Hacker News: ewpratten

New comment by ewpratten in "Software Pump and Dump"

ewpratten — Fri, 30 Jan 2026 14:26:21 +0000

I’m doing that (similar scale and same language) with a base model M4 mini. Works great. Anything more is overkill imo.

New comment by ewpratten in ""We have stratum zero at home""

ewpratten — Wed, 07 Jan 2026 14:56:06 +0000

I completely agree with you. In my opinion, using GPS as Stratum 0 feels like a cheat. I do hope to some day (definitely not any time soon) own an atomic clock of some kind though.

Regarding PPS, the L76B does this cheaty thing where it actually sends the PPS signal over UART. They provide a calculation to go from “Time of first byte” to a regular PPS signal on the receiving side.

"We have stratum zero at home"

ewpratten — Wed, 07 Jan 2026 03:57:23 +0000

Article URL: https://ewpratten.com/blog/gps-timekeeping

Comments URL: https://news.ycombinator.com/item?id=46522376

Points: 7

# Comments: 2

Authenticating SSH Sessions with Secure Enclave

ewpratten — Thu, 25 Dec 2025 01:37:58 +0000

Article URL: https://ewpratten.com/blog/ssh-secure-enclave

Comments URL: https://news.ycombinator.com/item?id=46381313

Points: 2

# Comments: 1

New comment by ewpratten in "How I protect my Forgejo instance from AI web crawlers"

ewpratten — Mon, 22 Dec 2025 12:24:34 +0000

Regarding the Cloudflare part of this, I’d recommend taking a look at “Authenticated Origin Pulls”. It lets you perform your validation at the TLS layer instead of doing it with IP ACLs if that interests you.

Fuzix on a Raspberry Pi Pico

ewpratten — Mon, 15 Dec 2025 06:31:39 +0000

Article URL: https://ewpratten.com/blog/fuzix-pi-pico

Comments URL: https://news.ycombinator.com/item?id=46271115

Points: 111

# Comments: 14

My snapshot-only Minecraft server

ewpratten — Fri, 21 Nov 2025 14:50:45 +0000

Article URL: https://ewpratten.com/blog/minecraft-snapshot-server

Comments URL: https://news.ycombinator.com/item?id=46005112

Points: 1

# Comments: 0

Preliminary Thoughts on the Jujutsu VCS

ewpratten — Tue, 12 Aug 2025 15:28:02 +0000

Article URL: https://ewpratten.com/blog/learning-jj

Comments URL: https://news.ycombinator.com/item?id=44877564

Points: 2

# Comments: 0

New comment by ewpratten in "Hurl: Run and test HTTP requests with plain text"

ewpratten — Fri, 20 Jun 2025 13:15:08 +0000

You should probably be looking at the Cargo.toml file(s) (for direct dependencies at least) instead of the lock file as the lock file will include dependencies used for dev/testing.

Learning (The Basics of) Nftables

ewpratten — Sun, 15 Jun 2025 19:44:51 +0000

Article URL: https://ewpratten.com/blog/learning-nftables

Comments URL: https://news.ycombinator.com/item?id=44284535

Points: 8

# Comments: 0

New comment by ewpratten in "Tailscale has raised $160M"

ewpratten — Sun, 20 Apr 2025 12:59:15 +0000

It’s automated in the kind of way that makes a lot of sense to people familiar with the internal HR systems.

Implantable SSH Credentials

ewpratten — Sun, 12 Jan 2025 22:51:34 +0000

Article URL: https://ewpratten.com/blog/implant-backed-ssh

Comments URL: https://news.ycombinator.com/item?id=42677818

Points: 1

# Comments: 0

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:51:03 +0000

Think of it like a subset of MIFARE.

In a simple sense, NTAG cards can do NFC things, but MIFARE can do lots more (access control for example)..and also NFC things..somewhat.

Magic mifare refers to special cards that let you bypass the write-lock of genuine mifare cards. These are mostly used for cloning keys (either for red-team pentesting or for people who want a copy of an office key for whatever reason)

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:48:52 +0000

All my knowledge is trial & error.

I've found the people over in the DT forum are pretty helpful with the cloning and usage aspect of things: https://forum.dangerousthings.com

Additionally, Iceman's Discord people has tons of smart people: https://discord.com/invite/iceman

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:38:06 +0000

Are you sure? The NFC app for iPhone can always read tags. Its specifically getting phones without the app to read them.

Try wiping, then writing a URL from Android.

Then just tap to the iPhone and see if Safari opens or not. It shouldn't

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:32:07 +0000

There's lots of info about the NDEF "packet" format online.

I used this page as reference when I was putting together the "magic bytes" in the final section of the blog post: https://www.oreilly.com/library/view/beginning-nfc/978144932...

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:23:19 +0000

Thank you very much!

Something's clearly up there. You can see that even IOS and Android disagree with each other on what NDEF should look like by a few bytes. Very interesting.

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:17:46 +0000

Wipe the card.

Make a dump after doing "hf mf ndefformat".

Then make a dump after writing a payload from an iPhone. (since iPhone seems to want ndefformat anyways)

Then wipe again and make a dump after writing from Android.

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:12:07 +0000

Ya, looks like the iPhone is tinkering with the NDEF message itself.

If my Android phone wasn't dead, I'd love to compare an iPhone's write against the Android NFC Tools app's write.

If anyone else has an iPhone, an Android phone, and a Proxmark, I'd be interested in seeing a three-way diff between them all.

EDIT: I'm going to try to cross-post to the DT forum to see if anyone has ideas.

New comment by ewpratten in "Coercing a Magic MIFARE credential into being an iPhone-compatible NFC tag"

ewpratten — Mon, 16 Dec 2024 02:10:04 +0000

There's approx 4 generations of "Magic".

Gen 1, 1a, 3 and 4 all use special commands to unlock and edit block 0.

Gen 2 treats block 0 as always being r/w. This allows Android phones to directly write to it (but also makes it possible to lock the card).

In terms of pm3 commands, "auto" tries everything. You might also want to use "lf search" or "hf search" to only try one of your antennas and not the other.

The actual Magic part isn't really important here, since my phone doesn't even care about block 0. It just makes it easier to read and wipe the card when you have the extra command set at your disposal.