/tech/ - Technology

(PNG_Image,_260_×_362_pixels).png (u)
[Hide] (28.7KB, 260x362)

>>1365
Not OP but there's already dead journalists in Turkey I heard and probably related to the same backdoor that got leaked (intentional or accidental).
>>1357 (OP) 
Pegasus from public sources is said to be known to work on mobile devices and it's likely that they target popular devices since the disparity makes it a headache for backdoor writers.
The thing to avoid is borders, where they can check your phone which they can then use the timing to image your phone and/or install a modified TWRP recovery partition to exfiltrate everything and/or have it install a backdoor next boot. The process should take less than 20 minutes.
This is in my theory but this checks out with the information out there and should be true (a hacker's theory).
And in theory, again, your phone should feel like it is booting up from factory reset like pic related which means it has been compromised. I would advice you to stop using that phone and reformat the partitions but assume they already have most of your files. Using personal FOSS cloud is better if you're a journalist, and avoid SSL_strip when accessing your own cloud/servers.

>>1499
JSchan doesn't actually give IPs, just IP hashes.

>>2023
I would assume the harder it is for a phone to root, the harder it would be for them to do anything with it. I had a Galaxy S4 that was fairly easy to install TWRP on and root (it could've taken a much shorter time but it was my first time doing it), now I have an LG V20 that took two full days to root and required using both Windows-based community tools and a custom-made Linux distro to flash a different firmware version. I can't even remember the last time I saw someone else using an LG phone so I should be good anyways implying I'm ever going to leave the country or even the state anytime soon

>>2039
>implying they have hands on official rooter
Vendor's repair department have their "recovery"(ring 0/jtag access) tools. Some phone hacking services have already figured it out and are selling them.
>octopus box
>miracle box
https://forum.gsmhosting.com/vbb/f606/how-root-manual-biggest-collection-gsmhosting-1872718/#post10637865

>>2039
Journalists should either use those secure HTCs or Sony.
>LG V20
There is an official TWRP image so it might be included, the hard part is usually only unlocking the provider lock but LG isn't that great.
>>2040
There's also a possibility of shortening unlock wait times by using hydratool server.
At that point, the best measure would be putting tamer resistant tape, and unironically destroying your microUSB port if you have removable batteries, or using a tampered charging-only microUSB board. Maybe a sound alarm when it detects data transmission might work too or a phone case with sound alarm, but there's no stopping them from just confiscating it.

>>1891
His articles seem to suffer from the same sensationalism that most contemporary journo publications do. Only instead of spreading the asshole for whoever's paying, it's tech-related doomerism. Case in point;
>Does he really think that if someone can reverse engineer a video game ROM, they can fork something much more complex like Firefox using nothing but a disassembly?
Given the part about piracy over freetardism, I'd say the overall point the article is trying to make is that a gongkai[1] culture (basically having a limited circle of people sharing company and trade secrets) is better than separating from the establishment and creating free software in a sort of bubble. But that in itself depends on where you live, as it clearly won't work outside of China and other grey law shitholes.

[1]: https://www.bunniestudios.com/blog/?p=4297

I'm using Posteo now. I don't think it's waste for paying 1 eur per month. How about you guys?

>>1899
Selfhosted.

>>1899
Trying it it out now, little dated apperance wise but as long as its functional i dont care.Have to migrate all my shit from Protonmail

>>95 (OP) 
Reminder
A mail provider service's TOS follows their hosting provider's TOS which you might have not read at all.
It's a chain of terms of service, even if your mail provider claims to never do logs over their "users", they would still do logs when they take legal notice from their hosting provider which takes legal notice from some country of origin (local or domestic).
>we never do logs unless it is abuse or fraud
This is very vague, especially the term abuse.
This applies to no-logs services like mail, DNS, etc.
Abuse  abnormal use  above normal || not normal
Fraud is also a vague term. Claiming x=y where x is a company can be considered a fraud.
The term stretches out to having one fake/false information, and even as simple as using tor will be considered fraud, keep in mind detection systems can mark you for abuse by being in IPs that had been marked for abuse.

Vagueness is how they get around their supposed "promises".
If you're someone who is above normal users or someone who uses their service a lot, generates a lot of traffic or requests than average, a power user then they can and will treat you as either a bot/spam or mark it for abuse and treat your supposedly TBD (to be deleted) logs as abuse in which case they can store it forever and can now share your data to all third parties.
Mind you they only protect their "users" and not "abnormal users"
Abuse  abnormal use  above normal || not normal

>>1806
>need every kilobyte
>that's why we choose to waste data with literal non sense

That's not at all what the page you just linked to say. It lists the effective sample rates to be 8, 12, 16, 24 & 48 kilohertz.
Which means that FFmpeg & VLC are right, and whoever wrote the subroutines for this browser decided to chintz out and only include half the code.
Maybe less than that; scrolling down I read that any opus decoder can decode audio encoded to any bandwidth. By definition, then, FF and I guess Pale Moon can't render the opus audio codec.

 Now, I can kinda understand that, because I don't consider a web browser to be a media player, and I have a separate MP3 player exactly because I also don't consider my phone to be an MP3 player.

 and for as frustrated by this as I am, I obviously need to thank you for having these weblinks handy since I new about Xiph but hadn't gone looking for the codec specification because I was expecting it to talked about by more-normal people than the math nerds making lossy ways of writing down the description of the parts of sound you care about hearing.
But that page was surprisingly readable, so I'm impressed at whoever they hired to act as translator.

warthog_44k.flac (u)
[Hide] (17.8MB, 1400x1400, 03:22)

warthog_44k.opus (u)
[Hide] (2.9MB, 03:22)

warthog_8k.opus (u)
[Hide] (2.6MB, 03:22)

>>1807
>That's not at all what the page you just linked to say. It lists the effective sample rates to be 8, 12, 16, 24 & 48 kilohertz.
You are right, however I think it's impossible to encode an opus file at any rate other than 48kHz.
I just tested the official opusenc and it doesn't even let the user specify an output sample rate. See https://opus-codec.org/docs/opus-tools/opusenc.html And regardless of the input sample rate, the program always outputs at 48kHz. I tested ffmpeg as well and it, too, always outputs 48kHz opus files, regardless of the input sample rate or the -ar specified...
How exactly did you produce the 12/24kHz opus files?
>that's why we choose to waste data with literal non sense
You're talking about defaulting to 48kHz when encoding opus? If so, I disagree that data is wasted, because my tests showed a decrease in file size... If you throw a 44.1kHz flac file and a 8kHz flac file at opusenc, you'll find the output of the former to be larger than the output of the latter. Similarly, if you encode a 44.1kHz flac file using ffmpeg twice, once wi

>>1817
ffmpeg always reports 48kHz for decoding opus, see https://stackoverflow.com/questions/39186282/ffmpeg-not-honoring-sample-rate-in-opus-output

Is there a way to make ffmpeg shut the fuck up? I have a video that has 800 million chapters and ffmpeg spams the fuck out of my console with them every time I touch it. I don't want to see them, but I do want to see the conversion progress and errors and the like.

>>2007
RTFM, faggot
man ffmpeg
Regex loglevel

>>1020
>>1021
>>1022
Seemed brief this time. Hopefully it doesn't become a large attack like last time.

>>781 (OP) 
Use I2P, Lokinet or Freenet instead of Tor.

>>791
Tor died when the original silkroad did. It's just government run bullshit.

>>1104
Are there visit-worthy websites on any of these?

>>1754
Do your own research on dark.fail

>>1395
Please reuse threads as much as possible.
Moving to >>1386 (OP) 

>>1396
im using it am i

>>1405
yes

You tell me, Anon. Does it help?

Also, quite a good demonstration of all 12 principles by a professional.
https://www.youtube.com/watch?v=gyGEwyWLbHk

>>1528
Your fingers move less and stay on the home row most of the time.

Here's the info you need: https://colemak.com/
https://files.catbox.moe/vgywh1.pdf

1c307391ae78a2e5c6e714859f0ef4b7f5582727269313123e96976a23824f85.png (u)
[Hide] (72.3KB, 279x279)

>6=7
at last I truly see

>>1530
>my fingers move less
No they don't, you still move you fingers laterally, moving your arm more doesn't matter

>>1525 (OP) 
Just use QWERTY its the standard.

I have a .txt document with a few 104-key layouts I'm reminding myself to try someday.

Dvorak, normally.

  kyu." zlmdpv
  rieao hnstcw
  x*?,/ jqfgb

Why doesn't someone reprogram their keyboard with the above, and let us know how it compares to dvorak, or I guess colemak, etc?

I will too. Someday.
Probably.

>>1694 (OP) 
does this fool not know how a dll works
>Cover or remove any webcams or microphones
oh nvm hes clearly mentally disabled

>Stay away from desktop if you can and stick to mobile devices. 
>Some of these operating systems do have some privacy invasive telemetry but it can usually be disabled in the settings and verified with a network analyzer tool like Wireshark if you wish to be certain. 
>Use Signal, preferably with a burner or VoIP number. 
what the fuck am i reading

yeah, and you know what, this guy is involved in developing on Whonix and some other projects, because of this, people can believe this nonsense because he is "expert" or "authority"

>>1694 (OP) 
I took look at https://madaidans-insecurities.github.io/security-privacy-advice.html and...
>muh iphone good
>muh apple good
>muh non-free good
>muh Windows S and ChromeOS good because more (((restrictions)))
>muh mobile devices are more secure
>muh verified boot 
<only works if you use your own key
> bit (((buttlocker))) 
<implying proprietary crypto is good
<implying bitlocker is not compromised
>Always update. 
<You also get the latest ciaware when you update your non-free OS
>muh telemetry can always be disable in your proprietary OS

>>1709
Seems like a knowledgeable one and knews flaws of foss/linux stuff but they just happen to use that for a quality troll post.
From security standpoint, those official devices and official builds are good, but let's not forget security and privacy are different.
Sure there is backdoors everywhere which is a different matter and more likely for targeted deanonymization which even your experienced cryptographer or privacy expert might not even know about.
Modern motherboards and laptops have UEFI firmware and ring negative access through the programs in ring 3, everything is compromised.

how do i make a site?

>>1679
<html>

</html>

>>1679
what is HTML and CSS ?  why you can learn HTML at https://www.tutorialspoint.com/html/index.htm and https://developer.mozilla.org/en-US/docs/Learn/HTML ? why there are tutorials on using CSS to style HTML pages at https://developer.mozilla.org/en-US/docs/Learn/CSS ? why do you need to get a text editor, like Notepad++ ? what is https://neocities.org ?

>>1684
>:( 
why are you putting me down
I wanted to make a site to join the webring and now I dont even want to try

>>1693
Open W3Schools and start an HTML/CSS course you lazy fucking nigger, it's a lot of fun and extremely fulfilling especially when you've never written code on a computer before. You could be making a gorgeous website RIGHT NOW but instead you're shitposting on /tech/, go do the thing and come back to us with questions faggot.

laura-ockel-RoZWxeFL27k-unsplash.jpg (u)
[Hide] (153.3KB, 640x966)

Title gives my conclusion from empirical events I witnessed and inside info. PSP runs on the same circuit, but isn't the backdoor per se, which has been around for much longer.

The same way AMD was able to change the crypto algorithms for the Zen chip they licensed to China, they can change how the CPU behaves at any system, even those already deployed. This can also be used to sabotage any program or computation, making BadBIOS vastly nastier than Stuxnet.

American military made a grave mistake to partner with the morons of the Brazilian military, who are letting knowledge of this spread like a fire (and misusing it for petty profit and inside jobs to justify a police state). Israel, UK and France also have access, but are much more professional.

Russian_Chicken_of_Lacking_Evidence.png (u)
[Hide] (32.8KB, 899x547)

>dude trust me

>>1536
Duplicate thread.
You can bump, but don't make duplicates.
Moved to >>1509 (OP) 

/x/ the /tech/ thread.

>>1509 (OP) 
>what is network monitoring and DPI?

>>1407
The ARM ecosystem is traditionally cucked. Each ARM soc does things differently, because they are designed usually for specific applications and boards. There is no BIOS or UEFI, vendors typically provide you with a non-mainline patched u-boot blob and binary kernel and that's it. Many chips don't have sata and pci-e, have particular memory timing requirements (so no "common" ram sticks for you) and other shits to cheap out as most as possible.
I was looking for the ultimate blobless libre SBC and it's either too expensive or not completely free.
On the software side. If you are lucky enough to have most functions works on mainline kernel, Gentoo solves most problems.

out.png (u)
[Hide] (5.1KB, 640x480)

All my computers are ARM now.  This is my main one, a cubietruck with A20 SoC, 2 GB RAM, SATA, VGA, 1000M Ethernet.  It doesn't need any special firmware blobs for basic operation.  I don't use the OpenGL stuff at all, and I boot it with /dev/fb0 at 640x480.  I don't use Xorg, unless I have to, but I don't like to.  I mean I really, really, really don't like GUI shit at all!
What else... it's Ubuntu but I use busybox for init instead of systemd.  I use Ubuntu (actually Armbian), because it already has all the necessary drivers, including the NAND flash.  I have Linux installed to the sata HDD, and also a separate install on the microSD as a backup, and also on the NAND flash as a third backup.  It was a bit of trouble to get the NAND formatter properly, and eMMC are probably easier to work with.  Also newer kernels don't have driver for this NAND flash, so I'm stuck on this old kernel.  But I don't care really.  I don't run any network services at all on here, and don't run any javascript browsers locally.  It's still a mainline kernel though, and so is the u-boot.  I chose this board carefully to avoid blobs and fulfill my needs.  I doubt it would suffice for most people.  I'm not most people.  I don't like modern computers at all, and in fact I'd rather be back in the 80's on an 8-bit micro.  So there you go.

>>1409
Cubietruck was the only A20 with 2GB ram. But it was hard to find and is expensive. I ended up on Olinuxino a20 lime2. 1GB ram is one of the main performance bottleneck other than the slow CPU.
Wayland works much better with mainline lima.

>>1409
How much did you pay for a Cubietruck? An i.mx6 Wandboard looks better for the same price.

catputer.jpg (u)
[Hide] (46.9KB, 700x475)

>>1426
100 euros, pretty much.  That was back in 2018 though, when you could still find them easily.  Now most of their distributors are out of stock.  Well I guess there's NewIT in the UK, but they don't sell just the board by itself, they want to sell you also an ugly metal case, battery, and SSD, none of which I have any use for.
Anyway I don't want to spend money i.mx6 or any SoC with processor that does speculative execution.  That mostly leaves only Cortex-A7 and A53 (plus older ARM stuff and microcontrollers), but there's enough choice of SoCs built on those to do what I want.  I have this A20 board, and an Olimex A64 board with 2 GB RAM also that I reserved for running subversive garbage like Firefox.  That way the nasty shit stays contained in a controlled environment and doesn't affect my main computer.  I don't like or trust VMs also.  Since the hardware is cheap (100 bucks or less for a board), I can simply buy as many as I need.  But right now I only got these two, and also a tablet (with A64 SoC and 1 GB RAM) that was gifted to me.  I haven't used it because it's Android...  I'll probably convert it to Linux eventually, but will need to open it up to access the UART.
All of this leaves the question: who bought up all the damn cubietrucks? Clearly nobody wants them, except for freaks like me who prefer a slower, simpler system.