Simple Security Questions 2

This is the Simple Security Questions thread for simple questions. >>18084 was full. If with a simple question and without a suitable thread already existing, post it here and someone will probably try to answer it. Remember to do some research before asking questions. No one wants to answer a question that a simple search can already resolve.

>>22024 anybody got that edited wallpaper of jim bowning or other scambaiters throwing the indian scammer's head into a basketball court? i saw this before but forgot the video title looks really hilarious

Is obfs4 a good enough way to hide the fact that you are using tor? I don't want to get blacklisted by my ip.

>>22257 obsf4 bridges have historically worked well. There was a defcon talk last year about Russia's attempt at stopping Tor traffic and the obsf4 bridges were effective at circumventing it, as were some of the other bridge types. The most effective bridge for circumventing censorship varies from country to country, though. What do you mean blacklisted by your ip? The ip services see will be the tor exit node's ip, not yours. Did you mean blacklisted by your isp? Your isp is probably not going to blacklist your for using tor without a bridge, but that may depend on who your isp is and where you're located.

I want to try to get in the router given to me by my local mafia ISP, any tips or pointers where to start?

>>22278 OK nvm looks like it's running some ancient samba server lol. I'm going to buy one of ebay to avoid getting in trouble tho.

>>22278 see if it responds when you try to ssh or telnet to it from the LAN side (wired) and guess common default username/password combinations used by consumer routers or look up "<manufacturer> <model> admin password". Also check for web console on default ports for http://x.x.x.x and https://x.x.x.x as well as http://x.x.x.x:8080, x.x.x.x:8008, x.x.x.x:591. Try also SSH on port 443 if there's no WebUI there. If there seems to be nothing listening on any of these, have a port scanner check all ports instead of common ones, and perform service discovery on open ports. If this gets nowhere, it may be necessary to experiment -- maybe it ignores you unless you're coming from a certain IP address in the LAN subnet, or MAC (spoof the router's own MAC address on your PC, perhaps). Or maybe it uses port knocking, which could be attacked with a tool such as eliemoutran/Knockit

Is there any sort of technology to use critical data in an untrusted environment? I have a hard time believing that everyone just trusts their cloud providers with private keys etc, so how do people run code on a server that can't be trusted?

>>22333 https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html https://delinea.com/products/secret-server https://f.hubspotusercontent10.net/hubfs/19928113/Delinea/datasheets/delinea-datasheet-secret-server.pdf https://aws.amazon.com/blogs/security/how-to-byok-bring-your-own-key-to-aws-kms-for-less-than-15-00-a-year-using-aws-cloudhsm/

>>22334 Those advertisement type of articles were not very technical, but still thanks for giving me terms to look up. I still don't see why I should be able to trust the cloud peovider with BYOK/BYOE. How is it guaranteed to the customer that the provided key is not duplicated?

>>22335 I'm not a very technical person, but my intuition tells me that the whole point of clouds is that yoy can't trust them inherently. They're a honeypot to gain and retain your data.>>22335

I just modified a section of C programming code for a buffer overflow demonstration that works with changing function addresses by converting it to shellcode, would anyone be interested in seeing it here and improving on it? Cus I just bruteforced a buttload of switch cases to do it and i'm wondering it there's a better way.

What would be better for full disk encryption password (so no passqord manager can be used): a short random character password, or something like a 6 word passphrase (basically complexity vs lenght)

>>22379 >>22379 I'll just share my setup for your consideration from when I had FDE. It was a long time ago now -- I was using TrueCrypt. So some of this is what I would do today and not necessarily exactly what I did then. - Open EFF's long wordlist for use with 5 dice: https://www.eff.org/files/2016/07/18/eff_large_wordlist.txt - Open random.org true RNG dice roller: https://www.random.org/dice/ - Roll 5 dice once for each word in the passphrase. I use 8 for "core" or "critical" things like password managers or other data encryption. For this example I'll use 4. - Numbers: 51336, 12466, 45322, 25215 - Consult the word list. Result: removed attic prevail empathic - Apply any regular/constant modifications such as capitalizing the first letter, adding a consistent or derivative number, etc. Recovery: - Write down the numbers such that the five digits of each number align with the corresponding digits in the others (or do it in a text editor with a fixed-width font face): 5 1 3 3 6 1 2 4 6 6 4 5 3 2 2 2 5 2 1 5 - From top to bottom then left to right (or substitute your preferred cipher method) transpose: 5 1 4 2 1 2 5 5 3 4 3 2 3 6 2 1 6 6 2 5 - Record the resulting numbers in your preferred fallback of last resort and destroy the scratch paper. You could record it all on one line as a contiguous number if desired, maybe with an extra digit at the beginning or end as a reminder of how many words to decode for. - When you need to recover the words of the passphrase, simply write your recovery string/numbers in columns top to bottom, left to right (if you used the same method) and you should have the original numbers as rows that you can use to retrieve the words. This is not meant to be a recommendation that everyone should do this specifically, or even that everyone (or anyone) should do something along these lines. Only an example of the kind of things you can implement when thinking about the more "out of band" or "emergency recovery/bootstrapping" parts of your password management and disaster recovery process. - Preserve copies of the word list. - Bonus: Change the password prompt to "Operating system not found"

>>22393 >Change the password prompt to "Operating system not found" Sounds fun, I know you can edit /usr/lib/initcpio/hooks/encrypt and change the first prompt (the "A password is required to access the volume" one), but what about the second one ("Enter passphrase for /dev/sdX: )? I can't seem to find anything

Will ChatGPT-4 grant quasi-perfect cybersecurity to companies? My idea is that, with ChatGPT-4 having a database on basically the whole internet, you don't really need the internet anymore. One verified company can send mails to other verified companies, but other than that, my idea is that, if you want to use the internet for anything, you just go to ChatGPT-4. If you want to visit a website, just ask ChatGPT-4 for a duplicate of the website, and you can use that instead. It won't replicate the malware, it'll just rebuild it with the useful information. YouTube? ChatGPT-4 can generate the videos on whatever topic you want. So yeah, there's no need for employees to risk clicking on suspicious links because ChatGPT-4 can serve them with a guaranteed-to-be-safe duplicate. Thoughts?

Is there some kind of service to help you mass delete old accounts when you've forgotten your emails/passwords? I've thought of flooding reports for each site, but I'm not sure how viable that is. Dunno if this question belongs here or /tech/

>>22412 Perhaps you could try contacting the support email of the service and ask them to delete your account for GDPR reasons? Just an idea.

I've got an interview box to do with heavy emphasis on web vulns what web vuln scanners should i use beyond nikto and nessus?

>>22258 I think that bridges are better than a VPN or nothing at all, but I wouldn't expect them to absolutely prevent any and all ISPs from identifying Tor usage. >>22298

>>22396 You should check out some fundamental papers on transformaers and llms, especially "all you need is attetion". LLMs can not perform relatively good with too much token which really limits you to use it as an intermediary. Also in order to keep the knowledge of model update you should train every time you have something it to learn. So no you just can not act as if its internet

>>22396 Thats a interesting idea, i can see 2 issues with it though A) It would be out of date slightly from the 'real' internet because the model would need to be trained to incorporate the new information and B) Wouldnt that just shift to malware that 'infects' chat gpt to produce the unwanted effects

Is hacking show us its useless?In RusUkr conflict hackers do nothing harmful

>>22396 This is kind of ridiculous, considering that the value of a network is its connections, not so much its content. For that matter, even if it were about content, you're missing the fact that there's a massive use-value in actually visiting old pages--HTML is written to be viewed, not to be summarized. There's a reason Amazon can't be catalogued or summarized--it acts as an immediately-accessible platform for transactions, as most of cyberspace does, one way or another.

Will google read my diary if write it on an FOSS android app

>>22435 Assuming the phone has telemetry then it will because your keystrokes are captured by Google as the keyboard you use is provided by them.

>>22437 In which case your could as well mention the OPENBOARD. It's somewhat crude because it doesn't have swipe input and its spellchecker is fuarrrked if your language is not English, but it heckin works, so I guess you can manage to type a bit if you really want to have your diary private. On the other hand, your phone is likely rootkited by CCP (Chinese Communist Party), so they can retrieve whatever they want. They might as well sell data to Google or just give it to them as a part of some collaboration scheme. The only way is to flash ROM and install some open source OS like GrapheneOS and pray that your CPU is not backdoored as well, which I think is unlikely because it's presumably unprofitable to target the 0.5% of weirdos who use alternative Android OSes.

How likely is it for a network-connected debian system to be compromised during dvd installation, before enabling a firewall (besides the home network NAT) and updating anything? Suppose the adversary is a european government who you suspect is keeping an eye on you. Have there been known cases of this?

>>22465 Unless you keep some services listening somewhere on public internet it's not going to be any less likely even if you update and firewall. Governments have infinite resources and GNU/Linux has infinite amount of security holes for everyone to enjoy, especially governments. It's pointless to hide from them. It depends on how much they want to track you. If you're really super important, forget about internet. Forget about life as well. You'll never have any. Not without your privacy compromised, that is. Otherwise most likely they're not going to bother, so I suggest you don't as well. But that's just my boozed opinion. Maybe you should wait for something more competent. If they're going to perform an attack from your ISP best thing I can think of is installing without internet connection at all. When you're done configure firewall to drop every incoming connection if it's not established,related and only then connecting. I have no idea how to protect yourself from layer 2 attacks and how much of a threat they are.

[cryptocurrency question] If we assume no implementation flaws in Monero (PD,PT,HAHAHA), and no targeted surveillance during the act, is there any privacy benefit from having some Bitcoins connected you IRL identity, exchanging for Monero, transferring the money through a couple of single-use wallets, then exchanging it back to Bitcoin? Could the final Bitcoin amount be traced back to the original Bitcoin amount? Let's assumed not all the money was pulled out of this system, so we put $100 in and only pull out $70, so there's not a blatant correlation between [$100 in]-[$100 minus costs out] Does this laundering-like system suffer if the exchange service is compromised? For high-level reference of the Monero privacy model: https://www.monero.how/how-does-monero-privacy-work

What do these weird settings in Tor indicate? I saw someone on the board here claim they were backdoor stuff for Intel ME, but it feels weird if that's true and no one is talking about it. I googled the settings and it just brings up pages from the CIA, which isn't very comforting.

>>22478 https://searchfox.org/mozilla-central/search?q=intl.ime.hack&path=&case=false&regexp=false https://bugzilla.mozilla.org/show_bug.cgi?id=1444572 Only seeing the snooper related setting in a quick search of the Firefox source code and it appears to be related to working around for uim, an input manager that may or may not have key snooping enabled, and when it is built with key snooping enabled, it sends slightly different key events and firefox has to handle them differently. The setting itself looks like it's just because there's no way to determine if uim was compiled with the snooper flag enabled, so they have a setting to say whether it is or isn't. Only looked into it for a few minutes, but looks like it's nothing malicious.

IME stands for Input Method Editor. intl, I assume for international (not much point in abreviating intel, is there? and there is a fuarrrkton of other settings sharing that prefix). As far as I understands, these settings enable/disable workarounds for some issues caused by some input methods. (see https://bugzilla.mozilla.org/show_bug.cgi?id=1609407)

>>22478 That time when trolling actually worked.

>>22479 Thanks Lainon, that puts my mind at ease. >>22482 Ha ha, well it's not too hard to troll paranoid people I guess.

>>22378 I'd be interested, that sounds cool. If you have a personal website it might be worth making a write up and posting it, I'd read it.

>>22485 https://github.com/zlw9991/C-Function-Address-To-BufferOverflow-Shellcode/tree/main don't laugh at me ok

>>22490 The pointer -> string -> array of char conversion bothered me a lot. And what's your problem with explicitely handling all 256 case in the hex -> byte conversion? You also had a buffer overflow in your code meant to showcase buffer overflows. That's pretty ironic, lol I fixed your main: int main(void){ printf("ovf vadr = %p\n",(void*)overflow); printf("att vadr = %p\n",(void*)attack); char input[272]; // 256 + 8 + 8 // (8 = base pointer register of previous stack frame) // (8 bytes as 8 bytes = 64 bits, and we have 64 bits for address) // (this is the 8 byte padding between 'buf' char array and our target return address // (Another 8 bytes for the target return address) for(int ctr = 0; ctr < 264; ctr++){ input[ctr] = '\x90'; // nop in intel proc } // Copies target address to the end of the array // The compiler automatically deals with endianness ((void(**)())input)[264/sizeof(void(*)())] = attack; printf("full item = %s\n",input); overflow(input); return 0; }

>>22497 yeah we haven't touched C in awhile, this looks much smarter. as to the reason for the conversion idk, for whatever reason on my end directly inserting the attack address would'nt work, but i guess your method of inserting the it with the void function casting thing worked.

>>22503 'we' being my CS class*

What a soykaf and what are not?

>>22024 Thumbnails were not expanding to full images on 4chan and connection generally sluggish yesterday, went to a weeb figure import site later clicked on a link and had an unexplained redirect to a US department of state employee log on page, internet not sluggish today thumbnails expand. Plz help way do

Any good resource about mobile cheating?

Can anyone help suggest 1 - 3 books for networking? I need to get very familiar with it within the next 9 months. I need to have a grasp of networking in general, as well as some good security practices. Bonus points if anyone can recommend me a good book that would help me fill out the gaps in general "cybersecurity" For context, I'm having to work on a masters degree in cybersecurity and I only have a BA in mathematics and BS in computer science.

>>22538 Read either Computer Networking: a Top Down Approach by Kurose et al. or Computer Networks by Andrew Tanenbaum.

hi lainons, where should I start with web hacking? I want to take down a local pornographic website. I have knowledge with SQLi when I was a 16 skid, but now I am starting to learn nmap. But the thing is I don't have proper knowledge with networking, I am just a dev. I just want to be decent enough to take down that porn site. I tried scanning some local porn sites but some of them has cloudflare and that already stopped me from scanning with nmap. What tools should I use? Are there any books, or course? Thanks!

>>22539 Thanks, man. I appreciate it. >>22544 Considering the way you are doing this, you're still just a skid. I don't like to help skids except to improve. So, here's what I'll suggest: Figure out the version(s) of what is being ran on the website and find the CVEs associated. You go from there. If you want to learn networking, there's two book recs right above your post.

How do I shot web? And how do I email like elite haxzor?

>>22571 >How do I shot web? ESL or am I stupid? >how do I email like elite haxzor? set up your own email server

Isnt it a risk getting a security qualification like OSCP? It must you put on some watchlist

>>22622 >ESL or am I stupid? You're just young

>>22626 whenever I browse here I don't think of le hecking 4chan me-mes

Lain, what a u think about radio hacking?Its just fun or somehow is there any way to make money from this?

>>22677 >Lain, what a u think about radio hacking? Your starting point would probably be a "DX Patrol" SDR. Also, anyone who's interested in radios should looking up ARRL Handbook (and optionally ARRL Antenna Book). Get a HAM license and go to HAM club meetings and ask around about digital modes and SDR's. >Its just fun or somehow is there any way to make money from this? Mainly just fun. I imagine that it can be useful while pentestsing because of RFID keycards.

>>22258 All obfs4 public nodes IPs are derezzed in Russia long time ago

I have access to a linux server which prevents execution of user-created files. I want to run program not installed on the server. It compiles, and I get and ELF file with -rwxr-xr-x permissions, but when I run it with ./name I get an error 'Permission denied'. Probably there is some kind of protection like selinux which doesn't allow running files from untrusted directories. Bypassing it won't be simple because it's specifically designed for that purpose. But still: how to run it? I've googled about /lib/ld-linux.so and similar but there is no such files in /lib/. I was thinking about writing a program to read the ELF, load it's regions into memory, set flags for these regions and execute it (read(), mmap() must work, otherwise many programs will break, as well as enabling execution in memory regions otherwise JIT-compilers won't work). But then I have to run my loader program somehow and we back at the square one. Maybe there are some standard linux programs with gadgets I can exploit? Like specifying path for .so files, and placing custom binaries there? Sounds too easy and probably won't work. Any ideas?

>>22745 Before I started to dig deeper in reflective loading it tuned out that the control panel has an option "Run your own applications" ¯\_(ツ)_/¯

How do I get spyware off of my devices? This creepy bald black guy from Ottawa who I think is affiliated with Trudeau, put spyware on my devices

>>22762 vague question, if you're concerned about the hard drives being infected buy new ones, if you have a compromised phone you'll need a new one since irreplaceable components, but really the only option is to get completely new devices since you can never be completely certain you've gotten rid of the malware

>>22762 Why the fuarrrk did you let a guy "affiliated with Trudeau" mess with your devices? Anyway 90% chance you just need to reinstall Windows Vista m8.

I was excercising cracking some simple md5s. john the ripper took tens of hours (with the right raw-md5 format, and a previous dictionary attack with the rockyou dictionary failed). This site was istantaneous: https://hashes.com/en/decrypt/hash does anyone knows why?

>>22772 >Hashes.com is a hash lookup service. This allows you to input an MD5, SHA-1, Vbulletin, Invision Power Board, MyBB, Bcrypt, Wordpress, SHA-256, SHA-512, MYSQL5 etc hash and search for its corresponding plaintext ("found") in our database of already-cracked hashes. >We have been building our hash database since August 2007. We are not cracking your hash in realtime - we're just caching the hard work of many cracking enthusiasts over the years. learn2read

>>22571 >>22622 >>22626 old meme is old longcat is long nice to see again after so long

>>22788 >long cat is long

Do people have good advice on detecting malware (on linux of course). I have some VMs I expose to potentially malicious files but thankfully I haven't seen any obvious signs of malware yet. Sometimes I'll scan with rkhunter or chkrootkit but malware could still avoid detection. After that I just check network and memory usage, storage used by files, I guess I could route connection through another VM and monitor the network connections in case the malware somehow hid its activity during my searches within the potentially infected VMs.

can't for the life of me figure out how to capture wifi traffic from smartphones connected to my own network. googling it results in fuarrrk all. scrubbed? using kali, wireshark and an alfa awus036ach. wireshark defaults to channel 1 (2.4ghz) and puts the card into monitor mode (phy0) by default. the phones on my network are most likely on ch36 (5GHz, and 2.4 is on the same ssid). when i try to change to any other channel in wireshark it errors with "unable to set channel or offset". any help would be appreciated!

>>22024 Where i can get leaked DB?

On XMPP, if you have Omemo enabled, does this cover both fileupload and voice messages?

>>22811 depends on your client and potentially your configuration options.

>>22803 I remember to this day my comrades, my brothers, fighting shoulder to shoulder behind enemy lines, going through hell and back to bring down the Subeta menace and defend the sacred honor of our Longcat

Hey lainons. This is a question that spurred in the moment. I do have a limited understanding of how viruses can interact with files, so. Say I know for a certain that I have infected files on external hard drive. I can still view the medias just fine, but they have grown in size since the attack. Is there a real threat to just plugging that external hard drive into a clean machine and doing nothing else? I'm guessing that just the act of plugging the external device is of minimal importance. (Unless it is a bad USB) and nothing will happen. But I do believe there is a risk with interacting with the files. Maybe an infection could occur once again if the files have a payload that activates on opening the infected media.

>>22860 If the files are media files then the malware should rely on a vulnerability in a media player or possibly in a file browser, such as in a preview or thumbnail functionality. Simply connecting the drive should not cause any issues provided you prevent any autoplay feature from acting on the drive. In Windows this is done by holding shift while connecting the drive, though I think in the most recent versions, autoplay is disabled by default. To best mitigate the variety of threats that may be present, I imagine it would be best to browse that directory in a lesser known third party file browser that makes minimal use of native Windows thumbnail or preview features or, better yet, in the command line. If you have the means, you might also consider handling the malware in a virtual machine, bearing in mind that it is not entirely uncommon for malware to jump out of virtual machines. Another possibility is to disconnect unrelated hard drives and boot a live CD of a Linux distribution made for digital forensics, which will contain whatever tools you should need to image the drive and start analysis of the malware. For quick Info you can upload the files to hybrid-analysis.com, or virustotal.com and check out the sandbox reports in the behavior tab.

>>22862 how does malware escape vm? are not hypervisors secure enough?

>>22923 a lot of people design malware to detect virtual environments and not execute to prevent analysts from dissecting their malware. malware can escape hypervisors, it's not very easy but it's possible, physical isolation offers further protection.

>>22924 I have been doing some moderate search on this topic and somehow it was fruitless. Do you have any useful links about up to date info on hypervisor security? I mean basic overview of CVEs. Just to understand how common such vulnerabilities are.

>>22939 They're as common as people are willing to seek them out, it's really just going to be state actors exploiting them, the last case i heard of was chinese hackers working for their government escaping vmware machines. There are some hardening guides for KVM and Xen but I don't remember where. Just having good practices will help as well. Don't open files with an internet connection for one. If you want you can harden VM kernels, lower package counts, sandbox applications. These are all just deterrents though, it's not going to stop somebody permanently, they can eventually overcome them, but it will make an attack take longer and cost more.

>>22939 https://www.qubes-os.org/security/xsa/ https://www.qubes-os.org/security/qsb/

>>22941 That doesn't address the fact this is just what is being found by researchers. Vulnerabilities unknown to the masses can be and are exploited by hackers. Just because you don't see something doesn't mean it's not there.

What is my strategy if my threat model is "I don't want to be spied rent free"?

>>22941 I'm sorry for being dumb, but is there the same thing for VirtualBox? Because I use VirtualBox. I google VirtualBox security advisory and only get this https://www.cvedetails.com/vulnerability-list/vendor_id-93/product_id-20406/Oracle-Vm-Virtualbox.html I am freaked out by 23 vulns only this year. This kind of makes we wonder why do I bother at all.

>>22952 Install GNU/Linux (Xubuntu and Linux Mint are easy to use) and disable telemetry in Firefox or Chromium. You should also use ublock origin (and maybe occasionally torbrowser-launcher but don't log in to accounts while on Tor).

>>22955 Debian + Librewolf + some firejail for soykaf already. Considering non systemd distro in future. In mean a strategy that's not this obvious. GNU/Linux itself is not a great security lee, you need to use some brain to protect yourself. I don't have much brain but if anylain does please enlighten me. Say, evil parties have a bunch of no effort tricks for lame people to get them back into the loop. I want to know if there are such tricks, what is their nature and how to avoided. Yes I'm a fit, so I am not even sure if you need to answer.

>>22805 I think you've got most of it. Perhaps use auditd to track security-related events. You can add rules to log when certain files are read, written to, etc.

Hey guys, looking for an answer about a somewhat opsec related question I have been pretty soykaf with my opsec in the past and my email + old plain text pw is in almost every public DB imaginable in the last couple of years I have taken just getting my personal info dumped a little more seriously and have been using 1pw as a password manager creating long complex pw's just so that no one can really take advantage of my old re-used 1,000x password these days Is it worth it to ditch my old E-Mail address? is there any service I can use to segregate my email thats actually worth it so that I have aliases for different types of work be it personal or social? saw firefox recommend firefox relay but it looks kind of soykaf my threat model isnt insane I just dont really want to be low hanging fruit

Sorry for duplicating, but the question really belongs here and there and judging by myself audiences of /sec/ and /tech/ might not tightly overlap and the question is quite interesting in my opinion. https://lainchan.org/%CE%A9/res/73499.html#q74366

Is there a comprehensive list of signed windows kernel drivers?

I hope this is relevant enough. Can someone explain attack surface management in cybersecurity and if its principles can be adapted to general opsec? Like the idea that the more people you have in a group the more chance someone leaks, is that similar?

>>23139 anyone can pay to get their driver signed and if you are poor you can hijack a signed driver to skip paying them. So my guess is there is no list and even if it existed it wouldn't matter because people can hijack paid signatures.

>>22967 OP didnt get an answer so did some research for myself Read through extreme privacy to see if it was really even worth it and the non-tinfoil rec from the book was to use proton with email alias' from a site like simple login proton happened to purchase simple login and I used 1p to manage my passwords and found it worth it to just pay for proton pass as it comes with unlimited aliases, vpn, mail box, password manager and whatever other soykaf they try to value add with ended up not deleting my email and chose to forward my emails from my old email account to an alias to my new proton account it has its own little segregated category in my mail box as recommended from the book after reading around and thinking about when I was messing around on OGU when i was in highschool I find it worth it to try and not have a ton of associated logins to accounts related to me and sort of segregate everything I found the switch to be sort of a pain in the ass for me but did give me time to audit my online footprint, change all my emails & passwords to my accounts and have them hosted in proton pass and delete stuff I no longer used or wanted to just slim down on I know a lot of people will say to use keepassxc but my threat model is just against annoying skids more than anything. I hate that protonpass does not have a desktop app but its fine & the mobile app works well also seemed to be the best price to get a AIO option for what I wanted and replace some things I was already doing the mobile app is easy to use as well just posting if anyone was interested in this topic (not for tinfoils)

What can i do for gain 10$ per day?? Im ready to learn

>>23207 you can beg in a public place. just dress like a really poor dude make ultra friendly and pleading face and say very nice things to everyone.

>>23211 Not bad but what about /sec/ field

When I use unlock veracrypt volumes on my external HDD whilst running tails, I can see the files but none of them are able to be opened. Video files don't play, documents aren't viewable. I created the volume in Linux Mint. Is it likely some kind of compatability issue. I'd like to be able to use tails as standard whilst using an external HDD with encrypted volumes for storage.

>>23236 Solved this, just installed another program, the built in veracrypt unlock thing didn’t work.

>>22024 What does lain think of veilid? I watched the defcon talk on it, but it seemed more like a press release. Dug through much of their material, but it doesn't do a good job of explaining what the protocol does, or why anyone should use it. It's marketing material, and it's... unfocused. Here's the real info. A whitepaper-to-be written with just enough mistakes to believe it hasn't been proofread: https://gitlab.com/veilid/veilid/-/blob/main/doc/guide/guide.md?ref_type=heads It's an anonymity network (I do like that combination of words), billing itself as an anonymous bittorrent and replacement for centralized social media. That's the block store and the key-value store, respectively, both a DHT. It's an interesting idea, though incomplete. There's vague mention of a "Take What You Give model" in the defcon slides to resolve the issue of other people having to store your data, but the whitepaper just kind of ends before getting to that. It can't be like bittorrent, where just anyone can seed the data, as location is arbitrarily assigned via DHT. At least I think that's how that works. There is veilidchat, which I've just pulled up. It seems to still be in the throes of development, because the source code hasn't even been announced as released on their website. Ah, whatever.

>>23253 I tried looking more into it after the defcon talk was released and couldn't find enough info. I do remember noticing some design flaws that weakened anonymity compared to tor and i2p, but i dont remember what they were aside from that they were issues that early tor and i2p suffered from but have since corrected, which lead me to believe that the designers have not done their due diligence in researching anonymity networks.

>>23253 Its cool but not sure how viable it is. Feels like a lot of this being useful rests on their implementation of blockstore, but they admit they haven't thought that part through yet or really done anything other than placeholder code. And that's kinda the more complicated part of the project. But they're still very active. DilDogs a smart guy. Who knows? Maybe it'll get some traction.

Is using a transparent tor proxy in a system for every connection a bad idea?

I help people who identify zoosadists online. One of the things they use to exchange money for videos and send money to producers is monero. If I had one of their monero wallets could I do anything with that information?

Voice Opsec? Completely aside from the technical aspects of making an anonymous phone call via anonymous voip setup or a burner cell. How feasible is it to be identified via "Voice Print" alone? In cases of vishing, would things like an off the shelf voice scrambler work to obscure your voice pattern enough to keep from being recognized? At the same time, too much obfuscation would make the vish sound less credible, so are there hardware devices or pieces of software that would allow you to "tune" the voice to your liking? Have we gotten far enough for AI to generate Text to Speech on the fly? https://theintercept.com/2018/01/19/voice-recognition-technology-nsa/ https://en.wikipedia.org/wiki/Speaker_recognition#Technology

>>22024 What is some basic security measures VPN ? PROXY?

>>23266 that's like asking if you can get any info from a public tripcode you cant

>>23288 dont talk when you think you are being recorded >>23339 depends on the use case. a vpn to access Facebook is going to do anything >>23164 more code, more bugs, bigger attack surface >>22967 keep a personal email and a anonymous email >>22952 use FOSS

>>23266 I think maybe you need to get a job

>>23164 I like to picture graphs when I think about attack surface. It's a general concept so it can be applied to anything you want. A network or organization has interfaces that a potentially malicious actor can access. For example, sending Cheryll from PR an external email, your Business-to-Business API connection that you use to outsource menial tasks, or your API that allows a user to query what files you're serving. Minimizing your attack surface / attack surface management is a buzz word for identifying these processes, trimming the fat, and putting security controls in place for the rest. Congrats, now you know more than the average CISO.

how could I have killswitches on a laptop? Nothing insane (I'll thermite my hard drives myself thank you), just a way to kill power instantly, kill wifi, mic anything like that

>>23348 That's some zoosadist style projection lol

>>23369 My X201 has a external battery that i can take out to kill the computer instantly and a physical wifi killswitch. Alongside this you can use rfkill as a software killswitch in linux.

What are some good opsec practices when buying Monero through cash by mail? What is you guys' process of using this method?

>>23372 Based Thinkchad user

is there an easy way to get the SSO status and role from OAuth2 for a given user from within an application reverse proxy? I'm trying to implement an application gateway that can route users to seperate backends on one domain with nginx and it's not working no matter what I try.

>>23375 ive never had success with it, due to the risk of scams. its better to use a btc atm and go through the various methods to anonymize your purchase, then trade the bitcoin for monero. get cash via an anonymous means, find an atm that requires only a phone number, then use a burner phone for the sms code, purchase the SIM and burner ahead of time using cash. when you approach the building that has the atm, dont bring your car. use public transit if possible, paying in cash. or park a long distance away and walk there. wear a mask and glasses. send the btc to a wallet that you control on hardware you control, NOT on an exchange.

>>23389 why are you making it so complicated? use evilginx2 to phish login sessions and bypass 2fa. MITM session hijacking

I think it's probably a good practice to kill the internet before opening suspicious files, then close them and restart the OS before reconnecting the internet, do you think restarting the entire OS is unnecessary?

>>23401 Some will plant themself into windows startup routine in which case restart would start the trouble. In general if you are afraid use a VM to open.

>>23401 why would you run a suspected malware payload on your actual machine? just make a clone of a vm and run it in there, isolated from the network and then just delete the vm

>>23427 i only use vms, but i still would like to try to reduce the likelihood of them getting infected. i stratify the usage of all of my vms, the ones which download things and the ones which do not.

>>23396 Do you have any specific recommended ATMs? >burner phone for the sms code Also, which prepaid carriers have you had luck with? What kind of information do prepaid phone companies usually want?

>>23441 to make specific recs, i would need to know your area. i am already assuming you are inside of the united states... you are going to need to find the atm units online, and then visit them one by one and see what information it requires of you to make a purchase. usually, they will require only a phone number for purchases below some arbitrary limit, say $1k, $5k, etc... as far as pre-paid carriers, trackphone is fine. they are all the same. just pay with cash. if youre just buying btc anonymously via an atm, dont worry too much about it. just use cash, hide your identity with a surgical mask, and that's all. as a side note, if you actually are going to do something illegal with that phone, (eg. swatting or fraud or something else that hurts people) DO NOT insert the SIM unless you are at least 50 miles away from where you live. i don't condone anything illegal... good luck.

>>23444 Alright, thanks. One final question: Assuming one will be eventually using the crypto for legal soykaf - e.g. VPS subscriptions, VPNs, and soykaf like that, would it be overkill to register the burner on public wifi vs. at home?

>>23447 if you already are going through the effort to obfuscate your efforts and get a burner phone, you might as well take steps to hide when you activate it. you dont want the phone associated with your home ip or an ip address associated with the mobile data on your phone... the bets option would be hacked wifi and then also public wifi if you can cover your tracks, which means randomizing your mac address when you connect to the wifi access point.

Assuming you were on the run (in a different country), and wanted to call your family or friends without your location being traced, what would be the safest way to do it? Since Tor is slow for calls, would Signal (peer-to-peer off) along with a nologs VPN be enough? (traffic would make two hops: through the signal server and then the vpn server). This is assuming your phone+sim are bought anonymously.

>>23499 One of the main rules for a fugitive on the run is NOT TO CALL PEOPLE YOU KNOW. The discussion ends there, you'd be taking a massive risk to make a call, because I doubt you have the knowledge or resources to do it in a safe manner. If you want to do this safely, you need to be willing to take a couple days, even weeks, preparing yourself. But for calls, you can make calls through Tor, I know because I have, and it works. The question comes down to what you use to make the calls, some platforms are soykafty and give you high latency. Mumble could work, if you can anonymously configure your own secure server and communicate with them through it. But don't just connect directly through Tor from your home address, if you are really trying to avoid being captured, as you'll be vulnerable to timing attacks, any voice calls would surely render your presence within the network highly traceable. Absolutely do not use a VPN, assume they're all honeypots since they basically are. I don't even wanna get into all the reasons why, if you look in this thread you'll see some reasons >>23374. You need a trustless solution, and Tor is the only decent one. You need to make arrangements first, figure out what you're gonna use to call them, make a directional antenna, crack a network, use their wifi, if using Mumble then configure the server (on a vps if necessary), and call them. Also be sure to switch your mac address. Just sitting at a McDonalds or out in the parking lot won't do it, that is far too close, if your connection were to somehow be traced to that building.

>>23500 >make calls through TOR I am calling bullshit on that one. VOIP over TOR is not really possible, the amount of packet loss and latency you would get over the TOR network makes this just feasible. You could send a voice message, yes. But a VOIP session over TOR, no way. There is this proof of concept paper for Donar. Did you use that? https://www.usenix.org/system/files/nsdi22-paper-bromberg.pdf

>>23507 No I used mumble, I can't speak to the efficacy of anything else because I've never tried anything else, I've heard of some people trying telegram and even Discord (bad choice) which never worked out well save a few occasions. But mumble worked fine surprisingly, though if you're having a fast-paced back and forth I'm sure there will be problems. He shouldn't even be trying to call anyone anyway, it's a bad idea, he should be content with text based conversation, most people don't even do that (because it's still a bad idea). Just because I used it a couple of times (not many times) without any noticeable issue, doesn't mean he will, then he'll have wasted time. Also I didn't do any bullshit like use a directional antenna for internet either, considering that I doubt he'll have any success.

On Hexchat, any time I lose my internet connection or want to switch IPs on my VPN I lose my nick and it gives me my backup nick once I regain connection. Is there a way to not have it do that? It's annoying to have to re-register my nick every time there's a minor interruption in my connection.

Anyone know where to get bulk whois data other than from iana sources?

>>23509 You're reconnecting before the first session times out (the IRC server pings you at some interval not specifiad in the RFC). Configure commands to run upon connecting to each network: /msg nickserv ghost <nick> <password> /nick <nick> /msg nickserv identify <password> May vary depending on services used; read /msg nickserv help If no services then after you reconnect do /whois <nick> or /ison <nick>, until you find out how long it takes to time out. Configure commands that perform a "sleep" or "wait" then /nick <nick>

>>22625 Not necessarily. But if you get caught while doing something that could put you to court, it'll be easier to prosecute you because you'll have proof on your identity that you are knowledgeable in whatever you are being accused of. But, of course, you'll have less chances of getting fuarrrked in the first place. Double edge. But one edge is more in your favor imo

>>23213 Begging is /sec/ You could also do bug bounties. By the time you finish one, the amount of time you'll have put into it will probably be equivalent of 10$ per day.

>>23513 >Configure commands to run upon connecting to each network Does HexChat let you do that? I assume that would be the "Connect commands" tab in the Networks Edit window. Didn't know about this, should solve my problem. Thanks

>>23525 Yeah, pretty much any IRC client should have something like this. All the ones worth using are in fact scriptable/extensible in various languages. For Hexchat, these include Lua, Python, Perl, and Javascript. So there is pretty much unbounded capability for complex logic; you can find scripts to handle exactly what you're dealing with (and more): https://github.com/Poorchop/Arnavion-scripts/blob/master/autoidentify.py Maybe the simple auto-commands are working fine for you already. But maybe nickserv allows you to ghost yourself even if you are already using the nick you want to use, or something like that. Then scripts like this would come in handy (you will have to edit it a little to use your nicks though).

say i have a secret project that hosts legally compromised people, can i use my apple devices (even if only signal or proton on them) to engage with the project? >or are they all compromised by the mere fact that its apple

not that im going to do anything outright illegal, but i already have tails of insane people, and Debian just turned out to have a backdoor, so my idea of a tails flash is off, whilst setting up whonix and routing it through tor seems energy consumptive >additionally, does anyone know anything about IP/MAC encryption?

>>23776 >>23778 schizo. In reference to the OSI Model. Look up layer 2 and layer 3 tunnels.

Is there any way to get a safe global dark mode (i.e. what Dark Reader gives you on default FF) for the Tor Browser?

>>23780 not schiz, i just organize communities internationally, travel, and do basejumping :) i have quite positively no idea what the fvck you're talking about ok ill look what you're saying is basically route thru vpn the reason i became paranoid with apple is the pegasus jbs i can c that MAC/IP are second lvl tunnel protocols but i still have no idea how to decrypt/ ecnrypt them, unless what was meant is as simple as a vpn which is described in all osi model representations >Layer 2 switches by default do not have built-in security features, making them vulnerable to security threats such as ARP spoofing attacks. (LOIC?) Layer 3 switches have built-in security features, such as access control lists, that can help protect your network from security threats. >Layer 3 IP protects voice and data across the network from encryptor to decryptor at the final destination. Layer 2 Ethernet protects voice and data from link-to-link. That means the data is encrypted, decrypted and then re-encrypted at each link (hop) until it reaches the final destination what i found was DCI afaik lvl 6 (3) supposed to be the encryption one but op says its fetched at 2 regardless and im trying to see why >how does lvl 2 fetching happen trespassing all the other levels of encryption? asking for a friend

Web vs Native Applications I need some recommendations regarding security of web applications compared to native ones given that sandboxing is employed in both cases. To be more specific, let's consider Telegram. So far I have been using the native Telegram Desktop application for Linux. I am running the app using firejail so it has no access to any files unrelated to its operation, including executables and shells installed on the system. I decided to research this topic because a need arose to upgrade Telegram Desktop, which came with its own challenges. I don't have enough disk space on the SSD to build it from source. Using HDD would take eternity. Finally, I don't want to download pre-built binaries. Therefore, I am considering switching to the Telegram web app. I don't have experience in hardening web apps but from the get-go I would create an isolated browser profile in Firefox just for Telegram and run that Firefox instance through firejail. It goes without saying that I must enable JavaScript for it to be operational. The primary potenial threat I'm trying to mitigate is unsolicited access to data outside of the application. Thus far I'm leaning towards the web app.

>>23829 Spidermonkey is a giant complicated performance-critical piece of code that inherently writes & executes code. That being said, beware that many "desktop" apps now are just a standalone web browser because frontend devs can't be bothered to use native UI elements.

>>23785 Might be a Firefox flag option. But doing this could very easily mess up your anonymity since you're changing the browser fingerprint via how it parses content

What are the best options for securing private digital communications? I don't want my messages (or those of the other person[s]) to be readable by staff/anyone interested. Any advice, lains?

>>23850 xmpp with omemo, if you can exchange keys in person then do it. if not just verify them via PMs, it is better than nothing. you still need to learn the practices of your xmpp server host. i actually had a project where i analyzed the entirety of the xmpp network's servers' privacy policies, the vast majority have no privacy policies, and the majority of the ones that do have policies have bad practices, so be weary, dont be that guy that just uses a server without knowing what they do first.

Basics of cybersec? Tools for cybersec? Where should I start to learn cybersec?

>>23856 If you're interested in Web Security, I recommend CS253 from Stanford. Course homepage: https://web.stanford.edu/class/cs253/ Videos: https://yewtu.be/playlist?list=PL1y1iaEtjSYiiSGVlL1cHsXN_kvJOOhu-

>>23850 if you send email, use GnuPG and copy+paste the encrypted text to your webmail. >https://emailselfdefense.fsf.org/en/

>>23859 Nice! Thank you. I was looking for privacy/protection tools as well. (idk if it's cybersec)

>>23870 jeff duntemann - x64 assembly language step by step programming with linux (2023) larry d pyeatt - arm 64 bit assembly language (2020) http://libgen.rs Thank me later.

Can the president access my colonoscopy footage?

how do i download leaks from torrents without getting on a list, especially when they are gov. or police leaks? supposedly TOR is a no go and i don't have a VPN right now.

>>23909 Check if they are available on i2p

>>23910 i'll do, but i highly doubt they are. any other possibilities? how do people normally download leaks?

Can anyone recommend me way to learn how to perform ROP chaining and stack smashing?

>>23915 i found these: https://ropemporium.com/ and https://ctf101.org/binary-exploitation/return-oriented-programming/ But anything else anyone can find or knows about would still be helpful.

>>23915 pwn.college and cryptocat on youtube have lots of fine videos on these topics

Does anyone know a service that would rent out and let one remotely access an android system, like with a VPS/bare-metal server?

>>23937 It's a good idea. I'm interested too. What apps would allow the remoting in? Does VNC work? Do you get to see the screen?

why do some people hate let's encrypt so much, i really dont see how much harm it can cause since it doesn't possess a site's private key. at worst it provides no greater authenticity to a website.

Does anyone have any resources on to pentest software in a whitebox manner where you can read the source code?

Hello, new to this forum. Anyways, I'll get straight to the point. I'm creating a lab, but my computer isn't very powerful, so I need a linux distro I can experiment on (like infect with malware and stuff). I got what I need like a virtualbox and kali linux (perhaps not necessary), it's just I need a good lightweight linux distro for my target machine. Got any ideas?

>>23951 Ubuntu, because that's the most common distro if you ever want to apply your findings in the wild. The server version is relatively lightweight.

A friend want to toy with a pi board and use it as a firewall between his router and machines. I looked up solutions online and heard of "IPfire". What's lain's thoughts on it? Are there other OSes or FOSS solutions that we should look into?

how do i prevent fingerprinting javascript fonts and the webgl rendering tests always end up making me unique or near unique, i've seen people on here avoid being unique, but honestly i have no idea how to do that

>>23972 you disable javascript. webgl depends upon javascript. javascript is what makes web browser fingerprinting a thing, without it it cannot be fine grained.

>>23973 Many sites rely on JavaScript to work though.

>>23976 welcome to current internet. everything is designed to violate your privacy and anonymity. a lot of sacrifices have to be made to preserve it.

> please read the whole post before you start answering the question is, how secure is firefox overall? - please note that security is the main question here, privacy being a subcategory of security. the ability to use google or javascript is not a security issue. the inability to control or limit their use or reach might be. the potential existence of malicious javscript code that can hop skip jump out of sandboxing and fuarrrk me over is a security issue - i'm interested in educated opinions of programmers, pentesters, security auditors, or anyone who has tried to do malicious soykaf exploiting firefox. - if we'd compare firefox to chrome in terms of architecture, policy, and implementation of such, are we aware of anything that works in chrome secure and as expected, while is unfixed / a broken mess in firefox still? - firefox has a tiny market share, but it's niche and used by security people apparently, but it's a tiny market share nevertheless. how do you feel these two factors impact its security? there's few eyes to look at it, but a higher percentage of them are trained. - i'm NOT interested in your favorite firefox fork, helpful recommendation, cool extension combo, gnu liberty, the eff, and any sort of hype material at all. they all fail to directly tell me anything about firefox security. - i'm NOT interested in what you personally hate, unless you hate it because it's broken/dysfunctional. > inb4 search yourself i haven't bothered to browse through the entire site to see if this has an existing thread, also ctrl+f in catalog does have 2 hits but they don't get highlighted so it's probably not the topic of those threads. yes, i googled, my brain got fried by people offering their clueless "my brother said it's good because a website says its a privacy browser" type of content, so i'm not gonna google anymore.

>>23951 If you want something more lightweight than Ubuntu, you can install Debian with some other desktop environment than Gnome 3 or KDE. I suggest Xfce4 or Mate. >>23972 Use Tor Browser with safest security config option. >>24001 All modern web browsers (= Firefox and Chromium forks) have a HUGE attack surface. You should use NoScript or uBlock Origin and block JavaScript and allow it just for the sites that require it. I have heard that Chromium has better sandboxing than Firefox but otherwise they are both very similar.

>>24001 https://madaidans-insecurities.github.io/firefox-chromium.html That's the best I've ever found, hoping some knowledgeable folks will drop in some more useful blogs instead of soykafting their regular useless "browser have le huge attack surface".

>>24001 Im no expert but i have common sense. Security and privacy are not unrelated. Any data that is sensitive has to be private or any malicious actor can potentially get it from the company that holds it. So there is some overlap. Chrome would in theory be more often a target for cybercriminals because it is the default browser on Android phones so they might look for exploits on it more, but on flip side it being under a major company like Google they want to try to preserve what little image they have and use better paid programmers than Mozilla to find and fix bugs. With every few releases both Chrome and Firefox have major security holes and they change things around now and then so neither is ideal really so you can only place blind faith in who has the better programmers and who cares more about security. One easy thing i rarely ever see anyone mention is set the download location to be requested every time which most browsers you can do. This prevents unrequested downloads in most cases. Maybe unless someone objects with a good reason, just use an anti exploit program with whatever browser and a key stroke encryptor just in case you ever have a keylogger installed it wont be able to capture anything usable. I dont know if this still applies but Chrome was blocking anti exploit programs so Chrome is the inferior choice. https://www.bleepingcomputer.com/news/google/bitdefender-disables-anti-exploit-monitoring-in-chrome-after-google-policy-change/

the breachstory is never-ending. why does BreachForums pose such a threat to the government?

>>24001 >secure overall This is such a bullshit concept. Secure overall from what? Secure from someone reading your password over your shoulder? No. Secure from a kernel or OS layer exploit? No. When you start thinking in terms of "m0aR seCuRe" you're thinking about security incorrectly. First develop a threat model. What are you trying to defend against.

>>24001 per-task whonix or qubes-whonix instances should also stop gpu fingerprinting. disable js as needed

>>24060 >>24086 reading comprehension: failed

hello, currently working in a small cybersecurity team at a MSP. looking to broaden my knowledge on CS in general as well specifically incident response, mitigation, things like that. any resources/books anyone can recommend?

is hacking in the shadier parts of the government even a thing when they can just run their script that instantly connects to anything

I'm kinda high so you'll have to excuse me if this is a dumb question. I've heard people say that buying Bitcoin with cash first then buying Monero is somehow better than buying Monero with cash directly, why is that? Are these people wrong? Am I reading things incorrectly?

>>24159 >people say that buying Bitcoin with cash first then buying Monero is somehow better than buying Monero with cash directly That makes zero (0) sense

>>24157 the amount of people knowing about the whole hierarchy of the deep state is dramatically low - estimated at 7 people. if you need supercentralization - look for supraphysicality

Do lains play ctfs on weekends?

Have malware devs stopped seeking vulnerabilities in BIOS and only go after UEFI ? So is BIOS more secure because smaller attack surface even though no safeboot function? It just seems like there keeps being more vulnerabilities in UEFI turning up every so often. Is there any better alternatives for single user desktop use?

>>24266 Lainons plays ctfs everyday

>>24261 >estimated at 7 people Estimated by who?

>>24306 It's like mainboard manufacturers are having their frutiger aero phase where they're still so excited that they now can do more than being confined to simple rectangles, plain colors and basic fonts. But as an end user when I dive into the bios settings I rather want the dev budget to go into better structured and more granular settings. And sure, this sounds like an argument about aesthetics only but anything with a webshitter GUI immediately makes me assume they're building on some wobbly tech stack with loads of attack vectors so the outsource and intern programmers don't get too confused by the procedural code to produce that old school console. But hey wow, look! We can now render a background which clashes with the menu text. Just ignore that it's yet another identifiable block of data that is known to be loaded into memory and possibly allows to be fuarrrked around with. The assumption that high complexity = high vulnerability is often correct.

Please guys help me by telling me how can i overcome cloudflare check to watch Odyssey with onion? I don't really want to use the site itself, just download linked videos. A scraper running somewhere non-onion which i can reach with onion would be perfect for example. Or any other idea is appreciated. Thank you very much.

>>24318 Use a program called yt-dlp to download videos from odysee without having to open their javascript cloudflare cancer website. It works through Tor as well.

>>24325 thank you for the info, didn't know it's that easy. many thanks.

Do you think it's possible to DDoS a Zoom conference?

>>24315 So is that a yes that the same kind of malware that infects UEFI doesnt effect a legacy BIOS just from being a minority now and less attack surface or can it still be vulnerable just the same just not in as many ways? I heard there even used to be physical switches that prevented flashing the BIOS. Is that true? If so I dont understand why that switch went away and UEFI appeared with safe boot. Safe boot sure would not have made things easier for the consumer than flipping a dip switch from all the times it fuarrrks up.

if I'm connecting to a personal hotspot with my laptop, how do I avoid 4G phishing attacks or others of that nature ?

>>24266 mostly some minor CTFs as a single player, but yeah

>>24334 I think they fixed that with registrations and 2 part authentication etc. iirc some actually require you to use a verified zoom account from an installed application to even interact with the specific conference. You would essentially be DDoSing Zoom itself, not the chat room. They had to do this because people would join random zoom classrooms and troll the class with pron, or otherwise start playing memes and being disruptive.

>>24343 I would think you could still clog up the I/O of the waiting room though, right?

>>24340 One way to avoid trouble using various hotspots is to always use Tor so that your traffic is encrypted all the way from your computer to to Tor exit node, or onion address. Then, even if you're going through a malicious hotspot, they're out of luck.

I'm moving countries pretty soon (to Hong Kong). What's the best way to move hard drives across borders? My best guess is imaging the drives, putting an encrypted copy on cloud storage, wiping the drives, then downloading the image once I'm there. Does that sound about right?

>>24346 I would hesitate to entrust them fully to 'the cloud' if there's anything of value upon them. Could you not entrust them to a friend where you are, and either download from said friend directly once you arrive in china, or from a cloud uploaded intermediary ? Once you are done, you can wipe the backups and give the old drives to the friend as payment.

>>24347 I have a server at my parent's house that I could use, my concern is that it'll take forever to download everything if it's being sent over a residential connection. My thinking is that using something like Google drive would be much faster. Obviously it's less than ideal to have them handle disk images, but my intuition is that an encrypted image of an encrypted drive is probably quite difficult to decrypt.

>>24348 Downloading from your home server won't be any slower than uploading to google. You're right that they probably couldn't decrypt the images. If you want to be extra careful, you can strip the headers and keep them with you in your laptop/phone/camera/whatever storage you might have with you, or on your home server, or both. I would be more worried about the cloud storage arbitrarily deleting your archive, especially if it's a free one.

Where can I get some VPS, paid for with monero and no identity attached? I know of njal.la and it's quite nice but pretty expensive overall.

Does it make sense to use security screws on things like electronics? Just something really obscure to reduce chance someone could open it without having to cut into the screw to use a flathead on it where entry would be obvious.

Recently, I discovered an email from a month ago in the spam box of my Gmail account, from a random bastard saying "durr you gugle account has been hacked, give us lots of bitcoin or we will send videos of u masturbatin to ur mama!!!", or something like that. OBVIOUSLY, this is nothing but a scam, they even quoted my supposed password to scare me, but they got it wrong (lol). I won't go into too much detail about what happened, after all it's not important, and even if they really did hack me I wasn't using that old account for anything anymore, so whatever... I just replied that email in question with a long series of vulgar (but well-deserved) insults, and deleted it. What left me in doubt is that in the message, they claimed to have installed spyware on my computer that had been watching me all this time. But remember that this email was from a month ago, in the meantime, I had formatted my computer at least twice, due to some problems with my Linux. Now, IN A HYPOTHETICAL SCENARIO, in which I really was hacked, would it be possible for the spyware to still be on my computer even after I formatted my computer? I'm not a computer expert or anything, so it's normal for me to have this kind of doubt. If the answer is no, that would be very hilarious (at least for me), because this way I solved the problem without even realizing it. But if the answer is yes, what could I do to remove the spyware? Again, this is just a hypothesis, I don't believe I've actually been hacked, there's nothing to worry about, I guess...

>>24365 any decently skilled hacker can survive a formatted PC by a newbie

>>24355 >monero They're still going to see what IP you're connecting from, and if that's you're home IP...

>>24367 Obviously I do everything over tor lmao

>>24355 Try one of the VPS listed on kycnot clearnet: https://kycnot.me/?t=&q=vps onion: http://kycnotmezdiftahfmc34pqbpicxlnx3jbf5p7jypge7gdvduu7i6qjqd.onion/?t=&q=vps

>>24378 I don't want to be schizo level paranoid, but what are the chances that some of these are fed honeypots?

>>24381 there's no way for you to know for sure, best you can do is research the vpses individually for signs that they may be a honeypot e.g arrests associated with usage of a vps. if you're concerned then proxy into the vps through tor. incognet and privex are good providers but i know nothing of any other vpses.

Hello, lainons. I plan on using VPN + proxy-chains + VPN to hide my real IP address from websites. Running VPN + (proxy-chains with Firefox) should be relatively easy to do. My question is how can I arrange order of execution for these tools? I don't want to run VPN + VPN + proxy-chains for example. Also what should I do in order to run two same VPNs i.e two Proton VPN instances. I use virt-manager to run VMs, so I assume it can be done with VPN + launching VM via proxy-chains + VPN inside VM, but I think I have to launch service for virtualization via proxy-chains and not the virt-manager application. How can this be done?

>>24407 not what you want, but mullvad supports connections over tor. they have a tutorial. if proton allows connections from tor ips, similar openvpn/tor setup might work

>>24407 Depends. If you use openvpn it's easy. net_cls cgroup (to set packet mark) + separate routing table for one instance, use nftables with routing chain and don't forget to masquerade in postrouting; also use `ip rule` to send marked traffic in the relevsnt routing table. Launch proxy software in the cgroup and it's traffic will go through that openvpn instance. For default routing table use second openvpn instance with --socks-proxy flag. If wireguard it doesn't support proxies. Wireguard is designed to be as stupid and useless as possible by default, so it doesn't implement anything except encryption. It's simle, vut it's also useless. You'll have to find software that proxies all traffic. There's a tproxy mechanism in netfilter, maybe it's relevant. Idea's the same, but you'll have to manually (no wg-quick) setup one wireguard interface in a separate routing table, gonna be PITA, afaik you need two routes one default and another explicitly pointing out-of-tunnel traffic to the gateway otherwise for some reason packets don't return. Strange because no such issue with openvpn. The launch proxy in that table and then you need somehow send all traffic from default routing table to that proxy and just manually (no wg-quick) add wireguard interface in the default table. I did something like that with openvpn so I have a lot of scripts I don't remember what they do or how but I could slap something like that. As for wireguard that's gonna be lots of work and lots of scripts and fuarrrkton of debugging. But you figure it out. All info is in google I figured it out on my own took a year or gradual penetration until I started to at least suspect how it all works though. Just take it easy you're in no hurry

Is ProtonVPN a trusted VPN provider? I've heard mixed reviews with some saying it's the only free and trusted VPN provider out there.

>>24453 >Is ProtonVPN a trusted VPN provider? What do you mean by "trusted"? I used free ProtonVPN and free Riseup VPN for years without any trouble, but I wasn't doing anything heinous. Basically just keeping my IP address private from corporate surveillance and script kiddies. If you want more than that, I'd recommend Mullvad. But yeah, ProtonVPN is fine.

On Ubuntu, I've noticed that most files I've downloaded off of the internet have execute permissions, particularly video files. I revoked them with chmod -x and the files could still be played, meaning that execute permissions were not necessary to have in the first place. Why is this seemingly the default, or why is this allowed? I've been going through large directories of media I've had stored and running find . -type f -print0 | xargs -0 chmod -x just to be safe. Is this good practice in general? I see no reason why execute permissions would be needed on any files that aren't binarys or scripts. Could this be used as a mitigating method to stop hackers from hiding infostealers and/or reverse shells in arbitrary files?

>>24464 windows artifacts, all files from ntfs are seen as executables by linux maybe because on windows all files are executables idk check ntfs docs

>>24464 >>24466 It's just the mask of your home directory. Newly created files obtain permissions from said mask. Systemd/lindows soykafdistros like ubantu usually does this, set your default to executable. Read man umask, and you will know how to set your home directory and its subdirectories to the mask you like and therefore make newly created files non-executable.

>>24467 kys nigger there's literally no such umask value that would make regular files to be created as executable. rtfm glitterboy

btw i only tested it in shell, but iirc unless you use some unusual (aka dumbass) mode with open() regular files are not created as executables. maybe coreutils double check (which i doubt) so if you're anxious slap some c code together to figure it out. umaks(wtf); open(...0666) open(...0777) sth like this i guess, read the manual

>>24472 after sobering up a bit alot actually without acls file permissions are (mode & ~umask) so bits from umask are just deleted so if your software doesn't put executable bit in the mode in the first place there's no fuarrrking way it can appear there later. as for acl i've never seen normal person software doing anything funny with it.

Hey guys, best base extensions for Firefox? beginner in opsec. know Mullvad. mb something osint-adjacent, too

>>24491 Use as little extensions as possible. uBlock Origin and Skip Redirects are the only 2 I can say are 100% safe. A lot of extensions at best are just changing user settings you can change yourself anyway, and at worst are stealing your info. Check out user.js settings and presets. A lot of people like Arkenfox, and it's one I've personally used: https://github.com/arkenfox/user.js At least read the Wiki because it's not that long and it's very informative. Some people think Arkenfox is too restrictive (but it is customizable), so they elect to use alternatives such as Betterfox: https://github.com/yokoffing/Betterfox

What the fuarrrk are you supposed to do about photos of you uploaded to Google cloud accounts and on Facebook you didnt consent to being done and appearing on Amazon Ring doorbell cams? Is only option left is get plastic surgery?

>>24475 I've recently installed Debian after moving from Ubuntu (as I mentioned I was using in my original post), and I downloaded some more files off the web. This time, I checked the directory contents with ls -l and the files do NOT have execute permissions. What in the fuarrrk did I do before to make so many files executable, I wonder? There's no way Ubuntu does that by default. Maybe I did something stupid like run chmod -R 777 on the entire drive, I don't know

>>24506 You probably temporarily stored the files on a Windows-type filesystem formatted to NTFS or something. Maybe you downloaded the files to a usbstick that had been formatted to NTFS? If you then copied them over to a Linux filesystem, they would all be executable.

>>24508 Yes, the drive was originally a Windows boot drive, actually, but at some point I reformatted it to ext4 LUKS and copied over the files I wanted. I forgot how I did that, so I must have moved the files off the drive before reformatting, obviously >>24503 My recommendation would be to book an appointment with a psychiatrist and see if you have psychosis. What in the god damn fuarrrk are you talking about?

>>24509 >What in the god damn fuarrrk are you talking about? A solution to the problem of personal photos and candid audio winding up in the hands of big corporations like Google and Facebook via someone other than yourself responsible, plus them being used by such corporations to train their fake AI (actually ML) which can potentially whether intentionally or incidentally be used to generative images and videos and fake voices of a likeness to myself by any entity or otherwise the images just winding up more public somehow. I just want privacy and to not be a part of helping these businesses make money off my own image and likewise dont like the risks of the possibility of being defamed.

>>24519 All you had to say was "How can I get my face off of big tech's data servers?" In your original post you mentioned your likeness being used on Amazon door cams, prompting the tone of my response. Still, take your meds. The answer is you can't. What do you expect any of us to say other than break into the Google headquarters Mission: Impossible-style and delete your photos off of their servers? Don't use social media, and maybe over time your likeness will change enough that it can no longer be used to certifiably identify you. We're all in the same boat here

>>22808 https://ask.wireshark.org/question/32145/unable-to-view-my-smartphone-packets-on-my-wifi/

>>24520 You misunderstood in ways I cant comprehend. Being on a camera means being in it's field of view not physically on the camera ffs....

Hello Lain-kuns I know nothing about programming/security. Here's the situation I'm into: I have tried to post for the first time on Wizchan the other day but I was directed to derezzed page. Following were the reasons "Heavy abuse coming from this range" "Rule 4 ban evasion". I have discovered Wizchan last month and the derezzed post is from few months ago. This isn't a memory-hole because that derezzed post's prose is different from mine. Does this means someone is posting from my machine? I use to download torrents on my Mac. From last 2 years my machine has been working really slow(I'm 50/50 that it's a hardware problem) and from many years I'm paranoid that my machine is hacked. I have no illegal stuff. But the feeling of being hacked is creepy and disturbing. Now I'm anxious to connect it with WiFi due to this fear(I have been paranoid regarding my machine from some years because some cunt on 4chan had threaten me by stalking(by telling me in replies "you're opening this and that page f@g kek") my online activity some years ago. What should I do? How can I check my Mac and make it secure? I'm a NEET with a history of mental illness and this is making me more paranoid and anxious. Please help. Thank you.

Is it really more dangerous to use Javascript on Tor as long as you only connect to legit sites?

>>24565 The wizchan admin is completely incompetent retard asshole, thats the reason. I had the same thing where I could see the whole post history of someone else and piece together all sorts of things they wrote about themselves. Bad website, dont use it

>>24362 I think if someone out to get you has your electronics and enough alone time with them to do anything you've already pretty much lost. Security screws will be worse for tamper monitoring than the old special sticker/brittle glue/nail polish/whatever over the openable bits trick, which will at least show you if soykaf was opened up. >>24366 regrettably this does kill many each year who are not skilled hackers. Be careful whos disks you format! >>24503 get some bright IR LEDs and always wear them around your face. Consider getting those anti camera glasses or something like them, if you're a glasses guy. Encourage everyone you can to do the same.

>>24567 Extending the newb Tor questions: can I get something like Dark Reader going on all sites? :(

>>24565 It's probably a range ban. Meaning someone with a similar IP as current one you use was derezzed. Also you can wind up with an IP that was derezzed just by chance if you dont have a static IP address.

>>24503 >>24569 If you go the LED route, test or research it more before actually using it. I remember seeing a test that contradicted these claims. Something about the halo not being large enough, not bright enough Also consider wigs, hats, makeup, glasses, face masks, facial hair, hoods, fake ears, colored contact lenses, frequently changing clothes/gaits. Lots of options

>>22024 I have a ThinkPad T430, for the best amount of security, do I install libreboot or coreboot? I want to disable the Intel ME soykaf. I request a more informed lainanons help.

>>24587 libreboot. it won't completely eliminate me firmware, but it will neuter it. see https://libreboot.org/faq.html#intelme

Is there any method to bypass Biometric SIM subhumanshit?

>>24567 >Is it really more dangerous to use Javascript on Tor as long as you only connect to legit sites? I thought so for years and never enabled javascript on Tor browser. The one time I was chatting with Arma (Dingledine) over on OFTC and I mentioned it. He assured me that javascript can't be used to de-anonymize you on Tor browser. Surprised the hell out of me. And he's the guy who wrote Tor, so I guess he knows what he's talking about. With regular browsers including normal Firefox, if you have javascript enabled all you have to do is click the wrong link and you're immediatly fuarrrked.

>>24599 It absolutely can deanonymize you. Browser fingerprinting. Timing attack via captchas. WebRTC leak through your browser. Malicious javascript exploiting a vulnerability in Tor Browser that plants malware on your system. The last two are less likely, they would tend to be targeted attacks unlikely to occur for somebody who uses Big Tech websites via Tor Browser. They're still possibilities though.

>>24600 Let's do an experiment. You set up a honeypot any way you want and post a link to it. I'lll browse to it with Tor Browser and enable javascript for the domain. You de-anonymize me and report back here with your findings.

>>24603 This is a fallacious counter-argument. You are trying to make it seem as though it is unlikely for people as a whole to be deanonymized when using TBB with javascript enabled, because an individual attacker will have difficulty in deanonymizing a target through the target's usage of javascript. In order for my assertions, which are based upon what is logically possible, to be deemed correct by you, I have to spend money hosting a server or servers, and possibly even months of my time writing malware and hacking companies. >Browser fingerprinting I'm not Big Tech, nor am I the United States Government. I don't control the internet's websites, nor do I have the money to access all of their data, nor do I have a vast network of devices running operating systems designed to spy on their users and everyone and everything in proximity to the users that could feed me that information. I can't as an individual deanonymize someone in the wild using their browser fingerprint alone unless previously they leaked information about theirself to me that was tied to their browser's fingerprint. >Timing attack I'm not Big Tech, nor am I the United States Government. I don't control the internet's infrastructure, nor do I have a vast network of devices running operating systems designed to spy on their users and everyone and everything in proximity to the users. I can't pull a timing attack against a target unless I control the internet infrastructure they're using. For a Tor user in which case I need to control/access two items from these lists (not a comprehensive list): 1. Their (home, or wherever they're connecting from) network 2. Their ISP 3. Their entry node 1. Their exit node 2. The website they're using 3. The website's reverse proxy (if applicable) Their network would be the best beginning point to compromise. The exit node would probably be the best end point to compromise. I won't be able to compromise their network without first knowing who they are, so this is impractical. If I'm running the website they're using then it's compromised, if I don't, my ability to compromise the website depends on what site they're using. Compromising a reverse proxy like Cloudflare for a targeted attack is unrealistic. Running the Tor nodes they're using is highly improbable. Getting information from their ISP is improbable. >WebRTC leak This attack would be achievable for an individual person running a website. >Exploiting a vulnerability in Tor Browser This would probably take months of work for a single person to accomplish. The United States Government and Big Tech can do all of these things, and they have done them already. Here is one case example: Buster Hernandez. The FBI tried to leak Hernandez's IP address once with malware crafted for Tor Browser, but failed, because he was using Tails and the torifying firewall protected him. If he weren't using Tails, Whonix, or had a similar configuration (separate Tor router/torifying firewall) he'd have been deanonymized then are there. Ultimately, a private hacking firm Rook Security was hired by Facebook to deanonymize him, and they crafted malware for Tails that exploited a vulnerability in gnome media player to gain privilege over his system and make a clearnet connection to a control server. The attack cost a couple hundred thousand dollars, but was successful. Targeted attacks will always be more expensive than passive surveillance, but they aren't necessary. Timing attacks and browser fingerprinting happen 24/7 to people on the internet. It's a large aspect of how people's online activities are tracked by the government and corporations. Your response implies that you do not care about corporate+government mass surveillance. If you're not concerned with corporate+government mass surveillance, that's fine. In that case you have little need for Tor Browser, because an individual person like me will have just as much difficulty in deanonymizing you as they would had you been using Tor. Without Tor, I could get your IP address. Your IP address does me little good if I can't get your ISP to tell me who you are, and it's not often that people socially engineer ISPs to give up customer information. So maybe I could hack them. Still, an unlikely scenario, what point would there be to that anyway? On average, the threat posed by governments and corporations spying on people vastly outweighs whatever risk there may be of an individual person deanonymizing someone. That individual person is only worse if they have the potential to hurt or harm someone, which rarely occurs. Use of Tor tends to imply a concern with corporate+government mass surveillance.

What do you know about embedding remote access trojans in PDF files? Can DarkComet do it? And, DarkComet is an outdated service so can a possible trojan embedded in a pdf file by darkcomet be detected by usual windows protection? I heard that they updated darkcomet last in 2012.

Removing a battery from a cell phone should prevent tracking by wireless mesh-nets and cell phone towers, right? Surely there is not enough energy in the motherboard to facilitate signal emissions?

>>24611 you'd need a 0day in the pdf viewer (which you aren't getting) or social engineering the person with a link in the pdf

>>24614 Turning the phone off is enough, assuming your phone hasn't been compromised to act like it's turned off when it really isn't. Removing the battery is better if the phone has a removable battery. Even better, put the phone in a light-tight copper container (don't let the phone touch the copper).

>>24616 >>24611 no reason to take the risk when you can just put it in a faraday bag

>>24603 What about EverCookies? >https://en.wikipedia.org/wiki/Evercookie See it in action: https://github.com/samyk/evercookie

Just a day or two ago, I saw a bug report on Bugzilla talking about a Javascript exploit that would allow access to LAN/local devices. I can't seem to find this report now. It was a pretty old bug, iirc it was opened 17 years ago, and it is still open now. Does anybody know what I'm talking about/have a link to any bug report similar to what I'm describing?

>>24620 https://bugzilla.mozilla.org/show_bug.cgi?id=354493

>>24623 Thank you! (Body was too short)

Where can I buy residential IP socks proxies, without JS, from TOR and for XMR? inb4 shodan routers, sure if you send me what to look for but i don't have time for that

>>24599 >>24600 >>24604 Could an exit node serve you malicious Javascript (or some other attack) even if you connect using TLS? TLS encrypts your traffic but does it necessarily confirm who you're communicating with?

>>24642 That's why certificate authorities exist. You can also try to contact the site administrator through a secure line to confirm the validity of their certs. It is possible but it's an attack that can be easily prevented since it almost always occurs with your consent.

Is there any good resources on fuzzy testing?

>>24599 This is an oversimplification. There's two primary things to consider with javascript: fingerprinting and exploits. Tor Browser has a lot changes to resist javascript fingerprinting with the goal of every browser instance having the same fingerprint. However, new browsee fingerprinting techniques are discovered frequently, so it's best to assume a motivated adversary can still somewhat fingerprint you. (see https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/?label_name%5B%5D=Fingerprinting) Then there are browser exploits. Of course javascript isn't required for all browser exploits, but it is a huge attack vector and disabling it protects against a lot of exploits. If your browser is up-to-date you're safe from most exploits, but there are always zero days. >>24642 The short answer is "mostly no." There are edge cases, like if the site you're connecting to has an insecure tls configuration, or the exit node operator has the site's keys, or if the site embeds content from non-tls endpoints.

Has anyone thought about abusing some language models to harvest unique passwords? I precise unique because everyone knows about big txt dumps like rockyou so any model could just pull up a few passwords from any public dump. I also doubt the practicality of this method over brute forcing with a dictionary. It is still an amusing idea anyway. I don't think my thought warrants a thread and neither do i see a thread for it in the catalogue

>>24655 >insecure tls configuration What kind of situations would this be? Something the user can notice? >if the site embeds content from non-tls endpoints That content would be blocked by HTTPS-Only Mode, right?

Tips for making a social media (e.g. Instagram) account for work/school? Ideas so far: -vpn/proxy when creating/using account -different user agent -cock.li email -use frontend site instead (sadly there are none for ig)

>>24712 instagram in particular seemed almost impossible to make an account for. Facebook also got to the point where it wanted to verify my face; i sent a picture of a random person but somehow they knew it wasnt me, perhaps because that person was in the database. good luck

>>24712 I would go about it in an "almost normal person" way. > Use a specific browser profile, so that they can't track your other activities. > Use your school/work e-mail. > Only connect from your home network. Install a vpn on your home network if you want to access your account on the move. > Clear your cookies between session. If they want to track you, they had better put in the work themselves. > For face verification (do datashitter really?) just use your own face if other people will publish your pictures anyway. If not, use stable-diffusion or whatever to generate a face. If you're using the account for work, you'll probably leave enough traces to link your account to your irl self anyway, so I don't see the point in being more secretive than that.

Hi. I'm looking for guides on general (defensive) security for linux computers and opsec guides. Kind of like what the darknet bible was when it was maintained. I have been around this field for a while, but am always looking for ways to improve my setup.

>>24724 An Introduction to Computer Security: the NIST Handbook https://www.nist.gov/publications/introduction-computer-security-nist-handbook Beyond Fear Thinking Sensibly About Security in an Uncertain World by Bruce Schneier https://www.schneier.com/books/beyond-fear/ Prism Break https://prism-break.org/en/

Does reCAPTCHA when submitted know the exact page you are on and it's contents that it appears in or only knows the website uses reCAPTCHA or what? What kind of info does it gather?

>>24754 it does as there is a token associated with the page.

>>24759 the token could be associated with the page in theory but they are self aware what page it was loaded to? I dont know enough about web development to get how it works unfortunately.

Hey guys, booting up a new computer for cybersec/ research purposes specifically, which OS should I boot it up with? Wanted Whonix but checking out that it’s based on Tor I just don’t trust it

>>24770 It depends on the research. For example, I'm working on a MS in cybsec right now and I just run Gentoo. It's mostly writing papers, a few programs, and participating in CTFs.

>>24771 Deeper research. Just also dont want to carry a Whonix flash around I’ll fuarrrking lose it

>>24770 >Wanted Whonix but checking out that it’s based on Tor I just don’t trust it It doesn't matter what OS you use... you're going to flunk the course because you're retarded.

>>24773 Let's not jump to absurd conclusions, Lainon. We've got a fair amount of capable people who just need a push in the right direction. The issue is that this lad appears to be hesitant to overshare. >>24772 You'll need to share more information if you want help. You claim to not trust tor, that's fine, I'm not interested in why or anything. But you can't be helped if you don't answer what it's for. "Research" is very vague, the mention of "cybersecurity" is vague, too. These are MASSIVE subject matters, by themselves. You mention Whonix, for some reason. That doesn't help me figure out what you're after, because Whonix is for privacy by hiding traffic. That's not a domain researchers work with, except when their research pertains to using tor.

>>24774 i want the highest amount of privacy newly rooted into a fresh computer thats specifically meant for private exploration, wanted to boot up w linux since its notably secure right, arch fuarrrks with your head because its too complicated for me (sorry) , wanted to do mint since its good in utility to security ratio but dont like the interface ui, - thinking something like edubuntu

>>24775 (the question is here because I am literally not well versed in Linux distros esp if it’s not for VM)

>>24775 edubuntu is gnome, right? Use debian, and choose the DE you want when installing. Does mint do anything particular for security?

>>24777 nope, people just say its the easiest out of them all for use

Linux distributions listed in descending order of privacy and security (IMO): Qubes: Much too complicated for a Linux beginner and picky about hardware, Whonix: Sort of complicated for a beginner, Tails: Pretty easy to use from a DVD or usbstick, but not for installation, OpenBSD: not Linux, might seem complicated at first for a Linux user, Debian: Good all-around distro that's not too hard to use, has a lot of support, has frequent security updates, is ok for security/privacy, and can be made more-so as you learn, Mint: No real emphasis on security/privacy, but good for a beginner learning Linux. What I would do in your case is start with Mint and use it to learn my way around Linux. You can install whatever desktop you like. A beginner might like Cinnamon, XFCE, or Mate desktops. While using Mint and learning Linux, I would boot Tails from external media when I feel the need for more security/privacy. After learning my way around Linux, I would switch to Debian, and learn some ways to make it as secure and private as I want. You could stop distro-hopping there, or move on to Whonix if you want something designed for morer privacy and security. (BTW, Tor is not a bad thing at all.) In the meantime, you might want to pick up a copy of "The Linux Command Line" by Shotts, or similar. I hope you have fun and enjoy learning Linux.

>>24778 Mint user here, I strongly vouch for its user friendliness. You should still pick up the linux bible or something to not get stuck.

Assuming a site isnt malicious what would usually happen if someone accidentally when logging in puts in the credentials for an account on a different site like the username and password for elsewhere. Do these failed logins get stored usually or just discarded?

What's the best way to find open http or socks proxies?

>>24785 If I did that, and I felt the site wasn't malicious, I would suspect that the username/password is stored in some log somewhere, but that no one is probably going to make use of it or even see it. But I would make a mental note to be more careful in the future.

>>24788 If a site is saving plaintext passwords in a log I would call it malicious

>>24785 it depends on the site. probably nothing will come of it, but change the password on the other site to be safe. >>24789 it's as likely a result of incompetence as maliciousness. a lot of web devs aren't aware of the extent of logging the services they rely on do. maybe their code doesn't log the passwords but their webserver, reverse proxy, load balancer, hosting provider, firewall, and so on, may log the request somewhere.

>>24788 >>24790 Do you think if there is logs of failed logins on account names / emails that dont exist there they would probably not keep them long? I imagine if they kept a lot of every entered username / email / password that dont exist it would fill up a fair amount of space in relatively short time. I would assume only an actual account with a coincidentally same name might be logged if they have security measures.

>>24787 https://funoverip.net/2010/11/socks-proxy-servers-scanning-with-nmap/

>>24791 Yeah they would get rotated off quickly. Some retention is necessary to perform rate-limiting. This is generally not going to be valuable information. You have to ask what is the value proposition. What are they going to do, log in and talk to your friends? Read your email? Take your lunch money? Have you ever actually gone through someone’s soykaf? It quickly becomes boring and pointless unless you’re looking for something specific. If there is something in need of special protection then by all means protect it. Because people will grab low hanging fruit. But otherwise they have sh​​it to do.

Any good reading on the Android security model?

How easy it is for someone to obtain the IP address on 4chan or anywhere else? I live in an Islamic totalitarian state with arbitrary laws and fundamentalist population so I don't want to get stoned for my atheism. How easy it is for someone to take my IP address and report it to authorities? And what I can do protect myself(I have know nothing about programming)? Thanks Lain!

>>24829 Very easy for the person who owns the server, it is standard to log the IP of viewers and posters to any website. This is commonly protected against by using Tor or a VPN. Keep in mind there are more ways to track you than IP (see https://coveryourtracks.eff.org/). Probably most website owners won't notice your existence or aren't big enough assholes to out you to your government like that, but if you want to be safe from that you would have to make sure they aren't getting enough information to identify you. If you want to post to 4chan anonymously, I don't know of any easy way since they block VPN. Many sites block VPN.

>>24829 Use Tor browser. Don't bother with any website that doesn't allow connections from Tor Browser. Don't open any files or run any programs while you're online with Tor browser. You can't write to 4chan when using Tor Browser. You can read 4chan with Tor Browser if you have javascript enabled (default) and go through some verification tests. Don't modify Tor Browser in any way. It's your best bet for remaining anonymous on the internet.

>>24830 Can some random person or someone who is aware of programming also obtain my IP? >but if you want to be safe from that you would have to make sure they aren't getting enough information to identify you. How? like not sharing personal details and blogposting? I have been getting really paranoid from last few months. Should I go offline? What if someone is already stalking me? >>24831 I'll keep this in mind Only Lainchan allows Tor posting. But I am not a tech guy so I feel low IQ and I don't fit in here. Other chans also block Tor posting.

>>24832 >Can some random person or someone who is aware of programming also obtain my IP? Generally no, exceptions being if there is a hack that results in a data leak that includes people's IP information, or if you are using p2p software like bittorrent that reveals your IP to other peers by design, or hosting a webserver from your house or something like that. >How? like not sharing personal details and blogposting? I was thinking of avoiding all the various technical fingerprinting methods, such as the ones outlined in the eff link I posted earlier, but yes also think about general opsec considerations. For example you just described part of your threat model and how someone could ruin your life if they wanted to. If you had posted that on Facebook rather than an anonymous imageboard, you might have a problem because then there would be a large group of people who are now aware of your exact weakness and could potentially realize your fears without too much effort. As it is you only really have to worry about the admins of this website because no one else can connect this detail with other information about you, and even the admins probably can't if you are using Tor properly. Keep your identities compartmentalized. >What if someone is already stalking me? They probably aren't. What have you done that could cause someone to be that obsessed about you? Have you done things to cause great embarrassment to powerful people? I bet even if someone contacted law enforcement or an ISP in your country with an IP address and a collection of heretical 4chan soykafposts someone there made, they wouldn't bother following up on it because no one with influence has been publicly embarrassed or threatened by it and they have other people to spend time persecuting where there is some actual political motive to do so. My feeling towards this stuff is, the way to be safe is to take steps to increase the skill, effort and access that would be required to fuarrrk you, and try to avoid pissing people off proportionally to how much power they have over you. Sophisticated adversaries aren't going to put in significant amounts of effort working to ruin your life on a whim for no reason. All that said I suspect the 4chan admins in particular are really corrupt and I wouldn't trust them.

>>24834 >They probably aren't. What have you done that could cause someone to be that obsessed about you? Gangstalkers are my OnlyFans fr >Sophisticated adversaries aren't going to put in significant amounts of effort working to ruin your life on a whim for no reason. Doesn't know anything about history and thinks we live in a civilized society

https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

>>24835 >Doesn't know anything about history and thinks we live in a civilized society All I know is everybody who came after me and my associates either had a sensible motive or else was lazy/unskilled about it, but feel free to elaborate with specifics. >Gangstalkers are my OnlyFans fr If haters want to pay attention to you you must be doing something right I guess

>>24837 >after me and my associates lol ok {insert criminal syndicate here} >feel free to elaborate with specifics. nah I'm not an oversharer thanks though >haters Nah more like criminals that put you on watchlist or scumbags that don't like you cause they are NPC's

>>24834 Thanks Lain for explaining it. One last question. I download a lot of torrents. So how I can make sure that I not hacked?

>>24844 Movies are probably safe. If you torrent games and software executables make sure it's from a trusted source or assume it might be malware. If you care about your IP being associated with the torrents get a VPN.

>>24845 What I meant by that question was how can I check if my computer is already hacked or not?

>>24846 Inspect the network activity of the device you suspect is infected using a separate device. You have to make sure to disable wireless networking on the infected machine, then connect it via ethernet cable to the separate device, and have the separate device connect to the internet. It will supply the infected device with internet. Run wireshark or something on the separate device to see what connections the infected machine makes.

>>24846 Here is some good advice that goes for your desktop computer, too: https://serverfault.com/questions/2783/how-do-i-know-if-my-linux-server-has-been-hacked