• 0 Posts
  • 4 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle
  • Do a search for you server OS + STIG

    Then, for each service you’re hosting on that server, do a search for:

    Service/Program name + STIG/Benchmark

    There’s tons of work already done by the vendors in conjunction with the DoD (and CIS) to create lists of potential vulnerable settings that can be corrected before deploying the server.

    Along with this, you can usually find scripts and/or Ansible playbooks that will do most of the hardening for you. Though it’s a good Idea to understand what you do and do not need done.



  • True on the digit by digit code decryption. That I can forgive in the name of building tension and “counting down” in a visible way for the movie viewer. “When will it have the launch code?!” “In either 7 nano seconds or 12 years…”

    If they had been more accurate, it would have looked like the Bender xmas execution scene from Futurama:

    https://www.youtube.com/v/aRdRZ6TKo4s?t=25s

    I did like the fact that they showed war-dialing and doing research to find a way into the system. It’s also interesting that they showed some secure practices, like the fact there was no banner identifying the system or OS, giving less info to a would be hacker. Granted, now a days it would have the official DoD banner identifying it as a DoD system.

    I remember with Windows 95, LAN Manager passwords were hashed in two 7 digit sections which made extracting user password from the password hash file trivial:

    https://techgenix.com/how-cracked-windows-password-part1/

    Looks like it was worse than I remember. The passwords were first converted to all upper case first!


  • The screen cap of the father’s Reddit post which summarizes what happened:

    Link to the actual post:

    https://old.reddit.com/r/LinusTechTips/comments/t1e1if/you_destroyed_my_life/?sort=top

    And a good “out of the loop explanation”:

    3 years ago NCIX had public auction to get rid of the last of the inventory and other items. NCIX was a Canadian electronics retailer, and Linus’s former employer where he worked as the purchasing agent, and was the face of there youtube channel. There youtube channel was pretty much a proto-LinusTechTips. One of the main items Linus went to the auction to purchase was the play button from that channel.

    as it goes in to in the message you linked, and Linus’s response he didn’t win the bidding, but while still there found out the young man and his father did, and tried to talk them in to selling him the button for what they paid, after explaining why the button was so important to him. The Son agreed but after hearing why the Son wanted it Linus told him to keep it.

    after the video went up, the Son caught some flack and bullying from certain members of the LTT fan base that a few days later Linus called out. but I appears the situation scared the Son away from continuing to be a content creator.

    Copied from:

    https://old.reddit.com/r/OutOfTheLoop/comments/t2eix0/whats_the_deal_with_linustechtips_and_mindchop/hylt85p/