3 ms·

I'm glad they aren't blocking explicit entries. This morning I discovered I could quickly send snippets of text to my phone by writing it as a data uri and send

I'm glad they aren't blocking explicit entries. This morning I discovered I could quickly send snippets of text to my phone by writing it as a data uri and sending the tab via Fx sync.

tomrod 9y ago
That sounds heavily exploitable, in this age of crypto-currency-mining malware
- dogma1138 9y ago
  It is you can embed any binary in a b64 string in the html page and then download it from within the browser. Since the download happens locally it also will not be logged in your perimeter monitoring and most security appliances do not inspect inline HTML especially from “trusted” domains due to performance limitation. I’ve used this trick to bypass DLP, local policies and various content filtering appliances multiple times.
Jach 9y ago
On linux boxes, for small snippets I use 'qrencode -t ansi "message"' and use a QR scanner app to read the text to my phone...
- muxator 9y ago
  I used to do exactly the same, but using a Firefox extension [0]. Since it is not compatible with quantum, I am writing my own, but it's still a prototype for now. [0] https://addons.mozilla.org/en-US/firefox/addon/offlineqr/ https://addons.mozilla.org/en-US/firefox/addon/offlineqr/
- Bromskloss 9y ago
  That's cool! Do you know where I can find documentation of the "-t" option? The following is all I find, and I'm not sure what all the variants mean: -t {PNG,EPS,SVG,ANSI,ANSI256,ASCII,ASCIIi,UTF8,ANSIUTF8} specify the type of the generated image. (default=PNG)
  - digi_owl 9y ago
    The only one i do not recognize in some way is EPS. The rest are either image formats(PNG, SVG), or various character encodings (all the rest).
    - daurnimator 9y ago
      > The only one i do not recognize in some way is EPS. https://en.wikipedia.org/wiki/Encapsulated_PostScript https://en.wikipedia.org/wiki/Encapsulated_PostScript
    - deleted 9y ago
      [deleted]
- Mayzie 9y ago
  Alternatively for Android, you could enable KDE Connect[1] and copy the text to the clipboard (which will then be copied to the Android clipboard, and vice-versa). Or easily put it in a file and transfer it over to your device. [1] - https://community.kde.org/KDEConnect https://community.kde.org/KDEConnect
  - yoodenvranx 9y ago
    KDE Connect is one of the programs I can't live without anymore!
code_duck 9y ago
I use messaging apps for that.

I'm glad they aren't blocking explicit entries. This morning I discovered I could quickly send snippets of text to my phone by writing it as a data uri and sending the tab via Fx sync.

tomrod 9y ago

That sounds heavily exploitable, in this age of crypto-currency-mining malware

dogma1138 9y ago
It is you can embed any binary in a b64 string in the html page and then download it from within the browser. Since the download happens locally it also will not be logged in your perimeter monitoring and most security appliances do not inspect inline HTML especially from “trusted” domains due to performance limitation. I’ve used this trick to bypass DLP, local policies and various content filtering appliances multiple times.

Jach 9y ago

On linux boxes, for small snippets I use 'qrencode -t ansi "message"' and use a QR scanner app to read the text to my phone...

muxator 9y ago
I used to do exactly the same, but using a Firefox extension [0]. Since it is not compatible with quantum, I am writing my own, but it's still a prototype for now. [0] https://addons.mozilla.org/en-US/firefox/addon/offlineqr/ https://addons.mozilla.org/en-US/firefox/addon/offlineqr/
Bromskloss 9y ago
That's cool! Do you know where I can find documentation of the "-t" option? The following is all I find, and I'm not sure what all the variants mean: -t {PNG,EPS,SVG,ANSI,ANSI256,ASCII,ASCIIi,UTF8,ANSIUTF8} specify the type of the generated image. (default=PNG)
- digi_owl 9y ago
  The only one i do not recognize in some way is EPS. The rest are either image formats(PNG, SVG), or various character encodings (all the rest).
  - daurnimator 9y ago
    > The only one i do not recognize in some way is EPS. https://en.wikipedia.org/wiki/Encapsulated_PostScript https://en.wikipedia.org/wiki/Encapsulated_PostScript
  - deleted 9y ago
    [deleted]
Mayzie 9y ago
Alternatively for Android, you could enable KDE Connect[1] and copy the text to the clipboard (which will then be copied to the Android clipboard, and vice-versa). Or easily put it in a file and transfer it over to your device. [1] - https://community.kde.org/KDEConnect https://community.kde.org/KDEConnect
- yoodenvranx 9y ago
  KDE Connect is one of the programs I can't live without anymore!

code_duck 9y ago

I use messaging apps for that.