Jump to content

cooper

Dedicated Members
  • Posts

    6,071
  • Joined

  • Last visited

  • Days Won

    139

Posts posted by cooper

  1. What language would that need to be in?

    Also, what programming topics are you working on or maybe already somewhat familiar with? Think stuff like databases, database interaction, webservice, web communications client, website, fat client application, telephone app... The world is your oyster.

  2. There are USB monitors which might be useful. No recording though.

    The device you actually want is a KVM over IP switch. The last thing you want to manage a machine is to go down to the rack, find the unit, plug in a monitor, mouse, etc and work it from there. Unless you're in charge of the cables, hardware operation (as opposed to the software running on there) and/or the on/off switch, stay out of the server room as much as you can.

  3. If you live someplace where it's not uncommon to go home and find the floor wet due to flooding, MOVE.

    This situation can't be good for anything, including your computer(s).

  4. Exactly this.

    You'll want to (also) go to small(er) cons, 2600 meetups, OWASP meetups, BSides events, learn what you can from others there and teach yourself when you're not there. Gain an understanding of stuff that interests you - not because work in that area pays better but because you love doing it. It's what keeps you motivated. When you feel you understand something well that others might not (just ask people: "would it make sense for me to do a talk on this?"), do a presentation on that topic at one of those smaller events. You'll build communication skills, people will learn from you (which will get you noticed, which does help with getting work) and others might approach you with cool questions you never thought of asking.

    It's good to keep in mind that the goal of security work isn't to find problems but to explain to whomever is running some kit/software what the consequence of this issue can be, how it can be mitigated and how it can be fixed. Sometimes a problem can't be fixed or patched for some reason and you need to give them useful, actionable advice on how to best handle that risk. Being able to communicate well helps a lot here. Being able to put on your resume that you've presented on (preferably relevant to the work you're applying for) topics at %EVENT% gives you a leg-up on the competition.

  5. In dutch it's called "een piep-systeem" - a beeping-system. In dutch, when you say someone 'starts to beep' ("begint te piepen") it has a slang meaning of someone being childish and/or making noise about being sorry for themselves. The use of that phrase is usually reserved for kids who are being annoying because they want something they cannot have (candy/toy/their way/whatever). In this case, it's beautifully suitable to both viewpoints to the situation - an alarm going off because something has gone awry vs someone being prissy because they discovered you made it impossible for them to have their way.

  6. I can't find the image anymore, but there was this HILARIOUS pic of the default error page for when IE couldn't find a URL. Someone made an exact copy buy changed the text in an ingenious way so the sentences are roughly as long, the references to elements in the IE setup are where they would normally be ("Did you check under [Internet Tools] because I'm sure you'll find a picture of yourself there").

  7. Laten we eens beginnen bij het begin: Wat probeer je te doen?

    Het doel van de configuratie waar is in zat was om van de Pineapple een eigen, draadloos netwerk te maken. Zodra je de configuratie hebt aangeleverd sluit de Pineapple al zijn draadloze netwerk verbindingen af en start hij een nieuw access point met de ingegeven configuratie. Dat is de reden van het verbreken van de verbinding. Je moet hierna dus opnieuw de verbinding maken met het Pineapple netwerk wat op je wacht op het gegeven SSID en beschermd middels het gegeven wachtwoord.

    Die regel tekst die je trachtte uit te voeren... Snap je wat dat doet, waar het voor nodig is en wat het als eindresultaat zou moeten hebben? Begrijp je wat er mis ging en snapte je eventuele foutmeldingen?

    De Wifi Pineapple is een aanvals tool, te gebruiken voor netwerk penetratie tests. Zoals jij het beschrijft gebruik je 'm slechts als draadloze netwerk adapter. Dat kan en daar is op zich niks mis mee, maar het is alsof je een iPhone gebruikt als viltje om een tafel mee stabiel te krijgen - het zal vast kunnen werken, maar een beetje zonde van het geld...

  8. 10 minutes ago, TheYield said:

    Goedendag Bouvier,

    ik kan je helaas niet helpen met het probleem. Maar omdat je Nederlands spreekt zou ik graag willen weten of je de Pineapple in de VS of de EU gekocht hebt?  Stel in de VS p hoeveel shipping e.a. extra kosten moet ik dan rekenen?

    Groet theyield

    Vanuit de VS moet je rekenen op zo'n $50 extra, met een grote kans dat er daarna nog 21% BTW overheen komt omdat de waarde van hetgeen je koopt boven de 25 euro zit.

    Mijn advies zou zijn om de europese shop in de gaten te houden. Forum lid @Rkiver is de eigenaar hiervan en hij zou al druk bezig zijn met het regelen van de import rechten en zo. Zodra hij ze heeft is verzending een wassen neus, zowel qua geld (vrij verkeer van goederen binnen europa - hij zit in Ierland) als tijdsduur. Een pakje uit Amerika is in de regel een goeie week onderweg met een koeriers dienst. Wanneer je de reguliere post gebruikt is het aanzienlijk goedkoper (pak 'm beet $10-20) maar die BTW komt er nog steeds overheen.

    Als je haast hebt kan je ook het Trading Post deel van het forum gebruiken om te kijken of iemand in de buurt er eentje heeft waar hij vanaf wil. Zo ben ik aan m'n eerste gekomen dus echt, geen gek idee hoor.

    (he asked about the cost of shipping a Pineapple from the US)

    From the US to the netherlands is about $50 with the high likelyhood of you needing to pay our national 21% VAT because the item you purchased has a value over 25 euro.

    My advice to you would be to keep an eye on the european shop. Forum member @Rkiver runs this and he should already be hard at work fixing up the paperwork and such. Once he has them shipping will be a non-issue, both in terms of money (unfettered access to goods within .EU - he's in Ireland) as well as delivery times. A shipment from the US typically takes a solid week to get here when you use a courier service. When you opt for the standard postal service it's considerably cheaper (roughly $10-20 total) but there's still the VAT to pay.

    If you're in a hurry to get one, try the Trading Post section of the forum to see if someone nearby has one they want to part with. It's how I got my first one, so don't knock it.

  9. Er is een quotum op dit forum van slechts 1 MB voor al jouw plaatjes dus mijn advies zou zijn om niet eens te proberen plaatjes naar dit forum toe te uploaden. In plaats daarvan  kan je een account maken op bijvoorbeeld Photobucket en je plaatje(s) daar achterlaten, of zelfs het betreffende plaatje plaatsen op je Facebook/Twitter/Google+/zie maar en vervolgens hier naar dat plaatje linken middels de "insert image from URL" optie van de "insert other media" knop.

    Als ik het goed begrijp ben je je Pineapple nu aan het opnieuw instellen en probeer je hem een access point te laten zijn (ik heb m'n Pineapple alweer een tijdje niet meer gebruikt). Hiervoor moet een SSID voor deze access point opgeven/verzinnen en twee keer het wachtwoord voor toegang via dit access point specificeren. Druk vervolgens op de "finish setup" knop en de Pineapple zal zich hiermee configureren. Vervolgens kan je vanuit andere apparanten (Kali/Windows/Telefoon/...) je verbinden met de Pineapple door dat access point te benaderen en het wachtwoord in te vullen. Merk op dat het weinig zin heeft om het wachtwoord te laten onthouden door de browser omdat dit niet het wachtwoord is wat je nodig hebt voor het instellen van de services op de Pineapple. Als je browser het al onthouden had en voor jou vooraf ingevuld heeft met iets wat je niet (meer) weet, maar slechts voor 1 van de 2 invoer velden, simpelweg leegmaken en beide velden vullen met dezelfde waarde en deze zelf onthouden/opschrijven voor later.

     

    We all have a quota or just 1 MB for all (!) our images so my advice would be to simply not upload your image here. Try photobucket or even placing the image publicly on your facebook/twitter/google+/whatever and then linking to it from here using the "insert image from URL" option of the "insert other media" button.

    If I understand you correctly you're reinstalling your Pineapple and trying to make it act as an access point (I haven't used my Pineapple in a while). To do this you need to provide/make up an SSID and provide the password for accessing this access point twice. Then press the "finish setup" button and the Pineapple will configure itself with these values. Once you've done this you can connect to the Pineapple's access point from other devices (Kali/Windows/Telephone) by selecting the SSID and providing this password. Note that it doesn't make a lot of sense to let the browser remember this password since this isn't the password you need to configure the Pineapple's services. If your browser had already remembered a previous password and pre-filled this password which you don't remember anymore, but it did so only for the first field, simply clear both fields, provide the same value in them and remember/write down this new value for later.


     

  10. People make money with Open Source all the time. I'll name 2 obvious ones:

    • Liferay - a java-based portal service. Open source but the license (which gets you support and updates on released versions) will cost you a modest car per year.
    • Redhat - a Linux distro that has a paid counterpart.

    You can berate them for doing this, or just be happy that they can make this work because the people who pay for the product help fund the free version.

  11. Then the FCC is going to have a mighty fierce fight with nature which, by providing all sorts of reflecting surfaces like that annoying "ground" and other blocking structures like those pesky "trees" blocks/jams/interferes with signals on a regular basis.

    I'm quite confident you'll find that you're not allowed to jam/block a radio signal in the public space. If you want to make your building a full-on, Gene Hackman in Enemy Of The State-approved faraday box, you can.

  12. The Orange Pi is by far the cheapest of the lot. The problem with the orange pi 2 range is that the just assumed the sunxi Linux devs who currently support the AllWinner CPU-based devices in a decidedly admirable way would 'just' support the H3 CPU too. The Orange Pi folks did some local mods to a kernel to make the thing work in at least 1 configuration but by the time I stopped looking still hadn't bothered to get any of that work into the sunxi official kernel. Their wiki entry is kind of telling with quotes such as "works quite well on 3.4 kernel [...] but without support for onboard Wi-Fi module", "On kernel 4.x it is possible to boot a Linux, but drivers are not working" and "The 1.6GHz seem to be specified mainly for marketing reasons. Expect problems when trying to run the device at this frequency under constant load, e.g. overheating. ~1.2GHz is probably a more realistic figure."

    If you're looking for a device that Just Works (tm), go for one based on the AllWinner A20 instead. The PcDuino 3 range is quite allright, but you need to keep an eye on the network abilities. The ones with Wifi might be limited to 100MBit and their wifi will be fixed to the board with a fairly meagre antenna by what I expect to be your standards. It's probably best to just grab a small board and have the wifi be provided via a USB device.

  13. Sounds like a money issue. You can get MASSIVE diesel generators that can power shit trivially but you need a process to periodically test the system, have sufficient fuel on-site and of course all this comes at considerable cost so the question becomes what the cost is of not having these devices running. If the cost of all that kit and its upkeep is too much of a multiple of the cost of not being able to run your device for the expected duration of the catastrophic event, you just accept the risk and go back to work. Have processes in place to orderly, cleanly shut down everything in case of such a catastrophe and make sure that there are policies in place that ensure when new kit gets added to the mix, it's properly incorporated into the "end of the world" scenario.

  14. Make one for the one you want to use it with the most, they try it on the other one to see how far you get. If you have Kali on an external device like a USB stick or external harddisk that can attach to both devices I see no reason why that same hunk of storage wouldn't work in the same way on both machines. It's all x86 with some random chunks of hardware attached. You may need to keep 2 xorg configs around but even that I sincerely doubt.

    Bottom line: Just try it.

  15. The point of a DDoS is to flood your network cable with bullshit traffic to the point where your router can't get any relevant request request out or a response to that request back in. No amount of software on the router or within your network is going to help you deal with this because that's already beyond the point where the problem is.

    Contact your ISP.

  16. Fair enough. Since it says it can't download it, did you actually try to find it yourself? No, you didn't, because it took me all of 5 seconds to find it:

    http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/kmod-rt2800-usb_3.18.20+2015-03-09-3_ar71xx.ipk

    So it's in base, and it also shows the problem you have: The kernel you're running is too new. You run 3.18.23+2016-01-10-1 yet their supplied kernel module is for 3.18.20+2015-03-09-3 (as are all the other kernel modules, in fact).

    Conclusion is that somehow you ended up with a kernel that's newer than what OpenWRT comes with, and you need to either revert to their old(er) kernel or get your source for your newer kernel to also provide these kernel module files.

×
×
  • Create New...