Max Ammann

Name URL Hinweise Cafe Auszeit Fehlt Wiehre, Di/Mi geschlossen Chada Ramen Fehlt Delicatessa https://delicatessa-freiburg.de/mittagstisch/ Curryhouse Fehlt Di–Fr zuka solicafé / Haus der Jugend https://zlev.de/essen-trinken/zusammen-kaffee/wochenmenue Cha…

I got my hands on a broken Specialized TCU.

Teardown of a Radica 20Q electronic game.

Teardown of a Minol device.

Teardown of a Comfast device.

At work, I had the pleasure to manage a code audit.

These are notes from one evening of checking how the Midea Portasplit communicates and how its electronics are structured.

At work I had some fun taking apart a random startup’s CAD product Zoo blog.

Just published a new blog post about some vulnerabilities I discoverd in some cloud CAD application.

A machine-translated German version is available below.

Teardown of a Lidl ultrasonic cleaner device.

I’m a technical guy and by no means an expert on compliance.

The Kingrinder K6 is a popular manual coffee grinder known for its consistent grind quality and durability.

I got myself a Dreame vacuum robot with the goal of – cleaning.

The Tür an Tür Digitalfabrik and I are publicly disclosing several security and privacy issues in the iOS and Android NRW Ehrenamtskarten-App.

This post was release on the Trail of Bits blog.

This post was release on the Trail of Bits blog.

This post was release on the Trail of Bits blog.

This post was release on the Trail of Bits blog.

This post was release on the Trail of Bits blog.

This post was release on the Trail of Bits blog.

RFC 7464 defines a text file format based on the popular JSON format.

TL;DR: Just tell me what to use!

Generating QR codes is supported by various high quality libraries.

Stencil testing refers to a technique in computer graphics programming which allows conditional processing of fragments.

Background With Android 11 the method for connecting to Android phones via ADB over the network has changed.

For our tlspuffin fuzzer we use Rust to implement the testing harness.

While trying to reproduce the implementation bug CVE-2021-3449, I had to implement secure renegotiation as specified in RFC 5746.

TLS, like most cryptographic protocols, depend on random numbers to generate keying material.

Traditionally, fuzzing mutates bits and bytes.

TLS is a beast of a protocol with at least 50 extensions and over 20 years of history.

Research in Fuzzing has gained a lot of traction in the last decade.

Sometimes you want to have a ScrollView which scrolls from right to left or from bottom.

Keeping a secret like GPG keys safe is not a trivial task.

This probably happens to every analog photographer sooner or later.

Link to the project: github.com/maxammann/ndove Sometimes you want to expose a port running on localhost to the internet.

If is possible to flash a new firmware from Linux or BSD on an APU embedded system.

It is very convenient to switch between different monitor layouts when using a laptop with multiple external monitors.

A docker setup can be very helpful when trying to separate services if they are not packaged otherwise.

VueScan for the Nikon LS-2000 offers a future proof way of using old scanners over the legacy SCSI standard.

We are going to visualize the timestamps of messages in the Telegram database.

The documentation about setting up Tiny Core Linux to flash a new coreboot version on APU boards is quite outdated.

This guide is tested on Armbian 20.8 The default Armbian images do not offer an encrypted root partition.

The firmware and drivers for the Fingerprint Reader for Linux are finally ready as promised a few months ago.

I recently got my hands on a Nikon Coolscan 2000 (LS-2000) scanner.

I received a free Yubikey from an untrusted source on the CCCamp 2019.

I had problem to connect a InfluxDB from the pfSense because of a invalid certificate chain.

If you previously converted a raw image using qemu-img convert to a qcow2 image you maybe want to mount it to retrieve and modify data: 1modprobe nbd max_part=8 2qemu-nbd --connect=/dev/nbd0 db1_old.qcow2 Now you can mount partitions in the image using:

Disclaimer: This is probably not a step by step guide because there are a lot of dependencies involved.

Sometimes it makes sense to connect to the PI Zero by using the g_ether kernel module.