1,147 karma · joined August 22, 2013
The real issue was that I had ended up cutting a lot of corners to try and get things done in time, particularly with regards to testing. Definitely a major lesson learned.
The MCUs didn't take long to program with a ZIF socket, but once they were baked onto boards and I was finding bugs that needed to be fixed, that's where it really turned into a pain doing it over SPI.
After all of that, I still ended up having to bodge 2 connections on all of the final boards after all was said and done (which was the 5th or 6th board revision after I did small test runs to play with things and fix issues)
Here are links to current firmware images:
http://gateway.c01.sbcglobal.net/firmware/00D09E/10.6.0.5300... http://gateway.c01.sbcglobal.net/firmware/00D09E/10.6.0.5300... http://gateway.c01.sbcglobal.net/firmware/00D09E/10.6.0.5300... http://gateway.c01.sbcglobal.net/firmware/00D09E/10.6.0.5300...
https://spun.io/2018/03/18/getting-into-the-pace-5268ac-rout...
My guess is that it was some hack they tried to disable IPv6, but aside from the insane load it added to the DNS infrastructure, the other result is that if these machines talk to a malicious resolver, their traffic destined for the loopback interface could end up going anywhere and being captured by anyone.
Great job!
There's a great walk-through of using it here, including fuzzing your parsers to make sure they're solid. https://github.com/Geal/langsec-2017-hackathon-code
Neat stuff!
That said, I got it sorted out. It turned out to be an incompatibility with both the NVMe disk I was using as well as an incompatibility with the memory I had purchased.
Getting the exact parts listed in your motherboard manufacturer's compatibility list appears to be pretty important for Ryzen currently. It's been rock solid since I swapped out those components.
With as many ways as you can have your machine compromised by simply browsing to a website that had some malicious advertising code embedded, I can't imagine why anybody would use such an old browser if they weren't absolutely forced to.
Many of the comments here are saying they're surprised it's still alive, or that it's sad someone would work on it, or that it should have more features. You're all missing the point.