/cyb/ + /sec/: Cyberpunk and Cybersecurity General: OPs Back Edition

OPs Back Edition:
>Proof: pastebin.com/q9knARUT

/Cyb/er/sec/urity general is for the discussion of anything and everything related to cyberpunk and cybersecurity.

What is cyberpunk?
>pastebin.com/jS37Vu7A

Nothing to hide? - The importance of a cyberpunk mindset applied to a cybersecurity skillset.
>youtu.be/pcSlowAhvUk

Resources:
Cyberpunk:
Cyberpunk directory:
>pastebin.com/9JaJFqB2
Cyberpunk resources:
>pastebin.com/7DWCsAc8

Cybersecurity:
Cybersecurity essentials:
>pastebin.com/JWx5xeEM
Cybersecurity resources:
>pastebin.com/NaUPUDF0

Harden your OS, reroute your DNS and fire up the VPN!
Shit just got real: - Looking for more resources, help is welcomed.
>pastebin.com/JXyM4fTe

The Old Skool: - Looking for more resources, help is welcomed.
>0ld 5k00l h4ck3rz: 67.225.133.110/~gbpprorg/#40

IRC:
Join: irc://irc.rizon.net:6697
>#Sup Forumspunk - Requires SSL
>#Sup Forumssec - Requires SSL
IRC guide:
>pastebin.com/bh3Uyq3a

Thread archive:
>archive.rebeccablacktech.com/g/search/subject/cyb/
>archive.rebeccablacktech.com/g/search/subject/sec/
>archive.rebeccablacktech.com/g/search/text//cyb/ /sec//

Thread backup:
>cyberpunked.org/

Previous thread:
Suggestions for new resources are welcome.
The Gentoomen /sec/ community is looking for CTF team members, contact them at the IRC channel.

OP message:
Sorry about that, I got caught up in some real life drama so the updated pasta is a thread belayed.
I'll be posting it once this one has died.
Thank you for your support and cooperation and a special thanks who ever took over OP for me on:

Other urls found in this thread:

github.com/pranomostro/ratox
youtube.com/watch?v=kartDCAF2mQ
iana.org/domains/root/servers
wikileaks.org/wiki/Alternative_DNS
servers.opennicproject.org/
darpa.mil/news-events/2015-01-19
darpa.mil/about-us/bridging-the-bio-electronic-divide
darpa.mil/news-events/2016-02-08
darpa.mil/about-us/less-invasive-neural-interface
darpa.mil/news-events/2016-03-04
youtube.com/watch?v=F_brnKz_2tI
darpa.mil/news-events/2017-07-10
youtube.com/watch?v=vjac3RBoK1c
google.com/patents/US6729337
technewsworld.com/story/42081.html
wireheading.com/misc/matrix.html
ncbi.nlm.nih.gov/pmc/articles/PMC3428140/
nature.com/nature/journal/v530/n7588/full/nature16492.html
nature.com/nbt/journal/v34/n3/full/nbt.3428.html
youtube.com/user/Cisco/playlists
pravda.ru/news/society/30-07-2017/1343878-site-0/
pastebin.com/9uYXMhVm
hshrzd.wordpress.com/2017/05/28/starting-with-windows-kernel-exploitation-part-1-setting-up-the-lab/
github.com/enddo/awesome-windows-exploitation
my.mixtape.moe/jxgmai.webm
securityfocus.com/archive/1/495021/100/0/threaded
my.mixtape.moe/zpcpto.epub
my.mixtape.moe/jykoqk.epub
samdb.xyz/windows-kernel-exploitation/
twitter.com/SFWRedditImages

Good evening.

first for niggers

I want everyone who enters this thread to tell me what they are currently studying.

A mixture.
I'm currently living off of a trust fund, I spent between eight and ten hours a day studying physics, mathematics; chemistry, computer science and security and a smaller amount of time on electronic engineering and programming.

Daily reminder that you have the power and resources to beat the CIA/FBI/any US-puppet bullshit if you really want to.

I'm not in school anymore, but I keep learning at work every day. So, programming.

H-how?

Anyone here know about writing/reading to/from named pipes in Ruby? I'm trying to make a Tox bot with Ruby and RaTox.

It's not a story the Sup Forumsdi would tell you.

Linguistics and Infosec.

Assembly and Machine Learning

S-source?

Pharmacology and biochemistry. I don't work in CS, I'm the black sheep on this board.

Starting digital forensics, feels comfy man.

Between that and writing my novels I'm feeling good about things. Can't wait till I'm all trained up and certified.

Biochemistry is pretty interesting, to be honest.
Mycology and entomology is more of my bae though.

What do you want to use biochemistry for?

constructing bombs

And now you're on a specalised watchlist.

I don't know why but this is the funniest thing I've read all day

I knew that's where this was going.
Yeah dude.
github.com/pranomostro/ratox

Neet but currently studying ruby and c.

law.

Whoa, thanks!

Covering the Basics of CS (Self-study). I also am creating a personal curriculum that I want to follow, sort of like a skill-tree, which also branches out into other areas like personal fitness, social engineering, languages etc.

Basically, finding the closes equivalents of a cyberpunk hacker I can, and studying that stuff (while not falling into a delusion of course)

Write up the skill-tree, please, I'd be interested to see it?

Once it's finished I will. It's still work-in-progress and all over the place. Trying to find a nice template too, or creating one.

>The future is gonna be shit and oppressive lets prepare for it

omfg lmao i seriously hope you babby tier determinists dont dew this

Appreciated, good luck user.

We're already moving into the future.
Sure, whilst abundance isn't an issue.
Geopolitically, socially and economically the future is going to be shit.

Is python suitable for programming rpi or should I start learning c instead?

computer science & applied mathmatics bsc hons (just finished first year)

Officially as going to college nothing. In my free time I'm trying to learn to hard my server and to put some webservers, I guess after that I will try again some programming.

Everyone should learn C.
In fact, everyone should learn C as their first language.

learn python for now, it will suit you well enough.

>Whats the most secure way to embed a sqlite db on physical media

see

>does installing libreboot requires hardware tinkering?

Yes it does mate.

...

youtube.com/watch?v=kartDCAF2mQ

The pink trim is actually lovely

Waiting for my reply :

see .

It's not the legality issue that bother me but Twitter agreement with some of underhands corporates working with the gov.
I'm a little bit surprised that Vyviellance, which isn't the NSA could access to a private account on Twitter.

Assuming that guy's story is legit, which has a fucking million holes in it as it is, here's some ways we can do this.

>the harvester
>maltego
>haveibeenpwned
Check any email addresses he has against dumps, and grab passwords.

The chances of reuse are very high.

If it's not straight reused, pump it into hydra and get a list to try with Jack the Ripper.

So, for folks that uses containers or VMs. Is better in /sec/ terms to use NAT or bridges with the virtual interfaces? I could get everything working with just the bridge but I'm feeling like NAT will give me some kind of extra security.

Hydra is a meme and you forgot leakedsource

I have not heard of that? I'll check it out, ta

Likewise.

IT forensics

Sitting for OSCP tomorrow morning. Wish me luck!

Good luck, user.

good luck, user. i hope to be in your place in a few months. let us know the result.

Oh deng boy, good luck.

Luke?

Does anyone ever fall for this?

Little bump.

DNSCrypt encrypts DNS queries to DNS servers that also have it like OpenNIC non-logged name servers, DNSSEC authenticates DNS queries to root name servers, Unbound is a DNS resolver, and NSD is a self hosted authoritative name server. So:

DNSCrypt directing to an OpenNIC name server
or
Unbound with DNSSEC enabled directing to root name servers
or
Unbound directing to your own instance of NSD and enabling DNSSEC on that instance

What strategy is the best?

To be honest, they all sound equally valid.
So bump for extra input.

I could create a library from the amount of books I only read the first ~15 pages of before forgetting about them forever

Sounds like you need a book journal and a study schedule.

IN MY DAYS OF YOUTH

quantitative GRE stuff, assembly, and unix

idiocy in unbecoming for all ages

Looks like Unbound can be mixed with more than DNSSEC, also OpenNIC had me some problems, I am trying to see what could be.

While I experiment with DNSCrypt, contributing some DNS providers:

IANA — Root Servers iana.org/domains/root/servers
Alternative DNS from WikiLeaks wikileaks.org/wiki/Alternative_DNS
OpenNIC Public Servers servers.opennicproject.org/

Yeah hydra is garbage

How to make her happy.

DIY mobile HQ.

Basic elements of packet radio.

Cyberpunk has nothing to do with Cybersecurity.

Guide to EAMs.

Repasting for who wasn't lurking yesterday:
darpa.mil/news-events/2015-01-19
darpa.mil/about-us/bridging-the-bio-electronic-divide
>New effort aims for fully implantable devices able to connect with up to one million neurons

darpa.mil/news-events/2016-02-08
darpa.mil/about-us/less-invasive-neural-interface
>Minimally Invasive “Stentrode” Shows Potential as Neural Interface for Brain

darpa.mil/news-events/2016-03-04
>As an initial focus, NGS2 will challenge researchers to develop and use these new tools and methods to identify causal mechanisms of “collective identity” formation—how a group of individuals becomes a unified whole, and how under certain circumstances that community breaks down into a chaotic mix of disconnected individuals.

youtube.com/watch?v=F_brnKz_2tI
>The Mind-Controlled Bionic Arm With a Sense of Touch

darpa.mil/news-events/2017-07-10
youtube.com/watch?v=vjac3RBoK1c
>Neural Engineering System Design program sets out to expand neurotechnology capabilities and provide a foundation for future treatments of sensory deficits

Old news but still related:
google.com/patents/US6729337
>Method and system for generating sensory data onto the human neural cortex

technewsworld.com/story/42081.html
>Sony Patent Details 'Matrix'-Like Brain Stimulation System

wireheading.com/misc/matrix.html
>Sony patent takes first step towards real-life Matrix

ncbi.nlm.nih.gov/pmc/articles/PMC3428140/
>Non-invasive transcranial stimulation of rat abducens nerve by focused ultrasound

nature.com/nature/journal/v530/n7588/full/nature16492.html
>Bioresorbable silicon electronic sensors for the brain

nature.com/nbt/journal/v34/n3/full/nbt.3428.html
>Minimally invasive endovascular stent-electrode array for high-fidelity, chronic recordings of cortical neural activity

cisco has a shit ton of educational videos on their youtube
youtube.com/user/Cisco/playlists

Holy shit, I didn't know you could live so comfortably in a van.

Beautiful.
I might make this the 'edition' for the next thread.

Stop, it hasn't stopped any of the threads and it wont stop them now.
Either join in, or leave; this has been explained to you a multitude of times.

Another nice infographic.

Would you like me to add this to the pasta?

>Would you like me to add this to the pasta?
which pasta from the op?

Russian law targetting anonymous services has finally been adopted. Under it, any service allowing access to banned internet resources will itself get banned and its access limited within the country. Obviously the biggest target is the TOR network where such blocks are impossible. VPN services if they want to continue operating within the country would have to block user access to specific resources accordingly.
(this isn't a translation but a brief overview)

pravda.ru/news/society/30-07-2017/1343878-site-0/

Cyberpunk, I'd add a cybernetics section.

No surprise, from Tsardom to Soviet Union, Russia was known for its censorship and with a former KGB officer in charge, it was only a matter of time.

Threads are pretty fast. Idk if you're OP, but any relevant new articles with dates could be posted right after OP and keep a window so it wouldn't overcrowd. Look at how it's done in this general: Posters raise OPs awareness of new articles or content by replying to the OP.

Theres been censorship there since catherine the great. I wonder how the Russians will respond. There's already a lot of dissidence in that country, but there is also a cultural apathy, so who knows.

I'm not op, though that's a nice suggestion.

>I'd add a cybernetics section.
sure go for it, maybe try making a template by published date like user suggested:

I second this.

Also: get yourself a library with a comfy chair.

Reading is also more pleasant when you also enjoy a splendid cuppa tea such as Darjeeling tea. For more demanding texts I recommend Sencha.

>I might make this the 'edition' for the next thread.
You might want to place the radio primer pasta one level up. Now it is only seen in resources -> how to get into Cyberpunk -> radio primer
The pasta is here: pastebin.com/9uYXMhVm

It appears that the word "Wullenweber" makes this pasta unsearchable also with Bing. Very strange.

I wrote that radio primer, I would be happy to update it if I get some inputs.

The cultural apathy really stems from peoples of that region preferring stability over freedom. It's the same reason why many mainland Chinese nationals view the Great Firewall as a positive thing. Their cultural equivalent of 1984 is not a monolithic authoritarian state -- rather, it's a weakened anarchistic state.

Imagine how harsh the censorship must be if even those cultures are starting to see dissidents speaking up en masse.

Windows kernel exploitation and vulnerability discovery.

Law.

Nice one lad

Network Engineering

This will be handy, considering how many things still use Windows. Care to share some resources?

Yeah, it's a pretty exciting area of study! If you are interested, this is a good set of tutorials + Windows exploit resources:
>hshrzd.wordpress.com/2017/05/28/starting-with-windows-kernel-exploitation-part-1-setting-up-the-lab/
>github.com/enddo/awesome-windows-exploitation

AES for dummies (how it works).
Webm version: my.mixtape.moe/jxgmai.webm

Also, consider reading these two enormous books on the Windows OS/API if you want to get even deeper into exploit development on the Windows platform:
>Windows Internals, Part 1
>Windows Internals, Part 2

Web application security.

Did you know there was an exploit in the Tomcat servers on versions less than 6.0.18 that would allow cross site scripting on the server generated error page? You could theoretically create a link attempting to access a document titled:

documentTitle = "window. location. href = 'www. malicious website .com'" (surrounded by script tags, Sup Forums thinks i'm trying to set up xss on one of my posts and keeps rejecting it lol)

and upon viewing that link, it would take you to the error page, render that javascript and take you to the malicious website you linked to.

found that here: securityfocus.com/archive/1/495021/100/0/threaded

The difference between me and everybody else here is I don't want to be Case. I want to be something between Marie-France Tessier and John Harness Ashpool.

>Windows Internals, Part 1 - Mark E. Russinovich, David A. Solomon & AlexIonescu (2012) [Microsoft Press].epub
my.mixtape.moe/zpcpto.epub
and
>Windows Internals, Part 2 - Mark E. Russinovich, David A. Solomon & AlexIonescu (2012) [Microsoft Press].epub
my.mixtape.moe/jykoqk.epub

This is another set of tutorials that cover Windows kernel exploit development:
>samdb.xyz/windows-kernel-exploitation/

So you want to be nJane or nJean? You know TA gets snuffed out after the incident with Wintermute.

I don't think anyone wants to be Case. They want to be what case would have been if he didn't fuck up and get brained.

Sick wallpaper though, saved.

But if you are Case you could tap dat Steppin' Razor enhanced booty

>when you wake from the surgery and feel her tight ass covered in pleather pants pressing up against your lower back

I know right
She could be riding your shotgun *nudge nudge, wink wink*

Study material?
Sounds very interesting.

"can you rub my back?"
>"sure thing, case"
>rustling sounds of futuristic plastic clothes against skin in the dark
"can you rub my uh... other thing?"
>"i thought you'd never ask"