chenxiaolong

8 ms·

1.
by chenxiaolong 1mo ago
I don't know if it's an A/B test, but they no longer allow adding new TOTP authenticators for my family member's account. Existing setups continue to work fine. That's why I had to do the hackery of having the scrip
2.
by chenxiaolong 1mo ago
In case anyone is interested in using TOTP two-factor authentication with their ID.md account, I made a script for setting that up: https://github.com/chenxiaolong/id-me-otpauth They used to support TOTP directly, but
3.
by chenxiaolong 2mo ago
This release also fixes runtime.findnull() to be compatible with MTE on Android ([1] and [2]). This was the only thing preventing MTE from being enabled for apps that use gomobile on MTE-compatible Android OS's like GrapheneOS. [1] ht
4.
by chenxiaolong 5mo ago
It looks like all the old files are still hosted on the server. You can just replace the version number in the download links with one of the tags from https://git.zx2c4.com/wireguard-windows .
5.
by chenxiaolong 7mo ago
This article isn't about the installation of regular apps. The "sideloading" it's referring to is the option to use the "adb sideload <OTA file>" command when booted into recovery mode to install OS updat
6.
by chenxiaolong 7mo ago
It's probably worth pointing out that the online process is one time and it installs a token that permanently lets the setting be toggled offline afterwards. This persists across factory resets and flashing any OS. I wrote more details
7.
by chenxiaolong 10mo ago
NFC payments via Google Wallet running on my Pixel Watch 3 connected to a phone running GrapheneOS works just fine. I use this regularly. (It doesn't require Google Wallet to be installed on the phone.) At least one of my cards require
8.
by chenxiaolong 11mo ago
I wrote https://github.com/chenxiaolong/MSD for exactly that. It's a small wrapper around the Linux kernel's mass storage emulation support (CONFIG_USB_CONFIGFS_MASS_STORAGE). It can emulate a read-only optic
9.
by chenxiaolong 1y ago
Yeah, my GitHub Actions workflows don't do much more than `cargo build --release && cargo test --release`. I don't use any of the fancy features that would lock me in. It's really just running the tests on Mac that I
10.
by chenxiaolong 1y ago
For me, I begrudgingly use GitHub for my personal projects because GitHub Actions is free. If I move elsewhere, I'll have to stop providing precompiled binaries for OS's that I can't cross-compile for from Linux (eg. macOS).
11.
by chenxiaolong 1y ago
There shouldn't be any side effects other than rendering Play Protect inert. No other AOSP component relies on this setting.
12.
by chenxiaolong 1y ago
If this is enforced via Play Protect, then the whole mechanism can likely be disabled with: adb shell settings put global package_verifier_user_consent -1 This does not require root access and prevents Android from invoking Play Pr
13.
by chenxiaolong 2y ago
I'm curious how the check is implemented in Google Play Services. If it's based on the package manager's initiatingPackageName field, it should be trivial to bypass on rooted devices (or unrooted custom ROMs).
14.
by chenxiaolong 2y ago
This should work with any arbitrary filename: latest=$(printf '%s\0' <glob> | sort -zrV | head -zn1) or with long args: latest=$(printf '%s\0' <glob> | sort --zero-terminated --reverse --versio
15.
by chenxiaolong 2y ago
I'd recommend giving openconnect a try. It was originally meant for Cisco VPNs, but has also supported GlobalProtect for a while now. It integrates with the NetworkManager GUI if you use that. It worked flawlessly with the GlobalProtec
16.
by chenxiaolong 2y ago
Visual voicemail is when the dialer app on your phone can show the list of voicemails similar to how you would see your email inbox. You can directly play the voicemail messages and depending on the device/carrier, there might also be
17.
by chenxiaolong 2y ago
One area where the distinction between PIDs and TGIDs matters a whole lot is for using ptrace on processes that call execve() (eg. for something like `strace -f`). In can be pretty tough to ensure that tracer's internal state matches r
18.
by chenxiaolong 2y ago
No worries! Thanks for the hint about the date -- I didn't know that was a function in the equation. Changing the date back to 2023 actually allowed the 19190301 code (had a typo in my original post) to work, though it seems they'
19.
by chenxiaolong 2y ago
Any chance you happen to know the latest code to get into the hidden menu on the EV6? Used to be 19190307, though it was changed in the 231215 infotainment firmware update.
20.
by chenxiaolong 2y ago
It looks like it is packaged in the official Fedora repos: https://packages.fedoraproject.org/pkgs/foot/foot/
21.
by chenxiaolong 3y ago
> but explicitly tells users not to do that They set the vbmeta header flags field to 0x3, which effectively turns off all of AVB (Android Verified Boot). I'm guessing they do this because they want to allow the system partition to
22.
by chenxiaolong 3y ago
Yup, Bluetooth devices can report the latency via AVDTP 1.3 Delay Reporting. If I remember correctly from the last time I looked at this, the media framework in OS's tend to expose this to applications by reporting the timestamp that a
23.
by chenxiaolong 3y ago
I really like this program's UI. I assume it's built on the textual library? Unfortunately, my main use case for a hex editor is editing very large files (firmware images, disk images, etc.), which hexabyte doesn't seem to ha
24.
by chenxiaolong 3y ago
LinkSheet [1] can do that. It's a small app that you set as the default browser and shows a prompt when you open a link to allow you to choose what to do (eg. open in browser, open in app, share link, remove tracking URL parameters, et
25.
by chenxiaolong 3y ago
Related submission from earlier today: https://news.ycombinator.com/item?id=38125379 (Though this article also explains how to enable MTE for user apps and verify that it's enabled.)
26.
by chenxiaolong 3y ago
Per [1], I've also enabled MTE for user applications via the `persist.arm64.memtag.app_default` property. So far, the only crashes I've seen have been in apps that use cgo (eg. syncthing and rclone). With root access, things can b
27.
by chenxiaolong 3y ago
Wonderful tool! I started using it since 0.6 because sbsigntools and pesign both choked on some EFI executables I had, but sbctl's go-uefi parser did not. It also seems to handle enrolling PK/KEK/db/dbx a lot more reliab
28.
by chenxiaolong 3y ago
Yep, what you're referring to (the "Powered by <browser>" screen) is done with the Custom Tabs API. Some folks might also refer to it as the in-app browser. Any browser can implement a CustomTabsService and the whole fe
29.
by chenxiaolong 3y ago
What I don't understand is the use case for data descriptors. If the entire file is available, then the central directory is sufficient. If the file is being streamed, then there's no way to know with certainty where the data desc
30.
by chenxiaolong 3y ago
Looking at AOSP, the logic that allows something like Play Protect to work is at [1]. It looks for system apps that can handle the ACTION_PACKAGE_NEEDS_VERIFICATION intent, which is the Play Store app in this case. Looking at the Play Store

More ›