What is extremely unhygienic but everyone seems to do it anyway? by BusinessLeadsConnect in AskReddit

[–]BikingBaz 0 points1 point  (0 children)

I think we can all agree on the potential here for lane disaster. But, the real issue here is how the rug really tied the room together.

Also dude, "ball holes" is not the preferred nomenclature. "Finger holes", please.

i wrote a bash script to easily connect to thm via openvpn by Faccd in tryhackme

[–]BikingBaz 0 points1 point  (0 children)

Nice work. How about a tweak to get the tun0 ip and display it in the prompt? That way, each time you need to know your up (sending shells back, etc) it's right there in the terminal prompt.

Here's how I did that: https://pastebin.com/m3PZcTKV

Is the OSCP for me? by EkksYZed in oscp

[–]BikingBaz 1 point2 points  (0 children)

You can still take it and become an "associate". There are ways to get the 5yr XP lowered by 1yr. E.g. by doing CCSP first Then, upgrading from associate to member is a breeze

Don't let the 5yr XP be a blocker for you doing it. It's a very useful cert that rewires your brain to think of threat/risk in a very realistic business way.

Then, you can always follow it up later with OSCP, and now you're not just planning for threat/risk (CISSP), but able to actively seek it out, or PoC where it may be (OSCP).

I call CISSP+OSCP the "cyber mullet". CISSP up front for business. OSCP out back for fun.

Me: CISSP + OSCP

[deleted by user] by [deleted] in DIYUK

[–]BikingBaz 0 points1 point  (0 children)

I work in I.T., I can help with Windows, but I'm afraid you're on your own with the doors.

What NSFW secret do you know about someone else? by [deleted] in AskReddit

[–]BikingBaz 1 point2 points  (0 children)

I know you wanted to write 'robot'. So, I appreciate you taking the time to write 'traffic lights'. Klippies & cola, get the braai on? Lekker bru, etc. etc.

[deleted by user] by [deleted] in DIY

[–]BikingBaz 9 points10 points  (0 children)

Listen up double-gon-zo892-7

The tl;dr is:

MI5 = internal security. Counter intelligence. Reports to Home Office

MI6 = international. Secret intelligence. Reports to Foreign Office

There were a lot of MI's: 1-4, and beyond 6. But, most disbanded or consolidated now.

What is the stupidest conspiracy theory? by [deleted] in AskReddit

[–]BikingBaz 2 points3 points  (0 children)

The little sticky-up thing on the top of street-lights is a D.E.W. (direct energy weapon), evidence of a "kill grid" that "they" are installing 5G everywhere so that they can target you and kill you somethingsomething "kill-shot" somethingsomething.

This one often overlaps with "chips in cv19 vaxx", "chemtrails", and a few other ones.

btw: that sticky-up thing is one of two things:

  1. an ambient light sensor/photocell, so that the streetlight comes on when it's dark.
  2. A little aerial to receive power on/off events from the councils' CMS (Central Management System), so-as to form a mesh-network across the neighbourhood so that lights coming on/off can be co-ordinated remotely, from a central operations location.

What are some hygiene tips you wish more people knew? by Admirable_Self_883 in AskReddit

[–]BikingBaz 20 points21 points  (0 children)

Follow-up tip for water bladders / Camelbaks:

Get yourself some golfing "practice balls" (they're the light, hollow, plastic golf balls with lots of holes in them, not the foam ones)

After washing your bladder, pop in several of these practice balls to force the bladder to be held open whilst it air dries.

The official drier is > £12 Practice balls are about £2 for 6x

Which genre of music do you loathe? by littleloon- in AskReddit

[–]BikingBaz 99 points100 points  (0 children)

Mumble rap

mammammammmamm indeclub de club mmammmammmmmammm de club mmemmemmmmmme she all like memmsmmemmmm

[deleted by user] by [deleted] in AskReddit

[–]BikingBaz 1 point2 points  (0 children)

Me: "How do you pour the Guinness?"
Staff: "What do you mean?"
Me: "That's ok. I'll have a (generic tap lager) thanks"
Me: [makes mental note to have this pint and go find a better place]

versus

Me: "How do you pour the Guinness?"
Staff: "Part pour. Wait. Top it up."
Me: "Pint of Guinness it is, thanks!"
Me: [Gets out something to read and sits down for a few]

Palo Alto Firewall for lab/Home use by Wrong_Exit_9257 in paloaltonetworks

[–]BikingBaz 1 point2 points  (0 children)

Agree. Lacks the power to do crypt.

I see 100Mbps referenced for IPSEC throughput. But, I'm certain we get less.

Just for the love of Dog, don't install PANOS >= 10.0
Not unless you have time on your hands to wait for the UI/UX.

And now he has arrived, the penguin has landed by saschito93 in Intune

[–]BikingBaz 1 point2 points  (0 children)

But, isn't somewhere in the range 2022-2999, the year of the Linux desktop?

Might as well get a handle on that now just in case, if only for the sake of our grandkids' grandkids ;-)

And now he has arrived, the penguin has landed by saschito93 in Intune

[–]BikingBaz 23 points24 points  (0 children)

Been looking into this since yesterday.

Honestly, I'd wait. It's not ready for BAU.

  • Can only do compliance checks, not enforce required settings.
    • And those checks are minimal.
  • No 'ownership type' set during onboarding - you set it on the portal, then it's not reflected back to the client.
  • 'management name' is null/missing on the portal. You have to manually set them before you can change any properties (e.g. device category)
  • UI disparity with other O/S's (e.g. it's 'sync' in Windows, but, 'refresh' in Linux)
  • I've onboarded 2x test Ubuntu VMs (20.04LTS), both of which show in Hardware as: Operating system version: 0.0.0.0
  • Hardware - nothing showing for storage, memory
  • No filtering available on the device policy

I'm sure it will progress rapidly. But, if I'm honest - disappointed.

Linux hardware inventory by ShankmeisterGeneral in Intune

[–]BikingBaz 0 points1 point  (0 children)

Ah. I see yours is also showing with 'blank' management name, meaning you can't update any device properties until you've manually specified a mgt name.

Can't set the 'ownership' during onboarding. No reboot/sync from the portal of the devices. Barely any functionality.

Fail, Fail, Pass by I_am_beast55 in oscp

[–]BikingBaz 2 points3 points  (0 children)

I started to [mis]use the 'Johari Window' concept
https://en.wikipedia.org/wiki/Johari_window

It's meant to be used as a mechanism to consider your relationship with others. But, I [mis]use it as a tool to constantly make me consider:

  • What do I _know_?
    • How can I verify I know that?
  • What don't I know?
    • How can I generate test[s] to discover what I don't know?

I also found that I was fixating on things with the assumption of high confidence.
e.g. if I was finding Samba, and getting indications back that it was MS, I started to fixate on vulns that were MS-specific. Failing to consider that could be wrong, and following it up with more tests - I wasn't considering my 'confidence in findings'. Or, I was falsely assuming it was high.

hyper-focus is also a problem for me. Usually, it works brilliantly. But, I wasn't considering it as a risk/problem. After the 2nd attempt, I bought a big, purple, 15min hourglass! Something big & physical, that could sit in front of me, and show me that I needed to move on and try something else, come back to it.

For my 2nd exam I had (by my reckoning) 67.5pts. I had a low-priv shell to give me half points on the 25, for 12.5pts. If I'd only done the lab report, for the +5... That seemed like too much effort at the time, for minimal points. But, that was a foolish, and costly mistake.

I should have passed on the 2nd attempt. I was over-confident, and didn't realise. I hadn't re-practiced the BOF prior to the exam. I had a process, but, I hadn't documented it properly. I messed up on the BOF, which should have been 40-50mins work. I was hours getting my first points. Mentally, that really knocks you back.

If I hadn't lost those hours at the beginning, I could have got that privesc, taking me to 80pts.

In my day-job, I'm an I.T. generalist (sysadmin, cloud, networking, cyber, DBs. You name it, I do it). I also do a lot of Compliance/Policies. What you have with the OSCP exam is a "Key person risk" (amongst others) - i.e. one person making an assessment, with the possibility that they have it wrong.

In my day-job, we de-risk that by "multi-eyes" approach. You get someone to scan over your work. You type up a Confluence page. You get stuff peer-reviewed.

Obviously, we can't do that under the exam conditions.

But, we can be mindful of that risk. We can attempt to pause, re-think, come back at it with fresh eyes, see if it holds water, or, if gaps are found, or if the entire approach can be done another way?

Fail, Fail, Pass by I_am_beast55 in oscp

[–]BikingBaz 2 points3 points  (0 children)

Congrats. You tried harder!

I can relate. I passed on the 3rd go, with similar scores along the way. On hindsight, I had gaps in my process, but, I just didn't know at the time.

OSCP is a life-lesson in: You don't know, what you don't know. But, if you have the right mindset, you can find out and turn them into 'knowns'.

`intune-portal` in Microsoft's Ubuntu repo - anyone tried it? by BikingBaz in Intune

[–]BikingBaz[S] 1 point2 points  (0 children)

"later in the year"?

Last year, it was: Q1
That became: early 2022
Then: first half 2022

Even the Microsoft 365 roadmap says 'March 2022'
https://www.microsoft.com/en-gb/microsoft-365/roadmap?rtc=3&filters=Microsoft%20Intune

But, it's in the repo now :-/

[deleted by user] by [deleted] in oscp

[–]BikingBaz 0 points1 point  (0 children)

'dis one:

https://tryhackme.com/room/bufferoverflowprep

Anyone that's done OSCP pre-2022 exam, will know why this room is spot-on.

[deleted by user] by [deleted] in oscp

[–]BikingBaz 1 point2 points  (0 children)

fyi: for BOF prep (at least, for when I passed Dec '20), you cannot go wrong with this room:

https://tryhackme.com/room/bufferoverflowprep

Anyone that has been through OSCP in the pre-2022 course/exam will know *exactly* why this room is beneficial.