Live data from Hacker News

O.mg Cable

shop.hak5.org

311–320 of 555 posts

Re: O.mg Cable

#311
post #253

Earlier quoted context omitted.

This feels like a dumb question, but I can't find dimensions of the Notecard anywhere and I can't quite judge the scale from the pictures. How big is it?

https://github.com/blues/note-hardware/blob/master/Notecard/... has the measurements, looks like 35mm x 30mm

Keep in mind that’s he card with a M.2 edge connector on one end. Mostly you’d be plugging that into something, at least to hook up the power/data lines. They sell “Note Carriers” for that, which end up making the combo bigger than that.

Here’s a pic of the note card plugged into their Raspberry Pi note carrier. That’s a standard 40 pin 0.1” spacing connector on the left, so it’s 2” plus the mounting holes in that dimension. 65x57mm and about 20mm tall for the stackable 40 pin socket+pins.

https://flic.kr/p/2mkQAS7

Re: O.mg Cable

#312

Earlier quoted context omitted.

They are really quite unlike us. And our sets of norms is, shall we say, somewhat different to theirs.

You are commenting on a forum full of people who build tools and technology for facebook and google and probably palintir and a thousand other facial recognition and thoughtcrime style systems.

Sure, Facebook and Google are pretty evil organisations but they can never match the scope of surveillance of governmental agencies.

Facebook and Google need the user to use their services and they say (despite the message being in legalese) what they're going to track. There is consent involved in these organisations, it's a voluntary transaction.

The government can (and did) just intrude on everything without consent or penalties.

From a moral point of view, I would be open to work for BigTech, but I wouldn't work for a state actor.

Re: O.mg Cable

#313
post #129
post #96

Earlier quoted context omitted.

Probably “Project Phoenix”. If you ask any project team to come up with a project name they will probably pick ‘Project Phoenix’.

Because all project work is reviving something that has been done before?

Because the product is mythical and it will all end in flames.

Re: O.mg Cable

#314
post #170

Earlier quoted context omitted.

I have hundreds of locks and lock bypass tools. I make sure to pay for ones that are not quickly defeated when it counts. LPL covers most locks in the wild which are bad, but locks like the Protec2 are quite strong and while it is implied one person in the world can beat it with custom tools (huxleypig)... even then not quickly.

And the best features are (proudly) locked behind patents, so if you need a great lock in a form factor they don't make, oh well.

Some of the best locks are very very hard to buy as well and still protected with weird export controls held over from the encryption export days.

I frequently use FF-L-2740 spec locks, which is the spec locks need to hit for use in classified government work, military contractors etc. They are very good locks I can't begin to defeat in any practical amount of time and don't know anyone who can. Particularly since they have timed brute force lockouts.

Problem is not a single vendor is allowed to sell locks of that spec to civilians by contract so you have to jump through lots of hoops to get them.

Re: O.mg Cable

#315

Earlier quoted context omitted.

If anything, by making devices like this accessible to the public, the end result is safer devices for everyone. Without products like this you have criminals, a small amount of enthusiasts/researchers, and government sponsored actors exploiting vulnerabilities. If you put it out in the open, much like open source software, everyone can do it, but there's more pressure to fix blatant vulnerabilities.

Isn't that the same argument people use in support of gun ownership?

No. I’ve never once seen someone say that making guns more available means that the general public gets better bullet proof technology.

It, for example, hasn’t resulted in accessible bulletproof vehicles for all.

In technology, vulnerabilities found push companies to develop and deploy protections for them.

Re: O.mg Cable

#316
post #181

Earlier quoted context omitted.

The lock doesn't even need to be that good. As you said, the name of the game is intrusion detection, not necessarily intrusion avoidance. The Lock Picking Lawyer chronicled very nicely a technique for turning a KW1-keyed Kwikset core (extremely common here in the US) into something that is tamper evident. See the YouTube video linked herein. https://www.youtube.com/watch?v=7JlgKCUqzA0 This kind of thing thwarts cove…

I’m into locksport as well and would favor that kind of modification on a back door which is more likely to be targeted by thieves. Not sure I’d do it on a front door in case I put a family member actually locked themselves out and actually needed a locksmith to be able to get in.

Sure, and the application of access control devices generally requires a degree of discretion and understanding what your threat model is.

If you don't fear your front door will be clandestinely accessed, I feel it's perfectly valid not to worry about doing this to the lock there.

Not being you, that isn't my call to make.

Re: O.mg Cable

#317
post #283

Earlier quoted context omitted.

https://www.youtube.com/watch?v=qV8QKZNFxLw

Apparently, picked here: https://youtu.be/ai5Hf-wPXFE but check out this one instead: https://youtu.be/sES_Hbj92BQ - ~2h to open fully (though the author of the video claims impressioning could speed up the thing; anyway, reportedly attacking the door is just easier in this case)

I have Bowley locks in my collection. Amazing quality.

Not only does it take a couple hours to pick for an expert but you have to make a custom set of tools that only work on that one particular lock.

If a lock keeps someone out for several hours it is a great lock.

Re: O.mg Cable

#318
post #307

Earlier quoted context omitted.

He can defeat just about anything, but he’s also exceptionally skilled. As a consumer of locks, I expect them to be defeatable by a skilled lockpicker. But I don’t expect them to be defeatable by a bic pen or by reaching in the keyhole with an oddly shaped wire to move the locking paul. You can buy locks that don’t have easy bypasses, and can’t be easily drilled, and can’t be picked by beginners.

You can also buy locks that can't be picked by people like me who have been at it 20 years. To keep people like me out for a while buy a Medeco. Pins not only need to be at the right height, but also the right rotation. They are a real pain in the ass to pick. I don't even know any locksmiths that can pick them. Good security for the money. Bosnian Bill and LPL... Okay they can pick them, but they are like the 0.0001…

I'm surprised TSA doesn't just cut it off, TBH.

Re: O.mg Cable

#319

Earlier quoted context omitted.

> We have an air tag on one of my kids shoes when we are out what the hell?

Seems legit, kids can run away or be kidnapped. It’s important to know where your kids are.

Yeah it is important to know where your kids are. I go with "pay attention".

I guess there are going to be scenarios where tracking could help and maybe even allow the kids freedom to roam within a large zone - the back paddock of a farm say - while still allowing parents to find them.

But I still like capability and trust more.

Re: O.mg Cable

#320
post #156

Earlier quoted context omitted.

They are really quite unlike us. And our sets of norms is, shall we say, somewhat different to theirs.

You imply hacking human minds to be more acceptable than hacking computers?

Absolutely. It's the human mind's responsibility not to be "hacked", by which I assume you mean exploited to e.g. mindlessly scroll Facebook all day.

If most people are weak enough to become matrix-like slaves to the machine, so be it. I don't believe in free will and I don't think we need to preserve human life in a certain way (e.g. the way our ancestors lived).

Sure, a lot of people will fail this test, or maybe they prefer to live their life like that. I don't care, that's on them, that's their choice - or, better, the way DNA and the environment shaped this human shell.

If instead you wiretap my device, you're attacking my privacy and I don't have a way to defend myself. You are committing violence.

Post reply on HN