Dr. Hax's avatar
Dr. Hax
Dr.Hax@hax0rbana.org
npub16v82...eqha
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-) Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle. XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu
Dr. Hax's avatar
Dr. Hax 11 months ago
I managed to get botan (the cryptography toolkit) cross compiled for Win x86-64 (from Linux x86-64). It took all day, but I got it, including even running the test suite under wine to verify it's all correct. Patch submitted to libbotan to make it easier for others in the future. Now I'm trying to figure out why the cmake files in keepassxc aren't able to find my newly created botan-2.pc file that defines how to link to the library, what library and header paths should be included
Dr. Hax's avatar
Dr. Hax 11 months ago
Dr. Hax's avatar
Dr. Hax 11 months ago
Today I got botan2 cross compiling for x86-64 Windows (from Linux x86-64). Why? Because I want to cross compile keepassxc and this is getting in my way. Why do I want to cross compile keepassxc? Because I want to use that code in the signet client to import keepass v4 databases And I want my (Linux based) CI to be able to continue to crank out windows builds. That's why. After Botan, I'm going after argon2, and then others. Oh and I had to build my own compiler because mxe repos are way old. So I'll probably be hitting up their mailing list to find out if someone has the ./debian directory that produced that .deb file so I can give them an updated build. If nothing else, I'd like to at least built it and put it in my own apt repo. Yeah, I'm way down the rabbit hole on this one. And if I manage to dig myself out, I'm going to do it all over again for i686!
Dr. Hax's avatar
Dr. Hax 11 months ago
I am having so much fun with disposable VMs (DVM) in #Qubes, it should be illegal! I'm doing #dev work again today and when I think I have the minimal commands to reproduce an issue, I'll spin up a DVM, paste the commands and make sure I hit the problem I expected. If not, I'll poke around to fix it (install a dependency, update the PATH, etc.) and then repeat. Takes about 8 second to spin up a fresh VM. Very rapid #development!
Dr. Hax's avatar
Dr. Hax 11 months ago
OK, normally when I hear about someone who doesn't know crytpography or Rust writing Rust code and rolling their own cryptographic protocol, I'd almost certainly not going to use their code... but... Wang Lu seems to be the real deal, just picking up these skills along the way. Their highly experimental hardware password manager, which is not open source hardware nor software, sounds like it's a pretty decent design. If it actually does what is described, I am impressed. It'll be interesting to follow along and see if it turns out to be an even more hardcore password manager than the #Signet. Of course, there's no proof that any of this code exists and works, so it could all be vaporware. We won't know unless it's released (in either source of binary form).
Dr. Hax's avatar
Dr. Hax 11 months ago
Productive day today! #gardening - I mixed about a cubic yard of soil & rice hulls, put the rain barrel back in service, and took a first pass at fixingthe gutter #signet - documented using the qt creator IDE, fixed all compiler warnings, and improved the Windows CI/CD build pipeline
Dr. Hax's avatar
Dr. Hax 11 months ago
Not much going on today. No #meshtastic #solar node updates because I'm waiting on the lower gain antennas No #Signet cross compiling updates because I'm busy doing house projects to get ready for gardening. No #gardening updates because the tasks are uninteresting, like level the rain barrel stand and fix the gutter. No production server updates because a.) I was waiting on RAM, and b.) it's boring. No test server updates because I've been procrastinating fixing it ever since it literally blew up on me last time I tried to turn it on. But in truth, all this completely unsexy grunt work is what enables the interesting work. So I soldier on. Getting stuff done. Like a boss.
Dr. Hax's avatar
Dr. Hax 11 months ago
Cross compiling is usually difficult to get set up, but that's doubly true when the target is macOS, square that if it's QT and square it again is it's a different CPU architecture. I'm trying to grind through it, but I think it might be grinding through me instead. I'm attempting to start with the same CPU architecture (x86_64) to minimize the number of concurrent changes. One of us will be more stubborn, and I think I'll eventually outlast the build tool, as good of a fight as they may put up. #development #mac #linux #foss
Dr. Hax's avatar
Dr. Hax 11 months ago
A buddy is playing wotb AI video and so I had him make some videos of @ZEUS
Dr. Hax's avatar
Dr. Hax 11 months ago
I big shout out to the person in AntPool who mined 888888. That was a tricky one to find. 😂
Dr. Hax's avatar
Dr. Hax 11 months ago
Anyone else excited for 888888? 🤓 Yeah, I'm a dork
Dr. Hax's avatar
Dr. Hax 11 months ago
I'm an AI coding skeptic, but I'm willing to be proven wrong. If you think AI can write code, prove it. Challenge: write a CLI program that will list all accounts in a Signet password manager. An existing CLI tool already exists and can unlock the device, the AI just has to implement a task to list accounts. You can use any tool you want, open source, closed, paid, free... I don't want any excuses for why AI isn't up to the task. 😂