Recent submissions

Comment · 1 month ago
I'd kill for a Bluetooth peripheral workaround. I've a Clicks Power Keyboard that'd be great to use with the PS5.
Comment · 1 month ago
I vote with my time by not maintaining drivers, setting profiles, and evading anticheat rootkits. Also, M$ is cancer.
Comment · 9 months ago
80/443 is all that's necessary for Headscale as a control server.

UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control and data planes. DERPer is open source from Tailscale.

50443 is for GRPC. I'd not expose that, even if it is protected by authentication (and tested).

Comment · 1 year ago
Black Hills Information Security | Senior DevOps Engineer | REMOTE

Role focuses on developing and maintaining automation for penetration testing service infrastructure (C2, remote access, phishing, etc.).

Comment · 1 year ago
Supervisor should supervise.
Comment · 1 year ago
I'm absolutely hooked on Caddy. Just developed an AITM phishing tool like EvilGinx2. Challenging project, but Caddy's modularity really brings it all together. Need encrypted landing pages? Just string together a few modules. Need conditional forward proxies to make sure requests originate from geographic regions? Placeholders to the rescue.

Absolute stunner project.

Comment · 2 years ago
Lateral movement and privilege escalation are total wins, tho.
Comment · 2 years ago
Reminds me of one of my projects:

https://github.com/blackhillsinfosec/skyhook

Round-trip encrypted file transfer. Uses WASM to decrypt files on the client side.

Aims to bypass IDS.

Comment · 2 years ago
Another interesting point is that VPN providers have access to server-side keys and, obviously, the processes. This just makes the VPN provider the new ISP.

There's no guarantee that VPN traffic isn't being decrypted and inspected

"just trust us, bro. look at our popsec influencer approvals, bro."

Comment · 2 years ago
Agreed. Just clickbait garbage.
Comment · 2 years ago
It's relative to personal preference, economic status, and general logistics. If your living conditions and/or lifestyle support EVs, do the thing if you want. Stick with ICE otherwise.

Although, I do have to say that I think EV benefits can materialize without national adoption.

If the majority of people were to prefer EVs in a densely populated city, for instance, then conditions would likely improve for everyone who lives within the boundaries of said city due reduced emissions. Not to mention minimized road noise! It seems like every other car in Atlanta is a Hellcat and 02:30 is their doughnut hour (kill me plz).

In an ideal world, we could use EVs for daily life and high speed rail for long distance travel. But that'd involve tax dollars and that'd take away from the military industrial complex's bottom line, and we can't have that!

Comment · 2 years ago
If this wouldn't have been the most effective "download and open this zip" phishing campaign in history.....
Comment · 2 years ago
The core of OPs argument is that tracking is bad, not that ID/age verification is bad.
Comment · 3 years ago
You set an obfuscation chain and then your transfers look all confusing to perimeter controls.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton