641 karma · joined May 21, 2022
https://www.emilydamstra.com/please-enough-dead-butterflies/
We are still limiting signups to keep our costs under control, but you can use the code "SIMULAR" to register. The first 1,000 users get access to Sai for $20/month (regular $200/month).
Now that some bikes have electronic shifting, you can attack the bike itself. I wrote two blog post about how to downgrade the Shimano Di2 shifters and do a replay attack to remotely shift it. You can find them here:
https://grell.dev/blog/di2_downgrade https://grell.dev/blog/di2_attack
My parents had their number for ~30 years. I never get spam calls or texts. They get one once a week or so (this is in Germany, we get a lot fewer of these calls).
A number of other people contacted me with offers so it looks like there will be a happy end to the story :-)
I wouldn't delete old versions even if I could though. My goal is to publish a rock solid library that everyone can depend on and build awesome projects with
I do the work because I see it as payback for all the great open source software I use all the time.
I used to live in a flat with one flatmate who changed every half a year or so because they were usually interns. Never knew them before they moved in but 90% of the time we became friends. I liked that they changed after a while so I was never stuck with a bad roomate.
I don't recommend the other way around. If you have a good friend it's more likely to notice their annoying habits so there is little upside but in a worse case you can damage the friendship.
An easier way is to run an Android virtual device with an older Android version on your computer. You can then use some scripts to add the certificates and proxy the traffic to Burpsuite or mitmproxy. That way you also don't have to switch devices.
It would also be interesting to use APKLab or Jadx to look at the code of the app. Maybe you can find the key derivation algorithm. The app and the washing machine must somehow generate keys or have pre-shared secrets.
If I understand correctly, the app only works if both devices are in the same network? I like that