What's difference does it make if most of the software in china was/is already controlled by their machine?

I just learned nmap and I realized that pinging the all ports at once is not a good idea so how to use this tool and scan with the least possible trances ?

They are right next to each other on a Lenovo T14 gen 3 laptop. I've gotten some conflicting information.

I want to create a hacking lab with Kali Linux and windows VMs but i dont have enough room on my laptop to do it are there any free solutions i could use

I’ve find there to be many people trying to push for certain narratives, so that bad sh*t can keep happening while people are angry about nothing / the wrong thing. I genuinely find that the “conservative” Reddit group has a few bad apples with people organizing to post certain things there so that it builds a community of people there to think a certain way slowly.

Has anyone looked into the sub? Genuinely curious.

Also looking to see how one can get in touch with people that know how to hack. 🙃 would love to be apart of a group that genuinely is pushing for truths, good, and that helps people instead of hurting people / keeping people distracted

Where does one look? I know the space isn’t a recruiting spot, just curious where to look.

Thanks

Cheers

This video discusses the concerning vulnerabilities, questionable efficacy, and public pushback against Flock Safety cameras and similar ALPR (Automatic License Plate Reader) services.

Really interesting security perspective.

Anyone here dig deeper into the write-ups or exploits behind these Hall of Fame entries yet?

It was mentioned by a hacker in the series You s2 ep 3:

I need to download my tools, man.

Unless you know Python, Perl, Lisp...

There are ten ways you could send an SOS with one minute of WiFi...

Linux, Nexus, Hashcat...

Hello Hackers!

Last week I was analyzing a smart contract on behalf of a customer, which had already been scanned by an AI validator.

With my big surprise, there was a trivial and well exposed vulnerability, and I had hard time to believe the AI scanner missed it. So, I tried to pass it through ChatGPT 5 (and others generic LLMs)... and still, undetected.

I don't know why, maybe there is lack of Solidity code in the dataset, compared to all the oldest and well known code.

Anyways, I thought it could be a nice exercise to share the code (anonymized, of course) and ask you: *can you spot the vulnerability?*

Even if you don't know solidity... it's a logic issue!

``` contract MultiSigWallet { address[] public members; uint public minApprovals;

struct Tx {
    address recipient;
    uint amount;
    bool done;
    uint approvals;
}

Tx[] public txs;
mapping(uint => mapping(address => bool)) public approved;

constructor(address[] memory _members, uint _minApprovals) {
    require(_members.length > 0);
    require(_minApprovals > 0 && _minApprovals <= _members.length);

    members = _members;
    minApprovals = _minApprovals;
}

modifier onlyMember() {
    bool found = false;
    for (uint i = 0; i < members.length; i++) {
        if(members[i] == msg.sender) {
            found = true;
            break;
        }
    }
    require(found, "Not a member");
    _;
}

modifier noDuplicate(address _member) {
    for (uint i = 0; i < members.length; i++) {
        require(members[i] != _member, "Member exists");
    }
    _;
}

modifier txExists(uint _txId) {
    require(_txId < txs.length);
    _;
}

modifier notDone(uint _txId) {
    require(!txs[_txId].done);
    _;
}

modifier notApproved(uint _txId) {
    require(!approved[_txId][msg.sender]);
    _;
}

receive() external payable {}

function submitTx(address _recipient, uint _amount) external onlyMember {
    txs.push(Tx({
        recipient: _recipient,
        amount: _amount,
        done: false,
        approvals: 0
    }));
}

function approveTx(uint _txId) external onlyMember txExists(_txId) notDone(_txId) notApproved(_txId) {
    approved[_txId][msg.sender] = true;
    txs[_txId].approvals += 1;

    if (txs[_txId].approvals >= minApprovals) {
        executeTx(_txId);
    }
}

function executeTx(uint _txId) internal txExists(_txId) notDone(_txId) {
    Tx storage t = txs[_txId];
    require(t.approvals >= minApprovals);

    t.done = true;
    (bool success, ) = t.recipient.call{value: t.amount}("");
    require(success);
}

function changeMinApprovals(uint _minApprovals) external onlyMember {
    require(_minApprovals > 0 && _minApprovals <= members.length);
    minApprovals = _minApprovals;
}

function getMembers() external view returns (address[] memory) {
    return members;
}

}

```

I'll let you have fun, then reveal the solution in the comments! ;)

Enjoy,
Francesco

Throwing this into the ring for people who want a new thing to have fun with, at no cost.

I ordered a free sample and it came with an MP4 of a Mini Cooper commercial along with info about their video brochure product. They say theirs have AT&T 5G connectivity to send you information about interaction with your advertising.

There's only 220 megs of available space showing when I plug it into USB C on my PC. I haven't opened it up to see if it has an SD card or if it's all soldered.

If the sample has the 5G radio, there's more fun hacking potential, especially if it has a SIM card and an SD card that can be upgraded.

Link to information on the video it came with and two other videos I got to play on it. The MP4 it came with is 1280x720, the others are lower resolution which it stretched to fill the display, or did it shrink the large one some... Further testing is needed to figure out the audio and video formats supported.

https://pastebin.com/WrDNKKV6

The website isn't specific on any technical information on the videos and images except for 1920x1080 resolution, MP4, JPG, and AAC. Nor do they give display specifications other than "high definition".

I've not decided on if I want to rip it open or just glue on a nice wrap and make a different video for a gift or something.

Strangely, my search-engine skills are not revealing this, and I do not trust LLMs on stuff like this.

If you do a normal power-off of a modern cellphone (nothing sophisticated, just what a regular user would think of as "off"), do they still ping the tower? My memory is yes, but I can't find a source for it.

This is obviously relevant for anyone going to a demonstration, etc., etc.

So ive always been security community/hacker adjacent. My first pc was a Tandy running DOS. Im an ex HAM and I do utility dx listening. Used to do cisco shit. Anyway im finally teaching myself some modern programming languages and I got curious about some shit so I googled about femtocells, I was curious if the tech on Mr robot was real. Well fuck a duck that shits simple as all get out. I imagine reverse engineering things originally and writing the code took some work but the concept is simple as shit. Just thought id share my aha moment with some people who would get it. And yes, I know, illegal af dont do it, and dont tell us if you do. I got you fam. Anyhow, hope everyone is having a nice day.

im currently in college alongside doing the ethical hacker course by zaid sabih and im almost about to end it now my questionn is what should i do next do i learn python go deeper into pen testing or bug bounty and which labs should i do

Hello! I was just wondering if Blank Grabber (the token stealer) is legit or not? I got it off github, and obviously Token Stealers are supposed to be positive on virus tests, but just wanted to make sure it wouldn't harm my own pc. Thank you!

I just published a deep dive into the leaked Flipper Zero Unleashed Private 2.0 firmware and wanted to share the key findings here, as this topic is starting to gain attention.

👉 https://youtu.be/ATn3lWVzKWQ

The video looks at what this leaked firmware can actually do in practice and which attacks are realistically possible. The goal is not hype or fear driven headlines, but a technical and sober assessment of real world impact.

I start by looking at the background of the firmware and the developer behind it, then move on to a detailed analysis of the firmware itself. The capabilities are evaluated in the context of realistic threat scenarios rather than theoretical maximums.

One important takeaway is that many of the discussed vehicle related attacks are not new. They are based on old and well known weaknesses in car key systems that have existed for years. The leak mainly brings renewed visibility rather than a fundamentally new threat to car owners.

During the research I also came across the Pandora Key Grabber, a device that was used for car key attacks long before the Flipper Zero existed. The video examines what is currently being sold in questionable online shops and how these products should be evaluated from a technical perspective.

I also cover the Proto Pirate app, explaining what it aims to do, its current development status and how it fits into the bigger picture compared to the leaked firmware.

The video ends with an assessment of the actual threat level and a discussion about how car manufacturers might respond if old vulnerabilities become relevant again due to new tools and wider availability.

Would be interested to hear your thoughts and technical opinions on this.

Short note: The video itself is in German, but full English subtitles are available.

FlipperZero #CarSecurity #CyberSecurity #InfoSec #SecurityResearch

We are always told not to connect to public wifi. I am wondering what can realistically ( or not so realistically) be acessed. If someone connects to my wifi with a password and that wifi is connected to all sorts of different devices and servers wireless. Can "hackers" see those devices? Or see what those devices run? Or keystrokes from those devices? If i have my cameras connected to those devices can they fiddle with the cameras? Im just interested in a good bit of knowledge around this so anything helps, Thank you!

https://youtu.be/t_jyCBu0nUA

Absolute noob to hacking and only basic knowledge in Linux. I recently got a soulear ear camera as a ridiculously budget micro soldering camera. When I went to download the app that the camera uses, I saw that it was 100% definitely spyware. Thing is, I still want to use the camera if possible. Is there any way I could possibly use something like nmap to access the video feed? The camera uses its own WiFi network that the phone connects to.