The DMZ

7:52 AM

Good morning, Hackers and Hackresses!

8:04 AM

Another one of the questions I posted an answer to went to HNQ

I honestly can't wait to get to 10k, just for the ability to see deleted questions and answers

lol is the area 51 raid happening?

8:24 AM

What people imagined: Hordes upon hordes of people, all storming into an airforce base

What is happening: 20 or so people gather, walk to the perimeter, before a small group of armed guards stops them. Most turn around in disappointment. 2 or 3 begin to argue and get arrested for trying to gain access to government property

hahahahah

well

Also, since we spoke about Dolly yesterday and the question about his age came up

I am reasonably certain that topencrypt is somewhat young, and not experienced with security or Linux at all

But I still take my time to answer his questions, because I feel like he genuinely wants to learn stuff

ohh thats cool

i wasn't saying you were wrong or anything

Just justifying why he is acting this way

that's all

Yes, I just didn't want to create this image that some group of people would not be welcome here at Sec.SE

Anyone is welcome, as long as they respect the philosophy of StackExchange

Sigh

Customer has provided a key in PEM format, pkcs8 and appently I need it in pkcs1....

And googling for how to convert it is a minefield, anyone got any pointers? :D

8:38 AM

Oh god openssl again

yeah :/

need to load customer provided certs into NSX lb, and we've never done it before and I'm lost.

So I found a vmware thing that says you can convert when you have rsa keys:

> openssl rsa -in original_key_name.key -out new_rsa_key_name.key

e.g. openssl rsa -in lb.key -out rsalb.key

However, these files are .pem not .key

.key is not a real format

that's the same

It might very well be in .pem format

What does file say when you use it on the .key file?

> .net.crt: PEM RSA private key

gotta be careful what I paste due to customer data.

> .net.pem: ASCII text

Yes, absolutely

including in file names >_<

Interesting

8:51 AM

I'm not trying to get you in trouble

Why does the .crt contain a private key!?

WTF

crt should be a signed certificate

our customer likely messed it up

Yes, bigly

it contains the private key + the whole chain

Well, it's fine

Theoretically you are allowed to do that, I think

Cut the private key off, then you will have a key and a certificate chain

I use the naming convention domain.type.pem, e.g. example.com.privatekey.pem or example.com.cert_fullchain.pem

Oh right

I did openssl rsa -in ./file-blah.pem -out ./file-blah.crt and that's worked - it's imported the RSA private key fine.

9:04 AM

what does -out do for rsa?

Ah, it's the private key

Then you should name it like that

Naming an RSA private key .crt can be very dangerous

so it should be .key?

I would use someFileName.privateKey.pem

Because it is a .pem file

There is no such thing as a .key file. It's not a standardized extension

someFileName.privateKey.pem tells you everything you need to know: The format, what it is used for and where it belongs to

Ah ok :)

Thanks :)

Just writing up some documentation on wtf I just did now, so hopefully we can do it again in the future :d

Thanks very much for your assistance :)

You're welcome. And I understand your struggle

Conor Mancone

9:31 AM

@MechMK1 and all irritating comments from dolly got deleted, so double win!

Q: Serial downvoter on security SE?

Gee, I wonder why

Today I flagged several comments on my old deleted question. ~2h later I got downvotes for several old, downvoted questions. Is this some sort of serial downvoter?

Look how all his flags got declined :D

Conor Mancone

Nice! I like the (obviously correct) comment from Schroeder that flags are mods only, and therefore his idea that someone is out to get him is inaccurate.

the guy sounds soo much like karen.

wants to speak to the manager all the time

9:50 AM

@VipulNair Oh my god :D

@ConorMancone The virgin "Why was this question downvoted?" vs. the Chad "I'm being serial-downvoted!" :D

10:13 AM

Oh god, CEH is such a joke

"An admin wants to analyze the traffic to see where an attacker came from. Which of these parameters is the least relevant?"

- ARP
- Geolocation
- User-Agent
- Potato

Conor Mancone

wow. That's actually on the certificate exam? Easiest certification ever...

None of the questions make any sense

"An attacker would like to know the operating system of a host. How will they approach?"

In my mind, I'm like, "Ah, that's easy. Just use nmap -O

And the options are:

TCP Idle Scan
UDP Scan
Banner Grabbing
Whois-Query

So @ConorMancone, which one is it? :D

Bonus: Explain why

I am gonna have to say potatoscan

10:30 AM

The answer is "The Hacker can use Banner Grabbing and hope that there is information, which includes the operating system, but the better approach is to use nmap -O."

WHAT THE ****?

THE HACKER

Q: Has my MacBook been hacked?

10:46 AM

The logo on the back of my MacBook was glowing when it was in sleep mode. This happened a couple of times when I was out of my room for about 15 mins, the apple logo which wasn’t glowing initially started to glow.It stopped glowing by the door sound.Is there a possibility that my Laptop is hacked...

security

11:03 AM

Just a funny question

Anyways, I have to go now

Have a nice weekend