HNHacker News
TopNewBestAskShowJobs

alufers

1,317 karma · joined June 9, 2018

submissionscomments
alufers··on Car thieves using tech disguised inside old Nokia phones and Bluetooth speakers
A car lamp will usually have a few different bulbs/LEDs (daylight running lights, headlights, high beam, indicators also the height adjustment motor), so it's less wiring to run a CAN pair and constant +12V to the fixture, than to wire each light type individually.

I think the light can also report a failed lightbulb to the dashboard.

alufers··on Show HN: Commit-o-matic – Write Git commit messages from diffs using ChatGPT
Hi!

Wanted to share this little stupid extension I have created.

Mainly saves me time and motivation for my open source project, because I have enough wrangling with Git at work :)

alufers··on German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
I don't think that creating a web based word processor, cloud storage and an email hosting service is something that is impossible for a whole continent to do. Especially considering that o365 isn't exactly the gold standard when it comes to software quality.
alufers··on German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
Or it will force the European market to innovate instead of directly sending cash to US Megacorps.
alufers··on How Wine works 101
Just to let you know: The pirated version works just fine with PlayOnLinux.

PS. I downloaded the cracked copy, and deleted it before 24 hours, which makes it legal where I live (Poland). Also I own a physical copy of that game, but I couldn't be bothered to get Origin to run.

alufers··on Using the same Arch Linux installation for a decade
May I ask: What prompted you to change the file systems? I recently reluctantly switched over to btrfs and I see no meaningful difference between ext4, so I am curious.
alufers··on Implementing a Zero Trust Architecture
Well you have insurances for ransomware, and it leads to the bad guys specifically targeting companies with such insurance, because they are more likely to pay the ransom.
alufers··on I Hacked My Car Guides: Creating Custom Firmware
A 2021 Sandero
alufers··on I Hacked My Car Guides: Creating Custom Firmware
My Dacia makes it easy for me :). If you reboot the infotainment system with a USB drive formatted with FAT it will run any commands in the `autorun_bavn/autorun.sh` file with root permissions.

Some people are unlocking more maps in the navigation system by patching files which tell the infotainment application what options you purhased.

alufers··on Repurposing an old Android phone as a web server
You literally can connect 5V instead of the battery (and a capacitor for some more stability) and the phone will gladly take that and power on.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Hey! Just writing to let you know that I've added HAR input support to mitmproxy2swagger.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Hey! Just writing to let you know that I've added HAR input support to mitmproxy2swagger.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Hey! Just writing to let you know that I've added HAR input support to mitmproxy2swagger.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
The problem with pcap is that whe requests there would be encrypted and basically there is no way to practically decrypt them.

Mitmproxy solves that by being between the client and server and injecting it's own self-signed certificate (which you need to add to the trusted certificates on the phone, which requires root).

alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
I didn't, just added a self-signed cert to my keychain on macOS and launched the app as downloaded from App Store.

I guess Airbnb doesn't use cert pinning.

alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Doesn't wsdl just expose the schema on the server?
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
I thought about it, but it would be hard to distinguish between an enumerator and just static data. For example if you logged in with only one account it could classify the "username" field as an enumeration, because there is only one captured value.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Totally, but you would need to do some manual cleanup and naming afterwards to make it more useful than just reading the source code. You could also for example use your integration tests if you have some to capture as much routes as possible.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Yes, this is basically what this program does.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
At this point yes, but I am working on adding this.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
It does, but it will only generate schema descriptions for JSON endpoints. Whis means that the URL and method will appear in the spec, but not the response/request schema.
alufers··on Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
Wanted to show off my little project which helps whith reverse engneering APIs used by various apps. It takes HTTP traffic capturewd by mitmproxy and generates an OpenAPI specification for a given REST API.

I have used it already on two apps and the results are good enough to write an alternative client or quickly automate some stuff.

alufers··on Solid-state cells will cut EV charging time and increase volumetric density
I think the biggest advantage would be that you wouldn't show up so much on thermovison cameras, since ICEs create so much excess heat.
alufers··on Show HN: I built a Wi-Fi 6 survey kit to see how common it was in my area
I have two Totolink X5000R and they work great with OpenWRT, using iperf3 I can get about 500Mbps of real throughput to my Samsung Galaxy S20 Plus 5G. I bought them mainly with the intent of using them with the Oculus Quest for AirLink and WiFi performance is never a problem for me.

Two weird caveats I had to overcome: 1. I had to compile OpenWRT from master myself so that I could configure the WiFi 6 interface using Luci (the web ui), because the latest stable release does not include that functionality. 2. I bought two of them for two floors and OpenWRT somehow managed to generate the same BSSID for both of those routers, which caused both of the networks to be inoperable. To fix this I had to edit a bash script which generates the BSSID in OpenWRT and change it to something else.

alufers··on Newer TP-Link Routers send large volumes of requests to Avira servers
Newer TP-Links use broadcom chips which have no drivers on Linux, so it makes using openwrt basically impossible.
alufers··on Yerka bike uses frame as lock
That's why you never attach the chain to the wheel, but to the triangle made from the frame.
alufers··on NSA Network Infrastructure Security Guidance [pdf]
So it's a faraday cage?
alufers··on SARS-CoV-2 contains part of a patented genetic sequence
Imagine that a virus is detected in your body and then you get sued by a patent troll for having unlicensed genetic sequences in your body.
alufers··on About adding a static route to my DOCSIS modem
Oh I remember this tutorial, because I followed it once to get telnet to this exact device. I even bought a special transcend sd card reader that was said to support 1-bit mode, but what worked for me in the end was the cheapest and crappiest looking adapter I had.

The funny thing is that you can use this method to illegaly increase your internet speed, since it is limited by the modem, not by the ISP's equipment.

alufers··on My thoughts on writing a Minecraft server from scratch in Bash
I think it's supposed to run on BusyBox.
← PreviousPage 2 of 5Next →