Igor Delovski Board

[delovski]

RC: Invalidating the null window redux

"If a program written just this year relies on the null window hack, imagine
how many programs written in years past also rely on that behavior.
After some deliberation, they decided to put the compatibility hack back in,
just to be safe."

[delovski]

Digg: Black Viper is back!

"Wednesday, March 7, 2007 @ 2:26 PM PST - Black Viper is back! Yes, this
is the "real" Black Viper. Soon, the world will know exactly what happened
to me as well as many questions I am sure everyone has. Until then, here is
some answers to questions that people may be asking themselves."

[Ike]

CSO: Where’s Hacking Now? A Chat with Grugq

"First things first: This wasn’t planned. We contacted The Grugq (pronounced
'grug') as research for a forthcoming feature story. But the chat, as chats
sometimes do, went in its own direction. Before long, we had hit on broader
trends in the hacking and cracking community, the economics of the trade,
and anecdotes which show how hacking is changing in some ways, and, in
others, staying the same as it has for a decade or more.

So much myth and conventional wisdom grows around hacking that it’s
useful for security professionals to periodically take stock of what’s real
and what isn’t from those who are in touch with that world."

[Ike]

Digg: iPhoneInterface starts to crack open iPhone

"It looks like hacking the iPhone took a huge step forward last night. iPhone
enthusiasts over at the #iphone-talk and #iphone-mac channels on irc.osx86.hu
have developed iPhoneInterface, a new Windows and Mac tool that allows you
to manipulate the iPhone's state, launch services, and interact with the iPhone
filesystem."

Digg: iPhone Hacking News Update: iPhoneInterface Tool is Out!!

"The iPhone Dev crew has released a tool that gives unprecedented access
to iPhone internals. This story summarizes the available operations, and
links to the tool. It doesn't link to the Wiki, which is getting overwhelmed.
You shouldn't link to the Wiki either."

[Ike]

Use Vista without activation for 120 days

"It's widely assumed that a newly installed copy of Windows Vista must be
"activated" before 30 days are up.

But Microsoft has built into Vista a simple, one-line command that anyone
can use to extend the activation deadline of the product to a total of 120
days — almost four full months!"

[delovski]

tuaw: Journeys inside the iPhone's SDK

"I have now spent a pretty solid week writing applications for the iPhone.
And what an exciting week it's been. I've been privileged to view and interact
with the iPhone in a way that few other people have had the opportunity to.
The iPhone is tight, robust and its SDK--even seen through such imperfect
tools as class-dump--is beautiful."

[delovski]

linux.com - How to give your low-end Canon digital camera RAW support

"If you have a point-and-click digital camera made by Canon, you may be
able to turn on all sorts of features usually reserved for more expensive SLRs.

That includes live histograms, depth-of-field calculation, under and overexposure
highlighting, and -- best of all -- shooting your pictures in RAW. The secret is
CHDK, an enhanced, free software replacement firmware."

[XNote]

Slashdot: Hacking: The Art of Exploitation

"Hacking: The Art of Exploitation is authored by Jon Ericksonand
published by No Starch Press. It is the anticipated second edition
of Erickson's earlier publication of the same title. I can't think of
a way to summarize it without being over-dramatic, so it will just
be said: I really liked it.

The book, which will be referred to as simply Hacking, starts by
introducing the author's description of hacking. Erickson takes
a great approach by admitting that the common perception of
hacking is rather negative, and unfortunately accurate in some
cases. However, he smoothly counters this antagonistic misund-
erstanding by presenting a simple arithmetic problem.

A bit of creativity is needed to arrive at the correct solution, but
creativity and problem-solving are two integral aspects of hacking,
at least to Erickson. The introduction chapter sets an acceptable
tone and proper frame of mind for proceeding with the technical
material."

[delovski]

How I Built a Working Online Poker Bot, Part 6: Guerilla-Style File
Monitoring on Windows with C# and C++

"How to write code to detect when any software application on the machine
accesses any file on the machine, and how to extract and view any data
read from or written to that file in your own application, in real time, using
C# and a little bit of C++?

That's the subject of today's article: how to build a file monitor on steroids
(or a rough draft of one)."

How I Built a Working Online Poker Bot, Part 7: Extracting Text from
3rd-Party Applications

"Maybe I have too much time on my hands, but sooner or later every
programmer wonders:

* How to extract text displayed by other applications.
* How to draw your own text in the windows of external applications."

[XNote]

MF - Do I need to pay $99 to install app to real iPhone device?

"How can I install simple hello world application to my iPhone (real device)?

Do I need to pay $99 to Apple?"

***

"No, of course you don't. Here I have written really Simple 3 steps tutorial
how to do it."

[delovski]

ipodtouchfans.com - xcode iphone sdk and toolchain 2.0

"The first thing you tried (sshing your project into iphone) is fine you just
needed to sign ur code."

[Ike]

iPhone Dev Team - BootNeuter

"BootNeuter gives you total control of your first-gen iPhone's S-Gold bootloader
and baseband."

[Ike]

ars - F-Script: Command-line Cocoa shell goes beta

"Fun Script, also known as F-Script, is a command-line based interactive
Cocoa shell. The open source F-Script offers a new way to create and
interact with Cocoa objects using a simple scripting language and a Smal-
ltalk-like development environment. Recently, the F-Script shell went beta,
providing a new way to interactively build Cocoa."

[delovski]

thecoffeedesk.com - iPhone Background Apps Without Jailbreaking
Or Push

"This is an experimental way to accomplish the implementation of a back-
ground app/daemon on an Apple iPhone. As of this writing, the iPhone SDK
does not allow the development of “true” Unix-style background processes
(daemons) within the iPhone OS (which itself is based on Darwin Unix)."

[Ike]

wired.com - Cracking the Scratch Lottery Code

He fished a coin out of a drawer and began scratching off the latex coating.
“The first was a loser, and I felt pretty smug,” Srivastava says. “I thought,
‘This is exactly why I never play these dumb games.’”

[delovski]

thenextweb.com - Cydia and Jailbreak apps: The ecosystem, developers
and increasing revenues

"Many apps, tweaks and settings on Cydia are free but developers also have
the capability to charge for their applications with Freeman introducing a
simple payment system in March 2009, taking a 30% cut on any app
purchase made via the Cydia Store. As demand for iOS devices continued to
grow, prompting an increase in users wanting to remove restrictions from
their devices, the best apps were quickly identified and developers began to
price their creations in order to profit from their tweaks.

By April 2011, Cydia had $10 million in annual revenue and 4.5 million
weekly users, leaving Saurik’s company SaurikIT with $250,000 in profit
after taxes annually."

[delovski]

r - itHub - A simple keylogger for Windows, Linux and Mac

"Check out below to learn how to install them. These keyloggers are
simple and bare bones, however they work great! Feel free to fork to
improve if your want. Currently, there are three keylogger programs
for the major operating systems; Windows, Mac and Linux."

[Ike]

https://np.reddit.com/r/sysadmin/comments/5k89so/on_call_for_christmas_eve_and_its_going_to_shits/dbm8um3/

I'm the author of the exploit beeing used. I'm sorry for you getting hacked but it was due to an unpatched kernel. The exploit I wrote was just a simplification of the dirtycow exploit for easier use: https://www.exploit-db.com/exploits/40839/

[Ike]

bi - Self-driving cars are prone to hacks and automakers are barely talking about it

"Today's self-driving cars rely on spinning sensors called lidar that can cost
more than $10,000 each. But it took Jonathan Petit just $43 and a laser
pointer to confuse and defeat them."

[Ike]

r - Vault 7: CIA Hacking Tools Revealed

"CIA has more hacking capabilities than the NSA, including hundreds of zero-
day exploits to gain access to 99% of devices on the planet without revealing
these exploits to manufacturers as the US government has agreed to."

[Ike]

https://www.reddit.com/r/IAmA/comments/646vk9/iama_convicted_lulzsecanonymous_hacker_ama/

Crime / Justice - Live IamA convicted Lulzsec/Anonymous hacker AMA!

[delovski]

dtrace_oneliners.txt - DTrace one liners. Handy commands

# Files opened by process,
dtrace -n 'syscall::open*:entry { printf("%s %s",execname,copyinstr(arg0)); }'

[delovski]

hn - Oh, Crap! Someone Accidentally Triggered A Flaw That Locked Up $280 Million In Ethereum

"According to Parity, the vulnerability was triggered by a regular GitHub user,
'devops199,' who allegedly accidentally removed a critical library code from the
source code that turned all multi-sig contracts into a regular wallet address and
made the user its owner."

[delovski]

localethereum.com - Centralised Exchanges Are Terrible At Holding
Your Money: A Timeline of Catastrophes

"When you deposit or purchase cryptocurrency on a centralized exchange,
you don't hold the private key to those cryptocurrencies; instead, you're
trusting the exchange, in the same way that you trust your bank, to hold
on to and keep an accurate record of your balance(s)."

[delovski]

r - Tether was hacked by the same person who hacked Bitstamp in 2015

"Decided to have a look at what we could learn about the Tether hack from
the blockchain, the coins are still moving around so I may edit this later as
this develops."

[delovski]

bi - Thieves stole potentially millions of dollars in bitcoin in a hacking attack on a cryptocurrency company

"The contents of a digital wallet belonging to cryptocurrency company
NiceHash, which included potentially millions of dollars worth of customers'
bitcoin, was stolen in a major security breach early Wednesday."

[delovski]

r - Strange activity involved with the address the attacker of the DAO used to start the attack, thousands upon thousands of ethereum being transacted to hundreds of difference addresses. Including a transaction to Bittrex's smart contract wallet

"Not quite sure what to make of this so I thought I'd make a post"

[Ike]

coindesk - Bitcoin Exchange Youbit to Declare Bankruptcy After Hack

"The exchange was previously targeted in April in an attack which South
Korean officials believe was conducted with the support of neighboring
North Korea. Recent reports indicate that intelligence services in South
Korea suspect that North Korea is behind additional attacks against
domestic cryptocurrency exchanges, including market-leader Bithumb."

[delovski]

r - LuLu: An open-source macOS firewall that blocks unknown outgoing connections

"FWIW, this can be installed using Homebrew as a Cask:
brew cask install lulu"

[Ike]

r - I Was the Homeland Security Adviser to Trump. We're Being Hacked.

"It was reported several years ago that Russia has access to the U.S. power grid.

The GOP just attempted a coup, openly, after denying assistance to and
ensuring a shaky existence for much of the U.S. populace for a year during
a pandemic. If you thought that was callous, just wait until those major GOP
donors who would profit from evictions and property sales reap a windfall.

Things may get really weird."

[delovski]

r - This programmer reverse engineered the Pfizer mRNA vaccine source code

"Thinking of DNA/RNA as a programming code with file headers etc. is funny,
but even without that the breakdown and high level explanation of the different
segments was great.
...
This was incredibly fascinating and the writing was golden: The people that
discovered this should be walking around high-fiving themselves incessantly.
Unbearable amounts of smugness should be emanating from them. And it
would all be well deserved."

[Ike]

git - macOS Keylogger

"This repository holds the code for a simple and easy to use keylogger for
macOS. It is not meant to be malicious, and is written as a proof of concept.

There is not a lot of information on keyloggers or implementing them on
macOS, and most of the ones I've seen do not work as indicated. This project
aims to be a simple implementation on how it can be accomplished on OS X."