SoniControl - building the first ultrasonic firewall
Novel technologies like Google Nearby and Silverpush build upon ultrasonic sounds to exchange information. More and more of our devices communicate via this inaudible communication channel. Ultrasonic communication enables to pair devices, exchange information but also to track users and their behavior across several devices similar to cookies in the web. Every device with a microphone and a speaker is able to send and receive ultrasonic information. The user is usually not aware of this inaudible and hidden data transfer. To overcome this gap, within the project SoniControl we research the current capabilities of ultrasonic communication and raise awareness for this unknown communication channel. To date there is no technology available that detects ultrasonic communication and that enables the user to protect his or her privacy. We develop a mobile application that detects ultrasonic activity, notifies the user and blocks the information on demand. Thereby, we want to raise the awareness for this novel technology and help users to protect their privacy.
https://sonicontrol.fhstp.ac.at/
Source code: https://git.nwt.fhstp.ac.at/m.zeppelzauer/SoniControl
Direct download: https://sonicontrol.fhstp.ac.at/wp-content/uploads/apks/SoniControl.apk
Novel technologies like Google Nearby and Silverpush build upon ultrasonic sounds to exchange information. More and more of our devices communicate via this inaudible communication channel. Ultrasonic communication enables to pair devices, exchange information but also to track users and their behavior across several devices similar to cookies in the web. Every device with a microphone and a speaker is able to send and receive ultrasonic information. The user is usually not aware of this inaudible and hidden data transfer. To overcome this gap, within the project SoniControl we research the current capabilities of ultrasonic communication and raise awareness for this unknown communication channel. To date there is no technology available that detects ultrasonic communication and that enables the user to protect his or her privacy. We develop a mobile application that detects ultrasonic activity, notifies the user and blocks the information on demand. Thereby, we want to raise the awareness for this novel technology and help users to protect their privacy.
https://sonicontrol.fhstp.ac.at/
Source code: https://git.nwt.fhstp.ac.at/m.zeppelzauer/SoniControl
Direct download: https://sonicontrol.fhstp.ac.at/wp-content/uploads/apks/SoniControl.apk
How I Quit Apple, Microsoft, Google, Facebook, and Amazon
A reflection on my month without Apple, Microsoft, Google, Facebook, and Amazon, plus a how-to guide if you want to quit the biggest companies in tech.
SLAUGHTERHOUSE BIG FIVE:
EVERYTHING WAS UGLY AND NOTHING WORKED
It was just before closing time at a Verizon store in Bushwick, New York last May when I burst through the door, sweaty and exasperated. I had just sprinted—okay I walked, but briskly—from another Verizon outlet a few blocks away in the hopes I’d make it before they closed shop for the night. I was looking for a SIM card that would fit a refurbished 2012 Samsung Galaxy S3 that I had recently purchased on eBay, but the previous three Verizon stores I visited didn’t have any chips that would fit such an old model.
https://motherboard.vice.com/en_us/article/ev3qw7/how-to-quit-apple-microsoft-google-facebook-amazon
#apple #microsoft #google #facebook #amazon
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
A reflection on my month without Apple, Microsoft, Google, Facebook, and Amazon, plus a how-to guide if you want to quit the biggest companies in tech.
SLAUGHTERHOUSE BIG FIVE:
EVERYTHING WAS UGLY AND NOTHING WORKED
It was just before closing time at a Verizon store in Bushwick, New York last May when I burst through the door, sweaty and exasperated. I had just sprinted—okay I walked, but briskly—from another Verizon outlet a few blocks away in the hopes I’d make it before they closed shop for the night. I was looking for a SIM card that would fit a refurbished 2012 Samsung Galaxy S3 that I had recently purchased on eBay, but the previous three Verizon stores I visited didn’t have any chips that would fit such an old model.
https://motherboard.vice.com/en_us/article/ev3qw7/how-to-quit-apple-microsoft-google-facebook-amazon
#apple #microsoft #google #facebook #amazon
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
YouTube is reading text in users’ videos
Google keeps tabs on much of your activity, including your browsing history and your location. Now, it turns out that its YouTube service is also reading what’s in your videos, too.
Programmer Austin Burk, who goes by the nickname Sudofox, discovered the issue after discovering a cross-site scripting (XSS) flaw on another site.
In an attempt to responsibly disclose it, he uploaded a video of the exploit to YouTube as an unlisted video so that he could show it to the relevant parties.
https://nakedsecurity.sophos.com/2018/12/14/youtube-is-reading-text-in-users-videos/
Read Via Telegram
#google #youtube #privacy #url
📡@cRyPtHoN_INFOSEC_EN
Google keeps tabs on much of your activity, including your browsing history and your location. Now, it turns out that its YouTube service is also reading what’s in your videos, too.
Programmer Austin Burk, who goes by the nickname Sudofox, discovered the issue after discovering a cross-site scripting (XSS) flaw on another site.
In an attempt to responsibly disclose it, he uploaded a video of the exploit to YouTube as an unlisted video so that he could show it to the relevant parties.
https://nakedsecurity.sophos.com/2018/12/14/youtube-is-reading-text-in-users-videos/
Read Via Telegram
#google #youtube #privacy #url
📡@cRyPtHoN_INFOSEC_EN
Signature spoofing support seems to be broken in (some?) custom ROMs with latest (Dec 5) Security patch. The workaround is to patch the ROM with latest nanodroid patcher.
Link:
https://downloads.nanolx.org/NanoDroid/Stable/NanoDroid-patcher-20.3.20181208.zip
#MicroG #Nanodroid #Nanodroid_patcher
Link:
https://downloads.nanolx.org/NanoDroid/Stable/NanoDroid-patcher-20.3.20181208.zip
#MicroG #Nanodroid #Nanodroid_patcher
Forwarded from cRyPtHoN™ INFOSEC (DE)
Hello everybody, I am happy that from today we can also welcome the team and members of Energized ⚡️ Protection in the BlackBox Security/Datenschutz/Support DE group, to offer support, but also exchange experiences and knowledge in German language.
Unite knowledge, share knowledge and help others, that is BlackBox Security/Data Protection/Support DE😊
Hallo zusammen, ich freue mich das wir ab heute auch das Team und Mitglieder von Energized ⚡️ Protection bei BlackBox Security/Datenschutz/Support DE begrüßen können, um bei Bedarf Unterstützung, aber auch Erfahrungs Austausch und eine Sammlung an Wissen in Deutscher Sprache zu bieten.
Wissen vereinen, Wissen teilen und anderen helfen, dass ist BlackBox Security/Datenschutz/Support DE 😊
https://t.iss.one/BlackBox_Security_Datenschutz_DE
📡 @cRyPtHoN™INFOSEC_DE
Unite knowledge, share knowledge and help others, that is BlackBox Security/Data Protection/Support DE😊
Hallo zusammen, ich freue mich das wir ab heute auch das Team und Mitglieder von Energized ⚡️ Protection bei BlackBox Security/Datenschutz/Support DE begrüßen können, um bei Bedarf Unterstützung, aber auch Erfahrungs Austausch und eine Sammlung an Wissen in Deutscher Sprache zu bieten.
Wissen vereinen, Wissen teilen und anderen helfen, dass ist BlackBox Security/Datenschutz/Support DE 😊
https://t.iss.one/BlackBox_Security_Datenschutz_DE
📡 @cRyPtHoN™INFOSEC_DE
Vulnerabilities in Google Drive and Google Photos allowed others to steal your files
https://blog.avatao.com/How-I-could-steal-your-photos-from-Google
📡 @NoGoolag
#google #drive #photos #vulnerability #bug #leak #why
https://blog.avatao.com/How-I-could-steal-your-photos-from-Google
📡 @NoGoolag
#google #drive #photos #vulnerability #bug #leak #why
DOH (DNS Over HTTPS) Server App - Prerelease Version
By courtesy of Daniel (Frostnerd) the current and brand new DOH Sever App. This version does not yet contain any functions (e.g. start at boot etc.), but is completely re-encoded.
As usual, this app does not contain advertising, tracking, home calls or whatever. We certainly wouldn't recommend it to you if that were the case. And of course, this App is opensource too.
https://git.frostnerd.com/PublicAndroidApps/smokescreen
In the near future there will also be a "keweon Edition", which contains the keweon servers by default. But there will be an extra version of the new DNS Changer app for f-droid, because Googel doesn't tolerate real AdBlockers in the store.
This version is stable, but it is still a pre-release version and there will be more features to add.
The battery consumption is already much lower than with Intra e.g., just be surprised.
Ideas, complaints and any helpful comments can be shared with the hashtags #Bugreport #smokescreen in the BlackBox Security/Data Protection/Support DE group.
🔽🔽🔽Download DoH DNS Changer App 🔽🔽🔽
https://t.iss.one/BlackBox_Security_Datenschutz_DE
#smokescreen #Frostnerd #DNSChanger #keweon #keineWerbung #Adblock
📡 BlackBox Security/Datenschutz/Support DE
By courtesy of Daniel (Frostnerd) the current and brand new DOH Sever App. This version does not yet contain any functions (e.g. start at boot etc.), but is completely re-encoded.
As usual, this app does not contain advertising, tracking, home calls or whatever. We certainly wouldn't recommend it to you if that were the case. And of course, this App is opensource too.
https://git.frostnerd.com/PublicAndroidApps/smokescreen
In the near future there will also be a "keweon Edition", which contains the keweon servers by default. But there will be an extra version of the new DNS Changer app for f-droid, because Googel doesn't tolerate real AdBlockers in the store.
This version is stable, but it is still a pre-release version and there will be more features to add.
The battery consumption is already much lower than with Intra e.g., just be surprised.
Ideas, complaints and any helpful comments can be shared with the hashtags #Bugreport #smokescreen in the BlackBox Security/Data Protection/Support DE group.
🔽🔽🔽Download DoH DNS Changer App 🔽🔽🔽
https://t.iss.one/BlackBox_Security_Datenschutz_DE
#smokescreen #Frostnerd #DNSChanger #keweon #keineWerbung #Adblock
📡 BlackBox Security/Datenschutz/Support DE
AdAway
Open source ad blocker for Android using the hosts file
https://adaway.org
⬇️ Download Stable
https://f-droid.org/app/org.adaway
⬇️ Download Preview builds
https://androidfilehost.com/?w=files&flid=249276&sort_by=date&sort_dir=DESC
📖 Readme
https://github.com/AdAway/AdAway/blob/master/README.md
📖 Wiki
https://github.com/AdAway/AdAway/wiki
https://github.com/AdAway/AdAway/wiki/HostsSources
🗣 XDA
https://forum.xda-developers.com/showthread.php?t=2190753
📡 @NoGoolag
#adaway #block #ads #hosts
Open source ad blocker for Android using the hosts file
https://adaway.org
⬇️ Download Stable
https://f-droid.org/app/org.adaway
⬇️ Download Preview builds
https://androidfilehost.com/?w=files&flid=249276&sort_by=date&sort_dir=DESC
📖 Readme
https://github.com/AdAway/AdAway/blob/master/README.md
📖 Wiki
https://github.com/AdAway/AdAway/wiki
https://github.com/AdAway/AdAway/wiki/HostsSources
🗣 XDA
https://forum.xda-developers.com/showthread.php?t=2190753
📡 @NoGoolag
#adaway #block #ads #hosts
List to block MIUI spyware reporting back to xiaomi servers. The list is huge
Add this link in Adaway -> Host sources :
Don't worry if it says
Local: not avaliable, Online: not avaliable
It should be working, just test any address from the list
( From @ eboye
https://gist.github.com/eboye/ef2f8c3e9e3b32c0980ff1a226770b1c )
📡 @NoGoolag
#miui #spyware #block #hosts
Add this link in Adaway -> Host sources :
https://gist.githubusercontent.com/eboye/ef2f8c3e9e3b32c0980ff1a226770b1c/raw/36afd2333c781b5682bf602580a7935649d794b2/adaway-miui-blocklist
Don't worry if it says
Local: not avaliable, Online: not avaliable
It should be working, just test any address from the list
( From @ eboye
https://gist.github.com/eboye/ef2f8c3e9e3b32c0980ff1a226770b1c )
📡 @NoGoolag
#miui #spyware #block #hosts
Gist
adaway-miui-blocklist
GitHub Gist: instantly share code, notes, and snippets.
CHEF-KOCH
Firefox Hardening
https://github.com/CHEF-KOCH/FFCK
user.js -- Firefox configuration hardening
https://github.com/CHEF-KOCH/user.js
Chromium Hardening
https://github.com/CHEF-KOCH/Chromium-hardening
Thunderbird user.js hardening
https://github.com/CHEF-KOCH/TBCK
Android Privacy Data Protection Tools
https://github.com/CHEF-KOCH/Android-Privacy-Data-Protection-Tools-Mega-Thread
POTARC - Privacy Online Test And Resource Compendium
https://github.com/CHEF-KOCH/Online-Privacy-Test-Resource-List
DNScrypt proxy blacklist filter
A basic filter list designed for the blacklist mechanism in DNSCryp-Proxy v2
https://github.com/CHEF-KOCH/dnscrypt-proxy-blacklist-filter
DarkWeb pages overview
Shows Deep Web specific pages, software and other related information.
https://github.com/CHEF-KOCH/ProjectX
CHEF-KOCH Warez list
https://github.com/CHEF-KOCH/Warez
Android Unbound DNS-over-TLS
https://github.com/CHEF-KOCH/Android-Unbound-DNSoverTLS
Windows Gaming Tweaks
https://github.com/CHEF-KOCH/GamingTweaks
https://chef-koch.github.io
https://github.com/CHEF-KOCH
https://gitlab.com/CHEF-KOCH
📡 @NoGoolag
#ck #chef #koch #hardening #ff #chrome #chromium #alternatives
Firefox Hardening
https://github.com/CHEF-KOCH/FFCK
user.js -- Firefox configuration hardening
https://github.com/CHEF-KOCH/user.js
Chromium Hardening
https://github.com/CHEF-KOCH/Chromium-hardening
Thunderbird user.js hardening
https://github.com/CHEF-KOCH/TBCK
Android Privacy Data Protection Tools
https://github.com/CHEF-KOCH/Android-Privacy-Data-Protection-Tools-Mega-Thread
POTARC - Privacy Online Test And Resource Compendium
https://github.com/CHEF-KOCH/Online-Privacy-Test-Resource-List
DNScrypt proxy blacklist filter
A basic filter list designed for the blacklist mechanism in DNSCryp-Proxy v2
https://github.com/CHEF-KOCH/dnscrypt-proxy-blacklist-filter
DarkWeb pages overview
Shows Deep Web specific pages, software and other related information.
https://github.com/CHEF-KOCH/ProjectX
CHEF-KOCH Warez list
https://github.com/CHEF-KOCH/Warez
Android Unbound DNS-over-TLS
https://github.com/CHEF-KOCH/Android-Unbound-DNSoverTLS
Windows Gaming Tweaks
https://github.com/CHEF-KOCH/GamingTweaks
https://chef-koch.github.io
https://github.com/CHEF-KOCH
https://gitlab.com/CHEF-KOCH
📡 @NoGoolag
#ck #chef #koch #hardening #ff #chrome #chromium #alternatives
personalDNSfilter
Block ads via local VPN connection and custom DNS (optional).
~ Features:
- Open source
- Lightweight (<150 KB approx.)
- Negligible RAM consumption (10 MB approx.)
- Battery friendly
- Inbuilt DNS changer (Can use Custom DNS)
- Hosts blocking
- Domain blocking
- Support manual adding domain for whitelisting & blacklisting
- Inbuilt app filter (Can bypass certain apps from being filtered)
- No privacy mining (Your data is your data)
~ Bonus feature:
- Can act as network logger also (User can see what app is making request)
>Source:
https://github.com/IngoZenz/personaldnsfilter
>XDA:
https://forum.xda-developers.com/android/apps-games/app-personaldnsfilter-block-malware-t3567898
>Web:
https://www.zenz-solutions.de/personaldnsfilter/
>Telegram:
https://t.iss.one/pdnsf
#pdnsf #pdf #dns
Block ads via local VPN connection and custom DNS (optional).
~ Features:
- Open source
- Lightweight (<150 KB approx.)
- Negligible RAM consumption (10 MB approx.)
- Battery friendly
- Inbuilt DNS changer (Can use Custom DNS)
- Hosts blocking
- Domain blocking
- Support manual adding domain for whitelisting & blacklisting
- Inbuilt app filter (Can bypass certain apps from being filtered)
- No privacy mining (Your data is your data)
~ Bonus feature:
- Can act as network logger also (User can see what app is making request)
>Source:
https://github.com/IngoZenz/personaldnsfilter
>XDA:
https://forum.xda-developers.com/android/apps-games/app-personaldnsfilter-block-malware-t3567898
>Web:
https://www.zenz-solutions.de/personaldnsfilter/
>Telegram:
https://t.iss.one/pdnsf
#pdnsf #pdf #dns
personalHTTPproxy
Use local http proxy for ad blocking (Required APN configuration to work).
~ Features:
- Open source
- Lightweight (<100 KB)
- Negligible RAM consumption (10 MB approx.)
- Battery friendly
- Hosts blocking
- Support wildcard blocking
- Support for whitelisting & blacklisting
- Only intercept http/https connection
- Can act as real http/https proxy (For bypassing blocked websites with ad blocked)
- No privacy mining (Your data is your data)
~ Bonus feature:
- Can act as network logger also (User can see what app is making request)
>Source:
https://github.com/IngoZenz/personalhttpproxy
>XDA:
https://forum.xda-developers.com/android/apps-games/app-personal-httpproxy-android-block-t3339874
>Web:
https://www.zenz-solutions.de/personalhttpproxy/
>Telegram:
https://t.iss.one/pdnsf
#phttpp #php #http #proxy
Use local http proxy for ad blocking (Required APN configuration to work).
~ Features:
- Open source
- Lightweight (<100 KB)
- Negligible RAM consumption (10 MB approx.)
- Battery friendly
- Hosts blocking
- Support wildcard blocking
- Support for whitelisting & blacklisting
- Only intercept http/https connection
- Can act as real http/https proxy (For bypassing blocked websites with ad blocked)
- No privacy mining (Your data is your data)
~ Bonus feature:
- Can act as network logger also (User can see what app is making request)
>Source:
https://github.com/IngoZenz/personalhttpproxy
>XDA:
https://forum.xda-developers.com/android/apps-games/app-personal-httpproxy-android-block-t3339874
>Web:
https://www.zenz-solutions.de/personalhttpproxy/
>Telegram:
https://t.iss.one/pdnsf
#phttpp #php #http #proxy
DOH (DNS Over HTTPS) Server App
New SmokeScreen Version Alpha-1.0 (Build 8):
- The notification doesn't make sounds anymore
- The notification now shows how many entries are cached
- Added logging which collects some debug info for me (only locally on your device, you can send the logs to me by hand)
🔆 🔆
SmokeScreen DNS Changer APP Neue Version Alpha-1.0 (Build 8):
- Die Benachrichtigung erzeugt keine Geräusche mehr.
- Die Benachrichtigung zeigt nun an, wie viele Einträge zwischengespeichert werden.
- Protokollierung hinzugefügt, die einige Debug-Informationen für mich sammelt (nur lokal auf Ihrem Gerät, Sie können die Protokolle von Hand an mich senden).
#smokescreen #Frostnerd #DNSChanger #keweon #keineWerbung #Adblock #Bugreport
Download🔽🔽🔽
📡 BlackBox▪️Security▪️Datenschutz▪️Support
New SmokeScreen Version Alpha-1.0 (Build 8):
- The notification doesn't make sounds anymore
- The notification now shows how many entries are cached
- Added logging which collects some debug info for me (only locally on your device, you can send the logs to me by hand)
🔆 🔆
SmokeScreen DNS Changer APP Neue Version Alpha-1.0 (Build 8):
- Die Benachrichtigung erzeugt keine Geräusche mehr.
- Die Benachrichtigung zeigt nun an, wie viele Einträge zwischengespeichert werden.
- Protokollierung hinzugefügt, die einige Debug-Informationen für mich sammelt (nur lokal auf Ihrem Gerät, Sie können die Protokolle von Hand an mich senden).
#smokescreen #Frostnerd #DNSChanger #keweon #keineWerbung #Adblock #Bugreport
Download🔽🔽🔽
📡 BlackBox▪️Security▪️Datenschutz▪️Support