Ping from Morocco

Here's how you can check your win data usage on a terminal because <note to self: insert convincing reason here before publishing> Time for some recon. I fired off the Firefox network devtools and started inspecting. There are two endpoints of interest: Login endpoint (/api/v1/auth/login): exchanges a username/password combo for a set of tokens Offer detail endpoint (/api/v1/subscriptions/<ID>/offer-detail): returns statistics about the subscription After decoding the JWT access token returned by the login endpoint, I notice that its exp claim has a generous time to live of about 7 days. The refresh token lasts twice as long. For starters I decided to use this set of tokens instead of writing code that actually logs me in, it might come in handy if they ever decide to slap a captcha on the login form. For the record, here's what the login response looks like: { "account": { "email": "yours.truly@domain.ext", ...

In a previous article , I reverse engineered my TV's infrared protocol as a backup measure in case the remote controller stops working. A couple of years later, it finally happened. Luckily I have infrared support in my phone, a 2022 Redmi 10. It comes preinstalled with an app that supports multiple infrared protocols including the NEC one. Unfortunately, none of the installed NEC versions were compatible with my TV since it uses a modified version of the protocol. I decided to take matters into my own hands. The infrared documentation for Android isn't lengthy, but it doesn't have to be. It boils down to sending a series of ON/OFF pulses with a given carrier frequency: public void transmit (int carrierFrequency, int[] pattern); To do that, I converted the functions of the previous project from C to Kotlin. The differences were minimal. In the android version, I had to construct an array of pulses whereas in the C version, I sent them immediately by switching PORTB ...

Context One of the features I had in mind for moroccanslang.com was the ability to display definition previews when shared on social media. That, and SEO, is the reason why I opted for server-side rendering for this project. NextJS was making the headlines at the time, and I decided to give it a shot. This was purely hype-driven and if I were pressed for time, I would have gone with Angular since I had more experience with SSR under Angular Universal . But it was an interesting learning experience nonetheless. For the deployment, I went with Vercel since it goes hand in hand with NextJS. The backend, written in Django, was also deployed on Vercel. Django on Vercel was unorthodox to say the least. It came with its fair share of headaches, but I'll have to address those in another article. Implementation Social sharing previews rely on a protocol called Open Graph . It allows you to define metatags that social network robots will read in order to display "rich objects...

As a millenial, I never managed to embrace the streaming culture that's so prevalent nowadays. Having grown up in an era where being offline was the norm, I developed an unhealthy habit of just-in-case data hoarding that I can't seem to shake off. When youtube-dl suddenly started complaining about an "uploader id" error , I decided to take things into my own hands. Understanding the streaming process The recon step consisted of inspecting the HTTP traffic to see what I could find. Sure enough, the network tab showed some interesting requests when filtering by "medias": Opening one of these in a new tab shows a MIME type error. The browser can't play it for some reason and neither could mpv. I downloaded it and ran the file command on it, but it shows up as a data blob: $ file videoplayback.mp4 videoplayback.mp4: data I suspected that there was some encryption going on and that maybe the Youtube video player knows how to decrypt this file. B...

In a previous article , I explained how to bypass imgur's country-wide ban by using a cheap VPS as a socks5 proxy. While this worked, it came with the downside that I had to keep an SSH session open at all times. Not long ago, another imgur-related thread popped up on r/morocco. I was about to suggest my workaround, but then I realized that not everyone has a VPS lying around. In addition to this, other users already suggested using a VPN; an admittedly easier solution. I looked into it again and discovered that this issue wasn't limited to INWI. People from other countries suffer from the same problem. During my research I landed on this meta stackoverflow thread . This suggestion in particular caught my eye : I tested it, and it worked as described. Hmm... maybe I could create a browser extension that prepends https://proxy.duckduckgo.com/iu/?u= to any imgur.com links it finds in the DOM ? I opened ChatGPT and star... just kidding. I searched for a similar extensio...

Mapstruct is a Java library that makes it easy to map one type to another. I've been using it at work to map DTOs to JPA entities and vice versa. While it might seem unnecessary, it's one of those things I adopted just in case our REST responses deviate from our database structure. I won't go into details as to why one should or shouldn't use Mapstruct because it's beyond the scope of this article. What I want to talk about, instead, is the port itself. Motivation One of mapstruct's selling points is that it generates mappings at compile time. I simply write an interface such as this one: @Mapper(componentModel = "spring") public interface Mapper { @Mapping UserDTO toUserDTO(User entity); } With User and UserDTO being: class User { long id; String username; String password; //getters and setters } class UserDTO { long id; String username; //getters and setters } Then after building the project, an im...