
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Shivin Dass1, Wensi Ai2, Yuqian Jiang1, Samik Singh1, Jiaheng Hu2, Ruohan Zhang1, Peter Stone1,3, Ben Abbatematteo1, Roberto Martín-Martín1
1The University of Texas at Austin, 2Stanford University, 3Sony AI
TeleMoMa is a teleoperation toolkit that enables intuitive teleoperation of high-DoF mobile manipulators. We provide a common pipeline that supports several teleoperation interfaces such as vision, VR, mobile phones and more, and enables mixing-and-matching between them. While we provide code for several mobile manipulators in sim and real, the versatility of TeleMoMa allows easy plug-and-play teleoperation of any mobile manipulator in general.
Other system configurations may work, but we haven’t tested them extensively and may only be able to provide limited support.
Note: TeleMoMa can work with higher versions of python but if iGibson sim environment is required then please use python3.9.
git clone https://github.com/UT-Austin-RobIn/telemoma.git
cd telemoma
conda create --name telemoma python==3.9
conda activate telemoma
pip install -e .
We provide a demo script to test different teleoperation modes in the iGibson sim environment. iGibson can be installed by running,
(telemoma) > pip install igibson
In case of installation or runtime issues with iGibson, please checkout their exhaustive documentation and github.
To verify your installation the following code can be used to run TeleMoMa in a sandbox environment in iGibson.
(telemoma) > python telemoma/demo_igibson.py --robot tiago --teleop_config telemoma/configs/only_keyboard.py
--teleop_config
defines the input modality to be used for controlling each part of the robot. Some example configurations are provided in telemoma/configs folder.
Make sure the input hardware is correctly setup by following the instructions provided in Human Interface.
Hardware specific setup instructions for devices compatible with TeleMoMa are provided here.
The details on the sim environment installations, real robot codebase and instructions on setting up TeleMoMa on your own robot are provided here.
@article{dass2024telemoma,
title={TeleMoMa: A Modular and Versatile Teleoperation System for Mobile Manipulation},
author={Dass, Shivin and Ai, Wensi and Jiang, Yuqian and Singh, Samik and Hu, Jiaheng and Zhang, Ruohan and Stone, Peter and Abbatematteo, Ben and Martín-Martín, Roberto},
journal={arXiv preprint arXiv:2403.07869},
year={2024}
}
FAQs
A modular and versatile teleoperation system for mobile manipulation
We found that telemoma demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.