Amr Tj. Wallas TjWallas

TPM provides zero practical security

TPM (Trusted Platform Module) is as useful for preventing real attackers as the TSA is at preventing real terrorists. The architecture is fundamentally flawed and most existing implementations are completely broken. I thought this argument was settled decades ago[1] when "trusted computing" was introduced mostly as a way to provide DRM and ownership capabilities to organizations. It has largely failed to impact the consumer market when it was introduced back in the early 2000s. However, recently there seems to be a movement by certain parties to reintroduce this failed product back to the market. Microsoft argues that in order to use Windows 11, you need TPM 2.0 compatible hardware because[2]:

The Trusted Platform Module(TPM) requirement ena

'Users hate change'

This week NN Group released a video by Jakob Nielson in which he attempts to help designers deal with the problem of customers being resistant to their new site/product redesign. The argument goes thusly:

Humans naturally resist change
Your change is for the better
Customers should just get used to it and stop complaining

There's slightly more to it than that, he caveats his argument with requiring you to have of course followed their best practices on product design, and allows for a period of customers being able to elect to continue to use the old site, although he says this is obviously only a temporary solution as you don't want to support both.

The netfilter hooks in the kernel and where they hook in the packet flow

The figure below calls out

The netfilter hooks
The order of table traversal

DB

ovs-vsctl list open_vswitch
ovs-vsctl list interface
ovs-vsctl --columns=ofport,name list Interface
ovs-vsctl --columns=ofport,name --format=table list Interface
ovs-vsctl --format=table --columns=name,mac_in_use find Interface name=br-dpdk1
ovs-vsctl get interface vhub656c3cb-23 name

ovs-vsctl set port vlan1729 tag=1729

	I got it to work :)

	NOTE: This requires unlocked bootloader.

	Connect the device to Mac or PC in recovery mode. (I had to map the process in my mind as the screen was broken).
	Now open terminal/CMD in computer and go to platform-tools/. type and enter ./adb devices to check if the device is connected in recovery mode.
	Now type ./adb shell mount data and ./adb shell mount system to mount the respective directories.
	Get the persist.sys.usb.config file in your system using ./adb pull /data/property/persist.sys.usb.config /Your directory
	Now open that file in a texteditor and edit it to mtp,adb and save.
	Now push the file back in the device; ./adb push /your-directory/persist.sys.usb.config /data/property

	#!/bin/bash

	user="CHANGEME"
	pages=$(curl -I https://api.github.com/users/$user/starred \| sed -nr 's/^Link:.page=([0-9]+)./\1/p')

	for page in $(seq 0 $pages); do
	curl "https://api.github.com/users/$user/starred?page=$page&per_page=100" \| jq -r '.[].html_url' \|
	while read rp; do
	git clone $rp
	done

	- What do Etcd, Consul, and Zookeeper do?
	- Service Registration:
	- Host, port number, and sometimes authentication credentials, protocols, versions
	numbers, and/or environment details.
	- Service Discovery:
	- Ability for client application to query the central registry to learn of service location.
	- Consistent and durable general-purpose K/V store across distributed system.
	- Some solutions support this better than others.
	- Based on Paxos or some derivative (i.e. Raft) algorithm to quickly converge to a consistent state.
	- Centralized locking can be based on this K/V store.

Amr Tj. Wallas TjWallas

TPM provides zero practical security

'Users hate change'

The netfilter hooks in the kernel and where they hook in the packet flow

Outages & Downtime

Macvlan, Ipvlan and 802.1q Trunk Driver Notes

Contents

Effective Engineer - Notes

What's an Effective Engineer?

Adopt the Right Mindsets