News for hackers. Stuff that matters.
Re:The Unstoppable Rise of Sci-Hub (2019) by bergstromm466 on Friday January 10, 2020 @10:02AM (#22011384)
Ok you might want to watch this short documentary. Your fun 'pirated' games and software with 'better support' might cost you dearly when your daughter or your girlfriend/wife gets filmed by a hacker, using your own webcam.

https://www.youtube.com/watch?v=pFS3p0emftw - "Security awareness: Filmmaker explores RAT malware, buys access to random PCs for just 15 cents a piece - made short film about his experience"

Movies and other media files that don't run any scripts are ok if you're careful and know what you're doing, but installing pirated software is an invitation to get blackmailed and extored by darknet hackers.

Re:The Unstoppable Rise of Sci-Hub (2019) by Accujack on Friday January 10, 2020 @03:08PM (#22014869)
The Adwind Remote Access Trojan typically spreads by phishing e-mails.

Which is why you shouldn't believe everything you read.

By the way, this last sentence:

>Movies and other media files that don't run any scripts are ok if you're careful and know what you're doing, but installing pirated software is an invitation to get blackmailed and extored by darknet hackers.

Is entirely wrong. If you're worried about malware, you already know that it can come via video files as well as binary programs.

The rest of what you wrote is just spreading fear for notoriety's sake. Pirated software isn't an "invitation" to anything provided you have good anti-malware defenses and good security practices.

Re:The Unstoppable Rise of Sci-Hub (2019) by qwerty456127 on Friday January 10, 2020 @05:55PM (#22016519)
> provided you have good anti-malware defenses

There is no such thing as good anti-malware defenses. Most of the antiviruses are 80% bullshit + 20% obsolete, yet asking for money and full-time administrator privileges and unrestricted Internet connection (doesn't that sound suspicious?). Besides patching vulnerabilities regularly, being very careful of what files&websites do you open is the only real protection… as long as you don't come in contact with a fresh exploit which doesn't need you to let them.

Re:The Unstoppable Rise of Sci-Hub (2019) by Accujack on Monday January 13, 2020 @10:44AM (#22035414)
>There is no such thing as good anti-malware defenses.

You prove my point for me. Good defenses doesn't consist of solely antimalware software. Defense in depth is needed, along with education and awareness of new vulnerabilities.

The sum total of things you do to keep your systems uninfected are your anti-malware defenses.

Re:The Unstoppable Rise of Sci-Hub (2019) by bergstromm466 on Friday January 10, 2020 @04:46PM (#22015934)
Dangerous for Windows maybe? Most cracked OS X apps make you disable Gatekeeper or System Integry Protection. Game over. So yes, to me that is an invititation.
Re:The Unstoppable Rise of Sci-Hub (2019) by htfu on Friday January 10, 2020 @05:34PM (#22016351)
Any examples of something that requires disabling SIP in cracked version and not original? Never heard of it, sounds implausible but then I'm hardly up to speed.

Like I get swapping dylibs, but not why that'd be best done by poking around in /System rather than the binary.

Re:The Unstoppable Rise of Sci-Hub (2019) by thulecitizen on Saturday January 11, 2020 @02:37AM (#22018710)
Both 'appked' and 'macbed' websites have guides for disabling both Gatekeepr and SIP (now they are derivative websites because the domains keep getting banned/confiscated):

macappdownload dot com slash fix-damaged-app-message

macappdownload dot com slash how-to-disable-system-integrity-protection-in-macos

These guides are all over their websites, especially at the download stage, where there is a short list of 'download instructions' with a link to these guides.

A while back I read someone saying that these websites are owned by a Russian hacker network. Touch at your own risk.

Re:The Unstoppable Rise of Sci-Hub (2019) by htfu on Saturday January 11, 2020 @11:30AM (#22020699)
My question was "Any examples of something that requires disabling SIP in cracked version and not original?", this (while certainly possibly relevant) is not an answer to that.
Re:The Unstoppable Rise of Sci-Hub (2019) by thulecitizen on Sunday January 12, 2020 @01:16AM (#22024797)
To me this is an answer. I think somehow you're not understanding what I am implying.

These guides I linked to are there because when the software is being installed, it asks for these guides to be applied, to make the apps work. The modifications added to the cracked applications by the crackers take them off Apple's trusted developers list. So the only way to get some of them to work is to disable SIP and GateKeeper. This move then makes the user's computer vulnerable to all malware, because most forget to turn them back on. They also often don't know about the importance of these security features in the first place.

I am not concerned for your safety - I trust you will be safe. I am scared for the user I described above.

I hope this make it clearer.

I won't bother replying to more of your messages until you can show that you've actually tried this all out on a VM, because otherwise we just won't be talking about the same thing.

Re:The Unstoppable Rise of Sci-Hub (2019) by htfu on Wednesday January 15, 2020 @03:07PM (#22057926)
Off course gatekeeper needs to be off once something doesn't have a valid signature. But SIP protects /System, NVRAM, kext loading and some additional stuff. Not user app signatures. Hence my question.
Re:The Unstoppable Rise of Sci-Hub (2019) by OzilsAssistant on Friday January 10, 2020 @10:24PM (#22017893)
Had a cracked copy of binding of isaac reborn that reuired disabling SIP once, dunno if that was a thing for the legal copy though
Re:The Unstoppable Rise of Sci-Hub (2019) by Fnoord on Monday January 13, 2020 @07:58AM (#22034016)
Even without disabling Gatekeeper and SIP it is possible to insert malicious code into the OS somewhere because of full read and write access to the home directory and what not.

You could run the application in a VM without networking capabilities.

Re:The Unstoppable Rise of Sci-Hub (2019) by qwerty456127 on Friday January 10, 2020 @05:49PM (#22016472)
Use LittleSnitch, Luke!
Re:The Unstoppable Rise of Sci-Hub (2019) by bananamerica on Friday January 10, 2020 @10:59AM (#22011844)
I do not pirate anything anymore, but I have covered my webcam with tape for many years.

I also don't have a daughter, but I am Brazilian. Just adding a data point.

Re:The Unstoppable Rise of Sci-Hub (2019) by thulecitizen on Friday January 10, 2020 @01:55PM (#22013953)
It's not just about webcams or recording your microphone. That's just the tip of the iceberg.
Re:The Unstoppable Rise of Sci-Hub (2019) by bananamerica on Monday January 13, 2020 @08:21AM (#22034197)
I use a desktop nowadays. So no input whatsoever, unless I explicitly buy it and plug it.
Re:The Unstoppable Rise of Sci-Hub (2019) by thulecitizen on Monday January 13, 2020 @02:54PM (#22037945)
Your keyboard is an input device. That is what I am talking about. I am saying that with a Remote Access Trojan, they can do much more than access your mic or webcam.

"What is a RAT (remote access Trojan)?

A remote access Trojan (RAT) is a malware program that includes a back door for administrative control over the target computer. RATs are usually downloaded invisibly with a user-requested program -- such as a game -- or sent as an email attachment. Once the host system is compromised, the intruder may use it to distribute RATs to other vulnerable computers and establish a botnet.

Because a RAT enables administrative control, it makes it possible for the intruder to do just about anything on the targeted computer, including:

- Deleting, downloading or altering files and file systems.

- Monitoring user behavior through keyloggers or other spyware.

- Accessing confidential information, such as credit card and social security numbers.

- Taking screenshots.

- Distributing viruses and other malware.

- Formatting drives."

Source: https://searchsecurity.techtarget.com/definition/RAT-remote-...

Re:The Unstoppable Rise of Sci-Hub (2019) by bananamerica on Monday January 13, 2020 @04:18PM (#22038701)
As long as I'm online, I'm sure any well-informed techie could, at any point, show me how my computer usage is insecure. At some point, I must stop securing stuff and start working. I'm just a regular user running Debian with firewall enabled on a desktop machine. That's enough for me. I won't use the internet via email like Richard Stallman.
Re:The Unstoppable Rise of Sci-Hub (2019) by rapnie on Friday January 10, 2020 @12:24PM (#22012681)
"This video contains content from VPRO BROADCAST, who has blocked it in your country on copyright grounds."

The video is unpirated in The Netherlands (VPRO is Dutch too).

Re:The Unstoppable Rise of Sci-Hub (2019) by thulecitizen on Friday January 10, 2020 @01:49PM (#22013858)
Yep. So if you're in the Netherlands, click here: https://www.vpro.nl/programmas/3lab/rats-en-slaves

For some reason they blocked it in the Netherlands. But if you're trying to watch it from outside of the Netherlands, it works great. I tried with a VPN.

Re:The Unstoppable Rise of Sci-Hub (2019) by vor0nwe on Friday January 10, 2020 @06:38PM (#22016782)
You can watch the Dutch version on the VPRO's YouTube channel: https://www.youtube.com/watch?v=BGsw_l0tT10