HN user

Iwillgetby

94 karma
Posts19
Comments36
View on HN
news.ycombinator.com 6y ago

Show HN: Check if a Domain is common or sketchy

Iwillgetby
1pts1
github.com 6y ago

Show HN: Pi-Hole DNS plugin to encourage online learning at home

Iwillgetby
1pts0
www.reddit.com 6y ago

Show HN: Pi-Hole scripts that block until a student does 5 khan academy problems

Iwillgetby
2pts1
github.com 6y ago

Show HN: Encourage children to use the net more 4 learning with Pihole 5beta

Iwillgetby
32pts32
github.com 6y ago

“Encourage” your children to use the net more 4 learning with Pi-hole 5.0beta

Iwillgetby
3pts1
www.cyclingnews.com 6y ago

“Please don't forget us” as quarantine continues

Iwillgetby
2pts0
www.bts.gov 6y ago

US Airlines: new seasonally-adjusted high. Estimated 78M passengers in January

Iwillgetby
1pts0
news.ycombinator.com 6y ago

Could empty shopping malls be used to increase hospital capacity?

Iwillgetby
1pts0
gist.github.com 6y ago

Show HN: Top 50 IPs host 12M domains

Iwillgetby
2pts0
github.com 6y ago

Show HN: Dockerized “Network SNitch”

Iwillgetby
2pts0
news.ycombinator.com 6y ago

Terminal size matters, hackers get root in unusual way

Iwillgetby
5pts7
www.reddit.com 6y ago

Show HN: Detect DOH and Other DNS-Less IP Traffic

Iwillgetby
2pts2
news.ycombinator.com 6y ago

5 Links that shows how pspy works (github.com/DominicBreuker/pspy)

Iwillgetby
1pts0
darknetdiaries.com 6y ago

Jeremy from Marketing. See how much he can *hack* on his first week on the job

Iwillgetby
1pts0
darknetdiaries.com 6y ago

A story about Xbox hacking scene and how they pushed their luck too far

Iwillgetby
1pts0
news.ycombinator.com 7y ago

“Alexa/Harmonic Rank” Top 300 million

Iwillgetby
1pts0
news.ycombinator.com 7y ago

Wells Fargo, Citi and Chase are double reporting users credit card balances

Iwillgetby
2pts0
medium.com 7y ago

Scan 10M websites for X-Recruiting headers

Iwillgetby
1pts1
blog.jessfraz.com 7y ago

Challenge Accepted: Transposit

Iwillgetby
2pts0

devops should be done from 2 systems.

Dev (local administrator access ok, production access not ok)

Ops (local admin access not ok, production access ok)

Glad you brought this up. My day job involves finding malicious network traffic. DOH is really easy to detect because in suricata or bro/zeek you simply match new outbound connections with DNS responses. If you don't get a matching pair then you need to investigate why you have outbound traffic that is bypassing your DNS server. Note this is alpha stage code. I run this at home on all of my outbound traffic.

https://www.reddit.com/r/pihole/comments/embh63/i_made_a_thi...

Original.. https://github.com/morsgiathatch/suricata_edits/tree/master/...

Fork.. https://github.com/1stOctet/suricata_edits/tree/master/DOCKE...

I respect your viewpoint. I look at it more as a modern form of "you can go outside to play when your homework is done". Parenting is really hard in March 2020. Many of us are working at home and our children are glued to their ipads watching who knows what on youtube. Many parents can't be 100% present during work hours.

As someone said in the reddit post.. If my daughter figures out how to install a kali vm and then gets a reverse metasploit shell on the server, I would be so proud I would probably cry.

Key though is corporate infosec is similar to home infosec. If the user has local admin access, then the user can change any configuration.

[dead] 6 years ago

We believe in the restoration of paid janitors in Mormon church buildings.

Not long ago our Church paid custodians to professionally clean our buildings. The result was a spotless place to worship and vital employment for a ward member in lieu of Church welfare. Beginning in the early 1990s the Church eliminated paid janitors and asked (actually unilaterally assigned) members to clean the building. It was a way for the Church to save money and for members to enjoy the "blessings" of service.

Well, you get what you pay for! The sanitation in most LDS buildings is an absolute disgrace. And as for "blessings", we would rather enjoy the blessing of spending Saturdays with our families or serving those truly in need, while also giving certain members the blessing of gainful employment as a building janitor.

Please join us in adding your support to the restoration of paid janitors.

https://www.gopetition.com/petitions/mormons-for-paid-janito...

2 minutes is probably long enough. I did notice that google drive doesn't seem to like it if you upload a lot of files. I have had files sit and never get OCR, but I forgot about them so they may have OCR on them now.

Also, I am not aware of a signal when it is done.

If you upload a pdf to google drive and download it 10 minutes later it will magically have BY FAR the best OCR results in the pdf. Note my pdf tests were fairly clean so your experience may not be the same.

I have used Google's fine OCR results to simulate a hacker.

- Download a youtube video that shows how to attack a server on the website hackthebox.eu

- Run ffmpeg to convert the video to images.

- Run a jpeg to pdf tool.

- Upload the pdf to google drive.

- Download the pdf from google drive.

- Grep for the command line identifiers "$" "#".

- Connect to hackthebox.eu vpn.

- Attack the same machine in the video.

I thought the same thing. I played basketball on 100s of Saturdays in the 80s/90s and still think about the kind janitors that cleaned multiple buildings on Saturday. Many lost their jobs due to that policy change and it seemed like nobody realized the people lost their job because of it.

My cubicle at my last job was surrounded by a mountain of expensive printers because they would loose some funding if they didn't spend all of their budget each year.

If we ordered a server it would show up in 6 to 12 months and sometimes would be sent to the wrong place. The people in charge of ordering would replace SSDs with spinning disk and we wouldn't know about the change until the wrong parts arrive months later. Fun times.

This is fairly trivial for packet nerds using bro/zeek, pihole and iptables.

Zeek (or wireshark) can revel what domains and ip addresses are being accessed. Pihole and iptables can block those addresses. Pihole needs to be the only DNS allowed and iptables needs to be running in between the TV and its path to the internet.

Interesting. I searched a few terms and so far I like it. For me, it is faster for my brain to recognize a familiar icon than to read several chars. Searching sacramento for example I can quickly see wikipedia, usnews, sacbee. I hope google monitors for malicious icons that try to trick users to go to phishing sites.

This medium post is long, but has a lot of great insight about security.

https://medium.com/cloud-security/how-network-traffic-got-me...

"After I figured out how to turn off the malware, I went back to my hosting company. I didn’t bother to tell them what I discovered because at this point it seemed futile. I just asked them to deny outbound network access I didn’t need. My computer didn’t initiate outbound connections to anything. It only replied to requests it received. I only wanted to allow the most minimal traffic required for my applications to run correctly. They argued with me! They said no one checks outbound traffic. I said I didn’t care what everyone else does. I wanted to block it. I figured out how to do it myself. I had very restrictive network rules in my firewall settings that only allowed what the applications on my server required."

Of course you don't want to block your web servers ability to get updates. But it is important to understand that web servers are web SERVERS. This means that they rarely initiate a new connection, they receive new connections from web browsers.