HNHacker News
TopNewBestAskShowJobs

ilikenwf

90 karma · joined April 11, 2016

submissionscomments
ilikenwf··on Clevo Boot Guard Keys in the Wild Opening Door to Coreboot and Security Issues
It seems that the clevo boot guard, and possibly other signing keys have been shared regularly on their official site, which should allow for coreboot/dasharo/system76 ports to work with a wider variety of their machines.

The OP in the linked thread has not fully fleshed out the process, but in theory, once you can use the keys to build an image disabling boot guard - level 0, it should in theory then leave the machine open to being reflashed, though I'm not sure how true that is.

Clevo is like the 3rd largest manufacturer, and is sold as a number of names - XMG, Asus, HP, Alienware, System76, NovaCustom, Tuxedo, Eurocom, and many more...a lot of laptops they make are just ODM badged.

ilikenwf··on GameStop Is Toast
Gamestop isn't really just games anymore; even if they closed all brick and mortar shops and sold nothing they'd still be green on paper because of the liquid assets they hold.

The stock market and business of it never do make sense because the whole thing is rigged.

ilikenwf··on GameStop Is Toast
You didn't really cover any fundamentals here. The business itself is changing and the investors generally are buying into Ryan Cohen, not Gamestop at face value, "MOASS" or not.

They have $4 billion in liquid assets, which if they desired would allow them to purchase new businesses to roll into their model or buy back all of the existing free float shares left.

No debts except a low interest covid loan from France.

They are branching out and selling consoles, PC gaming gear, board/card games, and sports cards in addition, amongst other things.

While you're right about a lot of what you say with digital downloads and such, you don't paint the full picture, but you can't be blamed because the Jim Cramers and hedgefunds of the world don't want people to know any of these facts.

Do some digging and you can find all this to confirm, and a lot more. r/superstonk is cultlike but they do have good fundamental research.

ilikenwf··on Firefox built-in spyware that cannot be disabled
You are incorrect. Please take a look at the default preferences that they ship, as they are a large and important part of it.

Literally on the front page: https://librewolf.net

You're here to astroturf for Mozilla or Google, aren't you?

ilikenwf··on Firefox built-in spyware that cannot be disabled
Depends on who the upstream provider is. Having a pihole or opnsense with dnscrypt and/or unbound setup is best.
ilikenwf··on Firefox built-in spyware that cannot be disabled
Here's your solution

https://librewolf.net/

Keeps version parity but removes all the nastiness with a lot of other beneficial config changes...and the ability to further customize in persistent js files.

Cachy Browser in CachyOS/Archlinux is more or less Librewolf with some other tweaks to make it faster.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
The wait time is what kept me from ordering one, actually. I love everything they're doing but don't want to get stuck like I did when I bought into the kickstarter for the purism librem5...which sits in it's box on my shelf...
ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
I realize all this...

But my HP Spectre died (I know, don't laugh) - 8th gen i7. It was...fine...I almost finished porting coreboot but the EC init I never could get working right.

That said the Serval WS and other more premium builds, while clevos, are repairable, supported, and have parts and manuals available. I realize I could buy a clevo or get a clevo from Tuxedo (and pay 5k if I want one with a mech keyboard and a 4090 inside) but then determining if the Sys76 coreboot and ec firmwares would work on it would be a whole other journey that I'm not really interested in right now.

With most manufacturers, even if they have longevity, you're still stuck most of the time figuring stuff out on your own and buying from China or Ebay to repair when something breaks...at least System76 supports their products fully and provides repair guides.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
I assume you've seen those strange retrofit motherboards from China? I forget the name. I know one a few years ago got posted here after the owner ported Coreboot to it.
ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
Your model makes sense, at least for situations like yours...

I got the serval because it includes a 4070 8gb...so graphics and battery life aren't really a concern to me...I usually am plugged in. I also trust AMD more but they haven't been very forthcoming on the PSP.

ilikenwf··on Ask HN: Why did Python win?
In college, sure - they actually started us on C/C++ and then had us work in ASM for discrete math...

But in middle and high school now I believe they teach...whatever the teacher wants. So a lot of js, python, vb...

ilikenwf··on Ask HN: Why did Python win?
Unless you use pyc it's only as compiled if you count php as compiled. Just in time bytecode compilation does not a compiled language make.
ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
I went "mobile workstation" this time around and so I have sockets again, migrating from a desktop and my dead ultrabook...

I can live with having ~1hr battery life (which I can push further anyway) with the way I operate and work...

Everyone I guess has different priorities. My company went remote so I don't have to be in an office or flying around all the time anymore, so I need less battery power.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
In addition the starlabs machines and tuxedo machines are ridiculous in terms of quality, even going as far as using cherry switches on their keyboards now...in the models well beyond my price point.

I realize everyone hates on clevo but it's only the lower end models that really suffer "quality" issues.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
Makes perfect sense for your situation. In my case it is more...portable power, without a lot of concern on efficiency because I'm always plugged in.

I guess it depends on priorities. I prefer first to be as assured as I can that despite my 0 trust model, my machine isn't factory backdoored, or at least, is less factory backdoored than everyone else's machine.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
Lenovo and quality aren't two words I associate together anymore. The IBM thinkpads were great, I have a pile of them in my storage. In fact I have both some Lenovo and IBM branded T60 and T4XX models. The IBM units have obviously more bulk to them, and the lids are stronger with more metal inside...

I prioritize Coreboot and OpenEC over all else, Lenovo is known for security issues with their machines in the past and occasionally cripple features and even Linux boot support. Their track record is awful. If you're a tinkerer, why would you buy a ferrari you're not able or allowed to work on?

The higher end premium System76 machines are of excellent quality. The Serval WS - which I ordered 2 weeks ago - is such an example.

ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
As much as I dislike the intel/amd "two party" thing we have now, why AMD when intel is the devil we know?

I realize performance and power and heat can be the concern but ultimately we know how to cripple ME, while the PSP isn't really fully understood yet.

System76 Serval WS - I ordered this and it arrives this week, however there is at least one AMD laptop they offer, again, I believe, with Coreboot and OpenEC.

ilikenwf··on Ask HN: Why did Python win?
I really wish schools would teach compiled languages before scripting languages.
ilikenwf··on I chose the ThinkPad Z13 Gen1 as my Linux laptop
Why not one of the coreboot/openec powered machines from System76? Purism kinda...sucks lately, but there's also Tuxedo computers, the KDE laptop, and others as well...

There's also starlabs but their ship time is atrocious.

ilikenwf··on YoutubeDLStreamer – A 99% AI Generated Kodi Addon
This took me 4-5 hours which is longer than writing myself would have taken, however I did this as an experiment.

I fed the specs into ChatGPT, and went back and forth with it until we had a working addon.

I also used Stable Diffusion for the icon and fanart.

It uses yt-dlp to scrape any URL for all the available streams, and then present them to you in a dialog to choose and play back.

Most of the time I either requested changes when I saw bad code or provided error output, to allow the AI to correct it.

Pretty interesting!

ilikenwf··on GM makes $1,500 subscription mandatory on GMC, Buick, Cadillac Models
The dealership itself, a mainline GM dealer owned by Berkshire-Hathaway.
ilikenwf··on GM makes $1,500 subscription mandatory on GMC, Buick, Cadillac Models
Cross posting from the other thread:

I ended up calling and having OnStar cancel my "trial" in my 2018 era truck in 2019, to the point I instructed them to disable the OnStar lights on the mirror and everything. This was a task as they're very annoying and persistent...

Once that was done I originally pulled the daughterboard housing the entire modem but this bricked my compass and GPS. To keep those working I ended up altering the modem itself with a soldering iron per the pdf posted here:

https://www.chevybolt.org/threads/internet-without-onstar-wi...

The guy there on that forum did so in an effort to use your own sim with the HMI, but using 0 ohm resistors or just solder bridging the relevant connections is enough to prevent my vehicle from getting online, but leaves the GPS intact. You can test by trying to make phone/onstar/data related actions - it just won't work.

Another good measure is to remove one of the antenna leads, I forget which one is cellular primary, but the other is more GPS/aux. Doing it all this way allows you to still connect your vehicle to wifi should you so desire to, for updates and such.

There are other secrets and tricks to these things, including a git repo I cloned that is now gone from the public internet, where a guy figured out how to solder an EMMC reader to a few points on the mainboard to get and modify the filesystem.

Edit: here's a mirror https://repo.or.cz/bosch_hmi_hacking.git

They really go out of their way to keep you from owning your vehicle.

Also bought a device that lets me plug HDMI inputs into the truck, unfortunately some kind of refresh rate or resolution issue prevents it from working properly.

As an aside, if you bought and financed through GM, they may have attached a secondary GPS/cell tracker to your OBD2 port, and used sticky tape to hide it somewhere - make sure to remove that once you're not financed through them as well (it is illegal to do so I believe before using alternative financing or paying it off).

ilikenwf··on GM makes $1,500 subscription mandatory on GMC, Buick, Cadillac Models
Even if it doesn't have all that, if you finance most vehicles they will install a poorly hidden cell tracker that usually draws power from the OBD2 port.

It is legally problematic to remove until you switch financing...

In addition, if tracking bothers you, your tire pressure sensors all have trackable (if there are enough sensors around a city) IDs, and if bluetooth is on, and it probably is, that as well...aside from your cell phone...

My next (secondary) vehicle will 100% be a dumb vehicle from the 90s or earlier.

ilikenwf··on GM makes $1,500 subscription mandatory on GMC, Buick, Cadillac Models
I ended up calling and having OnStar cancel my "trial" in my 2018 era truck in 2019, to the point I instructed them to disable the OnStar lights on the mirror and everything. This was a task as they're very annoying and persistent...

Once that was done I originally pulled the daughterboard housing the entire modem but this bricked my compass and GPS. To keep those working I ended up altering the modem itself with a soldering iron per the pdf posted here:

https://www.chevybolt.org/threads/internet-without-onstar-wi...

The guy there on that forum did so in an effort to use your own sim with the HMI, but using 0 ohm resistors or just solder bridging the relevant connections is enough to prevent my vehicle from getting online, but leaves the GPS intact. You can test by trying to make phone/onstar/data related actions - it just won't work.

Another good measure is to remove one of the antenna leads, I forget which one is cellular primary, but the other is more GPS/aux. Doing it all this way allows you to still connect your vehicle to wifi should you so desire to, for updates and such.

There are other secrets and tricks to these things, including a git repo I cloned that is now gone from the public internet, where a guy figured out how to solder an EMMC reader to a few points on the mainboard to get and modify the filesystem.

Edit: here's a mirror https://repo.or.cz/bosch_hmi_hacking.git

They really go out of their way to keep you from owning your vehicle.

Also bought a device that lets me plug HDMI inputs into the truck, unfortunately some kind of refresh rate or resolution issue prevents it from working properly.

As an aside, if you bought and financed through GM, they may have attached a secondary GPS/cell tracker to your OBD2 port, and used sticky tape to hide it somewhere - make sure to remove that once you're not financed through them as well (it is illegal to do so I believe before using alternative financing or paying it off).

ilikenwf··on SuperBNB, the First Superhero of the BSC – BNB Dividend Rewards
From his black uniform to his flowing yellow cape to the BNB shield on his chest, SuperBNB is one of the most immediately recognizable and beloved superhero of all time. The SuperBNB is the ultimate symbol of truth, justice, and hope.

Contract: 0x4B8f0bc4e86Ea14b0c22d356Af927bd7A43aC2c6

Really though, this coin has a lot of potential as a means of value storage since it pays dividends to holders in BNB.

ilikenwf··on Novel Blockchain Technology: SuperBNB Pays Dividends in BNB Instead of Itself
While I do have interest in promoting this coin, I really do believe that it is a step in the right direction - deflationary, dividend paying, locked liquidity.

Really, this is what the stablecoins of the future should be.

ilikenwf··on Acer disables BIOS for laptops sold through Amazon? (2020)
Assuming these use 4 pin SOIC chips, a programmer and chip clip will get you started...back it up with flashrom and see if you can just modify the settings there, sometimes you can with open source tools, other times you need leaked AMI etc tools.

Beyond that, you may be able to find a way to remove the restriction and flash with your programmer, or use the bios from their website, but you have to be careful in case machine specific things like serial, etc are overwritten.

ilikenwf··on Acer disables BIOS for laptops sold through Amazon? (2020)
Chip clip
ilikenwf··on The End of AMP
As an aside, blocking AMP with uBlock origin and using this userscript removes it entirely, including the annoying delay:

https://gist.github.com/ilikenwf/0c732fc3e657f29a0b6f2bad4c4...

ilikenwf··on Ilikenwf's Gists
I had a problem with my browser earlier and please ignore this post, sorry - making sure it works now.

Time to go play some SWG - looks like it works...or should I go binwalk the firmware on this thing...

Page 1 of 2Next →