sloshnmosh

13 ms·

91.
by sloshnmosh 6y ago
Thank you for this article! I wasn’t aware that grep could search for offsets in hex like this. This will come in very handy.
92.
by sloshnmosh 6y ago
It’s next to impossible to stop a website from fingerprinting your browser and/or device. I found a heavily obfuscated script on the webpage of my cellphone data provider which I initially thought was a credit-card skimmer. After sever
93.
by sloshnmosh 6y ago
I just bought 2 computers from a local business that was having a rummage sale. I mounted the computers with a Linux live disk and it turns out that the computers were used by a professional website development company that created websites
94.
by sloshnmosh 6y ago
Do people that frequent tech sites such as HN really download documents posted on someone’s personal Google Drive? Facinating
95.
by sloshnmosh 6y ago
Awesome! I didn’t know that Raspberry Pi had these. I will definitely be ordering one. I do already own a newer Raspberry 4 with 4Gb of RAM and the massive heat sink is a must! These things run WAY hotter than the Raspberry Pi 3’s. There ar
96.
by sloshnmosh 6y ago
I’ve been able to download videos and music files by finding the full direct links to the source by using my web browsers developer tools. Does this no longer work on YouTube?
97.
by sloshnmosh 6y ago
Drugs will never be decriminalized fully here in the US. There is too much untraceable money involved. It is said that after the housing bubble burst around 2008 that there was very little “liquid” cash floating around and that dark money
98.
by sloshnmosh 6y ago
Also be skeptical (and avoid) about websites that won’t function unless JavaScript is enabled.
99.
by sloshnmosh 6y ago
Linux Journal is for extremists. ~XKeyScore~ https://www.theregister.com/2014/07/03/nsa_xkeyscore_stasi_s...
100.
by sloshnmosh 6y ago
“I’ve seen how the burrito is made and I ain’t hungry” Discussing Android apps and trackers.
101.
by sloshnmosh 6y ago
uMatrix IMHO is an absolute necessity when viewing the web these days. It is said that 20% of the ads on the web are malicious so browsing the web without a dependable script/adblocker is just asking for trouble. And until the adtech i
102.
by sloshnmosh 6y ago
What an amazing article and breakdown/RE. Very informative and helped me to understand what all the different vulnerabilities were and how they could be exploited by easy to understand examples. Well done! As a side note, THIS is why s
103.
by sloshnmosh 6y ago
Agreed. It reminds me of all those bogus security/antivirus apps on the Google Play store that harvest more user data than any virus ever could.
104.
by sloshnmosh 6y ago
I also highly recommend My octopus teacher. Very beautiful and sad in a “circle of life” kind of way.
105.
by sloshnmosh 6y ago
Hello Ted. A bit off-topic but I was wondering if you were aware of the massive amount of malicious sites that use NameCheap? And do you have a better way of going about flagging these sites other than the “abuse” email that shows when doi
106.
by sloshnmosh 6y ago
You can disable lazy loading images in about:config in Firefox
107.
by sloshnmosh 6y ago
Never enable JavaScript in safari for iOS while browsing the web. There is something very, very wrong and you will see some disturbing crash logs.
108.
by sloshnmosh 6y ago
Depending on the device you are using you might not have noticed. I used WireShark on a hotspot that my unlocked IPhone was using and captured the visual voicemail blob used by Cricket/AT&T just last week. Also, the SIM card toolki
109.
by sloshnmosh 6y ago
This is the correct answer as I can attest to one of my phones pulling down a visual voicemail blob and also a problem I had with a Sprint based CDMA device that was running Lineage OS that lost cell connection and I could not get it back
110.
by sloshnmosh 6y ago
Might I suggest you watch some videos by the late great comedian Bill Hicks
111.
by sloshnmosh 6y ago
Until the entire advertising community gets their s t together I will block every ad and script that I can. It has gotten to where there the line between advertising and malware is blurred or nonexistent. It seems to me that every new API
112.
by sloshnmosh 6y ago
I’ve found similar concerns in an official church scripture app which I will not name. It was sending an enormous amount of data back to the church including what the user was reading and for how long, everything the user highlighted or boo
113.
by sloshnmosh 6y ago
This is very typical of mobile adware/malware to avoid triggering detection by the Apple App Store or Google play store. Sometimes when looking for signs of malware the easiest thing to observe is either it’s use of Persistance or its
114.
by sloshnmosh 6y ago
I LOVE this kind of stuff! I was able to finally extract the squashfs file from my routers firmware using dd and program I found on github called “sasquash” which patches decompression tools and can also flip endianness.
115.
by sloshnmosh 6y ago
Hmmm. I know a thing or two about mobile devices and my best advice is to avoid installing ANY third-party applications, especially any “security/antivirus” apps that request dangerous permissions in order to break out of their sandbo
116.
by sloshnmosh 6y ago
This is the very best advise when dealing with debt collectors. There are several unscrupulous debt collectors/scammers that use public information to try and frighten people into paying off non-existent debt or debt that is way beyond
117.
by sloshnmosh 6y ago
I find it ironic that the website that gives tips on hardening a mobile device requests that I enable JavaScript to view it. I never enable JS on a mobile browser especially Safari on iOS. There is something very, very wrong with WebKit and
118.
by sloshnmosh 6y ago
“ My recommendation; use the least amount of software you can get by with” So, developers shouldn’t shovel a bunch of third-party advertising SDK’s into their apps? That’s just crazy talk. /s
119.
by sloshnmosh 6y ago
I had pretty good luck using a program that could be programmed to extract all readable sectors first and then go over and over damaged areas to try and recover the data. I can’t recall the name of it but it had a picture of the developers
120.
by sloshnmosh 6y ago
This reminds me of another eye-popping distro but for pentesting (also Arch based) Black Arch

More ›