#pwn2roll — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #pwn2roll, aggregated by home.social.
-
Thanks, dear "company who won't be named," for not changing the password you're using to encrypt the software's parameter file for over seven years, at least.
It took several days back in the dark winter to solve the puzzle-aka find the key. And it works on all installers I’ve found so far.
-
Thanks, dear "company who won't be named," for not changing the password you're using to encrypt the software's parameter file for over seven years, at least.
It took several days back in the dark winter to solve the puzzle-aka find the key. And it works on all installers I’ve found so far.
-
elfy now has a 760-byte sized hand-crafted AES-128 implementation from backup.bin, as a treat.
-
Today is SLEIGH ride day.
-
Leaking not released product names via Certificate Transparency logs is apparently still a thing.
Someone did not their "Obacht" they do in other places.
-
Apparently folks are now vibe-coding wheelchair control reverse engineering and scripts for accessing config etc.
Including false assumptions, hallucinated constants, inconsistencies across the code base. All the patterns sloppy AI code has.
I just don't understand why. The speed and amount of littering the public internet with barely-working-to-not-working code and docs is scary.
Technical debt as a service.
-
Mood: listening carefully to the computer's fans spinning duration and pattern to determine if build of firmware succeeds.
-
Mood: listening carefully to the computer's fans spinning duration and pattern to determine if build of firmware succeeds.
-
Funny Bluetooth quirks: holding the ESP32 in your hand's palm increases response time from previously maximum of ~200ms up to nearly two seconds.
But only on the wheelchair drive of both that's farther away from the ESP.
-
-
-
I just posted the script with all the content I intended to talk about in my #39c3 talk last weekend on Github:
https://github.com/roll2own/m5squared-resources/blob/main/39c3-talk/39c3-talk-spoken-text.md
It's a lot of text, but might be a good read and has more context to the history of the source code, the concepts, social/ethic questionability of DRM in mobility aids, etc.
-
I just posted the script with all the content I intended to talk about in my #39c3 talk last weekend on Github:
https://github.com/roll2own/m5squared-resources/blob/main/39c3-talk/39c3-talk-spoken-text.md
It's a lot of text, but might be a good read and has more context to the history of the source code, the concepts, social/ethic questionability of DRM in mobility aids, etc.
-
Since people in the Heise comments are complaining about my English accent and chewing gum: nobody forces anyone to watch the talk. If you want the technical details, look them up in the Github repo.
The incident with the slides right before the talk made me extremely nervous - even more as I'd be before/during giving a talk. I know it's far from perfect. And maybe such dudes should try doing smth. similar, for free and in their free time.
-
Since people in the Heise comments are complaining about my English accent and chewing gum: nobody forces anyone to watch the talk. If you want the technical details, look them up in the Github repo.
The incident with the slides right before the talk made me extremely nervous - even more as I'd be before/during giving a talk. I know it's far from perfect. And maybe such dudes should try doing smth. similar, for free and in their free time.
-
The video for my talk on reverse engineering my wheelchair drive's DRM, the security theater of the drive, other absurdities is online at media.ccc.de: https://media.ccc.de/v/39c3-pwn2roll-who-needs-a-599-remote-when-you-have-wheelchair-py
First code for accessing the Bluetooth interface of the drive is live, there's much more to come: https://github.com/roll2own/m5squared
(Libreoffice sort of ate my slides just before the talk so the talk is really freestyle and far from perfect. I'll post them soonish online, also a spoken script).
-
The video for my talk on reverse engineering my wheelchair drive's DRM, the security theater of the drive, other absurdities is online at media.ccc.de: https://media.ccc.de/v/39c3-pwn2roll-who-needs-a-599-remote-when-you-have-wheelchair-py
First code for accessing the Bluetooth interface of the drive is live, there's much more to come: https://github.com/roll2own/m5squared
(Libreoffice sort of ate my slides just before the talk so the talk is really freestyle and far from perfect. I'll post them soonish online, also a spoken script).
-
"Der Spiegel" published an article about my yesterday's talk wrt. bypassing DRM in my wheelchair drive.
-
"Der Spiegel" published an article about my yesterday's talk wrt. bypassing DRM in my wheelchair drive.
-
Best gift this year: jadx, Wireshark, and unresolved anger.
Spite-driven development is underrated.
Tomorrow's talk day: https://fahrplan.events.ccc.de/congress/2025/fahrplan/event/pwn2roll-who-needs-a-599-remote-when-you-have-wheelchair-py
-
Best gift this year: jadx, Wireshark, and unresolved anger.
Spite-driven development is underrated.
Tomorrow's talk day: https://fahrplan.events.ccc.de/congress/2025/fahrplan/event/pwn2roll-who-needs-a-599-remote-when-you-have-wheelchair-py