ChocolateOverflow

general recent conversations

The DMZ

A serious place where infosec is discussed PS we don't do hard...

ChocolateOverflow

Jan 12, 2024 05:26

I'm a student & want to learn/practice threat intelligence, potentially for a thesis. Are there open platforms where I can search & analyze threats? I'd like to try tracing a known attack (APT or otherwise), maybe creating a story/report on how an attack happened, and comparing that to reports of the attack.

ChocolateOverflow

Jul 19, 2023 00:37

There's a very small online shop I wanna buy something from. I can see that they're using Stripe for payment. The store's page doesn't have PCI-DSS certification, and looking up things like "[site] security" "[site] breach" doesn't give me anything useful. Online reviews of the store seem positive. Are there ways I can check how much I can trust them with my payment cards, or should I just look into Stripe?

ChocolateOverflow

Jun 19, 2023 10:10

Are there known tools to capture and diff file system metadata like file names, file sizes, and timestamps? Mostly for seeing what files got created, deleted, and modified.

ChocolateOverflow

Sep 14, 2022 10:28

but it's funny when something so simple and stupid can defeat even experts

ChocolateOverflow

Sep 14, 2022 10:18

Would soaking your fingers in water until wrinkled make your fingerprints unusable for identification until it's back to normal?

ChocolateOverflow

Sep 8, 2022 14:43

I'm thinking of places which require maximum security while valuing their people's lives, maybe some ethical 3-letter agency

ChocolateOverflow

Sep 8, 2022 14:40

@Yuriko I've seen places like Google with strict ingress & egress control under normal conditions, but I haven't seen anyone talk about cases of evacuation. My immediate idea was simply to put the whole campus in a sealed (fenced) zone and simply screen people after they've gotten to the safe areas still inside the sealed area.

ChocolateOverflow

Sep 8, 2022 08:34

Does anyone know of some existing egress control protocols for on-premise emergency evacuations? I know that human lives should be valued over data but a malicious insider can trigger a false alarm (maybe with a small real fire) and run out with sensitive documents and data without being screened.

ChocolateOverflow

Aug 29, 2022 00:36

Let's say I have a company name and its abbreviation (microsoft and ms), a bunch of common subdomains (e.g. test, dev, vpn), and know some subdomain name formats (e.g. ms-dev.microsoft.com, test1.ms.microsoft.com)`, what are some good ways to generate a subdomain wordlist?

ChocolateOverflow

Aug 17, 2022 13:29

Is there a case where providing sensitive info via cmd args or env vars is safer than storing them in files and using a cmd to read them? AFAIK, if one can read files on linux, they can read all of a process's args & env vars from /proc/$PID/{cmdline,environ}, so files are pretty much always safer, at least on linux.

ChocolateOverflow

Aug 16, 2022 13:38

@nobody I also found that some android phones have the feature but mine doesn't. I was thinking of some application or config that should work on most android phones.

ChocolateOverflow

Aug 16, 2022 06:23

Is there a way to create (mostly-)isolated users/profiles on a phone? I wanna have different profiles for different things like: 1 for social media, 1 for high-security apps, 1 for apps that I don't trust be am forced to use (e.g. COVID stuff, organization's required too), and 1 for guests so that I can lend my phone to someone for a short while.

ChocolateOverflow

Aug 14, 2022 23:52

@JourneymanGeek rclone does have encryption (I'm using that) but not versioning

ChocolateOverflow

Aug 14, 2022 03:49

Does anyone know of a backup tool (cloud storage or CLI program) that allows incremental syncing like rclone, encryption (I don't trust cloud providers), and versioning?

ChocolateOverflow

Aug 3, 2022 12:31

Provided I have the source code of a PHP webapp, what's the best way to identify all the API endpoints with static analysis & things like grep?

ChocolateOverflow

Jul 27, 2022 05:34

Is there a mobile app that lets the phone record & replay arbitrary RF signals? I have some RFID cards and I wanna see the signals from the scanner & the cards, maybe save the cards' data to replay them when I forget or lost my cards.

ChocolateOverflow

Jul 16, 2022 05:11

Are experienced reverse engineers able to much more easily read bad code, mainly C & assembly?

ChocolateOverflow

Jul 15, 2022 00:37

Is there a device I can plug USB into to check whether or not they might be rubber duckies?

The Biosphere

General discussion for biology.stackexchange.com

ChocolateOverflow

Jan 8, 2024 13:52

I've heard of fictional characters (mainly soldier/mercenary types) "sleeping with 1 eye open", as in "get some sleep while maintaining enough consciousness to watch for dangers". Is that an actual thing people can learn or purely fictional?

ChocolateOverflow

Aug 2, 2022 13:35

Are our hands and feet homologous? The front and hind legs of cats/dogs look kind of the same, and they're also mammals like us.

The Frying Pan

Sometimes hot, always heavy. (cooking.stackexchange.com)

ChocolateOverflow

Dec 9, 2023 11:42

I have little to no spice tolerance but I recently had some chicken with sauce made from some sort of common hot sauce (probably Asian). The color & smell were like the diluted version of the normal hot sauce. However, it was not spicy at all and instead kinda sweet.
How do you make a hot sauce not hot at all and just sweet?

Off the record

Welcome to the main chatroom for musicfans.stackexchange.com. ...

ChocolateOverflow

Dec 3, 2023 03:14

I wanna learn some music theory stuff to better enjoy & analyze music. I don't intend to sing or pick up an instrument, but I wanna be able pick up the little details in songs. I mostly wanna learn about EDM, rock/metal, & J-pop. Can someone recommend some free resources to learn about music theory stuff for that?

The Practice Room

General discussion for music.stackexchange.com

ChocolateOverflow

Oct 14, 2023 08:50

Dakishimeru Made by MIMI ( original ) ( human cover ) seems to consist of predominantly black notes. I learned to play the keyboard a bit as a kid and only learned the white notes at the start, only using the black notes a bit after months of learning. Is there some significance in the heavy use of black notes?

The Sidebar

General discussion for law.stackexchange.com | Please note tha...

ChocolateOverflow

Jul 31, 2023 07:54

How do laws handle statements like "this contract/sale lasts until 31/09/2023"? The mistake is easy to miss, but I'm not sure how well "common sense" would work as a defense or something. (I'm not a law person)

ChocolateOverflow

Oct 26, 2022 11:54

I don't have specific laws in mind and am not sure how (or if) I should post this question so I'm just asking it here.

Is there anything preventing me from signing legal documents with a random signature and later testifying or denying that the signature was mine?

I've tried looking it up but only found answers around forging other people's signatures and not using throw-away signatures.

Root Access

For all you Super Users out there. You have backups, right?

ChocolateOverflow

Apr 1, 2023 14:47

I'm making a 1TB external HDD for backing up my data. After eliminating FAT (Windows compatibility isn't very important, since I mainly use Linux), I checked stuff on ext4 vs ZFS. What I found is that ext4 is better for installing Linux (mainly as the root FS), while ZFS is great at detecting & fixing data corruption.

I plan to just use the drive for storage, and data integrity is a top priority, even over read/write speed. With that, ZFS seems quite tempting. I'm very open to experimenting and learning, so even spending a day or 2 troubleshooting is not an issue.

ChocolateOverflow

Apr 1, 2023 14:41

Should I use ZFS on a single external HDD for backups?

After some resource, I've found that ZSF is good with data integrity and correcting corruptions.

ChocolateOverflow

Aug 19, 2022 02:35

Tried duckduckgoing but couldn't find an answer and I'm not sure if I should ask on the site so I'm asking it here: Why is it that when I use curl or navigate to localhost:8000 in a browser, the request uses HTTP 1.1 and not HTTP 2? AFAIK, HTTP 2 is pretty well-supported by most browsers. I'm guessing it's for compatibility, in which case, do browsers automatically "upgrade" a known site to HTTP 2 if available? If yes, when and how?

The Heap™ – Consultancy ©®

General on- and off-site discussion for dba.stackexchange.com....

ChocolateOverflow

Feb 19, 2023 07:18

Is there an article on how the unique constraint is implemented & its performance? I'm sorta new to DBMS & verifying that constraint row-by-row seems hugely impractical, so I think it uses something like indexing or hashing. I can't seem to find a resource talking about it though.

The Rec Center

General discussion for hardwarerecs.stackexchange.com

ChocolateOverflow

Jan 28, 2023 07:09

ploopy seems rather expensive. I'm mostly a keyboard & terminal user so I'm not investing nearly as much as I do in keyboards...

ChocolateOverflow

Jan 28, 2023 05:01

Is there a QMK-equivalent for mice? I'm using a split QMK keyboard and looking for a trackball mouse that's also customizable like QMK keyboards.

General Network Engineering recommend…

Product Recommendations / discussion. This room has different...

ChocolateOverflow

Nov 20, 2022 06:56

I tried running `traceroute` on Arch Linux & found some `localhost` entries in the middle like:
```
My ISP
some IP
localhost
... more localhost
localhost
some other IP
```
Why do I see lines of `localhost` in the middle? Does it mean those machines just advertise themselves as `localhost` for some reason? They seem to always be grouped together so it doesn't seem like just a few oddities.

ChocolateOverflow

Oct 11, 2022 08:37

@RonMaupin I'm looking for a DB that lets me update the DB like with tldr & searchsploit. Of course I can download & parse the provided files from iana or just look it up, but I'd like a local DB for quicker & easier searching for commonly known ports for popular services.

ChocolateOverflow

Oct 8, 2022 04:17

@RonMaupin I'm looking for a local database kinda like tldr for CLI tools & searchsploit for exploit-db.

ChocolateOverflow

Oct 2, 2022 04:33

Does anyone know linux program to locally look up known services for ports? I play CTFs and wanna have a local database of known ports to quickly look up potential services.

Computer Science

General discussion for cs.stackexchange.com

ChocolateOverflow

Sep 21, 2022 07:47

A quick look tells me it's pretty pure since it "consumes" the input and the output seems to fully depend on the input. However, after some consideration, the object's method can have side effects (changing another object referenced in it, changing a global), I guess the function's not pure since the code inside isn't pure, but I'm not sure if that's stretching it.

ChocolateOverflow

Sep 17, 2022 03:36

Would this rust function be a pure function?
```rust
fn changeName(person: Person, name: String) -> Person {
person.setName(name)
}
```
I'm not sure if the object state change in the function would be considered a side effect

:chat!

Vi and Vim chat vi.stackexchange.com

ChocolateOverflow

Sep 18, 2022 08:11

How can I make nvim's init automatically set empty the file type as text? I've tried au FileType '' set filetype=text but that doesn't work. Duckduckgo didn't help either.

ChocolateOverflow

Sep 8, 2022 13:51

oh nice, splitjoin looks like just what I wanted

ChocolateOverflow

Sep 7, 2022 13:39

@Rich The problem with such hard-coded indentation is that different language/conventions can have different tab width, and also it wouldn't work right if the array/dict was indented to more than 1 level

ChocolateOverflow

Sep 7, 2022 03:46

I also want it to work with spaces instead of tabs, depending the indentation style of the specific file/repo I'm working with.

ChocolateOverflow

Sep 7, 2022 03:43

@Rich I just wanna format long arrays and dicts in arbitrary languages & file types so it's not a huge problem if it doesn't work with nested arrays and dicts. I don't wanna use \t since the array/dict can be in any indentation depth.

ChocolateOverflow

Aug 27, 2022 13:19

What's the easiest way to turn this:
```
[a,b,c]

{"a":1,"b":2}
```
to this:
```
[
_a,
_b,
_c
]

{
_"a":1,
_"b":2,
_"c":3
}
```
(code block didn't work to keep the indents so `_` it is)

/dev/chat

General discussion for unix.stackexchange.com. If you have a q...

ChocolateOverflow

Aug 26, 2022 14:30

so if I run ulimit in a shell or a script, will it set the limit for all processes spawned in that shell/script after ulimit?

ChocolateOverflow

Aug 26, 2022 13:40

AFAIK, the scope of ulimit is individual users (soft) and all users (hard). Is there a similar way to enforce limits but only of a single executable, shell, or process?

The Periodic Table

Haikus are awesome / Chemistry's even better / So pull up a chair

ChocolateOverflow

Aug 17, 2022 05:55

I'm no biologist or chemist but I'm curious: If someone requested a poison (don't ask why) that suddenly kills a human (rough weight provided) some time after injection/ingestion, can you concoct such a poison while controlling the time between injection/ingestion and the time of death? Basically, how much control can one have with the time to take effect of poisons?

The Playground

General discussion for parenting.stackexchange.com

ChocolateOverflow

Aug 12, 2022 13:04

https://www.youtube.com/watch?v=wnAwR303n-s
Can babies be trained to stop crying on command? Just curious.

Programmers

General discussion for programmers.stackexchange.com

ChocolateOverflow

Aug 9, 2022 14:20

I'm writing a rust program to handle parallelizing system commands (arbitrary scripts and binaries), and wanna practice functional programming, mainly the "pure functions" part. I can't seem to find good resources for doing parallelization & system things in FP. Can someone suggest some resources for learning?

The Whiteboard

General Discussion for softwareengineering.stackexchange.com P...

ChocolateOverflow

Jul 30, 2022 05:29

Is their generally a clear performance difference between FP's "pure functions which discard their input after use" and OOP's "functions that change the input object and output the object"? I'm mostly thinking about whether it's better in Rust for functions to take in mut input.

The Litter Box

General discussion for pets.stackexchange.com. Pet pictures an...

ChocolateOverflow

Jul 27, 2022 13:19

Do some people naturally attract animals or is that just a movie/anime trope?