PrimaryAlibi

23 ms·

1.
Ask HN: Is discrete TPM worth it? with QubesOS/aem/heads/Intel-me disabled
2 points by PrimaryAlibi 2y ago|1 comments
2.
by PrimaryAlibi 2y ago
It's fact that it's possible, the question is just if Google is doing it. I know some apps that have been proven to track mouse movement to identify users and prevent botting. They want to identify users because it's against
3.
by PrimaryAlibi 2y ago
Everyone reading this should start to contact websites/companies who use cloudflare and tell them in simple and few words that it's a problem and link them to a video or article that explains more, maybe even to this HN topic. We
4.
by PrimaryAlibi 2y ago
That's same for almost all surveillance/tracking tech. It's always trivial for criminals/abusers to bypass. The surveillance is just about controlling the sheep.
5.
Ask HN: Can you avoid being personally identified (and tracked) by recaptcha?
2 points by PrimaryAlibi 2y ago|2 comments
6.
by PrimaryAlibi 2y ago
To become a freelancer you first need to be a professional with a lot of work experience. Then you can start doing some freelance on the side and make it grow. It's very difficult to start your career as freelance. To find part time jo
7.
by PrimaryAlibi 2y ago
So the charger won't work without the data wire and it could destroy the laptop. It's so crazy because I've seen in these tech communities people saying it's recommended to cut the data wires and everyone is upvoting it.
8.
Ask HN: Why do laptop chargers have data wires?
17 points by PrimaryAlibi 2y ago|53 comments
9.
by PrimaryAlibi 2y ago
But my questions aren't extremely general, i even asked very specifically if you are supposed to attach an external programmer to the component like keyboard or cam etc but you can't even answer that. You can't even give one
10.
by PrimaryAlibi 2y ago
These are the type of vague answers i said i didn't want because they are not helpful. How do i know if you really know what you are talking about? No explanations or links to sources. "depends on the device" is almost not an
11.
by PrimaryAlibi 2y ago
How would it be done externally? Is it done same way as flashing the boot rom? You just need to know where the chip is for the other components? No 0-days needed? Or do you need a 0-day to do this? Is that why you think only foreign intelli
12.
by PrimaryAlibi 2y ago
I asked about 0-day because I dont think anyone would use that on me. So if I know that it can only be done with a 0-day then I would practically be secure. The first paragraph you made doesn't sound so convincing though with mostly &q
13.
by PrimaryAlibi 2y ago
good answer, I will read more about uefi bootkits and blacklotus. It also reminds me that recently bootkitty uefi bootkit was in news. i saw a video about it a couple days ago. Is it just from userspace you flash these firmware (other than
14.
by PrimaryAlibi 2y ago
I think most people already know that air pollution is bad for health. The question is how big part in all these deaths did the air pollution have. Are those face masks people use to "protect" themselves from covid effective at pr
15.
Ask HN: Too theoretical for hackers to flash your firmware excluding boot ROM?
3 points by PrimaryAlibi 2y ago|13 comments
16.
by PrimaryAlibi 2y ago
I have been making youtube videos for a long time on many different accounts. I don't know what else to say except try to choose topics that youtube won't give you trouble over so avoid things like privacy, crypto, politics. Then
17.
by PrimaryAlibi 2y ago
I think you have the same problem either way. NSA (most likely) recently was caught for putting backdoor in IOS. It doesn't matter how big the brand is. Unfortunately it comes down to just needing to learn how to verify the hardware. I
18.
Which hardware parts in a laptop should/can you verify before buying?
2 points by PrimaryAlibi 2y ago|0 comments
19.
by PrimaryAlibi 2y ago
Yeah I didn't know it was possible because some laptops have the TPM in a seperate chipset than the one that has intel me. I thought they only set the hap bit to neutralize but I learned here that they can also disable it on laptops th
20.
by PrimaryAlibi 2y ago
Maybe I misunderstand you what you mean with a clone of the computer. Do you mean take my entire computer and replace it with a completely different computer that is the same model? Because if that is what you mean then they can't clo
21.
by PrimaryAlibi 2y ago
I don't think there is any best place but if there was then it would be on an .onion site because without anonymity there will be censorship and people can go to prison. I wouldn't be surprised if UK soon begins searching for peop
22.
by PrimaryAlibi 2y ago
Do you mean to use VNC to access your data? Because that sounds very difficult to secure and also do maintenance when you are never onsite. The host computer that has your data would have same problems as what this topic is about but now yo
23.
Counter argument against QubesOS more secure by being a type 1 hypervisor
2 points by PrimaryAlibi 2y ago|1 comments
24.
by PrimaryAlibi 2y ago
I made a mistake when I wrote the post mixing up disable and neutralized but I hoped everyone would understand I'm talking about disabling it.
25.
by PrimaryAlibi 2y ago
They first have to get through the glitter nail polish protection without evidence. That's the point of the glitter nail polish, tamper evidence.
26.
by PrimaryAlibi 2y ago
If we have a container that is tamper evident then they can't do all those computer modifications you mentioned without we finding out the computer has been tampered with.
27.
by PrimaryAlibi 2y ago
I don't think it's such an rare adversary to have. Organized crime can easily have several experienced hackers in their "organization". It's common knowledge that gangs actually do monitor peoples routines who are i
28.
by PrimaryAlibi 2y ago
I think its more useful to define requirements of an "elegant" website. FOSS is getting attacked a lot by governments these days so if you care about privacy or not doesnt matter, you need opsec or you could end up in prison. Tha
29.
How to verify boot firmware integrity if you prioritize neutralizing Intel ME?
25 points by PrimaryAlibi 2y ago|30 comments
30.
by PrimaryAlibi 2y ago
so you are saying you dont care about your privacy but i dont understand how that is relevant

More ›