HNHacker News
TopNewBestAskShowJobs

stragies

459 karma · joined October 11, 2019

submissionscomments
stragies··on Tell HN: Cloudflare silently injects its analytics when you switch nameservers
Is there an entry in filter-lists used by ublock and other client-side content blockers for `https://static.cloudflareinsights.com/beacon.min.js/`?
stragies··on OpenSSH 10.5/10.5p1
You could wrap a TLS-connection around your SSH-connection, and then use the ALPN to indicate SSH, so that your reverse proxy knows, what to do with it.
stragies··on BSD Make extravaganza: Mandelbrot Set In bmake
Typo: Line 3 of the readme should probably read "I could not suppress ..."

On-Topic: Very creative (ab)use of `make`. +1

stragies··on Motion Sensors and Home Security Gadgets Without Cameras
Great Project! I just wish, their HDB would enable filtering on which cameras have Ethernet, and/or the data-lines connected on the USB-Power-Plug, so that I could equip them with USB NIC (for the ones that don't have ethernet), and then run them with a POE-Splitter.

Having the data pins connected would also enable lots of other nifty use-cases.

Also, have they managed to forward port the drivers to a recent mainline kernel in the meantime, or are they still on ancient vendor SDK kernel versions?

stragies··on Unauthenticated RCE in Motorola's MR2600 Router
... Because it is a D-Link DIR-882 in a different box: https://openwrt.org/toh/d-link/dir-882_a1
stragies··on Unauthenticated RCE in Motorola's MR2600 Router
Or upgrade them to modern OpenWrt, which has supported the near identical (minus USB port) D-Link DIR-882 since 2021: https://openwrt.org/toh/d-link/dir-882_a1 , as User 6SixTy has hinted at.
stragies··on ESP32-S31
cr.yp.to/ is also a pretty cool URL, and has been around for a looong time
stragies··on Roundcube Webmail: SVG feImage bypasses image blocking to track email opens
Hmm, I wonder, if roundcube was the exception (w.r.t feImage), or if soon other webmail clients will need to be patched
stragies··on TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy
Is there a table of supported hardware, that contains info about the USB-connection (or ethernet) on these devices. Like, which have data-lines connected, can the device electrically do host and device mode? Can I use a POE2USBC adapter, that presents itself as a USB-network device to the camera? Ability to filter on those columns would be great. Is thingino using the Ingenic linux kernel 3.ancient SDK version, or do they have/use something newer?
stragies··on How I discovered a hidden microphone on a Chinese NanoKVM
The manual, as OP said, does not offer any explanation, why the device might show up with an additional MAC/IP at the upstream switch port, and which services it might offer. OP sounds knowledgeable enough to be able to exclude the possibility, that the additional MAC/IP could be from one of the PCs, like e.g. when playing with VMs using an internal bridge in the Hypervisor.

Maybe the device has a bigger "cousin" device, that includes "control via APP", and this feature was not properly/fully disabled on this one.

stragies··on How I discovered a hidden microphone on a Chinese NanoKVM
Was the network port bridged to both PCs all the time (as the description makes it sound, or did only the "active" PC get a functioning network connection? Could you tell from the FDB of the upstream device, if there were more than two MAC addresses active on the port? Did you (hopefully) open it up and make PCB pictures before chucking it?
stragies··on How I discovered a hidden microphone on a Chinese NanoKVM
on many cards they are, check out the tool `hdajackretask` from package `alsa-gui-tools`.
stragies··on How I discovered a hidden microphone on a Chinese NanoKVM
Many a soundcard supports changing jack "direction". Here's a StackExchange answer from 2012, on how to do it with the GUI tool `hdajackretask` : https://askubuntu.com/a/911961
stragies··on How I discovered a hidden microphone on a Chinese NanoKVM
Why did you not just login to the device, and switched off "Broadcast to multicast", or changed the destination address?

Edit: Some brands of Network-KVM use this, so that you can control the target device from another device, like e.g. an App on a tablet. That way you don't have to stand next to the target device in the noisy and cold machine room

stragies··on A Library for Parsing Dutch Smart Meter Requirements (DSMR)
Also Belgium, Luxembourg and Sweden according to https://www.home-assistant.io/integrations/dsmr/
stragies··on WinBoat: Run Windows apps on Linux with seamless integration
Does this use MS-RemoteApp RDP extension (https://learn.microsoft.com/en-us/openspecs/windows_protocol...) under the hood?
stragies··on OpenIPC: Open IP Camera Firmware
Thank you for your work! Can you recommend a compatible LAN POE camera available on Amazon(.de?)
stragies··on OpenIPC: Open IP Camera Firmware
This project only seems to support Ingenic SOCs (as per https://github.com/themactep/thingino-firmware). A far cry from the list supported by openipcam.

Edit: But they have a list of product names, where they support installation of Thingino: https://github.com/themactep/thingino-firmware/blob/master/d...

stragies··on OpenIPC: Open IP Camera Firmware
This is a list of SOCs, not a list of devices containing these SOCs.

And for most cameras sold, you'll have a hard time figuring out pre-buy, what SOC it contains.

stragies··on Show HN: I built this to talk Danish to my girlfriend – works with any language
Those words also exist in Spanish, there the ending is "cion", and in Portuguese with ending "cão"
stragies··on The year of EU Linux desktop may come: digital sovereignty begins at the desktop
Yes, more free beta-testing for Apple, Netflix, Cisco, Sony, and other large commercial users is definitely needed and beneficial to the development of the free world. Or so I've been told
stragies··on Banana Pi BPI-RV2 RISC-V gateway board
From the DTS posted in another thread here, the board looks to be running a 5.10 Linux kernel. OpenWrt proper runs much newer kernel versions, so the board looks to be running a vendor fork of OpenWrt branched of already a while ago. Maybe they are planning to catch back up to regular/normal/mainline OpenWrt at some point.
stragies··on Banana Pi BPI-RV2 RISC-V gateway board
How "trustworthy" is the "dedicated network processing accelerator (NPU) (supports L2/L3 hardware processing, IPv4/IPv6 dual stack, 20Gbps switching capacity, full byte wire-speed forwarding)"? Is it fully "hardware", auditable, or does/could it run some blob firmware with unknown/undocumented "features"?
stragies··on Fast-PNG: PNG image decoder and encoder
Yes, calling something that is 2-3 slower than the reference "almost as fast" is a very creative use of the English language.
stragies··on Undocumented backdoor found in Bluetooth chip used by a billion devices
Only buy ESP32 products, where you can access the pins for reflashing with ESPHome.
stragies··on Undocumented backdoor found in Bluetooth chip used by a billion devices
With ESP32, always regard the vendor firmware only as proof-of-electrical-functioning. The first thing you should do with any ESP32 device after basic function test, is install ESPHome on it. If that's not possible, buy something different, where you can replace vendor fw.
stragies··on What if America turned off Britain's weapons?
How much of the European capabilities do you think would remain after Microsoft, Apple, Cisco, Broadcom, Google, etc drop poisoned updates on to them at the next update/connection, scramble all the data, trigger endless bootloops? Disable Azure, AWS and iCloud for European IPs. Some messing with DNS and Cloudflare, along with using the flying stingrays (Starlink Satellites) to mess with mobile communication. Also pile up all Teslas at important traffic intersections into huge lithium battery fires.

Basically, it would send Europe back into the stone age, I fear. In under a week.

stragies··on Jeep owners fed up with in-car pop-up ads
Maybe there'll be some trickery they can do in future versions with the AC to lower air pressure in the cabin, so the occupant(s) pass out, and can't attempt to mess with the cars "mission" anymore.
stragies··on Jeep owners fed up with in-car pop-up ads
Or worse, some hacker/government locks your car doors, and turns your car into a remote-controlled 2-ton 140mph ground-to-ground projectile, while you're driving your kids to school.
stragies··on Opinion: Your shower head is lying to you about pressure
Are all of those 90 million liters used, as in "lost", or is a large percentage of it captured/re-used?
Page 1 of 11Next →