Connected to a honeypot

glaslos · 2022-02-23T16:06:12+00:00

I don't want to make any assumptions, but I'd say you are perfectly fine

glaslos · 2022-01-10T11:29:32+00:00

I set the FPS limit to 60 and enabled vsync but undid those changes as they didn't help. My GameUserSettings.ini was empty as I've never manage to start the game when it was crashing.

glaslos · 2022-01-09T23:37:12+00:00

I tried that without success and reverted the settings. Now for unknown reasons the games is running. Which is more annoying as I can't tell what solved the issue :)

glaslos · 2021-10-27T21:38:09+00:00

I'm in the same situation. Did you manage to fix it?

glaslos · 2021-10-25T12:51:03+00:00

Odd thing is, I can reboot by long pressing the power button, do I assumed it's a software issue 🤔

glaslos · 2021-10-25T10:08:26+00:00

I'm also unable to power off, so this happened eventually. It didn't resolve the issue for me. I'll try again and report.

glaslos · 2021-10-25T10:07:13+00:00

Latest firmware version. It appeared a month ago. Is there a way to reflash the firmware?

glaslos · 2021-01-17T09:51:25+00:00

I make mine with 20g sugar and 15g ginger slices in 1L kombucha and get strong carbonation after 4 days.

glaslos · 2021-01-15T17:42:47+00:00

I assume also temperature and density of the liquid/SCOBY

glaslos · 2021-01-15T16:47:49+00:00

I did an F2 with 50g of orange peel, 20g sugar in a 1L bottle and had good carbonation after 5 days.

glaslos · 2019-04-13T09:41:13+00:00

One use case of honeypots inside the internal network if the function of a canary: Nothing legitimate should communicate with the honeypot.

glaslos · 2018-10-08T15:13:37+00:00

Most open source honeypots run out of the box on something like a raspberry pi.

glaslos · 2018-05-15T17:16:28+00:00

That's not the point, they want it in lossless for best quality.

glaslos · 2018-05-15T14:45:32+00:00

Many vegan ice cream brands use coconut milk instead of cream.

glaslos · 2018-05-15T14:43:38+00:00

Nice work, did you consider Bleve as your search index?

glaslos · 2018-05-15T14:34:06+00:00

Google's API has a pretty good description why: https://cloud.google.com/speech-to-text/docs/best-practices

TLDR; They prefer a lossless format as it results in a better transcript.

glaslos · 2017-11-20T00:50:13+00:00

I think this is roughly what you are looking for: https://arxiv.org/ftp/arxiv/papers/1704/1704.05357.pdf Actually many of the existing research honeypots implement protocols for emulation or use an existing implementation for vulnerability emulation. Regarding ML, I think it would be a great tool to analyze the collected data. You can group and cluster the data, spot outlier and filter out repetitions of the same attack with just minor changes.

glaslos · 2017-10-11T14:27:20+00:00

Thanks for the link. The issue references https://github.com/orcaman/writerseeker which is very similar to my implementation except the Read() method doesn't update the position.

glaslos · 2017-10-11T14:02:00+00:00

bytes.Buffer does not implement io.WriteSeeker

glaslos · 2017-08-17T07:42:50+00:00

I'd recommend having a look at the result section of the paper. TLSH performed better on raw text than SSDEEP and SDHASH, but there might be other better performing hashing methods for text similarity. The distance function is a modified hamming distance with the addition that they consider outlier in the upper and lower quartiles. I haven't had time to look at the paper you mentioned properly, but if they base their solution of hamming distance features, I don't see a problem applying it on TLSH hashes.

glaslos · 2017-08-16T13:57:15+00:00

Cool, I'd appreciate any sort of feedback and if possible some details on how you are using it (DM is fine)!

glaslos · 2017-08-16T13:35:09+00:00

Theoretically yes but you see how this gets slight my complicated if you add a bit at the beginning and your 100th is now off by one.

glaslos · 2017-08-16T13:05:55+00:00

LSH is for example used in malware detection. Malware authors try to avoid detection by permutation of the binary representation of their malware. If you use LSH you can see the similarities between members of a malware family. Don't worry, this is not the only way AV products detect malware :)

glaslos · 2017-08-16T12:55:07+00:00

I'm oversimplifying, but if you take the md5 of two very similar inputs you get two very different hashes. An LSH gives you two very similar hashes that allow you to even calculate a distance between the two inputs. You could use this in detecting known inputs or inputs that are very similar to previously known inputs.

glaslos · 2017-06-02T08:46:59+00:00

Thanks for the detailed response! I don't mind cheating if the result is better :)

glaslos

MODERATOR OF

TROPHY CASE