nullpt_rs

8 ms·

1. 1.▲
   by nullpt_rs 17d ago

   I actually wanted to make a YouTube video for this as well! I also have a few more web fingerprinting blog posts in the backlog T_T
2. 2.▲
   by nullpt_rs 17d ago

   I do not! Other than when clicking a section from the table of contents. Is it distracting?
3. 3.▲
   by nullpt_rs 17d ago

   Why assume malicious intent? I am well aware that the test isn’t just some Math.random() and even includes quotes from the official site that talk more about how their scoring engine works. I don’t think I was trying to “outsmart” anything,
4. 4.▲
   by nullpt_rs 17d ago

   Sure! However, I think at that point I just felt trapped and overwhelmed that I no longer cared about the test or its results.
5. 5.▲
   by nullpt_rs 17d ago

   Trust, this blog post was in the works for weeks and was actually supposed to have a YouTube video accompanying it that I never finished T_T
6. 6.▲
   by nullpt_rs 17d ago

   Agree with original commenter but +1 to reframing the language. I was very afraid to begin medication because I would always hear about how addicting this medication can be. But like you say, you wouldn't tell someone with diabetes t
7. 7.▲
   by nullpt_rs 17d ago

   this method works more often than not :P
8. 8.▲
   by nullpt_rs 17d ago

   this sounds interesting! would love to hear more about this
9. 9.▲
   by nullpt_rs 17d ago

   hi! author here, please let me know if you have any questions :-)
10. 10.▲
    by nullpt_rs 17d ago

    I didn't think of this until after haha
11. 11.▲
    Reverse Engineering My ADHD Test(nullpt.rs)

    6 points by nullpt_rs 21d ago|0 comments
12. 12.▲
    You can now use a selfie video to log into your Google Account(twitter.com)

    1 points by nullpt_rs 2mo ago|1 comments
13. 13.▲
    by nullpt_rs 1y ago

    I actually wrote a separate blog post about this! Changing the debugger keyword :) see: https://nullpt.rs/evading-anti-debugging-techniques
14. 14.▲
    by nullpt_rs 1y ago

    D'oh! You are correct :-) Good catch and thanks for teaching me something!
15. 15.▲
    by nullpt_rs 1y ago

    Someone mentioned this as well in another comment. Turns out most of this could’ve been done as an extension after all :-) edit: actually, wouldn’t you still need to override the global you’d like to instrument? At that point, the toString
16. 16.▲
    by nullpt_rs 1y ago

    Thanks for sharing some examples! Someone shared a similar project in the other thread. I didn’t realize this at the time of writing haha. FWIW I still think modifying the browser has some positives wrt stealth and hooking out of process fr
17. 17.▲
    by nullpt_rs 1y ago

    Ooh nice, I haven’t seen this project! I actually tried attempting this as an extension at first but wasn’t able to override page window functions. I’m curious to know how they accomplished this. (edit: I see that I missed the chrome.script
18. 18.▲
    Show HN: I'm building a browser for reverse engineers(nullpt.rs)

    348 points by nullpt_rs 1y ago|55 comments
19. 19.▲
    Reversing the licensing on a Quantum Scalar i40(blackjack.codes)

    2 points by nullpt_rs 1y ago|0 comments
20. 20.▲
    by nullpt_rs 1y ago

    Sadly, spoofing GPU vendor & renderer can be an even larger flag since they can hash the resulting image of the canvas to compare it with a database of collected fingerprints[0] [0]: https://research.google/pubs/pic
21. 21.▲
    by nullpt_rs 1y ago

    "breaking" might've been a strong verb here. updated post title to better reflect the intentions of the post :)
22. 22.▲
    by nullpt_rs 2y ago

    Most anti-bots will send other browser characteristics as well and can detect if one is lying about which browser, and even which version they're using based on which APIs and properties are/aren't available. see: https:&#x2
23. 23.▲
    by nullpt_rs 2y ago

    yep, but it can get tricky. some projects worth checking out: https://github.com/refraction-networking/utls https://github.com/berstend/puppeteer-extra
24. 24.▲
    by nullpt_rs 2y ago

    I (veritas) run the blog but accept contributions from anyone. The blog itself is open source :-) https://github.com/nullpt-rs/blog
25. 25.▲
    by nullpt_rs 2y ago

    I used to frequent a site titled "The Best 404 Page Ever" that played a random flash file on refresh. Seems like someone's recreated it here https://thebest404pageeverredux.com/
26. 26.▲
    by nullpt_rs 3y ago

    They have a similar feature labelled "Friendly Bots" https://blog.cloudflare.com/friendly-bots/
27. 27.▲
    by nullpt_rs 3y ago

    I can sorta share this sentiment. Luckily (for us) tech seems to be moving in the direction of embedding Chromium everywhere which always leads to some fun exploits :)
28. 28.▲
    by nullpt_rs 3y ago

    Thank you! Hope to publish more like it soon :)
29. 29.▲
    by nullpt_rs 3y ago

    I knew I forgot to mention something :) I do love this option but I wasn't able to get it to work with this obfuscation technique either.
30. 30.▲
    by nullpt_rs 3y ago

    Definitely considering switching over my blog to Astro since I write my posts in MDX and using this plugin to avoid doing this work on the client at all (currently use highlight.js and Next). Lovely work by my friend Haze :)