Hacker News Reader

ImpostorKeanuon Hijacking the PS5's RTMP stream

I'd kill for a Bluetooth peripheral workaround. I've a Clicks Power Keyboard that'd be great to use with the PS5.

ImpostorKeanuon Hijacking the PS5's RTMP stream

I vote with my time by not maintaining drivers, setting profiles, and evading anticheat rootkits. Also, M$ is cancer.

ImpostorKeanuon Netbird – Open Source Zero Trust Networking

80/443 is all that's necessary for Headscale as a control server.

UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control and data planes. DERPer is open source from Tailscale.

50443 is for GRPC. I'd not expose that, even if it is protected by authentication (and tested).

ImpostorKeanuon Ask HN: Who is hiring? (November 2025)

Black Hills Information Security | Senior DevOps Engineer | REMOTE

Role focuses on developing and maintaining automation for penetration testing service infrastructure (C2, remote access, phishing, etc.).

ImpostorKeanuon Tesla FSD will drive straight into the path of a oncoming train

Supervisor should supervise.

ImpostorKeanuon Caddy – The Ultimate Server with Automatic HTTPS

I'm absolutely hooked on Caddy. Just developed an AITM phishing tool like EvilGinx2. Challenging project, but Caddy's modularity really brings it all together. Need encrypted landing pages? Just string together a few modules. Need conditional forward proxies to make sure requests originate from geographic regions? Placeholders to the rescue.

Absolute stunner project.

ImpostorKeanuon Attacking UNIX Systems via CUPS

Lateral movement and privilege escalation are total wins, tho.

ImpostorKeanuon Password protect a static HTML page, decrypted in-browser in JavaScript

Reminds me of one of my projects:

https://github.com/blackhillsinfosec/skyhook

Round-trip encrypted file transfer. Uses WASM to decrypt files on the client side.

Aims to bypass IDS.

ImpostorKeanuon Personal VPN services are snake oil

Another interesting point is that VPN providers have access to server-side keys and, obviously, the processes. This just makes the VPN provider the new ISP.

There's no guarantee that VPN traffic isn't being decrypted and inspected

"just trust us, bro. look at our popsec influencer approvals, bro."

ImpostorKeanuon Want to Steal a Tesla? Try Using a Flipper Zero

Agreed. Just clickbait garbage.

ImpostorKeanuon Fewer people are buying electric cars in the US

It's relative to personal preference, economic status, and general logistics. If your living conditions and/or lifestyle support EVs, do the thing if you want. Stick with ICE otherwise.

Although, I do have to say that I think EV benefits can materialize without national adoption.

If the majority of people were to prefer EVs in a densely populated city, for instance, then conditions would likely improve for everyone who lives within the boundaries of said city due reduced emissions. Not to mention minimized road noise! It seems like every other car in Atlanta is a Hellcat and 02:30 is their doughnut hour (kill me plz).

In an ideal world, we could use EVs for daily life and high speed rail for long distance travel. But that'd involve tax dollars and that'd take away from the military industrial complex's bottom line, and we can't have that!

ImpostorKeanuon Download the Newly Unsealed Jeffrey Epstein Documents Here

If this wouldn't have been the most effective "download and open this zip" phishing campaign in history.....

ImpostorKeanuon E621, Pornhub, and others block North Carolina residents

The core of OPs argument is that tracking is bad, not that ID/age verification is bad.

ImpostorKeanuon Skyhook: A tool for obfuscated file transfers

You set an obfuscation chain and then your transfers look all confusing to perimeter controls.