
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
Convert WiFiFoFum KML files to CSV logs (e.g. for data visualization)
I had a homework assignment in a security class to just go wardriving and see what interesting patterns could be found. With an old iPhone 3GS I got got for $15, I just drove around town and collected hotspot data and geolocations. However, I couldn't interact with it the way I wanted... So, I wrote this to convert the KML-ish output to a CSV that can be used for data visualization.
Convert the WiFiFoFum KML files to a CSV:
$ wff2csv WiFiFoFum_Log_586.kml > wifi.csv
Outputs these fields:
Then, you can choose your own way of dealing with data. For example, you can easily create a visualization using Google My Maps:

If you want to write a different conversion (e.g. to JSON), there is a separate wffParser.js file you can take advantage of.
Parse a WFF KML file:
// parser is installed with wff2csv
const wffParser = require('wff2csv/wffParser')
const wifiData = wffParser
.parseFile('WiFiFoFum_Log_586.kml')
.then(data => console.log(data))
Logs:
[{
essid: '',
macAddress: '',
channel: '',
security: '',
type: '',
latitude: '',
longitude: '',
elevation: ''
}]
With npm installed:
Install for system-wide usage:
$ npm install -g wff2csv
Install for API/parser usage:
$ npm install --save wff2csv
MPL-2.0
FAQs
Convert WiFiFoFum KML files to CSV logs (e.g. for data visualization)
The npm package wff2csv receives a total of 1 weekly downloads. As such, wff2csv popularity was classified as not popular.
We found that wff2csv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.