You Can't VPN Out of On-Device Scanning
A practical look at moving to GrapheneOS: what it prevents, and what it can't.
ambient_node
A connected body of technical writing and deep dives of networking, services, security, hardware, systems. Explore by recency, or as a graph.
ambientnode.uk<lab>
Deep dives, builds, and experiments.
Building a tiny Shrek NAS (LILYGO T-Dongle-S3)
Turning a £10 ESP32 into a tiny wireless file server that never stops playing Shrek
REALITY and XTLS-Vision
Building a Proxy Server That Pretends to Be Someone Else
How I Bought a Locked Google Demo Unit (and Unlocked It)
What is Google's Denali Companion App?
<nodes>
Shorter notes, definitions, and concepts that support the lab.
<macros>
Short takes.
-
Stop exposing network management interfaces to the internet. MikroTik is now being actively exploited through internet-facing SSH to gain full administrative control without authentication.
-
ASCII smuggling crosses over from AI prompt injection to phishing evasion 07/09
Invisible Unicode has been around for ages, but now it's being weaponised to bypass security filters.
-
Don't treat EDR as your one-and-done solution. The Gentlemen ransomware operators are disabling EDR, destroying backups and clearing logs before encrypting the network.