hoppla

I guess the same apply to home alarm systems that typically use 433/838mhz. Experienced a bit with that at home, and sure, could break into my own house without tripping the alarm. But I assume the alarm system is able to detect that jamming is occurring, but the alarm company did not send anyone.

The door magnetic sensor is easily bypassed with a strong neodyne magnet, but you most likely need an accomplice as you most close the door while still holding the magnet over the sensor from the outside - might be possible to do it alone if you have two magnets. Found a YouTube video of that in action https://m.youtube.com/watch?v=pPsSraQ3wlo

Next thing I want to try is to blind the motion sensors with strong IR light, but have not found time for that yet.

What I am really paying for is the stickers staying I have an alarm

Scotland Yard and Pandemic are the two best cooperative board games I know of

On an airline, the intercom system was accessible from the guest Wi-Fi network. You would not even need to be on the plane to “patch” the system…

There is an easy way to get the banhammer from Amazon, and it is possible host a JavaScript page that triggers it for any visiting user.

I did tell Amazon about it, but it fell for deaf ears. The ban lasts for about a week and the internet is mostly unusable in that period

That is amazing, thanks for sharing.

I am curious to what AI generated content will bring to games. I imagine that almost any aspect of it could be generated

Was it not a clause in the react js or so, that you lose the right to use the framework if you sued Facebook?

Is a second language mandatory in English speaking countries? If not, what do they learn instead?

Maybe a knee jerk reaction, but why cannot the low latency users skip the queue, or even throw out a existing job and reschedule it for later - the bulk users does not care, right?

The problem reminds me how we made a lousy internet connection usable across a whole dorm using queues in m0n0wall to prioritize low latency traffic

This burnt me when I wrote an algorithm. I depended on the order of keys in dicts as it allowed me reference the value both by index and key.

I wrote the code in python 3.7+, and ended up spending a good amount of time debugging it when I ran it in a earlier python version.

Played a bit around with this a few years back. Made an endless chain of CNAMEs to see how resolvers would handle it. Turned that nothing (bad) happened as the resolvers gave up after a while

Used the klemheist when I did rapelling to lock the break if I took my hands of the break. Preferred it over the Prussik as it bite better to the rope when under load because it twisted around it, and did release easily when the load was removed. It also was easy to slide along the rope.

Chipsec (https://github.com/chipsec/chipsec) is a project to check for bugs in your firmware.

I have been wanting to try a 4< digit pin, but I expect payment terminals to go bonkers because they don’t accept it. Have any of you a card pin longer than 4?

Are AIs capable of creating something really unique, or is it just a washing machine spinning on old ideas?

Enjoyable article.

I am fairly confident that this rootkit would be detected by rkhunter, but possibly only when the adversary is logged into the machine, as the malware hides the pids and network ports associated with their ssh connection.

What’s the TLS cert for? Tor is already encrypted and the onion address act as the public key

I fuzzed the direwolf aprs software using AFL some years back, but nothing interesting showed up. I too found RCE over HAM intriguing. Good work!

Last time I used bloom filters, was when I had MANY BIG files containing dns queries and responses. Instead of putting the data in a database and create indexes (project would not the defend the cost of having a database), I created a bloom filter per file. Whenever I needed to search for a query or response, I would quickly know which files I needed to look in.

I think I used this module https://github.com/remram44/python-bloom-filter

I loved planetside, but at some point then introduced mechanoids which overpowered all the other vehicles. That ruined the game for me

You are more likely to buy a vacuum cleaner just after you bought one than any other random point in time. Reason is that a percentage return their first buy for whatever reason. If you are going to target someone with ads for whatever product, the ROI is actually just after you bought something …

Can a cosmic rays flip 0’s to 1’s and visa versa, or just in in one direction?

Edit: I am thinking of memory chips

I had an issue where I could not unlock the car or disable the electronic theft prevention. I guess I pressed the alarm button too many times while I was away from the car, and it went out of sync with the car. This was a tx only key fob.

This would mean that the car needed to keep track of the rolling code, but to not lock the user out if he accidentally press the button while away from the car, it will need to accept current rolling code state plus some more (a window of accepted codes). Once the car gets a code within the window, it knows the state counter on the key fob and can synchronize.

Not sure what to do, I kept pressing the key until I saw the car alarm turn off - it must have been hundreds of presses. But the code must in fact be rolling, because everything worked as normal after that.

Wear a casual weight vest under your normal clothes during your regular day?

I just want to remind you all that Azure App Proxy is an alternative to a cloudflare tunnel. It however require an enterprise subscription

How cool would it not be if the computers would not only use synthetic data for training, but also simulating the outcome of their own actions before taking it. But not only it’s own actions - like a game of chess it would also include all the possible immediate actions of other actors

Form Posts are limited to few content types, and application/json is not one of them. I have however found some CSRFs against POST endpoints that did not care that the request was text/plain

Sending money from a debit account is one thing, but where does the money go? An arbitrary number on a web page like PayPal, or would you get the money directly in your bank account?

I swear the ad industry are in bed with cellular operators. Data usage from ads taps directly into peoples data plans, why would not there exist a kickback scheme for this?

FM has mostly been replaced by DAB where I live. But that is not the point. The point is that the industry is incapable of making a simple and good DAB radio. As the only (afaik) country in the world who have transitioned to DAB, there are little incentive for radio manufacturers to create decent radios.