DEV Community: Joel Murphy

Bypassing OTP systems

Joel Murphy — Mon, 24 Oct 2022 07:57:00 +0000

Hi guys, I came across the following blog post on medium describing a method of bypassing OTP:

https://systemweakness.com/bypassing-otp-verification-797851057e79

I want to prevent this in my applications but the the article doesn't actually say which tool is used to perform the modified header attack.

Does anyone know how this is achieved? I know about HTTP catcher tools but not aware of such a tool that can successfully modify the request? Can anyone shine some light on this as I see this as a serious security flaw that needs attention.

Thank you

I can’t get the time off work to attend Web Summit. Anybody want two tickets?

Joel Murphy — Thu, 10 Oct 2019 18:01:50 +0000

Hey all,

I’ve got two tickets for Web Summit conference in Lisbon during November of this year. I was really excited for this event but unfortunately my current employer won’t give me the time off to attend. I also had to pay for all travel and accommodation myself which sucks :(

If anyone would like these tickets, I’m willing to give them away for Free but the deadline for assigning names to the tickets is tonight! You’ll need to arrange travel and accommodation yourself but the tickets will be free of course.

If you’d like the tickets, please comment below with answers to the following:

Why you want the tickets
How the event will benefit you
How many tickets you’d like? (1 or 2)

I’ll pick someone at random and assign names to the tickets before 11:59pm GMT.

Cheers

My domain name and website content has been hijacked! What should I do?

Joel Murphy — Fri, 05 Oct 2018 14:26:54 +0000

I've been away from working in the I.T industry for quite a while now due to a personal illness. During this time my personal domain name expired and I didn't consider renewing it. I'm now slowly recovering from my illness and getting back into working with computers and was even considering getting my website back online but today I noticed my domain name and website content has been STOLEN!

My original website was running on Wordpress with a sleek custom theme but it seems the content was scraped and cloned. This isn't a direct clone as it seems whoever did this has dumbed down the content and now has backlinks to their website within my original blog posts. E.g 'C++ Mobile Development - Snapchat' links from:

http://joel-murphy.com/mobile-app-development.html to -> https://intetics.com/portfolio/technologies/c

I did a whois lookup on my old domain and it seems whoever did this bought the domain and hosts the content on Amazon s3 servers.

I have a strong feeling this was https://intetics.com/ just for the SEO benefits but I'm unsure why they'd target me? I owned my domain name http://joel-murphy.com/ for many years and I had links to it from my CV/Resume, Business cards, LinkedIn, etc. My website did have some traffic but not enough to justify being targeted. I guess there's not much I can do other than use a different domain name in the future but I'm more concerned about the potential of my online identity being mocked or played with. Anyone been in a similar situation to this before?

Extending LVM partition in Linux?

Joel Murphy — Thu, 04 Oct 2018 23:59:12 +0000

I'm trying to extend the disk space on the root partition of my ubuntu VM from 1.5TB to 3.4TB. I thought this would be an easy task but I'm having a hard time figuring out how to do this on an OS level. The console outputs below explain my current setup (nothing fancy, just one partition with a large amount of storage):

root@ubuntu-samba:/home/joel# fdisk -l
Disk /dev/sda: 3.4 TiB, 3758096384000 bytes, 7340032000 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0xbad8753d

Device     Boot   Start        End    Sectors  Size Id Type
/dev/sda1  *       2048     999423     997376  487M 83 Linux
/dev/sda2       1001470 3147825151 3146823682  1.5T  5 Extended
/dev/sda5       1001472 3147825151 3146823680  1.5T 8e Linux LVM

Partition 2 does not start on physical sector boundary.


Disk /dev/mapper/ubuntu--samba--vg-root: 1.5 TiB, 1606879805440 bytes, 3138437120 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes


Disk /dev/mapper/ubuntu--samba--vg-swap_1: 4 GiB, 4290772992 bytes, 8380416 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes

root@ubuntu-samba:/home/joel# vgdisplay
  --- Volume group ---
  VG Name               ubuntu-samba-vg
  System ID             
  Format                lvm2
  Metadata Areas        1
  Metadata Sequence No  10
  VG Access             read/write
  VG Status             resizable
  MAX LV                0
  Cur LV                2
  Open LV               2
  Max PV                0
  Cur PV                1
  Act PV                1
  VG Size               1.47 TiB
  PE Size               4.00 MiB
  Total PE              384133
  Alloc PE / Size       384133 / 1.47 TiB
  Free  PE / Size       0 / 0   
  VG UUID               RZUZwh-xTB4-Dh90-vrYA-Ej1e-kUiM-az4y2k

root@ubuntu-samba:/home/joel# lvs
  LV     VG              Attr       LSize Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert
  root   ubuntu-samba-vg -wi-ao---- 1.46t                                                    
  swap_1 ubuntu-samba-vg -wi-ao---- 4.00g

root@ubuntu-samba:/home/joel# vgs
  VG              #PV #LV #SN Attr   VSize VFree
  ubuntu-samba-vg   1   2   0 wz--n- 1.47t    0

root@ubuntu-samba:/home/joel# pvs
  PV         VG              Fmt  Attr PSize PFree
  /dev/sda5  ubuntu-samba-vg lvm2 a--  1.47t    0

root@ubuntu-samba:/home/joel# df -h
Filesystem                          Size  Used Avail Use% Mounted on
udev                                2.0G     0  2.0G   0% /dev
tmpfs                               395M   11M  385M   3% /run
/dev/mapper/ubuntu--samba--vg-root  1.5T  1.4T   55G  97% /
tmpfs                               2.0G     0  2.0G   0% /dev/shm
tmpfs                               5.0M     0  5.0M   0% /run/lock
tmpfs                               2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/sda1                           472M  310M  138M  70% /boot
tmpfs                               395M     0  395M   0% /run/user/1000

Question:
How do I extend the physical volume '/dev/sda5' to use 100% of '/dev/sda's storage (3.4TB)?

I've done a lot of playing around but getting nowhere.
A lot of online tutorials claim it's as simple as extending the logical volume, but that's not working for me as the additional storage isn't detected.

lvextend -L +100%FREE /dev/mapper/ubuntu--samba--vg-root

 New size (383110 extents) matches existing size (383110 extents)

Any pointers would be greatly appreciated as I've wasted days on this and am desperate for additional storage :(