
Tech R&D | Hardware | Embedded | Hacking | Book author: 'Hacking con Drones' | Speaker @defcon @BlackHatEvents @rootedcon
Joined June 2012
- Tweets16.9K
- Following1.6K
- Followers6.2K
- Likes18.3K
Pinned Tweet
Ya disponible mi libro "Hacking con Drones", editorial @0xWORD . elladodelmal.com/2017/06/lib…
David Meléndez retweeted
+ "you know what i'd really like?"
- "tell me"
+ "a website"
- "...we can do a website"
+ "a real website, not some claude generated neon slop, a real website"
- "i'll make you a very good traditional handmade website, one that is built with dozens of snippets from stackoverflow"
David Meléndez retweeted
I'm doing some tests with nixos, and I've discover that they normalize metadata too, including the timestamp.
That's pretty amazing, because if two different computers try the same flake for example, and the metadata isn't normalized, the result could be different and not fully reproducible.
David Meléndez retweeted
Yo siempre que me preguntan qué se necesita para entrar en ciberseguridad paso esto a la gente roadmap.sh/cyber-security porque darle una retahíla de indicaciones sin recursos es como decirle a alguien que quiere estudiar cocina que aprenda a cortar verdura sin enseñarle al menos a buscar dónde.
David Meléndez retweeted
Yo siempre que me preguntan qué se necesita para entrar en ciberseguridad paso esto a la gente roadmap.sh/cyber-security porque darle una retahíla de indicaciones sin recursos es como decirle a alguien que quiere estudiar cocina que aprenda a cortar verdura sin enseñarle al menos a buscar dónde.
David Meléndez retweeted
I am a U.S. permanent resident with over seven figures in U.S. dollars in savings and investable assets, a stable career, income, and property. I have never been denied a visa by any country, nor have I ever violated the immigration laws of any country.
Yet over the past four years, the Schengen visas issued to me have become progressively shorter and more restrictive.
In 2023, France granted me a 90-day multiple-entry visa. Naturally, I expected that my excellent travel history would qualify me for a longer visa upon reapplication. Instead, my second French visa was reduced to just 30 days, albeit with multiple entries.
I considered this not only a disregard for my impeccable record but also an insult to a law-abiding traveler. I therefore decided to abandon France and apply to Spain instead—a country I had mistakenly believed would be more welcoming to Chinese visitors.
To my astonishment, Spain proved even worse.
Despite my history of holding two French Schengen visas, Spain granted me only a one-month, single-entry visa, with its validity calculated almost precisely to match my travel itinerary, leaving virtually no flexibility.
I assumed that applying to Spain a second time, with an even stronger travel record, would at least earn me a six-month multiple-entry visa.
Once again, Spain disappointed me: 33 days. Single entry.
This is how certain European countries treat a financially secure, law-abiding traveler with U.S. permanent residency and an impeccable international travel record.
The irony is extraordinary.
On the one hand, these countries impose increasingly burdensome restrictions on legitimate tourists. On the other, they have opened doors for years to illegal immigrants and third country refugees.
They are remarkably stingy toward visitors who respect their laws, appreciate their cultures, and contribute to their tourism economies. Yet when confronted with genuine threats to public order, they just sit and do nothing.
I initially wanted to condemn these immigration officers in the harshest possible words for their arrogance, shortsightedness, and upside-down mentality.
However, after reading recent news reports about violent incidents in France and Spain, my anger has gradually turned into a sense of relief.
Of course, I do not wish violence upon innocent people. But these reports have reminded me of something important: Why should I go to such lengths to obtain permission to visit countries where public safety itself has become a source of concern?
I once believed that these visa officers were rejecting me. Now I realize that perhaps they have unintentionally helped me avoid unnecessary risks.
They seem to believe that they alone possess the power to decide who deserves to enter Europe. What they forget is that travelers also have the freedom to decide which countries deserve their time and money.
My wealth can be spent anywhere in the world. My vacations can take place in countless destinations. I have absolutely no need to beg any country for the privilege of spending my own money within its borders.
If a country cannot show basic respect to law-abiding visitors or provide a travel environment in which they feel safe, then the most appropriate response is simply to take my time and money elsewhere.
Looking back, perhaps it was precisely the stinginess of these visa officers that spared me from potentially encountering violence or other unnecessary risks in their countries.
I used to be furious that my visas kept getting shorter. Today, I am grateful that I no longer feel any need to visit these countries.
Perhaps everything happens according to God’s plan.
Thank God!
Te encuentras estos productos de mierda hasta para ser malvados, pero me gustaría ver los "procesos de selección". Apuesto a que son absurdamente picky
为什么你花 2 万块买的旗舰智能电视,按遥控器还是卡得像十年前的安卓机?
昨天安全研究员 @log4j 把自家 3000 刀的三星电视 Root 了,扒出来的底层代码堪称年度草台班子大赏:
1. 电视后台每 500 毫秒截一次屏(连 HDMI 投屏看电脑桌面都截),打包发给近 400 家合作商。如果电视没麦克风,后台进程甚至会顺着蓝牙和回音壁去「借」一个麦克风继续听。
2. 最搞笑的来了:为什么菜单这么卡?
另一位研究员 @mike64_t 拆包发现,三星在电视那颗羸弱的 CPU 上,塞了一个叫 alex.tflite 的模型——246 万参数,2012 年古董级的 AlexNet。
这玩意每隔 2 秒抓一张画面跑推理,猜你在玩什么游戏。结果因为颜色通道写反了,它 99% 的时间什么都认不出来,纯烧 CPU。
3. 那如果你在设置里关掉「隐私追踪」呢?
代码逻辑是:先死命跑完 CPU 推理,准备上传时再看开关——发现你关了,就把结果扔进垃圾桶,2 秒后继续跑。
4. 结局更是重量级:
当号主用 OpenAI 逆向分析「自己花 3000 刀买回家的电视固件」时,OpenAI 反手一个 Cyber Abuse 把他号封了,顺带没收了剩下的 500 刀余额。
三星负责偷窥客厅,2012 年的 AI 负责烧干电视 CPU,OpenAI 负责保护三星的屎山代码不被你发现。
David Meléndez retweeted
Replying to @mannyacboy
Nos reíamos con @TaiksonTexas porque en Europa la Fanta pone “10% zumo” y en USA pone “0% ZUMO”
David Meléndez retweeted
Yo sé que Las Vegas no es referente de absolutamente nada respecto a la cultura americana (o sí, pero eso es otra discusión), pero de lo que más me sorprendió cuando he ido fue comer en el Cheesecake Factory. Uno esperaría que en un lugar donde hacen ensalada de 900kcal y tartas gigantes la comida estuviera súper buena y a mí en lo personal absolutamente todo me sabía a azúcar con cosas (la pechuga de pollo incluida).
Nunca llegué a probar un “mom and pop restaurant” pero espero sean como sean que jamás los reemplace un putisimo Cheesecake Factory
Cheesecake Factory populism is so weird to me because the rise of chain restaurants created over-the-top, replicable dining experiences, which eventually put the final squeeze on mom-and-pop restaurants, such as the US version of trattorias. I would argue those family-owned neighborhood businesses made the dining experience feel more special and pulled communities together. The shift to chain restaurants homogenized American life and concentrated corporate power. Strange to frame corporate consolidation as "populism."
David Meléndez retweeted
Lectura IMPRESCINDIBLE para comprender cómo nos están robando nuestros Derechos Fundamentales con la pasividad total de las instituciones #laligagate /cc @cantabriadiario
amazon.es/Bloquea-mi-empresa…
David Meléndez retweeted
Parece real web.archive.org/web/20261023…
David Meléndez retweeted
Que un sabado tenga que descargarme una VPN para bypasearme la chorrada de @LaLiga porque hay futbol y han decidido que no puedo conectarme a mi gestor de videojuegos no me la esperaba la verdad...
@Tebasjavier espero que no tengas hijos "frikis" que les guste viciar...
David Meléndez retweeted
Vaya
Renfe anuló un contrato de ciberseguridad y desoyó un informe de Defensa antes del hackeo.
✍️ Una noticia de Javier Leal (@jleal_1).
theobjective.com/economia/tr…
David Meléndez retweeted
En el medievo se escribían grandes odas al amor porque la gente era adulta con 16 años y cuando eres un adolescente hormonal perdido escribes cualquier paja.
Dante mismo con 30 años y dolor de rodillas no se recorre 7 círculos del infierno por una mujer. Con 18-20 si. Porque vas hormonado perdido.
Imagínate a Romeo y Julieta, que antes de lo del veneno para casarse se paran a pensar que es una idea regulera. Jodes la historia.
Ahí la esperanza de vida corta jugó a favor de la literatura.
David Meléndez retweeted
Maravilloso. Dehu me manda un correo "de cortesía" avisando de una notificación que quiero consultar y...
Como si lo viera: empieza a correr el tiempo, ellos se cubren con el envío del correo, pero tú no puedes acceder a ver la notificación. "Al servicio del ciudadano".
David Meléndez retweeted
AI-assisted vulnerability research is speeding up an uncomfortable reality check: much of our infrastructure is poorly coded or misconfigured. Some people learn and improve. Others complain about the tools exposing the problems.
David Meléndez retweeted
Da fuc is happening today??
TLS certs leaked, PHP RCE, Tor nodes used in a MiTM attack....
"Para verificar que eres tú, necesitamos ser unos gallitos que no nos vale un DNI con marcas de agua, pero si nos roban tus datos, perdoncitas"



























