Hacker Public Radio

This show has been flagged as Clean by the host.

Recording Kit



General





Lanyard - HPR - Your Name



HPR Business Cards - Your email address



HPR Stickers



Pen



A6 Notebook



Android Mobile phone
OpenCamera






Zoom H2







Zoom H2 Handy Recorder




Set format to best and date format to ISO8601



Replacement Batteries



Micro USB Cable



2.5 mm headphones



3.5 mm Male to Male cable



3.5 mm earbuds





Backup 1







Sansa Clip






Rockbox




Remove before flight key fob



Set format to best and date format to ISO8601





Backup 2





Android Mobile phone
AudioRecorder




Set format to best and date format to ISO8601







Provide feedback on this episode.

This show has been flagged as Explicit by the host.









SUMMARY



The presenter outlines a practical cybersecurity workflow, covering ergonomic setups, browser isolation, virtual machine troubleshooting, AI-assisted scripting, and network tunneling methods utilized during active security assessments.



ONE-SENTENCE TAKEAWAY



Isolate browser environments, utilize automation scripts, and verify network paths before starting security tests to avoid workflow interruptions.



TOOLS







Talon Voice
– Open-source voice recognition software enabling hands-free computer control and command execution.





Obsidian
– Local-first markdown note-taking application supporting secure, AI-friendly knowledge management.





AutoHotkey
– Windows scripting utility for creating custom macros and remapping keyboard inputs.





Chrome Debug Commands
– Browser developer tools allowing direct inspection of extensions, cookies, and storage.





Whisper Diarization
– Audio processing script that separates speaker tracks and converts recordings to searchable text.





Hyper-V / WSL
– Microsoft virtualization platforms enabling isolated guest environments and Linux subsystem integration.





OpenConnect / OpenVPN
– Command-line tunneling clients used for establishing secure, split-tunnel network connections.





Jamboree Framework
– Portable PowerShell environment that dynamically provisions development tools without altering system paths.





MOBA Portable
– Feature-rich terminal emulator supporting static/dynamic tunnels, auto-reconnect, and embedded X-server capabilities.





Nmap
– Network discovery and security auditing tool utilized for comprehensive port scanning and service detection.





00:00:00 Ergonomic Workspace Configuration



Configures physical workstation elements to reduce strain during extended testing sessions. Proper alignment prevents repetitive stress injuries while maintaining focus on technical tasks.







Monitor Positioning
– Displays should align with eye level to maintain neutral neck posture; the speaker notes their curved 49-inch screen sits slightly high due to chair adjustments.





Split Keyboard Layout
– Utilizes a Freestyle 2 mechanical keyboard, allowing natural shoulder-width arm placement and reducing wrist deviation during prolonged typing.





Postural Adaptation
– Acknowledges that ergonomic equipment requires matching body alignment; elbow rests should sit between hip and shoulder height for optimal leverage.





01:45:00 Voice Control & Note Synchronization



Utilizes auditory input methods and localized knowledge bases to streamline documentation workflows. Separating secure work notes from casual observations prevents data contamination.







Talon Voice Integration
– Runs continuously to handle navigation, text entry, and application switching without manual keyboard interaction.





Obsidian Migration
– Transitions from cloud-based keep apps to local markdown files, enabling direct querying by local AI models while maintaining offline accessibility.





Note Categorization
– Divides information into secure work records and insecure personal logs, ensuring clean data pipelines for future retrieval and analysis.





03:50:00 Browser Extension Management & Security Isolation



Separates web browsing activities from primary work processes to minimize attack surfaces. Running dedicated user profiles prevents plugin conflicts and credential leakage.







Jailed User Accounts
– Creates restricted system profiles that only launch the browser, isolating extensions from core workstation operations.





Shared Folder Synchronization
– Establishes a single directory path bridging work and browsing users, allowing seamless file transfers without cross-contamination.





Extension Audit Process
– Leverages Chrome debug commands to enumerate installed plugins, verifying functionality before deployment on target networks.





06:15:00 Training Optimization & Audio Processing



Accelerates mandatory compliance viewing through speed manipulation and automated transcription. Converting video content into searchable text enables rapid information retrieval.







Global Speed Control
– Increases playback rates up to sixteen times normal speed, drastically reducing time spent on repetitive corporate training modules.





Whisper Diarization Pipeline
– Downloads video tracks, separates speaker voices, and generates timestamped transcripts for quick reference during assessments.





Download Management
– Employs multi-threaded swarm downloaders and classic turbo managers to handle bulk media retrieval without interrupting active workflows.





10:40:00 Virtualization & Network Tunneling Protocols



Establishes isolated testing environments using Windows virtual machines while managing connectivity constraints. Proper session handling prevents unexpected disconnections during remote engagements.







Enhanced Session Mode
– A Hyper-V feature providing higher resolution and shared clipboard functionality; disabling it is required before initiating certain VPN clients to avoid routing conflicts.





Split Tunneling Mechanics
– Routes specific traffic through the virtual network while keeping local resources accessible, preventing complete internet loss during connection tests.





Certificate Verification
– Identifies self-signed SSL mismatches early in the process, documenting them as preliminary findings before proceeding with authentication steps.





15:30:00 Macro Automation & Input Remapping



Remaps frequently used keyboard shortcuts to reduce physical strain and accelerate command execution. Running scripts with elevated privileges ensures reliable input registration across virtual environments.







Caps Lock Repurposing
– Converts the caps lock key into a primary modifier, assigning copy/paste functions to adjacent letters for faster workflow navigation.





Physical Typing Macros
– Simulates keystrokes with deliberate delays, allowing seamless data entry into restricted VM consoles that block standard clipboard operations.





Administrator Execution Requirement
– Highlights that macro scripts must run with elevated privileges to successfully inject inputs across different desktop sessions.





20:15:00 Portable Development Environments & Python Management



Deploys lightweight scripting frameworks that dynamically provision necessary tools without modifying host configurations. Verifying package contents prevents dependency conflicts during testing.







Jamboree Framework
– A PowerShell-driven utility that downloads and configures development stacks on demand, resetting environment variables to maintain system cleanliness.





NuGet Package Filtering
– Queries Microsoft's repository API to retrieve specific Python versions, ensuring compatibility with legacy tunneling scripts.





Binary Verification Process
– Checks extracted archives for bundled
pip.exe
or
pip3.exe
executables, eliminating manual module installation steps during rapid deployments.





28:40:00 AI-Assisted Scripting & Debugging Workflows



Generates and refines PowerShell functions through iterative conversational prompts. Validating AI output against actual system behavior prevents silent configuration errors.







Vibe Coding Approach
– Relies on continuous feedback loops with language models to draft, minimize, and debug automation scripts in real-time.





Parameter Standardization
– Enforces strict formatting rules for PowerShell commands, avoiding hardcoded paths and ensuring cross-environment compatibility.





Temporary Storage Management
– Monitors extraction directories to prevent disk saturation, redirecting large package downloads away from constrained system partitions.





35:10:00 Terminal Emulation & Advanced Tunneling Strategies



Facilitates complex network routing through dedicated terminal applications. Configuring dynamic and static tunnels enables reliable reverse connections for remote assessments.







MOBA Portable Configuration
– Utilizes an INI-based tunnel manager that automatically maintains connections across changing IP addresses or Wi-Fi networks.





Reverse Shell Routing
– Establishes outbound channels back to the tester, then proxies all subsequent traffic through those connections for consistent monitoring.





Proxy Chain Integration
– Forces non-proxy-aware applications to route through Burp Suite or custom interceptors using Windows utility wrappers like Priboxy.





42:30:00 Final Connectivity Testing & Engagement Wrap-Up



Executes comprehensive port scans to verify target accessibility before documenting findings. Acknowledging workflow detours ensures realistic time management during active engagements.







Nmap Verification
– Runs full-port scans with verbose output to confirm host responsiveness and identify open services prior to credential testing.





Connection Refusal Documentation
– Captures screenshot evidence of failed routing attempts, providing clear proof of network restrictions for client reporting.





Workflow Reflection
– Recognizes that exploratory debugging adds value but requires time boundaries; balancing thoroughness with engagement scope maintains professional efficiency.







Provide feedback on this episode.

This show has been flagged as Clean by the host.



As a child, I was so fond of reading what I saw as beautiful. Even when above [lacking] the understanding.



The perception of beauty came mainly from the cover and the fonts used (
same today
) or from the place the book occupied on my father’s shelf.



One of them was Tuareg. More than once I took this classic from the home library, only to glance at the first page with no interest. It was only decades later — some years ago — that I saw the title again, and read with pleasure and no difficulties. It’s not a hard read, even to a 12 year-old, probably only the argument, the plot, didn’t catch me by then.








Anyway, I was attracted to the book, as if simply wanting to read it made me part of the classic, the intellectual.








I have less of this today. [I mean,] Not the inability to read a lot of books, but the urge to be a consumer of certain cultural product. Maybe due to not greeding to build a personal image, content without exposition.



Still, sometimes, wanting to consume a piece of media and being unable to.. I wanted a story of robots, the book I though was not available [(All Systems Red)], so I bought one of scientific fiction.



Somehow it attracted me when I flipped the few pages of Planet of Exile at the bookstore, an item that could lead me to a travel outside of this place, an escape. At home, I immediately saw I couldn’t grasp it. There were too many characters (too many = more than two in the first page, specially when another atmosphere is the location, a new physics to grasp). Too much information, can’t retain the minimum necessary in the way to the second, third… fifth page, by when more is being presented. This was always a disability of mine, focused on a little tiny thing, intensely, for some time, all lost in some weeks or months. I know it happens to
me
, because people are able to remember the names of the cars of the movie Cars. Not an incredible feat
for them
(maybe they haven’t paid attention, nor actively tried to remember, only did), and something
strange
to me.








It was decided to register this because when I saw myself unable to read the [Ursula] Le Guin’s book, I got nervous. I’ve already been forgetting more ultimately, take confused steps, and now I can’t center on a book?! What’s happening?



But then I took a breath: much can be going way too wrong from current circumstances outside and inside, but your limited comprehension of the world (and its art) is very part of you. This trace, or frailty, of your character, is not your brain rotting, it’s part of what you have been since always.



Thank you.



Provide feedback on this episode.

This show has been flagged as Clean by the host.

In his early days as a writer, Heinlein wrote his stories in the context of a shared universe that he called the Future History. These were mostly short stories at first, with the occasional novella. But they include some great stories.

The Future History, Part 2


There were a few key themes running through Heinlein’s body of work. One we have already remarked upon, individual freedom, which had to be protected from any source of power, including both government and private corporations. This was essentially a libertarian perspective, but unlike many of today’s libertarians he was equally averse to the corporate type of power as a threat. But he had a complex view of the world which has resisted some attempts to pigeonhole him. He started out as a socialist, and while he didn’t remain one, he never became a knee-jerk reactionary either. In fact, he clearly despised them just as much. One way of looking at his body of work is that he explored the ramifications of different social policies through his stories, but in most cases the needs of a good story came first in the early years. In his later works he often surrendered to the temptation to pontificate, which reduced the enjoyment of them somewhat for anyone who was not already in agreement with his opinions

The second major theme you see throughout all of his works is the idea of the competent individual. He admired anyone who could do a job well, and clearly did not care whether they were man or woman, nor black or white. Alexei Panshin writes, in Heinlein in Dimension:

“There is one unique and vivid human Heinlein character, but he is a composite of Joe-Jim Gregory, Harriman, Waldo, Lazarus Long, Mr. Kiku, and many others, rather than any one individual. I call the composite the Heinlein Individual. . . . It is a single personality that appears in three different stages and is repeated in every Heinlein book in one form or another.

“The earliest stage is that of the competent but naïve youngster. . . . The second stage is the competent man in full glory, the man who knows how things work. . . . The last stage is the wise old man who not only knows how things work, but why they work, too.”

Harriman we have already encountered in The Man Who Sold The Moon, and the others appear later. The Heinlein Individual, as he is often referred to, appears in many of Heinlein’s stories.

A third major theme has to do with morality and religion. Heinlein grew up in what he considered the heart of the Bible Belt, in Missouri, and saw first-hand how the evangelical Christians operated, and despised what he saw. As someone who believed in individual freedom, he could never surrender to someone else’s idea of how he should live his life. He saw them as a danger to his ideal libertarian society, and this shows up very early in his work. He personified the good, upright, church-going folk as “Mrs. Grundy”, and while you might want to draw the drapes to keep her from knowing what you were doing, you should never let her dictate how you would live your life. Revolt in 2100 begins the exploration of this in detail.

There is a chart of the future history at Baen Books, and in it we see that the 1960s were what Heinlein called The Crazy Years. (Remember, he conceived this in the 1940s and 1950s.) But in 2012 the major thing occurred when Nehemiah Scudder, a backwoods preacher, managed to get elected as President. This would be the last election held under the U.S. Constitution as he established a religious dictatorship that lasted a couple of generations. IS this plausible? Heinlein wrote about this:

“As for … the idea that we could lose our freedom by succumbing to a wave of religious hysteria, I am sorry to say that I consider it possible. I hope that it is not probable. But there is a latent deep strain of religious fanaticism in this, our culture; it is rooted in our history and it has broken out many times in the past.

“It is with us now; there has been a sharp rise in strongly evangelical sects in this country in recent years, some of which hold beliefs theocratic in the extreme, anti-intellectual, anti-scientific, and anti-libertarian.“

His background in the Bible Belt is what informs a lot of his thinking. He goes on to describe how this might happen:

“Throw in a Depression for good measure, promise a material heaven here on earth, add a dash of anti-Semitism, anti-Catholicism, anti-Negroism, and a good large dose of anti-“furriners” in general and anti-intellectuals here at home, and the result might be something quite frightening — particularly when one recalls that our voting system is such that a minority distributed as pluralities in enough states can constitute a working majority in Washington.”

As the science fiction author David Brin points out, Heinlein accurately predicted much of what we are going through in the United States right now. There is an emerging dictatorship in the United States, promoted by right-wing religious groups. The “material heaven here on earth” is represented by the Prosperity Gospel, prominent in the Trump movement, and so on. Where the Prophet used a restored Ku Klux Klan as his muscle, we have The Proud Boys, and so on. It really does track very closely. Read David Brin’s article for more on this.

But nothing lasts forever. Empires rise and fall, governments change, and in this case a resistance movement arises. The revolt is depicted in the novella If This Goes On— (1940), and it is set in the year 2100, giving the title to the book. The main character is John Lyle, who is a young army officer assigned to the group protecting The Prophet in his capital of New Jerusalem. In the beginning he is thoroughly indoctrinated, but then begins to question his beliefs when he falls for one of The Prophet’s virgins, Sister Judith. He has an older companion in the military who is not only unshocked when John confides in him about his doubts, but offers to help him. It turns out this companion, Zeb Jones, is a member of the underground group called The Cabal that is working to overthrow the theocracy. In the end they are successful, and in the course of this John Lyle does a lot of growing up. In this we see another common characteristic of Heinlein stories: a young, naive boy meets up with an older and wiser man who helps him to grow.

In 2016 If This Goes On— won the Retro-Hugo Award for best novella of 1940. And in a personal note, I have T-shirt that says “Scudder for President 2012”. This baffles most people, but I enjoy the in-joke.

What is interesting in this book is that Heinlein doesn’t stop with a successful revolution. He then goes on in a second novella to describe the government that arose following the revolution, and this story is called Coventry (1940). The new government that arises after the revolution is called The Covenant, and it is an attempt to make sure that what happened with Scudder in 2012 could never happen again. It is a strongly libertarian government based on an agreement to be non-violent. In this society, scientists can cured criminal or violent tendencies, but any citizen convicted of such must agree to the treatment. The alternative to treatment is that they can be exiled to a place called Coventry. Coventry is outside of the Covenant society, and the Covenant society has nothing to do with them.

Our protagonist, David McKinnon, is convicted of assault, and chooses to go to Coventry instead of getting treatment. He imagines it is a peaceful anarchy, but is disabused of this notion when he is robbed of all of this possessions upon entry and thrown in jail. A fellow inmate, Fader Magee, helps him escape, and we learn he is an agent of the Covenant government. They learn that two of the factions in Coventry have joined forces, and found a way to break through the barrier that surrounds Coventry. They plan to attack and overthrow the Covenant government. David and Fader separately work to escape and get back to warn the Covenant government, which they do successfully. And by doing this, David has demonstrated that he is no longer a danger to the Covenant society and no longer subject to treatment.

This story won a Prometheus Hall of Fame Award, which is awarded by the Libertarian Futurist Society. And the Covenant society certainly has libertarian features. But this is not the Randian version of libertarianism, as exemplified by the fact that David is restored to the society because he demonstrated his concern for others. Heinlein always promoted individual freedom, but also the idea that people have a responsibility towards others.

Finally, Revolt in 2100 contains the short story Misfit, w2hich we have looked at previously.

The Past Through Tomorrow (1967) is a one volume collection of most of the Future history stories. I say most because just which stories belonged in this group could change from time to time. It also has the last version of the Chart of the Future History, and a few stories we have not yet mentioned (Methusaleh’s Children, and The Menace From Earth). And many of his other works contain back references to these events that imply that they might be set in the same alternate universe. Heinlein gets the last word on this:

“I have never been sure whether or not publishing that chart was a good idea or a bad mistake. Possibly it helped to sell some stories later—but certainly it caused me and still causes me to receive a lot nuisance mail from nitpickers. I have never felt bound by that chart; it was to serve me, not the other way around. If I found myself with a good story notion which fitted fairly well into the chart but not perfectly, I shed no tears—I went ahead and let the inconsistencies stand.

I want each story to be internally consistent . . . but I won’t let myself be painted into a corner through trying to fit that chart perfectly. I may start another “Future History” story tomorrow . . . and find that to make it a good yarn I must violate some item on that chart. I’ll give the nitpickers something to pick, for I will not hurt a good yarn for the sake of “logic”—logic is not involved, as that chart is fiction, not Holy Writ.”

Links:

https://www.amazon.com/Heinlein-Dimension-Critical-Alexei-Panshin/dp/0911682015

https://web.archive.org/web/20151105170345/http://www.baenebooks.com/chapters/1439133417/1439133417___1.htm

https://david-brin.medium.com/heinleins-future-history-coming-true-before-our-eyes-10356a95556a

https://en.wikipedia.org/wiki/%22If_This_Goes_On%E2%80%94%22

https://en.wikipedia.org/wiki/Coventry_(short_story)

https://en.wikipedia.org/wiki/Prometheus_Award#Hall_of_Fame_Award_inductees

https://en.wikipedia.org/wiki/The_Past_Through_Tomorrow

https://www.palain.com/science-fiction/the-golden-age/robert-a-heinlein/the-future-history-part-2/

Provide feedback on this episode.

This show has been flagged as Clean by the host.

Kevie, Paul and Dave are back once again with the HPR Beer Garden, this time focusing on the relatively new style of beer called Double IPA. Kevie samples
Man Overboard
by
Cromarty Brewing
, Paul tastes
Rumble
by
Beavertown
and Dave opts for
Ultra Phase by North Brewing














Connect with the guys on Untappd:







Dave






Paul






Kevie










The intro sounds for the show are used from:







https://freesound.org/people/mixtus/sounds/329806/






https://freesound.org/people/j1987/sounds/123003/






https://freesound.org/people/greatsoundstube/sounds/628437/










The next 3 beer styles to be reviewed:





Belgian Blonde



DDH IPA



Amber Ale



Provide feedback on this episode.