I’m almost done with 2nd part, but I’m very confused - is Low a different podcast, not a darknet diaries one? I’m still waiting for the “stories from the dark side of the internet” but I’m starting to get a feeling it’s not gonna happen. Sorry if this has already been asked.
I'm so glad I am now a part of the Proton family! Been using Proton Mail + SimpleLogin for quite some time now, been moving my accounts slowly from gmail. Today I finally got a phishing email claiming coinbase received my account deletion request which I received to my local gym email address.
I'm partly mad that this shitass gym (which is, btw, a quite big chain here) leaked my email address. But I'm also happy I can just disable the alias and re-create a new one.
I didn’t expect much from the plus subscription but still subscribed in order to support Jack. Oh.. my.. god.. I just listened to the bonus episode about Sebastian. Even tho it was short 30 minutes story I loved it soooo much!
Jack, if you’re reading this, please keep up the great work!!
A vulnerability in Apple’s “Hide My Email” tool lets almost anyone discover a person’s real email address that is supposed to be hidden by the feature, and Apple has failed to fix it for more than a year, according to a security researcher and 404 Media’s own tests.
It looks like Polymarket is doing everything to stop you from trading if you're based in US. I was able to do it via a VPN setup on one of the big cloud providers. It worked for a while but then stopped. It looks like they might be blocking traders that are coming from cloud providers like AWS or DigitalOcean.
For those of you that are in US - how do you folks do it?
I worked on the Abducted medium linux box, and I found myself struggling with my general methodology. Below are spoilers so if you haven't worked on Abducted - stop reading here.
>!My methodology so far is mostly fingerprinting and footprinting the instance, finding which services and which versions are running, looking for CVEs for those services, then if found - look for ways to exploit them. With Abducted it was going nowhere. The Samba version is 4.6.2 which has a CVE but on this box it's not exploitable. The actual real issue is a misconfiguration that leads to a print-subsystem command injection (CVE-2026-4480). Given that this CVE is not a version specific and given there's no way to look at the Samba configuration in order to see a misconfiguration - how is one supposed to figure CVE-2026-4480 is what should be exploited? !<
>!Don't get me wrong, I really enjoyed this box and I'm not complaining, but I'm legitimately trying to understand what should be the methodology on finding these kinds of vulns. I'm sure I won't be able to pass the CPTS exam or be able to solve any hard boxes if I don't change smth in my approach. !<
Any feedback is welcome!
It says spawn the target system to answer the questions, but there are no questions.
Happy to join the club!
Where will I see the blocks once I start hitting them?
So I was doing one of the machines last night and what a blast was to see it's referencing characters from the Silicon Valley show (imo one of the best shows of all times about engineers).
I won't name the box but if you did it - you know which one I'm referring to.
ps (spoiler) >!out of all of them of course Dinesh was the one to leak his credentials to a git commit hahahaha!<
