HNHacker News
TopNewBestAskShowJobs

Xeanort

245 karma · joined April 8, 2016

data:text/html;base64,PHNjcmlwdD5hbGVydCgnQWxsIHlvdXIgZGF0YSBhcmUgYmVsb25nIHRvIHVzXG4nK2RvY3VtZW50LmNvb2tpZSk8L3NjcmlwdD4=

Email: ax2m25nrv at relay.firefox.com

submissionscomments
Xeanort··on I don’t want to sign up for your newsletter (2018)
Here for an improved version: https://github.com/t-mart/kill-sticky
Xeanort··on VALL-E: Neural codec language models are zero-shot text to speech synthesizers
At the moment the best is probably Google WaveNet/Neural2, you can try it here: https://cloud.google.com/text-to-speech

You can use the API to read books/articles aloud in real-time, but it is quite expensive after the free trial.

Xeanort··on Google Maps now requires WiFi scanning to use navigation
It's still possible to use XPrivacyLua (https://github.com/M66B/XPrivacyLua) with passing SafetyNet. It's a cat-and-mouse game, but the community is still ahead.

You can achieve this with latest Magisk (v24+, https://github.com/topjohnwu/Magisk), enabled Zygisk and following modules:

- LSposed Zygisk (https://github.com/LSPosed/LSPosed, fork of Xposed)

- Universal SafetyNet Fix (https://github.com/kdrag0n/safetynet-fix)

- Shamiko [optional, more hiding but needs configuration] (https://github.com/LSPosed/LSPosed.github.io)

Xeanort··on BitLocker Lockscreen Bypass
* Unless you get an Evil Maid attack [0], like adding a physical keylogger to the keyboard bus.

If the device is decrypted but on lock screen (like with TPM) there are more options, the main one is reading memory via DMA [1] on an ExpressCard slot (eg the wifi card). Also swapping out the memory to do a cold boot attack [2] is possible.

[0] https://en.wikipedia.org/wiki/Evil_maid_attack

[1] https://github.com/ufrisk/pcileech

[2] https://en.wikipedia.org/wiki/Cold_boot_attack

Xeanort··on Stop Asking Me to “Sign Up” (2014)
As long as it's the only place where I can have food, yes.
Xeanort··on How to Speak (2018) [video]
You can use this extension to change speed of all HTML5 videos: https://github.com/codebicycle/videospeed
Xeanort··on Privacy analysis of Tiktok’s app and website
False: it is possible with just CSS [1][2] to track screen resolution, browser engine, fonts, mouse movements and inputs.

[1] https://github.com/jbtronics/CrookedStyleSheets

[2] https://github.com/maxchehab/CSS-Keylogging

Xeanort··on Calculus for Beginners and Artists (2003)
You want a linear function f(x) such that f(a)=A and f(b)=B given a, b, A, B. A valid f(x) (actually it's the only one) is defined as

             x-b     x-a
    f(x) = A --- + B ---
             a-b     b-a
You can calculate f(a) and f(b) to confirm that it works.

However, I don't find this kind of guide any good for learning math...

Xeanort··on Google Maps is filled with false business addresses pretending to be nearby
You could start sending fake results after they exceed the ~100 queries, they will probably stop exploiting it.
Xeanort··on Chris Hughes Says It’s Time to Break Up Facebook
A good AdBlocker (like uBlock Origin) is usually enough. Also the tracking protection of Firefox is not bad.
Xeanort··on Password Managers: Under the Hood of Secrets Management
If you have an open browser you can easily get HTTP cookies: https://github.com/samyk/poisontap
Xeanort··on Every Byte of a TLS Connection Explained and Reproduced
You can usually use Wireshark to find out the meaning of each byte for internet connections (and images), it works great.
Xeanort··on How I recorded user behaviour on my competitor’s websites
You are right that they cannot be added to History, but the code used here changes the back button functionality with

  $(window).on('popstate', function() {
    window.location.href = 'https://example.com';
  });
I just tested it and it works with different domain in latest Firefox.
Xeanort··on How I recorded user behaviour on my competitor’s websites
To make 4. useful, links with the domain different than the open one should not be allowed to be added to History, otherwise you can bypass it with a different domain. And without 4. this new limitation could be bypassed with a redirect (from the same domain).
Xeanort··on "Pwned Passwords" V2 With Half a Billion Passwords
00000000DD7F2A1C68A35673713783CA390C9E93: 89378305686
Xeanort··on Apple is close to acquiring Shazam, sources say
I think they could just get your MAC address if you have your WiFi turned on, without you actually connecting.