|
Alyssa Milburn
@
noopwafel
The Netherlands
|
|
dorky hacking stuff and ⚡glitches / 🏳️🌈 \ she/her / loves people more than tech \ PhD @vu5ec / breaks things \ collects NDAs and lengthy embargoes 😑
|
|
|
451
Tweetovi
|
326
Pratim
|
962
Osobe koje vas prate
|
| Tweetovi |
| Alyssa Milburn proslijedio/la je tweet | ||
|
Revelation Space
@revspacenl
|
4. velj |
|
Something happened. pic.twitter.com/gblpUGjJ0u
|
||
|
||
|
|
Alyssa Milburn
@noopwafel
|
2. velj |
|
Thanks for the hint, maybe I should have tried pyvisa.. any idea if performance was reasonable? Turned out the USB on the Rigol is just broken (fw bugs), but last night I hacked github.com/pklaus/ds1054z to use raw sockets instead of vxi11, and now that works OK (~3s per trace).
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
1. velj |
|
Tried using Sigrok w/Rigol DS1054Z at @revspacenl to collect traces, but failed. Any ideas on s/w to get sample data after a trigger? Or better to write something myself? I can turn knobs, but I need the data (synced to triggers). Ended up resorting to the HorrorScope. It worked!
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
30. sij |
|
It's all about context, it's so obvious once someone points it out, but.. :)
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
29. sij |
|
last night I was looking at hand-soldering LGA-16 (basically QFN, right? sob), this tweet seemed like a good joke. then I went down the rabbit hole and saw that LGA packages slowly add pins and turn into exactly this kind of ball-less BGA thing, rather than staying QFN-ish :o
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
29. sij |
|
If you want to be sure of company, potential visitors (or participants) can also drop into IRC first and make sure someone else will be around!
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
28. sij |
|
Looks like a low-grade CC-ish evaluation strategy, with a focus on documentation and processes, with some fuzzing thrown in but no code review (or even source available)? Better than nothing, but there's always going to be obvious stuff missed even if the vendor isn't malicious..
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
28. sij |
|
See, doing it *without* TSX would require a different PoC and so it would clearly be a completely different vulnerability 😁
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
27. sij |
|
When is #RIDL really going to be disclosed?
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
25. sij |
|
My understanding is that all the @HotelHacker tickets sold out a long time ago :(
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
25. sij |
|
Any suggestions for realistic partial/transition approaches for firmware-ish code like ME? :) I've seen so much of that kind of vendor firmware, full of security issues caused by hardware interfaces/memory layout/etc chaos which I have *no* idea how they'd even start modelling.
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
24. sij |
|
My first use of the @revspacenl laser cutter: PCB stencil for the HorrorScope. The edges are a bit melted so it's not smooth on the top side - and I didn't flip the SVG - but it looks usable otherwise. (The damage at the top is due to power level testing on a nearby area). pic.twitter.com/MAcBuNmKh2
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
21. sij |
|
Not going to try doing BGA (even with nice stencil) until I'm comfortable with doing simpler PCBs.. @revspacenl 10th anniversary celebration is this weekend, so even though I have all the parts now, first attempt at a Glasgow board will probably not happen until next week. :(
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
21. sij |
|
First attempt at a simple PCB in reflow oven did not go very well. Next time, need to double-check the reflow profile (oops), and be more careful applying the paste (which I already knew). Also see if I can make stencils with vinyl or laser cutter.. Learnt lots of things though!
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
20. sij |
|
Where is the Blåhaj?
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
20. sij |
|
My @NS_online journeys from HS to Zuid seem much flakier in the last few months. Today, do I follow the planner, go via Leiden and hope the suggested (short) train from Leiden to Zuid actually runs, or do I pay extra for the slower journey via Rotterdam? Let's try via Leiden..
|
||
|
|
||
| Alyssa Milburn proslijedio/la je tweet | ||
|
|
Revelation Space
@revspacenl
|
20. sij |
|
Nog 38 plekken voor de hoera10jaar-BBQ. Sta jij al op de gastenlijst? Aanmelden kan op onze wiki of via IRC.
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
19. sij |
|
Why do you start this at 1am CET 😢
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
16. sij |
|
I sometimes find myself hoping that there are secret bonus points counted somewhere when the time consumed dealing with paperwork / calls / meetings / drama eclipses any bounty award. (But as others have said, don't overdo it, just make sure what you submit is clear/complete.)
|
||
|
|
||
|
|
Alyssa Milburn
@noopwafel
|
15. sij |
|
And they're always doing more and more interesting things in more and more interesting areas!
|
||
|
|
||