Viewing profile — paddlesteamer

Years ago, I created a very basic HTTP proxy using Google Cloud. The idea relies on Google Cloud wouldn't be blocked because the industry in that country probably also needs Google…

> In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. These files are never used for anything inside Signal and n…

I wish there could be a way to see which root site set those cookies. For example I wish we could see twtracker.com supercookies are set in some iframe in twitter.com.

With this, devices that use NRF52 chips are now open to investigators. I think we'll learn of more vulnerabilities of BLE devices whose shitty implementations are hidden in those S…

Other than Signal, I also recommend Threema. It doesn't rely on mobile numbers, possible to configure to run on your private server, etc. It's just not free (as in beer). Also, it'…

I like how it ignores WEP. Don't use WEP.

Since the Antifa will be designated as a terrorist organization[0], I don't suggest you guys to trust github pages, google photos, drive, etc. Tomorrow there may be a subpoena for …

I hate bloated OSs and unfortunately Mac OS is one of them. I know how everyone wants everything to work out of the box and I know it's very natural to want so but I cringe if I fi…

Actually , I'm pleased ebay is doing this. It wasn't a new issue but now ebay doing it, it took a lot of attention. It's like disclosing a security issue in WebSocket protocol. Now…

Very nice! I only have one question: I see there are pull-up resistors connected to push buttons. Aren't there built-in pullups on RPi GPIOs? Maybe you can enable them and use fewe…

Every time I ran across these boards, I always think of "Apollo Guidance Computer"[1] which is used on Apollo spacecrafts. They have 16KB ram 2000MHz cpu freq so I feel like I can …

There is even a hearing aid using teensy board and the modified version of teensy audio library[1]! [1] https://shop.tympan.org/

Teensy audio adapter has SGTL5000[1] running on the board and in my opinion it is highly customizable. It provides up to 96KHz sample rate (44.1 KHz with teensy's clock I guess) wi…

This is very interesting. It's hard to find information about underlying technology but according to this link[1]: "Payments via the e-RMB could be contactless and transactions can…

I also like this approach: https://www.wired.com/2017/02/malware-sends-stolen-data-dron...

How do these scammers hide their identities? Is there a tor network or some kind of proxy for gsm?

Why someone would need another messenger? Especially without E2EE? I think tomorrow I'll bring back myspace.

I remember in the past Moxie Marlinspike developed something called Convergence. It's not alive now. He defined it as "An agile, distributed, and secure strategy for replacing Cert…

Sorry, I should have written more clearly. - Government forces state-issued certificate on all computers: The government doesn't hide that it's MitM'ing all traffic. The traffic it…

But what if it became like the situation in Kazakhistan where you can't connect to internet without installing state-issued certificate? Or a government forces that CA(assuming CA …