Ask the help desk

Every website uses a language called JavaScript; long story short it’s a website language that allows developers to do the crazy shit you see on websites. Now the easiest thing to do is to disable JavaScript to stop them from knowing you have an adblocker:

Oh no! I’m blocked from viewing the website. It would be a terrible shame if I were able to right click and select the “inspect” feature

Click the three dots in the top right and open the “Settings” Menu

And then scrolled down to “Debugger” and checked the “Disable Javascript Option”

And then just refreshed the page

1) DON’T use your search bar to find and open the Run app

2) DON’T type in services.msc

3) DON’T find Adobe Genuine Software Integrity Services and right-click to get a dropdown menu, and don’t select ‘properties’

4) if you happen to click properties, DON’T use the startup type dropdown to locate the option to disable the program. be sure you DON’T click apply to finalize that change. 

5) DO NOT do the same thing in order to also disable Adobe Genuine Software Monitor 

if you do all of these things, this WILL disable adobe’s ability to monitor the software, and you will be forced to continue using the same older software that you already paid for instead of having to sign up for a newer, shittier version and pay more for it. so if you have lots of cash to spare and are cool with putting it the pockets of racketeering capitalists, definitely don’t do any of these things. 

So lets say you’re researching something for a paper (or just for fun) and the research paper you want to read is behind a paywall, or the site makes you create an account first, or makes you pay to download, or limits you to only 5 free articles, or otherwise makes it difficult for you to read what you want.

do not fear! copy the link to the article

go to sci-hub.se         (the url is always changing so its best to check out whereisscihub.now.sh to find what the current url is)

slap the article link in there

ONE MORNING A couple of weeks ago, I handed my iPhone to my wife and asked her to help with a privacy experiment. She would use my handset to track my location for the next few days, and with only the software I already had installed. Like a lot of couples, my wife and I know each other’s phone PINs. So I left her with the device as I walked into our bathroom to take a shower, simulating an opportunity that I figured would present itself daily to snooping spouses.

I’d barely turned on the water before she handed the phone back to me. A few seconds had passed, and she had already configured it to track my location, with no notification that it was now telling her my every move.

I’d embarked on this strange exercise with the blessing of a group of researchers who focus on the scourge of “stalkerware,” a class of spyware distinguished by the fact that it’s typically installed on a target device by someone with both physical access to the phone and an intimate relationship with its owner. Often explicitly marketed as a way to catch a cheating husband or wife in the act, these programs have become a tool of domestic abusers and angry exes—a breed of hacker who often possesses practically zero technical skills but does have plenty of opportunity for hands-on tampering with a victim’s handset. Perpetrators can install these apps, also sometimes known as spouseware, to monitor where their targets go, who they communicate with, what they say, and virtually every other part of their life the phone touches.

After years of neglect, the antivirus industry has finally begun to recognize stalkerware’s danger and flag the apps as malicious, a development that’s long overdue given that a quarter of women in the US and one in nine men experience some form of physical abuse or stalking by an intimate partner.

The new zero-day vulnerability resides in #Windows Task Scheduler utility and has been tested and confirmed to be successfully working on a fully patched and updated version of Windows 10, 32-bit and 64-bit, as well as Windows Server 2016 and 2019.

Every website uses a language called JavaScript; long story short it’s a website language that allows developers to do the crazy shit you see on websites. Now the easiest thing to do is to disable JavaScript to stop them from knowing you have an adblocker:

Oh no! I’m blocked from viewing the website. It would be a terrible shame if I were able to right click and select the “inspect” feature

Click the three dots in the top right and open the “Settings” Menu

And then scrolled down to “Debugger” and checked the “Disable Javascript Option”

And then just refreshed the page

FBI: Don’t Trust HTTPS or Padlock on Websites

The FBI has been forced to issue an alert warning users that the sight of “HTTPS” and a padlock icon in the address bar may not be enough to prove the authenticity of a website.

The latest Public Service Announcement from the bureau’s public-facing Internet Crime Complaint Center (IC3) revealed that cyber-criminals are increasingly abusing trust in TLS-secured websites to improve the success rate of phishing attacks.

“They are more frequently incorporating website certificates — third-party verification that a site is secure — when they send potential victims emails that imitate trustworthy companies or email contacts,” it warned.

“These phishing schemes are used to acquire sensitive logins or other information by luring them to a malicious website that looks secure.”

Corin Imai, senior security adviser at DomainTools, argued that the falling price of SSL-TSL certificates make it a no-brainer for malicious webmasters.

“Thankfully, education is the single security measure against which criminals can’t work around: an aware user, who has been trained to look for misspellings in the URL of a web page and knows not to trust a padlock icon, is much harder to lure into giving away personal information or clicking on malware-spreading links,” she added.

“Organizations should therefore invest in solid training programs, which cannot be limited to a one-day workshop on what a phishing scam looks like, but need to be continuous, thorough and impactful.”

To that end, the FBI urged users to go back to basics, by not clicking on links in any suspicious-looking emails and to follow-up with the sender directly even if the contact is known.

Hackers are also hosting malware on cloud services such as Azure and benefiting from their HTTPS certificates indirectly this way, experts have revealed.

Here’s the deal: You’re already burned.

It’s over! There’s no going back! Your face is in a database and your DNA is in a database and your social profile is in a database and there’s nothing you can do about it. Even if you didn’t put it there somebody else did. Congrats, we’re all fucked!

Facebook builds shadow profiles on people who don’t have accounts. Surveillance cameras are everywhere. Your cousin signed up for Ancestry and your brother did 23&Me.

So what can you do about it? Essentially nothing. So there’s no point in panicking.

You know what you have to do if you want some kind of privacy? Start leaving your phone at home randomly. Or at work randomly. People don’t think about the fact that their cell phone’s location data (which is constantly tracking even if you don’t enable location data for apps) is a more effective way of tracking them than anything they post online and it’s *real* easy to get a warrant for that data. And if you suddenly ditch your phone for the first time in several months it’s suspicious as FUCK.

Automated license plate readers track your drive. Do you commute? Do you drive the same way every day? Why the sudden change to your routine? What were you doing that you needed to park your car and wander away suddenly? What are you hiding?

Complaining about people posting selfies when companies are compiling DNA databases sharing them with the FBI is like blaming ocean pollution on people using plastic straws when about half of plastic ocean trash is abandoned fishing equipment.

Do you use gmail? You’re fucked.

Do you have a bank account? You’re fucked.

Do you use public transportation? You’re fucked.

Do you go to school? You’re fucked.

Do you have a job? You’re fucked.

I had to track down a guy who didn’t have facebook or social media profiles, didn’t have a listing in the phonebook, didn’t have a linkedin. I started with his first and last name and ended with his supervisor’s phone number, a ten year history of his income, and his home address. I got to it through his son’s little league team.

And I’m fucking J. Random Nobody. I don’t even have shiny databases full of tracking data.

So you’re already burned. There’s no going back, we passed the tipping point. Even if you threw out your computer and shut down all your accounts and smashed your cell phone and lived in the woods there’d be video of you walking out of town for the last time and satellite images of wherever you ended up setting up camp.

I was never going to be able to hide from the cameras on the streets and the data in my cell phone and the scanners that look at the license plate of my car and the information that my school sold about my age and income and interests. So fuck it. Share a selfie.

Google Helps Police Identify Devices Close to #Crime Scenes Using its “SensorVault” Location History Database and Track Narrowed-Down Suspects or Witnesses.

https://t.co/hF0tPAGUxM

I used to work for an ISP B2B sales team. They paid us well for selling rented Modems because usually they were used, given back by the last renter. Or if they renter didn’t return them, they still have to replace it with a new one. So it was recurring revenue without a cost to the ISP

And no, there is no advantage to renting. They don’t service Modems rented differently than one you bought

Transmission Control Protocol Communication Process

(CCNA Network Fundamentals - Tumblr Assignment 2)

This video illustrates the TCP process in simplified terms as it relates to the Transport Layer of the OSI Model.

It must be noted that as the encapsulated application data moves down the source host stack so does it also move up the corresponding layers of the OSI stack on its way to the destination host.

At the transport layer, a three way handshake occurs beginning with SYN (synchronize) control flag at the source host to initiate the exchange of data. A response from the destination web server in the form of SYN-ACK (acknowledgement that SYN segment received) control flag is returned. This opens a session from client to server and the flow of information continues as encapsulated segments of data from the source client are sent via a transmission window at a reliable rate of transfer towards the destination server. The window size and flow control for this session are both determined at the Transport Layer.

The destination web server decapsulates and reassembles the client’s information and responds by returning the data requested. At this point, the entire process repeats itself in reverse. This time, it is the web server that sends SYN segment to open a session back to the client. The client sets SYN-ACK to web server and all remaining segments are exchanged.

During the previous process, there may be factors (such as network congestion) that can cause packets to be dropped. In a TCP session, any dropped packets would be retransmitted thus ensuring the reliable transfer of data between client and server.

When each side has completed transferring all of its data the TCP session must be terminated at both ends. This is done by both source and destination and is set by FIN control flag

FIN from client > FIN-ACK from web server > FIN from web server > FIN-ACK from client