HNHacker News
TopNewBestAskShowJobs

zhovner

531 karma · joined November 20, 2011

pavel@zhovner.com

[ my public key: https://keybase.io/zhovner; my proof: https://keybase.io/zhovner/sigs/npnGDHrmbrbEr5NAzdgDnicstw0GsYcHBCdTJIbku1U ]

submissionscomments
zhovner··on Laptop security: Apple vs. [Insert name here]
The interesting part in Apple's FileVault (plus UEFI password) is a Guest access called Safari Only Mode. This mode starts special macOS distro from unencrypted boot partition and allows to run only Safari.app (also terminal.app) The main idea is that thief log in as Guest, connects to WiFi and you can locate your device in Find My Mac. But this mode just allows you to trace device via IP geolocation since macbook never had GPS module like iphones do, so this geolocation is not accurate enough and not useful. You will just see the city or district located from ISP. The real useful information will be WiFi AP MAC addresses (BSSID) located nearby the stollen macbook. Having this information you can quite accurate locate your stolen device and return it!

But I can't add my custom shell script into Safari Mode because of macOS SIP (system integrity protection) that I don't want to disable. Also every major update overwrites changes on boot partition.

I would appreciate for any help with this project. My goal is to build some kind of computrace for macbooks that will be much useful that current Find My Mac.

zhovner··on How Skype fixes security vulnerabilities
Wow! Looks pretty the same to remote mic activation on desktop that i found few years ago https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=h...

Skype for Android can receive a call when skype app in backgroud?

zhovner··on TOX – A New Kind of Instant Messaging
Still no contacts sync?
zhovner··on IKEv2 in iOS 9 and OS X El Capitan
Latest strongSwan from brew repository works good on OS X. But most painful thing is connection restart after changing WiFi network. I need to reset it manually in most cases. Even low Dead Peer Detection (dpd) timeouts didn't help.

Here is this part from my ipsec.conf:

  # Always up
  dpdaction = restart
  dpddelay = 5s 
  inactivity = 10s
  keyingtries=%forever
  auto=start
 
Any suggestions?
zhovner··on Yubikey NEO OpenPGP private key operations can be accessed without PIN
My key is 1.0.8 firmware

    /usr/local/MacGPG2/bin/gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye
    D[0000]  01 00 08 90 00                                     .....           
    OK
Sadly.
zhovner··on Nomad SMS – Receive a local SMS anywhere in the world
You can get the same with Google Voice.
zhovner··on [dead]
What? Why this on top?
zhovner··on Ask HN: My VPS got hacked and now I'm facing a massive bill. What can I do?
To prevent such incidents Linode have alerts of traffic/cpu/disk thresholds. For example you can configure notification if your bandwidth utilization more than N Mbit/s in duration more than N minutes. Very useful for DDoS prevention.
zhovner··on Mosh: A replacement for SSH
Scrolling still not working?
zhovner··on How to randomize your MAC address on OS X
First you need to disassociate wireless card using Apple80211.framework:

  /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport -z
Then you can change MAC-address:

  ifconfig en0 ether aa:aa:aa:aa:aa:aa
zhovner··on Ask HN: How bad is it to use a self-signed SSL certificate?
Try this https://translate.google.com/translate?sl=ru&tl=en&js=y&prev...
zhovner··on DNSSEC surpasses 50% of root domains
Very strange, because this feature was removed from Chrome just after DANE RFC was published and all work is done. It is evident that DANE will kill SSL certification business. The development suspension may result from pressure coming from CA's.
zhovner··on MyOpenID will be turned off on February 1, 2014
Yes, if you have google plus profile on this account. Profile ID now means google plus ID.
zhovner··on DoS exploit crashes iOS/OSX devices using WebKit
Did you test SSID?
zhovner··on DoS exploit for WebKit on Iphone/MacOS
Here is exploit string https://zhovner.com/tmp/killchrome.html
zhovner··on Adam Langley's Pond: Secure Async Messaging
I can not forgive Adam he removed the DANE support from Chrome in spite of fact that he was the author of the draft standard http://datatracker.ietf.org/wg/dane/
zhovner··on Ask HN: Movies for Hackers?
Waking Life (2001)
zhovner··on Ask HN: Movies for Hackers?
True.
zhovner··on BitTorrent Everything?
https://freenetproject.org/
zhovner··on Skype IP Lookup
You must put server.py in ./skypekit-sdk_runtime-3.7.0/examples/python/tutorial/ and run out there.

Also you need edit keypair.py

Please create all issues on github.

zhovner··on Skype IP Lookup
Lol, skype banned my account.
zhovner··on Skype IP Lookup
No, after disconnect it still show IP few hours
zhovner··on Skype IP Lookup
If you not see result after 20 sec. refresh page and request again.
zhovner··on Skype IP Lookup
No this not possible. Only skypename -> IP, and only email -> skypename. You can parse whole skype network and store all IP's if you can handle so many data.
zhovner··on Skype IP Lookup
Search by email also work.
zhovner··on Skype IP Lookup
Ok, so I'm develop this.

It based on deobfuscated Skypekit runtime that write clear debug log.

Wrapper just make vcard refresh from p2p skype network and then parse debug log.

Here is the sources of python wrapper https://github.com/zhovner/Skype-iplookup/

zhovner··on Skype IP Lookup
Also if run several clients it shows them all.
zhovner··on Skype IP Lookup
Skype announce both your IP's into network.
zhovner··on Skype IP Lookup
It is work for you?
zhovner··on [dead]
Only with Verizon plans.
← PreviousPage 2 of 2