WWH-forum Education 20-21. Part 1. Settings and security.
WWH-forum Education 20-21. Part 1. Settings and security.
Lecture#1 Introductory lecture 11.16.2020
Lecturer: Mans
[19:30:25] <Mans> Stop flood
[19:31:40] <Mans> Today we will have an introductory lecture and at it I will tell you what awaits us this month, what and how it will be and what to look for.
[19:32:08] <Mans> Let's also get to know each other a little closer.
[19:32:44] <Mans> Karzh loves acquaintances in this business, as well as in any other business, without more experienced comrades. So, from the outset, I advise you to organize a powerful team within the group that will help and motivate each member.
[19:33:05] <Mans> This year has seen the biggest update to our training.
[19:33:42] <Mans> Now the tutorial is divided into 6 blocks
[19:34:14] <Mans> FIRST UNIT, SETTINGS AND SECURITY
1 Introductory
2 Linux security
3 Security and anonymity on the network. Setting up a virtual machine
SECOND UNIT, INSTRUMENTATION
4 Maps
5 Drops, in the middle
6 Antifraud
7 Finding shops and what is merch
8 Basic fundamentals of shop / service warm-up behavior
9 Antidetect
10 Android
THE THIRD UNIT, THE BASIS OF WORK AND DRILLING
11 Driving from A to Z
12 Pickup
13 Europe
FOURTH BLOCK, DIRECTIONS
14 Enroll
15 Working with Enroll
16 Gift and Egift
17 Gift and Egift (online driving)
18 Working with Amazon
19 Working with FaceBook
FIFTH BLOCK, DIRECTIONS 2 (ACCOUNTS)
20 Paypal introductory
21 Paypal self-registers and working with them
22 Working with brute accounts
23 Working in Bank accounts
24 MERCHI, creation, customization and work with them.
SIXTH BLOCK, TRAVEL
25 Hotels
26 Air
27 Rent part-1
28 Rent part-2
29 Excursions
[19:35:18] <Mans> There is a lot of information, I advise you to immediately delve into and read.
[19:35:57] <Mans> I'm talking about security right away.
[19:37:18] <Mans> For Linux. Who wants to transfer to it, but nothing fumbles about it, we take those. literature on this OS and study it independently. Without it, you will not understand nichrome and will not be able to work comfortably, you will sit and suffer and in 90% will not be able to move along the carzh.
[19:38:57] <Mans> Also, many asked for vpn and servers. I will throw off a mini lecture for you now. you can ask questions after the lecture in questions.
[19:39:30] <Mans> https://ded.im/notes/?68f6cfafe4c1da66#GB6cGVcy42T75mR3Dy1rScoNiSi7jPQ3XcMeLADBEPdd
[19:39:37] <Mans> Let's move on.
[19:40:28] <Mans> Those who came with zero knowledge and do not understand anything, you can not worry! Our training is structured in such a way that you will understand everything, and what you do not understand, we will tell you everything and show you everything.
[19:41:32] <Mans> We will get to know the lecturers as we progress through the studies. Also, all lecturers are in our conferences on the forum.
[19:41:45] <Mans> Each lecturer has his own area of expertise. Some by Gift, some by PP, and some by Air and Hotels.
[19:42:11] <Mans> The average lecture lasts 1-1.30
[19:42:22] <Mans> After question / answer
[19:42:42] <Mans> If there are any deviations from the schedule, we will post announcements in the main conference.
[19:44:04] <Mans> First comes the material on the lesson, then you ask questions and the lecturer answers them.
[19:44:32] <Mans> When the topic passed. Is the lecturer making a sign? and writes that we ask questions.
[19:45:17] <Mans> The Lecturer writes nicknames in turn -> You write a question -> The Lecturer answers.
[19:46:02] <Mans> When a topic comes up and a question appears, I advise you to immediately write it down in a notebook and when your nickname is called, you just made a copy-paste. Saves a lot of time for everyone.
[19:47:10] <Mans> All relevant information (lecture logs, links) will be added in the first posts on the forum in our group LAN.
[19:47:27] <Mans> https://wwh-club.cc/index.php?conversations/16-11-20-osnovnaja-rabochaja-konferencija.7221063/
[19:47:44] <Mans> Here we look at all the information. Those who missed the lectures will have logs in this conference.
[19:48:38] <Mans> All questions that appear, write to the Confu Question / Answer.
[19:49:19] <Mans> https://wwh-club.cc/index.php?conversations/16-11-20-vopros-otvet.7221074/
[19:49:32] <Mans> We ask any questions at all. What is connected with karzh. we all write there. Because many have similar questions and so that everyone can see the answers and not ask all the same question a hundred times.
[19:51:02] <Mans> Just want to say about the questions and their answers) Many people write to me in the PM with a request to ask questions in the PM, motivating so as not to interfere with the guys from the conference, etc., etc. Guys, your phobias about stupid questions are all nonsense! Let's start with the fact that you yourself are not small and our contingent is 95% adult and everyone understands perfectly well that everyone has come to learn a new profession and if we do not jointly solve all the issues and problems we will not succeed! So we write all questions here - https://wwh-club.cc/index.php?conversations/16-11-20-vopros-otvet.7221074/
[19:51:56] <Mans> Also, whoever has complaints / suggestions / in the config question / answer does not answer the question - we write to me in the cart https://t.me/gwwhss
[19:52:03] <Mans> Or something urgent
[19:52:09] <Mans> I answer the fastest in the cart.
[19:52:41] <Mans> Since everyone writes to us a lot in LAN \ Carts \ Toads, there is a simple instruction to get you 99% answered
[19:53:14] <Mans> In order not to miss you, you must do the following:
1. Unsubscribe in PM
2. Duplicate the question in a telegram or a toad.
3. If there is no answer, update the drug after 2 days
[19:54:07] <Mans> I am online from Monday to Friday from 10 to 21 Moscow time. Sat is a day off and in the sun in the late afternoon is already online. Don't be surprised if you write at 4-5 am Moscow time, but I don't answer)
[19:56:01] <Mans> As for virtual machines, some have a question, download everything or how. I explain.
VB7EN64 and VB7EN32 - the difference is only in the bit width. a sphere is set in 64, and so they are the same. We choose the one that is needed for your tasks.
VB7RU32 - RU assembly suitable for surfing and chatting.
For English speakers, you can safely take any assembly in English for communication.
[19:56:20] <Mans> Your security lectures start tomorrow
[19:56:36] <Mans> Big start tomorrow!
[19:56:52] <Mans> By the way, for security, who has not bought VPN yet, we must put it! The guys from DED.IM have prepared discounts for you
- Coupon -30% (WWH-NOV-VPN) is valid for buying VPN (https://ded.im/cart.php?gid=2)
- Coupon -15% (WWH-NOV-SERVER) is valid for the purchase of Windows / Linux VPS (https://ded.im/cart.php?gid=5) (The servers have already installed the basic software necessary for work)
The coupon is valid until 12/01/2020
————————————————————
DED.IM service introducing discounts for November group WWH-CLUB:
- Coupon -30% (WWH-NOV-VPN) is working for purchase of VPN (https://ded.im/cart.php?gid=2)
- Coupon -15% (WWH-NOV-SERVER) is working for purchase of Windows / Linux VPS (https://ded.im/cart.php?gid=5) (We preinstalled all software needed for work)
Coupon is valid till 01.12.2020
[19:57:04] <Mans> Now let's put it on? and drove on questions
[19:58:22] <ame> Vpn now to take, or as the practice begins, also on the remote desktop.
thanks
[19:59:57] <Mans> ame: VPN should be taken now and used everywhere, even when visiting BBX and similar forums. Since the provider writes all the logs where you roam. According to the Desktop, it is not necessary to take it at all. Those who need it and thinks to work with it, then you can now take it. And so you can safely work from the Virtual Machine.
[20:00:05] <Izolentna>) Regarding the scope of work. You said about the penguin. That is, it is better to sit with him than with the window?
2) A question about methodology and, in principle, information on the forum. Is there any reason to read it before teaching? Or will they all chew what and how?
[20:01:58] <Mans> Izolentna: 1. Did I say that it is better to sit on it? I said that for those who are not prepared for this system, it is worthwhile to study it, since you will only have pain with it. I myself work with Windows and do not complain. 2. There is no sense, since infa is outdated and then there will be a mess in my head.
[20:02:18] <RedHeadCockatoo> Regarding vpn. Based on links: is it more advertising + proven resources? Or you can also install other vpn. What is the priority when choosing vpn? Do you need to install both on the PC itself and on the virtual machine?
[20:04:58] <Mans> RedHeadCockatoo: Proven resource and discount for you. But we do not call, you can put the one that you like. There are a lot of VPNs and until you test you won't say anything for it. We always put on the basis of vpn, since there can be a couple of virtual machines and so that everywhere Ip is hidden.
[20:06:32] <polosatiy-55> 1. what update was there this year?
[20:06:46] <Mans> polosatiy-55: above bro dropped blocks
[20:07:02] <IB $ integral> Each block of study in a week goes approximately with the exception of the first. Interested in when it will be about BA and self-registers of the RR: in a week, in two, etc.
[20:07:21] <Mans> So
[20:07:24] <Mans> let's not flood
[20:07:33] <Mans> I find it hard to pick out all this later
[20:07:46] <IB $ integral> If that was the question
[20:07:47] <IB $ integral> 1. Each block of training a week goes approximately with the exception of the first. Interested in when it will be about BA and self-registers of the RR: in a week, in two, etc.
[20:09:00] <Mans> IB $ integral: The schedule is always floating, so hard to tell.
[20:10:06] <dat_user1> Will there be information on current shops?
Where is it better to get everything.
Will there be an example of driving practice?
[20:10:35] <Mans> dat_user1: 1. We will give shops where we buy ourselves. 2. Will be driving online.
[20:11:00] <Koba787> 1Do I need to update the software in Windows?
2 still did not understand whether it was necessary to buy only vpn and work through a virtual machine or nadly buy vpn and vps?
And why do we need virtual machines if we buy VPS?
Do I understand correctly that from now on and forever and ever we do not use our mail, even in those resources that you discard?
4installation on the main pc or virtual machine; that is, if I have a poppy base, then I still buy a vpn for a poppy? and will it be forwarded to the virtual machine?
[20:11:29] <Koba787> and 5 will we have extended info on the linked sphere?
[20:12:02] <Koba787> 1-1 Windows downloaded from links and vvh and branded wallpapers and presets
[20:13:51] <Mans> Koba787: 1. You can have a browser, the rest is optional. 2. We read carefully my answers, I said that the UPU does not have to be taken at all. Whoever wants him to let him work, the rest can safely work with the VM. 3. Of course, we register tutanota / protonmail and use them. 4. You put the client under the poppy, and the configs are the same there and it will work on the VM. 5. There will be a separate lecture.
[20:14:20] <Mike Wazowski> What kind of VPN services are there that match the level of general security recommended by ded.im? Are there any recommendations for analogs?
[20:14:54] <Mans> Mike Wazowski: If only https://mullvad.net/ru/
[20:15:10] <loodsman> Downloaded and now I'm sitting with your build 10ki (eng), but I added a Russian layout for communicating at the conference, so as not to infuriate people here with transliteration ... in the future for work - it will not show through where what?
[20:15:45] <Mans> loodsman: will, because of this there are assembly RU and EN. Unpack another EN for work.
[20:16:13] <deadhasan> I correctly understood vpn not for work, but for protection, we need it, and if we have our own vpn services that do not contain logs, can I use them?
[20:16:27] <ZellyBoBa> 1. about Linux. is there a recommendation which distribution is best for our purposes? tales / heads / whonix or something else?
[20:16:41] <Mans> ZellyBoBa: This will be told to you at the lecture tomorrow
[20:17:20] <deadhasan> I generally have such an understanding, why switch to Linux if you’ll admit it all your life on Windows, it’s like going to first grade with an extra haemorrhoid.
[20:17:29] <Goodman> 1. As I understand from the blocks, we will not touch the logs?
2. Is there an official chat wwh in tg?
3. TG threw off in HP
4. Will there be homework for the practice?
[20:18:30] <Mans> Goodman: 1. let's be superficial 2. No. 3. Ok 4. Will practice on the weekend.
[20:18:48] <titanfinancierstoic> VPS + sphere - enough for all learning tasks? Approximate period before the start of practical lessons on clothing / will work with large shops be covered?
[20:20:24] <Mans> titanfinancierstoic: 1 Yes, of course 2. And we do not touch large shops, you will not pull them out, because there is antifraud every week, you leave all the coins there. We must start with small / medium-sized shops.
[20:20:39] <ame> At what stage for practice or dz investment is needed. Can I immediately transfer to btc or, in fact?
[20:21:11] <Mans> ame: not earlier than 3-4 weeks of training. While gnawing the granite of science at the lectures.
[20:22:46] <centurion_52> 1. About the Russian layout. I'm sitting through honix on a normal Windows. Do I need to create a separate
[20:22:55] <AK-Baks> 1. What about free VPN services? How effective are they? ITop VPN Currently using
2.How soon practice and first results?
3.How to buy VPN? Just throw it to the guys from your card? Or Qiwi?
4. Will you have a homework for practice?
[20:27:50] <Mans> AK-Baks: 1. Forget them like a bad dream. They write logs, merge them at the first requests of the FBI. In general, you do not need it. 2. Let's start learning first. Where are you in a hurry? There were individuals who have already gone to the induction to drive in and I will tell you that they have successfully driven in, but this is fraught with mistakes and leaks of money. 3. Buy a cue ball on exchangers. Reception for security reasons only jammed. Your safety if anything. 4.Will
[20:29:38] <HuggoBoss> vWhen will the materials accompanying the training be issued?
There activation of the sphere, etc.
[20:29:56] <ZiVert> Yes, I have already caught up with everything myself slowly) VPS is a server? Right? You wrote about the sphere in the English version. What does she give? ??
[20:30:04] <Mans> HuggoBoss: I'll write everything down in the first posts
[20:30:46] <maxmaximov88> if I have already paid for nord vpn, you can use it or not
[20:30:51] <Mans> ZiVert: yes, these are remote servers. 2. Sphere in English does not give anything. There is a substitution in the very sphere of everything.
[20:31:22] <Mans> maxmaximov88: well, nord is very popular. I would not, but if I have already paid, use it.
[20:31:57] <centurion_52> About the Russian layout. I'm sitting through honix on Windows. Do I need to create a separate workstation without Russian layout?
[20:32:49] <Mans> centurion_52: yes, it is necessary, because if you drive in from the VM clean, then when driving in, the layout is visible. and with ru layout, they will send the goods to you.
[20:33:04] <Izolentna> The question is completely green for the cue ball. Do you need to figure out how what works or will there be some kind of short lecture in the security section? Blockchain and all that ... How to work with it
[20:33:33] <htuf> on a secure wallet for cue ball, should you think about which one to use right now, or will it be discussed in the future?
[20:33:37] <Mans> Izolentna: we will tell everything in the lecture.
[20:35:51] <riba12> Mans How many hands-on sessions with lecturers will there be for doing things? And when there will be a practical lesson, will it be interciative or will we just watch how the lecturer is doing?
[20:38:37] <Mans> riba12: We will have 2 classes with real-time driving in, where we will analyze all your questions later.
[20:39:08] <Qqmalo> is there a timeline for curatorial advice after training?
[20:40:28] <Mans> Qqmalo: unlim, of course, if the advice is within the framework of training, and not from the category of how to hack the Pentagon.
[20:41:48] <blazhkin> Mans: will the logs after the lectures be posted only with the text of the lecture or followed by questions from the students, too?
[20:41:59] <Mans> blazhkin: of course with questions
[20:43:15] <riba12> We will use virtualka in the next lectures? do you have to run it every day?
[20:44:00] <Mans> riba12: no, it won't. so far only Theory
[20:44:08] <bulbik> Screen recording can I do?
[20:44:35] <Mans> bulbik: even if it wasn't possible, how would we know that you are writing a screen?
[20:45:19] <Nexxtip> Will the questions be answered in the logs?
[20:45:28] <Mans> Nexxtip: yes
[20:45:53] <RedHeadCockatoo> 1) At approximately what level do you need to know English? Fluent spoken? or will google translators master the help? As I understand it, knowledge of the language will be a very good bonus when communicating directly with shops / banks if something happens. Based on the courses for beginners, I already know that certain people are engaged in these for money, but still ...
[20:48:17] <Mans> RedHeadCockatoo: Bro, through a translator you can successfully earn money and communicate with shops, but knowledge of English is a very big plus.
[20:48:53] <ame> On the forum, in the general purchases section, my balance is 0, is that how it should be? Some have more than 0 on the balance sheet.
In the end, how long will the training last?
[20:50:35] <Mans> ame: It should be so if you didn't buy anything through the forum automation. 2. 29 lectures, 4 per week.
[20:50:53] <user80> 1. when registering a mailbox on a protonmail, you do not need to specify additional. address to restore access? Or is it still possible to indicate, just in case?
[20:51:23] <Mans> user80: can be specified. register before this on tutanota and point it in proton
[20:51:24] <ame> the tuber has just registered and did not make a purchase
[20:51:28] <ame> but he has balance
[20:51:39] <ame> only bought the course
[20:51:52] <Mans> ame: he could pay for tuition through a voucher and these money fell on the counter
[20:52:27] <user80> 2. What is the best way to pay for VPN using the link above?
[20:52:36] <Mans> user80: jammed
[20:52:41] <Koba787> would like to return to the keyboard layout? there was a talk about what to use then 2 Os. Closer to practice, can you just remove the Russian keyboard and continue your successful work on English Windows? or in practice we will sit in a sphere and it will disguise it?
[20:54:39] <Mans> Koba787: what's the point to put, but to delete? put two VMs ru and en. If the Sphere, then no difference.
[20:55:22] <htuf> question again about the cue ball, is there a difference which wallet to use?
[20:56:23] <Mans> htuf: we'll talk about this in the lecture.
[20:56:43] <Koba787> purchased vpn is also useful when working with a sphere?
[20:57:02] <Koba787> prostite za mnojestvo glupix voprosov
[20:57:16] <Mans> Koba787: of course! Vpn is the very foundation of your security, but few people understand about it.
[20:57:18] <dat_user1> Bro, when will the sphere be?
do we buy proxies through faceless?
If so, will we be given active accounts?
Because first deposit there 50 $
[20:58:40] <Mans> dat_user1: 1. In the first posts I will sign. 2. Not only 3. Will not give, there is where and without a depot you can buy.
[20:59:03] <RedHeadCockatoo> I am asking not for myself, but rather for those who ask questions about where and how best to charge bitcoins to a bitcoin wallet. It seems to me that they are asking at the moment, without waiting for a lecture on the topic, based on the recommendation to put vpn as soon as possible.
[20:59:45] <Mans> then make a knight move
[20:59:48] <RedHeadCockatoo> The wording is very clumsy right now, but I hope you get what I mean
[21:03:15] <Mans> In general
[21:03:22] <Mans> by wallets
[21:03:47] <Mans> you can start a wallet here in the first pairs
[21:03:49] <Mans> https://www.blockchain.com/
[21:03:54] <Mans> start left mail
[21:03:58] <Mans> and we commit to it
[21:04:11] <Mans> Verif does not need to go there to store and send the cue ball
[21:04:24] <Mans> you can buy the cue ball here
[21:04:37] <Mans> https://www.bestchange.ru/
[21:04:40] <Mans> watching a couple
[21:04:43] <Mans> select by course
[21:04:47] <Mans> and tarim
[21:04:57] <Mans> so you can safely buy your first cue ball
[21:05:54] <htuf> if I buy from the stock exchange on which zaregan can lead to de-anonymization of me?
[21:06:14] <Mans> htuf: where are you going?
[21:06:23] <Koba787> is binance.com for us? there must be verified
[21:06:33] <Mans> Koba787: verification is needed there
[21:06:37] <htuf> Mans: to a bitcoin wallet, well, in the sense of replenishing it
[21:06:58] <Mans> htuf: well, in general, they can, but for buying a VPN, no one will catch you like that
[21:07:09] <user80> RedHeadCockatoo got it right. But there are no fewer questions, I write on tutanote - I need payment (card or pp), what should I do?
Or maybe just wait for a lecture on security? Security paranoia will set in soon
[21:07:30] <Mans> user80: there is a free plan.
[21:07:49] <htuf> user80: yes there is such a thing, you always get nervous when there is not enough information
[21:08:23] <Koba787> Is the withdrawal from the above wallets carried out without verification?
what is tutanote? and protonmail
[21:09:01] <Mans> Koba787: from the blockchain yes. mulberries and proton are mail services
[21:09:42] <AlexFlex2134> Windows 8 on the virtual machine will go?
[21:10:18] <ame> Does it make sense to work through a virtual machine if you want to use the sphere?
[21:10:20] <Mans> AlexFlex2134: you can put it too
[21:10:37] <Mans> ame: on VM and put the sphere as an option
[21:10:49] <ame> is not allowed on the base?
[21:10:52] <Mans> you can
[21:10:53] <ame> or is it more reliable?
[21:11:02] <Mans> no difference
[21:11:48] <centurion_52> to install vpn on a clean VM?
[21:11:54] <Mans> vpn
[21:11:59] <Mans> is better to put on the base
[21:12:05] <Mans> since there may be more than one virtual machine
[21:13:07] <Koba787> Taking into account that we are talking about work in the sphere, then the meaning of the VM is - or will we have tools: which will allow us to work with the sphere but without the VM, and also in the VM and without the sphere?
[21:14:11] <adik89> are we going to work from a VM on Windows 10 or install and learn Tails?
[21:14:29] <Mans> Koba787: we will consider all options for work
[21:14:46] <Mans> adik89: I advise you to sit on Windows
[21:15:32] <adik89> Mans: Then I don't understand why to learn Linux - you wrote before
[21:16:16] <Mans> adik89: guys, read carefully what I am writing and delve into the text that I am writing.
[21:16:31] <Mans> there was no call to switch to Linux.
[21:17:12] <Mans> and there was a recommendation, if you want to switch, then start reading special literature on Linux.
[21:17:47] <Mans> any more questions?
[21:18:58] <blazhkin> So far, you can not regret anything - no mail, no wallets, but just wait for the relevant topic at the next lecture?
[21:19:07] <Mans> Izolentna: where is it written here?
[21:19:19] <Mans> blazhkin: yes, right.
[21:19:47] <Izolentna> I realized that you can sit with Windows. No questions asked anymore, trash
[21:20:20] <dat_user1> Bro, can I put OpenVPN on my base, Shove a Sphere into a crypt and move through the sphere from the base using the sphere?
Plus, we will create a few more crypts (false)
Like if the cops are looking for me, let them look for a fake))
It's simple Dedic and stuff that's already for 911 it seems to me)
[21:21:04] <dat_user1> If the cops accept *
[21:21:09] <bulbik> And the banks will say what is said,
[21:21:11] <bulbik>?
[21:21:31] <bulbik> Cash and withdrawal with a bunch of vcts, etc.
[21:21:54] <Mans> dat_user1: 1. You can 2. There is no sense in making false ones, there is a special software that sees cryptocontainers. 3. The delusion is complete. 911 has nothing to do with it))
[21:22:06] <Mans> bulbik: No, we don't have it.
[21:22:08] <Mans> Tax
[21:22:12] <Mans> That's all for today
[21:22:18] <Mans> Thank you all for coming
[21:22:22] <Mans> See you tomorrow!
[21:22:29] <Mans> Big start tomorrow
Lecture#2 Linux 11.17.2020
Lecturer: partyboy
(7:02:18 PM) partyboy: Today you and I will have a lecture on Linux
(7:02:34 PM) partyboy: we'll look at the Linux operating system as the system we'll be running on, as well as the security aspects of this and other operating systems
(7:02:51 PM) partyboy: OS - Operating System
(7:04:20 PM) partyboy: I'll try to explain in plain language how you could theoretically be hacked.
Try to avoid complex terms
I will also give you a colorful idea of hacking the operating system, and more advanced users will read technical information between the lines.
(7:05:04 PM) partyboy: First, let's start with a little educational program: Linux (hereinafter * Lin *) is an operating system, the same as Windows, Mac OS X. It was developed by Linus Torvalds in 1991. In our modern world, servers of the world's largest companies, refrigerators, telephones and much of what we see in life work on the basis of the line.
(7:06:00 PM) partyboy: Linux advantages over other operating systems:
(7:06:25 PM) partyboy: 1. Open source
One of the main advantages of Linux is that it is an open source operating system, meaning its source code is readily available to everyone. Anyone who is capable of coding can contribute, modify, improve, and distribute the code to anyone and for any purpose.
(7:07:42 PM) partyboy: 2. Security
Linux is more secure than other operating systems. However, Linux is not completely secure as it has some malware, but it is less vulnerable than others. Every program in Linux, be it an application or a virus, needs authorization from the administrator in the form of a password. If the password is not entered, the virus will not start. No antivirus software is required in Linux, although it is quite possible to hack you
(7:08:55 PM) partyboy: 3. Working on older computers
(7:09:11 PM) partyboy: 4. Software update
(7:10:10 PM) partyboy: I believe that the user of any operating system, and even more so those who are associated with it at work, need to understand that professional viruses are not an executable file that has been renamed into a document and ask you to run (stealer or warrior). And not always blocking macros will prevent an attacker from executing code on your system.
(7:11:00 PM) partyboy: I work on Linux, but sometimes I use Windows. Further, there will be a lot of negativity about Linux, but it is not connected with any fanatical beliefs, I just want to objectively tell and convince you that no matter what operating system you use, you can be hacked everywhere.
(7:11:54 PM) partyboy: Your choice of operating system matters to your security, privacy and anonymity. Different operating systems suit different needs
The choice is always yours;)
(7:12:18 PM) partyboy: don't get hung up on Linux, start with Windows)
(7:12:42 PM) partyboy: For example, to draw graphics for you I have to leave Linux on Windows as I need Photoshop and other graphics editors, we'll talk about that later. But I think the main message of the information is clear;)
(7:13:24 PM) partyboy: Nobody forbids you to put both Windows and a couple of different Linux distributions on your hard drive) or a USB flash drive)
(7:15:00 PM) partyboy:. A long time ago, when Linux was in its infancy, most of its users were professionals. But over time, distributions, convenient for a simple user, appeared (for example, UBUNTU) and the number of housewife users began to grow. What does any housewife do? That's right, he makes online payments, and where there is money, there flock there like bees to honey, a swarm of various rabble, which wants to improve their finances free of charge. 90% of housewives use Windows - and viruses are developed for this operating system, and only at least 20-30% of housewives will switch to Linux, then big finances will immediately be poured into it for the development of malware. And reports from antivirus companies show a slow but increasing number of such programs.
(7:17:41 PM) partyboy: Here are the basic steps and rules to follow in order to reduce security problems under Linux to almost zero:
(7:17:56 PM) partyboy: Install software exclusively from the official Linux Mint, Ubuntu and Fedora Workstation distribution repositories
(7:18:45 PM) partyboy: What is a repository?
(7:19:02 PM) partyboy: https://im0-tub-ru.yandex.net/i?id=1de03d7b24d10a85b7f327fdfc05525f&n=13
(7:19:16 PM) partyboy: It's a database, an archive, a huge archive of programs. As a comparison - like google play or app store
(7:19:42 PM) partyboy: Install programs only from there. Because they all undergo a rigorous test and there cannot be viruses initially
(7:20:09 PM) partyboy: Don't install any antivirus (yes, that's not a bug!)
(7:20:44 PM) partyboy: On distributions of Ubuntu, Linux Mint, etc, you don't need antivirus software or rootkit removal utilities. After all, if the system is regularly updated, a virus or rootkit will not be able to penetrate it. In addition, in Linux, malicious software downloaded by a user can only function in his home directory. Based on the above, in order to install a virus or rootkit into the system, it will need your password, or the vulnerability of one of the system components. But in the overwhelming majority of cases, he will not be able to use either one or the other;)
(7:22:56 PM) partyboy: Ubuntu checks daily for security updates.
We recommend that you install all proposed security updates as soon as they are released if you want to make your system as secure as possible.
If the vulnerability is found and fixed in a timely manner, it will not be a big problem)
(7:24:07 PM) partyboy: Avoid questionable or third party web browser add-ons !!!
(7:24:16 PM) partyboy: https://otvet.imgsmail.ru/download/46355980_e73047cddf8468c5e2f913bee72cde9a_800.png
(7:26:03 PM) partyboy: If there is no doubt about the quality of the product provided, namely the browser itself, then extensions should not completely relax you.
As a user of your "machine", you should understand that any third-party code can become a serious security problem.
Extensions can not only help you, block pop-ups, but also remember the passwords you enter, keep a log of your visits, and the most annoying thing is to copy your credit card details. =)))
(7:27:53 PM) partyboy: That is, roughly speaking, in whatever protected system you are sitting - you just need to follow the questionable link, then click on the "OK" or "ADD TO MAIN SCREEN" button on the pop-up window and so on - accidentally install the plugin in your browser or, alternatively, start the execution of the JAVA script)
(7:29:11 PM) partyboy: and this script (plugin), to the extent of its coolness, can stupidly steal your cookies, passwords, autoforms, etc.))
(7:29:55 PM) partyboy: But, as a rule, browsers warn that the link is suspicious, there you already think with your head and make a decision)
(7:30:33 PM) partyboy: Now about WINDOWS
(7:30:54 PM) partyboy: In general, I agree, the security of Windows operating systems is gradually improving, but this is not enough, and even more so for us)
(7:31:18 PM) partyboy: The problem is that in these operating systems everything is closely interconnected with the Microsoft servers, all your actions in the system are reported to Microsoft servers as if by strings, Windows also fail, especially in the current version of Windows 10 , the issues related to surveillance and privacy are not particularly related to security tools, but this turns off some people, what to say about us ..
(7:32:07 PM) partyboy: https://wwh-club.cc/index.php?threads/obratnaja-storona-windows.98628/
I would recommend that you read this article.
So that you can look at the whole picture from the outside) (after the lecture)
(7:33:04 PM) partyboy: An important point: If you read the Microsoft license agreement that comes with every Windows operating system, you will see that they will give your encryption key from BitLocker on the first call from law enforcement, and this is in their the queue bumps into the idea of what the fuck is Windows ?! Why do you keep my encryption passwords on your servers, what the fuck? =))))))
(7:35:25 PM) partyboy: The thing is, by ticking the box in the licensing agreement with Microsoft, users are giving corporations control over their data. “We may access, disclose and store for ourselves your personal data, including any content, any files on your devices, in your letters and in other types of personal communications, if we have reason to believe it is necessary to protect our customers or to comply terms and conditions governing the use of our services ”- reads the license agreement.
(7:37:19 PM) partyboy: In other words, whatever you say on the web, write, save, create or download on your computer or any other device with Win 10, it can all be remotely deleted or copied from you - if someone at Microsoft decides they need it. That is, according to the terms of the Microsoft EULA, you do not even need authorization from the authorities to interfere with the privacy of customers and control it!
(7:38:19 PM) partyboy: Now let's talk about Linux distributions)
(7:38:57 PM) partyboy: We'll take a look at the more standard operating systems: Ubuntu, Debian, Kali, Tails, and others - again, they all have reasonably robust security features.
(7:39:48 PM) partyboy: Debian is a Linux based operating system, it is a Linux distribution. It is composed entirely of free and open source software, most of which is under the GNU General Public License.
(7:41:08 PM) partyboy: The Debian distribution contains over 51,000 compiled software packages that are packaged in a great format for easy installation on your machine.
They are all free.
It looks like a tower)
At the base is the core, above it are the main tools, then all the programs that you run on your computer follow.
At the top of this tower is Debian, carefully organizing and putting it all together so that all the components can work together.
(7:42:39 PM) partyboy: See https://wiki.debian.org/Derivatives/Census for all Debian derivative distributions.
Many of them are security-critical operating systems like Kali, Tails, and so on.
The Debian project does an excellent job of providing security updates for Debian.
(7:43:33 PM) partyboy: Kali Linux is a GNU / Linux-LiveCD that emerged from the merger of WHAX and the Auditor Security Collection. The project was created by Mati Aharoni and Max Moser. Designed primarily for safety tests.
(7:44:39 PM) partyboy: Tails is a Debian-based Linux distribution built for privacy and anonymity. It is a continuation of the development of OS Incognito.
All outgoing connections are wrapped in the anonymous Tor network, and all non-anonymous ones are blocked.
The system is designed to boot from LiveCD or LiveUSB and leaves no trace on the machine where it was used.
The Tor Project is the main sponsor of TAILS.
The operating system is recommended for use by the Free Press Foundation and was also used by Edward Snowden to expose PRISM.
(7:45:46 PM) partyboy: Use it only for surfing, for example, surfing is a browser, communication, etc. that is, one-time meals like surfing and mustache)
(7:47:22 PM) partyboy: Linux is an amazing system that you need to learn to work with and will become your true friend.
It's like with a pet, how you train it, how to master it, it will be so flexible and half-shy for you =))
(7:49:24 PM) partyboy: The choice of OS is always yours! Test, study, try and everything will be ok;)
(7:51:05 PM) partyboy: Now ask questions in turn, put +
(7:52:00 PM) RedHeadCockatoo: 1. As a Linux user: how long does it take to "figure out" the system from scratch?
2. I heard that IOS is a closed OS. Is it relatively safe to carry out transactions from an old / new / personally used iPhone? Or it will not work, because company YUSA, and provide data to their own services at the first request?
3. in the lecture part (Tails) LiveCD and LiveUSB are indicated. What is it?
(7:54:18 PM) partyboy: 1) half a day, 10 hours, if 24 hours is to the brain - you will fumble so that you can explain to others)
2) I do this and don't worry) I won't go further than my village anyway)))
3) it is one and the same. you can just burn the system to USB or CD - well, there is no difference)
(7:54:23 PM) RedHeadCockatoo: 4. And some literature recommendations for learning Linux. I'm not going to myself (at the moment), maybe someone from the trainers will be happy right now
(7:54:43 PM) partyboy: 4. google bro)
(7:55:13 PM) goldenbaum: 1. What about mac os? Is it possible for the first time to work with it without a VM using a sphere
2. If on my Mac it has already happened: I bought a card on bingo directly from safari and climbed wwh also from my safari, am I crazy already? Maybe I'm already on some list of suspects and can sit down?)
(7:56:55 PM) partyboy: 1) I wouldn't work through a mac at all - fuck this gimora? )
2) I do not know how your Yabloko people collect information there, but in general, of course, the Pindos are in the courses about your laptop) but nevertheless forget it) drive in and do not worry)
(7:57:11 PM) Nexxtip: How much one-time surfing do we recommend TAILS, just google what is interesting and go out, or let's say it's okay to chat on the same WWH?
(7:57:34 PM) partyboy: ok
(7:57:50 PM) Izolentna: So it's better to use Tails for surfing, and take something else for work? How many do you need to have? : D
(7:58:17 PM) partyboy: it all depends on paranoia) you can have one system
(7:59:27 PM) partyboy: Friends, the lecture is not the most interesting - I'll tell you right away) but in the future many of you will want to switch to lin (linux)
(8:00:02 PM) Koba787: 1 - from the point of view of the security of our work, how much is Linux safer than the same Windows with a sphere and all that?
2 - which distributor would you recommend, what to start to deal with and then use in your work?
(8:00:10 PM) Cash.Delivery: Linux discussion? Have you already talked about FDE + SecureBoot?
(8:01:25 PM) partyboy: 1) the same, but the work itself initially under Linux is easier in safety
2) Xubuntu, Linux Mint
(8:01:43 PM) AK-Baks: At first, if you use Windows in conjunction with VPN and WMware, and after the session you clean CCleaner, will there be any norms? After all, it takes time to master at least the base on Lina, and we are all hungry here))))
(8:02:13 PM) partyboy: AK-Baks - that's right! start with Windows
(8:03:02 PM) htuf: Using TOR to surf and read wwh. Does he really protect me from prying eyes outside the onion net? So far, I have not used VPN separately and am reading from the main computer. (I understand that torus uses a lot of vpn sequentially)
(8:04:26 PM) partyboy: htuf: - I can't say anything here) contact the developers of the torus) but at least they haven't accepted me yet, and I'm giving a lecture =)
(8:05:04 PM) Temporary: Sorian for offtopic - why is it recommended to install Veracrypt? Is it put on Lin?
(8:05:20 PM) partyboy: yes) but I don't put
(8:05:39 PM) Qqmalo: maybe I'm a brake, but I don't understand all this fuss about linkus and Windows, we create vr, so we also put vpn, isn't it all that serious? isn't this combination enough?
(8:06:53 PM) partyboy: enough) just linux is one of the operating systems, and my task is to tell you that the world is not only made of Windows and poppy;)
(8:07:12 PM) ZellyBoBa: 1. Why is tails mentioned in the lecture, and let's say not heads / whonix, is it preferable in terms of security or is it due to the fact that it is more common?
(8:07:25 PM) Cash.Delivery: partyboy: Debian + FDE + SecureBoot + killswitch for WireGuard is it reliable? How can you describe the WireGuard protocol itself? It is better than OpenVPN in terms of surveillance security.
Is LUKS full-disk a sufficient security measure?
Well, that joke with the keys that were found with SecureBoot
(8:08:16 PM) partyboy: 1) everyone's choice. we give * pop systems * and programs (personally me), so that it would be clearer
(8:09:01 PM) partyboy: Cash.Delivery - write to ls on forum, this is a long answer
(8:09:45 PM) OTJlU4HUK: Are there some encrypted Linux laptops for sale on some onion marketplaces? How do you feel about buying such a device?
(8:10:47 PM) partyboy: Bad, because it’s not clear what they wrote to you on such a flash drive - this is the main aspect. The second point - you can sit for 3-4 hours and stir this up for yourself)
(8:11:07 PM) Yarah: at what point in carding did you feel like you needed to switch to linux for security?
(8:11:30 PM) partyboy: I originally worked on Linux;) I didn't have to switch
(8:11:49 PM) centurion_52: How safer is it to sit through windows + whonix than just through Windows? Should you switch to Linux after whonix in the future?
(8:12:27 PM) partyboy: Start working on windows, as you get the first profit - look towards development there)
(8:17:37 PM) Koba787: 1 - is it not possible to just install the wrong Linux from Google?
2 - since I have high hopes for the sphere - is it multiplatform?
3 - if the sphere flies on Linux and disguises everything, can you use the Russian version of the OS, or how is the English distribution necessary with Windows?
4 - can CashDelivery write a question to the forum with questions / answers? we are all interested in a sufficient measure of protection for Linux, including)))
(8:19:11 PM) partyboy: 1) not if you download the distribution from the official site
2) yes
3) no difference
4) yes