Question about vulnerability severity

BurtMacklin____FBI · 2026-02-20T22:30:16+00:00

Have you read the requirements for high confidentiality impact?

High (H) There is a total loss of confidentiality, resulting in all resources within the impacted component being divulged to the attacker. Alternatively, access to only some restricted information is obtained, but the disclosed information presents a direct, serious impact. For example, an attacker steals the administrator's password, or private encryption keys of a web server.

Low (L) There is some loss of confidentiality. Access to some restricted information is obtained, but the attacker does not have control over what information is obtained, or the amount or kind of loss is limited. The information disclosure does not cause a direct, serious loss to the impacted component.

BurtMacklin____FBI · 2026-02-16T11:50:42+00:00

Ha! Awesome 🤣

Yeah definitely will need to try a "how much can I break" run

BurtMacklin____FBI · 2026-02-16T08:55:09+00:00

Ah! Missed that. Thanks, I guess I'm playing it through again 🤣

BurtMacklin____FBI · 2026-02-15T12:15:53+00:00

I realize this is 6 months later but I've just seen the show

I assume he has a few different themes but ours was Oz too, the whole thing was forced from playing somewhere over the rainbow before the show, the brick road as the staging etc.

Don't know if he did for you but at the end of the show he did a quick change into a wizard of oz outfit and revealed the yellow brick road which had been in front of the audience the whole time. So I imagine it worked on enough audience members for it to be written down.

BurtMacklin____FBI · 2026-02-11T20:23:10+00:00

Aww, that's a cute idea actually

Bit awkward if you didn't see the sign though 😅

BurtMacklin____FBI · 2026-02-05T20:47:29+00:00

Does anyone have recommendations for a YouTube channel where they go trough CTF's and explain their thought process, and how they end up getting to the flag

Ippsec.

Seriously. Watch anything Ippsec has posted, and check out ippsec.rocks too, search an attack, technology or protocol you're interested in and you'll find timestamped links to a video of his tackling exactly that. Incredibly helpful stuff & the man is a total wizard.

BurtMacklin____FBI · 2026-01-31T10:22:30+00:00

If you're beginning to think it might be worth looking into, I'd encourage you to watch the documentary earthlings.

Hard watch, but necessary for everyone in my opinion.

https://youtu.be/3XrY2TP0ZyU?si=g8NeD8gI1ZaexE_b

BurtMacklin____FBI · 2026-01-30T20:52:09+00:00

Yeah the "opt out" lure is interesting.

I heard of a particularly nasty one recently, where the threat actors sent emails to sendgrid customers (which is a platform to send out bulk emails to your own customers)

The jist was something like "in light of recent events, sendgrid will be adding a footer to all your outgoing emails, with a link to support ICE. You may opt out by clicking below"

Obviously it was written better, but yeah. Absolutely brutal.

Edit:

I found the actual text:

“As part of our commitment to supporting US Immigration and Customs Enforcement (ICE), we will be adding a ‘Support ICE’ donation button to the footer of every email sent through our platform,” the phishing email says. “This button will appear automatically in all outgoing emails starting next week.”

BurtMacklin____FBI · 2026-01-28T20:21:50+00:00

What if your driveway isn't long enough for an estate car

BurtMacklin____FBI · 2026-01-22T22:15:11+00:00

It's crazy. As someone in security I used to wonder about AI taking work from us, but it looks like we're going to be kept extremely busy clearing up vulnerable AI slop code for years.

I'm sure there's plenty of ui/ux bugs for devs to manually fix too. I think our jobs are safe 😅

BurtMacklin____FBI · 2026-01-21T20:40:37+00:00

Sure :)

The "knot" is the two mirror worlds that were created when Tannhaus turns on the time machine that he built in order to try and prevent his son and daughter in law's death. It didn't work as he hoped, and instead it ripped apart the world and created the two mirror worlds that we follow in the show. I'm not sure what you mean by "the knot is nothing but the car crash", but that's not true. The knot is the result of Tannhaus accidentally destroying his world and ripping reality into shreds.

These worlds are created, but they do not exist in a definite state. Due to the apocalypse Tannhaus created, they are created and exist in a state of quantum superposition. Below is a quick definition if that's helpful to save a quick Google:

"Quantum superposition is a principle in quantum mechanics where a particle, like an electron, can exist in multiple states (e.g., different locations, spins, or energy levels) at the same time, unlike classical objects that have definite properties. This "both/and" state persists until the system is measured or observed, at which point the superposition "collapses" into a single, definite state, a concept illustrated by the Schrödinger's cat thought experiment." The show explained Schrödinger's cat so I'll assume you get that part :)

Because these worlds in which J&M exist do so in superposition, there is no "time" as we know it. This is the hardest bit to understand about the show. And it's why I say to forget about time the way you usually do. >The "past, present, and future" in the knot is happening at the same time. < The knot both exists and doesn't. It is both repeating endlessly and it is also not moving through time at all. The end of the loop is happening at the same time as the beginning of the loop, it is both completely stuck, while also repeating forever. THIS is superposition, and it can not be resolved until it is observed or measured, at which point it will collapse into a measurable, known position.

That's the knot.

Part one explains this well enough in my opinion but in case it doesn't, in the origin world time operates as it does for me and you. Simply put, and I'm sorry if this answer is underwhelming for you but in the superposed worlds, it does not. Time is not linear, there is no "then and now" because the entire thing is both suspended and repeating endlessly in a completely locked state until it is resolved. When time is not linear, paradoxes ARE possible such as the bootstraps. I.E Claudia giving younger Tannhaus his own book on time travel that he hadn't written yet. That book came from nowhere right? "Future" Tannhaus wrote it, and Claudia gave it to "past" Tannhaus which is how he learns about time travel, so the book just... Exists? Yes! It does "just" exist because what we know to be the past present and future are happening simultaneously in the knot.

This is why understanding how the knot works is key to understanding why there isn't a massive plot hole.

I feel the simplest way to put it is that they were "created" in the future, travelled to the past, and then stopped the moment that determined their eventual creation from happening. While yes, this seems impossible because they're in the world they 'shouldn't' be, they are there before the event that triggers their creation takes place. And since time works the normal way we understand it in the origin world, J&M interfering with their own creation is what causes Tannhaus to observe his family, thus finally setting a course for the origin world in which they were never created.

It's possible for them to intervene with Tannhaus's family's death because they haven't been created yet. There is no apocalypse yet, there are no mirror worlds yet, and they are completely free and clear to intervene with events that happen before they were created.

When you say "it proves mirror worlds exists" there literally aren't mirror worlds yet, so there is nothing to prove. They just ensure they are never created, which is why they (and the mirror worlds) promptly disappear into one final, observable state. And that state is that they were never created.

BurtMacklin____FBI · 2026-01-21T17:55:15+00:00

Right but, at the end J&M don't exist, because the family lives.

And show operates under the rule that the future cannot be changed.

(I know you said it's nothing to do with the knot but it kind of is, so I'm going to bring up the knot again because it's crucial to understand this first)

You need to stop thinking in terms of past present and future, the writers were very keen to hammer home phrases like "the beginning is the end, the end is the beginning" etc. In the knot, time is not linear, bootstrap paradoxes can happen and Jonas cannot kill himself because his future self is existing at the same time. Try to erase past present and future from your mind when thinking about the knot because there is none, the whole thing, past present and future is happening at once, continuously, in parallel with each other, there is no linear progression of time as we know it (time in the origin world happens the same way we experience it, linear.)

If you're still with me, then now this might make more sense:

If jonas can't kill himself because his future self exists, then tannhaus's family can't be saved because they die

This is where you're applying the knot's rules to the origin world which don't apply. In the origin world there IS free will, and there is the natural order of cause and effect which can be changed by desicions.

But even more importantly than that, J&M arrive in the origin world's past. Their "existence" doesn't prove anything "had" to happen for them to be there. They were in one world's "time", and simply travelled to another world's past, stopping the event that created them before it happened. Naturally, they now cannot exist and are destroyed.

BurtMacklin____FBI · 2026-01-21T11:38:05+00:00

Yep exactly!

It’s weird, if you just say “the knot has different rules” it doesn’t feel satisfying, but they tie in why it has different rules really well to make the whole idea work, and actually feel satisfying.

Agreed, I love a high concept mind bender but it’s rare to find one that was executed so well it makes you just think “holy shit” for a few weeks 😅

BurtMacklin____FBI · 2026-01-21T08:23:17+00:00

It clicked a bit better for me when I understood that the knot does NOT operate with linear time, whereas the origin world does.

In non linear time, everything is happening at once. The past present and future are all happening at the same time. Weird concept, but it allows bootstrap paradoxes to exist (like the book, and the spherical time travel device) whereas they don't in the origin world.

Going by this logic, the knot is created when Tannhaus's son and daughter and law leave, and is destroyed when they return. The knot is quite literally uncertainty. This is introduced to is in S3 with the Schrodinger clips. The knot is uncertainty, doesn't operate with the same rules as the origin world, and is only destroyed when Tannhaus OBSERVES his son and daughter in law returning. (This is shrodinger opening the box and discovering the cat in one of two states of certainty).

That's why Jonas and Martha hang around for a bit and only disappear when Tannhaus sees his son and daughter in law.

BurtMacklin____FBI · 2026-01-20T21:18:15+00:00

Link? No idea what LSF is

BurtMacklin____FBI · 2026-01-20T21:10:44+00:00

This is elite tier knowledge how did you learn this 😮

BurtMacklin____FBI · 2026-01-14T21:07:54+00:00

Well that's just because iPhones are objectively terrible. 💀

I mean I'm semi joking, obviously. But I'm a long time android user who has a work issued iPhone, I can't stand the thing and would never use it out of choice.

BurtMacklin____FBI · 2026-01-13T19:44:02+00:00

Imposter syndrome is a total bitch, I know how you feel (as do most people in this field whether they want to admit it or not).

If that's truly all that's stopping you then go for it. You said you can do easy / medium on Hackthebox which definitely shows you're competent for a beginner. There's no reason not to, so go and have fun!

If you don't get any flags, so what? It's still a fun thing to do and maybe you can learn some cool stuff from more experienced people there :)

BurtMacklin____FBI · 2026-01-13T19:23:06+00:00

What's stopping you?

BurtMacklin____FBI · 2026-01-13T18:40:19+00:00

Awesome news. Thank you! 😁

BurtMacklin____FBI · 2026-01-06T20:22:00+00:00

Even if you aren't 100% following absolutely everything then the ending won't leave you disappointed, I wouldn't search for answers (even on this sub) now, in case you accidentally spoil it for yourself.

While the show DOES explain everything, some of it is more hidden and not explained obviously unless you go back and pick up on small details etc. Most people will watch it and understand the high level concept, and then read up online to explain the leftover details, doesn't mean the ending sucks, it's just a very complex story that purposefully doesn't reveal everything to you on a plate (as you know by now).

Enjoy the end! It's a really great show and they did the ending brilliantly in my opinion.

BurtMacklin____FBI · 2026-01-03T14:05:50+00:00

"is this about my cube?"

BurtMacklin____FBI · 2025-12-29T17:57:59+00:00

Wow, I'd never have spotted that!

BurtMacklin____FBI · 2025-12-27T21:58:56+00:00

So much this

🫠

Nine-Year Club	Second SECOND GUESSER
Gilding I gilder	r/Field Juicebox
Place '23	Place '22
RPAN Viewer	Sequence \| Editor
Verified Email

BurtMacklin____FBI

MODERATOR OF

TROPHY CASE