H4 Weekly Notes 聚會手記

# H4 Weekly Notes 聚會手記 ###### tags: `聚會手記` `meeting journal` [共筆目錄](https://hackmd.io/@h4/index) [官網目錄](https://www.hackingthursday.org/weeklynote) [線上Discord](https://discord.gg/7gpSktcbJQ) ## 活動照片 <iframe src="https://photos.hackingthursday.org" width="100%" height="440px"></iframe> # 2022-12-01 ## flypie - wgs84 - epsg 4326 - epsg 3857 ## Pellaeon - https://ghidra-sre.org/ # 2022-11-24 ## FlyPie - https://bellard.org/quickjs/ - Fabrice Bellard - https://hackmd.io/@FlySkyPie/S1s_YcKIs ## Pellaeon - https://github.com/hexway/apple_bleee - https://github.com/furiousMAC/continuity ## Mat `make -n -p` ## 哲佑 # 2022-11-17 ## 哲佑 - https://zh.wikipedia.org/zh-tw/伪随机数生成器 - https://zh.wikipedia.org/zh-tw/梅森旋转算法 - https://zh.wikipedia.org/zh-tw/线性反馈移位寄存器 - LFSR-G16 - 之前真的有遇過 uuid (ver 4) 有衝突(生成到同一個)的狀況 - 真的很要緊的，建議不要用 uuid - uuid 是有可能會衝突的 ## Mat - 之前測過 sha256 比 sha128, sha512, 跟 md5sum 還快 ## Pellaeon - `trace_amd_pstate_perf` 是 macro ，來自 `TRACE_EVENT(amd_pstate_perf` # 2022-11-10 ## FlyPie & Mat - Q: 什麼是 FRP? - https://www.samsung.com/nz/support/mobile-devices/what-is-google-frp/ - Q: 如何跳過 Android 的 FRP (Factory Reset Protection) ? - https://www.youtube.com/watch?v=rqTfx8WkSro - Q: 查出對應型號 - Model: `TB-8504F` - Production Name: "Lenovo Tab 4 8" - TWRP: https://forum.xda-developers.com/t/twrp-and-root-for-tab-4-8-10-plus-tb-8704x-f-v-tb-x704l-f-tb-8504x-f-tb-x304l-f.3664407/ - LinesgeOS 18.1: - 刷機指令參考自: - https://forum.xda-developers.com/t/twrp-and-root-for-tab-4-8-10-plus-tb-8704x-f-v-tb-x704l-f-tb-8504x-f-tb-x304l-f.3664407/ - image file: - https://forum.xda-developers.com/t/rom-unofficial-11-tb8504f-x-lineageos-18-1-for-lenovo-tab4-8.4316701/ - 注意: 因為 model name 的差異，所以需要打 patch 如下: ``` --- ./META-INF/com/google/android/updater-script.orig 2022-11-10 23:44:27.116433091 +0800 +++ ./META-INF/com/google/android/updater-script 2022-11-10 21:12:03.613775716 +0800 @@ -1,8 +1,9 @@ assert(getprop("ro.product.device") == "TB-8504X" || getprop("ro.build.product") == "TB-8504X" || getprop("ro.product.device") == "TB-8504F" || getprop("ro.build.product") == "TB-8504F" || getprop("ro.product.device") == "tb-8504x" || getprop("ro.build.product") == "tb-8504x" || + getprop("ro.product.device") == "tb_8504x" || getprop("ro.build.product") == "tb_8504x" || getprop("ro.product.device") == "tb-8504f" || getprop("ro.build.product") == "tb-8504f" || - getprop("ro.product.device") == "tb_8504" || getprop("ro.build.product") == "tb_8504" || abort("E3004: This package is for device: TB-8504X,TB-8504F,tb-8504x,tb-8504f,tb_8504; this device is " + getprop("ro.product.device") + ".");); + getprop("ro.product.device") == "tb_8504" || getprop("ro.build.product") == "tb_8504" || abort("E3004: This package is for device: TB-8504X,TB-8504F,tb-8504x,tb_8504x,tb-8504f,tb_8504; this device is " + getprop("ro.product.device") + ".");); ui_print("Target: Lenovo/TB-8504X/TB-8504X:8.1.0/OPM1.171019.019/8504X_S001031_191204_ROW:user/release-keys"); package_extract_dir("install", "/tmp/install"); set_metadata_recursive("/tmp/install", "uid", 0, "gid", 0, "dmode", 0755, "fmode", 0644); ``` 在 `adb sideload lineage-18.1-20221022-UNOFFICIAL-TB8504_patched.zip`，卡在下述訊息而沒有進一步動靜: ``` Patching system image unconditionally... ``` 據論譠找到一些可能的解法: - 可能1: 跟 filesystem format 有關，在指令執行前，先作一次 wipe data 或 factory reset 可解 - 可能2: 跟 lineageos image 本身有關，換個 image 就好 - 可能3: 跟 ROM image size 有關，好像要超過某個 size 才會 pass. - Q: 關於為何 adb sideload 輸入的是 zip 檔，而非 `.bin` 或是 `.img` 檔? - Mat 有寫一篇 blog 說明這個問題: https://6bcf7279.info/2022/10/11/d41d8cd9/ # 2022-11-03 ## Neal - https://rockylinux.org/ ## juujuu - solidity => 用來 create blockchain - refactoring an existing blockchain base on c++ and open sourcce. - Adding tests ## Pellaeon - Perfectto , 可以測量跟顯示 cpu freq 的狀況 # 2022-10-27 ## FlyPie - 投影片用 Sozi 作的 - Q: 投影片 source => No - 鋁罐回收，壓罐器 - 氣壓缸 - Arduino - 鋁，熔點 660 度，用電加熱 - Q: 幾瓦 => 印象中是 15A x 110V => 約 1650 W - 測 PID - PID 的由來 => 跟水手有關 - 用 Qt 寫 GUI - 手邊剛好用撿到的水冷器，幫固態繼電器冷卻 - 用 FreeCAD 畫的工件 - 加熱大約 10 分鐘，但拿掉蓋子，很快熱就跑掉了 - 鋁罐上面有很多塑膠，所以需要過濾廢氣 - 有作安全開關 - 鑄造用的土，是在學校挖的 - 沒有打氣孔 ## Pellaeon - 升級後，耗電從 9 W 到 14 W - powertop - 其他對照的 NB, 約 400 上下，另有一台只有 150 。 - https://github.com/Nefelim4ag/Ananicy - https://kernc.github.io/xsuspender/ ## Mat ``` git clone https://git.kernel.org/pub/scm/utils/trace-cmd/trace-cmd.git ``` - 好用的擷圖外掛 , Awesome Screenshot 截圖錄屏 - https://chrome.google.com/webstore/detail/awesome-screenshot-and-sc/nlipoenfbbikpbjkfpfillcgkoblgpmj # 2022-10-20 ## 哲佑 - USB Device Tree Viewer - 開源的 - https://www.uwe-sieber.de/usbtreeview_e.html - USB, lan, PCH - port number 是 PCH 分配，會跳著配在 `/linux/drivers/acpi/processor_idle.c`: ``` /* * Callers should disable interrupts before the call and enable * interrupts after return. */ static void __cpuidle acpi_safe_halt(void) { if (!tif_need_resched()) { safe_halt(); local_irq_disable(); } } ``` 這一段是 CPU halt 的行為，但是不保證 CSTATE 的狀態 ## FlyPie - DIY 手機搖桿 - 歷程 - https://hackmd.io/@FlySkyPie/BJh6tln5S - DIY 手機搖桿 - 總結 - https://hackmd.io/@FlySkyPie/rJYhMdiLB ## Mat - `cat /sys/kernel/debug/usb/devices` - sponge ，這個指令工具是包括在 `moreutils` 套件裡 - `cat /tmp/test.txt | sort > /tmp/test.txt` => 會洗掉 `/tmp/test.txt` - `cat /tmp/test.txt | sort | sponge /tmp/test.txt` => 可以成功 pipe write itself ## Pellaeon - powertop - AMD 不知道有沒有 C3 以上的 cstate? - https://www.youtube.com/watch?v=N3bJnKmeNJY - 使用硫酸鋇和壓克力塗料自製紅外線降溫漆 - （以下可能不準確，太久沒有複習物理化學了） - 基本上是利用硫酸鋇的黑體輻射頻率正好不會被地球大氣吸收，會直接到太空的特性，來達成降溫的效果。 - 在太陽直射下，塗上降溫漆的表面只要加上塑膠膜避免空氣的熱傳導，就可以達成比環境氣溫更低的溫度。 # 2022-10-13 ## Mat 從 telegram 的 idoleat 得知, TediCross 未來可能會停止維護。消息來源自 2022-04-04 TediCross 的 TG 公告: https://t.me/TediCross/108 ``` TediCross 0.11.1 was just released. This is an important update. If you don't update, your instance of TediCross will stop working after April! For update instructions, see https://github.com/TediCross/TediCross#how-do-i-update-tedicross This update uses the new Discord.js v13 (thanks abhrajo!), which uses the new Discord API. The old Discord API will be shut down 2022-04-30! Running npm install is now required after updating. The code has been migrated to TypeScript (thanks lexermal!), which means there is a build step. This is handled automatically in the install step. Note that this will likely be the final TediCross version! I am no longer using it, and have lost interest in developing it. With this update, it will likely keep working for a few years, but if nobody else takes over, it will eventually die. ``` - OpenGApps 不同套組的比較: https://github.com/opengapps/opengapps/wiki/Package-Comparison - LineageOS + Raspberry Pi 4: - https://konstakang.com/devices/rpi4/LineageOS19/ - 我有訂閱 Ben Eater ，久久才出一次影片，但每個影片的內容都非常經典，這裡也分享給大家 - https://www.youtube.com/c/BenEater/videos ## Pellaeon - I225-V - Mat: 查到了 Linux 支援紀錄 - https://github.com/torvalds/linux/commit/d89f88419f999f03af2282789f2d2eea6468c00a - CxxxO , iOS, MIPS , 非 Unix-like 的作業系統, 高階, 自己的 CPU - J...er , 在 x86 上跑魔改過的 freebsd - MicroG , https://microg.org/ # 2022-10-13 british 2004 # 2022-10-06 ## jeremy - 免解鎖的 root 方法 - https://bbs.pediy.com/thread-268256.htm - https://frida.re/docs/gadget/ - https://github.com/JsHook-Script-Repo/97b9d99962614bf89c01f6d7b27a009f/blob/main/frida.js ## Pellaeon - 小米手機有作一些手腳，搞得 chromecast 沒辦法連線 ``` adb shell dumpsys adb shell dumpsys activity ``` - https://f-droid.org/ ## 哲佑接 USB Type C cable 時，`dmesg` 發現有錯誤訊息如下 ``` [283907.282147] usb 3-3: new high-speed USB device number 45 using xhci_hcd [283907.433810] usb 3-3: New USB device found, idVendor=2717, idProduct=ff08, bcdDevice= 4.19 [283907.433824] usb 3-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [283907.433830] usb 3-3: Product: Redmi 10C [283907.433835] usb 3-3: Manufacturer: Xiaomi [283907.433839] usb 3-3: SerialNumber: dc41c2c6 [283907.436287] usb 3-3: can't set config #1, error -71 ``` ``` can't set config #1, error -71 ``` 發現，把 cable 換成 USB Type A 就可以了 - lineageos 19.1 image: - https://drive-google-com.translate.goog/file/d/1Ig9NCcSslo-m_81rlPO69qPbvjJkjk9X/view ``` adb sideload lineage-19.1-20220716-UNOFFICIAL-fog.zip ``` ``` adb reboot ``` 進到 recovery mode ，選 format data 就好了 **GApps 要在第一次開機前就先安裝** ``` adb sideload F-Droid.apk ``` ## Mat - https://twstore.adonit.net/products/adonit-dash-3 ## BestSteve - micro, editor, https://micro-editor.github.io/ # 2022-09-29 ## Pellaeon ## 哲佑 - https://wingware.com/ - https://wingware.com/wingide/license ``` Access to Product Source Code Wing Pro licenses includes access to product source code, with a signed non-disclosure agreement. Source usage rights are summarized as follows: You may make alterations and improvements to the source code as long as you don't try to defeat our license validation code or remove our copyright or trademark. You may distribute any changes you make to the source code, in the form of patch files or in other forms that don't include substantial parts of our code. These can be open source or commercial at your discretion, and we have no special rights to them. ``` # 2022-09-22 ## FlyPie - https://github.com/FlySkyPie/vb-simple-satellite-launch-game - 用 VB .NET 寫的 2D 軌道動力模擬器 - https://youtu.be/cST5jw-GC3U - 用 VB .NET 寫的 FPS - https://youtu.be/ZMH1CObTGxQ - 用 OpenGL 寫的東西 ## mat https://hackmd.io/bfXLLaPxRQyKiMQW1-HTXg ## 0x4 https://www.theregister.com/2022/08/12/starlink_terminal_hack_black_hat/ https://github.com/KULeuven-COSIC/Starlink-FI # 2022-09-15 ## 哲佑在 MSCC 下 ``` int ***i; ``` 在 x86 平台上，存在不同分頁，會 Page fault ## Mat - https://www.techbang.com/posts/99873-jim-keller-a-cpu-technology-giant-says-that-innovation-is - https://en.wikipedia.org/wiki/Tiling_window_manager - Qtile - https://docs.qtile.org/en/stable/manual/ref/layouts.html - https://chrome.google.com/webstore/detail/line/ophjlpahpchlmihnnnihgmmeilfjmjjc - https://syncthing.net/ - https://canvas.apps.chrome/ - https://asahilinux.org/about/ ## twan - https://www.youtube.com/watch?v=ij8IS6bTHLk - firefox multi-account container: - https://addons.mozilla.org/zh-TW/firefox/addon/multi-account-containers/ # 2022-09-01 ## FlyPie https://youtu.be/vH0KOeijNeQ ## jeremy - https://github.com/Xposed-Modules-Repo/me.jsonet.jshook ## Pelleaon - FreeBSD 的 access control framework （類似於 selinux） https://wiki.freebsd.org/Capsicum - 似乎不錯的二手手機認證購買網站 https://reebelo.com.tw/ - Android 上面可以 hook Java API 餵假資料給 app 的模組 https://github.com/M66B/XPrivacyLua - OpenBSD 上給 process 自願拋棄執行特定 system call 權力的 system call ，應用程式啟動的時候可以 pledge （發願？）說我不會用某些 system call ，如果未來程序被 hijack ，便可以控制損害範圍。 pledge 的系統設計簡單，功能很少，但是比 selinux 好懂多了 https://man.openbsd.org/pledge.2 - CCC 的演講，介紹歷史上許多新穎設計的作業系統 https://media.ccc.de/v/rc3-525180-what_have_we_lost - OpenZFS, 開源的，不基於 Solaris 的 ZFS 實作，現在用於 Linux, FreeBSD, Illumos https://openzfs.org/wiki/Main_Page - Illumos : Solaris 的後繼 project https://illumos.org/ - 2007 年的演講，介紹 mac os x 的核心架構 https://www.youtube.com/watch?v=2M_u0BDHttg - ## Mat - https://github.com/archlinux/archinstall/discussions/701 - https://lineageos.org/ - https://download.lineageos.org/ - https://wiki.lineageos.org/devices/ - Action Launcher - https://play.google.com/store/apps/details?id=com.actionlauncher.playstore - [試用 zswap ](https://hackmd.io/@h4/rkL8r2les) ## 哲佑 - seccomp - https://szlin.me/2017/08/23/kernel_seccomp/ - LineageOS 刷機遇到的 USB cable issue , 有可能和 **xhci** 有關 - # 2022-08-25 ## Mat ``` docker run -it --rm ubuntu:22.04 bash apt update; apt install -y osc osc help apt install -y software-properties-common # uncomment /etc/apt/sources.list.d/mozillateam-ubuntu-ppa-jammy.list 的 deb-src 項目 osc checkout home:matlinuxer2 apt install -y dpkg-dev apt source firefox osc rebuild # trigger package rebuild ``` - 零知識證明 - https://youtu.be/FuKEpOhiVPg ## LCamel - https://medium.com/taipei-ethereum-meetup/init-f35c7d6aa7a0 - https://medium.com/taipei-ethereum-meetup/create2-77108446ad5b # 2022-08-18 ## Pellaeon - https://docs.rsshub.app/ - Pellaeon's fork https://github.com/pellaeon/rsshub/tree/custom - enhanced facebook crawling - https://dortania.github.io/OpenCore-Install-Guide/ , 黑蘋果的 bootloader - https://foambubble.github.io/foam/ - https://roamresearch.com/ - https://github.com/zadam/trilium - Neo Backup - 由 OAndBackupX 改名而來 - OAndBackupX 是原本 OAndBackup 的 fork ## Mat - https://www.rodsbooks.com/refind/ - vim 設定中文自動斷行 `:set formatoptions+=mM` # 2022-08-11 ## Mat - https://github.com/m5stack/M5Paper_FactoryTest - PlatformIO - 要手動下載安裝 extension - https://marketplace.visualstudio.com/items?itemName=platformio.platformio-ide - https://marketplace.visualstudio.com/items?itemName=ms-vscode.cpptools - https://github.com/pixelart7/m5paper-micropython-data-text-display - 關於 Optane 的介紹（中文): https://www.youtube.com/watch?v=TbkuBpXXhfA 以下是 Pellaeon hand-by-hand 指導下的筆記: ``` sudo zpool create test001 sudo zpool create test001 /dev/sdb sudo zpool create -f test001 /dev/sdb sudo zpool status sudo zfs create test001/data001 sudo zfs list sudo zpool add test001 /dev/sda ``` - zfs 有 compression 功能: - 當 compression 開啟後，存入的檔案會壓縮。關閉之後，就不會壓縮。但不會動到已存入的既有資料。也就是設定是動態生效於該設定期間。 - ``` zfs set compression=gzip example/compressed ``` 註: https://docs.freebsd.org/en/books/handbook/zfs/#zfs-quickstart-single-disk-pool ## Pellaeon - android 很好逆向不像 IOS 都 objective c assembly - 不要以為在後台就就可以不包好 API - https://developer.microsoft.com/en-us/microsoft-365/dev-program - rclone , CLI 方便的 CLI 雲端管理工具 - https://rclone.org - https://vscodium.com/ 開源版的 vscode ，移除了微軟的追蹤程式碼 - https://github.com/VSCodium/vscodium/ - 要學 zfs 的話，建議看 freebsd 的文件而不要看 linux 的文件 - https://docs.freebsd.org/en/books/handbook/zfs/ - https://drmaciver.substack.com/p/people-dont-work-as-much-as-you-think - https://www.flyingcoloursmaths.co.uk/in-praise-of-idlework/ - https://github.com/spencerwooo/onedrive-vercel-index - https://github.com/mzyy94/M5PaperWeather ## RJ https://www.conoha.jp/ https://ubuntu.com/server/docs/proxy-servers-squid ## jeff 日本打工計畫 ## Thinker - Intel 不是打算停掉 optane 的發展嗎? - https://www.tomshardware.com/news/intel-kills-optane-memory-business-for-good # 2022-08-04 ## Pellaeon ### ZFS 基本理解： https://arstechnica.com/information-technology/2020/05/zfs-101-understanding-zfs-storage-and-performance/ - vdev：一個可以存資料的實體裝置，通常是一整顆硬碟，但是要指定一個分割區為 vdev 也可以 - pool (zpool) 是 vdev 的任意組合 - pool 裡面需要再建立 dataset - dataset 大致上一個檔案系統的概念, 一個 dataset 都是可以 mount 對象 - snapshot 只能針對一個 dataset - ashift 是一個 pool 選項，一旦 pool 建好了，就不能改 - https://jrs-s.net/2018/08/17/zfs-tuning-cheat-sheet/ - https://blog.haostudio.net/hwp/%E5%9C%A8freebsd-%E5%BB%BA%E7%AB%8B-zfs-%E8%A8%98%E9%8C%84/ - https://www.reddit.com/r/zfs/comments/nkbx6g/should_i_use_64k_blocksize_ashift16_for_samsung/ - ### 字型 - Linux 字型要好看的重點改善方向 - 1. 使用適合的字型替代應用程式指定的 windows/mac 專有字型 - 2. 依照語系設定選擇適合的字型顯示 sans-serif , serif, monospace 等「字型類別」的指定 debug: ``` FC_DEBUG=4 PANGO_LANGUAGE=zh-tw pango-view --font="Noto Sans TC" -t "一旦商品出貨,您將收到一封出貨確認電子郵件。" ``` ## 哲佑 - TPM - "Optane without RAID" 由 Intel 提供的 , Linux 有支援 ## Mat - About Bitlocker, https://youtu.be/cF2xnVx9iuk - # 2022-07-28 ## Pellaeon - https://github.com/seemoo-lab/openhaystack ## Mat - shimx64 要加 trusted ，同時 boot priority 要在 Linux boot partition 跟 grub EFI 前面 - m5paper - 官方文件, https://docs.m5stack.com/en/core/m5paper_v1.1 - 看到這裡有提到 bluetooth 用法: - <https://zh-tw.manuals.plus/m5stack-technology/m5paper-touchable-ink-screen-controller-device-manual#bluetooth> - esp32-c3 (risc-v), zephyr ``` i2cdetect -l i2cdetect -y -r 1 i2cdump -y 1 0x5a ``` note: 要記得用 raspi-config 打開 i2c interface - https://platformio.org/ (Arduino Editor alternative) # 2022-07-21 ## Mat - https://linux-hardware.org/?probe=1f4543c39e - Ventoy , 用來製作可多重開機的 LiveUSB - 支援多種 livecd/liveusb image, 只要拖拉檔案進指定分割區目錄即可 ## Pellaeon - https://github.com/rime/rime-bopomofo/blob/master/bopomofo.schema.yaml - https://rime.im/docs/ # 2022-07-14 ## Mat - https://linux-hardware.org/?probe=5f3670ea60 - 剛剛發現有筆偵測到的紀錄 - https://linux-hardware.org/?probe=ec13490009 - https://linux-hardware.org/?probe=ec13490009&log=input_devices - 裡面的 dev path 是 i2c 的 - https://github.com/flukejones/rog-core - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1903680 - 有看到有人說 patched 的 kernel 可以，但不確定型號是否相符 ## Pellaeon - 補充一下，我剛剛 call 的 ACPI 指令是根據這個 - https://gitlab.com/asus-linux/reverse-engineering/-/blob/master/dsl/GA401IV.dsl#L11649 - 貼幾個相關的連結，下次細看 - https://forum.endeavouros.com/t/etps-2-elentech-touchpad-not-working-after-endeavour-os-fresh-install-and-attempting-to-install-package/6073/30 - https://bugzilla.kernel.org/show_bug.cgi?id=81331 - https://bugzilla.kernel.org/show_bug.cgi?id=208547 - https://www.reddit.com/r/ZephyrusG15/comments/jpw5vy/ubuntu_2004_did_not_detected_touchapad/

Syntax	Example	Reference
# Header	Header	基本排版
- Unordered List	Unordered List
1. Ordered List	Ordered List
- [ ] Todo List	Todo List
> Blockquote	Blockquote
Bold font	Bold font
Italics font	Italics font
~~Strikethrough~~	~~Strikethrough~~
19^th^	19^th
H~2~O	H₂O
++Inserted text++	Inserted text
==Marked text==	Marked text
[link text](https:// "title")	Link
![image alt](https:// "title")	Image
`Code`	`Code`	在筆記中貼入程式碼
```javascript var i = 0; ```	`var i = 0;`
:smile:		Emoji list
{%youtube youtube_id %}	Externals
$L^aT_eX$	L^aT_eX
:::info This is a alert area. :::	This is a alert area.