tr4cefl0w

As for Nuitka, I was not able to make it work but I will try again. The alternative I also tried in the past was using Cython to generate C code then compile it but because it requires packaging Python std libs Dlls it was too much trouble and I ran into crashes when running.

I also had bad experiences when using packers because they have a tendency to trigger AV detection just for being packers, like ASProtect. Python malware is definitely a topic that deserves more in depth dive.

Good work!

Shameless plug; I wrote a few popular articles on 0x00sec about Python malware on Windows just to show how simple and easy it is to build either using ctypes to call WinAPI functions or using pywin32 wrapper which makes the whole thing a lot faster.

See part 1 here https://0x00sec.org/t/malware-writing-python-malware-part-1/...

Definitely not the way to go if you have limited memory and need to write tiny shell code but it’s good enough for a stage 2 payload.

There are better ways to hide. From experience (I work in security), the ones I would use are (individually or combined):

- Have the VPN set up in my router using OpenWRT (the R7000 is great for that) and drop all connections when VPN disconnects (with a script).

- Rent a VPS on a botnet friendly host that accepts Bitcoins (i.e Hostsailor).

- Then do all my shady stuff from the VPS or even better, configure Tor and proxychains on the VPS then use proxychains when doing anything on a remote host.

I think the guy was just lazy and preferred convenience.

I've been in the field for a couple of years. I work for a global corporation with 10k+ employees and most of our team members in the security department are judge on their skills and various other factors and we filter potential candidates with a small CTF. Certs have very little importance for us, but we're the exception. Most big compagnies require certifications and oddly they are the ones getting hacked.

In the field, we all know that EC-Council certs are bullshit. They are, at best, the laughing stock in infosec because their "Ethical Hacker" certification is a multiple choice answer and requires little technical knowledge and no hands-on.

However, there are a few certs out there that need a lot of work and technical knowledge to be learn for passing it, such as OSCP. It might be easy to get for someone with 10+ years but for relatively new comers, it's a really good challenge to tackle. I started with their lab, thinking it was going to be a piece of cake for me but it's more difficult than I expected, which is a good thing.

But I see your point and I mostly agree.

Care to explain why you think intrusion detection is bullshit?

Also, trading volume for futures in general is pretty low. You're rarely going to see volume above 100k a Sunday night. Coffee futures have around 23k volume right now.

Troubling when you think that this is happening in the US. I saw that kind of situation in central america.

I don't even know how to react to his friendly remarks towards China. Is it to keep the government happy and keep profiting from the Chinese market? That would make sense. But sometimes I feel like he's become too friendly.

This sums it up pretty well.

The devs are working hard and the beta is likely to come in 2018. People think naively than increasing the block size will change something. It will in the short or mid term, but not in the long term and you can't keep increasing the blocksize. There needs to be a permanent, well implemented solution and that's what's coming and why it's taking so long.

Blocksize increase alone is not sustainable.

Moreover, transactions between Segwit-compatible wallets is pretty fast and cheap.

I’m kind of tired to hear people complain about the fees while all they have to do is use a different wallet that supports Segwit.

Edit: Ah, the downvotes. I was expecting them.