• 5 Posts
  • 131 Comments
Joined 2 years ago
cake
Cake day: June 1st, 2023

help-circle
  • I’ve bought a number of raspberry pico chips abs a pack of generic esp32s over the last few years and every time I think I have enough as backups I suddenly find more uses for them! I have an old floor radio converted to act as a light/dimmer control, makeshift hvac control, and flip a night light (also made from a pico w) in the bedroom, another one in the living room in a little coffee table box using home assistants api over WiFi. I also have 3, soon to be four (adding some really fun electromagnet parts) to convert an old electric organ to a full virtual pipe organ. This project was what got me started, the “off the shelf” conversion kits looked like they were running off an esp32 ish and mcp23017’s and cost $1,500-2,000 for just the pcbs, no wiring and no speakers etc. doing it with the picos and a crap loads of doorbell wire $160+$600 for high quality speakers, and $260 for a touch screen and vesa arm. So complete project cost me $600 less than just the pcbs. The fourth one I was waiting for cheap used parts to appear on eBay, they are insanely expensive new ($30-50 each) and I need 56 of them. It’ll be a similar price saving at the end of the day!

    Long ramble to say these chips are cheap and don’t take long to help make life more convenient, and sometimes way cheaper if the project was niche.



  • The new attack, named Pixnapping by the team of academic researchers who devised it, requires a victim to first install a malicious app on an Android phone or tablet. The app, which requires no system permissions, can then effectively read data that any other installed app displays on the screen. Pixnapping has been demonstrated on Google Pixel phones and the Samsung Galaxy S25 phone and likely could be modified to work on other models with additional work. Google released mitigations last month, but the researchers said a modified version of the attack works even when the update is installed.








  • I use bsd containers for everything but home assistant on my home server and love them! The downside for most people at the moment is having to set them up manually. I can export the thin jail and move the archive across computers as backups and the fine tuned control is beautiful. FreeBSD offers a way to check for security vulnerabilities in installed packages (pkg audit -F) that I run as a cron job and email myself daily to check for needed updates.

    Problem is most people want a single docker install and it’s all set up, not something that needs manual configuration. Bastille has templates that can do this for bsd jails but there’s not a lot of services with templates.

    Edit: also frustrating is a lot of new apps for home servers only offer a docker install so installing from source becomes a huge pita and makes bsd jails harder to use (looking at you gramps-web specifically).