u/i_mattas

Hello everyone, I am trying to get the book AP Human Geography Premium, 2027: Prep Book with 6 Practice Tests+ Comprehensive Review + Online Practice By Meredith Marsh Ph.D. and Peter S. Alagona. I currently dont have the funds to buy the books physcial copy or e-book. Anyway somebody can help me get the contents of the book via e-book? I am a freshman highschool student taking my first AP class so ANY support would be HIGHLY appreciated.

Hello everyone, I am looking for the book AP Human Geography Premium, 2027: Prep Book with 6 Practice Tests+ Comprehensive Review + Online Practice By Meredith Marsh Ph.D. and Peter S. Alagona. I currently dont have the funds to buy the books physcial copy or e-book. Anyway somebody can help me get the contents of the book via e-book? I am a freshman highschool student taking my first AP class so ANY support would be HIGHLY appreciated.

Hello y'all I was curious if there is a tool out on the internet that automatically claims games that are 100%/free because of a discount that way I don't forget to claim free games. Because if not I was planning on making an extremely lightweight that doesn’t affect performance that just runs every 24 hours or something. If any body knows of a tool let me know or if doesn't know of a tool and wants a tool like this give suggestions of what should include.

My take: CBP had the right to search the phone, but the way they handled it was wrong—and wiping it should not be treated as a crime

Because he was returning to the United States from another country, he was crossing the U.S. border. Border agents have broad authority to inspect people and property entering the country, so I do not think the basic decision to inspect his phone was automatically illegal.

My issue is with how the search was conducted. He reportedly asked to contact a lawyer and was denied access. I understand that the constitutional right to a lawyer during a border inspection is legally complicated—the Sixth Amendment normally applies after criminal proceedings begin, while the Fifth Amendment applies during custodial interrogation—but once agents were questioning him about suspected criminal activity and demanding access to highly private information, I believe he should have been allowed to speak with counsel.
A border search should not become a way to bypass basic due-process protections simply because someone has just entered the country.

I also do not believe wiping the phone should be treated as a crime in these circumstances. It was his phone and his personal data. If the government wanted to preserve and search that data, it should have followed a process that respected his constitutional rights rather than demanding that he unlock it while denying him legal advice.
There is a difference between physically destroying property already lawfully seized by the government and refusing to help the government access your private digital information. Prosecutors are relying on a statute against destroying property to interfere with a lawful seizure, but applying that law to a duress password and privately owned digital data is a major expansion of what the statute traditionally means.

My position is:
CBP had the authority to conduct a lawful border inspection, but that authority was not unlimited. Denying him the opportunity to contact a lawyer made the process unfair, and using an emergency wipe feature on his own phone should not automatically be treated as criminal obstruction—especially when the legality and manner of the search itself were being disputed.
Border authority should not mean unlimited authority.

https://preview.redd.it/5th1i2qt3ofh1.png?width=987&format=png&auto=webp&s=6017f8becaf15b86ea62749716ec5225443f4ea6

So we all know the Mr. beast gambling scam. My friend sent me this scam because he downloaded malware. So I opened a AWS machine so I can analyze and reverse the malware. I found info like the C2 server location and much more. The malware contains keylogger, screenshots, webcam/mic access and viewing, file download/unzip, proxy, shell execution, persistence, browser and wallet stealing, DPAPI/LSASS/AppBound decryption logic, steam theft. I found out how everything runs. How the server and infra functions and etc. And I hate this scam... I really do. Should I report finding to somewhere like IC3?

Hello everybody, I am a experienced 15 year old developer that mostly uses lower level language such as, asm (I made a custom bootloader the supports bios and UEFI), C (I made my own kernel and user land (ring 3) that works with my bootloader and works on real hardware, c++, cs, rust and python for other mini projects. I also know a little web development so just be aware if you ask about web dev there will be much better resources, advice and info out there. If anyone needs help with let me know i'm always happy to support!

I’ve been working on a CTF challenge called palimpsest, and I wanted to share the idea because it’s probably the most evil rev challenge I’ve made so far.

The public files are just a stripped ELF and an encrypted pack file. There’s no input prompt, no “correct/wrong” branch, and no plaintext flag. Running it normally just gives you a mostly useless digest, so the solve is not about patching a branch or finding a password check.

The binary has a couple fake VM paths and one real custom VM. The real VM uses stateful opcode decoding, so the same encoded instruction can mean different things depending on runtime state. There are also a few self-modifying bytecode spots, so static disassembly alone is kind of doomed. The intended move is to reverse the VM loop, write a tracer or emulator, and dump what it builds in memory.

That memory dump is not the flag either. It’s a masked typed IR that turns into a modular constraint graph. After decoding the IR and simplifying the constraints, the actual crypto finally shows up: a custom Schnorr-style signature system with decoy samples and a noisy affine nonce relation.
So the solve path is basically:

1. unpack the sections
2. ignore the fake VMs
3. reverse the real VM
4. write an emulator/tracer
5. dump the hidden IR
6. decode/type-infer the IR
7. simplify the constraint graph
8. extract the Schnorr equations
9. filter decoys
10. run a lattice attack
11. recover the private scalar
12. decrypt the flag

I’m trying to keep it brutal but fair. No random crashes, no anti-debugging junk, no network stuff, and no impossible crypto. The hardness is supposed to come from the layers and the fact that each stage only reveals the next representation.

Curious what rev people think: is this the fun kind of evil, or did I cross into “I am switching to OSINT and finding where the challenge developer lives” area?

Who else is going to DEFCON in Vegas and is excited!?

I wanted some outside opinions on this because I’m getting mixed feelings about whether I handled this correctly.

There’s a Discord server/community that develops a Windows gaming optimization tool called Risxn. A while back I actually used their utility before I got into reverse engineering and binary exploitation.

Recently I was bored and decided to take a look at their software. I ended up fully deobfuscating the application and reversing how it worked. As part of that process, I was also able to recreate a functional replica of the application and discovered that their backend endpoints could be abused to generate valid licenses.

After finding all of this, I felt like the responsible thing to do was disclose it to them so they could fix the issues. Since I had already reversed the application, I figured it would be useful to show them exactly what was wrong and how an attacker could exploit it.

I opened a support ticket and explained everything. They asked me for proof, so I sent them a ZIP containing the project directory I had been working in, including my analysis, deobfuscated code, and the proof-of-concept work that demonstrated the vulnerabilities.

They reviewed it, thanked me for reporting the issues, and then shortly afterward banned me from their Discord, revoked my license, and removed me from their backend system where licenses were managed.

I’m honestly confused by the response. From my perspective, I reported serious security issues, provided evidence, and gave them the information they needed to fix the vulnerabilities. On the other hand, I can understand why a company might not appreciate someone reversing their software, rebuilding it, and demonstrating license generation exploits.

So my question is:

Was I in the wrong here, or was this a reasonable example of responsible disclosure? How would you have handled this situation differently?

Any ideas?

What is the closest clone of MacOS Desktop environment. I found a GTK theme called MacTahoe