KingRat

[Roy🇨🇦 @GrandpaRoy2]

A Russian group has been struggling to achieve a drone detector featuring the TinySA Ultra frequency analyzer that is intuitive to use (as opposed to the confusing settings of the device) but still exploits its full capabilities.
They are happier with a new “Patrul” firmware.
1/

[Don Shift (buy my books) @DonShift3]

@InfoSecZ they contain the same practical info. SHTF if you just want a field manual type book, Poor if you want the essays about UAS in general

[KingRat @InfoSecZ]

@DonShift3 Which of your 2 drones book would you recommend if someone was going to purchase just one

[GrapheneOS @GrapheneOS]

Our 2-factor fingerprint unlock feature is now fully implemented and will be available in the upcoming GrapheneOS release. This adds the option to set a PIN for using fingerprint unlock. You can use a strong diceware passphrase as the primary unlock method with fingerprint+PIN secondary unlock.

The usual restrictions on fingerprint unlock still apply. It's a secondary unlock mechanism only usable for 48 hours after the last primary unlock. The limit on failed fingerprint unlock attempts in GrapheneOS is 5 as opposed to allowing 4 batches of 5 attempts (20 total) with 30s delays in between.

The devices we support have a high quality secure element heavily throttling unlock attempts which is why a random 6 digit PIN provides secure encryption, unlike most Android devices. It's nicer to have a strong passphrase not depending on an attacker never being able to exploit the secure element.

Our new 2-factor fingerprint unlock feature means you can get this benefit of a strong passphrase while still having the convenience of a PIN. Since our PIN scrambling feature works with the 2nd factor PIN, you get the combined anti-shoulder-surfing benefits of a scrambled PIN and a fingerprint.

If you want to avoid entering your passphrase in public, you just need to make sure to refresh the 48 hour timer after last using it to unlock to keep fingerprint unlock available. We plan to add configuration for how many failed fingerprint unlock attempts are allowed to help with this use case.

We came up with the concept for this 2-factor fingerprint unlock feature in 2015 and filed it in the public issue tracker in 2016. This was extremely difficult to implement correctly and we needed to fix multiple upstream Android bugs. The lockscreen will be more robust even if you don't use this.

This is now one of the flagship features of GrapheneOS alongside hardened_malloc, hardware memory tagging, hardware-level disabling of the USB-C port, Storage Scopes, Contact Scopes, sandboxed Google Play compatibility layer, etc. It will be harder to port to new versions than our existing features.

Our duress PIN/password feature is fully compatible with our 2-factor fingerprint unlock and will near instantly wipe the device as usual if you enter the duress PIN instead of the correct 2nd factor PIN for fingerprint unlock. See https://t.co/j18363zb7T for more details on that feature.

[NC Scout @Brushbeater]

They should be put completely under for this as well. Red Hat is a cancer in NC.

[Muqsit 𝕏 @mqst_]

🍯 If you've never seen or worked with a Honeypot, watch this video.

It covers how to setup almost 20+ honeypots (and visualize the data) to trap attackers.

Video: https://t.co/hckos7K1Bw

[Mehdi @MehdiHacks]

🧵 How to maintain and protect your expensive RF equipment ?
If you have ever bought RF equipment, even the relatively low-tier ones, you know how expensive they could be, so it's essential to use and maintain them properly to ensure they last long.
Here's 5 tips:

[Tactical Wisdom @DolioJ]

1. It's Israeli.

2. Dual citizenship (regardless of second nation) should disqualify you from Congress (no divided loyalty).

3. This should be (and may well be) illegal.

[KingRat @InfoSecZ]

@stfudvs Sweet pupper wish the dog well

[KingRat @InfoSecZ]

@cemaxecuter Does it require a special sim or will it work with any sim the cell phone uses

[KingRat @InfoSecZ]

@ronnieadkins Dumb question is the eagle going to eat the goose?

[Sublime Security @sublime_sec]

Scammers are using distribution lists to hide their tracks while blasting a wide range of targets in this new variant of Living Off the Land (LOTL) + callback phishing attacks.

We’ve seen it with trusted brands like Microsoft, Venmo, and PayPal. Learn how the scam works: https://t.co/hl1fzvTw7m

[KingRat @InfoSecZ]

@notdan VPN + Tor

[KingRat @InfoSecZ]

@GOllumfun

[cemaxecuter @cemaxecuter]

I cannot wait to get this all available on the site! Range detection varies based on various conditions, but I was given a report that DJI’s WiFi RID was detected w/ external LNA at 6km. Pairing the hardware w/ a mobile app is 🔥

[Naomi Brockwell priv/acc @naomibrockwell]

"I have nothing to hide."
Here are 10 responses you can use when someone tries to dismiss the importance of privacy with this hackneyed phrase.

(Honest question, were there enough cats in my video? 😻)

[cemaxecuter @cemaxecuter]

WarDragon Pro just detected and decoded a WiFi-based drone Remote ID. I plugged the serial number into the FAA's database, and boom—it's a DJI 3! Love seeing it all come together.

[KingRat @InfoSecZ]

@joelgaines Roblox