What should we do about this?

[catfoolyou]

It appears that the guy who made the EaglerX 1.19 server is now bent on screwing us over
https://github.com/CaenJones/ChromeSEC
How bypassable are the things that he talks about in that repo?

My conversation with him:
https://github.com/CaenJones/ChromeSEC/issues/1

[HelloIloveGimkit2]

just mass report the repo

[catfoolyou]

Can't do that.

[HelloIloveGimkit2]

idk just try and blackmail him by saying smth like:

"We will report your game to people that way people don't play it" smth along those lines.

[catfoolyou]

That's just dumb

[s0urce-c0de]

Stealing buisness from chrome os support

[catfoolyou]

Real

[s0urce-c0de]

how can we report him though?

[Egduffuu]

what is he doing exactly?

[vcc3v]

Give me a shoutout in EXT-Remover frfr

[s0urce-c0de]

i could say the same for all the other exploits. so why are you making patches for those? it is our right to goguardian not knowing my physical location (i wonder why...), my SYSTEM INFORMATION, my identity, alarms, EVERY PAGE I VISIT, etc.

Your first mistake is expecting privacy on your school-issued device. Yes, it is pretty creepy why it would need all those permissions, but remember this is not your device. You do not own it. You are simply renting it from your school district for the school year. Bring your own device. I have been doing that, and it works. If your school does not allow you to BOYD, then whomp whomp, but expecting to have complete privacy on a device you do not own is absurd.

no need for all the pings, you misspelled BYOD, yes I expect privacy of goguardian not selling my geolocation, and i am already following all threads i comment on, no need to ping me.

[S-PScripts]

i know delete this repo and make a new one sex

@S-PScripts do you want to join the discussion on discord?

where?

[S-PScripts]

i could say the same for all the other exploits. so why are you making patches for those? it is our right to goguardian not knowing my physical location (i wonder why...), my SYSTEM INFORMATION, my identity, alarms, EVERY PAGE I VISIT, etc.

Your first mistake is expecting privacy on your school-issued device. Yes, it is pretty creepy why it would need all those permissions, but remember this is not your device. You do not own it. You are simply renting it from your school district for the school year. Bring your own device. I have been doing that, and it works. If your school does not allow you to BOYD, then whomp whomp, but expecting to have complete privacy on a device you do not own is absurd.

no need for all the pings, you misspelled BYOD, yes I expect privacy of goguardian not selling my geolocation, and i am already following all threads i comment on, no need to ping me.

you misspelled boyd 🤓 ☝️

[s0urce-c0de]

:|

[nathblade16]

i could say the same for all the other exploits. so why are you making patches for those? it is our right to goguardian not knowing my physical location (i wonder why...), my SYSTEM INFORMATION, my identity, alarms, EVERY PAGE I VISIT, etc. @s0urce-c0de

Your first mistake is expecting privacy on your school-issued device. Yes, it is pretty creepy why it would need all those permissions, but remember this is not your device. You do not own it. You are simply renting it from your school district for the school year. Bring your own device. I have been doing that, and it works. If your school does not allow you to BOYD, then whomp whomp, but expecting to have complete privacy on a device you do not own is absurd.

they don't even give us privacy on byod devices

[3kh0]

I saw this coming: some kid is using ChatGPT to find ways to help sysadmins.

For most exploits, the publisher commonly makes a write up about how the exploit works (see LTMEAT, sh1mmer, and more), making the sysadmin's job easier than ever. It takes a very minimal technical understanding to read through these.

This has already been done too, sysadmins commonly do talk to other sysadmins and share what works and what does not (see https://www.reddit.com/r/k12sysadmin/comments/52eu3r/chromebook_policy_checklist/) and you can jsut browse the r/k12sysadmin subreddit to see more posts of people offering guidance on the latest exploits

You are wild for thinking that all sysadmins are stupid and do not know how to work their systems. This might be true for some cases, but not for most school districts. Instead of helping them, you are just talking down to them like they are children. No one is going to actually use your guide for what you think they will; they will just see it as disrespect.

Please learn how to properly talk to adults.

(pinging just so you get the notification)
@catfoolyou @CaenJones

[vcc3v]

Hi @3kh0! It's nice to hear from you! I did not think you would respond.

1. To be perfectly honest, I had tried asking Google admin/policy questions to ChatGPT while researching for chromeSEC. In the end, I always got terrible responses and no real answers. I wish I were able to use it though! It would have made the writing time much shorter.

2. I do not doubt in my mind that admins (especially at schools) know what they are doing, and understand Google Admin. The issue is, most important group policies are left off by default, and Google's own documentation is normally so obscure it rarely delivers detailed instructions on what something is / how to fix it. (why 3 policy lists? 😢) While writing/researching stuff for chromeSEC, I often had to go to the far ends of the internet to find a random post talking about how to implement something. As someone who has been around and worked with school sysadmins (multi-district now!), they do not have the time/energy to go about hunting for ways to harden their Chromebooks. They deserve better than for-profit Google support and dead-end searches. Hence the creation of an all-inclusive guide.

3. Again, while I'm sure some people do look at writeups on Discord and Github it's not the majority. Admins have better things to do than go poking around their Chrome policy when they could be responding to tickets or helping students. You are generously overestimating their pool of free time and attention they give you.

Have a good day!

[funkymokey]

never give up nanana

[S-PScripts]

e