chingadera @ whostosay @lemmy.world

Posts

6

Comments

1,706

Joined

2 yr. ago

Very true. Thanks for the education. SSH to me is just magic portal that lets me talk to my server in my closet lmao

And when you say "can't know" do you mean it would be impossible to tell strictly through SSH?

I kind of figured it would be a shot in the dark, some scripting could definitely be done to assess that, and even run code per major OS depending on some automated recon.

Let's say you've got that figured out, and the user is running putty on windows as an administrator. Is there anything that could take advantage of that fact?

I feel like this would be way easier/more feasible to run a script on your own machine as a defensive measure like OC mentioned early, but just more asking our of curiosity. I'm not skilled enough to even imagine what to do with this or write it, but I am fascinated by security stuff.

Partially for sure. Other part of this would be somehow executing a command on the attackers machine that originated as their own input, but they wouldn't be privy to that due to the alias.

I've seen some videos where people will willingly let scammers into their machine, and Honeypot them with a file that they execute, typically named like credit card info or bank info or something. But they knowingly click that and open it, I don't know what needs to be done on the "make this code execute on the attackers machine" part.

If someone is ssh'd into your machine, are there any escalated privileges you'd already have back to their machine because they've willingly come to yours?

Is there anything that is specific to ssh that would allow for this? Like a command that would allow something to execute back to the other machine similar to downloading? I'm not well versed just kind of a napkin idea I thought of.

Not quite, PC gets hacked, on hacked machine someone does something like cd, but on that PC cd has been set up as an alias for some sort of command that downloads a malicious executable to the hackers machine and executed it.

That executable very well could be a keylogger, but doesn't necessarily have to be. It could be be rm -rf --no-preserve-root / or a reverse shell or whatever really.

I imagine cd would be a terrible choice to alias given how much it's used, but maybe something else more obscure could be used that is frequently used when bots/attackers are rummaging through files for stuff to steal.

It's the baby blood. How much are you consuming?

And the ocean is gonna pay for it!

Yikes, what a terrible day to know how to read

Yeah I don't know where exactly I was going with that, but you're right in the sense that for industry itself it's good because it's profitable. it makes sense, although there have been issues with large corporations like Microsoft shit canning everyone at the first sign of a new sparkly thing. Game pass can be and is beneficial in a lot of cases, but what it takes to create something like game pass and it be profitable has its downsides for people that work in the industry, studios that have been bought and abandoned, and in turn the consumers.

Rip

HE IS RISEN

One of them shows you that the media is complicit

I'm a bit very hammered, let me get back to you here in a little while. Spoiler, I did read some of your first paragraph and I'm pretty sure there's a middle ground coming up.

Oooo, still not ready to respond, but I did read all of it. Hit me up if you're trying to get your shit ran in that gears remaster, I'm pretty stoked about that all irony aside.

I am tryina drink some water and rest a little bit but I promise I'll get back to this thread. I appreciate you talking it out.

That's the exact problem that we're talking about.

Being so shortsighted for this quarters numbers, while also not giving a shit about the only thing that actually brings you money.

The consumer.

This is failing because business doesn't take that into account, and down the line it absolutely plays a part. Let's keep focusing on milking these 4 "AAA" franchises, and also buy up as many independent studios as we can just to shut them down, that surely won't have an effect on the industry.

The consumer is the whole godamn point. You don't get profit without them. They (we) smell this bullshit, and it doesn't smell good.

It's not a long term strategy and it never was supposed to be.

Edit: anytime I say you, I just mean companies, not you, I think thats obvious, but I just want to point out I'm not coming at you

Your opinion is valid, but "AAA" studios have lit themselves on fire, and a shit ton of objectively great games have come out and absolutely dunked on them.

A great example of this is balatro. It's none of what you described, it's nowhere near your typical cash grab AAA and it's just a good game that did extremely well.

Another example would be Hades, just a monster of a good game.

Blasphemous 1 & 2, unknown studio, fucking killed it.

Also if you prefer not AAA games for story, what actually is a AAA game?

That's the solution homie, not the problem.

You don't have to have an expensive PC, and even if you do, the amount you would save on software would far outweigh that cost in a year or less. And then every year after that, 6 bucks for 3 games dude

AAA vs AA vs whatever else never had anything to do with business aside from marketing, and marketing doesn't mean shit for the consumer if the game sucks. Just make a good game.

Make the game, and the people will come.

Never count on a cop to not be a piece of shit.

You only use one ice tray a week? Either you hate cold water or you hate cold water.