Collaborate Disseminate
Assume that I never check the server fingerprint when logging in to an SSH server. This means that certain configurations of SSH can be impersonated. For example, I can log into a server that only has my public key. Obviously this doesn’t … Continue reading Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?
I will be publishing a fingerprinting app that shows its user how much access to their Android phone’s identifiers it has. I haven’t started writing it because I need to understand how can any Android phone be identified by using only its … Continue reading Retrieving Android phone’s identifiers
Time-triggered Ethernet (TTE) is used in spacecraft, basically to use the same hardware to process traffic with different timing and criticality. Researchers have defeated it:
On Tuesday, researchers published findings that, for the first time, break TTE’s isolation guarantees. The result is PCspooF, an attack that allows a single non-critical device connected to a single plane to disrupt synchronization and communication between TTE devices on all planes. The attack works by exploiting a vulnerability in the TTE protocol. The work was completed by researchers at the University of Michigan, the University of Pennsylvania, and NASA’s Johnson Space Center…
How can I send an email with a spoofed ‘from’ field with nodemailer and SMTP? I know that SMTP does not provide any authentication check to see if the ‘from’ field is actually correct, so why is it not as easy as just changing the ‘from’ h… Continue reading Send spoofed email with nodemailer
Would it be possible to broadcast one audio source to a group of bluetooth headphones to make it work like old-fashioned radio broadcasting? Could this be done similarly to spoofing? How much of a problem would bluetooth error correcton be… Continue reading reverse multipoint bluetooth earbuds with intentional spoofing [migrated]
How do I send a text from a friends phone number to another friends phone number?
I see a lot of texting and spoofing but it only gives the receivers number and just uses a random sender number. But i want a specific sender and receiver nu… Continue reading Spoofing Text Messages [closed]
This is related to securing an application on a corporate network against certain types of access from personal PCs and mobile devices.
Specifically we are able to require authentication from the users so we do know who they are. The curre… Continue reading How can I spoof user-agent on a mobile device browser? [closed]
Some Vietnamese refugee families have been Bitcoin defrauded by someone using an 805 text number. Lookups say it belongs to a party in Tennessee. I want to know if it is possible that scammers in Asia, for example, could use that number t… Continue reading Using another’s text number to commit ongoing fraud [duplicate]
I’m browsing the ATT&CK and I understand the meaning of right-to-left override that it is using non-printing unicode character, but what is the different if I just simply rename a file like this: file.txt.exe in cmd, instead of inserti… Continue reading what if I just simply rename of a file instead of using right to left override
See the screenshot below. A friend asked me about this. Person #1 had a group text thread with Person #2 and Person #3. At the top, Person #2 sent a photo and a message. Person #3 replied. Then there appears a rude reply from Person #1 jus… Continue reading Spoofed iMessage? Apple account breach? What are the possible ways this happened?