viking
@viking@infosec.pub
- Comment on Youtube can detect VPNs now... the fuck? 2 days ago:
Huh? I don’t use a VPN unless I want to watch geoblocked content, and adblocking works just fine without.
- Comment on Youtube can detect VPNs now... the fuck? 2 days ago:
Free access to “radical” ideas doesn’t bode well with conservative governments.
- Comment on Why doesn't anybody get notified about warrants for their arrest? 2 weeks ago:
if anyone got that notification, there could be chances that they’d run
That right there. People who forgot to update their address and got unpaid traffic fines and stuff will settle them when they are eventually found, but the flight risk for serious criminals weighs much more.
- Comment on Former BioWare lead writer reads the runes on EA-Saudi deal and speculates that 'guns and football' are in, 'gay stuff' is out, and the venerable RPG studio may be for the chop 4 weeks ago:
You think? That generation will have kids who buy the same crap and won’t listen to their parents, just like the kids now don’t listen.
- Comment on do you use non violent communication at the workplace? 5 weeks ago:
It’s a nice concept for interpersonal relationships regardless of the setting, but it’s got limited applicability in a results driven setting.
- Comment on Why is the human body so incredibly bad at responding to colds? 5 weeks ago:
You’re only seeing the colds that made it through the defenses, without having any means of measuring the ones your immune system successfully blocked or kicked out before they could take hold.
So your statistics are flawed.
- Comment on Under-16s to be banned from buying high-caffeine energy drinks including Monster 1 month ago:
…explain please?
- Comment on Spain is blocking unrelated internet addresses because of soccer 2 months ago:
Cloudflare works perfectly fine with VPN.
But browser plugins to fuck with the fingerprint don’t.
- Comment on Inside the Underground Trade of ‘Flipper Zero’ Tech to Break into Cars 2 months ago:
Yeah they can fuck right off with that.
- Comment on Inside the Underground Trade of ‘Flipper Zero’ Tech to Break into Cars 2 months ago:
Thanks!
- Comment on Inside the Underground Trade of ‘Flipper Zero’ Tech to Break into Cars 2 months ago:
Paywalled, anyone got an archived link?
- Comment on [deleted] 2 months ago:
Now we’re talking! 😁
I also quite like the Andechser Monk brew.
- Comment on [deleted] 2 months ago:
I’ll take Erdinger Dunkel over Augustiner every day, but else I fully agree.
- Comment on Flipper Zero 'DarkWeb' Firmware Bypasses Rolling Code Security on Major Vehicle Brands 2 months ago:
I’m not going to deal with insurance if I can prevent a theft in the first place.
- Comment on Real estate agents say new seller disclosure laws are 'bottlenecking' Queensland's property market 2 months ago:
In other words, the law works as intended.
- Comment on Flipper Zero 'DarkWeb' Firmware Bypasses Rolling Code Security on Major Vehicle Brands 2 months ago:
And people wonder why I use my key toget into the car.
- Comment on No Passports, No Study Abroad: China Limits Public Employees’ Travel 2 months ago:
Nothing new. My wife was a teacher in China, and when they came for her passport just after covid, we left the country instead.
- Comment on I just went onto reddit to a intrest subreddit which happens to be NSFW and i got this, fuck reddit im glad i quit it. 2 months ago:
It’s a UK law, you either comply or get banned. Obviously everybody now has a VPN subscription.
- Comment on 3 months ago:
I quite like it.
- Comment on Pop it in your calendars 3 months ago:
Never heard of it, probably never will once I forget about this post.
- Comment on Please settle a debate. A kid in the womb is better off listening to stuff like cat in the hat so it can be read to it at bedtime? Or history of the world during the womb and read it later? 3 months ago:
Not sure if this applies before birth.
Please demonstrate the prenatal eye contact, I dare you.
- Comment on Please settle a debate. A kid in the womb is better off listening to stuff like cat in the hat so it can be read to it at bedtime? Or history of the world during the womb and read it later? 3 months ago:
Heavy metal, obviously.
- Comment on [deleted] 3 months ago:
Have bow and arrows ready, and they just might.
- Comment on [deleted] 3 months ago:
They have been contacted and responded with aggression, so they are obviously aware that they are not alone, but want to be left alone. Free will is free will.
- Comment on The driver for my mouse occupies over 1 gb 3 months ago:
You need it to remap some of the buttons on the side. I have the same garbage just for this purpose.
- Comment on [deleted] 3 months ago:
Doesn’t matter, you need the report as proof for the chargeback.
- Comment on [deleted] 3 months ago:
I hope you did report the matter to the police regardless?
- Comment on [deleted] 4 months ago:
Nah that was Windows XP, where the hard drive was not encrypted by default, and the password was stored in a hashed file on the computer itself, freely accessible via any boot stick. Actually cracking it still took some time (below 7 characters a few minutes, 7 about 1h, 8 chars up to 24h, longer… LONG). But if it was a common word, then a dictionary attack with a long enough word list (most word lists have like 400k words or so) would get it in seconds either.
The funny thing with Windows XP was that since none of the data was encrypted, you could simply delete the password hash and set a flag in the registry and you would boot right into Windows with no password at all, and were then prompted to set a new password. That didn’t work since Windows 7 anymore.
- Comment on [deleted] 4 months ago:
You can buy a hardware keystroke recorder for a few bucks. Just plug it between keyboard and computer and it logs all inputs. Once they have the boot password (and maybe a bunch of others), installing malware and exfiltrating data is pretty straightforward. Doesn’t require a lick of IT knowledge either.
Bit more challenging on a laptop without external keyboard, but there are hardware solutions as well, though they’d require tinkering with your device.
Phones are harder to gain access to. Honestly if I wanted to get into your phone, I’d probably try to set up hidden cameras in spots where you are likely to enter your PIN (bed, toilet) somewhere under the ceiling and angled straight down. I’d probably try to switch the phone off as well any chance I got (long press the start button) so that you’d be forced to boot up and enter the PIN at any given opportunity to max my chances.
Actually hacking secure boot / accessing data from encrypted drives is beyond casual hackers, unless you don’t regularly update your devices and there are some active exploits published.
But seriously, low effort password sniffing is still the biggest vulnerability out there.
- Comment on Even in android Microsoft is still trying to get you to use edge 4 months ago:
I’ve been using it for 12+ years, and still do to this day. The only thing that changed is that you have to use the Microsoft authenticator app to log on.