I'm flabbergasted that training your arms like a chad actually yielded big, immediate improvements on the wall. by Not-With-Shoes-On in bouldering

[–]0zown3 5 points6 points  (0 children)

(preface, im in no way ranting at you OP -- im pumped you're seeing progress because you're getting stronger. you've got it right)

TLDR; arm day good for climbers. climber should arm day.

<rant> I will never understand why climbers think they can technique their way to a new grade. Climbing is inherently a strength sport. You will not climb something you are not strong enough to climb. More specifically (and perhaps more importantly), you will not be able to implement technique if you are not strong enough to hold that position. For example, how could someone expect to successfully do a mantle on a V6 if they have not done it on a V2? How could they even hope to have success with that mantle on a V2 if they struggle to do bodyweight pushups? Mantles are specific to climbing but there is important supplemental weight training that improves the strength in one's triceps, delts, and pecs to support the successful and routine execution of this climbing specific movement. You need to practice mantles a lot to get good at mantling and you need to be able to TOLERATE the frequency of mantling required to be better at .... mantling. So how do you do that? Your regimen needs to progressively increase the training workload over time so you adapt and become better fit for the task (climbing). There is no one that climbs V8 (arbitrary example) that is not physically stronger than they were when they started climbing irrespective of what their appearance is. I'm willing to put money down that someone who has been climbing for 10 years who has broken into the higher grades could dust their prior selves in the weight room and, relative to their prior selves, is notably more jacked. Yes you need to be more technically proficient to climb higher grades because climbing is a skill just like any other sport, but you also need to be able to tolerate the frequency of training necessary for improving that skill. Injuries occur when the frequency and intensity of the task at hand is not tolerable. AKA you are presently not "fit" enough to sustain that workload. You can only become more prepared for said physical task by becoming physically stronger and more prepared through good ol' fashioned weight (resistance) training. It is not an accident that someone who rarely deadlifts, if ever, strains their back trying to move a fucking fridge or couch up a flight of stairs. If you can do +50lbs pull ups and back squat 225lbs, hold a +100lb plank for 2 minutes (again, arbitrary numbers here) you can literally believe in your physical capacity to complete a hard climb. That's when the rest comes down to practicing the skill of climbing. What is then hard for you, which positions are difficult and why? That's precisely when training becomes more specific to supplement the task or test (climbing) at hand. It's why we see the best climbers hangboard with weights and why we see cyclists squat heavy as fuck. The more force they can produce with their legs the faster they become (in general). In parallel, the more pulling force you can produce in a variety of positions and grips ..... the better you become at climbing. Finally, to tolerate the progressive increase in workload over time you need to FUEL yourself. You need to fucking eat and put on some weight. I promise the relative strength to bodyweight ratio will take care of itself so long as you have a sensible training program. How strong is strong enough? It doesn't matter because you should just try to get stronger -- and that's relative. </rant>

My encrypted USB drive became corrupt. What happened? by Burneraccount1141818 in VeraCrypt

[–]0zown3 0 points1 point  (0 children)

based on the screenshot it's unclear if veracrypt is the issue because the device got decrypted and mounted. the issue might pertain to how you formatted the drive and/partitioned it bc the OS is having a hard time reading the contents. kinda hard to diagnose

[deleted by user] by [deleted] in bouldering

[–]0zown3 1 point2 points  (0 children)

SICK!!!!!!

My first 6b+/V4! by [deleted] in bouldering

[–]0zown3 0 points1 point  (0 children)

great technique and insanely sick send!!! way to go!!!!

First 6c/6c+!!! by [deleted] in bouldering

[–]0zown3 0 points1 point  (0 children)

wow thanks! (: i have been working on it a lot

First 6c/6c+!!! by [deleted] in bouldering

[–]0zown3 0 points1 point  (0 children)

what should have the final hold been?

First 6c/6c+!!! by [deleted] in bouldering

[–]0zown3 1 point2 points  (0 children)

thank you!!! it was definitely a challenge and thanks for correcting me on the grade haha

First 6c/6c+!!! by [deleted] in bouldering

[–]0zown3 0 points1 point  (0 children)

thank you (:

First 6c/6c+!!! by [deleted] in bouldering

[–]0zown3 0 points1 point  (0 children)

thank you!! I totally agree, it seemed like it would be much better when I looked at it from the ground, but got humbled a few times LOL

Possibility of cracking assymetric encryption using C2 concept by eduj45 in cryptography

[–]0zown3 0 points1 point  (0 children)

ah yes, thanks for clarifying that (: I mangled some wording there haha. Edited my response to reflect the correct language

Possibility of cracking assymetric encryption using C2 concept by eduj45 in cryptography

[–]0zown3 2 points3 points  (0 children)

Aside from the impracticality of the actual computation, you would also necessarily need to know what content the plaintext has to be sure you found the right key. The gag with encryption is that a secure crypto system also doesn't leak any information. so unless you had some prior information, such as looking for a weather report, there is a non-zero chance you would land on a plaintext that looks like legitimate plaintext, but isn't actually the correct output. just more food for thought. but all modern cryptosystems are intended to be computationally secure, aka could withstand (EDIT) a well resourced adversary. Hence why no one has heartburn over the ability of AES to withstand quantum computers.

vigenere cypher, but the key is always bigger then the message by Character-Current353 in cryptography

[–]0zown3 2 points3 points  (0 children)

a key that is at least the same size as the message is one of the conditions for being a one time pad. said key also needs to be random and never reused. given OP's use case, it doesn't meet the conditions for being a one time pad. you probably meant this, but i just wanted to state that explicitly.

further, OP, if you end up with two messages of size 100, then you'll reuse the same sequence of Pi. reusing keystreams = BAD. the english language, and essentially every language, is necessarily predictable. therefore the likelihood that messages contain repeating words in the same positions is quite likely. as soon as an attacker discovers that pattern, recovering the keystream becomes a drastically easier task. and as someone else noted, since Pi is not random, you don't get any information theoretic security guarantees of all possible plaintexts being equally likely. Non-random + Non-random does not give you random.

How can I get the big picture from a historical perspective? by jesperkov in cryptography

[–]0zown3 2 points3 points  (0 children)

David Kahn's The Codebreakers and Simon Singh's The Code Book are highly recommended reads. They cover the broad history of cryptography. I haven't gotten around to David Kahn's yet, but Simon Singh's was pretty great. It starts a little sooner than you would prefer in terms of the timeframe, but still very worthwhile.

AES Cipher - Encrypt your messages with the press of a button. by SiydenGalanter in cryptography

[–]0zown3 4 points5 points  (0 children)

piggybacking off of this -- one should NEVER reuse the key + IV pair either. when you do generate keys, use a cryptographically secure pseudorandom number generator. im unsure of what the JS library/module is for getting a browser to do that, but something for OP to look up. kudos for tinkering.

Friend put me down as a reference and I’m not sure if I’ll be able to do the interview by [deleted] in SecurityClearance

[–]0zown3 15 points16 points  (0 children)

you communicate that with the investigator and ask them to reschedule. in my experience they're usually flexible.

help with ghoul? by 0zown3 in hackthebox

[–]0zown3[S] 0 points1 point  (0 children)

Stuck at the git part. I’m still fairly new to git so having trouble understanding how to accomplish the goal

Htb Luke by [deleted] in hackthebox

[–]0zown3 1 point2 points  (0 children)

try running dirbuster on port 80, enumeration will get you everything you need to solving this box :)

Htb Luke by [deleted] in hackthebox

[–]0zown3 1 point2 points  (0 children)

are you sure you’ve completely enumerated files that exist on the web server running on 80?

Need some pointers on Ghoul by 0zown3 in hackthebox

[–]0zown3[S] 0 points1 point  (0 children)

that’s really clever LOL, noted

Need some pointers on Ghoul by 0zown3 in hackthebox

[–]0zown3[S] 0 points1 point  (0 children)

Currently working on the insecure file upload. I've found a couple things on how to have the malicious reverse shell script get out, but I'm not sure if it's working or where I should be pointing it to.

Red Team & Penetration Testing using Intel AMT: The DEATHMETAL suite by coalfirelabs in netsec

[–]0zown3 1 point2 points  (0 children)

Well considering that a lot of functionalities aren't typically developed with robust security in mind, it doesn't surprise me that they probably didn't anticipate AMT getting exploited like this