|
Cold on a Cob posted:hi i'm not a security researcher but if i was "examining" something like this my first thought is to do it on an airgapped pc with a clean install of windows and whatever tools i need to study it. i wouldn't have discord installed on it. lol. lmao. Well you are a rational person, not a student of cybersecurity ![]()
|
![]() |
|
![]()
|
# ? Sep 30, 2023 04:48 |
|
Lol at writing a disaster recovery plan for some ms paint drawings. Guys we had to restore from backup be sure to check all your pixels. But also discord should have some protection for the "nuke account" feature. A 24 hour countdown with notifications.
|
![]() |
|
Cold on a Cob posted:youtubers that have lost control of their channels have had everything restored. i wonder if that's possible with discord. there are differences though, like youtubers bring in money to google, not sure free discord users do? seems like an easy upsell feature for a paid discord server
|
![]() |
|
Cold on a Cob posted:youtubers that have lost control of their channels have had everything restored. i wonder if that's possible with discord. there are differences though, like youtubers bring in money to google, not sure free discord users do? just get 3 more people to boost your discord server and you unlock "our support will make a ticket for it" 5 more after that and we might do something!
|
![]() |
|
Guy Axlerod posted:Lol at writing a disaster recovery plan for some ms paint drawings. Guys we had to restore from backup be sure to check all your pixels. it's not ms paint drawings, it's fanfiction about someone else's ms paint drawings e: if you don't already know, ms paint adventures is just homestuck. i mean it's other things too, but nobody cares about those (especially not in 2023) Guy Axlerod posted:But also discord should have some protection for the "nuke account" feature. A 24 hour countdown with notifications. yeah if your discord server has more than a certain small amount of users it should have one of those rules like for buying guns where you have to wait 3 days so your murderous urges have a chance to dissipate Shame Boy fucked around with this message at 16:10 on Jan 23, 2023 |
![]() |
|
Slashrat posted:Imagining the wild alternate reality in which self-taught Infectious Disease Researchers also think it's fine to examine samples of Ebola in their living room Bhodi fucked around with this message at 16:21 on Jan 23, 2023 |
![]() |
|
you don’t even have to go to the demon core, there’s a long history of scientists accidentally or deliberately infecting themselves with the diseases they were studying or treating
|
![]() |
|
Bhodi posted:yeah, no scientists would ever be super casual in their experiments, especially when they know they're handling hazardous materials. imagine if you had a thing your coworkers had named the demon core and you were gonna gently caress around with it for funsies and show off, obviously as a professional you'd take extra care knowing the dangers. hubris? that only applies to people who don't know what they're doing that wasn't in their living room though. they saved working there for special occasions
|
![]() |
|
there's a picture of them actually assembling the pit in the house in this book i have but i can't find it online. it's great cuz they basically just like, put up some tarps and declared it a cleanroom lmao
|
![]() |
|
Shame Boy posted:serious question: how does one make a disaster plan for a discord? now that everyone's moving everything off the internet and into closed little discord boxes i get the feeling that a hell of a lot of important poo poo is just one click away from being obliterated forever I figure that if there's any important irreplaceable data, then a bot would download and archive it. Same plan if, maybe, discord itself decided to kick the bucket or get hacked itself. Also, if losing discord creds was going to be real bad, then people would probably take better care of them.
|
![]() |
|
Shame Boy posted:serious question: how does one make a disaster plan for a discord? now that everyone's moving everything off the internet and into closed little discord boxes i get the feeling that a hell of a lot of important poo poo is just one click away from being obliterated forever I have one discord server that gets used for roleplaying that my friends and I don't want to lose. I wrote a bot that archives a channel whenever we finish an RP session and backs it up in a database. Everything important is backed up there.
|
![]() |
|
I was wondering why they couldn't just ask discord administration to undelete the server after proving their identity, and that's further down the thread looks like discord was able to return control to him, but they don't store chat history indefinitely so much of the content of the server is gone even after the structure is recreated
|
![]() |
|
sb hermit posted:if losing discord creds was going to be real bad, then people would probably take better care of them. lmao my sweet summer child
|
![]() |
|
Cold on a Cob posted:hi i'm not a security researcher but if i was "examining" something like this my first thought is to do it on an airgapped pc with a clean install of windows and whatever tools i need to study it. i wouldn't have discord installed on it. lol. lmao. otoh if someone sent me a large zip containing a couple of things, one of them a binary i wanted to investigate on my airgapped machine, but also a huge verifier log i didn't need to transfer, i could easily see myself opening the zip to move the binary onto whatever medium i use to get things to my secure pc. and then id feel real stupid when I accidentally double click, but not so stupid that i couldnt imagine how i could have made it happen. this sort of thing is why smartscreen and the like exists after all, 7zip should integrate with it.
|
![]() |
|
Cybernetic Vermin posted:this sort of thing is why smartscreen and the like exists after all, 7zip should integrate with it. yeah i'm sure igor will get right on that, lol
|
![]() |
|
Cybernetic Vermin posted:otoh if someone sent me a large zip containing a couple of things, one of them a binary i wanted to investigate on my airgapped machine, but also a huge verifier log i didn't need to transfer, i could easily see myself opening the zip to move the binary onto whatever medium i use to get things to my secure pc. and then id feel real stupid when I accidentally double click, but not so stupid that i couldnt imagine how i could have made it happen. even better might be to use a script or the command line to make sure you're doing the correct poo poo before you hit enter. But I guess that would mean actually using linux on a desktop
|
![]() |
|
sb hermit posted:even better might be to use a script or the command line to make sure you're doing the correct poo poo before you hit enter. ultimately it is a bad workflow, but sometimes i think these things are all the more common because people are a touch quick to go "lol how can you be so stupid" when they're likely also a keystroke or two away from catastrophe in their own workflow if critically examined.
|
![]() |
|
though, also (this being yospos): lol
|
![]() |
|
Encrypting the malware before moving it anywhere is standard operating procedure to render the payload inert. Always do this first if it wasn't received that way (and if it's not being received that way, ask yourself what the hell you're really doing lest you be like my security engineering friend).
|
![]() |
|
Cybernetic Vermin posted:ultimately it is a bad workflow, but sometimes i think these things are all the more common because people are a touch quick to go "lol how can you be so stupid" when they're likely also a keystroke or two away from catastrophe in their own workflow if critically examined. Cybernetic Vermin posted:though, also (this being yospos): lol
|
![]() |
|
I think people are also just bad at anticipating the possibility that they might make a mistake
|
![]() |
|
If you are the kind of dipshit that runs a virus on a prod machine, there is no excuse to not set up this https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview
|
![]() |
|
do you actually think the person was thinking ahead?
|
![]() |
|
Achmed Jones posted:do you actually think the person was thinking ahead? He was an admin on a mspaint discord so no.
|
![]() |
|
pseudorandom name posted:you don’t even have to go to the demon core, there’s a long history of scientists accidentally or deliberately infecting themselves with the diseases they were studying or treating Hey university admin, we want to build the first fission reactor in history, where can we tamper with primal forces mankind has never before unleashed? "Ehh, nobody's really using the football stadium much anymore"
|
![]() |
|
squash court you mean come on
|
![]() |
|
bob dobbs is dead posted:squash court you mean come on i looked it up because i remembered it different too but no it was in fact last used as a football field before they built the pile e: ok wait i see where i got mixed up, the field itself was used for football, the area under the stands where they built the reactor was used for squash Shame Boy fucked around with this message at 22:09 on Jan 23, 2023 |
![]() |
listen when youve got new physics to invent you just figure it out live and you get a guy with an axe as backup in case things go wrong if you follow back the etymology of SCRAM
|
|
![]() |
|
look it's just a pile of graphite bricks okay
|
![]() |
|
Potato Salad posted:The core security issue is that we do things with computers, and poo poo would dramatically improve once we stop doing things with computers.
|
![]() |
|
Slashrat posted:Imagining the wild alternate reality in which self-taught Infectious Disease Researchers also think it's fine to examine samples of Ebola in their living room I have what may be interesting news on how Natural Philosophers approached their subjects. Bhodi posted:yeah, no scientists would ever be super casual in their experiments, especially when they know they're handling hazardous materials. imagine if you had a thing your coworkers had named the demon core and you were gonna gently caress around with it for funsies and show off, obviously as a professional you'd take extra care knowing the dangers. hubris? that only applies to people who don't know what they're doing It's this, but before anything was actually known so "YOLO" was in fact a perfectly valid and accepted premise.
|
![]() |
|
i think the old professor guy from periodic videos once talked about how if you were doing chemistry in like, the 1700's / 1800's you were expected to do stuff like sniff the vapors of a reaction and taste stuff and and not wear safety equipment or protection at all ever because obviously the noble gentleman scientist must be brave and courageous to discover new truths at any cost
|
![]() |
|
they taught us to lick the rocks in my college geology course.
|
![]() |
|
i remember several chem labs where we were instructed to smell the reaction. they were always specifically like, "use your hand to waft some of the vapors toward your nose, don't just cram the beaker in your face and take a whiff". but you still had to smell it and write down what it smelled like looking across generations: my mom claims to have mouth pipetted hiv
|
![]() |
|
DELETE CASCADE posted:looking across generations: my mom claims to have mouth pipetted hiv Strangest way to describe a facial I've heard so far.
|
![]() |
|
Volmarias posted:Strangest way to describe a facial I've heard so far. All these confusing loving science terms yeah.
|
![]() |
|
Trabisnikof posted:they taught us to lick the rocks in my college geology course. that's fine, the rocks like it
|
![]() |
|
Shame Boy posted:i looked it up because i remembered it different too but no it was in fact last used as a football field before they built the pile it’s still more electrifying than the product most of the Big Ten uses their football fields for ![]()
|
![]() |
|
https://twitter.com/daxdives/status/1617052821077233666?s=20
|
![]() |
|
![]()
|
# ? Sep 30, 2023 04:48 |
|
Please tell me this is real
|
![]() |