Darren Hoo darren

2023 update

ℹ️ Please note this research is from 2016 when Opera has first added their browser "VPN", even before the "Chinese deal" was closed. They have since introduced some real VPN apps but this below is not about them.

🕵️ Some folks also like to use this article to show a proof that the Opera browser is a spyware or that Opera sells all your data to 3rd parties or something like that. This article here doesn't say anything like that.

When setting up (that's immediately when user enables it in settings) Opera VPN sends few API requests to https://api.surfeasy.com to obtain credentials and proxy IPs, see below, also see The Oprah Proxy.

The browser then talks to a proxy de0.opera-proxy.net (when VPN location is set to Germany), it's IP address can only be resolved from within Opera when VPN is on, it's 185.108.219.42 (or similar, see below). It's an HTTP/S proxy which requires auth.

Timeline

2016-10-02 German research reveals severe privacy violations in https://www.kuketz-blog.de/wot-addon-wie-ein-browser-addon-seine-nutzer-ausspaeht/
2016-10-02 Audit of WOT by Rob Wu
2016-10-02 Discovered arbitrary remote code execution capabilities in add-on
2016-10-03 WOT listing removed from addons.mozilla.org

Subject

Add-on: Web of Trust, MyWOT/WOT: Website Reputation Rating

Uninstall brew package and dependencies

Remove package's dependencies (does not remove package):

brew deps [FORMULA] | xargs brew remove --ignore-dependencies

Remove package:

Create a Wi-Fi hotspot on Linux using `nmcli`

Original post : https://unix.stackexchange.com/a/310699

nmcli con add type wifi ifname wlan0 con-name Hostspot autoconnect yes ssid Hostspot
nmcli con modify Hostspot 802-11-wireless.mode ap 802-11-wireless.band bg ipv4.method shared
nmcli con modify Hostspot wifi-sec.key-mgmt wpa-psk
nmcli con modify Hostspot wifi-sec.psk "veryveryhardpassword1234"

First of all, please note that token expiration and revoking are two different things.

Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.

1. How to hadle JWT expiration

A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.

Quoted from JWT RFC:

1:设置

sudo vi /etc/sysctl.conf
net.ipv4.ip_forward=1
sudo sysctl -p

2:安装

https://www.wireguard.com/install/

	I was getting the following error in the spark-shell when trying to load lzo files (CDH 5.4)

	ERROR GPLNativeCodeLoader: Could not load native gpl library
	java.lang.UnsatisfiedLinkError: no gplcompression in java.library.path

	The fix invovles making spark-shell aware of this dependency by either of the follwoing
	1. export LD_LIBRARY_PATH=/opt/cloudera/parcels/GPLEXTRAS/lib/hadoop/lib/native/

	2. add saftey value in spark configuration in cloudera manager
	Spark (Standalone) Service Advanced Configuration Snippet (Safety Valve) for spark-conf/spark-env.sh

	// You may want to first disable transparent huge pages:
	//
	// echo never \| sudo tee /sys/kernel/mm/transparent_hugepage/enabled

	package main

	import (
	"flag"
	"fmt"
	"io/ioutil"

	httpsServer := &http.Server{
	Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
	hj, isHJ := w.(http.Hijacker)
	if r.Header.Get("Upgrade") == "websocket" && isHJ {
	c, br, err := hj.Hijack()
	if err != nil {
	log.Printf("websocket websocket hijack: %v", err)
	http.Error(w, err.Error(), 500)
	return
	}

	# single subtitle with MP4(for MOV : change mov_text to srt)
	$ ffmpeg -i VIDEO.mp4 -i SUBTITLE.srt -c:v copy -c:a copy -c:s mov_text OUTPUT.mp4
	$ ffmpeg -i VIDEO.mov -i SUBTITLE.srt -c:v copy -c:a copy -c:s srt OUTPUT.mov

	# multiple subtitles with MP4(for MOV : change mov_text to srt)
	$ ffmpeg -i VIDEO.mp4 -i KOREAN.srt -i ENGLISH.srt \
	-c:v copy -c:a copy -c:s mov_text \
	-map 0:v -map 0:a -map 1 -map 2 \
	-metadata:s:s:0 language=kor -metadata:s:s:1 language=eng \
	OUTPUT.mp4