happyPersonR

Once you’ve rooted, pwnd,black holed, and decompiled everything, there’s not really much risk. And then you can have functionality like AirPlay etc back.

OAI and the other projects I’m excited to see what happens with GPUs after the upcoming crash. Also AI to help with development and integration.

And with Intel having screwed everyone before by not exposing the FPGA frontend on their chips, I’m hopeful one of the newer companies will have something better or maybe with new leadership they’ll make better decisions.

But I think we need to settle on use cases for what we want openRan to actually be able to do in what release.

Also, having that project led by legacy vendors was a large part of the problem, but something the telcos were pushing hard.

Wonder if it can do this for 3d cad etc ? With enough fine tuning of small models I’m not sure how much they’re distinguishable from experts if you put a router with like jev in front ?

Agree … but the part that needs to be remembered

make sure it’s a model where the latest firmware is rootable and never connect it to your WiFi until you have root

Everything you need to do to get root can be done with an Ethernet connected directly to the TV and your laptop. There may be modifications needed to the root toolkits but with good prompting, agentic Llm can figure it out.

If you bought one without root… you may have a chance never connecting it.

If it’s one on your WiFi that doesn’t have a root exploit the only safe thing to do is change your WiFi password.

If you don’t own your TV assume it’s pwnd.

Shout out to the author, it seems coherent.

I like flamegraphs

I know folks use perf to help generate them

But in the future, now that Llm is here, get and agent to check assembly, PMUs and also see what you’re doing in assembly.

My 2c and happy coding to everyone :)

The entire issue with this is the dmca and not being able to share what is RE’d from the US.

So much more would be possible were this the case.

That being said… I’m not sure it should be illegal to share this re’d code.

And at the very least … just take it and rewrite what it does in rust lol.

Might not be clean room but hell, if it works.

I’ve gotten good mileage out of binary patching in trampolines lol

And adding in kernel shims.

The only part that’s missing that would probably help is tossing in more storage and moving logs off of root lol.

This is cool stuff !!

Would love to see what other things could benefit from this beyond storage. Maybe like BT or similar wireless.

I’m hoping with RE everything, for at least consumer IOT products we’ll get to a point where we can just get rid of a lot of the need for ipv4 for home.

What’s left are just apps and devices that people don’t wanna change out but are probably pwnd and I don’t think are gonna get updates because the teams that wrote the software moved on and the companies don’t wanna keep spending on sustaining.

lol “we don’t feel like following the law so we just picked some fresh dog poop and yelled about bad things that were unrelated and then did whatever we want and invented these funny little games with paper thin jokes everyone is going to pretend is valid so we could do whatever we wanted to anyway lol”.

Yeah those exist… the trouble being we need something that doesn’t exist

There needs to be a service that does reproducible builds of opensource projects as they sit and publishes results for people to scrape freely.

To be robust itself against attacks, likely 3-4 services.

But then that needs funding to be sustainable … and companies are incredibly cheap. Especially right now. As such… shrug :(

Maybe something as a skill for LLMs to run that actually checks build reproduction from source for a project and all of its dependencies? But then that’s gonna burn some tokens ….

I do this for personal projects … but at work they’ve started rationing tokens… as such… idk?

This software should be rewritten until it has no dependencies other than the compiler. Like it should use no libraries at all other than crypto.

Also put it in rust ….

My advice for everyone…. If you have to buy a new one …

just never connect it to the internet.

Wait 6 months or 6 days

And then root it till you own it for real.

Just used slopbro and did all 3 in my place. Kept on Ethernet point to point connected to my laptop until I had verified I had everything and every packet explained.

(Shout out slopbro and everyone else!!)

Getting Llm + ghidra to check every and document every binary, etc and make sure startup to a running system is understood, logs are rotated properly.

After this … all 3 will probably run one giant rust binary from startup lol

For anyone that can read this, if you have one connected to your network, change your WiFi password and don’t update your devices or bring them on the internet until you pwn/root them yourself.

From here out … everything only via tailscale and nothing should be able to connect inbound. Setup some firewalls.

Do you know if they found a “safe” bmi? Like is it 25-30 ? Or

We need something external that actually checks to see if source code matches built artifacts, and also possibly something Llm based that checks to see if you’re making checked in code vulnerable or directly adding something malicious.

I’d imagine there were probably fixes for critical CVEs that were included …. A lot of companies are on a 24 hour timeline to get them out.

Yeah those devices also need to be “opened up” as it were. Some of them already have been. Just think about it like fermented whiskey. Leave them alone for a month or two until they run an opensource firmware you control.

If you just take them offline you can do this without having to rush.

Just change your WiFi password, don’t give them the new one and don’t update them lol.

Yeah, api useage

But I figure they would just say “no” when you exhaust the tokens you have

A lot of people in opensource projects put their heads in the sand, and didn’t want to deal with all of the stuff coming out of LLM assisted code. This is a much better idea. We were always short of hands to help build things … and shorter still of hands to review things, or to even decide what a competent gate was for a feature.

This is much more useful.

Projects and developers and maintainers using LLM to review all of the code and the original specs for the architecture to make sure it makes sense and to find things that are just flawed or half baked or “now that we have Llm is this really all you can do?”

I’m actually kind of excited to see more Llm structure in a project as a given for things like Linux, Postgres etc, things that make it possible to find problems early … further left. Actually higher standards for what constitutes code that’s pushed for a project.

We need this bad in the open source world.

I always learn a ton from these release notes and go back and read the JEP…. So fascinating how all this stuff works.

So…. Is there a date yet for pre-order? Or… naw ?

Excited to get to do it

thank you for at least trying :)

starts to rebuild trust at least :)

what's one thing that you can actually talk about out of this that might help people to understand that's getting lost?

I’m doing headphones … the cheapish Chinese white box ones….

I was hoping someone would do color printers inkjet and laser.

Like 3/4 of my career was building stuff like this along with the software that ran in it for basically this exact use case. We even had it integrated into our CI. Spent upwards of a decade building things like this.

One thing we realized was that we needed to be able to simulate upgrades like this.

Lead to a lot of complexity but it was worth it.

This testing was some of the most valuable and because we had it automated it really let us build better things faster and find issues and regressions and verify new functionality :)

this person above i think is saying over time as the disease progresses(gets worse) , it stops working as well ... which is sad... but at least maybe for folks in this stage of the disease there's a way to restore some amount of normal.

we actually need good metrics for readable code that is clear and understandable, and not just someone's lint rules lol. Maybe that's the next part of this and where this goes?

One approach, skill's etc for good clean readable understandable code.

i bet there's a better one involving something with metrics and scoring etc

"tiny eSIM implant and a little CPU " .... i can't even get something like this for my raspberry pi ? lol :(

What would be cool is if someone from Ledger like did some reverse engineering, dumped instructions on how to buy these devices like this and made it so we could use them for hobbyist usage with our own esim. I could for sure think of some use cases for like remote wipe etc.

Wouldn’t trust it at this point … but what I would trust is a blank router that has a GitHub repo with a containerized build that I could run on my own machine and something ai ish that lets me flash it :)

Would be legit to be able to have an Llm do a source audit before installing …. Not perfect but damn sure better than nothing

I can’t blame them for making back their costs for any manufacturing and maybe a little extra for profit selling at the current rate. Let’s see what they do though :)

Could totally be one of those situations where the current cartel outsource all their production for MoW outside the US to them and then just pocket the investment money lol

However … without the US datacenter buildout ramping continuously … the ram will eventually make its way from warehouses to the market lol. We really need a way to use server dram in consumer boards… but idk if that will happen.

Although it would take a ton of engineering and probably a new chip … a custom motherboard would that did that would be legit haha :) would solve a lot of issues.

lol give it a year … now that the datacenter buildout is stalled out because of electricity and ddr6 is being rolled out in China, I bet this looks different in a year.

CXMT is planning expansion for the ram capacity, they’ll do that faster than the west, I beleive they said end of year ish? (Could be wrong).

once it comes online and they increase their yields, this whole thing changes.

Also new datacenters mean increased supply so cheaper tokens now that parameter size is a non-sequitor.

I’m legit curious how long China holds back… but I doubt it’ll be long.