SapphireLabs
Reaction score
154

Joined
Last seen

Profile posts Latest activity Postings Trophies About

  • Thinking about making my own game engine and moving away from Unreal. It has a lot of good features but the majority of it is useless to me and has a ton of overhead.
    38194.jpg

    Backup finished at least. No idea why my server decided /etc/timezone was now a directory, but it broke my git for a bit.
    diggeloid
    diggeloid
    To be clear, idgaf what you do on your server. You do you, friend. But since you asked:
    The discord bot is a tunnel in/out to your system, that code is likely not reviewed by anyone (unlike SSH, which is popular enough to have so many publishes CVEs), neither is your MFA setup. Anyone at Discord has access to your systems, which are at least as vulnerable as Discord itself. Idk what "security context" you're running your bot under (I assume that means selinux and not a container or other sandbox), but if you're using it as you said (backup for when ssh/VPN break), then you clearly need to give it access to some admin resources at least, otherwise it wouldn't be very useful
    • Like
    Reactions: lightwo
    diggeloid
    diggeloid
    I'm a software engineer, not a security expert or pro sysadmin, but even I know that less surface area == more betterer.

    (Also, I'm curious how your car radio plays into this)
    SapphireLabs
    SapphireLabs
    Believe what you will. My tools are more than a Discord wrapper, and no, SELinux is trivial to pivot to u:r:s0 with userland access these days.

    Permission is granted per command, and the process itself does not run privileged.

    My radio is a trusted BluetoothLE device, and can authenticate against my hardware keys, same as my watch and phone.

    Feel free to probe my host, I keep a few fun services open for scanners. Tip: Port knocking is required for the fun stuff, and one of the sequences is 31337, 31337, 1337, 1337, 6969, 420, 6969, 420, 8008, 8080. Yes, I'm serious.
    Giving out testing keys on Steam (no weird URLs or anything required, I just DM a key) for my latest PsyShiftX CPP build. Currently only targeting Windows, but the Linux and Android builds are available if people really need them.
    K3Nv4
    K3Nv4
    I remember thinking mysql was tough to navigate
    SapphireLabs
    SapphireLabs
    MySQL / mssql and the similar types are infuriating ngl. Upgraded a postgresql server from 16 main to 18, and for some spontaneous reason it decided to drop the entire cluster. No warning, no y/N, just gone. Had a backup on hand but still. Maybe one day someone will make a database schema that isn't a simmered down COBOL.
    K3Nv4
    K3Nv4
    Could be fun to do local host again just to see how much it's changed the yearly costs didn't make it worth for me to really want to get involved either but these were like late teen years. Had a buddy that tried a webdesign site use to spend days just watching him design and code. Was fun. Lost contact sadly.
    2. KNOX does not fuck around. Having a very hard time breaking in to the bootloader of the S21 Ultra 5G (G998U1).
    3. Hacking of the PS4 for a cold boot exploit is underway. SAMU not nice.
    4. Got myself a new Weller soldering iron. The thing heats up in literally 6 seconds. It's absurd.
    So multiple things.
    1. If you're a Rust developer: ffs stop using system libraries. The whole point of cargo is so that everything including dependencies can be done in one shot. No one wants to fiddle with specific system packages.
    Working on a wireless hardmod. Solder to board, insert wifi NIC, power on when switch power is applied, connect to softcoded AP.
    Checking to see if I can chain load layeredFS to load a target, then that target to load another target. Useless, but fun to pass the time.
  • Loading…
  • Loading…
  • Loading…
  • Loading…

SapphireLabs

Sapphire
Level 5
XP
619 XP
Level 6
733 XP
Levels up in
114 XP
Level progress
43%