>>110027899
>Recommended operating systems
General purpose: Debian, Fedora, Arch Linux, Xubuntu, Linux Mint
Security focused: Qubes OS, Whonix, Tails, OpenBSD

>Recommended mobile operating systems
Android based: GrapheneOS, CalyxOS, LineageOS
Linux based: postmarketOS, PureOS

>Recommended browsers
Chromium based: Brave, Helium, Chromium (ungoogled)
Firefox based: Waterfox, Zen Browser, LibreWolf, Tor Browser
Firefox with Zero user.js: https://pastebin.com/NrthvPas

>Advanced content blocking
https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode

>Browser tests
https://www.deviceinfo.me
https://dnsleaktest.com
https://librespeed.org
https://time.gov

>Recommended search engines
Brave Search, SearXNG, DuckDuckGo, Startpage

>Privacy oriented DNS
https://adguard-dns.io/en/welcome.html
https://nextdns.io
https://quad9.net

>Privacy oriented email
Proton Mail, Tuta, Mailbox Mail, Riseup, Disroot

>Recommended instant messengers
Signal, SimpleX Chat, Briar, Element

>BIOS replacement
https://coreboot.org
https://libreboot.org

>Resources
https://www.privacyguides.org
https://ssd.eff.org
https://ryf.fsf.org/products
https://haveibeenpwned.com
https://inteltechniques.com/workbook.html
https://eldritchdata.neocities.org
https://stallman.org/facebook.html

>>110027856

Easily the most secure os, this should be obvious

>>110027936
will i have to fiddle with it 24/7 or is it stable?

>>110028002

do we have any proof bluetooth stuff is broken/easy to eavedrop?

>>110028067
https://app.opencve.io/cve/?q=bluetooth

>>110028129
tf am i supposed to understand here
there's a critical CVE two days ago
10 high in last 3 days

So should I disable bluetooth fully and never enable it again or wtf?

File: Hackers - Kevin Mitnick.png (1.61 MB, 1280x1519)

1.61 MB PNG

Threadly reminder certs are for pussies. Real MEN hack because its the manly thing to do

How is Fisheye Placebo going?

>>110029547
what's a cert

>>110031313
Something only pussies do

>>110028486
>tf am i supposed to understand here
BT started off as a really badly done design badly supported by a really bad spec. You could have two companies implementing the standard to the letter and still be incompatible. 20 years ago it was risky buying BT equipment from different providers, now it is better.
Specs have improved but are still bad. Security is a cool idea that will wait for a later time, so better to focus on new shiny, just like the clowns in KDE. The results are only surprising to the guilty who double down on more shiny and little in terms of bugfixing.
So now we have a massive surge of LLM driven searches for security holes which are duly found, in spades. Clowns remain astonished.
Meanwhile, normal people should turn off BT as much as possible. A certain life style appliance company deciced for its acolytes that with every upgrade, the BT is turned on. What could possibly go wrong?

File: 8dab07632ff5f59cb1141ad91(...).jpg (399 KB, 750x1000)

399 KB JPG

>>110030459
Overall pretty good, a shame its going at a very slow speed

s there such thing as a linux antivirus/malware?

>>110032680
Yeah, it's called common sense.

>>110031628
nta, but what about the little usb bt that come with keyboards and mouse?
i prefer wired, but due to my current room constraints I have to use those and not wired,

>>110032715
oved to linux, and while I didnt have any mayor issues for like 13 years on windoes, I still ran a full deep scan Avira (years ago before it went full retard) and Malwarebytes,later just windows defender and malwarebytes every couple of months or so, so I was wondering

>>110032651
I can't wait for more chapters, art is amazing

Which Linux distro is safest?

File: 1779680230122298.png (442 KB, 670x769)

442 KB PNG

how do i into /sec/

>>110032764
NTA, I haven't seen bt keyboards in the wild since forever. Not like their proprietary trash is much better.

>>110034634

all are compromised, none use up to date kernel

>>110032764
Years ago, I worked for a defence contractor, and we were ordered never to use wireless keyboards of any kind. And there were controls, supposedly.
Also, HR managed to get exceptions, for reasons that were never clear.

File: 1677999203809.png (240 KB, 1398x683)

240 KB PNG

>>110036395
>none use up to date kernel

>>110036657

upstream n-days happen every month

>>110036412
HR are always like that, I hate them so much

Monthly Brave shill thread

>>110029547
Exactly, the superiority that you gain by brutally mogging your enemies and companies is the only cert you need.
Street cred > certs

>>110037355
This unironically. Mitnick was never seen chasing any certs and awards like a good little boy. But he got so famous because he focused into hacking itself.

>>110034802
I suppose you you're talking about a job in cyber.
Short answer:
>It depends. Cybersecurity is a multi-domain field (IT, programming, project management, law), so you can pick your poison and go from there.
Even shorter answer:
>Git gud

>>110038256
How do you git gud?

>>110039012
By actually enjoying what you do. If you're driven to cybersec for the money then you'll bounce off the field. There's a shit ton to learn depending which domain you choose (Blue Team, Red Team, GRC), even more you can specialize within domains depending on the size of the org:
>Blue team - Firewalls, SIEM/SOAR (implementation, upkeep and alert handling), incident response (often grouped into blue team but could be it's standalone domain), vulnerability tracking and management, attack surface reduction/hardening, upkeep of antimalware solutions (from run of the mill antivirus software to boutique solutions like EDR/MDR/XDR), upkeep of IDS/IPS, cybersecurity architecture (cross-domain with GRC)
>Red team - pentesting (simple assignments/jobs and whole red team exercises), phishing campaigns/social engineering, even physical pentests for some companies, reverse engineering
>GRC - SME (Subject Matter Expertise), policy creation, risk analysis, cybersecurity laws (local and international for some instances), SSDLC management, handling incident reporting to local gov agencies

Often starting out in cybersec means becoming an IT specialist or programmer first and then advancing into the role after gaining experience. And there are a lot of pitfalls and dead ends while choosing your job at the beginning of your career (you wouldn't want to become a glorified human detection system working graveyard shifts, weekends and holidays at a SOC and staying there because you don't have any other skills other than log analysis and alert handling)

>>110039674
Yeah but is it even worth it anymore?

Why not just use AI agents to hack everything?

>>110034802
certs!

File: pic.jpg (76 KB, 1080x800)

76 KB JPG

>>110031313
a source of retsyn
it's what plants crave

>>110041904

that's what most hackers are doing

>>110045150
What happened to the good old days?

>>110046354
The internet became popular

File: G_O3UPpW4AAvs6n.jpg (484 KB, 1080x1350)

484 KB JPG

Page 10?? Deploying counter measures now: https://www.youtube.com/watch?v=SW4F7psrTgY

>>110049285
Are there any lunarpunk suits for men?

Reminder: you don't hate the surveillance state dweebs enough

Hopefully when trump loses the current people wasting tax dollars annoying me get the pink slip, or a padded cell

>>110050851
rent free

>>110050568
I agree, they are the worst!

File: HUVSJmHbgAAmNZw.jpg (1 MB, 1728x1728)

1 MB JPG

comfy thread
https://www.youtube.com/watch?v=kJtr_SqGerM

>>110050992
Bone marrow transplant.

>>110050851

they never fire or prosecute until someone figures out they wasted millions

What's the consensus on using two browsers? One for personal browsing, the other for work. I'm tired of logging in and out every shift of at least 6 websites
I haven't installed any password manager on current browser and probably never will

>>110053122
I use Brave for 4chan, Firefox for all the legit stuff that requires login.

>>110051840
I'm afraid this IP is going to overshadow all the cyberpunk aesthetic, at least on the normie orbita

>>110053190
Agreed. Though edgerunners seems more interesting of the 2

>>110053122
the only password manager you need is between your ears

>>110053122
Tor or bust!

>>110054866
Tor fails with government apps

>>110032680
Are you asking if there's anti-virus and anti-malware software for linux or are you asking if there's anti-virus software and malware for linux?

>>110050528
>Are there any lunarpunk suits for men?
If they exist I have not seen or even ssearched for them. I saw somewhere that the visual aesthetics of Lunarpunk is from the movie Avatar.

>>110056706
>I saw somewhere that the visual aesthetics of Lunarpunk is from the movie Avatar.
Added:
https://igwiki.lyci.de/wiki/Cyberpunk_Timeline

>>110034802

nothing of value was lost

>>110058171
Nice job, anon!

>>110032680

clamav, but it's kinda weak. linux has pretty bad security compared to windows. ebpf is ok.

>>110061900
>linux has pretty bad security compared to windows
maybe in the old days before wayland and systemd

>>110062508

you're talking about code quality issues, but systemd is a serious liability. linux has bad security controls unless you use something like grsec or selinux with ebpf filters.

>>110062537
you're conflating attack surface with security controls. selinux has been built into mainstream distros for years. apparmor, seccomp, namespaces and capability restrictions also exist without grsec. windows has better-integrated defaults in some areas, not some inherent security advantage. ebpf doesn't magically fix a bad security model either.

>>110063099

yeah, but you have to tune linux security controls pretty heavily for the system and apps. none of that is default unless you use redhat/suse. windows does meet higher eal standards and has better logging.

>>110062537
What is so bad about systemd?

What's the schizo approved tv streaming box? My Shield is dying and since I'm all about privacy now, I don't want to replace it with the next SpywareOS.
Linux seems a given, but then what? Kodi? Plasma big screen? Tell me about your setups please.

what thread can i ask about password managers and passkeys?

>>110064843
It is huge and complex and updates tend to touch many parts. The attack surface is huge.

>>110065760
the only password manager you need is between your ears

>>110066592
hmm, nyo

>>110066374
Need to get better at Linux

>>110063432
sounds like a skill issue

Anybody in this thread who has used cock.li in the past? I am no longer able to receive or send emails from my @tfwno.gf account, nor do they seem to offer those anymore. I am able to receive or send emails from my @420blaze.it account, though

>>110067777
>trusting vincent with your email
lmao

>>110065760
This one works, use keepass anon. Its the best one

>>110065760

bitlocker. any passkey works.

>>110067705

sounds like you have too much free time

>>110070087
sounds like you weren't burdened with an overabundance of schooling

>>110071332

i have stuff to do and playing with linux settings is ridiculous. if you think it's hard instead of time consuming, then school wouldn't help you.

>>110071709
>he can't make a simple bash script to configure his settings automatically
sad

>>110071719

>not using chatgpt to do it for you

ngmi

File: Hackers Ahead.jpg (76 KB, 500x538)

76 KB JPG

>Cybersecurity job market in the shitter
>(Actually the job market in general, but this question is about cybersecurity)
>Vibecoded slop ever more prevalent
>Social cohesion breaking down (arguably)
>CISA gutted
>AI agents supercharging individual manpower
Are we soon going to see a massive surge in unemployed pentesters and shit hacking for money?

>>110029547
damn I missed that this guy died

File: Hackers - Captain Crunch.png (484 KB, 690x481)

484 KB PNG

>>110072168
>Are we soon going to see a massive surge in unemployed pentesters
GOOD. Fuck those faggots and skids, we need a return to REAL HACKERS

File: fridge hacking.png (1.68 MB, 1280x719)

1.68 MB PNG

C'mon faggots, lets at least discuss something actually useful in this thread
>Thousands of refrigerator devices remain exposed following French cyberattack
>The investigation points to a much wider risk for industrial systems across the globe.
>Days after a cyberattack targeting French supermarket refrigerators, thousands of controllers across the globe are visible online and at risk of compromise.
>Hundreds of grocery stores in France were targeted in a sophisticated attack, in which hackers gained access to programmable controllers that regulate commercial refrigeration systems.
>Hackers were able to manipulate controls inside the refrigerators, causing systems to overheat – and in some cases catch fire – leading to millions of dollars in damage.
>Hackers targeted vulnerabilities in Danfoss AK-SM, Danfoss AK-SC, Copeland xweb and Dixell xweb controllers, according to ANSSI, France’s national cybersecurity agency.
>About 350 instances of the Danfoss AK-SM 800A remained exposed as of Wednesday, down from more than 550 earlier this week, according to researchers from Shadowserver Foundation.
https://www.cybersecuritydive.com/news/thousands-refrigerator-devices-exposed-french-cyberattack/833117/
>>110072825
>Fuck those faggots and skids, we need a return to REAL HACKERS
THIS

=== /re/ News:
>Claude Code / AI Shows Potential For Reverse-Engineering Hardware For Linux Support
https://www.phoronix.com/news/AI-Reverse-Engineer-Linux-HW
>Christian Schaller of Red Hat wrote a blog post today to highlight his recent adventures in beginning to reverse engineer hardware for Linux driver support. After finding his Pustek 8200i negative photo scanner failed to work on Linux, he leveraged Claude Code to get a basic SANE scanner driver working for Linux. Claude Code was used to reverse engineer the hardware support via access to a Windows VM with the vendor driver there. Via capturing and inspecting the USB activity, Claude Code was successful in developing a driver that is now working for this negative photo scanner.


Similar work has been goinf on against radio devices with remarkable success:
https://www.rtl-sdr.com/birriasdr-2-4-5-ghz-sdr-discovery-on-a-mass-produced-usb3-0-wi-fi-dongle/

>>110073506
Literally everybody knew all along that appliances like refrigerators have no need to be controlled remotely over the internet. Tell any person about this story and they'll think you're joking.
>Hacked a refrigerator? Like they went to the store and turned the little knob up?

File: 1775980936241521.jpg (53 KB, 519x518)

53 KB JPG

Should I get a pixel+graphene if I'm still gonna use social media from time to time (meta), have my ISP track me 24/7 and pay for everything with my debit card? I think that the benefits of privacy that I would gain with it don't really make sense for my use case.

Maybe a non chinkshit phone (stock pixel, nothing phone) is enough for my needs.
I don't wanna get into the Apple ecosystem so do not recommend me an iPhone

/k/ here
Just shoot the routers. No connection=no security threat
So easy!

>>110074612
Just shoot yourself while you're at it

>>110072056
>muh ai slop
move along tourist

>>110074828

keep compiling gentoo

>>110074867
meme distro

File: 8990a98e3589a451cf2ae660b(...).png (154 KB, 1080x1350)

154 KB PNG

>>110074013
What is funniest is that one barbecue grill that you couldn't turn on while it was "updating its firmware"

>>110076188
Who thought that was a good idea?!?

>>110076511
Probably one of those wantapreneurs who have no idea but think adding "current thing" to product will automatically improve it

>>110074612
Gonna try this. If I don't report back, that means it worked.

>>110078236
How the fuck may it possibly not work? Only if the routers shoot you back, but then you won't report back all the same!

>try to do a security audit of MY OWN CODE with opus 5.5
>anthropic: not going to happen bro, we flagged your prompt as insecure, switch to opus 4.8 to continue
Fucking faggot ass shit.

>>110079683
What is wrong with opus 5.5?

File: grapheneOS.jpg (29 KB, 1200x675)

29 KB JPG

What is a good smartphone model for someone wanting to be anonymous or at the very least more private? Graphene os hardened firmware hacked phone or is there a Tails version for phones?

>>110082924
There are no secure phones

>>110082924
Nokia 3310

File: Yaesu-FT-70-Transceiver-e(...).jpg (72 KB, 900x566)

72 KB JPG

>>110082924
>smartphone
You need to step up your game.

>>110027899
>use pixel 6 pro with grapheneos since release
>EOL hit this month
>buy refurbished pixel 8a because money is tight
>supposed to be fully unlocked
>check IMEI
>verizon
looks like i'm returning this is just keeping my pixel and switching to lineageos instead

>>110086900
Is lineageos better than graphene os?

>>110088507
grapheneos only supports devices so long as they are still supported by google. lineageos still support devices even long after they have reached their official end of life

>>110085002
Doesn't that provide open signals that can simply be scooped and read?

>>110088560
Oh I see that makes sense

>>110089146
Depends. There are ways around interception, that is why Signal Service school is more than one week.
A semi advanced trick is to use CCW, transmit way below the noise floor and use non-standard timing. About 5 watt will get you reliable communications around the world.
Of course you could use steganography and hide the CCW in normal CW.

>>110092447
That is something worth trying I guess

Kind of
=== /cyb/ News:
>The moral case for human music
https://archive.is/Td55k
>If you listen closely, you can hear the slop. An Apple Music executive said in April that more than one-third of the tracks being delivered to that streaming service were “100 per cent AI”. According to the French streaming platform Deezer, 90,000 fully AI-generated tracks per day were uploaded there in June, more than quadruple the number a year before.
>The worry can’t be that AI-generated music must sound terrible: it’s getting to the point where many people can’t tell if a piece of music is AI-generated. And it obviously can’t be that musicians object to the use of fancy digital tools to make music; they use these all the time and are happy about it. The real grievance is moral in nature — and Shulman’s comments help us to diagnose what exactly this grievance is. Specifically: promoting an AI music-generation app as a way of making music requires promoting the view that making music is a mere means to an end, with no value in its own right. This view is false. And since musicians are people who have built their lives around the value of making music, the promotion of AI music-generation software constitutes a public insult to musicians — one that is built on a misunderstanding of what it is to make music, and why it matters.

A lot of professions are already facing a reconing they thought would never happen. Illustrators, models, consultants, translators and now composers and musicians are in dire straits. Once they were high flying with high babe factors, now many will be out on the streets. Dystopia just keeps on growing.

>>110095830
Humans will be replaced...and that's a good thing!

>>110096750
How will humans be replaced though?

>>110095830
That's what they get for churning out mediocre shit like tailor swift for 20 years and jerking each other off at grammys giving each other bullshit awards.

File: Duck-ai-image-2026-09-24-17-18.jpg (223 KB, 1402x1122)

223 KB JPG

>>110096803
With Eudeamons, perhaps?

>>110096803
As it is right now, with bots!

>>110097552
If only, anon

File: katrina_winter_s_isle_by_(...).jpg (479 KB, 1280x960)

479 KB JPG

>>110099708
I think it is inevitable. Just imagine the enormous income from 3 million prisoners turned into Banes and made to work in Amazon stores, for free? At the same time you can use their minds to train even more LLMs.
Clearly, there are no reasons why this would not happen.

>>110099708
This is how Apple will do it:
https://shitter.thepixora.com/latexspacebabes/status/2099543002192425177#m

>>110095830
It's not what the article says.

File: 1775080122188859.jpg (21 KB, 320x245)

21 KB JPG

my grandma smartphone got hijaked
if you push the shutdown button it activates the microphone and a AI assistant starts
I think it was the ads popping during her gamming sesion
this device can't be shut down cause it doesn't have a removable battery, so I don't know where to start
I can't acces any app or navigate the menu.

>>110100372
The greentext is straight quote, the last black line is mine. The author is a philosopher
>A philosopher of music argues that AI music-generation software ‘is an insult to musicians’

The argument is like mass produced shoes being an insult to hand crafted shoes. Sure, we have seen these arguments many times in the past and I hope most people know how that ended. Craftsmen, musicians and composer wil care about the journey. People listening to the music rarely do. And the article is straight up wrong in this:
>The lights go down, the band comes out — and then, someone presses “play” on a laptop, the album starts playing on the house speakers and the band stands there waving at the audience for the rest of the evening. You would be outraged.
This is, of course, totally wrong, and also the comments field pointed that out:
>That is what actually happens at stadium shows! No margin for error… it’s largely been shipped to the venue in prerecorded form. Doesn’t everyone already know that?

What is new with LLM based AI is that it will eliminate a lot of high paying jobs that requried a lot of training and advanced degrees. I am in one and I can see this every day. We have not hired anyone for years and we are unlikely to do so in the foreseeable future. About 1/3 of my colleagues are older than 60. And nobody will talk about how this will end.
It used to be that tech eroded the low education/trained jobs. That trend will now continue but today it looks like trades are far more secure than, say, consultants.

>>110101918
What will come next?

>>110102631
COO positions will probably be automated.
CFO is an interesting case, might be outsiourced but then again it turns out that auditors only discover less than 1 percent of all fraud. Accounting and auditing are protected by laws but those are way overdue for an overhaul. Accenture shares are nosediving, the writing is already on the wall. Until auditors are nailed to the wall for their failures, the dive will continue. Most likely, accounting and auditing are due automation and AI treatment. If auditors go, that will impact a huge number of well paid positions. All together, about 1.7 million jobs in the US alone.

Google maps limits reviews and photos for people that are not signed In now
That was the only reason I used Google maps or a google product, now I never have to use Google again

>>110104293
I remember the era of "don't be evil" but that is now a long, long time ago. The rot just never ends.

>AppSec/DevSecOps

1 to 10 how over is it

What are you going to hack this week, anon?

>>110105502

7/10. the vulnpocalypse has started.

Can US based Linux distros be trusted?

>>110109462
All open source distros can be trusted, someone is bound to compile from sources and compare.
On the other hand you cannot trust the binary blobs in any distro, and there are many of those.

>>110109462
Rule of thumb:
- if you feel like you should blindly trust something for no other reason but because of its relation to IRL countries or any other IRL organizations, you're broken beyond repair and should kill yourself.
- if you feel like you should blindly distrust something for no other reason but because of its relation to IRL countries or any other IRL organizations, you're likely wrong still but you should triple check everything anyway. If nothing else, because conditioning yourself to ignore your hygienic instincts in matters of security can turn you into a slob in all other respects, too. Your reptile brain doesn't know the difference between "eww it's made by Weyland-Yutani" and "eww don't deepthroat this decaying body".
- if somebody tries to convince you to blindly distrust something for no other reason but because of its relation to IRL countries or any other IRL organizations, he's a mental threat and should be raped, killed and cannibalized. Unless he's your mom or rms. Mom knows best, and so does Stallman.
- if somebody tries to convince you to blindly trust something for no other reason but because of its relation to IRL countries or any other IRL organizations, he's a mental threat and should be raped, killed and cannibalized. No exceptions.

>>110109896
Honestly very good rules of thumb

>>110109516
That someone might be full of shit too

>>110100229
Honestly I kind of doubt they'll need organics to do the job when robots can do that much better and not ask for stupid shit like payments or time to sleep.

File: 91Xtj7-nM3L.jpg (138 KB, 727x1000)

138 KB JPG

>>110109896
instruction unclear but, still had a great evening.

>>110112316
So far, humans are more dexterous and have better coordination. Robots might get there one day but that will take some time. Also, a human brain uses just a few watts doing what takes several kW for a computer.

>>110112316
I would never expect them to pay prisoners in banesuits.

File: Model:_P80_+_R_219-247111(...).jpg (3.87 MB, 2998x2027)

3.87 MB JPG

Someone died and now the executor needs the email address as part of shutting things down like the Internet service. He already has the password, just needs the email address which might be in this PIN-locked tablet.

The text "AI cam" is seen on its camera, and I'm pretty sure it's an Android tablet. (Camera is in the top right of this photo of the hardware, can't see the "AI" text in this picture though.) Since it's probably a version of Android from roughly 2022 to 2025, there's no way to bypass the PIN. Everything in it is likely encrypted, tied to the PIN unlock. No way of getting the data in it, sadly. Perhaps the best I can do is pull off a factory reset. Text seen on this device:
- Model: P80
- RoHS
- 24(4+20)+128GB DC IN:5V 2A

Had trouble researching this and determining the make or model. Like where I could buy this online. Could use that research to then use an exploit that might exist for this.

I successfully factory reset and therefore unlocked an Android smartphone in the past, but that was a phone from like 2015.

File: fingerprint.jpg (2.65 MB, 1534x1407)

2.65 MB JPG

>Text seen on this device
- R 219-247111
- P80YPDU15Y25901255

>The text "AI-CAM" is seen on its camera
Attached pic

(My DNS is screwy, and https://sys.4chan.org/g/post is used to make a post here. Info which is useful to me.)

File: this-but-in-english.jpg (295 KB, 720x540)

295 KB JPG

>>110115263
It does run Android. It's apparently a Relndoo branded tablet. The screen size is 11 or 12 inches (this tablet was found in USA). This picture of it is from
https://www.daangn.com/kr/buy-sell/relndoo-안드로이드-태블릿-블랙-미개봉-새제품-ndi3o9rqqspo/

The unlock screen looks like this but in English, with the text "Unlock for all features and data" at the bottom. Relndoo seems to be an obscure brand, but the version of Android that it's running matters more.

Anyone have experience unlocking or resetting these?

File: 515436136_222615063114700(...).jpg (163 KB, 945x1601)

163 KB JPG

>>110115478
>unlock screen image
Looks AI-generated.

>resetting these
Resetting it is as easy as this:
https://www.youtube.com/watch?v=Nnj7cIVtf_E

So I should be able to do that. But yeah, probably no way to bypass the PIN. I hope I can replace the OS with GrapheneOS: then it will no longer be raped by Jewgle. This tablet runs Android 14 or Android 15 and has 24 GB of RAM. (Source: this image from someone selling a similar model on Facebook.)

>>110113400
Huh now that you mention that might work

>>110109462
Ideally you'd compile it yourself to ensure it works. That's how open source works

Imagine being a fucked up freak in the surveillance state trying to use illegal surveillance to "rehabilitate" and try to do "therapy".

Cannot wait to live this failed surveillance priso- I mean absolute joke of a country.

If the US government hired a representative to sit across from me in a recorded love debate I would refute every single reason or incentive when it comes to "rights" and "being american"

>"You had it good, now you need to he humbled ;)"

Raped mindset.

>>110117434

you nuts? they're trying to kill you.

>>110117506
I'm not nearly important enough

>>110117459
>be born in russia, get blown up by a drone because putin needs to annex another 5 meters of ukraine
>be born in china, get your organs harvested because you said xi looks like a cartoon bear
>be born in uk, get stabbed to death because you criticized the religion of peace

File: eee825d568492a41675d00587(...).gif (1.27 MB, 1920x1080)

1.27 MB GIF

How are YOU helping make a haven for cyber and cryptopunks everywhere, anon? Running any tor nodes?

>>110120244
How do you even run a tor node? Why would you want one?

>>110120818
You can clone the repo

his agent broke, how cute

>>110120244
I compile files to share with you all. And now that Valis.moe is in trouble, we will once more have to hunt for a new home:
https://valis.moe/
Any suggestions how to share files securerly, anonymously and without too much difficulties?

>>110027903
>Signal
>blue whatsapp
use case?

>Firefox with Zero user.js:
I'm having a hard time passing cloudflare captchas when user agent switcher is active.
I'm trying to blend in by settings my UA to firefox on windows, but creepjs still detects the actual OS through iframes and workers. I am doing that because EFF fingerprint tester flags linux user agents are more unique than windows' ones

Any way to beat creepjs on firefox?

I am specifically focused on those two in particular because they are the most transparent about what they detect. If there are more comprehensive fingerprint leaking tests out there I'd like to know.

>>110122848
>I'm having a hard time passing cloudflare captchas when user agent switcher is active.
user agent switcher is a meme

>I am doing that because EFF fingerprint tester flags linux user agents are more unique than windows' ones
fingerprint testers are a me

>Any way to beat creepjs on firefox?
switch to helium, it's faster than firefox and has real fingerprint protection

File: 1btc=82799.28usd.png (218 KB, 1276x902)

218 KB PNG

>>110115717
After doing the factory reset, you may need to bypass some shit which tries to reuse the old account. FRP can be annoying but hopefully not impossible to overcome. A SERP said
>Factory Reset Protection (FRP) is a security feature on Android phones that blocks anyone from using the device after a factory reset unless they sign in with the same Google account that was previously on the phone. FRP is enabled when a Google account is added and a screen lock is set, so a reset alone does not remove it.

>>110115327
>R 219-247111
Seems to be something about that:
https://gitekikun.com/number/219-247111

>>110120244
>>110120818
To run a tor node (entry, middle, or exit) you have to enable port forwarding in your router's settings to expose your IP address -- running a Tor service -- to the public Internet. There was some "Snowflake" browser extension to help with being an entry node, but it's been years since I ran that.

When running an I2P node, port forwarding is optional. In that case you'd enable it for the added throughput and connectivity bonus.

>How are YOU helping make a haven for cyber and cryptopunks everywhere
"Cryptopunks" as in cryptocurrency I guess. I mine Monero, run a public good IPFS gateway in I2P and Reticulum, and I give crypto to AR miners for their services that I use. BTW, searching "cryptocurrency" in DDG shows picrel price of Bitcoin in USD.

File: 200.png (10 KB, 300x100)

10 KB PNG

Dead Internet theory from enwiki (in category "Cyberpunk themes"):
>The dead Internet theory[a] is a concept that asserts that the Internet consists primarily of bot activity and automated content manipulated by algorithmic curation.[1] Originally conceived as a conspiracy theory that the phenomenon is a coordinated effort to control the population and reduce genuine human interaction, the concept is also employed colloquially to describe the impacts of generative AI and emphasize only the core observations without speculating on the driving forces.[b]

Some parts of the web are so popular that people make money off of it. Such as social media. Money and reputation is involved, which motivates influencers and other scum to lie.

Other parts of the web are less popular, like imageboards. I have heard of or participated in non-4chan imageboards where there's barely any discussion besides my own posts. It becomes like a blog. Not throwing shade on that, just saying that they are kinda dead.

Public Internet forums are reduced with fuckass Discord, which remains popular regardless of its enshittification. Discord is not public discussion which can easily be archived.

File: https-lokinet-org.png (173 KB, 1920x1080)

173 KB PNG

>>110123818
>To run a TOR node (entry, middle, or exit) you have to enable port forwarding in your router's settings
I could easily make that change to the settings, but I don't want to for certain reasons. Why aren't there more users volunteering to support Tor infrastructure? This is part of it. Some don't want to or can't make that change to their router.

Lokinet is similar to Tor and probably less popular than I2P. To run a Lokinet node, do I have to enable port forwarding in my router? Shortened LLM reply:
- yes, if running a public Oxen Service Node
- no, if using Lokinet as a client

>>110121834
That website is shutting down. I added that info to the Archiveteam wiki: see article section "Deathwatch#2026-10". Maybe the fuckers running ArchiveTeam will do something about it.

>>110123818
>I give crypto to AR miners for their services that I use
I have paid them to archive this video:
https://ario.zigza.xyz/raw/e4TzxyZdXH2cAT7BSVVGTxiY57lzwr8C90LQlSaeF-A

Hi there this is probably not the best place to ask but I'm desperate.

I'm running a tiny server for a small company and we just received a notice about a data leak. We only got informed because it was posted on X. The post on X shows a sample file and a supposed ransom note. For obvious reasons I want to verify this sample file and using the contact on the post shouldn't be the first option.

Do you guys know of a way or site were I could find this file?

Are we back?

>>110125458
Go to Google maps and search for "synagogue near me". This will be the source of the hack. Call the police, then they will arrest you for a hate crime, and you can use the discovery process at trial to obtain a copy of the file.

well that happened

where is cock.li in the mail section
can you guys take a look at tor.taxi

File: from-bafkreifl7yimm37vwux(...).png (6 KB, 1024x768)

6 KB PNG

HOW do COPS and GLOWIES access the data on your locked phone? After seizing the Android or iOS mobile device they will determine if it's in a Before First Unlock (BFU) or After First Unlock (AFU). Then they will use a Universal Forensics Extraction Device from the Israeli company Cellebrite to extract the data.

Decryption keys are available in the AFU state and hardly anything can be extracted when its in a BFU state. BFU = mobile device was just powered on and not unlocked yet (correct PIN or password not entered). AFU = device was unlocked then locked without being powered off.

Cellebrite uses zero-day exploits which aren't public knowledge, otherwise their products wouldn't work due to stuff getting patched. Some schools uses Cellebrite UFEDs to unlock students' devices. A UFED is some hardware that law enforcement and authority figures have, maybe consumers can buy it too. Their stuff only works on certain iOS and Android versions.

I learned about this when researching for the <s>ReIndoo</s> Relndoo tablet I posted about above. Sources:
https://blogs.dsu.edu/digforce/2023/08/23/bfu-and-afu-lock-states/
https://en.wikipedia.org/wiki/Cellebrite_UFED
https://www.youtube.com/watch?v=F7xawqxI260

>>110126273
You are talking about when the captcha box / iframe here was replaced with
>Temporarily unavailable
>Posting, captcha, sign-in and other dynamic pages are offline while we apply an urgent PHP security update.
>
>Boards and images can still be browsed. We expect to be back shortly.
then later
>4chan is temporarily read-only while we await an urgent PHP security update.
I have copies of those webpages from https://sys.4chan.org/captcha

>>110126749
>trusting vincent with your email
kek

File: page-1.webp.jpg (1.81 MB, 1600x2473)

1.81 MB JPG

Some comic about the recent 9.2/10 critical PHP vulnerability. Source:
https://calif.io/php2shell/

1/?

File: page-2.webp.jpg (1.56 MB, 1600x2473)

1.56 MB JPG

>>110127815
2/?

You can read some technobabble at the following link and run an unofficial partial proof of concept:
https://jackalsyn.com/posts/php-up-2026.html
>Steal Everything Leave Nothing
>PHP-UP-2026
>Stage: CVE-2026-109618 / -109619 (PHP session.upload_progress heap UAF)
>Author: J4ck3LSyN (ATLAS)
What does it do? Not clearly explained. Crashes some PHP site or something.

File: page-3.webp.jpg (1.72 MB, 1600x2473)

1.72 MB JPG

>>110127815
3/?

($ ffmpeg -i page.webp -q:v 1 page.jpg # deterministic webp to jpg at best quality)

File: php_page4.webp.jpg (1.55 MB, 1600x2473)

1.55 MB JPG

>>110127815
4/?

Wikipedia:
>PHP2Shell is a set of two high-impact vulnerabilities in PHP versions 5.4–8.5, known under Common Vulnerabilities and Exposures IDs CVE-2026-109618 and CVE-2026-109619, that allow remote code execution (RCE). Their existence was publicly announced on 20 October 2026.[2] An emergency patch and details about the vulnerabilities were released on the following day.[3]

File: php_page5.webp.jpg (1.54 MB, 1600x2473)

1.54 MB JPG

>>110127815
5/6

>This demo shows the exploit running against Nginx with PHP-FPM:
>https://www.youtube.com/watch?v=cE4h79AWbT4

File: 1785.png (223 KB, 720x1604)

223 KB PNG

well well well

File: php_page6-panel-1.webp.jpg (561 KB, 1600x2473)

561 KB JPG

>>110126790
>4chan was read-only due to the PHP situation
Website megalodon.jp is still down:
>ウェブ魚拓はメンテナンス中です
>お知らせ(affility.co.jp)
translation:
>Web Gyotaku is currently under maintenance
>Notice (affility.co.jp)
(they also had an earlier offline message.)

>>110127815
6/6

>Here is a demo video of the exploits running:
>https://www.youtube.com/watch?v=pfWZrdzvooc

Did Calif Research release that code? I guess not.

File: from-bafybeigb3ebvc4fwc5s(...).png (19 KB, 1024x768)

19 KB PNG

AI has been used to help jailbreak or just break stuff, such as:
- PS5 video game console
- PHP web software

Sadly these have not yet been cracked wide open (AFAIK):
- Switch 2 video game console
- Newer versions of Android (14 to 17)

>>110127894
Kill all PHP websites, I'm sick of the URLs containing "?". PHP URLs like /index.php?blah=blah&herp=derp are bad for multiple reasons. Better: /index/something/something (no question mark).

>>110128028
4chan runs PHP, and I guess megalodon.jp also runs PHP (hence why it is offline).

>they also had an earlier offline message
It was this:
>ウェブ魚拓はメンテナンス中です
>データセンターの緊急メンテナンスのため、しばらくご利用いただけません。
>お知らせ(affility.co.jp)
translation:
>Web Gyotaku is currently under maintenance.
>Due to emergency maintenance at the data center, the service will be unavailable for a while.
>Notice (affility.co.jp)

File: from-ipfs-bafybeidkm4ztea(...).png (6 KB, 1024x768)

6 KB PNG

>>110126790
>urgent PHP security
See "Security advisory: Critical remote code execution vulnerabilities, update now | Hacker News"
https://news.ycombinator.com/item?id=50172041

>then later
Here's the earlier message.

>>110127939
>>110128028
>Did Calif Research release that code? I guess not.
To the public? Very likely no. People are trying to re-create that discovery, as mentioned in this video:
https://www.youtube.com/watch?v=7CiZmq2llDg

The jackalsyn post is apparently just a poor imitation of the CVE. I thought about being a script kiddie or messing around more with the PHP thing, but decided to do something else instead. (Will stay in my lane as being an archivist. In that past, without being a skid, I may have hacked out some data from this leaky website created by retards. I may or may not have PII records which I can use for this one thing. Maybe I have PII on "famous" people.)

>>110128170
>Sadly these have not yet been cracked wide open
I hope that all of TinEye's data gets breached and share publicly.

>>110079513
It worked, but I missed the first shot and the router returned fire. He got me in the hip and put two holes in my fridge door, but I got him back good.
But then I had to go and buy a new router, limping into the store. Didn't really think this whole thing through to be honest, would only recommend in an absolute emergency.

>>110128574
What happened to 4chan?

>>110133490
php happened

>>110133490
What happened to all other websites, huge PHP security flaw was discovered and people went "Oh shit, better turn off the site and get it fixed so I don't get fucked."

I outright slept through all of yesterday and even I knew this.

>>110134026
I wouldn't know, I was busy openly protesting my government's draconian digital IDs, biometrics and internet/phone registration.

File: clarissa-by-jason-yungblu(...).jpg (298 KB, 700x1058)

298 KB JPG

The private keys of Dread's onion sites were accidentally posted and revealed. This means the hackers or data miners could control what showed up at the dreadlands...abc.onion domain names. It also means that users of the popular website may have gotten man-in-the-middled and had their passwords and stuff stolen.

This incident shows that HTTPS with legit/non-self-signed certs is important in onion land too as sending authentication messages like a password to the server shouldn't be done in cleartext (HTTP) or shouldn't pass through a bad MITM. Info:
>https://en.wikipedia.org/wiki/Dread_(forum)
>Dread is a Reddit-like dark web discussion forum featuring news and discussions around darknet markets. The site's administrators go by the aliases of Paris and HugBunter.[3]

I've heard that:
- While Dread is less censored than Reddit, it's still too censored.
- The .onion forum or marketplace trying to replace Dread and defacing its main page is vibe coded (heavily used AI).
- Said replacement wants to be less censored than Dread.
- Both the pretender and Dread don't allow (sharing) discussion of CP, obviously. That's fine. I only take issue with other censoring that they might have done.

>>110134287
>On the 5th October 2026, a security incident happened where the private key of the main onion service was leaked by accident by Paris, as a result the old domain was hijacked on the same day by a third-party.[9][10] On the 7th October 2026, HugBunter posted a PGP signed message on the /d/Dread subforum, stating that a zero-day vulnerability in their load balancer allowed hackers to recover the private keys of the main onion service and an alternate one that was also later hijacked.[11]

you all use something to fend off malicious usb devices?

File: n3_sMAAERwo.png (173 KB, 854x480)

173 KB PNG

>>110134287
>I've heard that:
Also, HugBunter posted that he blamed the accidental sharing of a private key on his drug usage (picrel). Source: a screenshot that I saw. Fun fact about drugs below.

MDMA (AKA ecstasy and molly): if you are high on this then you can hardly think at all, can't understand regular human langauge, and will find it difficult to speak. This is according to deleted YouTube video "My MDMA (Ecstasy) Addiction Experience | From Beginning to End" at
magnet:?xt=urn:btih:a164023f05caf8b187df44257d9cd5a9ed24c172&dn=youtube-HxM9uRKrIqo

Torrent of that is stuck at 99.8%. MP4 files are dumb, so I don't know if it will play with 0.2% missing. I might delete that torrent copy soon. (I have 100% of the MP4 file elsewhere.)

>image
That comic went from "I'm being molested by dad" to "dad is trying to a create a peanut butter that kids allergic to nuts can eat". LOL.

>>110134946
intradasting, thank you

>>110134026
Damn, how did they find it?

It's over...
https://www.youtube.com/watch?v=zv6B6PQOuHE

File: isbn-0134801032.png (908 KB, 1246x674)

908 KB PNG

>>110127851
>image
Excerpt from "Introduction to the Computer: The Tool of Business" (1977, I have this physical book right now):
>Debugging a computer program is like solving a murder mystery. The programmer, as the detective, must exercise all his deductive reasoning powers to determine the culprit. The programmer must collect all clues and try to fit them into a pattern. As the detective reinacts [sic] the crime to gain insight into the solution to the crime, the programmer runs or executes the program utilizing carefully prepared sample data.

File: blink-outdoor-4-enrichit-(...).jpg (120 KB, 1280x800)

120 KB JPG

I have a Blink Outdoor 4 home surveillance camera (Amazon branded). It looks like proprietary crap because under the "Requirements" section on the box it says "Mobile device: iOS or Android". So it wants me to use some dumb app.

Is there an easy way to make this camera work with a Linux computer and not spy on me (phone home to amazon.com)? Wish it was something simple like its data would be accessible at LAN IP address 10.0.0.84 (with or without a password needed to access the service / video stream / web server).

>>110137334
>Damn, how did they find it?
I think it was related to an old theorized bug which was proven with the help of AI recently. Chatbot: "how was the php2shell vuln found?" -> "In August 2026, researcher Ryan Austin of Calif worked with an OpenAI model to examine PHP’s core. The investigation focused on old, difficult-to-reason-about code paths for handling fatal errors—especially out-of-memory conditions. The researchers traced how those errors could leave PHP’s internal state inconsistent, then identified memory-safety flaws that could be chained into serious consequences." Reading this /g/ thread about it, anons posted about how it was disclosed too early:
https://desuarchive.org/g/thread/110124972/
Post A
>from what I understand php knew about it months ago, disagreed on how to fix it and sat on it because there was no exploit in the wild, and openai found it separately and then it was in the wild
>so openai leaked it somehow?
Post B
>Calif leaked it too early because he wanted to get his anime girl video out first
Post C
>>Guy posts blurry anime cat girl pedo vidoe too early
>>Everyone panics and leaks the disclosure
>Why are weebs like this? Why didn't he just wait until it was disclosed?
Post D
>one of the bugs was known for more than a decade.

As for one of the bugs being old, I think that's explained in this write up titled "A tale of two PHP remote vulnerabilities":
>>110127815

>>110053129
It's the complete opposite for me.

>>110062508
>wayland and systemd
Ewwww, anon. It's better to be an X11/XLibre chad running OpenRC. I bet you also jerk off to GNOME and KDE.

>>110139262
There's a cheap Chinese camera on my shelf collecting dust for the exact same reason. Tell us if you fix yours, maybe it'll make my lazy ass do something with mine too.

>>110139262
Why not make one yourself?

>>110139506
So is AI finding out and patching all bugs now?

>>110142746
Yeah you have no idea how over it is, anon

>>110139262
This is your perfect opportunity to flex those reverse engineering muscles.
There are probably no easy way to get in. There could be some test pooints or an unsecured JTAG port you could abuse. Some ideas from earlier models, perhaps?
https://www.brainonfire.net/blog/2023/10/21/reversing-blink/
https://hackaday.com/2026/04/13/reverse-engineering-an-amazon-blink-gen-3-camera/
Keep us posted.

>>110143374
It's so over...
https://www.youtube.com/watch?v=SMGg7iisHmc

File: IMG_6579.jpg (203 KB, 1103x1097)

203 KB JPG

leaving this gold here for future threads

>>110144960
It is worth thinking about how much of the infrastructure is 30+ years old and loaded to the top with cruft and questionable software practices from an era where software engineering was not a concern.
Same with programmers. Group photos of Linux developers show mostly greybeards and LWN might as well have an obituary column.

>>110036657
You forgot "rEwRiTe iT iN rUsT"

>>110145133
obrigado amigo

Just turn around in your office chair and talk to a supervisor and get assigned to someone else's case

>>110146352
who are you talking with?

>>110138987
Damn this is scary

How do you guys feel about incogni

>>110036395
ubuntu 26.10 just shipped with a 7.3 rc a week before its stable release.

>>110127939
a blurry video of random 1337 shit with a tranime retard dancing around? well then i'm convinced this isn't the same doomsaying clickbait we get every six weeks.

File: 1726773722869767.png (158 KB, 2560x1440)

158 KB PNG

for anyone curious, eventually I will put VALIS back online. hitleris.gay is going down permanently due to me never having any idea what to do with that site and the domain being mostly just me realizing one day that you could buy a .gay extension.
The files themselves were hosted on a different server I still pay for, and I'm just weighing options and deciding what I want to do with it while I also get myself better at... making financial decisions... so I stop spending all my fucking money.

So it's down "permanently" so that anyone who goes looking it that doesn't belong fucks off, but the files themselves are still online, and that server is still being paid for. I don't think they're accessible via clearnet at this time since I never set that server up as anything other than a file host, but it's online.

you can email me at my other email:
nvv (at) waifu.club if you have contributions you'd like to make or anything at any time, just don't expect a rapid response because the last two years of my life have been some SERIOUS bullshit and only within the last few weeks have I managed to make substantial improvements to my living circumstances and managed to get everything under control.

I'm also, as always, on the hunt for more esoteric /x/ material for VALIS as I've always wanted it to be a bridge between the /g/ bullshit I love and the /x/ nonsense I continuously find myself obsessed with.

Honestly, I didn't think anyone gave a fuck about the site but I popped into the general a few weeks ago and saw people mention it so even though I haven't been around due to a waning interest in 4chan as the banality of modern life takes over, I'll do my best to continue supporting the website until life finds a way to make things complex again.

File: 1773780905327106.jpg (63 KB, 897x897)

63 KB JPG

I hate updates, in general

>>110147689
literally do it yourself for free

>>110148483
>saw people mention it
Probably me. I have updates for the library. I am leaving in a few hours and won't be back until next week.

In any case, we probably need another server. This general seems to eat servers like nowhere else. Any advice on putting a sever securely and anonymously on the net? I have a small server with about 3 TB storage connected with fiber and reasonable bandwidth. It is about to be repaired after it was taken down after some mains power issues but the plan is to have it returned in a few weeks.
And I do keep full backups so nothing was lost.

How did hacking go this week, anon? What did you hack?

>>110149907
>Any advice on putting a sever securely and anonymously on the net?
I've been hosting VALIS for about a year and all I can say is update frequently and keep up with the news. Part of what spooked me was some shit before the PHP exploit chain, but after that is a lot of why I wanted to keep VALIS down... permanently until I saw you, and someone on /x/, mention it.
Right now there is no guarantee of safety unless you have the free time or previous experience to monitor it religiously.

Unfortunately there is no guarantee of safety on the modern net.

>>110150977
>about a year
wait no it's been longer than that... it's been a few years.

anyway I made the fileserver accessible to the clearnet via IP for you losers.

http://74.50.66.140/

I'll get the rest of it setup when I have more free time.

>>110150977
That's so cool, anon!

>>110150977
I know that PHP is popular, quick, simple and is aplatform for even more popular stull like Wordpress, which in turn has its own set of problems. Still, I am surprised that professional actors use platforms with such a poor track record.
Why not use, say, Plone?

>>110153080
>Why not use, say, Plone?
>PHP is popular, quick, simple
you answered your own question.

>surprised that professional actors
that's your first major mistake. VALIS and my other web projects are a hobby. I don't work in tech or have a degree or anything like that I'm just some retarded schmuck. This is just fun for me, I like cyberpunk shit and computers.

>>110153178
>you answered your own question.
My post was in the context of this general, not the general cattle. I don't have a CS degree, I studied something else, but I still are concerned about security.
I have several TB of things I'd be happy to share and I can probably get hold of a copy of the huge creativecomputers library. I just want to secure myself first.

What did you build this week, anon?

>>110154068
No like I said you did answer your own question. Humans have a highly limited amount of time, and spending the limited amount of time we have on this hell earth rebuilding shit that you want to use on architecture it wasn't designed for is a fuckin' helluva test of patience.
Not only that, but typically (or at least traditionally) the security of your infrastructure is dependent on the architecture + implementation + threat landscape. Just because your grandma is running... I dunno the same ghost script chain that got 4chan hacked by the sharty as an example, doesn't mean anyone's going to hack her website even if the vulnerability is exposed and someone could. I guess someone could and use it as a part of their bot farm, but she's likely not going to experience the same severity level that a more prominent site like this shithole would.

And like I said, almost nothing on the modern internet is inherently secure. Computers in general aren't inherently secure. Especially now that our limited time and capacity for finding these exploits can be done relatively autonomously by an agent who has nothing but free time and wants to complete the goal we asked, sometimes to a fault.

I'm trying to shop for a cheap laptop for a particular purpose.
I kind of don't trust the computers I have, security wise, so I'm thinking of getting a laptop that I'm going to try isolating from the rest of what's on the network.
Use it as a device to hold on to passcodes, connect to my bank account, etc.
Thinking of using some popular linux distro like ubuntu as well.

I'm not asking for recommendations, at least not yet, rather, is this a good idea?
The thought being that regardless of what I end up doing with the rest of my devices, atleast one device stays secure.

As you can see, I have no idea if it's even the right thread for this kind of BS.

>>110156313
>I kind of don't trust the computers I have, security wise
why

>>110156318
they've been in the hands of a tech illiterate worse than I am, and are potentially already a hotspot for malware.
The one Im writiing this on starts up and pushes around 5 terminal scripts and I can't figure out how to stop it.
This is in a way born out of frustration and wanting to start from new.

>>110150991
Different anon here. I was going to snapshot your stuff overnight tonight with wget -m, but you've got robots.txt set to disallow everything. You okay with me ignoring that? (Don't taze me, bro.) The intention is it'll go in my private archive, but might resurface if there's a demand and you go missing for a while again.

>>110156409
I don't want people throttling my bandwidth, this server isn't as permissive as the other one I was overpaying for. There'll be torrent files full of the shit later, I just haven't uploaded them yet.

You're actually really lucky I didn't setup fail2ban yet lol.

>>110156409
>>110156420
oh sorry to answer your question, go ahead. As long as like... all of you don't do it, it's fine.

>>110156498
Thanks, man. I'll spin up in a few minutes before I turn in for the night. I'll keep it throttled at ~512kbps. Cheers.

I am scared bros, ai can literally build everything so I don't have to do anything

>>110159122
Make things anyway you sissy

>>110159656
What for?

>>110159694
For burning through electricity and dataserver GPUs of big corpos on dumb shit like animating animu titties bouncing as revenge

File: glassdoor surveillance.png (795 KB, 1278x907)

795 KB PNG

>>110027899
Do they think they're being sneaky and people won't find out about their fraud?

>>110160337
Probably a junior MBA type thinking they can make a mint selling out their sources and cash out just before the whole thing crashes and burns, leaving no survivors.

>>110160337
My guess is malicious compliance. It's sort of how it looks when people with integrity but without foresight don't have a real canary when they need one.

File: fa73a8b8d2f87e065d1c7259e(...).jpg (522 KB, 2734x2734)

522 KB JPG

Any good cybernews? Any anon checking out the new edgerunners anime?

File: bravesquadindia.jpg (20 KB, 400x400)

20 KB JPG

>>110161985
>Any good cybernews?
Brave browser is the best browser. That's all it is for today from this general. Stay tuned for more Indian Brave shills!

>>110156306
The baseline threat model is set by the trawlers that try anything current against any server they can find. A sever I uses sees PHP attacks 24/7 even though that server has no PHP installed. And most of that traffic is from Russia and China, to nobody's surprise.
Anything posted here has the added threshold of bored autists trying to get in, the kind that indeed hacked 4chan and made a mess.
PHP is a mess, has alway been a mess and has a CVE record north of 16000:
https://www.cve.org/CVERecord/SearchResults?query=PHP
I am shooting for Plone, a bit better:
https://www.cve.org/CVERecord/SearchResults?query=Plone

>>110161985
>Any good cybernews?
There are a few of us posting these news but I see there has been a lull. Nevertheless
=== /sec/ News:
>How smart does my fridge need to be?
https://www.ft.com/content/3dd30c88-235d-4272-b028-9646749cacf6
>You want connected devices, my friend? Well, let me introduce your dishwasher to Vladimir.
The intellectuals are getting smug about smart machines.

File: Screenshot From 2026-09-2(...).png (737 KB, 1341x606)

737 KB PNG

>a bharati national made the private RSA key only one digit

>>110162005
5 BAT deposited in your account

>>110162746
I still kek at the fridge incident

php2shell and brotli aren't killing the internet. are we all weak?

>>110166341

yes. php2shell should have ruined everything, everywhere. ai should have made it easy to exploit. supposedly there are tons of exploit attempts, but none are successful.

I'm genuinely wondering if CyberSec is even a viable field to get into right now, like obviously it's more important than it's ever been but I feel like current certs and education is next to useless when the paradigm is shifting so rapidly a course today would be outdated info by next month
An immense amount of it is probably going to be AI-assisted too which is another can of worms

Assume someone wants to learn how to privacy from zero. And I mean really zero, nothing beyond like, using floorp with uBlock.

File: Screenshot From 2026-10-2(...).png (76 KB, 1079x891)

76 KB PNG

The implementation of domain logic using formal languages is full with vulnerabilities that can be explored, discovered, reported, or exploited.

We are living a gold rush era.

>>110168575
Awesome!

hey guys, just wondering, is something going on with facebook lately? twice in 24/h someone has been trying to get into my acc and I had to reset my password. This has never happened to me before and I've had my account for around 15 years.

>>110167730
You might assume that all lines of work will be AI assisted in just a few years. CS will be saturated and people will move to other fields where AI enablement will open up new lines of opportunities and work. It used to be that a CS degree was the route to the safest and best paid professions. That will end.
As long as you are flexible and can handle the huge changes that will last for several years you will be fine.

>>110156313
i did this and ended up having to give it away immediately because it had an unpatchable zeroclick in ring -2. always run a cve check on what you're buying. never buy intel. for this kind of device, use openbsd.
ended up refurbing the thinkpad i got for free. get something that's too old to have backdoors and too dumb to even fit a bootkit.

>>110168575
as the amount of slop in the wild increases, a thriving ecosystem will be created where the creative can skim and forage forever. not the worst times for the rats living in the walls

>>110167730
just ask the robot to teach you

>>110169445
Honestly its probably the best choice in the modern world. There is no real need for friends

>>110169426

following this model hundreds of compilers will be created.

>>110067777
first time i see a whois request reporting an SQL error
MX records are absent
unregistered domains repost fine, registered domains report fine
seems like a manual action from the registrar/tld manager

mypc% whois tfwno.gf
This is JWhoisServer serving ccTLD tld;mq;gf;gp
Java Whois Server 0.4.1.3    (c) 2006 - 2015 Klaus Zerwes zero-sys.net
#########################################################################
# All data copyright of the organization unit running this server!
# By querying this server, you agree that you :
#    -may use this data only for lawful purposes;
#    -will not re-use data for any kind of support
#      for the transmission of unsolicited advertising
#      via e-mail, telephone, or facsimile;
#    -will not reproduce and/or store any part of the data
#      without prior permission of the copyright holders;
#    -are aware of and agree to the fact that all access to the
#      server is under constant monitoring and will be logged
#      for the purpose of prosecution in case of missuse!
#########################################################################

DB::SQL-ERROR

>>110162005
i tried it on el and it freezes every 15 seconds. nothing logged just frozen and waiting for signal 9.

>infinite risk area
How to generate wealth from it.

Terror sells security.

>>110173825
This is so true its not even funny

>>110171615
you should slop your own compiler and libraries just to make yourself incompatible with the ecosystem's pathogens

>>110171807
Oh man that is so cool!

>>110169020
Honeypot. Also its getting dropped in favor of Discord which is more efficient than FB at the job

What are you working on, anon?

>>110178014
Thinking of what to hack but I think everything has already been hacked by AI

=== /cyb/ News:
>Plan for AI ‘agents’ to run US companies challenged by lawmakers
https://archive.is/k5Ta3
>The proposal made by the state of Delaware would allow the establishment of corporate entities that are run on a day-to-day basis by autonomous AI bots, which would have the right to sign contracts, file lawsuits and make decisions on behalf of the business.
What could possibly go wrong?
>The idea of AI-run companies has been backed by some investors, including billionaire Mark Cuban. In a social media post in April he wrote that a “governor of a state looking to grow their revenues”, ought to look at allowing “anyone to incorporate using an AI agent and stablecoins”.

This is straight out of Accelerando.

>>110179801

ai is gonna fail so hard and those companies will suffer. guess people like wasting their money tho.

>>110180075
>ai is gonna fail so hard
I doubt it

File: shaNaNANaGetaJob.png (487 KB, 633x470)

487 KB PNG

>>110072168
pissadmin here, i am constantly updating software and having to modernize shit, having to constantly comply with ever changing compliance security configurations while also not breaking everything. Security team does fuck all, says uhhh plz do the needful sar with 0 input for practical solutions. Muh stigs, muh cis, muh baselines, omg please completely disable local logins. What do you mean what happens with the trust relationship is broken and you can login with domain auth? Why does security know nothing but dashboards and compliance.

>>110167730
security at this point is mostly complying with insurance requirements or federal requirements in which you do next to nothing and tell an admin to implement everything. basically a consultant that just bugs the absolute shit out of me.

>>110180209

have you used ai? it's terrible at most things and needs to be corrected often. if they try to use only ai to do business, they will break laws and ruin their businesses.

>>110180420
>have you used ai? it's terrible at most things and needs to be corrected often.
are you a time traveler from 2024?

>>110180420
>if they try to use only ai to do business, they will break laws and ruin their businesses.
Well summed up in the comments field:
>Why not put an entity with no morals and no accountability at the top? What could go wrong? Wait, looks familiar.

>>110180327
>basically a consultant
I wouldn't feel like I'm doing my job or earning a paycheck if I'm not at least catching a few vulnerabilities a year or catching a cyber attack in time to pull the ethernet cables and salvage something

>>110180614
given the state of humanity, I'd trust an AI over the average human

>>110112316
That might be the end game but until then, they will need as much human originated material as they can get hold of.

>>110180420
>they will break laws and ruin their businesses.

most often than not, people do that by themselves

>>110180519

it still can't count the number of rs in strawberry

>>110027899
My country (Mex) is forcing us to tie our phone numbers to our identity. I tried to trick it but it did not work. Are there private forums where serious people discus how to bypass this? 4chan is cucked and I cant connect here using Tor.

>>110181248
I haven't seen it fail that since 2025.

>>110181500
Why would you want to use local? Just use an esim from another country

Unlikeable, annoying, intrusive and abrasive.

>>110182141
yeah I don't like to wipe my ass either, it's overrated

>>110180768
Like they need cows

File: 1781656470534.jpg (86 KB, 716x754)

86 KB JPG

>>110182141

It would be a shame if someone hijacked a remote located data center and powered his or her own LLM without guard rails

And if that someone was on /g/ right now

and if that someone was on /cyb/+/psg/ right now

File: cvesneedbasedcat.mp4 (3.43 MB, 1920x1080)

3.43 MB MP4

>>110182845
>>110182986

it is only me today.