HN user

Xeanort

245 karma

data:text/html;base64,PHNjcmlwdD5hbGVydCgnQWxsIHlvdXIgZGF0YSBhcmUgYmVsb25nIHRvIHVzXG4nK2RvY3VtZW50LmNvb2tpZSk8L3NjcmlwdD4=

Email: ax2m25nrv at relay.firefox.com

Posts13
Comments16
View on HN

It's still possible to use XPrivacyLua (https://github.com/M66B/XPrivacyLua) with passing SafetyNet. It's a cat-and-mouse game, but the community is still ahead.

You can achieve this with latest Magisk (v24+, https://github.com/topjohnwu/Magisk), enabled Zygisk and following modules:

- LSposed Zygisk (https://github.com/LSPosed/LSPosed, fork of Xposed)

- Universal SafetyNet Fix (https://github.com/kdrag0n/safetynet-fix)

- Shamiko [optional, more hiding but needs configuration] (https://github.com/LSPosed/LSPosed.github.io)

* Unless you get an Evil Maid attack [0], like adding a physical keylogger to the keyboard bus.

If the device is decrypted but on lock screen (like with TPM) there are more options, the main one is reading memory via DMA [1] on an ExpressCard slot (eg the wifi card). Also swapping out the memory to do a cold boot attack [2] is possible.

[0] https://en.wikipedia.org/wiki/Evil_maid_attack

[1] https://github.com/ufrisk/pcileech

[2] https://en.wikipedia.org/wiki/Cold_boot_attack

You want a linear function f(x) such that f(a)=A and f(b)=B given a, b, A, B. A valid f(x) (actually it's the only one) is defined as

             x-b     x-a
    f(x) = A --- + B ---
             a-b     b-a
You can calculate f(a) and f(b) to confirm that it works.

However, I don't find this kind of guide any good for learning math...

You are right that they cannot be added to History, but the code used here changes the back button functionality with

  $(window).on('popstate', function() {
    window.location.href = 'https://example.com';
  });
I just tested it and it works with different domain in latest Firefox.

To make 4. useful, links with the domain different than the open one should not be allowed to be added to History, otherwise you can bypass it with a different domain. And without 4. this new limitation could be bypassed with a redirect (from the same domain).