/cyb/ + /sec/ - Cyberpunk and Cybersecurity General

I have uploaded a few more files to the FTP site. More are coming, just sorting out my latest haul.

There is also a new version of the Radio FAQ at
ftp://collectivecomputers.org:21212/Books/Cyberpunk/Tech/Radio/radio_FAQ_Preview8.htm

=== /sec/ News.
Let us have some good news for a change:
>OpenSSH 7.8 released (via LWN)
lwn.net/Articles/763444/
>OpenSSH is a 100% complete SSH protocol 2.0 implementation and
includes sftp client and server support.

>Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots or donated to the
project.

Finally, i have been waiting for this thread for a week. Starting my Cybsec degree now fellow Jow Forumsentoomen.

Ha, nice pic. This one of the oldeytime security clearance posters isn’t it?

>I want to get into pentesting but what distro should I use?
Which ever Linux distro you want. It’s tirvial to add modules and tools in.

We had two false starts, now the night is here when this thread has the greatest risk of expiring.

How about some TRON?
youtube.com/watch?v=aGoaig1z2yQ

>that pic
What the fuck is going on

Tron is always good.

Hey, I liked my reformatted OP. What was wrong with it that you couldn't use it this time?
>It didn't have a Discord link.
But Discord has poor security measures! It's not even end-to-end encrypted!
>Says the guy greentexting with himself.
...

>who /goingonMrRobotbinge/ here?

>

Mr robot was p goodAs a show, just that

What's the most /cyb/ handgun legal in the US?
Jow Forums can't stop shilling the Meatball and its knockoff long enough to tell me.

Attached: 1482521479821.jpg (2912x1754, 1.92M)

youtube.com/watch?v=8za_4g5zCOM

Good keybolard for dec? Probly chording keyboard would still be better.

You poseurs have own decks, don't you?

Why do people like these settings? Its aesthetic but soulless and crushing and is just gonna make you miserable

I was thinking of drafting out a design, though for the most part I'd be a bit concerned with size and internals. Like, if I'm using a deck for interfacing, do I really need something that can also run Crysis?

some people on lainchan made a /cyb/ discord I'm not going to use it because fuck the botnet but you might: cun8BBs

>the Meatball
Lmao what

>people on lainchan
>people
lol'd

Probably a riced out glock, no joke.

What's the best way to store system passwords for encrypted hard drives so you can access them as reference if needed?

>I was thinking of drafting out a design, though for the most part I'd be a bit concerned with size and internals. Like, if I'm using a deck for interfacing, do I really need something that can also run Crysis?

Nah. Good IPS colour grade display may be however beneficial, but you may also live with just plain black and white 80x25 characters. I think somethink raspbery pi grade (there are some 100% FLOSS alternatives) in computing power may a reasonable base for a deck - because:

- it's small
- it's lightweight
- it's ummm more or less low at power consumption
- you can attach many strange displays easily - like 10 inch touchscreens with IPS panels
- you wont crack any reasonable powerful code on mobile processors anyway in reasonable time, deck has to be a general purpose, not for pursuit of next biggest prime numbers
- it should have possibility of attaching things like interface for connecting to vehicle bus - like CAN etc.

- gosh, this is what IRC is for, what a fucking poseurs and morons

memorizing them all and typing few times per day to enforce memory of them on some broken unplugged keyboard

glokes? You Americans are too poor to afford sig sauers?

There's a huge customization aftermarket for glocks, even to the point of pic related.

Attached: wm_12529398.jpg (4896x3672, 1.22M)

My channel keeps bouncing after I set up my wireless transceiver on monitor mode and use aerodump. I think it is because I am closing the terminal window instead of terminating the sample process normally. (Aerocap's Documentation is a mess) When I run aerodump and try to capture the handshake between a station and an access point, it keeps switching channels instead of monitoring on the correct one the access point / router is running on.

I set up dual wireless adapters so that i connect with network manager with one and use monitoring mode on the other, but even after I disable network manager on ubuntu and unplug the other adapter, it still does this. I even disabled the network adapter driver that I wasn't using, it still did it.

Does anybody here know how you are supposed to terminate aerodump's feed from the terminal correctly? Is it like, P for pause?

Glocks suck.
The slide is too tight, the trigger is too tight, and the seal doesn't have enough ventilation so the bullets sometimes get caught in the ejection chamber.

Its the ak-47 of pistols.

Its funny how you can buy a magpull off the internet no problem, but you buy an extended mag for your glock you go to jail.

Sure, its reliable, but have you ever tried ejecting a hot casing caught in the chamber? Normally you could let it cook off until it shrinks back to normal, but if your in a firefight you'll tear your shoulder trying to pull back the slide.

real men use revolvers anyway. More accurate, forces you to aim when you shoot, don't go spraying dozens of rounds off at random.

As a civvy, its all about controlling the situation. revolver is easier to hide behind a jacket or briefcase, its more intimidating because they know you only got enough bullets to kill one guy, but they know for damn sure your going to get close enough not to miss and whoever you point it at is getting a belly full of lead.

Not to mention a .38 is harder to trace than 9mm. Do yourself a favor, buy a Ruger, shave the serial number off the barrel, report it stolen and ducktape the handle.

>bullets
*casings

Isn't that the whole point of the "punk" part of "cyberpunk"? To take something shitty and modify until it's good, or at least less shitty for you, streamlined polish be damned?

No the punk in cyberpunk refers to a style from the 90's where people had fuckhuge mohawks and retarded chains and studds on all of their clothing.

>>No the punk in cyberpunk refers to a style from the 90's where people had fuckhuge mohawks and retarded chains and studds on all of their clothing.

Attached: carlcuck.jpg (600x615, 39K)

What does /cyb/sec/ look for in cybsersecurity software?
I'm talking about the kind of cybersecurity software which could keep the intel. agencies and other advanced hackers away.

Attached: 1500313615396.jpg (1469x1102, 320K)

what did you use to create that map?

yes, you can tell by the discord link

anyone here hae experience with airgapped networks running microshit stuff?
new client wants an overhaul auf their infrastructure but the software requires W10 by now
>current situation
>tech network, airgapped from internal network
>internal network, airgapped from one public facing box
>data transfer being done with a single chained usb stick (sic) at the transferpoints
asked, why they did it that way, answer was like "muh bad virus attacks via email"

My gut tells me they don't even have a backup strategy but it'll be hard convincing the like 60 year old CEO that his paranoid setup is flawed

How easy would it be to create an alternative text based internet using content served through the terminal? Or would you just use BBS? I'm thinking of reading web "pages" where characters can be modified through a form of markup for colour, background etc. With links to other pages, ANSI art, comments, chat rooms, could be served to a client running in a standard terminal.

How can I get a job/internship in Cyber? I have a BS in Math. Do I need to get certs?

You need 2 years of experience or IT/CS education, plus a cert like CEH or CISSP.

something like this ?

Attached: 09f9b27d76d040731431c00b17ed1b1f.png (580x332, 78K)

aother one

Attached: a1bae904487ec07c510a4345d6d6941d.jpg (500x389, 55K)

Is that Lynx? I don't mean just displaying normal html web pages in text form, rather designing a new kind of content and markup scheme designed specifically for terminal interaction

yes it is.
what's the point of developing a new protocol for information exchange other than having your own secret club consisting of yourself and two friends?

Do you have a specific question? Is something the matter with the setup? I am unsure what you want to know.

core question is whether W10 / Server 2016+ / Office 2016 can handle being without network connectivity on the long run. I suppose they haven't made steps towards patch management so far either.
Everything I've found so far is some diagram of MS setting up volume licensing and connecting only the license server to the interwebs

There is zero problem with this. Activating them isn’t a big deal; you will just call MS and read them that 16 digit code, they will give you another one to punch in, and away you go.

As for exchange on a private network, goddamn son you have the easiest exchange environment you’ll ever find. No mx records, no spf, no dmarc, no fucking around with 12000 tonnes of bullshit you would if it was a live exchange environment

Cute drawing of my wife

okay, thank you. Guess I'll pay them a visit some time.

Don't post that laughing stock here.

The glock has taken more kills than you have. It is better than you.

I want to make a web-facing password manager, so I can have perfect passwords and access them from anywhere with internet. There are obviously many precautions needed for this, and I'm sure I'm missing a lot, so please school me
>Deny HTTP and FTP
>Set HTTPS, SFTP, and SSH to something else
>Whitelist LAN for SFTP
>Create ssl cert with let's encrypt
>Program uses SHA-256 on all possible credentials (username, pass, security questions)
>No data visible in the front-end, only a single input
>To get the data you input the program/website name and it returns the unencrypted response
>IP is emailed to me every time it changes
What OS should I run this on? I would likely put it on my raspi

Attached: 1472573003778.jpg (1920x1080, 331K)

Security+ sure fucking loves acronyms

God this shit is annoying

Attached: moar wine.jpg (662x652, 540K)

Anyone?

Making you're own is a really stupid idea.
Just host a kbxd on a secure webdav and open it from your phone/pc when ever.

here is an radical idea.
install Debian
host your kbxd on a samba share
set up wireguard VPN. (its experimental i know) By default it will only forward remote local addresses.
On your client just keep an always active vpn connection to your debian. wireguard excels here as it will be completely idle when not called upon. then in keepass(x) just point to //192.168.x.x/share/x.kbxd
192.x being your debian local ip.

>what's the point of developing a new protocol for information exchange other than having your own secret club consisting of yourself and two friends?
dont you want a secret club?

Hmm. I'll have to remember to keep that in mind. I was honestly thinking of finding a way to use a Raspberry Pi Zero or Zero W as a wearable device of sorts; maybe I could expand upon it somehow. Then again, I'm sure larger Pis offer more connectivity options.

Thank You for posting.

what's kbxd when i search it i just get radio stations

Congrats.
I wish I could get in the cybersec field over here.

Pretty sure it's emphasizing the individualism/opposition to authority

What's the best free database of malicious/hacker IP addresses?

Attached: socialism.jpg (850x400, 80K)

Try VMS, it runs on Raspberry Pi.

Turn off all services you do not need. Place behind a firewall with deep packet inspection.

Attached: VMS_Uptime.png (807x475, 28K)

where is that about:config gitlab? can't find it in the pastebins

Stock you say?

Attached: 1484858513057.png (278x242, 88K)

im4.ezgif.com/tmp/ezgif-4-65d7cb1328.webm

New to this, suggestions welcome

>Thinks I'm making fun of glock itself
>doesn't understand how fucking stupid a folding handgun is

We have the antidote here:

.22 tcm 1911, your week programmer hands should be able to handle it (coverts easily between 9mm an .22 tcm)
Alternatively, pick your favorite semi auto TEC9 variant/look-alike.

That's part of what cyberpunk is. "High tech, low life." The rich are rich, the poor are poor, but at least we all have the latest technology if you can afford it, steal it, fake it, or make it.

doesn't the personal laptop basically replace the cyberdeck?

Yeah but it doesn’t look as cool

I have bad news buddy: The only thing people would think if they saw you walking around with a cyberdeck is "I bet it would be easy to take his lunch money."

perhaps, but what was considered cool in the 80s doesn't pass for cool nowadays, and if it's not cool today it may not be as cool in the future

what would a modern cyberdeck look like, anyways?

At this point I think the realistic evolution of the deck would be high-end/custom palmtops. 80's cyberpunks didn't predict the cellphone botnet, and if they had they'd likely write their characters as devising clever methods of opting out of it while retaining some kind of tech-on-the-go.

>what would a modern cyberdeck look like

probably some garbage appleshit 'iDeck'

>doesn't the personal laptop basically replace the cyberdeck?

If they can fit in backocket of your jeans yes, otherwise you have to use tablet/palmtop that does or build own. Also if you build decj you know what is inside and can built in many nonstandard solutions you would not find in stock machines.

>what would a modern cyberdeck look like, anyways?

more or less like this youtube.com/watch?v=WmVaRYlC8_8

important is to have possibility of atleast attach to most common interfaces like vehicle bus interface, industrial controllesrs, probing 8 and 12 pins clips etc.

I would personally opt for not including per default radio.wifi/blootooth components or to have them permanently on board/SoC

Building a deck by yourself also means you can make it wearable in for examle pocket and connecting it to sensors monitoring your body functions (coz you are monitoring your fat burning, or you have some sort of deaseese) in on your body/in your jacket or just attach an earphone to hear news reports/messages about changes in body functions paramteres, messages about reaching McDonalds wifi access point.

Also you have a control over method how your deck is powered - you may even attach solar panels to it. also wanna add over 10 000 mAh of total battery? No problem.

It's kinda like building own lightsaber for a jedi.

And yes most guys who build decks nowadays are larping shadowrun style, while we are living in a totally different reality, not only becuse magic works in a different way in our world.

>what would a modern cyberdeck look like, anyways?

>rooted second hand nexus with terminal
>external monitor mode capable wireless adapter to crack wifi
>big bastard solar panel baytery
>use it to ssh into a jump box VPS paid for with tumbled crypto to perform hax0ring

Too many proprietary dependencies in KEY points and shitty modularity and hard to extend

Explain your position. Anyone can throw out assanine statements like that and hand wave away anything they don’t like

Enjoy your acces to modem memory for proprietary battery drivers. Or was it resolved? If it was it would mean you can install fully free Replicant variant on that device. If it is the case that should bementined on fsf or related pages.

Considering you’ve given zero source, i shouldn’t even be entertaining you. But since I want to defend my stance that a rooted android running a full custom OS like nethunter is the real deck in the modern world, consider the following:
>what is a solar panel
>what is a bunch of generic batteries from jaycar/radio shack
>what is removing the battery from the goddamn telephone and using alternative sources of power via USB

It may be, the really shitty one, and that's what was pointed out

can you try again and actually put together a coherent sentence?

>can you try again and actually put together a coherent sentence?

Yes, I can. So *cough* *cough* ekhem...

Your proposition sucks cocks and swallows every drop of cum in a huge gay orgy.

Good night.

There are the normalfags who don't know any better and there are those whose lives are already soul crushing, so might as well be /aesthetic/ about it. Probably why it's so popular on Jow Forums.