Security Fuckup Megathread - v7.69 (stay safe security ghost)

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.69 (stay safe security ghost)

«‹›163 »

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

code:

PATCH NOTES FOR v7.69

* Added 1.2 billion passwords from Russian hacker forums

PATCH NOTES FOR v7.2 "BoringSFM"

* The name is aspirational and not yet a promise

PATCH NOTES FOR V1.0.1g

* changed version number

PATCH NOTES FOR V0.9.8

* once again removed LF and Fishmech corruption from the last thread
* added a new feature that enables the mods/admins to go ahead and probate/ban as necessary if LF'n poo poo happens
* added heartbeat feature to non-existent SSL layer on the forums

PATCH NOTES FOR V69

* removed LF and Fishmech corruption from last thread
* new "hello" service for conference attendees
* blocking of js crypto through message relay services like twitter

PATCH NOTES FOR V1.2

* made more efficient for version 1.2 after having removed fishmeching and talk about credit card contracts

PATCH NOTES FOR V1.1

* don't loving use any of these goddamn exploits you dumbshits

join us on irc: irc.synirc.net #yossec

useful news resource for information security professionals: http://reddit.com/r/netsec/

here's the old thread: http://forums.somethingawful.com/showthread.php?threadid=3645346

Lain Iwakura fucked around with this message at 20:01 on Aug 26, 2014

# ? Aug 8, 2014 16:40

Adbot: ADBOT LOVES YOU

# ? Apr 26, 2024 03:51

Carthag Tuek: Oct 15, 2005; Tider skal komme,
tider skal henrulle,
sl�gt skal f�lge sl�gters gang

wow you double linked the new thread, thats not very secure!!!

# ? Aug 8, 2014 16:46

Fart.Bleed.Repeat.: Sep 29, 2001

I feel safe

# ? Aug 8, 2014 16:48

graph: Nov 22, 2006; aaag peanuts

why was the previous one closed

# ? Aug 8, 2014 16:49

syscall girl: Nov 7, 2009; by FactsAreUseless; Fun Shoe

posting 2 mark

# ? Aug 8, 2014 16:49

Kuvo: Oct 27, 2008; Blame it on the misfortune of your bark!; Fun Shoe

hunter2

# ? Aug 8, 2014 16:51

neutral milf hotel: Oct 9, 2001; by Fluffdaddy

to celebrate this new thread, everyone pick out a sweet H4cker name following these steps:
1) the color shirt you're wearing
2) your email password

# ? Aug 8, 2014 16:51

ChickenOfTomorrow: Nov 11, 2012; god damn it, you've got to be kind

12345? That's the combination to my luggage!

# ? Aug 8, 2014 16:52

prefect: Sep 11, 2001; No one, Woodhouse.
No one.; Dead Man’s Band

BeOSPOS posted:

to celebrate this new thread, everyone pick out a sweet H4cker name following these steps:
1) the color shirt you're wearing
2) your email password

black XyKC9BuG4Tbf

# ? Aug 8, 2014 16:53

neutral milf hotel: Oct 9, 2001; by Fluffdaddy

prefect posted:

black XyKC9BuG4Tbf

that's is a sweet name

mine is black ��

# ? Aug 8, 2014 16:54

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

black 5f4dcc3b5aa765d61d8327deb882cf99

# ? Aug 8, 2014 16:58

Carthag Tuek: Oct 15, 2005; Tider skal komme,
tider skal henrulle,
sl�gt skal f�lge sl�gters gang

BeOSPOS posted:

to celebrate this new thread, everyone pick out a sweet H4cker name following these steps:
1) the color shirt you're wearing
2) your email password

black black :c00lbert:

# ? Aug 8, 2014 17:02

Suspicious Dish: Sep 24, 2011; 2020 is the year of linux on the desktop, bro; Fun Shoe

blue luigifucker69

# ? Aug 8, 2014 17:02

Carthag Tuek: Oct 15, 2005; Tider skal komme,
tider skal henrulle,
sl�gt skal f�lge sl�gters gang

also lol at black shirts

e: gently caress you suspicious dish for ruining the streak

# ? Aug 8, 2014 17:02

Rocko Bonaparte: Mar 12, 2002; Every day is Friday!

I had an actual general security question here, which is funny because I only really remember this poo poo coming up in YOSPOS. Are there any major concerns with testing stuff that have cell phone modems out on a carrier's network? I should qualify that let's say the modem is certified and you're not actively doing anything to piss off the carrier. I was bringing this up with some folks here and their attitude was like, "They can only get as far as the modem," which made me think, "My computer must be secure then because attackers cannot get past my NIC!" I'm wondering about cell-specific stuff where the data is basically being blasted out over miles, as opposed to having something on a WAN to begin with.

# ? Aug 8, 2014 17:04

Qtotonibudinibudet: Nov 7, 2011; Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

my passwords hash is e7a995ae667c69ff533a365026e7d6cc488e69db

# ? Aug 8, 2014 17:10

Qtotonibudinibudet: Nov 7, 2011; Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

Rocko Bonaparte posted:

I had an actual general security question here, which is funny because I only really remember this poo poo coming up in YOSPOS. Are there any major concerns with testing stuff that have cell phone modems out on a carrier's network? I should qualify that let's say the modem is certified and you're not actively doing anything to piss off the carrier. I was bringing this up with some folks here and their attitude was like, "They can only get as far as the modem," which made me think, "My computer must be secure then because attackers cannot get past my NIC!" I'm wondering about cell-specific stuff where the data is basically being blasted out over miles, as opposed to having something on a WAN to begin with.

what, are you blasting the eicar string out a cell modem in hopes of triggering the mcafee endpoint protection on a kingfisher or something

the fbi is coming 4 u rite now run

# ? Aug 8, 2014 17:13

CISADMIN PRIVILEGE: Aug 15, 2004; optimized multichannel
campaigns to drive
demand and increase
brand engagement
across web, mobile,
and social touchpoints,
bitch!

grey #ha5htHisCat#

# ? Aug 8, 2014 17:16

Volmarias: Dec 31, 2002; EMAIL... THE INTERNET... SEARCH ENGINES...

white

Rocko Bonaparte posted:

I had an actual general security question here, which is funny because I only really remember this poo poo coming up in YOSPOS. Are there any major concerns with testing stuff that have cell phone modems out on a carrier's network? I should qualify that let's say the modem is certified and you're not actively doing anything to piss off the carrier. I was bringing this up with some folks here and their attitude was like, "They can only get as far as the modem," which made me think, "My computer must be secure then because attackers cannot get past my NIC!" I'm wondering about cell-specific stuff where the data is basically being blasted out over miles, as opposed to having something on a WAN to begin with.

I'm not sure I understand the question. Are you saying that people need to be concerned about someone spoofing the base station for the cell company and then port scanning you or something?

also, white 420GoKu

# ? Aug 8, 2014 17:21

Janitor Prime: Jan 22, 2004; PC LOAD LETTER

What da fuck does that mean; Fun Shoe

Why a new thread?

# ? Aug 8, 2014 17:22

Forums Terrorist: Dec 8, 2011

white pr1d3w0r1dw1d3

# ? Aug 8, 2014 17:22

Winkle-Daddy: Mar 10, 2007

purple hitlerdidnothingwrong1

# ? Aug 8, 2014 17:23

Qtotonibudinibudet: Nov 7, 2011; Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

Janitor Prime posted:

Why a new thread?

the bush doctrine of thread closing

# ? Aug 8, 2014 17:26

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

afreak was concerned i was mounting a 51% attack on the good posts

# ? Aug 8, 2014 17:34

Fart.Bleed.Repeat.: Sep 29, 2001

BeOSPOS posted:

to celebrate this new thread, everyone pick out a sweet H4cker name following these steps:
1) the color shirt you're wearing
2) your email password

PBRassf4rt

i know PBR isnt a color, but its a PBR shirt i tiedyed

# ? Aug 8, 2014 17:36

neutral milf hotel: Oct 9, 2001; by Fluffdaddy

I hope OSI is saving all these passwords for canary :getin:

# ? Aug 8, 2014 17:37

atomicthumbs: Dec 26, 2010; We're in the business of extending man's senses.

hey yossec can you help me unlock my computer?

it's a three-dial combination lock and none of the methods for cracking them seems to work. im thinking of just brute forcing it

# ? Aug 8, 2014 17:43

atomicthumbs: Dec 26, 2010; We're in the business of extending man's senses.

either by guessing the combination or just prying it out with brute force

# ? Aug 8, 2014 17:44

syscall girl: Nov 7, 2009; by FactsAreUseless; Fun Shoe

atomicthumbs posted:

hey yossec can you help me unlock my computer?

it's a three-dial combination lock and none of the methods for cracking them seems to work. im thinking of just brute forcing it

nobody help this guy

he will just post dogs with it

# ? Aug 8, 2014 17:46

atomicthumbs: Dec 26, 2010; We're in the business of extending man's senses.

syscall girl posted:

nobody help this guy

he will just post dogs with it

don't think it can run an internet browser so don't worry

it does have a modem in what appears to be an internal ISA slot, on a laptop

# ? Aug 8, 2014 17:47

Fart.Bleed.Repeat.: Sep 29, 2001

is it Marcellus Wallace's laptop?

also shame if you havent tried 666 or the combo isnt 666

# ? Aug 8, 2014 17:49

Qtotonibudinibudet: Nov 7, 2011; Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki

atomicthumbs posted:

hey yossec can you help me unlock my computer?

it's a three-dial combination lock and none of the methods for cracking them seems to work. im thinking of just brute forcing it

you can always break the window

# ? Aug 8, 2014 17:49

Westie: May 30, 2013; Baboon Simulator

atomicthumbs posted:

hey yossec can you help me unlock my computer?

it's a three-dial combination lock and none of the methods for cracking them seems to work. im thinking of just brute forcing it

the three-dial combination lock is actually a wrapper to miniLock

hth

# ? Aug 8, 2014 17:53

Carthag Tuek: Oct 15, 2005; Tider skal komme,
tider skal henrulle,
sl�gt skal f�lge sl�gters gang

atomicthumbs posted:

either by guessing the combination or just prying it out with brute force

seriously just put a screwdriver in it and gently caress it up

its not like its gonna protect anything anyway

# ? Aug 8, 2014 18:00

atomicthumbs: Dec 26, 2010; We're in the business of extending man's senses.

this is a pro rear end laptop, i'd rather not destroy its one and only layer of security

# ? Aug 8, 2014 18:07

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

atomicthumbs posted:

hey yossec can you help me unlock my computer?

it's a three-dial combination lock and none of the methods for cracking them seems to work. im thinking of just brute forcing it

if it's that old and it's been used at all the combo should be at least slightly worn in, just examine the dials closely

alternately, apply pressure to the release clasp and rotate the dials until they catch

# ? Aug 8, 2014 18:13

Captain Foo: May 11, 2004; we vibin'
we slidin'
we breathin'
we dyin'

scroogle nmaps posted:

you can always break the window

Then install Linux am I rite

# ? Aug 8, 2014 18:14

infernal machines: Oct 11, 2012; we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.

infernal machines posted:

if it's that old and it's been used at all the combo should be at least slightly worn in, just examine the dials closely

alternately, apply pressure to the release clasp and rotate the dials until they catch

or if you know where the lock arm is, slide a blade between the screen and base pushing against the arm. if it's a really cheap lock (it probably is) it'll just slide back even if the mechanism is still "locked"

# ? Aug 8, 2014 18:18

big scary monsters: Sep 2, 2011; -~Ｓｋｕｌｌｗａｖｅ~-

a three dial combo lock takes like 10 minutes max to brute force anyway though

white trustno2

# ? Aug 8, 2014 18:22

Adbot: ADBOT LOVES YOU

# ? Apr 26, 2024 03:51

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

BeOSPOS posted:

I hope OSI is saving all these passwords for canary

nah but i have been using canary to poo poo all over alex holden for his dumbassary

# ? Aug 8, 2014 18:26

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.69 (stay safe security ghost)

«‹›163 »