maxo133

5 ms·

1.
by maxo133 1mo ago
They are not. Developing modern 0-day zero click RCE exploits chains like those developed for iOS is far more complex than hacking to generic company servers It's completely different scale of difficulty factor. Not a single documentat
2.
by maxo133 1mo ago
Funny to read this, but google is currently number one anti-privacy big tech company. No other company makes it as difficult for its users using anonymization/privacy software to access their services
3.
by maxo133 1mo ago
I completely disaggree with this take. Modern AI is not yet capable of finding multi-component bugs as advanced as those produced by firms like NSO.
4.
by maxo133 2mo ago
100% agree with your statement that gemini models have most knowledge in domains. They shine in so many generic topics
5.
by maxo133 2mo ago
Windows GDID Changer: https://news.ycombinator.com/item?id=48818707
6.
by maxo133 2mo ago
Windows GDID Changer: https://news.ycombinator.com/item?id=48818707
7.
by maxo133 2mo ago
Windows GDID Changer: https://news.ycombinator.com/item?id=48818707
8.
Windows GDID Changer(github.com)
5 points by maxo133 2mo ago|4 comments
9.
by maxo133 2mo ago
A script that requests the generation of a new GDID from Microsoft servers and assigns it to the Windows installation. GDID tracking variable became publicly discussed after it was mentioned in the Peter Stokes indictment
10.
by maxo133 2mo ago
AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1.
11.
by maxo133 5mo ago
The fact that graphane is getting attacked speaks enough for it's relability. First in france now in Wired. I'm more concerned that Signal incorporated in US is having easy life.
12.
by maxo133 5mo ago
I can completely believe this. I was always convinced that Skype was bought by microsoft so CIA/US intelligence agencies to have listening capabilities. The first thing Microsoft did after the Skype purchase was making it easier to ta
13.
by maxo133 2y ago
You are right, but i still have no idea what is the point of this article. The guy unlocked the bitlocker, then restarted PC just before login screen appeared. He said that's when he had most success. What sense does it make to restart
14.
by maxo133 2y ago
Too bad the author did not provide hardware specs. Such attack is even harder on DDR4 and DDR5 memory and most publications refer to legacy ram such as DDR3 > In my experience I have had the most success restarting the system while Windo
15.
by maxo133 2y ago
Yes and the DGSE agents visiting every week or so giving him an release offer you can't refuse.
16.
by maxo133 2y ago
CEO getting arrested does not mean telegram will go down. Direct involvement with scams? You got to be kidding me. This guy is worth 15 billion USD, he does need to do anything. It's about lack of cooperation in censoring content.
17.
by maxo133 2y ago
This is a good point. It doesn't have to be Mullvad but it's almost guaranteed based on what we've seen in the history (see CIA + swiss crypto company) that some of the major VPN providers are managed by intelligence agencies
18.
by maxo133 3y ago
This is step closer, after few more steps they'll make sure only those "approved" companies can operate email server... leading to more internet centralization.
19.
by maxo133 5y ago
this is most interesting piece of entire presentation. They can query location remotely using GPS and likely turn on microphone too.
20.
by maxo133 5y ago
Dont worry, registrants will move to offshore locations and that's how it's gonna end.
21.
by maxo133 5y ago
Today, i read somewhere while watching protonmail case comments, that switzerland has quite extensive surivellance laws which include possiblity of logging whole country inbound and outbound traffic for period of 6 months.
22.
by maxo133 5y ago
If they really cared about anonymity ProtonMail would ship their mobile app with bundled TOR. Especially the mobile version, since plenty of non-tech savy people use mobile only.
23.
by maxo133 5y ago
Nothing stops them from deploying malicious javascript code to comply with court orders. Nothing stops them from logging user password either, then the entire mailbox contents is compromised Many good points + 1.
24.
by maxo133 5y ago
So... if they receive valid swiss court order they can be forced to log user passwords on demand and their entire service is then useless? As when you have password you can decrypt entire mailbox content. They market their service to journa
25.
by maxo133 5y ago
So right, people just dont get the big picture. If they were forced to log the IP address, they can be forced to log user password. This makes entire encrypted mailbox useless.
26.
by maxo133 6y ago
Isn't DMCA working the way that if you disagree with dmca takedown and fill certain form, the side asking to take down content (RIAA) needs to get court order? That's the way how it works with google search.
27.
by maxo133 8y ago
How can you advise synology when their system doesn't even have FULL DISK ENCRYPTION? As longas it doesn't have it, i wont be even interested looking at their platform. Can you imagine it? NAS'es usually are targeted for busi