Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid - welcome to the Stubsack, your first port of call for learning fresh Awful youāll near-instantly regret.
Any awful.systems sub may be subsneered in this subthread, techtakes or no.
If your sneer seems higher quality than you thought, feel free to cutānāpaste it into its own post ā thereās no quota for posting and the bar really isnāt that high.
The post Xitter web has spawned so many āesotericā right wing freaks, but thereās no appropriate sneer-space for them. Iām talking redscare-ish, reality challenged āculture criticsā who write about everything but understand nothing. Iām talking about reply-guys who make the same 6 tweets about the same 3 subjects. Theyāre inescapable at this point, yet I donāt see them mocked (as much as they should be)
Like, there was one dude a while back who insisted that women couldnāt be surgeons because they didnāt believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I canāt escape them, I would love to sneer at them.
(Credit and/or blame to David Gerard for starting this.)
Iād seen that link and didnāt even go looking, but wow this is way worse that I wouldāve expected
itās been a while since I last looked (I usually just deploy whatever network I need) but iirc even the typical desktop config distributions of qemu-kvm are a macvtap or link+nat setup
I wonder if this person even thought to run a nessus/openvas/whatever scan against the same machine
also, quite seriously, what fucking clowning is this to have this be some āI slapped together a test on my desktopā rather than having a lab bench? is it too hard and costly for trail of bits employees to afford a 1u they can pxeboot for experiments? wild
(e: adding)
other typical modes are bridged (e.g. having various vlans available as bridges and then managing vm exposure to vlan by interface attachment), direct interface assignment (hw offload to the guest)
passt is also commonly used for podman, and itās moooostly userspace[0] IP and no real good l2 options
(Iām only half joking. itās stunning how badly container-management software and tooling all suck)
Yeah, networking is such a hassle.
I think that this is really insightful, as itās actually part of the magic trick. Like, normally Iād start by wondering about air-gapping, but there canāt be an air gap in the network because the entire trick relies on ChatGPT tokens flowing into the machine under test and into some system shell (in some VM, yadda yadda) and back out again, so of course this is going to be an inherently insecure setup.
the networking part is fine (I do a looooot of networking), but the software quality and choices (esp with containers) is just extremely meh
re the gapping, eh, there are ways. just off the top of my head: rig up the serial console, screen+camera and usb keyboard signalling (which you can data diode on transmission later via usbnet). and thatās before you go for esoteric side channels and utter silliness
but āI turned off spectre and friends mitigationā is just some extremely funny shit
idly, I do wonder how well an ocr-only clodjeepeetea would work. every time I look in on all these āagent sessionā tools they appear to be a very mech turk thing of a phenomenal bit of hidden state, and a tiny little bit of visible distraction. feels like ocr-only might break a bunch of the usual tricks that are used to build on for the shiny demo