4 ms·
Interesting, in the first video Joshua mentions at 4m30s the user needs to have serious willpower to report every 5 min (ie. he feels the app is protection agai
by Fnoord 1y ago
Interesting, in the first video Joshua mentions at 4m30s the user needs to have serious willpower to report every 5 min (ie. he feels the app is protection against a Sybil attack). I don't think this is the case. All you need is the following:
1) iOS VM (Corellium?).
2) Desktop automation on your host OS (e.g. AutoHotKey).
3) Spoof GPS with random USA-specific or carefully curated GPS coords (targeting neighborhoods they don't like?). This can be done with a SDR or a local application (which I know exist for Android but I am not sure for iOS; it'd depend on VM?).
A determined adversary would have multiple of these setups. It'd require a little bit of tech know-how, but as you can see it isn't rocket science, and an adversary with a lot of money to burn would just hire someone to do this. All in all, this application is not safe against a hostile US government, but a random low IQ MAGA idiot who is determined would even do this manually, in mom's basement indeed. You can even set an alarm every 5 min.
And remember, from [1]. The brownshirts were in numbers, and identifiable (at least after 1926 [2]).
[1] ICE Is Nothing Like the Brownshirts, Because the Brownshirts Actually Identified Themselves https://www.mcsweeneys.net/articles/ice-is-nothing-like-the-brownshirts-because-the-brownshirts-actually-identified-themselves https://www.mcsweeneys.net/articles/ice-is-nothing-like-the-...
[2] https://military-history.fandom.com/wiki/Uniforms_and_insignia_of_the_Sturmabteilung#Early_SA_rank_insignia_(1924-1929) https://military-history.fandom.com/wiki/Uniforms_and_insign...
- gruez 1y ago>1) iOS VM (Corellium?). A VM can't spoof on-device attestation. https://developer.apple.com/documentation/devicecheck/establishing-your-app-s-integrity https://developer.apple.com/documentation/devicecheck/establ... It's still possible to do do Sybil attacks, but you need real devices, not VMs.