Strangecode

@insomniacity @mikko @triskweline I guess other devices don't let you spoof the IMEI registered for the SIM.

@strangecode @mikko @triskweline Ok, makes sense. But doesn’t quite seem to explain the market value of these devices? If I have victim’s SIM I can use any device anyway surely?

There’s still a strong aftermarket for Nokia 1100 phones, specifically for the RH-18 models made in 2003-2004 in the Bochum factory.

@insomniacity @mikko @triskweline As I understand, the bug in Nokia 1100 only allowed you to change IMEI and IMSI. In order to successfully authenticate to the network, the attacker still needs to have a copy of a victim's SIM card, which contains the ID and authentication key.

@strangecode @mikko @triskweline So that would then reduce the security to encryption provided by the SIM, right?

@insomniacity @mikko @triskweline The minimal amount of trust the network needs is to accept the authentication of the device. In this case, if I understand correctly, that's what's happening: the device is able to spoof its IMEI and receive messages meant for another device.

@mikko @triskweline Does this imply the networks are trusting the client more than they should (which is, not at all)? Otherwise how would a different firmware give this behaviour?

by Julia Evans (@b0rk) and Marie Claire LeBlanc Flanagan (@omarieclaire) more like this at wizardzines.com

"How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub" This research paper found that ~10% PoC repositories on Github were malicious 😬 arxiv.org/pdf/2210.08374… #infosec #cybersecurity #bugbounty #bugbountytips

Another thing launched today in Kagi search is the Code widget. Find what you are looking for, even if it is hidden in the in the depths of Github.

Did you know Safari’s Web Inspector has tooling to help you reduce how much power your website uses? This article walks you through how to think about power consumption, what draws power, and how to inspect your site or app. webkit.org/blog/8970/how-…

We got it back! twitter.com/strangecode/st…

my twitter apple id discord instagram facebook tiktok coinbase metamask binance crypto wallet account was suspended blocked locked hacked lost password disabled recover account please help. DO NOT REPLY TO THIS MESSGE UNLESS YOU ARE A BOT.

@levelsio Maybe collaborate with xno.ai? Or copy their distributed model (they pool crowdsourced GPUs).

$1000 per day GPU bill now but it's okay! Please buy more job posts on remoteok so I pay for GPUs for interiorai 😅

If you tweet about “account blocked” you immediately get replies from bots trying to scam you.

Twitter suspended our hosting status account @StrangecodeStat that only tweeted about server upgrades. 🙄

techies are fun to hang out with because you get to find out about decades old rivalries between linux tools named shit like “plonk” and “zslap” that do the exact same thing and how every plonk user genuinely thinks zslap users deserve the death penalty

The future of web is going to be nuts. postgres-wasm is an embeddable Linux VM with Postgres installed, which *runs inside a browser.* github.com/snaplet/postgr… snaplet.dev

The GCHQ’s Cyber Swiss Army Knife – a web app for encryption, encoding, compression and data analysis, with over 350 operators. gchq.github.io/CyberChef/

Here’s a better list of services that support YubiKeys: yubico.com/works-with-yub…

Hardware keys are phishing-resistant MFA (multi-factor authentication), supported by many online services and password managers (those with a “hardware token” symbol in the list here: 2fa.directory). Everyone can benefit from the extra security they provide. Buy two!

Yay! Cloudflare + Yubico offering discounted MFA Security Keys to all Cloudflare Zero Trust customers (including the free plan): YubiKey 5 NFC: $10 (normally $45) YubiKey 5C NFC: $12 (normally $55) blog.cloudflare.com/making-phishin…

If anyone is interested in following all of the global CERTs, CIRTs, SIRTs, CSIRTs, PSIRTs, NCSCs and ISACs - I made a list twitter.com/i/lists/149730…