Wanna disable Defender when enabled Isolated Core and Tamper protection?

Its a bit more trouble- but doable, without ruining Isolated Core/Secureboot etc.

Defenders process will run as a unkillable protected service- so new tricks needed.

Here we go:

Today WhatsApp wished it's users good morning. Accept the updated terms and conditions or say goodbye. (Thread 1/n) It is effective from Feb 8, 2021.

There are seperate hyperlinks for terms and privacy policies. Both these hyperlinks lead to multiple pages of contracts written in a very jargonised language. A few things I noted :

The information 'we' provide to #WhatsApp include our messages. Also WhatsApp claims that it is end to end encrypted BUT,

BUT if your friend / enemy / boyfriend / family or anyone is offline and your message sent to him cannot be delivered #immediately, it will be saved on #WhatsApp servers for 30 days.

Also: When you forward media msg in #WhatsApp that media is stored temporarily in encrypted form on it's servers to aid in more efficient delivery of additional forwards. Tada! (Consider a thousand times before sending any images; news anchors can officially read your chats.)

Company
Permanent suspension of @realDonaldTrump
By Twitter Inc.
Friday, 8 January 2021
After close review of recent Tweets from the @realDonaldTrump account and the context around them — specifically how they are being received and interpreted on and off Twitter —

we have permanently suspended the account due to the risk of further incitement of violence. 

In the context of horrific events this week, we made it clear on Wednesday that additional violations of the Twitter Rules would potentially result in this very course of action.

Our public interest framework exists to enable the public to hear from elected officials and world leaders directly. It is built on a principle that the people have a right to hold power to account in the open. 

However, we made it clear going back years that these accounts are

not above our rules entirely and cannot use Twitter to incite violence, among other things. We will continue to be transparent around our policies and their enforcement. 

The below is a comprehensive analysis of our policy enforcement approach in this case.

Overview

On January 8, 2021, President Donald J. Trump Tweeted:

“The 75,000,000 great American Patriots who voted for me, AMERICA FIRST, and MAKE AMERICA GREAT AGAIN, will have a GIANT VOICE long into the future. They will not be disrespected or treated unfairly in any way, shape or form

I was hacking a game and accidentally invented a word for when you think someone is trans and you're proud of them for coming out but then you find out they aren't

someone is excited to watch bill nye in science class

This happens because one of the ways I figure out which memory location needs to be modified is by memory-searching for all occurrences and changing the first letter of them

so like if I know the next line of dialog is "Die"
I change it to "Aie" "Bie" "Cie" "Eie" "Fie"

then I see which one shows up in the game

I'll touch upon few different types of cyber frauds and few possible ways in which we can avoid ourselves to be duped of money, time & energy.

Will also attach few real registered FIRs showing that most of the times such crimes happen with educated & learned people.

1/16

Cyber Fraud type 1 - Facebook/Instagram

Profile cloning -Fraudster will make exact same profile like yours - using pictures from your own profile. They will then message to your contacts asking for money immediately for the surgery of mother or similar emotional lie

2/16

Always verify before sending money.
Don't verify by calling that person, instead, call a common friend or family member of that person. Don't think you can't be fooled - I know at least 20 people working in Top IT MNCs becoming victim of this fraud. Lock your FB/Insta.

3/16

Cyber Fraud type 2 -OLX/Quikr
This generally happens while selling something on OLX/Quikr & similar platforms. In such cases, people will fraud in the name of paying money by asking to scan the QR code or click a link.
NEVER scan the QR code to receive money, give your UPI

4/16

Cyber Fraud type 3 - Fake SMS & Call from unknown numbers
Fraudster will send fake SMS showing amount credited to the account - with correct account number in SMS. Then they will call from unknown numbers asking for money.

ALWAYS check your bank account first via bank app.

5/16

I did more research into the Parler dump. What probably happened was not so much a "hack", but this: When Twilio/Okta shut them down, they just disabled email/phone verification to create an account. This means anyone could directly create huge amounts of accounts via their API.

Someone also found out that fetching Parler posts could be done by enumerating IDs (e.g 1, 2, 3) instead of random IDs that can't be guessed. Unclear if this was via the ordinary API endpoint, or that they found a separate one by monitoring app network traffic.

So you combine these two things and you can create a script to scrape all the posts on the entire platform, using a lot of different accounts to avoid suspicion. Anyone could download and run this script to spread it out over many IP addresses as well.

What I'm still not sure about is whether deleted (meaning flagged as deleted, it's common that services never actually delete data) posts could be fetched without any special handling.

The verdict: The people who wrote Parler are fucking amateurs.