News for hackers. Stuff that matters.

rickoooooo

Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Tuesday June 16, 2026 @09:42AM (#48555188)
Thanks, I've updated the post to use webp images, which did help a ton.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @11:20PM (#48550155)
Thanks. I had several ideas for these bulbs as well. This is the one I decided to act on for now. I might work on some of the others later but I'm not sure. I agree there are so many potential uses for this sort of thing and I love how they just sort of exist without drawing attention or suspicion.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @10:40PM (#48549867)
That's exactly what this project attempts to do. It acts as a captive portal.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @10:38PM (#48549858)
You'd think this would be obvious.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @10:37PM (#48549852)
Ah shoot. Back to the drawing board I guess!
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @09:58PM (#48549609)
That's exactly what this project is. You can buy the same tasmota bulb I used and flash it over the wifi. No disassembly required.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @09:56PM (#48549599)
These are just examples I could legally include in a public github repository to demonstrate the functionality. The alternative would be to include copyrighted works or nothing. The user is free to include any books that are important to them.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @09:55PM (#48549586)
I chose these books as examples precisely because they are out of copyright and available on project Gutenberg. They also had been banned or challenged on the USA in the past. Project Gutenberg has a list of "banned books" on their own website and these are all included.
Re:Banned Book Library in a Wi-Fi Smart Light Bulb on Monday June 15, 2026 @09:52PM (#48549572)
I chose books that were out of copyright, available from project Gutenberg, and had been banned or challenged in the USA at some point in the past to use as examples. There weren't many options. It's designed so the user can include whatever books are important to them wherever they may live. They may live somewhere more oppressive where banned books are a common occurrence. I have no idea. It wouldn't be wise to include copyrighted works in a public repository where I live.
Re:x86-64 Assembly Language Programming with Ubuntu (2022) on Sunday December 24, 2023 @09:54PM (#38759233)
Exploit payloads (shellcode)
Re:Ask HN: What podcasts do you listen to? on Friday November 03, 2023 @02:03AM (#38125098)
Your podcast is in my rotation of infosec podcasts along with:

darknet diaries

malicious life

Application security podcast

hacked

privacy security and osint show

Day[0]

shared security

I've been enjoying it. Thanks for putting it out there!

Re:Ask HN: What are some communities like HN? on Saturday September 23, 2023 @02:03AM (#37620944)
I have to second corridor crew. I found then several years ago and now I never miss a video. Gave me new appreciation for film making and vfx.
Re:The Tragedy of Google Search on Saturday September 23, 2023 @02:00AM (#37620931)
I've been using kagi the last 1.5 years after seeing it recommended here. It's been fantastic for me. I use it on all my devices and never use Google or DDG any more. It feels like old Google with more features. Unfortunately it's not free but they just today announced unlimited search for $10/month which for me is quite reasonable. I sometimes hit over 1000 searches per month (1532 is my record so far). Although it costs money I like knowing that kagi is the product, not me or my data m
Re:Major Louisiana DMV Hack on Friday June 16, 2023 @02:46AM (#36352440)
Thanks for the correction. Gonna have to look into that one. Very unfortunate.
Re:Major Louisiana DMV Hack on Friday June 16, 2023 @01:44AM (#36351920)
Looks like a larger scale supply chain attack.

https://www.nbcnews.com/tech/security/us-govenment-agencies-...

One other thought is to try using rclone to copy all of your data to local storage or to another provider while you still have access using keys.

https://rclone.org/

If you have working access keys, you can generate a console URL that has the same permission as your keys. Check out the python script here: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_pr...

It will spit out a URL you can use to sign into the console using the keys instead of a user account. Maybe this will help you in the meantime while you are trying to fix the root problem. Good luck!

Re:Ask HN: How do you save and browse external interesting URLs? on Saturday February 11, 2023 @12:27PM (#34754290)
I just set up a YaCy instance myself last week after being inspired by your post on hackernews from ~7 months ago. Thanks for sharing that. I found some other helpful resources online for this too. I wrote about my configuration in case it might be helpful for anyone else who'd like yo play with YaCy for bookmarking. I haven't had it up long enough to know how useful it will be for me yet, but its been fun to play with. I also wrote an Android app to help me index specific pages from my mobile device with just a few taps.

https://www.richardosgood.com/posts/yacy-personal-search-eng...

You can find a transcript from George Lucas, Steven Spielberg, and Larry Kasdan's original brainstorming sessions for this film online (http://maddogmovies.com/almost/scripts/raidersstoryconferenc...). In the transcript it's made clear that she would have been underage, but in the film it's only hinted at. Here's an excerpt:

G — I was thinking that this old guy could have been his mentor. He could have known this little girl when she was just a kid. Had an affair with her when she was eleven.

L — And he was forty-two.

G — He hasn't seen her in twelve years. Now she's twenty-two. It's a real strange relationship.

S — She had better be older than twenty-two.

G — He's thirty-five, and he knew her ten years ago when he was twenty-five and she was only twelve.

G — It would be amusing to make her slightly young at the time.

S — And promiscuous. She came onto him.

G — Fifteen is right on the edge. I know it's an outrageous idea, but it is interesting. Once she's sixteen or seventeen it's not interesting anymore. But if she was fifteen and he was twenty-five and they actually had an affair the last time they met. And she was madly in love with him and he...

Re:Using ChatGPT to generate phishing campaigns on Thursday December 08, 2022 @07:03PM (#33915618)
I jumped on the ChatGPT bandwagon and found that it can be a useful tool to generate phishing emails and landing pages.
Re:Mycroft – open source voice assistant on Tuesday November 22, 2022 @10:49PM (#33714935)
You are using picovoice as the assistant? Is it en entire solution for that? Or are you running a DIY Mycroft device with picovoice as the wake word detector? I'll have to check this out but I've been trying to stick with open source technologies where I can. I don't trust that a free tier will remain free forever, but it may be worth testing out.
Re:Mycroft – open source voice assistant on Tuesday November 22, 2022 @10:49AM (#33707012)
I played with Mycroft about two years ago. I had been using a couple Google home minis for a while for the usual things (play spotify, set timers, ask the weather, control lights around the hose). They worked perfectly for that. At the time I decided to de-Google my life and take back my privacy so I went looking for something open source that would provide me more control of my data. I found Mycroft and played with it for a few months.

I was pretty excited about it. I bought a ReSpeaker 2.0, which is an embedded device that can run Linux and has a six microphone array. I designed a custom 3d-printed case to hold the ReSpeaker and a small speaker to make my own little "Jarvis" box (Iron-man reference).

My favorite part about the whole thing was the customization. I wrote a couple of skills to do some other things for me. For example, I could say "Where can I watch X?" and it would use an API to search for a TV show or movie to see where it was available on Netflix, Amazon Prime, Disney+, etc and let me know. It's always been annoying to go Google and try to figure out where I can watch something streaming online, but limited to only the services I currently subscribe to. I wrote another skill that tied into my couchpotato instance so I could say "Download the movie X" and it would go find it and download it. If it found multiple matches, it would read off the top few matches and let me choose the correct one. I even tied those skills together so if the first skill couldn't find a movie at one of my streaming services it would ask if I wanted to download it and I could simply say "yes". I also modified the code to use a custom text to speech API so I could configure Mycroft to use a custom voice.

It was all really cool and I had a lot of fun playing with it. The biggest problem I ran into was the wake word recognition. It worked mostly OK for me on the ReSpeaker from close range but I found as I moved away it went downhill. It was especially bad if I had my device playing music, which is possibly the most common thing I was using my Google Home mini for. I had hoped that the ReSpeaker would help with this, because it had the six microphone array and some built-in loopback hardware to try and cancel out any noise that that was being generated by the ReSpeaker. So any sound output to the speakers would be looped back into the ReSpeaker and could be subtracted from the microphone's input. I found that I just couldn't get it to work well, though. I think the music was causing vibrations that were overloading the microphone array and causing it to be unable to hear me through the music. It's possible it could be improved with a better hardware design to help reduce vibration caused by the device's own speaker. Maybe it works better now, two years later. I think I had configured Mycroft to use Snowboy for wake-word recognition so I could name my Mycroft something else (Jarvis).

One day the Mycroft installation just stopped working on my device after I hadn't touched it in a week or more and I never went back to figure out what was wrong. It's still sitting on the corner of my desk unplugged. If I could have got the wake-word recognition working reliably with music playing I think I would have used it a lot, but I wasn't able to at the time.

I just recently bought a smart watch with a built in "Alexa" app that allows you to send voice commands to your phone which get processed through the watch's official app. I'm instead using Gadgetbridge on Android to interface to the watch. Some kind hacker updated Gadgetbridge to add very basic support for my watch's microphone, allowing you to send the raw voice data to an external application. I'm hoping I'll be able to use this to revive my Mycroft instance and I'll just send voice commands to Mycroft from my watch/phone via a custom Android app/service. In theory, I'll be wearing the watch all the time anyway and having the microphone on my person and right next to my face should hopefully help with the speech-to-text and I won't have to worry about a wake word at all. I've only just barely started working on this, though.