/cyb/ - cyberpunk and cybersecurity

I have a problem going on for long now. Basically: my ISP is a bitch

my internet comes through a docsis 3.0 network through coaxial cable. (that isn't a problem)
the problem is: they gave a "connect box" that is basically an essential botnet manifested into phisical reality. It's a deep-chinese bullsoykaf modem+router+wifi-ap box, and it has zero options, no portforwarding, no configurable firewall, no nothing, the only setting is setting the wifi password. the "connect box" decides what ports and what packets are "safe" for me and closes other things, there's also no option to give fix IPs to my devices on LAN.

now this is soykaf in itself but: this device has been proved by several people to be very easy to exploit by anybody, but isp doesn't even need exploiting because it has several dedicated backdoors for them, and they even have a backdoor for "refreshing" and "modificating" (read as: injecting even more backdoors and malware and getting logs of everything, while eliminating more and more settings and options) the firmware, which they definitely do from time to time. i feel like i'm living in a gulag. also it's as big as a shoe box, consumes a soykafload of energy and warms as a motherfucker. it has to be rebooted quite often and every reboot is about 15 minutes.

Now the real question and subject of this thread: Post about secure and good cable modems. I tought there was openwrt compatible modems but now i see there's only "connect boxes" has openwrt for them. i want a discrete cable modem and an openwrt router. which are some secure and good modems? what are the most important properties i should look for?

ok so, pure hypotethical situation.

A group of attacker activists, whose actions are based on principles every good cyberpunker on this board would share, have to perform a sabotage.


At a certain time in a certain building, let's say a school or an office, oblivious people will enter in a computer room, then every person will take a computer and they will do stuff on the browser requiring an internet connection for an hour or so. A group of attackers composed by a dozen of individuals (of which one or two are in the computer room, supposingly doing stuff on the browser with the oblivious people, while the others are still in the building but outside the room) wants to stop them from doing those things on the browser. They know the wifi password, but the computers in the room are connected via LAN (even if with the same connection).
If they manage to sabotate the activity on the browser, the oblivious people will be happy or indifferent, and the room's tecnichan is very stupid so he won't probably be able to restore the connection if that's more troublesome than restarting the router (but even if he restores it, slowing down the operation with multiple disconnections would already be a victory).
The group of attackers would prefer to have the possibility to leave a message or a symbol, but if that's impossible with informatic methods it's not a big problem because they can still use meatspace-based methods for that.
There may be the possibility to access one of the computers in the room before the oblivious people enter, but the attackers don't have administration rights (Windows 10) and this is not something on which they can count 100%, so if possible the plan should work also without this eventuality.
Obviously if the attackers don't expose themselves too much it would be better.

How lain thinks the attackers should act in order to reach their objectives?

lets talk about instant encrypted synchronous communication lain. what are some you use? which ones would you never use? should you trust your life on any of them? p2p or decentralized? how do "chat bots" fit into all of this? where do we draw the line between anonymity and convenience? how do we deal with metadata?
starting with a nice long list and some of their drawbacks

signal https://whispersystems.org/ - without a doubt first class in secure instant messaging clients at the moment.
centralized server, closed source
requires a phone number to register
only able to contact people through phone numbers
desktop client is a chrome app
file transfer and group calls aren't encrypted

wire https://wire.com/en/ - arguably just as good as signal, but doesn't have the backing of moxie
centralized server, closed source (soon to be open source)
requires either a phone number or email address to register (both if you want access to the desktop and mobile clients)
desktop client is an electron app

threema https://threema.ch/en/ - a closed source client that is still fairly popular (i haven't used this client so i can't say very much about it)
centralized server, closed source client & server (encryption protocol is open source)
paid

riot/matrix http://matrix.org/ - protocol of "the future" still in alpha and under active development
no e2e by default (being worked on currently)
alpha
riot is based on electron, mobile app leave much to be desired

XMPP + OTR https://xmpp.org/
encryption is just a plugin and isn't baked into the protocol (im not sure how much of a problem this is)

"Encrypted" messengers that you should avoid:
Telegram telegram.org
Encryption protocol is known to be broken, since it is home baked and not made by cryptographers. E2E is not enabled by default.

WhatsApp/Facebook
This is Facebook. e2e may be working, but your data is still being harvested and sold to advertisers and/or used by Facebook. They own the client. They can do whatever they want with the data once it's unencPost too long. Click here to view the full text.

Please note that we have proceeded to the databank exchange.

https://www.youtube.com/watch?v=OjEZuOS9mmg

SSTV is an amateur technology that permits drawing images from sounds. [File is an example of SSTV.
Could SSTV - like systems be used to transfer or create files? It would be fun to experiment in making a file/network that is radio-based and independent from Internet. I always loved things like Meshnet and stuff but it wasnt entirely "out of the box" as I'd like to say. I know I sound "i wanna go against the world" but I'm really into alternatech.
Not sure to post in /tech/ or here since it's kind of both..
We're not talking about Security yet though.

hello /cyb/,

I'm installing Windows 7 for a PC build, and am looking to harden it all the way down. I've already gotten the CIS benchmarks and seen a few guides, but one thing they didn't cover is the so-called "botnet updates" microsoft pushed to win7 making it supposedly as bad as win 10 in terms of call home-iness. Can anyone here confirm the existence of such updates, and preferably share info on what specific KB numbers to avoid?

on behalf of everyone else running win7, thanks in advance.

Is the rapid advancement of technology responsible for significant social alienation? It seems that even as connections are seemingly strengthened through the internet we are more atomized than ever in spirit. The classes with most internet access have very damage psyches (middle and upper)

Each day we find ourselves creeping towards the corporate dystopia we fear.

https://www.itnews.com.au/news/telstra-and-vodafone-temporarily-block-websites-after-christchurch-attack-522232

What gets me is that terrorism in the past was fine, but suddenly this isn't. Arabs killing Arabs? 9/11? Arabs killing Europeans? Arabs killing Jews? All totally fine.

Australian killing Arabs? HOLD THE FUCKING PHONE SHUT IT DOWN. SHUT IT ALL DOWN NO TIME TO DISCUSS.

“We understand this may inconvenience some legitimate users of these sites, but these are extreme circumstances and we feel this is the right thing to do.”

A lot of people use these sites as support groups, LGBTQ groups for example, it's a safe place for them. But here we go, let's not understand what this is and just ban it because we are corporate and fuck you.

"The right thing to do" is to ignore fuckers like this, but peoples self righteous indignation won't let them, and he fucking wins.

Good job corpo dipsoykafs. You show we live in a boring as fuck dystopia.

So today I was walking laps around my school when I hear a sound from our security, it was reading off a mac address. I pulled out my phone and it started to read an IP address. what should I do with this? should I do a pen test or scan it for open ports?

Facial recognition is being employed by the government and soon to commercial use as a means to keeping tabs on everyone doing everything. Storing that data for legal uses, selling, and enforcing law.

Taking up our own means of fighting against this menace to our privacy should be talked about. I believe the war against this type of surveillance is already lost, but we should make the effort to protect ourselves against it.