News for hackers. Stuff that matters.

Xeanort

Re:No, I don’t want to sign up for your newsletter on Wednesday April 26, 2023 @04:39PM (#35719657)
Here for an improved version: https://github.com/t-mart/kill-sticky
At the moment the best is probably Google WaveNet/Neural2, you can try it here: https://cloud.google.com/text-to-speech

You can use the API to read books/articles aloud in real-time, but it is quite expensive after the free trial.

Re:Google Maps now requires WiFi scanning to use navigation on Wednesday February 02, 2022 @08:28AM (#30177189)
It's still possible to use XPrivacyLua (https://github.com/M66B/XPrivacyLua) with passing SafetyNet. It's a cat-and-mouse game, but the community is still ahead.

You can achieve this with latest Magisk (v24+, https://github.com/topjohnwu/Magisk), enabled Zygisk and following modules:

- LSposed Zygisk (https://github.com/LSPosed/LSPosed, fork of Xposed)

- Universal SafetyNet Fix (https://github.com/kdrag0n/safetynet-fix)

- Shamiko [optional, more hiding but needs configuration] (https://github.com/LSPosed/LSPosed.github.io)

Re:BitLocker Lockscreen Bypass on Sunday January 17, 2021 @04:55PM (#25815442)
* Unless you get an Evil Maid attack [0], like adding a physical keylogger to the keyboard bus.

If the device is decrypted but on lock screen (like with TPM) there are more options, the main one is reading memory via DMA [1] on an ExpressCard slot (eg the wifi card). Also swapping out the memory to do a cold boot attack [2] is possible.

[0] https://en.wikipedia.org/wiki/Evil_maid_attack

[1] https://github.com/ufrisk/pcileech

[2] https://en.wikipedia.org/wiki/Cold_boot_attack

Re:Stop Asking Me to “Sign Up” (2014) on Sunday September 27, 2020 @10:16AM (#24606777)
As long as it's the only place where I can have food, yes.
Re:How to Speak (2018) [video] on Monday April 13, 2020 @12:01PM (#22856975)
You can use this extension to change speed of all HTML5 videos: https://github.com/codebicycle/videospeed
Re:Privacy analysis of Tiktok’s app and website on Saturday December 07, 2019 @08:06AM (#21730077)
False: it is possible with just CSS [1][2] to track screen resolution, browser engine, fonts, mouse movements and inputs.

[1] https://github.com/jbtronics/CrookedStyleSheets

[2] https://github.com/maxchehab/CSS-Keylogging

Re:Calculus for Beginners and Artists (2003) on Sunday July 14, 2019 @05:32PM (#20436208)
You want a linear function f(x) such that f(a)=A and f(b)=B given a, b, A, B. A valid f(x) (actually it's the only one) is defined as

             x-b     x-a
    f(x) = A --- + B ---
             a-b     b-a
You can calculate f(a) and f(b) to confirm that it works.

However, I don't find this kind of guide any good for learning math...

You could start sending fake results after they exceed the ~100 queries, they will probably stop exploiting it.
Re:Chris Hughes Says It’s Time to Break Up Facebook on Thursday May 09, 2019 @03:40PM (#19871535)
A good AdBlocker (like uBlock Origin) is usually enough. Also the tracking protection of Firefox is not bad.
Re:Password Managers: Under the Hood of Secrets Management on Thursday February 21, 2019 @04:48AM (#19215744)
If you have an open browser you can easily get HTTP cookies: https://github.com/samyk/poisontap
Re:Every Byte of a TLS Connection Explained and Reproduced on Friday October 12, 2018 @01:36PM (#18203115)
You can usually use Wireshark to find out the meaning of each byte for internet connections (and images), it works great.
You are right that they cannot be added to History, but the code used here changes the back button functionality with

  $(window).on('popstate', function() {
    window.location.href = 'https://example.com';
  });
I just tested it and it works with different domain in latest Firefox.
To make 4. useful, links with the domain different than the open one should not be allowed to be added to History, otherwise you can bypass it with a different domain. And without 4. this new limitation could be bypassed with a redirect (from the same domain).
Re:"Pwned Passwords" V2 With Half a Billion Passwords on Thursday February 22, 2018 @10:30AM (#16438177)
00000000DD7F2A1C68A35673713783CA390C9E93: 89378305686
Re:Apple is close to acquiring Shazam, sources say on Saturday December 09, 2017 @08:47AM (#15885759)
I think they could just get your MAC address if you have your WiFi turned on, without you actually connecting.