#conspiracy

Now talking in #conspiracy Topic is 'shhh... very secret, all encryptions on, warp engines at full, etc etc' Set by WH^SomeHugeUserString. Seen on Fri. Jul 30 12:29:37 I was just like d-_-b lol how u make that inverted b? wait.. nvm... Hi. Please pardon my lateness, I was occupied. heyyy Yo No worries lol u were right about pm Right about what? I mentioned you write pretty formally online they told me u always talk like ur at work Well, communication is a muscle, and I take every opportunity to exercise it. I kind of agree with that i like the way PM talks :smile: ...how do i use emojis in this?? ;) You have to write it out like this >:( ooooooh that angry face is cute lol Yes it is But why are we using this platform? This seems ancient. It kind of is. is pretty old, but it's reliable. With software, old and boring is usually better and I own this server Ah, right. That's my next question. Who are you, exactly? /me is WH ;) WH is a friend I've known for a long time, who I trust to setup a secure server How secure? And can someone please explain what we're here to talk about? Pretty secure. It doesn't even keep any chat logs. Once we all disconnect, if we each erase our local copies, there won't be any records and all connections are encrypted JD? What do you think about this? it's ok, i think WH really knows a lot about this stuff dam rite I do cyber security made me a looot of money lol And who is "@fungor"? my bot lol ohoh it does tricks and stuff. like, runs little games !help /me has avialable commands:
!help - this message
!hangman - play hangman
!dungeon - enter the dungeon
!sim - launch bridge sim
!admin - server stuff Dungeon? Bridge sim? They're games. Bridge sim takes the people in this channel and turns us into characters controlling a ship in space oooh that sounds cooool its fun we should play some time Pretty cool actually I haven't played dungeon. What is it? I dont really use it anymore. it's like a d&d/mud sort of thing Okay, I get it, the bot is for games. Sorry I brought it up. Why are we here? ok so i asked MS for help with our data thing The missing data? So there's no solution? oh theres a solution alright lol Wait, how much does WH know about this? Who even is this guy?? whoooa way to assume gender... We explained enough to get an opinion. That's why we're here JD? we kind of already talked about it a little.. it makes sense to me Okay... so what's the opinion? yall gotta do a data heist I don't know what that means. we need to take the data from the ministry Take? What does "take" mean? like.. break in and take it The last option is to make a copy from the actual server Isn't that what we tried already? nono we tried getting it from the API I thought the API was the server? it is... wait.. isn't it? The API is the external interface to the server. Somewhere, there's a physical computer that's actually running the code that serves the API oh it's not a vm? like there's actually a server? yeah there not running it off a cloud theres good data privacy reasons to run ur own server especaiilly if ur the government lol Wait, let me get this straight. You all think that the best option left is to steal medical records from the provincial government? yuup it sounds kinda bad when u put it that way... I don't really think there's another option This isn't an option... It's a crime. ummmm technically, no Pardon me? yeh ur pardoned but its not a crime The key thing is that, actually, you guys are supposed to have access to this data ...by using the API. Right? There was that whole nightmare approval process to even get a key for the damn thing. naaah thats just access control thats not actually the law Sorry, are you a lawyer? lol no So what do you know about this? Why should we listen to you? Actually, MS and JD, please explain why you're paying any attention to this? You know this is crazy, right? i don't think it's so bad... i don't know, we're supposed to have the data, and we're actually allowed to get it in several different ways the only real problem with this is the breaking and entering, i think... Oh, okay, so when you said "break in and take it", you really meant "break in". This is bananas. Look, this is different from a data theft because, once you have the data, there's no crime to uncover. You're allowed to have it, you're supposed to have it. A criminal would be taking that data to sell it or something, or use it for blackmail or to steal identities. We're taking it to use it the way it's supposed to be used. We're just... taking it the wrong way Why would this involve breaking and entering, I don't understand. theres no easy way in over the network I already scanned the shit out of that server but knowing the provincial government I bet their physical security is crap compared to their cyber security do we know where the server actually is?? ;) That's not too hard to figure out. It just takes some footwork. Footwork? Yeah, like, gumshoe stuff. Walking around, measuring stuff. Measuring what? were gonna track latency between hops on the connection to the server from different parts of the city thatll let us map their network to torontos geography and we should be able to deduce where the server is housed Is it possible to explain that in English? I just did... Think of it kind of like sonar If we know how long a message takes to go to and from the server, depending on where we are in the city, we'll get an approximation of how far the server physically is from each location where we measure the latency Measure from enough different places, and our guess gets more accurate. We can triangulate the building's location Oh, okay, and then we can break in to that building. yeh u got it Yeah, this is insane. You've all gone insane. What if you get caught? lol i don't think we'd get caught... WH is really good at this. we were trading stories earlier yeh were not gonna get caught That isn't reassuring. it should be I dont get caught Oh? Ive been at this for almost a decade and Ive never used a jail pass What's a "jail pass"? it's like from monopoly, the get out of jail free card I don't understand... WH is a pentester among other things Like a hacker? Yes, sort of yea thats the rite word but ur using it wrong How could you possibly tell that I've used it wrong? I can tell It's not criminal. Like, organizations hire pentesters to break into their systems and write reports, so they can improve their security protocols What kind of organizations? Companies governments, ngos... oh, wasn't there one that was a charity? yeh. also churches Churches need cybersecurity? everyone needs cybersecurity What's a jail pass? Usually, whoever hires the pentester will write a letter they can give to security, or to the cops, if the pentester gets caught its just a job. theres no real risk yeah like, nobody wants to go to jail for their job And yet... here we are... i mean that's a good point... nobodys going to jail look this isnt magic. its an engineering problem I really don't see how that could be true. How is this an engineering problem? its social engineering we need to break down the problem into its smallest parts then we can do research about each part make a plan and a schedule like isnt there a deadline?? yeah we have 2 weeks It isn't enough time for the kind of thing you're talking about. u dont know that I say it is enough time We... kind of already started What does THAT mean? I already scanned the server we said that already Umm Is that all? WH already started narrowing down the geographical search space What? I have these raspberrypis setup in different spots all over the city so I just wrote a script and sent it out to them to start recording latencies that is so fucking cool how many do u have?? nearly 100 omg... mesh network?? Okay, when you said you started already, I assumed it meant doing something actively. You're just doing research so far? Yeah yeah. There's a lot we can do without raising any flags as far as coming up with a plan none of it should raise any flags lol Right, yeah. Ideally, the plan goes off silently Alright. Well, that's not so bad. right? yeah yeah i think so too What kind of a plan would it be? ;)

@WH
@fungor
MS
JD
PM