I'm currently bootstrapping an api/sass that takes any url and converts it to an image. It runs on top of chromium and uses the CDP protocol to do cool things like automate basic auth, custom http headers, injected js, mock mobile templates and device emulation, custom interactions with the webpage, it can also return json or upload the results to dropbox, s3, or google cloud storage. I'm looking to chat with people interested in this kind of technology as I polish off the final touches on the API and get the product live!
What kind of features would be useful to you if you were to go the API route for something like this?
I used something similar to this in the past to evade traffic manipulation on a controlled network. Iodine gives you a full tun/tap connection and encapsulates an ipv4 connection over dns null requests and responses. I'm not sure it is stealthy as such countless random requests to a single wildcard domain look a little suspicious even in the high noise environment I was testing in the blue team caught on after a few months.
I ran mosh and ssh over top to secure the connection
Just enough bandwidth for an 80x30 in realtime
I think you can force load a plugin in chromium headless with a command line argument.
Last time I checked the issue was accessing the html dom of the extension e.g chrome-extension://blahblahblah as it only returns a blank page.
The other annoying issues I experienced and currently remain unresolved in the latest chromium build headless mode + CDP are:
1. Granting permissions to scopes for sites e.g geolocation, notifications
in Browser.GrantPermissions
2. Setting a mock geolocation
in Page.setGeolocationOverride
I've tried replacing the JS navigator function for geolocation, even if you grant the geolocation permission on the site it still says that it is prompting the user
If anyone has any advice on how to resolve these issues without a virtual X server it would be greatly appreciated. Feel free to drop me a bell @ henry@str8up.media or in a comment.
If google needs anyone to find bugs in chrome headless and CDP I need a job.
I generally find other people to hit me with a broom until I finish the project I'm currently working on.
This is not renewable because generally these people don't fully understand the product I am building and at the same time the whole broom as a service does get expensive.
I think if we can get too the point where we distribute the brooms in such a way that people do not need a third party for their sweeping needs that humanity as a whole might finally be able to finish a project.
Hi, I was wondering if anyone could answer a couple of questions how this application interfaces with CPEs and how it compares to existing tools (TR-064/TR-069). So I understand messages are passed over http
1. how does the cpe then know where to get and set the relevant configuration data? Is this done automaticly or do I have to write additional code to interface with the specific device implementation from here?
(how posix compatible is this?)
2. How does this library scale? How many devices are you able to concurrently manage and how beefy of a machine\internet connection does it require?
Looks like a cool project I'm currently writing my own TR-064\TR-069 libary with plans on an ACS in python. I'll have to have a bit more of a read but some more flowcharts would be awesome, I love flowcharts for big picture stuff like this.
Hi,
The phone provisionning is not done using TR-06x as it is not relevant for these endpoints. We use https based provisionning to be closest to vendor specifications.
Documentation is here : http://www.wazo-platform.org/documentation/overview/provisio...
Regarding your 1st question : you can pass the provisionning server throw DHCP (it is explained on the doc link)
Regarding your second question : as the process is to deliver a flat file to a phone, it scales easily.
What if one community has money to spend on drones,
While the other does not?
What if both communities have enough money and value human life so they just send endless drones at each other smashing said drones into pieces until one community has enough money to spend on drones and one does not
It could be about power, and from what I've seen, the people that come from that: don't like to not come from that
complacency is a word that comes to mind
Imagine people build super weapons and super defenses. With the push of a button you can kill 1000 people. With another you can defend the lives of 1000 people. As the arms race progresses the impact of the offense and defense tech grows. One day the weapons are strong enough to kill a billion people and defend a billion people.
One side runs out of defensive drones. How good is their negotiation position? They would have zero power.
I think mental diversity in the workplace is something to be encouraged not ostracized.
Personally I find both Terry and Dale to be great, well informed reads despite a bit of what someone else labeled self depreciating behaviour.
I've used ngrok in the past for exposing local projects but didn't like being time limited and then having someone try to sell me something. The setup I went with is I forward my local http servers port over an ssh tunnel to a local port listening on a gcompute VPS running apache with a virtualhost configured using mod_proxy to listen on a subdomain managed my cloudflare, cloudflare then takes care of the https/ssl certificates and your good to go!
This setup has been working better than ngrok for me, The only thing I miss is ngroks logging, but I haven't come accross anything I couldn't debug between apaches access.log and my local development console.
For anyone doing this more than once a day I really reccomend investing in building your own infastructure, even if you don't learn a thing or two at least your brushing up on a topic.
Thanks for the comment-
I haven't used Serveo personally, but it looks like a product that ticks pretty much all the boxes my setup goes for without all of the configuration-
And their not trying to sell me something
+1 for serveo
What kind of features would be useful to you if you were to go the API route for something like this?