Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
fins
May 31, 2011

Floss Finder

Share Bear posted:

it's worth it, and sometimes good software is worth paying for

or write a script that encrypts and decrypts a text file automatically, if your time is worth less than $40

gpg -d mypasswords.gpg

yours for only $39.99

Adbot
ADBOT LOVES YOU

Shifty Pony
Dec 28, 2004

Up ta somethin'


my (federal government) office has apparently been targeted by someone. a bunch of people have been getting phishing emails which are reasonably well disguised to look like they are from our IT department telling people to confirm their password strength (something our IT hammers on all the time) on a linked page.

one of my bosses just forwarded on a "hey tell your employees to not fall for this poo poo" email chain. and right there at the end of it is the offending phishing email with the malicious link still there, intact and (I expect) working.

dpkg chopra
Jun 9, 2007

Fast Food Fight

Grimey Drawer

Shifty Pony posted:

my (federal government) office has apparently been targeted by someone. a bunch of people have been getting phishing emails which are reasonably well disguised to look like they are from our IT department telling people to confirm their password strength (something our IT hammers on all the time) on a linked page.

one of my bosses just forwarded on a "hey tell your employees to not fall for this poo poo" email chain. and right there at the end of it is the offending phishing email with the malicious link still there, intact and (I expect) working.

reply that it looks like a legitimate email.

maybe you too can cost your boss his political career.

BangersInMyKnickers
Nov 3, 2004

I have a thing for courageous dongles

Is there a blessed/reasonable method of getting a user cert for my gmail.com email address?

hifi
Jul 25, 2012

hifi posted:

algo looks like a pain in the dick if you are using linode

i figured it all out. i had a dns problem but i just manually restarted it and it just works now

pseudorandom name
May 6, 2007

BangersInMyKnickers posted:

Is there a blessed/reasonable method of getting a user cert for my gmail.com email address?

No.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

BangersInMyKnickers posted:

Is there a blessed/reasonable method of getting a user cert for my gmail.com email address?
i would suggest fastmail

cinci zoo sniper
Mar 15, 2013




anthonypants posted:

i would suggest fastmail
fastmail owns

surebet
Jan 10, 2013

avatar
specialist


Shifty Pony posted:

my (federal government) office has apparently been targeted by someone. a bunch of people have been getting phishing emails which are reasonably well disguised to look like they are from our IT department telling people to confirm their password strength (something our IT hammers on all the time) on a linked page.

one of my bosses just forwarded on a "hey tell your employees to not fall for this poo poo" email chain. and right there at the end of it is the offending phishing email with the malicious link still there, intact and (I expect) working.

depending on what it's hosted, either redirect the specific phishing url (or wildcard the domain) to a page under your control that both logs who lands there and displays something to the effect of "stop being idiots, idiots"

that might not help on unmanaged, out-of-network devices (cellphones etc) which do tend to be management (aka higher risk, higher threat) but it at least provides a teachable moment for your internal users

tracking who lands on the page is useful for one on one follow-up later, in my limited it manager experience people respond well to coaching if it's done in a non-blaming way, but ymmv

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
https://twitter.com/joekjoek/status/847193742394114048

Meat Beat Agent
Aug 5, 2007

felonious assault with a sproinging boner

chuck berry's last hurrah

jammyozzy
Dec 7, 2006

Is that a challenge?
For what it's worth I've had a bunch of free WiFi hotspots gently caress up IPsec VPN negotiation, where's OpenVPN has never failed to connect. I mean I'm using an Android phone so for all I know it's not actually routing traffic properly anyway, but at least I can talk to the server.

My use case is literally VPN to home to escape the lovely coffee shop/hotel network though.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Internet of piss

vodkat
Jun 30, 2012



cannot legally be sold as vodka

Volmarias posted:

Internet of piss

Holy poo poo I'd forgotten about this until i saw your post!

Last week i was out drinking in central london near PR land and I saw urnails with an tablet above them that had piss cameras for playing games and then bombarding you with ads after

gently caress me, this is such a terrible thing id actually blocked it from my memory





cameras/sensors underneath?

Shaggar
Apr 26, 2006

Subjunctive posted:

redirecting 443 traffic should work very poorly, unless the user is in a bad way indeed

yeah if you try to go to a site w/ hsts it just dies. now days ur os should detect the portal and launch directly to it when you connect.

Shaggar
Apr 26, 2006

vodkat posted:

Holy poo poo I'd forgotten about this until i saw your post!

Last week i was out drinking in central london near PR land and I saw urnails with an tablet above them that had piss cameras for playing games and then bombarding you with ads after

gently caress me, this is such a terrible thing id actually blocked it from my memory





cameras/sensors underneath?



holy moly

hifi
Jul 25, 2012

lmao at their website http://www.captive-media.co.uk/

Shaggar
Apr 26, 2006
like even creepy uk surveillance fetish aside how do those not get destroyed every single night?

vodkat
Jun 30, 2012



cannot legally be sold as vodka

Shaggar posted:

like even creepy uk surveillance fetish aside how do those not get destroyed every single night?

considering the location next to some of the UK biggest ad agencies we concluded that this must be a trial run, never seen them anywhere else other than these two pubs

vodkat
Jun 30, 2012



cannot legally be sold as vodka

lol the piss left/right into a vital bucket game had a high score table.

look forward to reading about the first death via bladder explosion from someone trying to break the top 3

A Pinball Wizard
Mar 23, 2005

I know every trick, no freak's gonna beat my hands

College Slice
"at the weekend" is easily the worst part, do you really say that over there

hifi
Jul 25, 2012

They have to be recording your junk because the first question anyone is going to have is that and there isn't a big notice on the front page saying it's not recording your junk

El Mero Mero
Oct 13, 2001

God bless the tagger crews who would make short work of that internet of poo poo POS idea

Shifty Pony
Dec 28, 2004

Up ta somethin'


surebet posted:

depending on what it's hosted, either redirect the specific phishing url (or wildcard the domain) to a page under your control that both logs who lands there and displays something to the effect of "stop being idiots, idiots"

that might not help on unmanaged, out-of-network devices (cellphones etc) which do tend to be management (aka higher risk, higher threat) but it at least provides a teachable moment for your internal users

tracking who lands on the page is useful for one on one follow-up later, in my limited it manager experience people respond well to coaching if it's done in a non-blaming way, but ymmv

that would be the smart thing to do.

who knows maybe they added the domain to the Blue Coat blacklist but I wasn't about to click it and find out.

Kuvo
Oct 27, 2008

Blame it on the misfortune of your bark!
Fun Shoe

vodkat posted:

Holy poo poo I'd forgotten about this until i saw your post!

Last week i was out drinking in central london near PR land and I saw urnails with an tablet above them that had piss cameras for playing games and then bombarding you with ads after

gently caress me, this is such a terrible thing id actually blocked it from my memory





cameras/sensors underneath?



:eyepop:

Progressive JPEG
Feb 19, 2003

Progressive JPEG
Feb 19, 2003

schranz kafka posted:

fwiw i really like 1password so far but i don't like that i'm going to have to pay for it

i was paying for lastpass until they made it free to use on devices

i sorta prefer the idea of paying for something like a password manager tbh

Shame Boy
Mar 2, 2010

they have those urinal games at Dave and Busters here and I figured they used ultrasound to detect where the piss stream was but now that I'm thinking about it it's probably easier to just use a camera lol dehumanize yourself and face to pisscam

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

vodkat posted:

cameras/sensors underneath?

they don't look like telephotos, so you're probably safe

Chris Knight
Jun 5, 2002

me @ ur posts


Fun Shoe
trumped again

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
https://twitter.com/withzombies/status/847118065875783680

spit on my clit
Jul 19, 2015

by Cyrano4747

they're really trying another tron movie??

El Mero Mero
Oct 13, 2001

I ended up paying for a 5 year membership to dashlane when they had a deal sometime ago. Here's hoping that the gaze of Tavis doesn't implode them anytime between now and 2021 :ohdear:

Malloc Voidstar
May 7, 2007

Fuck the cowboys. Unf. Fuck em hard.

PCjr sidecar posted:

afaik algo was released as a reaction to streisand https://github.com/jlund/streisand which includes openvpn and every other vpn or vpn-like

lmao

surebet
Jan 10, 2013

avatar
specialist


no joke i'd consider pissing in the sink instead of playing cocklooker pong

hifi
Jul 25, 2012

algo works but it's dropping my connection when it's re-upping. i can see the encryption mismatch and windows isn't requesting DES like the original windows bug was but i assume i'm not supposed to change it. there's a "maximum encryption" knob i can hit but i sort of doubt that's whats wrong. easy enough to work though and i imagine it's idiot proof if you are using a linux client and are already using digitalocean/aws/compute engine/azure

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
yowza

e: a not-expired ssl cert has been applied to build.openvpn.net and the issue was updated ten days ago but its apt repo is still on http :nsa:

anthonypants fucked around with this message at 07:39 on Mar 30, 2017

Farmer Crack-Ass
Jan 2, 2001

this is me posting irl

:staredog:

vOv
Feb 8, 2014

is there any kind of signed package thing in place that would mitigate that? iirc debian distributes packages over plain http but they're signed so it doesn't matter

Adbot
ADBOT LOVES YOU

Truga
May 4, 2014
Lipstick Apathy
wait, why is that thing downloading packages from openvpn.com instead from the distro anyway? that's asking for all kinds of trouble.

but yes, all apt packages must be signed with a trusted key or apt will whine about it and not install packages without extra intervention. however,
https://swupdate.openvpn.net/repos/repo-public.gpg
if you replace that with http, :rip:

  • Locked thread