Live data from Hacker News

Viewing profile — nullpt_rs

nullpt_rs

HN member
Joined
Tue, Oct 12, 2021, 9:54 PM UTC
HN karma
184
Public activity
25 items

About nullpt_rs

blog: nullpt.rs

Recent public activity

  1. story
  2. comment
    Comment #45510354

    I actually wrote a separate blog post about this! Changing the debugger keyword :) see: https://nullpt.rs/evading-anti-debugging-techniques

  3. comment
    Comment #45509852

    D'oh! You are correct :-) Good catch and thanks for teaching me something!

  4. comment
    Comment #45508709

    Someone mentioned this as well in another comment. Turns out most of this could’ve been done as an extension after all :-) edit: actually, wouldn’t you still need to override the g…

  5. comment
    Comment #45507104

    Thanks for sharing some examples! Someone shared a similar project in the other thread. I didn’t realize this at the time of writing haha. FWIW I still think modifying the browser …

  6. comment
    Comment #45506292

    Ooh nice, I haven’t seen this project! I actually tried attempting this as an extension at first but wasn’t able to override page window functions. I’m curious to know how they acc…

  7. story
  8. story
  9. comment
    Comment #44424957

    Sadly, spoofing GPU vendor & renderer can be an even larger flag since they can hash the resulting image of the canvas to compare it with a database of collected fingerprints[0] [0…

  10. comment
    Comment #44333276

    "breaking" might've been a strong verb here. updated post title to better reflect the intentions of the post :)

  11. comment
    Comment #43329451

    Most anti-bots will send other browser characteristics as well and can detect if one is lying about which browser, and even which version they're using based on which APIs and prop…

  12. comment
    Comment #42279954

    yep, but it can get tricky. some projects worth checking out: https://github.com/refraction-networking/utls https://github.com/berstend/puppeteer-extra

  13. comment
    Comment #42279850

    I (veritas) run the blog but accept contributions from anyone. The blog itself is open source :-) https://github.com/nullpt-rs/blog

  14. comment
    Comment #39930467

    I used to frequent a site titled "The Best 404 Page Ever" that played a random flash file on refresh. Seems like someone's recreated it here https://thebest404pageeverredux.com/

  15. comment
    Comment #39534555

    They have a similar feature labelled "Friendly Bots" https://blog.cloudflare.com/friendly-bots/

  16. comment
    Comment #37315713

    I can sorta share this sentiment. Luckily (for us) tech seems to be moving in the direction of embedding Chromium everywhere which always leads to some fun exploits :)

  17. comment
    Comment #37315692

    Thank you! Hope to publish more like it soon :)

  18. comment
    Comment #36964412

    I knew I forgot to mention something :) I do love this option but I wasn't able to get it to work with this obfuscation technique either.

  19. comment
    Comment #36854469

    Definitely considering switching over my blog to Astro since I write my posts in MDX and using this plugin to avoid doing this work on the client at all (currently use highlight.js…

  20. comment
    Comment #34310916

    Nice work. I was going to basically cover the same topics in my second part but it looks like you beat me to it. If you'd like to collaborate with me on the next portion feel free …

  21. comment
    Comment #34292244

    Love these suggestions. Definitely makes dynamic analysis heaps easier. A lot of our blog posts tend to focus on static analysis but it may be worth mentioning these techniques goi…

  22. comment
    Comment #34292103

    This isn't the first time I've gotten this comment so I'm looking to change the font stack. Any suggestions? :)

  23. comment
    Comment #34122467

    Thanks for the PR! You should now be able to access the feeds :) https://www.nullpt.rs/feed.atom https://www.nullpt.rs/feed.rss https://www.nullpt.rs/feed.json

  24. comment
  25. comment
    Comment #34119971

    Author of the post here, if you have an older version of the script you're able to post or send over I'd love to take a look at it and see what changes they make and potentially au…