back
user profile
ValdikSS
1,246karma·370submissions·December 29, 2014
recent activity (370 total)
comment
`dlopen`'ing system libraries is an "easy" hack to try to maintain compatibility with wide variety of libraries/ABIs. It's barely used (I know only of SDL, Small HTTP Server, …
comment
And it is a SoC requirement for Android certification.
comment
Baikal definitely has anti-rollback, and Loongson should have it too. That's a common feature. As of efuses, they are present essentially anywhere. In any SoC and microcontroller. They are usuall…
comment
I cracked into many x86-based arcade machines (and non-arcade gambling machines), and none of them used anything really bespoke. I never seen non-BIOS/UEFI x86 system in my life. Not going to say…
comment
On ARM, you control the whole boot process on many SoCs, and can make your own bespoke secure/trusted/measured boot chain, starting from bootrom to the very latest boot stages (given that yo…
comment
Well, you have much more control of lower-level boot process on ARM chips, and each of the SoC manufacturers have their own implementation of Trusted Boot which relies on the cryptography and secrets …
comment
Sure, why not? You have a reference implementation for both TrustZone OP-TEE (from Microsoft!) and in-Linux-kernel. No need to code anything, everything is already there, tested and ready to work. ht…
comment
Then also do this: echo vm.page-cluster=0 >> /etc/sysctl.d/85-swappiness.conf
comment
Sigma-star does many very high quality embedded blog posts, and touches not popular and hardly discussed topics pretty in-depth.
comment
That's easy to fix: Step 1:
sudo tee /etc/tmpfiles.d/mglru.conf <<EOF
w- /sys/kernel/mm/lru_gen/enabled - - …
comment
Disposable Root Servers: https://www.thc.org/segfault/ Segfault offers free unlimited Root Servers. A new server (inside a Virtual Machine) is created for every SSH connection. …
comment
I've debugged so many issues in my life that sometimes I'd prefer things to just work, and if reboot helps to at least postpone the problem, I'd choose that :D
comment
In this case I used `perf` utility, but only because the server does not have a proper observability tool. Take a look at this Netflix presentation, especially on the screenshots of their web interfac…
comment
>perf is a shell tool. iptables is a shell tool. sshguard is a log reader and ultimately you will use the CLI to take action. Well yes, and to be honest in this case I did that all over SSH: run `p…
comment
>It is where I attach a debugger, it is where I install iotop and use it for the first time. It is where I cat out mysterious /proc and /sys values to discover exotic things about cgroups…
comment
>What I need are tools for when the unknown happens. There are tools which show what happens per process/thread and inside the kernel. Profiling and tracing. Check Yandex's Perforator, Go…
comment
https://js13kgames.com/
comment
Nah, I got into printing because nobody made a commercially available print server, and I ended up making my own, with all the involvement in the stack in the process. I wish Openprinter luck, as it h…
comment
I work mostly with the old microcontroller-based cheap consumer ("GDI") USB models circa 2000-2010, these are hardly possible to brick with software, as some of them even don't have a f…
comment
Spent about 2 years improving printing and scanning stack of Linux: CUPS, SANE, AirSane, as well as some legacy drivers, and also x86 proprietary driver emulation on ARM with Box86. Even that "mo…
comment
Is that your article? >I have a collection of over 10,000 PDF files Could you upload it somewhere please? I need a collection to test CUPS pdftopdf converter for printing, as well as rasterizers, s…
comment
And sometimes quite faster: https://printserver.ink/blog/box64-vs-fex/
comment
>right now I have 4K on 24", at 200% scaling I have Dell P2415Q, from 2015. There are, like, 4 other (legacy) models of 24" 4K out there, and that's it. I've no idea why they do…
comment
What's encrypted printing? How does it work?
comment
It is: https://grsecurity.net/faq
comment
grsecurity project has fixed many security bugs but did not contribute back, as they're profiting from selling the patchset. It's not uncommon for the bugs they found to be rediscovered 6-7 …
comment
Funny enough, that Digital Insanity tune was just an embedded .mp3, which was considered very low-key for the time—it greatly enlarged the .exe size compared to the chiptunes.
comment
KDE Connect does that in LAN. Clipboard sync, file transfer, contacts, calls, remote control, etc.
comment
swap requires MMU, so no, unfortunately. But there are tricks to have XIP userspace: cramfs supports it, as well as a special AXFS file system. cramfs parses ELF files and marks XIP only a .text/…