ColdHeat

5 ms·

1.
by ColdHeat 4y ago
Sure I took out the relevant section and put it here: https://docs.google.com/document/d/e/2PACX-1vTYSTUp3eTjfD-hG...
2.
by ColdHeat 4y ago
Thanks for letting me know. I will have to take a look. I setup Ghost a long time ago and just really use it for the blogging...
3.
by ColdHeat 4y ago
Yes the exploit removes the AWS IoT connection so that updates can come from the recreated API. There was only one type of sign but it did come in various different cases.
4.
by ColdHeat 4y ago
I actually had written more about the exploit & vulnerability in my original drafts but I cut it out because it was a bit boring to read. You are correct that with domain control I am able to serve content to any sign but the content wi
5.
by ColdHeat 4y ago
Here's my reply to him from https://news.ycombinator.com/item?id=34328461 > Good question! No signs connected to the server until I reached out to some other sign owners to try out my instructions. I do not know how
6.
by ColdHeat 4y ago
Yes I reached out to another owner who was able to connect the sign to the API. I've reached out to more people but haven't gotten too many responses. It's been 5 years after all. If you know anyone with one of these signs se
7.
by ColdHeat 4y ago
Good question! No signs connected to the server until I reached out to some other sign owners to try out my instructions.
8.
by ColdHeat 4y ago
The key point here would be "did things correctly" :) The sign did use AWS IoT for real time configuration updates however initial configuration was pulled from their HTTP server. Using the vulnerability I describe in the article
9.
by ColdHeat 4y ago
I had found some tweets by the company where they talked about using an Adafruit panel that was $40. The price on Amazon was about $30 so I figured I would go with the lower price. They may have switched to a lower cost panel but my guess i
10.
by ColdHeat 4y ago
Another explanation that I saw [0] was that it was for people to pop the back panel out. I think this is the most likely explanation but it didn't occur to me while working with the sign. I feel like a little notch would have been more
11.
by ColdHeat 4y ago
Thank you for the kind words! Made my morning!
12.
by ColdHeat 4y ago
Hello, author here. Happy to answer any questions! My apologies for the downtime, I wasn't expecting much traffic today since I submitted the post to HN yesterday but I've started scaling my server now!
13.
Taking over a Dead IoT Company(blog.kchung.co)
4 points by ColdHeat 4y ago|0 comments
14.
by ColdHeat 4y ago
With regards to 3, isn’t the management plane alone $72 for GKE without considering the cost for the nodes? How are your costs so low?
15.
FDA orders Juul to pull all of its vaping products from the U.S. market(npr.org)
10 points by ColdHeat 4y ago|2 comments
16.
Former Seattle tech worker convicted of wire fraud and computer intrusions(justice.gov)
1 points by ColdHeat 4y ago|0 comments
17.
Compass to Cut About 10% of Workforce Amid US Housing Slowdown(bloomberg.com)
5 points by ColdHeat 4y ago|0 comments
18.
by ColdHeat 4y ago
I've eaten their strawberries and they're pretty good! The berries are held in a plastic tray with the berries individually floating on plastic wrap so they don't get squished from their own weight. While I don't think t
19.
Betterment Announces Crypto Portfolios(betterment.com)
2 points by ColdHeat 5y ago|0 comments
20.
by ColdHeat 5y ago
The Gitlab integration for Pages is also pretty immature. It doesn't appear to currently work with Groups/Subgroups. I've been back and forth with people on their Discord for maybe a week now trying to just get it setup for a
21.
by ColdHeat 5y ago
I would be very interested if you or tsholmes could discuss the thought process behind identifying and reverse engineering the format!
22.
by ColdHeat 5y ago
It seems doable. You can edit it under runtime settings: https://aws.amazon.com/blogs/aws/aws-lambda-functions-powere... .
23.
Marvel Character or Font?(marvel-or-font.web.app)
2 points by ColdHeat 5y ago|0 comments
24.
Is USDC Another Tether?(singlelunch.com)
2 points by ColdHeat 5y ago|0 comments
25.
by ColdHeat 5y ago
I believe the owner is https://twitter.com/levicook https://github.com/levicook ?
26.
by ColdHeat 5y ago
I used to use this site until I found https://checkip.amazonaws.com/ . Switched because I wasn't sure who was behind icanhazip.com and it's tough to beat AWS. Glad to hear that it will likely be maintained for awhi
27.
by ColdHeat 5y ago
Sure, I reported an issue to the Gogs maintainer over two weeks ago and he hasn't acknowledged it at all. Here's the public reference that their SECURITY.md asks for: https://github.com/gogs/gogs/issues&#
28.
by ColdHeat 5y ago
The gogs maintainer currently seems to not be doing much with it and seems to be ignoring security reports. I would probably recommend the gitea fork instead. https://github.com/go-gitea/gitea
29.
Faster Python with Go shared objects(blog.kchung.co)
1 points by ColdHeat 5y ago|0 comments
30.
by ColdHeat 6y ago
I mostly agree here but I'm not really sure that Podman has replaced Docker. I'm also curious how you're determining that Podman is superior to Docker?

More ›