Mäh W.

@maehw@chaos.social
359 Followers
732 Following
3.5K Posts
👨‍💻 I am interested in wired & radio communication, DSP, (embedded) software dev & engineering, FOSS, reverse engineering, IT security, space, programmable and non-programmable bricks, old and new computer technology, robots, machine embroidery & other things. Living in 🇩🇪. Speaking 🇩🇪/🇬🇧/💻 and understanding a little bit of 🇫🇷.

@tjw On the day Opteron was supposed to tape out, a colleague discovered a logic bug. After some analysis, we figured out we could fix it by disconnecting a wire from one gate and attaching it to another. But running through or design flow would take days, and the ripple effect of changing connectivity could cause more problems. So I loaded the chip mask into VIM and modified the polygons directly, then we taped it out.

Don’t remember for sure, but I don’t think we told management 🙂

@GuyBirkin Nice photograph! "Crown shyness" came into my mind: https://en.m.wikipedia.org/wiki/Crown_shyness
Crown shyness - Wikipedia

I reverse engineered the firmware loading utility of a $17 beauty salon spectrophotometer to load the firmware of its "big boy" sibling:
https://adam.zeloof.xyz/2025/07/10/x-rite-pantone-spectrophotometer-unlock/
A few years back I did some reverse engineering on the original Alesis MIDIVerb. I've released the design materials and source code that came out of that effort here: https://github.com/emeb/MIDIVerb_RE
GitHub - emeb/MIDIVerb_RE: Reverse-engineering the MIDIVerb audio effects processor

Reverse-engineering the MIDIVerb audio effects processor - emeb/MIDIVerb_RE

GitHub

Y'all remember that lace safety vest that a cyclist was wearing a while back? Everyone sent it to me because #Lace .

I had no idea where it came from, but I loved it. Recently a vendor of them popped into my feed. I decided to try one to see if it was legit.

It's very nice. I'm not selling them, I'm not pushing them, I'm just saying if you like to lace in safety now you can....

I'm kind of impressed with the quality.

Kollege hat darauf hingewiesen, dass quasi alles an #Lötpaste von #AliExpress & Co verschwunden ist. Jemand auf dem Schirm, ob sich da was geändert hat?

I found a very nice printable addon for my #bicycle 😁☺️ #citybiking

https://www.printables.com/model/512383-clamp-for-cyclists

@lethalbit Here you go. I just remembered I put a function like that into the gerbonara cli.

This is the hardest message I have ever written.

Does anyone in have a lead on a company that would be willing to sponsor a web development technical lead?

I am open to most Euro, Japan, and Oceania.

My German is bad. My Japanese is a bit better. I would love to get better.

It seems like things are going to be no longer safe for my family.

Help me.

Please boost. 🙇

Edit:

I want to thank everyone who has boosted, replied, and offered advice. Thank you so much. I have much more to go on, and much more to learn.

Everyone. Please stay safe, and keep your family and friends close.

Thank you all.

#fedihired

I feel like I know at least one person for each of these options...
×

I haven't yet tried "International Postcards" playing mode. Let's try it. I'm curious about the connections that does.

For that mode I start a single player game but add an Blue International Tunnel.

I've sent a train into the Blue Tunnel and... nothing on the network side. I see... that train had no postcards on it, that's why.

This map doesn't even have a post office, so I'll create a simple test for this next.

#games #pcgaming #trains #LEGO

The videos below show creating a postcard and a train picking it up and going into a Blue Tunnel. (Note the bad lag in the videos is from the video itself. There's no lag in the game.)

Now there's network traffic. See the #Wireshark screenshot below.

First there's a DNS resolution over UDP of the domain loco.legomedia.com . There's an IP in the response! It's 194.216.90.10 . This IP is from AS702 Verizon Business and it's located in the UK. I've checked #Shodan and there's nothing seen open for it. I'm surprised an FQDN that's clearly specific to a game still has a specific IP associated with it. I write "specific" because legomedia.com or www.legomedia.com resolve to 62.199.219.133 , so this is not a wildcard resolution.

After the DNS resolution, there's a DirectPlay Enum Sessions message sent to the resolved IP over TCP and destination port 31415. There's no response even after TCP retransmissions. The same sequence happens twice with around 50 seconds difference.

#games #pcgaming #trains #LEGO

Oh my! I wanted to do a last test before I wrapped this, and it was successful!

I could not send trains so far. But I have a good grasp of the map layout update messages. So I tried to send one of those. And it worked!

The video below shows me sending a message that alters the color or 4 tiles in Sarah's map overview as seen by John. I set 4 tiles to 0x02030507 (green, brown, black, gray). Then I increment the counter (message ID?) across the 3 packets (from 0x0e to 0x0f). Then I send the messages. You can notice on the right side that 4 tiles change color on Sarah's map! Then I proceed to change them back to colorless (0x00).

Although this result is simple it's great because it gives me confidence I can send messages to the game, and allows me to reach some conclusions. Namely:

  • the source IP of the packets is not important. I get the same result by spoofing Sarah's IP or by not doing it
  • the counter in the message must be exactly the next one for the message to be accepted, i.e. if the previous message was say 0x0e, we must send 0x0f next. Other values seem not to work

#games #pcgaming #trains #LEGO

I've iterated bytes from 0x00 to 0xff for each tile and these are the results in terms of colors they produce.

The image below was produced by interspersing incrementing byte values with 0x00 for ease of counting tiles.

The color names I took them from colorhexa.com .

0x00: transparent
0x01: ?? (very dark grayish orange, 686050)
0x02: nature (dark lime green, 008000)
0x03: buildings (dark orange [brown tone], a87430)
0x04: ?? (pure (or mostly pure) blue, 00a0f8)
0x05: track (black)
0x06: ?? (dark grayish lime green, 909490)
0x07: pavements (very dark gray, 505050)
0x08-0x1f: ?? (grayish orange, d0c0a0)
0x20-0xfe: ?? (light grayish lime green)
0xff: ?? (bright magenta, f848e0)

#games #pcgaming #trains #LEGO

@goncalor I have no idea what any of this means, but that’s one cool graphic.
It's been really interesting reading this process; thank you for posting these.

@goncalor
@goncalor
Sounds like your next task is to point loco.legomedia.com at a local machine (via hosts file will be easiest) and spin up a simple server on that port and start playing with responses. Damn shame the real one isn't there any more to capture.

@robert yeah, I thought about doing that, but haven't tried. Since I saw the DirectPlay message I suspect the protocol will be pretty similar if not equal to the one used among players on LAN.

I could try just to point an International Postcards session at a multiplayer session server and see what happens...

@goncalor
It sounds likely.. Is there any indication in the game that you need to create an account to use it? If so, that might require some form of sign-in.
@robert no, there's no accounts at all here.