Recent Posts

826

Coding Snacks / Re: Rename folder and files before deleting

« Last post by 4wd on May 06, 2018, 07:57 AM »

So:
- randomize file name
- create a scratch folder with a random name
- move file to that folder
- delete that folder

-dcwul62 (May 06, 2018, 01:32 AM)

I find your logic a little flawed with this procedure to supposedly disguise what folder a file originally came from in the event anyone tries to recover deleted files.

• The original folder still exists, pretty much any attempt to disguise where any file came from is pointless since if anyone is interested enough to care about the name of that folder they should rightly assume that any and possibly all files came from that folder regardless of their name or where they now appear on the drive.
• Given 1, it's enough to securely delete the file in the original folder without screwing around wasting write cycles on the SSD.

827

Living Room / Re: Looking for smartphone

« Last post by 4wd on May 06, 2018, 07:45 AM »

Any rival for Umidigi S2 PRO?

I will eventually have to ditch my Xiaomi Redmi Pro 3. After recommendations here I bought it, which proved to be good, but it has a major lack, the lack of NFC, so I cannot use it to make payments.

-kalos (May 05, 2018, 02:55 PM)

I thought you wanted NFC?

Here's the product page for the Umidigi S2 Pro, no mention of NFC.

828

Living Room / Re: Looking for smartphone

« Last post by 4wd on May 06, 2018, 06:16 AM »

... but is lacking a notification-led.

-Ath (May 06, 2018, 02:45 AM)

The phones I've had prior to my current Moto G5+ all had a notification LED and when I got the G5+ I thought I'd miss it but I don't.

The Moto Display feature is great, the screen lights up for a second or two when a notification comes in but it also lights up for a half second whenever you pick the phone up which shows you any notifications that have come in.

When I thought back I realised I didn't use the notification LED all that much since about the only times I noticed it was when I was reaching for the phone anyway.

Besides that, coupled with the smart watch I know when a notification arrives.

829

Coding Snacks / Re: Rename folder and files before deleting

« Last post by 4wd on May 05, 2018, 08:11 PM »

TRIM speeds up write access by periodically clearing blocks marked for deletion rather than wait to delete when a write is required, (simplified version).

AFAIK, SSDs have Secure Erase which only act on the whole drive but the SSD has to support it.

Regarding the MFT:
http://www.moo0.com/...ftware/AntiRecovery/

If you're that concerned about someone able to see what's been on the SSD, Bitlocker it, (or some other encryption).

830

Living Room / Re: Looking for smartphone

« Last post by 4wd on May 03, 2018, 05:25 AM »

A little over your budget but maybe the Motorola G6 or G6+ (not the G6 Play unless it floats your boat)?

Dedicated uSD slot, available in single or dual SIM config, dual back cameras, reasonably vanilla Android experience (the Moto Actions/Display are actually useful compared to the usual "extras" you get), etc, etc.

Relatively new release, this month I think, so you might need to search for reviews a bit.

I have the G5+ 4GB/32GB and it has been a great phone.

831

General Software Discussion / Re: finding an old password program ...

« Last post by 4wd on May 02, 2018, 08:46 PM »

There's also vPass, web based hashed password generator, there are extensions and bookmarklet available, you can also self host.

I had one on my phone I was looking at that did the same thing, (it had a computer based version also but I can't think of it), decided that if I had to enter a master password to use any of these I might as well use a decent program that allowed me to store/do a lot more than just passwords, (ie. KeePass).

832

Living Room / Re: grab urls

« Last post by 4wd on May 02, 2018, 12:16 AM »

It is strange that when I download JDownloader with IE or Chrome, Windows Defender intervenes and blocks the file.

-kalos (May 01, 2018, 05:04 PM)

We've already determined that the AV is "arbitrary" in its determination of what is or isn't a suspicious file.

I can download it with Edge, Firefox, Basilisk, Vivaldi, SlimJet, Puffin, Iridium, and K-Meleon, (I don't have Chrome or IE) - not one will cause Defender to complain about it, with or without App & Browser control turned on and/or Cloud-delivered protection.

I can download it on the other six Windows computers I have here, same result.

833

Living Room / Re: Interesting "stuff"

« Last post by 4wd on May 01, 2018, 05:14 AM »

[ Invalid Attachment ]

Meanwhile in Australia

-Arizona Hot (April 28, 2018, 07:24 PM)

And that's pretty much how Australians like it ...

834

Living Room / Re: grab urls

« Last post by 4wd on April 28, 2018, 11:15 PM »

They use the installCore^w installer.

The fake google results, all have BING as their referral.

-kalos (April 28, 2018, 03:44 PM)

JDownloader2 Ad-ware Free Installers from here and here.

835

Post New Requests Here / Re: A script/trick/code for skipping the Windows lock-screen BUT not disabling it!

« Last post by 4wd on April 28, 2018, 06:00 AM »

I think that if the keypress can be made so that it appears to come from the keyboard buffer then it'll work, (SendKeys uses Windows messages from what I understand).

-4wd (April 07, 2018, 09:58 PM)

It's been a while, but I must ask you guys again if there was some relatively simple solution to this?

-Techno Grub (April 28, 2018, 03:55 AM)

Not from me atm, was looking at possibly using Interception to hook into the IO but unfortunately it's geared to not inject keystrokes until one has been received, (why I asked what type of keyboard, so I could set the appropriate variables).

Here's an old Dr Dobbs article about Controlling the Keyboard Buffer from 1990, no idea if it's workable today ... me and C don't get along without a fight.

836

Living Room / Re: Public WiFi

« Last post by 4wd on April 26, 2018, 04:42 AM »

Could always use a VPN to obscure data from the employer.

-4wd (April 25, 2018, 05:49 PM)

I wouldn't.  In many jobs they view using an unregistered VPN as you are doing something wrong.  Even if the policies don't say that, it can get a side-eye.

-wraith808 (April 25, 2018, 11:10 PM)

Pretty sure that's not going to apply in this case.

At work the company offers public wifi after registration with your email.

-kalos (April 25, 2018, 08:56 AM)

It's a publicly accessible WiFi, all they could really do is make it a condition of use when you connect to it that you won't use a VPN.

The only way they could enforce it is through traffic analysis I would think.

Doesn't really matter what kind of strange look they give you, they're the ones that provided the free public access.  Unless there's something specifically barring employee use and VPNs, they really have no comeback.

Besides, can they really complain when an employee shows good security protocol by using a VPN to access a public WiFi network?

Personally, I've yet to access a public WiFi where I couldn't use a disposable email address and then use a VPN, most T&C are limited to don't engage in actions which are detrimental to anyone else and trying to score a one night stand doesn't really come under that heading.

837

Living Room / Re: grab urls

« Last post by 4wd on April 26, 2018, 12:40 AM »

About the only thing I'm getting out of this is it's the AV that can't be trusted.

-4wd (April 25, 2018, 08:33 PM)

I thought we'd already established that 

-wraith808 (April 25, 2018, 11:06 PM)

The technician in me wants to know

(Damn stupid inner voice)

838

Living Room / Re: grab urls

« Last post by 4wd on April 25, 2018, 08:33 PM »

Just updated:



Still no hit.

   - https://mega.nz/#!DQUSDS4Q!3oCI6KwWTivL3PSTcTAv4YDQxKfkgxMEsehkdTLumP0

-Stephen66515 (April 25, 2018, 10:16 AM)

Downloaded from that link, (in case there was some weird geo-specific packaging), exact binary equivalent as the one I have.

@Deo, @Stephen - you guys have weird systems 

Honestly, can't think of what else it can be unless something you guys are running is interacting with Defender.  I'm leaning towards you guys simply due to the numbers:

Wraith, Kalos don't indicate anything on their systems, I've got six systems (five Win10Pro + WHS2011) plus one completely brand new Win10Pro VM with no other programs and yet ... nothing ...

Not even MBAM mentions anything until I scan the files after installation, (I'm guessing it's because it didn't try to do anything bad, eg install PUP, even though it's set to treat it as malware).

And yet no one detects it as anything listed on VirusTotal ... so WTF?

VirusTotal
Jotti
VirSCAN

About the only thing I'm getting out of this is it's the AV that can't be trusted.

839

Living Room / Re: Public WiFi

« Last post by 4wd on April 25, 2018, 05:49 PM »

He also mentioned mobile chat apps, ones that implement end-to-end encryption should be fine ... provided they are open source and thus subject to review, (eg. Signal).

However, I suspect the number of dating apps that fall under that umbrella would probably be approaching zero.

Could always use a VPN to obscure data from the employer.

840

Living Room / Re: grab urls

« Last post by 4wd on April 24, 2018, 10:20 PM »

Are you guys all positive you're downloading the same file?  How about posting some checksums?

-skwire (April 24, 2018, 09:50 PM)

Using the link given in this post, (downloading the Windows installer but I have downloaded the Other Java installer and still nothing).



The .exe is also signed off with a Digital Certificate assigned to Appwork GmbH by Comodo.
sha256: 4c87501159a97e0fa43cf04a705381fc
Revocation Status : OK. Effective Date <‎2018 ‎April ‎24, ‎Tue 16:03:27> Next Update <‎2018 ‎May ‎01, ‎Tue 16:03:27>
Thumbprint: 5f884266c8541f4eff424e805176d6dca8ae048f

I've got six Windows 10 Pro systems here, (x86, x64, including a new install VM), not one of them has detected a problem with the .rar, .exe, or the extracted NSIS installer files.

Windows 10 Pro Build 16299.371 or Build 16299.309 all Defender definitions are 1.267.267.0, (apparently the latest defs available for me).

Two of the systems have MBAM Premium on them, (mine with v2, another with v3), not a peep from it either.

Defender on WHS2011 system also doesn't find a problem.

If it makes you feel better, I'm using Chrome, Windows Defender, and Malwarebytes, and none of them gave any indication.

-wraith808 (April 24, 2018, 07:36 PM)

Not really, was kind of hoping Chrome was doing something which caused a fingerprint match but there goes that idea.

841

Living Room / Re: grab urls

« Last post by 4wd on April 24, 2018, 06:50 PM »

Now I'm going to guess that Deozaan uses Chrome?

-4wd (April 24, 2018, 03:38 PM)

Yep. I'm using Vivaldi, which is Chrome-based.

But note that it wasn't Chrome/Vivaldi that flagged it for me. It was Windows Defender's real-time protection.

-Deozaan (April 24, 2018, 04:43 PM)

There goes that idea, was hoping you'd say Chrome.

Now it's even stranger since we're both using Vivaldi and Defender on the same file and yet I don't get any hit from Defender, even when I scan it after download.

Makes absolutely no sense ...

842

Living Room / Re: grab urls

« Last post by 4wd on April 24, 2018, 03:38 PM »

The whole thing just strikes me as very very odd indeed.

-Stephen66515 (April 24, 2018, 10:09 AM)

What I find odd is across six different systems using the same AV you're getting three different results on the same file:

Stephen: Trojan (Chrome)
Deozaan: Trojan
Wraith: Clean
Kalos: Clean (Firefox)
4wd: Clean (Vivaldi)
VirusTotal: PUA

I'm assuming that both Wraith and kalos didn't get a hit by Defender because neither said the installer was quarantined.
I'm also assuming that kalos used Firefox since he never mentions anything else.

Now I'm going to guess that Deozaan uses Chrome and Wraith, Not Chrome ?

VirusTotal, yeah well, its results change dependent on wind direction and time by the looks, only have to look at the results for the keylogger a couple of days ago, started off at 14/64, then 22/65, then 26/66, now who knows what they are.  That and the overly scary (mis)classifications used by the majority of AV manufacturers based on what something looks like, not what it does ... its results are something I take with a grain of salt, (my opinion only).

843

Living Room / Re: grab urls

« Last post by 4wd on April 24, 2018, 12:55 AM »

I downloaded from your link and Windows Defender immediately flagged it with the same results you got, Stephen.

https://www.microsof...;threatid=2147726780

-Deozaan (April 24, 2018, 12:50 AM)

That is completely weird then, Defender is up to date - it's also strange that Microsoft report something completely different via VirusTotal, (PUA:Win32/Creprote - Potentially Unwanted Application, I'm guessing), for both the RAR and EXE.

And supposedly JDownloader is Open Source but I couldn't find the source code.

-Deozaan (April 24, 2018, 12:50 AM)

It seems to be available via SVN repository, (old version at GitHub).

Something is really fishy about the site. The download links redirect you to all sorts of places before finally ending up on Mega.

It appears to be their own CDN, (there's ~3 fetch.jdcdn.org links it redirects through):

Code: Text [Select]

1. Whois query for jdcdn.org...
2. Results returned from whois.publicinterestregistry.net:
3. Domain Name: JDCDN.ORG
4. Registrant Name: Thomas Rechenmacher
5. Registrant Organization: AppWork GmbH

AppWork is the company that wrote JDownloader.

844

Living Room / Re: grab urls

« Last post by 4wd on April 24, 2018, 12:04 AM »

I just downloaded JDownloader and it instantly got killed by my system with a "Severe" threat level, because of: Trojan:Win32/Occamy.C

-Stephen66515 (April 23, 2018, 09:56 PM)

Downloaded, extracted, nothing according to MBAM and Defender:



@Stephen: Interested to know how you got that particular result since none of the engines on VirusTotal report it as such: Results

The comments against it on VirusTotal suggest that it will ask you to install "offers" or "toolbars" ... never had it do that but maybe it is based on what it sees as the default browser.  Only installed browsers I have are Vivaldi and Edge, everything else is portable.


But anyway, RevoUninstalled my existing installation, (had a RevoUninstaller log for it to really clean up), and re-installed.
NOTE: I should point out, if there is a button that says Advanced or Custom Installation, use it - that's where "extras" are normally hidden.



It required 4 separate internet connections for the installation files:



During the installation, MBAM and Defender reported nothing, when it was finished it opened a page in the browser, (Vivaldi), saying thanks for the install - only thing bad to say about it was it stuck an icon on the Desktop after I told it not to.

Scanning of the temp files after installation with MBAM showed the following:




Not a threat, just an annoyance ... besides the fact that it actually didn't install anything.

PS:

... seeing as 4wd has recommended it above.

-Stephen66515 (April 23, 2018, 11:07 PM)

Didn't recommend it, I reinterated that @Deozaan suggested it and mentioned it could most likely do what he wanted, I'll keep with my suggestion of using wget even though I do regularly use JDownloader.

845

Living Room / Re: When you make your 100'th Post

« Last post by 4wd on April 23, 2018, 02:29 AM »

Something to do with felines and females.

846

General Software Discussion / Re: Personal keylogger

« Last post by 4wd on April 23, 2018, 12:39 AM »

Getting back on track, away from the hilarity ...

However, it has one MAJOR flaw: it doesn't allow you to seach for typed/clipboarded text across any date! You have to choose a specific date and search!

-kalos (April 21, 2018, 09:08 AM)

C:\Users\<user>\AppData\Roaming\FKL Viewer\logged_files\*.dat

Contain everything that's logged from the keyboard in plain text - use a program to search them, (hell, even Cortana can probably do it given the right info since Windows Search could).

Ask nicely in the Coding Snacks area and someone may even be willing to write a program that interprets all the [Down], [Up], [Enter], [Back], etc into the final user-readable text, (or not).

847

Living Room / Re: Wrist watch voice recorder

« Last post by 4wd on April 22, 2018, 09:00 PM »

And we certainly don't have to make fun of his responses.

-wraith808 (April 22, 2018, 12:32 PM)

Sometimes we need humour to get through the day ...

... I don't see what problem this causes to you.

-kalos (April 22, 2018, 12:18 PM)

It causes wasted time and/or effort, people try to help you but now you come back and say you give up when nothing suits you.

Why not tell the people you asked for help that you've given up so they don't waste their time/effort because, (as both wraith and tomos have mentioned), in the long run it will not be worth our effort to help at all.

So, not a problem for us but a problem for you.

848

Living Room / Re: grab urls

« Last post by 4wd on April 22, 2018, 08:52 PM »

I installed Jdowloader2 and this horrible I failed to read any of the installation requests and blindly clicked buttons so the software changed my Firefox search engine to horrible bing.com!

-kalos (April 22, 2018, 12:19 PM)

FTFY

 

EDIT: While it might seem I'm making fun of you above it is only indirectly because the point I am making, (and has been made in other threads on this site regarding unwanted things happening during installation of some software), is I have installed JDownloader2 half a dozen times across various machines and not once has it ever changed the search engine in any browser I use, therefore you are doing something wrong.

849

Living Room / Re: Wrist watch voice recorder

« Last post by 4wd on April 21, 2018, 07:34 PM »

I should also point out that if I was ever recorded without my permission (spoken conversations) by a person I was conversing with, I'd likely remove their recording device and insert it into somewhere they would find uncomfortable.

Just sayin'.

-Stephen66515 (April 21, 2018, 07:11 PM)

He might already have done it since I doubt if you know what he looks like.

Just sayin'

-4wd (April 21, 2018, 07:17 PM)

Doubtful, as somebody might indeed recommend something but it will be 5 years before we find out it wasn't good enough.

-Stephen66515 (April 21, 2018, 07:28 PM)

Good point

@mouser Could you please ensure the continued existence of this particular corner of the internet for, say, another ten years, (five plus a certain amount of fudge factor), so that we can see how this particular request turns out?

850

Living Room / Re: Wrist watch voice recorder

« Last post by 4wd on April 21, 2018, 07:17 PM »

I should also point out that if I was ever recorded without my permission (spoken conversations) by a person I was conversing with, I'd likely remove their recording device and insert it into somewhere they would find uncomfortable.

Just sayin'.

-Stephen66515 (April 21, 2018, 07:11 PM)

He might already have done it since I doubt if you know what he looks like.

Just sayin'