You Can't VPN Out of On-Device Scanning
A practical look at moving to GrapheneOS: what it prevents, and what it can't.
ambient_node
A connected body of technical writing and deep dives of networking, services, security, hardware, systems. Explore by recency, or as a graph.
ambientnode.uk<lab>
Deep dives, builds, and experiments.
How I Bought a Locked Google Demo Unit (and Unlocked It)
What is Google's Denali Companion App?
Backing Up TrueNAS SCALE to a Secondary TrueNAS Using ZFS Replication
ZFS replication as a native backup strategy
Mapping Digital Footprint with MALTEGO
An OSINT Self-Investigation on Linux
<nodes>
Shorter notes, definitions, and concepts that support the lab.
<macros>
Short takes.
-
Manic: Blend between Banking Malware & Spyware 20/08
Using Bluetooth/BLE to build a relay infrastructure and bypass network restrictions is actually genius. Scary, but smart. Now you have to walk around with an air-gapped brick.
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog | CISA 19/08
CVSS 9.8, unauthenticated RCE, remotely exploitable. Probably don't wait until Patch Tuesday :|
-
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access 18/08
Broadcom's VMware licensing mess sure makes it easy to patch CVEs. Just migrate.