Finnish Institute for Health and Welfare (THL) has asked SSM Suomen Suoramainonta to deliver a letter about the best practices against the COVID-19. However if you never received such a letter like I didn’t, you could’ve complained about it in the address provided by THL in their own blog post. Unfortunately I think I’m going to pass this one. This is mainly because of 3 reasons.
Continue reading “Finnish Institute for Health and Welfare (THL) shares your COVID-19 letter complaints with an insecure direct marketing company”Geolocating SSIDs and why you should not share funny WIFI names around your place
…because it’s really easy to find your location just based on your funny screenshot. Let’s see how and with code samples. To do this, we’re using the wonderful, open wardriving database WiGLE.
Continue reading “Geolocating SSIDs and why you should not share funny WIFI names around your place”Let’s review app security: FinPandem – Crowdsourced COVID-19 heatmap
At the moment of writing this post it has been ~9 hours since FinPandem released a demo video of their product, apparently developed by Tarento (Indian, Finnish and Swedish company, who knows where the app is developed ) and Coredo.
Continue reading “Let’s review app security: FinPandem – Crowdsourced COVID-19 heatmap”Microsoft’s fight for junk mail is a privacy risk
I was trying to see if I comply with Microsoft email sending policies today. Apparently I’m doing perfectly fine according to the 5 points containing list, but the 5th option is a little concerning.
Continue reading “Microsoft’s fight for junk mail is a privacy risk”Abuse potential of some vending machine mobile payments in Finland
Mobile payments based on SIM card information + the IP address of the user have been used in Finland a few years, but some of the implementations don’t look so good.
Continue reading “Abuse potential of some vending machine mobile payments in Finland”Automating domain drop catching with Python
Has someone ever ‘taken’ your expired domain or has someone forgot to renew it ever, and then somone ‘took’ it? Unless you’re a celebrity or you’ve very strong trademark product, chances are that either you’ve to pay a large sum of money to the current owner of the domain, or wait for the domain to expire.
Continue reading “Automating domain drop catching with Python”Find all available short domains in certain TLD
This is just a small and nice script that you can use for finding any free domain in certain TLD with characters specified in regex.
Continue reading “Find all available short domains in certain TLD”Electron wrapping Microsoft Teams for Linux
Are you suffering from an organization that has taken a move to go away from the very dear Slack and taken interest in Microsoft Teams that has no official Linux client? Fear not. The solution is a simple Electron wrapper
Continue reading “Electron wrapping Microsoft Teams for Linux”Mass checking websites for PHP errors
After PHP versions 5.6 and 7.0 became unsupported, I decided to write a small script in Python that can go through urls defined in sitelist.txt or whatever you wish to use.
Continue reading “Mass checking websites for PHP errors”How to abuse contact list syncing for OSINT/DOX
In this purely educational post which doesn’t encourage anyone to try anything, I want to demonstrate dangers of linking phone numbers to social media accounts, because it’s bad to dox people and bad to get doxed. Unless the end justifies the means.
Continue reading “How to abuse contact list syncing for OSINT/DOX”