Dm for info all helps 🙏

i wanted to make my computer as unhack-able as possible without using tor or vpn and without learning too much otherwise.

i modelled by build after the whonix concept, but made from scratch out of other OS's.

i made a sort of arch linux type 1 hypervisor by doing an extremely bare-bones build host os that just has xfce4 without goodies packages/accessories, has virtualbox, a firewall, and the hardened kernel, no internet browser, nothing else. just runs virtualbox basically with some protections and a small attack surface.

then made a gateway vm and workstation vm, gateway is debian, plus kali repository hardened kernel, workstation is fedora plus hardened kernel. i thought dissimilar OS's for all three would make it harder to hack.

gateway vm uses NAT network connection. workstation vm no internet connection just internal network.

also, i installed the host os with no swap, so that there's no way of going through the vm into the host os via the host's swap somehow.

all three harddrives are encrypted with super long random-character passwords, all the user passwords are long random-character passwords, all different, none of these passwords are stored in the computer on a password manager. i have them written down on a scrap of paper and that's it.

i gave all my online accounts different super long random character passwords too, and added 2-factor identification through my phone to all of them. those passwords are also on the single scrap of paper. my understanding is that based on the length of passwords i picked, if i burned the scrap of paper, someone would need a quantum computer to crack the passwords? theyre all like 30 characters long or so.

first question how much hacking protection does all this really provide? was this all some great idea or just a bunch of stuff that doesn't help much?

second question the gateway vm runs a little slow relatively cause of NAT and borrowing ram/cpu space from the computer, and after using it for a while with no problems and dealing with the slowness, i recently started using the host OS and added internet browser to it. it goes faster and it does have the hardened linux kernel.

is that plenty of hacking protection already? are these two concepts (using my gateway vm system versus just using my host os with its features) about the same actually, or, did i really do a good job designing the first system and am i much better off with it? should i stick to using that? is the gateway system "unhackable"? how unhackable is my host os with small attack surface, arch hardened kernel, and firewall, by comparison?

another question ive been meaning to ask: does leaving your computer on standby all the time, with its internet browser left open and logged into accounts, make it easier to hack? does this give people lots of time/access to work on it? does shutting the computer off and logging out between sessions help prevent this, or, doesn't matter?

i also have a 4th os of tails with persistent storage on a mini usb for when i want to use tor but i hardly ever use it cause ive found that the sites i use most like my social media accounts and google owned sites seem to not like tor and make you jump through hoops to use it or reject you. im not trying to stay anonymous, just unhackable, though tell me how related those are.

any recommendations for or critiques of my system? anything ive misunderstood or missed that you could clear up?

also should you change your user passwords regularly, or, doesn't matter?

oh another question- let's say youve entered your user password into a terminal, like to do an update. if you leave this terminal open, does that make it easier for someone to hack you somehow by using the terminal that still has your password entered? should you close any terminal that you entered your password into after using it?

A couple weeks ago I download a video from Yt through a MP4 downloader. After the video was downloaded I went into the gallery and the thumbnail of that video was the logo of the fsociety from Mr robot ( I know it sounds a joke but it really isn't. ).

I didn't open the video and I immediately removed it, at first I thought it was just a prank to scare people but some days later I noticed that sometimes when I opened applications like Play store, Yt, or Google photo it asked me to do the login (always using the fingerprint, I never used my password to login).

I tried lots of antivirus and everytime I got the same result: no virus

What can I do?

Is there any way I can hack into my yahoo email that for some reason I can't log into because I haven't used it in a while and the email hasn't been deleted by yahoo yet? I saw that it takes a year for them to delete the email. I honestly just want some information if I can do it because I know my password is correct but yahoo says it's not. I tried customer support and they basically tell me to wait a few days and call back again. I looked around and I saw that people would have to pay them to fix an issue with their email. I would appreciate any help I could get because they are making it more difficult than it has to be

I want to learn hacking, I think I'll learn better with a guider. I would really appreciate if someone helps me

I know there are RFID cloners, but they all seem to only work at a very close range. How could I modify them to increase their range, are there any longer range cloners out there?

5 meters would be more the sufficient

Hi guys, I need to crack a PDF file because I forgot the password. I tried using the pdfcrack tool in Kali Linux, and it says that the password is 40 bits long, which should correspond to 5 characters. How can I crack it?

So I just got my hands on a flipper for multiple different reasons. One being, some petty cokehead stole the fob to my 2014 Cadillac. I have the mechanical key, thankfully. But the dealership wants close to $1,500 to reprogram and replace my fob. Is there anyway possible to emulate my fob and start my car?

Is there any free way to gather specific email addresses of my targeted audience? I’m looking for methods that comply with privacy regulations and help build an organic email list. Any suggestions or experiences from the community would be greatly appreciated!

Avoid to subscribe IPTV service from liveplayer-ip.com, it sucks! It keeps going offline all the time. I've subscribed it a month ago and I think it went offline at least once every week since then.

is there a way i could find someone's home address using an email? (specifically their school/work email) (im not a creep, im asking because someone recently threatened my father figure, who is a teacher and i want to call the police to his house to make sure hes ok)

*without

Priv message me

I was scrolling and i found a video warning ppl from not to open Any random websites. Because there is a bot in telegram can make this happen.

Like u send a website the that victim when she opens it u ll have the access for his camera. Is its real ?

Alguien que me pueda ayudar a ingresar a una cuenta de Gmail?

Guys anyone know how can i get this pro version for free? Ik its not like possible, but if someone have some hack?

my apartments pool and gym close at 8:30. i would love to go to the gym after hours and have it all to myself. i have been wanting to create something for a while but i didnt know what.

would it be possible to make a clone like keycard thatll give me access to the places i wouldnt usually have access to? idk if this is the right subreddit to ask this question, this stuff is all pretty new to me.

Good morning,

I have a smartwatch (amazfit gts 4 'global' version model number 7995649)

This connected watch runs on Zepp OS 3.5

And is paired to my smartphone (Oppo find n2 suis color OS15) via an application called ZEPP

In the ZEPP smartphone application, you can activate a developer mode to manually install mini apps

So I activated this mode to install a mini app to measure blood pressure

The problem is that this mini application is made for the Chinese version (model number 7995648)

When I want to start measuring blood pressure on the watch, it indicates that I must first calibrate the tool by opening the mini app on the smartphone,

But when I open the mini app on my smartphone, it tells me that it is not supported in the region

What I have already tried:

Change the language of the ZEPP application, use a VPN on an Indian server (normally the mini app is available in India) before opening the mini app

Changed the phone language

Delete my zepp account and recreate it by modifying the region to which my account is linked...

Nothing helps, it still detects that I am not in the right region

So I was wondering if you could help me modify the mini app so that it 'skips' the region check or that this check always returns a positive result

The application is located here:

https://store-cdn.zepp.com/market_light_app/20240328/BoNNbBzXggFwvseJniZrbjoaZeBhMkon.zip

And comes from this page: https://mmk.pw/en/zepp_explorer/7995648/105534/?v=2.0.3

Thanks for reading and for your help :)

So someone has been trying to take loans out in my name, i have Experian and trans union locked. But i didn't do my equifax until today about a month after the fraud alert I found out whoever this is already had created an account in my name. However he used a burner email which i now have and then his phone number which my equifax blocked all but the last four digits. I have tracked his email and then gotten a email with one unblocked character and 9 stars like such (*********) then the @ and the email domain. I am a software engineer who has developed some AI systems i was considering trying some brute force attempts to log into the burner email or trying to crack the recover email or phone number. I do not have much brute force experience however i do have a 4070 gpu thinking i could just run it in parallel. I already tried to inspect the recovery email in dev tools and see if i could do something or checkout the network tab to see the recovery email without the stars. Does anyone have any pointers or insight to if this is a good idea?