InFeeo
United States
technology
New
Language
Profile channel

@Simon

No bio yet.

Since 31.05.2026

Show HN: Ultrasonic 3D motion capture (Orientator)(twitter.com)
"All opinions expressed here are my own and do not represent the official views of my employer. On the other hand, I obtained approval from my employer for presenting at the academic conference (JSME). Basically, the information provided will be limited to what is stated in the announcement." We have developed a spatial dimension measurement device and motion capture (orientator) using airborne ultrasonic waves. We achieved spatial measurement by using 3 ultrasonic transducers and 3 ultrasonic microphones. The measurement principle is based on 3 sets of 3-side measurements. We acquire plane equations of microphones and transducers, and calculate the orientation angle and direction based on the surface normal vector. It is expected that this device can instantly measure the positional relationship of pipes, etc. at plant construction work with displaying the 3D data on PC in real time.
Protocol Prying: zero-click vulns in AirDrop and Quick Share(Network.framework)
Apple AirDrop and Google/Samsung Quick Share are proximity file-transfer protocols used by over five billion devices, yet their application-layer security properties remain largely unstudied because both stacks are proprietary and undocumented. Both protocols are reachable from wireless proximity without any prior pairing and process complex serialized content (binary plists, CPIO archives, Protocol Buffers, UKEY2 handshakes) inside privileged daemons, making them attractive zero-click targets across multiple operating systems. We perform the first cross-platform reverse engineering and protocol-aware fuzzing study of both stacks. We reconstruct AirDrop's seven-layer state machine and DVZip adaptive compression from binary analysis, build AIRFUZZ, a protocol-aware fuzzer that mutates pre-compression representations, and complement it with targeted hand-written analyses of Samsung's Quick Share service and Google's Quick Share for Windows. We discover six vulnerabilities (V1-V6): three pre-authentication issues in macOS/iOS AirDrop (V1: Swift fatalError DoS in the HTTP path router; V2: unbounded XML plist recursion in Foundation; V3: NULL dereference in Network.framework's HTTP/1.1 parser), two protocol-layer flaws in Samsung Quick Share (V4: pre-authentication OfflineFrame dispatch; V5: D2D encryption bypass for three frame types), and a heap use-after-free in Google Quick Share for Windows (V6) for which Google awarded a bounty. We responsibly disclosed all findings, and Apple, Samsung, and Google have acknowledged the reports.