My first day in a Linux admin and security course. I went all confident and cocky waiting for some bullshit like "type in your term: ls, cd, pwd, see you tomorrow"
Suddenly the teacher starts to configure lampp, then jumps to bind, and thirty minutes leater , when everyone has their ssl keys under control, I was still struggling to correctly forward my mate. The rest of the day was smooth and easy for those who finished their servers, and there I was, unable to find my own ass in the middle of that mess made of bad assigned permissions and wrong placed addresses. Even worse, he came to me when I asked for help, took my chair and fixed everything in one beautiful single bash line. I started to ask "what's this? Where is that? Is it a config file or a directory?" And with all his patience he keep telling me the obvious answers that where right there at the screen but I couldn't see. Took me two weeks to catch his pace, and another two weeks to understand fully his classes. He never said a word about my terrible first day (first couple weeks). When course finished, I saw he was going to teach a really hard security module, and I signed up without hesitate.

Being a student this was how my colleagues felt about my code and SQL procedures. They didn’t even let me create a change ticket to present to CAB 😂

My last wk93 story, the time we discovered school faculty was spying on students and we uncovered student's deepest secrets.

I call it, kiddiegate.

So if you've read my past rants you've noticed I did some pretty childish and reckless stuff with my highschool's systems when I was younger, but nothing compares to this thing.

After resetting the sysadmin account pwd on some machines it occurred to me I could write a keylogger to capture teachers Moodle accounts and so on, I decided to try it out on a regular lab computer first.

Imagine my surprise when I found a hidden keylogger already installed! I couldn't believe it but then I thought, what if other PC's have it? So I recruited my mates and teached them the process to check if a PC had been infected...ALL PCs were, over 30 computers we checked had been logging for over 3 months! That damn sysadmin! >:[

We were shocked and angry, but then I thought "hey. . . My work has been done for me, better take advantage"

So we did, we extracted each log and then removed it from the PCs along with the keyloggers. There were hundreds of records and then one day we started snooping into the fb accounts of some students (we shouldn't have) we uncovered so many nasty, shocking secrets...

One of the school's lady's man had a drunk one nighter with one of our gay friends, the most secluded and shy guy was sexting like crazy with 15 chicks at the same time, things like that...we promised to never say a word and deleted the logs.

After that we didn't do much and continued highschool as every teenage minor should, getting drunk and avoiding responsibilities, though we could never see many of our classmates the same way. The sysadmin was fired shortly after I graduated, no reason was stablished.

I want to clear out we were minors and laws in my country weren't clearly stablished at the time plus no harm was ever done. I don't condone hacking or any kind of illegal activity, just thought I'd share.

pwd salting

An adult cam website I worked on as freelancer had/has this code everywhere:
$user = $_POST['usr'];
$pass = $_POST['pwd'];
$row = $db->query ("SELECT * FROM users where username='".$user."' AND password='".$pass."' COUNT 1);

I was hired to add new features and was touch any other parts of the code. When my job was done, I tried to fix those as a good samaritan but the client thought I was messing with the system or should be thing of new features to add. So I got fired.

5 years later, I check out of curiosity and they are still there. I ask him again if I can work on them for a little less pay(I'm broke) and he doesn't reply. What a douche. I hope his site receives a shot of SQLi from a customer.

Lets Start a list of all the impertant gnutools, everybody

I start:

- ls
- cd
- pwd
- cp
- $(cd contdir; tar -cf - .) > $(cd destdir; tar -xf - .)
- man
- grep
- vim
- cat
- tac
-

Why did Nintendo stop making the Wii U? It was time for a Switch!

Shit. I just cd-ed to the pwd. I must be getting sleepy.

Within 20 minutes of posting a question on stack overflow it was down voted - with no explanation. Fucking hate that site

Memory leak. Fuck off

about 6 years ago I was working for a large consulting company on a government project. I put in a change for a stored procedure that hard coded the partition to 0, except 0 didn't exist on production, just on test. several thousand government employees couldn't access it for a day. 😞

watched first two episodes of mr. robot and it seems pretty good so far. does it go like other hacker shows/movies or does it stay good?

when you tell your boss 'we need to talk' and he looks genuinely worried 😀

After wasting 30 minutes on slack, Asked a dev where he was, so I could go to his fucking seat to help him fix his issue.

Dude sent me his pwd from shell.

Idk what's the worst part, it's not my job to help him fix issues and I'm trying anyway, or that this guy is the topper from my class in college...

swag link says you need 20 +1's for stickers and 175 +1's for ball from each post. clicking on Learn More it then says you need 15 +1's for stickers and 150 +1's for ball from each post.
How about some stickers for spotting a content issue?

Oh God.

So I'm working on something and I needed to see how it looks when you type a command into the terminal (like the animation).

Quickly Google "Kali linux terminal," since it's kinda where I'm getting some of the design from.

First video "Kali Linux basic commands (every ethical hacker must know in 2018)"

1st command: whoami
2nd command: date
3rd command: pwd
4th command: cd
5th command: ls

I'd say that's a wee bit basic there and those are commands that literally anyone who touches linux should know, dontcha think there pal?

Nice job using buzz words to try and get views on your "tutorial"

had an interview at a place that went good at the technical part but I didn't do great at their 'abstract' questions. the guys interviewing were complete stone faced as well, no personality, pretty sure I wouldn't have liked working there anyways. a few years later and they are still looking for people. the recruiter rings up and I said I wouldn't want to re-interview unless the process had changed. he guaranteed me it had. so I went back in and it was exactly the same. exactly the same technical questions, followed by more abstract questions. different guys but same no-personalities. never going back

Use the terminal inside ide or external?

Devrant freezes when switching to different app then back again. A bit random though, has happened a couple of times but can't reproduce it.

At what point do you leave?
I totally get Amazon's principle of 'disagree and commit' but how many disagreements with your COO, CEO, does it take to make you say:
Fuck this, I'm out of here

A conversation that i had with my co-worker today. I was having trouble getting into UAT to troubleshoot.

me
i lost access to UAT again

co-worker
F. So secure we can't even get in

me:
lol

co-worker:
I'll email whoever we did last

me:
i can get through the first phase(where you enter pin+rsa)
it denies me access after that
says bad username or password

co-worker:
Oh ok. Prolly just need to reset your pwd then. I'll find the email for helpdesk and fwd.
At least ur RSA works.

me:
yeah what a joy

co-worker:
If it's locked you may need to try from a Windows box. Horizon is bugged on Mac where the submit button stays disabled even when you type a pwd.

me:
i couldnt contain my happiness that my RSA worked
😃

co-worker:
Yeah it's exhilarating
Whenever I pick up my rsa token my life re-finds it's purpose and I feel like I'm meddling through a field of sunflowers.

I once tried to get my RSA token tattooed but it switched too quick.

me:
lol its faster that Usain Bolt

co worker:
Russia got kicked out because of their RSA tokens

jenkins tests passing but travis failing. now travis passing but jenkins failing, aargh!

more beer needed...

the cake is a lie

Spent the day with people I work with developing an Alexa skill to kick off a Jenkins job. Fun!

Just started a new job at a big co.
Expected to implement small new feature, no sweat about 30 LOC. Unfortunately no unit tests, no way to test without real data.

Spend 2 weeks trying to get it to run on the test rack. Lo and behold the entire testing system has been sitting broken for months and nobody knew. Why is all the documentation so vague!???

in the hospital with surgery and our deployment goes wrong, so glad I work with really good people!

Blockchain
Or at least I hope so

when github autocorrects my pull request message that contains the word splunk.
(or when devrant also decides to)

<updating Visual Studio 2022 in virtual environment>
VS: now done, you have to restart your computer
<restarts computer>
<starts VS2022>
VS: nice that you are using an update, we want you to log into your M$ account
VS: here is a window where you can log in
<uses window to login with email+pwd>
VS: YOUR ORGANIZATION NEEDS TO UPDATE THE BROWSER, IT'S TOO OLD!!! ARRGGGGGHHHHH
...

When commenting it would be nice to see the comment you are commenting against. Often they are long with several points and you can't refer back to it

If you're always too busy doing the wrong things the wrong way, you will never have time time to do things right

Say after me:
/usr means USER!!!
$PWD means PASSWORD!!!
/dev means DEVELOPMENT!!!!

Don't you dare question this!!1!

BT "We'll give you BT Virus Protect, which protects against viruses, phishing and other online attacks."

Or... For a start, let your users provide a good secure password when signing up? More than 8 characters is a bit ambiguous. 20 minutes later and several attempts to find out it can't be longer than 20 characters, only upper and lower case letter and numbers aaaand must start with a letter is a bit s**t. Not to mention LatPass doesn't like it as you can't copy and paste.

I had to build a few packages today from a git source.

Everything just plain text or shell scripts - so no fancy shit, no buildsystem... Nothing.

I was painfully reminded why I had forgotten a lot about dpkg package builds.

Fun facts:
- seems like impossibro to define an output directory for debuild (../ from source which must be pwd/cwd)
- i used /opt/<vendor_name>... Purging the deb from system deletes opt too, as it is empty
- reprepro (or whateva it is called) fails with an "uncommon GPG error" instead of saying "I don't know which key to use"
- creating rolling release numbers (as the packages won't have a real versioning system...) is fun - when you remember that date isn't sufficient, as the time part is necessary to build multiple packages (versions) per day

Compared to an Gentoo ebuild, this was really rocket science....

Guess as soon as someone does not follow the debian way, he must be shunned and exiled. At least it felt like this ....

But it works now. Woohoo. *cries internally*

Yocto is the most overly complicated shit on earth! How the fuck did i ever get my board to boot? You get so easily lost in layers and bb and bbappend and there are like 20 flavours of assignement operators and to configure the kernel you need to run one command for menuconfig and then another right after to pull a diff out of the .config into your project. otherwise noone else will have your changes. TrY the same thing with the bootloader and the whole thing shits its pants. Also there are like four devicetree that are required for boot. And if you specially fuck up here, your hardware will be an expensive paperweight. Also there are like featuresets that enable shizz like wayland or ethernet but good luck finding out what in the actual genderbent jesus the thing you just configured does. And there is like no way to visualize any of it as its just a cockblock of text and files. Also if you use search the results are most likely useless. As the thing you are looking for is a filename and vscode does a text search only. Also you can add layers but whatever the fuck that means as a bsp is like a layer but so can also be a kernel patch or some rando variable change. And good luck fugurig out to which dir $PWD points to. As it could just be on the Elon Musk nazi base on the dark side of the moon. Also every folder starts with meta for some dumb reason. And if it starts compiling you could just aswell build a coffin and go into winter hibernation. It takes fucking forever. I have a 3800x and the build takes 1.5h. Why? Because, BECAUSE, B E C A USE! There is a require package called optee. Which need a python package. That package depends on a crypto lib thats written in rust. And since its all from source, it downloads the FUCKING rust compiler source and compiles the compiler to compile a lib that only takes like 5 seconds to compile. Also good luck figuring that out without constantly staring at the compile log. As there is some compilation time info but you need to write a parser for that first as there is no included anal -lyzing tool for it. I could keep on yappin' waaay longer about why dantes inferno is kindergarten compared to yocto, but i dont have enough alcohol in the house to fuel that.

Apple's certificate and provisioning profile shite can fuck right off

Crap Gemini

this has probably been mentioned before but how about edit functionality on posts?

PUT vs POST vs PATCH
And none of them fit!

I found myself tonight imagining what a conversation between Cheech and Chong about serverless would be.
Maybe the basis for a new talk?
Suggestions please

Conferences are lonely places

Anybody else get shouted at by partner when you put all heavy stuff at front of conveyer when shopping, or rearrange dishwasher so more things will fit, etc. I thought I was just being logical about these things...

Suggestions for UK conferences please, already going to devoxx, anything devvy would be good, or architecture or web related

The makefile:
'
GOPATH=$(pwd)

clean:
@echo "cleaning :)"
@rm -rf $(GPATH)/bin
'
the "oh crap":

make clean

I'm starting to look at how to get devices to send data to an endpoint for storage and analysis. I'm looking at AWS iot stuff like core and green grass but then I'm thinking that a REST API could also do the job. I don't need to connect devices to each other (in first iteration). Dont think I need any edge stuff either. Anybody have any experience with this?

In client terms, a “3rd party” is akin to Angelina Jolie. Despite the promise that you’ll be able to have an enlightening conversation over a nice meal and hopefully hook up afterwards ... sorry, it ain’t happenin’. You’re just gonna have to fantasize about it while you take care of business yourself.

Feature request: please allow the app to work in landscape and rotate. I can't get to the hamburger menu in bottom right due to broken screen

Cheers for the stickers!

Opinions please. When end user is not paying for service, who is my customer? For example public facing government project

Work has set us a challenge to build a rock/paper/scissors/dynamite/waterbomb api. We have the spec for what json is expected incoming and outgoing. We are allowed to implement any way we want and with any language we want. We are considering using Clojure but we have no experience with it, hence we will hopefully be learning as we go. Would you recommend using a framework like Pedestal, Hoplon, Luminus, or just use Leiningren or something else?

I wouldn't want the keyboard to record my thoughts, it's my filter.

calling a rest API and it returns a 400 when it's data is corrupt, wtf!

Product, not project!

Double guns (with clicking noise) at the screen when solving a tricky problem

A "REST API" that was using nonsecured HTTP as protokoll and send the users pwd in the basic auth header

Anybody else feel that the devrant face, when it's expanding/contracting, is laughing at you?

New to the the electronics stuff and I'm building a word clock. Recommendations for a microcontroller that has at least 22 outputs (22 words to light up). Something from Arduino? Also need to plug in for power and use an RTC.

What's a good inexpensive android phone for development. Something 14 year olds could use without breaking

Ok... I am defeated I don't know what else to try...

Do you guys have any experience with ansible vault? I have my SSH password stored on a vault. It's referenced in my host file like this:
-----START SNIPPET-----
[LCL:vars]
ansible_ssh_pass='{default_pass}'

[LCL]
myhost ansible_user=my username
-----END SNIPPET-----

default_pass is stored as a yaml variable in passed.yml that I supply using --extra-vars '@passwd.yml'

When I enter my vault password I get an exception 'non hexadecimal digit found'.

The password is right for the vault, the vault file is in PWD .... I cannot find anything helpful.

Any ideas?

I never use pwd.

Either I figure out where I am via my prompt, or I use LS and sleuth out the folder via its contents, or I just "cd" and restart from home but I NEVER have used pwd.

Having no human contact for work since starting an internship over year ago and now through January now sucks, but what’s worse is the rug being pulled out from under me

The office isn’t even that nice it’s really just about talking to people