BC TECH
Saved by @SteveeRogerr

Woke up to like 100 tags on this iPhone implant. Which is found in this video here: https://t.co/9khbpmUQEH

I don’t speak Russian, but I do have a first grade language fluency in hardware. So lets take a look!
Thread 1/n

 So a lot of people have correctly identified it as this GPS & Wifi based location tracker with microphone.
A very common type of device, similar to what is found in those extremely suspicious looking USB cables: https://t.co/uBhi7tRhiW

2/n
The headers are designed to attach a specific USB connector that fits a micro SD card in the tip.
3/n
A repurposed board is very “hobby implant” but... we see the SIM card was removed, which would make this a wifi-only implant. Yet an external GSM antenna is attached and only the ground for power? Cant see the other side though...
4/n
Upon closer inspection, they removed the SIM slot housing and soldered a SIM card directly to the pads. That gains a little more space.

Thanks @dcuthbert

5/n https://t.co/Sq9X6yByPV
You can see an antenna in the upper right. Right on a metal shield which will hurt the range.
There is normally not a convenient place for an implant, but they swapped the battery for a smaller one.
6/n
This feels like a proof of concept done for the video, or a fairly low grade implant done with a tiny budget. It could be done way smaller by not repurposing an existing thumb drive module.

7/n
For many adversaries that want location & mic, I suspect they generally don’t need a hardware implant. But there are always exceptions. That’s not really my area though.
8/n
Looks like @Requiem_fr has a nice visual comparison showing the battery reduction for clearing space.

This is a technique I have also used in power supplies when needing a little extra space for... activities 😈

9/n https://t.co/KjgfREmhZt
If true, this seems almost like it was intended to be found. The work is really primitive for gov work, not to mention the other ways they can pull location & mic.

10/n https://t.co/AwNiFpIE2V
The “shrink the power source” approach was what I used for this project:

11/n https://t.co/gz3cuKC6jb
Here is a previously unpublished picture of the internals. It’s all cannibalized COTS hardware.
This was before I got into hardware design. Not very good, but enough for a proof of concept.

12/n
One plausible idea: this only needed to last long enough to see where the phone went before it was torn open. That would give some valuable info.

13/n https://t.co/M77sGjOmcW
Anyway. I’m just going off a few pictures as I haven’t had the time to properly research it. For all I know, this was created as a stand-in for video demo purposes.
14/n

More from Tech

Matt Wallace
Matt Wallace
@MattFnWallace
Hey, who wants to read a story about @Upwork fucking over freelancers in order to upsell their clients on unnecessary services the clients don't want and can't afford? Strap in!

So after my marketing agency closed I started freelancing again. A marketing company that wanted to work with me only hires freelance writers through @Upwork. So I signed up. I wasn't thrilled about it, but that's who they contract with and it's their marketing company.

I've been receiving regular assignments from this company, thru @Upwork, for over a month now. I've written dozens of articles for them. My work has been exemplary. I've been handling repeated rush jobs and delivering. The client was and is very happy. That's coming from them.

While I was wrapping up several assignments this week I was contacted by the marketing company. They asked if I had taken a new full-time job and wasn't available anymore. It seems @Upwork's talent group told them I was no longer available to take assignments.

I was very surprised. Nothing had changed on my end. I still needed the freelance work very much. I told them so. So the marketing company pressed @Upwork and were told there were "compliance" issues that were preventing the marketing company from giving me any more work.
TECH
Jonas L
Jonas L
@jonasLyk
Wanna disable Defender when enabled Isolated Core and Tamper protection?

Its a bit more trouble- but doable, without ruining Isolated Core/Secureboot etc.

Defenders process will run as a unkillable protected service- so new tricks needed.

Here we go:

Ok- tamper protection is easy, just make .bat - run as adm:
:again
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter\Instances\WdFilter Instance" /v altitude /t REG_SZ /d -1 /f
goto again

Then unload minifilter with process hacker:


The registry key will be changed while the minifilter do not protect it, when tamper protection makes the driver load again it cannot attach to volumes nor protect registry keys.

Removing it will make it recreate, but invalid altitude do the trick

Notice now the service is: Protected light(antimalware)
Now we cant do anything to the service/process- not even see its open handles.


Lets start by elevating to SYSTEM- just launch a command prompt, then close process hacker- and run it again from the command prompt.
Now process hacker runs as SYSTEM
INTERNET , TECH
Advertisement
Laurie Voss
Laurie Voss
@seldo
The 2018 State of JavaScript survey is out. They got 20,000 responses and have some delicious, delicious data. I'mma thread in some highlights:

First up: JavaScript flavors. There's TypeScript at 47% adoption, a tad higher than npm's own survey results (which said 46%). npm's survey is coming up again soon and will ask about TypeScript in a lot more detail.


I really, *really* like SoJ's "would not use again" question, which lets people who've abandoned a tech self-identify. This is noticeable in the graph above with Flow users -- 41% of people who've used Flow say they wouldn't use it again.

Now JavaScript frameworks. It's been a full year since npm's survey, so these numbers differ from ours in the directions I expected:
React 65% (vs. 60%)
Vue 29% (vs. 24%)
Ember 5% (vs 4%, I was expecting a bigger rise)

But there's a shocker in here: Angular.


npm's survey had Angular at 40% last year and SoJ has it at either:
- 58% (if you include those who don't want to use it again)
- 24% (if you count only those who like it)
Since npm's question didn't ask if they intend to *continue* using it I think that might explain this.
TECH
The Captain
The Captain
@TheCaptain182
What an amazing presentation! Loved how @ravidharamshi77 brilliantly started off with global macros & capital markets, and then gradually migrated to Indian equities, summing up his thesis for a bull market case!

@MadhusudanKela @VQIndia @sameervq

My key learnings: ⬇️⬇️⬇️


First, the BEAR case:

1. Bitcoin has surpassed all the bubbles of the last 45 years in extent that includes Gold, Nikkei, dotcom bubble.

2. Cyclically adjusted PE ratio for S&P 500 almost at 1929 (The Great Depression) peaks, at highest levels except the dotcom crisis in 2000.

3. World market cap to GDP ratio presently at 124% vs last 5 years average of 92% & last 10 years average of 85%.
US market cap to GDP nearing 200%.

4. Bitcoin (as an asset class) has moved to the 3rd place in terms of price gains in preceding 3 years before peak (900%); 1st was Tulip bubble in 17th century (rising 2200%).
TECH
Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH

You May Also Like

Pulp Librarian
Pulp Librarian
@PulpLibrarian
Due to the pandemic you may not have visited your local library in a while. So come with me on a virtual library tour, courtesy of stock photography, to see what we do for a living...


Libraries are of course information resource centres, but in many ways they are so much more. To get the best out of them you need to really know your way around the stacks.


The enquiries desk is normally your first stop in a library, and this is where you will meet The Angry Librarian! Why is she angry? Because you keep asking her stupid questions!


"Are you open?"
"Do you have a toilet?"
"That chair's wobbly!"
"Why isn't it available in audiobook?"
"Someone else is on the computer and that's not fair!"

On and on it goes...


And that's why in the library we insist on silence. It's the only way to stop us swearing at all the idiotic things you ask us. And we've looked up a lot of old swear words: beardsplitter, bescumber, rantallion, smellfungus etc. We're such muckspouts...
ALL
Tashny Sukumaran
Tashny Sukumaran
@tashny
Surendra Ananth @surendraananth, you violated my conditional consent. I assented to unprotected intimate relations with you on the STRICT condition that you tell me if you have relations with anyone else. You failed to do so, and I became ill as a direct consequence.

You refused to reveal your own STI results to me, but claimed to others they were negative and alleged I had multiple other partners, slut-shaming me. You gaslit me saying you had told me about your other partners.

You called up @justice_sisters and @SistersinIslam to tell them I was crazy, jilted. You rebuffed attempts to organise a community mediation so we could address matters. You said I was crazy for speaking to your boss and father in an attempt to keep other women safe.

You have a PATTERN OF BEHAVIOUR of misogyny, harassment and sheer disrespect for women. This was sent to a friend of mine who has never expressed interest in you and has a partner.


You think women are playthings, notches on the bedpost. You, @surendraananth, are no human rights advocate.
LAW
Advertisement
Queen Preshiii
Queen Preshiii
@preshdeyforyou
Men actually cum faster when having sex with someone they love

Haha y'all fw this tweet very well 😀

So why we're here lemme show you guys WHAT IMPRESSES A MAN MOST IN BED

Sweetie I wanna remind you that every Good sex😍 is based on mutual respect and love❤, so make sure that the guy you’re fucking is worthy of you.

. and never waste effort on a guy who isn't worth it. But as long as you’re convinced of the hero-status of this guy, your endeavours will never be wasted❤.

So Below Are Things He's Secretly Dying for You to Try In Bed👇

• BABE FUCK HIM WITH THE LIGHTS ON😋💡

Men loves it when they see their dick going in and out of our pussy🍑 —They love it so much.

They love to see our creamy💦 pussy wet their dick🍆— They fucking love it 😍

You may be worried about what your husband thinks of your post-breast-feeding boobs, your C-section scar, or that at some point, he'll stop being attracted to you because you look a little — OK, a lot—different than you did on your wedding day.
LIFE
Anu Satheesh
Anu Satheesh
@AnuSatheesh5
Beautiful story of Shri Krishna, Mata Rukmini & Satyabhama which teaches the importance of Bhakthi.
Devotion is important than anything.
#bhakthi
🕉
Satyabhama, royal princess was very proud of herself. Rukmini was very humble, her devotion was pure to Shri Krishna.


One day, Rishi Narada( Kalahapriya) arrived in Dwaraka and met Sathyabhama. In between the conversation he hinted that Krishna exhibits affection more to Rukmini than her. Worried Sathyabhama asked what can should be done to gain Krishna's undivided attention.
@SriramKannan77


Narada asked Satyabhama to make a vow, that she will hand over Krishna to him as a slave, if she cannot trade wealth equivalent to Krishna's weight. Narada thus convinces Sathyabhama that Krishna will admire her for sacrificing all her wealth for him.


Sathyabhama was sure that she have enough wealth to balance Krishna.

She went to Krishna and told about her vow to Narada. Krishna patiently listened to her and accepted the challenge. Satyabhama arranged to bring large scales to weigh and brought all her precious jewels.


Krishna patiently sat on one plate of the Scales (tula). Sathyabhama started piling up the gold, jewels on the other plate. She kept adding more and more wealth, but the pan with Krishna did not even budge. Even after keeping all her jewels the scale did not move a little
RELIGION
Suhas S. Hardutt
Suhas S. Hardutt
@HarduttSuhas
THE BATTLE OF SARAIGHAT (1671)

Lachit Borphukan's humiliation of Aurangzeb.

The battle of Saraighat was a naval engagement fought on the Brahmaputra river near Saraighat between the M0ghul empire and Ahom kingdom in 1671.

Guts, resolve and glory!

(Elaborate thread)


Koch was a state situated between the dominions of M0ghuls and Ahoms. For Ahoms, it was a buffer state for keeping M0ghul territorial expansions at bay.(1)

Times changed when the ruler of the Koch kingdom, Nara Narayana passed away in 1587 resulting in Koch being divided into 2. Western Koch was ruled by his son Lakshmi Narayan and the eastern Koch by his nephew, Raghudev.(2)

Lakshmi Narayan formed an alliance with M0ghuls after which he attacked Parikshit, son of Raghudev, in 1602. Parikshit Narayan was defeated while his brother Bali Narayan took refuge in the Ahom Kingdom.(3)

The M0ghuls used it as a pretext to invade Ahom kingdom. The first battle between them took place in 1615 leading to a series of engagements in which both sides had their shares of ups and downs resulting in a stalemate.(4)
ALL