User Controls

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9

Posts by LiquidIce

  1. LiquidIce Houston
    Well, I hope at least one of the lurkers got some use out of this. I guess I should stick to more technical topics as far as contributing goes.

    A logical approach.
    You don't use an ssh key when you use github, do you?

  2. LiquidIce Houston
    A lot of folks mad these days. You either need to put yourself on the winning side, or be bad.

    Im surprised this didnt get any tlc here.

    The world out there is a game with explicit and implicit rules. If you figure out the implicit rules, you get ahead of everyone who didn't. Im betting, in my actions, on guarding my time resource as much as possible - no wasting time, ever. Community service, anger, etc. all waste time. Stop it mang, focus on something cool
  3. LiquidIce Houston
    Great, I got your attention. I wanna contribute and tell you guys about something that has helped me a lot in becoming more productive and getting better jobs.

    This something is called spaced repetition. Basically, you create question/answer cards and then go over each question and try to remember the answer. The deal here is that there's an algorithm behind how often you have to view each card. Thanks to this, you can have hundreds of cards and only have to review like 20 a day, which takes 2-3 minutes.

    Why am I telling you about this? I use this method to remember all the bits and pieces related to IT for the last 2 years. Think - bash commands, python snippets, database settings, etc. This has really boosted my confidence in job interviews (people's eyes go wide if you're a junior dev and write out a bunch of correct code, including lots of std lib imports, with no reference) and increased the speed at which I can work. I'm well over 1000 cards at this point and I can easily remember the correct switch for field separator for 3 different bash commands (awk, cut, sort - -F, -d, -t) even though I've last used them like 2-3 months ago.

    The algorithm knows when you're likely to start to forget some information and it schedules the cards so that you can remember everything, all the time. After being shown a card, you press one of these buttons: "Again", "Hard", "Good", "Easy", then you're shown the answer. If you can't remember the answer, you'd press "Again". If you recalled it instantly, you'd press "Easy". This is how the algorithm knows how well you remember something. If, for a certain card, you most often press "Easy", you will see if sporadically. However, if there's a card that causes you to press "Again" or "Hard" more often, you'll see it more frequently.

    There's software that does all of this for you, including mobile apps, and it's all free: anki, supermemo, mnemosyne. I picked anki and I'm pretty happy with it. Like I said earlier, I review the cards for 2-3 minutes a day and add new cards once in a while.

    I still forget what I was going to do when I walk into a room, but at least I can generate ssl certificates at a drop of a hat.
  4. LiquidIce Houston
    Windows is kind of dying out. I read something not to long about about how more and more people are moving to other alternatives and I believe. The younger generations are much more technical knowledgeable than the previous and have more access to tutorials and a growing web. In 100 years I bet everyone will know how to script to save time.

    Could you find a source for that? I'm interested if there's anyone looking into these trends. I'm biased towards the view that the exact opposite is happening: younger generations don't have to spend 5 hours patching and compiling wifi drivers to work with airocrack, they just do "npm install npm-crack" (I made this up). Everything is standardized and plug n' play as far as hardware goes.

    Maybe I'm wrong, though.
  5. LiquidIce Houston
    I think we can safely conclude in this day and age python would be the most appropriate language. There's even AV and heuristic sandbox evasion programs written in python to be employed in the construction of said malware. Take peCloak for instance.

    http://seclist.us/pecloak-py-beta-a-...sion-tool.html
    Noice, checkin it out.

    Lol, me niether, how shitty is my code? Lewl.
    Everyone's code is shit until you refactor it 3 times :P. Honestly, it's the hardest thing ever -- it's like physical exercise.
    I'll tell you what, i don't even have the fucking brain for abstract things like programming so a week would be a little short to pick it up but if i can do it i think most people could.
    If you can wrap your head around the infosec stuff, you can do it for anything else code related bro.

    Python it is then, with any luck our homeboy Liquidice would be willing to help. (n_n")
    Sure, I could lend a hand here and there.
  6. LiquidIce Houston
    Reads a bit like a nuttier version Russell's In Praise of Idleness, which is something I've probably spammed here a couple of times but I think is a really common sense, simple essay on something that's surprisingly controversial.

    Ha, good comparison.

    I don't, however, agree on stuff from In Praise of Idleness being common sense. The idea and writing is simple, yes, but how many people think about it or act on it? I know of just a handful.
  7. LiquidIce Houston
    I'm actually curious how did this break? Is it a db schema thing? Some race condition? Some caching bug?
  8. LiquidIce Houston
    Perl is the traditional 'hacker language' after C/++ and before python got popular. Besides perl is linux native to a great extent so if you're going to write something on a linux box you might as well use perl. IDK, i prefer python also, botnets in PHP? Lol, i don't think it works like that, PHP will be employed server side as interface/whatever for your C&C other than that i'd say a language designed for web apps would only be useful in building a stresser. Also, can you even compile javascript? How will you distribute your bots if you can't, only useful application for javascript in a malware scenario is delivery via a web app or embedded JS in a PDF file i suppose.
    True dat, but I'd say Python took it's place after 2005. I mean it's so easy to work with sockets in python, structs for binary data, and text manipulation should be just as easy as it with perl (PCRE, amirite?). Python is also linux native at this point I think, at least on debian/ubuntu (dunno about redhat, fedora, slack, etc). My bad on the botnet stuff, I was just looking at some botnet code and I was hitting php files - didnt occur to me that those were the C&C and not the actual botnet.



    Did lol.
    I dont consider myself a good software engineer yet, but seeing how shitty someone's code is helps to improve your own code.

    I literally don't even know half the syntax for using these modules, i really only focus on sec related programming, but python web dev seems pretty dank, in fact python is dank for just about everything.
    True dat. It's quite easy, you could pick it up in a week - then it's pretty reusable across different frameworks and languages.
  9. LiquidIce Houston
    dank post m8. Thanks for the feed back. Ill make a thread on my progress sometime and go more in depth but for now this is a great help. Glad to see someone interested.

    No problem, have fun, dude. Btw, if you get to the point when you're looking for hosting, this site -> http://lowendbox.com/ has a bunch of good deals. I was able to snag a 1gb/20gb sdd/2 core/2 ips/east coast area deal for 24$/year
  10. LiquidIce Houston
    Lol, yeah. To reply to your OP, I think like anything there's a balance (isn't that a lame response?). Like the idea that we succeed or fail on our personal merits is useful to believe, or a useful mindset to adopt at times, even if it's pretty obviously false. And then there's the obvious psychological risk in believing you're personally responsible for inevitable failures.

    That couldve been a lame response, but I went through what you describe a lot, mainly the "inevitable failures" part. What helped me most here is helping out a friend going through something similar - I was able to see my own cracked psyche and, while I couldn't pull him out of it, I at least, I think, slowed down the process until he was able to dig himself out.

    I didn't raise this point, but I think you're right in that even if we're hermits, we're still surrounded by culture and it continues to affect us. Some people are good hermits (http://www.gq.com/story/the-last-true-hermit) though.

  11. LiquidIce Houston
    Couldn't we just make a botnet out of the routers, i already have sauce code for a router botnet, how's your perl? We just need to add some malicious subroutines and dank obfuscation and encoding to frustrate reverse engineers and for anti-forensics and such.

    https://gitlab.com/rav7teif/linux.wifatch

    Cyber world domination is on my bucket list but i'll settle for stealing banking info as well though, lewl.

    My perl is non-existent. I was always curious why these botnets are written in perl/php/some other god forsaken language and not erlang/python/javascript? Do you know?

    https://github.com/dequis/wakarimasen
    Decent pep8 adherence, mediocre coding style. Uncle Bob would not be proud of the variable names. Uses sqlalchemy, good imports, and a decent amount of comments and docs.

    https://github.com/tslocum/PyIB
    2 space indentation. Seriously? Just horrible. Star imports? ("from mod import *"). It also uses its own string parameterization ie. query("%s", _mysql.escape_string(configuration)). At least the guy was generous with try/except blocks and docstrings.

    If I had to choose between these two projects, I'd go for the wakarimasen. Because it uses sqlalchemy, it'll be easier to extend the database schema with users and pms. To add users, I'd first look at how the Staff model looks like and how StaffActions work and then create a User model and UserAction class.

    I don't wanna barge in on your project, but I could assist with the infrastructure ie. server setup, postgresql optimization, some simple monitoring, fabric/capistrano for easier deployment and stuff.






  12. LiquidIce Houston

    Oh god, this is great.
  13. LiquidIce Houston
    A friend of a friend was buying vintage cameras, oiling the leather parts, cleaning out the mechanical parts, leaving the optics alone because they were too complicated, and reselling them for 1.5-2x the price.
  14. LiquidIce Houston
    Good ideas, or what about this. How about an app on your phone that cracks all wifis in the vicinity, like automated wardriving when you go for a stroll or something. Free wifi everywhere. Then try default router passwords and wipe the router with customized openwrt firmware to inject ads/malwarez or ssl-strip the network and get paypal passwordz from the network

    ????
    PROFIT!

    Or just a piece of malware that erases the master boot record once it's executed for the lulz. IDK i'm not that creative and making a bot seems blasé.

    I slightly altered your vision, what do you think?

    Btw, bots are awesome. Automate everything. Make irc/slack/whatsapp bots that interface with your home automation/project deployment code and make it do things.

  15. LiquidIce Houston
    We should probably start running UBB again. There are people here smart enough to patch it into something resembling The UBB of Olde. Say what you will about that dated software, but it had an aesthetic and ease of use that was hard to match. And the smilies weren't total shit either.

    Yea, I totally miss the "hrmph" emoticon.

    I'm not exactly sure about UBB though. Haven't been interested in this area of a long time. What do you think about https://www.discourse.org/ ? I know it's the opposite of the simple UBB and while normally I'm not a fan of the crazy JS-web-3.0 stuff, discourse works surprisingly well and stable.
  16. LiquidIce Houston

    >Implying i am not bourgeois

    Only go can make the mad sea inside you still.
  17. LiquidIce Houston
    You never offered me a job, Lanny. I fucking hate you.
    Lol, Lanny just offered someone a job. Also 60 dorrah an hour is pretty good moolah.

    Lol, jealous fools. As Lanny says, there's a goldrush for development skills. This includes all the good and ugly side of a goldrush though.


    That hasn't really been my experience, but of course things are different by locale. All the NDA's I've seen block you from working in the same field as your employer and case law has been fairly favorable to programmers on that in recent years (in terms of what's considered the "same field").
    Yeah, it's way better in the US despite of what a lot of people say. Thank god I'm here, in Germany, only on an adventure, and will be coming back stateside in a couple of months. Imagine a world where moonlighting is illegal unless you receive permission, in writing, from your employer first. Your employer can also retract this permission at any time. This seems to be a standard contract clause.


    Kinda ironically the megacorp (or startup, whatever, just a long term gig) route is better suited to the asocial I think. To freelance or work for yourself you need to interact with a lot of people and have a strong professional network. All you really need to do at big software company X is do reasonably good work with some bare minimum of politics and you'll move up (varies from place to place of course but I think it will be consistently less than what's necessary to drum up freelance work) or jump ship every few years.
    This falls in perfectly with what I've seen so far. It's also one of the bigger reasons why I want to switch to freelancing. I wanna build up this personal network so that I can engage better with the community and be able to donate more money and time to open source projects.


    It sounds like you do web dev? I do some work on the side for this small company, there's a lot of work but there are only two quarter time engineers working on it right now. The CEO has asked me a couple of times if I knew any other developers he could hire, I told him I'm not a hiring manager so he should find someone else, not about to go around asking my gainfully employed friends if they want to moonlight with me (also probably in violation of my day job contract in some way but w/e). Anyway, if you're interested I could throw your name in, not sure on timeframe, work would probably pick up in a month or so, also not sure about number of hours weekly but I think the going rate is ~$60/h and can be done remote if you can make meetings in PST evenings.
    Yep, mainly web-dev (python, ruby to a lesser degree) but I've picked up tons of sysadmin/devops stuff in my last job. What kinda work is it? Do you like the CEO? The 9 hour time difference is an obstacle but if those are ie. weekly meetings then slack/email could suffice for the day-to-day stuff. Thanks for letting me know.


    Are we going a bit off topic?

  18. LiquidIce Houston
    Maybe we could use this threads to keep track of interesting project ideas?

    Right now Im toying around with smaller scripts, but I'm feeling the hunger of working on something bigger. I should probably stick to finding work tho.

    Here's some ideas from my idea pad:
    - Bitcoin price arbitration bot.
    - Wifi sniffer that sits at home and automates some shit when it senses your phone ie. make coffee, turn lights on, etc.
    - Make computer version of a turn based board game (completely alien problem domain for me).
    - Poker player bot - so many angles on this: use simple but extremely scalable bot or use python + all of it's machine learning libs for something freaky?
    - Attach old phone to bicycle, create a gps reporting application to automatically sync gps data with home station to gather travel routes and stats.
  19. LiquidIce Houston
    Chess is for the bourgeois, go is where it's at, bro.
  20. LiquidIce Houston
    That's all well and good just be careful with that socialism bro, it looks good at first but will fuck everyone's shit up in the end.

    What socialism? I'm just ranting against/criticizing the unfair distribution of economical rights ie. bigger market players can change the legal system to one where the principles of the free market - talked about by my homie, Milton Friedman - slowly disappear. I'm afraid that this course of action will lead to a similar situation that the Founding Fathers wanted to prevent taking root in the US of A: they wanted to prevent the aristocracy-and-church backed state of having all the power, but now it seems that corporations-and-government are hoarding all the power.
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
Jump to Top