HNHacker News
TopNewBestAskShowJobs

sp00ls

162 karma · joined January 22, 2016

submissionscomments
sp00ls··on Otonomo, with nearly $55M in funding, is cloning our product
A lot of new cars do have internet built in whether that is exposed for your use or not.

My 2014 Chevy gave me 2 years of their mobile app which could unlock/lock the car via cellular for free. I know the car still has a data connection available because if I play songs via bluetooth it pulls in album art that doesn't exist on my phone via Gracenote. I can also hit the OnStar button and talk to someone via the car and I don't pay for that.

That Chevy lock/unlock API may not be a public API but there is nothing stopping someone from reversing it. Or just signing up to use it: https://developer.gm.com/vehicle-apis

Most modern cars offer the same features.

sp00ls··on Reasons to turn down the transmit power of your Wi-Fi (2017)
I don’t understand, what you’re saying doesn’t really make any sense. Were they also using Ethernet over power devices? Even so they typically have a setup process that negotiate the encryption keys between devices in your own home.
sp00ls··on Tiny PWAs and why I keep building them
Is it really that scary? Ok maybe it isn't perfectly accurate but so what? He might be going 33 instead of 30..doesn't really matter.
sp00ls··on Tiny PWAs and why I keep building them
Why not? Do you think any sensible driver would overshoot/undershoot their speed by any meaningful amount without noticing? Like without a speedometer everyone would just accidentally go 100mph everywhere or something?
sp00ls··on Public access Linux system: Your non-profit shell provider since 2002
Having to send in a physical postcard before account activation probably helps with that.
sp00ls··on U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service
I noticed the same thing with the see through envelope part. I live in an apartment and get mail in my informed delivery dashboard addressed to past tenants at this address all the time. The system seems to only care about address, not name. The mail never arrives (possibly due to forwarding?) but I can read the first page of about half of it. It does seem to have gotten slightly better but I just checked my last few emails from USPS and I can still make out words through the envelope. I'm sure with a small bit of image manipulation I would be able to read them clear as day.
sp00ls··on This is the best drone according to Amazon? – The HS100
Are counterfeits listed as brand names that big of a problem on Amazon? I make most of my electronics purchases from Amazon (tons in the last few years) and have never received a counterfeit item to the best of my knowledge.
sp00ls··on Apple self-driving car in accident: California DMV filing
The person you were replying to was talking about adaptive cruise control and automatic breaking. The majority of cars on the road do not have those features. Very different than plain acceleration and braking and much more likely to have glitches.
sp00ls··on OpenBSD's httpd gets URL rewrite
Apache or Nginx would give you the same experience with a default install. Path would vary between the 3 of course.
sp00ls··on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic
Neato. Well dude you got your answer, take it or leave it. I understand acting dumb and trolling is fun too though.
sp00ls··on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic
"Location tracking and shared marketing databases"
sp00ls··on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic
Your pocket is irrelevant. Location tracking and shared marketing databases have nothing to do with what was in your pocket.
sp00ls··on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic
Highly unlikely. More likely they're using location tracking or a shared data source to know that you like that specific coffee place.
sp00ls··on Spotify Form F-1
This looks great, I'm definitely going to give it a try. Spotify has been slowly driving me crazy with the same exact songs in my daily mixes day after day just reshuffling.
sp00ls··on In One Tweet, Kylie Jenner Wiped Out $1.3B of Snap's Market Value
Reddit is looking like they might suffer a similar misstep. Not quite on the same level as Digg suffered for a number of reasons but still. They've been slowly rolling out and previewing a UI redesign. Comments on their UI redesign preview posts are overwhelmingly negative but they just keep pushing forward anyway. I don't understand why this is almost always the case.
sp00ls··on Apple Maps vs. Google Maps vs. Waze
He totally missed the main reason most people use Waze. Crowd sourced speed trap locator.
sp00ls··on Monthly Amazon Prime membership fees are about to increase
The problem I have with that is that the delivery time often goes past the week mark. If I'm going to wait over a week to receive the item I might as well just order from somewhere like banggood which also has free shipping and is usually a dollar or 2 cheaper. I don't really care about Amazon pantry or free digital downloads so that incentive doesn't provide any value to me.
sp00ls··on The ‘app’ you can’t trash: how SIP is broken in High Sierra
Every app I've installed that wants accessibility access follows the same steps from the comment you replied to. You must explicitly unlock that pane with your password after clicking the lock and then enable the app to have accessibility access.
sp00ls··on Apple’s New iPhones Get a Lukewarm Reception from Buyers
That isn't true at all.
sp00ls··on Bayangtoys X16: Inexpensive, durable, hackable GPS drone
Maybe I worded that incorrectly. What I mean is that you would be fine giving a kid a brushed quadcopter without worrying that they're going to filet themselves (for the most part. Yeah they could cut themselves but the damage would be order of magnitude less than with a brushless). Giving a brushless quadcopter to a kid without any instruction would be totally irresponsible. They're still toys yeah but can be pretty dangerous if you're careless.
sp00ls··on Bayangtoys X16: Inexpensive, durable, hackable GPS drone
Totally different classes, the bayangtoys is a brushless copter while the sky viper is a very lightweight brushed copter. Brushless will have an insane amount of power compared to brushed motors. Plus the ones on the sky viper are tiny.

The sky viper will hold well in crashes, you can pick up the non-gps version at Walmart. It's a kids toy so its made to be durable. That being said..if you're crashing your GPS assisted quadcopter you're already doing it wrong. I'm not really sure what applications a brushed GPS assist copter has though. It isn't powerful enough to carry any sort of payload and the camera quality is limited severely by that fact. Maybe useful for learning/tinkering with the code without the blender-ing capability that brushless motors have I guess.

sp00ls··on Bitcoin has crossed $6,000 USD for the first time
Similarly, I was living in dorms (free electricity) at the time bitcoin made its debut (well not really, but it was still very early). I started mining using my fairly beefy desktop. After months I decided it wasn't worth the small amount of 'money' I had made and just deleted everything. That PC is long gone, wonder how much money I would have now if I still had that wallet. Damn.
sp00ls··on SharknAT&To: Vulnerabilities in AT&T U-verse modems
Not nearly as large as ATT U-Verse but I found a similar vulnerability in the modem I was provided from a rural DSL provider a few years ago.

It all started when I called to get the admin credentials so that I could open a port. They refused, stating that they use the same PW on all of them so they couldn't provide it to me.

After a day or 2 I found a vulnerability in the WebUI that dumped the password to my browser. Did a shodan scan and found hundreds of these modems connected to the internet. What they said was true, that password worked on the 2-3 I tried just out of curiosity.

I tried reporting my findings to them but they didn't seem to care. So I just changed the password on the one provided to me and let it be.

Now I live elsewhere and use my own purchased modem/firewall/wap. Can't trust ISPs to care about your security.

sp00ls··on Subscription is the only way to do software
please delete my account here.
sp00ls··on Subscription is the only way to do software
ze
sp00ls··on VPN Report – Reviews of the top VPNs
Which is so strange because in in the technical category they're one of the best. Shopping for a VPN provider 2 years ago I almost passed them right by due to how the site looks. So glad I dug a little deeper and eventually chose them because the service 'just works' and 2 years later I don't have a single complaint.
sp00ls··on VPN Report – Reviews of the top VPNs
Lol this site is a joke, how much is TunnelBear paying him for the top spot? They're the only VPN provider I see consistently spending money on marketing and sponsoring YouTube videos. 'Fun to use'..what? I don't care if my VPN is 'fun', I want it to protect my privacy.

He mentions that 2 of the VPNs are 'uninspired'. Sorry, I didn't realize that tunneling traffic to protect privacy was an art project and not a technical one.

FWIW I've used PIA for 2 years now with no issues. A TON of torrenting has gone through them and they don't care in the least. In addition when their Russian servers were seized I received an email immediately letting me know their current situation and about their key changes due to the event. Plus they no longer do business in that location due to it. Pretty top notch company in my eyes even if their site does look 15 years old.

sp00ls··on Dell XPS 15 9560 Review
Same..Look at the comments for an XPS/whatever manufacturer flagship device release and you'll find mostly 'this works great except sometimes it explodes' and then back and forth a bunch of times where someone claims that it works for them, while someone else brings up something else that randomly doesn't work for them.

No thanks..

sp00ls··on Amazon AI Designed To Create Phone Cases Goes Wrong
I could actually see the 'old woman with asthma inhaler' one being an actual product. The rest..not so much.
sp00ls··on Escaped inmate may have used wire cutters delivered by drone
The reason they haven't released anything since the Phantom 2 is because that was the last DJI drone before they started using the Lightbridge protocol. Lightbridge (and now OcuSync) have strong encryption and have not been broken yet AFAIK.
Page 1 of 2Next →