Mastodawn

We had a fun breakthrough in #netatalk in recent days: the SRP (Secure Remote Password) user authentication method is now reverse engineered and supported by the open source AFP server.

Apple quietly added SRP to the AFP protocol some time in 2010 (our testing indicates OSX 10.7 Lion) but never acknowledged or documented it.

SRP caught my eye since it would offer roughly twice as strong encryption as DHX2 which is the final "official" UAM from Apple.

Luckily, SRP is an open standard and not an Apple proprietary technology: described in RFCs 2945 and 5054. So the reverse engineering was straight-forward, using consumer products that are known to support SRP, then brute force a few dozen potential parameters afforded by RFC 5054.

I did this write-up about the protocol and cryptographic mechanism as a sort of community specification.

https://netatalk.io/spec/SRP_UAM

The upcoming Netatalk v4.5 will support SRP!

Netatalk - AFP SRP User Authentication Method

Netatalk Wiki

nulleric 3d ago

Why, in 2026 and the year of the linux desktop, do we still require users to be added to dialout or uucp for serial/tty access? A papercut based on 1970's-1990's concerns that just dont seem relavant anymore in the desktop/single/nouser vm/container/etc world. I'm sure there' still _some_ that rely on this nuance but might be time for a change.

nulleric Apr 9

Love the customs slip @billgoats

nulleric Apr 6

joshua stein Apr 6

oh cool, the scumbag CEO of stickermule is using the company's (former) customer list to spam his political junk

the unsubscribe link even goes to a stickermule\.com URL

just a reminder that stickermule sucks

nulleric Feb 26

It's #Marchintosh 2026! I've created a thread over on tinkerdifferent to capture all the projects. Reply here or there and I'll keep it updated as best I can.

https://tinkerdifferent.com/threads/marchintosh-2026-projects.5092/

#MARCHintosh #globaltalk #vintagemac

MARCHintosh 2026 Projects

It's (almost) that time again for #MARCHintosh! Use this thread to capture and share them! If you see something or are working on something just reply below as well. If your project is bigger please feel free to make your own thread and tag it with MARCHintosh & MARCHintosh2026! Projects Post...

TinkerDifferent

nulleric Jul 17, 2023

The past few days has been another good reminder that people, sites, downloads can just disappear at anytime.

MacGUI removed all 40k downloads from their site. There is a 2013 torrent but not even close.

A popular vintage forum had multiple days of downtime with a history of loosing data.

vMac's primary author has been gone for 2 years now.

If it's not backed up to @internetarchive - it doesn't really exist.

#VintageMac #VintageComputers

Edit: 3 DVD archive MacGUI Vault is inbound to me.

nulleric Feb 6, 2023

Found something not on the garden just flipping through some disks.

Seems to have its own scsi driver for 68k and supports blind read and write. Could be interesting to try on #BlueSCSI