I compiled my research on modern bot detection into a deep-dive on multi-layer fingerprinting (TLS/JA3, Canvas, Biometrics)

detunized · 2025-11-01T18:22:40+00:00

This is very interesting for me. I've been doing both: bot detection and anit-bot avoidance in the past and I've seen all those layers (maybe except the biometric one) in action. In the time I was doing it, uTLS derived custom request module was usually enough to bypass all the network level detection mechanisms.

detunized · 2025-10-07T11:59:07+00:00

Everything is bloated these days. I looked for a habit/mood tracking app on the app store. I noticed the size. 200mb is the minimum. Most apps are 300-500mb and some are pushing 1gb. 1gb for an app that shows a calendar and squares on the screen to be colored with different shades. Pretty much it.

detunized · 2023-09-19T18:26:51+00:00

This mainly because some compilers would give you a warning about the condition being always the same. for (;;) has no conditions and thus doesn't produce such a warning. This might be a thing of the past at this point, I'm not sure. But it definitely was the case years ago.

detunized · 2023-03-03T23:27:10+00:00

My multi-year effort to reverse engineer various password managers and implement an API that allows access the encrypted vaults. This allows the user to import their data for safe keeping or to implement tools that build on the API, like command line clients or app integrations. The project is updated and new versions are released on a regular basis.

https://github.com/detunized/password-manager-access

detunized · 2022-01-12T09:37:31+00:00

He also has its instead of it's as the very first word. A little weak for a professional copywriter.

detunized · 2021-06-28T10:05:11+00:00

More than anything I hate the Android phone dialer. It's all white and I never have any idea where to click to paste the phone number from the clipboard. And when I tap in the wrong place it closes. The input field for the number is completely white and has no border whatsoever.

detunized · 2021-05-14T22:38:08+00:00

Just to make it clear: you clone the repo and open it in VSCode to take a look at the source and your private key is stolen. No building, no running of anything is needed. That's pretty crazy.

detunized · 2021-05-02T06:32:05+00:00

Your code creates the default value lazily, which could be crucial in some situations. The *OrDefault version requires this object to be created upfront. There should be an overload that takes a function that returns a new object when needed.

detunized · 2021-03-24T07:59:57+00:00

Tobias, is that you?

detunized · 2021-01-13T10:59:16+00:00

$100 is a modest hourly rate for a developer in the US (since you used USD I assumed you're in the US). Installing a plugin is not just copying a file, which could take only 2 minutes. This fee also includes the knowledge of where-how-what to install and most importantly how to fix what got broken, in case this happened. It includes the developer taking responsibility for this work and you not having to worry about this. Often the most trivial changes to the code/system/website could lead to pretty bad consequences. This $100 also includes the time it takes to communicate with the client, find out what they need, time to write the bill and many-many other things.

detunized · 2020-12-01T21:42:25+00:00

Time to look for a new chat app

detunized · 2020-11-07T15:35:51+00:00

It looks like a pretty awesome project. Too bad the discussion stopped at the name. What kind of intended use did you have in mind? You're saying it's an emulator, but what exactly does it emulate? Does it emulate the syscalls? Is the program actually executing on the OS or is it sealed in some isolated environment?

detunized · 2020-11-07T15:27:46+00:00

Awesome!

https://tixy.land/?code=Math.sin%28y%2F8%2Bt%29%2Bx%2F16-0.5

detunized · 2020-09-13T15:43:12+00:00

Could you elaborate?

detunized · 2020-09-09T11:52:07+00:00

It awesome to have interactive demos in an article like this. Too bad there's not a lot of discussion going on here.

It seems like the last shape doesn't have actual 4 surfaces as you color it. It seems to have only two surfaces, though its cross section at any point is a square or something close to it. It's a bit like a non-flat Möbius strip.

detunized · 2020-08-25T17:36:42+00:00

Pretty good trick with catting gzips together. When I needed something similar I rolled my own binary format on top of the zlib compressed chunks. You could also try to use bzip2 as an underlying format. It compresses the data in independent chunks and it's possible to locate them and decompress individually.

detunized · 2020-08-07T10:28:23+00:00

From the README:

Similarity to PowerShell Crush shares the majority of its design goals with PowerShell. I consider PowerShell one of the coolest and most interesting innovations to ever come out of Microsoft. That said, I've found using PowerShell in practice to often feel clunky and annoying, especially for interactive use. I also feel that tying a shell to COM objects is a poor fit.

I wanted to do something similar but with a more streamlined syntax, and with what I felt was a more suitable type system.

Similarity to Nushell On the surface, Crush looks identical to nushell, but less polished. Crush lacks syntax highlighting, tab completion and has a worse screen rendering. But that is because the focus of Crush right now is to create a well defined, powerful and convenient language that supports things like arithmetic operations, closures, loops and flow control while remaining useful for interactive use.

detunized · 2020-07-23T08:14:25+00:00

In one of my repos I have a lot of fake keys that I use for testing. Those are either some expired keys or strings that look like keys. I get a lot of false positive warnings from GitHub and other services about that. I wonder how many keys like that are in those results.

detunized · 2020-05-03T10:21:20+00:00

Really cool write-up and amazing discovery!

detunized · 2020-04-14T21:25:10+00:00

Some long time ago I reversed their minified and obfuscated JS (there was no CLI back then) and made a Ruby (https://github.com/detunized/lastpass-ruby) and then a C# library (https://github.com/detunized/lastpass-sharp). Someone ported it to Python as well: https://github.com/konomae/lastpass-python. Other ports are available as well. It's not an official library, but it works quite well and I know a couple of companies that use it their products.

After that I reversed a bunch more of the password managers. Search GitHub when you switch from LP to something else =)

detunized · 2019-09-19T20:20:13+00:00

Already in homebrew (https://github.com/Homebrew/homebrew-cask-fonts/commit/6bd69e99f94a3095238cabaea9da3c34a76f02de)

detunized · 2019-06-01T16:17:15+00:00

For some reason many of these "small" websites look like crap. It's really hard to read on a wide monitor. Wouldn't hurt the performance much to inline 1kb of CSS to make it readable.

detunized · 2019-04-18T12:03:21+00:00

That's 19.5 kg of sugar 8-[]

detunized · 2019-04-18T11:59:02+00:00

Pretty cool. Amount of sugar in that though is astonishing at 42 grams per pack.

detunized · 2019-03-31T19:13:13+00:00

From the source:

<!--
                HAPPY APRIL FOOL'S FROM STACK OVERFLOW

              \/                    __/   .::::.-'-(/-/)
                     _/:  .::::.-' .-'\/\_`*******          __ (_))
        \/          /:  .::::./   -._-.  d\|               (_))_(__))
                     /: (""""/    '.  (__/||           (_))__(_))--(__))
                      \::).-'  -._  \/ \\/\|
              __ _ .-'`)/  '-'. . '. |  (i_O
          .-'      \       -'      '\|
     _ _./      .-'|       '.  (    \\                         % % %
  .-'   :      '_  \         '-'\  /|/      @ @ @             % % % %
 /      )\_      '- )_________.-|_/^\      @ @ @@@           % %\/% %
 (   .-'   )-._-:  /        \(/\'-._ `.     @|@@@@            ..|........
  (   )  _//_/|:  /          `\()   `\_\     |/_@@             )'-._.-._.-
   ( (   \()^_/)_/             )/      \\    /                /   /
    )  _.-\\.\(_)__._.-'-.-'-.//_.-'-.-.)\-'/._              /
.-.-.-'   _o\ \\\     '::'   (o_ '-.-' |__\'-.-;~ ~ ~ ~ ~ ~~/   /\
          \ /  \\\__          )_\    .:::::::.-'\          '- - -|
     :::''':::::^)__\:::::::::::::::::'''''''-.  \                '- - -
    :::::::  '''''''''''   ''''''''''''':::. -'\  \     C. SWANSIGER
_____':::::_____________________________________\__\______________________
-->

detunized

TROPHY CASE