News for hackers. Stuff that matters.

Sprite_tm

Re:Data centers contain 90% crap data on Sunday April 06, 2025 @10:06PM (#43606856)
Not sure about Microsoft solutions, but modern file systems like zfs and btrfs can do this on the filesystem level, no support from the mail server needed.
Re:Syncthing: Untrusted Device Encryption on Thursday December 07, 2023 @12:40AM (#38553236)
Am I the only one a bit worried about them using a fixed string as a salt? A salt is intended to make it hard to create a rainbow table. I don't know how much entropy is in their 'folderID' variable, but given that it's a 'short string', it seems low-entropy and not random. If so, the current implementation makes it trivial to make a rainbow table. That means that if you can get the passwordtoken and know a folderID, you can create a rainbow table that maps all possible passwordtokens to valid passwords.

BTW: 'worried' as in 'code smell', not 'worried' as in 'the encryption can be easily broken'.

No, it doesn't. I know with 100% certainty ESP WiFi hardware is developed in-house and not shared. I think BL602 uses CEVA IP, not sure about that, but it certainly is not shared with ESP chips.
Espressif dev here. I usually advise people to break out GPIO0 (or GPIO9 for the ESP32Cx series) because 1. if you somehow write firmware that reconfigures the USB pins, there's no way to get the USB connection going via which you can reset the ESP into download mode, and 2. if somehow a firmware upload aborts halfway, the ESP32 can go into a bootloop with the USB device periodically disappearing. In the 2nd scenario, it's not impossible to time your flash so it goes through, but simply pulling GPIO0 low is easier. I don't think having an actual button is needed, but I'd certainly have a test point or another way you can ground that pin when you get yourself in a pickle.
Re:Dads.cool – Mastodon Instance for Fatherhood on Wednesday June 21, 2023 @11:51PM (#36427827)
There's a directory at https://dads.cool/directory .
Re:1k True Fans (2008) on Sunday December 25, 2022 @11:06PM (#34134471)
Am I the only one who thinks the 'true fan' definition is a bit... icky? If I have a person who buys everything I offer, regardless of if it's a duplicate of something I already offered earlier, regardless of quality, that person sounds like they put me on way too much of a pedestal. I'd rather have fans that go 'nah, this ain't worth it, I ain't buying' when I send out something that's dog shit. The 'true fan' definition on offer sounds a bit too stalker-y to me.
Re:A Christmas tree bauble that plays Doom on Friday December 09, 2022 @02:50AM (#33918783)
Not Freak_NL, but in my experience the only people actually good at recognizing the Dutch accent are Dutch people themselves (unless the accent is really bad). So in practice, it's more of a quirk than something practically bad.
Re:NopeCHA: Captcha Solver on Sunday November 27, 2022 @09:15PM (#33769118)
Was wondering how these people make money... looks like you can buy 'enterprise plans' where you can have them solve captchas en-masse... Not sure if I agree with whatever people want to make use of that.
Re:Tell HN: VPN Situation in Iran on Wednesday October 12, 2022 @10:35AM (#33177594)
Years and years of cat-and-mouse between people wanting to jump the Great Firewall and people maintaining the Great Firewall.
>The reason that environment no longer runs is because the company decides it's no longer profitable to run it. Blockchains build incentives to run that environment into the operation, so as long as there are users willing to pay, and the environment is efficient enough, in theory the environment should never not be running.

So why would that need blockchain? If this is a viable model to run the game, why wouldn't game companies have a direct 'pay us to keep up the servers online' model now?

Re:Rust on Espressif chips – 15-07-2022 on Saturday July 16, 2022 @10:06AM (#32118238)
Espressif guy here. Please share proof we make stuff for the CCP specifically? Because I'm not sure I want to work for them if they influence any technical decisions.
Re:ESP32-C5: Espressif’s First Dual-Band Wi-Fi 6 MCU on Friday June 24, 2022 @01:42AM (#31858185)
Yes and yes, the SDK has esp_random() and esp_fill_random() which hook into the hardware RNG.
Re:ESP32-C5: Espressif’s First Dual-Band Wi-Fi 6 MCU on Thursday June 23, 2022 @12:58AM (#31845303)
Espressif guy here: we're not.
Re:TerraUSD crash led to vanished savings, shattered dreams on Wednesday June 22, 2022 @05:49AM (#31833813)
Until liquidity runs out.
I helped design an USB-to-serial converter thing to directly go into the silicon of one of these chips you can program. It acts like an USB-to-serial converter on the USB side, but on the device side, it 'forgets' the to-serial and simply directly spits out the bytes it receives on USB. It's interesting how many serial-related parameters become no-ops - you can set the baud rate, parity, data bits etc to whatever value you want, the device happily ignores it and everything keeps working anyway. It's the nice part of tight standards, I guess.

(But don't ask me about the shenanigans Windows needs to see in the USB descriptor to allow programs to access an otherwise driver-less USB device - yech)

Re:Using a tiny HC32L110 ARM chip on Monday March 21, 2022 @08:51PM (#30761633)
Espressif employee, and I'm not sure what your point is... the absolute amount of Western people working for us in Shanghai has only gone up on average, and globally it has skyrocketed (relatively speaking) since we opened thriving offices in Brno (Czech republic) and Puna (India).
Re:Using a tiny HC32L110 ARM chip on Monday March 21, 2022 @09:15AM (#30753745)
Can you elaborate that? For each BGA ball, I need one trace width of trace, plus one spacing width to the next trace, right? There's a space on the other side as well, but that's already 'provided' by the trace above.

Or do you mean if you want to connect to both the outer as well as the inner layer of balls? Then you'd be right I think, but that was not what I meant; I only calculated the spacing to connect to the outer layer and nothing more.

Re:Using a tiny HC32L110 ARM chip on Monday March 21, 2022 @09:12AM (#30753713)
You're probably right if you do professional runs. This is the few-bucks mass-production who-cares-its-cheap-as-borscht-anyway process we're talking about; it usually comes with 50% e-testing and I actually have a panelized PCB with traces very close to the minimum come back with a few of the PCBs crossed out. The question then becomes: what about the traces that just made it? Can I run any current through it, will they deteriorate over time? Hence my choice to (advise to) beef up the traces a bit.
Re:Using a tiny HC32L110 ARM chip on Monday March 21, 2022 @07:49AM (#30752950)
Note that for mass production, you can't put a 'standard' via directly under a BGA/WCSP ball, as the via will 'suck away' the BGA ball via capillary action. You'd need to ask the board house to plug the via, which likely brings it into the 'expensive' range of things again.
Re:Using a tiny HC32L110 ARM chip on Monday March 21, 2022 @07:32AM (#30752791)
FWIW, I'm more concerned with the fact that it's a Windows program (the closed-source-ness and seeming unavailability of the programming protocol makes it shady, imo) rather than it being Chinese. I'll modify the text a bit to reflect that.
Re:RISC-V J extension – Instructions for JITs on Saturday March 12, 2022 @09:09PM (#30657195)
Lots of memcpy() implementations are still more efficient than a dumb byte-by-byte copy. They'll copy the (unaligned) head and the tail in bytes, but the bulk of the data using whatever data type and method is fastest.
Re:Ask HN: Why is there no small Android phone? on Monday February 21, 2022 @01:24AM (#30412504)
Likely take it apart, recycle the metals and where possible plastics, dump the rest.
I agree that the 'o noez, raspberry pi!' is high here, but one of the things you can do on other devices is something like secure boot, where the OS image on disk is signed and the device will boot to a 'rescue' firmware if it is compromised. Aside from physical access deterioration it also has the effect that an attack over the Internet generally cannot get permanence, that is, you can get rid of it by rebooting the device.
Espressif guy here: Actually, unless the crash is so bad that it triggers a RTC watchdog or manages to mess up with clocks somehow, the C3 USB thing will also stay active if your program crashes. Unlike the USB in e.g. the ESP32S2, this is a hardware implementation that is more like we took an external usb-to-serial implementation and integrated it into the ESP32C3 silicon.
Re:Ask HN: Anyone know any funny programming jokes? on Wednesday January 20, 2021 @11:20PM (#25855347)
Those who don't understand binary, those that do, and those who count in Gray codes.
Re:Tiny PDP11 on an ESP32 on Sunday January 17, 2021 @08:36AM (#25810523)
Hehe, comments like these make me finish and document my projects when half of me actually would rather throw it into a box and start something new instead. Thanks!
Re:Tiny PDP11 on an ESP32 on Sunday January 17, 2021 @08:35AM (#25810512)
OpenSCAD. Textfile in, 3d model out, just like I like it. As an indication: this is what I had to type in to get the VT102 model: https://github.com/Spritetm/esppdp/blob/master/case/vt100.sc...
Re:Tiny PDP11 on an ESP32 on Sunday January 17, 2021 @07:25AM (#25810156)
None. Mcedit. I'm not even kidding.
Re:Tiny PDP11 on an ESP32 on Sunday January 17, 2021 @06:23AM (#25809866)
Nothing special - Thinkpad T470s, running Debian, with Awesome as a window manager and Kitty as my main terminal. No public dotfiles as I feel most of them are duct-taped together and perpetually in the precarious state of only being one apt-get update away from failing because of something deprecated I put in 15 years ago.
Re:Tiny PDP11 on an ESP32 on Saturday January 16, 2021 @10:36PM (#25807851)
You have a good point... I always tended to write my stuff down chronologically, with the reveal at the end, but I'm not sure if in the age of 10-minute Youtube videos that still works well. I'll see if I can at least link the last page, so people without patience can go there directly.

Older »