Hacker News Reader

ynezzon 33C3 talk on dissecting cellular modems

It's still present even in the latest EC20E firmware EC20EQAR02A09E2G from 2016-09-24:

  ynezz@ntbk:/opt/devel/flexisbc/quectel_ec20/EC20EQAR02A09E2G$ grep QLINUXCMD
  Binary file 9615-cdp-recovery-image-9615-cdp.yaffs2 matches
  Binary file dsp2.mbn matches
  Binary file 9615-cdp-usr-image.usrfs.yaffs2 matches

Edit: formating

ynezzon IKEv1 Information Disclosure Vulnerability in Multiple Cisco Products

Right there, No workaroundS Available.

ynezzon After Netflix crackdown on border-hopping, Canadians ready to return to piracy

They don't use anything sophisticated, it's just IP range blacklist. Hint: try different VPS provider, there's plenty out there...

ynezzon Distribution packages considered insecure

For us, lazy admins, there's cron-apt in Debian based distributions. I believe, that there's something like cron-apt available in more distributions also.

ynezzon From Python to Lua: Why We Switched

> packaging and deployment in python remains such an amazing mess, even after 20 years.

I'm Lua fanboy, but I've to admit, that I'm missing clean deployments and upgrades with virtualenv and pypi available in Pyhton. I've never had any issue so far, am I being just lucky bastard? It has been like that for many years already.

> Ruby has better tooling libraries

On the other hand, I've honest to maintain one Redmine instance (which is written in Ruby) and this is real nightmare for me. Each time I've to upgrade, I've to drink a lot day or two in advance :-)

ynezzon Create an anonymous Signal phone number with Android

I think, that it's not that anonymous.

Weak spots:

1. I wouldn't recommend buying used devices, you don't know what has been done with the device, what's running there, even if you reflash it from scratch. Try to buy somehow (anonymously) device in still original and sealed packaging.

2. One would need to first install modified AOSP/CyanogenMod with patched core libraries/apps/services to return fake/random values for device serial number, WiFi and Bluetooth MAC addresses. Otherwise some of the apps might leak this information over the air, even in clear text form.

3. You need to remove or somehow power off the GSM baseband, otherwise you can still be tracked.

I'm not an expert in this area, so there might be a lot other missing weak spots in this guide.

ynezzon A directory of Netflix's “secret” categories

We've this category in Czech mutation.

ynezzon Knot DNS: A high-performance, authoritative DNS server

Yes, it's http://www.unex.com.tw/product/dnxa-h1