0xabad1dea

The Scammiest Scam To Yet Anonymity Scam

I'm still holding out for this being a hoax, a big joke, and that they're going to cancel the kickstarter any minute. It'd be quite the cute "lessons learned" about anonymity scams. However, I will be treating it from here on out as a genuine scam. (As of May 2nd, the kickstarter has been cancelled, after the strangest attempt to reply to this imaginable. Good riddance.)

This absolutely ridiculous thing was brought to my attention by a friend and since it was late at night I thought I must be delirious in how absurdly over the top fake it seemed. So I slept on it, woke up, and found that it had gotten a thousand dollars more funding and was every bit as flabbergasting as I thought it was.

Since I realize that not everyone has spent their entire lives studying computers – and such people are the targets of such scams –

0xabad1dea

// SHA1 But I Let Copilot Take The Wheel

// this is ENTIRELY written by Github Copilot, all I did was
// give it a few prompts and made the absolute minimum changes
// to compile, which was rearranging the function order and
// adding one variable it had used without declaring.

// it does not quite work! have fun fixing it I guess :)

// license: uhh... a bot wrote it, I don't think you can

0xabad1dea

rtl-sdr build notes for OSX 
using macports http://www.macports.org/
see http://sdr.osmocom.org/trac/wiki/rtl-sdr

sudo port install cmake
sudo port install libusb
sudo port install pkgconfig
sudo port install sox # for easy audio
git clone git://git.osmocom.org/rtl-sdr.git
cd rtl-sdr/

0xabad1dea

/* include this file AFTER your standard includes */
/* clang -Weverything -Wno-unused-macros */

/*	SIGNED ARITHMETIC IS THE ENEMY. (use "signed" for main, etc.) */
#define int	BANNED
/*	THESE OTHER THINGS ARE ALSO THE ENEMY. 	*/
#ifdef	strcpy
#undef	strcpy
#endif
#define strcpy	BANNED

0xabad1dea

#include <stdio.h>
#include <string.h>

/*~ demonstration of unbounded conditions and integer wrap
  bugs in a real networking stack by 0xabad1dea

	dnparse() is taken from the XINU operating system
	http://www.cs.purdue.edu/homes/dec/xlicense.html
	
	slightly tweaked to compile as a unix userland thing ~*/

0xabad1dea

// hello clever programmers, would you like to play a game?
// where's the bug?
// by 0xabad1dea :)

#include <stdio.h>
#include <string.h>

int main() {
  	char input[16] = "stringstring!!!";
	char output[8];

0xabad1dea

Here is a huge list of functions listed in the PHP manual which take an argument 
which contains sensitive data, either directly or as an array element. Use it to 
"audit" for statically embedded passwords in "your" codebase. Some of these are 
very obscure/deprecated/whatever. The ones with "construct" in the name are 
classes called in source like new foo("password");...


http://php.net/manual/en/function.hash-hmac.php

http://www.php.net/manual/en/function.curl-setopt.php

0xabad1dea

#!/usr/bin/ruby
# trivial skeleton script for seeing Vibe messages that have a location and range that excludes you
# tested july 3rd, 2012
require 'rubygems'
require 'rest_client'

url = "https://v.zami.com/vibe_getsayings16-W4czD.php"
# new york city
lat = 40.664167
long = -73.938611

0xabad1dea

       _                  _           
      (_)       _        | |          
 ____  _ ____ _| |_ _____| |  _ _____ 
|    \| |  _ (_   _|____ | |_/ |____ | *
| | | | | | | || |_/ ___ |  _ (/ ___ | *
|_|_|_|_|_| |_| \__)_____|_| \_)_____| *
STUDIO MINTAKA : MANUFACTURER ID 0xABAD1DEA

  ___  ____  ____  ___  ___      ___  ____  _____  ___  ___ 
 / __)(  _ \(_  _)/ __)/ __)\ / / __)(  _ \(  _  )/ __)/ __)

0xabad1dea

On April 5 2012, #0x10c-dev agreed to the following standard ABI:

- Registers A, B, C are clobberable across calls

- Registers I, J, X, Y, Z are preserved across calls

- Return in A

- J is used for base stack pointer (preserving the value of SP before allocating
  data for locals)