IllNess

@IllNess@infosec.pub

This profile is from a federated server and may be incomplete. View on remote instance

IllNess ,

IPsec with IKEv2 is the NCSC’s recommended alternative for secure remote access. This protocol encrypts and authenticates each packet of data, using keys that are refreshed periodically. Despite acknowledging that no protocol is entirely free of flaws, the NCSC believes that IPsec with IKEv2 significantly reduces the attack surface for secure remote access incidents, especially due to its reduced tolerance for configuration errors compared to SSLVPN.

IllNess ,

I was watching a show on Amazon Prime and they added in unskippable ads. On top of that it kept on buffering on me.

Why would I subject myself to that? Why should anyone?

IllNess ,

You can do this with Jellyfin, exactly like your instructions.

IllNess ,

Barbara Streisand Effect x 8000.

IllNess ,

If Nintendo stays consistent, they went after Yuzu because they were accepting donations. They went after ROM sites that had advertising. They left everyone else alone if they aren't making money off their games. Right now Ryujinx has a Patreon page...

IllNess ,

The Hero 10 is supposed to cost €400 (around $425/₹36,000), which will undercut the current cheapest foldable, the nubia Flip, by some margin (it made its debut at the MWC at $600).

IllNess ,

Bring them a dumb phone. Ask them to install the app on it for you. Tell then you are not buying a new phone just to use the gym.

IllNess ,

This isn't a magic trick. This is more about pushing and seeing how far they would bend.

Like what you said, if all else it's a way out of the stupid agreements with gyms.

IllNess ,

So if you can't get in a gym because of a technology they added after you signed, they will just continue to charge you?

That's what you think will happen?

IllNess ,

Looking online at similar situations people had their membership canceled by management. Other cases showed bring able to enter by a phone number, by their old tag, or ID verification. Looks like it happened for people whose app kept on crashing or a work phone that wouldn't allow installs.

Which gym would just keep charging you if you said you can't get in?

IllNess ,

I'm not really sure what happens if Proton bans your account for any reason but Proton Pass does have offline access. I assume if you turn off internet access, you can still get all your passwords.

Are there any working tools to rip an entire Instagram account?

I don't have an account myself, and the photos and videos I'm trying to download en masse belong to a famous person's public account. Is there anything I can use to do it (as long as it's not creating an account lol), preferably proxied tools as apparently I get blocked while behind a VPN?...

IllNess ,

It is creeping. If your neighbor goes outside in public and you stare at her from your window blinds, with the lights out just so you can see her ankles twice a day. Yes, she is in public and you are only looking, but the obsession is not normal behavior.

IllNess ,

Thanks for this.

When Google said they were stopping 3rd party cookies, I thought it was just a simple security setting. The new system, Protected Audience, seems like 3rd party cookies without the whack-a-mole approach of listing every cookie advertisers can take, especially since there is nothing stopping data collectors from extracting data from it, like what Mozilla said in the article.

Hopefully there are fake data dumpers or cleaners for Protected Audience which would reduce the effectiveness of this system but looking how the Chrome team treats browser extensions, I doubt it.

IllNess ,

Unfortunately, due to ASUS being based in China, we are unlikely to get a response until next week.

Even responses are late. Maybe Asus is using the snail mail for everything. They are going to sending floppy disks with the unlocker next month.

IllNess ,

Ooh! Great find!

Would changing DNS fix this problem then?

IllNess ,

I don't have this issue. I was just curious if chnaging DNS would fix the issue for OP.

Thank you for the link though.

IllNess ,

We should leave the parenting to parents.

Trying to pirate a physical book. Where do I get thinner printer paper?

I need to pirate this book thats over 1000 pages. I already have the pdf but I really want a physical copy and the book costs too much for me. Even if I have to buy a bunch of ink (the book has no pictures) and even if I wear out the printhead before the job is done, it's still going to be cheaper to do this. My printer has been...

IllNess ,

If you have Adobe InDesign or QuarkXPress, they should have an option to print in this way. You can set signature sizes (or small booklet sections). You fold the signatures in half and stitch it together to create a book. It will layout everything for you but always do a print preview or print to pdf if you are a beginner.

IllNess OP ,

I didn't even consider that. I was cross posting because there were followers of one that wasn't on the other.

I guess that's where the downvotes comes from. Lol.

I will post articles only on Security News from now on. I will only cross-post to other instances.

IllNess OP ,

The FBI received 1,600 complaints about SIM-swapping in 2021, a sharp increase from the three previous years.

Source: Wikipedia

This guy was only guilty for 5.

Most incidents seem to be from social engineering tech support though. No manager needed.

IllNess OP ,

I didn't notice that. All documentation just refers to the company as "Company-1".

I'm guessing the company made a deal they would cooperate if their name isn't included in.

Not sure how accurate but I found someone with the same name and age in Marlton, NJ on Spokeo.

His two cell phone numbers say "AT&T Mobility". His landline says Verizon. I'm going to guess he worked for AT&T. Could be wrong though.

IllNess OP ,

For carrying the unauthorized number porting, Katz received $1,000 in Bitcoin per SIM swap (total of $5,000), plus an (unspecified) percentage of the profits earned from the illicit access to the victims' devices.

The amount he made is $5,000 minumum.

I think 1 year for every instance is fair. This could really ruin someone. At least stolen credit cards have protection. Stealing someone's crypto wallet could mean that money is gone for good.

IllNess OP ,

Thank you. I never listened to Darknet Diaries.

For anyone else reading this, Sim-swapping starts at 36:00 but I suggest you listen to the first part too. Very interesting.

Why it’s hard to write a good book about the tech world ( www.economist.com )

WHEN PEOPLE ask Michael Moritz, a former journalist and prominent tech investor, what book they should read to understand Silicon Valley, he always recommends two. “They are not about Silicon Valley, but they have everything to do with Silicon Valley,” he says....

IllNess ,

To OP, I really appreciate you posting the entire article. Really interesting read.

As for the subject, the difference between Wall Street and Silicone Valley is Wall Street accepts that they have illegal activities, immoral choices, assholes, drugs, and greed. Silicone Valley rejects those things exists in their world and tries to have show that innovation is the most important goal. They are lying.

IllNess ,

Maybe we can trick it forever that it is far away from a cell tower. That way the car has to start without connection.

Who knows, maybe they force you to use their app and after driving and connecting to the internet, that sends data back to the manufacturer.

Are there tools that exist to anonymize writing styles?

I feel like with the rise of AI something that anonymizes writing styles should exist. For example it could look for differences in American versus British spelling like color versus colour or contextual things like soccer versus football and make edits accordingly. ChatGPT could be fed a prompt that says "Rewrite the following...

IllNess ,

This doesn't differentiate different types of English but I will post it any just in case it is useful to you.

https://goblin.tools/Formalizer

JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive ( www.darkreading.com )

One of the vulnerabilities (identified as CVE-2024-27198) has a near-maximum severity CVSS rating of 9.8 out of 10 and is an authentication bypass issue in TeamCity's Web component. Researchers from Rapid7 who discovered the vulnerability and reported it to JetBrains have described it as enabling a remote unauthenticated...

JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive ( www.darkreading.com )

One of the vulnerabilities (identified as CVE-2024-27198) has a near-maximum severity CVSS rating of 9.8 out of 10 and is an authentication bypass issue in TeamCity's Web component. Researchers from Rapid7 who discovered the vulnerability and reported it to JetBrains have described it as enabling a remote unauthenticated...

IllNess ,

This looks like a straight cash grab. I bet the whoever owns this github won't work on it at all.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • All magazines