HN user

2bluesc

3,422 karma

Embedded Linux Systems guy that likes to hack on bikes, drones, security, networking, and more

Posts156
Comments395
View on HN
blog.3mdeb.com 1mo ago

MSI PRO B850-P coreboot port: GFX init, Promontory21, and ACPI improvements

2bluesc
4pts0
www.ost2.fyi 3mo ago

OpenSecurityTraining2: Learning Paths

2bluesc
1pts0
www.phoronix.com 4mo ago

Intel Fred Can Yield Greater Performance – Fred Benchmarks on Panther Lake

2bluesc
3pts0
krebsonsecurity.com 4mo ago

Iran-backed hackers claim wiper attack on medtech firm Stryker

2bluesc
281pts302
newsletter.semianalysis.com 4mo ago

Are AI Datacenters Increasing Electric Bills for American Households?

2bluesc
10pts1
fearsoff.org 6mo ago

Cloudflare zero-day: Accessing any host globally

2bluesc
75pts15
tomtunguz.com 7mo ago

The Average Founder Ages 6 Months Each Year

2bluesc
38pts20
canonical.com 7mo ago

Canonical Announces Ubuntu Pro for WSL

2bluesc
4pts0
venturebeat.com 9mo ago

'Western Qwen': IBM Wows with Granite 4 LLM Launch and Hybrid Mamba/Transformer

2bluesc
83pts25
sqlite.org 11mo ago

Improved defenses against corrupt ZIP archives in the zipfile extension

2bluesc
4pts0
www.tomshardware.com 11mo ago

Why parts of Tom's Hardware now have a paywall

2bluesc
5pts0
daniel.haxx.se 11mo ago

Even Happier Eyeballs

2bluesc
2pts0
github.com 12mo ago

Maybe Finance v0.6.0: Farewall Maybe

2bluesc
4pts0
www.linuxfoundation.org 1y ago

UEC Launches Spec 1.0 Transforming Ethernet for AI and HPC at Scale

2bluesc
1pts0
www.tomshardware.com 1y ago

U.S. inks bill to force geo-tracking tech for high-end gaming and AI GPUs

2bluesc
12pts3
www.bbc.com 1y ago

Mexico sues Google over 'Gulf of America' name change

2bluesc
12pts0
blog.kraken.com 1y ago

We identified a North Korean hacker who tried to get a job

2bluesc
380pts290
lwn.net 1y ago

Template strings accepted for Python 3.14

2bluesc
2pts1
doublepulsar.com 1y ago

Oracle attempt to hide cybersecurity incident from customers?

2bluesc
638pts127
reservoirsamples.substack.com 1y ago

Thoughts on setting policy for new AI capabilities

2bluesc
1pts0
lwn.net 1y ago

14 Years of Systemd

2bluesc
8pts0
github.com 1y ago

Userland exec PoC to be used as attack vector technique

2bluesc
1pts0
people.kernel.org 1y ago

Colliding with the SHA prefix of Linux's initial Git commit

2bluesc
227pts64
www.phoronix.com 1y ago

The Performance Benefits of Linux 6.12 LTS over Linux 6.6 LTS

2bluesc
8pts0
eaton-works.com 1y ago

Exploiting McDonald's APIs to hijack deliveries and order food for a penny

2bluesc
113pts18
www.tomshardware.com 1y ago

Intel finds root cause of CPU crashing and instability errors

2bluesc
3pts3
www.understandingai.org 1y ago

Human drivers are to blame for most serious Waymo collisions

2bluesc
42pts97
leastauthority.com 2y ago

Security Audit Reports: A Guide for Everyone

2bluesc
4pts0
github.com 2y ago

BLint: Check the security properties, and capabilities in your executables

2bluesc
2pts0
www.getlago.com 2y ago

We raised $22M to build an OSS alternative to payments and billing platforms

2bluesc
3pts0

TBH, it looks to me as a trick to enable extra usage by baiting me with $20 credit by toggling on the feature that lets me burn another $20 without realizing it.

Toggling it again to turn it off immediately after (which I assume most people will miss) seems to guard against this.

Traditionally, I used Python for personal tools optimizing for quick coding and easy maintenance. These tools commonly feed UI elements like waybar, shell, and tmux, requiring frequent, fast calls.

My approach is evolving due to NixOS and home-manager with vibe coding to do the lifting. I increasing lean on vibe coding to handle simple details to safely write shell scripts (escaping strings, fml) and C/C++ apps. The complexity is minimized, allowing me to almost one-shot small utilities, and Nix handles long-term maintenance.

With NixOS, a simple C/C++ application can often replace a Python one. Nix manages reading the source, pulling dependencies, and effectively eliminating the overhead that used to favor scripting languages while marking marginal power savings during everyday use.

You can use the linker to preload `nss_wrapper`[0] and overwrite anything using `nss`.

Here's an example:

  > cat hosts
  198.51.100.33 test.tld
  2001:db8::33 test.tld
  198.51.100.12 test4.tld
  2001:db8::12 test6.tld

  > LD_PRELOAD=/nix/store/sw2r0gpi9c9rsvqgvi4906yxh948ydsv-nss_wrapper-1.1.16/lib/libnss_wrapper.so NSS_WRAPPER_HOSTS=hosts getent ahosts test.tld
  198.51.100.33   DGRAM  test.tld
  198.51.100.33   STREAM test.tld
  2001:db8::33    DGRAM
  2001:db8::33    STREAM

  > LD_PRELOAD=/nix/store/sw2r0gpi9c9rsvqgvi4906yxh948ydsv-nss_wrapper-1.1.16/lib/libnss_wrapper.so NSS_WRAPPER_HOSTS=hosts getent ahosts test4.tld
  198.51.100.12   DGRAM  test4.tld
  198.51.100.12   STREAM test4.tld

  > LD_PRELOAD=/nix/store/sw2r0gpi9c9rsvqgvi4906yxh948ydsv-nss_wrapper-1.1.16/lib/libnss_wrapper.so NSS_WRAPPER_HOSTS=hosts getent ahosts test6.tld
  2001:db8::12    DGRAM  test6.tld
  2001:db8::12    STREAM test6.tld

  > LD_PRELOAD=/nix/store/sw2r0gpi9c9rsvqgvi4906yxh948ydsv-nss_wrapper-1.1.16/lib/libnss_wrapper.so NSS_WRAPPER_HOSTS=hosts curl -v test.tld
  * Host test.tld:80 was resolved.
  * IPv6: 2001:db8::33
  * IPv4: 198.51.100.33
  *   Trying [2001:db8::33]:80...
  *   Trying 198.51.100.33:80...

[0] https://cwrap.org/nss_wrapper.html

I think you mean

yourname+servicename@gmail.com

From my experience, many (bad) websites consider "+" an invalid character and prevent you from using the address in this form.

Smart spammers can just strip the service name since it works the same for all Gmail users.

Really need dedicated addresses like Fastmail's Masked Addresses.

Chipworks offers $50-250k to fully extract the eFUSE of one Intel i5 processor, so the eFUSE content is encrypted by a master key (called “global wrapping logic key” in the patent).

I wonder how readily things like this are known within the HW security community?

Pi-hole v6 1 year ago

Switched to Technitium (from piHole via Docker on amd64 and manual dnsmasq before that) primarily for DNS over HTTPS and never looked back. Used it for DHCP and DNS.

For anyone wondering, this was written in 2019 and is no longer "new". I was confused by the following line since I recall this being available for sometime:

By using the newly introduced dm-writecache device mapper Linux kernel module

Looked for a publication date, but nothing anywhere on the page other then timestamps in the command output mentioning 2019. Wayback machine confirms this as well[0]

[0] https://web.archive.org/web/20191124065801/https://www.admin...

Where do you get that? Sounds like they improved performance over the previous "fixes":

Intel's internal tests show that the 0x12B update does not noticeably affect performance. Benchmarks and gaming tests, including popular titles like Cyberpunk 2077 and Shadow of the Tomb Raider, showed results within normal expected variations when compared to the earlier 0x125 update.

Perhaps "Dolt is Git for data" should really be "Dolt is Git for databases"

I loaded the page expecting to see some arbitrary binary data version control tool and was caught off guard by all the references to SQL.

On Google Pixel 8 (IDK about other Android phones) you can press the power button + volume up button to launch a pop-up menu with the following options: restart, power off, lockdown, emergency.

If you select lockdown you'll be required to use a pin or password to unlock the phone.

Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS) for small teams seeking simplicity and security.

Was excited to hear about self-hosted secrets management, but expected "self-hosted" to mean I can host anywhere, but the depends specific AWS features.

Perhaps "unmanaged" is a more appropriate term.

Certainly the article doesn't hit on power, but if it is "faster" and uses the same amount of energy then it should do the same about work and consume less battery.

Unfortunately from the article it's hard to tell anything from power consumption other then the Snapdragon X Elite 8 has a roughly 28W "TDP" and that the Elite A has 80W "TDP" and is only slightly faster. Still, this doesn't translate to real world power usage.

I'd love to see a real world benchmark that measures actual power consumption of these chips.

Interesting walk through in the linked video as he tried to troubleshoot this:

https://www.youtube.com/live/1UnoBfw6soI

Pretty shocking to see (extremely unlikely) non-malicious code work / not-work depending on a security mitigation setting.

Curious to see where this goes as to whether it's a kernel bug and nobody is paying attention to `mitigations=off` now or the unlikely outcome that it's an actual hardware bug where mitigations work around it and nobody has noticed.

Seems he had overclocked and maybe disabling the migation has revealed an instability in his setup that's otherwise stable (or at best marginal).