Plus oh-my-zsh and the powerline 10k theme - this is my go-to shell.

Boy what a read. Wikipedia

I think that mitigation requires two things for it to work.

1. You need to use a a Type 2 hypervisor (like Virtualbox, VMware Workstation/Fusion).
2. That VM needs to be configured in NAT mode.

The two primary ways you can configure a network for a local virtual machine are NAT and Bridged.

Bridged mode places your VM effectively on the same network as your host OS, meaning that any DHCP server that exists on your network (rogue or otherwise) will give your virtual machine and IP.

In NAT mode, the virtualization platform itself includes a DHCP server to dole out IPs, and handle the routing between your virtual machine and your host OS’s network.

The thought process is that if you trust your laptop, the DHCP address handed out for NAT mode will not have the VPN breaking DHCP option and your VPN inside the VM will not have it’s route table screwed with.

Refactoring for the EU region.

Reusing Terraform projects for the win.

Oh, in that case you have a much easier job ahead of you, haha.

All of our Linux servers are running Ubuntu, except the FreeIPA system that runs a Redhat derivative.

Are you looking for a Windows, server, replacement or desktop replacement? Your experience will differ depending on which one you’re trying to replace.

For instance, if you’re trying to replace Windows active directory services with a single Linux server, might have a bad time. I’m in the process of migrating from AD to FreeIPA, PowerDNS, and isc-dhcp (or something similar for DHCP).

Holy shit, 35 tmux windows?! That’s insane.

Ahh that did it. Well, more accurately it led me to the problem - I had installed fdroid on a now deleted alternate profile. Uninstall and reinstall fixed it.

Cheers!

Hrm, I can’t find that on my FDroid install. Anyone else having that same issue?

Fun fact (that I just took advantage of in a CTF), sudo can also limit command line arguments. If you only want a user to restart a service but not stop it, you can restrict sudo to only

systemctl restart mysvc.service

Where an animal is camera trap shy or camera trap happy, detection probability is compromised and the assumptions of the method cannot be met. Even the study of animal behavior can be compromised if an animal exhibits atypical behavior (Gibeau and McTavish 2009). Attraction of certain species and individuals to our camera traps would confound assumptions of some other population estimators (Table S2) because the device effectively becomes a lure (Foster and Harmsen 2012).

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4829047/

I gotchu fam.

Granted I don’t know if it’s the same kind of trap happy, but at least it’s a phrase in one research paper.

As I get older and the abuse I put my ears through starts showing up, I completely agree. After upgrading my music library to FLAC from VBR mp3s, I stopped having the, “Oh! There’s a subtle instrument going on in this part of the song!” moments.

It doesn’t stop me from trying to listen to the highest quality music formats that I can get my hands on, but I 100% know if I think there’s a difference to my mid-40s ears, it’s probably a placebo.

Yeah, after the yuzu debacle, if I were anywhere close to the gray side of piracy I would pull down any and all links to funding.

I’m not sure how you would actually get that necessary funding - maybe through discord links periodically?

What did you use? I don’t really want to just delete everything - heck I wouldn’t mind having AI generated a sentence or two to replace all my comments. 🤣

I really need to get around to wiping my old content from Reddit. Much like Facebook, I just ignored it when I was done with the platform.

The closest i have is Local H, Bound for the Floor. The staccato distortion throughout makes (to my ears) a sound very similar to a 1992 Ford Tempo’s “Your seatbelt isn’t latched” chime.

I would be driving like a madman to highschool after oversleeping and it would make me keep double checking my belt.

I’m partial to Pokemon say.

So first, let me be clear - I don’t know if an alternative to that software you first brought up. But some of our earlier CTFs had a similar issue with isolation.

We ended up spinning up new VLANs per contestant, each having a single Kali Linux VM with xrdp, along with each contestants target systems. Our router/fw blocked all access in/out of those VLANs, save for RDP/SSH traffic from our Apache Guacamole server on the DMZ.

So contestants would hit our portal (Guacamole), then from there connect into their own dedicated Kali instance and environment.

Later, we had to make additional fw exemptions for our scoreboard/docs, etc.

I throw CTFs for a living (among other things), and I’m happy to help out a fellow Infosec person.

What kind of infrastructure can you deploy? Is this going to be in the cloud, on-prem (via a hypervisor like Proxmox/vSphere, or hosted on a single laptop/server?

To a certain extent you can do that with multi-account containers.

For instance, I can have Amazon always open in my “Shopping” tab to keep it separate from my “Social Networks” tab.