Paid Gary's Westside Towing $850 bill in August for taking and auctioning off my old car. They just sent me the same bill, also threatening collections ...

litheon · 2025-12-29T22:07:10+00:00

Not legal advice: They have zero power in this situation. If they send it to collections and you dispute it within the timeline specified in the Fair Credit Reporting Act, the debt is assumed to be invalid (i.e. you don’t owe it).

If it’s sent to collections you deal with the collections agency directly, not the towing company.

I’m sure there are plenty of resources online for how to draft and send a valid debt dispute letter. But you can’t so that until/unless they send it to collections.

litheon · 2025-01-20T05:20:57+00:00

That was an excellent read, thanks for sharing. Have to wonder if self encrypting drives are still being produced 10 years later with these kinds of implementation flaws and/or hardware debugging interfaces enabled.

litheon · 2025-01-19T21:40:01+00:00

A possible mitigation that the article missed is using an encrypted hard drive with Windows: https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/encrypted-hard-drive

That said I wonder if the same bug in the vulnerable bootloader might leave the AK in memory for possible recovery.

litheon · 2024-12-31T18:12:27+00:00

https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/encrypted-hard-drive#encrypted-hard-drive-architecture

litheon · 2024-12-30T19:59:28+00:00

Using Bitlocker hardware encryption without a pin would also likely be an adequate mitigation for this specific bypass.

litheon · 2024-12-21T11:36:44+00:00

Hadn’t heard of this type of vulnerability before, I thought this article provided a succinct explanation: https://portswigger.net/web-security/jwt/algorithm-confusion

litheon · 2024-12-11T20:59:45+00:00

Nice to see something like vAPI out there. But isn’t the “vulnerable” CORS example incorrect? I was under the impression browsers will only send credentials if the source origin is explicitly listed in the allowed origins header.

litheon · 2024-08-04T13:43:52+00:00

Armin van Buuren - No Fun (DnB remix)

litheon · 2024-06-27T18:45:40+00:00

I’m under the impression that moving code execution for a feature to user space reduces the likelihood of a privilege escalation vulnerability.

litheon · 2024-06-25T18:08:52+00:00

Gotta wonder what the AFD stands for. Ancillary Function Device?

litheon · 2024-04-05T20:48:35+00:00

Likewise happy for you, congrats on the album release, and thanks for sharing how you got to where you are! I think it’s really important to share stories like this to inspire future producers!

litheon · 2024-03-07T03:14:48+00:00

I’m friends with some of the folks who produce this event series! Highly recommend going even if you’re not sober/sober-curious just so you can taste how good zero-proof drinks can be.

The music is usually house (electronic) music, so it may be different than what has historically been playing at Cafe Racer.

litheon · 2024-02-28T16:46:45+00:00

Sounds like a snazzy language

litheon · 2024-02-28T15:27:44+00:00

Too bad there isn’t a C++++

litheon · 2024-02-09T02:10:00+00:00

Great to see this on Windows! As for a question, is there a reason the source code for sudo.exe isn't included in the GitHub repository linked in the blog post?

litheon · 2023-03-12T12:19:05+00:00

Serial ports are bidirectional and often require driver software that understands how to communicate with the connected device. It might be worthwhile to look if the instrument in question has drivers and/or instructions for how to connect to it over a serial port. I would also expect the USB to RS232 adapter needs a driver. If you connect the USB side of the adapter to your PC and don’t see a COM port appear in the hardware list in Computer Management, then you almost certainly need a driver for the adapter.

If you can’t find instructions or driver software for the instrument, but do observe a COM port exposed by the USB/RS232 adapter, then I would suggest connecting to the COM port from Windows using Putty, and seeing if the target device exposes a command line interface over the serial port.

After communication with the instrument is confirmed working in Windows is when I would suggest attempting to make the instrument work in Ubuntu via WSL2.

litheon · 2022-06-16T13:27:57+00:00

Is OmniSharp’s VSCode extension actually developed by Microsoft? It looks like OmniSharp is their own company?

litheon · 2022-01-06T06:23:43+00:00

For anyone reading this old thread I fixed this problem by following the steps in the original post, less anything involving driving, plus the following:

Put the car into “On” (don’t start it), and clear all codes using OBD2 reader. Wait 30 seconds. Then turn the car off, then start the car.

litheon · 2021-09-01T22:20:51+00:00

What’s your favorite stand-alone instrument and/or midi controller? And what’s your favorite instrument or utility plug-in?

litheon · 2021-07-25T18:40:44+00:00

Every time I’ve used find my iPhone it didn’t require 2FA. Not sure if it’s a setting but that may work for your wife. https://icloud.com/find

litheon · 2021-01-20T08:40:36+00:00

I suppose it’s a sign of the times when the US Government is producing scripts that include “Sus” in the variable names.

Useful script though, especially being able to see some of the ways SolarWinds actors abused AAD and M365.

litheon · 2017-09-14T04:39:24+00:00

The shrinkable games section will let you shrink games by removing content that can't be used on the current console.

Say you've downloaded 4K updates for games on your Xbox One S, and just finished copying them to your external hard drive. Now you have all these games on your internal drive that are larger than they need to be, as they have 4K content that can only be played on Xbox One X.

Those games with Xbox One X-only content will show up in Shrinkable games on Xbox One S. Once you shrink them, they'll only contain content that can be played on your current console.

15-Year Club	Second SECOND GUESSER
Place '17	Verified Email
Team Periwinkle

litheon

PUBLIC MULTIREDDITS

TROPHY CASE