sábado, 12 de setembro de 2020

Summer Intermission

Its the height of summer, a hot time, a family time, and not much hobby stuff going on to feed the blog but there are nearly 2,000 posts published over the last 10 years  so time to bring a few back for a look.

I'll start with the Raid on St. Michel from 2010 when the blog was new. Rob and I had decided that for the HAWKS room at Cold Wars 2010, we would play through the scenarios from Charles Grant's recently released "Raid on St. Michel" using the HAWKS' collection of homecast 18thC troops, set during the Not Quite The Seven Years War (NQSYW). Rob and I acted as Impartial (or balanced bias) game masters with convention gamers signing up to play the battles helped out by some of the HAWKS where there was space.
The posts can be pulled up by clicking on the Raid on St. Michel label but they come up starting with the end so here are separate links in the proper order.


Not Quite The Raid on St. Michel
(Link to Preparation)
 .



CW2010 1st Battle of St Stephen
( Link to Game 1 The Raid on St Michel)
.


CW 2010. Battle of Walmar River Pass
Game 2 The Raid on St Michel





CW2010 The Defence of St. Michel
Link to Game 3 The Raid on St Michel



CW2010: Counterattack!
Link to Game 4 The Raid on St Michel



CW2010: Retreat from Rosmark.
Link to Game 5 The Raid on St Michel




CW2010: The Raid on St. Michel Summary

(I won't reproduce my captured enemy flags and canon here, you'll have to follow the link.)

Why Do You Play Games?

In the first post of this year, I want to share some content from the book I'm reading at the moment: Playing smart - on games, intelligence, and artificial intelligence by Julius Togelius. The author discusses many aspects on how games challenge us and what we can expect from games that use artificial intelligence in the near future.



One of the first points discussed by Togelius is about the question I already brought many times in this site: why do we play games? It's not easy to answer (and we have many different views for this subject) but I think it's essential to gather multiple points of view to create a more solid opinion.

Togelius launches the question: why do you play games? And starts his answer with a very interesting argument that most of the time we are playing games for many reasons but all the time – despite the game we are playing – we are doing an exercise of intense planning.

Below, I want to share this excellent content from his book and recommend the reading for all the followers of this site:

Why do you play games? To relax, have a good time, lose yourself a bit? Perhaps as a way of socializing with friends? Almost certainly not as some sort of brain exercise. But let's look at what you are really doing: You plan. In Chess, you are planning for your victory by imagining a sequence of several moves that you will take to reach checkmate, or at least capture one of your opponent's pieces. If you are any good, you are also taking your opponent's countermoves into account and making contingency plans if they do not fall into your elaborately laid traps. In Super Mario Bros., you are planning wheter to take the higher path, which brings more reward but is riskier, or the safer lower path. You are also planning to venture down that pipe that might bring you to a hidden treasure chamber, or to continue past it, depending on how much time you have left and how eager you are to finish the level. You may be planning to eat the power-up that lets you get through that wall so you can lick a switch that releases a bean from which you can grow a beanstalk that lets you climb up to that cloud you want to get to. In Angry Birds you are planning where to throw each bird so as to achieve maximum destruction with the fewest birds. If you crush the ice wall with the blue bird, you can then hit that cavity with the black bomb bird, collapsing the main structure, and finish off that cowardly hiding pig with your red bird. (TOGELIUS, 2019, kindle edition – position 412)

#GoGamers



Reference:

TOGELIUS, Julius. Playing smart - on games, intelligence, and artificial intelligence. London: The MIT Press, 2019.

sexta-feira, 4 de setembro de 2020

Downlod Gta 3 Highle Compresed In 98.0Mb By (Ayush Anand)











                                                         download gta 3 full free verson

gta 3 minimum reqirments2 gb ram1 tb hardiskintel pentunium processorwindow 7.8.xp only                                      (plese downlod winrar software to wotk )                                                     (also downlod direct x)                                                      (plese disable antivirus)the game is given by ayush anand  and sponserd by y.yada gamerGrand Theft Auto III is an action-adventure video game developed by DMA Design and published by Rockstar Games. It was released in October 2001 for the PlayStation 2, in May 2002 for Microsoft Windows, and in October 2003 for the Xbox. A remastered version of the game was released on mobile platforms in 2011, for the game's tenth anniversary. It is the fifth title in the Grand Theft Auto series, and the first main entry since 1999's Grand Theft Auto 2. Set within the fictional Liberty City, based on New York City, the game follows Claude after he is left for dead and quickly becomes entangled in a world of gangs, crime and corruption.The game is played from a third-person perspective and its world is navigated on foot or by vehicle. The open world design lets players freely roam Liberty City, consisting of three main islands. Development was shared between DMA Design, based in Edinburgh and Rockstar, in New York City. Much of the development work constituted transforming popular series elements into a fully 3D world. The game was delayed following the September 11 attacks, to allow the team to change references and gameplay deemed inappropriate.Upon release, the game received critical acclaim, with praise particularly directed at its concept and gameplay. However, the game also generated controversy, with criticism directed at the depiction of violence and sexual content. Grand Theft Auto III became the best-selling video game of 2001, and has sold over 14.5 million copies since. Considered one of the most significant titles of the sixth generation of video games, and by many critics as one of the greatest video games of all time, it won year-end accolades, including Game of the Year awards from several gaming publications. Since its release, it has received numerous ports to many gaming platforms. Its successor, Grand Theft Auto: Vice City, was released in October 2002.



game pssword is = i dontknow password



https://www.sendspace.com/file/7cleo5







segunda-feira, 31 de agosto de 2020

One Reason Why InfoSec Sucked In The Past 20 Years - The "Security Tips" Myth

From time to time, I get disappointed how much effort and money is put into securing computers, networks, mobile phones, ... and yet in 2016 here we are, where not much has changed on the defensive side. There are many things I personally blame for this situation, and one of them is the security tips.

The goal of these security tips is that if the average user follows these easy to remember rules, their computer will be safe. Unfortunately, by the time people integrate these rules into their daily life, these rules either become outdated, or these rules were so oversimplified that it was never true in the first place. Some of these security tips might sound ridiculous to people in InfoSec nowadays, but this is exactly what people still remember because we told them so for years.

PDF is safe to open

This is an oldie. I think this started at the time of macro viruses. Still, people think opening a PDF from an untrusted source is safer than opening a Word file. For details why this is not true, check: https://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-497/Adobe-Acrobat-Reader.html
On an unrelated note, people still believe PDF is integrity protected because the content cannot be changed (compared to a Word document).
Image stolen from Kaspersky

Java is secure

One of the best ones. Oracle started marketing Java as a safe language, where buffer overflows, format strings and pointer-based vulnerabilities are gone. Unfortunately, they forgot to tell the world that instead of "unsafe programs developed by others" they installed their unsafe program on 3 billion devices. 

Stay away from rogue websites and you will be safe

This is a very common belief I hear from average people. "I only visit some trusted news sites and social media, I never visit those shady sites." I have some bad news. At the time of malvertising and infected websites, you don't have to visit those shady sites anymore to get infected.

Don't use open WiFi

I have a very long explanation of why this makes no sense, see here. Actually, the whole recommendation makes no sense as people will connect to public WiFis, no matter what we (InfoSec) recommend.

The password policy nightmare

Actually, this topic has been covered by myself in two blog posts, see here and here. Long story short: use a password manager and 2-factor authentication wherever possible. Let the password manager choose the password for you. And last but not least, corporate password policy sux.

Sites with a padlock are safe

We tell people for years that the communication with HTTPS sites are safe, and you can be sure it is HTTPS by finding a randomly changing padlock icon somewhere next to the URL. What people hear is that sites with padlocks are safe. Whatever that means. The same goes for WiFi - a network with a padlock is safe.

Use Linux, it is free from malware

For years people told to Windows users that only if they would use Linux they won't have so much malware. Thanks to Android, now everyone in the world can enjoy malware on his/her Linux machine.

OSX is free from malware

It is true that there is significantly less malware on OSX than on Windows, but this is an "economical" question rather than a "security" one. The more people use OSX, the better target it will become. Some people even believe they are safe from phishing because they are using a Mac!

Updated AV + firewall makes me 100% safe

There is no such thing as 100% safe, and unfortunately, nowadays most malware is written for PROFIT, which means it can bypass these basic protections for days (or weeks, months, years). The more proactive protection is built into the product, the better!

How to backup data

Although this is one of the most important security tips which is not followed by people, my problem here is not the backup data advise, but how we as a community failed to provide easy to use ways to do that. Now that crypto-ransomware is a real threat to every Windows (and some OSX) users, even those people who have backups on their NAS can find their backups lost. The only hope is that at least OSX has Time Machine which is not targeted yet, and the only backup solution which really works.
The worst part is that we even created NAS devices which can be infected via worms ...

Disconnect your computer from the Internet when not used

There is no need to comment on this. Whoever recommends things like that, clearly has a problem.

Use (free) VPN to protect your anonimity

First of all. There is no such thing as free service. If it is free, you are the service. On another hand, a non-free VPN can introduce new vulnerablities, and they won't protect your anonymity. It replaces one ISP with another (your VPN provider). Even TOR cannot guarantee anonymity by itself, and VPNs are much worse.

The corporate "security tips" myth

"Luckily" these toxic security tips have infected the enterprise environment as well, not just the home users.

Use robots.txt to hide secret information on public websites

It is 2016 and somehow web developers still believe in this nonsense. And this is why this is usually the first to check on a website for penetration testers or attackers.

My password policy is safer than ever

As previously discussed, passwords are bad. Very bad. And they will stick with us for decades ...

Use WAF, IDS, IPS, Nextgen APT detection hibber-gibber and you will be safe

Companies should invest more in people and less into magic blinking devices.

Instead of shipping computers with bloatware, ship computers with exploit protection software
Teach people how to use a password safe
Teach people how to use 2FA
Teach people how to use common-sense

Conclusion

Computer security is complex, hard and the risks change every year. Is this our fault? Probably. But these kinds of security tips won't help us save the world. 

Related news


  1. Hacking Tools For Windows 7
  2. Hacker Tool Kit
  3. Pentest Tools Kali Linux
  4. Hack Rom Tools
  5. Hacker Tool Kit
  6. Usb Pentest Tools
  7. Easy Hack Tools
  8. Hack And Tools
  9. Pentest Tools Apk
  10. Hack Tools
  11. Hacks And Tools
  12. Ethical Hacker Tools
  13. Hacker Tools Apk Download
  14. Hacker Security Tools
  15. Pentest Tools Kali Linux
  16. Hacking Tools For Windows Free Download
  17. Pentest Reporting Tools
  18. Pentest Recon Tools
  19. Hacking Tools For Kali Linux
  20. How To Install Pentest Tools In Ubuntu
  21. Pentest Tools Tcp Port Scanner
  22. Hacking Tools Github
  23. Hacker Tools Apk
  24. Hacker Tools Software
  25. Github Hacking Tools
  26. Pentest Tools For Android
  27. Pentest Tools
  28. Hack Tool Apk No Root
  29. Best Pentesting Tools 2018
  30. Hack Tools For Windows
  31. Pentest Tools Website Vulnerability
  32. Computer Hacker
  33. Best Hacking Tools 2019
  34. Pentest Tools Find Subdomains
  35. Hacking Tools Free Download
  36. Nsa Hack Tools
  37. Nsa Hack Tools
  38. Pentest Tools Github
  39. Hacking Tools Free Download
  40. New Hacker Tools
  41. Pentest Tools Open Source
  42. Hacker Tools Online
  43. Pentest Tools For Android
  44. Nsa Hacker Tools
  45. Growth Hacker Tools
  46. Hacker Tools For Ios
  47. Pentest Tools Review
  48. Hacking Tools Download
  49. Hacking Tools Github
  50. How To Hack
  51. Pentest Recon Tools
  52. Hacking Tools For Games
  53. Pentest Tools Windows
  54. Hacking Tools For Beginners
  55. Growth Hacker Tools
  56. Hacking Tools Usb
  57. Computer Hacker
  58. Hack Tools 2019
  59. Hacking Tools 2019
  60. Hack Tools Github
  61. Hacker Tools 2019
  62. Nsa Hacker Tools
  63. Physical Pentest Tools
  64. Pentest Tools Framework
  65. Pentest Tools Open Source
  66. Free Pentest Tools For Windows
  67. Hacking Tools For Pc
  68. Pentest Tools Nmap
  69. Pentest Tools Website
  70. Hacker Tools Free Download
  71. Hacker Tools Linux
  72. Pentest Tools Tcp Port Scanner
  73. Pentest Tools For Mac
  74. Hacker Tools Windows
  75. Hacking Tools Windows 10
  76. Hacker Techniques Tools And Incident Handling
  77. Install Pentest Tools Ubuntu
  78. Android Hack Tools Github
  79. Hacking Tools Windows 10
  80. Hacker Tools Apk
  81. Pentest Tools Download
  82. Pentest Tools Nmap
  83. Nsa Hacker Tools
  84. Hacking Tools Windows 10
  85. Hacker
  86. Kik Hack Tools
  87. Hacker Tools
  88. What Are Hacking Tools
  89. Hack Tools For Pc
  90. Pentest Tools Download
  91. Hacker Tools Free Download
  92. Pentest Tools Download
  93. Hack Tool Apk
  94. Pentest Recon Tools
  95. New Hack Tools
  96. Hacker Tools 2019
  97. Hacking Tools Hardware

domingo, 30 de agosto de 2020

$$$ Bug Bounty $$$

What is Bug Bounty ?



A bug bounty program, also called a vulnerability rewards program (VRP), is a crowdsourcing initiative that rewards individuals for discovering and reporting software bugs. Bug bounty programs are often initiated to supplement internal code audits and penetration tests as part of an organization's vulnerability management strategy.




Many software vendors and websites run bug bounty programs, paying out cash rewards to software security researchers and white hat hackers who report software vulnerabilities that have the potential to be exploited. Bug reports must document enough information for for the organization offering the bounty to be able to reproduce the vulnerability. Typically, payment amounts are commensurate with the size of the organization, the difficulty in hacking the system and how much impact on users a bug might have.


Mozilla paid out a $3,000 flat rate bounty for bugs that fit its criteria, while Facebook has given out as much as $20,000 for a single bug report. Google paid Chrome operating system bug reporters a combined $700,000 in 2012 and Microsoft paid UK researcher James Forshaw $100,000 for an attack vulnerability in Windows 8.1.  In 2016, Apple announced rewards that max out at $200,000 for a flaw in the iOS secure boot firmware components and up to $50,000 for execution of arbitrary code with kernel privileges or unauthorized iCloud access.


While the use of ethical hackers to find bugs can be very effective, such programs can also be controversial. To limit potential risk, some organizations are offering closed bug bounty programs that require an invitation. Apple, for example, has limited bug bounty participation to few dozen researchers.
Related articles

  1. Hacker Tools 2019
  2. Hacker Tools Free Download
  3. Hacker Hardware Tools
  4. Hacking Tools Kit
  5. Pentest Tools Framework
  6. Pentest Tools Find Subdomains
  7. Pentest Box Tools Download
  8. Hack Rom Tools
  9. Pentest Tools Free
  10. Best Pentesting Tools 2018
  11. Black Hat Hacker Tools
  12. Pentest Automation Tools
  13. Hacks And Tools
  14. Hacker Hardware Tools
  15. Hack Tools
  16. Hacking Apps
  17. Pentest Tools
  18. Hacking App
  19. Hacking Tools Kit
  20. What Are Hacking Tools
  21. Hacking Tools Pc
  22. Pentest Tools Nmap
  23. Hack Tools Mac
  24. Android Hack Tools Github
  25. Hack Tool Apk
  26. Hacking Tools Pc
  27. Tools For Hacker
  28. Pentest Tools List
  29. Hacking Tools Usb
  30. Pentest Tools Find Subdomains
  31. Hacking Tools Windows 10
  32. Hacking Tools Free Download
  33. Hack Tools For Pc
  34. Hacking Tools For Mac
  35. Nsa Hack Tools Download
  36. Hacking Tools For Kali Linux
  37. Hacker Tools List
  38. Hacker Techniques Tools And Incident Handling
  39. Hacker Tools Free
  40. Physical Pentest Tools
  41. Hack Tools Online
  42. Hacking Tools For Kali Linux
  43. Hacking Tools Online
  44. Pentest Tools Android
  45. Hacker Tools Software
  46. Hacker Techniques Tools And Incident Handling
  47. Hacking Tools For Windows 7
  48. Pentest Box Tools Download
  49. Pentest Tools Subdomain
  50. Hack Tool Apk No Root
  51. Pentest Automation Tools
  52. Best Hacking Tools 2019
  53. Hack Tools For Games
  54. Github Hacking Tools
  55. Termux Hacking Tools 2019
  56. Pentest Reporting Tools
  57. Best Hacking Tools 2019
  58. Pentest Tools For Windows
  59. Underground Hacker Sites
  60. Black Hat Hacker Tools
  61. Hacker Tools Free Download
  62. Tools For Hacker
  63. Hack Tools Download
  64. How To Make Hacking Tools
  65. Hacker Security Tools
  66. Pentest Automation Tools
  67. Github Hacking Tools
  68. Hack Tools For Pc
  69. Hacking Tools Github
  70. Hacker Tools Linux
  71. Hacking Tools For Kali Linux
  72. Hack Tools Mac
  73. Nsa Hack Tools
  74. World No 1 Hacker Software
  75. Hacker Tools Mac
  76. Hacking Tools And Software
  77. Hacker Tool Kit
  78. Pentest Tools For Android
  79. Pentest Tools Port Scanner
  80. Pentest Tools Tcp Port Scanner
  81. Android Hack Tools Github

OSIF: An Open Source Facebook Information Gathering Tool


About OSIF
   OSIF is an accurate Facebook account information gathering tool, all sensitive information can be easily gathered even though the target converts all of its privacy to (only me), sensitive information about residence, date of birth, occupation, phone number and email address.

For your privacy and security, i don't suggest using your main account!

OSIF Installtion
   For Termux users, you must install python2 and git first:
pkg update upgrade
pkg install git python2


   And then, open your Terminal and enter these commands:   If you're Windows user, follow these steps:
  • Install Python 2.7.x from Python.org first. On Install Python 2.7.x Setup, choose Add python.exe to Path.
  • Download OSIF-master zip file.
  • Then unzip it.
  • Open CMD or PowerShell at the OSIF folder you have just unzipped and enter these commands:
    pip install -r requirements.txt
    python osif.py

Before you use OSIF, make sure that:
  • Turn off your VPN before using this tool.
  • Do not overuse this tool.
  • if you are confused how to use it, please type help to display the help menu or watch the video below.

How to use OSIF?


Related articles