@RojoLoco said in Apple Earbuds:

Hey, without those new Apple earbuds, how would we be able to spot hipster douchebag scum?

With the old ones?

😄

@IRJ said in IDS?:

Sorry for so many questions. I have never used the open source version.

No problem. I'm not responding as fast anymore because some imaging jobs finished.

@IRJ said in IDS?:

@travisdh1 said in IDS?:

@IRJ said in IDS?:

@travisdh1 said in IDS?:

@IRJ said in IDS?:

@travisdh1 said in IDS?:

I've been using AlienVault's OSSIM, basically the open source version. It's been good so far, but I just deployed the agents to each server/workstation and haven't setup any custom rules, so it just uses the rules for currently known threats.

Do you find the agents useful? I am still testing the agents in a test environment.

OSSIM would be useless without them for me, honestly. without custom rules, or some way to get data besides the login, OSSIM is kinda crippled.

You use them for file integrity and registry change reporting, correct?

Yes. Mine has an internet connection, so it also gets the latest threat updates from the public pool.

You do the updates through SSH, right?

Yep. You just might get introduced to my basic update script on the 16th.

@stacksofplates said in OWA is vulnerable to Phishing:

@scottalanmiller said in OWA is vulnerable to Phishing:

@aidan_walsh said in OWA is vulnerable to Phishing:

@Breffni-Potter said in OWA is vulnerable to Phishing:

Ummm....as an attacker, why can't I just have a next page fake confirmation which forgets the profile photo (easy to overlook in a hurry) and get the password for google anyway?

Same again for the banking website.

Thats exactly what happens. You'd be surprised at what passes for phishing attacks, and how many people fall for them. I've seen ones that have asked people "for security purpose" to enter all 50 4-digit code card entries, something a bank would obviously never do.

And yet...

Partially that's because real banks have done that traditionally.

Like AMEX. I needed a password reset and they asked all of the info on my card, other than my name and expiration.

Yeah, it definitely still happens. And I've had huge security gaps that I've told a bank was not secure and they didn't care. I said... I literally have no means to tell if you are really my bank or not and they are just like "so, we don't care."

Don't have any idea what this sat was for. But FB is so big that they could have simple needs like wanting a dedicated line with zero third party costs or leaks that can move tremendous data between two countries internally without hitting an ISP.

@scottalanmiller said in Backup Business:

Hard to compete with the Iron Mountains, and Amazon Glaciers.

Amazon Glacier and BackBlazeB2, yeah. I haven't dealt with Iron Mountain in a very long time, are they still only doing the "secure box" thing? Also, are the prices still around $500/month for the smallest containers?

@travisdh1 said in Got a Pi:

@JaredBusch said in Got a Pi:

So where does everyone buy their Pi from?

I'm a fan of Adafruit, Element 14, and Jamco Electronics, Mouser, and Digikey myself.

I believe the Pi is sold but adafruit through Amazon. Adafruit is so slow, because they get so many orders, but through amazon they offer prime shipping.

Sure, why not?

Tecmo Bowl... there is a name that I have not heard in a long, long time.

@travisdh1 said in I passed....:

Good job...

Now, where do I get my evil overload certification?

EOC exams will be held on the second Friday the 13th of each calendar year, or on the eve of the first blood moon, whichever comes first.

WPA 2 hacking was also mentioned. What would do you guys really want to see?

@travisdh1 well then yeah, that's confusing.

@scottalanmiller said in CEH Training:

@IRJ said in CEH Training:

@scottalanmiller said in CEH Training:

That's pretty cool.

I am taking the cert test this week. I haven't scheduled it yet, but I am thinking friday.

Good luck.

Thanks. My test is scheduled for Thursday.

@JaredBusch said in Help with Helpy:

@IRJ said in Help with Helpy:

Here is the finished tutorial.

http://joelradon.com/installing-helpy-open-source-help-desk-on-centos-6/

Then you show adding the rails user to the sudo file with vi after adding nano.

Also, once you add a user to the wheel group, you should not need to add to the sudo file, isn't that the point of the wheel group?

you are supposed to use visudo to edit that sudoers file.

As far as installing nano twice, I may have missed that and copied it from the original.

I am not sure what the big deal is...

I have been hosting my own server for months and then I found something out really cool today. If you have CPanel access on your website you can install it one click on your web sever 🙂