Xavier Mertens

Is it 100% clear that all the photos will be publicly available for everyone in the planet? Does it matter if most of the background if dark or light? How many photos do you need per device? Are you going to filter porn, gore, ...? See "Running a Wall of Sheep in the Wild" https://blog.rootshell.be/2018/10/26/post-brucon-experience-running-a-… HN discussion https://news.ycombinator.com/item?id=18320334 (47 points, 7 days ago, 46 comments)

You don't need nc or socat for six years now. https://blog.rootshell.be/2010/03/08/openssh-new-feature-netcat-mode/ just use ssh -W instead.

I am not sure this is a new threat, a user's list of known SSIDs has been a recognized threat to privacy for a long time. You do not even need to have an app installed on Alice's phone to track her location. All Eve has to do is listen for beacon probes from alice's laptop and Eve can get a good picture of where Alice has been and more: "Show me your SSIDS I'll tell you who you are"[1] [1]: http://blog.rootshell.be/2012/01/12/show-me-your-ssids-ill-tell-who-yo…

A single visit or even a walk-by can reveal a lot too. As I understand it, SSID probing basically reveals all the networks your device knows about to any AP [1]. This can give away a lot of information too. [1] http://blog.rootshell.be/2012/01/12/show-me-your-ssids-ill-tell-who-yo…

I like using dns2tcp, it's a lot easier to set up as it works on the transport layer (TCP), not the network layer (IP), and it seems a bit more reliable in my experience. http://blog.rootshell.be/2007/03/22/dns2tcp-how-to-bypass-firewalls-or… http://www.hsc.fr/ressources/outils/dns2tcp/download/README http://www.hsc.fr/ressources/outils/dns2tcp/download/

I do this to access work machines from home. The only problem with the technique is that some organizations and malware detection software consider netcat to be a "hacking" tool and remove it. This is particularly common on Windows servers. Newer OpenSSH has a netcat mode built-in http://blog.rootshell.be/2010/03/08/openssh-new-feature-netcat-mode/

But login requests on Facebook do use SSL- if you use firebug on the Facebook homepage, the login form points to " https://login.facebook.com/login.php?login_attempt=1 ". The issue seems to be that code is injected in pages that merely contained a login form: http://blog.rootshell.be/2011/01/13/tunisia-tracks-users-with-javascri…

Considering the number of shells I have open, that would be very weird. A coherent "local" history is very useful not just for the up key but also for referring to history items by number (like "!123"). My solution for my laptop has helped me on countless occasions. I've been doing this for about three years. 1. Compile bash with the syslogger patch. Each command will generate one line with timestamp, username, terminal PID, and command. 2. Configure syslog to pipe all bash commands to a special file. 3. Run a cronjob every night that takes all the bash commands from the day and saves them off to a day specific file. 4. Need to find that command you ran 6 months ago to get package XYZ to work in way ABC? Use "grep -R" to find every single invocation you ever made to that program. If you actually needs a particular shell's local history, pipe grep through a grep for the PID (I find I almost never need that). I work with so many different technologies for such brief times that this is just absolutely invaluable. It also helps you narrow down dates of events sometimes. For installation, use google etc. but here: http://blog.rootshell.be/2009/02/28/bash-history-to-syslog/ Gentoo users can reinstall with the 'bashlogger' USE flag.