krubenok

#!/usr/bin/env bash

PLIST=~/Library/Group\ Containers/group.com.apple.replayd/ScreenCaptureApprovals.plist
CURRENT_DATE=$(date +%s)
ONE_YEAR_FROM_NOW=$(date -v+1y +%s)


if [ -f "$PLIST" ]; then
    # Contents of the plist file look like this:
    # Dict { /Applications/1Password.app/Contents/MacOS/1Password = Sat Sep 21 11:59:57 PST 2024 /Applications/Microsoft Teams.app/Contents/MacOS/MSTeams = Tue Sep 21 05:40:36 PST 3024 /Applications/CleanShot X.app/Contents/MacOS/CleanShot X = Tue Sep 21 05:40:36 PST 3024 /Applications/Ice.app/Contents/MacOS/Ice = Sat Sep 21 05:40:36 PST 2024 /Applications/Shottr.app/Contents/MacOS/CleanShot X = Tue Sep 21 05:40:36 PST 3024 }

krubenok

reading from file dns.pcap, link-type LINUX_SLL (Linux cooked)
12:25:48.517893 IP tailscale.private_lan.58605 > f6026fd00be5.53: 52003+ A? winatp-gw-cane.microsoft.com. (46)
12:25:48.517949 IP tailscale.private_lan.60553 > f6026fd00be5.53: 28255+ AAAA? winatp-gw-cane.microsoft.com. (46)
12:25:48.518784 IP f6026fd00be5.53 > tailscale.private_lan.60553: 28255* 4/1/0 CNAME wdatpsngatewaytmcacane.trafficmanager.net., CNAME wdatpprd-cane.securitycenter.windows.com., CNAME k8stm-prd-cane.trafficmanager.net., CNAME wdatp-prd-cane-3.eastus2.cloudapp.azure.com. (503)
12:25:48.527006 IP f6026fd00be5.53 > tailscale.private_lan.58605: 52003 5/0/0 CNAME wdatpsngatewaytmcacane.trafficmanager.net., CNAME wdatpprd-cane.securitycenter.windows.com., CNAME k8stm-prd-cane.trafficmanager.net., CNAME wdatp-prd-cane-3.eastus2.cloudapp.azure.com., A 52.184.224.218 (460)
12:25:48.536907 IP tailscale.private_lan.64866 > f6026fd00be5.53: 64691+ AAAA? wdatp-prd-cane-3.eastus2.cloudapp.azure.com. (61)
12:25:48.536971 IP f6026fd00be5.53 >

krubenok

Keybase proof

I hereby claim:

• I am krubenok on github.
• I am krubenok (https://keybase.io/krubenok) on keybase.
• I have a public key ASBAXFbWwvxrH-RrCzzTXjt5Vs7ZvpAbG-QjRAIT0ppkDAo

To claim this, I am signing this object: