Category: Uncategorized

Disclaimer

This article is for research purposes. If you do this, I will not be held responsible for any license violations that may occur.

• MC60H-DWHD5-H80U9-6V85M-8280D
• 4A4RR-813DK-M81A9-4U35H-06KND

• Double tap the side of your headset for Passthrough Mode.
• Double tap the Meta button. Wait for an audio cue to know the headset is listening. Speak your command.
• Examples:
• Open VRChat
• Search the store for VRChat
• Open Settings | Open Store | Open Library
• Restart | Shut down | What’s my battery
• Capture screenshot | Capture video | Stop recording
• Tap your controllers gently together twice and the headset will immediately switch to hand-tracking. To switch back to controllers just pick them up.

Note: Hexchat is dead as of 2.16.2, The Final Release on February 9th 2024. Keep in mind, this could mean that HexChat accumulates unfixed vulnerabilities or bugs going into the future. If you are using IRC + tor for a “secure” use case, consider using an alternative, such as irssi or weechat.

1. sudo apt install tor hexchat
2. Run the tor command to start the tor service on 127.0.0.1:9050.
• Keep this running in a background terminal.
3. Start HexChat
4. Connect to any IRC server.
• This is required in order to access the HexChat menus.
5. In the new window, select Settings and then Preferences. Hit the option Network setup.
6. Under the hostname field, type in: 127.0.0.1 and in port type in: 9050. Change the Type dropdown to SOCKS5
7. Next, fully close and reopen HexChat. Ensure that it is PROPERLY closed, and then reopened.

Taken from https://github.com/pixeltris/TwitchAdSolutions.

• Navigate to the uBlock Origin Dashboard (the extension options).
• Under the My filters tab add twitch.tv##+js(twitch-videoad).
• Under the Settings tab, enable I am an advanced user, then click the cog that appears. Modify the value of userResourcesLocation from unset to the full url of the solution you wish to use (if a url is already in use, add a space after the existing url). e.g. userResourcesLocation https://github.com/pixeltris/TwitchAdSolutions/raw/master/vaft/vaft-ublock-origin.js
• To ensure uBlock Origin loads the script I recommend that you disable/enable the uBlock Origin extension (or restart your browser).

The way Windows handles the recycle bin is by moving your “deleted” files to a secret directory called $RECYCLE.BIN on the root of whatever storage device you’re removing from. The problem starts when you move from one device to another after “deleting” something. Files accumulate, but you can’t see them normally, including sensitive ones. The only way you can is either by enabling View Protected Operating System Files in explorer.exe, or by using Everything which caches this directory.

The below command shows how to manually clear this directory:

rmdir /q /s C:\$RECYCLE.BIN

Change the drive letter to whatever mounted storage media you want to clear out.

Note: This command must be run as administrator.

Arch-based distros:

sudo apt install spice-vdagent qemu-guest-agent

Debian-based distros:

sudo pacman -Syu spice-vdagent qemu-guest-agent

Lastly, turn off completely – not restart – your VM. This means a complete power off. Then, turn it back on.

1. Run pkill tor, or simply close tor.
2. Run the following command: rm -rf ~/.tor
3. Rerun tor.

Encrypting VMs is a best practice.

If you have any sensitive data, or something that needs to be hidden, encrypting your VMs is a necessity! Think about how vulnerable VMware files are to attackers. Instead of having to take your hard drive, they simply have to pull a file, then boot it up themselves, duplicate it, or who knows what.

In a day in age where VMs are so ubiquitous (especially VMware Workstation ones), this is extremely important.

Consider this: there are risks to not encrypting your VMs, but no risk to encrypting them. Why take the risk?

Requirements

• SSH server (installed using your package manager).
• A Windows 10/11 PC.
• sshfs-win-manager, WinFsp, and sshfs-win.
• Cryptomator.

Server

Generally install and activate your SSH service/daemon. Set the port to something other than the default 22. Finally, port forward it onto the Internet.

As an optional recommendation, disable PasswordAuthentication in your /etc/ssh/sshd_config and instead use SSH keys.

Client

Install sshfs-win-manager, sshfs-win, and WinFsp. These are three different types of programs that allow you to mount sshfs shares natively on Windows. Mount the server + directory you want to use via the sshfs-win-manager front-end.

After the directory is mounted, create a New Vault using Cryptomator. Set a secure and unique password, and ensure you keep the recovery password in a secure area.

Very basic tips to “lockdown” your Android device. Obviously, the best recommendation would be to not use a phone at all, but realistically, in this day in age, that’s not possible.

• Ensure your Android device is on a supported version, and is always up to date.
• Use a passphrase (not a PIN).
• Enable Lockdown mode and learn how to use it.
• Note: Not all Android device will have this.
• Change your notification type to Hide sensitive notification content in your Android settings.
• Use DNS66 to block your Android device from accessing malicious hosts.
• Remove unused apps and factory installed bloatware using Android App settings on your device.
• Some apps can’t be uninstalled. In this case, you can force stop, disable them, then clean all app data and cache. This can all be found in the Android App Settings.
• Alternatively, use Bromide instead of Chrome.
• Disable Chrome in your App settings if you do install Bromide.
• Set Screen timeout to the lowest possible setting.
• It’s surprising considering how much this basic setting is overlooked.
• Install an alternative Google Play Store, such as Aurora Store, which supports anonymous downloads/login.
• Install F-Droid for FOSS and Open Source apps, as well as alternatives to closed source apps.
• Review all privacy and security settings in your Google Account settings.
• Setup your phone using a brand new Gmail account used only for your Android device. Ensure it’s used only for the purpose of phone syncing, etc.
• This may not be possible or feasible for everyone.
• Ensure SD card encryption and Android Filesystem encryption is turned on.
• Depending on your Android version, and device, this is might be on by default.