stonepresto

11 ms·

61.
by stonepresto 5y ago
TP-Link loves to make things proprietary. They have a custom protocol called the Tether Management Protocol, the weird OneMesh stuff noted here, custom firmware headers and signing, etc. all without proper documentation. Many major vulns in
62.
by stonepresto 5y ago
Your feeling is correct, although as other comments have mentioned it depends greatly on how you market it and to whom. Probably well above $5-10k though. Bug bounty is good in some respects, but the people who profit the most from it are t
63.
by stonepresto 5y ago
We're doing it to ourselves. We're the ones who keep clicking "I agree", who keep feeding these companies. Of course they're going to look to make a profit off of your data, there's nothing stopping them becaus
64.
by stonepresto 5y ago
https://www.irs.gov/individuals/net-investment-income-tax
65.
Show HN: Atomd v0.2.5 – simple markdown conversion (Python)(pypi.org)
3 points by stonepresto 5y ago|0 comments
66.
Show HN: Atomd v0.2.5 – Python Markdown Tokenizer and HTML Parser(pypi.org)
1 points by stonepresto 5y ago|0 comments
67.
by stonepresto 5y ago
I just wrapped up writing my own. I’ve been following a lot of projects such as Archivy and Obsidian for a while, but neither of them were what I needed. Wrote a flask app that does exactly what I need. Obsidian’s business model is really s
68.
Show HN: Atomd.py v0.2.5 – Markdown Lexer and HTML Parser(pypi.org)
1 points by stonepresto 5y ago|1 comments
69.
by stonepresto 5y ago
The purpose of this project is to provide "atomic" control over how the markdown is parsed. This is achieved by allowing the developer to have direct control over what the tokens are replaced with. I apologize for the lack of docu
70.
Show HN: Atomd v0.2.0 – Markdown Lexer and HTML Parser(github.com)
1 points by stonepresto 5y ago|1 comments
71.
by stonepresto 5y ago
Designed this to give "atomic" control over every tokenization and substitution. Finally have some good unit testing and workflow in place, so looking for bugs!
72.
by stonepresto 5y ago
I like it, simple solution. I wanted to do stuff locally for a project I’m working on, so I built an MD lexer and HTML parser. The downside is I have to implement everything manually, but the upside is I have atomic control over every token
73.
by stonepresto 5y ago
They seemed to be sandboxed to some extent, the researchers mention a privesc which could either be user -> root and then accessing other users accounts, or it could be a sandbox escape through the hypervisor to the host and a pivot from
74.
Show HN: Atomd v0.1.0 – Markdown Lexer and HTML Parser (Python)(github.com)
2 points by stonepresto 5y ago|1 comments
75.
by stonepresto 5y ago
This project came to light while working on a larger one. I was looking for something that would give me easy atomic control over the HTML tags that replace the markdown syntax. After looking at a few, I decided to implement and open-source
76.
by stonepresto 5y ago
“tl;dr REvil popped @KaseyaCorp. Abused Kaseya's auto update to conduct supply chain attack that DLL side loads Windows Defender binaries and ransoms the customer tl;dr tl;dr REvil just pulled off a colossal ransomware supply chain att
77.
by stonepresto 5y ago
The downward trend in bug bounty payouts and frustration from researchers might also sweeten that deal for more experienced persons.
78.
by stonepresto 5y ago
If the USG treats this even close to the way they treat terrorism in regards to policy and funding, I’m curious what that will look like and how nation-states harboring those people will react.
79.
Show HN: Tmpcli.py: Tether Management Protocol Client(github.com)
4 points by stonepresto 6y ago|1 comments
80.
by stonepresto 6y ago
I recently created a client after reversing the closed-source binary TP-Link uses as a client for their Tether Management Protocol (TMP) and Tether Discovery Protocol (TDP - possibly stands for something else).
81.
by stonepresto 6y ago
This mental health problem is called defense contracting.
82.
by stonepresto 6y ago
> Judge Patricia Millett characterized the DOJ’s argument as giving the government the ability to “unilaterally decide to kill U.S. citizens,” according to coverage of the argument by Courthouse News Service. “Do you appreciate how extra
83.
by stonepresto 6y ago
As far as I know it’s not open source either, which I don’t mean to be the Stallman-type, but is kind of a deal breaker for me. I wrote my own, if it ever gets to a point of not being terrible I will open source it as a not-as-pretty FOSS a
84.
Show HN: Lfbr, JSON Formatted Book Recommendations from the Lex Fridman Podcast(github.com)
1 points by stonepresto 6y ago|1 comments
85.
by stonepresto 6y ago
There was no easily-parsed list of book recommendations for the podcast, so I made one. Hopefully someone finds it useful.
86.
by stonepresto 6y ago
502 bad gateway for redirector.googlevideo.com seems to be the culprit, twenty-ish second response time
87.
by stonepresto 6y ago
502 bad gateway (21s response time) for redirector.googlevideo.com
88.
by stonepresto 6y ago
Not to mention those same bad actors will gladly risk going after those keys. Given the track record of government organizations' secure storage of data, I think it's likely they would succeed.
89.
by stonepresto 6y ago
Considering governments have about the same capacity to store data securely as a twelve-year-old, those decryption keys basically open up the door for everyone who is willing to put the effort into retrieving them. And considering the retri
90.
by stonepresto 6y ago
Yes, my fault. I blame it on my lack of sleep and already shite morning.

More ›