w33k of g33k banner

Happy [Early] Halloween...

Great video on YouTube:

March 23, 2018 · Sean P. McAdam

Nintendo Switch Console & Joy-Con Case Replacement

So it took me two attempts to get this done, but it was definitely worth it. I used the below kit & YouTube video for direction. Amazon: BASSTOP [Update Version] DIY Replacement Housing Shell Case Set for Switch NS NX Console and Right Left Switch Joy-Con Controller without Electronics(Set-Atomic Purple) YouTube: How To Mod Your Nintendo Switch and Joy-Con Below are some of the in-progress & completed photos of the mod: ^^^ Switch console with the back panel removed. ...

March 22, 2018 · Sean P. McAdam
w33k in g33k logo

Black Mirror: Season 05

Yes! The future will be brighter than ever

March 5, 2018 · Sean P. McAdam
w33k of g33k banner

YAPSF (Yet Another Apple Security Flaw): Info.plist Path Traversal

Abraham Masri (iabem97) has revealed a new flaw in Apple latest iOS 11.3 beta, allowing an Info.plist file to grab a file outside of the current application’s sandbox. Granted this is a beta OS, but still, this is another example of Apple seemingly rushing a release, & having all sorts of flaws. This is just the latest one. Redmond Pie: Abraham Masri Drops iOS 11.3 0day Vulnerability, Here’s What That Means For Future Jailbreak GitHub: iabem97/securityd-racer2 And here is the Wiki write-up that explains how an app’s Info.plist file can access another app’s icon: GitHub: iabem97/writeups: Info.plist Path Traversal ...

March 5, 2018 · Sean P. McAdam
w33k of g33k banner

Setting up an SSH Server on Android through Termux

After a little trial & error, I was finally able to get an SSH server running on Android through Termux. Some help from the following three articles as well: Glow.li: Run an SSH server on your Android with Termux Termux Help: Using SSH webOS Internals: Dropbear Install You have to make sure you have the openssh package installed. If not, run pkg install openssh. Then start the service via sshd. Something I didn’t realize at first was that the default port was changed to 8022, instead of the standard 22. Fine by me, considering I wanted to change it from the default anyway. ...

January 29, 2018 · Sean P. McAdam

New "Ready Player One" Trailer!

I am cautiously optimistic about this movie; i just hope it can live up to the hype. The book is definitely one of my favorites, so i don’t want the movie to ruin that for me. Watch the trailer below! I also didn’t realize there was already a teaser released. See that below as well:

December 11, 2017 · Sean P. McAdam

December 2017 Posts

December 1, 2017 · Sean P. McAdam

macOS: root User Account Vulnerability

Yesterday it was revealed that macOS has a critical bug that allows any user with physical access to a device, to login as the root user with no password. I have tested this myself, via the process below: Open System Preferences > Users & Groups Select the lock [ ? ] in the bottom left-hand corner of the window. Clear the pre-filled username, & replace it with “root” & select [Unlock]. [caption id=“attachment_115” align=“aligncenter” width=“431”] Screenshot of using the root account with no password/[/caption]- Once the attempt is rejected, try again with the same settings as above. I’ve read from a few different sources that say to do it a few times, before you are allowed in. During my testing, I just had to attempt it twice, & I was in. In order to fix this issue, you must change the root password through the Directory Utility. Open the app, hit the lock [ ? ] to enter your credentials (or use the root exploit again) then go to Edit > Change Root Password… NOTE: You MUST choose to change the password. Simply disabling the root account does not correct the issue. If you disable the account, running through the same process for the exploit reactivates the root account without a password. ...

November 29, 2017 · Sean P. McAdam

The 13th Doctor's Outfit Revealed

Looks like the BBC’s twitter account has revealed the 13th Doctor’s outfit for the new series:

November 9, 2017 · Sean P. McAdam

iOS 11.1 Activation Lock Bypass

Looks like iOS has yet another Activation Lock bypass… Seems like all you have to do is have a device that is Activation Locked with an account that has 2FA enabled. Once that is set, you enter the wrong passcode several times, until you are timed out for an hour. Wait for the timer to run down, doing it a few more times, & you should bypass the activation lock. See the attached video for a demonstration I found on YouTube. ...

November 2, 2017 · Sean P. McAdam