Notices by Richard "mtfnpy" Harman (xabean@infosec.exchange)

@ryanc now do capacitor!

@ryanc you have every right to be fucking pissed about someone trying to deny you your existence.

@ryanc I mean no disrespect and I know nothing of this Kemi Badenoch individual, but how is this questioning of someone else's gender identity any different from deadnaming or intentionally mis-gendering then? This feels icky.

Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?

@tychotithonus if you want to poke at it, here you go -- this is for a Yealink SIP phone. Strings in the firmware nearby suggest the password is YealinkPhone1106 but it doesn't seem to work on my hardware; which might be due to the fact that there's a config partition that overlay mounts a shadow file overtop of /etc/shadow from the ROM:

root:$1$.jKlhz0B$/Nmgj0klrsZk0nYc1BLUR/:11876:0:99999:7:::

@tychotithonus dunno what is in the /yealink/config filesystem yet. Haven't found a way into the device yet. I *did* manage to figure out how to enable telnet, through config it fetches via provisioning.

@tychotithonus cool, thank you. I appreciate it, this is an area I'm not well versed in :)

@morb @tychotithonus mmm whelp I bumped up the logging level through config, and I see when I try to telnet in with root/toor/admin/yealink any username all results in:

login[480]: invalid password for 'UNKNOWN' on 'pts/0'

@morb Oh neat, does this URL work on your phone? /servlet?p=hidden

@morb @tychotithonus my head was in the same place - the "diagnosis" page that apparently had straight up shell injection isn't in the firmware I'm running on this phone, and now I'm digging into some of the MACADDRESS.cfg provisioning files and related XML translation on the phone checking what gets (ab)used by grep into shell variables, etc.

@morb

always fun when running strings on a piece of firmware and you find:

user:s7C9Cx.rLsWFA
var:jhl3iZAe./qXM
admin:uoCbM.VEiKQto

@vathpela sorry, I'm mistaken it's even better https://dotat.at/email.html

@vathpela this reminds me of the internet lore of `at@dot.at`; an internic contact e-mail address for a domain name. I'd love to hear someone give this over a phone.

It's always hilarious to me when a person at $COMPANY thinks my e-mail address is obviously wrong, or that I work for them.

Most recent was my bank, previous was Garmin. "Wait, your email is garmin@[...]? Do you work for us?"

@tinker my insurance wanted to cheap out on sleep study, then ended up paying for an in-clinic overnight sleep study because the cheap "at home" sleep study came back inconclusive.

Then the hot mess of "Okay we're renting you the CPAP machine, and if you don't use it we're going to revoke it" so I said "fuck this noise" and paid $900 out of pocket for my machine.

I'm also increasingly frustrated in the (presumably illegal) practice of de-bundling replacement *parts* of consumables. You want new air filters? You get two. Every <n> months. New face mask? You get one, every <n> months. New water tank? You get one, every <n> months.

Motherfucker, I'mma go on Amazon and get a 48pk of air filters for $2 and cut out the middle man individually repackaging single filters in an 8x11 plastic bag for a filter that is 1x2 inches.

I swear it's a all kickback pyramid scheme.

@Da_Gut @tinker I have a full face mask and love it. Intentionally went w/ a mask because I didn't want dry mouth waking up every morning from air being blown up my nose and out my mouth.

Experiences vary.

Did they not learn from theranos, SBF, etc?

This is in my .wgetrc.
This makes me laugh.
I got it from a pbs.org webserver log over a decade ago, @mikewebkist might have seen it once in the past.
Occasionally I get messages like "Stop hacking my website".

user-agent=Mozilla/5.0 compatable (All your base are belong to us!!; Macintosh %d%sUnix NT Netscape Linux Internet Explorer; I U; en-US;" Happy parsing! < script > <!--

@darthnull @ryanc I *think* the lighting standard you're looking for is DMX?

@silverwizard don't look at me, I'm stuck under Gnome's wayland garbage and want to run FVWM.