tripdout

Is Qualcomm serious? The kernel commandline parameter injection is basically the same thing from a decade ago on Motorola phones [0].

0: https://alephsecurity.com/2017/05/23/nexus6-initroot/

The joke is that the models have already seen the source code of said packages regardless, right?

Is this, along with the comments by the other green usernames on this post, an AI-generated comment? Apologies if it isn't, AIs are trained on human writing and all that, but they're jumping out at me.

Edit: I see another green comment was flagged for AI, might be indicative of something, but why so many green comments on this thread specifically?

The BPI-R4 is great for use as a 10G WAN router if your ISP uses PPPoE since the network processing engine has hardware acceleration for it.

Unifi released the UCG-Fiber around a year ago that can also apparently finally handle it, but plenty of threads about slow performance with their UDMs since it's entirely done on the CPU [0].

I'm not the biggest fan of OpenWRT and would prefer something like OPNSense, but it's x86 only and good PPPoE performance isn't guaranteed either - need a CPU with good single core performance that costs more than the BPI-R4, or apparently virtualizing OPNSense allows it to process PPPoE with multiple threads.

0: https://community.ui.com/questions/What-is-the-max-performan...

Love the way this is written with "questions" interspersed throughout to explain more about the steps taken. Adds good context that makes it very easy to follow.

Title doesn't really fit, but useful info on AOSP internals nonetheless.

The article states:

> Lenovo tells us, “The biggest challenge in getting to a 10/10 was balancing repairability with all the other expectations of a commercial device: performance, reliability, thermal efficiency, form factor, and design integrity. Repairability isn’t achieved by a single change: it requires many small, intentional decisions across the entire system, and each of those decisions can introduce trade-offs.

What is daylight time - daylight savings? If so, I'm all for this. Dark in the mornings, more sun in the evenings, win-win.

Know Your Customer

For local services, I don't see the benefit of using DNS challenges and a Let's Encrypt certificate over running my own CA and generating my own certificates. It's not that much work to trust my root certificate on each device, and then I don't need an internet connection to verify local service certificates.

Not the original commenter, but I noticed it too. I guess it's hard since AI is trained on human content, so presumably humans write like this too, but a few that stood out to me:

> Five entire countries vanished from GreyNoise telnet data: Zimbabwe, Ukraine, Canada, Poland, and Egypt. Not reduced — zero.

> An attacker sends -f root as the username value, and login(1) obediently skips authentication, handing over a root shell. No credentials required. No user interaction.

> The GreyNoise Global Observation Grid recorded a sudden, sustained collapse in global telnet traffic — not a gradual decline, not scanner attrition, not a data pipeline problem, but a step function. One hour, ~74,000 sessions. The next, ~22,000.

> That kind of step function — propagating within a single hour window — reads as a configuration change on routing infrastructure, not behavioral drift in scanning populations.

(and I'm not just pointing these out because of the em dashes)

GPTZero (which is just another AI model that can have similar flaws and is definitely not infallible, but is at least another data point) rates my excerpts as 78% chance AI written, 22% chance of AI-human mix.

To me at least, the article still seems to be majority human-written, though.

Oh, interesting. What's at the intersection of networking and amateur radio that these address blocks are often used for?

> When the device powers on, the Primary Boot Loader in the processor's ROM loads and verifies the eXtensible Boot Loader (XBL). XBL reads the current anti-rollback version from the Qfprom fuses and compares it against the firmware's embedded version number. If the firmware version is lower than the fuse value, boot is rejected. When newer firmware successfully boots, the bootloader issues commands through Qualcomm's TrustZone to blow additional fuses, permanently recording the new minimum version

What exactly is it comparing? What is the “firmware embedded version number”? With an unlocked bootloader you can flash boot and super (system, vendor, etc) partitions, but I must be missing something because it seems like this would be bypassable.

It does say

> Custom ROMs package firmware components from the stock firmware they were built against. If a user's device has been updated to a fused firmware version & they flash a custom ROM built against older firmware, the anti-rollback mechanism triggers immediately.

and I know custom ROMs will often say “make sure you flash stock version x.y beforehand” to ensure you’re on the right firmware, but I’m not sure what partitions that actually refers to (and it’s not the same as vendor blobs), or how much work it is to either build a custom ROM against a newer firmware or patch the (hundreds of) vendor blobs.

This article reads like AI

You may not be stealing the actual content, more so “making a copy”, but in doing that you’re taking away money the artist would have earned if you bought their album or streamed it on Spotify (admittedly that’a a very small amount for the artist but that’s another thing)

And if I stole something physical you had for sale, you wouldn’t make the money, so the end result is effectively the same.

And the species of flies "Phthiria relativitae" was named as a pun on "Theory of relativity" and "Reissa roni" after "Rice-A-Roni".

Very cool. Seeing how almost everything from WiFi, to NVME SSDs, (to apparently USB ports sometimes?) are connected to it, is PCIe the only high-speed interconnect we have for peripherals to communicate with modern CPUs?

What is verification? What does it involve doing? A lot of information on why it's useful, but how is it implemented? I hope it's not something like the Play Integrity API, but with no information to go on, I can't say either way.

They still do. This is Android Code Search, which is a typical file tree and contents viewer.

> Steam Frame is a PC: ... Just like any SteamOS device, install your own apps, open a browser, do what you want: It's your PC.

Always glad to see this.

Fairly unsatisfying conclusion. I’d be interested in knowing what that proprietary program does, how it works so well, how Sony stores video files, etc.

> Running iperf server on the router itself creates CPU contention between the WiFi scheduling and the iperf process. The router’s TCP stack isn’t tuned for this either. Classic mistake.

Can you elaborate on this? I don't know much about WiFi so I'm curious what CPU work the router needs to do and what wouldn't be offloaded to hardware somehow (like most routing/forwarding/QoS duties can be).

The FS-Box lets you pick from a list of manufacturers and serial numbers. Does this only do cloning from another physically inserted SFP?

Does it only clone the EEPROM from one SFP module to another (so you need to physically posess both), or can you write arbitrary data?

And does it only write to SFP modules from Ubiquiti (looking at you FS BOX)?

Another tool you can use for this (without a nice UI) is the SFP Buddy: https://oopselectronics.com/product/SFPB

What justifies the V4 Plus being worth $350? They're using the CM4 so they’ve made a PCB, but what hardware are they adding over the peripherals available on a Pi 4/5? All I can tell is an additional Ethernet port, a SIM card tray, and an “ATX controller”.

What does the board look like, why can’t I DIY that version, etc. Are they just trying to make it up with the software (that I also can’t tell what it looks like).

That's so cool.

> You can host stuff on your network that is accessible outside of it without port forwarding

Why is this an advantage? As in, what's the downside to having to port forward?

yo

I gave up on the 3rd level.

There's a maintained fork.