General Discussions and Off Topic

DNS resolvers and queries (over HTTPS) seem to be a bit of a popular topic in the news of late. There are a number of reasons why people should be using DoH (or DoT); privacy, security, prevention against eavesdropping and man-in-the-middle attacks. For those not familar and for those of you interested there are ad-blocking DoH resolvers. Below is a list of ad-blocking resolvers that I am currently aware of. Obviously these will perform better or worse depending on where you are located geographically in the world. My top three for performance are the first three in the list, the others are ranked in no preferential order. https://adblock.mydns.ne…

ThreatNix has uncovered a large scale phishing campaign using GitHub pages and targeted Facebook ads that has affected more than 615000 users. The campaign is targeting Nepal, Egypt, Philippines along with a large number of other countries. threatnix.io/blog/large-scale-phishing-campaign-affecting-615000-users-worldwide/

Came across this a couple of week ago and thought i would share What Is This Project? Windows 10 AME aims at delivering a stable, non-intrusive yet fully functional build of Windows 10 to anyone, who requires the Windows operating system natively. Spyware systems, which are abundant in Windows 10 by default, have not been disabled using group policy, registry entries or various other workarounds – they have been entirely removed and deleted from the system, on an executable-level. This includes Windows Update, and any related services intended to re-patch the system via what is essentially a universal backdoor. Core applications, such as the included Edge…

thehackernews.com/2020/11/apple-lets-some-of-its-big-sur-macos.html

Looks like some of the core-developpers secretly prepared a somewhat hostile (?) fork of radare2, called rizen. https://rizin.re/posts/faq/ Cutter already announced they support it.

Does anyone know if such a tool exists? The fact that the article comes through the wire before Javascript comes and hides it behind paywall or login banners, means there should be some way to undo the nonsense. Of course these sites are moving towards fixing this and not sending more than a teaser over the wire. But to this day most sites are still sending full articles and relying on client side content blocking as silly as that is. I'm just surprised not to have come across such a tool. It's getting harder and harder to use aggregates since half the articles are linking to these types of sites

Hi guys, I have a bad problem.Few days ago I did prepair my USB drive (format with NTFS) and gave it a name.Everything seems to be ok and I did started to backup much files on it.Today I did connected that USB disk and see that the name I gave that USB disk didnt showed up in my explorer (just local disk as name) and also no filesize was shown too.Now I cant access it anymore etc.In the computer management / disks I can see all my hard-drives (also that USB drive) what shows me filesystem raw and also the full filesize with 100% free!Great!!! So what can I do now?Dont wanna loose the datas I did backup already and deleted from my other HDD.Is there are way to re…

Can anyone know what was screen recorder software of Lena151 reverse engineering tutorials? I am looking for that.

Hi, i'm not good on introduce myself, so I'm going to get right to the point, I'm a beginner practicing every day, but most of the time I fail on my task (I find important instructions, but then nothing work), I'm searching a mentor or a group to talk with (and that tell me where I'm wrong), I can't ask single question when i don't know what to ask, hope you understand me ahaha, if someone will anwer I will appreciate it a lot, thank for reading. At the moment this is what I did: - I readed the book Learning Malware Analysis(my final objective is to become a Malware Analyst) - Followed some videos of Lena151 - Practiced with some programs

https://techcrunch.com/2020/10/23/the-riaa-is-coming-for-the-youtube-downloaders/amp/ Does anyone know where to grab the latest master source zip?

arstechnica.com/tech-policy/2020/11/zoom-lied-to-users-about-end-to-end-encryption-for-years-ftc-says \bonus/ It’s a bird! It’s a plane! It’s a BMW-powered electrified wingsuit www.slashgear.com/its-a-bird-its-a-plane-its-a-bmw-powered-electrified-wingsuit-09646309/ Google Says Quantum Computer Beat 10,000-Year Task in Minutes www.bloomberg.com/news/articles/2019-10-23/google-says-quantum-computer-beat-10-000-year-task-in-minutes

bleepingcomputer.com/news/security/new-pay2key-ransomware-encrypts-networks-within-one-hour/ \bonus/ Poor man integration of Ghidra decompiler into Binary Ninja - github.com/Martyx00/ghinja SQLite compiled to JavaScript - sql.js.org SpotifyKeyDumper - gitlab.com/fornication-capitalism/spotifykeydumper

the $70 desktop PC - www.raspberrypi.org/blog/raspberry-pi-400-the-70-desktop-pc/ \/_bonus_\/ All the resources you need for front end development - github.com/developer-resources/frontend-development SDelete GUI - www.ghacks.net/2020/11/02/delete-files-securely-from-the-explorer-context-menu-with-sdelete-gui/ Winamp Windows 10 - www.mywinamp.com/winamp-for-windows-10-download/

https://arstechnica.com/information-technology/2020/11/githubs-source-code-was-leaked-on-github-last-night-sort-of/ Last night, developer and privacy activist Resynth1943 announced that GitHub's source code had been leaked on GitHub itself, in GitHub's own DMCA repository. It's going to take some unpacking to talk about that, but first things first—this isn't as big a deal as it might sound like. GitHub Enterprise Server != GitHub.com Grinding a DMCA-related axe It seems likely that the "unknown individual" Resynth1943 referenced uploaded the leaked source code largely out of anger about the recent Youtube-dl takedown. The code itself was d…

oswalt.dev/2020/11/anatomy-of-a-binary-executable/ \bonus/ SEGA to sell off 85% of arcade business - tweaktown.com/news/76041/sega-to-sell-off-85-of-arcade-business-shares-avoid-big-losses/index.html A pure WebAssembly / JavaScript port of FFmpeg - ffmpegwasm.github.io Florida mosquitoes: 750 million genetically modified insects to be released - bbc.com/news/world-us-canada-53856776

rev.ng/index.html bonus YouTube-dl has received a DMCA - bleepingcomputer.com/news/software/youtube-dl-removed-from-github-after-riaa-dmca-notice/ T-Mobile screwups caused nationwide outage, but FCC isn’t punishing carrier - arstechnica.com/tech-policy/2020/10/fcc-not-punishing-t-mobile-for-outage-that-ajit-pai-called-unacceptable/ The fastest and easiest way to check, copy and edit CSS - cssspider.fresalabs.com/ TwitGrid - github.com/nuket/TwitGrid Ethereum set to become first blockchain to settle $1 trillion in one year - cointelegraph.com/news/ethereum-set-to-become-first-blockchain-to-settle-1-trillion-in-one-year 700 leadi…

https://arstechnica.com/information-technology/2020/10/googles-project-zero-discloses-windows-0day-thats-been-under-active-exploit/ " CVE-2020-117087 stems from a buffer overflow in a part of Windows used for cryptographic functions. Its input/output controllers can be used to pipe data into a part of Windows that allows code execution. Friday's post indicated the flaw is in Windows 7 and Windows 10, but made no reference to other versions. “The Windows Kernel Cryptography Driver (cng.sys) exposes a \Device\CNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures,” Friday’s Project Zero post said. “It constitutes a…

github.com/enkomio/s4tanic0d3

http://gadgetmix.com/nitro-database-containing-emails-passwords-of-77-million-users/2752/

https://arstechnica.com/gadgets/2020/10/in-a-first-researchers-extract-secret-key-used-to-encrypt-intel-cpu-code/ "The genesis for the discovery came three years ago when Goryachy and Ermolov found a critical vulnerability, indexed as Intel SA-00086, that allowed them to execute code of their choice inside the independent core of chips that included a subsystem known as the Intel Management Engine. Intel fixed the bug and released a patch, but because chips can always be rolled back to an earlier firmware version and then exploited, there’s no way to effectively eliminate the vulnerability. Five months ago, the trio was able to use the vulnerability to access “R…

o365blog.com/post/teams-policies/ bonus Samsung receives approval from U.S. government to supply display panels to Huawei - neowin.net/news/samsung-receives-approval-from-us-government-to-supply-display-panels-to-huawei Windows 10X, won't support Win32 applications - business-standard.com/article/technology/windows-10x-may-be-ready-by-december-won-t-support-win32-applications-120102700289_1.html Google employees personal info exposed - bleepingcomputer.com/news/security/google-employees-personal-info-exposed-in-law-firm-data-breach/ SAP slips 21%, biggest fall since 1991 - business-standard.com/article/international/sap-slips-21-biggest-fal…

Hi guys, I would like to ask something about PC memory slots and what I can choose & use with.Somehow its pretty confusing again to get an overview about whats important if I would upgrade some memory.So in my PC I'am using one memory slot with 8 GB.CPU-Z does show me that infos.... ...now I was trying to find some similar memory using the part number on image two and found some same. CT8G4DFS8266 https://www.amazon.com/Crucial-PC4-21300-UDIMM-288-Pin-Memory-dp-B0734V4SSR/dp/B0734V4SSR/ It also has same part number and should be same like I have already in my PC.If I check that amazon page options for this memory then I can choose diffrent memor…

Multi-Account Containers - addons.mozilla.org/en-US/firefox/addon/multi-account-containers/ \ Chrome - Account Containers / chrome.google.com/webstore/detail/multi-session-box-multi-l/hojmmbfmaddjdkkcgbiipkphdcfmkhge chrome.google.com/webstore/detail/switch-multi-account-logi/eegeianojhonjjplfnelapmfbgjbnkfe chrome.google.com/webstore/detail/sessionbox-free-multi-log/megbklhjamjbcafknkgmokldgolkdfig chrome.google.com/webstore/detail/multilogin/ijfgglilaeakmoilplpcjcgjaoleopfi bonus MinimizeToTray (au3 compiled) - github.com/sandwichdoge/MinimizeToTray PayPal users can hold virtual coins, shop using cryptocurrencies - business-standard.com/a…

Hi there, First of all I want to say I have worked for few years playing the role of the reverse engineering in some projects (mainly developing patches to fix bugs and extend features to non-protected binaries). I think I can say I know the very basics of reversing. That being said recently I started developing some interest in malware analysis so I took what I found to be the better approach for someone like me which is reading the book "Practical Malware Analysis". The big frustration I'm facing now is: even knowing the basics of this field and going easily through all of the "Practical Malware Analysis" labs, I find myself completely lost on my first attempt…

artificial-mind.net/blog/2020/10/10/return-type-overloading bonus Android 'ransomware' - zdnet.com/article/microsoft-warns-of-android-ransomware-that-activates-when-you-press-the-home-button/ BiglyBT to Support the BitTorrent v2 spec - torrentfreak.com/biglybt-is-the-first-torrent-client-to-support-the-bittorrent-v2-spec-201011/ Shrink the Windows Taskbar - ghacks.net/2020/10/07/shrink-the-windows-taskbar-modify-the-rgb-levels-hide-the-start-and-show-desktop-buttons-with-taskbarcustomizer/