HNHacker News
TopNewBestAskShowJobs

JackGreyhat

140 karma · joined May 20, 2021

Security by Design.
submissionscomments
JackGreyhat··on ICMP, Ping, and Traceroute – What I wish I was taught (2020)
I still keep it blocked for his reason: https://socfortress.medium.com/data-exfiltration-using-icmp-...
JackGreyhat··on Solana stablecoin violently de-pegs
Not in the EU. Banks tend to not allow you to do that
JackGreyhat··on Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
I'm trying to grasp what you are explaining here. Is this another fingerprinting method?
JackGreyhat··on GrapheneOS: The private and secure mobile OS
Tasker...
JackGreyhat··on LG 28-inch 16:18 DualUp Monitor
Do you like your monitor? I've been wanting to buy it, but I've been reading mixed things about text clarity or sharpness. What's your experience?
JackGreyhat··on LG 28-inch 16:18 DualUp Monitor
I've been wanting to buy a 49inch curved to avoid neck pain...do you recommend against it? I wanted to buy this one: https://www.samsung.com/ca/monitors/gaming/odyssey-neo-g9-g9...
JackGreyhat··on Open DNS resolvers, from bad to worse
If im not mistaken, yt serves ads from its first party domain, making it hard to block from a dns perspective. Blockers such as uBlock do it by blocking elements or code, not dns lookups.
JackGreyhat··on Ask HN: What stops a random USB device from rooting Windows?
Well, the speed. You plug the usb in, unplug it 5 seconds later, and you walk away from a backdoored system talking to your C2 server.
JackGreyhat··on Ask HN: What stops a random USB device from rooting Windows?
The paid version of Windows Defender can do it: https://docs.microsoft.com/en-us/microsoft-365/security/defe...
JackGreyhat··on Ask HN: What stops a random USB device from rooting Windows?
It should be common practise to run your every day computer life from a "normal", non-privileged user account. This way, automating UAC confirmations are impossible, given that alternative credentials have to be entered for the UAC to be authorized. Yet, you'll find that many people do not do this.
JackGreyhat··on Tails 5.0~beta1: Call for testing
Can IME decrypt network traffic if tails runs inside a VM?
JackGreyhat··on Ask HN: Do you manage your family's digital safety?
You are assuming that a person who is cautious about privacy, uses facebook. Unlikely. However, I have been in that alley. I renamed my facebook account yearly, until it got blocked indeed. But then again, there are some great ID .psd templates out there:P solved it immediately.
JackGreyhat··on Jokes that have made people laugh for thousands of years
It suggests they have the same father
JackGreyhat··on My essential Firefox fixes in 2022
Try sidebery. I used to use treestyletab, but sidebery feels more modern. Its also easier to tweak with css :)
JackGreyhat··on uBlock Origin 1.41
I think youtube serves ads from its own domain, as a first party. This makes it harder for a pihole to block. Ublock does it differently, looking at elements etc...a pihole just tries to block dns requests to ad domains, not looking at code that your browser is trying to load.
JackGreyhat··on Ask HN: What is your spiritual practice?
Name one war, that has no religion involved.
JackGreyhat··on Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide
Confirmed. Its the "log4j2.formatMsgNoLookups" property. Source: https://logging.apache.org/log4j/2.x/security.html
JackGreyhat··on Termination of LG Mobile Developer website service
OnePlus does so too...
JackGreyhat··on Become a Signal Sustainer
Check signal's homepage. At the bottom, it says "Signal, a 501c3 nonprofit". Is that what you mean?
JackGreyhat··on We are seeing continued DDoS attacks against our infrastructure
My educated guess: The most common way to get infected is via email.
JackGreyhat··on OpenMW: Open-source reimplementation of TES3 Morrowind
And it had a sort of "live chat" function. You could see your conversation partner's keystrokes in real-time, including typos and corrections. This has, as far as I know, never been introduced in other chat clients...
JackGreyhat··on Juniper breach mystery starts to clear with new details on hackers and U.S. role
Correct. Same as Fortinet: https://betanews.com/2016/01/12/fortinet-firewalls-feature-h...
JackGreyhat··on WhatsApp lead and other tech experts fire back at Apple’s Child Safety plan
Speculation as in "whats technically possible".
JackGreyhat··on WhatsApp lead and other tech experts fire back at Apple’s Child Safety plan
Does an AV report its findings to local govs?
JackGreyhat··on WhatsApp lead and other tech experts fire back at Apple’s Child Safety plan
Same here. Doubles battery life too...
JackGreyhat··on WhatsApp lead and other tech experts fire back at Apple’s Child Safety plan
How?
JackGreyhat··on Apple's plan to “think different” about encryption opens a backdoor to your life
Actaully, I don't think it will remove a barrier for iCloud E2E encryption at all. On the contrary. All it will remove, is the barrier for what we find acceptible for companoes like Apple to implement. I think Apple made a very intrusive move, one that we will come to accept over time. After that, a next move follows...and so on. That's the barrier being moved. A point will be reached when E2E encryption is nothing more than a hoax, a non-feature with no added value. A mirage of what it is supposed to be. All of these things are implemented under the Child Protection flag. Sure, we need child protection, we need it badly, but the collateral is huge and quite handy too for most 3 letter agencies. I don't have the solution. The other day my 3 year old son had a rash, I took pictures of it over the course of a few days. A nude little boy, pictures from multiple angles. I showed my dermatologist. What will happen in the future? Will my iPhone "flag" me as a potential child predator? Can I tell it I'm a worried dad? Do I even have to be thinking about these things?
JackGreyhat··on Apple's plan to “think different” about encryption opens a backdoor to your life
Nearly the same as MagicEarth...I use it all the time.
JackGreyhat··on About the security content of iOS 14.7.1 and iPadOS 14.7.1
Thats because they bought a locked version, such as most carrier models.
JackGreyhat··on About the security content of iOS 14.7.1 and iPadOS 14.7.1
> I understand that around the 90s owning anything with an OS also implied the ability to mess with the box of bolts and circuits that run the OS but that’s no longer the case. At least not when it comes to phones.

Incorrect. It is still the case with nearly all Android phones. You can install any OS version, gain full permissions, mess with kernels, modules, frameworks, recoveries, ...

← PreviousPage 2 of 3Next →