Hacker News Reader

I'm a fan of this.

But, note "The PLAtform NEutral Transpiler"..."allows one to compile a subset of the C language".

Subset of C not being C.

markjenkinswpgon Adventures in reverse engineering Broadcom NIC firmware

Great work Hugo. Thank you!

Will take this as an exercise to reader. What is the equivalent of leaking the battlestation construction site location and defense system and an appropriately authorized vehicle perfect for a first strike special ops force while having your starfleet and a ground legion lying in wait.

Conveniently forget about the indigenous population that hates you and can be co-opted by the special ops into the defenses take-down.

And, for talent recruitment purposes, the dear leader invites a known mind-hacker and terrorist pilot into his battlestation office with a view, sends the guards home early (because confidentiality) and offers the temptations that come with a weapon and concerns for friends and family.

Lesson: Malicious leaks in a quest for galactic domination may backfire, as may insider threats if you're not careful.

Need more Edward Snowden and Chelsea Manning.

Edit addition: Lesson 2, don't double down on failed moonshoots

markjenkinswpgon Experts cracked laptop of crypto CEO who died with $137M, but the money was gone

I'm not convinced of the first half of the headline re laptop cracking.

The article cites the latest monitor report, but the only paragraph I can find with the word laptop just implies the monitor has possession and success with some devices.

""" As noted in the First Report, known devices of Mr. Gerry Cotten have been secured by the Monitor including, Mr. Cotten’s laptops, cellphones, USB keys and home computer. The Monitor understands that prior to the commencement of the CCAA Proceedings, the Applicants together with their initial outside expert, attempted to access the devices and were successful in respect of certain devices. The Monitor will work with the Applicants and Representative Counsel to determine next steps to access any information and data which may be located on the devices and report back to the Court with respect to those efforts. """

markjenkinswpgon PureBoot, the High Security Boot Process

A perfect example of getting lucky. How long until subsequent Intel releases lack this.

markjenkinswpgon JPEG image of Shakespeare which is also a zip file containing his complete works

I wonder if lurking under the surface here is a fundamental law of information science that plausibly deniable stenography can not exist.

markjenkinswpgon State considered harmful: A proposal for a stateless laptop (2015)

Evil maid can flip your write switch.

Longer version: Boot firmware and possibly OS boot loader must be unencrypted, thus attackable by an "evil maid" if left on device. Evil maid can flip the write switch. All other storage can be encrypted and is safer to leave on device.

Alternative approach, validate state of firmware on each boot with a TPM and a 2nd trusted device that you do keep with you such as a cell phone running Google authenticator or a hardware security module (HSM). See Trammell Hudson’s Heads https://trmm.net/Heads and what's going on with Purism and Librem key https://puri.sm/posts/the-librem-key-makes-tamper-detection-...