You'd better believe there's going to be a section in the mGBA 0.11.0 release article (Soon:tm:) that goes into detail about why I don't use Gen AI and why I suspect a lot of (previously) respected people have picked it up. It's not the best soapbox so it won't be super big, but it's important to talk about.
Remote
endrift 🏳️⚧️
@endrift@social.treehouse.systems
mastodon 4.6.7+glitch-thProfessional Cyberentomologist, Hobbyist Emulator Developer. Purveyor of cursed technological information.
1120 Followers
49 Following
50 Posts
Joined February 09, 2023
Pronouns:
she/they
Primary dev on:
mGBA
Website:
GitHub:
MMBN in 2001: Oh no someone hacked our online oven and started a fire!
Me in 2001: Why would anyone connect an oven to the internet??
Me now: 🫠
Emulation handheld idea: have the button labels be e-ink displays so they can be changed but only configuring them costs power, instead of an LED display which has to constantly refresh and eats more power. Plus they can just use ambient light that way so they don't need to light up to see what they say.
Vibe coded projects have a bus factor of 0.
Upstreaming stuff to Linux sucks so much. It really doesn't need to be this bad.
Replying to
The point being: anyone claiming to fund Omarchy is effectively just directly bankrolling DHH with a plausible veneer of legitimacy.
Replying to
There are other repos on GitHub here that show he might have at least one further person working on it, but none of those repos are very large so I didn't dig further.
Boosted by @GroupNebula563@mastodon.social
Damn, the assembled case I printed for the BC-250 (cut down PS5 board designed for cryptomining but decent at gaming) is really big. Steam Machine for scale.
Hey Apple what the fuck
Replying to
If the bot doesn't understand code that's changed in the last four years it's gonna have massive issues understanding the difference between the kernel now and the kernel next year too. Just fucking great work everyone, promotions all around
Replying to
It's had me running around in circles trying to figure out concurrency issues that I'm pretty sure at this point are flat impossible, but I'm not intimately familiar enough with how USB IRQs work on Linux to be able to say otherwise!! I'm so exhausted from trying to fix things it dreams up that I'm making mistakes I wouldn't have otherwise
I'm sooooooooo fucking tired of that new pattern that several sites I use have implemented where if you click on a link it doesn't open the link, it pops open a sidebar with a preview of the thing but narrow and on top of your page. GitHub does it, GitLab does it, Sentry does it. It makes the site harder to navigate. The browser HAS A BACK BUTTON FOR A REASON.
Replying to
It reliably hallucinates that passing a negative value to ida_free will panic the kernel.
They removed that check four years ago.
This bot is a few months old.
Replying to
Also like? It's not actually including the maintainers of the driver the patch is for or any of the other To: addresses when it sends the email, so when I tell it off so as to appear on the mailing list with my refutations, I'm apparently not sending the email to the HID maintainers since they never got the sashiko review in the first place!!!
I thiiiink I might have messed up the resistor value
Replying to
Squall, for the record, has always been useless and is partially responsible for me deciding not to work on VBA and start mGBA instead. He speaks authoritatively but is so wrong so often.
You ever have one of those days
Replying to
@0xabad1dea best response to IPv8 I've seen yet
I like to say that Pokémon gen 1 is a hot mess, but if it's still hot after 30 years and hasn't cooled off yet, it's probably a hot, radioactive mess
Replying to
Had to make minor tweak to get it to repro on NetBSD but it was really, really minor. Anyway, I've sent it off to their security team. Really hoping I can close the book on this vuln after a fucking decade.
Replying to
@agturcz @ersatzmaus @0xabad1dea technically we have the ability to do that! But it's way more expensive than just mining gold the old fashioned way.
Replying to
@0xabad1dea oversimplifying, but only a bit. I have sometimes thought about how I would explain a smartphone to someone from several hundred years ago without it being just "magic". That said, I'm pretty sure historically "magic" was just things that lay people couldn't explain (and associated with witchcraft or trickery), so maybe they are magic.
Replying to
@jernej__s@infosec.exchange @matildalove@wetdry.world @valpackett@social.treehouse.systems mostly true, but one addendum: they cost way less than one cent (though a proper implementation requires two; one on each CC line). This is bottom of the barrel cheaping out, which makes it all the more disappointing when you find it on something that costs more than $5
Replying to
Anyway yeah if a malware analyst follows me and wants any of the stages involved, from the raw Python script to the machine code payload lmk
Replying to
Replying to
Ok, it looks like it starts the CLR...in the Python process I think? Some code is run next that I don't know exactly what that does, but it seems to monkeypatch the clr DLL in the current process, which I think specifically is to bypass the Anti-Malware Scan Interface by replacing a reference to amsi.dll with ansi.dll. And then it invokes the payload in the process itself using LdrCallEnclave, I think.
Replying to
@mjdxp@labyrinth.zone I didn't care too much before (hence the "not that bad" and I'd sometimes tell people to knock off making fun of it in the mGBA discord) but the vibe coding is going to make it even worse. I expect brand new security bugs if I try to audit it again in a year.
Replying to
@rachel@transitory.social probably some combination of that an unrealistic expectations from management via accelerated schedules. A disaster waiting to happen.
Replying to
I don't think it actually injects this machine code as a payload actually, it just loads it into memory as a bytestring in Python, remaps the memory as executable, and then calls directly into it, with some malware-prevention bypass stuff in the middle.
Replying to
@gvenema@fairmove.net @lisamelton@mastodon.social Meanwhile I was frustrated by how quickly Chrome kept throwing new shit at the wall and saying "this is now the way", as though the old way to do something was completely useless now. It felt like an anti-competitive attempt to railroad the market onto using Chrome when the web devs kept gobbling it up. And now everything is Chrome...
Replying to
@gvenema@fairmove.net @lisamelton@mastodon.social From my experience working on the WebKit team at Apple (2011–2014), it always seemed like Google had an army of engineers working on Chrome and we had a dozen or so people working on WebKit. We just didn't have the workforce to keep up after they forked. There were other contributors but for the most part they were doing platform integrations, not core features. Was kinda depressing.
Replying to
@alsvha@sunny.garden I remember when everyone said "we need to do MapReduce"...
Replying to
Replying to
@davidgerard @dysfun ...this option said +$489.00 a week ago. They're gonna steal my RAM, aren't they?
Replying to
@0xabad1dea@infosec.exchange I've seen them. They aren't that rare anymore, apparently. I only started seeing them once I moved to Washington though; I think their range is kind of limited. Hawks are a lot more common though.
Replying to
@Ashmire @0xabad1dea I'm familiar with the Mechanical Turk. I still cannot believe Amazon decided to name a service after it.
Replying to
@davidgerard @dysfun Laptop has been returned. My RAM was not stolen. This is US service though, not UK.
Replying to
@mjg59@nondeterministic.computer there's a joke here about what UTF stands for
Replying to
@flacs clearly I should send you the most obfuscated version then and you can work your way inwards
Replying to
@0xabad1dea (I thought about approaching him and telling him how much I loved the Game of Life and cellular automata when I was a kid, but I reasoned he'd probably heard enough about that for one lifetime and it was likely one of the less interesting things he'd worked on...)
Replying to
@mjg59@nondeterministic.computer man, PCMCIA cards were so cool. Now everything's a USB dongle with a cable that stops working properly after 2 years and you need to buy a replacement