Every once in a while a security researcher will highlight a new method for obtaining the key from the TPM, usually by tapping into the I2C comms between it and the CPU. They’ll say it’s ‘trvial’ and can be done ‘in seconds’, but that’s only after a lot of work figuring out that particular motherboard.

A few months ago there was yellowkey that just needed a special file on a USB drive to bypass bitlocker, making it so easy that it was arguably a backdoor.

Depending on how the cables have been put in, it can be fairly easy to replace an existing run by tying the new cable to the old one and pulling it through.

I’d be worried about lateral movement. Something like a XSS in jellyfin that gets them to my browser on my main computer, or otherwise leveraging the network proximity in anyway to spread to other machines with stuff I care about.

Very evocative of the 2010 Motorola Flipout I still have in a drawer. Looks very fun.

Like, why is bash ancient? (3.2 vs 5)

To avoid GPLv3, zsh is the new default.

Why is there no package manager

Mac App store is the official one, can also install brew, macports, pkgsrc, or nix. Or use language/runtime specific ones like npm, pip, cargo, go.

Why are the utils like ls and friends flag-order-sensitive

They avoid GNU versions of utilities, for similar licencing fears as avoiding modern bash. That said ls . -lah is unhinged, I don’t know any other unix derived ls that supports that.

Why do I have 40 network devices with cryptic names?

Yeah they got some weirdo Apple stuff

Gotta preach for the cult of ZFS. It’s check summing, copy on write, and zraid features are all exactly what you want for data resilience. Plus you get transparent compression, and snapshots that can provide a bit of a stop-gap for your lack of backups.

It will normally soak up any and all memory for buffers and caches, but is meant to quickly free up when it’s needed by an app. Linux already does this on any filesystem with its page cache.

Oh and mounting a ZFS dataset on a new machine is super quick and easy, it stores it’s config on the drives themselves, so you can plug them into a new box and zpool import -af and boom it’s mounted and ready to go.

Didn’t know Doc Martins did Chelsea style boots, that’s sick!

I keep buying and wearing out various no-name cheap boots. One day I’ll get a pair of RM Williams or even Crockett & Jones…

I remember when I was a kid messing with Windows 95/98, I had this intuitive feeling of what was happening under the hood. Just like how you describe your theory. Honestly you’re probably on the right track. In theory on linux you can actually dive into the source code and try to figure out what’s actually happening, but that’s intimidating AF. Hard to say if the problem is between wine and the Direct Rendering Manager (DRM), X11, Wayland, KDE, or the GPU driver…

I had a kind of similar problem with my display not outputting when it was connected. I had to use a DRM file in /sys and udev script to fix it, wrote a blog about it. If your monitors are still messed up after a reboot, it sounds like this won’t help you though.

Also you made me lol to “wine strikes me more as an emulator”. It totes is. The “Wine Is Not an Emulator” name is a joke, the original name was “WINdows Emulator”, which they changed to avoid Microsoft’s lawyers.

That is simultaneously ridiculous and amazing. Blindly clicking the buttons to enable the screen definitely proves you’re getting familiar with the OS.

Why do you think wine/Bricklink messed it up in the first place?

I’ve always geeked out about fan curves and monitoring, though I readily admit for most PCs leaving the default BIOS curve works fine enough.

I just used the free chat with Claude, it created and tracked the files in its own webchat thingy. Being a kernel module, I was happy to manually check, copy/paste, compile, then run the code for each iteration.

Porting postmarketOS to a phone sounds like it may require some amount of manual running and explaining results back to the chat. Ultimately the output only starts to get functional when it hits reality and needs to keep adapting to feedback.

I wrote a blog on the process that more focuses on the journey and technical details of the controller chip.

I used a very similar method in a similar situation to albb0920. They describe it as vibe coding too.

The exact chip that handles everything is undocumented, but similar ones in the same series have datasheets. A maintained version of the linux driver handily collated all of the available datasheets and configurations used by different motherboards. Between that and my microcontroller/hardware experience, that side of things wasn’t too bad.

What I didn’t know anything about was writing an Illumos driver. I used the chatbot with a free claude account, compiling and running the code manually myself. I was impressed that it was able to build out the boilerplate and get something going at all. Course it took a few tried to get something that compiled and worked somewhat correctly. At some points I needed to look through the generated code and point out exactly what what wrong, but at least it would address it.

Code running in the context of the kernel is definitely not something I would have autonomously executing by a LLM. The end result is absolutely not something I would want put into the official Illumos source.

This from the company that started the netbook trend with the $400 eeePC in 2007…

Nah I’m built different.

Sorry I might have misunderstood, you mentioned giving others access externally and it working fine. Normally, if you’ve set up the service to be publicly accessible on the internet, you can just visit the same site through the public DNS record and your public IP. At home or elsewhere, it’s all the same internet.

So either you’ve done something odd, or you’re talking about different, more private, internal only services?

Can you live with the services routing out and back into your public IP? If it all works for external users on the internet, doing nothing special should mean it works for you too?

I used an old phone with a broken screen as a webcam since covid untill it totally broke recently.

However it needed some stars to align; I had a 3D printer to make a custom holder so it could sit on my monitor unobtrusively. I also luckily had a phone with a built in method to limit the battery charging so it could be plugged in 24/7. I was able to disable all power saving and permission features, so the app could run 24/7 without being killed by android.

I used droidcam, which works with an OBS plugin nowadays. I got it to the point that I just needed to launch OBS and my webcam was on, no touching or fiddling with the phone at all.

In my head I thought one could make relatively cheap high capacity in 2.5" SATA form factor by having more NAND chips of lower capacity. You give up speed and PCB space but that’s fine since bandwidth and IOPS are limited by SATA anyway and there’s plenty of space compared to M.2.

Turns out to not shake out that way, controller ICs that support SATA aren’t coming out any more, and NAND ICs are internally stacked to use up channels while not taking up PCB space.

There are some enterprise options, but they’re mad expensive.

I have 4x 6TB HDDs in my NAS. Around 5 years ago I decided to simply replace any dead drives with 6TB ones instead of my previous strategy of slowly upgrading their size. I figured I could swap to 8TB 2.5" SATA SSDs that had just started to exist and would surely only get cheaper in the future…

I think the idea of directions came before the idea of negative.