What is Hackers' Pub?

Hackers' Pub is a place for software engineers to share their knowledge and experience with each other. It's also an ActivityPub-enabled social network, so you can follow your favorite hackers in the fediverse and get their latest posts in your feed.

0
0

Nach Schuss auf gehörloses Kind: Kritik wegen „aggressiver “ der Polizei. Und an falscher bzw manipulativer Darstellung der Geschehens

"Mutter und Bruder gaben demnach zu Protokoll, dass die Messer erst in einer Paniksituation ins Spiel kamen, die die Polizei selbst verursacht habe. Zunächst habe die Polizei in der Wohnung den Strom abgedreht. „Sie haben also gehörlose Menschen in dieser Wohnung sozusagen noch zusätzlich blind gemacht“"

haz.de/panorama/schuss-auf-geh

0
0
0

お知らせ

このアカウントでアップしていた我が家のねこが27日早朝に亡くなりました。元々肺の病気を患っていたのと、少し前から体重の増加と手足のむくみが出てきて体調を崩していたので、介護体制に入ってすぐの出来事でした。5月からレンタルしていた酸素ケージが大活躍してくれて、家人と一緒に自宅で最期を看取ることができました。

持病もある中で17歳9ヶ月も生きてくれたのはすごいなぁと思います。今までねこの写真を愛でてくれたFediverse住民(Fedizen)の方々本当にありがとうございました!

(返信は落ち着いた頃にさせてください)

ねこちゃん、17歳9か月生きました
1
0

지나가는 개발자 분들께… 혹시 해결방법 있으면 알려주시길 바랍니다… 아니면 정녕 jdk 21로 다운 그레이드 하는 방법 밖에 없을까요?

RE: https://bsky.app/profile/did:plc:qqwzbhdnsy3jjmt3uy332hhy/post/3m6lqz6ixs22s

0
0
0
0
0
1
1

I voted in the DSF election with hours to spare 😅

Thanks to my toddler for the 4am wakeup. Now he's back asleep, I found some morning computer time and remembered to vote.

Many strong candidates—good luck to y'all!

djangoproject.com/weblog/2025/

0
1

核融合への投資はいいね。1,000億ぐらいあれば様々な専門家を育成することができる。日本の今の力だと自前で核融合発電を開発することもライセンス製造することも難しいだろうけど、買うときにその技術を検討できる専門家がいないと困るからね。

0

Thanks to all of you, we have over 1,000 stars 🌠 on @CodebergCodeberg.org, a mostly volunteer-driven code forge that shares our commitment to community & Free/Libre/Open Source Software. Their efforts make the way we develop CoMaps possible.

Did you know: Codeberg is run by a non-profit association that sustains itself via memberships & donations. If that sounds as cool to you as it does to us: Consider donating or becoming a member! join.codeberg.org/

a sharepic showing a nightsky full of stars with a person looking up on top. below it the text "CoMaps 💖 Codeberg"
0
0
0
0
0
0
0
0
0
0
0

펌) ‼️내란은 끝나지 않았다! 12.3 계엄 1년, 국회로 모이자!‼️ 내란수괴 윤석열의 구속기간이 내년 1월 18일이면 만료됩니다. 이미 한 차례 내란수괴 윤석열의 구속 취소 결정을 단행한 지귀연 재판부가 의도적으로 재판을 지연시켜 다시 내란수괴가 거리를 활보하도록 하게 하려는 것은 아닌지 국민적 우려가 커지고 있습니다. 내란공범 한덕수는 최후변론에서 계엄을 막지는 못했지만 찬성하거나 도우려 한 일은 결단코 없다고 했습니다.

0
1
0
0
0
0
2

잊을 만 하면 하나씩 마음찍히는 트윗이 있는데 여러분도 저처럼 남캐 판다고 욕드셨나요. 짠 캐가 여혐이라고 욕드셨나요. 그렇다면 욕한 애가 잘못이니 그런 인간 상대해봤자 본인 뇌피셜 돌리기나 하고 대화도 안 통해서 열 받으니 상대마시고 신고하고 블락하시고 해피 덕질 하세요.

0
0

About 1.5 years ago my friend was (wrongly) accused of terrorism.

All of their electronic devices were seized, plus my stash of hard drives (stored at their place for reasons).

Of course police didn’t find any evidence. Culprit that framed my friend (and many others) got arrested recently (article in Polish).

Police returned the hardware few months ago and I found that all of my drives are now e-waste thanks to their carelessness, which made me (understandably) furious. I even considered suing them.

Said very good friend of mine entrusted me with their personal phone and pattern to unlock it. I charged and booted it for the first time since February 2024 and were curious how it was pwned. I knew police used cellebrite on it.

My crime is that of curiosity

As it turns out, police forgot to clean after themselves (there was an attempt) and left payloads, logs, and backdoor intact.

Took a peek at the first-stage payload but it’s too complex for me to reverse-engineer on my own. It’s relatively well obfuscated, but I can tell it’s using RNDIS (likely spawning a server?) and TLS-encrypted connection to talk to Cellebrite box.

If you’re a security researcher (or just curious nerd with more spoons than me) and you would like to take a look - here you go.

Payload was uploaded onto the device on 2024-02-21. If you want to re-create the environment it was executed on, you will need a:

  • Samsung Z Flip3 5G (SM-F711B)
  • Android build SP2A_220305.013.F711BXXS2CVHF

Rough execution flow:

1. USB device plugged in (Cellebrite Cheetah)
2. USB controller switches to host mode
3. Gadget switching USB VID/PID to load kernel modules
4. Module 'hid_akeys' leaks memory
5. Screen unlocked
6. ADB key '82:E5:EA:F3:DC:D1:7D:CA:65:3C:D4:58:65:CD:81:8E' added to trusted keys on the device
7. First-stage payload '/data/local/tmp/falcon' copied onto the device.
8. Second-stage payload (seemingly) executed as root:
	- /data/local/tmp/chrome-command-line
	- /data/local/tmp/android-webview-command-line
	- /data/local/tmp/webview-command-line
	- /data/local/tmp/content-shell-command-line
	- /data/local/tmp/frida-server-16.1.4-android-arm64
	- /data/local/tmp/init
9. Data extraction (photos, telegram, firefox, downloads)

# Unanswered question: What the hell is "jtcb.sdylj.axpa" running as root? Seems to have been dropped around the same time...

Have fun!

0
1
0
0
0
0
1
0

선호 불호 에 대해서 좋아하는거면 좋아좋아 하면 되고 싫어하는거에 대해서는 거친 표현만 안했으면 좋겠다구 생각합니다 특히 당사자 앞에서 이걸 왜 먹냐..ㅇㅅㅇ 으.. ㅈㅈ 못 먹을거 먹는 사람 보듯 하면 기분이 좋지 않지요 먹는거 이해 못 할 수는 있는데 그걸 면전에다 대고 뭐라 하면 좀 그렇죵.. 그냥 너는 그걸 조아하는구나 나는 이거 그다지 좋아하진 않아 하면 될텐뎅 ㅎㅎ..ㅎ 누가 억지로 먹어먹어 하지 않는 이상 그냥 부드럽게 말해주면 좋겠어용

0
0
0
0
1
0
0