• Activity
  • Votes
  • Comments
  • New
  • All activity
    1. Immersive Labs "Haunted Halloween" Challenges 2023

      Hey everyone! Just wanted to share that Immersive Labs has rolled out their "Haunted Halloween" challenges for 2023. For those unfamiliar, Immersive Labs offers a platform for interactive,...

      Hey everyone! Just wanted to share that Immersive Labs has rolled out their "Haunted Halloween" challenges for 2023. For those unfamiliar, Immersive Labs offers a platform for interactive, gamified learning in the realm of cybersecurity. They've been known to host challenges that test and enhance cyber skills.

      You can sign up for free using code HAUNTEDHOLLOW to try it out hubs.ly/Q026LTZV0.

      Now, I'm not posting this solely out of altruism. I could use some help on the 'Mirrored Mayhem' task.

      Spoiler Alert: Details about the challenge below I've managed to get the RCE. I've crafted a PNG and successfully executed remote code. However, I'm only able to find the 'webapp-token'. I'm at a loss when it comes to the 'user-token' or 'root-token'. The 'whats in the mirror?' file isn't giving me any leads either. I've also got a username/password from it but can't figure out where to use them.

      Would appreciate any pointers or hints from anyone who's tackled this challenge. Thanks in advance!

      4 votes
    2. FFmpeg - Merging multiple videos containing chapters into one with chapters from originals

      Hello, I have quite some technical question and my DuckDuckGo-fu seems very weak on this one. I hope it is ok to post questions on Tildes, as it is not really discussion material... but someone...

      Hello,

      I have quite some technical question and my DuckDuckGo-fu seems very weak on this one. I hope it is ok to post questions on Tildes, as it is not really discussion material... but someone can still learn and use whatever come from this.

      I have Live Aid concert that I ripped from my DVDs and I wanted to merge the individual video files (there are four) into one long video. I'm on Linux and I'm used to ffmpeg in command line, though I do not know it that much. Each of the input videos has its own chapters and I would like to transfer those chapters into the final video as well. Preferably adding a chapter in between every input video.

      I was unable to find if ffmpeg allows for something like that in a single inline command. I may have to export chapters from each input video and add them into one "chapter" file and redo times by hand on them and then use this file as "chapter" input when merging the videos, but all this is just a theory on my part.

      Is there some FFmpeg expert here who has done something like that?

      12 votes
    3. What home network equipment do you use?

      Hey all, I'm interested in going down the rabbit hole with Ubiquiti equipment or other manufacturers, more specifically with access points, routers, and a switch. I want to ween off my...

      Hey all, I'm interested in going down the rabbit hole with Ubiquiti equipment or other manufacturers, more specifically with access points, routers, and a switch. I want to ween off my ISP-supplied all-in-one equipment as their newer hardware limits basic features such as port forwarding, and I'm interested in re-enabling my self-hosted software. Wi-Fi standards have been moving pretty quickly, as have hardware. What setups do you have established in your homes?

      I don't really have a budget in mind, and have a 2.5GbE port I'd like to utilize for media consumption over LAN.

      29 votes
    4. Fortnightly Programming Q&A Thread

      General Programming Q&A thread! Ask any questions about programming, answer the questions of other users, or post suggestions for future threads. Don't forget to format your code using the triple...

      General Programming Q&A thread! Ask any questions about programming, answer the questions of other users, or post suggestions for future threads.

      Don't forget to format your code using the triple backticks or tildes:

      Here is my schema:
      
      ```sql
      CREATE TABLE article_to_warehouse (
        article_id   INTEGER
      , warehouse_id INTEGER
      )
      ;
      ```
      
      How do I add a `UNIQUE` constraint?
      
      6 votes
    5. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      14 votes
    6. People who manage small websites, how much does it cost you in time (and finances)?

      Between "enshittification" and my general admiration for hobbyist websites, I have felt more and more pressed to learn how to make the websites I want to see and offer it at low cost. At the same...

      Between "enshittification" and my general admiration for hobbyist websites, I have felt more and more pressed to learn how to make the websites I want to see and offer it at low cost. At the same time, people usually have to maintain their day jobs and development expenses. I am curious how easy or difficult it is for people to do. (Also, I guess please share your small website if you'd like)

      24 votes
    7. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      15 votes
    8. PowersHELL scripting

      Does anyone else in here use powershell as a sysadmin? If you do, do you also feel the agitation and drive to want to throw yourself down a stair case face first through frustration? I hit a wall...

      Does anyone else in here use powershell as a sysadmin? If you do, do you also feel the agitation and drive to want to throw yourself down a stair case face first through frustration?

      I hit a wall a couple of weeks ago due to the deprecation of msonline and with this believed it would be good to move to PS7. What I didn't realise is how much of an absolute jar of jam and mustard mix Powershell is. Core, Desktop, modules and clashing assemblies. Trying to combine ps7 core with AD, AzureAD and having to use Graph for license management - urgh!

      I just spent two days writing up an amazing script with functions and arrays to load modules, connect to Entra, get licensing info with nice math, turn that in to a menu, create local AD user and sync, license in EntraID, mailbox enable and sync location, the works.

      Then, something changed in a module update. Locally in the OneDrive I had 2.6.1 of graph users and Auth, that was playing well with AzureAD in core, but OS had 2.7.0 of graph. I cleared out my modules and it's broken everything, even on reinstallation.

      How in the bloody Hell is Powershell ever supposed to be used and stable when module inconsistencies exist everywhere? I pulled down AzureAD again to find it no longer connects in PowerShell 7 core due to assembly version issues. I use the switch to use Windows Powershell for the AzureAD connection to then have that break the licensing math that was working in a function.

      Sigh.

      I'm coming from Bash on Linux where shit just works. It works for YEARS! Very few times in my almost 30 year career have I had Bash just decide it doesn't want to work and when it does, it's documented. Powershell does not seem to make sense or be documented well.

      Anyway. Rant over. Back to working out what module I need fixed at an EXACT version to make it all work again and to hope MS don't randomly deprecate it again.

      EDIT and SOLVED!
      I shouldn't even need to update this but after spending a lot of time debugging, it turns out that you cannot call microsoft.graph.users and microsoft.graph.users.actions as they will clash, even though they are part of the same package, you'll get assembly issues. The fix - install the whole MICROSOFT.GRAPH module, all 10k parts of it, but DO NOT IMPORT IT. Now you can import-module microsoft.graph.users and the parts from .actions will also be available without loading. I don't understand why, I'm actually past caring. I'm hoping someone else scouring the internet and hitting the same wall may stumble on this and it'll help them out. Hell, I may even blog about it. Thanks for listening to my misery.

      37 votes
    9. DS923+ 8GB (non-official) RAM recommendation

      Hi everyone, So, I have a DS923+ with 4GB of RAM and while it is running fine most of the time with my Docker containers, I guess everything could be more fluid (e.g. scrolling on Jellyfin while...

      Hi everyone,

      So, I have a DS923+ with 4GB of RAM and while it is running fine most of the time with my Docker containers, I guess everything could be more fluid (e.g. scrolling on Jellyfin while it is loading info / images).

      Since the Linux OS uses free RAM as cache, I was looking to buy an extra stick of RAM. I was thinking of buying a 8GB of RAM which in total my system would then have 12 GB. Not sure if overkill, but still, I run a few containers.

      I’ve actually searched on the Synology subreddit, but everyone is basically buying 16GB of RAM or maxing out the GB allowed for the RAM on the DS923+. So, that is the reason why I’m asking here.

      I know that Kingston has some 8GB RAM sticks which should work with DS923+ but it seems they are blacklisted by Synology, so it seems you will always have a warning on the notification list which I wanted to avoid. :/ But on that list (see here: Ram list), it seems the 8GB RAM that Synology uses is sourced from Innodisk or Adata, so you shouldn’t get any warning there. Sadly, I can’t find them anywhere for sale. Even when I contacted the companies directly.

      In conclusion, has anyone bought a 8GB ECC RAM for the DS923+ which doesn’t give a DSM warning?

      Thanks everyone in advance!

      Cheers!

      8 votes
    10. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      15 votes
    11. How do you test your home network security?

      As I'm exploring the idea of hosting my data at home (with offsite backups), I would like to better understand how to test my home network for security vulnerabilities. I have run basic Nmap scans...

      As I'm exploring the idea of hosting my data at home (with offsite backups), I would like to better understand how to test my home network for security vulnerabilities.

      I have run basic Nmap scans and confirmed that there are no open ports. I've confirmed that users have access to what they need but nothing else, and that guests using the network for web access don't have any sort of access to data. All data is encrypted so someone stealing the physical hardware shouldn't have access to the contents, either. But that's about as far as I know what to do.

      What else could and should I try? How do you pentest your home network?

      I feel I'm ok with my understanding of how to set things up so that everything is relatively secure. But I have very little idea how to actually test the setup.

      Edit: Added a sentence about encryption.

      25 votes
    12. Desk setup / Battlestation Thread.

      I am a pretty big fan of the PCMR Battle station posts where everyone shares their computers and desk setups. I have never seen one here so I figured I would start one! Here is my desk, three 32"...

      I am a pretty big fan of the PCMR Battle station posts where everyone shares their computers and desk setups. I have never seen one here so I figured I would start one!

      Here is my desk, three 32" monitors (two facing the desk, one facing my living room on the back ). I primarily use my lower monitor and have background stuff on the upper (spotify, torrent client, youtube, podcasts, winamp, twitch, discord, etc etc). I have a bunch of old Xbox360 controllers and enjoy playing PC games on the couch on my rear monitor (as well as streaming obviously). The rear monitor also has a firestick and my only source of sound (other than my headset) is an Amazon Echo (which also controls my living room lights). The PC is a prebuilt from iBUYPOWER, it was my first time buying a prebuilt (I was hesitant to do so) and the only reason I did was because I was wanting to build a new rig right as crypto mining was driving up the cost of everything and I was able to get a great deal on this one. So far it has performed great. I still have two RAM slots open so I think that is the next thing I am gonna do.

      I built my last computer in 2008 so I was way overdue for a new one and my S.O. has informed me I went a little overboard =)

      9200 i7-8700K 6-Core 3.7 GHz | Liquid Cooled | Z370 Motherboard| GeForce GTX 1070 | 16GB DDR4| 1TB HDD | 240GB SSD |

      Lets see what you guys have!

      EDIT: sorry for the low picture quality, my cell phone is garbage.

      EDIT2: forgot to include a screenshot

      It's the same background on all three, but the taskbar is basic on the two secondary (and icons are only on the main). And if anyone was confused about the random monitor hanging off of the back of my desk this kinda shows it better.

      26 votes
    13. Fortnightly Programming Q&A Thread

      General Programming Q&A thread! Ask any questions about programming, answer the questions of other users, or post suggestions for future threads. Don't forget to format your code using the triple...

      General Programming Q&A thread! Ask any questions about programming, answer the questions of other users, or post suggestions for future threads.

      Don't forget to format your code using the triple backticks or tildes:

      Here is my schema:
      
      ```sql
      CREATE TABLE article_to_warehouse (
        article_id   INTEGER
      , warehouse_id INTEGER
      )
      ;
      ```
      
      How do I add a `UNIQUE` constraint?
      
      5 votes
    14. What is your preferred VPN?

      For a few years now, I've been using ExpressVPN, and have enjoyed it immensely. However, with the price going up (I know, everything else is too), I'm looking to see what other VPN services are...

      For a few years now, I've been using ExpressVPN, and have enjoyed it immensely. However, with the price going up (I know, everything else is too), I'm looking to see what other VPN services are good.

      And just to give so.e detail, for the most part I use VPN for two reasons: Being (slightly) safer when torrenting, and also to access websites that are not available where I live (in Japan these days).

      NordVPN jumps to the top when searching, but something seems fishy about it. So, what are your suggestions?

      55 votes
    15. Have you ever compiled a custom Linux kernel?

      I was stubbornly determined to get my new Yubikeys working for FIDO2 SSH on WSL, which led me down the road to compiling my own custom Linux kernel for WSL with HIDDEV and HIDRAW enabled. This was...

      I was stubbornly determined to get my new Yubikeys working for FIDO2 SSH on WSL, which led me down the road to compiling my own custom Linux kernel for WSL with HIDDEV and HIDRAW enabled.

      This was my first time ever trying anything like this, and by the end of it I realized that it's not actually so scary to compile your own custom Linux kernel!

      Have you ever compiled a custom kernel before? What was the sequence of events that led you to do it?

      20 votes
    16. Recent DAKboard issue

      I have been running a DAKBoard on a Raspberry Pi 4 for almost 4 years now without any problems until recently following this guide IIRC. About 2 weeks ago, DAKBoard started logging itself out and...

      I have been running a DAKBoard on a Raspberry Pi 4 for almost 4 years now without any problems until recently following this guide IIRC.

      About 2 weeks ago, DAKBoard started logging itself out and only shows a black screen with the time on it and the DAK logo in the lower right corner. If I go into the settings it will bring up the DAK page that shows I am not logged in. When I log in again it seems to work randomly for about 24-36 hours.

      I'm running it in a kiosk mode browser on Raspberry Pi OS. I am using the free tier of DAKBoard.

      Before I wipe the SD card and start over from scratch I was wondering if there were any suggestions? To be completely honest, it has been "set and forget" for the past number of years so I would like to make sure I'm not overlooking something pretty basic/easy.

      On a side note: Has anyone had any experiense using the DAKBoard OS on a Pi? I don't remember it being an option when I set it up originally.

      Thank you for any assistance and if you have any spare hardware laying around I'd highly recommend setting one up, my family finds it incredibly useful for the calendar function and a conversation piece when they notice different photos rotating in and out.

      3 votes
    17. How do you use your YubiKeys?

      I'm a little late on this, admittedly. $dayjob is requiring us all to set up a pair of YubiKeys, and I'm using them for the first time and my mind is a little blown. I was seeing articles about...

      I'm a little late on this, admittedly. $dayjob is requiring us all to set up a pair of YubiKeys, and I'm using them for the first time and my mind is a little blown.

      I was seeing articles about "passkeys" all summer, not really grokking what they were talking about, clinging to my usernames and passwords and 2FA codes coming out of 1Password, etc.

      I just set it up on a few accounts today, initially as an additional 2FA source, but when I set them on GitHub, I saw for the first time how exactly they are used instead of the username and password and 2FA combo to log in, and it seems incredible to me!

      For long-time YubiKey users: what are some cool things in the ecosystem that you would recommend looking at?

      21 votes
    18. What programming/technical projects have you been working on?

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's...

      This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

      9 votes
    19. Is this backup solution fine?

      I decided to set up automatic backup of my files from my phone and laptop to Backblaze B2. I didn't find a good solution to sync photos from my phone directly to Backblaze, so I decided to do the...

      I decided to set up automatic backup of my files from my phone and laptop to Backblaze B2. I didn't find a good solution to sync photos from my phone directly to Backblaze, so I decided to do the following:

      1. Sync photos from my phone to my laptop using Syncthing
      2. Back up those photos as well as other files from the laptop to Backblaze using Restic

      Is this backup solution fine, or are there any issues with it?

      Also, most of the stuff I need to back up, even on my laptop, are photos/videos. Is there a point in using Restic with it's deduplication and incremental backups for this use case, or should I just use Rclone directly? I'd assume deduplication won't save me much storage because photos generally don't have similar byte chunks, although I may be wrong.

      12 votes