Weaponized Tor is being Spread on YouTube

[@mawio3763]

Thank you for pointing out the KZbin dislike button. KZbin is more concerned about their profits than your security 👏

[@sainaro2335]

you can get the dislike button back w an extension, but I agree that youtube shouldn't have removed it in the first place. Not everyone knows that you can even get them back and dislikes can be crucial information in cases like this

[@tactileslut]

And the fefees of the Whitehouse PR team.

[@mushiwushi]

@@sainaro2335 the extention isnt as accurate unfortunately

[@oilbender]

Yeah, and they even had the gall to make a video saying some nonsense like "before you claim you know something, you should check the other side" trying to say that all users complaining about the removal of the dislike button don't know what they are talking about.

[@Truth_Unleashed]

They removed the dislike button because people were catching on to covid being a scam...

[@O1OO1O1]

Always wanted Tor, now that it comes with weapons, i can't wait to get it.

[@Amos_Quito]

Lmao

[@James-bw3qp]

Thank you for the laugh

[@DarkGladiator]

Lol

[@Msantor1605]

*Laughs in America* +1 to make like number 223

[@yung-megafone]

"ban assault TORs"

[@Ness_and_Sonic]

I said the same thing about the removal of the dislike counter. I knew scammers would take advantage of it. Susan's actions are allowing malware to spread, but it's okay as along as the "creators" don't have to worry about that dislike counter that they strangely can still see. However, I get this feeling that youtube would double down on it instead of bringing it back by say creating a new rule they can ban people for and use to censor more creators or something like that.

[@figshwg]

use the return youtube dislike extension it would save you alot

[@Ness_and_Sonic]

@@figshwg I've it, but it does tell me that some videos still have their dislike counter hidden by the user.

[@DonVigaDeFierro]

"creators"? You mean "corporations".

[@thecianinator]

The whole point of getting rid of the dislike button was to stop ads from getting ratioed anyway

[@herbderbler1585]

That's precisely it. Creators can still see the dislike, but no one else can. So which "creators" does this benefit? Big corporations. Their feels won't be hurt by big thumbs down, but they can definitely benefit from burying any negative public perception their skeezy actions might bring about.

[@janemba42]

Oh I learned from high school never to trust a shortcut. I used to replace the internet shortcuts on the School PCs with the shut down prompt. Was hilarious to watch even the teachers losing their minds because they think someone is actively hacking the computer 🤣

[@dementedpeep]

I use to make batch files that still opened the original program but put a shutdown timer so the person would be actively in the middle of what they opened and go “wtf”, as it shut down I miss trolling the school computers

[@TheOnlyGamingDML]

how do u make the shortcuts do smth else?

[@wrathofainz]

Lmao yeeees

[@improvisedchaos8904]

I disguised a .bat file with the simple command "shutdown -f" I changed the icon to that of a folder, and titled it "Fun Games". The server admin clicked on my .bat file while logged in as admin; shutting down the network for all the schools within the county. I was pulled out of class and the head IT guy asked me how to remove the "virus". I told him to just click on it once and press delete. I was banned from computers for the rest of the year.

[@LilacMonarch]

@@improvisedchaos8904 Ah yes the "professional" server admin. Classic

[@thedrunkenrebel]

Imagine having incredibly valuable state secrets worthy your weight in antimatter and giving them away for payments of an Uber ride and your monthly paycheck. That's the dumbest spy in existence and it's a shame for our species

[@HomikaGaming]

Not everyone just discovered nuclear power at the same time. Just takes one though

[@ThePandaKingFTW]

To be fair he wasnt a spy. He was just someone who worked at the CIA with (claimed) misconfigured credentials that gave him access to documents he wasnt supposed to. Coulda been a custodian for all we know.

[@NoOne-dj1ou]

from what I've heard, he was actually really desperate for money.

[@Andrew90046zero]

You forgot thar part where he was 250k in debt. How dumb do you have to be to do that. Also, in all fairness, it's not a shame to our species. Because at least you can say most people would have more common sence than this #1 Not going into massive debt, #2 Being a traitor to your country just to get out of debt.

[@DonVigaDeFierro]

For real, I'd get the documents on a thumb drive up my ass and get to motherfucking Russia by any means necessary... People would _kill_ for that information... Maybe people _have..._ Man, I am realizing how boring would a spy thriller be in the 2020s...

[@bubba99009]

That app mode is a horrible idea open to tons of abuse - it should always show the URL somewhere in the UI - but at least they are making it harder to block ads for "security" purposes.

[@LetrixAR]

The idea of app mode is to make a web app appear like a native app. It should not show the URL, same as PWA for phones. As for extensions, they're disabled by default but they can work in app mode.

[@bubba99009]

@@LetrixAR Yea besides it obviously being ripe for abuse, I don't see the real need from a user POV for an easy lazy way to make web pages appear to be apps. It's another user hostile invention. Zero gain in functionality for the user but they lose a lot (all the normal browser functions which become inaccessible). All so the developer can pretend they developed an app when they didn't. There's plenty of tools for wrapping websites as "apps" already if that's what they are after so there's no need for it to be built into chromium.

[@LilacMonarch]

@@LetrixAR It's a terrible idea, either malicious or just out of stupidity. There is NO reason why the "app mode" should be able to hide that it is just a browser window. There should be some kind of indication, it doesn't need to be intrusive but it should still be obvious.

[@wessltov]

App mode is a ploy to allow companies to just hire front-end developers for (almost) everything Prove me wrong

[@TheMikernet]

If someone can run arbitrary commands on your PC you've already lost, app-mode being present or not.

[@OGuiBlindao]

The last one is a prime example of: "Just because it isn't executable / a site, doesnt mean its safe"

[@justunluckygamer6408]

sites are safe. bloodthirsty and brutal dictatorships are not.

[@JediBuddhist]

Now *that's* one Onion that'll make ya cry.

[@XENON2028]

another one is the chocolate onion I gave when people went trick or treating jk jk

[@xXVibrantSnowXx]

I love Onions & crying onions

[@deidara_8598]

There's probably at least 9 other people whose done the same thing as mr. Dalke and gotten away with it because they chose to be patient and had good opsec. Then there's the 10th person who gets themselves caught because they just can't keep their mouth shut.

[@the_local_bigamist]

Of course. It is a part of espionage. This is why they use methods such as compartmentalisation but this story was interesting in that the guy claimed to have access to things that he shouldn't have had access to. I can't understand why he would be so careless though. He was obviously desperate for the money so was this a gambling debt or something? It would explain the totally reckless behaviour and the scenario itself, in which you'd imagine that even a non-tech savvy person would surely have more sense. Randomly sending out emails trying to contact the FSB sounds like something out of a comedy film. Or like the old: "Hi, I would like to purchase some of your finest illegal drugs, if possible." How did this guy get a job at the NSA?

[@Toleich]

@@the_local_bigamist Diversity hires I guess.

[@niklas.251]

Who've**

[@electron6825]

@@Toleich Dalke is a highly educated individual. Seems unlikely.

[@Toleich]

@@electron6825 Doesn't act like it.

[@eneshiro7727]

I love how google keeps making chrome less secure lmao

[@trueetiquette]

Yes, but manifest 3 will surely solve all these problems!!!!

[@zrainyday5266]

@@trueetiquette By removing extensions that keep us from getting malicious ads :DDDDD

[@trueetiquette]

@@zrainyday5266 exactly! Thank you, Google! Without you and your decisions I'd never switch to Firefox, hahahahah

[@zrainyday5266]

@@trueetiquette Yep! Google is just so darn kind, pushing us to have to switch! They totally care about us XD

[@mryoshi1221]

switching was the best choice i've ever made

[@Katx-]

I wanted to say. "If you use youtube to setup Tor you should probably not use Tor". But i can kinda understand the demand for it in places like China.

[@allesdurchprobiert]

But even they can download it from multiple sources that are more trustworthy than a fcking youtube video link that leads to to some random URL. There's really no excuse for that level of stupidity.

[@got2kittys]

Yes, KZbin is a current and ongoing provider of data to the Government, and Adverisers/ Corporations.

[@qwormuli77]

@Strange Daze You mean ToR as a technology/concept? Because unless they have a backdoor to a specific browser or node (which they have a lot of and is a different discussion) one can't really place a backdoor on it. That's like saying the Germans must have a backdoor(?) to self isolating rocket guidance, as they made it and now nobody can launch self guiding missiles without Germany's approval.

[@qwormuli77]

@Strange Daze Bruh, what? Of course torproject could add a backdoor to a tor browser they have made. US navy _didn't_ make that tor browser, only the core idea of onion routing, thus they can't just have some magical right to a backdoor on the browser made by torproject (which is open source, BTW). That's like saying Henry Ford has a backdoor to your car and can lock up your steering whenever he wants, because he came up with the idea of assembly line production of cars (which is how your car was made). Not the people who made the electronics, the brand owner of your car or the dude who sold it to you, but Henry Ford. For my sanity, I hope you're just a stellar gift at playing the idiot.

[@Mika-ph6ku]

Cyber security gives me a headache! Seems like there is nothing you can really do in the end to eliminate the risk of your online activities or sensitive data being acquired by someone else. You can only mitigate the chances...

[@TtEL]

Simple. Just don't ever use the internet. Keep your PC disconnected.

[@solothebest1]

I think sticking to the basics is the safest option. But that window feature that lets the attacker hides the url is almost impossible to catch for an average user. Chrome is really not doing much to protect their users

[@motherfucker42069]

just don't put sensitive data into a computer

[@bbcallie9586]

Most of internet security for the everyday person is just avoiding suspicious links tbh, if you can avoid phishing links/pop ups/phone calls and avoid downloading and running malwar your good. The only thing you can do about things out of your control like data breaches is to use different strong passwords for every account you have and use 2FA when offered (idealy one that isn't text based)

[@NibsNiven]

@@TtEL If they want to monitor you, they don't need the internet. They can install key loggers on your computers when you aren't home, bug your house, etc.

[@daikansanchez7674]

I find it interesting that the functionality for chromium apps lends itself so well for phishing and malware related attacks on the public. I mean, such an easy exploit almost sounds made on purpose...

[@CrazyKevin22]

and google is busy making ad blockers obsolete instead of fixing the exploits... they're part of the problem

[@jasoncravens1124]

C:\WINDOWS was the pioneer of dodgy on purpose. No user/system partition separation, like most other systems used? No reasonable attempt at permissions? Not until XP SP3 and UAC and it was broken all of Vista. Billy boy is the OG.

[@KOZMOuvBORG]

BecauseCriminals will pay higher fees for the privilege.

[@dawnfire82]

@@jasoncravens1124 🙄

[@trayambakrai]

​@@CrazyKevin22 To be honest Google should be thrown out of the Chromium project. They are just a soulless corp trying to use their majority to fix non-existant issues.

[@the_local_bigamist]

So who is behind the dodgy Tor channel? Chinese government? Dissidents? CIA? Triad? Random hackers? It is horrible but you've gotta give them credit, it is an incredibly effective blackmail operation.

[@pokeystar101]

0 credit given

[@MegaSimmaster]

Could be any and all of them.

[@Ribulose15diphosphat]

Could also be 4Chan.

[@OctoomyYTOfficial]

@@Ribulose15diphosphat I can tell you know nothing about 4chan.

[@KuntalGhosh]

Pretty sure it's the government.

[@WtfAnupam]

I'm relatively new to this domain, currently working as a Security Analyst, spent almost 2 years in this domain and now I literally suspect every little thing. even from a shortcut to things like power/ram usage in my PC :/

[@gunnuonfire]

Ram really sucks when someone wanna suck your's?? right !!

[@nathanoher4865]

I remember 12 years ago I learned about cell phone spying. I learned about possible signs of surreptitious third-party use include lower battery life, high battery temperature when not in use, spikes in phone bill, episodes of turning on when not in use, difficulty shutting down, receipt of text messages that look like code (presumably accidentally sent to you by the perpetrator whilst destined for someone else, or meant to be sent to your phone through an invisible manner rather than text), EMI-like interference when the call application is not in use, sudden activations of voice recognition (e.g. Siri turns on by itself), and strange transmissions during phone calls. Figured you might value this information as a security analyst even if it’s just about phones.

[@BobbyGeneric145]

Thats gotta be tiring.

[@jari2018]

well whats secret anyway in this world - the only is to do old fashion way use a old computer not connected anyway to internet - just use a cd or dvd rom without any burning feature so you wont infect your burned safe cd/dvd and besidies what is there to hide unless you are a croc or high profile target

[@jannikheidemann3805]

@@BobbyGeneric145 Vigilance is the eternal price we have to pay for freedom.

[@nhansen197]

Thank you M$ for forcing me to have a program on my computer that can be used to scam me. I've lost track of how many times I've tried to get rid of Edge.

[@lcky2993]

9:02 the scroll can be fixed just by adding "overflow: hidden" in the body element, and creating a wrapper for the content that will have the scrollbar with "overflow: auto"

[@cyberguroo]

Yo where my UI gang at?

[@neoqwerty]

I think this may be one of those "filter out the too-smart guys so we don't waste our time on them" mistakes-on-purpose things. Like how shitty spelling in Nigerian Prince scams gets the vast majority of the smart people not to respond.

[@lcky2993]

@@neoqwerty it may be the case

[@essem4979]

We are talking about chromium, so I think we can just make the scrollbar's width 0px: ::-webkit-scrollbar { width: 0px; } or you can give it to an element, instead of the whole page: .your-class::-webkit-scrollbar { width: 0px; }

[@brymstoner]

i remember reading about application mode recently and instantly thinking "well that'll get exploited!"

[@MediaMunkee]

0:41 ...So, wait, the Tor website is banned in China. KZbin is also banned in China. People looking to get Tor are willing to bypass the KZbin block to look for Tor downloads, but not just go to the Tor website directly? What??

[@BlueJDev]

the only difference I spotted on the fake Microsoft login was the black footer banner was not positioned absolute bottom it has a small margin below it! very convincing

[@BlueJDev]

ok you already mentioned that after I posted, whoops

[@quitequiet5281]

Excellent use of the word “miscreant” !!!

[@closeit]

Thats why I never download things from KZbin videos

[@rosskrt]

In basically 10 yrs of watching KZbin, I’ve never heard someone literally starting a video with “Hello World!”. It’s kinda strange thinking about it.

[@x88868]

One world. It's coming.

[@Nikki_the_G]

Right? Not even on programming channels, it's funny.

[@Nikki_the_G]

@@x88868 I think you don't get the joke.

[@Mr.McDuffie]

The phishing pages part has so many subtleties that most non avid pc users will fail to see. well done.

[@ka_okai9]

Thanks for sharing this. The fact that there are so many scammers out there is pretty sad. These scammers are really miserable.

[@93MM483N50N]

It makes me really sad how good phishing scams have become. Computer savvy people might be able to see the little things and be sceptical but the internet is becoming so ubiquitous that I worry for older/less tech informed people getting tricked. It's really sad : (

[@Covarr]

"Even if you haven't bought anything from a dark web market, I can pretty much guarantee you've browsed them, if only put of curiosity." Then there's me, who doesn't even know where to find them and is terrified that even just using TOR will get me put on some kind of list

[@Mika-ph6ku]

You're not alone on not knowing how but I see no reason to be worried. As long as you aren't actually committing a crime and you have no prior reason to be on the radar of your government you should be fine to browse away!

[@neoqwerty]

You are, technically, apparently. Your IP's logged when you download it, but like. I've been using tor to go on some... dodgy clearweb sites, and I haven't gotten yelled at. (I have on the other hand been yelled at to stop torrenting copyrighted movies from bittorrent, lmao.)

[@intelchip_x86]

@@neoqwerty keep torrenting on! fuck those stupid ass licking stream "services"

[@spockbetter]

sounds like a skill issue

[@totallynoteverything1.]

@@neoqwerty so long as you buy your drugs from the CIA, they won't mind

[@aaronmicalowe]

It's not hackers threatening to inform the police - IT IS THE POLICE.

[@qwormuli77]

50/50. In many places, the police doesn't actually want to do jack towards things like this, but readily take action whenever easy and clear evidence is at hand. And nothing is as easy or lucrative for scammers as middle men as that, as long as they don't step on wrong toes. almost every corrupt place has a version of this with their checkpoints, permit wars or Schrödinger's crimes.

[@John-gi3es]

Nah

[@compsigh9275]

Good thing I downloaded the TOR distro more than a year ago.

[@John-gi3es]

@Geographer Sudoku what does a cop win by having your info? Nothing. What does a scammer win having your info? Money. He can kidnap you and sell your body, he can sell your information, he can target ads to your address etc. what can a cop do?

[@branchcovidian2001]

Aaron, you and I know the truth, that's exactly how Chinese police operate when they think they can get away with it. The deniers are either really REALLY naïve, or they are Chinese police.

[@skaviouz]

It's very easy to have the scroll bar under a fake address bar, you just set the div style with overflow: scroll and disable the default scrollbar on the window.

[@jannikheidemann3805]

Is there a plugin for Firefox that prevents websites from disabling the scrollbar? I often do that manually by nuking nodes in the websites source code, but it's tedious.

[@skaviouz]

@@jannikheidemann3805 I don't know a plugin with that exact function, but you could probably find a userscript w/ grease monkey for it. I personally like to use ScriptSafe to disable Javascript on webpages, you have to allow, trust, or enable each executed/external javascript whether by domain, address, etc.

[@crushbeast29]

Tor is a CIA/FBI honeypot. They basically own half of the websites on there.

[@atmosrepair]

Hmm wonder who created bitcoin...

[@WEFslayer]

Apparently US spying on the world is okay but if other countries do it then the sky is falling!

[@BeHappyTo]

@@atmosrepair plz read how it works before you spread misinformation

[@rdxdt]

The threat actor of the weaponized tor seems to be following orders from winnie the pooh, also the ex nsa did a lot of oopsie poopsie with his opsec

[@PushyPawn]

2:45 Yes! Thank you. I'm still angry at YT for removing the Dislikes and until they return, my YT Premium funds are being re-directed to creators, directly.

[@BigBobEdyS]

Thanks for informing about phishing in app mode. Didn’t know this could be a threat

[@bigsacrifice8064]

thank you for putting your sponsor advertisement at the very end of the video and having empathy for the human kind instead of forcing us to watch it in the beginning like a lot of asshole youtubers. for that, i will definitely be subscribing.

[@orion10x10]

Great video! I subbed :D I love keeping up with CyberSecurity news but it's kind of hard to sit down and read all of the stories, I appreciate you compiling them and presenting them in an easy to consume way

[@weshuiz1325]

"Application mode is feature of all chromium based browsers" Laughs in firefox

[@sporqist]

The only reason I still have chrome on my machine is because Firefox doesn't have app mode anymore 🙄

[@weshuiz1325]

@@sporqist i'm glad firefox doesn't has it

[@sporqist]

@@weshuiz1325 why tho? Not having a feature just because a few people got phished is sad. I love application mode because it can display websites as if they were native applications. Very handy for services that don't have native programs anymore like KZbin music, Prime Video, WhatsApp web, .. I love to have those as their own window with a launcher in my start menu or taskbar.

[@weshuiz1325]

@@sporqist i dont see any reason to ever use it, what's wrong with a web browser, only reason i could think of are illustration apps where every inch of your monitor matters

[@sporqist]

@@weshuiz1325 I use a tiling window manager to arrange my windows. It's very frustrating when there are 40 pixels of height wasted by the browsers title bar in each window thats has a website open. Also, I want to use my browser for browsing only. The stuff I need to have open all the time shouldn't waste space in my tab bar

[@liucyrus22]

Using VPN in China (without further “illegal action)could land you in police custody from a day or two to two weeks, plus getting berated constantly and having to confess about it in writing. Quite a common occurrence among Chinese netizens.

[@JuiceyBeverage]

Two days of interagation

[@soupborsh8707]

It is terrible. I think all of the people should have rights to do whatever they want with their own devices!!!

[@jannikheidemann3805]

@@soupborsh8707 They have the rights, thier government just violates them. The chinese government needs to be destroyed.

[@user-jr7vc9dp7u]

I don't understand why you want to break the law and harm people. The Chinese people have had enough lies to eat from your kind.

[@Peusterokos1]

That scares me as i have a friend in China who's means to contact with the www is thru VPNs :(

[@NeseComedy]

I have always hated embedded login pages instead of letting the regular browser handle the login

[@SkegAudio]

Another reason to use Firefox ;) But anyways, thanks Seytonic for making me aware of that phishing method. I actually didn't that and it's good to be kept up to speed on what's new in order to be safe

[@rkvkydqf]

They've used to have a simular feature, just not as well integrated.

[@SkegAudio]

@@rkvkydqf yeah further reading told me the same lol

[@jonny-mp3]

Brave >>

[@j.u.g.y]

@@jonny-mp3 still chromium.

[@jonny-mp3]

@@j.u.g.y yeh true lol

[@milano007100]

4:43 Not really, EVERY printer keeps logs what is printed where when and by who. Print a document and look at it with a microscope, you will find little yellow pixels where that info is also encoded and stored.

[@Phroggster]

Printer Machine Identification Codes or MICs provide up to 64 bytes of information. They're *not* found in black and white printers, nor most inkjet printers, but are found on most every color laser printer and color photocopier these days. The EFF analyzed a whole host of devices and disclosed that they contain the following information: printer manufacturer, model and serial number, and date & time (higher-end models only). User names/operator codes can be included in commercial-scale devices, but unless you're a commercial printer, a lawyer, a paralegal, or a spook, you're not going to see a machine *capable* of including this information during your lifetime, much less configured to do so. They don't include GPS coordinates. They aren't even that useful in most investigations. They *can* confirm if a specific printer was used for a specific printout, but little more than that. As far as printers retaining job history, yes: most printers will retain a timestamp, document title, and the specific print settings used. They also retain the document itself, to allow for effortless reprinting as storage allows. However, outside of the commercial-scale printers with their own embedded hard drives, no printer retains this data beyond the last document or two.

[@sharppig]

the NSA likely knew that someone might try to leak something, therefor they keep these logs

[@realitynowassigned]

@@Phroggster why would one not see a machine capable of doing that

[@Phroggster]

@@realitynowassigned Most places where copiers/printers/scanners get installed aren't at all concerned with origination tracking. Those that are concerned with billing and productivity tracking use external access control, authorization, and auditing (AAA) solutions that are agnostic of the printed MIC tags. The ones that *are* concerned with origination tracking use similar external AAA solutions, but typically also get custom firmware on the devices themselves that may or may not be different than say a photocopier at the library. They typically utilize server-controlled document processing and/or retention schemes, potentially with further steganographic data embedded. That's all done outside of the machines, except in cases where the device isn't allowed to connect to even an isolated network... Who knows what happens in and around those machines...

[@milano007100]

@@Phroggster thanks for typing that, I've learned a few things. I found the yellow dots on documents printed on 3 different laserprinters and then I assumed they all have that.

[@halfbakedmedia]

2:04 Thank you! Everyone treats the deep web like something from the X-Files, but you're all like "You've probably checked out the Silk Road, even if you didn't buy."

[@x88868]

I remember when the "deep web" was just the regular web. Times sure have changed for the worse.

[@CyberDevilSec]

Man you are so underated! I love this channel!!

[@stocktonjoans]

This is why we can't have nice things

[@syntaxerror831]

That NSA agent didn't read up on Brian Regan, a guy who did nearly the same thing back in the early 2000s.

[@Fattydeposit]

Snowden revelations revealed that Tor use and users is tracked and monitored by the NSA anyway. It's never been anonymous.

[@the_mariocrafter]

The fact the china government made a version to track people down and possibly get top secret info made by a high priority figure like spies and the secret service and even the president .

[@Sigmarr]

theres a lot of people saying tor was always made by the fbi, to catch criminals and "legally" sell weapons

[@overlordborn6131]

Well all of your favourite internet companies are associated with NSA, Google, Apple, Microsoft all obeys NSA command,there is no such thing as security in the internet, they know everything about you and it's been going on since 9/11. Deep state knows everything .

[@bobbinatorrah67]

Great video. SomeOrdinaryGamers showed how he inspected the fake Tor program and download, too.

[@Maple38]

Two major security tips for anyone watching: 1. NEVER DOWNLOAD ANYTHING OFF OF KZbin. 2. Add the NoScript extension to your browser and it should protect you from this new phising technique

[@neoqwerty]

Honestly Privacy Badger, Ublock Origin and NoScript are like. The trifecta of surfing in relative peace. NoScript keeps most crap out of my hair, uBlock is good for finer control even when I allow something through NoScript and it gives me UI element control (it makes Fandom wikias NAVIGATABLE, it's amazing), and Privacy Badger tells cookies that slipped through the first two to feck off when I don't want them even on sites I otherwise trust (and it actively notices when something is following me a lot and auto-blocks it, since it's made to spot stalky cookies).

[@Maple38]

@@neoqwerty Yeah lol. Personally I use all three, except noscript I've actually had disabled for a while because I don't feel like whitelisting crap on smaller sites I've never used.

[@terrortalks3037]

I'm glad not to see a comment reply saying "coUld yUo giVE a LInk to dOWnlOaD?"

[@pizzaguy_]

coUld yUo giVE a LInk to dOWnlOaD

[@terrortalks3037]

@@pizzaguy_ oh no

[@driptcg]

Thanks for reiterating the silliness of removing the dislike button. Ive literally stopped liking all videos on yt because it seems so pointless to do so now

[@soupborsh8707]

As a Frontend web developer I can say that phishing sites can be 100% accurate. And I use Firefox and GNU/Linux btw.

[@qwormuli77]

I'm not a web developer at all, but can't one just pretty much yoink most of a frontend from not-at-all guarded source code and then adjust as needed?

[@Thirst_TV]

Thanks for this video! Never knew about application mode

[@noneofyourbusiness4133]

Damn, people getting death sentences for giving over state secrets? Can’t image what would happen if you had accidentally taken boxes of the stuff after you finished your job

[@jasoncravens1124]

18 U.S.C 783 (e). Office of the Former President All former Presidents get a federally funded office, with staff. And security clearances. And Secret Service protection. And Secure facilities (SCIFs) for classified records. It's not a even a real world possibility. Total fabrication. Think about that.

[@flavortown3781]

It's almost like his job is literally the arbiter of what's secret

[@jasoncravens1124]

@@shivanandvp Do you just choose to ignore what I've said? It's not even possible for that to be true, not a former president. A former CEO can't take original documents from the company, but they are not protected from copy. They are bound by non-disclosure. Possession of them is not a crime. Share the info, you've broken your NDA, and if monetary, selling of trade secrets. All former POTUS can posses ANY document, period. So much so, they even anticipate it. (i.e. SCIFs)

[@davidb6576]

@@flavortown3781 Oh, you mean like how as a "super genius" he can declassify documents by just thinking about it? Pretty wild, considering he doesn't think much at all...

[@dawnfire82]

@@shivanandvp Classification is a function of the executive. Said executive can declassify any classified information for literally any reason, or no reason. That power is plenary, especially in relation to the military, over which he is commander-in-chief. Your analogies fail.

[@andreoka]

Now thats gotta suck, being self aware enough to realize your net is shit but then being spat on when trying to get away from it

[@DecentralisedGames]

Can you imagine working at the NSA, having a Kraken account tied to your REAL NAME, then trying to palm off secrets? Bahahahaha, gg.

[@ChronicNewb]

The new phishing technique one is weirdly timely, as I just wrote a program to always open PDFs in application mode

[@Anvilshock]

"pre-append" is not a word. "append" strictly means "attach at the trailing end". The word you're looking for is "prepend". Yes. That is a word and you should use it.

[@Seytonic]

👍

[@OddZodd]

I mean you're right lol

[@xtdycxtfuv9353]

Why is it “append” and not “postpend”?

[@OddZodd]

@@xtdycxtfuv9353 Why is it apple and not bapple?

[@Lwyte17]

@@OddZodd why is it coconut and not nutcoco?

[@diligentsun1154]

I'd forgotten how cool the word 'miscreant' is! It's back in rotation Thanks!

[@dabbopabblo]

Its like the FBI doesn't think people know what Monero is yet

[@gregoryrasputin5364]

3:24 never would have thought that my country has a WHOLE Tor website, for a secret service nontheless

[@midimusicforever]

The site as app phishing technique looks very scary.

[@Seytonic]

Can't say it wouldn't catch me out under the right circumstances...

[@midimusicforever]

@@Seytonic Exactly. It's not undetectable, but it's damn sneaky, and looks very similar to things one wouldn't be suspicious of normally.

[@blinking_dodo]

PS. Firefox also has an app mode! App mode itself isn't the problem, the problem is it's identification on the system as such...

[@shadmansudipto7287]

It should just show the URL on the top bar alongside the title.

[@blinking_dodo]

@@shadmansudipto7287 Or even better, the browser name in the title bar.

[@thsimon]

9:00 That could be changed using css (so that the scrollbar is below the fake url bar)

[@BloodRoseRecords]

or even completely removed

[@anshumanmishraw]

Amazing video, Thanks!

[@rbt-0007]

I think your content is reliable, subscribed

[@shadedskys]

As always, such great informative content, although I’d say, this one has been one of the more “tastier” vids in a while… How do you work for the NSA, get yourself into a quarter million in debt, and think to yourself “Gee, I know what I’ll do… I’ll sell some confidential government files to Russia for…. 99$” 😅

[@1God1Fury]

Small observation: oversimplified design that so many websites and apps makes job of scammers so much easier

[@error-42]

Another possible clue: extensions (e.g. 'Dark Reader') work even in app mode.

[@LilacMonarch]

dark reader mvp, foiling phishing attempts while just doing its normal job

[@pigboiii]

When he said "there is a new phising technique you need to be aware of" I was kinda thinking we were gonna be learning about some dope new way to fish. Shame...

[@elinope4745]

I remember some other thing called freenet that used to compete with TOR as a decentralized platform that couldn't be censored. Not sure if it still exists.

[@walksanator]

I2p?

[@arili-eo7vw]

Good one seytonic 👍🏽

[@mryoshi1221]

that NSA agent used to be my assigned agent

[@SlainByTheWire]

Hello JavaScript my old friend, you've come to compromise me again.

[@WolfManThoughts]

I am really shocked that chromium apps have such issue, because i was attending some tech workshop when i first heard of how to run any web application as a chromium app and i really loved that feature. I mean you can literally save yourself from the "multiple tabs" nightmare. I know folks who have 25-30 tabs open all the time.

[@DuskLegend]

Why is that bad? Redpill me on few tabs. I regularly juggle dozens

[@qwormuli77]

I have 33 tabs open right now and 4 tab folders that probably blow that count up to 50-60. And the second window on another screen that has 15. What's the issue and how chromium apps are fixing that?

[@WolfManThoughts]

@@qwormuli77 It's a feature to run any website as a dedicated desktop application. Folks find it pretty useful. Only problem as mentioned in this video is that the URL phishing can happen because it does not display the URL when viewing the website in app view,

[@mugglescakesniffer3943]

So, the good guys are using TOR and the bad guys are using TOR.

[@CrittingOut]

Tor is an anonymity network, anyone can use it. For example activists in iran are using the snowflake bridge to use tor and access the outside world.

[@cideltacommand7169]

Tor is basically a hotspot for both criminals, curious people and the government, I wouldn't suggest using it for something illegal because half of the time you will end up on a government node and get recorded

[@CrittingOut]

@@cideltacommand7169 misinformation, not how tor works.

[@cideltacommand7169]

@@CrittingOut ok

[@kuromiLayfe]

isn’t the things mentioned by kaspersky on the tor browser not just part of chrome which the newer tor browsers are build on? another kaspersky fear mongering report I would say, storing login data (aka website usernames/passwords locally instead of uploading them to google accounts) , storing browser history locally instead of have them synced to google accounts, etc

[@ChosenOne6666]

China doesnt want the SMOKE

[@RealDB]

im a simple organism: i hear someone mention "removing dislike on yt is bad" and i like the video

[@occido]

You could install an extension to see dislikes. At this moment this video has 1.7K likes and 4 dislikes

[@-Dygex]

3:09 that is a scary amount of end brackets... I don't wish to see what's above that.

[@-Dygex]

@Don't look down it's bad because he didn't make it values for the numbers between as well, if you don't have an if else for every possible number the code clearly won't work.

[@999sian]

If their using a VPN to access KZbin why don't they access Tor Official Website

[@IAMMUSIC2420]

Small brain

[@Amos_Quito]

🤔 can someone please explain?

[@MWilsonnnn]

Haha true

[@justcatsalt]

Well Tor isnt in Chinese (as far as I'm aware), so maybe searching "Tor Download" in Chinese leads to KZbin before the official site

[@DarkGladiator]

@@justcatsalt can't they scroll a bit

[@zeke7100]

this is why whenever I'm watching a youtube tutorial for something and they give me a link in their description, I ALWAYS look that thing up manually in my own search bar because it's so easy nowadays to fake things like that.

[@nulcow]

Last one is just another reason to add to why I'm a Safari/WebKit user.

[@eberger02]

50,000 in a Chinese population of 1,400,000,000 is not a lot even if you assume each watcher’s computer was used by a family of 3.

[@nmslesecnmbese917]

lol, not all chinese are smart enough to pass the wall, and even if they passed the wall they aren't certainly very smart😅

[@mattyizzie]

Mentioning the "small details"...one time i noticed my chrome on a windows os dell laptop i had switched to a fake one day, looked super bootleg and https showed as jpeg... its crazy how you dont notice the small things before they take over your system as a novice. Now i know better.

[@xpinkbunnieinwonderlandx8454]

Okay, but if they're already using a VPN to access KZbin, why not use the VPN to gain access to the official Tor site 🤔

[@cosmictelluride]

8:23 Jokes on you, I use Firefox as a search browser.

[@camelotenglishtuition6394]

Anyone saying 'use tor with a vpn' is making it pointless.

[@Amos_Quito]

Please explain, i really dont get it.

[@mistervgw8307]

@@Amos_Quito tor is the vpn in the first place. Using tor with a vpn just breaks it. How tor works is (basically) there are 3 points, the start point, the mid point and the end point. Your info goes to a start point (another tor client) then the mid point (anothertor client) then the end point (another tor client) and then the site you want to access (slk r@ad) gets connected. This is very VERY simplified. Watch a full explanation for more info

[@vesstig]

I hate the removal of the dislike button because it used to be a way to verify if content was good, Susan ruining KZbin to make sure we don’t have any fun times like 2016

[@EverybodysEnoch]

That nsa gs pay grade just ain’t cutting it. A moment of silence for the men and women out there protecting us out of a sense of duty. You’re the real heros.

[@iamverybigsad]

feels weird to read this comment as a Russian

[@EverybodysEnoch]

@@iamverybigsad why lol. there are occupations in every country with the responsibility of protecting people.

[@mega_gamer93]

Intelligence agency's don't protect anyone except the wealthy.

[@valghyna7668]

@@EverybodysEnoch I don't consider it protecting.

[@EverybodysEnoch]

@@valghyna7668 trust me. Theyre protecting people lol I have it on good authority

[@NutchapolSal]

there's a tool in chrome to make a new app mode shortcut just go to the 3 dots menu > more tools... > create shortcut... then tick the "open as window" box it will add a shortcut on your desktop to open the current page in app mode

[@goodmorningdave7304]

I like this channel

[@Seytonic]

Thanks : )

[@pablodelsegundo9502]

Unbelievable. The channel on the first segment is still up, but others get punished for the most bs of reasons.

[@totallynoteverything1.]

the NSA guy deserved it tho, should've handed the juicy secrets to Wikileaks

[@xdn22]

the death sentence shouldnt exist

[@H3wastooshort]

especially not for stuff like this

[@Make-Asylums-Great-Again]

Death should be illegal! Found dead get a felony!

[@xtdycxtfuv9353]

I’m not sure rotting in a cell is much better, honestly.

[@TennessseTimmy]

There are a few channels that have "optimize windows 10" and such and have downloads to fishy things. What's worse is they are almost always from poor countries where people have bad morals such as India and sometimes have very samey comments from bots

[@itsjustewan]

Imagine using a chromium based browser 😂😂😂

[@earthling_parth]

Just switched to Firefox from Chrome couple of days ago and I couldn't be happier!

[@Alkaris]

The thing with App Mode is that it's used for Kiosk stations where it's only opened at a specific webpage you can't navigate away from and can't be closed by the end-user.

[@jannikheidemann3805]

That's just one of the things it can be used for. If you develop abrowser you are supposed to have in mind the question: ,,What is the worst thing that what I am developing now could be used for." Google employees failed in that regard.

[@josephbrandenburg4373]

the fbi/nsa glowies getting each other is that spider man meme

[@MsHojat]

Why is app mode a problem? it would need to be run locally, where you could just use a keylogger instead. I guess it's easier to avoid detection/blocking from anti-malware by doing it this way, but that doesn't seem like a big deal. I guess it's useful for more advanced spying where it pretends to be a secure browser when really it is a MITM, but I'm not sure what kind of content a keylogger can't really catch just as well. Stuff that uses file uploading, or maybe browser history but that seems really niche and not that valuable to a hacker.

[@TheMikernet]

It's not a problem. It requires the user clicking a malicious shortcut...at which point the shortcut can run arbitrary code like downloading and running whatever program it wants.

[@ranjanbiswas3233]

My advice will be "If you are not sure about or feel sketchy about signing up any account anywhere, use Fake email generators. Stay safe."

[@yeahaddigirl]

Just do 'blah' Just moving the problem Css can take any shape, including dev tools(they're probably written in css in the first place)

[@Eric.-.]

They can't display anything above the actual dev tools though, can they?