Live data from Hacker News

Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

github.com

61–70 of 82 posts

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#62
post #47

Earlier quoted context omitted.

I’m not sure I’ll ever understand HN aggression with certain downvotes. This is the OP from Italy and likely English is not their first language. Why is this comment so bad?

[flagged]

[flagged]

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#63

This rocks; the idea of flipperzero phoning home is the(my) primary concern given its use case

Edit for all replies: I'm coming from a place of lack of education; it's not that I know FZ is phoning home, it's that I know I wouldn't be able to tell if it was.

considering it has no wifi or gsm capabilities that is going to be pretty hard trick to achieve

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#64

What is going on with the PCB? It looks like the soldered several dev boards to a big PCB. I can't think of a good reason to do this.

This is like asking a painter why the hell he used ready made paints and did not create his own for each color he needed. Not everybody has a hobby of spending time and money fixing tracing mistakes of PCB revision 11, playing with working contraption is fine as it is.

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#66
post #34

The LilyGo T-Embed CC1100 has similar hardware capabilities of the FlipperZero plus WiFi/bluetooth and runs the Bruce Pentest firmware all for under half the price of the flipper. The Bruce firmware works well on it but is not as polished as the flipper zero but both hardware and software are open source and easily modded.

The popularity and usefulness of many devices like the Arduino and the Raspberry Pi doesn't stem from the hardware capabilities, but the "communities of scale" (lots of people use it -> it's much easier to find compatible software, hardware, guides etc.) I would expect this to be the same for the Flipper Zero.

True, but while there is a decent sized Flipper Zero community, I found it to be significantly smaller and less prone to fresh development than the other two you mentioned by comparison. The Flipper Zero is stunted by a good portion of that community being individuals who want a pocket hack toy without having to do any work to make it go, resulting in perceived stagnation of the device.

Perhaps I missed something when I owned mine? So many people I encountered in said community really just wanted a wifi deauther, which could have been built or purchased in a variety of cheaper ways. I got bored with it quickly, and returned to doing interesting things with Arduino and ESP32, but YMMV.

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#67

What is going on with the PCB? It looks like the soldered several dev boards to a big PCB. I can't think of a good reason to do this.

I've done the same thing for a few reasons.

- Certain things need good layouts - I think I can see a DC-DC Converter, you need to minimize certain loop areas, etc. You also need to ensure that you use the correct footprints for the chips. Way easier to just use a bunch of modules with a simple pcb.

- It reduces the components you need to aquire - you need to select a inductor with the correct specs for the dc-dc converter, a bunch of different resistors and capacitors for all sorts of uses or you just purchase a cheap module from china.

- It's easier to solder. Fancy chips with packages with no leads are not trivial to solder. LED's might be a bit sensitive to temperature and can get destroyed by a not-so-great solderer. Small pitches on IC make it easy to create solder bridges or bad connections.

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#68

> Read rf signal and emulate it or save it I assume it checks that you actually have the licensing requirements to be transmitting on whatever frequency?

Why not assume people are responsible for following their local laws instead? They're not selling anything, so kind of feels it has to fall on the user, not the person who shares a thing.

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#69
post #68

> Read rf signal and emulate it or save it I assume it checks that you actually have the licensing requirements to be transmitting on whatever frequency?

Why not assume people are responsible for following their local laws instead? They're not selling anything, so kind of feels it has to fall on the user, not the person who shares a thing.

Because people obviously cant be trusted to follow their local laws when using flipper zero-esque devices https://www.bleepingcomputer.com/news/security/wall-of-flipp...

Re: Show HN: FlopperZiro – A DIY open-source Flipper Zero clone

#70
post #68

Earlier quoted context omitted.

Why not assume people are responsible for following their local laws instead? They're not selling anything, so kind of feels it has to fall on the user, not the person who shares a thing.

Because people obviously cant be trusted to follow their local laws when using flipper zero-esque devices https://www.bleepingcomputer.com/news/security/wall-of-flipp...

People ignoring laws isn't a new thing, does that mean things that could potentially be used for illegal things should be outright outlawed?

That article you shared seems to say the problem is bigger than the used hardware even:

> Soon after, developer Simon Dankelmann ported the attack to an Android app, allowing people to launch Bluetooth spam attacks without needing a Flipper Zero.

How do you solve that without outlawing Android devices?

> People using Bluetooth-enabled hearing aids and heart rate monitoring tools also reported disruption, which could put their well-being at risk.

This is probably the most bananas part of that article, and it's great that they managed to find these issues in relatively trivial conditions, since the company's own testing apparently doesn't include very basic security checks. If those devices are failing when they aren't connected to the main device, what makes these companies even remotely suitable for building critical devices like that?

Who knows how long time it would take to discover these security issues with medical devices if people weren't able to prototype these sort of attacks at home?

Post reply on HN