Harry

OT/ICS Cyber Security Engineer. Guitar and Motorsports. LUFC

[vx-underground @vxunderground]

> protect the kids
> look inside
> mass surveillance

[Harry @saltedpeanuts3]

@SamuelC63619 @ukinchina Talking out your arse mate, probably worry about your own country first.

[Leman Walters @LemanWalters]

What a superb ad, wow

[vx-underground @vxunderground]

I have added another 250,000 malwares to the malware collection.

Please download the malware here:
https://t.co/xvJa5yJKws

Thank you.

[Telegram Messenger @telegram]

if I had to look for a job on @LinkedIn I would fucking kill myself

[Tony Osborne @Rotorfocus]

Gutted, was looking like a strong line-up, but virtually impossible with 24 bombers on the ground and the security implications that go with it. Roll on 2027.

[Harry @saltedpeanuts3]

@plzpassthepie @thejackal5881p @stuartmyershot1 @empireofthekop @footyinsider247 Like Mo has been any good for the past 2 years, laughable comment

[Harry @saltedpeanuts3]

@SaintsSixers @wayneleedsfan @BCFC Sent that to a Leeds fan?

[Harry @saltedpeanuts3]

@SaintsSixers @BCFC And you’re no where near the playoffs mate 😭😭

[Harry @saltedpeanuts3]

@LewisDeighton17 Feel like I’ve said this a million times but the Reg they’ve been “charged” under didn’t exist when we did it, it exists because of us lmao

[Harry @saltedpeanuts3]

@sarlanankisi @techbromemes 0 ball knowledge

[vx-underground @vxunderground]

Hahahahahaha

VPNs are HURTING CHILDREN

Hahahaha fucking stupid fucks

[International Cyber Digest @IntCyberDigest]

“Non-technical teams are now shipping production code”

[Harry @saltedpeanuts3]

@Secure_ICS_OT @techspence Never has been never will!! The IRGC team I have to work with doesn’t seem to get the memo…

[Harry @saltedpeanuts3]

@PGMHecateII That’s the most WARNO screenshot I’ve ever seen

[Harry @saltedpeanuts3]

@CCFCEra Straight back down next season then

[Harry @saltedpeanuts3]

@tirii_f1 Proper chatgpt post this

[Lewis Deighton @LewisDeighton17]

An away end for the ages indeed. 😮‍💨

#LUFC

[Paul Moore - Security Consultant  @Paul_Reviews]

Hacking the #EU #AgeVerification app in under 2 minutes.

During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.

1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.

So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.

After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.

Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.

Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.