Proper vulnerability scan on LAN devices (nmap)

I’m playing around with nmap sometimes to understand and remember different parameters. I would like to scan devices on my LAN for vulnerabilities. Something like:

$ nmap -sU --script vuln 192.168.52.0/24 -v

I got pretty much accurate information about devices and vulnerabilities on my LAN in stdout, but its not pretty readable so my question is: what is a good manner to perform a representative vulnerability scan on the local network (192.168.52.0/24)? I was thinking about -oX, and I am curious to different new manners.

Regards, Lajos.

Proper algorithm for resolving ambiguity in grammars via enforcing associativity and precedence rules

I was told there is a algorithm that always resolves ambiguity for grammars that have issues with precedence and associativity. I know ambiguity in general is undecidable, so I only want to resolve those two sources of ambiguity (precedence and associativity).

As far as I know from reading this course, the heuristic I have developed are the following:

  • higher precedence = appear lower in the tree always (so they are never produced by any rule bellow a symbol that is higher up). A different way to understand this is; higher precedence operators are evaluated first, so they appear lower in the parse/computation tree.

  • right-associativity = when two operators of the same type fight for an argument if its right associative then the op on the right wins. Thus, this means that immediate recursion of the same production rule generating that op must always appear on the right (and that symbol/op can never be produced on the other side/left).

however, these rules must be incomplete or slightly wrong because when I was trying to resolve a “tricky” grammar I got wrong answers or couldn’t make sense of the right solution.

For example, imagine we have this:

<exp> ::= 0 | 1 | b<exp> | <exp>a | <exp>m<exp> 

and we want to enforce:

Right associativity for m and the following precedence inequality is the one we want: $ b >_p m >_p a$ which means b has higher precedence than m has higher precedence than a.

the solution given was:

<exp> ::= <no a m> | <not m>m<no a> | <exp>a <no a> ::= <no a m> | <no a m>m<no a> <not m> ::= <no a m> | <exp>a <no a m> ::= b<no a m> | 0 | 1 

However, according to the “rules” I came up this must be wrong. But since its the instructor solutions to its safer to assume I am wrong and need to refine my understanding.

The reason I think its wrong is that the first rule there is a <not m> to the left of m. That means we can generate an a. But a has lower precedence than m, so according to my rule it must never appear bellow the parse tree of m, but it does. So it seems I do not understand precedence properly or the algorithm to enforce it.

My understanding is that precedence means that if you have higher precedence then you bind tighter than other operators, so you steal the arguments from others. I was also told that means that you appear lower in the parse tree, which intuitively makes sense. But that’s too vague for me to really unambiguously and formally define a way to resolve precedence in any grammar (assuming I only want to resolve precedence and associativity only and solving that “solves the grammar”).

So is my understanding correct? Can someone help me make my algorithms for resolving these issue more rigorous (and ideally bullet proof)?


Note, I am aware that resolving ambiguity is undecidable in general, but I was told precedence and associativity is not undecidable assuming thats all we want. So thats what Im looking for.


Cross-posted:

  • https://www.quora.com/unanswered/What-is-the-proper-algorithm-for-resolving-ambiguity-in-grammars-via-enforcing-associativity-and-precedence-rules
  • https://www.reddit.com/r/ProgrammingLanguages/comments/e0lz9o/proper_algorithm_for_resolving_ambiguity_in/

Is a split button valid without proper visual grouping

Split button is basically a button with a default action and several other actions which are shown in a drop-down menu.

While there’s no doubt in how it functions, the issue is with how the default-action and more-actions icon should be highlighted in UI.

I have created basic variations of split buttons in below codepen.

https://codepen.io/paulj05hua/full/PooayrP

In the above, both styles 1 & 2 are properly highlighted as a single group. But with style 3 user might mistake the more-actions arrow as separate button.

So the question is whether style 3 is valid or not ?

PS:

  • style 3 is used by Gmail in the mail list panel for selecting emails

    gmail-split-button-usage

    If this is considered valid, kindly state the reason.

  • There’s no mention of this type of component in material design ( material.io )

What is a proper CR for this homebrewed bloodborne-esque npc?

Having ventured into the lands of gothic horror for a soon upcoming adventure, I wanted to create something a little more out there from the normal rules of D&D 5e. So I came up with this idea that the party would meet a Hunter of sorts; one who hunts monsters with brutality and efficiency (and who ends up going insane). So I created this template and I hope to get the answer to the question…

What would be the proper CR for a monster with these abilities?

Because of the specific ability this creature has, I have some doubts about the normal method of CR calculation which is why I am bringing it to you all.


Vastoyan Hunter

Medium humanoid (Human), any alignment

Armor Class: 17 (Breast Plate)
Hit Points: 90 (12d8 + 36)
Speed: 30 ft.

STR – 16 (+3)
DEX – 16 (+3)
CON – 16 (+3)
INT – 11 (+0)
WIS – 15 (+2)
CHA – 14 (+2)

Damage Resistances: poison
Condition Immunities: –
Senses: Passive Perception 17
Languages: Common, Dwarf
Challenge: ???

Traits

Close Quarters Expert Being within 5 feet of a hostile creature doesn’t impose disadvantage on a vastoyan hunters ranged attack rolls.

Quick Silvered Weapons Ranged attacks from a vastoyan hunter and hunter’s blade attacks are considered magical for purposes of ignoring resistance.

Actions

Multiattack The vastoyan hunter makes 3 melee attacks.

Hunter’s Blade Melee Weapon Attack: +7 to hit, reach 5 ft., one target. Hit: 8 (2d4+3) slashing damage.

Shoving Kick Melee Weapon Attack: +7 to hit, reach 5 ft., one target. Hit: If this attack succeeds, the target must succeed on a DC 16 Strength saving throw or be pushed five feet or be knocked prone; the hunter’s choice.

Pistol Ranged Weapon Attack: +7 to hit, range 30/90 ft., one target. Hit: 9 (1d10+3) piercing damage.

Reactions

Parry and Riposte The vastoyan hunter makes a pistol attack against a target that is attacking them. If this attack succeeds, the targets attack ends and the vastoyan hunter may make an immediate melee attack against the attacker with advantage. If this attack succeeds, it is a critical hit.


What is a proper CR for this homebrewed bloodborne-esque npc?

Having ventured into the lands of gothic horror for a soon upcoming adventure, I wanted to create something a little more out there from the normal rules of D&D 5e. So I came up with this idea that the party would meet a Hunter of sorts; one who hunts monsters with brutality and efficiency (and who ends up going insane). So I created this template and I hope to get the answer to the question…

What would be the proper CR for a monster with these abilities?

Because of the specific ability this creature has, I have some doubts about the normal method of CR calculation which is why I am bringing it to you all.


Vastoyan Hunter

Medium humanoid (Human), any alignment

Armor Class: 17 (Breast Plate)
Hit Points: 90 (12d8 + 36)
Speed: 30 ft.

STR – 16 (+3)
DEX – 16 (+3)
CON – 16 (+3)
INT – 11 (+0)
WIS – 15 (+2)
CHA – 14 (+2)

Damage Resistances: poison
Condition Immunities: –
Senses: Passive Perception 17
Languages: Common, Dwarf
Challenge: ???

Traits

Close Quarters Expert Being within 5 feet of a hostile creature doesn’t impose disadvantage on a vastoyan hunters ranged attack rolls.

Quick Silvered Weapons Ranged attacks from a vastoyan hunter and hunter’s blade attacks are considered magical for purposes of ignoring resistance.

Actions

Multiattack The vastoyan hunter makes 3 melee attacks.

Hunter’s Blade Melee Weapon Attack: +7 to hit, reach 5 ft., one target. Hit: 8 (2d4+3) slashing damage.

Shoving Kick Melee Weapon Attack: +7 to hit, reach 5 ft., one target. Hit: If this attack succeeds, the target must succeed on a DC 16 Strength saving throw or be pushed five feet or be knocked prone; the hunter’s choice.

Pistol Ranged Weapon Attack: +7 to hit, range 30/90 ft., one target. Hit: 9 (1d10+3) piercing damage.

Reactions

Parry and Riposte The vastoyan hunter makes a pistol attack against a target that is attacking them. If this attack succeeds, the targets attack ends and the vastoyan hunter may make an immediate melee attack against the attacker with advantage. If this attack succeeds, it is a critical hit.


What is the proper term for magic cast from material components

I am working on a setting for an RPG and I am trying to research proper terminology for different kinds of magic.

I would like to know what the proper name is for magic cast explicitly from objects. These objects are required for the magic to be performed. An example could be the use of a voodoo doll where any harm done to the doll is also done to a particular person. Or perhaps being able to see distant places through the use of a crystal ball or a mirror. The magic simply can not work without a particular implement.

Through my research I have so far identified the following ‘kinds’ of magic:

  • Theurgy – magical abilities given to a character by a mystical entity. (a deity, a demon, faeries, etc) Think clerics or warlocks from D&D
  • Thaumaturgy – your classical wizard / mage casting spells through sigils, formulas and magic words
  • Psionics – supernatural spell-like abilities created through the power of the mind

So what would you suggest I call this elusive fourth kind of magic? I would much prefer something vaguely latin or greek that fits well with the other terms.

Thanks a lot.

Is there a proper uninstaller software in Ubuntu?

I’m looking for an uninstalling software in Ubuntu. Yup, software center (SC) is a good idea but there’s a lot of software from ppas, githuby thingies and other stuff, which are not shown in SC. Also built-in SC etc sometimes can’t see installed (from SC itself!) software at all.

I use Stacer, but it’s uninstall function is very uninformative, and Synaptic can’t work with snaps properly (if at all, opinions may vary). I know, i know, i should use terminal but sometimes it gets too complicated (and often can delete things too fast and too permanently).

Just wondering, why with all the different ways to install things, there’s not a lot of good software for “undoing”.

Proper way of installing wifi drivers (rtl8822bu)

I have troubles installing drivers for my TP-LINK Archer T3U on Ubuntu 18.04.

Having found out the device ID 2357:012d, I used this repo by @Jeremy31.

Namely, I downloaded the content, cd’ed into it, did make and make install.

What to do next?

sudo dkms add ./rtl8822bu 

gives

Error! Could not find module source directory. Directory: /usr/src/.-rtl8822bu does not exist. 

How to properly install the driver?

Is there a proper way to handle large combat engagements with party members involved?

For instance, a party of four player characters raise a force of 30 militia men to go take a bandit camp. When they get there the bandit camp has 40 men, and none of them notable.

For the sake of simplicity, both the 30 men and the 40 bandits are armed with long swords, and wearing leather armor.

Is there a proper way to handle combat between the 30 man militia and the 40 bandits while also incorporating our four player characters? If no “proper” way exists, is there a generally accepted “best” way?

MVC Proper Structure Packaging

I wonder to know, in MVC, I do understand what the generic division between M, V and C is but I am definitely not sure what are good ways to manage the files under these. Assume Golang. For instance, a project structure would be:

pkg/views/ pkg/controllers/                 group.go                   * has a BBQ                   * StoreTeamBBQAtTeamMember()                   * SetColorBBQ()                   * CreateBBQ()                   * DeleteBBQ()                 BBQ.go                   * SetColor()                   * Create()                   * Delete() pkg/models/  group.go                 group.go                   * has a BBQ                   * StoreTeamBBQAtTeamMember()                   * SetColorBBQ()                   * CreateBBQ()                   * DeleteBBQ()                 BBQ.go                   * SetColor()                   * Create()                   * Delete() 

My idea is that group.go has a BBQ and can manage it in a “group” way, whereas BBQ.go is the BBQ itself and that of course makes it have some intrinsic for a BBQ methods – create, delete. Apparently, my example leads to overlaps between how we model a BBQ and a groupBBQ.

My questions are:

  1. Shall we strive to keep some rigorous vertical semantic encapsulation of what we model? For instance, there won’t be groupBBQ and group controllers and models but group and BBQ

  2. Is it a good practice to speak call one model’s methods from another model?

  3. Is it good or bad one controller to call another controller’s methods?

  4. Is it good or bad one controller to call another model’s methods?

  5. Is it good or bad practice the controller of e.g. groupBBQ to call a method defined under BBQ?

  6. Are these modelled well, or all methods of a BBQ have to stay under BBQ even if they’re group ones?

The example I came up with on the fly but pretty much is a real life situation I’m dealing with. Lately I have been doing mainly microservices, no MVC and such overlaps I see here tenderly disturb me. 🙂