News for hackers. Stuff that matters.

klaushardt

If you copy the url at the top and resolve it, it downloads the bin. But i think this may be a false alarm and the botnet just spread his malware over github.
Edit4: Sorry, False Alarm: https://any.run/malware-trends/amadey/

    IP addresses
    185.199.108.133
    Hostname: cdn-185-199-111-133.github.com.
https://dnschecker.org/reverse-dns.php?query=185.199.111.133

---

Virus Total: Activity related to AMADEY - according to source Cluster25 - 6 months ago This DOMAIN is used by AMADEY. Amadey is a botnet agent that appeared around October 2018 sold on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server. It can also load other payloads to the victims' devices.

macOS download url after downloading with librewolf and rightclicking "copy downoload url": https://www.virustotal.com/gui/url/f1e08a34d17fd85cd8896ba86...

Edit: i dont get this when copying direct links from the readme.md. Its just when i click them and copy the url it used to download.

Edit2: i get this too when i download the x64 exe and copy the download link from the librewolf (firefox fork) download manager https://www.virustotal.com/gui/url-analysis/u-6a55e124c22f9b...

Edit3: maybe false alarm and the botnet used the github url https://release-assets.githubusercontent.com/ to spread malware?

Re:Running Out of Disk Space in Production on Tuesday April 07, 2026 @02:05PM (#47679067)
This is my snippet i used alot. In doubt when even rm wont work just reboot.

Disc Space Insurance File

    fallocate -l 8G /tmp/DELETE_IF_OUT_OF_SPACE.img
https://gist.github.com/klaushardt/9a5f6b0b078d28a23fd968f75...
Would be nice to have a flag to customize the URL displayed for Docker containers. I connect to my host via Tailscale, but I can’t open links with localhost. It would be helpful to have a parameter that allows us to choose a network device or specify an IP address to display.

    3000    wud (getwud/wud:latest)                            wud          getwud/wud:latest                       3000    http://localhost:3000
    3001    dockhand (fnsys/dockhand:latest)                   dockhand     fnsys/dockhand:latest                   3000    http://localhost:3001
Re:iTerm2 critical security release on Thursday January 02, 2025 @09:06PM (#42581429)
Could you post your config for inspiration? I dont like starting with a blank canvas.
Re: on Sunday September 08, 2024 @04:30PM (#41482957)
SSH Socks over 443 could be a solution.
So for example Shibboleth with privacyIDEA and enabled webAuthn and 2FA for AnyConnect or some other VPN?
I bet it will happen that some apps i now use, which are in the regualar app store, will be pulled in favor of a own app store which has more tracking and maybe even cost money. So it will be a downgrade if now working apps move to an ad and tracking app store which are not privacy sensitive like iAds.
HealthFit can export Workouts as .gpx or .fit files.
I just dump my default changes here. Maybe somebody finds something usefull for themself. Added the command from this thread too. :) Edit: Looks like i already did edit this before since mine was already at 8 and 12. Added the original source like its linked above.

# Defaults and other Stuff

    sudo scutil --set HostName nix
    
    # https://macos-defaults.com/
    defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode -bool true
    defaults write NSGlobalDomain PMPrintingExpandedStateForPrint -bool true
    defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
    defaults write com.apple.dock "autohide-delay" -float "0" && killall Dock
    defaults write com.apple.dock "autohide-time-modifier" -float "0.3" && killall Dock
    defaults write NSGlobalDomain ApplePressAndHoldEnabled -bool false
    defaults write NSGlobalDomain AppleShowScrollBars -string "Always"; killall Finder
    defaults write com.apple.screencapture "disable-shadow" -bool "true"
    defaults write com.apple.dock "tilesize" -int "38" && killall Dock
    defaults write com.apple.dock "mineffect" -string "scale" && killall Dock
    defaults write com.apple.finder "ShowExternalHardDrivesOnDesktop" -bool "false" && killall Finder
    defaults write com.apple.finder "ShowRemovableMediaOnDesktop" -bool "false" && killall Finder
    defaults write com.apple.dock "mru-spaces" -bool "false" && killall Dock
    defaults write com.apple.TimeMachine "DoNotOfferNewDisksForBackup" -bool "true"
    defaults write com.apple.dock "enable-spring-load-actions-on-all-items" -bool "true" && killall Dock
    defaults write com.apple.Music "userWantsPlaybackNotifications" -bool "false" && killall Music
    
    # https://www.jessesquires.com/blog/2023/12/16/macbook-notch-and-menu-bar-fixes/
    # https://www.reddit.com/r/MacOS/comments/16lpfg5/hidden_preference_to_alter_the_menubar_spacing/
    # https://flaky.build/native-fix-for-applications-hiding-under-the-macbook-pro-notch
    # https://news.ycombinator.com/item?id=39343919
    defaults -currentHost write -globalDomain NSStatusItemSelectionPadding -int 8
    defaults -currentHost write -globalDomain NSStatusItemSpacing -int 12

    # https://www.reddit.com/r/macgaming/comments/16ra8di/metal_hud_enabledisable_shortcut/
    # https://www.icloud.com/shortcuts/1271048e407543d391415934cad5edcd
    defaults write -g MetalForceHudEnabled -bool YES
    /bin/launchctl setenv MTL_HUD_ENABLED 1
Re:Fail2ban Sucks on Tuesday January 02, 2024 @02:10PM (#38845652)
You can rsync, scp and what not using your .ssh/config alias.

    scp myfile.txt myhost.tld:~/foo
Re:Fail2ban Sucks on Monday January 01, 2024 @06:12PM (#38836194)
* changing your SSH port means that you'll have to do a bunch of fuckery to get basic functionality working. you will very likely waste hours of your life. you will have to google "rsync ssh non standard port" every time you want to use rsync. you will have to remember scp flags. this is also bad. probably worse.

---

I dont need to remember non standard ports if i just use my .ssh/config.

    Host myhost.tld
      Hostname 127.0.0.1
      Port 333
      User MyUser
      IdentityFile ~/.ssh/myhost.tld
Re:Apple's iCloud+ “VPN” on Wednesday June 16, 2021 @12:57PM (#27530741)
If you tap the wifi button in your controll center it just turns it off for 24 hours or when you switch locations. If you turn it off in the Settings App then it stays off.
Re:Threema – Secure and Private Messenger on Thursday January 21, 2021 @11:35AM (#25860735)
The free trial is just asking the App Store for a refund. I did it twice so far when i bought an App wich sounded good but then didnt do what i wanted. I think you have 48 hours time for this.

iOS: https://support.apple.com/de-de/HT204084

Android: https://support.google.com/googleplay/answer/7205930

Re:macOS unable to open any non-Apple application on Friday November 13, 2020 @03:07AM (#25080134)
I got a 2019 Dell Precision 5540 with an UHD OLED, 3.840 x 2.160 and have 100% DCI-P3. And i think many other OLED Screens have it too.

When i configured the Laptop i could choose from these options:

FHD IGZO4, 1.920 x 1.080, 100% sRGB

UHD IGZO4, 3.840 x 2.160, 100% AdobeRGB Touch

UHD OLED, 3.840 x 2.160, 100% DCI-P3

Jut a Headsup, Chrome blocked the download and a virustotal report look like this: https://www.virustotal.com/gui/file/2e78fed158e9e6857db7bfc6...

6 engines detected this file

Do what you want with this information, cloud be false positive, cloud be something else idk.

Re:Volk Fi: Distributed network smartphone on Wednesday March 20, 2019 @04:34AM (#19440100)
In Germany there is exactly this for free. https://freifunk.net/en/

Altough its far away from good coverage you get free wifi here and there. Especially Coffee Shops and in Big Citys.