gruez

13 ms·

451.
by gruez 3mo ago
>They presumably already have some sort of evidence in order to get a warrant and are under criminal investigation. What if there was no warrant, and the SEC just came to ask questions?
452.
by gruez 3mo ago
Destroyed materials that might be relevant to an investigation that you know exists.
453.
by gruez 3mo ago
>with the deceptive pin code but the defense can simply plainly say they didn't want the police to read their private device. That's as convincing as saying you burned all the documents because you don't want people who br
454.
by gruez 3mo ago
If you read the linked thread, you'd see the reasons are: 1. SSDs (including phones) have TRIM/discard, so you need to disable it, otherwise the hidden volume would get wiped. You going out of your way to disable it is going to be
455.
by gruez 3mo ago
>How are they going to prove there was evidence of a crime? They don't have to, only that you destroyed evidence. That's why many people get prosecuted with "obstruction of justice" rather than the actual crime. >W
456.
by gruez 3mo ago
>VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume dec
457.
by gruez 3mo ago
>ADB / forensic tools would be ineffective if USB access is denied (as discussed elsewhere in this thread). Well no, because if you gave the pin, you'd expect the phone to work normally, including enabling adb. If you gave the
458.
by gruez 3mo ago
Well the activity generator is going to have to be very careful to not accidentally overwrite data on the hidden volume, and somehow able to hide itself from adb or forensic tools that it's enabled.
459.
by gruez 3mo ago
You can't, it's all reputation based. Similar to whether drug users don't really know what they got were diluted or not.
460.
by gruez 3mo ago
I didn't even make it that far, I got PR_END_OF_FILE_ERROR which indicates it couldn't even get past the tls handshake.
461.
by gruez 3mo ago
There really isn't. You can try avoid the "30GB volume on 128GB phone" problem by putting the hidden volume inside the free space of another volume, but since the outer volume doesn't know about the hidden, you have to b
462.
by gruez 3mo ago
That still doesn't prevent other means that developers have to thwart backups. Chrome and vanadium has a custom backup agent that only dumps out settings, so browsing history and bookmarks aren't backed up at all. I believe firefo
463.
by gruez 3mo ago
>I believe LUKS is capable of that Booting into a 30 GB partition on a 128GB phone is going to be mega suspicious, even if the remaining data is random.
464.
by gruez 3mo ago
The problem is that most apps opt out of backup, so it's effectively useless.
465.
by gruez 3mo ago
>You are guaranteed to pass an Anubis challenge eventually [0] That's a double edged sword because bots will eventually get through too, and unlike humans, their time is dirt cheap. >Cloudflare blocks legitimate users itself some
466.
by gruez 3mo ago
>I increasingly encounter outright blocks rather than any sort of captcha when visiting cloudflare "protected" sites. ??? Unless you're browsing around with the googlebot user agent string, you should be getting turnstile
467.
by gruez 3mo ago
Right, but practically speaking all CDNs are MITMs. If you're against cloudflare you should be against cloudfront, akamai, etc. as well.
468.
by gruez 3mo ago
Actually for any VPN apps that support per-app split tunneling, excluding a given app while vpn lockdown is enabled causes the app to be blocked. So you can have both.
469.
by gruez 3mo ago
Is it actually in DPRK, or an unscrupulous operator that hosts the server outside DPRK, but hosts a puts fake information in the whois/geofeed?
470.
by gruez 3mo ago
I never understood this. You can pass turnstile challenges on tor browser in a linux/windows VM, of all things. What unusual browser config are people using to trigger a block?
471.
by gruez 3mo ago
Wouldn't the evidence need to be presented to the defense for scrutiny, and if it turned out to be bunk, that would strongly hurt the state's case?
472.
by gruez 3mo ago
>Every finding here was reproduced on a real Windows 11 Pro VM (build 26200). Nothing is theoretical. See docs/technical-writeup.md for the evidence, tagged by confidence level. That's sounds nice and all, but everything about
473.
by gruez 3mo ago
It's present on one of my windows 10 LTSC VMs but not the other, so not sure how it got there.
474.
by gruez 3mo ago
That's a non-issue because you can build (or patch+resign) grapheneos yourself.
475.
by gruez 3mo ago
>Can you permanently apply chain3 (FIREWALL_CHAIN_OEM_DENY_3) firewall rules, so that when the device reboots these are still applied? Just use firewall VPN apps + VPN lockdown mode (ie. "block connections without VPN"). >So
476.
by gruez 3mo ago
I'm sure everyone would agrees that the ideal outcome is everyone getting along and singing Kumbaya, but Russian oligarchs losing their wealth and influence to "the deserving rich" is still a win for meritocracy in a very nar
477.
by gruez 3mo ago
But the article specifically brings up russian oligarchs as a contrast to "the Deserving Rich"?
478.
by gruez 3mo ago
>Your example is about one developer's decision, which is not really what we're talking about. Is it? Many games outsource their anticheat to a third party developer, similar to how many apps outsource their app security to pla
479.
by gruez 3mo ago
>like uninstalling bloatware, denying apps internet access All of these can be done with a computer. >recording calls (legally).. A second phone does the same thing. >Hack for "escalating privileges" on my own device so I
480.
by gruez 3mo ago
>and you have an order of magnitude more bang for your buck Maybe if you're paying API rates, but if your usage fits within the American labs' plan reset windows (5-hour + weekly limits), their plans are likely cheaper than chi

More ›