J-- Hey

Anonymous

How are you?

MechMK1

Doing fine

Just took 15g of home-grown shrooms a few hours ago

10 / 10

Anonymous

9:08 PM

Is 15gs a high dose? I don't know much about shrooms. That sounds a lot..

MechMK1

For fresh shrooms? No

For dried shrooms? YES!!!

Anonymous

Ah okay.

Anonymous

Well, enjoy the trip :)

MechMK1

Shrooms shrink A LOT when you dry them

Well, the trip is mostly over already

But it was great fun

Anonymous

Oh, right.

MechMK1

9:09 PM

Since they're like god knows how much water

Nice, anything planned?

Anonymous

Not yet.

MechMK1

Well, be safe, okay?

Anonymous

I think I have an idea though.

Anonymous

Hopefully it will be in line with things opening :D

Anonymous

Of course. Thank you :)

Anonymous

9:10 PM

Wow, only 5 minutes of my study break left... Time flies.

MechMK1

Now sure what stuff you're into, but I hope you don't get into anything self-destructive

Not sure how regularly you take it, but I hope not enough for any adverse long-term effects

Anonymous

I appreciate that though, a lot.

Anonymous

Oh no, not even close.

MechMK1

Good good!

Anonymous

Before, a bit too often. But I cut back a lot like... Almost a year ago.

Anonymous

9:13 PM

I had a really bad experience, because of abusing it. You heard the term "brain zaps"?

Anonymous

I got those, it was fucked.

MechMK1

No, never

What's that?

Anonymous

I don't know the science but basically.

Anonymous

What I can describe it like is this...

Anonymous

So, I was at a vending machine once, and I was typing in a code for an item.

Anonymous

9:14 PM

I felt like some electricity go through my brain at what felt like a really high voltage

Anonymous

And for maybe .5s-1s my whole body was just... Off.

Anonymous

Like the shock just removed my ability to do anything.

Anonymous

The problem was I'd get them like... 10-15 times a day.

MechMK1

I see. And are they gone now?

Anonymous

Oh yeah, it is only a temporary thing.

Anonymous

9:17 PM

It is like a temporary thing that happens if you go too hard, basically.

MechMK1

Glad to hear

Anonymous

Yeah, it has been ages.

Anonymous

That was due to my own stupidity, really.

MechMK1

Well, psychedelics are my thing in a sense

Anonymous

Well, that and my desire to die.

MechMK1

9:17 PM

Though only shrooms actually

Yeah, I have that too

I made a stupid joke about the halting problem recently

Anonymous

I've never actually tried psyches.

Anonymous

I don't think it is for me, honestly.

MechMK1

Let H be a function, when given a program and an input, determines whether or not that program will halt with that input in finite time.
Let H' be a function, when given a program and an input, determines whether that program desires to halt.

Anonymous

I am also quite worried about what happens if things go bad given my... Past.

Anonymous

@MechMK1 Hahahahah :D That is pretty dark but I like those kinda' jokes :D

MechMK1

9:19 PM

@J-- It's not for everyone. I've never had a bad trip, luckily, although I did oOD once

Anonymous

Gotta' go. Be back in 45 minutes if you're still here :)

Anonymous

Slamming this course hard...

MechMK1

Sure!

Just @ me

Transcript for