Saved toolsSubmit a tool
FOXAI SEARCH

Search FoxAI

News stories 289

startup-projects

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller

I built Coldframe, a honeypot that pretends to be a supermarket refrigeration controller. Inspired by the events on industrial fridge installations in the past weeks, I wanted to see what people would try against a convincing fake.To learn more about this I built a honeypot that resembled perfectly the Danfoss AK-SM 800A and Dixell XWEB interfaces. Both of them are recognized on Shodan as real ones (an not as honeypots). It’s one Python file using only the standard library, and it builds on eppser/danfoss-ak-sm-decoy and public research by Synacktiv, Claroty and Ironhackers.Things that were fun to get right:- Matching real units. I used Shodan records of real devices to match header order, page titles, certificate fields and TLS versions. The Danfoss persona sends nginx headers in the same order as a real AK-SM 800A. The Dixell persona sends no Server header and pads its page to exactly 8,202 bytes.- Recognising exploit attempts. It recognises CVE-2025-41450, the Danfoss “code of the day” login bypass, and records whether the submitted code is correct for today. It also tags attempts targeting three other Danfoss CVEs and the XWEB vulnerabilities.- Letting them in. Default logins open a fake store dashboard with defrost buttons, so you see the second move, not just the first. Nothing behind it is real.Two instances have been live for a day. So far they’ve only seen generic scanners and Shodan’s crawler, which is called refrigerator.census.shodan.io.Feedback welcome, especially from anyone who has seen these devices in the field! Comments URL: https://news.ycombinator.com/item?id=50406292 Points: 15 # Comments: 1

Hacker News Show HN
startup-projects

Show HN: Nino – Fastest C# serializer, safe on untrusted input, also TS/Go/Rust

Nino is a source-generated binary serializer for C#, and as far as we know the fastest one. In the same BenchmarkDotNet run on GitHub runners against MemoryPack 1.21.4, it serializes classes and polymorphic types 3.5–7.2x faster and deserializes them 1.7–2.1x faster (arrays of unmanaged structs are on par). Deserializing into existing objects allocates nothing. Reproduce: https://nino.xgamedev.net/en/docs/v4/benchmarksIt is built to read bytes you do not trust: lengths are checked before allocating, depth is bounded, hash flooding is limited, and the read paths are fuzzed in CI.The bytes are a spec, not a memory dump, so CoreCLR, Mono, IL2CPP and 32-bit hosts write the same bytes, and runtimes for TypeScript, Go and Rust pass the same conformance corpus.Trade-offs: positional by default (VersionTolerant or Keyed for stored data), a 4-byte type id on polymorphic values, no System.Type, needs C# 9 and Roslyn 4.3+.Docs: https://nino.xgamedev.net Comments URL: https://news.ycombinator.com/item?id=50413601 Points: 1 # Comments: 0

Hacker News Show HN
startup-projects

Show HN: Shutdown Watch – App shutdowns, export deadlines, and alternatives

My recipe app picked up users when a similar app shut down, and I kept noticing people scrambling to export their data, so I created this project to scratch my own itch.The 3 main purposes this serves are:1. Give the public a way to find how to export their data or find a replacement if one of the apps they use shuts down.2. Give app creators a way to get their apps in front of people who are actively looking for a replacement for a similar app. Sponsored spots are labeled and never change the dates or export steps.3. Provide inspiration for app creators looking for ideas for what to build next. Just because apps shut down doesn't mean they were not good ideas; many times they shut down for other reasons, like poor execution, no marketing, over-spending, etc.Every date and export step links to the company's own notice.I'm always open to ideas to make it more useful. I read all the comments and constructive criticism and input are always welcomed. Comments URL: https://news.ycombinator.com/item?id=50412639 Points: 1 # Comments: 0

Hacker News Show HN
startup-projects

Show HN: UK: Skip Royal Mail QR Code Queues with the Prince of Post

This scratches an itch I experience most months. When you get a "super handy QR Code" from a service, like Asos, Vinted and others that means you have to physically go to a post office to post your parcel. About ten years ago this was revolutionary convenience, but now it's a frustration.If you're like me you use Royal Mail's collection service to ship most of your parcels/returns from home, and post offices are open for ridiculously narrow times of day these days. Royal Mail don't provide an online facility to create a label from these in-person QR codes, so I built one instead.Behold, Citizen - Prince of Post! https://princeofpost.comI had some fun designing this, and it's something that I'll genuinely use all the time, so I thought I'd share it for others with this problem too. I couldn't find any prior art, but if you want to ruin my day please do tell me about anywhere that does this already :-) Comments URL: https://news.ycombinator.com/item?id=50406466 Points: 1 # Comments: 0

Hacker News Show HN