News for hackers. Stuff that matters.

stragies

Is there an entry in filter-lists used by ublock and other client-side content blockers for `https://static.cloudflareinsights.com/beacon.min.js/`?
Re:OpenSSH 10.5/10.5p1 on Thursday August 13, 2026 @05:21PM (#49292028)
You could wrap a TLS-connection around your SSH-connection, and then use the ALPN to indicate SSH, so that your reverse proxy knows, what to do with it.
Re:BSD Make extravaganza: Mandelbrot Set In bmake on Wednesday August 05, 2026 @11:27AM (#49184290)
Typo: Line 3 of the readme should probably read "I could not suppress ..."

On-Topic: Very creative (ab)use of `make`. +1

Great Project! I just wish, their HDB would enable filtering on which cameras have Ethernet, and/or the data-lines connected on the USB-Power-Plug, so that I could equip them with USB NIC (for the ones that don't have ethernet), and then run them with a POE-Splitter.

Having the data pins connected would also enable lots of other nifty use-cases.

Also, have they managed to forward port the drivers to a recent mainline kernel in the meantime, or are they still on ancient vendor SDK kernel versions?

Re:Unauthenticated RCE in Motorola's MR2600 Router on Sunday July 12, 2026 @04:24PM (#48884418)
... Because it is a D-Link DIR-882 in a different box: https://openwrt.org/toh/d-link/dir-882_a1
Re:Unauthenticated RCE in Motorola's MR2600 Router on Sunday July 12, 2026 @04:22PM (#48884385)
Or upgrade them to modern OpenWrt, which has supported the near identical (minus USB port) D-Link DIR-882 since 2021: https://openwrt.org/toh/d-link/dir-882_a1 , as User 6SixTy has hinted at.
Re:ESP32-S31 on Wednesday June 03, 2026 @03:30PM (#48388712)
cr.yp.to/ is also a pretty cool URL, and has been around for a looong time
Hmm, I wonder, if roundcube was the exception (w.r.t feImage), or if soon other webmail clients will need to be patched
Is there a table of supported hardware, that contains info about the USB-connection (or ethernet) on these devices. Like, which have data-lines connected, can the device electrically do host and device mode? Can I use a POE2USBC adapter, that presents itself as a USB-network device to the camera? Ability to filter on those columns would be great. Is thingino using the Ingenic linux kernel 3.ancient SDK version, or do they have/use something newer?
Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @06:32PM (#46177611)
The manual, as OP said, does not offer any explanation, why the device might show up with an additional MAC/IP at the upstream switch port, and which services it might offer. OP sounds knowledgeable enough to be able to exclude the possibility, that the additional MAC/IP could be from one of the PCs, like e.g. when playing with VMs using an internal bridge in the Hypervisor.

Maybe the device has a bigger "cousin" device, that includes "control via APP", and this feature was not properly/fully disabled on this one.

Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @05:49PM (#46177299)
Was the network port bridged to both PCs all the time (as the description makes it sound, or did only the "active" PC get a functioning network connection? Could you tell from the FDB of the upstream device, if there were more than two MAC addresses active on the port? Did you (hopefully) open it up and make PCB pictures before chucking it?
Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @11:14AM (#46174435)
on many cards they are, check out the tool `hdajackretask` from package `alsa-gui-tools`.
Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @11:10AM (#46174392)
Many a soundcard supports changing jack "direction". Here's a StackExchange answer from 2012, on how to do it with the GUI tool `hdajackretask` : https://askubuntu.com/a/911961
Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @10:58AM (#46174293)
Why did you not just login to the device, and switched off "Broadcast to multicast", or changed the destination address?

Edit: Some brands of Network-KVM use this, so that you can control the target device from another device, like e.g. an App on a tablet. That way you don't have to stand next to the target device in the noisy and cold machine room

Also Belgium, Luxembourg and Sweden according to https://www.home-assistant.io/integrations/dsmr/
Re:WinBoat: Run Windows apps on Linux with seamless integration on Tuesday September 02, 2025 @04:27AM (#45100429)
Does this use MS-RemoteApp RDP extension (https://learn.microsoft.com/en-us/openspecs/windows_protocol...) under the hood?
Re:Open IP Camera Firmware on Monday August 04, 2025 @12:31PM (#44788118)
Thank you for your work! Can you recommend a compatible LAN POE camera available on Amazon(.de?)
Re:Open IP Camera Firmware on Monday August 04, 2025 @11:41AM (#44787371)
This project only seems to support Ingenic SOCs (as per https://github.com/themactep/thingino-firmware). A far cry from the list supported by openipcam.

Edit: But they have a list of product names, where they support installation of Thingino: https://github.com/themactep/thingino-firmware/blob/master/d...

Re:Open IP Camera Firmware on Monday August 04, 2025 @11:14AM (#44786990)
This is a list of SOCs, not a list of devices containing these SOCs.

And for most cameras sold, you'll have a hard time figuring out pre-buy, what SOC it contains.

Those words also exist in Spanish, there the ending is "cion", and in Portuguese with ending "cão"
Yes, more free beta-testing for Apple, Netflix, Cisco, Sony, and other large commercial users is definitely needed and beneficial to the development of the free world. Or so I've been told
Re:Banana Pi BPI-RV2 RISC-V gateway board on Monday April 21, 2025 @07:53AM (#43750882)
From the DTS posted in another thread here, the board looks to be running a 5.10 Linux kernel. OpenWrt proper runs much newer kernel versions, so the board looks to be running a vendor fork of OpenWrt branched of already a while ago. Maybe they are planning to catch back up to regular/normal/mainline OpenWrt at some point.
Re:Banana Pi BPI-RV2 RISC-V gateway board on Monday April 21, 2025 @05:44AM (#43750038)
How "trustworthy" is the "dedicated network processing accelerator (NPU) (supports L2/L3 hardware processing, IPv4/IPv6 dual stack, 20Gbps switching capacity, full byte wire-speed forwarding)"? Is it fully "hardware", auditable, or does/could it run some blob firmware with unknown/undocumented "features"?
Re:Fast-PNG: PNG image decoder and encoder on Wednesday March 12, 2025 @04:19PM (#43347262)
Yes, calling something that is 2-3 slower than the reference "almost as fast" is a very creative use of the English language.
Only buy ESP32 products, where you can access the pins for reflashing with ESPHome.
With ESP32, always regard the vendor firmware only as proof-of-electrical-functioning. The first thing you should do with any ESP32 device after basic function test, is install ESPHome on it. If that's not possible, buy something different, where you can replace vendor fw.
Re:What if America turned off Britain's weapons? on Friday March 07, 2025 @06:15PM (#43295868)
How much of the European capabilities do you think would remain after Microsoft, Apple, Cisco, Broadcom, Google, etc drop poisoned updates on to them at the next update/connection, scramble all the data, trigger endless bootloops? Disable Azure, AWS and iCloud for European IPs. Some messing with DNS and Cloudflare, along with using the flying stingrays (Starlink Satellites) to mess with mobile communication. Also pile up all Teslas at important traffic intersections into huge lithium battery fires.

Basically, it would send Europe back into the stone age, I fear. In under a week.

Re:Jeep Owners Fed Up with In-Car Pop-Up Ads on Wednesday March 05, 2025 @05:26PM (#43273564)
Maybe there'll be some trickery they can do in future versions with the AC to lower air pressure in the cabin, so the occupant(s) pass out, and can't attempt to mess with the cars "mission" anymore.
Re:Jeep Owners Fed Up with In-Car Pop-Up Ads on Wednesday March 05, 2025 @04:35PM (#43272851)
Or worse, some hacker/government locks your car doors, and turns your car into a remote-controlled 2-ton 140mph ground-to-ground projectile, while you're driving your kids to school.
Are all of those 90 million liters used, as in "lost", or is a large percentage of it captured/re-used?

Older »