Open Side Menu Go to the Top

12-16-2014 , 05:50 PM
Quote:
Originally Posted by jjshabado
Did you have SSDs before?

I can't remember a single upgrade that had a more noticeable improvement on my computer performance.
I don't think some programs can cope with the speed. Bitdefender completes on-demand scans so quickly it's done scanning before the "scan started" popup bubble disappears
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
$25m Guaranteed WPM on CoinPoker
Join the action now
Daily Rewards • Splash Pots • CoinRaces
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
12-16-2014 , 05:56 PM
Quote:
Originally Posted by Larry Legend
We have a site that we built and we continue to maintain and support for a research group in DC that produces a lot of research on Chinese technological threats and state-sponsored hacking.

As soon as the site went live IPs in China started making requests/ scanning the site furiously, and when they apparently didn't find any vulnerabilities they ddos'd it (which we fought as best we could by essentially playing whack-a-mole with IP ranges for a while).

After over a year now they haven't been able to get access to the site (as best we know), even tough they still try quite often. Now we have upgraded their infras and have them behind a CDN and have a lot of active monitoring set up in case something went bad.

One of the biggest factors in exposing a system, is like you are asking about, getting the virus into the system. Usually, this does not come down to actually penetrating the exterior wall of a system. While it is obviously theoretically possible to break most things if you have enough time and money, social engineering is usually a TON more efficient of a way to go about it. Our client is good about how they manage access and who can do what on the website, as long as those people don't do something dumb, they are in decent shape.

All it takes is someone cold calling a secretary and being told that "Hi this is Julie...Sorry Jim is on a business trip, can I take a message", and then having someone call and say "Hey Julie, I'm supposed to send Jim something for his meeting this afternoon, all I have is his number, can I email you it and have you send it to him..."

Its my impression that in a lot of cases this type of social engineering is a huge part of how they get virus' into the systems to be compromised. Not sure how Stuxnet was delivered, but I imagine the Iranian engineers occasionally met with people for Siemens, all it takes is a flash drive with documentation, etc. and you are then into the network.
Ok so if I'm on the same network as someone with an infected computer, how do they infect my computer? Theoretically they can only access my shared drive right? Is it harder to infect a Mac? I'm guessing the leaked Sony emails were in a local Outlook archive?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:00 PM
Quote:
Originally Posted by KatoKrazy
I am installing two enterprise grade SSDs in my system right now. I'm not gonna lie I am really excited!
I'm dying to know whether the SSD firmware is bare metal or is OS based. I'm pretty it is bare metal.

Regarding the speed improvement, yes for I/O bound OSs SSDs help a lot.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:02 PM
Quote:
Originally Posted by Anais
I don't think some programs can cope with the speed. Bitdefender completes on-demand scans so quickly it's done scanning before the "scan started" popup bubble disappears
Interesting, is this a Windows app?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:06 PM
Laptops are stolen as a possible option too.
Someone told me (company gossip) there are listed prices for x company on the dark web.

If I were to have lost my laptop, there would be a private investigation to see if I had lost it and that part is 100% not gossip.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:08 PM
Quote:
Originally Posted by jjshabado
Did you have SSDs before?

I can't remember a single upgrade that had a more noticeable improvement on my computer performance.

I just built a new PC a couple months ago, with an SSD, and it's definitely a great upgrade from the old Core2 duo system I was on. But everything is an upgrade, so it just blows my old PC away.



Quote:
Originally Posted by Larry Legend
We have a site that we built and we continue to maintain and support for a research group in DC that produces a lot of research on Chinese technological threats and state-sponsored hacking.

As soon as the site went live IPs in China started making requests/ scanning the site furiously, and when they apparently didn't find any vulnerabilities they ddos'd it (which we fought as best we could by essentially playing whack-a-mole with IP ranges for a while).

After over a year now they haven't been able to get access to the site (as best we know), even tough they still try quite often. Now we have upgraded their infras and have them behind a CDN and have a lot of active monitoring set up in case something went bad.

One of the biggest factors in exposing a system, is like you are asking about, getting the virus into the system. Usually, this does not come down to actually penetrating the exterior wall of a system. While it is obviously theoretically possible to break most things if you have enough time and money, social engineering is usually a TON more efficient of a way to go about it. Our client is good about how they manage access and who can do what on the website, as long as those people don't do something dumb, they are in decent shape.

All it takes is someone cold calling a secretary and being told that "Hi this is Julie...Sorry Jim is on a business trip, can I take a message", and then having someone call and say "Hey Julie, I'm supposed to send Jim something for his meeting this afternoon, all I have is his number, can I email you it and have you send it to him..."

Its my impression that in a lot of cases this type of social engineering is a huge part of how they get virus' into the systems to be compromised. Not sure how Stuxnet was delivered, but I imagine the Iranian engineers occasionally met with people for Siemens, all it takes is a flash drive with documentation, etc. and you are then into the network.

Well most of the non SE hacking that occurs is through web applications, specifically via SQL injection, so no firewall is going to prevent that as those web apps are running on open ports.


Quote:
Originally Posted by suzzer99
Ok so if I'm on the same network as someone with an infected computer, how do they infect my computer? Theoretically they can only access my shared drive right? Is it harder to infect a Mac? I'm guessing the leaked Sony emails were in a local Outlook archive?
Regarding all the infected Sony computers, my guess is that the hackers compromised a Windows server running the Windows Server Update Services responsible for pushing out updates to all the clients, and pushed out the malware, but it's just a guess. I do think it's quite possible though.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:22 PM
I'm pretty excited for a volunteering project I'm just starting! I'm going to be testing a fairly new Malwarebytes program called Malwareytes Anti-Exploit with Metasploit! I'm going to be trying to get shells on an unpatched Win7 machine with nothing but MBAE with different modules and payloads and reporting the results. Should be a fun learning experience, and maybe I can help improve the software, which would be great cause I use it.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 06:52 PM
Quote:
Originally Posted by adios
Interesting, is this a Windows app?
Just a free, light-weight anti-virus program. Scores very highly on detection and extremely low on system resource usage.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 08:39 PM
Quote:
Originally Posted by catsec
Sounds expensive!
They are in my work computer, so I didn't pay for them.

Quote:
Originally Posted by jjshabado
Did you have SSDs before?

I can't remember a single upgrade that had a more noticeable improvement on my computer performance.
I have consumer SSDs in all my personal systems, and they make a huge difference. However, this drive is like night and day. I have never seen Eclipse open so fast in my life!!!

Quote:
Originally Posted by adios
I'm dying to know whether the SSD firmware is bare metal or is OS based. I'm pretty it is bare metal.
Sorry, can't talk about system architecture. Pesky NDAs and everything...
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 08:58 PM
Quote:
Originally Posted by KatoKrazy
Eclipse

*shudder*
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-16-2014 , 10:51 PM
Quote:
Originally Posted by suzzer99
Ok so if I'm on the same network as someone with an infected computer, how do they infect my computer? Theoretically they can only access my shared drive right? Is it harder to infect a Mac? I'm guessing the leaked Sony emails were in a local Outlook archive?
Well it seems like they got in somehow and then took control of an Exchange server and some other servers internally that were probably weak on security. There are seriously terrible practices out there. Someone high up at Sony, CIO or so, was on the record saying he did not take security that seriously and he "wouldn't spend $10 million to prevent $1 million in losses due to security issues."

There is a solid chance they thought a server being only usable on the network was a level of security and tried to save money by not updating. I would expect applications running on no longer supported versions, maybe not even getting security updates anymore, and likely with known published vulnerabilities.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-17-2014 , 11:00 PM
Code noob here

Is this code in java? http://forumserver.twoplustwo.com/19...-code-1443231/

Thanks
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-17-2014 , 11:27 PM
Yes.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-18-2014 , 01:16 AM
I started testing Malwarebytes Anti-Exploit. I'm starting by testing Adobe Reader exploits., and I started with CVE-2010-0188 (Adobe Acrobat Bundled LibTIFF Integer Overflow) which embeds a malicious .tiff image inside a .pdf. I've been using the exploit/windows/fileformat/adobe_libtiff and exploit/windows/multi/handler Metasploit modules to test a meterpreter reverse TCP payload in the .pdf opening it with Adobe Reader 9.3.0 (don't use that version!) on an unpatched Windows XP SP2 VM. I successfully got a meterpreter shell, then ran three tests with MBAE and it blocked all three exploit attempts.

I wrote up a nice looking, professional report and submitted it and my results to the team. I have to write reports in uni over a lot of bull crap, so I figured I'd just take the initiative and write out good reports for my tests. Who knows, maybe some day it could lead to a job? I'm not really in it for that or expecting that though, I just like to learn and want to help out, and hacking is bloody fun!

I'm going to be trying different payloads in the next couple days, and I'm predicting MBAE has no problem with them, but we'll see.

Last edited by catsec; 12-18-2014 at 01:21 AM.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-18-2014 , 11:29 AM
Quote:
Originally Posted by KatoKrazy
...

Sorry, can't talk about system architecture. Pesky NDAs and everything...
Yeah I get that.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-18-2014 , 04:49 PM
What are the thoughts on using modules in Ruby/Rails purely for code organization?

I'm writing payment calculation logic to run the calculations on what we need to pay our users. The logic is tightly coupled to a class that has associations connecting to all the types of work completed and the other things we need to pay them for.

There's a lot of methods as we want to document EVERYTHING and often in a few different formats (time expressed in minutes, 15 minute intervals, and hours rounded to the nearest quarter hour).

It seems like it would be nice to be able to isolate this stuff in one place, but it's entirely useless to any other class than the one it's coupled to.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-18-2014 , 09:04 PM
Quote:
Originally Posted by Ezzalor
Code noob here

Is this code in java? http://forumserver.twoplustwo.com/19...-code-1443231/

Thanks
First line:

import java.util.Arrays;
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-18-2014 , 11:29 PM
Quote:
Originally Posted by blackize5
What are the thoughts on using modules in Ruby/Rails purely for code organization?.
I like doing this but you need to be careful how you go about it. When an object get's bloated it's a sign that the object is taking on more responsibilities than it should. Using modules to organize your code makes it easy to ignore this bloat. Overall I think it's a big win for maintenance if you don't let it get out of control.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 12:26 AM
I don't know about you guys, but I'm pretty excited about PostgreSQL 9.4. I'm looking forward to using jsonb.

Unfortunately, Archlinux is slipping. They don't have it available yet. Should I use pg_upgrade and hope for the best?
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 02:32 AM
Quote:
Originally Posted by Bantam222
First line:

import java.util.Arrays;
Sure, but I couldn't know for sure if it was java or not when I don't know any java. The language also looks a bit like c++, but I also only know a little bit of c++ so I couldn't be sure.

If I knew that "import java.util.Arrays;" gives it away that the code is java, then I wouldn't have asked the question.
____________

I rewrote the code to c++, just trying to learn c++ and also gain insigth into this algorithm.

I learned that c++ is different than java in that c++ functions can't return arrays. So that part had to be re-done. I've heard there's something similar you can do in c++ using pointers, but I haven't learned that yet.
Otherwise it seems java and c++ aren't really that different. I feel like I could learn java without to much work.
The code probably looks like mess to anyone who knows c++ or good coding practice.

It's here http://codepad.org/pSkk9i7T for anyone interested. If you want to use a regret minimizing strategy for the opponent, then just change line 62 to strategy instead of oppStrategy. You can also change the number of iterations in line 25 and the specific opponent strategy in line 8.

Next I'm gonna try Kuhn-poker using counterfactual regret minimization.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 02:37 AM
daveT,

I just installed this at work and thought of you since you said you only use the keyboard at work.
http://vimium.github.io

You probably are already using this though hah
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 02:50 AM
Quote:
Originally Posted by Barrin6
daveT,

I just installed this at work and thought of you since you said you only use the keyboard at work.
http://vimium.github.io

You probably are already using this though hah
I use the firefox version, and yes I love it.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 03:06 AM
To be pedantic, none of these are Java:

Code:
(java.util.ArrayList. [1 2 3])
Code:
l = gateway.jvm.java.util.ArrayList()
Code:
frame = javax.swing.JFrame.new("Window")
Code:
val jul: java.util.List[Int] = ArrayBuffer(1, 2, 3)
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 03:33 AM
That is pretty pedantic.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
12-19-2014 , 08:47 AM
A C++ genius that I have the upmost respect once wrote this to me, "using namespace std; is for idiots and should never be done" and to this day I admire him being so blunt. He never bothered to write a reason
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
$25m Guaranteed WPM on CoinPoker
Join the action now
Daily Rewards • Splash Pots • CoinRaces
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **

      
m