Notorious

Many (if not most) new cars have their own cellular service built in. They spin this as being able to hotspot to your vehicle if you pay for data or being able to remote lock/start your vehicle with their app. However, the vehicle manufacturer has their own plan allowing them to relay back telemetry data regardless of whether you buy a data package.

Not sure that’s entirely true. Thankfully this attack vector required custom emojis, so it was limited to those specific Lemmy instances. Other attack vectors we may not be so lucky and it could spread through federation.

Lemmy decided to go with SHA256 for TOTP seed. This is a very odd move since many 2FA apps don’t support SHA256. I actually had to write a quick python script to spit out my 2FA code since Bitwarden doesn’t support it. Hopefully either Lemmy will change to SHA-1 or Bitwarden will start to support SHA256 seeds.

I started using SearXNG and actually blocked Reddit from the results. As someone who almost always put “Reddit” in my google searches, I’ve been impressed with the quality of my search results without relying on Reddit.

I didn’t realize it would be so easy when I wrote the script. Knowing what I know now I’d just check adafruit every couple minutes starting a bit before 8:30am PST.

It’s not that difficult to get a Pi 4. I wrote a python script that scraped rpilocator’s rss feed every 5 minutes and would notify my phone when one was available in the US. It went off basically every day around 8:30am PST when Adafruit would drop 100+ Pi4s. I’ve picked up two in the past week (one for my Voron printer and another for a RetroPi cabinet). They did sell out fairly fast… in about 10 minutes or so.