DrWhax DrWhax

I'm writing this on Github as it will give the reader wanting to get in contact some level of plausible deniability as opposed to visiting my website.

While both websites are encrypted, visiting a more generic website gives you more plausible deniability. Any institution that can wiretap or has metadata retention will only see you connecting to https://gist.github.com/ and not which page youre visiting.

Who am I

I'm a technologist at Amnesty's Security Lab.

Formerly, I was a senior security analyst at OCCRP.

####Disabling SPI write protection

Put the Chromebook in developer-mode:

With machine powered off, hold down Esc and Refresh(F3) while hitting power button
At warning prompt, hit Control+D, then Enter at prompt about enabling developer mode
Machine will format itself

Now remove the write-protect screw to enable flashrom to flash new Coreboot/Libreboot.

Flip powered-off machine over and remove 8 philips-head screws. 2 are located under rubber feet.

	### Keybase proof

	I hereby claim:

	* I am drwhax on github.
	* I am jurre_ai (https://keybase.io/jurre_ai) on keybase.
	* I have a public key ASDJHCaIed1Yj8HNqxRYNZGQuGsAfyzO_l52_wUB9UE9xAo

	To claim this, I am signing this object:

	#!/bin/bash
	# This is a hack I wrote to overwrite $1 with the 4th Amendment.
	# It's not pretty, it's not fast, but it works.
	# If $1 is a device, when it's full, errors will be thrown and not handled.
	# If $1 is not a device, the block device that it resides on will eventually
	# fill up, if this script is left running.

	# The next line will cause the script to exit on any errors, like
	# when the device is full. Hey, I said it was a hack.
	set -e