Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

g33katwork@infosec.exchangeG

g33katwork@infosec.exchange

@g33katwork@infosec.exchange
About
Posts
19
Topics
8
Shares
0
Groups
0
Followers
0
Following
0

View Original

Posts

Recent Best Controversial

  • I still have that RP2040 with the two buttons and the KNX/IP stack sitting on my desk behind my keyboard and when I'm not developing on it, I am actually using the buttons to turn the lights on and off...
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    I still have that RP2040 with the two buttons and the KNX/IP stack sitting on my desk behind my keyboard and when I'm not developing on it, I am actually using the buttons to turn the lights on and off...

    I should get a Stream Deck or something like that to control lights and shades in the office and just put that below my screen.

    Uncategorized

  • I just had Opus 4.6 absolutely nuke a
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @sven Oh yeah, I do this too. Pair this with an MCP server in Ghidra or IDA and it even rips through smaller binaries like nothing.

    And yes, fuck the hype. I still use them a lot to code, but often the thing just types faster than I do or does a refactor with less friction when I have to touch four implementations of that one trait I just modified. But sometimes, when I use it to plan a feature or a bigger refactor, it genuinely has really good ideas that I end up sticking with. Not sure if this still counts as vibe coding though.

    What I hate the most is that I am reliant on hosted services for all this. Heck, I am throwing Anthropic 100€ per month into its throat and at the same time, they are not even profitable. It feels like we are getting our first shots of heroin for free and soon the dealer wants to see some serious cash.

    I really want to host something like Opus myself, but that is so crazily out of reach it's not funny anymore. I thought about getting a Radeon AI Pro R9700, but after checking what kind of models I am able to run on it, I deemed it an absolute waste of money.

    Uncategorized

  • I just had Opus 4.6 absolutely nuke a
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    I just had Opus 4.6 absolutely nuke a .NET binary integrity protection added by Dotfuscator in merely 30 minutes. The code was obfuscated to the teeth with string encryption and everything. It is wild how good this thing is at stuff like this. Now I can flip some important bits in the binary again without it complaining on startup 🙃

    I had to give it the right code snippets of the integrity check, string decryption and prompts to do it and I knew what I was looking for, but still, doing this manually would've taken me hours if not the whole day.

    Uncategorized

  • RAGE AGAINST THE RTOS!
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @bernerd @salkinium And it resets the system watchdog!

    Uncategorized

  • RAGE AGAINST THE RTOS!
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @bernerd @salkinium Easy solution: Only use one of the two cores.

    Uncategorized

  • The concept of being sick should have no future in my opinion.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    The concept of being sick should have no future in my opinion. There are absolutely no benefits that come with it.

    Uncategorized

  • Good article, but it's important to remember: this is fairly rare.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @iagox86 It feels relatively common in Germany. Laws and legal uncertainties aren't helping ether.
    I don't disclose anything privately to vendors anymore. I have better things to do with my time and money than fighting useless lawsuits against companies that are beyond stupid.

    If something *really* impactful should be on my table, I'd proxy that through the CCC, but apart from that? Companies need to learn the hard way here. 🤷‍♂️

    Link Preview Image
    Modern Solution: Court of Appeal confirms guilt of security researcher

    On appeal by the programmer who uncovered a security vulnerability in software from Modern Solution, the regional court confirmed the penalty order.

    favicon

    heise online (www.heise.de)

    Uncategorized

  • I remember the times when PHP set register_globals to off by default starting with version 4.2.0. I am old.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    I remember the times when PHP set register_globals to off by default starting with version 4.2.0. I am old.

    Uncategorized

  • We're on a mission from Claude.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @tillmannwerner Do we have a comprehensive understanding of the situation yet?

    Uncategorized

  • Sowas brauche ich auch
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @jomo Sick Bee! 😎🐝

    Uncategorized zigbee

  • Grabbed a Pi Pico W from the devboard box on the shelf and ported my platform layer for the KNX stack to it.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @RoganDawes I hate that when other people say this about their projects, but: I need to finish a few things, do some cleanup, get the licensing straight etc. before I can publish this. It WILL be open source under a non-permissive license though - most likely GPLv3, haven't done a lot of research on that yet. And optionally under a commercial license as well to prevent companies from freeloading - at least that's the idea. Maybe nobody is interested in the stack anyway as long as it's not officially conformance tested.

    But especially because of the whole licensing stuff I just cannot push everything into a public repo and continue hacking.

    Uncategorized

  • Grabbed a Pi Pico W from the devboard box on the shelf and ported my platform layer for the KNX stack to it.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    Grabbed a Pi Pico W from the devboard box on the shelf and ported my platform layer for the KNX stack to it. I am already using embassy for everything as an async framework and that very effortlessly gave me a wrapper around smoltcp with embassy-net, a cyw43 wifi driver and countless examples to steal init code from.

    After fixing a few no_std-related issues in my code, the stack runs! I can now connect to it using KNX/IP via WiFi and read/write properties and memory over the KNX/IP linklayer. Heh!

    For an actual TP1 link, I need to build some breakout boards for a TPUART or an NCN5120. I have all the parts and untested PCBs sitting in a box somewhere, I just didn't solder them yet.

    I also haven't implemented a real device for the Pico yet, just some dummy definitions for communication objects and the address/association/group-object tables.

    All in all a release build for the whole stack, WiFi driver, UDP stack and companion stuff that's needed for everything to work gets us to a firmware size of 380KiB. That's not tiny, but also not overly huge. If I see this right, the WiFi firmware alone is 226KiB! That's gives us a bit more than 150KiB for all the rest. That is very good actually.

    I have a few more Picos, some buttons, sensors and toys to control for later and even a Wiznet W5500 on order. We'll see how big things will get without the need for WiFi firmware or even a network stack.

    Uncategorized

  • Gibt's in Aachen noch gute Indische Restaurants die sich nicht selbst die Bude anzünden und das versuchen als rechte Attacke zu framen um Versicherungsbetrug zu begehen und Spenden abzugreifen?
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    Gibt's in Aachen noch gute Indische Restaurants die sich nicht selbst die Bude anzünden und das versuchen als rechte Attacke zu framen um Versicherungsbetrug zu begehen und Spenden abzugreifen? Die waren echt lecker...

    Uncategorized

  • Dumpster fires like CVE-2026-20841 are why I love computers, computer security and everything around it.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    Dumpster fires like CVE-2026-20841 are why I love computers, computer security and everything around it. I live for this kind of shit and find it hilarious. I'm not mad at all, just immensely entertained. 😗👌

    Uncategorized

  • @G33KatWork wenn du dir KNX Telegramme anschaust und verstehen willst, was da genau übertragen wird… Was nimmst Du da?
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @ixs
    > http over KNX

    Das les ich erst jetzt. Wat.

    Uncategorized

  • @G33KatWork wenn du dir KNX Telegramme anschaust und verstehen willst, was da genau übertragen wird… Was nimmst Du da?
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @ixs Net'n Node ist sehr low level, aber auch sehr nützlich.
    Alternativ gibts noch https://github.com/henfri/knx-lens

    Uncategorized

  • @G33KatWork wenn du dir KNX Telegramme anschaust und verstehen willst, was da genau übertragen wird… Was nimmst Du da?
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @ixs USB geht, Tunneling geht, Sogar direktes Routing über deine Netzwerkkarte. Mach ich ständig.
    Wenn du ne dickere Lizenz hast *hust* kannste auch direkt Properties und Memory und sowas von devices lesen und schreiben. So debug ich meinen Stack immer.

    Uncategorized

  • @G33KatWork wenn du dir KNX Telegramme anschaust und verstehen willst, was da genau übertragen wird… Was nimmst Du da?
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    @ixs Weinzierl net'n node

    Uncategorized

  • The Okta subdomain of my old employer is so ingrained in my muscle memory that I still regularly visit it and try to log in with the credentials of my new employer.
    g33katwork@infosec.exchangeG g33katwork@infosec.exchange

    The Okta subdomain of my old employer is so ingrained in my muscle memory that I still regularly visit it and try to log in with the credentials of my new employer. And it takes me a few tries to realize why authentication fails all the time. 🫣

    Uncategorized
  • Login

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups