/cyb/+/sec/ Cyberpunk + Cybersecurity General

Bro you’re gonna get doxxed we know your IP

has tor been killed?

>The alt.cyberpunk FAQ (V5.26) [ ftp://50.31.112.231/pub/Alt_Cyberpunk_FAQ_V5_preview26.htm ]
NB: last thread had an announcement that Preview 27 was released.

Is coffee and toast the most cyberpunk breakfast?

pic related with tea in your googly eyed mug
OR
coffee with toast and peanut butter because macros

Attached: full-english-breakfast.jpg (2880x1922, 1006K)

I know one thing, and that's that a full English breakfast is not cyberpunk. cyberpunks have to be lean little twinks so they can do parkour while evading police officers

I wish my work had a tor box so we could do fun vulnerability research on the deep web. We need to put in a request sometime

if you don't have enough bitcoin to afford a full english breakfast so you can hack all day without refueling then what are you doing with your bits?

No

Yes

No. There has to be tea. I prefer English Breakfast for, well, breakfast. Green tea is nice later in the day.

>Death by typical English breakfast.
There is a reason why the UK has such a problem with heart diseases. I can still remember those sausages, they went down like depth charges.

I'd missed this so thanks for reposting it, user!

Ok I want to be involved for real now. Enhancing my security was the first step.

the first step on a long journey... what brings you to these parts?

Feels the need to reach another step. Many hints I didn't listen, but now it's time to chose a side, and that's hacking/technology.

We didn't quite conclude in and the suggestions in met scepticism in Are evercookies a thing of the past?

Maybe

Coffee + fish oil capsules.

Or if you want to go full Neil Breen, canned tuna.

It's all burnt and salted to the max. You may as well be eating tumours.

what does Breen have to do with tuna?

Very vaguely related, in that this is about preventing data collection.

Basically all hotels require ID, but I stayed in an AirBnB recently where the owner just told me the passcode to the door and never met me in person. No ID check. But I paid by card, so he had some form of guarantee I wouldn't wreck the place.
Is there a dark web equivalent of hotel booking where you pay in bitcoin and definitely don't show ID?

There was a scene in "The Day of the Jackal" where the assassin character seduces a gay man at a bathhouse specifically to avoid checking into a hotel. This was followed by a scene where investigators are stumped, and can't find any trace of him in hotel registers. This was in the 1970s, so bathhouses were pretty much the equivalent of what I'm talking about. I'd rather not go that far, personally.

you can buy prepaid CCs with bitcoin can't you?

wats the best linux for security?

planning a firewall and a little server that won't run applications

openbsd

you can buy ccs with live cash
if you know what you are doing all info they require can literally not be yours or flat out not exist.
this is pretty much a federal crime ANYWAY so...

My instinct would be to GTFO as fast as possible if carding was involved. Same as with carding an item. Ideally, I'd leave the country the moment the transaction goes through.
(It's probably relevant that I'm only thinking about random Eurasian countries in the context of "leave the country.")

ah. seems I asked if water is wet.

can I still run dorf fort on it?

I'm not talking about carding though, just legitimate prepaid debit cards (backed by CC companies) from convenience stores or wherever. Most hotels would probably put a deposit hold on top of the room cost but seems like it would be fine. I vaguely remember 7/11 or someone was doing something with bitcoins.

>fish oil capsules
Capsules?? Don't be a wimp, drink the cod live oil straight from the bottle.

could probly make a cocktail out of it

a brand new type of bulletproof coffee
but this time even worse that the original

i was thinking more like a gibson but i didn't get the reference at the time.

where information is at a premium, and posters are anonymous, people still help others out with their simple questions. restores a little faith.

Attached: ET Contact Tool.png (512x512, 259K)

do you know how many twats come here asking to hack their school wifi?

Really? I guess that would work. I didn't realise there were legit things on the dark web, which i suppose is short-sighted. Doe these cards appear under the name of the person who bought them, or are they genuinely anonymous?

Shit oxidises, yo. A gelcap is like an airtight seal. This is more relevant the further you get through that bottle of fish oil, unless you want to refrigerate it, and there's only so much punishment the human palate can take. Cold fish oil is the limit for me.

How? Gelcaps are flavourless. Knock them back with the coffee and you won't even notice. Fish oil is definitely superior to grassfed butter as a nootropic, and nootropics are /cyb/ as fuck.

well i don't know if they're on the darkweb, they're potentially anonymous in person cause I don't think you even need a name. Carders deal in gift cards for money laundering though, those would 100% be on sale but unreliable.

Is this the best place to dump privacy dystopian articles? Things such as

nypost.com/2018/11/06/chinas-latest-recognition-technology-can-id-people-by-how-they-walk/
[archive.fo/XYiMk]

nytimes.com/2019/04/17/opinion/data-privacy.html
[archive.fo/t3gYf]

I have been collecting a ton of those and I've been wondering where else I should share them, I just have a telegram channel so far but I've been looking for other places to discuss this sort of stuff

Attached: 1056b5a0.jpg (1058x1300, 276K)

>Gelcaps are flavourless
not when you blend them with coffee

youtube.com/watch?v=2-3wkbqmgxs
16:25

oh its been so long since i saw that one, i remembered all the laptops but the rest kinda blends together with the other movies.

Thanks. I have cancer now.

It's ok user, post all you can.

I will once I'm back on my computer, wanna properly archive the links and post some good images alongside them, I'm new to /cyb/ threads so I hope to make a positive contribution

Welcome aboard.
Often news articles start with === /cyb/ News or === /sec/ News, depending on the angle.
It is not compulsory but makes life simpler for Compiling user who set out to compile all gems on this general. He has not been heard from for a while.

Serious answers only

no means to verify many of those things. ie the tracking can be kept server side

Hey /cyb/ and those working in /sec/, when you got first started working in the industry, what got you prompted to join in the first place? Did you need any background skill in order to work in cybersecurty or was it all self learned?

Sys-admin, Web-Developemt, or networking skills are recommended (Any IT or computer skill really)

I'm almost completely self taught
All you really need is Google and YouTube

Doing CTF's, following tutorials, building and hacking your own software
It just takes curiosity and a dedicated passionate person, anyone can do it

Physics dude here. Reading Gibson's books is close to compulsory and he was very influential in R&D on software and hardware.

Later got into industry, had an internet connection and some trivial server stuff. I volunteered to check the security, found it was a wide open door, started by bolting shut everything.

they make denonymizing algos now to sell you shit and track your wrongthink easier now. you'll eventually get caught by behavioral analysis.
>from the bottle.
do they still sell it bottled?
it's a matter of the honor system, m80.
if you don't trust any of them, your only option is to build your own VPN using a server rented with cryptocurrency and set up over Tor.

will UFW protect me?

>for monitoring
securityonion.net/
Blue team software

>for firewall
pfsense.org/

>server rented with cryptocurrency and set up over Tor.
is this even possible? do you know any providers which allow this?

Here's a list of companies that offer VPS for Bitcoin:
cryto.net/~joepie91/bitcoinvps.html
They all likely log your IP when you order, so you'll have to order it through Tor.
Configuring it will be simple at that point, but I'd recommend you read up and practice creating your own VPN server first. I'd recommend VPS over dedicated servers since it's cheaper, the added noise will obscure your IP traffic, and while you'd get total control on logging with the dedicated server, their routers likely still log your activity.

The cock.li guy has servers in Romania for BTC.
I assume Tor isn't a problem.

Your neighbour's wifi.
Protip: his password is probably one dgiit repeated up to ten times.

Question for anyone working in /sec/. I'm currently a level 1 SOC analyst working in incident response, but I want to go full on incident handler. Anyone got advice for me?

Hey could someone help me find an article I saw on here a few years ago? It was talking about a sticker that looked like a QR code that would disrupt video cameras, i don't fully remember it all but I think that was the gist of it.

Thanks.

May any of you lend me an invitation to RiseUp?

>do they still sell it bottled?
Oh yes. And I have one. I'll take a picture tomorrow.

The clue is to keep the bottle open for as short a period as possible. When you unseal the bottle it tastes nothing. As the oil oxidises the anti oxidant will stop the process for a while, but after that a rather distinct flavour will indeed appear.

Yeah, I found some on the internet. Can probably find some at the supermarket.

Since we're on cybersecurity and cyberpunk, people claim that CloudFlare doesn't seem like the kind of company you can trust, with claims they grew too fast for it to be organic and that they pull a Man in the Middle attack when you try to communicate over HTTPS with any site using them (like Jow Forums). What's the likelihood this is the case, and how do you protect yourself?

LOL 15 year old larpers

why the fuck do you want that?

But i'm using Kali right now :c
And i'm 25

>just discovered how to run a linux distro on a pendrive with a VM
>can boot from pendrive from any PC i can get my hands on the bios
okay this is epic
what stuff do i add to this pendrive? i got some OC tools like aida64 and prime 95. what tools do i use to remove/scan for rootkits?

Yes, this is perhaps the comfiest general on Jow Forums. Rather productive too, there are a couple of FAQs that are written here and still regularly updated.

Not so many as it used to be, thankfully.

Attached: BR_red.jpg (1920x3233, 987K)

Should I expect my account to be compromised if the data leak only had hashed and salted password info? I'm changing my password just as a precaution but should i consider that password burnt?

yes afaik the hash itself could be sent in unsecure enviroments so you could be compromised anyway

For further elaboration, my account is likely in this leak. I don't care if some chinaman knows my shoe size but do you think that password would be burnt already?

techcrunch.com/2019/08/03/stockx-hacked-millions-records/

>MD5
your password is dead bro

That explains why i had suspicious logins on a couple old accounts i had used the same password for (bad habit) over the past couple of weeks

md5 is so bad it sucks for most secure applications to the point its real use is CRC check

I did this at work with Kali so when people forgot passwords on the few unencypted Windows machines, we could boot into it to fix the problem with chntpw.

how do websites prevent these catastrophic leaks? Or in the event that it does occur (it probably will), how do they minimize data compromised?

>prevent
real hard because most of the time what happens is that a fucktard answered a phone and did something a hacker told them to
>minimize
sha-512 would have made that leak irrelevant for the next ~140 million years

coming to think of it...

if the logins were all on MD5, their security was breached the moment a hacker got a wireshark of anyone's password

I havent taken cryptography yet, what is so bad about md5 aside from it being a dated algo?

>prevent
2-factor authentication helps, as well as mitigating what pointed out as the problem.
power companies usually pay security firms to phish the power company and anyone that falls for it twice in their career gets fired.
>minimize
depends on the data, better hashing algos deal with compromised passwords, but you also have things like IPS that can help.

need free xmpp server as well as a nice email provider.

some fucktard getting phished is potentially fixed by threshold secrets requiring multiple parties..... but that probably won't help even well encrypted password stores unless they had an input-only/output-only scheme which I'm not sure exists.
that dated = useless, just a random pc with a gpu could probably crack them all in a month or two if there don't already exist rainbow tables.

tldr you can have different input for the same output, since the login would only check if the hash is right all you need is a pw that outputs that hash. md5 uses a easy to calculate hash so its easy to brute force a solution. stuff like sha512 would take signifcantly longer to brute force

i feel obligated to tell a weed joke.

so the issue with md5 is that it has a low period?

>low period
wat? you mean computational time? yes that is also not a bad way to look at it

im an idiot and i mixed terms up, yeah thats more or less what i meant

also not collision resistant, extremely light & easy to parallelise, also because of its age its used in combination with all other known worst practices.

That GPU estimate of months was a really slow estimate, with rainbow tables and cloud compute shit you're talking seconds.

Sup /cybersex/, what do you think is the most cyberpunk combination of emojis?

Attached: a1c5f906e3b22ab53e42294decfeac370d7739226078ae78d53d40e0139d0778.png (1000x1000, 293K)

>fish burps

>rainbow tables
how do i get some of these?
go back to /trash/ and stay there.

anyone got them OSCP writeups?

>writeups
you mean the book, or the reports they made after completing it?

This is the same question as helpdesk asking how to become sysadmin. You’re missing a few steps. The first thing is to quit your level 1 job, and get something more technical. There is no way to get from helldesk into a higher role in your company. If you’re good at your current job, your manager has no incentive to let you move to another team, because he will have to replace you with a shit eating retard. Conversely if you’re not good at it, the new team don’t want you.

Basically the only way to move up ranks is with a new company.

Psst
That has always been its intended use, not passwords.