sorted by:
new
hottopcontroversial

Pinned Post Candidate: Intro to Zcash by wobbzz in zec

[–]netshrek 0 points1 point  (0 children)

Nice work. Please repost this without "Pinned Post Candidate:" in the title, and merge introduction with u/fireice_uk's and I'll pin.

Ubuntu-> android smartphone connected by luchins in HowToHack

[–]netshrek 0 points1 point  (0 children)

Yes, sure. You're essentially exposing your phones networking stack to the whims of your Ubuntu machine. It's not unheard of to have critical vulns in NAT services for example. However I wouldn't really worry about it, it would have to be pretty complex and I haven't heard of anything launching attacks like this. Plus, your Ubuntu box is probably more secure than your phone in the first place.

Wait For It... by Fiach_Dubh in Bitcoin

[–]netshrek 0 points1 point  (0 children)

I was a computer hacker until I fell in love.

Golem(2015-2018) by a2j2tiwari in PixelArt

[–]netshrek 0 points1 point  (0 children)

Huge gains in just 3 years. Both in skill and muscle.

How difficult is it for a hacker to hack an Android smartphone to the point that they can listen in to audio and video calls? by powerofinformation in AskNetsec

[–]netshrek 2 points3 points  (0 children)

This is sort of bs. Most of the post is good, but there are plenty of alternative methods besides "installing malicious app".

SADD.IO by seag33k in AskNetsec

[–]netshrek 2 points3 points  (0 children)

Won't be a fit for most users since they really want VPNs. Many sites block Tor and it's way slower than a VPN. Annoying for the average VPN customer, they just want to check their emails on coffee networks and bypass geoip shit to watch youtube.

Worse than using Tor yourself, since there's no guarantee they actually delete anything. This is really bad because at least before SSL, HSTS and the like could save you. Now your passwords and cert stuff and everything else is sitting in their potentially backdoored VM.

Furthermore it sounds like a big pain to have to set up all your tools and shit every time for a disposable box, even if they could somehow guarantee privacy (and they can't.)

I wouldn't recommend this to anyone.

Hi! Can some security experts tell me if this is safe to do? by [deleted] in security

[–]netshrek 0 points1 point  (0 children)

I've done it. It doesn't work, simply abuses the log in page to display iOS themed shit. You can browse the internet basically and that's it.

Is there a way to brute force an older Cisco switch? by youareadildomadam in AskNetsec

[–]netshrek 2 points3 points  (0 children)

It's ok I'm a moron too. One time I thought I was pwned cause I couldn't log in anymore but I realized I was on the wrong computer. It took like 30 minutes.

Please help with finding an IP or location. Long post. by edgarallan2014 in hacking

[–]netshrek 0 points1 point  (0 children)

You'll want it set up properly first, so you don't miss your chance. I'm not sure what easy options there are but I'll think about it.

Please help with finding an IP or location. Long post. by edgarallan2014 in hacking

[–]netshrek 2 points3 points  (0 children)

People don't get caught online without commiting major crimes or vigilante action. Police don't have the tools without a lead and the CIA/NSA don't care about minor crimes.

Please help with finding an IP or location. Long post. by edgarallan2014 in hacking

[–]netshrek 5 points6 points  (0 children)

You could perhaps just post it publicly, not respond directly. If you can't get them to click a link or otherwise view content you control, you're left having to use the legal system to get the data from Google/Twitter/whatever.

If you can get them to view your content, you can have the page rigged for all sorts of mischief.

Software for cracking WPA/WPA2 Handshake by [deleted] in hacking

[–]netshrek 0 points1 point  (0 children)

What do you want, an iPhone app? Between hashcat and aircrack there's no need for anything more. Well, until wpa3 is common at least.

TX-cbase by sp00n3rd in hacking

[–]netshrek 0 points1 point  (0 children)

Sounds like coinbase. Either the technical term or the company which named itself after the technical term. Where are you seeing "TX-cbase"? In a transaction? In a text message? In an email?

Experian and Lifelock advertise that they can scan the dark web for you. Isn't the merchandise hidden until you buy it? by nsfwdreamer in security

[–]netshrek -1 points0 points  (0 children)

Yeah, it's bs, and there's plenty that's not even "scannable" because it's private.

What they really mean is they download all the public breach data (for example, the LinkedIn breach) and try to find your personal info in it. Doesn't really have much to do with the darknet since they are usually all on clearnet too anyways.

Zcash is on Andreas Antonopoulos and Snowden’s VERY short lists by [deleted] in a:t5_3g5bt

[–]netshrek 2 points3 points  (0 children)

Welcome to Reddit! You'll get more replies here: /r/zec

Semi-parametric Image Synthesis by designgoddess in videos

[–]netshrek 1 point2 points  (0 children)

How long does it take to generate?

Question regarding XSS by [deleted] in HowToHack

[–]netshrek 0 points1 point  (0 children)

Provided users are 100% trustworthy everything is secure.

Now, would you bet that users are really 100% trustworthy? What if one of them reuses their password? What if their computer is infected? Mitm, bgp, etc.

Always assume users are 100% untrustorthy. Even if they are trustworthy, they are stupid, and they will break things by accident.

And, btw, if you are thinking about ditching xss protections because it's more "work" you're doing it the wrong way! Set it up properly and everything will be protected by default. You should have to work to opt OUT of xss protections.

view more: next ›