HNHacker News
TopNewBestAskShowJobs

Iwillgetby

94 karma · joined March 11, 2019

submissionscomments
Iwillgetby··on Maersk, Me and NotPetya
I am with you on this.
Iwillgetby··on Maersk, Me and NotPetya
devops should be done from 2 systems.

Dev (local administrator access ok, production access not ok)

Ops (local admin access not ok, production access ok)

Iwillgetby··on Show HN: Check if a Domain is common or sketchy
This is the original data source.

harmonic centrality / pagerank

https://commoncrawl.org/connect/blog/

12.16 GB

cc-main-2020-feb-mar-may-host-ranks.txt.gz

Iwillgetby··on Show HN: Pi-Hole scripts that block until a student does 5 khan academy problems
Previous post in case the reddit modes nuke the new one.

https://www.reddit.com/r/pihole/comments/fg5fht/how_to_encou...

Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
Glad you brought this up. My day job involves finding malicious network traffic. DOH is really easy to detect because in suricata or bro/zeek you simply match new outbound connections with DNS responses. If you don't get a matching pair then you need to investigate why you have outbound traffic that is bypassing your DNS server. Note this is alpha stage code. I run this at home on all of my outbound traffic.

https://www.reddit.com/r/pihole/comments/embh63/i_made_a_thi...

Original.. https://github.com/morsgiathatch/suricata_edits/tree/master/...

Fork.. https://github.com/1stOctet/suricata_edits/tree/master/DOCKE...

Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
I respect your viewpoint. I look at it more as a modern form of "you can go outside to play when your homework is done". Parenting is really hard in March 2020. Many of us are working at home and our children are glued to their ipads watching who knows what on youtube. Many parents can't be 100% present during work hours.
Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
OP here. I am not able to from my view. It took several tries to squeeze my title into the 80 characters.
Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
The 2 sites we currently support are available in many languages.

https://s.typingclub.com/docs/user-guide/account-setup/forei...

https://de.khanacademy.org/

If anyone wants us to create a plugin for a particular learning site, please create an issue on github.

Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
As someone said in the reddit post.. If my daughter figures out how to install a kali vm and then gets a reverse metasploit shell on the server, I would be so proud I would probably cry.

Key though is corporate infosec is similar to home infosec. If the user has local admin access, then the user can change any configuration.

Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
Hi skissane, here are a couple links that should help you set the static ip for a particular ssid. https://superuser.com/questions/708649/specific-static-ip-se...

https://github.com/xzer/wlanprofilemanager

Iwillgetby··on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta
Pleasant surprise to see my post on the front page. I don't mention this in the original reddit post but the nodejs code comes from our 2016-2018 failed startup that at one point was invited to be on the TV show shark tank.
Iwillgetby··on [dead]
We believe in the restoration of paid janitors in Mormon church buildings.

Not long ago our Church paid custodians to professionally clean our buildings. The result was a spotless place to worship and vital employment for a ward member in lieu of Church welfare. Beginning in the early 1990s the Church eliminated paid janitors and asked (actually unilaterally assigned) members to clean the building. It was a way for the Church to save money and for members to enjoy the "blessings" of service.

Well, you get what you pay for! The sanitation in most LDS buildings is an absolute disgrace. And as for "blessings", we would rather enjoy the blessing of spending Saturdays with our families or serving those truly in need, while also giving certain members the blessing of gainful employment as a building janitor.

Please join us in adding your support to the restoration of paid janitors.

https://www.gopetition.com/petitions/mormons-for-paid-janito...

Iwillgetby··on “Encourage” your children to use the net more 4 learning with Pi-hole 5.0beta
https://github.com/1stOctet/YouWillUnderstandWhenYouAreOlder
Iwillgetby··on What's so hard about PDF text extraction?
2 minutes is probably long enough. I did notice that google drive doesn't seem to like it if you upload a lot of files. I have had files sit and never get OCR, but I forgot about them so they may have OCR on them now.

Also, I am not aware of a signal when it is done.

Iwillgetby··on What's so hard about PDF text extraction?
If you upload a pdf to google drive and download it 10 minutes later it will magically have BY FAR the best OCR results in the pdf. Note my pdf tests were fairly clean so your experience may not be the same.

I have used Google's fine OCR results to simulate a hacker.

- Download a youtube video that shows how to attack a server on the website hackthebox.eu

- Run ffmpeg to convert the video to images.

- Run a jpeg to pdf tool.

- Upload the pdf to google drive.

- Download the pdf from google drive.

- Grep for the command line identifiers "$" "#".

- Connect to hackthebox.eu vpn.

- Attack the same machine in the video.

Iwillgetby··on Ebola co-discoverer Peter Piot on how to respond to the coronavirus
Do a google news search for peter piot
Iwillgetby··on Ebola co-discoverer Peter Piot on how to respond to the coronavirus
Do a google news search for peter piot to access the ft.com site.
Iwillgetby··on uBlock Origin 1.25.0 uncloaks CNAME-masked network requests in Firefox
Relevant image from same page.

https://user-images.githubusercontent.com/585534/74553124-ae...

Iwillgetby··on The vast but little-known fund of the Mormon Church
I thought the same thing. I played basketball on 100s of Saturdays in the 80s/90s and still think about the kind janitors that cleaned multiple buildings on Saturday. Many lost their jobs due to that policy change and it seemed like nobody realized the people lost their job because of it.
Iwillgetby··on The vast but little-known fund of the Mormon Church
Question as a member. Would today be a good day to request that janitorial services be restored? Do I really need to clean the church's toilets once a year to get to heaven?
Iwillgetby··on Amazon asks court to halt Microsoft's work on Pentagon 'war cloud'
My cubicle at my last job was surrounded by a mountain of expensive printers because they would loose some funding if they didn't spend all of their budget each year.

If we ordered a server it would show up in 6 to 12 months and sometimes would be sent to the wrong place. The people in charge of ordering would replace SSDs with spinning disk and we wouldn't know about the change until the wrong parts arrive months later. Fun times.

Iwillgetby··on Terminal size matters, hackers get root in unusual way
Original source can be found easily online. Link not included because this comes from an online CTF that discourages spoilers.
Iwillgetby··on Show HN: Detect DOH and Other DNS-Less IP Traffic
New link.

https://www.reddit.com/r/pihole/comments/embh63/i_made_a_thi...

Iwillgetby··on Show HN: Detect DOH and Other DNS-Less IP Traffic
OP.. If you are own a high core count computer at home, this is a great use for it. In my tests mysql and suricata happily push all threads/cores. A great excuse to buy that 64 core AMD processor.
Iwillgetby··on FBI warns that connected televisions can provide hackers a window into homes
This is fairly trivial for packet nerds using bro/zeek, pihole and iptables.

Zeek (or wireshark) can revel what domains and ip addresses are being accessed. Pihole and iptables can block those addresses. Pihole needs to be the only DNS allowed and iptables needs to be running in between the TV and its path to the internet.

Iwillgetby··on Apache Guacamole – Clientless remote desktop gateway
I never have been able to find a cuckoo install guide that feels straightforward. Any tips or links you can share that helped you?
Iwillgetby··on Ask HN: Why has Google started adding icons above every search result?
Interesting. I searched a few terms and so far I like it. For me, it is faster for my brain to recognize a familiar icon than to read several chars. Searching sacramento for example I can quickly see wikipedia, usnews, sacbee. I hope google monitors for malicious icons that try to trick users to go to phishing sites.
Iwillgetby··on WARP is here
This split tunneling article may be useful. https://www.macobserver.com/news/tmo-scoop/cloudflare-warp-s...
Iwillgetby··on Beyond uptime, what should I be monitoring on my web site?
This medium post is long, but has a lot of great insight about security.

https://medium.com/cloud-security/how-network-traffic-got-me...

"After I figured out how to turn off the malware, I went back to my hosting company. I didn’t bother to tell them what I discovered because at this point it seemed futile. I just asked them to deny outbound network access I didn’t need. My computer didn’t initiate outbound connections to anything. It only replied to requests it received. I only wanted to allow the most minimal traffic required for my applications to run correctly. They argued with me! They said no one checks outbound traffic. I said I didn’t care what everyone else does. I wanted to block it. I figured out how to do it myself. I had very restrictive network rules in my firewall settings that only allowed what the applications on my server required."

Of course you don't want to block your web servers ability to get updates. But it is important to understand that web servers are web SERVERS. This means that they rarely initiate a new connection, they receive new connections from web browsers.

Iwillgetby··on How the world’s poor are discovering leisure online
This may help slow the worlds population growth. Reminds me of the line I heard somewhere that "s-x is the theater of the poor". Now netflix can be the theater of the rich, middle class and poor.
Page 1 of 2Next →