Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
stragies
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
23 ms
·
241.
▲
by
stragies
6y ago
They don't need too. They were a cofounder, and have a perpetual arch license
242.
▲
by
stragies
6y ago
If you haven't produced the processor, and the tooling, and the base components all by yourself?.
243.
▲
by
stragies
6y ago
O.K. so we see the same things. I can't discern from your writing tone, if you think the above is desirable or a train_wreck_in_slow_motion coming. I think, it's the latter, not necessarily by direct effect, but by all the bad beh
244.
▲
by
stragies
6y ago
I don't know, where you live, but in most of the world, certification/signing/encryption of RF-capable Devices/Firmware has been established rule for decades, with a few exceptions for dev-boards. TPM, ME, SB, the_recent
245.
▲
by
stragies
6y ago
If you re-read my post, you'll see, that we are not contradicting each-other. If you have the time/money/infrastructure/knowledge/trusted_personnel to design/make/test/etc entire processors, then no
246.
▲
by
stragies
6y ago
> What's stopping targeted attacks via custom modifications of ARM or x86 chips? Nothing, if you have power over the manufacturers. (Usually governments) But now, with RISC-V, anybody with deep enough pockets to spare a few million
247.
▲
by
stragies
6y ago
Hi, thanks for replying! > the way copyleft licenses have been managed has brought us back to the commercial licenses with source code, just under a different name to make them more appealing to younger generations. I think, I'm fol
248.
▲
by
stragies
6y ago
> RISC-V allows companies to make closed systems, but it also allows them to make open systems True, but can you recall any moment in history, where market forces did not actually make producing "open" devices unprofitable? So,
249.
▲
by
stragies
6y ago
Having an liberally licensed code-base with make it very easy for entities to publish a benign version on github, and then deploy an "enhanced" version on the real hardware, cryptographiclly signed, and not dumpable. They'll
250.
▲
by
stragies
6y ago
RISC-V sounds like a good idea, but (imo) could lead to a situation, where all/many device manufacturers make custom processors based of the liberally licensed code-base. At first, this sounds great, "Yah, no more reliance on Inte
251.
▲
by
stragies
6y ago
Yeah, devices that old should be dismantled & scrapped for parts. The screens sometimes are useful. Then you smash the flash chips, and anything else that could have cached/held any credentials/IDs. Some IOT devices cache/
252.
▲
by
stragies
6y ago
How sure are you, that the WIFI/BT/NFC/GPS/X-chip doesn't also have "in-band remote debugging protocols" like the baseband chip? Or just "normal" bugs like Kr00k (V2), Krack, etc?
253.
▲
by
stragies
6y ago
Whenever I contemplate putting an ancient device (back) on the air, I always end up finding out, that at least one of the wireless technologies/chips aboard the device has security problems, and replacement firmware ( if the problem i
254.
▲
by
stragies
6y ago
Aaaand it's gone ... As in the ability to run custom/new kernel-modules on a system with secure boot enabled, without the system considering itself "too tainted" to run certain apps/binaries, that require the system
255.
▲
by
stragies
6y ago
Same here, and then i discovered EVIL, the vi layer for emacs. The best of all worlds: Vim text manipulation grammar over the emacs engine.
256.
▲
by
stragies
6y ago
Treat these devices like PCs: See the installed system as "example installation to demonstrate functioning". Like HP with the bundled Crapware on PCs. Just install OpenWrt as soon as you did a basic function test. And only buy har
257.
▲
by
stragies
6y ago
That would require 2 Devices supporting Ethernet-over-HDMI, and one of needs to have routing/bridging enabled. I have -up2now- not seen 1 device, where the combination of HW/SW was capable of offering ethernet to the Device OS.
258.
▲
by
stragies
6y ago
If you use the usb gadget mode of the raspberry pi to present the PI as a USB WebCam, you can forego the HDMI-connection, and thus the need for the HDMI capture card.
259.
▲
by
stragies
6y ago
Permission problem for the redirection. From https://stackoverflow.com/a/82278/5208540 , here's how to "redirect with sudo": Use "| sudo tee /dev/fb0"
260.
▲
by
stragies
6y ago
It's 2020, and I still have to manually enable Wifi Mesh Networking (802.11s) and recompile in Debian, even Buster. But that is a minor inconvenience, and takes 5 minutes. I do that for some other package too, for some niche options, b
261.
▲
by
stragies
6y ago
I would rather call it the new-found paranoia most legal departments now have, when IT dept. mentions rolling out new, unknown, non-auditable software in the company from a new vendor that wasn't grand-fathered in (= the legacy windows
262.
▲
by
stragies
6y ago
Fair point, but there are standard ways to package npm deps in Debian: https://packages.debian.org/buster-backports/npm2deb For restricted environments limited to things you can get from standard repos this is the only
263.
▲
by
stragies
6y ago
Is there a specific reason hindering you from publishing a Debian package, or becoming/appointing a Debian packager, so that your product is available to anyone restricted to official package Debian sources?
264.
▲
by
stragies
6y ago
Neither is available in Debian repos.
265.
▲
by
stragies
6y ago
Do you need to be more than 1km underground, or away from outside walls? Just put the GPS-receiver on the far end of an RS485 serial connection. First google hit: https://www.worldtimesolutions.com/products/gps_rs485_ti
266.
▲
by
stragies
6y ago
From the nice article this little hint about a (possible) problem with Qemu: "qemu seabios 8x8 and 8x14 are exact matches to IBM's VGA and XGA fonts. These files are in fntcol16.zip from simtel. VGA-ROM.F08 and VGA-ROM.F14. qemu s
267.
▲
by
stragies
6y ago
So why then did you choose the "Windows among the Linux-distributions" as a base?
268.
▲
by
stragies
6y ago
I look forward to exploring that github source drop.
269.
▲
by
stragies
7y ago
Can your post be read as "In the near future, we might have the possibility of inspecting/re-programming a bunch of DMA--capable devices commonly found in systems"? That would be great. I shudder to think what horrors may awa
270.
▲
by
stragies
7y ago
The solution would be easy: Put the flashy stuff in a div with ID "advert", and the ad-blocker will hide it from view. All non-techies gets the intro-movie. Anyway: Here is the list of things I gathered from the comments (iiuc): *
More ›