Connect with us
DAPA Banner

Tech

OneOdio Focus A6 Review – Trusted Reviews

Published

on

Verdict

A well-specc’d if not quite as strong a performer, the OneOdio Focus A6 deliver good comfort and long battery life but aren’t better than their rivals when it comes to noise-cancellation and there are better-sounding efforts available


  • Affordable

  • Lightweight, comfortable design

  • Long battery life

  • App support

  • No carry case/pouch

  • Average ANC for the money

  • Average call quality

  • Better-sounding alternatives available

Key Features


  • Bluetooth 6.0


    New wireless standard for better battery, Find My feature, and connectivity


  • Battery Life

    Advertisement


    75 hours max without ANC


  • LDAC


    LDAC Bluetooth for higher quality streaming

Introduction

You’re not spoilt for choice as for as wireless headphones go, and in the last few years, you can bag yourself a pair of budget headphones with comparable specs to over-ears that costs twice as much.

Advertisement

That’s what the OneOdio Focus A6 is aiming for, with wireless Hi-Res Audio support, long battery life, “powerful” noise-cancelling and more for well under £100 / $100, on paper at least, it looks like a bargain.

But, as always, buyer beware, as specs can tell one story but performance will tell another. What story does the OneOdio Focus A6 tell? It’s somewhere in the middle.

Advertisement

Design

  • Stylish looks
  • No carry pouch
  • Foldable design

Flashy is the first word that comes to mind with the Focus A6 headphones. They look stylish with the metal CD textured radial design with gold trim that stands out on both black and white options (the version here is the latter).

They are comfortable to wear over long periods, the lightweight design and lack of any forcible clamping force mean they don’t feel intrusive to wear. The adjustable headband makes it easier to make the headphones fit your head (big or small).

Advertisement
OneOdio Focus A6 headbandOneOdio Focus A6 headband
Image Credit (Trusted Reviews)

The design can be folded both outwards and inwards if you want the headphones to take up less space in a bag. Disappointingly, there’s no case or even a pouch to keep them safe from marks or nicks. It’s a common absence on many budget headphones, and I’m always disappointed when I see it.

Advertisement

The buttons are clicky, if a bit cheap-feeling, but there’s a sense of just getting the job done. Wearing the headphones, they also feel a little rattly from time-to-time – walking down a flight of stairs in Canary Wharf I heard something shaking about in the right earcup. Despite the premium aesthetic, the build quality is what you’d expect for the money.

OneOdio Focus A6 foldedOneOdio Focus A6 folded
Image Credit (Trusted Reviews)

Features

  • OneOdio companion app
  • Bluetooth 6.0
  • LDAC support

The OneOdio, similar to Soundcore and a few others, have a list of features as long as my arm (the span of which is very long), and while they’re impressive on paper, it’s always worth taking them with a pinch of salt.

These are one of the first headphones I’ve used that have Bluetooth 6.0 support, which helps in terms of better battery life, better sound (apparently), less interference, more accurate Find My location help, and more seamless switching between multiple devices (which the Focus A6 supports). You do need a Bluetooth 6 compatible device to make the most out of these features, however.

With the OneOdio Focus A6, I haven’t come a cropper in terms of any wireless interference so it seems as if the headphones hit the mark.

Advertisement

Advertisement

OneOdio Focus A6 controlsOneOdio Focus A6 controls
Image Credit (Trusted Reviews)

Elsewhere, there’s SBC, AAC, and LDAC support; the latter boosting the headphones credentials in terms of high quality sound. Though it’s worth adding that it’s not always about the Bluetooth codec in terms of the sound you hear, the quality and tuning of the driver itself will have even greater impact on audio. But at least with LDAC, the OneOdio gives itself a better chance of producing a better sound, though with LDAC enabled it doesn’t appear as if you can utilise Bluetooth multipoint.

It is Hi-Res certified in terms of wired audio, which it supports through its USB input so you can listen to lossless audio (a wired connection also supports ANC as well).

OneOdio Focus A6 appOneOdio Focus A6 app
Image Credit (Trusted Reviews)

There’s the OneOdio app, which offers decent customisation for a headphone at this price, offers some modes including a Game mode (a claimed 0.065 seconds of latency) and the Movie Sound Effect. To be honest, with this mode I can’t hear much of a difference other than it sounding slightly warmer.

There’s also a Find My headphones feature, which with Bluetooth 6.0, is said to be more accurate in figuring out where your headphones are.

Advertisement

Advertisement

Noise-cancelling

  • Cancels up to 48dB
  • Wind Noise Reduction mode
  • Transparency mode

You’d be right not to expect a level of noise-cancellation that, say, the Sony WH-1000XM6 can muster. Despite OneOdio’s claims of cancelling up to 48dB of noise; the performance is in line with similarly priced efforts from Sony, Panasonic, EarFun and Soundcore, which is to say that it’s just ok.

Having used them on a long-haul flight, they reduce the cabin noise a little but not by a huge amount. The sound of the cabin and the engines was still noticeable and I had to raise the volume a lot to hear what I was listening to.

Back on solid ground and again the Focus A6 let quite a bit of noise. They’re decent at suppressing low frequencies but mid and high frequencies still tend to evade the headphones’ microphones. You hear what’s around you with ANC on, and when the Transparency mode is activated, there is a slight artificial sound added on top of what you can hear.

OneOdio Focus A6 earcupsOneOdio Focus A6 earcups
Image Credit (Trusted Reviews)

The noise-cancelling performance is similar to what you’d get from many budget over-ears at the moment, but I will say that the Lindy BNXe offers a slightly stronger performance if ANC is the prime reason you’re looking to purchase a new pair of headphones.

Advertisement

You do also get Wind Noise Reduction in the app, but again it’s worth bearing in mind the performance isn’t the strongest.

Advertisement

Call quality is not the best either, letting in plenty of noise and making it a fight between your voice and what’s around you when it comes to being heard. In a quiet place you’re likely be fine – take these headphones outside to make calls and it is a struggle despite the Dual-Mic Environment Noise Cancellation these headphones boast.

Battery Life

  • Up to 40 ANC with ANC
  • Fast-charging support

The headline feature is 75 hours, but there’s a catch, as always, as that high number is with ANC off. Turn it on and you get close to 40 hours.

OneOdio Focus A6 build qualityOneOdio Focus A6 build quality
Image Credit (Trusted Reviews)

And in the battery drain test I carried out, I’d say that’s an accurate claim. It took five hours for the headphones to drop 10% battery, which would peg these headphones closer to 50 hours (and this was in LDAC mode). That’s the same performance as the less expensive Mixx StreamQ C4 and better than the likes of the Soundcore Space One.

Advertisement

Fast-charging is provided, and 10 minutes nets you a quite stunning ten extra hours of playback.

Sound Quality

  • Sharp treble response
  • Lacks detail
  • Underwhelming bass performance

I mentioned earlier that having wireless and wired lossless support isn’t as important as the quality and tuning of the drivers, and the sound quality here is not what I’d call excellent. But it’s not bad either.

The OneOdio Focus A6 have a bright and sharp tuning that’s brighter than I’d expected. This tuning initially gives the impression that detail, at least with the highs, is better than you’d expect. But the Focus A6’s overall sense of detail is what I’d term as hazy, and bass comes across as a little limp.

Advertisement
OneOdio Focus A6 earpadOneOdio Focus A6 earpad
Image Credit (Trusted Reviews)

With GoGo Penguin’s Atomised it’s a sharp, lean and crisp sound that defers to the highs in terms of brightness, but the midrange isn’t home to the clearest sense of detail or clarity – it’s a treble forward response that I wonder might grate with some who are sensitive to treble. I do like how the highs sound but it’s the rest of the frequency range where the headphones come across as lacklustre.

Advertisement

The headphones in general offer lower levels of detail and definition that remind me of the Mixx StreamQ C4 headphones. The soundstage is spacious but what exists within it is not the most defined. The tone of instruments is a bit hard to tell, the headphones don’t dig out detail as well as I’d hoped, and while voices sound clear they don’t sound particularly natural.

OneOdio Focus A6 designOneOdio Focus A6 design
Image Credit (Trusted Reviews)

Bass is lacking depth and extension with every track I put through these headphones 40mm drivers, and switching on the Super Bass Mode produces a performance that’s less than super. This mode seems to make vocals sound recessed (further away). Pop mode is the default mode and it’s the best of a weak bunch.

The sound has also been tuned with ANC in mind, so when it’s turned off the OneOdio Focus A6 sound softer and the soundstage is smaller. That’s not at all what I expected.

Should you buy it?

The ANC is, for the price, just decent. While they cost less than efforts from the likes of Sony and Soundcore, they’re not better for ANC. You’re saving on money, but not getting a better performance than average here

Advertisement

There are better alternatives out there

Advertisement

There’s nothing here that you could say the OneOdio does better than other pairs, and on that basis, while they’re a decent value proposition in terms of price, there are better options available

Advertisement

Advertisement

Final Thoughts

On paper, these headphones have the elements of what would make a good sound, but OneOdio doesn’t bring all the elements together successfully.
 
The noise-cancellation is average, as is the call quality. The battery life is long, and the levels of comfort are also good. So what story does the OneOdio Focus A6 tell? I think it’s one where if you approach these headphones with the right expectations, they’ll offer a decent performance for their relatively inexpensive price but if you’re expecting these headphones to outperform their price, that’s not the case.
 
You could do better, certainly for sound, with the Sony WH-CH720N, Panasonic RB-M600B, Lindy BNXe as alternative options. These headphones won’t make it on the list of best cheap headphones but as a pair of inexpensive wireless over-ears, they just about past muster.

How We Test

The OneOdio Focus A6 were tested over the course of a month, the ANC tested in real-world circumstances and compared against similarly priced rivals through a pink noise test.

A battery drain was carried out over five hours, while the wireless connected was tested out in busy outdoor environments. ANC was used indoors, on planes and walking around cities.

  • Tested for a month
  • Tested with real world use
  • Battery drain carried out

FAQs

Which Bluetooth codecs does the OneOdio Focus A6 support?

You get SBC, AAC, and LDAC with the Focus A6, and they’re also one of the first headphones Trusted Reviews has tested that supports Bluetooth 6.0, which brings with it various new improvements in battery and connectivity.

Advertisement

Full Specs

  OneOdio Focus A6 Review
UK RRP £69.99
EU RRP €79.99
Manufacturer OneOdio
IP rating No
Battery Hours 70
Fast Charging Yes
ASIN B0F9YVKQ78
Release Date 2025
Audio Resolution SBC, AAC, LDAC
Driver (s) 40mm dynamic
Noise Cancellation? Yes
Connectivity Bluetooth 6.0
Colours Black, White
Frequency Range 20 20000 – Hz
Headphone Type Over-ear

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

Trump Administration To Pay French Company $1 Billion To Stop Offshore Wind Farms

Published

on

An anonymous reader quotes a report from NPR: The Trump administration will pay $1 billion to a French company to walk away from two U.S. offshore wind leases as the administration ramps up its campaign against offshore wind and other renewable energy. TotalEnergies has agreed to what’s essentially a refund of its leases for projects off the coasts of North Carolina and New York, and will invest the money in fossil fuel projects instead, the Department of Interior announced Monday.

The Trump administration has tried to halt offshore wind construction, but federal judges overturned those orders. Environmental groups denounced the TotalEnergies deal as an alternate way to block wind projects. President Donald Trump has gone all in on fossil fuels, which he says is the way to lower costs for families, increase reliability and help the U.S. maintain global leadership in artificial intelligence.

TotalEnergies pledged to not develop any new offshore wind projects in the United States. TotalEnergies CEO Patrick Pouyanne said in a statement that the company renounced offshore wind development in the United States in exchange for the reimbursement of the lease fees, “considering that the development of offshore wind projects is not in the country’s interest.” Pouyanne said the refunded lease fees will finance the construction of a liquefied natural gas plant in Texas and the development of its oil and gas activities, calling it a “more efficient use of capital” in the U.S. After it makes those investments, TotalEnergies will be reimbursed, up to the amount paid in lease purchases for offshore wind, according to the DOI.

Source link

Advertisement
Continue Reading

Tech

S’pore bizs are cashing in on the fresh pet food boom

Published

on

An entire S$150 million industry is being built around fresh pet food in Singapore

For decades, the answer to feeding your pet was simple: open a bag of kibble, scoop some into a bowl, and that’s it—you were done.

Dry kibble has always dominated the global pet food market, and Singapore is no exception. It is cheap to produce, easy to store, and heavily marketed. For most pet owners, it has simply always been “the way.”

But increasingly, pet owners are asking harder questions. What exactly goes into those brown pellets? What is their nutritional value? And why do so many pets, even on premium kibble, still suffer from chronic ailments?

For a growing number of Singapore pet owners, the answer has been to ditch the bag entirely. They are turning to fresh pet food—minimally processed, human-grade meals made from real ingredients like sous vide chicken and bone broth. It costs a lot more, but they’re willing to splurge.

Advertisement

To meet the demand, a new wave of local brands has emerged, reshaping a market that, for decades, had remained largely unchanged.

Among them are PetCubes and BOM BOM: two Singapore-based fresh pet food companies that are both seeing market traction that their founders could not have anticipated when they first started out.

Taking pet nutrition to a new level

For Dr Francis Cabana, Director of Nutrition at PetCubes, the journey into pet food began far from domestic kitchens.

With a PhD in Animal Nutrition, his career has spanned zoos and rescue centres around the world, eventually bringing him to Mandai, where he worked with the Singapore Zoo. There, he began consulting for a local pet food startup—PetCubes—which would later become his full-time focus.

Advertisement
(Left): PetCubes Director of Nutrition Dr Francis Cabana; (Right): PetCubes offers gently cooked and raw meals portioned in cubes, frozen and ready to thaw before serving./ Image Credit: PetCubes

Founded in 2013, PetCubes claims to be Singapore’s first fresh pet food company, entering the market at a time when the concept was virtually unheard of.

“Back then, pet owners really only had two options: highly processed kibble or time-consuming home cooking,” he shared. “We wanted to bridge that gap with something that was both convenient and biologically appropriate.”

But being first came with challenges. Early growth was slow, and convincing pet owners and even veterinarians required extensive education.

“Every conversation was a hard-fought battle,” he said. “We were essentially teaching the market from scratch.”

Over time, however, that persistence paid off. Today, PetCubes operates its own ISO 22000 and HACCP-certified facility in Singapore and has expanded across Hong Kong and Malaysia. It has also achieved a milestone few fresh pet food brands can claim: being stocked in veterinary clinics locally.

Advertisement
BOM BOM founder Jason Wang./ Image Credit: BOM BOM

While PetCubes emerged from industry expertise, BOM BOM was born out of a deeply personal experience.

Its founder and CEO, Jason Wang, didn’t set out to start a business. In fact, he was preparing for retirement when his dog, Kyubi, began suffering from a host of chronic health issues, from digestive problems to joint conditions.

Frustrated by the lack of clear answers from conventional treatments, Jason began researching pet nutrition himself.

“What started as a personal journey quickly became a much bigger realisation,” he explained. “Many of the issues Kyubi faced were linked to diet, specifically, highly processed kibble.”

Unable to find a product that met his standards, Jason began preparing fresh meals himself. The results were dramatic: within weeks, Kyubi showed visible improvements in his digestion, skin, and energy levels, to the point where friends began asking him to prepare meals for their pets as well.

Advertisement

Eventually, the kitchen-based passion project he started in 2016 became BOM BOM, formally established in 2017.

Today, the company serves around 10,000 customers in Singapore and operates a 5,000 sq ft SFA-licensed facility in Tiong Bahru. It also has a presence in South Korea, with a 9,000 sq ft factory set up in Seoul to cater to its customers there.

The business’s growth has been largely bootstrapped, expanding at over 30% CAGR over the past decade, shared Jason.

What really goes into the bowl

BOM BOM provides personalised meal plans based on a pet’s individual micronutrient needs, age, and health condition. Their menu includes raw diets, cooked meals, raw edible bones for dental health, and even bone broth./ Image Credit: BOM BOM

The shift towards cooked pet food is driven largely by pet humanisation: the idea that pets are family members deserving of the same quality of care and nutrition as humans.

While dry kibble still dominates due to convenience and affordability, its growth has plateaued. In contrast, the fresh and cooked pet food segment—still only about 10–20% of the market, according to Jason—is expanding rapidly.

Advertisement

The fresh dog food market in Singapore was estimated to have reached about S$150 million in 2025, driven by rising pet ownership and premiumisation trends.

Inside PetCubes’ facility, fresh meals are prepared, cooked, and portioned with strict quality control./ Image Credit: PetCubes

Pet owners who have made the switch are noticing real, tangible changes in their pets’ health.

Dr Francis notes that after just three days on PetCubes, pets’ stools become smaller, darker, and less odorous—a clear sign their bodies are absorbing real nutrition instead of passing synthetic fillers.

PetCubes achieves these results through its thoughtfully crafted menu, which features 12 single-protein options ranging from rabbit and venison to crocodile and even insects.

Each meal is “gently cooked” at 75–80°C for at least 45 minutes—a low-and-slow method that eliminates pathogens while preserving delicate nutrients like vitamins, antioxidants, and proteins, which are often destroyed during the high-heat extrusion process used for kibble. The brand also offers raw options for pets that prefer an uncooked diet.

Advertisement

On the other hand, BOM BOM focuses on customised nutrition. Each meal is crafted on demand for individual pets based on age, breed, activity level, and specific health conditions.

Its smart factory rigorously checks portioning, fat content, and ingredient quality, while lab-tested produce and strict farm-to-bowl SOPs ensure freshness and safety.

This precision-led approach means pets often see measurable improvements in digestion, energy, coat health, and even chronic conditions—demonstrating the benefits of nutrition tailored to the individual rather than a one-size-fits-all formula.

Making an impression on the traditional market

As the category grows, so does competition.

Advertisement

New fresh, frozen, and freeze-dried brands are entering the market at an accelerating pace, offering pet owners a wider range of options than ever before. But perhaps the most telling sign of disruption is how traditional players are responding.

Like PetCubes, BOM BOM’s fresh meals are processed with strict quality control./ Image Credit: BOM BOM

According to Dr Francis, major kibble brands have begun adopting language like “raw-inspired” and “ancestral feeding”—a shift he sees as validation rather than competition.

“When billion-dollar companies start mimicking your messaging, it proves that the demand for less processed, natural food has truly made an impression on the traditional market,” he said.

“The disruption is happening because we’ve raised the bar on what a pet’s bowl should look like, and now the rest of the industry is trying to keep pace.”

Jason echoes a similar sentiment but adds that the next phase of growth must go deeper.

Advertisement

Right now, there are no consistent standards defining what “fresh” actually means. As a result, brands can label their products as fresh without ensuring they are truly nutrient-dense or biologically appropriate.

“The industry needs to move beyond using fresh as a marketing term. We need clearer nutritional standards, greater transparency, and better education on long-term health outcomes.”

A market still finding its feet

Image Credit: PetCubes

While both PetCubes and BOM BOM see fresh feeding as still being in its early stages, the opportunities for growth are undeniable.

In Singapore, both brands are actively expanding their presence to reach more mainstream consumers. PetCubes has strengthened its footprint in major retailers like Pet Lovers Centre, while continuing to grow its online and subscription channels.

It has already seen striking growth. “We’ve grown our revenue by over 400%,” said Dr Francis, adding that the business produces “hundreds of thousands of fresh meals” annually.

Advertisement

BOM BOM, on the other hand, is extending beyond its direct-to-consumer model with selective retail partnerships and broader e-commerce availability, ensuring pet owners can access fresh, personalised meals more conveniently.

For both brands, expansion isn’t just about sales—it’s about making science-backed or precision-led fresh nutrition widely accessible.

But challenges remain.

Fresh food comes with higher production costs, including sourcing premium, human-grade ingredients. Cold chain logistics are critical to ensure meals remain safe and nutritious, but add complexity to distribution. Shelf lives are also shorter compared to traditional kibble, which requires careful inventory management and can limit mass adoption.

Advertisement

Additionally, the need for consumer education is ongoing. Many pet owners are still unfamiliar with fresh feeding or hesitant to move away from conventional options.

Still, if current trends are anything to go by, the trajectory is clear: the demand for fresh pet food is rising, and the market is ripe for growth.

  • Read other articles we’ve written on Singaporean businesses here.

Featured Image Credit: @trufflewhuffle via Instagram/ BOM BOM

Advertisement

Source link

Continue Reading

Tech

Marathon review: Bungie’s extraction shooter lacks compelling reasons to play it

Published

on

Why you can trust TechRadar


We spend hours testing every product or service we review, so you can be sure you’re buying the best. Find out more about how we test.

With its incredibly expressive and vibrant art direction, there’s a lot to like about extraction shooter Marathon from an aesthetic standpoint. Its own brand of brightly colored science fiction is a sight to behold, and there’s a real sense of wonder in the first few hours as you explore each of the three early maps, soaking it all in.

Review info

Platform reviewed: PC
Available on: PS5, Xbox Series X|S, PC
Release date: March 5, 2026

Advertisement

Source link

Continue Reading

Tech

Claude Code and Cowork can now use your computer

Published

on

Anthropic announced today that its Claude Code and Claude Cowork tools are being updated to accomplish tasks using your computer. The latest update will see these AI resources become capable of opening files, using the browser and running dev tools.

When enabled, the Claude AI chatbot will first prioritize connectors to supported services such as the Google workplace suite or Slack, but if a connector isn’t available, it will be able to still execute an assigned task. Claude should ask for permission before taking these actions, but Anthropic still recommended not using this feature to handle sensitive information as a precaution.

Claude computer use will initially be available to Claude Pro and Claude Max subscribers on macOS. This feature is still in a research preview, so will continue to be adjusted based on Anthropic’s user feedback. It will also support use with Anthropic’s Dispatch feature, which allows a person to message the chatbot in a single continuous conversation across phone and desktop.

Claude Cowork was introduced in January. It’s an iteration of the Claude Code AI agent for programmers that is designed for more casual users.

Advertisement

Source link

Continue Reading

Tech

Television giants team up against dominant streaming OS & Apple TV

Published

on

The Association of Commercial Television and Video on Demand Services called on the EU antitrust chief to bring DMA-style regulation to set-top boxes — Apple TV also mentioned for some reason.

Apple TV set-top box under a monitor, back lit, with the Siri Remote in front of it
Apple TV targeted by TV group

The Apple TV set-top box is likely the best way to access and stream media, but that performance comes at a price. So, like other markets Apple is involved in, consumers trend toward cheaper options.
However, because of Apple’s control over its ecosystem, it is often grouped in with other market leaders regardless of reported market share estimates. According to a report from Reuters, the Association of Commercial Television and Video on Demand Services in Europe (ACT) has asked EU antitrust chief Teresa Ribera to have set-top boxes and smart TVs under the DMA as gatekeepers.
Continue Reading on AppleInsider | Discuss on our Forums

Source link

Continue Reading

Tech

Mazda discloses security breach exposing employee and partner data

Published

on

Mazda discloses security breach exposing employee and partner data

Mazda Motor Corporation (Mazda) announced that information belonging to its employees and business partners had been exposed in a security incident detected last December.

Mazda is one of Japan’s largest automotive manufacturers, with an annual production of 1.2 million vehicles and revenue of nearly $24 billion.

The company said the attackers exploited a vulnerability in a system related to warehouse management for parts procured from Thailand. The system did not contain any customer data. Also, the breach is limited to 692 records.

“Mazda Motor Corporation has identified traces of unauthorized external access to a management system used for warehouse operations related to parts procured from Thailand,” reads Mazda’s announcement.

Advertisement

“Following this discovery, the Company promptly reported the matter to the Personal Information Protection Commission – an external bureau of the Japanese Cabinet Office – and implemented appropriate security measures and conducted an investigation in cooperation with an external specialist organization.”

The investigation revealed that the potentially exposed information includes the following data types:

  • User IDs
  • Full names
  • Email addresses
  • Company names
  • Business partner IDs

Although Mazda says it has detected no misuse of that information, the company recommends that impacted individuals remain vigilant because the risk of phishing attacks and scams targeting them is significant.

Apart from notifying the authorities, Mazda also implemented additional security measures on its IT systems, including reducing internet exposure, applying security patches, increasing monitoring for suspicious activity, and introducing stricter access policies.

At the time of writing, no ransomware group has publicly claimed the attack on the Japanese company.

Advertisement

BleepingComputer has contacted Mazda to learn more about the incident, and we will update this post with an official response as soon as it reaches us.

Although a data breach was never officially confirmed by Mazda, the Clop ransomware group in November 2025 posted Mazda.com and MazdaUSA.com on its data leaks site, claiming it compromised both the Japanese automaker and its U.S. subsidiary.

Malware is getting smarter. The Red Report 2026 reveals how new threats use math to detect sandboxes and hide in plain sight.

Download our analysis of 1.1 million malicious samples to uncover the top 10 techniques and see if your security stack is blinded.

Source link

Advertisement
Continue Reading

Tech

Linux Fu: UPNP A Port Mapping Odyssey

Published

on

If you’ve ever run a game server or used BitTorrent, you probably know that life is easier if your router supports UPnP (Universal Plug and Play). This is a fairly old tech — created by a standards group in 1999 — that allows a program to open an incoming port into your home network. Of course, most routers let you do this manually, but outside of the Hackaday universe, most people don’t know how to log into their routers, much less how to configure an open UDP port.

I recently found myself using a temporary setup where I could not access the router directly, but I needed some open ports. That got me thinking: if a program can open a port using UPnP, why can’t I? Turns out, of course, you can. Maybe.

Caveats

The first thing, of course, is that you need your firewall open, but that’s true no matter how you open up the router. If the firewall is in the router, then you are at the mercy of the router firmware to realize that if UPnP opens something up, it needs to open the firewall, too.

You might think, “Of course it will do that.” However, I’ve found there is a lot of variation in the firmware from different vendors, and if you aren’t in control of the router, it is more likely to have buggy firmware.

Advertisement

The other caveat is that the router needs UPnP enabled; if it isn’t and you have to get into it anyway, you might as well set up port forwarding in the usual way. I was in luck. The router I was behind had UPnP turned on.

In Theory

There are several libraries aimed at working with UPnP and many of them come with simple test clients. I decided to install miniupnpd, which has the upnpc utility. You don’t have to be root to run it. In theory, it should be very simple to use. You can use -l to list all the router’s current UPnP ports. The -a option adds a port, and -d deletes it. There are a few other options, but that covers most of the common use cases.

So, to open external port 2222 to port 22 on 192.168.1.133 you should be able to say:

upnpc -e 'HaD Test' -a 192.168.1.133 22 2222 tcp 3600

The -e option lets us make up a creative title for the mapping. The 3600 is the number of seconds you need the port open. Easy, right? Well, of course not.

Advertisement

Under the Hood

UPnP covers several different areas, including IP assignment and streaming media. However, the part of it we are using is for NAT traversal. Your router identifies as an Internet Gateway Device that other UPnP-aware programs can locate.

Unfortunately, there are two versions of the gateway device specification, and there are many compatibility problems. You are also at the mercy of the vendor’s correct interpretation of the spec.

UPNP has been known to be a security risk. In 2011, a tool appeared that let some UPnP devices map ports when asked from outside your network. Easy to imagine how that could be a bad thing.

UPNP devices advertise services that others can use, and, hopefully, your router advertises that it is a gateway. The advertisement itself doesn’t tell you much. But it does let you fetch an XML document that describes the device.

Advertisement

For example, part of my XML file looks like this:

11urn:schemas-upnp-org:device:InternetGatewayDevice:1OpenWRT routerOpenWRT
http://www.openwrt.org/OpenWRT routerOpenWRT router1
http://www.openwrt.org/00000000uuid:00000000-0000-0000-0000-000000000000
urn:schemas-upnp-org:service:Layer3Forwarding:
1urn:upnp-org:serviceId:L3Forwarding1/L3F.xml/ctl/L3F/evt/L3Furn:
schemas-upnp-org:device:WANDevice:1WANDeviceMiniUPnPhttp://miniupnp.free.fr/WAN DeviceWAN Device20260105
...

In Practice

There are a few strange things about the way upnpc works. First, when you do a list, you’ll get an error at the end. Apparently, that’s normal. The program simply asks for entry zero, one, two… until it gets an error (a 713 error).

However, when I tried to add an open port to this particular router, it always failed, giving me an error that implied that the port was already in use. Of course, it wasn’t.

Through experimentation, I figured out that the UPnP service on the router (the one I can’t get into) isn’t running as root. So any port number less than 1,024 is unmappable in either direction. Of course, this may not be a problem for you if you have a sane router. You could argue whether this is a bug or not, but it certainly didn’t give a good error message.

Advertisement

Testing, One, Two…

Just to do a simple test, I issued the following command. (with my firewall off, just for testing):

upnpc -e HADTEST -a 192.168.1.133 8022 8023 tcp 3600

I verified the port opening using the -l option. Then I stood up a really dumb telnet-style server on the local port (8022):

socat readline TCP-LISTEN:8022,reuseaddr,fork

From a machine on another network, I issued a telnet command to my public IP (198.37.197.21):

Advertisement
telnet 198.37.197.21 8023

Of course, I could have used 8022 for both ports, but I wanted it to be clear which argument was which. At this point, typing some things on the remote machine should show right up on the local machine, punching through the firewall.

In case you forgot, you can escape out of Telnet using Control-] and then a “q” will close the program. You can also just terminate the socat program on the local side.

More Than One Way

It is a bummer I couldn’t open up an ssh port using this method, although you can run sshd on a high port and get there that way. But it is better than nothing. Better still would have been to replace the router, but that wasn’t an option in this case.

There are other tools out there if you are interested. NAT-PMP is easy to use from Python, for example. There’s also something called PCP (not the performance co-pilot, which is something else). Many routers don’t support either of these, and we hear that implementations are often buggy, just like UPnP.

Advertisement

For the record, NAT-PMP didn’t give me a better error message, either. So the moral is this: if you can, just punch a hole in your router the old-fashioned way. But if you can’t. Linux almost always gives you another option.

Source link

Advertisement
Continue Reading

Tech

United States FCC bans import of all new foreign-made consumer routers

Published

on

After pressure from regulatory committees about fears of Chinese spies and botnets, the FCC has placed a ban on all new foreign-made consumer routers.

Three tri-band routers side-by-side, white cylinders with the number 7 engraved in the surface
TP-Link may be affected by latest US ban

Regulators have become increasingly interested in routers after Chinese brands took more than 65% market share during the pandemic. US router makers like Netgear pushed back with lawsuits and lobbying, and it seems to have borne some fruit, though the result may cause problems for everyone.
According to a report from Reuters, the FCC has deemed all foreign-made routers a national security concern. This seems to imply that the United States wants all routers manufactured in the country via “secure supply chains.”
Continue Reading on AppleInsider | Discuss on our Forums

Source link

Continue Reading

Tech

Delve halts demos, Insight Partners scrubs investment post amid ‘fake compliance’ allegations

Published

on

Delve, a Y Combinator-backed compliance startup accused of fabricating certifications for its customers, has disabled the “book a demo” feature on its website.

The controversy, detailed last week in a Substack post by an anonymous whistleblower known as “DeepDelver,” has also apparently led Insight Partners to scrub an article explaining its $32 million investment in the startup. DeepDelver, who claims to be a former client, alleged that Delve, which was valued at $300 million during its Series A funding round last year, fabricated compliance data for its customers.

The original text of the article, written by Insight Partners managing directors Teddie Wardi and Praveen Akkiraju, among others, and titled, “Scaling AI-native compliance: How Delve is saving companies time and money on compliance busywork,” remains viewable here via the Wayback Machine, an internet archive that preserves snapshots of web pages.

Delve’s co-founders Karun Kaushik and Selin Kocalar, as well as Insight Partners, did not immediately respond to TechCrunch’s request for comment.

Advertisement

On its website, Delve claims to have helped customers such as Microsoft, Chase, PayPal, American Express, and the AI search company Perplexity cut “hundreds of hours” of compliance busywork. However, it remains unclear how many of these companies are still active users of the platform.

Founded in 2023, Delve says it leverages AI to automate the process of obtaining security and regulatory certifications, including SOC 2, HIPAA, and GDPR — standards that govern data security, health information privacy, and European data protection, respectively.

In their Substack post, DeepDelver alleged that Delve “fabricated evidence of board meetings, tests, and processes that never happened,” then forced customers to “choose between adopting fake evidence or performing mostly manual work with little real automation or AI.”

Techcrunch event

Advertisement

San Francisco, CA
|
October 13-15, 2026

The post further alleges that Delve’s platform rubber-stamps its own reports rather than undergoing a second layer of independent auditing.

Advertisement

Delve responded to the accusations by saying it does not issue compliance reports at all, and that instead it is an “automation platform” that ingests information about compliance and then provides auditors with access to that information.

Delve also said that its customers “can opt to work with an auditor of their choosing or opt to work with one from Delve’s network of independent, accredited third-party audit firms.” Those auditors, the startup said, are “established firms used broadly across the industry, including by other compliance platforms.”

In response to the accusation that it’s providing customers with “fake evidence,” Delve countered that it’s simply offering “templates to help teams document their processes in accordance with compliance requirements, as do other compliance platforms.”

While the company is denying DeepDelver’s allegations, the disabling of the “book a demo” function and the scrubbing of Insight Partners’ investment thesis article suggest that the startup is in damage control, and that investors may be distancing themselves from the company.

Advertisement

Source link

Continue Reading

Tech

Trucker Caught Free Wheeling Over 60 Miles Without A Tire

Published

on





Ask most truckers about their must-haves in a good semi-truck, and you might get answers like quality seats, a reliable power supply, and practical storage space. Having tires on the wheels might seem like too obvious an answer, although it seems one trucker in Canada didn’t have “make sure all the tires are still there” on their checklist. The Ontario Provincial Police recently issued a warning on social media to remind drivers that they should always check their tires before traveling after pulling over a truck on Highway 17. According to the post, the truck had driven more than 60 miles with one tire missing.

The driver of the vehicle is now facing multiple charges of unsafe operation of a vehicle as a result. According to CTV News, the unnamed 41-year-old driver was from Calgary, while the tractor and trailer were operated by a company in Steinbach. The company was also hit with charges due to the vehicle’s unsafe condition. Police took the vehicle off the road after the stop, with repairs required before it could resume service.

Advertisement

U.S. truckers can remove one tire in certain situations

Road rules can vary between the U.S. and Canada, and there are plenty of common U.S. driving habits that can get you a ticket north of the border. According to the Federal Motor Carrier Safety Administration, U.S. truckers are allowed to remove one defective tire from a set of dual tires as long as the weight on the remaining tires does not exceed the legal limit.

However, that is assuming they have four tires on an axle to begin with. Images provided by the Ontario Provincial Police show the stopped truck did not have dual tires, leaving one rim in contact with the road. As such, it would have quickly attracted the attention of local law enforcement on either side of the border.

Advertisement

Even drivers who meticulously keep track of the condition of their tires will eventually have to replace them, and changing a truck tire is harder than you’d think. Attempting to change a semi-truck tire without knowing what you’re doing can result in injury, and so it’s best left to the professionals.



Advertisement

Source link

Continue Reading

Trending

Copyright © 2025