You Can't VPN Out of On-Device Scanning
A practical look at moving to GrapheneOS: what it prevents, and what it can't.
ambient_node
A connected body of technical writing and deep dives of networking, services, security, hardware, systems. Explore by recency, or as a graph.
ambientnode.uk<lab>
Deep dives, builds, and experiments.
Building a tiny Shrek NAS (LILYGO T-Dongle-S3)
Turning a £10 ESP32 into a tiny wireless file server that never stops playing Shrek
REALITY and XTLS-Vision
Building a Proxy Server That Pretends to Be Someone Else
How I Bought a Locked Google Demo Unit (and Unlocked It)
What is Google's Denali Companion App?
<nodes>
Shorter notes, definitions, and concepts that support the lab.
<macros>
Short takes.
-
The UK government killing passwords for 23M Brits 15/09
Fantastic fearmongering tactic from a security publisher. Passkeys aren't biometrics. Your fingerprint, face or PIN unlocks the passkey on your device. The authentication happens cryptographically between the device and the service. Passkeys are much safer than passwords.
-
VMware defends ending downloads of SDK that helps VM backups – or migrations to rivals 14/09
Textbook example of vendor lock-in. When a bunch of your customers leave, make it extremely difficult for the ones remaining to leave anytime soon.
-
Stop exposing network management interfaces to the internet. MikroTik is now being actively exploited through internet-facing SSH to gain full administrative control without authentication.