Collaborate Disseminate
Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com
That domain doesn’t resolve anywhere, not even Google’s own NS https://dnschecker.org/#A/mobile-webview.gmail.com
Most apps mask it in a half-brok… Continue reading Documentation on mobile-webview.gmail.com link masking?
Reading how Spotify was normalizing unicode inconsistently, and now I’m questioning if I am overlooking any issue on accepting non-normalized usernames.
From what I can tell, lowercase was first used on unix because users had to log in fro… Continue reading Is there any benefit to normalize unicode/utf-8 names that I am overlooking?
I am trying to identify a certificate CA distributed on https://acraiz.icpbrasil.gov.br/repositorio/Cadeia_FIREFOX.der (which is served signed by itself, while all pages leading to it are signed by a 3rd party that is included in all brows… Continue reading How to identify certificate package type?
Can Hydra ssh to remote host and attempt a password list against su root?
I am trying to recover the root password to an old device. It is an old Apple jailbroken Apple device, running IOS8.
The device is somewhat slow, but have no rate … Continue reading password brute force over ssh? (not on ssh)
The yubico documentation mentions that a Management Key can be set manually, or it can be inferred in the SoC when setting a PIN for the first time.
What exactly is that management key and how does it play any role on the CC… Continue reading What exactly is the Management Key on a yubikey?