When I was a teenager we had some natural disaster and the highschools had to share sites, the way they did it was we did school 12-6. We would eat dinner togeather after school I think we enjoyed it despite not being…
Flytraps! Probably easier than finding rces
I love these HiSilicon boxes, take a look at the OpenIPC project if you want to secure your device. It's open source firmware for these boxes, I want to give a big shoutout to Igor Zalatov and Flyrouter for all their…
@thu2111 He's giving you an attack chain. If you rebind the dns server of the modem with a snmp/tr069 exploit you could redirect/inject into the http traffic a page that contained the javascript payload to exploit the…
I recently had the frustration of trying to use a Vodafone ISP Supplied modem. It had a propietary interface which didn't allow using the modem as a bridge to a network not on a vlan. Along with the help of the awesome…
I'm more getting at the facy that this is a link to reading an article Not a link to a who-can-get rid of the popup the best contest We're the people that build these systems and this is about design and usability and…
The New Zealand Nuclear Free Zone, Disarmament and Arms Control Act 1987 is arguably the strongest anti-nuclear weapon domestic legislation in the world. It bans nuclear weapons and propulsion from New Zealand's land,…
Too many popups I quit
In most javascript sandboxes if you request a domain from an site you are restricted by the same content policy. This makes it harder to do things like make requests to sites for example that don't use https when your…
also no support for plugins web interfaces on chrome headless meaning every time you want to test a plugin you have to bring up a virtual X11 server to deal with it
I work with chromium using chromes debug protocol (CDP) to do automation. You'd be suprised how much of the browser your dealing with as a facade- they sell things like a headless browser that don't oblige by the most…
Theirs only two types of sandwiches
I'm currently bootstrapping an api/sass that takes any url and converts it to an image. It runs on top of chromium and uses the CDP protocol to do cool things like automate basic auth, custom http headers, injected js,…
I used something similar to this in the past to evade traffic manipulation on a controlled network. Iodine gives you a full tun/tap connection and encapsulates an ipv4 connection over dns null requests and responses.…
And those buttons sure look like amazon buttons
What about len(str('12345')) If your teaching python you may as well take advantage of the standard library
I think you can force load a plugin in chromium headless with a command line argument. Last time I checked the issue was accessing the html dom of the extension e.g chrome-extension://blahblahblah as it only returns a…
I generally find other people to hit me with a broom until I finish the project I'm currently working on. This is not renewable because generally these people don't fully understand the product I am building and at the…
Hi, I was wondering if anyone could answer a couple of questions how this application interfaces with CPEs and how it compares to existing tools (TR-064/TR-069). So I understand messages are passed over http 1. how does…
What if one community has money to spend on drones, While the other does not? What if both communities have enough money and value human life so they just send endless drones at each other smashing said drones into…
I think mental diversity in the workplace is something to be encouraged not ostracized. Personally I find both Terry and Dale to be great, well informed reads despite a bit of what someone else labeled self depreciating…
Thanks for the comment- I haven't used Serveo personally, but it looks like a product that ticks pretty much all the boxes my setup goes for without all of the configuration- And their not trying to sell me something +1…
I've used ngrok in the past for exposing local projects but didn't like being time limited and then having someone try to sell me something. The setup I went with is I forward my local http servers port over an ssh…
buy a .edu email, use google compute till you have an MVP to sell
Chromium on mobile has always had issues with AMP for me, I've just come to acept it I think it's wrong for a monopoly to take control of what another entitys site looks like. It's a we can take care of EVERYBODY…
When I was a teenager we had some natural disaster and the highschools had to share sites, the way they did it was we did school 12-6. We would eat dinner togeather after school I think we enjoyed it despite not being…
Flytraps! Probably easier than finding rces
I love these HiSilicon boxes, take a look at the OpenIPC project if you want to secure your device. It's open source firmware for these boxes, I want to give a big shoutout to Igor Zalatov and Flyrouter for all their…
@thu2111 He's giving you an attack chain. If you rebind the dns server of the modem with a snmp/tr069 exploit you could redirect/inject into the http traffic a page that contained the javascript payload to exploit the…
I recently had the frustration of trying to use a Vodafone ISP Supplied modem. It had a propietary interface which didn't allow using the modem as a bridge to a network not on a vlan. Along with the help of the awesome…
I'm more getting at the facy that this is a link to reading an article Not a link to a who-can-get rid of the popup the best contest We're the people that build these systems and this is about design and usability and…
The New Zealand Nuclear Free Zone, Disarmament and Arms Control Act 1987 is arguably the strongest anti-nuclear weapon domestic legislation in the world. It bans nuclear weapons and propulsion from New Zealand's land,…
Too many popups I quit
In most javascript sandboxes if you request a domain from an site you are restricted by the same content policy. This makes it harder to do things like make requests to sites for example that don't use https when your…
also no support for plugins web interfaces on chrome headless meaning every time you want to test a plugin you have to bring up a virtual X11 server to deal with it
I work with chromium using chromes debug protocol (CDP) to do automation. You'd be suprised how much of the browser your dealing with as a facade- they sell things like a headless browser that don't oblige by the most…
Theirs only two types of sandwiches
I'm currently bootstrapping an api/sass that takes any url and converts it to an image. It runs on top of chromium and uses the CDP protocol to do cool things like automate basic auth, custom http headers, injected js,…
I used something similar to this in the past to evade traffic manipulation on a controlled network. Iodine gives you a full tun/tap connection and encapsulates an ipv4 connection over dns null requests and responses.…
And those buttons sure look like amazon buttons
What about len(str('12345')) If your teaching python you may as well take advantage of the standard library
I think you can force load a plugin in chromium headless with a command line argument. Last time I checked the issue was accessing the html dom of the extension e.g chrome-extension://blahblahblah as it only returns a…
I generally find other people to hit me with a broom until I finish the project I'm currently working on. This is not renewable because generally these people don't fully understand the product I am building and at the…
Hi, I was wondering if anyone could answer a couple of questions how this application interfaces with CPEs and how it compares to existing tools (TR-064/TR-069). So I understand messages are passed over http 1. how does…
What if one community has money to spend on drones, While the other does not? What if both communities have enough money and value human life so they just send endless drones at each other smashing said drones into…
I think mental diversity in the workplace is something to be encouraged not ostracized. Personally I find both Terry and Dale to be great, well informed reads despite a bit of what someone else labeled self depreciating…
Thanks for the comment- I haven't used Serveo personally, but it looks like a product that ticks pretty much all the boxes my setup goes for without all of the configuration- And their not trying to sell me something +1…
I've used ngrok in the past for exposing local projects but didn't like being time limited and then having someone try to sell me something. The setup I went with is I forward my local http servers port over an ssh…
buy a .edu email, use google compute till you have an MVP to sell
Chromium on mobile has always had issues with AMP for me, I've just come to acept it I think it's wrong for a monopoly to take control of what another entitys site looks like. It's a we can take care of EVERYBODY…