ZeroTrustWraith

9 Followers
9 Following
24 Posts
B.S. Cybersecurity Undergraduate | CAE-CD program
GitHubhttps://www.github.com/ZeroTrustWraith
HackTheBoxhttps://app.hackthebox.com/users/3179986
@Natasha_Jay How cute 😻

NetEase trying to poke their nose around where it doesn't belong (com.netease.g108n; Destiny Rising):

```
W libc : Access denied finding property "ro.debuggable"
```

GrapheneOS: "ACCESS DENIED!"

The ro.debuggable property is a system-level Android variable. Anti-cheat and telemetry engines check this to see if the operating system is a stock consumer build or a modified developer build.

On a standard Google or Samsung phone, the app is allowed to peek at this property completely unchecked. But because I am on GrapheneOS, the hardened libc library steps in, slaps the app's hand away, and says "Access denied."

The game engine is programmed to assume that if it can't read basic system properties, it's being run inside a hacking environment or a virtual machine. Instead of gracefully handling it, the code just panics, hangs, and dies.

#GrapheneOS #android #anticheat #privacy #NotTodayBuddy #mindyourownbusiness

@vhstape @paper_mint After my HP, I am either buying System76 or Framework.

The monetization of OSINT tools and the transformation of social media platforms into walled gardens doesn't hinder malicious actors. Criminals generally rely on leaked data breaches and stolen source code. They aren't relying on front-end web scraping. These restrictions only lock out those trying to use OSINT for the greater good.

"We're doing this for safety" is nothing more than security theater.

I recently signed up for Trace Labs, and as an OSINT newcomer, I didn't expect to hit such an immediate, frustrating wall. For obvious opsec reasons, crowdsourced search parties discourage using your real-world identity. Yet today, standard investigative tools are locked behind invasive account creation and identity verification processes.

To make matters worse, Meta previously banned my device fingerprints simply for sharing HackTheBox content, accusing me of being a "malicious hacker" and requesting I provide them a government issued ID for "security reasons." This blatant overreach has severely limited my ability to build the research accounts needed to actively participate in these labs. Furthermore, major platforms and target web pages now aggressively block traffic from TOR and VPNs. Again, how does this stop threat actors who already have dark web access? It only hinders those trying to play by the rules.

The clamp down on open data extends everywhere, from restricted satellite imagery to locked-down public directories. When tech giants claim they are locking down data for "user safety," it is a convenient PR shield to protect corporate profits and liability. They don't care about your data. If they did, they wouldn't demand your government ID, force you to fork over a phone number, or quietly profit off your digital footprint while leaving you exposed.

They scraped our data, monetized it, and now claim to protect us. The only real solution left is collective digital self-defense: we must fight to remain anonymous and treat the web exactly as it is–a hostile environment. There is no world where these corporations can protect your information from real criminals. Those actors don't play by these rules, and an identity check means nothing to someone holding a stolen database.

https://cybernews.com/security/facebook-leak-exposes-users-hackers-claim/

#osint #opensource #surveillancecapitalism #dataprivacy #anonymous 

@violet Kali is excellent! I am messing around on Cachy right now, which is Arch-based. Not sure how I feel about it yet.
@Netraven @briankrebs We've been desensitised for decades. While this is extremely distasteful, the left was completely on board with immigration enforcement prior to Trump. Both sides are insanely polarized right now. As a trauma and gang violence survivor, I can assure you the direction some of the people on the left are heading isn't any better. This puts as much of a bitter taste in my mouth as seeing liberals post videos cheering on the cartels. There's a balance between upholding the law and protecting our own rights and neither side seems to have that balance in sight.
@svelmoe I agree. When I was shopping for an RGB LED lamp, almost every option said "controlled using our app." Why do I need an app to control a lamp that doesn't need anything beyond a source of electricity and a switch mechanism? Sounds like an an excuse for some company to scrape my data and sell it.
@beistanbul I haven't actually dug that deep into location privacy with cellular devices but I can tell you that the Google Pixel 10 is eSIM only.
@EdTheDev Thank you!!!

I am making the final leap to lock down my OPSEC and remove big tech from my life. I have a Protectli on the way with a 1 TB NVMe SSD and OPNSense pre-installed to set up my home lab, I kicked Windows off my computer, I just flashed GrapheneOS onto a Google Pixel 10 Pro XL, and I deactivated all of my mainstream social media accounts.

P.S.

HP, Inc.
β˜…β˜†β˜†β˜†β˜†
Would not recommend.

#opsec #internetfreedom #opensource #privacy #civilliberties #endmasssurveillance #SayNoToBigTech