alex_02

Off-Topic Friday

Wanna chat about something non-infosec amongst those of us who frequent /c/cybersecurity? Here’s your chance! (Keep things civil & respectful please)

What are You Working on Wednesday

Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

alex_02, 2 days ago

I’m late, but been wrestling with the PinePhone. I’ve ultimately decided on Mobian with Phosh + TLP + UFW and probably other stuff. I have decided to take a bit of a short break from most of my projects, but will probably be back to them in a week or so. Just exhausted right now, but something’s are starting to look up for once.

alex_02, 2 days ago

Make it more usable without having to do too many mental backflips. I’m going to try to see if I could make a better DE with XFCE + Openbox + dmenu + the sxmo gesture daemon. Have a rough draft in my head.

Off-Topic Friday (experimental)

Experimenting with a new regular thread. Wanna chat about something non-infosec amongst those of us who frequent /c/cybersecurity? Here’s your chance! (Keep things civil & respectful please)....

3D-Printed USB Dead Man Switch (Prototype Demo) (www.buskill.in)

Today we’re ecstatic to publish our first demo showing a homemade BusKill Cable (in the prototype 3D-printed case) triggering a lockscreen....

The Alleged LockBit Ransomware Mastermind Has Been Identified (www.wired.com)

Microsoft is a national security threat, says ex-White House cyber policy director (www.theregister.com)

Has ethernet become illegitimate? A librarian flipped out after spotting me using ethernet

I plugged into ethernet (as wifi w/captive portal does not work for me). I think clearnet worked but I have no interest in that. Egress Tor traffic was blocked and so was VPN. I’m not interested in editing all my scripts and configs to use clearnet, so the library’s internet is useless to me (unless I bother to try a tor...

A bit of an update on my RPi builds

I’ve been working on and off on several of my tools and toys, specifically my raspberry pis that I bought long ago. I’m at a bit of a gripe now for buying the boards from Raspberry Pi Foundation, mostly because I do not like the direction the company is going, but I still have three of the boards lying around before...

Shark Jack by Hak5

Ok. Usually I’m a bit (a lot actually) critical of hak5 products, but this one has piqued my interest enough that I’ve decided to pay attention to it more. It would be very useful since it is supposed to take advantage of open, unattended, exposed eth ports which you find everywhere in a building. Did look at the payloads...

alex_02, 24 days ago

I cleaned up my room, which took a total of five hours. I’m proud of that one. I just need to vacuum and call it a day. Also been doing a lot of research and coding again. Hoping some of these interview line up so I can start making money to waste all on new hardware toys.

alex_02, 22 days ago

Well, currently I’m open to anything, but I go back to school in the fall and should get workstudy so was thinking of checking the IT Helpdesk first at the school, but think I have enough personal experience that I could in theory do something like Junior Sysadmin or Junior Pentester. The main issue is that I live in a dead end state right now, and any job would have to be remote for the most part, which most companies won’t do. Another problem is that I don’t exactly have a great reputation because of assholes that I’ve had the displeasure of dealing with since I was a teenager. There is also the dumb case of my record with an online article that basically defames me and doxxes me. Also, a lot of misinfo. That article shows up when you google my name and also the stupid case, so idiots in HR get weird about it which ruined several job opportunities, and also I was harassed for months online which cost me my last job along with that dumb article… So think I’m going to just look for something outside the tech industry because so far the way I’ve been treated has been foul.

alex_02, 22 days ago

I’m a huge fan of Golang, but I’ve started looking at writing in Java because a lot of APIs have Java SDK. Before, I have coded a lot more in C/C++. I also love shell scripting and have written a lot of scripts in bash and sh. I’m planning on coding more stuff in various different languages and for Windows I’ve started dabbling in C# because it is specifically built for Windows, so I tolerate it.

alex_02, 22 days ago

I wanted to do red teaming when I was 18/19, but it is so niche that I don’t think I can get my foot in the door. I’m a hardware nerd and the past several months I have also started looking at overlooked protocols. I do plan on getting into more embedded and designing my own boards. Thing is, hardware is very overlooked which I feel like nobody is taking it serious enough. I still have an interest in the tech industry, but kind of just letting life do its thing and wherever I end up, I end up there.

alex_02, 22 days ago

You mean taking hardware apart or reverse engineering the software/firmware? Been planning on getting into reverse engineering firmware, but I take hardware apart a lot to figure out how they work because most of the time I can build something better and cheaper.

alex_02, 22 days ago

I have. I hate Rust. I think it is overhyped. I have heard good things about Zig, and it looks more promising. Crystal and Dart also look promising, but unfortunately the hype is fucking Rust, which I think is a garbage language.

alex_02, 22 days ago

Yeah. Life keeps getting in the way, but I’ve been having plans to at least start emulating firmware with QEMU and poke around a bunch of publicly available firmware. The biggest problem I do see with the learning curve is the machine language, but I don’t see it being too much of trouble once I grasp the basics enough to get a better idea what is going on. Finally got around to getting qemu up and running, so will try to get started with firmware once I get other more important things taken care of first.

alex_02, 22 days ago

The syntax reminds me of what python, javascript, c# would look like combined if they somehow mated and had a child in their threeway relationship. The community also has very stupid people that think it is great making everything twenty times harder because of some hypothetical insecurity introduced by the user or something dumb like that when Rust is supposed to be a memory safe language and the hand holding has allowed some very dumb but arrogant asshats get it to their head.

It just seems over all like a cobbled up, overhyped mess that is driven a lot by pseudo-intellects and ego. A lot of the articles I’ve read have the author throwing around a bunch of fancy words that don’t really make sense and just make them look dumb, also a lot of times it seems unneededsly complicated with how someone does x and explain it overcomplicated. This is especially with when I tried to look at the state of encryption and cryptography in rust. The issue is that crypto is easy to get wrong even by very, very smart people, so what I saw just from glancing and trying to figure out tf I’m looking at with the libraries and also the focus on more of “X is faster than other much better audited crypto library or whatever” and made me unable to trust the libraries to use in my programs since I did not want to introduce possibly vulnerabilities that could be catastrophic.

Also, ironically not long after idiots touted C/C++ being dead or something after the federal gov here decided to make the announcement of moving to memory safe languages, there was some silly cve that allowed rce via some weird batch script. I think it is just better for me to be cautious right now with the language since right now I’m very, very skeptical and from experience if I have doubts about something in tech, I’m probably right.

A month update of the Gemini PDA

Now that I had this device for a while, I can probably make a better informal post. The keyboard is easier to use now that I’ve had time to get used to it. Still wish the keys had more depth. There is some minor weird breaks at the hinges which I think is from opening and closing. Since it is plastic, it cracked more easily,...

m5stack wifi hash monster

Found this interesting project: github.com/G4lile0/ESP32-WiFi-Hash-Monster...

Trump says he’ll jail his opponents. Members of the House Jan. 6 committee are preparing (www.seattletimes.com)

Members of the House committee that investigated the Jan. 6 attack on the U.S. Capitol have warned America for three years to take former President Donald Trump at his word....