| Bashing-om | tomreyn: LOL ubottu link is pretty slick too :D | 01:10 |
|---|---|---|
| lotuspsychje | good morning | 02:19 |
| Maik | good morning | 03:55 |
| Maik | too bad i'm not a ubuntu member (yet) | 03:56 |
| cucumber | hi there everyone | 06:30 |
| cucumber | Generally speaking | 06:30 |
| cucumber | how can an OS be protected against exploits? | 06:30 |
| cucumber | or monitorred for exploits? | 06:30 |
| lotuspsychje | keeping the Os up to date is one thing you can do | 06:31 |
| lotuspsychje | and harden your system | 06:31 |
| cucumber | well not exactly | 06:31 |
| cucumber | sometimes this over crazed thirst for the very latest updates ended up with installed unwanted code | 06:32 |
| cucumber | like the most recent version actually contained bad wares, like monero client | 06:32 |
| lotuspsychje | any Os has unwanted security flaws | 06:32 |
| cucumber | yes exactly | 06:32 |
| lotuspsychje | there's no magic red button against it | 06:32 |
| lotuspsychje | but you can do alot to secure things | 06:32 |
| Maik | lotuspsychje: pretty sure he knows | 06:33 |
| Maik | he's been using buntu for years now | 06:33 |
| cucumber | but the general "keep it fully updated" doesn't necessarily work all the time | 06:33 |
| lotuspsychje | i didnt say that cucumber | 06:33 |
| jdgr | Build a turing machine out of lego, hand transmit data, swap your paper/magnetic tape when it's not in use | 06:33 |
| jdgr | ??????? | 06:33 |
| lotuspsychje | i said, 1 thing you can do | 06:33 |
| jdgr | UNHACKABLE! | 06:34 |
| cucumber | sometimes, like with Huawei if not mistaken, even a backdoor was injected into the source code but the community detected it early on cause it followed a simplistic pattern, | 06:34 |
| jdgr | Run all your software step-by-step | 06:34 |
| cucumber | lol, that would take for ever | 06:34 |
| cucumber | I mean it wouldn't be practical | 06:35 |
| jdgr | What do you need your machine to do that a graphing calculator can't? | 06:35 |
| cucumber | heh | 06:35 |
| cucumber | right | 06:35 |
| cucumber | I mean I harden my OS, to the best of my ability | 06:36 |
| cucumber | but I always feel eyes on me | 06:36 |
| jdgr | Russian intelligence don't even use computers for confidential information | 06:36 |
| Maik | cucumber: that's called paranoia | 06:36 |
| cucumber | jdgr well what do they use? papers? | 06:36 |
| jdgr | Yes. | 06:36 |
| cucumber | Maik I know, but realistically how wrong am I? | 06:37 |
| jdgr | They have special typewriters that encrypt everything | 06:37 |
| akem | If you don't offer internet service and are behind a router, incomming connection will be blocked, the only way for a backdoor is reverse connect, so install a statefull firewall and block any non trusted connection to the outside world. | 06:37 |
| lotuspsychje | offline machines can get compromized too | 06:37 |
| lotuspsychje | papers can get stolen | 06:37 |
| cucumber | jdgr : well papers have to be either printed or hand written, calculations can't be done using hand, papers if not encrypted are much more dangerous for highly classified material | 06:37 |
| akem | Only if you kernel is rootkited it can go trought. | 06:37 |
| Maik | you're simply exaggerating imo cucumber | 06:37 |
| lotuspsychje | nothing is safe | 06:38 |
| akem | lotuspsychje, ofc :) | 06:38 |
| lotuspsychje | what i always do it burry a hole in my yard, and hide my sensitive data usb in there | 06:38 |
| jdgr | The US airforce used to calculated missile trajectory by hand | 06:38 |
| jdgr | s/calculated/calculate | 06:38 |
| jdgr | The reality is not much of your data is all that sensitive | 06:39 |
| lotuspsychje | thats for me to decide | 06:39 |
| cucumber | akem : well what you do if you want to update software and the softwares contain backdoors, or the next updates contain reverse proxies, or that some hackers keep watch on you just to feed you "bad" stuff, how well would your firewall protect you realistically? | 06:39 |
| jdgr | Circumventing firewalls is trivial... modern malware can exfiltrate data via DNS | 06:40 |
| jdgr | or using the Twitter API | 06:40 |
| lotuspsychje | keep your data off the system and use honeypot and IDS | 06:40 |
| jdgr | There's PoC malware that uses Twitter as the C&C infrastructure | 06:40 |
| cucumber | jdgr : so damn true you are | 06:41 |
| cucumber | how well can you protect yourself against those? | 06:41 |
| jdgr | On a large enough network you're bound to overlook something | 06:41 |
| Maik | still not on a irc client cucumber? | 06:41 |
| cucumber | Maik no | 06:41 |
| cucumber | why? | 06:41 |
| Maik | why not | 06:41 |
| jdgr | Whitelist only approach, hard coded ARP tables | 06:42 |
| jdgr | Use fiber only | 06:42 |
| cucumber | I think IRC clients can be a tiny bit easier to hack or execute directly on the PC, less private, while web can also be used for those purposes, you have a more degree of freedome for virtualization | 06:42 |
| jdgr | Compromising someone using a web client is harder | 06:43 |
| Maik | cucumber: you think using web based chat is safe? Everything is logged, so forget about your privacy stuff. Even your provider stores your data and tracks what you're doing. | 06:43 |
| Maik | cucumber: if you want privacy cut yourself off from the internet and world. | 06:43 |
| cucumber | jdgr yes, realistically not that HARD, but using web interface is a bit more restricted | 06:43 |
| jdgr | I mean cucumber could in theory encrypt everything before inputting into the form on the web client and hitting enter | 06:44 |
| jdgr | *it into | 06:44 |
| cucumber | Maik I didn't say safe al together, I said safer, web client can also be injected with stuff | 06:44 |
| akem | cucumber, Usually you inspect a system to the bone, and you freeze to that version, and do only critical updates. | 06:45 |
| cucumber | jdgr like encrypted text for the text box? then how would you guys be able to read my stuff? | 06:45 |
| jdgr | We wouldn't, but neither would the server administrator or the person hosting the client | 06:45 |
| jdgr | or anyone inbetween | 06:45 |
| jdgr | unless they had the key to decrypt it | 06:45 |
| jdgr | Key exchange can be done in person | 06:46 |
| cucumber | akem : very good point, awesome, yes, that is what I do for the most part, upgrade freeze using dd, and stuff, compare find the stuff, alert the good guys, BUT what if .... | 06:46 |
| jdgr | All I do really is limit user access | 06:46 |
| jdgr | Checksum everything | 06:46 |
| Maik | must be a new COVID-19 level that causes paranoia with certain people on this planet. :P | 06:46 |
| cucumber | jdgr I have much respect for you sir or mam | 06:47 |
| jdgr | Have logs shipped to numerous remote hosts | 06:47 |
| lotuspsychje | i like healthy paranoia, aka knowing whats possible | 06:47 |
| jdgr | Each of which is configured differently | 06:47 |
| cucumber | Maik no my covid infection is almost over, I am thankful that I wasn't hospitalized | 06:47 |
| cucumber | doc said you don't need it | 06:47 |
| jdgr | My girlfriend just out of the ER... all she had was a prolapsed uterus and a UTI | 06:47 |
| jdgr | I mean she needed to go because we couldn't find her IUD... but now I'm worried will end up with COVID | 06:48 |
| jdgr | Oh well off to Taco Bell bbl | 06:48 |
| akem | I wonder if i have a backdoor in my lovely chinese phone :P | 06:48 |
| jdgr | *we'll | 06:48 |
| cucumber | akem heh | 06:49 |
| cucumber | you "wonder" ? | 06:49 |
| cucumber | lol | 06:49 |
| cucumber | and abit more lol | 06:49 |
| lotuspsychje | huawei just got new exploits again | 06:49 |
| cucumber | really???? | 06:49 |
| cucumber | again? | 06:49 |
| cucumber | wow | 06:49 |
| lotuspsychje | https://www.theregister.com/2020/09/17/huawei_iptv_video_encoder_security/ | 06:49 |
| cucumber | I mean not really that surprising but... | 06:49 |
| cucumber | oh yeah | 06:50 |
| lotuspsychje | maybe you can install HIlinux next time cucumber | 06:50 |
| akem | They will install tiktok in my back and steal my MP3s :P | 06:50 |
| cucumber | that one I have read already | 06:50 |
| Maik | all smartphones keep on listening and recording stuff 24/7, even when turned off | 06:50 |
| cucumber | lol I thought something new | 06:50 |
| cucumber | HIlinux ? | 06:50 |
| cucumber | No I think I can trust Ubuntu better, many eyes on it and stuff | 06:50 |
| lotuspsychje | cucumber: so you didnt read the article :p | 06:50 |
| cucumber | but the new background was super scary so I changed it | 06:51 |
| cucumber | lotuspsychje what article? | 06:51 |
| lotuspsychje | huawei | 06:51 |
| cucumber | yes I did | 06:51 |
| cucumber | the ip tv and such that is almost a wekk old | 06:51 |
| cucumber | week | 06:51 |
| cucumber | anyways | 06:54 |
| cucumber | thank you guys | 06:54 |
| cucumber | for all the suggestions | 06:54 |
| cucumber | I mean from time to time I need to let off a little steam about these things | 06:54 |
| cucumber | nothing can be done | 06:54 |
| cucumber | but it is nice to talk to someone abut them | 06:55 |
| lotuspsychje | a lot can be done | 06:55 |
| cucumber | like what? | 06:56 |
| cucumber | please help me if you can man | 06:56 |
| cucumber | :( | 06:56 |
| lotuspsychje | like dont use a lot of services on your machine | 06:56 |
| cucumber | I don't | 06:56 |
| cucumber | ok what's next? | 06:56 |
| lotuspsychje | dont run your machine 24/7 | 06:57 |
| cucumber | well, not exactly possible for soe of my machines | 06:57 |
| cucumber | but I usually don't | 06:57 |
| lotuspsychje | then you are a target | 06:57 |
| lotuspsychje | 24/7 boxes are hunted for their uptimes | 06:57 |
| cucumber | yeah | 06:58 |
| lotuspsychje | the moment you connect a machine to the net, you get scanned | 06:58 |
| cucumber | but lets say a router, or a wifi access point, or a laptop hosting a website, or a tiny raspberry pie for dns how can you turn them off? | 06:59 |
| lotuspsychje | turn what off? | 06:59 |
| cucumber | you say don't keep your machines on 24/7 | 06:59 |
| cucumber | some machines, while vulnerable, have to be on 24/7 | 06:59 |
| Maik | so... as i said, cut yourself off from the internet. THE best way imo. | 06:59 |
| lotuspsychje | a lot of Iot & routers are scanned for weakness these days, so if you dont want them exploited put em offline :p | 07:01 |
| lotuspsychje | even if they are up to date, someone invents a new 0day for them | 07:01 |
| Maik | in ubuntu's case... Livepatch to fix vulnerabilities without needing to reboot | 07:01 |
| cucumber | yeah | 07:01 |
| cucumber | but I keep most of the systems offline when possible | 07:02 |
| cucumber | what's next? | 07:02 |
| lotuspsychje | even offline they can grab your machine physically when you're not around | 07:03 |
| cucumber | lotuspsychje yeah that has happened to me before i college | 07:03 |
| lotuspsychje | someone plugs an infected stick in the back | 07:04 |
| akem | Aluminium hat on your head so that no one steal your passwords with mind reading technology :P | 07:04 |
| cucumber | I came back I noticed the back of my latop was opened | 07:04 |
| cucumber | I could never trust that laptop again so I sold it | 07:05 |
| lotuspsychje | lol | 07:05 |
| cucumber | what? | 07:05 |
| Maik | what's next? Nothing. Just live and try not to be paranoid or make yourself crazy in your head. | 07:06 |
| lotuspsychje | fresh format | 07:06 |
| cucumber | Maik How can I when I see a config running that I didn't recall asking for | 07:06 |
| cucumber | lotuspsychje fresh format can probably never manage to get rid of hardware issues | 07:07 |
| lotuspsychje | cucumber: security always starts from the users needs, what is it you wanna protect from really? | 07:07 |
| Maik | cucumber: seriously, get a grip and life :) I for one had enough of the same conversations all over again | 07:08 |
| cucumber | well, as a simple example I want my codes not to be tampered with. Like if I write a python script and I notice it had been changed or stolen, I mean generally speaking how can anyone grow in such a world? | 07:09 |
| cucumber | that is like asking "if you have nothing to hide why protect in the first place" is all I am saying | 07:09 |
| akem | It can't be stolen if it is open source, so open source all your code :) | 07:10 |
| lotuspsychje | cucumber: keep your scripts offline | 07:11 |
| cucumber | well, even if opensource when it grows gradually, and lets say you want to submit it somewhere, and the people with "hidden" access to your system change it, and the "good" people who you send the code to will never be able to trust you anymore | 07:11 |
| akem | There is checksums to fight this. | 07:12 |
| Maik | akem: after all these years using buntu/linux he should know that. | 07:12 |
| cucumber | yeah, ok, lets say you have your project with thousand of lines open, working on it, and when you change something another file is being changed, or aother part of your file is being changed | 07:12 |
| cucumber | how can you checksum while you are working on the files | 07:13 |
| cucumber | check sum works before and after the changes are done | 07:13 |
| cucumber | not when you are actively working on the code | 07:13 |
| akem | You really think some ghost hackers will be modifying your files while you're working on them and you won't notice it? :P | 07:14 |
| cucumber | yes | 07:14 |
| cucumber | I do | 07:14 |
| cucumber | :( | 07:14 |
| Maik | seriously? | 07:15 |
| cucumber | yes | 07:15 |
| cucumber | seriously | 07:15 |
| Maik | that's not good, seriously. | 07:16 |
| cucumber | Well, I don't know | 07:17 |
| Maik | i know | 07:18 |
| akem | Then the only solution is Neo, he will bend space and time inside your RAM and CPU to protect you :P | 07:18 |
| Maik | lol | 07:18 |
| cucumber | LOL | 07:22 |
| cucumber | come on | 07:22 |
| lotuspsychje | haha | 07:22 |
| cucumber | I mean I know you are trying to help, but the state of security is fucked up really | 07:22 |
| cucumber | hahahahaha | 07:22 |
| Maik | language | 07:22 |
| cucumber | really? | 07:22 |
| cucumber | ok sorry | 07:23 |
| Maik | yes | 07:23 |
| cucumber | alright man chilax mate | 07:23 |
| Maik | i'm chillaxed | 07:23 |
| Maik | you... are not | 07:23 |
| Maik | ;) | 07:23 |
| cucumber | no I am chilaxated relatively, only feel insecure and paranoid | 07:24 |
| Maik | cucumber: i'm just realistic and stand with both feet on the ground, if i were you i'd seek some professional help to get rid of the paranoia. | 07:24 |
| lotuspsychje | lol | 07:25 |
| Maik | you'd do yourself and others a big favor | 07:25 |
| cucumber | no doctor can help me, I mean I have had two doctors before and they ended up not trusting their phone and computer after trying to help me and they never accepted to visit me any more | 07:25 |
| cucumber | I feel so left out and alone :( | 07:27 |
| Maik | cucumber: i doesn't only depend on the doc but most of all on you and you alone | 07:27 |
| cucumber | yeah users can do a lot of things that can make everything go wrong | 07:28 |
| Maik | cucumber: what i'm trying to say is that no one can help you but yourself | 07:29 |
| Maik | i know where i'm coming from so i know what i'm talking about | 07:29 |
| cucumber | call it human error or accidental mistake or the after math of a bad break up or a broken heart, but "heartbleed" period was not a good time! | 07:29 |
| cucumber | Maik Waht? you been a paranoid too? :D | 07:30 |
| cucumber | great | 07:30 |
| cucumber | what did you do to fix things? | 07:31 |
| Maik | Breakups.... that's part of life, get over it, move on and do things you like. | 07:31 |
| cucumber | Maik : no not for me, forget it man, I meant more like as a result why "bad coding" makes into the code base sometimes.... | 07:32 |
| cucumber | I mean human errors in coding happen for a variety of reasons | 07:32 |
| cucumber | like being mentally saddened | 07:32 |
| Maik | ...... | 07:35 |
| Maik | flatline | 07:35 |
| Maik | i'm afk | 07:35 |
| cucumber | lol, I am that depressing and disappointing huh? | 07:35 |
| Maik | rather annoying | 07:36 |
| Maik | :P | 07:36 |
| Maik | laters | 07:36 |
| cucumber | that is a bit rude | 07:36 |
| cucumber | but ok | 07:36 |
| cucumber | I can take a constructive criticism | 07:36 |
| cucumber | https://en.wikipedia.org/wiki/Heartbleed | 07:37 |
| Maik | not rude...just the reality | 07:37 |
| cucumber | :) | 07:37 |
| cucumber | I sense some feminine traits of behavior a little bit | 07:38 |
| cucumber | a cucumber with senses and feelings, you don't see that everyday :D | 07:39 |
| Maik | we know you've been playing us ;) | 07:49 |
| Maik | and for now gnite | 07:49 |
| cucumber | not really playing you | 07:49 |
| cucumber | just letting off some steam | 07:50 |
| cucumber | I hate to play anyone as much as I hate being played with | 07:50 |
| cucumber | have a good night Maik | 07:50 |
| cucumber | Mostly think of it as trying to find someone to share the pain with | 07:50 |
| cucumber | the current state of privacy and security is so painful | 07:51 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!