Today I joined a very exclusive club. The club of people who have been dragged off stage at
@defcon
from the talk there were meant to participate in. Thanks to all who then came out to my outside talk. Glad I was able to answer all question. It was fun.
Yup. This volunteer firmware writer (me) made the fix from his laptop in the plane on the way to defcon. And was then dragged off stage during badge talk. Yup…
#defcon32
Badge update: Thanks to everyone who has reached out to us about the DEF CON 32 badge. We are aware of the save issue and a fix is incoming. Later today we'll have a patch and some instructions for you at . We'll keep you posted in these spaces.
@awr_hey
You misspelled “that actually works, is supported on every architecture under the sun while also not getting in your way unnecessarily, and is the language that ALL SDKs ever ship in.”
Playing with the world’s tiniest camera! It is so small that the data sheet lists dimensions in µm. You can see it there in the baggie - the tiny black speck. Please forgive the poor color quality in the video. I was too lazy to implement proper de-bayering. 320x320x10bpp
@0xDISREL
@defcon
Joke is on them. They have no contract with me. None. They have no rights to my firmware. DMCA notice may be incoming. Still deciding.
@awr_hey
No, no idea what you are talking about. Basically, every architecture out there that has a compiler of any sort, has a compiler for C. There are indeed some that are only programmable in assembly.
Everything that has a compiler, has a C compiler
@elaifresh
@litindustrial
Uh huh…
I personally know a person at Google who got ranted at in a team meeting for taking a vacation to Hawaii. Apparently white people shouldn’t go there because that’s colonialism. After that event, my weekends were always “fine” and interests were always “sleeping”.
@briandstone__
Posts like yours make my head hurt. 45KWh/9days averages out to a 312W draw constantly. Running a few cameras and recording to a USB stick should not use 300 fucking watts! It should fit into 3W at most.
About this mess: Entropic has repeatedly offered to published their entire comms history with
@defcon
. I am also happy to do so. Defcon has not offered. Conclude what you wish from that.
@emilyldolson
@googledrive
I always did say that Franz Kafka never died. He is semi-retired working in google’s PM org, occasionally consulting for the UX teams as well.
A while ago I made one of these as a present for my mom. Now I finally ported my code from ARM to xtensa to allow me to run it on inkplate10. Generates a new random image every 8h. Battery lasts a year. Inspired by the “shanshui” project, but not using its code (it was too slow)
Bad news: Now they flagrantly violated our NDA and posted this without asking. Classy.
Good news: it clearly shows that we delivered the final product.
Better news: We were always planning to open source, just, ya know, consensually.
Pro tip to future “secure boot” designers. TOCTOU is not just a funny way to misspell “toucan”🦜 but also likely the sword you’ll die on if you try to get too clever. This message brought to you by a now-unsecured Cortex-M4 based mcu from a well known company.
@darkswordsmantv
@0xDISREL
@defcon
For adding an Easter egg crediting the hardware company that designed the badge haddware and then had their name removed from plastics and uninvited to the badge talk. Defcon saw Easter egg and told me my attendance in the talk is also cancelled.
I don’t usually do product endorsements, but feel free to consider this my official professional recommendation to use
#rp2040
over almost any other microcontroller in almost all cases.
Here is how it is connected (2x2 bga 0.4mm spacing). 10x magnification. The camera itself is hidden in one of the holes on this protoboard, where the four wires meet.
@max_deboosted
@cchayer
@defcon
I didn’t want to resist. The security guards and I have no beef and I don’t want to hurt them or have them hurt me. They are just doing a job. Clearly they can overpower me. Why test that ?
@Cyberipman
@defcon
There are photos of it all over Twitter. It was a rainbow colored screen with the logo of the company that did all the hardware for the badge and was then uninvited from the badge talk and had their name removed from the plastics.
@lukeweston
@tdsepsilon
"NEC_RGB_SGA_FOV120_F4.0" by ams OSRAM
There is also a B&W one with the same resolution, but the one I am playing with is the color one. $84 ea:
@medus4_cdc
@glumDumpst3rPro
@defcon
DEFCON never had any contract with me. I worked for free under the understanding that I get to be part of the badge talk. Entropic did the hardware. Obviously that needs to be paid for.
I didn’t get to talk, and I never granted defcon any license to my binary or code. DMCA :)
@d_feldman
False. Latency depends on connection establishment parameters and can be as low as 7.5ms. Source: a full-blown case of PTSD from working on Bluetooth for years.
@ashleevance
Has anyone considered parenting? Somehow my parents managed to teach me that drugs are NEVER a good idea. One could argue that this is evolutionary pressure FOR good judgement. A rare one nowadays.
@202accepted
They never shut it down or even came up to me. They just menacingly watched from afar as I stood on the public city sidewalk and signed badges.
The update is read from SPI flash, hashed, and the signature is checked. If it all matches, the update is read again over SPI, this time for purposes of flashing to internal flash. ☠️
@medus4_cdc
@glumDumpst3rPro
@defcon
I stand by what I did. You cannot remove credit from people and in-invite them (they were supposed to be at badge talk too)
This is
#zbs243
aka
#sem9110
- a custom Samsung chip with NO documentation of any sort used by SoluM ESL price tags. Shown here fully reverse engineered, with custom firmware (supporting 6 colors) and my wireless protocol! Write-up and details soon!
@yannmasoch
@twostraws
Display refresh rate is not the same thing as camera-to-display latency. Even a 1000000Hz display would make you dizzy if it took 100ms to reflect the state of the outside world
@averyhatestwt
@legitleavitt
@the_transit_guy
Apple MAKES you come to the office. THAT induces demand, not the existence of a garage. Trust me. Nobody is there just to experience the amazing garage!
@shuttle_dev
First of all, system programming is in C and not C++ (excepting iokit). Second of all, C has outlived plenty of “X will replace C”. It’ll outlive this one too. Most people’s masochism itch is scratched enough by bad datasheets - they don’t need a naggy compiler too.
@mattjay
Why would such photos need to exist? When I was getting surgery done on my nose, they attempted to take some photos. I said no. They said they always do. I said “that is a fascinating story, and you should consider an adaptation for the stage.”
@jmtame
You don’t stick this into a computer. You stick the end into a USB c cable. It then acts like a serial port and you can log into Linux running on it
@agent_duckman
@medus4_cdc
@defcon
They never approved anything, never asked to, I don’t believe they ever tested anything. The last change I made for them was broken. I made it at a time when I couldn’t do testing and I asked them to. That change was responsible for saves not working until I pushed a fix today.
This takes two minutes of realtime to generate and draw on the
#rp2040
. Timelapsed to save you the time. It is a different image each time - algorithmically generated.
@dieworkwear
If only there was some way a majority of people could work from some other location. If only a way existed to do video calls and remotely access machines. We could save hours of commutes and a lot of CO2. We could call it “work from home”. What a world that would be…
I don’t want to live on this planet anymore. While some of us work hard to give you faster OSs and libraries, optimizing every corner of your kernel, others of us do…this…
Node 20 allows you to compile your app into a single executable along with the entire Node.js core so you can run your apps on systems where node isn't installed, or your don't trust the system version.
I am under no NDAs. Here is one of the early emails. Project is clearly described as risky and very time-constrained, with many possible things that can go wrong and cost more money. (I am on this email chain, so no NDAs are broken here)
<defcon-email-1.png>