roxil's comments

roxil | 2 years ago | on: Every phone should be able to run personal websites

I see at least one very good reason why this shoud be possible: old phones. Reusing old phones as a webserver seems like a good idea to me, since they were built for power efficiency (unlike old PCs) and would otherwise simply end up as e-waste in a landfill or discarded, forgotten in a drawer somewhere.

Maybe it's because I use LineageOS (and Cyanogen mod before that), but I never even knew that there were problems with being able to run a web server on android. Just recently, while I was bored on a train ride, I used the Fdroid app Lightweight Web Server (LWS) to send some files to a friend on iPhone for which I would otherwise have no easier way of doing (whatsapp upload is slower and filesize is limited). I move the files into the folder, prepare the HTML file a bit, then my friend sets up a wifi hotspot, I connect and tell my friend to enter the IP-Address or scan a QR code. Works nicely for me (although weirdly it doesn't work if I create the hotspot. I need to connect to theirs, I wonder why)

Even if this is something I only use rarely, using a phone that can't do something this simple is unacceptable to me. It's satisfying in itself that I don't want my phone manufacturer to arbitrarily limit what the hardware can and cannot do. Would I suggest running a business website off my phone? No. I doubt it's secure, performance is limited, ddos would be a possible issue. Do I still want to be able to do silly things with the devices I purchase? Absolutely.

Another point, if I remember correctly, a cellphone mesh network of some kind was useful for Hong Kong protestors at one point at least.

roxil | 6 years ago | on: Detroit's salt mine: City beneath the city

I tried submitting the link to Outline and it didn't work on Chrome or Edge from EU... the site might be having an issue of some kind or it's just this particular link. Recently I tried it for something else and it only worked on Edge, strangely enough. It's annoying that it doesn't "just work", like it did before.

roxil | 6 years ago | on: Audio Fingerprinting using the AudioContext API

I did some further research and I'm stumped, but I thought I'd share my findings. It looks like your question doesn't have an easy answer and requires more research.

I couldn't find much new information on Ultrasound Cross-Device Tracking (uXDT). This could be good, meaning that it's not being widely used, or it could be bad and mean that simply not much is publicly known about the extent to which it is used. (or my google-fu is weak)

To clarify my post form earlier. The "list" only has the SDKs used for uXDT, not the apps that make use of them.

This is the list of SDKs possibly used for uXDT: acrcloud, actv8, alphonso, axwave, beatgridmedia, bitsound (soundlly), chirp, cifrasoft, copsonic, cueaudio, digimarc, dv (dov-e), fidzup, fluzo, gracenote, hotstar(zapr), hound, inscape, instreamatic (VIA), lisnr, moodmedia, mufin , prontoly (now sonarax), redbricklane(zapr), shopkick, signal360, silverpush, sonarax, soniccode, sonicnotify (now Signal360), soundpays, tonetag, trillbit, zapr

I got it from PilferShush's project page which is an experimental F-droid app researching uXDT. It's worth a look, but a bit messy:

https://www.cityfreqs.com.au/pilfer.php

https://f-droid.org/en/packages/cityfreqs.com.pilfershushjam...

---

Wikipedia says there are 234 android apps that use ultrasound audio tracking.

https://en.wikipedia.org/wiki/Cross-device_tracking#Applicat...

If you google around, you will find this number repeated in a lot of articles. It's an old number from a research paper from 2017:

http://christian.wressnegger.info/content/projects/sidechann...

Here's good summary of the research: https://www.bleepingcomputer.com/news/security/234-android-a...

Only a few specific apps were mentioned in the research paper. It probably only scratches the tip of the ice berg. The researchers looked for SilverPush in an 8 TB dataset of 1,320,822 apps submitted to VirusTotal.

---

These were the only apps that were mentioned:

(Apps with 1,000,000 – 5,000,000 downloads)

100000+ SMS Messages, developed by Moziberg

Pinoy Henyo, developed by Jayson Tamayo

(100,000 – 500,000 downloads)

McDo Philippines, developed by Golden Arches Dev. Corp.

Krispy Kreme Philippines, developed by Mobext

(50,000 – 100,000)

Civil Service Reviewer Free, developed by Jayson Tamayo

---

Here's a List of Apps from 2015 (Mostly from India and Phillipines) that use SilverPush: https://public.addonsdetector.com/silverpush-android-apps/

And here a list from 2016 with Apps containing Signal360: https://public.addonsdetector.com/signal360-android-apps/

It looks like you can use this Addon Detector to find at least a couple of the uXDT apps: http://public.addonsdetector.com/

The Addon Detector only seems to be able to find three uXDT app SDKs from the whole bunch mentioned by PilferShush: lisnr, signal360 and silverpush

---

SoniControl is also an interesting project worth looking at. It's goal is to detect acoustic tracking information. https://github.com/fhstp/SoniControl

Audio Tracker Demo - It's a link on PilferShush's project page: https://kaputnikgo.github.io/acr.html

roxil | 6 years ago | on: Audio Fingerprinting using the AudioContext API

Here is an incomplete list:

https://www.cityfreqs.com.au/pilfer.php

PilferShush is an experimental F-droid app that is supposed to prevent this kind of tracking by blocking your phone's microphone and jamming the Audio frequencies used for tracking. F-droid page:

https://f-droid.org/en/packages/cityfreqs.com.pilfershushjam...

Edit: Wikipedia says there are 234 android apps that use ultrasound audio tracking, but the article it references is from 2017 and behind a paywall...

https://en.wikipedia.org/wiki/Cross-device_tracking#Applicat...

roxil | 7 years ago | on: So Long, MSDN Blog

The bookmarks to dead links are still useful to have any chance of finding the content on the Internet Archive.

roxil | 7 years ago | on: The phone-makers bringing back buttons

This annoyed me too, until recently. I found the solution to this on my phone. It's a moto G with a physical volume button on the side. It has Lineage OS on it and I found this: settings -> buttons -> Volume buttons -> Keyboard cursor control (Volume up/down moves cursor left/right). I can now easily control moving the cursor one char left/right and am slightly more comfortable typing on my phone.
page 2