#chinesium — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #chinesium, aggregated by home.social.
-
-
-
-
-
-
"widely used for various purposes"
That's a hell of an advertising slogan you got there, pal.
-
"widely used for various purposes"
That's a hell of an advertising slogan you got there, pal.
-
"widely used for various purposes"
That's a hell of an advertising slogan you got there, pal.
-
"widely used for various purposes"
That's a hell of an advertising slogan you got there, pal.
-
"widely used for various purposes"
That's a hell of an advertising slogan you got there, pal.
-
This is fun. A Chinese company that makes fairly generic WiFi routers and sells them under its own (multiple) brands as well as white-labelling them for many other companies to sell as "theirs", has shipped a backdoor on what appears to be every version of every model they've sold.
https://www.vulncheck.com/blog/zbt-endlessdoors
The backdoor itself is also laughably insecure, easily taken over by anyone who can intercept packets between the router and its command-and-control server, or who can cause the hardcoded domain names it used to resolve to an IP address under their control. TL;DR: this is very easy to exploit.
It is a deliberate remote root backdoor.
The company says "oh no, there's no security issue, you misunderstand" to the researcher that found this. However, they've taken all their downloadable firmware images offline to be updated for the security issue their PR people say doesn't exist.
And it is definitely, 100% deliberate and done in bad faith. The backdoor processes deliberately mislabel themselves as `kworker` processes to try to make anyone who sees them think they are Linux built-in kernel threads.
Worth a read.
#BackDoor #security #exploit #root #Chinesium #trust #network #hardware
-
This is fun. A Chinese company that makes fairly generic WiFi routers and sells them under its own (multiple) brands as well as white-labelling them for many other companies to sell as "theirs", has shipped a backdoor on what appears to be every version of every model they've sold.
https://www.vulncheck.com/blog/zbt-endlessdoors
The backdoor itself is also laughably insecure, easily taken over by anyone who can intercept packets between the router and its command-and-control server, or who can cause the hardcoded domain names it used to resolve to an IP address under their control. TL;DR: this is very easy to exploit.
It is a deliberate remote root backdoor.
The company says "oh no, there's no security issue, you misunderstand" to the researcher that found this. However, they've taken all their downloadable firmware images offline to be updated for the security issue their PR people say doesn't exist.
And it is definitely, 100% deliberate and done in bad faith. The backdoor processes deliberately mislabel themselves as `kworker` processes to try to make anyone who sees them think they are Linux built-in kernel threads.
Worth a read.
#BackDoor #security #exploit #root #Chinesium #trust #network #hardware
-
This is fun. A Chinese company that makes fairly generic WiFi routers and sells them under its own (multiple) brands as well as white-labelling them for many other companies to sell as "theirs", has shipped a backdoor on what appears to be every version of every model they've sold.
https://www.vulncheck.com/blog/zbt-endlessdoors
The backdoor itself is also laughably insecure, easily taken over by anyone who can intercept packets between the router and its command-and-control server, or who can cause the hardcoded domain names it used to resolve to an IP address under their control. TL;DR: this is very easy to exploit.
It is a deliberate remote root backdoor.
The company says "oh no, there's no security issue, you misunderstand" to the researcher that found this. However, they've taken all their downloadable firmware images offline to be updated for the security issue their PR people say doesn't exist.
And it is definitely, 100% deliberate and done in bad faith. The backdoor processes deliberately mislabel themselves as `kworker` processes to try to make anyone who sees them think they are Linux built-in kernel threads.
Worth a read.
#BackDoor #security #exploit #root #Chinesium #trust #network #hardware
-
This is fun. A Chinese company that makes fairly generic WiFi routers and sells them under its own (multiple) brands as well as white-labelling them for many other companies to sell as "theirs", has shipped a backdoor on what appears to be every version of every model they've sold.
https://www.vulncheck.com/blog/zbt-endlessdoors
The backdoor itself is also laughably insecure, easily taken over by anyone who can intercept packets between the router and its command-and-control server, or who can cause the hardcoded domain names it used to resolve to an IP address under their control. TL;DR: this is very easy to exploit.
It is a deliberate remote root backdoor.
The company says "oh no, there's no security issue, you misunderstand" to the researcher that found this. However, they've taken all their downloadable firmware images offline to be updated for the security issue their PR people say doesn't exist.
And it is definitely, 100% deliberate and done in bad faith. The backdoor processes deliberately mislabel themselves as `kworker` processes to try to make anyone who sees them think they are Linux built-in kernel threads.
Worth a read.
#BackDoor #security #exploit #root #Chinesium #trust #network #hardware
-
This is fun. A Chinese company that makes fairly generic WiFi routers and sells them under its own (multiple) brands as well as white-labelling them for many other companies to sell as "theirs", has shipped a backdoor on what appears to be every version of every model they've sold.
https://www.vulncheck.com/blog/zbt-endlessdoors
The backdoor itself is also laughably insecure, easily taken over by anyone who can intercept packets between the router and its command-and-control server, or who can cause the hardcoded domain names it used to resolve to an IP address under their control. TL;DR: this is very easy to exploit.
It is a deliberate remote root backdoor.
The company says "oh no, there's no security issue, you misunderstand" to the researcher that found this. However, they've taken all their downloadable firmware images offline to be updated for the security issue their PR people say doesn't exist.
And it is definitely, 100% deliberate and done in bad faith. The backdoor processes deliberately mislabel themselves as `kworker` processes to try to make anyone who sees them think they are Linux built-in kernel threads.
Worth a read.
#BackDoor #security #exploit #root #Chinesium #trust #network #hardware
-
Wir werden keinen industriellen Selbstmord begehen und nicht zulassen, dass 'Auto-Fentanyl' in die Vereinigten Staaten von Amerika gelangt. (b m) #schönerWort #Chinesium
-
Wir werden keinen industriellen Selbstmord begehen und nicht zulassen, dass 'Auto-Fentanyl' in die Vereinigten Staaten von Amerika gelangt. (b m) #schönerWort #Chinesium
-
"Heat-resistant heatshrink tubing"
A: Hey, this stuff isn't working.
B: How can you tell? -
"Heat-resistant heatshrink tubing"
A: Hey, this stuff isn't working.
B: How can you tell? -
"Heat-resistant heatshrink tubing"
A: Hey, this stuff isn't working.
B: How can you tell? -
"Heat-resistant heatshrink tubing"
A: Hey, this stuff isn't working.
B: How can you tell? -
"Heat-resistant heatshrink tubing"
A: Hey, this stuff isn't working.
B: How can you tell? -
Saw a product listing (on AliExpress, natch...) for an MP3 player module.
"MP3 player module I2C non-destructive"
I didn't realize other modules would reach back to the CPU and delete the file it was sending... 😕
-
Saw a product listing (on AliExpress, natch...) for an MP3 player module.
"MP3 player module I2C non-destructive"
I didn't realize other modules would reach back to the CPU and delete the file it was sending... 😕
-
Saw a product listing (on AliExpress, natch...) for an MP3 player module.
"MP3 player module I2C non-destructive"
I didn't realize other modules would reach back to the CPU and delete the file it was sending... 😕
-
Saw a product listing (on AliExpress, natch...) for an MP3 player module.
"MP3 player module I2C non-destructive"
I didn't realize other modules would reach back to the CPU and delete the file it was sending... 😕
-
Saw a product listing (on AliExpress, natch...) for an MP3 player module.
"MP3 player module I2C non-destructive"
I didn't realize other modules would reach back to the CPU and delete the file it was sending... 😕
-
This is perhaps a deeper relationship than I want with a tube of glue [1].
[1] Actually a chemical adhesive - specifically, a type of contact cement - rather than glue, which is made from animal tissues. I'm using it in the looser sense because that's what the listing uses. Yes, living with a conservator means you understand the very precise differences between these things 😉
[Edit: correct description in alt-text]
-
This is perhaps a deeper relationship than I want with a tube of glue [1].
[1] Actually a chemical adhesive - specifically, a type of contact cement - rather than glue, which is made from animal tissues. I'm using it in the looser sense because that's what the listing uses. Yes, living with a conservator means you understand the very precise differences between these things 😉
[Edit: correct description in alt-text]
-
This is perhaps a deeper relationship than I want with a tube of glue [1].
[1] Actually a chemical adhesive - specifically, a type of contact cement - rather than glue, which is made from animal tissues. I'm using it in the looser sense because that's what the listing uses. Yes, living with a conservator means you understand the very precise differences between these things 😉
[Edit: correct description in alt-text]
-
This is perhaps a deeper relationship than I want with a tube of glue [1].
[1] Actually a chemical adhesive - specifically, a type of contact cement - rather than glue, which is made from animal tissues. I'm using it in the looser sense because that's what the listing uses. Yes, living with a conservator means you understand the very precise differences between these things 😉
[Edit: correct description in alt-text]
-
This is perhaps a deeper relationship than I want with a tube of glue [1].
[1] Actually a chemical adhesive - specifically, a type of contact cement - rather than glue, which is made from animal tissues. I'm using it in the looser sense because that's what the listing uses. Yes, living with a conservator means you understand the very precise differences between these things 😉
[Edit: correct description in alt-text]
-
-
-
-
-
-
"high-definition windshield wiper"
-
"high-definition windshield wiper"
-
"high-definition windshield wiper"
-
"high-definition windshield wiper"
-
"high-definition windshield wiper"
-
Well, this is annoying.
I have some little power #modules (bought on #AliExpress, natch) that were advertised as automatic boost/buck converters. Input from <4V to >30V, output from 1.25V to 35V.
They're based on the XL6009 switching converter, which supports auto-buck-boost as one mode.
But they appear to use it in boost-only mode. The output voltage can not go below the input as far as I can tell. From the datasheet, it looks like that's because the auto-buck-boost config requires a few more components, plus a transformer instead of a simple inductor, which is probably the main reason (BOM).
The listing just seems to be ... wrong.
Annoying.
#seller #SellerDescription #YumCha #Chinesium #BuckConverter #BoostConverter #AutoBuckBoost #BuckBoost #electronics #hobby
-
Well, this is annoying.
I have some little power #modules (bought on #AliExpress, natch) that were advertised as automatic boost/buck converters. Input from <4V to >30V, output from 1.25V to 35V.
They're based on the XL6009 switching converter, which supports auto-buck-boost as one mode.
But they appear to use it in boost-only mode. The output voltage can not go below the input as far as I can tell. From the datasheet, it looks like that's because the auto-buck-boost config requires a few more components, plus a transformer instead of a simple inductor, which is probably the main reason (BOM).
The listing just seems to be ... wrong.
Annoying.
#seller #SellerDescription #YumCha #Chinesium #BuckConverter #BoostConverter #AutoBuckBoost #BuckBoost #electronics #hobby
-
Well, this is annoying.
I have some little power #modules (bought on #AliExpress, natch) that were advertised as automatic boost/buck converters. Input from <4V to >30V, output from 1.25V to 35V.
They're based on the XL6009 switching converter, which supports auto-buck-boost as one mode.
But they appear to use it in boost-only mode. The output voltage can not go below the input as far as I can tell. From the datasheet, it looks like that's because the auto-buck-boost config requires a few more components, plus a transformer instead of a simple inductor, which is probably the main reason (BOM).
The listing just seems to be ... wrong.
Annoying.
#seller #SellerDescription #YumCha #Chinesium #BuckConverter #BoostConverter #AutoBuckBoost #BuckBoost #electronics #hobby
-
Well, this is annoying.
I have some little power #modules (bought on #AliExpress, natch) that were advertised as automatic boost/buck converters. Input from <4V to >30V, output from 1.25V to 35V.
They're based on the XL6009 switching converter, which supports auto-buck-boost as one mode.
But they appear to use it in boost-only mode. The output voltage can not go below the input as far as I can tell. From the datasheet, it looks like that's because the auto-buck-boost config requires a few more components, plus a transformer instead of a simple inductor, which is probably the main reason (BOM).
The listing just seems to be ... wrong.
Annoying.
#seller #SellerDescription #YumCha #Chinesium #BuckConverter #BoostConverter #AutoBuckBoost #BuckBoost #electronics #hobby
-
Well, this is annoying.
I have some little power #modules (bought on #AliExpress, natch) that were advertised as automatic boost/buck converters. Input from <4V to >30V, output from 1.25V to 35V.
They're based on the XL6009 switching converter, which supports auto-buck-boost as one mode.
But they appear to use it in boost-only mode. The output voltage can not go below the input as far as I can tell. From the datasheet, it looks like that's because the auto-buck-boost config requires a few more components, plus a transformer instead of a simple inductor, which is probably the main reason (BOM).
The listing just seems to be ... wrong.
Annoying.
#seller #SellerDescription #YumCha #Chinesium #BuckConverter #BoostConverter #AutoBuckBoost #BuckBoost #electronics #hobby
-
If you buy things on #AliExpress, you are going to get scammed every so often. Their buyer protection program is pretty decent, although it can be a bit of a pain to go through the process.
You can increase your chances of getting scammed by buying things where the #deals are too good to be true. When the deals are ludicrously, impossibly good, your chances increase to 100%.
This can be fun. I have bought a few things over the years that were obviously #scams. Once, I spent a few hundred dollars for two tablets that, if they had been real, were selling for about one tenth of what they should have. Seeing how they faked them being new products, when they were actually recycled ancient low-end tablets, was fascinating.
But I generally won't do that. Instead, I buy cheap stuff, trading a few dollars for the fun of seeing what the seller/manufacturer have done. I don't even try to get my money back on these.
So I recently bought a #USB #charger that I've been seeing for months. It's described as a 240W total output, gallium-nitride, USB-PD and QC-3.0 compatible, five-port charger. The genuine article from a reputable manufacturer, if it exists, must cost over CDN $100. This one was ... five bucks.
So I knew it was going to be interesting. It arrived today. It weighed more than expected, but all at one end. The case appears to be ultrasonically welded, so getting it open is destructive.
1/x
#scam #USBPD #QC3 #Chinesium #fake #TooGoodToBeTrue #deal #deals #GaN
-
If you buy things on #AliExpress, you are going to get scammed every so often. Their buyer protection program is pretty decent, although it can be a bit of a pain to go through the process.
You can increase your chances of getting scammed by buying things where the #deals are too good to be true. When the deals are ludicrously, impossibly good, your chances increase to 100%.
This can be fun. I have bought a few things over the years that were obviously #scams. Once, I spent a few hundred dollars for two tablets that, if they had been real, were selling for about one tenth of what they should have. Seeing how they faked them being new products, when they were actually recycled ancient low-end tablets, was fascinating.
But I generally won't do that. Instead, I buy cheap stuff, trading a few dollars for the fun of seeing what the seller/manufacturer have done. I don't even try to get my money back on these.
So I recently bought a #USB #charger that I've been seeing for months. It's described as a 240W total output, gallium-nitride, USB-PD and QC-3.0 compatible, five-port charger. The genuine article from a reputable manufacturer, if it exists, must cost over CDN $100. This one was ... five bucks.
So I knew it was going to be interesting. It arrived today. It weighed more than expected, but all at one end. The case appears to be ultrasonically welded, so getting it open is destructive.
1/x
#scam #USBPD #QC3 #Chinesium #fake #TooGoodToBeTrue #deal #deals #GaN
-
If you buy things on #AliExpress, you are going to get scammed every so often. Their buyer protection program is pretty decent, although it can be a bit of a pain to go through the process.
You can increase your chances of getting scammed by buying things where the #deals are too good to be true. When the deals are ludicrously, impossibly good, your chances increase to 100%.
This can be fun. I have bought a few things over the years that were obviously #scams. Once, I spent a few hundred dollars for two tablets that, if they had been real, were selling for about one tenth of what they should have. Seeing how they faked them being new products, when they were actually recycled ancient low-end tablets, was fascinating.
But I generally won't do that. Instead, I buy cheap stuff, trading a few dollars for the fun of seeing what the seller/manufacturer have done. I don't even try to get my money back on these.
So I recently bought a #USB #charger that I've been seeing for months. It's described as a 240W total output, gallium-nitride, USB-PD and QC-3.0 compatible, five-port charger. The genuine article from a reputable manufacturer, if it exists, must cost over CDN $100. This one was ... five bucks.
So I knew it was going to be interesting. It arrived today. It weighed more than expected, but all at one end. The case appears to be ultrasonically welded, so getting it open is destructive.
1/x
#scam #USBPD #QC3 #Chinesium #fake #TooGoodToBeTrue #deal #deals #GaN
-
If you buy things on #AliExpress, you are going to get scammed every so often. Their buyer protection program is pretty decent, although it can be a bit of a pain to go through the process.
You can increase your chances of getting scammed by buying things where the #deals are too good to be true. When the deals are ludicrously, impossibly good, your chances increase to 100%.
This can be fun. I have bought a few things over the years that were obviously #scams. Once, I spent a few hundred dollars for two tablets that, if they had been real, were selling for about one tenth of what they should have. Seeing how they faked them being new products, when they were actually recycled ancient low-end tablets, was fascinating.
But I generally won't do that. Instead, I buy cheap stuff, trading a few dollars for the fun of seeing what the seller/manufacturer have done. I don't even try to get my money back on these.
So I recently bought a #USB #charger that I've been seeing for months. It's described as a 240W total output, gallium-nitride, USB-PD and QC-3.0 compatible, five-port charger. The genuine article from a reputable manufacturer, if it exists, must cost over CDN $100. This one was ... five bucks.
So I knew it was going to be interesting. It arrived today. It weighed more than expected, but all at one end. The case appears to be ultrasonically welded, so getting it open is destructive.
1/x
#scam #USBPD #QC3 #Chinesium #fake #TooGoodToBeTrue #deal #deals #GaN
-
If you buy things on #AliExpress, you are going to get scammed every so often. Their buyer protection program is pretty decent, although it can be a bit of a pain to go through the process.
You can increase your chances of getting scammed by buying things where the #deals are too good to be true. When the deals are ludicrously, impossibly good, your chances increase to 100%.
This can be fun. I have bought a few things over the years that were obviously #scams. Once, I spent a few hundred dollars for two tablets that, if they had been real, were selling for about one tenth of what they should have. Seeing how they faked them being new products, when they were actually recycled ancient low-end tablets, was fascinating.
But I generally won't do that. Instead, I buy cheap stuff, trading a few dollars for the fun of seeing what the seller/manufacturer have done. I don't even try to get my money back on these.
So I recently bought a #USB #charger that I've been seeing for months. It's described as a 240W total output, gallium-nitride, USB-PD and QC-3.0 compatible, five-port charger. The genuine article from a reputable manufacturer, if it exists, must cost over CDN $100. This one was ... five bucks.
So I knew it was going to be interesting. It arrived today. It weighed more than expected, but all at one end. The case appears to be ultrasonically welded, so getting it open is destructive.
1/x
#scam #USBPD #QC3 #Chinesium #fake #TooGoodToBeTrue #deal #deals #GaN
-
Please, I beg you, do not buy pressure vessels from AliExpress sellers. Particularly not ones you strap to your body.
4500 psi COPV tank from some random guy who may have got it out of the "failed safety test" dumpster behind the factory...
#sheesh #Darwin #DarwinAward #cheep #Chinesium #AliExpress #safety #COPV #PressureVessel #certified
-
Please, I beg you, do not buy pressure vessels from AliExpress sellers. Particularly not ones you strap to your body.
4500 psi COPV tank from some random guy who may have got it out of the "failed safety test" dumpster behind the factory...
#sheesh #Darwin #DarwinAward #cheep #Chinesium #AliExpress #safety #COPV #PressureVessel #certified
-
Please, I beg you, do not buy pressure vessels from AliExpress sellers. Particularly not ones you strap to your body.
4500 psi COPV tank from some random guy who may have got it out of the "failed safety test" dumpster behind the factory...
#sheesh #Darwin #DarwinAward #cheep #Chinesium #AliExpress #safety #COPV #PressureVessel #certified
-
Please, I beg you, do not buy pressure vessels from AliExpress sellers. Particularly not ones you strap to your body.
4500 psi COPV tank from some random guy who may have got it out of the "failed safety test" dumpster behind the factory...
#sheesh #Darwin #DarwinAward #cheep #Chinesium #AliExpress #safety #COPV #PressureVessel #certified
-
Please, I beg you, do not buy pressure vessels from AliExpress sellers. Particularly not ones you strap to your body.
4500 psi COPV tank from some random guy who may have got it out of the "failed safety test" dumpster behind the factory...
#sheesh #Darwin #DarwinAward #cheep #Chinesium #AliExpress #safety #COPV #PressureVessel #certified
-
I bought a #Hangell (no, I wasn't familiar with that name) switching bench power supply and it arrived. It happens to be one that #BigClive just briefly showed in one of his unbagging videos.
I got it because my existing old #linear supplies max out at around 18 V, and that has been a hindrance of late. A #switching supply isn't ideal, because of the possibility of noise, but this model will do 5 A at 60 VDC, and a linear supply that can do a couple of amps at that voltage is big, heavy, and pricey.
So of course, as soon as I received it, I took it apart. As you do.
And ... I'm pleasantly surprised. The #PCB layouts look good, the assembly appears very good, with proper pick&placed #SMT components and reflow soldering, not hack-job hand soldering. The components seem to be #quality, even name-brand where appropriate. There are what appear to be genuine class X and class Y #safety capacitors everywhere they should be. The front binding posts are fairly typical cheap #Chinesium ones, but appear to be from the better end of the quality spectrum as far as those go.
One ding: the multiple #electrolytic output caps appear to be 63 V-rated ones. For a supply that goes up to 60 V, that's just not acceptable. Maybe that's because this unit can also be had in a 30 V model? Or maybe they're just hoping you don't notice.
I'm sorely tempted to replace them with 100 V-rated ones before I use it. I'm going to add some more output #filtering as well.
-
I bought a #Hangell (no, I wasn't familiar with that name) switching bench power supply and it arrived. It happens to be one that #BigClive just briefly showed in one of his unbagging videos.
I got it because my existing old #linear supplies max out at around 18 V, and that has been a hindrance of late. A #switching supply isn't ideal, because of the possibility of noise, but this model will do 5 A at 60 VDC, and a linear supply that can do a couple of amps at that voltage is big, heavy, and pricey.
So of course, as soon as I received it, I took it apart. As you do.
And ... I'm pleasantly surprised. The #PCB layouts look good, the assembly appears very good, with proper pick&placed #SMT components and reflow soldering, not hack-job hand soldering. The components seem to be #quality, even name-brand where appropriate. There are what appear to be genuine class X and class Y #safety capacitors everywhere they should be. The front binding posts are fairly typical cheap #Chinesium ones, but appear to be from the better end of the quality spectrum as far as those go.
One ding: the multiple #electrolytic output caps appear to be 63 V-rated ones. For a supply that goes up to 60 V, that's just not acceptable. Maybe that's because this unit can also be had in a 30 V model? Or maybe they're just hoping you don't notice.
I'm sorely tempted to replace them with 100 V-rated ones before I use it. I'm going to add some more output #filtering as well.
-
I bought a #Hangell (no, I wasn't familiar with that name) switching bench power supply and it arrived. It happens to be one that #BigClive just briefly showed in one of his unbagging videos.
I got it because my existing old #linear supplies max out at around 18 V, and that has been a hindrance of late. A #switching supply isn't ideal, because of the possibility of noise, but this model will do 5 A at 60 VDC, and a linear supply that can do a couple of amps at that voltage is big, heavy, and pricey.
So of course, as soon as I received it, I took it apart. As you do.
And ... I'm pleasantly surprised. The #PCB layouts look good, the assembly appears very good, with proper pick&placed #SMT components and reflow soldering, not hack-job hand soldering. The components seem to be #quality, even name-brand where appropriate. There are what appear to be genuine class X and class Y #safety capacitors everywhere they should be. The front binding posts are fairly typical cheap #Chinesium ones, but appear to be from the better end of the quality spectrum as far as those go.
One ding: the multiple #electrolytic output caps appear to be 63 V-rated ones. For a supply that goes up to 60 V, that's just not acceptable. Maybe that's because this unit can also be had in a 30 V model? Or maybe they're just hoping you don't notice.
I'm sorely tempted to replace them with 100 V-rated ones before I use it. I'm going to add some more output #filtering as well.