bana-io
Joined 7 months ago
Karma
7
Submissions
18
Member since
Mar 6
https://blog.bana.io and https://bana.io
View on Hacker NewsRecent submissions
Comment · 19 hours ago
Without a test-case, read POC, how do I verify if my server is affected?
Comment · 16 days ago
Deserves more up-votes, this does.
Comment · 1 month ago
I actually like the look of this, I especially like being able to set a serif font instead of whatever default is on https://news.ycombinator.com.
Comment · 2 months ago
Maybe I am missing something but where is the entire source code?
Comment · 2 months ago
You deserve a medal for that.
Comment · 2 months ago
> What has not worked with wifi 7 is MLO, openWRT doesn't really support it very well yet and neither did the original firmware
I think this is spot on. On a Banana Pi Pro 4E, the vendor supplied image which carries custom patches supports MLD/MLO, yet when I try the latest upstream OpenWRT it doesn't work. I've not had too much time to investigate the reason(s) why.
Comment · 2 months ago
It goes up in powers of two.
2, 4, 8 then 16.
Very nice.
Comment · 3 months ago
Keychron, I own two of your keyboards, actually three. If you want to send me an evaluation version of this mouse or even a sample reach out to me at [email protected].
Keep up the good work.
Biggest change I would request is a password before macros are allowed to be used. I store some sensitive information in macros because I hate typing them out so a feature to unlock macros when the device is first powered up would be great. Example:
1. Device powers off.
2. Lock macros keys.
3. Device powers on.
4. Show led indicating that macros are locked.
5. Enter password to unlock macros.
6. Led indicator turns green or some other colour to indicate that lock was successful upon entering password.
7. Macros can then be used.
Any other ideas would be great.
Comment · 3 months ago
I liked your post and I enjoyed reading it, who doesn't enjoy reading about Feynman?
But let's get scientific about this, you say:
> The test is absolute. There's no way to beat it; no way to fake
Where's the proof of that?
Comment · 3 months ago
Click biat. Sorry.
Comment · 3 months ago
I've created an issue in GitHub, please see https://github.com/NebuSec/CyberMeowfia/issues/46 (Samsung SM-S948B (S26 Ultra)).
It would be nice to get a `Dockerfile` to build the exploit/POC.
Comment · 3 months ago
So I took the risk and ran it on a Samsung S26 Ultra - I will confirm the full details once I have `adb` installed and running.
The exploit/POC (call it what you want) ran or appeared to have executed because:
1. I saw output on the Firefox tab when I navigated to <https://rootme.nebusec.io/b9e3f1a4-7c82-4d6e-9a51-2f8c4b3e0d...>.
2. I saw some output from the execution of the POC.
However, after I went to <https://rootme.nebusec.io/b9e3f1a4-7c82-4d6e-9a51-2f8c4b3e0d...> the phone froze and refused to respond to any input. The only thing that worked was restarting, which I wonder how it works given the, I think, the kernel has hung. Does anyone know how the kernel is able to respond to events whilst the system has hung? The screen remains on with the partial output of the execution of the POC until the screen saver kicks in ...
Comment · 3 months ago
Can you please provide a `Dockerfile` to build the POC/exploit?