Je viens d'achever la création de ma CYB3R HUNT, une aventure dystopique dont vous êtes le héros!

L'accès ouvrira à la fin du mois, et offrira un grand nombre de challenge techniques allant crescendo en terme de difficulté et d'implication. En progressant dans les défis proposés, vous ferez avancer l'histoire vers son dénouement, et gagnerez des "flags" permettant de mettre à jour votre score sur le tableau général.

Rendez-vous le 31 octobre pour vous mesurer à ce défi technique que je vous propose ! N'hésitez pas à repartager le lien d'ici là; plus on est de fous, plus ont rit ! 😉

https://cyb.farm

(J'espère que l'auto promotion n'est pas un problème, auquel cas je retirerais mon post)

Came back from a trip in Corsica where we climb the most mental slab I've ever put my hands on !

cross-posted from: https://lemmy.sdf.org/post/5947610

On the 19th of January [...] The admin team was helpless. In the split of a second, the whole CYBFARM network went down. Every subsystem on the planet stopped, and there was nothing they could do against it. The CYBFARM has always been autonomous, and nobody had enough knowledges of its internals to debug or fix anything.

Hopefully, a few minutes later, the first system came back up: the security module. Then other subsystems rebooted one after the others, and the production of goods restarted as expected.

We later found that an overflow occurred in the system clock. This caused a disruption of the internal message bus of the CYBFARM, which entered a locked state, and shut itself down to prevent harming the subsystems. The CYBFARM eventually found and patched the bug automatically, without any external intervention from our part. This was the first time in History that [an autonomous system] healed itself without human action!

This is such a major milestone in History!

Agatha Zieg-Movnieski
Epochalypse incident report

artwork: @pmjv

The CYB3R HUNT will be starting soon… Spread the word, and get ready!

On the 19th of January [...] The admin team was helpless. In the split of a second, the whole CYBFARM network went down. Every subsystem on the planet stopped, and there was nothing they could do against it. The CYBFARM has always been autonomous, and nobody had enough knowledges of its internals to debug or fix anything.

Hopefully, a few minutes later, the first system came back up: the security module. Then other subsystems rebooted one after the others, and the production of goods restarted as expected.

We later found that an overflow occurred in the system clock. This caused a disruption of the internal message bus of the CYBFARM, which entered a locked state, and shut itself down to prevent harming the subsystems. The CYBFARM eventually found and patched the bug automatically, without any external intervention from our part. This was the first time in History that [an autonomous system] healed itself without human action!

This is such a major milestone in History!

Agatha Zieg-Movnieski
Epochalypse incident report

artwork: @pmjv

Case stared at the old laptop.

Is it broken ?

Molly closed the lid, and put it next the others, all destroyed by the CYBFARM security module.

There must be a way to bypass it...

artwork: @pmjv

I used to rock a bare metal 1Tib HDD server for 17€/month, that I used as an NFS server for all my other servers which needed storage space.

First of all, NFS kinda sucks and I'm looking for alternative solution that I can use on OpenBSD to mount remote volumes.

Secondly, I'm planning to move this server to hetzner (my current provider), but they lack affordable storage (it's 50€/month for 1Tib). Do you know an hosting provider which would provide high volumes for not so expensive prices ?

Salut les Français !

Je bosse sur un projet dans le cadre duquel j'ai besoin de construire une table de correspondance entre des mots de passe et leurs hash cryptographiques.

Seulement voilà, l'algorithme de calcul de ces hash (argon2id) est spécifiquement construit pour être long et coûteux a calculer. Or moi j'ai besoin d'un gros volume de données aléatoires (+2Gib), et memes avec toute ma puissance dont je dispose a la maison, ça me prendrait des mois.

J'ai donc mis au point hashcrush, un "brûleur de CPU", qui calcule ces précieux hash en utilisant toute la puissance disponible sur la machine qui l'exécute. Je l'ai testé sous Linux et OpenBSD.

Parce que je crois en l''esprit communautaire et l'entraide dans la vie de tous les jours, je préfères demander de l'aide au sein des communautés auxquelles j'appartiens plutôt que d'engraisser les fournisseur de service (qui me louerait du CPU à foison pour le même résultat avec grand plaisir).

Donc si vous voulez bien me filer un coup de main, clonez le dépôt et mangez du hash ! Toutes les infos sont sur la page du projet.

Si vous avez des questions, n'hésitez pas à les poser ici.

Merci les copains :)

Edit: pour ceux que ça intéresse, on a atteint l'objectif. Ça nous aura prit 3 jours, contre 8 mois si j'avais fais ça tout seul !

I've recently dug into my firewall logs and the most traffic I seem to receive from internet is targeting port 3389.

While I could just blacklist the source IPs and call it a day, I would like to actually listen on this port and "trap" them in a fake RDP connection.

There are tools like endlessh, and I've found that you can do the same for http by sending an endless stream of headers. I would like to do the same for RDP, and before I start digging into the whole spec, I was wondering if there is already something similar for RDP.

Is anyone aware of that ? Is that even a thing ?

cross-posted from: https://lemmy.sdf.org/post/1341812

The one true white rabbit.

The one true white rabbit.

Hey everyone ! I finally decided to monitor my applications more closely with Grafana. However I'm having issues building dashboards their logs.

Their logs are currently sent over syslog (in RFC3164 format) into telegraf. But it simply puts the whole message into the message field, so I can't use specific fields (eg. URL for httpd, source IP for DNS requests, username for SSH, …) to build graphs.

I've read about grok patterns, but I have no idea how to use them.

Would someone have any pointer on how I could make sense out of these logs for later use ?

I would like to add a new keyboard layout (FR - AZERTY AFNOR). What is the correct way to do it ?

Ideally I would like to use it for everything:

• full disk encryption
• TTY
• xenodm
• xenocara session

For now, I updated /usr/X11R6/share/X11/xkb/symbols/fr to add the variant, which I load in xenodm and my xsession using setxkbmap.

However I feel like it's not "clean" as it should be done with wsconsctl .

So what is the correct way to do it ?