AC Infinity Almost Got the Next AirTap Right, Then Locked Us Out With Secure Boot

Reverse engineering the ESP32-C6 Matter-capable AirTap, dumping OEM firmware, and why open source still needs a module swap or a new PCB

For years the AC Infinity AirTap has been a popular register booster with a frustrating smart-home story: closed apps, Bluetooth-only workflows, and a control board that was never meant for local automations. We already solved that for earlier generations with drop-in ESPHome boards see the Gen2 install guide and shop module if you have that hardware. Then a newer AirTap showed up with something that almost made me celebrate out loud: an ESP32-C6-WROOM-1. [Read More]

PandaPaper turns malicious

Chrome extension modifies HTML and tries to hide it

paper panda logo with X for eyes

The “paywalling” of scientific research papers is an ongoing problem that hinders learning, hinders scientific research, and leaches profit from publicly-funded research. PaperPanda is a Chrome extension to download academic papers. Its intention is to find free links for published papers.

However what PaperPanda does under-the-hood tells another story. I’ve unearthed malicious code in PaperPanda’s Chrome extension and attempts to hide said malicious activity. This extension tried to modify my Amazon pages for unknown reasons - possibly a phisher or credit-card stealer. If you have this extension UNINSTALL IT. In this post I’ll explain how this extension is malicious and how it hides that behavior.

[Read More]