Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Bypassing #EU #AgeVerification using their own infrastructure. I've ported the Android app logic to a Chrome extension - stripping out the pesky step of handing over biometric data which they can leak... and pass verification instantly. Step 1: Install the extension Step 2: Register an identity (just once) Step...

Paul_Reviews's profile picture

Paul Moore - Security Consultant 

14,753 subscribers

1,175,468 Aufrufe • vor 2 Monaten •via X (Twitter)

Nachrichten & Politik#EU#AgeVerification
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

You can now connect to Claude in Chrome using the VS Code extension. Use it to debug frontend apps, collect data or automate your browser. Install the extension and type @ browser to get started.
0:27

You can now connect to Claude in Chrome using the VS Code extension. Use it to debug frontend apps, collect data or automate your browser. Install the extension and type @ browser to get started.

Thariq

259,043 Aufrufe • vor 4 Monaten

How I created a Chrome Extension using Cursor in less than 2 hours (Without writing a single line of code and without knowing anything about programming) Step-by-step beginner tutorial:
14:18

How I created a Chrome Extension using Cursor in less than 2 hours (Without writing a single line of code and without knowing anything about programming) Step-by-step beginner tutorial:

Moritz Kremb

257,671 Aufrufe • vor 1 Jahr

You can launch Grok on Windows with just one click - no need to open Chrome or Edge every time It runs as a lightweight app using the PWA method, so it feels fast and native Here’s how to set it up: Step 1 → Open in Chrome or Edge Step 2 → Click the little “install app” icon at the top-right of the address bar and hit “Install” Step 3 → Right‑click the new Grok icon in your taskbar and click “Pin to taskbar” Now Grok opens instantly without loading the full browser, which makes it much snappier and way more efficient You can also assign a hotkey to the shortcut (e.g., Ctrl + Alt + G) so Grok is always one key combo away
0:24

You can launch Grok on Windows with just one click - no need to open Chrome or Edge every time It runs as a lightweight app using the PWA method, so it feels fast and native Here’s how to set it up: Step 1 → Open in Chrome or Edge Step 2 → Click the little “install app” icon at the top-right of the address bar and hit “Install” Step 3 → Right‑click the new Grok icon in your taskbar and click “Pin to taskbar” Now Grok opens instantly without loading the full browser, which makes it much snappier and way more efficient You can also assign a hotkey to the shortcut (e.g., Ctrl + Alt + G) so Grok is always one key combo away

X Freeze

27,670 Aufrufe • vor 6 Monaten

Launched a Chrome extension that renders full-page screenshots of any website without the API and allows to annotate them. The hypothesis is that: 1. Some extension users might be interested in automation and sign up for the API product. 2. Those who are not interested in automation will offload my servers and support chat. And of course, SEO juice from the Chrome Web Store—they give you a `dofollow` high-quality backlink. Dinesh S has built the extension and taken care of publishing it. I have only created a landing page for it 👉
0:35

Launched a Chrome extension that renders full-page screenshots of any website without the API and allows to annotate them. The hypothesis is that: 1. Some extension users might be interested in automation and sign up for the API product. 2. Those who are not interested in automation will offload my servers and support chat. And of course, SEO juice from the Chrome Web Store—they give you a `dofollow` high-quality backlink. Dinesh S has built the extension and taken care of publishing it. I have only created a landing page for it 👉

Dmytro Krasun

128,906 Aufrufe • vor 1 Jahr

Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously Ursula von der Leyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
2:13

Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously Ursula von der Leyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.

Paul Moore - Security Consultant 

3,390,575 Aufrufe • vor 2 Monaten

I built an AI data visualization Agent. The AI Agent can automatically generate the code and visualize the data using code interpreter sandbox. 100% Opensource Code with step-by-step tutorial.
1:40

I built an AI data visualization Agent. The AI Agent can automatically generate the code and visualize the data using code interpreter sandbox. 100% Opensource Code with step-by-step tutorial.

Shubham Saboo

67,845 Aufrufe • vor 1 Jahr

See how our Director of Growth and AI Partnerships ravidilse.eth walks you through the Proof of Uniqueness (PoU) process in 4 steps: Securing a Sentient Airdrop with PoU from Billions Step 1: Create Account Step 2: Check Eligibility Step 3: Verify PoU Step 4: Add Wallet Address You are not expected to download any software or install any application. The verification happens on your device. Within a few seconds, you are able to complete the verification process. Once completed, you will have the liveliness and uniqueness credential in your wallet. With a click of the "Verify" button, you can then generate a zero knowledge proof that can be shared with the verifier. The verifier can be Sentient or a third party like Clique. Note: No user data is being stored by Billions. Once the verification is done, you are eligible for the airdrop. This is where Sentient ensures that the treasury tokens are not being distributed to bot farmers - instead they are distributed to real, unique humans like you.
1:28

See how our Director of Growth and AI Partnerships ravidilse.eth walks you through the Proof of Uniqueness (PoU) process in 4 steps: Securing a Sentient Airdrop with PoU from Billions Step 1: Create Account Step 2: Check Eligibility Step 3: Verify PoU Step 4: Add Wallet Address You are not expected to download any software or install any application. The verification happens on your device. Within a few seconds, you are able to complete the verification process. Once completed, you will have the liveliness and uniqueness credential in your wallet. With a click of the "Verify" button, you can then generate a zero knowledge proof that can be shared with the verifier. The verifier can be Sentient or a third party like Clique. Note: No user data is being stored by Billions. Once the verification is done, you are eligible for the airdrop. This is where Sentient ensures that the treasury tokens are not being distributed to bot farmers - instead they are distributed to real, unique humans like you.

Billions

21,620 Aufrufe • vor 5 Monaten

I’m extremely pleased to announce the release of Scroll-Driven Animations Debugger, a Chrome DevTools extension to visualize and debug Scroll-Driven Animations. 🔗 Get the extension from the Chrome Web Store and start inspecting
1:54

I’m extremely pleased to announce the release of Scroll-Driven Animations Debugger, a Chrome DevTools extension to visualize and debug Scroll-Driven Animations. 🔗 Get the extension from the Chrome Web Store and start inspecting

Bramus

40,932 Aufrufe • vor 2 Jahren

Nobody is writing 90% of their code using AI. Here's the uncomfortable truth: The real productivity gain from using AI to write code is closer to 10%, nowhere near the 90% people claim. Sundar Pichai said in 2024 that 30% of the new code at Google was AI-generated. However, he went on to admit, during Lex Friedman's podcast, that engineering velocity had only increased by about 10%. AI-generated code isn't free code. It still has to be reviewed, tested, and made production-ready. Optimizing a single step (code generation) doesn't boost output if bottlenecks shift elsewhere (code reviews). It doesn't matter how much code you generate if you can't keep up the review process. The solution: Automate as much as you can the review and verification of your code. I'm working with Sonar, who is sponsoring this post, and they will take care of the code quality and security analysis of your code: • They review over 300B lines of code every single day • They cover reliability, security, and maintainability for your code • You can integrate them into your CI/CD pipeline • You can install them in your IDE (I use their VSCode extension) • Support for more than 30 languages Here is a link so you can check them out:
4:42

Nobody is writing 90% of their code using AI. Here's the uncomfortable truth: The real productivity gain from using AI to write code is closer to 10%, nowhere near the 90% people claim. Sundar Pichai said in 2024 that 30% of the new code at Google was AI-generated. However, he went on to admit, during Lex Friedman's podcast, that engineering velocity had only increased by about 10%. AI-generated code isn't free code. It still has to be reviewed, tested, and made production-ready. Optimizing a single step (code generation) doesn't boost output if bottlenecks shift elsewhere (code reviews). It doesn't matter how much code you generate if you can't keep up the review process. The solution: Automate as much as you can the review and verification of your code. I'm working with Sonar, who is sponsoring this post, and they will take care of the code quality and security analysis of your code: • They review over 300B lines of code every single day • They cover reliability, security, and maintainability for your code • You can integrate them into your CI/CD pipeline • You can install them in your IDE (I use their VSCode extension) • Support for more than 30 languages Here is a link so you can check them out:

Santiago

296,299 Aufrufe • vor 8 Monaten

Claude finally killed the need for OpenClaw They launched "Claude Channels" which allows you to control Claude Code from your Telegram / Discord I show you how to set it up in ~6 minutes in mainly 3 steps Step 1: Create bot with BotFather Step 2: Install the Claude plugin Step 3: Pair with a code Now I can code, research, manage files from my phone using Claude Code If you don't watch this tutorial now I highly suggest you bookmark for later!
6:22

Claude finally killed the need for OpenClaw They launched "Claude Channels" which allows you to control Claude Code from your Telegram / Discord I show you how to set it up in ~6 minutes in mainly 3 steps Step 1: Create bot with BotFather Step 2: Install the Claude plugin Step 3: Pair with a code Now I can code, research, manage files from my phone using Claude Code If you don't watch this tutorial now I highly suggest you bookmark for later!

Chris ☕️

70,181 Aufrufe • vor 2 Monaten

Breaking 🚨 Jupiter just released their highly anticipated Desktop Wallet Extension! Head over to the Chrome Web Store or Brave and install the Solana Super Wallet.
0:45

Breaking 🚨 Jupiter just released their highly anticipated Desktop Wallet Extension! Head over to the Chrome Web Store or Brave and install the Solana Super Wallet.

Jupiter Uplink

24,384 Aufrufe • vor 8 Monaten

The official dbt VS Code extension is now just a few weeks away. Here’s a sneak peek 👀 With the dbt VS Code extension, you’ll get a live, side-by-side view of your dbt code and the compiled SQL it generates See more at the dbt Launch Showcase on May 28
0:26

The official dbt VS Code extension is now just a few weeks away. Here’s a sneak peek 👀 With the dbt VS Code extension, you’ll get a live, side-by-side view of your dbt code and the compiled SQL it generates See more at the dbt Launch Showcase on May 28

dbt Labs

16,571 Aufrufe • vor 1 Jahr

Activating multiple roles via PIM is painfully slow... so I created this simple Chrome extension, 𝐐𝐮𝐢𝐜𝐤𝐏𝐈𝐌 > QuickPIM is a simple Google Chrome extension that allows you to select and activate multiple PIM roles in Microsoft Entra. It works by listening to Graph API requests your browser makes as you navigate through the portal and storing the token in the request header. It then retrieves your eligible PIM roles with that token and reuses it to activate the selected roles. To use it, add it from the Chrome web store (using the link above), then once installed, navigate through the portal a little (from the Overview page to PIM blade is enough). Then open the extension, select your roles, fill out the info and click Activate! #Entra #Microsoft
0:28

Activating multiple roles via PIM is painfully slow... so I created this simple Chrome extension, 𝐐𝐮𝐢𝐜𝐤𝐏𝐈𝐌 > QuickPIM is a simple Google Chrome extension that allows you to select and activate multiple PIM roles in Microsoft Entra. It works by listening to Graph API requests your browser makes as you navigate through the portal and storing the token in the request header. It then retrieves your eligible PIM roles with that token and reuses it to activate the selected roles. To use it, add it from the Chrome web store (using the link above), then once installed, navigate through the portal a little (from the Overview page to PIM blade is enough). Then open the extension, select your roles, fill out the info and click Activate! #Entra #Microsoft

Daniel Bradley

11,610 Aufrufe • vor 1 Jahr

Most people trying to build a vertical AI business start by building the agent. That's the mistake. Here's the 5-step order that actually works: Step 1) Find a boring pain point - Pick a workflow you already know from your job. - That's your unfair advantage. Step 2) Map the workflow - Literally draw it out. - Every step, every handoff. Step 3) Do the job as a service - Manually. - For real clients. - Before any code. Step 4) Document the edge cases - This is where the real IP lives. - You only find them by doing the work. Step 5) Add vertical agents to replace each step - Now you have proprietary data and a workflow you own. Skip steps 1–4 and you're just building a demo.
4:43

Most people trying to build a vertical AI business start by building the agent. That's the mistake. Here's the 5-step order that actually works: Step 1) Find a boring pain point - Pick a workflow you already know from your job. - That's your unfair advantage. Step 2) Map the workflow - Literally draw it out. - Every step, every handoff. Step 3) Do the job as a service - Manually. - For real clients. - Before any code. Step 4) Document the edge cases - This is where the real IP lives. - You only find them by doing the work. Step 5) Add vertical agents to replace each step - Now you have proprietary data and a workflow you own. Skip steps 1–4 and you're just building a demo.

The Startup Ideas Podcast (SIP) 🧃

14,202 Aufrufe • vor 1 Monat

Terry McLaurin just said he hasn’t heard from the #Commanders on an extension in over a month. “Without any progressive discussions, I don’t see how I step on the field.”
0:42

Terry McLaurin just said he hasn’t heard from the #Commanders on an extension in over a month. “Without any progressive discussions, I don’t see how I step on the field.”

Jordan Schultz

465,210 Aufrufe • vor 11 Monaten

Introducing the world's first AI Chrome Extension Builder. Turn the manual steps you take on any website into an AI extension that does them for you. Describe it to Blink. It builds the AI extension. Download. Launch on Chrome Web Store. Comment Chrome + RT for a free month.
0:46

Introducing the world's first AI Chrome Extension Builder. Turn the manual steps you take on any website into an AI extension that does them for you. Describe it to Blink. It builds the AI extension. Download. Launch on Chrome Web Store. Comment Chrome + RT for a free month.

Blink.new

30,092 Aufrufe • vor 28 Tagen

Here’s the FULL quote — with context that the media REFUSES to include — from Speaker Mike Johnson ⬇️ “Now, the question has just been asked, would I bring everyone back to vote on FISA again. I'm gonna ask you to answer the question yourselves. What would be the point? We passed a three year extension on April 29th. It is sitting in the hopper over there as a live bill just now. I attempted to pass a short term extension for three weeks, clean extension, no changes to the law, just make sure that the people are not subjected to great harm. And the Democrats, 199 of them voted against it and applauded themselves as they left the building. What would be the point of me going through this exercise over and over? The house has done every single thing. The House Republicans have stood and led for the safety and security of the American people, and the Democrats are playing political games. The questions are for them. So I think I've told you everything you need to know.”
0:49

Here’s the FULL quote — with context that the media REFUSES to include — from Speaker Mike Johnson ⬇️ “Now, the question has just been asked, would I bring everyone back to vote on FISA again. I'm gonna ask you to answer the question yourselves. What would be the point? We passed a three year extension on April 29th. It is sitting in the hopper over there as a live bill just now. I attempted to pass a short term extension for three weeks, clean extension, no changes to the law, just make sure that the people are not subjected to great harm. And the Democrats, 199 of them voted against it and applauded themselves as they left the building. What would be the point of me going through this exercise over and over? The house has done every single thing. The House Republicans have stood and led for the safety and security of the American people, and the Democrats are playing political games. The questions are for them. So I think I've told you everything you need to know.”

Speaker Johnson War Room

21,892 Aufrufe • vor 5 Tagen

Day 102. Shot under the Bayview Extension and the same skyline that shaped a generation of dreamers. The climb doesn’t stop just because the crowd gets quiet. Every day is another step out of the valley. Own the future — don’t rent it. Let’s rise.
6:21

Day 102. Shot under the Bayview Extension and the same skyline that shaped a generation of dreamers. The climb doesn’t stop just because the crowd gets quiet. Every day is another step out of the valley. Own the future — don’t rent it. Let’s rise.

Eric Jackson

33,209 Aufrufe • vor 6 Monaten