u/eve-collins

I’m almost done with 2nd part, but I’m very confused - is Low a different podcast, not a darknet diaries one? I’m still waiting for the “stories from the dark side of the internet” but I’m starting to get a feeling it’s not gonna happen. Sorry if this has already been asked.

I'm so glad I am now a part of the Proton family! Been using Proton Mail + SimpleLogin for quite some time now, been moving my accounts slowly from gmail. Today I finally got a phishing email claiming coinbase received my account deletion request which I received to my local gym email address.

I'm partly mad that this shitass gym (which is, btw, a quite big chain here) leaked my email address. But I'm also happy I can just disable the alias and re-create a new one.

I didn’t expect much from the plus subscription but still subscribed in order to support Jack. Oh.. my.. god.. I just listened to the bonus episode about Sebastian. Even tho it was short 30 minutes story I loved it soooo much!

Jack, if you’re reading this, please keep up the great work!!

A vulnerability in Apple’s “Hide My Email” tool lets almost anyone discover a person’s real email address that is supposed to be hidden by the feature, and Apple has failed to fix it for more than a year, according to a security researcher and 404 Media’s own tests.

It looks like Polymarket is doing everything to stop you from trading if you're based in US. I was able to do it via a VPN setup on one of the big cloud providers. It worked for a while but then stopped. It looks like they might be blocking traders that are coming from cloud providers like AWS or DigitalOcean.

For those of you that are in US - how do you folks do it?

I worked on the Abducted medium linux box, and I found myself struggling with my general methodology. Below are spoilers so if you haven't worked on Abducted - stop reading here.

>!My methodology so far is mostly fingerprinting and footprinting the instance, finding which services and which versions are running, looking for CVEs for those services, then if found - look for ways to exploit them. With Abducted it was going nowhere. The Samba version is 4.6.2 which has a CVE but on this box it's not exploitable. The actual real issue is a misconfiguration that leads to a print-subsystem command injection (CVE-2026-4480). Given that this CVE is not a version specific and given there's no way to look at the Samba configuration in order to see a misconfiguration - how is one supposed to figure CVE-2026-4480 is what should be exploited? !<

>!Don't get me wrong, I really enjoyed this box and I'm not complaining, but I'm legitimately trying to understand what should be the methodology on finding these kinds of vulns. I'm sure I won't be able to pass the CPTS exam or be able to solve any hard boxes if I don't change smth in my approach. !<

Any feedback is welcome!

https://preview.redd.it/xj2we04h4u2h1.png?width=3364&format=png&auto=webp&s=1c846a59c301e4c389f8e2744951040a60c5b090

https://preview.redd.it/effy604h4u2h1.png?width=3370&format=png&auto=webp&s=deafa2185c8cda51a529662b26a92a476a1ba48f

It says spawn the target system to answer the questions, but there are no questions.

So I was doing one of the machines last night and what a blast was to see it's referencing characters from the Silicon Valley show (imo one of the best shows of all times about engineers).

I won't name the box but if you did it - you know which one I'm referring to.

ps (spoiler) >!out of all of them of course Dinesh was the one to leak his credentials to a git commit hahahaha!<