Avatar
Dr. Hax
d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-) Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle. XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu

Did you know that there are #democratically run #businesses (specifically, #cooperatives)? That some of them are working on #MeshNetworks and #Privacy?

MayFirst.org is one of them and they can give you inexpensive #hosting (#web, #email, #files, #calendar, etc.), and for a bit more money a dedicated #server.

https://geo.coop/articles/technology-cooperatives-movement-where-are-we-now

I just watched "On the Beach" (1959) and it's dark AF. I've never seen anything like it.

If, after that warning, you still want to watch it, I'd suggest not learning anything about it and just diving in. Avert your eyes from the description, just press play.

https://archive.org/details/on-the-beach

"The Real Debate" with JFK Jr has more views than the official CNN video. 11.3M views vs 10.2M

https://TheRealDebate.com

https://m.youtube.com/watch?v=-v-8wJkmwBY

As lomg as you are willing to count clock cycles, I imagine that could be programmed into the MCU without much trouble.

I'm not gonna test that with my only hot plate though. Haha

Oh it's absolutely amazing. That's why I am still considering doing a production run, despite the costs that'd be involved

Replying to Avatar Dr. Hax

I got it from c0pperdragon on Tindie. They don't make/sell them anymore, but the designs are public in case you want to build your own.

https://www.tindie.com/products/c0pperdragon/hot-plate/

https://github.com/c0pperdragon/HotPlate

I want another one myself, but I've been hoping someone else might pick up this project so I can just buy one instead of ordering custom PCBs, sourcing all the components, finding out a bunch of them are not compatible, ordering more components... you get the idea (or if you've done this before, it's more like "you know the drill")

And I did look into building a batch of these a while back and I don't know how c0pperdragon was hitting that price point!

I estimated like $45/each in parts alone for a batch of 10.

It'd be about $130 in parts for one unit (mainly because the PCBs, stand-offs and screws are only available in bulk, shipping from at least 4ndifferent suppliere, a UPDI programmer... it adds up fast)

I don't want to spend $450 on parts to build my one hot plate and then have 9 extras left over that I have to try to sell.

I got it from c0pperdragon on Tindie. They don't make/sell them anymore, but the designs are public in case you want to build your own.

https://www.tindie.com/products/c0pperdragon/hot-plate/

https://github.com/c0pperdragon/HotPlate

I want another one myself, but I've been hoping someone else might pick up this project so I can just buy one instead of ordering custom PCBs, sourcing all the components, finding out a bunch of them are not compatible, ordering more components... you get the idea (or if you've done this before, it's more like "you know the drill")

Today is hardware building day. I'm putting together another 5 boards. Here's a work in progress shot showing the 11 components on the front being soldered on.

I've set up an OpenVPN client in a Qube and that went well, but I haven't tried anything coprorate.

In the past I've had multiple qubes going through a single VPN, but when I tried to set that up recently, the qube that should have been behind the VPN box didn't have a network connection.

I didn't have time to investigate what was going on, but I plan on coming back to that soon. That VPN is increasingly becoming a nice-to-have for me.

Wouldn't it be cool if every link you clicked in your email opened in a VM that was automatically created just to look at that one link and automatically deleted when you were done? And this process didn't take much longer than opening a new browser? if the link is malicious and the browser is exploited, there's no data in that VM to steal. No cross-site cookies left over from previous browsing sessions, no inadvertently being logged into the wrong account, and no tedious management to get these features.

It already exists and I've been using it for years. It's the Disposable Virtual Machines (DVM) feature of #Qubes. You don't have to use it, but its there if you do. Spread the good word, my fellow #privacy advocates. And if you want help with setting up or using Qubes, there are people here on #nostr that are willing to help. I'm at least one of them. πŸ˜†

Stack-based buffer overflow detection... in #hardware, on #RISCV CPUs. https://arxiv.org/abs/2406.10282

#OpenSource CPUs with better #security features than #Intel, #AMD, and even #ARM? Yes please!

For those artists out there looking to protect their work from being gobbled up by software that will create images in your style…

Academic researchers say the protections advertised are not reliable.

https://arxiv.org/abs/2406.12027

So, yes, you should continue using the protection schemes, because they do stop some mimicry, but don't put too much faith in them

There don't seem to be any easy answers here. It's hard to show your work to potential buyers and prevent the leeches from doing their thing

If you want an introduction into how quantum computers are expected to change cryptography as we know it, these authors have you covered:

https://arxiv.org/abs/2406.13258

Remember that everything is public except DMs and everything is undeletable in practice.

Block/mute early and often

Follow people if there's even a chance they might post something interesting, you can always unfollow later, but finding them again is non-trivial

You can use privacy software like Tor here, and some clients even make it very easy.

I'm going to say no on this one.

Even setting aside problems with categorization, incorrect and missing info from Mitre's CVE database, their search tool shows exactly zero results.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=concatination

And it's their database, so if anyone should be able to accurately search it, it should be them!