We started producing shows as Today with a Techie on 2005-09-19, 18 years, 8 months, 5 days ago. Our shows are produced by listeners like you and can be on any topics that "are of interest to hackers". If you listen to HPR then please consider contributing one show a year. If you record your show now it could be released in 11 days.
Hosted by Ken Fallon on 2024-05-24 is flagged as Clean and released under a CC-BY-SA license.
HA, HAOS, Home Assistant.
Home Automation.
(Be the first).
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:11:31
This is a follow up episode on Home Assistant (HA), see hpr4099 :: An introduction to Home Assistant (HA) for an explanation of what Home Assistant (HA) is, and why you might want to install it.
The Home Assistant Installation page offers several different install methods, listed along with the level of difficulty.
Today we will be installing Home Assistant Operating System (HAOS), on a x86-64 machine.
Home Assistant can be repurposed and installed on various hardware, such as an Odroid or a generic x86-64 machine. The Home Assistant Operating System allows you to install Home Assistant on these devices even if you have little to no Linux experience.
We are going to my HP t610 Flexible Thin Client, which has a 16GB SATA Flash Drive, and I upgraded it to 16G of Ram.
Note that this will install Home Assistant Operating System (HAOS) as a computer appliance. That means that it will run a bare OS with the various components in a customised docker setup. It will take over the entire computer, and requires secure boot to be disabled.
On the HP t610 Flexible Thin Client, that involves pressing "Esc" at boot to get to the bootup menu. If that doesn't work try pressing "F10" just after turning on the power.
HAOS has no integrated installer like you would expect with distro hopping, but it requires that the image be burned directly onto the disk of the computer itself.
It has two methods to do this and "Method 2: Installing HAOS directly
from a boot medium", is basically take the disk out of the target system
and attach it to your own computer. The use a burning tool like Balena
Etcher, or dd to write the image to disk. Much as you would
burn a sdcard for a raspberry pi. I don't have a way to do this so let's
go with method 1.
Here you download and burn live operating system as you would if you were distro hopping, the document suggests to use Ubuntu. I tried it but my HP t610 Flexible Thin Client didn't like it. It also didn't like Fedora despite having worked earlier, so I just used Debian LXQT.
Now you have Debian running off a usb stick on your target machine.
Anything after the '#' character is a comment and doesn't need to be typed.
Note The following steps are optional, and you should only do them if you wish to ssh to the target machine from your pc.
# Anything after the '#' charachter is a comment and doesn't need to be typed.
apt install openssh-server # Install the ssh server on the target
systemctl start ssh # Start it once installed
passwd user # Change the password or you can just use the default which is `live`
ip add # Get the IP address of the target
ssh user@ip.of.the.computer # Replace ip.of.the.computer with the actual ip address in the step aboveOpen a terminal on the machine, and type the su -
commands to get root access on the Debian OS running from the usb drive
on the target machine.
user@debian:~$ su -
Password:
root@debian:~#Now you are root, the super user admin, you can install the
wget command using the Debian apt package
manager.
root@debian:~# apt install wgetOnce wget is installed, we can use it to download the latest image
from the
HAOS
Download Page, which is haos_generic-x86-64-12.1.img.xz
at time of writing.
root@debian:~# wget https://github.com/home-assistant/operating-system/releases/download/12.1/haos_generic-x86-64-12.1.img.xzNow we have the image we are going to write to the disk, but the question is which disk to write it to.
Your target PC will be different to mine but the tool
lsblk is good for showing what is installed and
mounted.
root@debian:~# lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS
loop0 7:0 0 2.5G 1 loop /usr/lib/live/mount/rootfs/filesystem.squashfs
/run/live/rootfs/filesystem.squashfs
sda 8:0 0 14.9G 0 disk
├─sda1 8:1 0 1M 0 part
├─sda2 8:2 0 1G 0 part
└─sda3 8:3 0 13.9G 0 part
sdb 8:16 1 58.6G 0 disk
├─sdb1 8:17 1 3G 0 part /usr/lib/live/mount/medium
│ /run/live/medium
└─sdb2 8:18 1 5M 0 partThe loop0 is the mount where Debian is running from,
while the mounted sdb1 and sdb2 have the word
live telling us that's the actual USB drive we installed Debian
on to.
While your disk will be different, for me the disk to install it on
is sda. The partitions sda1,
sda2, and sda3 are left overs from a previous
install. They will be overwritten anyway.
The drive I will be targeting is therefore known to the system as
/dev/sda
The dd command will do a disk duplication and writes the
ones and zeros from the if input file, to the
of output file.
The command below will take a while and not display anything
root@debian:~# dd if=haos_generic-x86-64-12.1.img.xz of=/dev/sda
761949+1 records in
761949+1 records out
390118272 bytes (390 MB, 372 MiB) copied, 66.3225 s, 5.9 MB/sPlug in an Ethernet cable that is connected to the network. Power the
system on. If you have a screen connected to the Generic x86-64 system,
after a minute or so the Home Assistant welcome banner will appear in
the console. In the browser of your desktop system, within a few minutes
you will be able to reach your new Home Assistant at
homeassistant.local:8123.
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:07:05
Hosted by Some Guy On The Internet on 2024-05-22 is flagged as Explicit and released under a CC-BY-SA license.
KeePassXC 2.7.8 release, Password managers.
general.
(Be the first).
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:19:13
Tags: KeePassXC 2.7.8 release, Password managers
Source: keepassxc: KeePassXC 2.7.8
released
Passkeys are still a fledgling technology, as of this writing, and we are trying to keep pace with the rapid adoption across various websites, in addition to specification refinements. The following is a short list of critical improvements to our passkeys support:
Update an existing passkey or add one to an existing entry Support more specification standards Various UI improvements to dialogs and context menus **Show a warning prior to exporting a passkey**
In addition to bug fixes, we always strive to deliver something useful in each of our updates. For 2.7.8, we have brought forward several awesome features including:
A database setting to allow a delay prior to auto-save Improvements to Bitwarden and 1Password importers Improvements to monospace font display Improve display of dialog buttons on Linux **SSH Agent: don’t auto-load keys that are in the recycle bin**
Changes.
Add hotkey for showing search help. Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown). Add per-database auto-save delay setting. Add configurable password strength check on database password. Add setting to hide menubar. Improve Bitwarden 1PUX import and support organization collections. Show advanced settings checkbox only for settings that have them. Remove obsolete setting for requiring repeated password entry. Passkeys: Allow registering Passkeys to existing entries. Passkeys: Show warning about data being unencrypted before Passkey export. Passkeys: Support NFC and USB transports. Passkeys: Pass extension JSON data to browser. SSH Agent: Do not use entries from recycle bin. Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type. Windows: Improve DACL memory access protection.
Fixes.
Fix crash when deleting history items. Fix crash on screen lock or computer sleep. Fix search field not being focused after unlock. Fix loss of window focus when Auto-Type needs to unlock a database. Fix inconsistent TOTP visibility on unlock. Fix CSV import skipping over single-name groups. Fix key file folder being remembered even if disabled in settings. Fix issues with entry editing and database locking. Fix key file text when provided on command line. Fix issues with hardware key auto detection. Do not override monospace font size. Perform group sort only when group view is in focus. Do not show decimals for attachment sizes in Bytes. Prevent merging of global custom data when merging databases. Fix minor translation issues. Passkeys: Fix StrongBox incompatibility. Passkeys: Set RP ID to effective domain if unset instead of returning an error. Passkeys: Various UI fixes and improvements. AppImage: Fix URL opening. Flatpak: Fix application autostart. Linux/macOS: Fix button sizes on modal alert popups. Linux: Fix clipboard clear on Wayland. Windows: Preserve file-hidden attribute.
Supporting source: keepassxc:
Verifying signatures & basic integrity check.
Supporting source: github: KeePassXC – Keyboard
Shortcuts.
Supporting source: github: KeePassXC changelog.
Source: wikipedia: Keyboard
shortcut.
Supporting source: wikipedia: Table of
keyboard shortcuts.
Supporting source: wikipedia: Human
interface guidelines.
Supporting source: gnome: GNOME Human
Interface Guidelines.
Supporting source: kde: KDE Human Interface
Guidelines.
Supporting source: apple: Apple Human Interface
Guideline.
The Apple menu, which is always the first item on the leading side of the menu bar, includes system-defined menu items that are always available. You can’t modify or remove the Apple menu. When present in the menu bar, the following menus appear after the Apple menu in the order listed below.
AppName (you supply a short version of your app’s name for this menu’s title) File Edit Format View App-specific menus, if any Window Help
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Hosted by Ken Fallon on 2024-05-21 is flagged as Clean and released under a CC-BY-SA license.
spectrum24, FOSDEM, HAM, SmartCity, SDR.
HAM radio.
(Be the first).
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:18:47
Ken Talks to Marc Balmer and Kristoff Bonne about spectrum24, The Conference for Creative Use of the Radio Spectrum in Open Systems.
Following the success of the Software-Defined Radio and Amateur Radio devroom at FOSDEM, spectrum24 plans to bring users of the radio spectrum together.
For over a century, technology has made it possible to transfer more data, faster, further. Today, wireless technology is everywhere and commonplace. However, it remains a playground and a ground for innovation for many communities.
This conference is an opportunity to publicize your projects and allow the different communities that use the spectrum to meet over a weekend.
If you have an interesting talk you would like to give please see https://spectrum-conference.org/24/cfp for more information
spectrum24 will take place September 14./15. at SmartCity Campus (1 rue de Clairefontaine, 78120 Rambouillet.) at an old radio factory in Rambouillet near Paris, a short 15 minute walk from the train station.
Hosted by Clinton Roy on 2024-05-20 is flagged as Clean and released under a CC-BY-SA license.
recording, microphone, podcast.
general.
(Be the first).
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:08:42
All right. Well, good evening, hackers. My name is Clinton. And this is a very off the cuff episode for me just to announce that I've got a new microphone. So I just wanted to run through a couple of details of that. Make a show, say a little about the microphone while I got it. What I hope to do with it. So this is a roadie wireless go to setup. It comes with three little boxes. Roughly, roughly, you can fit each one of the little boxes inside a matchbox. So there are three of these that come with the set that I bought. Two of them are microphones that you clip onto your lapel. The third is a transceiver. So at the moment, I've got the transceiver on and I've got one of the microphones on. I bought this because I'm going to be going to a conference soon. And one of the things that I do try to do at conferences is to interviews with people. And this is kind of nice in that I can switch these two microphones on. Give one to myself. Give one to the person I'm interviewing. And I don't have to use a single microphone and shove it underneath their faces. And I don't have to swap the microphone between the two of us. The other feature, like the particular reason I've got this model is that each of the two microphone units actually has built in RAM. So it will actually record, like if you've got it set up in the mode, which I do, you can get each microphone to do a backup recording of your presentation. The regular mode for this set of microphones is to actually treat the transceiver as a source and plug it into computer or plug it into your camera as a external microphone. But it has this lovely mode, which I'm recording this particular episode to. We can just turn it on. It's not the transceiver is not plugged into a computer. It's not plugged into anything. And it'll record something like 40 hours of voice. And later on, I can hook it up to my computer as a standard mass storage device and just download the waveform I believe. So it does have some Windows firmware or Mac firmware. I didn't have too much fun getting that to work under Linux. I tried under a couple of different VM products and wasn't having any luck. So try it under wine. I tried under open box. Eventually I did end up installing like a full Windows 10 install onto a qemu image. And that had enough stuff working such that I could install the Rode firmware on it. That let me do an upgrade of the firmware on the two microphones and the transceiver because the first thing you do when you buy something these days is out of the box you have to upgrade the firmware because why would they do that at the factory before they send it out when they can just make the users do that. And there is a phone app but it does not let you update the firmware on these particular hardware models. If I remember the error message correctly it does look like the Android app lets you update the firmware on other Rode microphone devices but not this particular model. So I had to go down the track of setting up a qemu. I did find a good blog post on how to set up a Windows box on qemu. It had a few things that seem outdated so maybe it's a job for future me to write an updated blog post on how to do this. If for nothing else instructions on how to do this in future when I need to rerun the firmware update. The other thing that I really needed to use the software for though is to switch on the recording option. So out of the box these things do not record to the memory that's built into the microphones. So I had to get, I had to update the firmware and then I had to run the software on both of the microphones to switch on the recording option. But now that that switched on I can just hook it up as a USB master device as I've mentioned before and presumably I can just copy the files and delete the files and I won't actually have to run that software. So yeah there's a number of options going forward so I can write that blog post with the updated details. There were a number of hoops that I found that I did not have to go through of the blog post I found so things are getting easier over time. Depending on how in depth I want to go I could potentially one day sit down and install like a USB listening device and see if I can work out how to work out if there are any magic packets getting sent to do the configuration on the device. Do I need to break any crypto stuff or is it just a straight command like plug in the device and send a command with a few funky options. So maybe in the very distant future when I've got no other things on I could try and work out a pure USB non windows solution for setting some of these configuration options. I'm not sure I'd go down the track of updating the family I think that's probably a little bit too risky but you know maybe one day in the future. But yeah basically this set of microphones assuming that it works out okay assuming that it sounds good. I'll hopefully be using these for conferences coming up. Hopefully as well I'll be able to use it for camping and stuff like that so if I'm out and about I'll just be able to pull out these two things transceiver, microphone, a couple of clicks turn them on they talk to each other wirelessly and then start recording something. So it's much smaller than the current microphone that I'm using so it's much easier to travel with. There are two of them so that when I'm interviewing someone it's much easier and it's got recording memory so I don't actually have to plug them into a computer so all up it should be much easier to use. I think it might even give better recording outputs and hopefully like increase the number of talks and presentations that I give on HBO. So that's been Clinton this has been a very off the cuff recording I very much am used to sitting down and writing out a full script for these things so I'm doing this because it's cool new hardware but also because HPR needs more episodes. So yeah maybe other people can do an episode on what particular funky wireless or what particular microphones that they've got that they enjoy using and what the advantages are and disadvantages are. That's it for now. Ciao.
Hosted by Ahuka on 2024-05-17 is flagged as Clean and released under a CC-BY-SA license.
RV, travel, southeast US, Charleston, South Carolina.
Travel.
(Be the first).
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:12:21
We finish our South Carolina visit touring a plantation, and then go to see a magnificent live oak tree. After that, it is time for us to head back home.
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:11:38
Welcome to the third episode of Cov's jams.
We'll start with a couple electronica pieces from Arkadii Kaplan: Corporate Success and Chasing the Shadow. I also featured Kaplan in the second episode of Cov's Jams, way back in 2016. I'm glad to be back.
Next up are two dubstep selections: Time to Army by Muciojad and Sweet Nothing by K4MMERER.
Daniel Bautista's Symphony Number 5 will close out the episode. Daniel Bautista wins at Free, Libre, and Open Source. Not only is he playing public domain Beethoven, but he recorded and mixed the album (in May and June of 2008) on a Gentoo Linux box. Gentoo is how I really learned Linux. He's still releasing libre licensed albums and his newer releases have video recordings which he edits in kdenlive.
The first four tracks are under the Creative Commons Attribution-Share Alike license: Corporate Success and Chasing the Shadow by Arkadii Kaplan, Time to Army by Muciojad, and Sweet Nothing by K4MMERER. Daniel Bautista's Symphony Number 5 is licensed Creative Commons Attribution.
Thank you for listening to this third episode of Cov's Jams. I hope we can enjoy some new tunes together soon!
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:24:11
This is sort of a response to hpr4097 :: Will they take our jobs? Of course they will. by dodddummy, and also the latest community news show, and other shows about the topic.
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:18:46
https://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy
Java Android Magisk Burp Objection Root Emulator Easy
(JAMBOREE)
Get a working portable Python/Git/Java environment on Windows in SECONDS
without having local administrator, regardless of your broken Python or
other environment variables. Our open-source script downloads directly
from proper sources without any binaries. While the code may not be
perfect, it includes many useful PowerShell tricks.
Run Android apps and pentest without the adware and malware of BlueStacks or NOX.
Features / Request
Core Status
RMS:Runtime Mobile Security ✔️
Brida, Burp to Frida bridge ❌
SaftyNet+ Bypass ❌
Burp Suite Pro / CloudFlare UserAgent Workaround-ish ✔️
ZAP Using Burp ✔️
Google Play ✔️
Java ✔️
Android 11 API 30 ✔️
Magisk ✔️
Burp ✔️
Objection ✔️
Root ✔️
Python ✔️
Frida ✔️
Certs ✔️
AUTOMATIC1111 ✔️
AutoGPT ✔️
Bloodhound ✔️
PyCharm ✔️
OracleLinux WSL ✔️
Ubuntu/Olamma WSL ✔️
Postgres No admin ✔️
SillyTavern ✔️
Volatility 3 ✔️
Arduino IDE / Duck2Spark ✔️
Youtube Downloader Yt-dlp ✔️How it works:
Temporarily resets your windows $PATH environment variable to fix any
issues with existing python/java installation
Build a working Python environment in seconds using a tiny 16 meg
nuget.org Python binary and portable PortableGit. Our solution doesn't
require a package manager like Anaconda. I would like to make it even
easier to use but I don't want to spend more time developing it if
nobody is going to use it! Please let me know if you like it and open
bugs/suggestions/feature request etc! You can contact me at https://rmccurdy.com !
Installation/Requirements ( For Android AVD Emulator) :
Local admin just to install Android AVD Driver:
HAXM Intel driver ( https://github.com/intel/haxm )
OR
AMD ( https://github.com/google/android-emulator-hypervisor-driver-for-amd-processors )
Usage:
Put ps1 file in a folder
Rightclick Run with PowerShell
OR
From command prompt
powershell -ExecutionPolicy Bypass -Command "[scriptblock]::Create((Invoke-WebRequest "https://raw.githubusercontent.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy/main/JAMBOREE.ps1").Content).Invoke();" More infomation on bypass Root Detection and SafeNet https://www.droidwin.com/how-to-hide-root-from-apps-via-magisk-denylist/
( Watch the Video Tutorial below it's a 3-5 min process. You only have to setup once. After that it's start burp then start AVD )
Burp/Android Emulator (Video Tutorial )
Update Video with 7minsec Podcast!
name
(Video Tutorial)
name
USB Rubber Ducky Scripts & Payloads Python 3 Arduino DigiSpark
name
Old payloads: https://github.com/hak5/usbrubberducky-payloads/tree/1d3e9be7ba3f80cdb008885fac49be2ba926649d/payloads
PhreakNIC 24: Java Android Magisk Burp Objection Root Emulator Easy (JAMBOREE)
https://www.youtube.com/watch?v=R1eu2Ui1ZLU
name
Listen in ogg,
spx,
or mp3 format. Play now:
Duration: 00:19:18
I was inspired by Knightwise's
episode
4109 on future-proofing HPR.
I agree with many of your criticisms, but I'm not sure that a marketing
strategy is the best way forward. Many of the most successful and
sustainable businesses and organizations have been built on
word-of-mouth.
For example I heard of Google, Zoom, Gmail, Facebook, Slack, Twitter,
Discord, etc from my IRL friends and coworkers rather than from a
marketing message. And most of the open source communities I'm a part of
(Linux, Python, Firefox, Hugging Face, etc) are successful precisely
because their success is not subject to a BigTech algorithm or
exploitative terms-and-conditions.
Most open source projects are able to build community much by actively
resisting the temptation to create a marketing message or social media
campaign and instead focusing on the authenticity and quality of their
"product" and catering to their contributors' and users niche needs and
sensibilities.
My FOSS podcatcher Antennapod,
automatically skips the intro. I had to rewind in order to hear the
episode number and host username in order to compose my reply.
And I have trouble engaging with the comments interface on the HPR
site.
I wasn't even aware of comments on my previous episodes and once I did
learn of it I found it easier to reply on Mastodon rather than on the
HPR website.
As a community, I think we take it on faith that there is a place in the
world for people like us that just want to share ideas, unmediated by
shadow-banning, rug-pulling corporations and attention-hacking
algorithms. I want to have a conversation with thoughtful people. I
don't want to be engaged or monetized or exploited
Some things to know before you use beets to tag your music
Listen in ogg, spx, or mp3 format.
Options to jq; learning about filters
Listen in ogg, spx, or mp3 format.
Sgoti talks about using sed hold/pattern spaces.
Listen in ogg, spx, or mp3 format.
I talk and rant about JSON and Vendors
Listen in ogg, spx, or mp3 format.
HPR Volunteers talk about shows released and comments posted in April 2024
Listen in ogg, spx, or mp3 format.
We continue to look at the details of playing this game.
Listen in ogg, spx, or mp3 format.
Knightwise talks about the some of the changes HPR could embrace to become future proof.
Listen in ogg, spx, or mp3 format.
I describe what's in my bag
Listen in ogg, spx, or mp3 format.
Shoutout to a shoutout I talk more about what I want in a Framework laptop
Listen in ogg, spx, or mp3 format.
Feeds are useful to keep me updated with new information from websites I am interested in.
Listen in ogg, spx, or mp3 format.
A talk about my historical weight gain and what I recently learned so that I now lose weight.
Listen in ogg, spx, or mp3 format.
The JSON data format, and using the jq utility to process it
Listen in ogg, spx, or mp3 format.
An examination of the bag I use when out on the road
Listen in ogg, spx, or mp3 format.
Archer72 chats about capture of extensive MPV history
Listen in ogg, spx, or mp3 format.
Some other guy on the internet talks about A I
Listen in ogg, spx, or mp3 format.
We visit Charleston, South Carolina, and meet up with some friends
Listen in ogg, spx, or mp3 format.
A new series about all things Home Automation, this time a introduction to Home Assistant
Listen in ogg, spx, or mp3 format.
A short, off the cuff, discussion of how we navigated road trips in the past
Listen in ogg, spx, or mp3 format.
I blather on about my thoughts on robots taking our jobs.
Listen in ogg, spx, or mp3 format.
A story and discussion around how knowing powers of two can be useful
Listen in ogg, spx, or mp3 format.
Deltaray rambles on for 45 minutes and over exaggerates about how awesome it is to use Linux
Listen in ogg, spx, or mp3 format.
My experience of running Linux full time for a year.
Listen in ogg, spx, or mp3 format.
Claudio discusses how to install postmarketOS on the PINE64 PinePhone
Listen in ogg, spx, or mp3 format.
Sgoti talks about using bidets and other things. Good heavens!
Listen in ogg, spx, or mp3 format.
norrist uses pytest to demonstrate TDD with a trival HPR info app
Listen in ogg, spx, or mp3 format.
We begin to look at the details of playing this game
Listen in ogg, spx, or mp3 format.
In this episode I describe my experience of fixing some Python code with some help from ChatGPT.
Listen in ogg, spx, or mp3 format.
Sgoti talks about supplying options to bash scripts
Listen in ogg, spx, or mp3 format.
I will give you some suggestions to getting started with digiKam based on my experience.
Listen in ogg, spx, or mp3 format.
HPR Volunteers talk about shows released and comments posted in March 2024
Get a full list of all our shows.