I talk about software and more. Sometimes in English, bazen de Türkçe.
At Trendyol, we use various technologies to handle traffic and Cloudflare is one of them.
To keep a low latency between our customers and our backends, we have to monitor if Cloudflare's Istanbul PoP has been rerouted or not.
And that brings us to cloudflarestatus.com.
Inspired by Kenneth Finnegan's awesome NTP server on a Raspberry Pi blog post, I wanted to build a StratumOne NTP server for my local network as well.
I just didn't know how, though.
I started to work at Trendyol, one of the largest e-commerce companies in Turkey, at March 17th (2021) and it's...
...so bizzare to me still.
Endpoint: https://pttws.ptt.gov.tr/cepptt/mssnvrPttaceaemaa/gonderitakipvepostakod/gonderisorguYurticiveYurtDisi
Request Method: GET
Needed:
Warning: This method requires to have the paid version of Google Workspace. And you probably shouldn't have other users in your Google Workspace while using this.
tl;dr Unobfuscated Compiled Java APIs = Jackpot
Now that Ave wrote about TCKK, its time to talk about my side of things.
I was able to sniff out my TCKK certificate back in 2017 but haven't gotten much deeper ever since.
Seriously though.
I am known for writing cursed JavaScript applets but this one, went above my own charts.
So, lets glance over this curse.
(I started writing this at the beginning of May 2020, and probably finalizing near July; so yeah be warned.)
Ever since I released my writeup about the (in)security of Türk Telekom's home gateway management, the VoIP config I found stuck in my head.
This led to many attempts to create a large home phone system. I failed hard. However in the process of doing that, I learned how cursed SIP services are and even got a free Cisco IP Phone from an ISP contact.
SIP servers/gateways never completely follow the actual standards guiding the protocol.