Posts

Featured Post

Running four AI models fully offline on a Nextion ONX3248G035

-
Image
A while back I unboxed a Nextion touchscreen dev board and vibe-coded a WiFi auditor onto it . That board has been sitting on my desk ever since, and one question kept nagging: this thing has 8 MB of PSRAM and a dual-core ESP32-S3. Could it run an actual language model? Not talk to one over WiFi — run one. Turns out: yes. Four of them, in fact. No internet, no server, no phone, no PC. Everything in this video is generated by the chip on the board. All four models, on the board, offline. Loading a model from the SD card, then generating. What is actually running The board boots into a menu. Tap a model, it loads and starts generating. All of these were trained from scratch on an M2 Max in well under an hour. Malayalam English Arithmetic Icons Parameters 7.6M 7.6M 1.0M 577K Flash 3.95 MB 3.95 MB 0.41 MB 0.58 MB Speed 13.0 tok/s 14.9 tok/s 20.7 tok/s 3.4 s/image First things first: this is not a Nextion HMI The ONX3248G035 is sold under Nextion branding, and the name is...
Post a Comment
Read more

Meet Dhara — send files without the cloud, without accounts, without internet

-
DHARA SHARE FILES · NO CLOUD · NO ACCOUNTS · NO INTERNET A cross-platform file-share app that runs a tiny HTTP server on your device. Anyone on the same Wi-Fi (or your phone's hotspot) can pull the files straight from you — from any browser, no app required. TL;DR — Dhara turns your phone or Mac into a temporary file server. You pick a folder or files, Dhara spins up a local HTTP server, and any device on the same network opens the URL and grabs what it needs. No signup, no upload to a third party, no data leaving the local network. Just launched on the iOS App Store; macOS in review; Android and Windows on the runway. Why I built Dhara Every "share this file to my other device" workflow in 2026 involves at least one of the following annoyances: Upload to a cloud you don't own so it can come back down two feet away. Create an account on some third-party service that now has your file in its logs. Pair devices , install the same ...
Post a Comment
Read more

Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal

-
Image
Cloning a CAME parking-gate remote with a Flipper Zero — why static Princeton codes are a security own-goal A surprising number of buildings hand each tenant a little plastic fob to open the parking barrier — and a surprising number of those fobs are not what you'd call secure. If the building installer cheaped out (or just picked the default jumper settings), the remote sends a fixed sub-GHz signal every single time. No rolling code, no challenge, no cryptography. Just the same packet, on the same frequency, every press. Which means anyone with a Flipper Zero and a few minutes can clone it. Here's a 90-second demo of doing exactly that on a CAME barrier — and the technical context for why it works. The setup The gate is a CAME -branded barrier, the kind you see at almost every apartment compound parking entrance. Every tenant is given a static remote — not rolling code. Why? Cheaper. Static encoders like Princeton's PT2262 (and the dozens of clones ...
1 comment
Read more

From unboxing a touchscreen dev board to vibe-coding a full WiFi auditor

-
Image
From unboxing a touchscreen dev board to vibe-coding a full WiFi auditor A parcel landed at my door from Nextion Systems : the new Open Nextion — an ESP32-based board with a built-in capacitive touch display. Came in two flavors (3.5" and 2.8"), plus a speaker, a dual-microphone board, and an IO adapter. The kind of package that's begging to be turned into something it was never meant to do. So, naturally, I did exactly that. What's actually in the box Before any of the fun started, here's what the Open Nextion package shipped with: Two Open Nextion boards — 3.5" and 2.8" variants Onboard speaker Dual-microphone board (for stereo capture / wake-word work) IO adapter for breaking out the rest of the GPIO The board itself is generous on connectivity: USB-C , a battery connector with a real RTC , I2C, UART , a camera interface, SD card , plus mic and speaker pins. It's basically a tiny computer with a touchscreen bol...
1 comment
Read more

Re-Post : How I managed to gain access to The Indian Digital treasure – 3 Billion documents on Digilocker

-
Image
 Hi Guys, This is a repost of the blog that was written on  https://yetanothersec.com/blog/2020/06/03/digilocker-disclosure/  as the yas portal is facing technical issues everynow and then. Also apologies for the bad quality of screen shots, i will find old files and update it later. D uring the beginning of May 2020, there was a large commotion about the arogyasetu app and its security after a so called “hack” by infamous political hacker named Elliot Alderson. In light of all this, we at the YAS (Yet Another Security) community, had some talks in our WhatsApp group. So, it turned out to be a discussion on techniques used for bypassing SSL pinning on the mobile apps. This whole discussion made be curious about other apps from India government and since I have worked on similar projects outside of India, digilocker caught my attention. Hence, I downloaded the app and installed on my test devices and fired up my favorite toolset burpsuite + Frida. I used my homebrewed pinn...
25 comments
Read more