My sponsorship #95
Voidless7125
started this conversation in
General
Replies: 1 comment
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hey yall,
You have probably noticed that I have been around to answer questions, help with recent changes, and patch this.
I started working on this to get it working because my high school uses Lockdown browser. I am in the US, so we get these (miserable) Chromebooks to do our work. I can't stand using Chromebooks. I started bringing my laptop instead (Which is allowed in the school's policy, but my teachers had a fit initially.)
Of course, I didn't want to install Lockdown on my laptop, and I had privacy concerns, which is why this was made.
By its nature, I wasn't comfortable using it, and some of its "secure" methods were too far.
So I wanted to isolate it. I tried making an undetectable VM but didn't have enough time to set it up for my test that day. So I caved in and installed it on my main in the meantime. (This was a huge mistake)
Then, that night, I started getting emails about critical log-on attempts. The only reason I saw it was my mom gets copies of my alerts. (I don't own a phone) and she woke me up at 2:15 am so that I could investigate. I did get my account back under control, but I was (understandably) extremely concerned and scared. I was in the process of resetting all my passwords and checking our router. After I went back to bed (at ~4:00 am) and slept for a bit, I came up with an Idea. I had just installed Lockdown Browser, and now, after 5 years, I get compromised on the same day? Too much of a coincidence.
So, I uninstalled Lockdown and looked into isolating it. I found this repo, and I was so happy. After patching it, I wanted to keep it alive, so I sponsored it. I understand that @gucci-on-fleek can't test this anymore, but I can.
Along with what happened, I had a time (way before using my laptop) when I thought a teacher had changed my test answers. (She changed my answers, but I didn't know.) There was one question in a class (I won't disclose which), but it was a multiple-choice question in the test. There were typical trick answers, but I knew which one was correct. (And remembered how dumb the other answers were)
When I got my test back, I got ~70%. I was so mad that I had done this poorly (I don't remember having a worse test grade ever.)
I asked my teacher if I could see my answers, and she said no. I was very confused, and she insisted, "You could tell the other kids the answers). I explained to her that all I wanted to do was see what I got wrong. She didn't budge. I told my parents, who forced the teacher to show the test. When I looked at some of the questions, I realized I would never have chosen some of these answers. The question I remembered was how bad the answers were. I picked one of the silly answers. I knew I didn't do this, but I couldn't prove it thanks to Lockdown Browser.
So now I can record my tests for my own confidence that I chose the correct answers. I am working on a decompile to see if (and how) the lockdown browser caused the sign-in "hacking."
Beta Was this translation helpful? Give feedback.
All reactions