Recent content in Posts on SixFoisNeuf
I have just pushed termsonic v0.3 to my Git forge, with the corresponding binaries uploaded here , for Windows and Linux. This release has been a long time coming: v0.2 was released at the end of 2024! I didn’t work a lot on this project during the last year, just fixing things here and there, adding features I needed. I feel like there’s enough new stuff to warrant a new release now…
I have been paying for Nintendo’s “Nintendo Switch Online” for several years now, but I haven’t used it in quite some time. However, I can’t just cancel it: I have played a lot of A Link to the Past on the Super Nintendo emulator you get access to, and I don’t want to lose my save! This means I’ve been tinkering with how to get the save out of my Switch (and into Retroarch): here’s a writeup. The…
When I moved into my appartment, one of the closets contained an IP camera, probably forgotten by the previous occupants. The camera was branded with an “ Orange ” logo, and had an Ethernet and an AC plug on the back. The camera, as presented in its manual Curious, I plugged it to my router and powered it on. It showed up as “SC0FD7FF”, and running nmap against it gave me…
Doing some research for my bush hid the facts article led me to read about Unicode, as well as the various ways to encode Unicode code points. I didn’t really look into the Unicode standard (it looked too complicated), but I still wanted to go back and have a look at the nitty gritty details at some point. I only knew that UTF-8 was a 21-bit encoding, and that it could encode any code point…
When I was a kid, I loved looking up easter eggs in the software and games I used regularly. It was so fun finding these messages hidden by the developers, or to have a silly little game available in some boring spreadsheet program . One “easter egg” which was more puzzling was in Windows Notepad. Under Windows XP, typing the sentence “bush hid the facts” in an empty…
I’ve converted to NixOS ! It’s very cool, and I like it a lot. My main gripe is that looking up derivations or NixOS configuration options seems to very much depend on using https://search.nixos.org . The website is fine, but I don’t like that there’s no real alternative you can use directly from your terminal, short of manually grepping through your copy of nixpkgs . All…
I can never remember the formula, and every website with a form is full of ads. Enjoy. km/h min/km The formulas are the following: pace = ( 1 / speed) * 60 speed = 60 / pace “pace” has to be in decimal form, e.g. “4:30min” is “4.5”
When I first discovered Debian and installed it on my computer, I vividly remember the look of the login screen: a light blue background with swirls, and a plastic-looking login box. Based on the year (around 2010) and looking at screenshots on the Internet, I believe that was Debian Etch (4.0). Time sure flies! The login box on Debian Etch (source: usuariodebian.blogspot.com ) I’d love to…
Hey! I have released a first version of a small program I made to scratch an itch: wgmgr . I use Wireguard as a VPN solution, but I wanted a fancier way to manage clients: manually generating keys is doable, but it becomes a pain on mobile devices for example. I’m aware of the existence of wg-easy , wireguard-ui , and a plethora of other Wireguard interfaces. I don’t want something…
It might be obvious from the title of this post, but I bought a used Lenovo ThinkPad X230 from LeBonCoin without checking if it had a Supervisor password set. This means that everything worked fine until I wanted to tinker with the BIOS to change the boot options, when I was greeted with this scary-looking screen. After trying the usual “1234”, “0000”, and…
This article is a copy of the original Is Your Son a Computer Hacker from Adequacy.org. The original website doesn’t appear to be online anymore, so I’m copying it here for posterity’s sake. I am not the author of the article. As an enlightened, modern parent , I try to be as involved as possible in the lives of my six children. I encourage them to join team sports. I attend…
I’ve been watching DankPods on YouTube for some time now (really entertaining guy btw). His bit is that he buys old iPods and does stupid stuff with them. Here’s one where he runs Doom Eternal off an iPod Classic in “hard drive” mode . What a maniac. This made me wonder how expensive it would be to get a used iPod and make it usable enough so that is plays my music library.…
Overseerr is a request management web app for Radarr and Sonarr . The Overseerr docs are very clear about how to install their app: The Overseerr snap is the only officially supported Linux install method aside from Docker. Well, I don’t run Docker or snap on my home server, and I don’t plan on starting just for a single app. Let’s see if we can install it by hand, without going…
I’ve been working on a new project for the last 2 weeks: a Subsonic client running in a terminal, with a nice Terminal User Interface (TUI). It works on Linux, Windows, and macOS, and should be compatible with most servers implementing the Subsonic API (it was successfully tested with Navidrome ). It supports FLAC, OGG and MP3 files. All three formats are natively decoded in Go, which means…
I have recently set up cgit over at git.sixfoisneuf.fr . I’m using Caddy as my Web server, which means that getting it to execute CGI applications took some work, as it is not possible by default. I have installed Caddy from the Debian package repository, so I can’t use third-party plugins such as http.handlers.cgi . If downloading a custom-made Caddy version works for you, you can do…
After Elon Musk announced that he would be buying Twitter to “bring back free speech to the platform”, I started thinking about ways I could leave the platform behind. Honestly, I had never been very talkative on the bird site, preferring to lurk around without reacting. I asked myself a simple question: “How did we keep up with the news before Twitter?”. The answer seemed…
As promised, here is a writeup about how I ported Doom to my old Kindle 4 ! I will try to detail my thought process for each step, and why I chose to do it the way I did (spoiler: it’s mostly because that’s what worked first). It could be useful to read the previous part if you haven’t yet, because it details how the OS exposes the e-ink screen and hardware buttons to…
In this blog post, we will research in more details how the system interacts with all the different hardware components of this e-book reader. In the previous blog post , we stayed within Amazon’s “walled garden” (kind of): our apps had to use the Kindle Developement Kit, and with it all kinds of restrictions: No socket connection. All network connections must be HTTP/S. Cannot…
I have been back at my folks for winter holiday, which means I’m rediscovering some old stuff I had laying around. One of these is a Kindle 4 , an old ebook reader which was gathering dust in the corner of my room. After seeing someone use it as a weather station, I started to look up how I could go about running custom code on this thing. It turns out it’s pretty easy to get SSH…
I recently caved in and acquired an Oculus Quest . Even if Oculus is now part of the Facebook conglomerate (ugh), this piece of hardware is really impressive, and relatively affordable: you essentially get all the hardware you need to get access to the VR ecosystem for about ~€450. No need for a beefy PC or anything of the sort! On the technical side, it seems the headset runs a modified Android…
This post was written as part of my work as a member of the Airbus CERT . Anectodes and opinions shared in this post only reflect my own beliefs and not necessarily my teammates’ or my employer’s. When investigating an intrusion on a system, the Windows registry can be a treasure mine of information. From quick wins like grabbing the machine’s name or recent documents to more advanced techniques…
The only challenge I solved during this CTF was the “unVM_me” reverse engineering challenge (finally! Something other than crypto!) We were given a pyc (Python Bytecode) file containing the flag. Executing it asked for the flag, and told us if it was right or wrong. Decompiling the bytecode I used PyCDC to decompile the pyc file. This gave me the following source code (I modified it to…
Here’s a quick writeup on the two challenges I solved (Banana Princess and Beginner’s luck) during BITSCTF with the Cryptis team. It was my first CTF and a great experience :D Banana Princess For this challenge, we were given a PDF file which was said to have been encrypted. Hexdump, search for a header By running hexdump -C MinionQuest.pdf | head , we can get the header of the PDF…
On 2017-01-27, I received a suspicious email on an address I no longer use. EDIT: I received two more emails with the same file, only the message was different. Is it a recent ongoing spam campaign? Hello, My name is Adam Buchbinder, I saw your GitHub repo and i’m pretty amazed. The point is that i have an open position in my company and looks like you are a good fit. Please take a look into…
Ce post est une traduction libre de “We Are Sorry To Inform You” Il présente des commentaires de peers auxquels certains articles fondateurs de l’informatique et de la cryptographie moderne ont été envoyés. E.W. DIJKSTRA “Goto Statements Considered Harmful” Cette publication essaie de nous convaincre que la fonctionnalité goto devrait être retirée des langages de…
3DS hacking can be a bit daunting to approach even by tech-savvy people because of the lingo and all the different security measures implemented by Nintendo. This post will try to clear everything up. Most of the information here comes from 3DBrew . Glossary o3DS(XL): Original 3DS (the first model) and its XL counterpart n3DS(XL): Upgraded 3DS (New 3DS & New 3DS XL) 2DS: the 2DS if functionnaly…