I've been working on getting a p2p imageboard functioning for a while and I decided to start fresh more recently with a new project. It's still not fully featured per se, but I feel like releasing it in it's current form since it's still functional and I want to see if it works in the wild. Hopefully you'll be able to see the existing boards and start posting.
https://gitgud.io/threshold862543/gladden To install: >install node and yarn (or npm instead of yarn) >run "yarn build" to get the dependencies >run "yarn start" to start the server
And you can add whatever boards you like. This basically works like a torrent. Moderation is local, so you can delete files and posts that you don't like, but it won't be deleted for others necessarily (unless everyone else blocks them and there are no more seeders). "Subscribing" to others as moderators so you can trust them to delete for you is also possible I just haven't hooked it all up yet.
In 2017, For the first time in history, scientists were able to extract full DNA from Egyptian mummies that dates to between 1300 BC to 400 CE in a study published in Nature communication
It concluded that ancient Egyptians were actually closer to ancient and modern day west asians and south europeans than they are to modern day Egyptians because modern Egyptians have significantly higher sub-saharan ancestry than ancient Egyptians, making Bedouins, Palestinians, greeks and Lebanese sharing more ancestry and DNA with ancient Egyptians than modern Egyptians do, the study is famously known by “Abusir el-Meleq study”
A follow-up study by Scheunemann et al.(2022) was carried out collecting samples from six excavation sites along the entire length of the Nile vally spanning 4000 years of Egyptian history. Samples from 17 mummies and 14 skeletal remains were collected, and high quality mitochondrial genomes were reconstructed from 10 individuals. The analyzed mitochondrial genomes matched the results from the earlier study at Abusir el-Meleq.
Does this means that modern Egyptians can’t be considered the descendants of ancient Egyptians? Also This makes me wonder how does geneticists know if population X descended from population Y ?
Edit: The PCA chart in the study clearly indicate that Bedouins, palestinians and other levantine ethnic groups are closer to ancient Egyptians samples more than modern Egyptians themselves
Does anyone have any idea on how I could evade my cell provider's block on 4chan?
For context, this is not a DNS-level block but a proxy in the middle that intercepts unencrypted connections, and sends a block page if any Host header matching *.4chan.org is sent.
What I don't understand is how they're doing this to encrypted traffic too. If I test with a curl -vv https://sys.4chan.org then the TLS handshake fails:
I can connect to other sites using the same Cloudflare IP just fine. So they must be somehow detecting that this is traffic to 4chan, despite the connection being encrypted.
This is an ATtiny85. It's an 8-bit microcontroller that runs on the Atmel AVR instruction set.
Some of its features are: - Internal 8MHz oscillator - 8KB of flash memory - 512 bytes of SRAM - 512 bytes of EEPROM - Six GPIO pins - Two 8-bit timers - Universal Serial Interface
As a reminder, Sandworm is one of the cybercrime groups that has been around for the past couple of years, and they have been delivering a wide range of different malware strains ever since. The most notable of these is, for example, the well-known binary called BlackEnergy, but the group managed to deal quite a lot of damage by using a variety of other tools as well.
Notable among these is their KillDisk tool, as well as Industroyer, back in 2016, that managed to disrupt the energy grid of Ukraine. As of today, the group is still active, although its operations were significantly disrupted only about three months following this event. Known targets of Sandworm’s massive cyber espionage campaign include governments, enterprises, and the private sector in general. So far, the discovery of their entire malware arsenal does not include any new tools, but only variants of previously known ones.
But, one of these previously known tools has been observed being used to cripple an airport in Ukraine, for example. Similarly, Russia, but Russia’s Federal Security Service (FSB) has allegedly also been seen using some of Sandworm’s tools itself. Not all of Sandworm’s activities include straightforward cybercrime, and thanks to the list of targets, we can see why.
According to the ESET report, the list of the group’s targets includes among others, military and energy-related entities, as well as governments in Europe and the US. However, companies in the Middle East, such as petrochemical companies have also become known to be interested in Sandworm. In any case, it appears that Sandworm’s operations do not focus solely on monetary gain, which is something worth noting.
However, that does not mean that it is not doing anything illegal. In fact, it is believed that Sandworm’s operations are significant, and it was even behind the damaging and cyber attacks that, in which Ukraine found itself in the center. According to the Operation Armageddon report, the group engaged in a cyberwar against the country in December 2015.
As an effort to make sure that its activities are shut down, Ukrainian authorities have even taken extraordinary steps to disconnect its critical infrastructure in the past, and for the better part of the next two years.
Sandworm APT
The Sandworm tool seen back in late 2014 is believed to be developed by a famous group that is known as BlackEnergy. The operators were in attack mode in late 2018 and while there is no connection yet published, many security researchers believe that a new Sandworm campaign was launched and the pillars of the attacks were BlackEnergy.
What should be known about the Sandworm samples from 2019 are that the Sandboxie technique was used to detect operating system files and elevated permissions. Although just a theory, researchers suspect that this may be used in later stages of the attacks where ‘rootkit’ techniques might be deployed, although there are no details.
The KillDisk malware has been around since it appeared back in December 2015 and this was followed by three attacks throughout 2016 that nearly wiped out OS hard drives at Ukrainian electricity providers. KillDisk relies on obscure encryption mechanisms without the use of a secure decryption key, which means it cannot decrypt the files that it has encrypted. The initial variants of KillDisk masked themselves as a routine filesystem crash.
The Industroyer malware the first malware known to be identified as a threat to critical infrastructure in Ukraine. In June a test system test at the national grid operator, Ukrenergo, was affected, this was just an example malware, not the real attack that the operators carried out back in December 2015. The components of Industroyer/Dremisoft are used are:
CrashService - This module is capable of disabling the Windows crash reporting service in order that exploit code associated with the malware will tend to not be found or caught.
LoadDriver - This module stores the rootkit drivers effective in their attempts at elevating user privileges, used for load the KillDisk ransomware operating tools.
IEUpdate - This malware is basically a core Sandworm downloader able to update the DLL files and bring the KillDisk ransomware to the forefront.
KillDisk Executables Used
CrashReport.exe
This executable is a component of the Industroyer/Dremisoft and its aim is to disable Microsoft's crash reporting facility running in Windows. In order to accomplish this Craftsman's code combats OS virtually, processes the trusted user-corrected sequences of the I2S subsystems, and also Web browsers' portable arrangements that exceed the code limit are abused through a PharosRL.exe and are included in the suspect software list. Based on the ability to manipulate the authentic user code and the primary thread of PHP programming within the IEView.dll on behalf of a Sandboxie-0
KillDisk Ransomware doesn't contain the authentic '.dll' file for the 'rhixupd.dll' filename. In the case that Indestroyer's 'CountOverallmousecount' method to the 'w64.exe' is run, it is possible to deploy the ransomware, and code from the full exploit stage is activated following the installation of additional artifacts having been convinced that the installation of Industroyer is openly in support of your Ransomware.
wuau5e.exe
This executable acts as a sandboxer-malware evading/spreading hexadecimal client-side ransomware installer having a malware component that is modestly communicating with you in the dark, recording the screen, takes screen shots before selecting a keyboard key, stores the yet-to-be-accomplished code in the hard-coded
