Nostr notes by ity [unit X-69] - VIOLENT FUCK

Boosts really, really welcome :neocat_floof_pleading: I ...

2026-02-19T19:46:21Z

Boosts really, really welcome :neocat_floof_pleading:

I desperately need money. I'm homeless in Germany with a very low income, so I have issues reliably getting food and a roof above my head.

I would feel bad just asking for donations because there's lots of entities in way worse situations with zero income, so instead I want to do work (one-off contract is fine, doesn't have to be an employment contract. Has to be remote tho. Note I do *not* speak German, only English and Czech.)

Any money helps, I would need about a 900€ a month extra to be able to comfortably eat and have a roof above my head. I am most struggling this February, March, and some of April, maybe May, after that I should be able to get some money. I'll gladly do several one-time contracts.

I live with my girlfriend, who has no income, so my income is housing and feeding both of us.

I do have EU citizenship, but not a German one. I do have residence in the EU, I just cannot reside there for health reasons, but any post for eg. sent to it can be forwarded to me.
I can do most computer things, mostly sysadmin & programming:<li>Linux kernel drivers (primarily DRM subsystem and USB, some security work incl. finding a DoS 0day in the USB stack),</li><li>Mesa (primarily the Intel Vulkan driver (anv))-, Gradle (mostly debugging of the core and working on some plugins), </li><li>IntelliJ (figuring out exactly when the IDE complains about source code not matching bytecode, amongst other things)</li><li>lots of work with Java (.class transformers, agents, JMX, profiling, the .class file format spec + the JVM spec, the HotSpot C++ source code, the debugger protocol, jcmd, and other related tooling, JNI, hooking up jdb to NeoVim to implement code hotswapping and some basic code to implement some IDE features...)</li><li>Java Spring (web app backend, I worked at a company as a backend developer)</li><li>React</li><li>TypeScript</li><li>JavaScript (spent decent amount of time reading the ECMA spec)</li><li>Python Flask (mostly simple web apps)</li><li>PostgreSQL (primary rel database sw I use) </li><li>MySQL</li><li>C (lots of experience with GNU Make, GCC & Clang, incl. compiler intrinsics, linker scripts, cross-compiling, and similar. Large parts of the spec memorized) + pkgconfig</li><li>Assembly (x86 primarily, some Thumb2 (Cortex-M0+ specifically), 6502, RISC-V. I can manually assemble and disassemble machine code for these, memorized some opcodes, wrote assemblers.)</li><li>CMake, Meson (primarily debugging and fixing build issues in other projects, along with tracking down a bug in the Meson Rust support a while back)</li><li>SPIR-V (wrote a compiler that emits SPIR-V)</li><li>Networking, specifically experience deploying OpenVPN, Wireguard, writing and debugging iptables rules, network namespaces, handrolling networking for containers with veths & bridges, manually connecting to a network with just iproute2, configuring the routing tables, parts of the actual uAPI provided by the kernel as well as the internal implementation of netfilter</li><li>A lot of experience with debugging and fixing issues in unfamiliar codebases and quickly familiarizing myself with them, including very large codebases (WebKit, Firefox, Android, Linux, Mesa...)</li><li>Familiarity with many Linux APIs, incl. those used for debugging the kernel, as well as important concepts in the Linux kernel (files, fops, initcalls...)</li><li>The x86 programming interface used by kernels</li><li>Lots of familiarity with QEMU and deploying and managing VMs and their networking, isolating them into VLANs, etc</li><li>RouterOS and Cisco iOS</li><li>Vulkan and OpenGL APIs (primarily 3D. I've worked on Vulkan drivers, and a bit of OpenGL drivers. I know most of the Vulkan 1.0 spec by hand, and ofc lots of the extensions added since.)</li><li>Zig (some small CLI utils</li><li>Bash (lots of helper scripts on the systems I admin)</li><li>Zsh</li><li>POSIX sh (tested primarily with busybox dash. Translating bash scripts to POSIX sh)</li><li>Some Perl, </li><li>Haskell (Web backend mostly)</li><li>Lua (including the C interface, embedding Lua & writi g native Lua libs)</li><li>Guile</li><li>Clojure (mostly getting Clojure & the REPL to run in places meant to work with Java)</li><li>Rust (primarily work with no_std and sometimes no_core, lots of CLI utils, some Web backend and game engine work), debugging some rustc compiler issues</li><li>VimScript (a lot of work writing plugins for doing all kinds of things in NeoVim (including writing patches to add new features to VimScript){</li><li>A bit of Elixir</li><li>Some programs written in C# (though no experience with .NET yet. Can easily learn, but only dotnet core, since framework needs Windows)</li><li>Coq/Rocq, Agda, Idris2, F*, LiquidHaskell) (for type theory stuff, haven't gotten that far in most of them besides writing some proofs in primarily Coq and Agda)</li><li>LaTeX & TeX (both TeX Core and LaTeX, though primarily LaTeX. I write most documents that need fancier formatting than just markdown in LaTeX.)</li><li>Koka (since it's a research language, I mostly learned it for its pretty unique effects system, and haven't done anything practical in it)</li><li>Android development (in Java, which included hand-writing the entire project structure the android Gradle plugin expects, and manually setting up the Android tooling (platform and dev tools), and hooking it up to NeoVim & Emacs.)</li><li>Knowledge about Android system, including binder, HALs, tracing the implementation of eg. Camera on Pixels, the signature verification impl, APEXes, dm-verity, parts of the bootloader</li><li>OCaml (mostly the basics)</li><li>Wayland protocol (working on both compositors, compositor frameworks, and clients, in both Rust and C)</li><li>Worked with Smithay and wlroots, wrote patches for Sway</li><li>X11 (wrote a window manager, compositor, status bar, image viewer, worked a bit on writing a client library from scratch)</li><li>WebAssembly (handrolled a loader in JS for one project with frontend in Zig from scratch with no libraries)</li><li>Experience managing an infrastructure consisting of several computers networked together over the internet with VPNs & some sharing a LAN with multiple switches & VLANs</li><li>Experience managing Debian & Ubuntu servers, Arch NixOS, Void, and Gentoo systems, along with a bit of Fedora</li><li>Lots of familiarity with the Nix package manager (including internals of CppNix, and many of the experimental features like recursive Nix, dynamic derivations...), the Nix language, nixpkgs, NixOS, home-manager, handrolling versions of these from scratch, internals of the caches and the derivation format, how it generates links between derivations, etc</li><li>Knowledge of most of git, including the internal low-level commands, format of all files in the .git dir, and reimplementing higher level git commands using lower-level ones, and complex operations on git repos</li><li>Matrix protocol & software (worked on the spec and with E2EE, host Synapse & Element)</li><li>XMPP (running a prosody instance, read thru the specs)</li><li>Docker & Docker compose (large parts of my infra runs in docker, I've also looked into how the docker CLI, docker daemon, containerd, and runc interact, worked with alternative runtimes like kata containers)</li><li>Virtio (worked with guest drivers, parts of the QEMU impl)</li><li>Experience with reading large documents formatted as specs and understanding them</li><li>Experience reverse engineering undocumented open source software to figure out how to use it and debug it</li><li>Cryptography and security knowledge (general good practices as well as experience hacking things)</li><li>Experience with Linux APIs needed for making root and rootless containers, and handrolling self-contained packages of container + runtime</li><li>Used to managing systems that use systemd and making use of systemd-provided features</li><li>Familiarity with dbus, Perl dbus API, Portals API, Notifications API</li><li>Knowledge of XDG Portals, incl. the way they use Pipewire</li><li>Knowledge of using ffmpeg for encoding and editing videos</li><li>Experience with working with embedded MCUs (RP2040, ESP8266)</li><li>Experience with FPGAs (F4PGA toolchain for Xilinx Artix-7, so yosys, verilogtorouting, and F4PGA specific tooling for the actual bitstream generation, and some Verilog and VHDL knowledge).</li><li>ActivityPub protocol & related protocols (implemented a fedi server from scratch in Rust)</li><li>Familiarity with the TLS protocol, parts of X.509, and the OpenSSL CLI.</li><li>Knowledge of the tty ioctls & escape sequences (needed for writing shells, terminal emulators, terminal multiplexers, TUI programs...)</li><li>Experience making minimal embedded Linux images manually (compiling the kernel, making a rootfs by compiling the tooling, writing scripts to tie it together, etc)</li><li>Some experience with FreeBSD (daily-driving it for a year on a laptop)</li><li>Knowledge of Intel GEN12 GPUs (from working on Linux drivers on them, no NDAs or anything, just reading the millions of lines of source code for several years)</li><li>I can learn pretty much any programming language within a few days and jump into working on a codebase.</li><li>I am pretty good at explaining and teaching things to others</li><li>I am very patient, both when it comes to interacting with others and when it comes to interacting with computers.</li><li>Experience with porting features or Linux kernel modules between versions of Linux (or other software)</li><li>I read most of the eSIM specs, meaning I have knowledge of how eSIMs work, incl. reading the source code of the Android impl and setting up a fully open source (OS wise) setup</li><li>I have experience designing network protocols of any kind</li><li>I have experience with GTK, libadwaita, and glib internals</li><li>I have worked with QT</li><li>I have lots of experience with LWJGL3</li><li>Lots of experience with JavaFX</li><li>Experience with Emacs & org-mode</li><li>Some experience with btrfs & zfs</li><li>Lots of experience with LUKS2 (including reverse engineering most of the on-disk format due to lack of detailed docs), and TPM 2.0</li><li>I need to work in an asynchronous way - meetings are possible, but will be very difficult to arrange due to my life situation. </li><li>Experience with the USB 2.0 protocol down to the wire level</li>

There's a decent amount of stuff I have not listed, since I've been writing this for about an hour and I keep remembering more and more things. I've done a large amount of things, and I'm currently in the middle of migrating my temporary infrastructure to run on microvms connected over wireguard to a VPS managed by either Docker or Nix along with setting up SSO, monitoring, log gathering, and other improvements, so the current state of the infra is temporary, however source code some of my projects (not all, only some recent ones) are here: https://gitea.itycodes.org/itycodes/

Random question about Docker: Anyone knows how to get Docker from ...

2026-02-17T22:01:29Z

Random question about Docker:
Anyone knows how to get Docker from a specific compose file to shove its veths into a separate netns?

I want each container to only have access to that netns, so I can forward all of their traffic thru wireguard only.

Boosts plz :neobot_bottom:

The ity is in Berlin for the foreseeable future And really in ...

2026-02-09T18:11:13Z

The ity is in Berlin for the foreseeable future
And really in need of cuddles!
The ity is a really cuddleable robot girl! :neobot_floof_angel:
And kitty! Meow! Boosts please :neocat_floof_bottom:

Nostr event nevent1qqsfc0lxw9gktvslvlyktg5a3w857m86kkyaer6r65w34eqt7xcpykczyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hk5hfg4a

2026-02-05T04:08:35Z

The ity is so cute she will literally make puppygirls meow

reminder the US hates anyone trans and literally everyone coming ...

2026-02-03T05:39:10Z

In reply to nevent1q…6lsj
_________________________

reminder the US hates anyone trans and literally everyone coming in, including US citizens returning from vacation

humans will never actually learn how to stop being bigots, I ...

2026-01-31T00:57:00Z

In reply to nevent1q…v087
_________________________

humans will never actually learn how to stop being bigots, I don't think that's possible for any human society to do

Maybe if you take a bunch of tiny humans before they're self aware and then teach them how to not be evil incarnate you can actually create society that doesn't revel in hate, cuz otherwise, imo hate is too fundamental to human society for any activism to succeed at that (yet alone when most activists are also just humans that enjoy causing harm, just to a different minority group than the rest)

if I live to see the majority of humanity not wanting me or my ...

2026-01-31T00:27:20Z

In reply to nevent1q…2fcw
_________________________

if I live to see the majority of humanity not wanting me or my friends dead I will be genuinely surprised, since I believe that humanity simply has to target and revel in hunting down minorities, it just changes its methods and targets to fit in with the time, but has never stopped. Witchhunts have never stopped, just changed form. I don't know if I would say humanity progresses. They just change form to something more efficient and call it progress while fundamentally staying the same. In a way it is progress, yes, though it's all the same to me. Though, speculating about what will happen in several centuries after my death is not something I think is very accurate to do.

If I see literally any evidence that humanity as a collective is anything but a self-destructive, vile creatures that revel in causing suffering to anyone differing from the norm enough, I'll probably change my mind, but no matter how much I read about history or any humanitarian science, I see only further proof of this. Though perhaps it's confirmation bias, I've lacked the energy to really read more since November.

To be clear: individual humans are absolutely capable of empathy, compassion, and can lack the love for causing harm. I just do not believe any sufficiently large society of humans is capable of that. Probably because I've never heard of that ever happening, or can see much of a difference in the (imo) fundamental lack of empathy in human societies that seem unchanging since time immemorial.

I wish I had that kinda optimism and faith in humanity The only ...

2026-01-30T23:49:57Z

In reply to nevent1q…2jue
_________________________

I wish I had that kinda optimism and faith in humanity
The only reason why swastika is viewed with disdain is cuz Hitler lost the war
Plus, the war that they're fighting against minorities is not with guns, but rather with manipulation (thanks democracy)

dammit, I wish I could manage Tell me your secrets to getting ...

2026-01-28T04:43:05Z

In reply to nevent1q…cyl3
_________________________

dammit, I wish I could manage
Tell me your secrets to getting paid for doing work :neobot_melt_sob:

lmaooooo sameeeee I need money but I'm too bottom to even ask ...

2026-01-28T04:36:26Z

In reply to nevent1q…ekmk
_________________________

lmaooooo sameeeee

I need money but I'm too bottom to even ask for it properly

I can do work and maybe sex work if someone's fine with a hopeless mentally ill transfem bottom with no self esteem but who'd pay me :neobot_melt_sob:

Like 70% of my followers leave because I'm too mentally ill, edgy, and too flirty with minorities that The Council Has Deemed Bad™ *cool* so I can't even use fedi to find jobs

Actually, I'm curious, did you find any clients, and if so, *HOW*

wait I'm the dealer I should determine that Uhh I'm too ...

2026-01-28T04:29:24Z

In reply to nevent1q…xgzn
_________________________

wait I'm the dealer I should determine that

Uhh I'm too bottom to set prices :neobot_bottom:

what's the rates :neobot_3c:

2026-01-28T04:28:55Z

In reply to nevent1q…qcpv
_________________________

what's the rates :neobot_3c:

I mean technically I can get weed too I'm the world's ...

2026-01-28T04:27:43Z

In reply to nevent1q…nwff
_________________________

I mean technically I can get weed too

I'm the world's worst drug dealer frfr

paying cuties in meth for them to want me

2026-01-28T04:27:02Z

In reply to nevent1q…knrz
_________________________

paying cuties in meth for them to want me

I'd exchange meth for a cutie

2026-01-28T04:25:52Z

In reply to nevent1q…dyxl
_________________________

I'd exchange meth for a cutie

Nostr event nevent1qqsg7xejzhzqlmy0dl63peytt3aa9jv0ry842k8hmnts9vxyhsjdknqzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hk90hr7m

2026-01-27T23:13:58Z

Fedi <-> Fax bridge for the Germans

Nostr event nevent1qqs08teztj0u50uys6xsel4cehj47nrukhr2vhzl65mapll6r4zcqgszyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hktkk0t9

2026-01-23T00:27:42Z

Meow meow second federation test

I wish I could find any pharmacologists :( Psychiatrists tell me ...

2026-01-22T21:01:07Z

In reply to nevent1q…cp5k
_________________________

I wish I could find any pharmacologists :(

Psychiatrists tell me that I'm way too advanced at pharmacology when I talk about the basic stuff they should know to do their job

Like, what do they even do, their job is to prescribe pills, how can they do that if they don't even know what the pills do

The ity is in Berlin for 1-2 weeks If any entities want to meet ...

2026-01-19T13:42:38Z

The ity is in Berlin for 1-2 weeks
If any entities want to meet the ity, send a msg ^^
Boosts oki, miau

same for FDE with unattended boot (default on windows bitlocker) ...

2026-01-17T04:16:00Z

In reply to nevent1q…rwzt
_________________________

same for FDE with unattended boot (default on windows bitlocker) on systems w/o Intel TXT

Tho it might require the hyperadvanced technology of a screwdriver and an SPI flasher bought for 2€ on aliexpress

considering if I should boost this or if I would need to CW it ...

2026-01-17T04:05:39Z

In reply to nevent1q…unel
_________________________

considering if I should boost this or if I would need to CW it

I'm high I think

hmm, I mean I can always dilute it with saline solution or ...

2026-01-11T19:52:52Z

In reply to nevent1q…dsyh
_________________________

hmm, I mean I can always dilute it with saline solution or whatever it was they use

IVing Lenzetto (0.1mL-0.5mL per day) Should be safe no? If not, ...

2026-01-11T19:30:59Z

IVing Lenzetto
(0.1mL-0.5mL per day)

Should be safe no? If not, say why.

Boosts plz :neobot_bottom:

would you welcome a Linux graphics kernel dev that knows very ...

2026-01-09T16:18:55Z

In reply to nevent1q…76z8
_________________________

would you welcome a Linux graphics kernel dev that knows very little about FreeBSD but wants to learn?

I worked with Intel (GEN12, iGPU and dGPU. Almost entirely Render & Compute, almost no Display or init and zero Media or power management), Mesa (primarily around anv, NIR and brw), X11 (Clients & protocol impl libs) and Wayland (clients and compositors on Linux), and briefly touched the FreeBSD drm-kmod. I have been working on writing a standalone graphics stack as a hobby project which as one of the primary long-term goals has to replace drm-kmod & Mesa with something less tied to Linux on systems like FreeBSD for limited use cases.

I occasionally write blog posts for the sake of documenting imo underdocumented parts of systems programming, such as this one about Linux graphics https://itycodes.org/gpudrv.html, though writing complete documentation for such large and complex codebases is a complex ordeal that is at constant odds with my perfectionism.

I do not have any impressive contributions (two small patches in Mesa), and I'm definitely not an expert, but I've spent a long time messing around with these things on Linux. I'm unfortunately a systems developer only, so my hardware debugging skills are limited but evolving.

I have also worked on the side on Linux USB stack security, PERC H965i RAID controller reverse engineering, and various other misc device driver stuff (including some in a personal hobby OS)

I did daily drive FreeBSD on a laptop for a year as a user and was planning to port a Wi-Fi driver but never got around to it.

Figured I'd ask anyway even though I'm not exactly a perfect fit, cuz might as well.

I never managed to figure out how to use it in my life, had to ...

2026-01-08T07:34:09Z

In reply to nevent1q…rhr7
_________________________

I never managed to figure out how to use it in my life, had to switch to Linux

Nostr event nevent1qqsr2ck350x5gsd2kehlj87flnp4vn5na87k0rakrm6e0yqclu4vqhczyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hkfrtqya

2026-01-02T18:42:05Z

I'm having so much trouble making sense of my own sexuality

I wonder very often, whenever I am any good at computers, and I ...

2026-01-01T09:12:20Z

I wonder very often, whenever I am any good at computers, and I should actually be proud of any of the stuff that I do, or not

I try to infodump about something that I know about, entities ask me very obvious questions, and I realize I actually know nothing about it

Just how *does* GEN12 handle control flow after vectorization? How do SIMT ISAs like RDNA3 or NV170 handle it? Why do I not know this? My friends are praising me for doing GPU drivers, but I don't even know something as basic as this...

Am I accidentally lying to them and making them believe that I'm better than I actually am? I might be wrong about some of the stuff I said, I might be too confident in being able to do stuff that I cannot actually do...

I'm genuinely just, fake, and deceiving my friends into thinking I'm better than I actually am, no matter how hard I try not to. I try my best to describe what I can do in a way that they don't misunderstand but... I fail, and they think I'm good because I end up being misleading by having many trivial prototypes that do nothing impressive.

Like, I say "I wrote an http server in assembly with no libraries!" but used to forget to add the pretty important part that it doesn't parse the request, can only handle one request at a time, and has a hardcoded inline response. Not much of an HTTP server, is it... It's literally just a few syscalls and one small loop. The most trivial thing imaginable, the kinda thing anyone and their cat can do, the thing I should beat myself up for not doing way earlier, when I was like 12

Yesterday, I misremembered how Java multiple dispatch works. I was *supposed* to know it correctly. I knew the JVM ignores the Signature attribute on the Code attribute, and only cares about the method descriptor, which does not include any generics info, as generics are a Java thing, not a JVM thing. So I was confused why I was remembering that you can MD List<Integer> and List<String> while knowing there is no way to represent that in a class file (unless you do name mangling and generate a hidden dispatcher method and... Stuff Java doesn't do. I think. Unless they added that...)

I *still* feel stupid about it. I'm supposed to be good at Java... I do it for over 8 years... I actually have (had?) some confidence in it...

I don't even know how the damn GCs work, or the internals of the JIT. Stuff I *should* know but don't because I am too scared to look into it.

I'm getting my ass beaten by IETF RFC 1951 just because I lack some basic knowledge about compression algos, and feel completely and utterly useless when someone trivially understands the whole thing in a few hours while I'm failing for years.

I'm stupid. And a liar.

I really need cuddles and pats Like, often, and meeting new ...

2025-12-31T06:28:20Z

I really need cuddles and pats

Like, often, and meeting new entities

In Germany

Boost plz :neobot_bottom:

the chance I'll be alive by then is very low

2025-12-29T23:05:33Z

In reply to nevent1q…0nl6
_________________________

the chance I'll be alive by then is very low

I'm all alone now it seems Completely. Everyone abandoned me.

2025-12-29T21:29:01Z

I'm all alone now it seems
Completely. Everyone abandoned me.

Is this one hot? (Poll in replies) ...

2025-12-27T11:07:52Z

Is this one hot? (Poll in replies)

Am I homeless if I can technically speaking go back to a flat ...

2025-12-27T00:57:25Z

Am I homeless if I can technically speaking go back to a flat that will make me kill myself from the stress that place causes, have enough money for just living at a hotel, and can sleep over at my gf's room for however long I want to (which isn't really livable until the week of trash is cleaned. It's also just one room in a family house lol)

I have no home, just places to sleep, therefore I'm without a home - homeless, right?

Boost :neobot_bottom:

oh, it did? When?

2025-12-23T02:07:52Z

In reply to nevent1q…lfa7
_________________________

oh, it did? When?

I need to look into details about measured boot impl within ...

2025-12-23T02:06:46Z

In reply to nevent1q…gtrp
_________________________

I need to look into details about measured boot impl within Android (also note my comment about measured boot != secure boot; secure boot doesn't work on most consumer ARM devices, aka cannot "relock" (unless it's a Pixel, afaik)

For context, I work on measured boot for Linux, both x86 and ARM, the main issue is that while we can get that working on pmOS, what we can't get working is the large ecosystem of apps that are explicitly written against an API that is security-first, unlike Linux apps that are written assuming full access and shit the bed otherwise, requiring all kinds of workarounds. Portals are reinventing (badly) what Android was doing back with eg. SAF, and they aren't nearly restrictive enough.

If you wanted FD.O phones to be as secure, you'd need to get an ecosystem of apps written by devs that accept using a security-first API, and a competent team to design and impl the API, then reimplement a secure framework below it, package it all so that it integrates with the OTA model and integrity/verity, implement proper app signatures and a system for app distribution, get it all working with SELinux and UIDs and everything else...

And by then you have basically reinvented Android, except probably forgot about 10 different things that Android already solved cuz it has been on this since 2008

I'm not saying give up; I'm saying use Android as the base and fix the Google fuckups, or properly understand how and why Android does the ways it does security things (99% of the time, Android itself has actual reasons for basically everything; Google limits its malware shit to Play Services and keeps Android basically pure engineering work, no management making it broken. Meaning the main fuckups are bad performance optimizations, horrible UX... They don't really have a big competent UX team). Even the silly Google developer certificate system has a use (for example, could use it with a distributed signing system, and allow things like, signing apps with ACME; so you could eg. verify that a given apk with the package name com.example.cuteandfunnyapp is verified by whoever controls example.com, amongst other things. Once again, it's Android making a good thing, Google's Play Services using it for something stupid to make it the most useless possible, and then techbros blaming Android for it, despite as said above, it's actually a really good, albeit overengineered system. Google then picks the most clueless PR person to speak to the techbros and that's how you get the shitstorms.)

the main purpose of boot integrity is ensuring that a reboot ...

2025-12-23T01:26:10Z

In reply to nevent1q…w7sg
_________________________

the main purpose of boot integrity is ensuring that a reboot deletes even malware that exploited the kernel and got full r/w disk access

Secure boot on ARM devices is more secure than non-Intel TXT x86, and the firmware is usually written more competently. It can be replaced by measured boot since most SoC vendors (like qcom) do not provide proper secure boot, and Intel TXT is not widely available on x86.

Stars, I'm sounding really silly here, I should stop trying to simplify it.

TL;DR, UEFI secure boot established a chain of trust from the firmware to the OS. Intel TXT establishes a chain of trust from the IME to the firmware. Measured boot establishes a chain of trust from the IME to the OS on x86, or from the bootrom to the OS on ARM. ARM secure boot also establishes a full chain of trust from the bootrom to the OS, but it tends to be unavailable on most devices.

Bwrap is a joke compared to Android sandboxing. Android relies on well-tested Unix UID/GID permissions and very restrictive SELinux on top (I'm unsure if they also 3employ seccomp), with binder providing an easy and obvious security boundary. FD.O is botched together using relatively untested code paths and relies on confusing design with unclear security boundaries

pmOS is insecure as fuck compared to Android They lack the boot ...

2025-12-23T01:11:03Z

In reply to nevent1q…nne6
_________________________

pmOS is insecure as fuck compared to Android

They lack the boot integrity features, the OS is a poor imitation of Android that insists on doing things differently and not learning from what Android figured out ages ago. pmOS and other fd.o distros are nice if you wanna tinker; if you want smth secure, Android is basically best you can get.

Android has a userspace designed with security in mind, fd.o has security as an afterthought (that's why eg. flatpaks are the state they are in).

makes me wanna make an Android distro

2025-12-23T01:00:37Z

In reply to nevent1q…ywmy
_________________________

makes me wanna make an Android distro

it'd be great if the article explained what is meant by ...

2025-12-23T00:27:17Z

In reply to nevent1q…7tz6
_________________________

it'd be great if the article explained what is meant by "more secure" and "less secure"

The article is too vague for me to really comment on it, tho I gotta say that BitLocker with unattended boot on is basically the same as nothing unless Intel TXT or equivalent is present

Additionally, plz don't suggest anything by Proton, they are known to provide data to US law enforcement on request (it's a bit complicated, the request has to be approved by the Swiss government, but no government has your back)

The advice about not following links is still weird to me, that's less trust in the users to use common sense than I'd have in 8yo me. Don't open files, but viewing URLs is fine, browser 0days are rare and generally not very impactful, and even the relatively more common ones (that leak data cross origin can be defended against just by using a separate browser instance for untrusted links.

> A majority of "drive-by" exploits (ones where all users did was visit a malicious page) in browsers based on Chromium (including Google Chrome, Edge, Brave, and others) rely on JavaScript JIT, sometimes referred to as JavaScript V8, or JavaScript optimization.

No :neobot_melt_sob: atp CC: Sofia (npub1rtj…gqta) do you have the time to explain

> but in the wrong hands, it can also in some cases be used to identify your location, or even expose you to hacking attempts – someone who knows the IP address you're currently using can use it to try to connect to you.

51.83.130.197 <- go wild, I have juicy data (including unpublished 0days for Linux :3)

Hacking me, if you succeed plz make a talk next C3. Something as fun as a namespace escape + nginx RCE combo is juicy enough for that. If you wait for long enough you'll have to add a microvm VMM (crosvm) or hypervisor (KVM) escape on top

And if anyone wants to make the argument that I'm not the kinda entity this is for; correct! The average entity has *no* attack surface because they're probably under a NAT, cannot be connected to, and even if they have an IPv6, have a restrictive Firewall blocking everything. Meanwhile I run half a dozen services.

> For these reasons, beings concerned about privacy and security should strongly prefer using open-source alternatives such as Linux (for desktops and laptops) or GrapheneOS/LineageOS (Android).

Suggesting fashware developed by bigots that don't even know what threat modeling is (GrapheneOS) is not exactly great.

Overall, I appreciate the effort, it's not *as* bad as the usual advice I see on fedi. Sorry if I sound too mean, I'm a security researcher and this kinda stuff being horribly incorrect drives me insane.

Nostr event nevent1qqs8k6h6ldjmj7y0sz9rpudlcgknvl4uj5zgv79xsy3ayyzucc8f02qzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hklua8qq

2025-12-20T15:36:33Z

Logging blowjobs in psylog

that's not how science works CC: @npub1rtj…gqta

2025-12-19T21:30:07Z

In reply to nevent1q…mygf
_________________________

that's not how science works

CC: Sofia (npub1rtj…gqta)

Nostr event nevent1qqs0lv7tjslu62u4h02c4k7qluzqpss8jx04uvcgulqae5rzatyyukczyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hkdv8vxv

2025-12-19T20:25:19Z

UK is Karen Nazis, US is Nazis Nazis

yesn't, there's some stuff that up the percentage. ...

2025-12-18T04:15:09Z

In reply to nevent1q…85pz
_________________________

yesn't, there's some stuff that up the percentage. It's been ages since I looked into it, though, so I can't say much about the details :( that's why I said I don't know how efficient the stuff actually is in practice

> signal's encryption is good, probably one of the best IM ...

2025-12-18T03:53:03Z

In reply to nevent1q…ahq4
_________________________

> signal's encryption is good, probably one of the best IM apps in that regard due to using a quantum-secure algorithm

Signal uses PQXDH on top of a hybrid diffie-hellman: X25519 & Kyber768 - the initial key exchange is believed to be post-quantum secure (due to the LWE problem on lattices being believed to be post quantum secure), but it hasn't have had enough research into it to prove that it is not only quantum secure, but also secure against regular computers (many previous PQC algos were believed to be secure but turned out they are breakable by regular computers. That's why it's combined with X25519, which we can be reasonably sure is secure. I haven't been able to find any actual *proof* of security for it tho (basically, you reduce it to the discrete log problem, by proving that any algo that can crack a key can also solve the discrete log problem, and then you prove an impl of X25519 actually is equivalent to the math. Then all you have left are side channels for the impl))

Kyber768 is the NIST-standardized version, which has been intentionally weakened against insecure system pseudo-random number generators, and afaik Signal uses the weakened version.

Additionally, this is only used in the initial key exchange, which is not a regular PQDH, but rather an extension of 3XDH, which provides deniability (it's impossible, for a recipient of a message, to prove to a third party that the message they received is legit and not forged)... Except that requires the rest of the protocol to cooperate with this, which Signal afaik does not, making this basically useless.

Then there's the double ratchet, which is used to do a... Regular DH key exchange every message. The stated goal of this is post-break-in recovery, where a session will recover itself if an attacker gets access to message decryption keys... Except A, it's not post-quantum, and B, any attacker that has a message key and active MITM access can just... Insert itself and intercept the key exchange undetectably and keep decrypting. This means that having a quantum computer or active MITM reduces the double ratchet to a single ratchet. And the break-in recovery assumes only message keys leak; if your session keys leak, then it's entirely useless.

Single ratchet pretty much is just a way of cryptographically enforcing lack of history; basically, each message is encrypted by the hash of the precious message's encryption key, and the previous key is not stored, but rather replaced by the hash, on all recipients & the sender, on use.

This is not even getting into the actual chat protocol, which is vulnerable to pretty simple attacks like silently tracking delivery receipts, [to the point it can be used to fingerprint any device with the main Signal client installed with just a phone number, amongst other things](https://arxiv.org/pdf/2411.11194 ).

The fact that Signal binds itself to a phone number and has a mapping between an identity and a phone number on their servers, and the fact the servers are proprietary, is quite concerning too, as you mentioned.

TL;DR, Signal is a very confused chat protocol, that basically boils down to "we tried things that let us put the *more secure* label on our thing, but didn't actually consider any threat modeling, making most of what we did useless"

As for Proof of Stake, the fact that its main design is susceptible to attacks by rich threat actors is an actual consideration that some chains make and defend against; how efficient those defenses are, and what Oxen implements, I don't know. Oxen has unfortunately basically died, tho, so it's basically free real estate for Sibyl attacks now (including Lokinet and Session). A shame, it was a pretty cool idea. (I do need to recheck if it is still dead, last time I checked was 2023)

Also, note protocols like SimpleX's *documented* E2EE (the actual protocol in use is not documented, dunno if they made changes to the E2EE, and well, the thing itself has intentional vulnerabilities and the devs are pretty obvious about being Nazis and willing to comply with chat control, so...) have tried to extend DR with PQC. How good their impl is, I dunno, but I didn't spot any *obvious* flaws.

Then there's Matrix, where both the protocol and all its impls are walking vulnerabilities, and the only thing the company that owns it cares about is turning it into a Slack competitor for the money, federation and e2ee be damned. The work on PQCing Matrix the same way Signal does it (replacing X3DH with PQXDH on top of hybrid Kyber), including the NIST weakening (yes, I asked them) is nearly done, but nobody bothers making it actually done, complete with the spec changes and finishing up the PR which has been sitting on Vodozemac since 2023.

And that's not even mentioning the impl fuckups.

owo API translation? Now I am curious

2025-12-17T15:27:34Z

In reply to nevent1q…uy3l
_________________________

owo API translation? Now I am curious

https://itycodes.org/A64.html thing that might be useful for ...

2025-12-17T02:50:49Z

https://itycodes.org/A64.html thing that might be useful for entities doing Linux configs for the Allwinner A64 SoC

I'm trying to fight bigotry on normie fedi, meow Am I doing a ...

2025-12-17T01:06:53Z

In reply to nevent1q…n282
_________________________

I'm trying to fight bigotry on normie fedi, meow

Am I doing a good job :neobot_bottom:

what about me

2025-12-17T01:02:14Z

In reply to nevent1q…xhzt
_________________________

what about me

Nostr event nevent1qqst9yxuyqj6vzxd6el7fk3gq4euvhfqsqvpcxvs2637f5v3huy3kjqzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hkdg5zrc

2025-12-17T00:35:51Z

GitHub is just a CodeBerg advertisement

Nostr event nevent1qqsdhm7zd533df522c0lqn7uq289yd2xkqf7gqvz8mykxm63hr3qrdqzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hk5y49ut

2025-12-15T14:17:28Z

Analgin/Novalgin inhibits COX

thankies! Should I specify stuff too or I'm more or less like ...

2025-12-08T14:39:38Z

In reply to nevent1q…k6c5
_________________________

thankies! Should I specify stuff too or

I'm more or less like tea :nonbanarchy: (npub1w7x…u55z) ig x3

can I be added to the list too

2025-12-08T13:29:56Z

In reply to nevent1q…sqqx
_________________________

can I be added to the list too

me, wishing I could get drunk and that alc wouldn't taste ...

2025-12-05T23:08:37Z

In reply to nevent1q…y9n4
_________________________

me, wishing I could get drunk and that alc wouldn't taste like IPA to me

yes, you can interact with Signal programmatically, and the ...

2025-12-01T12:34:27Z

In reply to nevent1q…87x2
_________________________

yes, you can interact with Signal programmatically, and the company's main client is open source + the protocol has specs

You can sacrifice some accessibility of your website (eg. making it inaccessible to blind entities, or to anyone with a slow internet, etc) to try to stop scraping

You can also deploy various anti-bot services like Anubis which will make it more costly to crawl your site and should make most bots avoid it (again at the cost of some accessibility)

Anyone able to sell me a C3 ticket ? I cannot handle the public ...

2025-11-17T06:20:09Z

Anyone able to sell me a C3 ticket ?
I cannot handle the public sales and the vouchers have passed.
Please boost :neobot_bottom:

Still in Darmstadt. Idc about words. I am homeless rn, I do not ...

2025-11-09T18:49:05Z

In reply to nevent1q…cefn
_________________________

Still in Darmstadt. Idc about words. I am homeless rn, I do not have my meds, I am freezing and alone. I was thrown away by everyone. Literally.

Atm I am searching for ways to kill myself. I cannot handle this ...

2025-11-09T18:47:47Z

Atm I am searching for ways to kill myself. I cannot handle this anymore. The last friend abandoned me. Nobody cares if I die.

Is anyone able to house me in Germany and let me be not alone, ...

2025-11-09T12:11:57Z

Is anyone able to house me in Germany and let me be not alone, and help me calm down a bit
I am not stable rn, and I need help.
I was kicked out of the place I was staying at with 8 hour notice.

Boosts welcome.

Urgent: Someone able to host me or come over and deal with me ...

2025-11-03T02:21:39Z

Urgent: Someone able to host me or come over and deal with me having a panic episode? I cannot be alone. I'm likely to kill myself atm. This is not a joke - I already tried to slit my arteries a few times, this time I feel bad enough that I am likely to succeed. I need to be not alone, with someone comfortable.

I can cover transfer fees, and food fees, but not food itself (executive dysfunction)

A week should suffice.

I am out of meds.

I mean today, as in within 24h.

Boosts allowed.

Yk what. Since my life might just end before I even make it to ...

2025-11-01T21:41:39Z

Yk what. Since my life might just end before I even make it to 2026. Imma be open about myself.

This account is safe for paraphilias of any kind.

I'm an occasional age regressor. Feel free to erp with me when I am age regressed; I am hypersexual since I was 11 (IRL), and ageplay, amongst other things, feels very good and lets me heal from trauma.

Yes I federate with pedi. Deal with it. I'd rather be with those that treat me like a sentient being and respect consent than bigots that repeatedly violently sexually assaulted me when I was 11. If you support those that sexually assaulted and abused me for months when I was a preteen, die. Get away from me. Bigoted Nazi.

If you have a problem with that, you are a bigot, and fuck away.

If you are safe, feel free to stay, this account is very open to this. If you wanna erp with an age regressed kitten feel free to DM (note that I only really like sexual stuff with fem entities - transfems, fem leaning enbies, femboys...), or if you just wanna chat about random stuff that's fine too.

I don't judge any paraphilia. Radqueere are explicitly welcome here. Those that hate radqueers are not.

Don't randomly DM me porn tho. This is not a porn account. I don't even really boost much porn.

And in case you are curious, I have about 20 different scientific papers that actually researched stuff. Do not be an adultist or ageist. You will be deleted from my fedi.

> Bearing in mind that people have different tastes and ...

2025-10-29T12:30:03Z

In reply to nevent1q…80uc
_________________________

> Bearing in mind that people have different tastes and preferences, by definition, recreational drugs have effects that some people enjoy, at least in the short term. Several drugs prescribed for mental health problems do, too, such as benzodiazepines and amphetamine; therefore, they are also used for recreational purposes. On the other hand, some psychiatric drugs, including most antidepressants and antipsychotics, produce states that vary from mildly unpleasant to very unpleasant for most people.

> Bearing in mind that people have different tastes and preferences, by definition, recreational drugs have effects that some people enjoy

> Several drugs prescribed for mental health problems do, too, such as benzodiazepines and amphetamine; therefore, they are also used for recreational purposes.

> On the other hand, some psychiatric drugs, including most antidepressants and antipsychotics, produce states that vary from mildly unpleasant to very unpleasant for most people.

Notice the quantifier "most". Benzos (benzodiazepine) is a class of very common short-term antidepressants, and the author agrees that it is sometimes used recreationally (it's a depressant - like alcohol). Idk how well-intentioned implicitly excluding one of the most common antidepressants is, but I certainly don't like it.

This book, if you read it without having a semi-thorough understanding of what it is talking about, does not communicate stuff I find good to communicate. Yes, the chemical imbalance theory is bullshit. Yes, psychiatrists are more concerned with money than with the health of any patients. But no, replacing it with a dogmatic theory, that presupposes that consciousness is something unique and "not biological" is unnecessary and harmful.

Antidepressants treat the symptoms of depression. Not the cause. That's all this should've been. They are notably effective at it (see the citation in my other post). They also have complex effects (which might be considered side effects - it's certainly not some "quick fix"), and should not be the first thing one reaches for when alternatives are available. I am dosing myself on strong dissociatives and depressants (both classes of antidepressants) *because* I have no alternatives available. What the author seems to be arguing for is making the availability of antidepressants even worse than it already is, because psychiatrists suck at their job.

I will need to read the citations, but the purpose of this book ...

2025-10-29T11:40:49Z

In reply to nevent1q…v8v8
_________________________

I will need to read the citations, but the purpose of this book is clearly one that is dogmatic and anecdotal in nature. I just assume they are not outright lying about their citations to support their argument. That's just an outright dumb way of doing this.

My personal hypothesis is that depression is a certain state of the brain induced as a function combining its physiology and its senses, plus its previous states, as remembered by memories (its current connections)

Both the chemical imbalance "theory" and this dogmatic, anecdotal and unscientific hypothesis miss the point.

If your physiology is fucked (say, you have the wrong steroid composition, because you were born in a body with the wrong organs - aka are trans), then correcting the physiology is likely to cause improvements (I would like to see if there were any studies done on transfems of estrogen vs placebo over, say, a month) because that has a clear and biological source.

If you are constantly stressed and carry with you horrible memories, it's not a physiological source, it's a psychological one. You can damp the brain's communication to itself and the body (there are various funsies where the brain tells to other organs to produce hormones that then alter its state/physiology - you have to think of the body as a whole, but it's driven by the brain) to be depressed using chemicals, because the brain is, in the end, a biological organ, but that is not treating the root cause, which would be treated by removing the bad environmental conditions and then therapy to stop the memories from re-causing it. Medication can help thru that in certain ways, or when neither therapy nor fixing the environmental conditions are an option (eg. me). But it fundamentally treats the symptoms, not the cause.

There's no "me" - "me" is a cumulation of the brain's structure, physiology and connections. It's not something special like a religious "soul" or whatever, unlike what the book seems to imply. Current science lacks the understanding of the brain necessary to figure this out, but that doesn't make dogmatic assertions into proper scientific theories.

It's almost as if humans were complex biologically and you cannot apply one singular theory to everything. Gee, who would've guessed. Def not psychiatrists, they are too busy being at each other's throats for money.

Also, I am not a human, but I am stuck in the body of one, so. I am a non-human consciousness emulated by a human brain (kinda like an emulator on a computer). Because consciousness is a thing that's created by the brain. There's lots of interesting philosophy here that I am too tired for.

So because one supposedly scientific "hypothesis" is ...

2025-10-29T11:22:09Z

In reply to nevent1q…2a0w
_________________________

So because one supposedly scientific "hypothesis" is wrong (as expected of psychiatry) because it's just capitalism turned into fake science, we shall turn to human-centric dogma. Ah yes. My favorite.

Note that the book is clearly biased, and mostly based on ...

2025-10-28T13:49:18Z

In reply to nevent1q…7pzf
_________________________

Note that the book is clearly biased, and mostly based on anecdotal evidence, it seems.

Now, I am also biased, and my bias mostly agrees with the book's, but I am obliged to point it out.

The chemical imbalance theory does seem nonsensical, but I want to see the science (or lack thereof).

Book is Chemically Imbalanced by Joanna Moncrieff - (epub):

https://libgen.li/ads.php?md5=bd38a9e32fde1d6391b86af705cefcf0 (libgen) https://annas-archive.org/md5/40beefd22c94a63791f8b1e2bf787f4e (Anna's Archive)
http://bookszlibb74ugqojhzhg2a63w5i2atv5bqarulgczawnbmsb6s6qead.onion/book/115518677/5a1961/chemically-imbalanced-the-making-and-unmaking-of-the-serotin-myth.html (zlib)
https://bafybeihkklc5j46ez6dgnbst43ebjuqb42xjwi2awjq3a7pb2rv5c5q644.ipfs.dweb.link?filename=Joanna%20Moncrieff%20-%20Chemically%20Imbalanced_%20The%20Making%20and%20Unmaking%20of%20the%20Serotonin%20Myth%20(The%20History%20Press)%20-%20libgen.li.epub (libgen mirror over IPFS)

> This book will show that trusting doctors or purported ...

2025-10-28T13:01:43Z

> This book will show that trusting doctors or purported scientific experts is not enough – people need to inform themselves.

Good (psychiatry book)

Is there some way to get XMPP to read ...

2025-09-25T21:32:54Z

Is there some way to get XMPP to read .well-known/<something> instead of having to deal with SRV records?

Boosts plz :neobot_bottom:

So, I am looking for a job. It's slowly becoming more and ...

2025-08-31T13:53:12Z

So, I am looking for a job. It's slowly becoming more and more urgent. I need to be able to work remote from within Czechia. Half-time is preferable, but full-time possible. I need about 20 000 - 30 000 CZK income after taxes half time, or 40 000 - 60 000 CZK income after taxes full time. I'm currently starting a math degree at a university, but I can drop that if need be for a full-time job.

I can do a wide assortment of computer-related things, and have extensive experience with programming, Linux, Java tooling, and internals of computer systems (kernel, drivers, system services...), amongst many other things. I code for about 10 years (Java), and admin personal Linux systems for about a similar time as well. I have experience in securing systems. I know a bunch of programming languages really well, and am very adaptable to new languages and paradigms. I am very experienced in delving into a large new unfamiliar codebase and finding my way around them (I've done code hacking on WebKit (CSS, understood most of the media queries implementation with very limited debugging options within about 6 hours) and Firefox (various random things))

I speak English (C1 certified) and Czech (native).

Please boost

Previous posts with extra details (whenever details in here conflict with those in there, the details in this post override those in these posts):
https://estradiol.city/@ity/114608758466234085
https://estradiol.city/@ity/114133187533182340

#getfedihired #fedijobs

yea, I suppose caring about outside appearance a lot makes more ...

2025-08-23T07:14:34Z

In reply to nevent1q…yy8h
_________________________

yea, I suppose caring about outside appearance a lot makes more sense as an explanation of "you are too young/too old"

Beings that are like in their late 20s complaining that beings in ...

2025-08-23T04:28:19Z

Beings that are like in their late 20s complaining that beings in their early 20s are too young for them is just
Makes zero sense to me. This age stuff never made sense to me. Really reminds me of those meme Tinder profiles of beings being like "MUST be UNDER 180cm and have BLOND HAIR".

Like, what about not treating others as an object? Lol.
Like sure, I have an age preference (it's on my fedi profile), same how I have a height preference. But it's just a preference. I only really care about what a being is like, not how they look like.

And sure, it's okay to have like, a boundary. But at what point does it stop being okay? Like, say, only liking girls. Sure. Only liking cis girls. Ookay, sure ig... Only liking white cis girls... Okay, now that's a red flag.

And there comes a point where you have to draw the line. Where do you draw the line? Personally, for me, having a hard boundary on age is a red flag. But apparently that's something that's uncommon. Ig that makes sense, given the systemic issues.

And so I wonder. How much of this is fine, and how much of this is part of ageism? Where does this stuff start and end?

(Also, I have zero authority to speak of anything racism, so best I can do is to use it as a rhetorical device, sorry.)

Dev team: *We need to ship and we still haven't tracked down ...

2025-07-17T18:49:53Z

Dev team: *We need to ship and we still haven't tracked down the memory leak!*
Manager: *I don't care, fix it! We ship today!*
Dev team:

Are the seas an option?

2025-05-18T17:55:55Z

In reply to nevent1q…62pj
_________________________

Are the seas an option?

Oh my god why (Source for the image which got linked in the ...

2025-05-12T14:11:47Z

Oh my god why

(Source for the image which got linked in the replies: https://concretedog.blogspot.com/2025/04/building-beautiful-things-rc2014-mini.html)

# Searching for hackers (hacker: anyone that likes making ...

2025-05-10T09:21:40Z

#

Searching for hackers (hacker: anyone that likes making technology do what wasn't intended) to build a community for jailbreaking MR headsetsChat anyone interested in glitching Mixed Reality headsets ? I'm trying to build a community so we can get something done, as there's a bunch of folks that wanna charge money for it and I don't really like that idea x3.

The main SoC is XR2 by Qualcomm, it is an ARM SoC, and most of the headsets run very locked-down Android.

The goal here is to try to jailbreak it so we can run custom, fully open source software on it, possibly even mainline drivers to Linux and run something like #postmarketos :)

Unfortunately I am a systems hacker, I am hopeless when it comes to electric engineering anything, so I cannot actually pull off glitching myself. I can help with the stuff that comes after, such as mainlining drivers, though :)

IRC #xrbreak on oftc
Matrix: #xrbreak:itycodes.org
Discord: https://discord.gg/HeDAg3Ma7A

Please boost! Let's build an open and accessible community! #

Any help is appreciated, no information is useless! If you would be interested in helping, we need anyone with, including BUT NOT LIMITED TO<li>MR headsets for testing</li><li>Electrical engineering knowledge</li><li>Ability to design or assemble PCBs</li><li>Reading ARM disassembles to try to find a glitch point or a bootrom exploit or w/e</li><li>General experience with hacking embedded devices</li><li>Experience with Linux or Android security for rooting</li><li>Anyone with info about TEE/TrustZone (kexecing mainline kernel from rooted Android)</li><li>Contacts to folks that have any of the above</li><li>Experience managing communities and setting up bridges, wikis...</li>#jailbreaking #android #linux #hacking #xr #vr

Bad robotgirls get Oracle Solaris 12 forcibly installed on their ...

2025-05-07T11:55:50Z

Bad robotgirls get Oracle Solaris 12 forcibly installed on their CPUs

It will NOT be okay with you gone!!!

2025-04-19T00:30:00Z

In reply to nevent1q…f372
_________________________

It will NOT be okay with you gone!!!

You are not a sicko What I am relaying to you is what I was told ...

2025-04-19T00:16:11Z

In reply to nevent1q…30kx
_________________________

You are not a sicko

What I am relaying to you is what I was told by her.

I don't know enough about what happened to be able to say more. But as I understood it, once you get better, she would want you back.

And you _can_ get better. I will be there to help you, and others will as well, even if Ashten won't be for now. Which does NOT mean you can never hang out with her ever again.

Cutie, I dunnyo how the convo went down, but I can assure u that ...

2025-04-19T00:07:12Z

In reply to nevent1q…6wud
_________________________

Cutie, I dunnyo how the convo went down, but I can assure u that you are misinterpreting things >_<

Nora, Ashten likes you .-. I chatted with her & her headmate ...

2025-04-19T00:00:42Z

In reply to nevent1q…wger
_________________________

Nora, Ashten likes you .-. I chatted with her & her headmate about you.

Please don't go...

If anyone knows Nora's (thatretrotransgirl) address please ...

2025-04-18T16:22:38Z

If anyone knows Nora's (thatretrotransgirl) address please tell me, it's urgent

Please boost

Nostr event nevent1qqsxk4hrtutrf6ha55464gnefvggjagqyta6tm57lgnw8y0h2w7x2dqzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hkzth6z0

2025-04-18T16:14:25Z

I think a friend in the UK is attempting suicide and idfk what to do

pat pat

2025-04-11T02:25:20Z

In reply to nevent1q…us58
_________________________

*pat pat*

I mean I am writing both of these, but atm I am working on my ...

2025-04-11T02:04:18Z

In reply to nevent1q…naw6
_________________________

I mean I am writing both of these, but atm I am working on my strace replacement, Kurisu.

And I chose the DRM subsystem to look at here cuz that's the first one that came to mind that does multiple drivers per major node & the one I know most atm

<code> * Furthermore, the DRM core provides dynamic ...

2025-04-11T00:14:34Z

<code> * Furthermore, the DRM core provides dynamic char-dev lookups. For each * interface registered on a DRM device, you can request minor numbers from DRM * core. DRM core takes care of major-number management and char-dev * registration. A stub ->open() callback forwards any open() requests to the * registered minor. </code>This is terrifying.

So every subsystem that needs multiple drivers to handle devices of the same type (think sound, graphics...) hacked together its own homebrew version of associating drivers to minors.

And the way they do that is by registering a common driver to the major number (viewable in /proc/devices) and having a stub open impl that *patches the fops of the passed file pointer to refer to the driver's*

Meaning that at any point, the driver that a given major,minor pair refers to might change. Between calls to open. There might in fact be two different processes alive that have the same major,minor pair open, at the same path, but with different fops.

I hate this.

Thankfully every fops has an owner (:neofox_3c:)<code>struct file_operations { struct module *owner; // ... </code>

So I will have to write a patch (or maybe kmod might work) for the kernel to, given a PID + fd, output a symlink to /sys/module/ or something.

I mean, if I can write a patch, to shove it into proc fdinfo. Otherwise I'd need to make a new filesystem and hope that I can access this info, ig.

It goes struct task_struct -> .files -> struct files_struct -> files_lookup_fd_locked -> struct file -> .f_op -> struct file_operations -> .owner -> struct module -> .name

Essentially. So I need to get a task_struct from a PID. procfs already gets a task_struct passed in fdinfo, lol. It's impl'd in fs/proc/fd.c, seq_show. I could trivially extend this. It'd be a simple patch. In fact I already wrote it as I was writing this fedi post, just gotta test it :D

I have to quickly cum before I have the call, I only have a bit ...

2025-04-08T07:05:05Z

I have to quickly cum before I have the call, I only have a bit of time left

I can't be horny on a work call... Interview...

https://thenewinquiry.com/hot-allostatic-load/

2025-04-07T00:03:05Z

https://thenewinquiry.com/hot-allostatic-load/

Anyone knows how to reach Nora/thatretrotransgirl? She sent me a ...

2025-04-06T23:09:06Z

Anyone knows how to reach Nora/thatretrotransgirl?

She sent me a worrying message and unadded me and idk how to reach her and I am extremely worried for her safety, worried that she'll hurt herself...

Please boost

Nostr event nevent1qqsrjs2u09h7yg0ge4gppmxy4xe6l0w9qt0asvctgs9lklj43zjz5lgzyqkkd55vretaz2cf5xcul89fq2qm2tfcufn4trvkfjqcd3slzn2hke47uuy

2025-04-03T01:07:41Z

I want my urethra filed with a rough tungsten carbide file

Tfw you hover over a profile you swear you followed for 5 ...

2025-03-29T04:37:54Z

Tfw you hover over a profile you *swear* you followed for 5 minutes, then bite the bullet, click follow, and realize you have been blocked

And you don't even know why

:(((

Me: *buys a girl Lesbian yuri ftw :neocat_flag_lesbian_kisser:

2025-03-25T06:07:51Z

In reply to nevent1q…f74y
_________________________

Me: *buys a girl

Lesbian yuri ftw :neocat_flag_lesbian_kisser:

Infodump follows aimed at nobody in particular: AES is the ...

2025-03-24T23:15:20Z

In reply to nevent1q…8jzc
_________________________

Infodump follows aimed at nobody in particular:

AES is the symmetric cipher, Signal uses ECC (on Curve25519 & derivatives: So X25519 and Ed25519) for the DR protocol, and ML-KEM as the KEM for the initial key exchange.

ECC is not quantum-safe: You can recover a private key from the public key and decrypt communication if you have a quantum computer. The protection from using a PQC (post-quantum) KEM for the initial key exchange is limited.

Additionally, Signal has a specific threat model, which can make using it insecure for a lot of usecases. For one, it is not *anonymous*. This means that it does not protect your *identity*, it only protects your *messages*. Aka it is fine for chatting with trusted parties, but dangerous for chatting with untrusted parties.

Tell me if I should CW this with anything, I couldn't think ...

2025-03-24T20:48:37Z

In reply to nevent1q…r96p
_________________________

Tell me if I should CW this with anything, I couldn't think of anything 😅

Why is "attention seeking" considered derogatory ? Social ...

2025-03-24T20:48:12Z

Why is "attention seeking" considered derogatory ? Social interaction is a basic need. Like food or water. This is like giving someone shit for seeking food while hungry. And for getting increasingly more desperate after not having anything to eat for ages.

yea it's public on my gitea at ...

2025-03-24T05:20:43Z

In reply to nevent1q…hv0m
_________________________

yea it's public on my gitea at https://gitea.itycodes.org/itycodes/convince , but I haven't done much besides implementing a frontend for a then-WIP wlroots PR and adding a command that murders a client's connection on clicking on any of the client's surfaces. Tho the impl is probably buggy and leaks fds.

The OpenBSD kernel vendors the entire Linux DRM subsystem, which includes Linux KMS.

They argue that because Linux originally imported the DRM subsystem from a permissively licensed codebase it isn't a GPL violation, but eh, they got a cease and desist from Linux maintainers before. Eh. IANAL.

Nowadays libdrm is just a messy undocumented frontend lib that badly wraps the native ioctls. I don't like it x3

ooh hmm!! I will have to look into this deeper later, gonna ...

2025-03-24T03:43:10Z

In reply to nevent1q…vr0u
_________________________

ooh hmm!! I will have to look into this deeper later, gonna bookmark this and hopefully remember ahah

could u CW this with "bluesky" so that I can boost it ...

2025-03-24T03:17:25Z

In reply to nevent1q…vqnk
_________________________

could u CW this with "bluesky" so that I can boost it :fcB: :neocat_floof_pleading:

how is the VT machinery on OpenBSD? I will be cleaning up the ...

2025-03-24T02:06:26Z

In reply to nevent1q…6mac
_________________________

how is the VT machinery on OpenBSD? I will be cleaning up the seatd stuff from convince, my fork of sway, so I could look into hooking stuff up for OpenBSD

Considering OpenBSD just vendors a copy of a part of the Linux kernel in-tree for graphics stuff it might be the same as Linux...

yea, Sydney is opposite end :(((

2025-03-24T00:56:41Z

In reply to nevent1q…9wal
_________________________

yea, Sydney is opposite end :(((

Is there a point to fighting to stay alive I am tired of not ...

2025-03-23T23:10:32Z

Is there a point to fighting to stay alive

I am tired of not having anyone IRL. Friends. I want friends IRL.

I have no friends that I ever met IRL.

I need hugs.

I am looking for a remote (I am Europe-based) internship or ...

2025-03-09T15:30:33Z

I am looking for a remote (I am Europe-based) internship or half-time job.

Half to learn, half for an extra income.

I do GPU driver & compiler dev for fun. Nowhere near professional level, but I got some experience and a thirst for knowledge.

I also do some type theory things with proof assistants, and some light Linux x86 reverse engineering.

I had worked on reverse engineering mpi3mr & megaraid RAID controller APIs.

I have worked extensively with Vulkan and OpenGL from writing quite a few small game engines in Java.

I did a lot of Java bytecode things; Messed with the Rust compiler; Loads of C OSDev things; Haskell (mostly messing around); Wayland (I have a bunch of simple apps); X11 (wrote a status bar, window manager, compositor, image viewer)

I have extensive experience with reading very large C codebases, and spent a lot of time digging around the internals of Linux, specifically the kernel and low level subsystems.

I worked with encrypted chat protocols specifically on E2EE, on Matrix, writing spec proposals for removing ambiguity, improving UX, and security.

I have some experience with x86 and 6502 assembly; wrote a 6502 assembler and partial (not cycle accurare) emulator.

My gitea https://gitea.itycodes.org/itycodes

If anyone is interested, please reach out. (Boosts welcome)

This is sort of my CV; I will not be able to sign a contract under my legal name, but tranquillity codes is a name I use for years and has a commit in Mesa, so it should be good enough as common law.

Do note that this is a personal account, so be careful about viewing our general posts besides this one. We have posted recently about SPIR-V control flow, stack machine to SSA, and Intel GEN assembly.

#getfedihired

It's not about whether it can work or not It can work. But ...

2025-03-09T13:52:54Z

In reply to nevent1q…wwrv
_________________________

It's not about whether it can work or not

It can work. But you are making the lives of those that wish to impl the spec (like me) needlessly difficult. It's *not* a portable specification that supports "all platforms".

Folks ported DOOM onto a pregnancy tester.

web, various embedded systems, hobby OSes Implementing WebXDC is ...

2025-03-09T13:24:18Z

In reply to nevent1q…nf6d
_________________________

web, various embedded systems, hobby OSes

Implementing WebXDC is too much work, and gonna be very slow even if done, on those platforms

It's a highly non-portable spec.