Posts
6528
Following
355
Followers
573
My in-progress (but not yet fully finished) operating system project:

1. https://github.com/puu-os/bootc
2. https://github.com/puu-os/installer
@zenfrt I don't want anything.
0
0
0

Jarkko Sakkinen

Signal is more secure than Protonmail than any of the similar services.
0
0
3

Jarkko Sakkinen

Edited 2 days ago
I don't understand the concept of secure email. If you want it secure, use PGP 🤷 Otherwise, it is insecure.

If (which is a long stretch) a government wants to spy on you, they don't have to target your inbox. They target SMTP nodes, root routers or other infrastructure assets. It's more transparent, trivial and invisible. If I send an email without encryption, I send it with an assumption that anyone could read this.

#email #infosec
2
3
7
@timojyrinki Do you know if there is free alternative for 6404T? A random question but you seem to be always knowledgeable about the alternatives :-) Apollo Lake based bought in 2018. No need to do effort on this, just poking by a chance.
1
0
0

Jarkko Sakkinen

Edited 3 days ago
93% drop in the variance of the time spent on a single keyring_garbage_collector() call with only 2.2% increase in the total time spent on processing the full serial tree 🥳

The serial tree is now processed in 64 keys per invocation chunks instead doing the full traversal at once. The combined average time on my laptop's CPU (== shitty Zen 2) is 0.154 ms per chunk.

I guess this should put an end to the reoccuring theme of workqueue lockups (and LLM bug fixes that come along with it).

https://lore.kernel.org/keyrings/20261029172918.2118600-1-jarkko@kernel.org/

#linux #kernel #keyring #ebpf #bpf
0
0
0
@timojyrinki probably could be easily rooted tho but I will rather complain about slop :-) And find these glitches.
0
0
0
@timojyrinki And it's my first NAS
1
0
0
@timojyrinki I bought this in 2018.
1
0
0

Jarkko Sakkinen

Edited 4 days ago
Other than AI slop appearing in the Asustor's ADM, their security is broken too.

Or at least the password dictionary attack block is not exactly working :-)

#infosec #asustor
1
0
0

Jarkko Sakkinen

Edited 4 days ago
Probably in most countries once few years pass by, slop is the standard of public IT services. What is cheapest wins despite the quality.

In private sector the market balances its use.
0
0
0

Jarkko Sakkinen

Edited 5 days ago
I can feel that I'm somehow "back" with actual focus into kernel for the first time this year.

And I only noticed it now when looking back. During the course of the Spring there was a period when the shit happening around was so crazy that it really put some weight on my mental capacities at least.

I think it was a smart decision to remove "Assisted-by" tag because it actually encourages for patch spamming, and everyone in the field knows this. We know how to dig out the dirt ourselves and removal of that tag actually underlines the responsibility of an invidiual contributor more than anything else.
0
0
1
Sashiko won once with checkpatch.pl --strict error but yeah, it was still a loss :-) rules are the rules
0
0
0

Jarkko Sakkinen

Me vs Sashiko 4-1
1
0
1

Jarkko Sakkinen

Sent a kernel patch: "KEYS: key_garbage_collector(): process in chunks"

https://lore.kernel.org/keyrings/20261027235820.2002072-1-jarkko@kernel.org/
1
0
0

Jarkko Sakkinen

At least I got two additional 4 TB WD drives for my NAS so hooray for RAID-5 / EXT-4 with four drives :-)

And f*** Amazon.
0
0
1

Jarkko Sakkinen

Edited 5 days ago
I have a fix already that can be formally said to actually fix this bug but I can't get over it before I have A/B test that is fairly reliable: https://syzkaller.appspot.com/bug?extid=c15de43f1e7fffbb7b9b

It's still cool to show with and without...
0
0
0

Jarkko Sakkinen

Edited 6 days ago
Landstrip 0.20.x was purposely a large feature pack and I've been fixing what broke down since. I thought that it is better to do one such major push and then just focus more on stabilization (up until one day there is 1.0). Have some patience please :-)

Up until 1.0 I neither call Landstrip as "secure" nor stable but 0.20.x changes definitely will eventually start to decrease the variance on both of these aspects.
0
0
0

Jarkko Sakkinen

I've been using C++ a lot lately and the main benefit has been that I have much easier time to keep the language in my memory, given that the spec is more stable than e.g., in Rust. And by following Google's C++ conventions I have single spec where to lookup for appropriate patterns.

It's much lower barrier to take the text editor and write some code.

One project where I've use it is the installer for Puu OS. The main stimuli for switching from Rust to C++ came through the realization that all the filesystem crates that I was interested in were vibe-coded by some unknowledgeable person subcontracting the work for Claude 🤷

That was just way too much supply-chain risk for me to accept. So I did it and rewrote the installer in C++. (using Google's conventions).
0
2
2
Show older