claudius

gsuberland, 1 month ago (edited 1 month ago) to random

yesterday's work: a discrete inrush current limiting circuit.

simontatham, 1 month ago to random

Centuries after Sauron's defeat, Middle-Earth developed motor racing, and Gandalf found his new dream job: driving the safety car.

Unfortunately, he didn't think of applying for that job until he needed a career change, having been fired from the prestigious position of Head of Examinations at the University of Gondor.

blinry, 1 month ago to random

Mandelhörnchen!

Mastodon, 1 month ago to mastodon

#Mastodon forms new 501(c)(3) non-profit entity with new board of directors in the United States to facilitate tax-deductible donations and in-kind support:

https://blog.joinmastodon.org/2024/04/mastodon-forms-new-u.s.-non-profit/

arstechnica, 1 month ago to random

Report: Switch 2 Joy-Cons will attach via magnets

Design choice may have implications for current Joy-Con compatibility.

https://arstechnica.com/gaming/2024/04/report-switch-2-joy-cons-will-attach-via-magnets/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

gsuberland, 1 month ago to random

if anyone's got some spare time, I'd very much appreciate some technical review of the mk2 CO2/AQI sensor board design for EMF Camp.

full schematics, top/bottom copper, renders, and BoM are in the PDF: https://poly.nomial.co.uk/junk/CO2SensorBoardMk2_20240426.pdf

relevant info:

• ESP8266 devboard plugs in underneath, board is either powered by USB Micro on devboard or USB-C on mainboard
• fab & assembly by JLC
• 4L board, inner layers are solid ground planes
• 4P header is for SSD1306 OLED

simon, 1 month ago to random

I'm considering building a feature for a SaaS app that lets you "invite" a customer support person to be able to see your private data in order to help you debug an issue - where everything they look at is logged in an audit log that's visible to you and you also get to see when they "resign" from their temporary access

Is this a common feature? Has anyone seen good implementations of this kind of pattern before?

mialikescoffee, 1 month ago to infosec

Is there a comprehensive list which sites and services are already supporting passkeys?

#infosec #passkey

DerMolly, 1 month ago to random German

@piko Ich würde gerade von einem Bekannten auf deinen Python Kurs und dabei insbesondere auf die letzte Folge über Markdown und HedgeDoc hingewiesen. Und ich wollte mich für die lieben Worte zu HedgeDoc bedanken.
Ich weiß nicht ob das relevant ist für deine Studis, aber technisch gesehen ist das mit den Noten etwas dass nur (also vermutlich) HedgeDoc kann. Für alle anderen wäre das nur ein Codeblock mit abc-Code. Vermutlich ist das auch nicht so wichtig, ich wollte es nur mal angemerkt haben…

azonenberg, 1 month ago to random

Anybody know of tooling that can read a JPEG-compressed TIFF file that has >2^31 pixels?

ImageJ uses signed 32-bit pixel coordinates and fails to load it with a negative array index exception, GIMP complains about something related to the JPEG coding using the wrong subsampling factor or something. "convert" complains about an invalid image size.

azonenberg, 1 month ago to random

Coming soon to a youtube near you...

(Also, anybody have suggestions on a decent peertube host I can try putting some of my EE content as well?)

thomasfuchs, 1 month ago to random

People, always: Mozilla, please just make a web browser

Mozilla, 2014: here’s a phone!
Mozilla, 2018: all in on VR!
Mozilla, 2022: let’s do crypto!
Mozilla, 2024: hurrah AI!

claudius, 1 month ago to random German

Bei Congstar gibt's auf der Website jetzt keinen offensichtlichen Login mehr. Man verweist dort auf die App. Erst über den Telefon-Support erhält man dann gnädigerweise einen Link zugesandt. Ich kann ohne Weiteres im Moment nichtmal meine Rechnungen herunterladen.
#AppZwang als Spezialfall des #DigitalZwang /cc @digitalcourage

gabek, 1 month ago to random

I noticed the company who wanted to add their service directly into Owncast, and I said no, started releasing their own version of Owncast with their own changes in it to support this use case.

I'm not sure how to feel about this. It's kind of a fork, but it's really just another release of Owncast by somebody else. They're releasing something called Owncast with functionality and decisions that have nothing to do with the real Owncast. It specifically says stuff like "Owncast does X", and Owncast does not do X, and will never do X. Only their changes do X.

I fear this may confuse people. If something goes wrong with their version of the software, people are going to ask me for support, and might make the real Owncast look bad. But I don't know if this is wrong, or if this is completely acceptable. It's open source, and the name "Owncast" isn't owned by anybody, as Owncast is an open source project, not a company. So I guess they have the right to do whatever they want and call it Owncast.

But it feels wrong, and it seems like really bad things could come of this.

piko, 1 month ago to random German

Tanze Django die ganze Nacht!

azonenberg, 2 months ago to random

Thinking more about firmware update mechanisms and provisioning for the trigger crossbar (and my future open T&M projects).

I want something that is freedom preserving but also secure (i.e. ensures the owner can do whatever they want and outsiders are kept out). Thoughts so far, open to suggestions:

• Out of the box, serial console is the only administration interface and is wide open (no login required), and the instrument is not reachable via network.

• Once you log in via serial the first time, you can configure static or DHCP IPv4/v6 addresses and add a SSH key (or several) to enable SSH administration. There will be, by design, no support for password login.

• Serial console may support password locking in the future for console concentrator type use cases, but generally speaking physical access implies you are the owner or authorized by them. You have access to all of the analog/RF signal ports anyway. JTAG/SWD on all devices will be left open for advanced users making custom firmware.

• SCPI and waveform data will be unencrypted as is industry standard for performance, but may eventually support IP-based firewalling. At some point in the indefinite future I may support a SCPI-over-TLS control port but this is not on the near term roadmap.

• Firmware updates will be performed by SFTP'ing a binary to a magic path (one path for each updateable MCU/FPGA in the system). No rollback protection or authentication required other than having a valid SSH key for the admin interface.

• At some point in the future I may separately sign update images. If so, access to the admin interface will allow you to remove upstream signing keys and/or add your own. This is explicitly not intended as a DRM mechanism, it's to allow users to ensure their images haven't been tampered with. There will be no secure boot (verification of images each power up), only secure update (images verified before being written to flash or before marking the flash partition as bootable)

Does this seem reasonable?

drewdevault, 2 months ago (edited 2 months ago) to random

Quick FOSS legal literacy quiz

Imagine the following situation: your project is MIT licensed. Someone takes the whole project and white-labels it (changes the name), then sells it commercially without providing the source code or sharing any of the sales revenue with you. They include "Copyright <your name>" and a copy of the MIT license in the "about" page of the software.

Is this allowed?

azonenberg, 3 months ago to random

Assembling the trigger crossbar board over lunch.

Not thrilled with the paste print quality, very inconsistent. the top left corner was way too thick as the board flexed during printing, the middle BGA skipped some pads, and the WLCSP in the bottom right was near perfect.

These big boards bend too much in my paste fixture, I need to find a way to prevent that before I do any more boards of this scale.