Hacker News: stragies

New comment by stragies in "Roundcube Webmail: SVG feImage bypasses image blocking to track email opens"

stragies — Sun, 08 Feb 2026 19:14:33 +0000

Hmm, I wonder, if roundcube was the exception (w.r.t feImage), or if soon other webmail clients will need to be patched

New comment by stragies in "TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy"

stragies — Fri, 19 Dec 2025 22:47:01 +0000

Is there a table of supported hardware, that contains info about the USB-connection (or ethernet) on these devices. Like, which have data-lines connected, can the device electrically do host and device mode? Can I use a POE2USBC adapter, that presents itself as a USB-network device to the camera? Ability to filter on those columns would be great. Is thingino using the Ingenic linux kernel 3.ancient SDK version, or do they have/use something newer?

New comment by stragies in "How I discovered a hidden microphone on a Chinese NanoKVM"

stragies — Sat, 06 Dec 2025 23:32:32 +0000

The manual, as OP said, does not offer any explanation, why the device might show up with an additional MAC/IP at the upstream switch port, and which services it might offer. OP sounds knowledgeable enough to be able to exclude the possibility, that the additional MAC/IP could be from one of the PCs, like e.g. when playing with VMs using an internal bridge in the Hypervisor.

Maybe the device has a bigger "cousin" device, that includes "control via APP", and this feature was not properly/fully disabled on this one.

New comment by stragies in "How I discovered a hidden microphone on a Chinese NanoKVM"

stragies — Sat, 06 Dec 2025 22:49:35 +0000

Was the network port bridged to both PCs all the time (as the description makes it sound, or did only the "active" PC get a functioning network connection? Could you tell from the FDB of the upstream device, if there were more than two MAC addresses active on the port? Did you (hopefully) open it up and make PCB pictures before chucking it?

New comment by stragies in "How I discovered a hidden microphone on a Chinese NanoKVM"

stragies — Sat, 06 Dec 2025 16:14:54 +0000

on many cards they are, check out the tool `hdajackretask` from package `alsa-gui-tools`.

New comment by stragies in "How I discovered a hidden microphone on a Chinese NanoKVM"

stragies — Sat, 06 Dec 2025 16:10:31 +0000

Many a soundcard supports changing jack "direction". Here's a StackExchange answer from 2012, on how to do it with the GUI tool `hdajackretask` : https://askubuntu.com/a/911961

New comment by stragies in "How I discovered a hidden microphone on a Chinese NanoKVM"

stragies — Sat, 06 Dec 2025 15:58:19 +0000

Why did you not just login to the device, and switched off "Broadcast to multicast", or changed the destination address?

Edit: Some brands of Network-KVM use this, so that you can control the target device from another device, like e.g. an App on a tablet. That way you don't have to stand next to the target device in the noisy and cold machine room

New comment by stragies in "A Library for Parsing Dutch Smart Meter Requirements (DSMR)"

stragies — Fri, 10 Oct 2025 21:48:01 +0000

Also Belgium, Luxembourg and Sweden according to https://www.home-assistant.io/integrations/dsmr/

New comment by stragies in "WinBoat: Run Windows apps on Linux with seamless integration"

stragies — Tue, 02 Sep 2025 08:27:07 +0000

Does this use MS-RemoteApp RDP extension (https://learn.microsoft.com/en-us/openspecs/windows_protocol...) under the hood?

New comment by stragies in "OpenIPC: Open IP Camera Firmware"

stragies — Mon, 04 Aug 2025 16:31:41 +0000

Thank you for your work! Can you recommend a compatible LAN POE camera available on Amazon(.de?)

New comment by stragies in "OpenIPC: Open IP Camera Firmware"

stragies — Mon, 04 Aug 2025 15:41:23 +0000

This project only seems to support Ingenic SOCs (as per https://github.com/themactep/thingino-firmware). A far cry from the list supported by openipcam.

Edit: But they have a list of product names, where they support installation of Thingino: https://github.com/themactep/thingino-firmware/blob/master/d...

New comment by stragies in "OpenIPC: Open IP Camera Firmware"

stragies — Mon, 04 Aug 2025 15:14:08 +0000

This is a list of SOCs, not a list of devices containing these SOCs.

And for most cameras sold, you'll have a hard time figuring out pre-buy, what SOC it contains.

New comment by stragies in "Show HN: I built this to talk Danish to my girlfriend – works with any language"

stragies — Tue, 15 Jul 2025 21:38:07 +0000

Those words also exist in Spanish, there the ending is "cion", and in Portuguese with ending "cão"

New comment by stragies in "The year of EU Linux desktop may come: digital sovereignty begins at the desktop"

stragies — Fri, 27 Jun 2025 19:29:24 +0000

Yes, more free beta-testing for Apple, Netflix, Cisco, Sony, and other large commercial users is definitely needed and beneficial to the development of the free world. Or so I've been told

New comment by stragies in "Banana Pi BPI-RV2 RISC-V gateway board"

stragies — Mon, 21 Apr 2025 11:53:23 +0000

From the DTS posted in another thread here, the board looks to be running a 5.10 Linux kernel. OpenWrt proper runs much newer kernel versions, so the board looks to be running a vendor fork of OpenWrt branched of already a while ago. Maybe they are planning to catch back up to regular/normal/mainline OpenWrt at some point.

New comment by stragies in "Banana Pi BPI-RV2 RISC-V gateway board"

stragies — Mon, 21 Apr 2025 09:44:47 +0000

How "trustworthy" is the "dedicated network processing accelerator (NPU) (supports L2/L3 hardware processing, IPv4/IPv6 dual stack, 20Gbps switching capacity, full byte wire-speed forwarding)"? Is it fully "hardware", auditable, or does/could it run some blob firmware with unknown/undocumented "features"?

New comment by stragies in "Fast-PNG: PNG image decoder and encoder"

stragies — Wed, 12 Mar 2025 20:19:15 +0000

Yes, calling something that is 2-3 slower than the reference "almost as fast" is a very creative use of the English language.

New comment by stragies in "Undocumented backdoor found in Bluetooth chip used by a billion devices"

stragies — Sat, 08 Mar 2025 17:14:45 +0000

Only buy ESP32 products, where you can access the pins for reflashing with ESPHome.

New comment by stragies in "Undocumented backdoor found in Bluetooth chip used by a billion devices"

stragies — Sat, 08 Mar 2025 17:11:13 +0000

With ESP32, always regard the vendor firmware only as proof-of-electrical-functioning. The first thing you should do with any ESP32 device after basic function test, is install ESPHome on it. If that's not possible, buy something different, where you can replace vendor fw.

New comment by stragies in "What if America turned off Britain's weapons?"

stragies — Fri, 07 Mar 2025 23:15:34 +0000

How much of the European capabilities do you think would remain after Microsoft, Apple, Cisco, Broadcom, Google, etc drop poisoned updates on to them at the next update/connection, scramble all the data, trigger endless bootloops? Disable Azure, AWS and iCloud for European IPs. Some messing with DNS and Cloudflare, along with using the flying stingrays (Starlink Satellites) to mess with mobile communication. Also pile up all Teslas at important traffic intersections into huge lithium battery fires.

Basically, it would send Europe back into the stone age, I fear. In under a week.