TomAnthony
Joined 15 years ago
Karma
3,781
Submissions
478
Member since
May 17
Recent submissions
Comment · 3 days ago
Here you go: https://news.ycombinator.com/item?id=50285981
Free wifi sync of Withings Scales to your own server. Alas, not in Rust. :)
Comment · 3 days ago
In response to this, I set out to see if I could patch my scales to sync to my own server.
It only supports two models of scales so far, but I got it working. My Withings scales are now syncing automatically into Apple Health over wifi, and without anything going to Withings.
Blog post: https://www.tomanthony.co.uk/blog/withings-yow-free-wifi-syn...
Github project: https://github.com/tomanthony/YourOwnWeigh/
Comment · 16 days ago
The Withings app has just got consistently worse and worse over the last few years. I just wanted some scales that would sync to my phone and record my weight over time.
Now the app is absolutely bloated and I can barely find my weight, and the syncing has become _much_ less stable, and the app is constantly asking me to sign in again.
Amazing how they were from good, to bad, to terrible.
Comment · 4 years ago
I think this might have been true in the past, but I don't think it is true any longer. Zoom grew at a wild pace during the early days of the pandemic, and with that came security issues. However, they recognised that and invested into security.
I have previously reported bugs to Google, including one where they simply didn't put any auth on an API endpoint for a new feature, allowing access to any account's data. That is a massive oversight, but at Google scale we realise these things happen, and the more important consideration is how companies respond.
Zoom have a private bug bounty program, but I previously disclosed Zoom bugs publicly [1] as I didn't think their bug bounty program was worthwhile engaging with.
However, they overhauled it, and now of the dozens of private programs I am part of, Zoom's is one of the absolute best. The payouts are great, the team actively engages with the researchers, and seem to legitimately care about getting things right.
Are they perfect? Of course not. But I would feel safer on a Zoom call that call with many competitors who simply don't get as much scrutiny.
[1] https://www.tomanthony.co.uk/blog/zoom-security-exploit-crac...
Comment · 4 years ago
Thanks for the detailed reply! The Greaseweazle looks good and is inexpensive. I think I’ll get one. :)
Comment · 4 years ago
I have a bunch of 3.5" floppy disks from my BBC Master, which date back to late early 90s. Will the data on them still be ok?
If I bought a Kryoflux or similar device would I be able to access and save the data?
By night: I'm a hobbyist security researcher, and enjoy bug bounty programs.