HNHacker News
TopNewBestAskShowJobs

yx827ha

44 karma · joined July 15, 2014

Rock solid APIs!
submissionscomments
yx827ha··on Bugs Rust won't catch
The nix crate provides the safe wrappers. https://docs.rs/nix/latest/nix/fcntl/fn.openat2.html
yx827ha··on Loss32: Let's Build a Win32/Linux
Check out `zig cc`. It let's you target specific glibc versions. It's a pretty amazing C toolchain.

https://andrewkelley.me/post/zig-cc-powerful-drop-in-replace...

yx827ha··on Using Git add -p for fun (and profit)
I've been using this UI git diff add script for years: https://github.com/ismell/diffadd I think it works better then the TUI. Surprised something like it hasn't landed in upstream git.
yx827ha··on PWM flicker: Invisible light that's harming our health?
If you are sensitive, I would recommend getting an Opple Light Master. It's a tiny and cheap flicker meter.
yx827ha··on PWM flicker: Invisible light that's harming our health?
I tried their healthy bulbs years ago and they were terrible. I've avoided the brand since then. I think they have done discontinued the healthy line.
yx827ha··on PWM flicker: Invisible light that's harming our health?
Thanks for the link! I bought a moto g power 5G - 2024. It has an LED screen. I've been using this line of phone for years. It's morning fancy, but at least I can actually look at it.
yx827ha··on The state of binary compatibility on Linux and how to address it
Just to add some more context. Zig cc is a wrapper around clang. It can handle cross compiling to specific glibc versions. See https://andrewkelley.me/post/zig-cc-powerful-drop-in-replace... I imagine it would help with the glibc problems they are taking about. Glibc tries to provide a backwards compatible abi.
yx827ha··on Not OK Cupid – A story of poor email address validation
Fastmail's masked emails are great! I honestly very rarely give out my "real" email. Usually when I sign up for something I create a masked email, or if I need an email on the spot I use a wildcard alias (xxxxxx@myalias.fastmail.com). Since most of my emails are random, it serves as an authentication additional factor.
yx827ha··on Bypassing disk encryption on systems with automatic TPM2 unlock
That's how ChromeOS does it. https://m.youtube.com/watch?v=iO6cb90WiQ4
yx827ha··on Bringing SerenityOS to real hardware, one driver at a time
Depthcharge (the bootloader) also supports net boot via tftp. You would need to build it yourself and flash it to the SPI. It's a great feature when iterating on the kernel.

https://chromium.googlesource.com/chromiumos/platform/depthc...

yx827ha··on Bringing SerenityOS to real hardware, one driver at a time
If you ever need help hacking on your Chromebook ask on the chromium-os-dev mailing list. I'm sure someone could help you get CCD working.

https://groups.google.com/a/chromium.org/g/chromium-os-dev?p...

yx827ha··on A story on home server security
I agree, Tailscale FTW! You didn't even need to integrate it with docker. Just add a subnet route and evening just works. It's a great product.
yx827ha··on I keep turning my Google Sheets into phone-friendly webapps
Why does the site hijack the back button!? It wouldn't let me get back to hn.
yx827ha··on Dumping Memory to Bypass BitLocker on Windows 11
It's in the works. https://opentitan.org/
yx827ha··on Monitoring energy usage with smart plugs, Prometheus and Grafana
I bought a CURB Energy monitor about 6 years ago. Does anyone know if it's possible to flash open source firmware on it? It only has a cloud integration, but I would really like to hook it to to home assistant.
yx827ha··on Oasis – a small, statically-linked Linux system
You should check out the ChromeOS Bazelification project[1]. It has those exact same goals. Not all packages are reproducible though because they embed timestamps.

[1]: https://chromium.googlesource.com/chromiumos/bazel/+/HEAD/do...

yx827ha··on Gentoo goes Binary
> Coincidentally, I just published a tool to manage unprivileged chroots for testing ebuilds.

You should check out what ChromeOS is doing. They are using bazel to execute ebuilds inside an ephemeral chroot: https://chromium.googlesource.com/chromiumos/bazel/+/refs/he...

This way it's guaranteed that no undeclared dependencies get used.

yx827ha··on A study of Google's code review tooling (Critique)
If you want something similar, check out Gerrit: https://www.gerritcodereview.com/ It's open source and used by Android and Chrome.
yx827ha··on Klint: Compile-time detection of atomic context violations for kernel Rust code
This sounds like something the Keywords Generic Initiative could help with. Maybe create a ?sleep keyword. https://blog.rust-lang.org/inside-rust/2023/02/23/keyword-ge...
yx827ha··on Bash retry function with exponential backoff
Don't forget about:

   declare -i i
   i+=1
yx827ha··on How food powers the body's metabolism
I would recommend you read: PEMF - The Fifth Element of Health - https://www.amazon.com/PEMF-The-Fifth-Element-of-Health-audi...

It talks about how our cells are little capacitors and the earth's pulsed EMFs actually help energize your cells. I recommend skipping the first chapter though.

yx827ha··on Unboxing a $100 Chromebook
Some devices do have soldered down eMMC storage, but others have M.2 slots for NVMe storage. The later can be easily upgraded. Some of the newer AMD Chromebooks have an eMMC to NVMe bridge in M.2 form factor, so these can be upgraded as well.
yx827ha··on Investing in lighting did great things for my mental and physical health
You should check out https://sowilodesign.com/blogs/blog/how-to-use-bifrost-with-...

They offer a high current adapter for the Phillips Hue Light Strip so you can have large and bright light strip installations. Their LEDs are also top notch. I installed some as my pandemic lighting and it's been great.

yx827ha··on Another Vulnerability in the LPC55S69 ROM
On ChromeOS, our root of trust is actually the SPI ROM. We allocate a RO section of the SPI ROM that is controlled with the write protect pin. This RO section contains a full copy of the BIOS including vboot and the keys used to verify the RW-A/RW-B sections. We use this to build a chain of trust. RO FW verifies RW FW, RW FW verifies the payload (depthcharge), depthcharge verifies the kernel, the kernel verifies the rootfs using dm-verity.

Here is a great video by Duncan explaining the whole processes in detail: https://youtu.be/HwsTRThChn0

All the components are open source too. You can read more about it here: https://doc.coreboot.org/security/vboot/index.html

As for the security chip, all current Chromebooks ship with a CR50. This is a Google designed chip. The boot rom is closed source unfortunately, but it essentially just verifies and jumps to RW. You can find the RW code here if anyone is curious: https://source.chromium.org/chromiumos/chromiumos/codesearch...

The security chip gives us TPM2 functionality and some ChromeOS specific features like CCD: https://chromium.googlesource.com/chromiumos/platform/ec/+/c...

You should be able to use vboot with a different TPM. Reach out if you want to chat!

yx827ha··on Rooms can be as bright as the outdoors
It might be the flicker. Most LED lights I've found have pretty bad flicker: https://youtu.be/eWut5Qx6mkM?t=285

Phones are pretty bad too. Check out the Nexus 5x vs Pixel 3: https://drive.google.com/drive/folders/1f7-ChF4zFiisFdmEZVEz...

I found that Phillips non dimmable bulbs are the cheap and don't flicker.