Richard Hughes

@hughsie
2.3K Followers
552 Following
1.2K Posts
I write free software. Firmware troublemaker.
Websitehttps://hughsie.com/
GitHubhttps://github.com/hughsie

To the people slightly upset that you have to create a user account to mirror the LVFS; this is why -- imagine every AI robot mindlessly doing this kind of thing in a loop.

https://lvfs.readthedocs.io/en/latest/offline.html#mirror-the-public-firmware

Re-implementing the trivial bits of protobuf we use in #fwupd looked like a lot of work yesterday -- but it will mean more firmware updates will just work on Windows and Android. It's also a nice cleanup and one less library we hard-depend on...
Any day you get to remove 2480 lines of code is a good day I suppose.
It would appear that today was the wrong day to do my self assessment tax return.
That's a lot of zeros! 135 million firmware updates supplied from the LVFS and deployed using #fwupd.
Looking pretty good so far! Go to https://hosted.weblate.org/projects/fwupd/fwupd/ if you want to help. Thanks!
The demo is really just showing that two XML files are different, but here's a couple of screenshots for karma.

I've officially launched the #LVFS Sustainability Plan today -- please see https://blogs.gnome.org/hughsie/2025/08/08/lvfs-sustainability-plan/ for all the details.

I’m aware funding open source software is a delicate matter and I certainly do not want to cause anyone worry. We need the LVFS to have strong foundations; it needs to grow, adapt, and be resilient – and it needs vendor support.

Interestingly, the "poison pill" firmware seems to have (accidentally?) stopped the onslaught -- as soon as the IP address gets the 429 status code it completely stops -- and very soon after that (just a few minutes) all the other IP addresses on the ASN just stopped too.

Current status: The LVFS is getting pillaged by an AI bot that's coming from *hundreds* of different IPs with a user agent of "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/91.0.4472.124".

I'm impressed the LVFS handled the load spike, but I'm also planning to add support for blocking by ASN today...