« first day (3785 days earlier)      last day (1393 days later) » 

11:00
Reminds me of a guy I knew
His username was slut4headpats
I think he got banned though
Here?
No, twitter
@forest How do you do that?
That other cesspool
@nobody process_vm_readv(), ptrace(PTRACE_PEEKDATA), etc.
I'm not actually doing it. Browser heap is probably like a minefield.
11:02
@forest Ok not for n00bs like me ;)
Well there are probably in-browser ways to do it.
"Hey, can I see a picture of you?" - "No sorry, I enjoy talking with you and I'd like to continue talking with you."
It's just that those are the syscalls I know of that would let me read memory directly from a process without aborting it.
@forest Does it suspend the process?
Anonymous
11:04
@MechMK1 sadge.
I mean you can SIGSTOP it if you want to read memory without memory smear.
Ah, okay
Anonymous
@MechMK1 lol
It's true though :D
At least I can make people laugh with my stories
Which is also worth something
@MechMK1 Maybe you can make some people feel bad for you and keep talking to you too...
Anonymous
11:06
I mean, I shouldn't laugh.
@J-- Feel free to do so :D
Anonymous
But I am not laughing at you. More just the... Way you write it.
@nobody Nah, it's fine :D
@J-- The comedy is on purpose
Always look on the bright side of life
Anonymous
Yes :D
See, the magical power is that I just made a bunch of people whistle
11:07
@MechMK1 I don't know how to
Anonymous
Speaking of bright side. I am having shawarma for lunch
Anonymous
i cant wait.
Anonymous
lamb shawarma.
Anonymous
mouth drooling
@J-- Sounds great! I'll probably have nothing again
Anonymous
11:08
i wish this fucking delivery driver would hurry up though
Oh shit, look at the time.
raise(SIGSLEEP)
later
Anonymous
yes go make dinner forest
Anonymous
bye :D
Bye (I thought forests never sleep though)
@forest Enjoy waiting
11:10
@J-- drooooll droool
Anonymous
i am actually drooling this is bad lul
Anonymous
i really, really like shawarma i would happily eat it three meals a day
Anonymous
but its like 900 calories per one
Anonymous
something like that. probably more.
Anonymous
you know what is really gross
Anonymous
11:12
last year i spent nearly 10k on takeout
Anonymous
im an actual addict.
Anonymous
im actually addicted to takeaway
Anonymous
i cant stop ordering food
Anonymous
ive ate at these places like.... thousands of times
Anonymous
and i like it every time
Anonymous
11:14
moral of the story: learn how to cook..
I can cook, but I never cook well for myself
Too much of a hassle just for sustenance
Anonymous
Precisely the reason I dislike cooking
Anonymous
i just cba
Anonymous
i am very lazy when it comes to anything outside of the computer
I just don't care anymore
Anonymous
11:21
Here you go, I'll make myself feel like a weirdo for everyone elses amusement.
Anonymous
i am so lazy unless i have to go somewhere i shower like once every 4 days
Anonymous
being away from my computer for more than 15 minutes for no reason = no thanks
12:45
I'm not addicted to being near my computer
but, i'll shower when I think I smell :D
(well ok, I don't let it get that fair...)
I don't like people, in general. I find socialising really hard and tiring.
Anonymous
Oh I am a total addict...
Anonymous
@djsmiley2kStaysInside And, likewise.
13:22
So the DMZ is basically just a bunch of sociopaths who share an interest in computers... :)
Anonymous
Something like that :D
Anonymous
Could be worse, I guess.
@J-- That RPI binex course link only loads over HTTP, not HTTPS: security.cs.rpi.edu/courses/binexp-spring2015
Anonymous
@FireQuacker Oh thank you, most useful.
Anonymous
Is it Linux in the end or Windows too? I forget...
Anonymous
13:29
I don't know, either way. It's a good resource. I am going to complete it once I finish this.
Anonymous
Speaking of the DMZ... We for sure should start the CTF team again!
Anonymous
I am not sure if any of the original members are still around... So I am not sure we'd be able to access the pre-existing slack.
It mentions Linux in the syllabus
Anonymous
Nice, thought so.
Anonymous
The reason I linked it is because forest hates Windows so I was trying to find something for Linux focused binex.
Anonymous
13:38
Oh, I am not that far from 2000 rep, maybe I should make a rare appearance on the main site...
Anonymous
1
Q: IPSec MTU DDos attack

KuzeI have this configuration: HOST-A <---> GAT-A <---> MiTM <---> GAT-B <---> HOST-B I'm doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-Inria, I'm able to inject a packet to the gateway A, and change the MTU towards gateway B. Then, because I set an MTU lower ...

Anonymous
This is a really interesting question, but I honestly cannot be bothered to write an answer.
Anonymous
I also just realised I've not done network protocol security for nearly 2 years :D#
Anonymous
i'd have to go read the RFC again, meh
13:53
Well, I'm not sure what I'm classed as, but I don't think I'm a sociopath.
Anonymous
Do you like chips and gravy? @djsmiley2kStaysInside
The idea disgusts me
Anonymous
Important question, by the way.
I'm not a huge fan of gravy at all.
Anonymous
Okay, perhaps not a sociopath :D
13:53
Rather have mayo.
Anonymous
Thank GOD!
Anonymous
I HATE it (gravy).
Anonymous
Everyone calls me weird...
Anonymous
Its just like.. Dish water warmed up.
Anonymous
Absolutely nasty.
13:54
yeah I don't 3even have it much on sunday diners and such
Hi wierd.
@JourneymanGeek at least spell his name right ;)
Anonymous
I don't have Sunday dinners but yeah, I don't like it at all.
Anonymous
Even if I had Sunday dinners I would not be having gravy with them.
@djsmiley2kStaysInside I spell weird wierd , or do I spell wierd weird?
13:55
Well, I don't really like sunday dinners either LOL
Anonymous
English food sucks, I'll be honest.
'traditional engish'? yup
Anonymous
I eat a lot of middle eastern food, I really like it.
tho I love a good burger or sausage.
I guess that's german tho :D
Anonymous
Yeah, German sausage is the only good sausage really :D
13:56
@J-- y'all invaded my folks for the spices. For incorrigible kleptomanics who literally stole an entire building in chunks... y'all could have stolen a little more cooking, and a few less statues :D
Anonymous
Hahhahahahahahah :D ^
Anonymous
I mostly eat middle eastern food or American fast food.
Anonymous
That's pretty much my diet.
Anonymous
SPeaking of american food
Anonymous
i want a five guys really bad right now
Anonymous
13:58
might be time to order more lunch lul
Anonymous
Thank the lord for a fast metabolism
Anonymous
else id weigh 500 pounds
I just have one thought, how do you afford it?
I mean, obviously there's the health implications, but... my experience of takeaway is, it's not a cheap option.
Anonymous
Good salary is the short answer.
Anonymous
14:03
Long answer is: I never really spent any money growing up, not that I really got any. But nonetheless, any I did get, I never spent. In-fact, even when I got my first job I never spent any money then either. Then I got this job with a much, much, much better salary and for the first 6 months didn't really spend that much either. It kinda' just all stacked up in the end.
Anonymous
Then I moved into a city and now suddenly I spend a lot more...
Anonymous
This is a sick song.
I saw this on the sidebar and read voicians as vorlons
Anonymous
Umm.
Anonymous
14:11
What the fuck is a vorlon? :D
.....
YOU DO NOT UNDERSTAND
(actually I don't think anyone here but @djsmiley2kStaysInside or forest is old enough to know, and I don't think forest is the kind...)
@J-- Alien race from babylon 5
Anonymous
Next question...
Anonymous
What in the world is babylon 5?
Anonymous
Sounds like a BTEC Star Trek.
Sci Fi TV show from the 90s...
Anonymous
14:14
Right.
@J-- It's probably better than Star Trek
Anonymous
I wouldn't know. Never watched an episode of either...
Anonymous
Not really my thing, I'll be honest.
You haven't watched star wars either...
So I'm very much describing an elephant to a blind man
Anonymous
No, that's right. I haven't.
Anonymous
14:15
Star Wars isn't my thing either.
Anonymous
I'll be honest, I don't really like TV or films all that much in general.
Anonymous
I like Suits! Seen that? That's a good show.
Never heard of it
Anonymous
Ah, it's a legal drama.
Anonymous
Mr Robot. I like that as well. You must have seen that.
Anonymous
14:20
One show I do like that you're all old enough for - Blackadder.
Anonymous
Now that is comedic genius.
@J-- watched most of it, its on my backlog
Mr Robot that is
Anonymous
Great show. I really like it.
Anonymous
The cinematography is absolutely awesome in that show.
Anonymous
I'd go as far to say; underappreciated.
14:22
@J-- there's not much wrong with the show
Anonymous
Tell that to @forest he doesn't like it :D
14:38
i enjoyed mr robot but it got silly
blackadder is awesaome
Anonymous
When you consider that the show is founded upon mental illness I don't think "silly" is an adjective you can really use.
Anonymous
Remember, Elliot has dissociative identity disorder, he's also a schizophrenic, a lot of the happenings in the show are delusions, not reality.
Anonymous
We see them as reality because we see them from the perspective of Elliot, he believes they are reality, so we see them from that perspective, but as we find out in the end, it was never reality, it was one he created.
I mean from the start of season 3 onwards
until that point, I'm entirely cool with it, delusions and all.
Anonymous
Are you referring to the power play between Zhang and E Corp?
Anonymous
14:50
As in, the whole Deus group arc.
Anonymous
If so, then I completely get your perspective.
See, I got rather lost with it too - I'm going to watch again, but yes, while trying to avoid spoilers (don't read above here @JourneymanGeek :D) it goes from it being a mental welbeing study, to suddenly something else.
Anonymous
Yeah, I get you.
Anonymous
That is a fair assessment.
Anonymous
But, I think that multiple watches are very important to fully understand the story.
Anonymous
14:53
Mostly because by design it is multi-layered, when you throw in the fact that Elliot has manifested his own reality it is even more multi-layered.
lol
that's why its on my backlog. I probably need to binge watch it, and I don't have the concentration for that
Anonymous
I've completed it three times and I still don't fully understand the timeline nor the depth.
Anonymous
I pick something up each time I watch it and add that to the wider puzzle.
I'm not sure I'll ever understand the tipping point between "I didn't understand that show; it's so deep" and "I didn't understand that show; it's so poorly written"
@FireQuacker hah yes
Anonymous
14:57
That is a really, really good point.
well, if it all logically makes sense, that's fine, I can deal with that
if it's just a huge mess with plot holes that are never even.... considered, then it's just bad :D
Anonymous
I don't think I will ever understand that tipping point either. In the case of Mr Robot, I genuinely believe that it is not poorly written.
Anonymous
I say that because there are hours of conversations with Sam Esmail about the meanings in the show, he accurately explains and breaksdown the show based on the writing.
Anonymous
I feel that if it was badly written, he himself would not be able to do that.
Anonymous
But what do I know, I'm not a writer.
14:59
George Lucas talks a lot about star wars...
I'm not sure half of the stuff in that makes any sense.
Anonymous
I haven't watched Star Wars so I don't know, but I suppose that is a fair counter-argument given that a lot of people who like Star Wars have the same view...
15:31
I never really understand what's going on in any show/movie. I guess I'm just stupid.
I think you'll like this guy
Anonymous
He trusts Proton more than he trusts Starbucks? That's a brave man.
Anonymous
Don't get me wrong, Starbucks are a horrific company but... Trusting the government more than them? Jesus.
Anonymous
Actual brain damage.
@J-- Starbucks is horrific too?
Anonymous
Yes, slave labour problem.
Anonymous
15:37
Racial profiling.
Anonymous
Corporate greed.
Anonymous
Racial bias.
Anonymous
Cult like following which is pure cringe.
Anonymous
Awful company.
Anonymous
Cherry on top is they charge $7 for a coffee.
Anonymous
15:38
How anyone can consider that moral is beyond me.
Anonymous
I should note, the list is much longer.
Anonymous
If you go look at lawsuits against them, you'll see sexual harassment, discrimination, unpaid salaries, just endless.
Anonymous
Most of these law suits they admitted guilt when they paid out for them.
All of that is... normal, isn't it?
Anonymous
Well, yes. But it doesn't make them any less horrific.
Anonymous
15:44
It just makes all the other companies horrific too.
Yup
Anonymous
Closing question might be: what's the fucking point?
Answer: there isn't one.
Anonymous
Interesting, we had a chat channel for the CTF team a long time ago: chat.stackexchange.com/rooms/7384/security-se-ctf-team
Anonymous
Its a shame all the users that were in the team don't come here anymore :(
Anonymous
I miss them :'(
16:00
imagine this command: sed -r "s#(some_regex_here)#\1${some_bash_var_here}/#" input_file
I wonder what chars in $some_bash_var_here can cause trouble
I don't think there can be security issues, but I'm not sure. Other bugs though, definitely with the char # (it will break sed syntax)
I guess I should try
regex has been on my list of things to learn for over two years now and I still haven't gotten round to actually learning it
Anonymous
youtube.com/watch?v=539YSdKunzI <- this song is super nice
@J-- I'd love to start a new one. Not that I'd be any use in a ctf but it would still be fun
@nobody how can you live without regexes? They are probably the only thing I know, and that alone is enough to make me look like a programmer
Anonymous
@nobody We could start a new one. The problem we had before was finding CTFs which everyone (or a large majority) of the people in the team could actually play at.
16:06
Anonymous
I'd be happy to do it once every other weekend (thats the schedule we had before) just as long as there's enough people interested.
Anonymous
Ideally we want 4-8 people.
Anonymous
@reed :D
do you need to be in a team to play? Or can you play alone? Or can you also lurk? I guess I'd be interested in learning at least, or watching what other people do, or helping if I can
Anonymous
You can play most CTFs on your own, yes.
16:09
but not if I have to be part of a team where I need to guarantee some "performance", like a football team
Anonymous
You just sign up. Obviously, the more people you have the easier it is (in theory).
Anonymous
Also, previously we did not guarantee performance, I don't think we'd ever do that.
Anonymous
It was literally just for fun. HamZa solved most of the challenges :D
Anonymous
We just picked a CTF within a bi-weekly window most of us could play and then we just had a Slack channel to talk about challenges and whatever.
I've never understood if CTFs are just "games for nerds", or if they are like a real training field for hackers. I guess it depends on the specific challenge
Anonymous
16:12
I think they train your ability to think about problems more than they train your ability to solve real world problems.
Anonymous
So in some sense that it is just a game for nerds. In another sense, it does help your technical ability but in the way of improving your creativity.
Anonymous
More so than your ability to pwn real world environments.
Anonymous
Thats the best way I can explain it.
@J--, you just made me earn the "outspoken" badge
Anonymous
Umm.
16:16
because you starred that xkcd
Anonymous
Oh.
Anonymous
Right, you're welcome, I guess? :D
I didn't think I already had 10 starred comments, but whatever. Yeah, thanks :D
Too bad some badges can't be earned more than once. This is one of those, I guess. And the "pundit" badge too (for upvoted comments). The pundit badge would be my favorite, if I could get more than one of that
answering questions is difficult, but posting a smart-ass comment is much easier, LOL
Anonymous
^ +100000
Anonymous
true LUL
Anonymous
16:31
Can someone tell me this this -> youtube.com/watch?v=8xe6nLVXEC0 is coming up on youtube
Anonymous
the video is 6 years old
Anonymous
and no offence to the guy but hes not a revolutionary its a well known fact the education system is total trash.
Anonymous
weird video
Anonymous
i dont get it
Anonymous
and youtube algorithm... sucks.
Anonymous
16:34
i just dont get the title
Anonymous
"dont stay in school"
Anonymous
and then he saus what he wasnt taught
Anonymous
thats not a reason to not go to school, the system is just flawed.
Anonymous
this is a harmful title.
Anonymous
if anyone here ever becomes famous: please never use your platform to promote harmful life choices, thank you.
Anonymous
16:35
i'd appreciate it a lot.
Anonymous
i'd go as far to say that celebrities shouldn't really give their opinion on anything political, at least not using their main pages to do it.
Anonymous
if you make music, make music. dont make music about telling kids to not get a basic education because you didnt like it.
Anonymous
thats mind boggling.
Anonymous
its very... immature.
Anonymous
16:38
oh jesus christ
Anonymous
this is a rabbit hole
Anonymous
this guy is an actual fucking clown.
Anonymous
4 million subs, most of which are kids#
Anonymous
and hes promoting to 12 year olds not to go to school
Anonymous
and they dont have ot.
Anonymous
16:39
i cannot think of much more harmful than this.
Anonymous
the videos 4 years old ffs, im not even sure why im in this rabbit hole but now im in it, im mad about it..
I wish I had the balls to be a youtuber, if I had started acting like a clown (which I am) years ago, I'd be rich and famous now
Anonymous
I think that people who desire to be famous are amongst some of the most evil and morally bankrupt in the world. Extreme view, I know.
@J-- Shit, I have a slight desire to be famous
in fact I don't want to be famous, my dream is to just be rich and invisible, lol
Anonymous
16:43
Oh look, he's also a metal elitist, who would have guessed it... youtube.com/watch?v=JqbZqK5bK9w
that's probably why I haven't tried to become an internet celeb
@reed what is the outspoken badge for?
Anonymous
Uses his platform to promote harmful views to under 16s? Check.
Elitist videos? Check.
Cunt? Check.
@nobody ten starred messages in the chat, by ten different users I guess
Anonymous
@nobody I mean, if you want that then I'm not going to tell you shouldn't... Just my personal opinion is those types of people are extreme narcissists and genuinely have little moral fiber.
16:46
TBH I'm scared of public attention
Anonymous
Yes, likewise...
Anonymous
I absolutely hate the idea that anyone would know who I am.
Anonymous
It's unlikely to ever happen though, I don't have any accounts on any social platforms.
Anonymous
Unless you count this and Twitch, that is my entire existence as far as online profiles go.
But sometimes I feel like I want to be famous, but more like the way jann horn rather than like a celeb
Anonymous
16:48
Oh, that's totally different.
or like schneier
Just well known within security folks
Anonymous
I absolutely wouldn't mind being Jann Horn famous either.
Anonymous
I think that comes from a very different set of desires to standard celebrities, though.
Its kind of feels bad to know I never will be though
Anonymous
You're not alone...
Anonymous
16:50
None of us here are likely to ever be Jann Horn famous.
being famous is a PITA
Anonymous
Not Jann Horn famous! ^
Anonymous
He just makes cool exploits and people go "wow".
Anonymous
That's easy fame :D
Anonymous
Thats the real valued fame.
Anonymous
16:51
When you're 22(?) and you find the biggest CPU flaw in history.
Anonymous
Thats VALUE.
that's just WOW
Anonymous
Yeah, it is.
Anonymous
It's mind boggling.
like how can he know so much?
Anonymous
16:52
I ask myself the same question almost every day...
how does it all fit in his brain?
Anonymous
Sorry, he's not 24.
Anonymous
He's 22. And he found the bug shortly after he turned 22.
Imagine when he walks out of his house, all those eyes following him in the dark: the NSA, Russia, Korea, China, Israel, Isis, etc.
Anonymous
He's only 2 years older than me and he found the biggest CPU flaw in history.
Anonymous
16:53
That makes me... Sad.
Anonymous
I need to study more...
Anonymous
MAN ITS BEYOND IMPRESSIVE
@reed I wonder how many times he's been hacked
Anonymous
ITS INCOMPREHENSIBLE
Anonymous
jesus.
Anonymous
16:55
22... what the fuck am i doing with my life.
Anonymous
The most hilarious part is that.
If I tried to learn everything I could at the fastest speed I could, I'd probably be 40 before I could match 22 year old jann horn
Anonymous
Meltdown and Spectre is just two of the many amazing things he has accomplished.
Anonymous
I don't think I've ever written it here before but my dream is to work at Project Zero.
Anonymous
I doubt I'll ever achieve it but.
Anonymous
16:58
There we go, the more you know.
Hey don't give up hope. You might get there someday. Just because jann works there doesn't mean you have to be as good as him to get there
Anonymous
In-fact, statistically it is EXTREMELY unlikely I will ever work there.
Anonymous
Oh I know.
And yes, if I ever start binex, project zero is going to be my dream too
Anonymous
I doubt I'll ever give up hope.
Anonymous
17:00
This is all I have really.
My dream is to discover a zero-day, brag about it, and refuse to disclose it to the developers. These big corporations have too much power, we need to stop helping them
Anonymous
^ lul true
@reed I don't think you can brag about it without it getting fixed
Unless you're careful not to give any details about it out
Anonymous
To be honest, as long as I achieve OSEE by 22. I'll be happy.
sooner or later we will be in the middle of a cyberpunk dystopia, the whole world controlled by corporations that own AIs / Quantum Computers / etc. and people will complain "How could we have let this happen?!?!" Yeah, we keep on helping them
Anonymous
17:03
I don't really care where I work after that too much. That is an achievable goal that relies on my ability, not a hiring process so.
@reed If things follow the same trajectory they currently are, most people won't realize it happened.
Anonymous
^
They'd be like, "oh all this is for our own good, to protect us"
Anonymous
@nobody So true....
Anonymous
My wrists are done.
Anonymous
17:09
ive actually fucked them up
19:56
In android devices, Google certifies the public key of TEE. I'm not able to figure out of a secure way of how they recertified the new public key when the earlier one is revoked. Recertification over the air can be MITM attacked. Is there something that I'm not looking?
I don't think TEE enforces certificate pinning for this.
fuck man, which one of you programmed me earlier to watch Mr Robot? I'm still going.
Is it a 0 day if you simply find it, and it's just a dos?
If so... I found one, once :O
accidently
I didn't reveal it, or even really realise what I'd done. I just caused it to happen, someone else witnessed it, and eventually it got written up and explained.
Rermember how netgear routers would choke horribly, on some misformated text?
20:26
Suppose you find a network appliance exposed to the internet. Access to the UI requires authentication, but you can access the diagnostic interface via POST requests. Using this you are able to run ping, nslookup, and telnet on the appliance from the internet, which allows you to fully map and port scan the internal network.

What class of vulnerability is this? I want to say SSRF, but you aren't exactly forging requests, you're just making the requests you aren't prevented from making. Is this just "Missing authentication for sensitive function?"
Try as I might I can't find a way to escape the command line and turn this into an unauthenticated RCE.
20:38
if you can telnet... you can just use netcat on the other end
might be fun :D
I've been trying that for a while, but it doesn't seem to actually communicate over the socket. I can get it to connect to my EC2 instance, but then it just tells me that the connection timed out or there there was an error.
@defalt Sorry I don't know the answer. But it seems like an interesting question. Can you point me to some documentation that explains what the public key is for and how google certifies it in the first place (and then if I understand the stuff, I might be able to help)?
I google "android tee public key" but it just leads to articles about key attestation
 
2 hours later…
23:05
@reed Or better yet, "disclose" it by using it.
Hoarding 0days is a dick move. But burning them by pwning some company's customers is fine.
@J-- Just read this on Encyclopedia Dramatica on the description of London. Accurate?
> London, also known as New Islamabad is the terrifying capital of England and the United Kingdom. Considered by many to be the "Detroit" of Britain... just with less shootings and more stabbings, obviously. A gigantic metallic pot filled to the brim with bubbling hate, heated by the great fires of modernity and progress while its poor stricken inhabitants burn alive.
> Walk the city’s sultry streets and you will undoubtedly gaze upon some lurid act of depravity or violence, like a man in a chicken suit on his stag night mugging a pensioner so he can buy a new round of drinks, or a homeless

« first day (3785 days earlier)      last day (1393 days later) »