ynezz

tl;dr RTL8251B does not need a firmware blob

https://lists.openwrt.org/pipermail/openwrt-devel/2025-Febru...

Indeed, running latest OpenWrt release is the fix, yes.

> Implement additional obfuscation and OS checks in the Android app

Hold my beer.

> Has anyone don this or could anyone point me in the right direction?

Policy based routing https://blog.scottlowe.org/2013/05/29/a-quick-introduction-t...

You can't beat gdb+opencd.

SoftICE is actually something different, it's like kernel mode debugger, so you could essentially freeze the running kernel at any time and poke into the system internals.

> Which 2FA would mitigate.

Or Rust, right? </sarcasm> https://github.com/php/karma/search?q=exec

Qt itself, like for example https://github.com/qt/qttools?

It's almost there </sarcasm>:

  origin git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git
  rpi https://github.com/raspberrypi/linux.git

  $ git diff --shortstat origin/linux-4.19.y..rpi/rpi-4.19.y
  911 files changed, 321070 insertions(+), 5576 deletions(-)

  $ git diff --shortstat origin/linux-5.4.y..rpi/rpi-5.4.y
  810 files changed, 309964 insertions(+), 2518 deletions(-)

  $ git diff --shortstat origin/linux-5.5.y..rpi/rpi-5.5.y
  820 files changed, 308669 insertions(+), 2420 deletions(-)

That's really terrible recommendation. You should add firewall rules and allow SSH access only from trusted hosts, ideally over VPN. It's not about login attempts but about possible bug in SSH (and other network services), because it's all just software, written in C, so believe it or not, but it's there, it's not if but when.

Great, thanks!

> hype that brew, buildkit, linuxkit, etc all seem to get

I'm not that much in devops/containers guy, bit I'm not aware about linuxkit alternative in the Linux world, care to elaborate?

And to http://libdill.org as well

> Gradle features: Great Performance

Did I missed the sarcasm tone? I've never experienced slower build systems then those used in Java world, like Gradle for example.

Maybe http://www.koruza.net ?

Source: https://blog.golang.org/toward-go2

> I don't believe Go 2.0 will ever happen.

"Once all the backwards-compatible work is done, say in Go 1.20, then we can make the backwards-incompatible changes in Go 2.0. If there turn out to be no backwards-incompatible changes, maybe we just declare that Go 1.20 is Go 2.0."

So yeah, Go 2.0 might not even happen.

> So far that page looks like when our government puts out "work commission" for any ongoing problem people complain about.

I would love if my government would take some inspiration from such projects, namely from this:

"We did what we always do when there's a problem without a clear solution: we waited."

I don't agree, but if you think so, you can try making go2 better via https://github.com/golang/go/wiki/ExperienceReports

> felt like walking on streets naked

So browsing on the phone is not evoking similar feeling? :-)

You mean rewriting unsafe C code to Rust by annotating it with `unsafe` keyword? :-) Try to write in Rust something which would touch bare metal hardware. It would be PITA, it would be full of unsafe keywords and assembler code so it would possibly result in similar amount of bugs in the end, just in different parts.

> additional layer of confidentiality and authentication

and additional layers of attack surfaces

This sounds like StackOverflow question. Anyway, if you're proficient in Java, why don't you write small app which will iterate over all Git repo dirs, modifies the files, makes commit, push and creates PRs? Not a big deal, right?

> 2. Make is _really_ hard to use to try to compose a large build system

Are Android and LEDE/OpenWrt big enough?

> 3. Let's be honest, nobody really wants to learn Makefile syntax.

That's probably very subjective, I find JavaScript, C++, PHP or Perl much worse :-)

Anyway, for the past years I'm cheating a lot and using CMake to get complex Makefiles almost for free.

Officially there is no such service, but unofficially you can do a lot of stuff :-)

You pay $12 to Netflix and you can watch it officially on 4 devices, which means it's $3 for any of your 4 friends, but you can "oversell" it actually more if you've some friends in different timezones. Many services work this way just fine. Streamwarez(tm) is here for a long time already.

It's usually easier and faster to get the sniff of the communication between MCU and the reader(UART,I2C,SPI,USB) in some cases you've to dump MCU's flash or EEPROM to get an idea about the keying scheme used in particular product range.

You can do this with some cards/tags with rooted Android phone(some tweaks are needed in the NFC subsystem) with certain NFC chipsets. It needs to be card with broken crypto (Mifare) so you can obtain the password and then copy complete card's content. The door reader shouldn't rely on the card's UID (unique serial number) as this can't be spoofed, the chipsets doesn't allow this.

I don't waste time with closed systems, so I can't comment directly on iOS capabilities, but I would guess, that it's going to be almost impossible to make it working in such locked down iOS world.

https://certificatemonitor.org/ works quite well

You can do whatever you want with your system, if you've complete control. So even pinned certificates are not a big deal. You can read the messages unencrypted or you can remove the certificate checking in the code for example.

I won't do this daily on my Android phone.