Darknet Operation Security with Sam Bent Part 1

Hacker Talk

Player FM - Internet Radio Done Right

16 subscribers

Đã thêm cách đây ba năm

Nội dung được cung cấp bởi Firo Solutions LTD. Tất cả nội dung podcast bao gồm các tập, đồ họa và mô tả podcast đều được Firo Solutions LTD hoặc đối tác nền tảng podcast của họ tải lên và cung cấp trực tiếp. Nếu bạn cho rằng ai đó đang sử dụng tác phẩm có bản quyền của bạn mà không có sự cho phép của bạn, bạn có thể làm theo quy trình được nêu ở đây https://vi.player.fm/legal.

Peak Travel

1
Why Petra Needs Its People 28:39

cách đây 15 ngày trước28:39

Nghe Sau

Danh sách

Thích

Đã thích

28:39

For centuries, members of the B’doul Bedouin tribe lived in the caves around the ancient city of Petra, Jordan. Then, in the 1980s, the government forced the tribe to move in the name of preserving the geological site for tourists. But if the residents are forced to leave, and if their heritage has been permanently changed, then what exactly is being preserved? SHOW NOTES: Meet The Man Living in The Lost City Carved in Stone Jordan: Petra's tourism authority cracks down on Bedouin cave dwellers The tribes paying the brutal price of conservation “There is no future for Umm Sayhoun” Jordan’s Young Bedouins Are Documenting Their Traditions on TikTok Check out Sami's company Jordan Inspiration Tours Learn about your ad choices: dovetail.prx.org/ad-choices…

cách đây 2 năm trước 1:12:07

M4A•Trang chủ episode

Sam Bent, previously by his online handle as the Darknet Vendor "2happytimes2" is our Hacker of the episode!

In this episode of Hacker Talk we get to hear, how Sam put toghter an Opsec plan that ended up protecting him against a 20 count indetment and 200 years in prison. Thanks to a bruteforce attack in the true hacker spirit he managed to get out of prison.

What is it like to apply strong operation security practices in your everyday life? How does one survive and adapt to hostile environments?

Join us in this thrill seeking episode of Hacker Talk, where we get to hear Sam's story.

In this episode we cover:

Darknet Vendor, Darknet Marketplaces

Darknet Forum Administrator

First Introduction to Tor

Silkroad,

Early Bitcoin days

Bitcoin Pizza for 20 000 Bitcoins

Moderating darknet forums

Money laundering charges

Privacy

Journey into selling on the darknet

Residential Security

Living in Vermont, United States of America

Computer support

Forming information security policies

Backtraq 2(Released March 2007)

Yagi antenna, randomizing your mac address before you use your neighbors wifi

Removing DNA from packages.

Speaking at Defcon

Dealing with the Department of Homeland security

Social Engineering

Operation security

Dread Darknet Forum

Dealing with Hostile Environments on the darknet and in prison

Profiling yourself

Importance of Adoptability

Managing multiple identities

Pretty good privacy(PGP)

Trust on the Darknet

Resumes on the Darknet

Best practices for Password Managers

Storing password's in "The Slip", secure convenience security

How to ship mail securely

Interacting with the united states judicial system

Franks hearing

Becoming a paralegal in Prison

Writing a 200-page passion of release motion

Building trust in Online Communities

Links:

Doingfedtime Youtube channel: https://www.youtube.com/@DoingFedTime

Bitcoin talk pizza thread: https://bitcointalk.org/index.php?topic=137.0

https://en.wikipedia.org/wiki/Vermont

https://en.wikipedia.org/wiki/BackTrack

Sam's defcon talk: https://www.youtube.com/watch?v=NGiUhjuB22Y

https://www.16personalities.com/

https://en.wikipedia.org/wiki/Pretty_Good_Privacy

https://en.wikipedia.org/wiki/Silk_Road_(marketplace)

https://www.shouselaw.com/ca/blog/warrant/what-does-it-mean-to-traverse-a-warrant-what-is-a-franks-motion/

https://forum.defcon.org/node/241998

https://www.darknetstats.com/seasoned-dark-web-vendor-2happytimes2-sentenced-to-5-years-in-prison/

20 tập

#Tech #Hacker Talk

Darknet Operation Security with Sam Bent Part 1

Hacker Talk

16 subscribers

published cách đây 2 năm trước

Chia sẻ

M4A•Trang chủ episode

Sam Bent, previously by his online handle as the Darknet Vendor "2happytimes2" is our Hacker of the episode!

What is it like to apply strong operation security practices in your everyday life? How does one survive and adapt to hostile environments?

Join us in this thrill seeking episode of Hacker Talk, where we get to hear Sam's story.

In this episode we cover:

Darknet Vendor, Darknet Marketplaces

Darknet Forum Administrator

First Introduction to Tor

Silkroad,

Early Bitcoin days

Bitcoin Pizza for 20 000 Bitcoins

Moderating darknet forums

Money laundering charges

Privacy

Journey into selling on the darknet

Residential Security

Living in Vermont, United States of America

Computer support

Forming information security policies

Backtraq 2(Released March 2007)

Yagi antenna, randomizing your mac address before you use your neighbors wifi

Removing DNA from packages.

Speaking at Defcon

Dealing with the Department of Homeland security

Social Engineering

Operation security

Dread Darknet Forum

Dealing with Hostile Environments on the darknet and in prison

Profiling yourself

Importance of Adoptability

Managing multiple identities

Pretty good privacy(PGP)

Trust on the Darknet

Resumes on the Darknet

Best practices for Password Managers

Storing password's in "The Slip", secure convenience security

How to ship mail securely

Interacting with the united states judicial system

Franks hearing

Becoming a paralegal in Prison

Writing a 200-page passion of release motion

Building trust in Online Communities

Links:

Doingfedtime Youtube channel: https://www.youtube.com/@DoingFedTime

Bitcoin talk pizza thread: https://bitcointalk.org/index.php?topic=137.0

https://en.wikipedia.org/wiki/Vermont

https://en.wikipedia.org/wiki/BackTrack

Sam's defcon talk: https://www.youtube.com/watch?v=NGiUhjuB22Y

https://www.16personalities.com/

https://en.wikipedia.org/wiki/Pretty_Good_Privacy

https://en.wikipedia.org/wiki/Silk_Road_(marketplace)

https://www.shouselaw.com/ca/blog/warrant/what-does-it-mean-to-traverse-a-warrant-what-is-a-franks-motion/

https://forum.defcon.org/node/241998

https://www.darknetstats.com/seasoned-dark-web-vendor-2happytimes2-sentenced-to-5-years-in-prison/

20 tập

#Tech #Hacker Talk

Tất cả các tập

Hacker Talk

1
New Year special 2024 2:04:30

cách đây 15 weeks trước2:04:30

2:04:30

Hacker Talk 2024 New Year Special Featuring: Johnny Xmas, Zagros Bingol and Filip Kalebo. Topics: infosec's 9/11 - Target.com breach Leaking TSA master keys Starting to work in information security How the information security space has changed The hackers we lost along the way RIP Kevin Mitnick RIP hacker legend Robert “Ozzie” Osband (Richard Cheshire, The Cheshire Catalyst) 2600 Hackers on planet earth Crowd strike Trends we have seen in 2024 AI as a trend The future of AI Training models AI being used to fingerprint user activity AI in continuous integration pipelines Code Reviews Backdoor in tar Vulnerabilities in the linux kernel Risks of using opensource Exploit brokers OSS Fuzz Fuzzing Quantum computers Cray super computers Michelle Simmons creates a quantum computer at home National cryptology museum in Washington dc 40 years since Chaos Computer club, 2600 and Cult of the deadcow Chaos computer camp Bornhack toorcamp hope conference Defcon Cult of the deadcow Veilid Bluesky Decentralized technologies Hawk tuah Modern Scams Web3 and Web2 Privacy Downfall of telegram Telegram giving up on privacy SimpleX chat, signal and imessage Future External Links: https://linktr.ee/johnnyxmas https://burbsec.com/ https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://www.metafilter.com/203126/Tar-Trap-Caught https://en.wikipedia.org/wiki/Hack-Tic https://en.wikipedia.org/wiki/Chaos_Communication_Camp https://cultdeadcow.com/ https://2600.com/ https://toorcamp.org/experience/ https://infocondb.org/presenter/richard-cheshire-the-cheshire-catalyst https://www.imdb.com/name/nm1937010/ https://hope.net/memoriam.html https://veilid.com/ https://blog.rust.careers/post/veilid_dildog_rust_interview/ https://bornhack.dk/bornhack-2025/ https://en.wikipedia.org/wiki/DEF_CON https://en.wikipedia.org/wiki/Pavel_Durov https://www.bbc.com/news/articles/cvglp0xny3eo https://en.wikipedia.org/wiki/Bluesky https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html https://google.github.io/oss-fuzz/research/llms/target_generation/ https://www.visitacity.com/en/washington-dc/attractions/the-national-cryptologic-museum https://www.youtube.com/watch?v=bRj4ipIEmg0 https://www.msn.com/en-us/entertainment/celebrities/hawk-tuah-girl-haliey-welch-vanishes-after-crypto-scam-accusations-has-not-been-seen-online-for-weeks/ar-AA1waGkW https://support.apple.com/en-us/102637 https://simplex.chat/ https://en.wikipedia.org/wiki/Signal_(software) https://en.wikipedia.org/wiki/Moxie_Marlinspike…

Hacker Talk

1
Cat shaped hardware hacking with Alex Lynd 59:56

cách đây 2 years trước59:56

59:56

The hardware hacker, creator of the wifi-nugget, cybersecurity content creator, hak5 host and our guest of honor in this episode of Hacker Talk is Alex Lynd! In this episode, we cover: Alex background, working with hak5, content creation O.MG pentesting cable Signal intelligence Wifi hacking Hardware hacking Modifying the hardware of calculators, playing games on calculators Hacking the texas instrument ti 84 calculator Alex's first computer being the raspberry pi Starting with Linux Embedded security Hardware developer perspective Making hardware devices Making low-cost hacking devices low cost, high availability and effective hacking devices GPS implants ESP8266, 3 dollar wifi microcontroller Wardriving with esp8266 wifi nugget Making cat-shaped hardware Making a friendly and portable hardware design Learning about wifi hacking and microcontrollers USB nugget USB rubber ducky Keystroke injection attacks ATtiny85 Arduino Thought process behind creating the wifi nugget How Filip cracked his neighbors wifi Aircrack-ng Airgeddon Creating a DIY beginner hardware kit The creation of wifi nugget, the first 100 devices SpaceHuhn Maker Wifi Beacon spoofing pranks esp32 vs esp8266 wifi chip Crafting custom packets with the esp8266 chip Espressif Systems trying to stop people from using it's wifi chips for offensive purposes by locking down its software development kit. Spoofing attacks esp32 native USB mode EMulating USB connected devices for data exfiltration Auto trunked packets pmkid wifi attack Cracking wpa2 handshakes Guessing autogenerated wifi passwords Hashcat Password generator based on your local area code The best password-cracking word list Filip has ever used Funny pranks with the wifi nugget Nugget defender, see if anyone is attacking your network use Canary tokens to detect if someone is breaking into your system Bugged microsoft word and pdf documents Having an intrusion detection system in your pocket wifi honeypots Getting started designing custom printed circuit boards(PCB) Design with easyeda Creating a tv-be-gone Sourcing pcb boards Circuit board art What software to use to create boards Antenna design Omni directional antennas Yagi antennas Sourcing hardware Making it more user friendly Links: https://alexlynd.com/ https://mg.lol/blog/omg-cable/ https://github.com/HakCat-Tech/WiFi-Nugget https://education.ti.com/en/products/calculators/graphing-calculators/ti-84-plus https://en.wikipedia.org/wiki/Raspberry_Pi https://hak5.org/ https://en.wikipedia.org/wiki/ESP8266 https://retia.io/ https://twitter.com/AlexLynd https://usbnugget.com / https://shop.hak5.org/products/usb-rubber-ducky https://en.wikipedia.org/wiki/ATmega328 https://en.wikipedia.org/wiki/Arduino_Nano https://www.pcboard.ca/mini-attiny85-usb https://www.arrow.com/en/research-and-events/articles/attiny85-arduino-tutorial https://github.com/derv82/wifite2 https://en.wikipedia.org/wiki/Aircrack-ng https://www.kali.org/tools/airgeddon/ https://github.com/SpacehuhnTech/esp8266_deauther http://deauther.com/ https://spacehuhn.com/ https://ieeexplore.ieee.org/document/4529384/ https://en.wikipedia.org/wiki/ESP32 https://www.espressif.com/ https://documentation.meraki.com/MR/Other_Topics/PMKID_Vulnerability_FAQ_-_WPA%2F%2FWPA2-PSK_and_802.11r https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access https://colab.research.google.com/ https://en.wikipedia.org/wiki/Hashcat https://github.com/danielmiessler/SecLists https://github.com/HakCat-Tech/Nugget-Invader https://canarytokens.org/generate https://easyeda.com/ https://www.pcbway.com/ https://www.kicad.org/ https://en.wikipedia.org/wiki/Nordic_Semiconducto r…

Hacker Talk

1
Darknet Operation Security with Sam Bent Part 1 1:12:07

cách đây 2 years trước1:12:07

1:12:07

Sam Bent, previously by his online handle as the Darknet Vendor "2happytimes2" is our Hacker of the episode! In this episode of Hacker Talk we get to hear, how Sam put toghter an Opsec plan that ended up protecting him against a 20 count indetment and 200 years in prison. Thanks to a bruteforce attack in the true hacker spirit he managed to get out of prison. What is it like to apply strong operation security practices in your everyday life? How does one survive and adapt to hostile environments? Join us in this thrill seeking episode of Hacker Talk, where we get to hear Sam's story. In this episode we cover: Darknet Vendor, Darknet Marketplaces Darknet Forum Administrator First Introduction to Tor Silkroad, Early Bitcoin days Bitcoin Pizza for 20 000 Bitcoins Moderating darknet forums Money laundering charges Privacy Journey into selling on the darknet Residential Security Living in Vermont, United States of America Computer support Forming information security policies Backtraq 2(Released March 2007) Yagi antenna, randomizing your mac address before you use your neighbors wifi Removing DNA from packages. Speaking at Defcon Dealing with the Department of Homeland security Social Engineering Operation security Dread Darknet Forum Dealing with Hostile Environments on the darknet and in prison Profiling yourself Importance of Adoptability Managing multiple identities Pretty good privacy(PGP) Trust on the Darknet Resumes on the Darknet Best practices for Password Managers Storing password's in "The Slip", secure convenience security How to ship mail securely Interacting with the united states judicial system Franks hearing Becoming a paralegal in Prison Writing a 200-page passion of release motion Building trust in Online Communities Links: Doingfedtime Youtube channel: https://www.youtube.com/@DoingFedTime Bitcoin talk pizza thread: https://bitcointalk.org/index.php?topic=137.0 https://en.wikipedia.org/wiki/Vermont https://en.wikipedia.org/wiki/BackTrack Sam's defcon talk: https://www.youtube.com/watch?v=NGiUhjuB22Y https://www.16personalities.com/ https://en.wikipedia.org/wiki/Pretty_Good_Privacy https://en.wikipedia.org/wiki/Silk_Road_(marketplace) https://www.shouselaw.com/ca/blog/warrant/what-does-it-mean-to-traverse-a-warrant-what-is-a-franks-motion/ https://forum.defcon.org/node/241998 https://www.darknetstats.com/seasoned-dark-web-vendor-2happytimes2-sentenced-to-5-years-in-prison/…

Hacker Talk

1
Bug Bounty Bootcamp with Vickie lii 38:02

cách đây 2 years trước38:02

38:02

Our Hacker of the episode is "Vickie lii"! Vickie tells us about Bug Bounties, her new book and information security. Tune in now! In this episode we cover: Background, getting into security Getting into Bug Bounty First Bug bounty Hackerone, Bug crowd Reporting Security Bugs Coordinating bug bounties Life as a bug bounty hunter Interaction with engineers Bug bounty bootcamp Book Security as a hobby Writing Books How to hack web applications Vickie's favourite types of Vulnerabilities Template injection IDOR Writers block Nostarch Book Publishing Bug bounty tools Python and Bash Make bug bounties more enjoyable Portswinger Lab Finding low hanging fruits legal harbor Caring about security researchers Links: https://twitter.com/vickieli7 https://en.wikipedia.org/wiki/Bug_bounty_program https://vickieli.dev/ https://portswigger.net/web-security/all-labs https://portswigger.net/research/server-side-template-injection https://www.geeksforgeeks.org/insecure-direct-object-reference-idor-vulnerability/ https://nostarch.com/bug-bounty-bootcamp Grab a copy of Vickie's book: https://www.amazon.com/Bug-Bounty-Bootcamp-Reporting-Vulnerabilities-ebook/dp/B08YK368Y3…

Hacker Talk

1
CodeQL with Alvaro Munoz 53:38

cách đây 2 years trước53:38

53:38

In this episode of Hacker Talk: One of the most powerful newer static analysis tool is CodeQL. By converting your code base into a Codeql database, you can now write queries in a read-only way, in order to find security vulnerabilities and problems in you Code-base. We wanted to know more about this declarative language called "CodeQL". Straight from Github's Security Lab, we are joined by Alvaro Munoz! Alvaro, is a Security Researcher, Leads a team of researchers that leverage Codeql to find and model vulnerabilities at Github, with a background in research related to finding remote code execution bugs through deserialization. Tune in as we get to hear the ins and out of CodeQL, how to get started, when Codeql was used to find a vulnerability in a public Covid-19 system, how to find vulnerabilities with Codeql and a lot more! Topics covered: Learning to thing outsite the box by playing Capture the flag CodeQL declarative languages Static code analysis Getting a broad view of the source code Writing queries with CodeQL to find vulnerabilities Modeling vulnerabilities with CodeQL The learning curve of CodeQL Quering github repositories for vulnerabilities Write codeql for a large amount of repositories with lgtm(use it goes before it goes EOL) Linters vs codeql CodeQL integrated with continuous integration pipelines Get started with Codeql Submit your codeql queries to Github Security Lab's Bug bounty Best practices for writing queries Thinking of the code as a database with codeql Finding vulnerabilities in Covid-19 systems Best pratices for CodeQL Reduce false possitives CodeQL with nvim(neovim) Improving vim by creating a more interactive development enviroment alternative, "neovim". LSP integration with neovim. CodeQL with Emacs Remote code execution bugs found with CodeQL. Bugs found in Radar Covid App Patterns leading to remote code execution Auditing javascript frameworks CodeQL vs other static analysis tools Capture the flag codeql challanges The future of CodeQL External links: https://lgtm.com/ https://github.com/pwntester https://neovim.io/ https://en.wikipedia.org/wiki/Language_Server_Protocol https://en.wikipedia.org/wiki/Semgrep Covid 19 tracing app - https://securitylab.github.com/research/securing-the-fight-against-covid19-through-oss/ - https://threatpost.com/german-covid-19-contact-tracing-vulnerability-rce/161419/ Github Security Lab web site: https://securitylab.github.com/ Join Github Security Lab Slack Channel: https://join.slack.com/t/ghsecuritylab/shared_invite/zt-120w4vby8-_O9u9k2hPfgbju1tddBPcg https://twitter.com/pwntester Bounty program: https://securitylab.github.com/bounties/ https://codeql.github.com/ https://codeql.github.com/docs/codeql-overview/ http://www.pwntester.com/ https://en.wikipedia.org/wiki/Abstract_syntax_tree https://en.wikipedia.org/wiki/Control_flow_analysis https://github.com/github/codeql-learninglab-actions https://github.com/anticomputer/emacs-codeql/ Special thanks too: We want to give a huge thanks to Github's Security Lab Team for making this episode a reality!…

Hacker Talk

1
SecBSD - The penetration testing distribution for the BSD community | BSDBandit on Hacker Talk 1:02:15

cách đây 3 years trước1:02:15

1:02:15

In this episode of Hacker Talk, we are joined by the Hacker and SecBSD contributor: The BSDBandit! Tune is as we deep into secbsd, the penetration distribution for the BSD community. In this episode we cover: Video games Kali linux meets bsd Started to hack in college mandraka linux FreeBSD 4.8 and beyond BSD vs Linux Reading the RFC's IRIX Learn from developer mailing lists OpenBSD's mailing The start of SECBSD - BSD based Penetration testing distribution SecBSD, release cyckle Documentation in the BSD world NetBSD on toasters and sega dreamcast Comparing the BSD's Porting ruby Beef to BSD Web applications as houses Webb application api's Security Penetration testing Management vs Security Researchers and developers The adventures of Hacking and learning The state of Hacking Tinkering with FreeBSD ManPages Unix Powertools book Vi Editor Having fun with Technology People code computers Time allocation and having a good schedule Rust programming Visual code studio Pentesting with Rust Mental health Taking brakes, allocating discord and Internet Relay Chat Libera.chat irc Irssi irc client Phreakers going into VoIP OpenBTS IceCast Future of IT-Security Moving everything to the browser Challenge of the episode: The BSDBandit challenges you to read one man page per day for one year Links: https://en.wikipedia.org/wiki/Mandriva_Linux https://www.freebsd.org/releases/4.8R/announce/ https://secbsd.org https://twitter.com/SecBSD https://rfcs.io/http https://www.rfc-editor.org/rfc/ https://en.wikipedia.org/wiki/IRIX https://en.wikipedia.org/wiki/Sub7 https://marc.info/?l=openbsd-misc&r=1 https://www.openbsd.org/faq/ports/guide.html https://twitter.com/CryptoBanshee_ https://beefproject.com/ https://www.oreilly.com/library/view/unix-power-tools/0596003307/ https://www.amazon.com/UNIX-PowerTools-Jerry-Peek/dp/1565922603 https://en.wikipedia.org/wiki/Vim_(text_editor) https://en.wikipedia.org/wiki/Vi https://twitter.com/bsdbandit https://crates.io/ https://www.rust-lang.org/ https://github.com/bsdbandit https://crates.io/crates/pledge https://en.wikipedia.org/wiki/Ghostscript https://en.wikipedia.org/wiki/Discord https://en.wikipedia.org/wiki/Irssi https://en.wikipedia.org/wiki/2600%3A_The_Hacker_Quarterly https://libera.chat/ https://en.wikipedia.org/wiki/OpenBTS https://icecast.org/…

Hacker Talk

1
Podman with Daniel Walsh 58:25

cách đây 3 years trước58:25

58:25

Hacker Talk is back! Stronger than ever with a new episode, in this episode we are all about Podman! Joining us today is Dan Walsh. One of the main people behind Podman! Dan is very knowledgeable in the (oci)container security world. We are super happy to have him on Hacker Talk and hear about Podman. Topics: Podman Podman in action book Dan's journey into Unix and Linux Following Paul cormia to redhat, CEO of redhead Redhat, working on pre-vpn Working on se-linux Container technology Security for openshift Being integrated with docker Oci images and runtimes Fork and exec Security in containers Docker daemon Design behind podman Better security in podman Combining podman with kubernetics Docker Vs systemd Full integration with systemd Buildah, docker build with podman Background story of buildah Overhead in containers Get started with migrating infrastructure to podman Gitlab runners with podman Podman on non-linux systems Docker starting to charge for Windows and Mac Podman desktop gui Linux security Sec-comp Land lock security mitigation in the Linux kernel SE-linux Encrypted virtual machines Intel-sgx with KVM virtual machines Trusting proprietary CPU encrypted environments Encrypted workloads Security at the hardware level Links https://www.manning.com/books/podman-in-action Se-linux Podman Docker https://www.youtube.com/watch?v=MmUwrP791sI Replacing docker with Podman Buildah Docker starts to charge for usage Read Dan's book: https://www.manning.com/books/podman-in-action Find more episodes of Hacker Talk at: https://anchor.fm/hacker-talk Subscribe to Hacker Talk's RSS feed: https://anchor.fm/s/7984c230/podcast/rss…

Hacker Talk

1
Social engineering | Scam calls with Mattias Borg 51:23

cách đây 3 years trước51:23

51:23

In this episode of Hacker Talk, we are joined by the social engineer, windows security ninja, hacker and security researcher Mattias Borg. Tune is as we get to hear about scam calls and social engineering! In this episode we cover: Social Engineering Micro-expressions How long can you get with scam calls? Windows Security Best practices Dealing with scam callers Getting more information from scam call center What happens when people fall for scam callers. Educating others Links: The Art of Human Hacking https://en.wikipedia.org/wiki/Christopher_J._Hadnagy https://twitter.com/MattiasBorg82 https://blog.sec-labs.com/ https://www.youtube.com/watch?v=YsznWl0Wc4I https://www.youtube.com/watch?v=1zTsfs4Q6IY For feedback and guest suggestions, email: podcast at firosolutions dot com…

Hacker Talk

1
Vulnhub | G0t mi1k on Hacker Talk 35:40

cách đây 3 years trước35:40

35:40

In this episode of Hacker Talk, we are joined by the amazing Hacker, G0t mi1k! G0t mi1k is part of the offensive security team and he also runs the database of vulnerable virtual machines, called Vulnhub. Topics: Background Getting into infosec Becoming a moderator First remote shell Backtrack Offensive security Start and background story of Vulnhub.com Encouraging people to run virtual machines Hoarding data, hosting virtual machine images The start of Exploit-db, milw0rm Curating exploits Running virtual machines with Proxmox home lab and vmwareVMware Best practices for protecting internet facing virtual machines Locking down machines The rise and fall of port knocking Single Packet Authorization Learning security by doing Understanding the entire circle of it security. Exploits in Fail2ban Writing a book as a dyslexic The importance of changing the pace of Life. Taking time away from the Keyboard. Working from home External links: https://en.wikipedia.org/wiki/Proxmox_Virtual_Environment https://www.exploit-db.com/ Single Packet Authorization https://www.vulnhub.com/ https://en.wikipedia.org/wiki/Fail2ban https://en.wikipedia.org/wiki/Port_knocking https://blog.g0tmi1k.com/ https://twitter.com/g0tmi1k https://research.securitum.com/fail2ban-remote-code-execution/…

Hacker Talk

1
Wifi Wardriving with Mike Spicer | d4rkm4tter 48:28

cách đây 3 years trước48:28

48:28

Today we are joined by: Mike Spicer, the builder of the Wifi Cactus, someone you can see walking around various security conference with a backpack filled with wireless monitoring goodies :) Mike wanted to see what was really happening on one of the most dangerous wifi networks in the world, this and a lot more in this episode of Hacker Talk. In this episode we cover: Questioning the dangerous assumption How dangerous is Defcon's network really? Dialup internet, warez, Hacking, Tinkering, and programming The movie Hackers from 1995 Wardriving, driving around to find internet, Orinoco gold wireless card WiFi Starting a startup wireless internet service provider company Software-defined radio Hacking Radiofrequency LoRa Helium Lori hardware Things network Lori iot Amazon sidewalk Interconnected devices 900megahertz OpenBTS BladeRF 3g stingrays WiFi Cactus, wifi kraken Wardriving with wireless antennas Pitfalls with airodump Wireless captures Wireless standards, going to WiFi 6 From one box to twelve 25 hak5 pineapples from Darren kitchen Kismet, Andrew dragon(creator of kismet) Intel nuc Live streaming data from the WiFi Cactus WiFi Cactus at Defcamp in Romania Analyzing wardriving from security conferences Pcapinator GitHub Wireshark Mdns, clear text, DNS queries to slack Building your own wardriving device Wireless penetration tests Intel ax220 PCI express WiFi adapter, 30-40 USD, native Linux support Monitoring for wireless de-authentication attacks Deploying kismet for detection with raspberry pi 4 with a 30usd Wireless adapter for starting to monitor their WiFi security Best practices for cracking wpa2 handshakes with hashcat Best security practices for setting up wireless networks Links: https://www.imagine41.com/product/orinoco-gold-wireless-networks-pc-card / https://en.wikipedia.org/wiki/Software-defined_radio https://en.wikipedia.org/wiki/Wardriving https://twitter.com/d4rkm4tter https://github.com/mspicer/pcapinator https://www.wigle.net/ https://en.wikipedia.org/wiki/LoRa https://www.helium.com https://www.kismetwireless.net/ https://www.intel.com/content/www/us/en/products/sku/189347/intel-wifi-6-ax200-gig/specifications.html We would like to give a special thanks to Feedspot for featuring us, we recommend that you check them out: https://blog.feedspot.com/hacker_podcasts/…

Hacker Talk

1
AI-Powered Super Hackers | Steve Phillips Part 2 1:08:46

cách đây 3 years trước1:08:46

1:08:46

Welcome back to Hacker Talk! This is part two of our conversation with Steven Phillips Steven is a really interesting developer, hacker and thinker. I personally enjoy reading his blog tryingtobeawesome.com where he covers various parts of programming, philosophy and software. Topics: "Machine Learning" being good or bad Security with machine learning Turning a stop light to a truck Algorithms What type of Artificial intelligence do we need for software James Mickens Generative Pre-trained Transformer 3 Solving bad human code datasets Global code quality How do we write good code? The progress of software how good Structured Query Language is Secure codebase's Pseudorandom Clojure Python Golang Vlang Designing The ethical source movement Code Licenses Internet Privacy End-to-end encryption Podman Browser Extensions Reaching the largest userbase for software Web assembly The onion router | Tor user adoption AI-Powered Super Hackers are a real threat and a lot more on Hacker Talk! Links: https://en.wikipedia.org/wiki/James_Mickens https://en.wikipedia.org/wiki/GPT-3 https://en.wikipedia.org/wiki/SQL https://en.wikipedia.org/wiki/Clojure https://effective.af/ https://firstdonoharm.dev/ https://www.torproject.org/ https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit https://en.wikipedia.org/wiki/Go_(game) View part one here: https://anchor.fm/hacker-talk/episodes/Programmable-Philosophy-with-Steve-Phillips---Part-1-e1ju6b3…

Hacker Talk

1
Scanning the internet with Lucas Lundgren 58:44

cách đây 3 years trước58:44

58:44

In this episode of Hacker Talk, we are joined by Lucas Lundgren, is an impressive penetration tester, security researcher, and our Hacker of honor today. Lucas is known for going out on the internet and finding interesting internet-facing protocols, he has found several internet-facing critical infrastructures, prison door systems, medical x-ray file storage servers(Pacs), earthquake systems, and a lot more! In this episode we cover the following topics: Journey into hacking, radio, commodore64, Amiga 500, cracking games Time bomb viruses for Amiga 500 games Finding vulnerabilities, getting invited to conferences to speak at 13 War dialing Amiga 500, phone phreaking with modern Learning lock picking building your own port scanner Scanning the entire internet with Masscan from home with a 10gigabit connection Parsing scan results with elastic search, grep, kibana Mqtt - embedded protocol, finding and opening prison doors with MQTT, Malware with MQTT brokers Opening and closing doors in prisons in the UK Atm's with MQTT Changing oil pipelines pressure with Finding protocols to scan the internet for iscsi Hacking x-ray machines Finding hospitals x-ray records in Pax servers dating back to 1985 Problems with hospitals' x-ray storage servers Reporting security vulnerabilities Editing x-ray pictures, Malware that adds black spots on the pictures and reuploads it. Malware in metadata of the x-ray pictures X-ray malware in the wild Image recognition Making fictional earthquakes Remote code execution on doorbells Hack-rf, software-defined radio Wardriving Hacking radio Iridium Weather satellites Hacking satellites Breaking into a gas pump with wooden straws Physical penetration testing Links: https://github.com/robertdavidgraham/masscan https://en.wikipedia.org/wiki/MQTT https://www.elastic.co/kibana https://en.wikipedia.org/wiki/Picture_archiving_and_communication_system https://www.youtube.com/watch?v=o7qDVZr0t2c https://en.wikipedia.org/wiki/Barnaby_Jack https://www.iridium.com/ https://hack.cysat.eu/ Skullkeysecurity.com https://twitter.com/Acidgen…

Hacker Talk

1
Hackers on Planet Earth with Greg Newby and Mitch Altman 1:05:26

cách đây 3 years trước1:05:26

1:05:26

Hackers on Plant Earth - Hope with Mitch Altman and Greg Newby Hackers on Planet Earth(HOPE), is a biannual volunteer-driven hacker conference that got started in 1994. On the hacking and phone phreaking's magazine 2600 10th anniversary. In this episode of Hacker Talk, we are joined by two hackers that are behind the curtain at the HOPE conference. Greg Newby and Mitch Altman are both two impressive Hackers, helping the HOPE conference be the amazing hacking conference it is today. In this episode we cover: How Hope has evolved during the years Greg and Mitch's journey's into the hacking mindset Problems with big pharma and the importance of biohacking HOPE moving location from Hotel Pennsylvania to Saint John's University Hackerspaces exploring technology Phone phreaking Life-changing events at HOPE Demoscene with original hardware from the 1980'ies at HOPE Making 8-bit generated art and music Running a physical hacker conference Hidden gems at HOPE How can you can run your own conference Logistics behind the HOPE conference Links: https://hope.net/ https://petascale.org/ https://en.wikipedia.org/wiki/Mitch_Altman https://2600.com https://archive.org/details/HOPE-3-The_Hacker_s_Code https://en.wikipedia.org/wiki/Demoscene https://en.wikipedia.org/wiki/Hackers_on_Planet_Earth The Hacker Talk team will be at May Contain Hackers which will take place in the Netherlands at the same time as the HOPE conference. Find us for some stickers and Hacker Talk swag!…

Hacker Talk

1
Programmable Philosophy with Steve Phillips - Part 1 1:02:48

cách đây 3 years trước1:02:48

1:02:48

Steve Phillips, is an interesting developer, privacy advocate, hacker and thinker. Tune into this episode of Hacker Talk as we are joined by Steve Phillips in this Programmable Philosophy special. In this episode we cover: Steve's journey into technology Being able to build and utilize tools Cypherpunk Privacy, Encryption Philosophy with programming Proving philosophical theories with programming Python, Django Paul gram Putting the technologist first in companies Combining programming with entrepreneurship Going from utilizing one computer core to multithreading Clojure lisp, using all the libraries from lisp and java. Static typing Golang in 2010, From the one-year anniversary to hacker news. Golang's history. go fix - Automatically rewriting code for new API calls and dependencies. Creating software that lasts forever, making it easy for developers to upgrade old versions. Make standards that the code will use to automatically upgrade the old code, and avoid breaking core functionality. Dependency management Long build times V programming language Fast compile times in V and Go. Green threads, go routines. Efficient concurrency with low overhead. Small runtime languages. Designing encrypted protocols, threat models. Use libsodium LeapChat secure chat Securing a large number of people End-to-end encryption with web applications, not trusting the middleman Trusted service workers in modern browsers, preinstall javascript. Detecting malicious new versions of javascript code. Web assembly, practical use-cases for web assembly. Allowing users to run precompiled binaries on any platform in a browser. How Web assembly run's in a very low overhead sandbox. Docker will be replaced by podman How docker is not the silver bullet for security, alternatives to it. Trusted microservices environments. Privilege separation web assembly nano process model No need to trust the libraries that you use. Sandboxing, Electrum apps. Running C++ 20% slower with web assembly. Shopify's and Cloudflare's use of web assembly Nomad, Kubernetes is too complex Docker daemon Links: https://tryingtobeawesome.com https://www.goodreads.com/book/show/16153182-cypherpunks http://www.executablephilosophy.org/ https://en.wikipedia.org/wiki/Paul_Graham_(programmer) https://www.djangoproject.com/ https://clojure.org/guides/learn/sequential_colls https://www.educative.io/answers/what-is-a-goroutine https://vlang.io/ https://www.leapchat.org/ https://doc.libsodium.org/ https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API https://webassembly.org/docs/security/ https://www.nomadproject.io/ https://podman.io/…

Hacker Talk

1
Black Hat Python with Tim Arnold and Justin Seitz 1:04:04

cách đây 3 years trước1:04:04

1:04:04

This episode is the first time the authors of the book: Black Hat Python. In today's episode of Hacker Talk Justin Seitz and Tim Arnold joins us on the show and we get to hear Tim and Justin stories about Python, Hacking and a lot more! In this episode we cover: Journey into hacking and technology Finding like-minded people, dopamine kicks Infosec community CackalackyCon Issa https://en.wikipedia.org/wiki/Information_Systems_Security_Association Tinkering Python Creating IT-security python courses From Twitter to Nostarch Exploits for Windows 10 and 64bit machines Favorite python libraries, Lxml, requests Syscalls with PyPledge, visualizing packet analysis with scapy Programming, Microsoft basic, PHP, vb6, the future with golang Virtual environments in python Workflow for programming Visual code studio, Microsoft turning good Wingware Wingide with immunity debugger Hunchly's daily dark web report Archive.is to archive .onion sites Onionscan Fresh onions Modern exploit and zeroday writing Ms08067 exploit How to write books Best practices for writing…

Chào mừng bạn đến với Player FM!

Player FM đang quét trang web để tìm các podcast chất lượng cao cho bạn thưởng thức ngay bây giờ. Đây là ứng dụng podcast tốt nhất và hoạt động trên Android, iPhone và web. Đăng ký để đồng bộ các theo dõi trên tất cả thiết bị.