News for hackers. Stuff that matters.

EatonZ

EatonZ on Hacker News

Re:Exploiting Volvo/Eicher's fleet platform to gain control over all u... on Monday July 27, 2026 @02:08PM (#49073410)
In this case, AI wasn't used for anything.
Re:Exploiting vulnerabilities in Johnson and Johnson web apps on Wednesday June 24, 2026 @08:17PM (#48667179)
Thank you for the laugh (:
Re:Hacking India's largest automaker: Tata Motors on Saturday November 01, 2025 @09:43AM (#45781585)
TruffleHog: https://trufflesecurity.com/trufflehog

I worked for them a little bit and their product is really impressive and works great.

Re:Hacking India's largest automaker: Tata Motors on Saturday November 01, 2025 @09:42AM (#45781576)
Appreciate the insight!
Re:Exploiting McDonald's APIs to hijack deliveries and order food for ... on Friday December 20, 2024 @12:44PM (#42473135)
There are certainly more things I could have done to get more $/hour. I ultimately find these things enjoyable and help keep my skills sharp.
Re:Exploiting McDonald's APIs to hijack deliveries and order food for ... on Thursday December 19, 2024 @07:23PM (#42467162)
It would be nice to see rewards that scale with severity. Ultimately they did accomodate me by sending a gift card I can use instead of coupons I would likely have given away, so I appreciate that. Most companies don't offer me anything!
Re:Ask HN: Who wants to be hired? (March 2023) on Wednesday March 01, 2023 @12:33PM (#34985337)
Location: Florida, USA

Remote: Yes

Willing to relocate: No

Résumé/CV: https://eaton-works.com/resume/

Email: [email protected]

I am an experienced C# / .NET Windows desktop developer of more than 15 years with an interest in file systems, reverse-engineering, and security. Some of my recent security disclosures have been front-page news on major media outlets such as Automotive News[1] and TechCrunch[2].

Currently seeking new opportunities in the C# / .NET and/or security space.

Please see my website for a full catalog of my notable work: https://eaton-works.com/

[1] https://www.autonews.com/mobility-report/how-toyotas-supplie...

[2] https://techcrunch.com/2022/06/22/jacuzzi-flaws-admin-expose...

Re:How the Xbox 360 knows if your hard-drive is genuine on Saturday January 28, 2023 @12:51PM (#34559745)
I have just put up an Atom feed, more details: https://eaton-works.com/2023/01/28/syndication-feed-now-avai...
Re:How the Xbox 360 knows if your hard-drive is genuine on Wednesday January 25, 2023 @01:16AM (#34515008)
https://i.imgur.com/AFZIA3p.png

It takes in the RSA signature, SHA data hash, and RSA key type. Key types are: XE_PIRS_RSA_KEY = 0x0, XE_LIVEDRM_RSA_KEY = 0x1, XE_DEVICE_RSA_KEY = 0x2 (this is the Sata verification key), XE_XSIGNER2_RSA_KEY = 0x3

It uses key type to load the corresponding public key from memory at static addresses, then verification takes place.

Re:How the Xbox 360 knows if your hard-drive is genuine on Tuesday January 24, 2023 @11:42PM (#34514492)
Thank you for the kind words :D My contact info is here: https://eaton-works.com/contact/
Re:How the Xbox 360 knows if your hard-drive is genuine on Tuesday January 24, 2023 @07:50PM (#34512832)
If anyone is interested in RSS you can subscribe here to be notified when it's available (I will post about it): https://eaton-works.com/subscribe

You can then unsubscribe & that will delete your email from my list, if you prefer RSS over emails.

Re:How the Xbox 360 knows if your hard-drive is genuine on Tuesday January 24, 2023 @07:46PM (#34512796)
Glad everyone enjoyed the writeup! I have several more interesting writeups planned, including a significant hack disclosure (not Xbox/gaming related), so keep an eye out (:

Older »