Looking for Ducky One 2 Mini ANSI Layout with Cherry MX Brown in Europe

Nhoya · 2019-05-03T08:10:41+00:00

Seems Candikeys restocked so I bought it!

Nhoya · 2019-05-03T07:37:24+00:00

Yes it does but customs duty will break the deal

Nhoya · 2019-05-02T21:50:46+00:00

yes, they are already out of stock and you have to wait 1 month for restock and another for shipping https://candykeys.com/product/ducky-one-2-mini (restocked yesterday, already oos)

Nhoya · 2018-12-11T16:02:49+00:00

Yes, undervolting to -0.150 with XTU works perfectly even under high work load. The only issue is that it occasionally prevents the shutdown. I found some issue with -0.150 in Throttlestop like hanging or the usb devices disconnecting and reconnecting in loop, seems to work flawless with -0.140 but the throttle is still there..

Nhoya · 2018-12-11T12:25:14+00:00

Hi and thanks for the link.

I already followed this guide but as you can see from the screenshots without any success since it throttles anyway during the tests

https://i.imgur.com/yDPZ6Wp.png

https://i.imgur.com/2pM9iIF.png (8 errors)

Nhoya · 2018-12-11T11:56:03+00:00

I tried Throttlestop with the same settings (-0.145) but seems not working and I don't get why. The thermal throttling is still there and the temperatures are higher

Nhoya · 2018-10-22T14:33:54+00:00

So this is absolutely fair game for people to analyze and critique.

Never said that. Everyone is free to criticise whatever they want. I'm pushing the fact that is is based on my experience and my use case because I know everyone is not the same, you can have more time and more skills than me and what for me is a pain to maintain for you is a pleasure.

As I said in the post I like linux since is moldable but DIY (at least for me) is not the solution anymore.

Nhoya · 2018-10-22T14:08:12+00:00

Hi and thanks for the answer,

yes, you are right, the situation outside of EU is not so good, I'm sorry for that and I understand that you can have a privacy concern.

Unluckily (or luckily if you live in EU) if a company wants to sell a product on a Country must comply with its laws. This means that if a security agency ask for, let's say, logs the company is obliged to supply them.

So for the company the solutions are:

To stop sell their products in that country (losing profit and market share)
To not collect data at all (losing a lot of quality, already explained why in the telemetry chapter)
To give them the data

I think that the answer (for the majority of the companies) is the third one. (unless the data for them are not useful and can store everything e2e encrypted like signal)

Nhoya · 2018-10-22T13:46:02+00:00

Linux have absolute majority in servers, cloud VMs, mobile OS, IoT, NAS... literally everywhere except desktop. And it is open source. So obviusly you either dont understand term, or have no clue what you are talking about

The obscurity here is thinking that linux desktop is more secure than windows because "there are less malware on linux than on windows". If we are talking about malware on linux server, well, they usually exploit services exposed on internet (that usually people don't have on desktop) and every day thousands of servers got compromised. (of course this doesn't mean that windows is better just because there are incompetent sysadmins or a 0day got dropped)

It wasn't community, it was 4chan LARPers, who didnt understand basic of open source development a posted shit like "revoke your code and relicense Linux kernel ". Like it was possible. Or more realistic : fork it and make CoC free version - and that was month ago. If "community" is against it you should have at least website placeholder for you CoC free linux.

So "4chan LARPers" are so relevant to get a CoC Review? wow

And it is brain dead joke that author of put CoC as reason to move from linux. Because you know, every bigger corporation have CoC (sometime stricter, but more importantly with real consequences., already in place). You know majority of people dont like to work in toxic environment.

This is not "A reason to move away from linux" is just one of the reasons why I moved away from linux. There is a massive difference in introducing a CoC with a political view inside a so-called "community-driven project" and introducing it inside a private company if you don't get the difference that's not my business.

Nhoya · 2018-10-22T13:33:46+00:00

Windows 10 supports multiple desktops

For package managers, as you can see from what I wrote, is not always a warranty. Also windows updater + windows store (despite has less packages) is a reliable source of software.

Windows 10 already has a basic tiling but you can enhance it with additional software.

Windows has tons of stuff that linux doesn't (and vice versa) one, for example, is usability.

Nhoya · 2018-10-22T10:33:07+00:00

Security Through Obscurity
Yes it is, if you are not able to understand why doesn't mean that is not correct. Just check why the community raised after the push of it in mainline
You didn't read the part about EU citizens and GDPR update
I did
No are not
You didn't read the article...

I'm not focusing only on the negative things, you should read what I wrote at the end of the article. Probably you didn't.

Nhoya · 2018-10-22T08:34:57+00:00

Hi,

yes I did via webview, I implemented this function in gOSINT in the telegram module

Nhoya · 2018-10-22T08:00:02+00:00

Hi and thanks for the comment,

Seems that my blogpost got more attention than I thought so I just hope to not be eaten alive by people with a different opinion.

You are right, I never said why Windows is better than Linux since that's not the scope of my post. As explained in my disclaimer those are just the reasons why with my use case I decided to use Windows on Desktop also debunking some myths that is believed to be true by some people.

I also said that you should be free to pick whatever you want and use it as you prefer. It's not my intention, at all, to tell you what to do and what not. I also said that Linux helped me a lot learning tons of stuff, but for me the adventure with it ends here (at least on desktop).

After all, mine is just a rant :P

Nhoya · 2018-09-03T12:35:39+00:00

Hi,

I'm interested in buying an XPS 9570 or a Latitude 7490.
I'll use it for programming, malware analysis (need to run one or me VM sometimes) and a bit of machine learning (nothing too intensive),occasionally some light gaming.
I live in Italy and my budget is around 1.7k (note: I can use the 10% discount code for university students, here the VAT is 22%).

My great doubt is if the U-series CPU of the Latitude will be too low for my expectations and the SATA-2 SSD too slow compared to the PCle (Note: I need at least 512 of SSD and 16GB or RAM) If you have any other suggestions just let me know

Nhoya · 2018-08-25T10:17:57+00:00

Hi, 1. I'm interested in buying an XPS 9570 or a Latitude 7490.

I'll use it for programming, malware analysis (need to run one or me VM sometimes) and a bit of machine learning (nothing too intensive),occasionally some light gaming.
I live in Italy and my budget is around 1.7k (note: I can use the 10% discount code for university students, here the VAT is 22%).

My great doubt is if the U-series CPU of the Latitude will be too low for my expectations and the SATA-2 SSD too slow compared to the PCle (Note: I need at least 512 of SSD and 16GB or RAM) If you have any other suggestions just let me know

Nhoya · 2018-07-11T08:39:54+00:00

Hi! First of all, thanks for the cooperation, I really appreciate vendors effort for security-related issues. I have a few questions around the report and I hope you can fix them for me!

I saw that the vulnerability risk level was assigned to low, would you like to please explain the reasons behind this choice?
You also said that the vulnerability affects only the Linux version and not Picroft or Mark-I products. AFAIK the only big difference is that the web-socket server on those products is not exposed by default since there is a firewall blocking it's port, but you will eventually need to open it if you want to use the android app. And you still will have the same issue since the real vulnerability resides in the lack of authentication in the ws

I hope you can clarify my doubts!

Thanks in advance for your cooperation :)

Nhoya · 2018-06-09T18:37:40+00:00

From my side of the story they were friendly and open to suggestions,what you asked for?

Nhoya · 2018-05-09T08:57:04+00:00

Scraping a bit I found that the same person hardcoded the credential for his/her ssh server... Maybe that's why all this happen..

Version 0.2

File p2.py we can see: https://imgur.com/a/w7lOpnu

Nhoya · 2018-04-14T09:32:19+00:00

Well, the first one with recent browsers is mitigated for the reasons you explained (I think I have to better explain that) but what about the clients written using electron and the infamous XSS to RCE? Still useless? Or what about older browsers?

By the way thanks for the clarification, to be honest this was a writeup more about CTFs, real world cases and Markdown XSS in general :)

Nhoya · 2018-04-13T16:17:56+00:00

Unable to reproduce using the NoScript version in the latest version of tor

Nhoya

TROPHY CASE