Andrew Gunnerson chenxiaolong

As a result of examining 10 each of Monoscopic and Stereoscopic videos of 360 videos, most of them (about 80%) became the format distribution shown in the table.

Resolution	AV1 HFR High	AV1 HFR	AV1	VP9.2 HDR HFR	VP9 HFR	VP9	H.264 HFR	H.264
	MP4	MP4	MP4	WebM	WebM	WebM	MP4	MP4
4320p		402/571 ---/EQU			272 ---			~~138~~ ---
2160p	701 ---	401 EQU		337 ---	315 EAC	(313) EAC	(305) ---	(266) ---
1440p	700 ---	400 EQU		336 ---	308 EAC	(271) EAC	(304) ---	(264) ---
1080p	699 ---	399 EQU		335 ---	303 EAC	(248) EAC	299 EAC	(137) EAC(*EQU)
720p	698---	398EQU		334---	302EAC	247EAC(*EQU)	298EAC	136EAC

In Adobe Flash Player versions newer than 32.0.0.344 they added a "Timebomb" for the EOL. the player would refuse to run any custom flash content after 12/01/2021, instead it would just show this

So knowing this, Lets crack it!

I acturally started looking into this before the 12/01/2021 hit, but only recently did i acturally discover a way to bypass the killswitch

(also- im aware i was not the first to do this, but i still did do it)

All control characteristics are under Service 00001523-1212-EFDE-1523-785FEABCD124

Characteristics

Mode = 00001524-1212-EFDE-1523-785FEABCD124 (READ, WRITE, NOTIFY)

Identify = 00008421-1212-EFDE-1523-785FEABCD124 (WRITE)

Power State = 00001525-1212-EFDE-1523-785FEABCD124 (WRITE, newer firmware also had READ and NOTIFY)

Zoom Sucks

Zoom abuses the installer flow on MacOS to bypass permissions dialogs (source)
Zoom sends identifying device info to Facebook, even when users don't have a Facebook account (source) (fixed)
A bug in Zoom sent identifying information (including email addresses and profile pictures) of thousands of users to strangers (source)
Zoom claims that meetings are end-to-end encrypted in their white paper and marketing materials, but meetings are only encrypted in transit, and are available in plaintext to Zoom servers and employees. (source)
zoomAutenticationTool can be used to escalat

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Past August 2024, Authy stopped supported the desktop version of their apps:
See Authy is shutting down its desktop app | The 2FA app Authy will only be available on Android and iOS starting in August for details.

And indeed, after a while, Authy changed something in their backend which now prevents the old desktop app from logging in. If you are already logged in, then you are in luck, and you can follow the instructions below to export your tokens.

If you are not logged in anymore, but can find a backup of the necessary files, then restore those files, and re-install Authy 2.2.3 following the instructions below, and it should work as expected.

	# MINIMAL USB gadget setup using CONFIGFS for simulating Razer Gaming HID
	# devices for triggering the vulnerable Windows Driver installer
	# credits for the Windows Driver install vuln: @j0nh4t
	#
	# https://twitter.com/j0nh4t/status/1429049506021138437
	# https://twitter.com/an0n_r0/status/1429263450748895236
	#

	# the script was developed & tested on Android LineageOS 18.1

	Param(
	[Parameter(Mandatory, Position = 0)]
	[string]$HostDrive,
	[Parameter(Mandatory, Position = 1)]
	[string]$LocalDrive
	)

	# Script to map a host drive inside a Windows Docker Server Container
	# You need to be an admin in the container for this to work.
	# Use as .\map_host_drive C: X:

	import jeb.api.IScript;
	import jeb.api.JebInstance;
	import jeb.api.ast.*;
	import jeb.api.ast.Class;
	import jeb.api.dex.Dex;
	import jeb.api.dex.DexCodeItem;
	import jeb.api.dex.DexFieldData;
	import jeb.api.dex.DexMethod;
	import jeb.api.ui.JavaView;
	import jeb.api.ui.View;

	// ==========================================================
	// Sony Xperia SIN (Firmware flashable files) analysis
	//
	// Author: zxz0O0
	// Started: 2014-06-05
	// Notes: Numbers are big endian
	// Credits: Androxyde
	// ==========================================================

	struct SinFile

Andrew Gunnerson chenxiaolong

Characteristics

Zoom Sucks

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Contents