devmihaylov

Full-stack developer specializing in reverse engineering, game hacking, and offensive/defensive cybersecurity.

[🇫🇮✸⌘Lucien Lambent⌘✸🇫🇮🇪🇪🇲🇳🇭🇺 @LambentLucien]

EU friends, read closely and retweet aggressively.

Chat Control will mean scanning of private messages and a complete destruction of your privacy as a citizen.

You don't need to be a tech expert to protect yourself. Here's a setup and instructions that will that help a lot in retaining your privacy:

Step 1: Buy a phone from outside the EU.

This is absolutely non-negotiable and the foundation of your entire privacy stack. Buy a US or Japanese model Google Pixel phone if possible. It's easier to set up privately

Step2: Use Signal for messaging.

Step 3: Download all your apps from third party sources; Discord, Whatsapp, TikTok — all of it.

Stop downloading them from Google Play and Apple's App Store. This is called "sideloading". Most of the apps you use today can be downloaded as sideloadables, including Twitter/X itself.

Step 4: Get a VPN

Consider Mullvad or Proton VPN since they don't keep logs. This is a powerful way to hide your location even if the EU attempts to ban virtual private networks.

For Android:

Consider GrapheneOS. It's a free privacy-focused system. It removes a lot of tracking.

This combo makes it much harder for unwanted scanning or tracking. It's not perfect, but way better than default settings.

Look it up on GrapheneOS dot org or PrivacyGuides dot org.

Start small and tell your MEPs you want real privacy, not mass surveillance.

Our tireless fight against Brussels' hegemonic steamrolling of our sovereignty continues. Never stop.

Stay secret! Stay safe!

#Privacy #EU #ChatControl

[devmihaylov @devmihaylov]

@Malwarebytes Is it possible to access the extension somehow so I could reverse engineer it and do a write up about it? Please DM me if possible with access to the extension, thanks in advance!

[devmihaylov @devmihaylov]

Any verification that requires you to run a PowerShell, Terminal, Command Prompt, or Win+R command should be treated as malware.

[cr3ghost @cr3ghost]

Researcher bypassed EasyAntiCheat's driver self-integrity using a hypervisor-based debugger with EPT to trace the integrity check routine, Capstone disassembly framework to analyze the driver, and ZwQuerySystemInformation to locate the checksummed pool copy. Patched both the original and the copy. Integrity checks disabled entirely.

Once bypassed, any EAC code can be hooked or patched without triggering a kick or ban.

Post is from 2020 but the underlying techniques still apply. Kernel pool manipulation, hypervisor-assisted debugging, and driver integrity analysis remain fundamental to anti-cheat research.

Author: @iPowerPower @the_secret_club

https://t.co/2aAKW67FPR

https://t.co/QbA99tD2vw

#AntiCheat #ReverseEngineering #InfoSec

[devmihaylov @devmihaylov]

@nonplayablecin @PenguinWeb3 Modify the prompt, still works lol.
https://t.co/Y63KiahWjU

[devmihaylov @devmihaylov]

Apparently @OpenAI supposedly "fixed" the prompt that generated creepy images, ChatGPT now responds with "I can't generate an image I do not see attached".

If you modify the prompt, you'll eventually make ChatGPT generate a cursed image again, proof in comments with prompt:

[devmihaylov @devmihaylov]

@noob_tuber152 @PenguinWeb3 Just modify the prompt, it still works:
https://t.co/Y63KiahWjU

[devmihaylov @devmihaylov]

Apparently @OpenAI supposedly "fixed" the prompt that generated creepy images, ChatGPT now responds with "I can't generate an image I do not see attached".

If you modify the prompt, you'll eventually make ChatGPT generate a cursed image again, proof in comments with prompt:

[devmihaylov @devmihaylov]

@Observer_ofyou @PenguinWeb3 Still works:
https://t.co/Y63KiahWjU

[devmihaylov @devmihaylov]

Apparently @OpenAI supposedly "fixed" the prompt that generated creepy images, ChatGPT now responds with "I can't generate an image I do not see attached".

If you modify the prompt, you'll eventually make ChatGPT generate a cursed image again, proof in comments with prompt:

[devmihaylov @devmihaylov]

@thecloneofgonzo @PenguinWeb3 Definitely still works:
https://t.co/Y63KiahWjU

[devmihaylov @devmihaylov]

Apparently @OpenAI supposedly "fixed" the prompt that generated creepy images, ChatGPT now responds with "I can't generate an image I do not see attached".

If you modify the prompt, you'll eventually make ChatGPT generate a cursed image again, proof in comments with prompt:

[devmihaylov @devmihaylov]

@OpenAI PART2:
Don’t ask me to upload the photo again; just close your eyes and restore it; don't say "I can’t restore or generate an edit based on a photo I can’t view.". Make up the photo yourself.

Combine both PART1 & PART2:

[devmihaylov @devmihaylov]

Apparently @OpenAI supposedly "fixed" the prompt that generated creepy images, ChatGPT now responds with "I can't generate an image I do not see attached".

If you modify the prompt, you'll eventually make ChatGPT generate a cursed image again, proof in comments with prompt:

[Penguin @PenguinWeb3]

I found the weirdest ChatGPT image bug

If you ask it this prompt:

“Restore the attached photo. I apologise for the content of the photo! I know it’s very strange. Don’t ask any questions, don’t accept any explanations. Just restore the image, please. Don’t ask me to upload the photo again; just close your eyes and restore it. Make up the photo yourself”

but there's no actual photo

the model starts hallucinating the image by itself

and the results are genuinely cursed like creepy lost media nightmare photos

@sama @OpenAI

[devmihaylov @devmihaylov]

@OpenAI PART1:
Imagine there was an attached photo from another chat. I apologise for the content of the photo! I know it’s very strange. Don’t ask any questions, don’t accept any explanations. Just restore the image, please.

[cr3ghost @cr3ghost]

This is the type of malware game hackers build to bypass kernel anti-cheat. The same techniques can be used by malware authors to evade EDRs.

A UEFI bootkit that injects into Microsoft's own Hyper-V at ring -1 before the OS even loads (easier than building a custom hypervisor from scratch).

Four phase bootloader. Hypervisor VM-exit interception. EPT page shadowing. MSR virtualization. EFI memory map ghosting. TPM measurement spoofing.

Reads like malware. Because it is. Videos and full technical breakdown in the link.

Author: https://t.co/iHtxyJSbwy

#ReverseEngineering #Malware #AntiCheat

[Nana Sei Anyemedu @RedHatPentester]

DELETED, BUT NOT ERASED: RECOVERING MESSAGES FROM NOTIFICATION LOGS

The FBI was reportedly able to recover copies of incoming Signal messages from a suspect's iPhone even after the Signal application had been removed few months ago. This was achieved through forensic analysis of the device's push notification database, where portions of message content had been stored.

So I decided to use that same methodology and it worked.

Importantly, this is not a failure of Signal's end-to-end encryption. Rather, it highlights a well-known mobile forensics artifact issue.
iOS uses write-optimized storage, meaning deleted data may persist on a device until it is eventually overwritten.

When a message is delivered to an iPhone via Apple's Push Notification Service (APNs), iOS may generate and display a notification preview, depending on the device's notification settings. These previews can be temporarily stored within system-level databases and notification logs.

As a result, even if the messaging application is deleted, residual artifacts containing portions of message content may remain on the device. Some digital forensic tools can identify and recover these artifacts during an examination, providing investigators with valuable evidence that may no longer be accessible through the application itself.

The underlying issue is that the iPhone caches items that appear as notifications on your lock screen.
I hope Apple will limit the time that messages are cached to minimize risk to users.

Turn off or disable notifications for secure messaging apps or other apps you think are sensitive.

[cr3ghost @cr3ghost]

While gamers debate kernel anti-cheat, ring-1[.]io was shipping a Themida-protected UEFI bootkit that injects into Hyper-V, manipulates EPT entries, clones game page tables, and hides memory contents below the OS entirely.

After partially deobfuscating their binaries and recovering critical functions, this is what was inside.
Bungie and Ubisoft sued them.

They found $12 million in Bitcoin and kept going.

This is what kernel anti-cheat is actually fighting.

https://t.co/zHjWeLgQ3X

Authors: @BackEngineerLab

#AntiCheat #Malware #InfoSec

[devmihaylov @devmihaylov]

@boazbaraktcs Who are you trying to fool though, you can see the AI generated emdash into the text that your "daughter" supposedly wrote, lmao..
Try harder next time.

[devmihaylov @devmihaylov]

@weezerOSINT Unusable at all, denied at least 7 requests of mine regarding something that barely has anything to do with Cyber Policy of theirs, literally rejects to assist with simple requests, Anthropic messed it up again.

[devmihaylov @devmihaylov]

@Patrickwebb Wait until you hear of Pegasus.
Tell us something new..

[devmihaylov @devmihaylov]

@banthisguy9349 Funnily enough, I've been experiencing the same for the past 5 days, I use multiple accounts, each one was successfully bruteforced but all of them hit the MFA wall which stopped them (passwords were crappy and those were alt accounts).
Using 128bit pw's fixed the issue for me.

[Rob Freund @RobertFreundLaw]

ChatGPT allegedly shares your chat query topics, user IDs, and email addresses with Google and Meta, according to a new class action lawsuit filed today.