Posts
5553
Following
349
Followers
548
.

Jarkko Sakkinen

Explained to LinkedIn what mathematicians do as a profession as apparently this was not clear in the first place :-)

#mathematics #openai #linkedin
0
2
4

Jarkko Sakkinen

found some random unidentifed sun glasses while cleaning up my place. now all i is a van, duct tape...
0
0
5
@caesarcattus If it helps you, I personally would have never learned in the first place by reading the art of assembly books above. I'm more like "blackbox learner" when something is way too complex to cope. E.g., if I get a huge pile of source code, the first thing I do is to run tools like strace, maybe some temporary log messages here and sometimes bpftrace. Then I might try to figure next what are "sources" and "sinks" i.e., how it does I/O. Once you do that for a while even something quite messy starts to make sense.
1
0
1
@caesarcattus QEMU is great tool for learning and actually C compiler is too. If I need to learn a new uarch, I usually just compile a random program and look and simplify the resulting code.

With GCC/LLVM you get the assembly source code with "gcc -S -fverbose-asm hello.c".
1
0
1
@caesarcattus ARM version is still quite new :-) i recall it came maybe 2024'ish.
1
0
1

Jarkko Sakkinen

Still useful and also frequently used references in 2026 :-)

#x86 #arm #assembly
1
0
3
@caesarcattus Yeah, try it :-) It does not do much harm being a single binary compiled from Rust but neither is it really usable for anything.
0
0
1
@caesarcattus I don't like Rust style overdone cli TUIs but I'd still except basic some cli ergonomics, like auto-complete when you press '/'.
0
0
1
@caesarcattus I otherwise agree but would exclude FSF despite they do a lot of that too but it is of transparent and aligned with what they say they do.

I've never really grabbed e.g., purpose of Open Source Initiative. It's basically a branding agency making anything that comes from SIlicon Valley appear to be aligned with open source.

I would have really hard time to find a person who would willingly try out Goose. I could almost bet my money that people who picked it have never tried it :-) Screenshot this time really speaks for itself.
2
0
1

Jarkko Sakkinen

Not only did LF pick Jack Dorsey's Goose to their umbrella but also its main discussion forums are Discord and X.

Everything wrong. Together.

https://aaif.io/
1
1
2

Jarkko Sakkinen

Edited 2 days ago
Wow, pretty cool. I think I passed Buildroot black belt test ;-)

I have latest GNOME packaged for Buildroot. The artifacts produced by each build are installer ISO and container images, and the build is fully reproducible.

There's other stuff too like all ostree shenanigans and NVIDIA Container Toolkit but honestly they are like walk in the park compared to GNOME.

#buildroot #gnome #wayland
1
0
7

Jarkko Sakkinen

Edited 2 days ago

tpm2_asymmetric.ko:

https://lore.kernel.org/linux-integrity/ahKKikSt249xjoqK@kernel.org/T/#t

Apparently I trashed subject line in cover letter.

Test program I wrote highlights what it does [1]:

export TPM2TOOLS_TCTI="${TPM2TOOLS_TCTI:-device:/dev/tpmrm0}"

WORK=$(mktemp -d)
trap 'rm -rf "$WORK"; tpm2_clear' EXIT

openssl ecparam -genkey -name prime256v1 -noout -out "$WORK/ec_key.pem"

tpm2_createprimary --hierarchy o -G ecc -c "$WORK/primary.ctx"
tpm2_evictcontrol -C o -c "$WORK/primary.ctx" 0x81000001

tpm2_import -C 0x81000001 -G ecc \
  -i "$WORK/ec_key.pem" \
  -u "$WORK/key.pub" -r "$WORK/key.priv"

tpm2_encodeobject -C 0x81000001 \
  -u "$WORK/key.pub" -r "$WORK/key.priv" \
  -o "$WORK/tpm2_key.pem"
openssl asn1parse -inform pem -in "$WORK/tpm2_key.pem" \
  -noout -out "$WORK/tpm2_key.der"

openssl req -new -x509 -key "$WORK/ec_key.pem" \
  -out "$WORK/cert.pem" -days 1 \
  -subj "/CN=tpm2_asymmetric_test" -sha256
openssl x509 -in "$WORK/cert.pem" -outform der -out "$WORK/cert.der"

TPM2_KEY=$(keyctl padd asymmetric "tpm2_asymmetric" @s < "$WORK/tpm2_key.der")
X509_KEY=$(keyctl padd asymmetric "x509_ecdsa" @s < "$WORK/cert.der")

printf "tpm2 asymmetric cross-verification test data" > "$WORK/testdata"
openssl dgst -sha256 -binary "$WORK/testdata" > "$WORK/hash.bin"

keyctl pkey_sign $TPM2_KEY 0 "$WORK/hash.bin" enc=x962 hash=sha256 \
  > "$WORK/sig_tpm.der"
keyctl pkey_verify $X509_KEY 0 "$WORK/hash.bin" "$WORK/sig_tpm.der" \
  enc=x962 hash=sha256
echo "PASS: TPM2 key signed, X.509 key verified"

openssl dgst -sha256 -sign "$WORK/ec_key.pem" \
  -out "$WORK/sig_sw.der" "$WORK/testdata"
keyctl pkey_verify $TPM2_KEY 0 "$WORK/hash.bin" "$WORK/sig_sw.der" \
  enc=x962 hash=sha256
echo "PASS: OpenSSL signed, TPM2 key verified"

[1] https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd-test.git/tree/overlay/usr/local/bin/tpmdd_tpm2_asymmetric.sh?h=main

0
0
0
@caesarcattus @caesarcattus Yeah, I mean tool was seriously bad. Without sarcasm I can say that it is pretty much what I would expect to get with an agent harness with recognizable LLM rot. It is bad PR for LF too because this great educative example how one should not apply AI tools :-) And great example of what happens when someone not seasoned with R&D goes into AI psychosis (

When people speak how AI replacing software engineers they tend to to get that popular leader/boss meme picture. Even if you work with agents you need to have skills and understanding how to go ground from that control panel and fixup things yourself. In that sense it is pretty much the same as with human participants. I've seen people who a great developers to begin with do good stuff but the difference is that they take mold and make it shine, and not get excited about mold.
1
0
1
@caesarcattus no idea but the comedy writes itself i suppose :-)

Being curious I tried it and it was really bad too.

It feels weird that LF made this pick exactly. I mean traditional it's not the source code but the community around that really establishes a project and there's at least two perfectly good clients that have reached up that level (OpenCode, Pi). And both have sane non-billionaire leadership too. Goose has no mentionable community, and for better or worse nobody seems to like Jack (I don't have an opinion). It's really bad basis to build anything. For me this appears from outside more like business transaction more than anything else.
1
0
1

Jarkko Sakkinen

Things change:

1. 2025: Jack Dorsey's talk was disqualified from FOSDEM.
2. 2026: Jack Dorsey's agent tool called 'goose' is inducted as a Linux Foundation project.
2
0
1

Jarkko Sakkinen

I miss the times when we only had slot machines.
0
0
1

Jarkko Sakkinen

https://github.com/srikanth-mg/riscv-tee-ibex

Cool, some years ago I fixed a bug in page table bootstrap code of Keystone Enclave.
0
0
0
It's at least more of my thing than Eurovision song contest, which I've never listened :-)
0
0
1

Jarkko Sakkinen

Edited 5 days ago
I often listen Google I/O talks while working and it was pretty good this year. It was also like the first sane delivery of how they see the world this year actually from any of the big tech companies. Overall it was also very much aligned with my own thinking, which made me really happy. So kudos for Google for delivering a positive message.
1
0
2
Show older