lucapinello's comments

On: In vivo CRISPR gene editing with no detectable gen...

[lucapinello]

Thanks, resubmitted with the right link

On: RaspberryPi got hacked, collected the malicious bi...

[lucapinello]

Take a look at the perl scripts (for example go.pl)

The images .gif are in reality php scripts (food.gif and food2.gif)

The scripts modify also the crontab and add:

#* * * * * /home/pi/udevd > /dev/null 2>&1 & #* * * * * /tmp/romerito > /dev/null 2>&1 & #* * * * * /home/pi/kblockd > /dev/null 2>&1 & #* * * * * /var/tmp/tfti > /dev/null 2>&1 &

I was running raspbmc on the raspberry pi.

It seems the scripts were there before and got activated just today.

[patapon → lucapinello]

Only one of the binaries is for arm (tfti). Others are for x86 and mips. All symbols are stripped off the binaries. I only see two quick clues : an irc server url, and two japanese strings that also appear in this article : http://www.edison-newworld.com/2017/09/linuxtsunami-malware-...

Perl scripts join an IRC chan, wait for commands and google for vulnerable sites to exploit and/or exploit them. They also contain a nice list of proxies.

Do you know how you got hacked ?

[lucapinello → patapon]

Thanks for looking into this! Yes I had open the port 22 and my password was not safe enough I guess. Or alternatively this hack was due a web app I was running in Flask with some vulnerabilities. Stranger thing: the hack happened back in March 2017 but got activated exactly on Jan 1 2018.

On: Show HN: Screen.rip – API for capturing web screen...

[lucapinello]

How different is from this free tool?

https://wkhtmltopdf.org/

[mpetrovich → lucapinello]

If it’s using Chrome headless, it’s superior to wkhtmltopdf. The latter has lots of little gotchas and things that may render fine in a browser but not in wkhtmltopdf. Chrome headless doesn’t suffer from those issues, obviously.

[gotrecruit → mpetrovich]

but the site itself says it "runs headless".

[htgb → gotrecruit]

Running headless does not imply that it's running Chrome headless, just that it runs without a GUI.

[have_faith → lucapinello]

One is a hosted service and one isn't.

[lucapinello → have_faith]

I know but if I need to use an API to an external server I can also launch a command locally. 7$ is not much but I don't see any real benefit unless you want to capture a subsection of a website.

[tyingq → lucapinello]

The clip to a specific DOM element seems unique to this.

[laktek → tyingq]

Also with screen.rip, you can run a custom JS before capturing the screenshot and also can wait for certain elements to appear (which is quite important today with client-side rendered sites)

Disclaimer: I created screen.rip

[sah2ed → laktek]

> Disclaimer: I created screen.rip

No need for a disclaimer, after all, this is your Show HN ;)