Mohamed Akram mohd-akram

After 2024-04-02 I am only adding important new discoveries (I come accross). There is just too much Blog and Video entries to keep track of.

Initial disclosure:

CVE and Alerts

Test cases for the blog post [Encoding tic-tac-toe in 15 bits][post].

Run like this:

# Base4 test
$ cc base4.c && ./a.out

# Base3 test
$ cc base3.c &amp;&amp; ./a.out

PostgreSQL is Enough

Background and Cron Jobs

Linux Desktop on Apple Silicon in Practice

I bought M1 MacBook Air. It is the fastest computer I have, and I have been a GNOME/GNU/Linux user for long time. It is obvious conclusion that I need practical Linux desktop environment on Apple Silicon.

Fortunately, Linux already works on Apple Silicon/M1. But how practical is it?

Two native ports exist.

Zoom Sucks

Zoom abuses the installer flow on MacOS to bypass permissions dialogs (source)
Zoom sends identifying device info to Facebook, even when users don't have a Facebook account (source) (fixed)
A bug in Zoom sent identifying information (including email addresses and profile pictures) of thousands of users to strangers (source)
Zoom claims that meetings are end-to-end encrypted in their white paper and marketing materials, but meetings are only encrypted in transit, and are available in plaintext to Zoom servers and employees. (source)
zoomAutenticationTool can be used to escalat

A collection of information about accessing raw MultiTouch events on MacOS.

Compiled while building mtif (a MultiTouch interface for common lisp).

Useful URLS

Getting started with OMEMO

This is a short tutorial on how to get started with OMEMO. This is not to replace the XEP but to extend it and give you some clear steps to follow instead of a having to read through a formal specification.

Namespaces

Until OMEMO becomes an official XEP all current implemenations use the namespace eu.siacs.conversations.axolotl instead of urn:xmpp:omemo:0. Sub-namespaces are seperated by a . instead of a :. The device id however is sperated by :. So the namespace for a PEP device bundle for example will look like this: eu.siacs.conversations.axolotl.bundles:1234. You might want to define some constants in your code to have a central place to configure them later. Compare that to how Conversations does this.

The official XEP will also be based on Olm instead of Axolotl which means

	#include <stdio.h>
	#include <stdlib.h>
	#include <fcntl.h>

	#include <sys/types.h>
	#include <unistd.h>

	#include <netdb.h>
	#include <netinet/in.h>


	.global _main
	.extern _putchar

	.align 4

	_main:
	; prolog; save fp,lr,x19
	stp x29, x30, [sp, #-0x20]!
	str x19, [sp, #0x10]

	#!/usr/bin/awk -f

	# This program is a copy of guff, a plot device. https://github.com/silentbicycle/guff
	# My copy here is written in awk instead of C, has no compelling benefit.
	# Public domain. @thingskatedid

	# Run as awk -v x=xyz ... or env variables for stuff?
	# Assumptions: the data is evenly spaced along the x-axis

	# TODO: moving average