You Can't VPN Out of On-Device Scanning
A practical look at moving to GrapheneOS: what it prevents, and what it can't.
ambient_node
A connected body of technical writing and deep dives of networking, services, security, hardware, systems. Explore by recency, or as a graph.
ambientnode.uk<lab>
Deep dives, builds, and experiments.
Building a tiny Shrek NAS (LILYGO T-Dongle-S3)
Turning a £10 ESP32 into a tiny wireless file server that never stops playing Shrek
REALITY and XTLS-Vision
Building a Proxy Server That Pretends to Be Someone Else
How I Bought a Locked Google Demo Unit (and Unlocked It)
What is Google's Denali Companion App?
<nodes>
Shorter notes, definitions, and concepts that support the lab.
<macros>
Short takes.
-
VMware defends ending downloads of SDK that helps VM backups – or migrations to rivals 14/09
Textbook example of vendor lock-in. When a bunch of your customers leave, make it extremely difficult for the ones remaining to leave anytime soon.
-
Stop exposing network management interfaces to the internet. MikroTik is now being actively exploited through internet-facing SSH to gain full administrative control without authentication.
-
ASCII smuggling crosses over from AI prompt injection to phishing evasion 07/09
Invisible Unicode has been around for ages, but now it's being weaponised to bypass security filters.