chosen1

The PiSugar2 is a battery board for the Raspberry Pi Zero. It has an integrated RTC chip available over I2C, but there are no drivers included in the kernel with the latest release of the pwnagotchi (or Kali in general). It's a ZXW Shenzhen SD3078; there is surprisingly little information out there about this chip. I suspect it's newish.

The PiSugar folks expect you to install Pisugar Power Manager, which is a web service to get battery status and set the RTC. I prefer to use the standard hwclock utility, because I don't need the extra function in the web interface. There is driver support for this chip in kernels 5.1 or newer, so we can grab that and compile it as an out of tree module. You may be able to adapt these ins

Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great ressources

Royce Williams list is different, listed by vendors responses:
https://www.techsolvency.com/story-so-far/cve-2021-44228-log4j-log4shell/
TBD

Today (April 16th 2019 at noon) the first major clues to discover key #1 was set to be released in a few cities. A QR code with the words 'orbital' were found at these locations and looked like this: (https://imgur.com/a/6rNmz7T). If you read the QR code with your phone you will be directed to this url: https://satoshistreasure.xyz/k1

At this URL you are prompted to input a passphrase to decrypt the first shard. An obvious first guess was to try the word 'orbital' from the QR code. Not suprisingly this worked! This reveals a congratulations page and presents the first key shard:

ST-0001-a36e904f9431ff6b18079881a20af2b3403b86b4a6bace5f3a6a47e945b95cce937c415bedaad6c86bb86b59f0b1d137442537a8.

Now, we were supposed to wait until April 17th to get clues from the other cities for keys #2 and #3 but that wouldn't stop me from digging around with all the new information we had. All that time "playing" notpron (http://notpron.org/notpron/) years ago was going to help me here.

The first thing I noticed was

World Clock

Description

A simple widget that's capable of displaying time for multiple locations around the world. In our company(neo), we use it to display time in different offices.

	[Console]::Beep(130, 100)
	[Console]::Beep(262, 100)
	[Console]::Beep(330, 100)
	[Console]::Beep(392, 100)
	[Console]::Beep(523, 100)
	[Console]::Beep(660, 100)
	[Console]::Beep(784, 300)
	[Console]::Beep(660, 300)
	[Console]::Beep(146, 100)
	[Console]::Beep(262, 100)

	#include <netdb.h>
	#include <stdio.h>
	#include <stdlib.h>
	#include <string.h>
	#include <errno.h>

	#define CANARY "in_the_coal_mine"

	struct {
	char buffer[1024];

	#!/bin/bash

	# king of the mountain - because sharing is for faceb00k
	# * networking fun for geeks in conferences and cafes
	# * find other clients on the local network
	# * see if they have any exposed files via http
	# * use nmap to attempt to knock them offline

	# - OSX or Linux supported (nmap, wget required)
	# - this script derived from manual steps I used to take

chosen1

Errors, typos, something to say ?

Other great ressources

World Clock

Description

Installation