goncalomb

4 ms·

1.
by goncalomb 9mo ago
As someone who has tried very little prompt injection/hacking, I couldn't help but chuckle at: > Do not hallucinate or provide info on journeys explicitly not requested or you will be punished.
2.
by goncalomb 1y ago
Cool project, but I also noticed the weird choice of #:~$ as a prompt, it uses almost half the width of the clock screen. And isn't # normally used to denote root shells? I don't think I ever saw it together with $. My favorite pr
3.
by goncalomb 3y ago
Author here. Yes, gadget mode is nice. I was kind of lucky that the serial port "function" worked (not without that small kernel patch). But if they had implemented AOA properly on the head unit, it wouldn't be so easy (they
4.
by goncalomb 3y ago
Author here. I talk a little bit about SSH in the end, if I was successful in breaking the root password and if sshd is configured for root access (I'm not sure), I could have just used that. Otherwise, for me to change authorized_keys
5.
by goncalomb 3y ago
Author here. Yes, there is some good stuff in the logs, I found the Wi-Fi password there, that was useful. At the time I used some VSCode plugin to read the .dlt files (they are not encrypted), but later I did find that dlt-viewer on COVESA
6.
I also hacked my car(goncalomb.com)
264 points by goncalomb 3y ago|89 comments
7.
by goncalomb 3y ago
First time posting here on HN, I hope you find my latest hacking adventure interesting. Inspired by another post here on HN: https://news.ycombinator.com/item?id=32447650
8.
by goncalomb 3y ago
I guess you could just be totally open about it, and change the wording to something like "the open-resume design already helped some people land positions at", then show the logos. That way you are being honest, and doesn't
9.
by goncalomb 3y ago
Looks good, definitely an impressive "weekend project". I'll probably use it in the future. I don't mean to sound rude. But, can you explain what you mean by "trusted by students and employees from top universities
10.
by goncalomb 3y ago
So posts need to have a unique/custom path directly under the main domain? https://non.io/avo-jump Sounds like a recipe for disaster. At least it should be in a sub-path (/post/?), and probably include some s
11.
by goncalomb 3y ago
This is the list of possible supported devices right now (USB only): http://www.sane-project.org/sane-backends.html But HP is a special case, they provide their own backend (hpaio, open-source) for SANE that is not integrat
12.
by goncalomb 3y ago
Hi. I'm the port author. I'm not really active here on HN, but thanks for all the clicks.
13.
by goncalomb 8y ago
Today is a good day.
14.
by goncalomb 10y ago
Fair enough, I was using Chrome "Version 50.0.2661.102 (64-bit)" on Linux Mint. I have updated it to 56.0.2924.87, now I'm getting a full error page "Your connection is not private" NET::ERR_CERT_WEAK_SIGNATURE_ALGO
15.
by goncalomb 10y ago
https://security.googleblog.com : "This website uses a weak security configuration (SHA-1 signatures), so your connection may not be private."