Danny M @ dannym @lemmy.escapebigtech.info

🚀 Seen my posts and want more? Dive deep into the issues with Big Tech at

---

Read more

Posts

9

Comments

167

Joined

2 yr. ago

I have not made any assumptions, this has been shared multiple times in different articles which I did not write. As for the Chromecast, I misremembered, it was an Amazon Firestick.

in this case the instruction set is extremely small (and includes open source verilog, so you could even fab it yourself)

quote from the website:

The CPU of the TKey is a modified version of PicoRV32, 32-bit RISC-V running at 18 MHz. Modifications includes a fast 32x32 multiplier implemented using the multiplier blocks in the iCE40 DSPs as well as a HW trap function.

The supported instruction set supported by the CPU is a subset of RV32I. Specifically it includes compressed instructions, but excludes instructions for:

• Counters
• System
• Synch
• CSR access
• Change level
• Trap redirect
• Interrupt
• MMU

The instruction set implemented by the CPU also includes multiplication instructions from the RV32IC_Zmmul (-march=rv32iczmmul) extension. Division is not supported.

Any illegal, unsupported instruction will halt the CPU. The halted CPU is detected by the hardware, which will blink the RGB LED with red to indicate the error state. There is no way for the CPU to exit the trap state besides a power cycle of the device.

Note that the CPU has no support for interrupts. No instructions, ports or logic.

there are use cases, such as security, where you want as few instructions as possible, so a full ARM processor isn't the best idea. You may want to read the threat model page: https://tillitis.se/products/threat-model/

The more you know! I don't follow their blog so I didn't realize this. This is a pleasant surprise and yet another reason to love Mullvad.

I'll use that in the future haha

As the person being accused of this, I'd like to know, too.

Didn’t know about mitra, thanks for sharing!

Regarding Linus’s quote, I completely agree with him and that’s mostly why I asked for feedback; I don’t have the time to work on this myself at the moment, and even if I did I want to hear conflicting opinions on the implementation before I did anything

That’s fair, I mostly came up with the idea because I saw a comment mentioning awards like in Reddit and I’m a huge proponent of paying for FOSS applications and for content online, so that’s why I opened this up for discussion

I really don’t want to turn this into a crypto discussion, if you think there are better alternatives I’m open to hearing about them; I’m mostly interested in rewarding people for their content and paying for instance admins and lemmy developers. You’d be surprised how much you and I probably agree on regarding crypto

I can see your point but don’t you think that monero adds friction? you want something quick and easy that users don’t have to think about

Haha I’m glad that he switched sides honestly, but after listening him talk about his childhood in an interview I’m not even surprised that he did what he did

The specs are literally the reason why people would buy this. It's basically the best device we have available that can be used as a base for devices handling secure computation, or software handling secure computation. Think of a FIDO2 key, or a gpg smartcard, all secure and verifiable

if you program the firmware directly your program can be stored, but it requires you to also buy the firmware writing tool and the FPGA unlocked version of the product (FPGA can be locked after writing it naturally)

This is someone you can never count on to do anything they don’t want to do. Someone who will destroy things if they don’t get their way. Triple letters won’t touch him.

definitely, but people can change

a lot of this was social engineering

people always have a high and mighty mentality when talking about social engineering, most attacks today use some form of social engineering and have for a long time, if not always.

The kid was an idiot and a dickhead. He extorted companies and sim swapped people for his private gain, and was stupid enough to continue his hacking spree while he was on bail for another hack.

Yeah I don't think anyone here disagrees with that; his actions are objectively wrong and as I said, he definitely needs to learn morals and ethics.

Samsung Dex over Miracast (which the news liked to present as some kind of amazing hacking feat)

I mean, duh, the media can't tell the difference between a computer and a toaster, but that's besides the point

He’s violent, damaging property and injuring staff.

I didn't know about this, thanks for sharing. Can I get a source?

I don’t get what this “he deserves a stellar salary” mentality comes from

I'm a firm believer in meritocracy and the importance of rewarding skills. He should still pay a hefty price for his crimes, including jail time, where he will hopefully learn to change his ways, but once he gets out, if he's truly remorseful for his actions and he's willing to have others monitor his device usage activities, I don't see why he shouldn't be hired by a red team

that's exactly my point tho, he needs to understand why what he did was objectively wrong, and needs to understand that actions have consequences, but he's still a teenager, and one with autism at that, there is plenty of time for him to change sides