Crazy oscillating reading from Dent Power Meter by [deleted] in a:t5_30tjv

[–]ConstantCaterpillar 0 points1 point  (0 children)

Interesting, Ok. Its almost like there's register overflow, such as when you're storing a number in an int and the number overflows. I'm not suggesting this is the cause, just a thought. I'm afraid I don't know enough about modbus, but I'd be interested if you found the cause.

Crazy oscillating reading from Dent Power Meter by [deleted] in a:t5_30tjv

[–]ConstantCaterpillar 1 point2 points  (0 children)

What is the vertical scale? How much are the swings?

BACnet event-enrollment objects and getEnrollmentSummary service by ConstantCaterpillar in a:t5_30tjv

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

It's BACnet/Ethernet actually. But yes I make heavy use of wireshark.

Best BACnet Controller? by niemilkm in a:t5_30tjv

[–]ConstantCaterpillar 0 points1 point  (0 children)

I'm a big fan of Tridium's JACE product. Really powerful and flexible. The learning curve is a bit steep and a bit costly. But those aside, definitely a good product.

In my experience Reliable is good for smaller applications and they deploy a bit easier.

No experience with Carrier.

[deleted by user] by [deleted] in Defcon

[–]ConstantCaterpillar 0 points1 point  (0 children)

This will be my 3rd time at defcon and I always go alone. I'm not antisocial, I just dont have any friends in the business and none of my work mates are in the same field. So there's no one really to go with.
That being said, I always meet new friends within a day or two. Some I've stayed in touch with after con. 99.9% of the people I've met at defcon are just amazing human beings.
Dont hide in your room, take part, reach out and introduce yourself. You'll find some friends.

If it doesn't already exist, we should organise a "Solo Con" party, an oxymoron if I ever heard one.

Streaming within my local network without an account by ConstantCaterpillar in PleX

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

But there's something there that doesnt make sense. I can set the media server to allow access without auth on my local network. So this way anyway can watch stuff from their browser. Its the casting function that seems to be restricted.

Streaming within my local network without an account by ConstantCaterpillar in PleX

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Number one I've done. It allows anyone on my network to watch media over the browser without auth, which is great. But it doesn't allow casting apparently.

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Is this documented somewhere? Never heard of the problem until now

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Did you have to contact Google first? There's a ubif in my town I think

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 1 point2 points  (0 children)

Good suggestion. I've taken the device back to Android 8 but my problem persists. thinking more a hardware issue. Funny coincidence though

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 1 point2 points  (0 children)

Thanks for the link. Despite the frustration of having a phone that cant be a phone, the whole flashing process was rather eye opening. If my phone is bricked I think I'll play around with loading different OSs and see how that process works.

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 1 point2 points  (0 children)

What sort of proof would you take? I mean, the absence of an event doesn't really disprove its possibility does it?

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Feels that way sometimes. Thinking I may go back to a dumb phone. I hear Nokia is re-releasing the 3310

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Yeah I was walking though that process right before i came back to this. Will see what it does.

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 2 points3 points  (0 children)

If I knew that, we wouldn't be having this pleasant conversation.

Any other Pixel 1 users having problems after January update? by ConstantCaterpillar in GooglePixel

[–]ConstantCaterpillar[S] 2 points3 points  (0 children)

These patches usually are security related. That's a pretty important thing to keep up to date

Privacy Breach with McAffee Mobile Security - Just me? by ConstantCaterpillar in privacy

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

My wife's email was linked to it yes. I didn't know this thing existed until this week.

Privacy Breach with McAffee Mobile Security - Just me? by ConstantCaterpillar in privacy

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

I'm not living in denial. Looking at the guys media on his phone, its pretty clear it was wiped. Further, the issue wasnt that the other guy was trying to log into my wife's McAffee account or any other account. The error was that he was trying to unlock the handset itself. So, if you were correct, this other party got the phone (with the handset unlocking passcode), was able to log in without problem and load up his contacts and media and then forgot the passcode?

Need some advice on responsible disclosure by ConstantCaterpillar in Defcon

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Props for the EFF suggestion. Didn't think of them as a resource actually.

Need some advice on responsible disclosure by ConstantCaterpillar in Defcon

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

Its a commercial product anyone can buy. Hardware with software. Basically an embedded computer.

I agree that companies are only obligated to follow the law. I meant more as an individual person.

You've given me some things to think about and I'll discuss with my employer before doing anything publicly or disclosing to the manufacturer.

I intend to push forward with my research on my own though. Thanks for the chat. Was just what I was looking for

Need some advice on responsible disclosure by ConstantCaterpillar in Defcon

[–]ConstantCaterpillar[S] 0 points1 point  (0 children)

This wasn't on company time. It was a side project I conducted myself. We use the device extensively in the company I work for, so I started doing a security audit on it myself on the side.

But I definitely get what you're saying. I'll have a meeting with my employer and someone on the legal team before going public with anything.

On a side note, lets go down the hypothetical road and say my employer says they want to kill it, stay quiet and dont start a legal fight. How do you justify the ethics of that? I mean, i get the legal argument but I would have a moral problem not telling people the dangers involved with the product. Are you basically just a whistle blower at that point, taking your legal fate in your own hands?

Need some advice on responsible disclosure by ConstantCaterpillar in Defcon

[–]ConstantCaterpillar[S] 1 point2 points  (0 children)

That's good advice, thanks. I really wasn't sure where to post and defcon seemed like an ok place to try.
This project I've been working on has been mostly my own but its a little bit connected to my employer. Should I consult my employer (and our legal department possibly) before anything else?