Mastodawn

Do I have any followers familiar with Embassy + smoltcp + STM32, and interested in a paid consulting gig? I've got a company seeing dropped / missing packets, and it could be an interesting project + fun investigative writeup.

Michael van Niekerk 🦀 ☕️ ⚛3d ago

TechAltar 4d ago

Android 16 for the Fairphone 6 is here. Still slower than some mainstream brands, but much faster than previous Android rollout. Hope they keep improving!

Michael van Niekerk 🦀 ☕️ ⚛3d ago

LogicalErzor 4d ago

Pinephone Pro Linux mainlining thread

Decided to make a thread on the work I'm doing on the Pinephone Pro and pin it to my profile. Here's the list of things I've done so far:

- https://fosstodon.org/@Logical_Error/115523837605100152
- https://fosstodon.org/@Logical_Error/115863006627226016

Mainlining Guide: https://forum.mainlining.org/t/upstream-pinephone-pro-patches/138

Had to pause Pinephone Pro development because I got demotivated a bit, but hopefully I'll be able to continue in the near future. Stay tuned~

LogicalErzor (@[email protected])

fixing pinephonepro’s build in pmOS im not sure what happened but for some reason i couldn’t do pmbootstrap build device-pine64-pinephonepro --force i got a fix that was merged in now https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7308 im assuming that there was a pmb update that changed the build dir. since pmb doesnt rebuild existing packages, this was a problem waiting to strike on the next ppp build wouldve liked to figure out what went wrong, but got bisecting pmbootstrap and pmaports gives a lot of errors :/

Fosstodon

Michael van Niekerk 🦀 ☕️ ⚛3d ago

Caria Giovanni - Harpocrates 4d ago

Static + dynamic analysis of Signal's APK. The good news first: Signal is genuinely exceptional.

Rust core (libsignal_jni.so), post-quantum hybrid Double Ratchet (Kyber-1024 + X25519), Direct ByteBuffers with immediate zeroing after PIN/username hashing, Intel SGX attestation for SVR — MREnclave verification means even a compromised Signal server can't extract your PIN hash.

But two things stood out:

1. Firebase is always there. Google receives IP + notification timestamps regardless of message content. If you need metadata privacy, Signal still leaks presence data to Google's infrastructure.

2. Certificate revocation endpoints hit http://g.symcd.com in plaintext. An ISP or state-level observer can fingerprint Signal usage from DNS queries and HTTP traffic to those CAs — without touching message content.

Conclusion: strongest crypto engineering in consumer messaging. The attack surface isn't the cryptography. It's the operational dependencies.

Soon the full analysis

#infosec #AndroidSecurity #Signal #privacy #ReverseEngineering #postquantum #mobileforensics

Michael van Niekerk 🦀 ☕️ ⚛3d ago

Johan Peitz 4d ago

🎉 picoCAD 2 is out! 🥳
Model, texture, and animate - in a single lo-fi, easy to use package.
GIF, GLTF, OBJ, and sprite sheet export.
Available now on Steam and Itch!
Check it out! http://picocad.net

Thanks for boosting! ❤️ 🙏

Michael van Niekerk 🦀 ☕️ ⚛Mar 13

If you feel like you're hating life, you're just hating _your_ life.

You are allowed (and able) to change _your_ life.

Whenever there's still life there's still hope. Grab onto something or someone to get you through. Seek help.

Michael van Niekerk 🦀 ☕️ ⚛Mar 10

How South Africa built, and dismantled, its nuclear bombs.

https://www.youtube.com/watch?v=nsTmZNBR3-o

Pelindaba: How South Africa’s Engineers Built Six Atomic Bombs in Secret — Then Dismantled

YouTube

Michael van Niekerk 🦀 ☕️ ⚛Mar 9

Shiz Mar 8

I don't know who needs to hear this, but the Mazda service system has FULLY INTERACTIVE 3D WIRING DIAGRAMS with zoom, rotate and pan 😩

Michael van Niekerk 🦀 ☕️ ⚛Mar 8

The Christ Almighty Blog Mar 8

Back when Ronald Reagan and Walter Mondale were running for president, the 𝘗𝘦𝘯𝘵𝘦𝘤𝘰𝘴𝘵𝘢𝘭 𝘌𝘷𝘢𝘯𝘨𝘦𝘭 ran this. It’s still very good advice. It’s not how Christian nationalists behave though.

Michael van Niekerk 🦀 ☕️ ⚛Mar 7

Tom Marble Mar 2

Dabao has launched!!!

Open hardware, firmware, software from @bunnie !

https://www.crowdsupply.com/baochip/dabao/updates/our-campaign-has-launched

Our Campaign Has Launched!

Today marks the start of the Dabao campaign. If you're interested in open source hardware, security, or trust, I'm offering you a chance to order some of the first evaluation boards for a mostly-open, security-oriented microcontroller. Dabao is an evaluation board for the Baochip-1x SoC, a microcontroller that raises the bar on inspectable hardware, bringing you a system-on-chip (SoC) that you can check from the silicon all the way to the software.

Crowd Supply

LinkedIn	https://www.linkedin.com/in/mvniekerk
Github	https://www.github.com/mvniekerk