News for hackers. Stuff that matters.

ImpostorKeanu

Re:Hijacking the PS5's RTMP Stream on Monday September 28, 2026 @03:14PM (#49882998)
I'd kill for a Bluetooth peripheral workaround. I've a Clicks Power Keyboard that'd be great to use with the PS5.
Re:Hijacking the PS5's RTMP Stream on Monday September 28, 2026 @03:12PM (#49882965)
I vote with my time by not maintaining drivers, setting profiles, and evading anticheat rootkits. Also, M$ is cancer.
Re:Netbird – Open Source Zero Trust Networking on Sunday February 01, 2026 @06:14PM (#46850364)
80/443 is all that's necessary for Headscale as a control server.

UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control and data planes. DERPer is open source from Tailscale.

50443 is for GRPC. I'd not expose that, even if it is protected by authentication (and tested).

Re:Ask HN: Who is hiring? (November 2025) on Monday November 03, 2025 @05:20PM (#45805149)
Black Hills Information Security | Senior DevOps Engineer | REMOTE

Role focuses on developing and maintaining automation for penetration testing service infrastructure (C2, remote access, phishing, etc.).

Supervisor should supervise.
Re:Caddy – The Ultimate Server with Automatic HTTPS on Monday February 17, 2025 @07:27PM (#43084639)
I'm absolutely hooked on Caddy. Just developed an AITM phishing tool like EvilGinx2. Challenging project, but Caddy's modularity really brings it all together. Need encrypted landing pages? Just string together a few modules. Need conditional forward proxies to make sure requests originate from geographic regions? Placeholders to the rescue.

Absolute stunner project.

Re:Attacking Unix Systems via Cups, Part I on Thursday September 26, 2024 @08:02PM (#41664902)
Lateral movement and privilege escalation are total wins, tho.
Reminds me of one of my projects:

https://github.com/blackhillsinfosec/skyhook

Round-trip encrypted file transfer. Uses WASM to decrypt files on the client side.

Aims to bypass IDS.

Re:Personal VPN Services are Snake-Oil on Monday April 15, 2024 @05:35AM (#40038398)
Another interesting point is that VPN providers have access to server-side keys and, obviously, the processes. This just makes the VPN provider the new ISP.

There's no guarantee that VPN traffic isn't being decrypted and inspected

"just trust us, bro. look at our popsec influencer approvals, bro."

Re:Want to Steal a Tesla? Try Using a Flipper Zero on Thursday March 07, 2024 @05:59PM (#39635686)
Agreed. Just clickbait garbage.
Re:What Happened to EVs? on Thursday January 04, 2024 @01:55PM (#38870796)
It's relative to personal preference, economic status, and general logistics. If your living conditions and/or lifestyle support EVs, do the thing if you want. Stick with ICE otherwise.

Although, I do have to say that I think EV benefits can materialize without national adoption.

If the majority of people were to prefer EVs in a densely populated city, for instance, then conditions would likely improve for everyone who lives within the boundaries of said city due reduced emissions. Not to mention minimized road noise! It seems like every other car in Atlanta is a Hellcat and 02:30 is their doughnut hour (kill me plz).

In an ideal world, we could use EVs for daily life and high speed rail for long distance travel. But that'd involve tax dollars and that'd take away from the military industrial complex's bottom line, and we can't have that!

Re:Download the Newly Unsealed Jeffrey Epstein Documents Here on Wednesday January 03, 2024 @09:18PM (#38862301)
If this wouldn't have been the most effective "download and open this zip" phishing campaign in history.....
Re:E621, Pornhub, and others block North Carolina residents on Tuesday January 02, 2024 @12:09PM (#38843990)
The core of OPs argument is that tracking is bad, not that ID/age verification is bad.
Re:Skyhook: A tool for obfuscated file transfers on Tuesday May 23, 2023 @12:38PM (#36046806)
You set an obfuscation chain and then your transfers look all confusing to perimeter controls.