The DMZ

Journeyman Geek

12:02 AM

@Jis12yearsold. I just woke up. Still want that deleted?

forest

he's asleep

forest

1:29 AM

@Jis12yearsold. blog.infosectcbr.com.au/2020/04/…

damn tab-complete

Journeyman Geek

lol

forest

And sourceware.org/glibc/wiki/PointerEncryption. Will be useful for you when you switch to Linux exploitation (I have no idea if Windows' libc has something like that).

But glibc is not all rosy: guyinatuxedo.github.io/29-tcache/tcache_explanation/index.html

tcache is truly awful.

dangokyo.me/2018/01/16/…

@Flow no, actually I had figured out how tcache exploitation works, in short it discards many security checks since glibc 2.26 (like the case in my question), a lot of exploits become more powerful. — poming Jun 12 '18 at 19:38

:D

Journeyman Geek

Yeaaah, definately mispinged. This is all over my head :D

forest

And probably the best reference on it: tukan.farm/2017/07/08/tcache

@JourneymanGeek I blame you for having a name that also starts with J!

Journeyman Geek

I had it first!

(Actually, the funny thing was - I set up this account as The Journeyman Geek, but I dropped the the early on for easier pinginginginginging)

forest

1:36 AM

@JourneymanGeek tl;dr this stuff is about a glibc feature called tcache which speeds up threaded applications, but at the expensive of security (it makes some exploits much easier).

Wanted to ping J because he's doing Windows but interested in Linux.

Journeyman Geek

ah

I actually understood most of that at a superficial level :D

forest

@JourneymanGeek You might like to read sourceware.org/glibc/wiki/MallocInternals then.

Will help to understand at a deeper level.

(Assuming you don't know about malloc fundamentals)

Journeyman Geek

I don't know any programming at all :D

forest

1:54 AM

You should learn it. It's neat.

Anonymous

10:10 AM

@JourneymanGeek Hey, no, I was kidding :D Thanks though.

Anonymous

@forest Hah. Yeah, I have actually noticed that in a few articles. They write the first paragraph as they're going to defend Palestine (presumably to keep people from instantly clicking off) then the further you go down the text the more it becomes a full on assault on them.

Anonymous

@forest Oh thanks.

Anonymous

@forest As far as I know, it does not have something like that. Although it would be useful for sure...

Journeyman Geek

@Jis12yearsold. Oh ok, no problem

Anonymous

:D

Anonymous

10:22 AM

"The Journeyman Geek" would be a super long name :D

Journeyman Geek

lol

I went by that for... about a week? :D

and its only 4 chars longer than Journeyman Geek

Anonymous

Yeah but 4 extra characters when you're lazy feels like 8 extra.

Anonymous

By the way, I always meant to ask - is that your dog?

Journeyman Geek

Was

He passed away 2 months ago

Anonymous

:(

Anonymous

10:27 AM

I'm sorry.

Journeyman Geek

He had a good life, and it was peaceful

He passed on basically due to extreme old age

Anonymous

I really want to get a doggo but I am not very good at looking after myself let alone an animal.

Journeyman Geek

Its a lot of responsibility. I don't think I can manage it with my current (shift) job unfortunately

Anonymous

Anonymous

I really want one of these fluffers

Anonymous

10:29 AM

a Samoyed, soooo cute.

Anonymous

a little polar bear :D

Journeyman Geek

Was gonna say

Yeah they are

Anonymous

So fuckin cute

Anonymous

My girlfriend has been begging me to buy one but i dont know if its fair to own a dog in an apartment its too small

Journeyman Geek

I'll probably end up with a westie or a snauzer

Anonymous

10:31 AM

i would like a garden for it to be in if i had a dog

Journeyman Geek

or there's going to be some stupidly unpredictable series of events... which is how we got our dog

Anonymous

i think its more fair

Journeyman Geek

@Jis12yearsold. Its doable, just need lots of walkies

and the first.... 2-3 years will be high attention

Anonymous

yeah thats the other problem

Anonymous

i dont have much time for a floofer

Journeyman Geek

10:32 AM

Honestly

time is more important than space

Anonymous

so my girlfriend would need to look after him mostly on his own

Journeyman Geek

and having a routine

Anonymous

and then id feel bad for her

Journeyman Geek

TBH other than the whole dying thing, an old dog is a lot less work.

Anonymous

yeah i can imagine

Anonymous

10:33 AM

we'd get a puppy so thats even more work

Journeyman Geek

But I think spent upwards of 2 hours a day on ours for a good amount of his life

totally worth it

@Jis12yearsold. Ah - Ash was a kinda rescue

Anonymous

i'll probably get one in a few years

Anonymous

maybe when im older

Journeyman Geek

Used to belong to this... person... who got him and didn't talk to the partner...

they fought and she was staying with us until her dad sorted it out, and... she left, the doggo didn't

Anonymous

oh dear....

Anonymous

10:34 AM

thats sad.

Journeyman Geek

meh, she didn't deserve him, he picked us, and I think everyone came out on top

I mean...

Anonymous

awww so cute

Anonymous

the paws :D

Anonymous

that is my favourite thing on animals, their paws are so cute

Anonymous

i really want an actual polar bear

Anonymous

10:38 AM

but thats an unlikely thing to own

Journeyman Geek

That's him a few months before he passed on.

Anonymous

awwww

Anonymous

whos his friend? thats a cute picture

Journeyman Geek

She's a 12 year old scnauzer

Not sure of her name, her owners called her granma, and she was stone deaf :D

Anonymous

Hah :D

Journeyman Geek

10:41 AM

there was also a 19 year old a few years back...

can't see, can't hear, and the owners had a vest and carried him like a briefcase

But he was pretty happy to smell people :D

Anonymous

awh thats so cute

Anonymous

haha

Anonymous

doggos are awesome

Anonymous

if i ever make enough money

Anonymous

i am going to buy my own polar cub

Anonymous

10:50 AM

and a friend for him to play with

Anonymous

and pay a keeper to train them and look after them

Anonymous

because polar bears are a lot of work

Anonymous

and then hopefully i can have my own polar bear :D

Anonymous

i was watching a program about polar bear cubs without a mother

Anonymous

and they need SO much attention

Anonymous

10:51 AM

but its so cute

Anonymous

Toronto Zoo Polar Bear Cub Introduced to Snow for the First Time

►

Anonymous

look at him :((

Journeyman Geek

11:47 AM

lol

can't really play fetch with one

Anonymous

12:00 PM

heh, why not? :D

Anonymous

If they are raised around humans but with a play cub, you can.

Anonymous

But I think you need to be a millionaire to afford a polar bear...

Anonymous

sadly.

Journeyman Geek

We used to have em in the zoo

I mean, other than the whole humans being crappy and destroying their ecosystem, they'd probably be better off wandering the vast white wastes

I guess if you were a supervillan...

Anonymous

12:14 PM

Yeah that's the other thing about having polar bears, you need to have a lot of their own environment around.

Anonymous

So I'd have to live in Alaska or similar for it to be fair to keep them.

Journeyman Geek

12:25 PM

lol

there's a dog listed by a local petshop who seems perfect

but its too soon + job + its a girl dog

(we don't generally neuter our housepets and... boy dogs have certain advantages in that sense)

Anonymous

I'd probably get a bitch if i get a dog :D

Anonymous

I don't want to deal with a horny harold humping everything :D

Journeyman Geek

;p

We've never had much problems

Actually the only times we had risk of puppies was people going "Is he fixed? Could you stud him out for half the puppies?"

Anonymous

Hah :D

Anonymous

Oh, I wouldn't be able to cope with having a bunch of puppies also.

Anonymous

12:29 PM

My girlfriend would love it

Anonymous

But that'd drive me insane :D

Anonymous

As cute as they are.

Journeyman Geek

I'd have no idea what to do

bigger puppies sure

little ones .-.

Anonymous

heh they'd be annoying

Anonymous

I mean SUPER cute

Anonymous

12:30 PM

but i'd go insane. my girlfriend would want them all in the bed and everywhere

Journeyman Geek

lol

they look like little rats until they're a few months old

Anonymous

nooooo

Anonymous

they're adorable!

Journeyman Geek

I belive the exact reaction everyone had to Ash was "Why did she buy that funny looking gremlin"

Anonymous

hahahahahahahahaha

Anonymous

12:31 PM

i just like their little paws >.>

Anonymous

so cute

Journeyman Geek

lol

or as this youtube channel I watch where this young lady grooms dogs calls em......

"Grinch feet"

Anonymous

hahah :D

Anonymous

You know the one thing I'm jealous of in life.

Anonymous

I don't get jealous much but

Anonymous

12:35 PM

my girlfriend has been to Thailand and she got to play with tigers

Anonymous

and i am very jealous of it

Anonymous

i wanna play with a tiger :(

Journeyman Geek

maybe when covid's subsided

Anonymous

yeah i might go then

Anonymous

hopefully they dont eat me

Anonymous

12:36 PM

their paws are like as big as my head

Journeyman Geek

lol

Oh, ever seen messi?

Anonymous

but someone told me some of those tiger places arent that good for the tigers

Anonymous

so i'd also feel bad if i helped fund a bad place

Anonymous

@JourneymanGeek huh?

Journeyman Geek

Месси научился добывать себе мясо! Очень хитрая пума

►

Anonymous

12:39 PM

awhhh

Anonymous

thats so cool

Journeyman Geek

IIRC he's a rescue

he's too tame to be released in the wild, and he's kinda in the wrong part of the world

Anonymous

HAHAHAHHAHAHAAHAHAHA

Anonymous

he took th e whole thing

Anonymous

hahaha

Anonymous

12:40 PM

that so cuteee

Anonymous

animals are better than hoomans

Journeyman Geek

Quite

nobody

1:03 PM

@Jis12yearsold. animals are way better than adults. Babies on the other hand are cute. And innocent.

Also, I want a puma too.

Except that i’d be afraid of it . );

Anonymous

@nobody Heh, yes. Although, I don't like children.

Anonymous

But yes. Animals are way better than adults.

Anonymous

Oh that's nice, the IDF are now bombing refugee camps..

Anonymous

For a second I thought they couldn't become anymore reprehensible.

Anonymous

But no, they just topped it. By bombing the homeless.

Anonymous

1:11 PM

This is just unreal..

Anonymous

How are the media still defending these actions.

Anonymous

There's one thing bombing housed members of hamas

Anonymous

theres another bombing fucking refugee camps

Anonymous

those people are as close to death as a human can get

Anonymous

they are as close to starved and sick as you can get

Anonymous

1:12 PM

they have no where left to go

Anonymous

IDF: "theres 12 hamas in a refugee camp, bomb it fucking all"

Anonymous

jesus.....

Anonymous

and the you got the media: "well hamas are firing rockets"

Anonymous

YES. I'D BE FUCKING FIRING ROCKETS TOO .

Anonymous

I am still curious as to when we can consider this a genocide

Anonymous

1:18 PM

I mean, a genocide is the act of attempting to destroy a people whether by race, gender, color, whatever.

Anonymous

So when is this a genocide and not just "israel keeping out the terrorists"?

Anonymous

hmm?

nobody

@Jis12yearsold. probably mostly just homemade rockets at that

Anonymous

@nobody Yes, homemade rockets with less than 10% of them passing through the defense system.

nobody

@Jis12yearsold. I assume those 10% are allowed through the defense system

So the media can say palestinians are killing people

Anonymous

1:23 PM

@nobody You know, I never thought about it like that, but you make a good point. Probably true. If they didn't allow any to pass through the system then it would be much harder for them to scream: "help we're getting oppressed".

Anonymous

All the meanwhile, they are the ones doing the oppressing. They are the ones who started a riot at Mosques. They are the ones evicting innocent, good members of society out of their homes simply for being Palestinian. They are the ones attempting to control the entire region. They are the oppressors.

Anonymous

But you're quite right. Without some of those rockets passing through, they wouldn't have anything to print about Hamas causing "great terror and harm".

reed

5:15 PM

anyone know what's the fastest way to type a strong (say, 128bit) password? Or in other words, what's the best format for a strong password, supposing you need to type it

Pass phrases have words, which are supposed to be easier to read and type than a bunch of random chars, but if you think about it, typing a whole word takes time

so three lowercase random alphanumeric chars like "t8z" have the same entropy (36^3) of a random word chosen from a list of 46656 words, and such a list definitely contains words that take time to type.

End of the random useless thought of the day

forest

8:29 PM

@reed Diceware, generally. You need to type more, but it's easier to type.

@nobody I think their defense system is actually more like 5% effective, so 95% pass through the defense system. The issue is due to how the interceptor missiles work (they need to hit the rockets head-on as the explosives are in the body, not the head). However Hamas missiles are unguided, so even though 95% pass through, they generally fall short of their target.

But they need to maintain the facade of the Iron Dome being so vital that they play up just how effective it is in order to secure more hundreds of millions of funding from the US.

Anonymous

8:45 PM

Hey.

forest

hey

Anonymous

lol. IDF bombing news buildings now.

forest

Fucking seriously?

Anonymous

Now Palestinians cannot even report whats going on!

Anonymous

Yeah. Happened earlier.

Anonymous

8:46 PM

Housed offices of Al Jazeera and associated press.

Anonymous

Blew up the entire building.

forest

> There was confusion when the IDF said shortly after midnight that ground forces were 'attacking in Gaza', but it was a trick to get Hamas fighters into the tunnels before bombing the network.

Anonymous

Two international media organisations located in that building.

forest

holy fuck

Anonymous

As well as multiple other media organisations.

Anonymous

8:47 PM

Now they're making it so Palestine cannot even report the genocide.

forest

I really, really hope the rest of the world is getting angry.

Anonymous

This must be a genocide now.

Anonymous

How is this different to Hitler killing jews?

Anonymous

It's not. The jews also couldn't report the killings.

Anonymous

This is no different. At all.

forest

8:48 PM

It's been a genocide for decades.

Anonymous

Well, yes.

Anonymous

I agree. But does the worlds human rights organisation agree? No. What about the UN? Neither.

Anonymous

In-fact, nobody with any chance of having any influence at all agrees. Quite the opposite.

Anonymous

Most of them in-fact support it.

forest

The UN is rather anti-Israel. It's just that no one listens to them.

And Israel threatens sanctions on any country that refuses to vote against anti-Israel measures in the UN (IIRC they threatened Finland with violence if they didn't vote against a measure to consider Palestine its own country).

Anonymous

8:50 PM

Yeah, they also don't seem to do an awful lot in general. Just make useless public statements.

Anonymous

"we stand by palestine".

Anonymous

DO you? WHy did another school just get blown up then?

Anonymous

"well, we stand by palestine"

Anonymous

> and an Israeli intelligence officer in which Husam asks the officer to give the media personnel time to evacuate equipment from their offices. His request was denied.

Anonymous

"BuT PaLeStInE aRe FiGhTiNg BaCk"

Anonymous

8:53 PM

oh yeah? why was a request not granted to at least GET OUT THE BUILIDNG THEN.

Anonymous

HUH?

Anonymous

Where's your fucking "PALESTINE ARE FIGHTING BACK" argument now?

Anonymous

God, I am so fuckin' angry.

Anonymous

What POSSIBLE fucking action could a person in a building about to get blown up take that at least allowing them time to evacuate would cause?

Anonymous

I mean, really. If your argument is actually: "hamas are fighting back" after reading a statement like that then you're a fucking IMBECILE.

Anonymous

8:54 PM

(as if you were not one before that)

Anonymous

I wonder how the palestine marches went in the uk today

Anonymous

no doubt the police tried to invade them and break them up

Anonymous

> people to keep moving down the road as numbers continued to swell and dozens of police officers lined nearby streets.

The Metropolitan police said they had a plan in place “to ensure everybody is kept safe and to reduce the spread of Covid-19”.

Anonymous

Yeah, that old excuse hey..

Anonymous

"we will ensure everybody is safe"

Anonymous

8:58 PM

is coded language for: "when the chief of police tells us to get you out of here, we're gonna do it and violently"

Anonymous

I actually cannot cope with the world anymore

Anonymous

its just sick.

nobody

@forest Do they even need to secure the funding? I was under the impression that they could order the US to give any arbitrary amount of "funding" anytime they wanted :)

Anonymous

Well, the US budget for Israeli weapons was some 290 billion this year.

forest

Pretty much.

Anonymous

9:04 PM

So yeah they can call as much as they wish from that 290 billion

Anonymous

and im sure theyd get more if they asked nicely.

Anonymous

funny because the uk government also routinely offers to give them money for arms

forest

@Jis12yearsold. Remember... you're a hacker. You can make a difference.

Anonymous

"the uk isnt that bad"

Anonymous

"J always says the UK is bad, but its first world"

nobody

9:06 PM

So this is something I can't come up with any plausible explanation for. Why do the western govs have a sense of duty towards Israel?

They never get anything back

Anonymous

Well, in the words of biggie smalls...

Anonymous

"mo money, mo problems"

Anonymous

:)

forest

Oil and guilt. Having Israel on their side means they control the Middle East.

Which is a strategic stronghold.

Also, oil.

Anonymous

Yup, same reason why the UK gives money to UAE for arms and did so when they invaded Yemen.

nobody

9:07 PM

@forest I don't buy that. It always seems to me Israel is in control, not them

Anonymous

Because that gives them contropl over the middle east.

forest

@nobody Israel is ostensibly in control, but if the world stopped giving them bombs, they would fall. Israel is only in control because they know that the US needs them.

Anonymous

It is also pretty important to remember that the west thinks the middle east is a pure shit show.

Anonymous

They don't like the culture, not one bit. They never havce.

Anonymous

This is why throughout history the US and the UK and others have routinely gone to war there.

forest

9:08 PM

I mean, I don't like the culture either. But I don't think they should be put through genocide.

Anonymous

They say Muslims want to take over the west.

Anonymous

All the meanwhile trying to take over the east.

Anonymous

But its okay if the west do it

Anonymous

"theyre on the righjt side"

nobody

Shit, as soon as an interesting discussion starts, I have to leave

Anonymous

9:09 PM

@forest Well, not only not put through genocide but it is their lands to have and to keep.

Anonymous

I absolutely do not agree with the idea of trying to take someone elses land so you can have your own policies on it.

Anonymous

It isn't your land to take.

Anonymous

As much as they wish tio hate the middle east, that is their land.

Anonymous

Are there problems and conflicts? Yes, lots.

forest

If a person broke into my house and slept in my bed, and then took out a gun when I tried to go into my room, I would be in my right to kill them.

Anonymous

9:11 PM

Well, exactly.

Anonymous

This is my point, the west love to make this big thing about "helping" the east, but they don't.

Anonymous

They want to control it themselves. They have no interest in "helping" it.

Anonymous

The only time the west have any interest in "helping" the middle east is when they can make money from it.

Anonymous

Invading Iraq is an example.

forest

Like I said, you're a hacker. You can make a difference. :P

No need to sit and worry. You can screw with Israel in many ways, even if only slightly.

Anonymous

9:14 PM

Yeah...

Anonymous

I've had a lot of thoughts about that.

forest

I do what I can as well, but since I'm blue team, my focus is on defensive training.

Anonymous

I know one thing for sure, I would have a totally different life if I was single.

Anonymous

I'd have given up with all of this a long time ago and started taking drastic actions.

Anonymous

I am just really thankful her family do not live in Gaza.

Anonymous

9:17 PM

Else this whole thing would be extremely different. I'd be even more upset which I am not even sure could be possible.

Anonymous

damn only studied for 7 hours today

Anonymous

guess im going to have a late night

forest

7 hours is still a lot.

Make sure you focus on quality over quantity.

Many hours of low-quality study is worse than a few hours of high-quality study.

Anonymous

Yeah, but I like to try and do at least a full work day.

Anonymous

But its okay. I guess.

Anonymous

9:23 PM

I'm writing custom shellcode right now so

Anonymous

its quite boring...

Anonymous

i might go insane if i do too much more, actually.

forest

Shellcode for what?

Anonymous

bind and reverse shell

forest

ah

Is it much different in Windows to do a reverse shell?

I know nothing of Windows networking syscalls.

Anonymous

9:23 PM

Hmm, quite different, yeah.

Anonymous

Its actually quite a damn lot of work

forest

How so?

Anonymous

You gotta' get the kernel32 module, then resolve all the functions, then get a module from it, then get ws2 then you gotta call wsastartup, wsasocket, wsaconnect, create a cmd string then call createprocessa

Anonymous

and then you're done.

Anonymous

now you have a reverse shell

Anonymous

9:25 PM

you have to patch all of the arguments of course as well, for those functions.

Anonymous

its a good 200 or so lines of assembly

forest

You can't just... call syscalls directly?

Is this complexity due to some security feature or just bad design?

Transcript for