Georg Lukas
op-co.de · Personal blog · on HN since 2012
Georg Lukas writes about hacking consumer devices such as Samsung NX cameras, XMPP messaging, networking setups, and firmware reverse engineering.
What HN saysHN links it for the Samsung NX camera firmware work, including one commenter's pick of its crypto failure post, and for its mobile XMPP critique.
16HN people shared it
11linked it in comments
31stories submitted
1.2Kstory points
3 months agolast shared
2012people per year2026
Most-shared posts
- 1The Sad State of Mobile XMPP in 20148 people · 102 points · first shared 2014 · 76 comments on HN
- 2Hacking the Samsung NX300 "Smart" Camera4 people · 130 points · first shared 2014 · 51 comments on HN
- 3Samsung Galaxy NX: a decade's review2 people · 3 points · first shared 2024 · discussion on HN
- 4Samsung NX 2009 Crypto Fail: Social Media Uploads2 people · 3 points · first shared 2023 · discussion on HN
- 5Authoritative Dnsmasq in a MikroTik Container2 people · 3 points · first shared 2026 · discussion on HN
- 6Are emoji allowed in XMPP addresses?2 people · 2 points · first shared 2026 · discussion on HN
- 7Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 20101 people · 365 points · first shared 2013 · 86 comments on HN
- 8Samsung WB850F Firmware Reverse Engineering1 people · 212 points · first shared 2024 · 45 comments on HN
- 9Samsung's abandoned NX cameras can be brought online with a $20 LTE stick1 people · 184 points · first shared 2024 · 185 comments on HN
- 10Backward-incompatible GRUB2 change causing BIOS setup bootloop1 people · 97 points · first shared 2024 · 16 comments on HN
- 11Reverse-engineering Fujitsu M7MU RELC hardware compression1 people · 40 points · first shared 2025 · 2 comments on HN
- 12Java/Android SSLSocket Vulnerable to MitM Attacks1 people · 12 points · first shared 2014 · 2 comments on HN
- 13IT Security Lessons from Fairy Tales1 people · 10 points · first shared 2016 · discussion on HN
- 14Samsung WiFi Camera Museum1 people · 8 points · first shared 2024 · discussion on HN
- 15Hacking the Samsung NX300, part 2: Get Root1 people · 8 points · first shared 2014 · 1 comments on HN
What HN people wrote when they linked it
scrollaway · 2014-05-19
Indeed. Take a look at this insightful blogpost:
http://op-co.de/blog/posts/mobile_xmpp_in_2014/
ge0rg · 2025-09-25
Yeah, I've documented a thing or two about the NX series on https://op-co.de/blog/tags/samsung-nx/
Regarding the RTOS, I took my NX300 from the shelf some weeks ago to make a few shots for the live demo at https://programm.froscon.org/froscon2025/talk/fc37ae17-9264-4549-bbc6-… and OH MY FSCKING GOD IT'S SLOW! I made a burst shot of a model train approaching, and the camera was busy processing it for multiple minutes. The NX500 is lightning fast in comparison, and the NX1 is even snappier.
So what do you plan to do with the ARM hook? I've poked at different places of di-camera-binary, but never at the processing pipeline, and there are soooo many things to reverse-engineer, and I'm but one person!
ponorin · 2024-07-15
They are proper cameras, with proper camera-sized sensors, and some model had interchangable lenses. One of them, for better or for worse, even came with Android. https://op-co.de/blog/posts/galaxy_nx/
rurban · 2024-05-25
I liked https://op-co.de/blog/posts/samsung_nx_cryptofail/#index3h3 more. Absolute astonishing firmware "crypto" fail
jitl · 2016-05-29
Jabber/XMPP has a number of problems that make it unsuitable for modern chat environments where clients (read: smartphones) have poor connections and frequently want to sleep to conserve power.
For example, XMPP wants an always-on TCP connection between the client and the server for the client to appear "online". There's an extension which allows for sleeping, but having async mobile connections in an extension means that you need the right pair of server and client to enable this feature. Plus, there's no handling of syncing messages between multiple clients. If you've got a smartphone and a desktop client, to compete with Facebook Messenger you need detailed conversation transcripts on both clients -- and an intelligent way to ping your clients and tell which should receive sound notifications.
see more at https://op-co.de/blog/posts/mobile_xmpp_in_2014/
joepie91_ · 2015-08-11
What are your thoughts on http://op-co.de/blog/posts/mobile_xmpp_in_2014/ ?
rakoo · 2015-08-11
Because iOS doesn't let you do that (see http://op-co.de/blog/posts/mobile_xmpp_in_2014/#index6h2)
userbinator · 2015-04-03
A lot of the "smarter" cameras already are running Linux; here is an example (more of a "look at how bad the security is" post, but you get the idea):
http://op-co.de/blog/posts/hacking_the_nx300/
Personally I think this is a fun hack that shows how much processing power the hardware has, but I wouldn't want to run a full OS on my camera...
icebraining · 2014-04-04
We have XMPP, but http://op-co.de/blog/posts/mobile_xmpp_in_2014/
schneid · 2014-03-09
Though as described here: http://op-co.de/blog/posts/mobile_xmpp_in_2014/#index2h2 -- Message Carbons don't help if your phone is out of coverage for a few minutes, as your desktop client will get the carbons, but when you come back online, you'll be oblivious to any messages sent during that time.
chmars · 2014-02-02
XMPP is only a kind of alternative for nerdy users:
http://op-co.de/blog/posts/mobile_xmpp_in_2014/