76 Followers
430 Following
396 Posts

Interested in FOSS, cyber security and ecofriendly technology.

Hacking on #alpinelinux in my free time.

pronounshe/him or anything else

Here my notes for getting a root shell on a dLAN 1200+ WiFi ac (not pro) through the web interface: https://paste.sr.ht/~sertonix/d0895b2daf3f1d704bb849bf7a7e24af3f2356ce

The TLDR is that the configuration export/restore exposes UCI files which can be used to configure extra web servers.

This IRC bot is so hilariously simple that I don't know where to put it:

printf 'NICK <name>\nUSER <name> 0 * irc.oftc.net\nJOIN #<channel>\nPRIVMSG #<channel> :<msg>\nQUIT\n' |
openssl s_client -connect irc.oftc.net:6697 -quiet -pass env:IRC_BOT_KEY -no_ign_eof

@navi

Maybe always use a .sh suffix as convention? Having .sh at the end of command names is relatively uncommon

Is a root shell on an IOT device through the configuration interface worth reporting to the vendor?
Boring disclosure
20%
More time for people to reverse engineer
80%
Poll ended at .

Reminder for those who may not be aware that those "fancy/custom text" things using special unicode characters that bypass ASCII fonts to make your name look cool or fancy or whatever ruin accessibility, like hard.

They break screen readers hard, since most, if not all, don't know how to handle them properly and end up pronouncing something like "Special character S" or whatever. They're also significantly harder to read than a user's chosen font, or the default fonts on any reasonable operating system or website, especially for neurodivergent and in particular dyslexic people.

Please stop using them, and maybe nudge your friends to stop using them.

Boosts appreciated for awareness

#Accessibility #FancyFonts #Neurodivergent #Boostswelcome

@navi @domi @toast

$() strips trailing newlines. It would need to be var=$(printf 'foo\nx'); var=${var%x}

@SRAZKVT

Something like client side filters in lua would be nice for such cases

@SRAZKVT @ska @navi @humm

I know it and I hate it :)

@ska @navi @humm

Allow expressing semantics and intentions more clearly. But I don't think it really helps much without having a more complex type system than C has. Eg. casting from fd_t to uid_t or adding 1 to a fd_t value is semantically nonsense and would ideally cause a warning.

A brainfuck interpreter in POSIX bc might not be very usable but it now exists anyways   

https://codeberg.org/sertonix/brainfuck/src/branch/main/bf.bc

brainfuck/bf.bc at main

brainfuck - Brainfuck interpreters collection

Codeberg.org