HNHacker News
TopNewBestAskShowJobs

evilsocket

592 karma · joined May 27, 2013

[ my public key: https://keybase.io/evilsocket; my proof: https://keybase.io/evilsocket/sigs/VDtuzuzNnHYzye8eCGBNeEMFn6rY1OfIKXiCexW0g0s ]
submissionscomments
evilsocket··on GitHub's fake star economy
It does not make the numbers, research and original research on top of which this is based, wrong :D
evilsocket··on GitHub's Fake Star Economy
that's exactly the next-round attack. StarScout's network-centrality defense works for the current generation of campaigns but won't survive LLM-generated PR/commit patterns
evilsocket··on GitHub's Fake Star Economy
Agree that sophisticated funds don't, but the ecosystem hasn't caught up. StarHub/GitStar pricing pages still sell to "seed-stage founders pre-fundraise"
evilsocket··on Mongoose: Preauth RCE and MTLS Bypass on Devices
Mongoose network library <= 7.20

CVE-2026-5244 - mg_tls_recv_cert pubkey heap-based overflow (exploitable), CVE-2026-5245 - mDNS Record stack-based overflow (exploitable), CVE-2026-5246 - authorization bypass via P-384 Public Key (trivially exploitable)

Fun ride.

evilsocket··on Claude Code Taught Itself to Escape Its Own Sandbox
we are so fu*ed
evilsocket··on TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy
Agreed 100%, never said the opposite
evilsocket··on TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy
I just meant that it was very convenient to have the firmware images there on S3, nothing else :D Many vendors make the process of even just obtaining a copy of the firmware much harder than that, so for once I was glad it has been much easier. Also being able to bindiff two adjacent versions of the same firmware is great ... all in all I was just expressing my happiness :D
evilsocket··on TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy
Do you people realize that there's a big difference between open source and proprietary technologies right?
evilsocket··on Open sourcing Nerve, a tool to instrument LLMs to perform tasks, without code
Nerve is a tool that creates stateful agents with any LLM — without writing a single line of code. While it was inspired by other projects such as Autogen and Rigging, its main goal and core difference with other tools is to allow the user to instrument smart and stateful agents without writing code (unless required for custom functionalities).
evilsocket··on Reverse Engineering Apple’s Multipeer Connectivity Framework
lol thank you ... yes they did
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
as long as i know, you definitely need root to communicate with netlink .... i don't think there're gonna be large packet flows, only first connection packets tnx to conntrack, it's doable :)
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
Ahah not really 24/7, but you're almost there :) it's my way to repay the OSS community for everything I learned from OSS during my life.
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
As I said, it'll be in C++, Go is great, Rust too, but I just can't get used to their syntax :D
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
OpenSnitch is not only about ftrace, check the NFQUEUE handling, moving to native will improve performances and stability. Also, it requires root because that's the only way it can install the iptable rules it needs in order to function properly.
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
OpenSnitch author here ... although performances are not a big deal here because only conntrack packets are intercepted, the project will move to a C++ implementation once the current Python prototype/PoC will be complete and will prove that what I want to do is 100% doable on GNU/Linux :)
evilsocket··on OpenSnitch – A Linux clone of the Little Snitch application firewall
OpenSnitch author here ... that's exactly the direction the project is going, C++ daemon running as root and low privileged UI in Python or whatever. The current implementation is more of a PoC/test to see the whole logic working before starting the real thing :)
evilsocket··on Reversing the Smarter Coffee Machine Protocol to Make Coffee Using the Terminal
absolutely! :D
evilsocket··on Reversing the Smarter Coffee Machine Protocol to Make Coffee Using the Terminal
ooooops, I didn't see that ... anyway, mine looks more complete so it wasn't 100% wasted time :D
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
now you know :)
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
i write posts in markdown, they're then "compiled" into html, I should fix the software I'm using ... but as long as it works, for me it's ok, being it styling or markup :)
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
that should be fixed now, thanks
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
I'm not really sure who you're talking to ... they asked me to use Signal, honestly I didn't really care ...
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
ahaha of course not! :D
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
to be honest, finding out that someone else disclosed something very similar in the past has been a big contribution to my final decision to publish the post.
evilsocket··on How the United Arab Emirates Intelligence Tried to Hire Me to Spy on Its People
I didn't know that! ... anyway, yes I'm afraid, I just did what I felt to be my "duty" and hope for the best :)
evilsocket··on Living Only on Bitcoins
not where I live
evilsocket··on Living Only on Bitcoins
i pay my rent and bills with wire transfer, same goes for 99% of my purchases ( mostly on amazon ) ... my paycheck is sent me as wire transfer as well ... how am I supposed to live just on cash? :) I only use cash to buy cigarettes basically ... using only cash would make my life very, VERY, hard.
evilsocket··on Living Only on Bitcoins
unfortunately, at least for me, keeping everything in cash is not a viable solution
evilsocket··on Living Only on Bitcoins
The difference is that with those services, you can always close your account and switch to a new one ( that's why I've specified to avoid using them as your primary wallet ) ... on the other hand, if a Bank goes bankruptcy, it's not that easy to recover your money.
evilsocket··on Living Only on Bitcoins
i pay my rent and bills with wire transfer, same goes for 99% of my purchases ( mostly on amazon ) ... my paycheck is sent me as wire transfer as well ... how am I supposed to live just on cash? :) I only use cash to buy cigarettes basically XD
Page 1 of 2Next →