markjenkinswpg

6 ms·

1.
by markjenkinswpg 19d ago
This is probably not a convincing argument, but I'll share it anyway. Think of bootstrapable builds as a hedge against tyranny. Is it likely that a future regime could come into being that would be backdooring FLOSS builds and undermin
2.
by markjenkinswpg 1mo ago
To describe "Predictable firmware randomness can expose wallet seeds and ephemeral private keys" as severity "high" and not "critical" is a severe understatement. If I machine model generated this, it shows a l
3.
by markjenkinswpg 1mo ago
One reason for waves is that end-users had the option to add additional entropy via dice rolls mixed in with the bad internals or an arbitrary BIP39 passphrase mixed in after the initial 12-24 word seed phrase is output. With the level of p
4.
by markjenkinswpg 1mo ago
From my perspective, the bug became shallow because the machine world extended the number of effective eyes. The aphorism applied, but just not fast enough as it took too long to get the right number of eyes. More people would have been har
5.
by markjenkinswpg 10mo ago
One comedy that did a good job of depicting programmers with no sense of hope circa 1999 was Office Space.
6.
by markjenkinswpg 11mo ago
Interesting summary. The relationship with some Arab speaking states has had some recent relevance.
7.
by markjenkinswpg 11mo ago
Consider this. There are circumstances in Venezuela that some would consider worthy of a civil war. This award winner has chosen peaceful resistance, acts that may have prevented war.
8.
by markjenkinswpg 1y ago
In my experience, the 10-15 year old salvaged computer that still works okay with GNU/Linux is increasingly a 64 bit machine. Case in point, I'm writing on a x86_64 laptop that was a free give away to me about a year ago with a CP
9.
by markjenkinswpg 1y ago
This is correct. But it can talk in their ear and be a good sycophant while they attend. For a Star Wars anology, remember that the most important thing that happened to Anikin at the opera in EP III was what was being said to him while he
10.
by markjenkinswpg 3y ago
I'm curious if Wine and ReactOS can run this, sounds like a good stress test.
11.
Call for remote presentations, CSides April 1(hax.skullspace.ca)
2 points by markjenkinswpg 4y ago|2 comments
12.
by markjenkinswpg 4y ago
Skullspace is a hackerspace in Winnipeg, Canada. On Saturday April 1st we are having our hackerspace festival Hax ( https://hax.skullspace.ca ). As part of this, we are seeking one or two more remote speakers to be part of our inf
13.
by markjenkinswpg 4y ago
Not only does the government have the right to destroy it, but so does anyone else. There's no reasonable expectation of recovery when you launch a balloon calibrated to go globe-trotting. It's basically no different than the pers
14.
by markjenkinswpg 5y ago
Switching.
15.
by markjenkinswpg 5y ago
They have a good FAQ on this: https://support.starlabs.systems/kb/faqs/ami-aptio-v-vs-core... The AMI UEFI firmware behaves like most UEFI firmwares these days and locks out writes to firmware flash after boot and
16.
by markjenkinswpg 5y ago
Tell me an appeals court was unimpressed, dawg.
17.
by markjenkinswpg 5y ago
https://stallman.org/images/dog.jpg
18.
by markjenkinswpg 5y ago
It makes sense that planted trees are not thriving in ecosystems where there wasn't already trees naturally. If the conditions were so good for tree growth, you would have a lot of trees there already. But, this brings to mind that the
19.
by markjenkinswpg 5y ago
The solution is to use an HSM such as the Nitrokey/Purism Librem Key (same thing) that has a LED that lights up if boot integrity is fine, including a TPM secret matching (maid can't clone that). https://www.youtube.com
20.
by markjenkinswpg 5y ago
One nice thing about the work showcased here is that it bootstraps TCC on its journey to GCC. At some point we could see attempts to bootstrap tccboot as a kind of "escape pod" from other systems, and after booting tccboot, have t
21.
by markjenkinswpg 5y ago
Nice work Fossy and co. I believe this is this is the dependency chain your live-bootstrap works through: https://github.com/oriansj/talk-notes/raw/master/live-bootst...
22.
by markjenkinswpg 6y ago
I'm a little miffed the section headings for chapter 2 on forks doesn't have king forks!
23.
by markjenkinswpg 6y ago
I consider "mainline" more clear, using it in a currently unreleased project.
24.
by markjenkinswpg 6y ago
EV was also my intro to hacking. I'm considering teaching a "intro to hacking -- by way of game mods" course at my hackerspace some day using Endless Sky or NAEV.
25.
by markjenkinswpg 6y ago
There's even a technical name for this kind of money, scrip.
26.
by markjenkinswpg 7y ago
If you do work in progress (wip) branches where you're not concerned with breaking the build and then rewrite the history to not break the build after (counts as new commits) this becomes more viable. Also encourages testing work to be
27.
by markjenkinswpg 7y ago
Stage0's binary seed is a monitor, a program that lets you twiddle data in hex into memory addresses (in hex). Code injected into the monitor can do the next best thing, a similar program that loads text files with hex into binaries an
28.
by markjenkinswpg 7y ago
A slightly different framing than openness that is used from time to time is owner controllable. Older x86 systems were underdocumented, but at least there was the hope of reverse engineering to replace boot firmware, limit device firmware
29.
by markjenkinswpg 7y ago
Somebody tell the Donald that Snowden stood up to Obama era policy.
30.
by markjenkinswpg 7y ago
That was before anyone did permissive licensing and at a time when it wasn't even clear if software was copywritable.

More ›