16/04/2018 | 12:25
Preparing audio to download.
Sponsored listening. Audio will begin within seconds...
Escucha sin esperasHazte Premium
Preparing audio to download.
Sponsored listening. Audio will begin within seconds...
Escucha sin esperasHazte Premium
bitcoin wallet: 31qf3VXyLXYSqFYypkomxRGN2vK6TBE5f7
Subject: Firewalls, bitch. - Cody's Linux'n Crypto PodcastContent:welcome back for another episode with the crypto man with no crypto
https://wapiti.sourceforge.net/ - vunrability scanner, hosted on sourceforge, install documentation was shit, and so was where it was hosted.
talk about the ease of mybitcoin saver, no afil, just running in the background.
sophos XG firewall
https://github.com/DanMcInerney/icebreaker - AD password cracker, shit, no documentation on how targets.txt works. install was easy, no info how to clone though.
Sponsor:Goal + date:100 downloads within a month of publish by 17/04
One Liner:I got chased by a mugger the other day and halfway through the terrifying ordeal, I couldn’t help but think to myself, “He’s giving me a good run for my money.”
Transcript of Cody's big ones:[0:00] Music. [0:42] Yeah yeah yeah firewall bitch. [0:48] Welcome back for another episode with the crypto man who has no crypto. [0:58] Want to start off with my bitcoin saver. Now listen you know I'd tell you. Did any affiliation or any bullshit fucking fans on again and here we go. [1:20] No affiliation no bullshit. [1:25] I'm using my bitcoin saver because from the boys on reddit you're asking for. People to get involved in the Beta and they do it for free. Thursday service that they provide another message me for some feedback last week and. Still fee free for beta boys from the UK so hit me up on Twitter if you want to get email address. I gain nothing. [2:01] But listen to this how we do this is every week on a Monday takes £15 lots of Us standing order. How do you £15 from my bank account today Uk bank account no fees no nothing standing order then the following Friday. Investing to bitcoin on Mass to get the best rates and send it to your wallet. So there is the Monday to Friday weight chargeable you going to say why did you do it all in one day. This is literally you do fuck all I'm just getting later on. Friday saying from coinbase you got another £15 worth of Bitcoin at. I'll do anything I don't make big Investments I get the best rate sit on my ass. £15 standing order piece of piss man I like stuff that's easy. Simple and effective and this matches perfectly. But if you end up with a bit more income you change your 15 week to 20 25 50 whatever. The whole process just stayed automated can beautiful baby easy peasy lemon Squeezy now. [3:28] Two Linux apps I tried last couple of weeks with a t. What is a vulnerability scanner. [3:40] Hosted on source Force create one of these vulnerability scanners you put your website address in. Can tell it where your ID = bit in it's going to try fuzzy attacks SQL injections all those bits and pieces. Now number 1 toaster on source Force so I thought not good I let my projects on github and I like simple install instructions. Longshaw sports and already has clicking in trying to find shit click here to download right. Click here for Virgin could do this folder structure in readme.md install me that MD click the readme downloads a file search it is not easy and I know what you're thinking fucking hell you doing it download and fireball straight away. Yeah you're in you're starting to fall in that pissed off mode you download the readme. You need all these bits just like references stuff didn't tell you how to install them. Just links to the various bits on the internet get up project a fucking Python request URL there and then just says see read me install the MD for more installation. And I just got a load of shit in there and what it does but again it's not telling the install. [4:56] Do you go back you could be installed AMD against source horse fucking file download to download that I go back to desktop. You had it of notepad plus plus you open it it's just talking shit again. [5:13] Just it was just a pain in the ass and to be honest but a time. By the time I've gone through that whole process and then I dread to do the DAB install documents that was just. A low noise and um I thought you know what fucking be asked so. [5:35] What happy fuck off Lafferty. If you want people to use your software it's going to be a piece of piss to get started. Flight leave the first impressions when you meet people got to be. Decent stuff first engagement is kind of teach me all the rest of this experience is going to go. My click on to your software page and you send them me down Fucking rabbit holes clicking on folders in folders there then you give me read me and install to just a load of shit and then you can fuck off I ain't got time for that. Sometime next bit Linux software. [6:18] Icebreaker note this on a few RSS feed it's like the ID password cracker everyone was masturbating at over everyone has reference in it. Everyone's talking what I can break your ID credentials on was actually talking about going through the process and playing with the tool themselves. Just an echo chamber of. This ID password break into oh shut up fucker get involved get up great start clowns that bad boy nice and fresh baby I love it nice and fresh. Didn't have documentation pussay. Bought it well it did have a few examples I'd limited examples and how to run out on that get up first welcome page so the fuck it I'll go for it so it says. Reference. Command targets. Txt parameters I thought I don't have targets that txt I just want to pass a target my 87 see what happens. Couldn't find anywhere to do that by the help retrieve the files not sent not a single thing so thought will maybe this targets. Txt. I told you I'll create the file and I'll put in some address as they may be saying network scan it and started to read about it I needed to sniff traffic back and forth. Put a few IPS in there I do a comma separate them colon space enter travel or doesn't say anywhere. [7:53] In the ghetto project as no targets that txt no I ain't going to fucking sit there messing about I can't be asked I literally can't if you're going to tell me that you need to reference targets. Txt. But you're not going to tell me the format the ship needs to be in there. I want to Google and round to see what other people doing there's nothing other than people wanking over what they've read on one side and the echo chamber get bum bum bum bum bum bum but nobody's actually using it documentation shit ain't got time for that neither. So Icebreaker fuck off with a t. Fuck off yeah I'm a lazy bastard going to make things easy baby gotta make things easy. [8:43] If you are a software developer that I don't even care that I'm going on a run now baby just somebody sends me an email. And says except for example and we keep this really really babe I received an email week one that says. This has been set up on our network with like you alter user is the link week 2. [9:12] Hey guys so being set up now just need to login with your ID credentials and k have fun let us know how you get on feedback or appreciated. They had included the link from the week before to get into this to you now you want me to do something for you. You want me to test something for you you've got to meet that process is easy as possible and don't be fucking complaining next week that you ain't getting no feedback and people are not open you out. Because. Why everybody is busy waiting to go back to that email sent last week and stop clicking around we got hundreds of emails in an inbox to do you a favour you need to make the process as simple as possible you need to use the least amount of words as possible. You taking time out of people's days keep it simple keep it at the point keep it minimal. If you're not willing to do that people are going to waste their time trying to help you out now you'd argue these two bits of software here. R4 did help people out there 12 of people who in the security field test vulnerabilities maybe it's true maybe it isn't but the bottom line is. If you take it something you've got the people who actually going to try and use these tools to test one belt easy taking a spend more time with them. Then there's going to be people on the other side of the fence like me. Probably not to My Extreme because I'm just doing it so that I can talk about it I don't win or lose the pending F22 all works well I'll just say shit and then I've spoken about a loving you the side of the fence now if you want. [10:55] Adoption of your software product you want people to get involved you need to take the effort out to make it easy. Have you just sit on the fence and thing when people want to be using that put the effort in Last of wrong attitude soon will tell you now. Italian now to fucking lesson From The Bottom. [11:16] No I'm going to talk about something that I don't usually talk about this is something that kinda. Comes into my day job that I get paid for it we don't talk about that stuff because the stuff that you get paid for isn't necessarily the stuff that you like to click round with just to have fun at the weekends. See I'm big open source man I Linux I like free I think it's because I've always been tightfisted when it comes to money. Didn't grow put a great amount of cash and then stuff like the apple ecosystem at sucks in and then bleed yet. I'm not really into I don't it's stuck in those places and their next to me and the open source I'd was always something I said listen come and sit down at the table come and have a play. You don't like it you can walk away but we're not going to charge you for the experience I like that like to sit down and play. I don't like to be charged from tight fisted and if one day I was to start a business. I wouldn't want to be paying out Costa Costa Costa Costa you want to know how to do it the most efficient sheep way that's why I like to open sore side of things just it just sits with my personality. No reason to tell you that is firewalls of run. It for leisure before being ups sent to open sensor IP fire open source relatively open source projects free all of them three bottom line. [12:54] Now I came across working with this office in work out I used to wear to sophos utm and just a last generation firewall still current but not the latest one I didn't like it. The great deal find more listens I probably in trouble for saying that. But there's a new product out the sophos XG and you know what it's better and again no affiliation you know what I ship. Better pfsense opendns IP fire and all those it's just fucking beautiful man I love it it's it's a soft it's a software product. The hardware product to firewall product that I've come across naturally having to work with in work. And it's fucking great it's really good and here's the thing boys and girls have you got a hosting environment at home. You can download XG home virtual Edition for free. And you can run it through reading your ESX server your proxmox server you whatever your host environment is give it to Nick's. Maybe first of all you're such a ripping firewall bro mode and pass all traffic out get used to the interface see how things flow then maybe try and lock it down I think if you want to run a firewall at home. Get involved in it easy like I said before easy minimal so that's get the Iso get in your virtual environment and get it your default gateway and Kai. [14:31] Now in 6 months time let's take things serious if you're running a firewall at home we don't want to ne out rule what's the point let's understand what the network is doing. Then you start to refine it your locker HTTP https SMTP for all year in. Devices that alone querying time that you light bulbs and shit or whatever then you allowed DNS. And then something's not working Netflix isn't working on that use and port fucking XYZ she will all that and you start opening these ports up and then you end up with a tight home network. Yeah your last rules deny nothing else have been matched than now you understand the flow of traffic you networking knowledge starts to come up using a proper. Enterprise class. Firewall product I don't normally like saying in surprising commercial I'm usually shine away from that ship of these boys have done something right. They give us the home version for fucking free market penetration get the ITU geeks. Dictate a home to your products and they will take them to work. Give it away for free the home version never been a soft as fanboy and still not a sophos fanboy to be honest the anti-virus the fucking. Anti-ransomware shirt and all that at the pushing all that stuff I don't I literally don't give a shit about I'm not saying it's good I ain't saying it's bad all the cloud products. [16:04] Care about it all what I'm telling you right now is the sophos XG firewall is where it is at it's the best out there it's fun. It's fast it's secure you can do your web filter and if you want throw SSL certificate on your devices decrypt and scan IPs. ATP Manchester and protection weekly reports add to weekly report setup advanced threat protection and Emma general risk report the general risk report just shows that I what shall I pawn. Just on any yeah I make sure me and my wife get it or it becomes a little bit strange it says if your monitor in the home network and it's becomes a little bit creepy, to make sure she gets a copy of the report and that's why I watch porn when opening up about that, advanced threat protection report what that does if any device any my kids devices anything is reporting back to come under control centre to the infected with Trojans or anything it's in the report. Been empty but I seen it when working in there, the commercial environment but that report local mental identify machine internal network. The antivirus hasn't picked up but it's in the back to a CNC you invest in a time machine you locate device to sort it out. The free fucking all mate. Feel like I'm working for sofa sale maybe maybe I should be on commission maybe they should be giving me more money this shit. [17:31] Oh I think that's Air Wick 2 fucking runt just went on and found it towards the end now baby but we haven't gone for a while I didn't even realise, goals and date 100 downloads within a month of published by the 17th of the 4th of the 1st of the 4th I'm not even gonna click the links were nowhere near here. Don't really have I don't I don't have a lot of subscribers don't have a lot of downloads or let's just click it anyway just for fun I think just be transparent for this thing is good to the blockchain video what is a blockchain last one's 44 since publishing on one prior to that, Hydra password cracker with catalytic keywords and shit in it for that would would get it off it's only 57. So probably going to miss the goal but it ain't achieving the goal it's important it setting them measuring them because then you'll understand where you are and you'll know where you want to be I don't even know what I'm saying anymore. Should positive and some like that are boys. I am you know what I did just a little free beer did a bit more work on noviscore what am I working on over school now oh yeah basically. What it'll do is every night this isn't implemented yet but I'll just tell you anyway xxx I've been having fun with little side project about a code and I'm not a great programmer but just nice little thing just to get your mind engaged. Every night because it's already monitoring all your notes so that one of their nose is my home internet line every night it's going to take what year average Ms is your milliseconds your lives. [19:08] Response time whatever like Minds 13 and it'll store it in a database and then if that varies by 25% of because I'm 13 to 20 the next night as an average it will just send you an email just say listen. Your average exchange there and then what that allow you to do that I have a power cut today did my mood and go off and come back on that's got different IP that's its roots step through and more laggy. Path and if so turn modem off turn it back on see if we can get it back now if you're playing online games and stuff that extra Ms is big. So if you jump from 13 to 21 day it just nice to know why but they do but a cable in work today we will have cable and works the lady who could be anything. Um yeah so I've been working on anyway so happy days now I did it does one of the thing actually. I got chased again by a mother the other day and half way through this terrifying ordeal I couldn't help but think to myself oh my god he's giving me a good run for my money. [20:19] Peace of pictures.
16/04/2018 | 12:25
30/04/2018 | 17:29
14/05/2018 | 13:12
27/05/2018 | 09:56
27/05/2018 | 09:56