Sabitlenmiş Tweet
Dogson
5.8K posts
Dogson
@Dogson20
Developer for #FurryVNE. 3D artist on spare time. @furryodes Bro & colleague. MINORS BEGONE.
Over the rainbow Katılım Ekim 2018
1.5K Takip Edilen3.5K Takipçiler
Dogson retweetledi
🐩 Jackie struts her stuff! 💕 with SOUND!! 🔊
📸 Animation: @SomeMotherF
🗣️ VA: @TheBredFactory_
🔊 Sound Design: @calicoalMS
📦 SFX Pack: @OpenNSFWSP + Pixabay
SomeMF🔞@SomeMotherF
English
Dogson retweetledi
Dogson retweetledi
经历许久的修改打磨之后白露半身像手办终于开始预售了,虽然还有些许遗憾和不完美，但终究是有一个结果啦，希望将来有机会做一个更好的！
《白露》1:6比例半身胸像 （Gk白模）
比例：1/6（全高约18cm）
原型创作：@mzhh
3D建模：@mrmistartist
更多信息请见商品链接详细介绍
中文
Dogson retweetledi
Dogson retweetledi
Are you a dinosaur kisser? You look like a dinosaur kisser to me. 🥰
English
Dogson retweetledi
Dogson retweetledi
English
Dogson retweetledi
Dogson retweetledi
Dogson retweetledi
Dogson retweetledi
A lot of you asked for it, so now it's available on my website!
Works both on Eevee and Cycles
foxtomas@_foxtomas_
For those who wanted to recreate my fur shader Basically, you mix the normals of the fur with the normals of the mesh. After that, you can stylize it with some compositing magic and adjust the shader for your own style and needs. Personally, I am still experimenting and improving my shader. I want my characters to have a great rim light, better performance in Cycles, and full control over the fur behavior. I post all of these stuff in my membership.
English
Dogson retweetledi
Dogson retweetledi
Security researcher Paul Moore has demonstrated how the EU age verification app can be compromised in under 2 minutes with nothing more than physical access to a device.
By editing the app’s shared preferences file an attacker can remove the encrypted PIN values, reset the rate limiting counter to zero, and disable biometric requirements entirely.
The app then accepts a new PIN and grants access to the existing age verification credentials.
His earlier analysis of the open source code also revealed that the app stores NFC biometric facial data and user selfies as unencrypted lossless PNG files on the device.
Deletion is incomplete, leaving the images at risk even after processing.
Europe is so cooked
English
Dogson retweetledi
Our big new feature, the "generic orifice" dropped today!
Use the apps built in coupling tech in any way you can imagine and set up all sorts of lewd scenes!
patreon.com/posts/furryvne…
#3dfurry #3danthro #3dfurryart #furryart #furry3d #FurryVNE
English
Dogson retweetledi
Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Paul Moore - Security Consultant @Paul_Reviews
.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..." I did. It didn't take long to find what looks like a serious #privacy issue. The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well. But, the source image used to collect that data is written to disk without encryption and not deleted correctly. For NFC biometric data: It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them. For selfie pictures: Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them. This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary. From a #GDPR standpoint: Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach. youtube.com/watch?v=4VRRri…
English
Dogson retweetledi
Dogson retweetledi
Dogson retweetledi
Dogson retweetledi
Dogson retweetledi
